last executing test programs:

1m14.958248421s ago: executing program 1 (id=691):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r1})
ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000080)={0x8, r1})

1m14.774744931s ago: executing program 1 (id=692):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000000000000000000000000000000000001"], 0x4c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x18840}, 0x4000841)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

1m14.625165378s ago: executing program 1 (id=693):
syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x2)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
write(r0, &(0x7f00000000c0)="1f", 0x1)

1m13.145796827s ago: executing program 1 (id=697):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x2000002, &(0x7f00000001c0)={[{@shortad}, {@fileset={'fileset', 0x3d, 0x5}}, {@unhide}, {}, {@volume={'volume', 0x3d, 0x401}}, {@gid_ignore}, {@uid_forget}, {@anchor}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {}, {@noadinicb}]}, 0x1, 0xc47, &(0x7f0000001800)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

1m12.188126057s ago: executing program 1 (id=701):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x28e}]})

1m11.589058568s ago: executing program 1 (id=704):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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")
r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="85", 0x1}], 0x1, 0x2000, 0x0, 0x3)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x9}}, 0x20)

1m10.953950531s ago: executing program 32 (id=704):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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")
r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="85", 0x1}], 0x1, 0x2000, 0x0, 0x3)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x9}}, 0x20)

9.493561961s ago: executing program 2 (id=1043):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)

9.121979621s ago: executing program 2 (id=1048):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, 0x0)

9.051541844s ago: executing program 2 (id=1049):
pwritev2(0xffffffffffffffff, &(0x7f0000003140)=[{&(0x7f0000000140)="ad3c78da8d187b1147446130f09f2fae11b9d09808e2ef700c9072529b8fa6eb9ef76c41d18d", 0x26}], 0x1, 0x25, 0xab, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf250f00000038000780080002000000000008000100"], 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x44004)

8.980845668s ago: executing program 2 (id=1050):
r0 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0)

4.93568403s ago: executing program 0 (id=1064):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000240)='I', 0x1}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000540)='@', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
setsockopt(r0, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8)

4.578371469s ago: executing program 0 (id=1066):
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0x11}, {0x0, 0x100000000000000}]}, 0x68)

4.158421721s ago: executing program 0 (id=1069):
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c6865617274626561743d6e6f6e652c6572726f72733d636f6e74696e75652c6e6f696e74722c67727071756f74612c001796fa694353e3807803df5ea6fd4d6e6a2613d336eb62b863dcd89e37b45f8bd04199a14c48b3e553e035ab300ba3c60c27682a8ab5656969d829535c0862f6e3a35f15fe4d50c0d5c74631344625d6224c436474bb101ff47a14c51e342ca291c09c35d9d31b06b6b86cb9dccae387b5f1e7c5e1d445d52845a3fa4c77234ea9d37c8a277c85e69a85cc6ffeb225bebbca91b569b80ee303c9a21c58db5d96fb87f1713e0e9b896e37becae2e7a978259a0847e9fb08dcb8b9f84f616463da2507db1b3489769e99"], 0x1, 0x4703, &(0x7f0000004800)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)={0x1, 0x2, 0x1ffffffffffffffc, 0x0, 0x2000000, 0x3, 0xfffffffffffffffd, 0x0, 0x6})
syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300))
rmdir(&(0x7f00000002c0)='./bus\x00')

2.996397672s ago: executing program 4 (id=1072):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000)
iopl(0x3)
unshare(0x20000400)
fallocate(r0, 0x2, 0x3, 0x4)

2.733203376s ago: executing program 4 (id=1073):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
listen(r0, 0x2)
recvfrom$llc(r0, 0x0, 0x0, 0x4, 0x0, 0x0)

2.452347251s ago: executing program 4 (id=1074):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x2, {0x0, 0xff, 0x4}, 0x2}, 0x18)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40000)

2.011297054s ago: executing program 0 (id=1083):
r0 = syz_io_uring_setup(0x6221, &(0x7f0000000180)={0x0, 0x86e1, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000002540)=""/4096, 0x1000}], 0x2)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)

2.010653384s ago: executing program 4 (id=1076):
r0 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f00000000c0)=0x80, 0x4)
syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0)
recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/24, 0x18}, 0x8e0f}], 0x40001d6, 0x40010142, 0x0)

1.773719466s ago: executing program 4 (id=1077):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x80000)
sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000175c040002000040010000000000000018000000000000001701000003000000016c3c2a41cdeb4b18000000000000001701000002"], 0x48, 0x24000811}, 0x8040)

1.528928259s ago: executing program 4 (id=1078):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file1\x00', &(0x7f0000000780), &(0x7f0000000840)={0x0, 0xfb, 0x2e, 0x1, 0x6, "0678ba26849fa6cf6238229963883439", "a081c7e9d5e510cc77dc9d5e34bc00f3b78121621598f85817"}, 0x2e, 0x0)

1.408418406s ago: executing program 0 (id=1079):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c696e6f646536342c6c6f63616c616c6c6f633d30303030303030303030303030303030313731342c61636c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c00882bb7a63864a19f186813ab5265f313eeeea0cb144b9317f58558f596fa072f9a29c38a293509350482fc7f"], 0x1, 0x4450, &(0x7f0000008900)="$eJzs3c9vHGcZAOB3Jia1Qxvs0EORkFiJSiBAlt0T4Eo4jhPXbkxQIBXislnb28Sw9kb2GnGohLlV4oTEAXGoQOLmU+UD1yLxD3DhWK5UggMXJKSIRbs7a++Md/ESdus6eh4pHs/3a971uzPzzWHypZnG4+390vZ+qbJbqm++vf9a6cf12sFONdKPyUUfn+GMPk9JyP3FuXfrznffei3iD1t//qjZbDajZSL6mu/5/Z//eGezd9uVFvq0xu0/2qj8ICJePhNXy5WI+P7vI5KIuJmVLWXbqYi4Hp26t975+cPSiKJ5/8Pq6+Wn6+8eL7y6dvTe8eDPnkT8uva5rz3a+dsXryz85SsjOjwAAAAAAAAAAAAAAAAAAJfcyv17D74zNx8fJDFxlJx9X3cl2w56P7Y5Ml8Y/4cFAAAAAAAAAAAAAAAAAACAT6jT9/9LyY1kIiLy7/8vZ9vFAf2b3xp/jIzP6rfvLd+em8/Wf0/O1H89K/r7zSsx02fd9+L67zcL/fuv//7CyOLvxtc97nQk6WxuP01nZyN+my38/kpyLa3V9xtffbt+sLs1sjAurXz+O6v3574F2YL+w+Z/qTD++Nf//2wUv7Wt/Ydnv8r0kc//lYHtfvezZKj83yr0+zjyz7PL53+iXTbV22CxcwFo5f8XE+fnf7kw/rjyfz0iSkkr1lLubnIj6ZQPmq+Ql8//p9pluUtn9occdP7/q5D/24XxL+r6f1i8EdFXPv9X22WTuRan5/9Mev75f6cw/kXkvxX/ofv/UPL5z66kE7km7b/ksNf/lcL448r/g7Qd51/jepL7BhwlnfgH/X915OXzP3mm/vT5Lx1q/vdGoX///I/u5OzG1z1u+/mv2Wz+NNv/ctJ5/qO/fP6nBrYb9vxfLfQb9/V/MUpDPwFcHWcgl1Q+/9faZfm583T757D5X+vdeTq+/LdnJZPd/J9eT/79Qqf8Nz3zvwfjCOA5kc//pzuFaW+Lw/bP9vwvOX/+/2Zh/P+S/+RwJJ/g7PyvFf9hOpLBn3v5/L84sF0r/38a4v5/t9Bv/PP/iDlz/WeWz/9LA9u1z//J8/O/Xug37vx/aZyDAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwCS9l2OpJ0NrefprOzEbey/VfiWrJR2Spv1OqbP9qPWM7KS3EjeVSrb1Rq5e3d+la1XKnV6psRt7P6l2My2a/VG+WdypM7J2NNJY+rlb3GRrXSiIiVrPzz8VJ3rI3txk7lSUS8cVL3mbS+9+RxZbe8tb33zbm5ublYPYlhJqn+pFHdbXSO3qmNWDvpO530BNeufvMklheTH9YP9nYrtXb53Z4+tfpmpdbTZz2r+2XMJI29g93NSqNartUfdY83yB+vPmNy/geL2XZ59f737t+dP1P/MOlsl8YfCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/hw8WvvGriJjo7KURUUqyX5LsX877H1ZfLz9df/d44dW1o/eOP+rXBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7ADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFXfpHaSCI4gD8Ziy09BhWy25nu6KIFq4InkCP4WH0KF7CO1ikSJsiBJJZCPsHtkmq72sezI+Z92AeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMByj2/d+2vdRKS42l5G/H7+/R/nz6V+303fvzjDjJzO00t3/1A35d/TKL8tR6s279PN+usjJmrvZ7Anw306GPcZmtu3ufn6vteRchURbclvUs5VtewtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHTtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1lH0bQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/AoAAP//YvMk6w==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="71756965742c646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d72656c617865642c646f733178666c6f7070792c6e66732c646f74732c6e6f646f74732c0052bbde30ad1b84bbd4c68ac5df60afc617ca0829fb9a153080d7fe1db0f2c220c8"], 0x1, 0x255, &(0x7f0000000580)="$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")
ioctl$FITRIM(r0, 0x40406f06, &(0x7f00000000c0)={0x0, 0x8, 0x5})

1.383683327s ago: executing program 2 (id=1080):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x154}, {&(0x7f0000000bc0)="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", 0x1cb}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84", 0x34}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464", 0xb1}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

1.212604936s ago: executing program 3 (id=1081):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58)
r1 = accept(r0, 0x0, 0x0)
sendmsg$inet6(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000140)="876fa2aff64f653124f778734857064cba4aad369702c12fa8a9751647414a558760cd22e1f8b266db35b508c548d4e00f7d2c11c790bfe4c88f5ba8d6427816701ea71c687885cd32b4a4bd6811375b17e81ab3c5442568b5a9c90e5b02cc4df6722c7b0d2f9c3eb2e292942eb0c0113417520a66f8b4d2010a0cbebd51727814950051a1c8174e62521357b67c045757f2d7af224caa410f1dc375a0c15cdc7132bc5aaf2ad617153bca52ff", 0xad}, {&(0x7f0000000200)="a268c92b178326980a63f8538277e175b4d8ce660df676dd6e68c63de85d58cff601ec80fccff3de6fd2d2b9d6d835fd28a268e9ccf7cd314ce91c2fddfb66bb2b21097dcc3e4f07508e20c000bb43a338eed5", 0x53}], 0x2}, 0x200408c4)

1.072832003s ago: executing program 3 (id=1082):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
close_range(r0, 0xffffffffffffffff, 0x2)
fsync(r1)

1.043582705s ago: executing program 2 (id=1084):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
io_setup(0x3ff, 0x0)
r1 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x40000006})

866.196284ms ago: executing program 3 (id=1085):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newtaction={0xb4, 0x30, 0x871a15abc695fb3f, 0x70bd25, 0x1, {}, [{0xa0, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xffff, 0x10000000, 0x8000007, 0xfff}, 0x200}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x4c, 0x2, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x4, 0x5, 0xd}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

648.834166ms ago: executing program 3 (id=1086):
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
listen(r0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x1c, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x7dc, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x87, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x20000000, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0xc, 0x40], [0xb589, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x6, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4080009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x80000, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x200, 0x80, 0x3, 0x4, 0x50, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0xffffffff, 0x3, 0x7ff, 0x12b, 0x1, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x3, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x7, 0x4, 0x7fff, 0xfeff, 0xa620, 0x1, 0x2, 0x1, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x3, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

520.516622ms ago: executing program 3 (id=1087):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x3000000, &(0x7f0000000b40), 0x44, 0x70b, &(0x7f0000000300)="$eJzs3U1sHGcZAOB31uu1N5XcbZu0BSHFatQIGkhsLyVBQiJUCHyoUCQuvS6J01heu5HtIidCZAsUuMEJ5dBDK2QOPaEekIo4IMoZCYkryj0S94gDi2Z2dr0/9nq3/kvT55Fm55uZ7+edNzPf/sXaAD63Ft+IyUYksXjh9a10+8F2tf5gu7raLkfEVEQUIoqtVSRrEcknEVejtcQX0p15d8le47z68OP3zt//sNraKuZLVr8wrN2O5pARGvkSsxExka/HVNyrv+vx2kB/98bqOunEnSbsXDtxcNKaAxrjNB/hvgUed/ciJiZ32V+JOBUR0/nrgMhnh8Ixh3foxprlAAAA4PE0sV+Fpx/Fo9iKmeMJBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4MSes3A5N8KbTLs5G0f/+/lO9LlUonHO9wX93n+Ls3jykQAAAAAAAAABjR98eq/VH+xf3ZR/EotmKmvb+ZZN/5v5RtnM4en4q3YyOWYj0uxlbUYjM2Yz3mIyZnujosbdU2N9fnB1v+LtKWzWbzXt5yISIqAy0X9gi0MNZpAQAAAAAAAMDn1c9iMWZOOggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiWREy0Vtlyul2uRKEYEdMRUUrrNSL+0i5/lv31pAMAAACAo1fO1zPJ/1qFZpK9538+e98/HW/HWmzGcmxGPZbiRiQfRP6uv/DPRrX+YLu6mi6DHX/nP2PFkfUYERPxzh4jz2U1znRaLMb34odxIWbjWqzHcvw4arEZSzEb5fQkohZJVMqtTy8q7Th3j/dqz9a1/tjO9m2/mEVSjpuxnMV2Ma6XovWxSXYO6Zgvdo32p1JE34jvpNlJvp0bMUc3uv69fpt/LpNrPj1iH0ejkp35ZCcjc2nu82w8Mzz3Y14n/SPNR6HzGdTpnVHSzf6R2jn/0Tg5P9VaTacPv+zN+WEb86O0/kwsRCG/+iKe78357ZfvP9vb+Cv/+tu1W4W1lVs3Ny4c4SkdxOx+FSbbhf5MVLsy8cLwqy/PRD3NRGP0TEz275geteXRKuXZyKaiEWfL72alWrzUdQm+FTdiKS7HXMzHlZiLb8ZCVDtXWLqc6clrsbram5PsXisMzm/lIcGf+3JXpV/tU/l4pXl5piuv3TNdJb8csj1XfxNzXVffs8OvvrGfBdLxv5iX0zF+3nnGeRxUsiz1zs3t6J4bnokPmunjRn1tZf1W7faI453P1+lt+27v3Pz70aPuf3Y/DOn1ks64xWwry0m5fb2kx57rRNubr1L+jUurXWHg2JnOsUrMxHL8YM87tZS/hhvsqXXshe5j/96ZOUv565v2sZ5XOfFW1LNXIX32naoBOGanXjlVKj8s/6P8fvkX5Vvl16dfm7oy9aVSTP69+OeJPxb+UPhW8kq8Hz+NmZOOFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAngQbd+6u1Or1pfVOIab79xy0UNpzrOGFKOxbZ/up0TqMSsTwsZK8UNq9zlMRcchpObrCy78+UPNy/5m2f2HpoIF9FBFD6pQOfO7J2NfY2IU0D4fSYbPZSmq2pzkxRvNiu9XudYqxMR0rtaS4yx03tXMXRGWlVv9vs6d5ObpuGeAJd2lz9faljTt3v7a8Wntz6c2ltYUrl69crn5j/uuXbi7Xl+ZajycdJXAUNu7cndhl98Av3QIAAAAAAAAAAACPj/x//29+6j9mKO5Tp7S+sfvIZ4/7VAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDPqMU3YrIRSczPXZxLtx9sV+vp0i7v1CxGRCEikp9EJJ9EXI3WEpWu7pK9xnn14cfvnb//YXWnr2K7fmFYu9E08iVmI2IiX+9vapduBvu73tVf41OFl3TOME3YuXbi4KT9PwAA//+FhvXF")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20)
statx(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4000, 0x1f842f947b598ea3, 0x0)

201.757869ms ago: executing program 3 (id=1088):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)

0s ago: executing program 0 (id=1089):
r0 = socket$l2tp(0x2, 0x2, 0x73)
fstat(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
setresuid(0x0, r1, 0x0)
syz_clone(0xb80e0100, 0x0, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

eprecated and scheduled to be removed from the kernel in 2025
[  151.198115][ T7083] loop0: detected capacity change from 0 to 32768
[  151.204408][ T7093] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  151.233978][ T7093] REISERFS (device loop2): using ordered data mode
[  151.242554][ T7093] reiserfs: using flush barriers
[  151.311551][ T7093] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  151.330139][ T7083] JBD2: Ignoring recovery information on journal
[  151.363538][ T7093] REISERFS (device loop2): checking transaction log (loop2)
[  151.495383][  T788] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  151.503501][ T7083] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  151.614502][ T7093] REISERFS (device loop2): Using tea hash to sort names
[  151.632272][ T7093] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  151.666445][ T7093] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  151.727624][  T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.750224][  T788] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  151.806673][  T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.840193][  T788] usb 2-1: config 0 descriptor??
[  152.230304][ T7107] 8021q: adding VLAN 0 to HW filter on device bond1
[  152.240103][ T7107] bond0: (slave bond1): Enslaving as an active interface with an up link
[  152.299310][  T788] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor
[  152.373839][  T788] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0004/input/input8
[  152.431795][ T5766] ocfs2: Unmounting device (7,0) on (node local)
[  152.633774][  T788] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  153.034914][ T5828] usb 2-1: USB disconnect, device number 8
[  153.095368][ T5780] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  153.311081][ T5780] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  153.340331][ T5780] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  153.362963][ T5780] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  153.396766][ T5780] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  153.408434][ T5780] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  153.427748][ T5780] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  153.438716][ T5780] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  153.447014][ T5780] usb 1-1: Product: syz
[  153.451219][ T5780] usb 1-1: Manufacturer: syz
[  153.461307][ T5780] cdc_wdm 1-1:1.0: skipping garbage
[  153.467992][ T5780] cdc_wdm 1-1:1.0: skipping garbage
[  153.483743][ T5780] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  153.493490][ T5780] cdc_wdm 1-1:1.0: Unknown control protocol
[  153.544418][ T7134] loop3: detected capacity change from 0 to 4096
[  153.797763][ T5780] usb 1-1: USB disconnect, device number 3
[  154.140660][ T7132] loop2: detected capacity change from 0 to 32768
[  154.234358][ T7132] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  154.297669][ T7132] (syz.2.478,7132,1):ocfs2_double_lock:1190 ERROR: status = -2
[  154.307258][ T7132] (syz.2.478,7132,1):ocfs2_rename:1299 ERROR: status = -2
[  154.315371][ T7132] (syz.2.478,7132,1):ocfs2_rename:1690 ERROR: status = -2
[  154.465554][ T5768] ocfs2: Unmounting device (7,2) on (node local)
[  154.623320][ T7142] loop0: detected capacity change from 0 to 1024
[  155.532931][ T7161] loop3: detected capacity change from 0 to 128
[  155.687337][  T788] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  155.885527][  T788] usb 3-1: Using ep0 maxpacket: 8
[  155.911726][  T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  155.939692][  T788] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  155.960405][  T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.992179][  T788] usb 3-1: config 0 descriptor??
[  156.132322][ T7169] input: syz0 as /devices/virtual/input/input9
[  156.270833][  T788] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  157.196768][ T7186] loop0: detected capacity change from 0 to 4096
[  157.207192][ T7186] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[  157.262091][ T7186] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  157.320088][  T788] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  157.374866][ T7186] ntfs3: loop0: ino=1e, "file1" The size of extended attributes must not exceed 64KiB
[  157.547519][  T788] usb 2-1: config 0 has an invalid interface number: 2 but max is 0
[  157.575430][  T788] usb 2-1: config 0 has no interface number 0
[  157.581762][  T788] usb 2-1: config 0 interface 2 has no altsetting 0
[  157.592561][   T23] usb 3-1: USB disconnect, device number 6
[  157.622343][  T788] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  157.651605][  T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.675087][  T788] usb 2-1: Product: syz
[  157.679385][  T788] usb 2-1: Manufacturer: syz
[  157.686255][  T788] usb 2-1: SerialNumber: syz
[  157.698954][  T788] usb 2-1: config 0 descriptor??
[  157.712042][  T788] hub 2-1:0.2: bad descriptor, ignoring hub
[  157.724009][  T788] hub: probe of 2-1:0.2 failed with error -5
[  157.734656][  T788] f81232 2-1:0.2: f81534a converter detected
[  157.936387][  T788] f81534a ttyUSB0: f81232_set_register failed status: -71
[  157.953358][  T788] f81534a: probe of ttyUSB0 failed with error -5
[  158.090042][ T7199] loop3: detected capacity change from 0 to 64
[  158.235943][  T788] usb 2-1: reset high-speed USB device number 9 using dummy_hcd
[  158.859032][ T7201] loop2: detected capacity change from 0 to 40427
[  158.872892][ T7201] F2FS-fs (loop2): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  158.904567][ T7201] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  158.914041][ T7191] loop0: detected capacity change from 0 to 65536
[  158.934785][ T7201] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7
[  158.967248][ T7201] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff
[  158.988415][ T7191] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  159.010397][ T7201] F2FS-fs (loop2): Image doesn't support compression
[  159.023253][ T7201] F2FS-fs (loop2): invalid crc value
[  159.042547][ T7201] F2FS-fs (loop2): Found nat_bits in checkpoint
[  159.058650][ T7191] XFS (loop0): Ending clean mount
[  159.073196][ T7191] XFS (loop0): Quotacheck needed: Please wait.
[  159.081955][  T788] usb 2-1: USB disconnect, device number 9
[  159.106453][  T788] f81232 2-1:0.2: device disconnected
[  159.168886][ T7201] F2FS-fs (loop2): Start checkpoint disabled!
[  159.183205][ T7191] XFS (loop0): Quotacheck: Done.
[  159.198572][ T7201] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  159.227655][ T7201] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  159.480994][ T5766] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  159.550975][   T12] kworker/u4:1: attempt to access beyond end of device
[  159.550975][   T12] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  159.584491][   T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  159.646855][ T7234] loop1: detected capacity change from 0 to 1024
[  159.654775][ T7234] EXT4-fs: Ignoring removed orlov option
[  159.661008][   T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  159.682596][ T7234] EXT4-fs (loop1): stripe (9) is not aligned with cluster size (16), stripe is disabled
[  159.920335][ T7234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.038888][ T7234] EXT4-fs (loop1): Online resizing not supported with bigalloc
[  160.211967][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.600189][ T7249] loop2: detected capacity change from 0 to 64
[  161.344459][ T7241] loop3: detected capacity change from 0 to 40427
[  161.381176][ T7241] F2FS-fs (loop3): invalid crc value
[  161.407407][ T7241] F2FS-fs (loop3): Found nat_bits in checkpoint
[  161.505548][ T5082] Bluetooth: Frame is too long (len 18, expected len 4)
[  161.572960][ T7241] F2FS-fs (loop3): Start checkpoint disabled!
[  161.622571][ T7241] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  161.816880][ T7272] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  161.824164][ T7272] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  162.042961][   T67] kworker/u4:4: attempt to access beyond end of device
[  162.042961][   T67] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  162.066845][   T67] kworker/u4:4: attempt to access beyond end of device
[  162.066845][   T67] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  162.087302][   T67] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  162.158230][   T67] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  162.182399][   T67] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  162.397923][ T7282] loop2: detected capacity change from 0 to 2048
[  162.519878][ T7287] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  162.599091][ T7284] loop1: detected capacity change from 0 to 4096
[  162.738469][ T7282] NILFS (loop2): error -2 preparing GC: cannot delete virtual blocks from DAT file
[  162.874725][ T7289] loop0: detected capacity change from 0 to 2048
[  162.971532][ T7289] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  163.309171][ T7297] loop1: detected capacity change from 0 to 256
[  163.321705][ T7297] exfat: Deprecated parameter 'namecase'
[  163.344644][ T7297] exfat: Deprecated parameter 'utf8'
[  163.375163][ T7297] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[  163.631735][   T23] kernel write not supported for file /snd/seq (pid: 23 comm: kworker/1:0)
[  163.848251][ T7305] loop1: detected capacity change from 0 to 4096
[  163.875161][ T7305] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[  164.060159][ T7308] loop0: detected capacity change from 0 to 8192
[  164.881962][ T7317] loop0: detected capacity change from 0 to 1024
[  164.979332][ T7310] loop3: detected capacity change from 0 to 40427
[  165.015162][ T7310] F2FS-fs (loop3): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  165.028128][ T7310] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  165.038529][ T7311] loop2: detected capacity change from 0 to 40427
[  165.088932][ T7310] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7
[  165.107438][ T7311] F2FS-fs (loop2): invalid crc value
[  165.137216][ T7310] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff
[  165.177615][ T7311] F2FS-fs (loop2): Found nat_bits in checkpoint
[  165.185201][ T7310] F2FS-fs (loop3): Image doesn't support compression
[  165.203820][ T7310] F2FS-fs (loop3): invalid crc value
[  165.223169][ T7322] af_packet: tpacket_rcv: packet too big, clamped from 108 to 4294967272. macoff=96
[  165.242253][ T7310] F2FS-fs (loop3): Found nat_bits in checkpoint
[  165.398141][ T7313] loop1: detected capacity change from 0 to 32768
[  165.409709][ T7311] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  165.503099][ T7310] F2FS-fs (loop3): Start checkpoint disabled!
[  165.534601][ T7310] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  165.563482][ T7310] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  165.572413][ T7313] syz.1.546: attempt to access beyond end of device
[  165.572413][ T7313] loop1: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[  165.652744][ T7313] metapage_write_end_io: I/O error
[  165.677216][ T7313] ERROR: (device loop1): diWrite: ixpxd invalid
[  165.677216][ T7313] 
[  165.756062][ T7313] ERROR: (device loop1): remounting filesystem as read-only
[  165.795255][ T7313] ERROR: (device loop1): txCommit: 
[  165.795255][ T7313] 
[  165.840180][ T5768] syz-executor: attempt to access beyond end of device
[  165.840180][ T5768] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  165.865142][ T5768] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  165.878517][ T7313] blkno = 8ed2c, nblocks = 1
[  165.894681][ T7313] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  165.894681][ T7313] 
[  166.034227][  T113] blkno = 8ed23, nblocks = 1
[  166.043504][  T113] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  166.043504][  T113] 
[  166.068988][  T113] blkno = 8ed2c, nblocks = 4
[  166.073748][  T113] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  166.073748][  T113] 
[  166.105456][ T5767] syz-executor: attempt to access beyond end of device
[  166.105456][ T5767] loop1: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[  166.135031][ T5767] metapage_write_end_io: I/O error
[  166.145376][ T5767] JFS: metapage_get_blocks failed
[  166.160466][ T5767] JFS: metapage_get_blocks failed
[  166.185104][ T5767] JFS: metapage_get_blocks failed
[  166.191799][ T5767] JFS: metapage_get_blocks failed
[  166.201690][ T5767] JFS: metapage_get_blocks failed
[  166.293576][ T7327] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  166.449489][ T7327] XFS (loop0): Ending clean mount
[  166.574148][   T28] audit: type=1800 audit(1776947432.509:8): pid=7327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.550" name="file1" dev="loop0" ino=6150 res=0 errno=0
[  166.718061][   T67] kworker/u4:4: attempt to access beyond end of device
[  166.718061][   T67] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  166.752210][   T67] F2FS-fs (loop3): inject write IO error in f2fs_write_end_io of __submit_merged_bio+0x256/0x630
[  166.782279][   T67] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  166.786542][ T5766] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  166.794925][   T67] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  166.995113][   T23] usb 3-1: new low-speed USB device number 7 using dummy_hcd
[  167.229917][   T23] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  167.259820][   T23] usb 3-1: config 0 has no interface number 0
[  167.285767][   T23] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  167.336323][   T23] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  167.370251][   T23] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  167.390537][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.427656][ T7352] set_capacity_and_notify: 1 callbacks suppressed
[  167.427672][ T7352] loop1: detected capacity change from 0 to 24
[  167.432172][   T23] usb 3-1: config 0 descriptor??
[  167.439919][ T7352] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  167.479066][ T7352] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  167.479510][ T7342] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  167.525374][   T23] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  167.789946][ T7362] loop0: detected capacity change from 0 to 8
[  167.868657][ T5828] usb 3-1: USB disconnect, device number 7
[  167.874913][    C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  167.970063][ T7362] SQUASHFS error: Failed to read block 0x2d7: -5
[  167.977057][ T7362] SQUASHFS error: Unable to read metadata cache entry [2d5]
[  168.704938][ T7384] loop3: detected capacity change from 0 to 128
[  168.783374][ T7384] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  168.826781][ T7384] hpfs: filesystem error: improperly stopped
[  168.843805][ T7384] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  168.867606][ T7384] hpfs: You really don't want any checks? You are crazy...
[  168.883059][ T7384] hpfs: hpfs_map_sector(): read error
[  168.889062][ T7384] hpfs: code page support is disabled
[  168.897737][ T7384] hpfs: hpfs_map_4sectors(): unaligned read
[  168.904294][ T7384] hpfs: hpfs_map_4sectors(): unaligned read
[  168.910882][ T7384] hpfs: filesystem error: unable to find root dir
[  168.940102][ T7384] hpfs: hpfs_map_4sectors(): unaligned read
[  169.043253][ T7389] loop0: detected capacity change from 0 to 64
[  169.076061][ T5828] usb 3-1: new low-speed USB device number 8 using dummy_hcd
[  169.277072][ T5828] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  169.292010][ T5828] usb 3-1: config 0 has no interface number 0
[  169.305146][ T5828] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  169.330506][ T5828] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  169.351866][ T5828] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  169.373102][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.405407][ T5828] usb 3-1: config 0 descriptor??
[  169.424246][ T7387] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  169.442928][ T5828] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  169.509221][ T7397] loop0: detected capacity change from 0 to 1024
[  169.583979][ T7397] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  169.762679][ T2132] usb 3-1: USB disconnect, device number 8
[  170.065524][ T5780] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  170.269458][ T5780] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  170.281155][ T5780] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  170.325620][ T5780] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  170.344469][ T5780] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00
[  170.363441][ T5780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.392315][ T5780] usb 4-1: config 0 descriptor??
[  170.460265][ T7422] trusted_key: encrypted_key: keyword 'uew' not recognized
[  170.473840][ T7424] 9p: Unknown uid 00000000004294967295
[  170.535210][   T23] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  170.744278][   T23] usb 2-1: unable to read config index 0 descriptor/start: -71
[  170.759313][   T23] usb 2-1: can't read configurations, error -71
[  170.846170][ T5780] wacom 0003:056A:0000.0005: Unknown device_type for 'HID 056a:0000'. Assuming pen.
[  170.871505][ T5780] wacom 0003:056A:0000.0005: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.3-1/input0
[  170.893542][ T7431] batadv0: entered promiscuous mode
[  170.903401][ T5780] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0000.0005/input/input11
[  170.919391][ T7431] bond0: entered promiscuous mode
[  170.945942][ T7431] bond_slave_0: entered promiscuous mode
[  170.960905][ T7431] bond_slave_1: entered promiscuous mode
[  170.993592][ T7431] hsr1: entered allmulticast mode
[  171.018861][ T7431] batadv0: entered allmulticast mode
[  171.043929][ T7431] bond0: entered allmulticast mode
[  171.053626][ T7431] bond_slave_0: entered allmulticast mode
[  171.064726][ T7431] bond_slave_1: entered allmulticast mode
[  171.071650][ T7431] 8021q: adding VLAN 0 to HW filter on device hsr1
[  171.087612][ T7431] batadv0: left promiscuous mode
[  171.093751][ T7431] bond0: left promiscuous mode
[  171.099902][ T7431] bond_slave_0: left promiscuous mode
[  171.112012][ T5780] usb 4-1: USB disconnect, device number 8
[  171.127031][ T7431] bond_slave_1: left promiscuous mode
[  171.221139][ T7426] loop2: detected capacity change from 0 to 32768
[  171.951784][ T7442] loop0: detected capacity change from 0 to 1024
[  171.962708][ T7442] EXT4-fs: Ignoring removed bh option
[  172.061114][ T7442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.296955][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.365269][   T27] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  172.407049][ T7452] "syz.1.602" (7452) uses obsolete ecb(arc4) skcipher
[  172.527956][ T7458] loop1: detected capacity change from 0 to 512
[  172.536536][ T7458] EXT4-fs: Ignoring removed i_version option
[  172.545882][ T7458] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  172.572293][ T7458] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.605: invalid indirect mapped block 4294967295 (level 1)
[  172.597450][   T27] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  172.610920][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.630755][   T27] usb 4-1: config 0 descriptor??
[  172.671389][ T7458] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.605: invalid indirect mapped block 4294967295 (level 1)
[  172.701277][ T7458] EXT4-fs (loop1): 2 truncates cleaned up
[  172.716194][ T7458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.863813][   T27] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00
[  172.877640][   T27] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  173.079957][   T27] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2
[  173.087850][   T27] [drm] Initialized udl on minor 2
[  173.145377][ T5780] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  173.270372][   T27] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[  173.284779][   T27] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  173.335271][ T5780] usb 3-1: Using ep0 maxpacket: 8
[  173.342470][ T5780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.353613][ T5780] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  173.374485][ T5780] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00
[  173.383761][ T5780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.395859][ T5780] usb 3-1: config 0 descriptor??
[  173.399783][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.561361][ T5828] usb 4-1: USB disconnect, device number 9
[  173.567763][   T23] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  173.587074][   T23] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  173.832419][ T5780] hid (null): usage index exceeded
[  173.852145][ T5780] uclogic 0003:5543:0781.0006: unknown main item tag 0x0
[  173.866354][ T5780] uclogic 0003:5543:0781.0006: ignoring exceeding usage max
[  173.886628][ T7465] loop1: detected capacity change from 0 to 32768
[  173.894272][ T5780] uclogic 0003:5543:0781.0006: ignoring exceeding usage max
[  173.903646][ T7465] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.608 (7465)
[  173.906994][ T5780] uclogic 0003:5543:0781.0006: usage index exceeded
[  173.929775][ T5780] uclogic 0003:5543:0781.0006: item 0 1 2 2 parsing failed
[  173.938814][ T7465] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  173.939561][ T5780] uclogic 0003:5543:0781.0006: parse failed
[  173.955765][ T5780] uclogic: probe of 0003:5543:0781.0006 failed with error -22
[  173.971481][ T7465] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  173.985789][ T7465] BTRFS info (device loop1): setting nodatacow, compression disabled
[  173.994150][ T7465] BTRFS info (device loop1): force clearing of disk cache
[  174.001984][ T7465] BTRFS info (device loop1): enabling ssd optimizations
[  174.009699][ T7465] BTRFS info (device loop1): using spread ssd allocation scheme
[  174.018307][ T7465] BTRFS info (device loop1): turning off barriers
[  174.025312][ T7465] BTRFS info (device loop1): disabling free space tree
[  174.045263][ T7465] BTRFS info (device loop1): not using ssd optimizations
[  174.061148][ T7465] BTRFS info (device loop1): not using spread ssd allocation scheme
[  174.150048][ T5780] usb 3-1: USB disconnect, device number 9
[  174.182244][ T7465] BTRFS info (device loop1): rebuilding free space tree
[  174.240001][ T7465] BTRFS info (device loop1): disabling free space tree
[  174.265813][ T7465] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  174.276422][ T7465] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  174.321275][ T7483] pim6reg0: tun_chr_ioctl cmd 1074025694
[  174.561940][ T5767] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  175.141373][ T7497] 8021q: adding VLAN 0 to HW filter on device batadv1
[  175.171972][ T7497] team0: Port device batadv1 added
[  175.570030][ T7502] loop3: detected capacity change from 0 to 32768
[  175.633348][ T7502] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  175.683748][ T7511] loop1: detected capacity change from 0 to 512
[  175.695523][ T7502] JBD2: Ignoring recovery information on journal
[  175.725175][ T7513] loop0: detected capacity change from 0 to 512
[  175.744869][ T7502] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  175.750522][ T7511] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.620: inode has both inline data and extents flags
[  175.815105][ T7511] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.620: couldn't read orphan inode 15 (err -117)
[  175.837909][ T7502] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid bg_blkno of 393248
[  175.858157][ T7502] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  175.869492][ T7502] OCFS2: File system is now read-only.
[  175.875350][ T7502] (syz.3.618,7502,0):ocfs2_search_chain:1761 ERROR: status = -30
[  175.883864][ T7502] (syz.3.618,7502,0):ocfs2_search_chain:1871 ERROR: status = -30
[  175.891932][ T7502] (syz.3.618,7502,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[  175.900408][ T7502] (syz.3.618,7502,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  175.908908][ T7502] (syz.3.618,7502,0):__ocfs2_claim_clusters:2365 ERROR: status = -30
[  175.918377][ T7502] (syz.3.618,7502,0):__ocfs2_claim_clusters:2373 ERROR: status = -30
[  175.926551][ T7502] (syz.3.618,7502,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30
[  175.935616][ T7502] (syz.3.618,7502,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30
[  175.944447][ T7502] (syz.3.618,7502,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30
[  175.955183][ T7502] (syz.3.618,7502,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30
[  175.959881][ T7513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.964600][ T7502] (syz.3.618,7502,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30
[  175.964663][ T7502] (syz.3.618,7502,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30
[  175.979661][ T7511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.987230][ T7502] (syz.3.618,7502,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30
[  175.987337][ T7502] (syz.3.618,7502,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30
[  176.028186][ T7502] (syz.3.618,7502,0):ocfs2_expand_inline_dir:2858 ERROR: status = -30
[  176.036678][ T7502] (syz.3.618,7502,0):ocfs2_extend_dir:3205 ERROR: status = -30
[  176.044869][ T7502] (syz.3.618,7502,0):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30
[  176.053807][ T7502] (syz.3.618,7502,0):ocfs2_symlink:1867 ERROR: status = -30
[  176.060355][ T7513] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.061226][ T7502] (syz.3.618,7502,0):ocfs2_symlink:2068 ERROR: status = -30
[  176.308647][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.378436][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.484254][ T5769] ocfs2: Unmounting device (7,3) on (node local)
[  176.699512][ T7528] loop0: detected capacity change from 0 to 164
[  176.769990][ T7528] Unable to read rock-ridge attributes
[  176.847018][ T7528] Unable to read rock-ridge attributes
[  177.070996][ T7537] Bluetooth: MGMT ver 1.22
[  177.082874][ T7537] Bluetooth: hci1: expected 19 bytes, got 2 bytes
[  177.137690][ T7539] sctp: [Deprecated]: syz.1.632 (pid 7539) Use of struct sctp_assoc_value in delayed_ack socket option.
[  177.137690][ T7539] Use struct sctp_sack_info instead
[  177.244709][ T7543] loop3: detected capacity change from 0 to 64
[  177.435462][   T23] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  177.562446][ T7551] loop1: detected capacity change from 0 to 64
[  177.627293][   T23] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  177.645485][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.674555][   T23] usb 1-1: config 0 descriptor??
[  177.696203][   T23] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  177.838623][ T7557] loop1: detected capacity change from 0 to 2048
[  177.916960][   T23] gp8psk: usb in 128 operation failed.
[  177.932071][ T7560] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  178.142543][   T23] gp8psk: FW Version = 161.137.19 (0xa18913)  Build 2124/73/37
[  178.277504][ T7568] loop2: detected capacity change from 0 to 512
[  178.300052][ T7568] EXT4-fs: Ignoring removed orlov option
[  178.341314][   T23] gp8psk: usb in 149 operation failed.
[  178.355105][   T23] gp8psk: failed to get FPGA version
[  178.359688][ T7568] EXT4-fs (loop2): 1 truncate cleaned up
[  178.365773][   T23] gp8psk: usb in 138 operation failed.
[  178.382206][   T23] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  178.397385][ T7568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.403217][   T23] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  178.437810][   T23] usb 1-1: USB disconnect, device number 4
[  178.531325][   T28] audit: type=1800 audit(1776947444.469:9): pid=7568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.643" name="file1" dev="loop2" ino=13 res=0 errno=0
[  178.598313][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.796346][ T7574] netlink: 48 bytes leftover after parsing attributes in process `syz.2.645'.
[  179.182280][ T7566] loop1: detected capacity change from 0 to 40427
[  179.222634][ T7566] F2FS-fs (loop1): invalid crc value
[  179.268783][ T7566] F2FS-fs (loop1): Found nat_bits in checkpoint
[  179.361333][ T7566] F2FS-fs (loop1): Start checkpoint disabled!
[  179.373155][ T7566] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  179.396167][ T7588] vcan0: tx drop: invalid da for name 0x00000000000000f0
[  179.527666][   T28] audit: type=1804 audit(1776947445.449:10): pid=7566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.642" name="/newroot/163/file0/file0" dev="loop1" ino=10 res=1 errno=0
[  179.527735][ T7566] F2FS-fs (loop1): Can't enable fs-verity on inode 10: the verity feature is not enabled on this filesystem
[  179.903541][   T67] kworker/u4:4: attempt to access beyond end of device
[  179.903541][   T67] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  179.935151][   T67] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  179.952652][   T67] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  180.077979][ T7583] loop0: detected capacity change from 0 to 32768
[  180.147813][ T7585] loop3: detected capacity change from 0 to 32768
[  180.191148][ T7585] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  180.212723][ T7583] UFO tlock:0xffffc9000287a048
[  180.266269][ T7585] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  180.304346][ T7583] MetaData crosses page boundary!!
[  180.364656][ T7583] lblock = 6300000010, size  = -820051968
[  180.393865][ T7583] CPU: 0 PID: 7583 Comm: syz.0.649 Not tainted syzkaller #0
[  180.401420][ T7583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  180.411615][ T7583] Call Trace:
[  180.414980][ T7583]  <TASK>
[  180.417962][ T7583]  dump_stack_lvl+0x18c/0x250
[  180.422801][ T7583]  ? __wake_up_bit+0x210/0x210
[  180.427636][ T7583]  ? show_regs_print_info+0x20/0x20
[  180.432982][ T7583]  ? load_image+0x420/0x420
[  180.437563][ T7583]  ? folio_unlock+0x118/0x2e0
[  180.442347][ T7583]  __get_metapage+0xaac/0xfa0
[  180.447177][ T7583]  dtReadFirst+0xd5/0x920
[  180.451570][ T7583]  jfs_readdir+0x919/0x3bb0
[  180.456178][ T7583]  ? verify_lock_unused+0x140/0x140
[  180.461461][ T7583]  ? dtInitRoot+0x670/0x670
[  180.466134][ T7583]  ? __up_read+0x2b6/0x6b0
[  180.470609][ T7583]  ? down_write+0x16e/0x200
[  180.475256][ T7583]  ? down_read_killable+0x340/0x340
[  180.480523][ T7583]  ? end_current_label_crit_section+0x149/0x170
[  180.487027][ T7583]  ? dtInitRoot+0x670/0x670
[  180.491868][ T7583]  wrap_directory_iterator+0x92/0xd0
[  180.497415][ T7583]  iterate_dir+0x1c2/0x580
[  180.502091][ T7583]  __se_sys_getdents64+0xf6/0x270
[  180.507177][ T7583]  ? __x64_sys_getdents64+0x80/0x80
[  180.512421][ T7583]  ? filldir+0x660/0x660
[  180.516703][ T7583]  ? lockdep_hardirqs_on+0x98/0x150
[  180.521981][ T7583]  do_syscall_64+0x55/0xa0
[  180.526598][ T7583]  ? clear_bhb_loop+0x40/0x90
[  180.531401][ T7583]  ? clear_bhb_loop+0x40/0x90
[  180.536130][ T7583]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  180.542106][ T7583] RIP: 0033:0x7f87cf59c819
[  180.546673][ T7583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  180.566400][ T7583] RSP: 002b:00007f87d0415028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  180.574924][ T7583] RAX: ffffffffffffffda RBX: 00007f87cf815fa0 RCX: 00007f87cf59c819
[  180.583175][ T7583] RDX: 0000000000001000 RSI: 0000200000000f80 RDI: 0000000000000004
[  180.591250][ T7583] RBP: 00007f87cf632c91 R08: 0000000000000000 R09: 0000000000000000
[  180.599549][ T7583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  180.607577][ T7583] R13: 00007f87cf816038 R14: 00007f87cf815fa0 R15: 00007fff4ef27738
[  180.615765][ T7583]  </TASK>
[  180.631582][ T7591] loop2: detected capacity change from 0 to 32768
[  180.655464][ T7583] bread failed!
[  180.662427][ T7583] jfs_readdir: unexpected rc = -5 from dtReadNext
[  180.691108][ T7591] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.652 (7591)
[  180.746418][ T7591] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  180.787527][ T7591] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  180.831650][ T7591] BTRFS info (device loop2): force clearing of disk cache
[  180.871138][ T7591] BTRFS info (device loop2): metadata ratio 0
[  180.881322][ T7591] BTRFS info (device loop2): enabling ssd optimizations
[  180.913260][ T7591] BTRFS info (device loop2): using spread ssd allocation scheme
[  180.969999][ T7591] BTRFS info (device loop2): using free space tree
[  180.998394][ T5769] ocfs2: Unmounting device (7,3) on (node local)
[  181.215139][ T7591] BTRFS info (device loop2): auto enabling async discard
[  181.231482][ T7591] BTRFS info (device loop2): rebuilding free space tree
[  181.397638][   T28] audit: type=1800 audit(1776947447.339:11): pid=7591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.652" name="file1" dev="loop2" ino=260 res=0 errno=0
[  181.449060][ T5768] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  181.687915][ T7624] loop3: detected capacity change from 0 to 64
[  182.134002][ T5769] Trying to free block not in datazone
[  182.698515][   T23] hid-generic 0005:4C4A:5508.0007: item fetching failed at offset 0/1
[  182.727772][   T23] hid-generic: probe of 0005:4C4A:5508.0007 failed with error -22
[  182.885267][ T5808] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  183.020959][ T5828] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  183.065247][ T5808] usb 3-1: Using ep0 maxpacket: 16
[  183.065449][ T2132] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  183.086182][ T5808] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  183.099480][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  183.110655][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  183.120899][ T5808] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  183.130759][ T5808] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  183.145697][ T5808] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  183.155243][ T5808] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  183.163646][ T5808] usb 3-1: Manufacturer: syz
[  183.170942][ T5808] usb 3-1: config 0 descriptor??
[  183.226205][ T5828] usb 2-1: Using ep0 maxpacket: 32
[  183.234424][ T5828] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[  183.243152][ T5828] usb 2-1: config 0 has no interface number 0
[  183.249813][ T5828] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  183.260036][ T2132] usb 1-1: Using ep0 maxpacket: 16
[  183.265513][ T5828] usb 2-1: config 0 interface 89 has no altsetting 0
[  183.275946][ T2132] usb 1-1: unable to get BOS descriptor or descriptor too short
[  183.285171][ T5828] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[  183.296565][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.304807][ T5828] usb 2-1: Product: syz
[  183.309352][ T2132] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  183.319863][ T5828] usb 2-1: Manufacturer: syz
[  183.324620][ T5828] usb 2-1: SerialNumber: syz
[  183.329539][ T2132] usb 1-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  183.344368][ T2132] usb 1-1: config 1 interface 0 has no altsetting 0
[  183.352490][ T5828] usb 2-1: config 0 descriptor??
[  183.362075][ T2132] usb 1-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40
[  183.374200][ T5828] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  183.384088][ T2132] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.393536][ T5828] em28xx 2-1:0.89: Video interface 89 found:
[  183.404273][ T2132] usb 1-1: Product: syz
[  183.409419][ T2132] usb 1-1: Manufacturer: syz
[  183.414340][ T2132] usb 1-1: SerialNumber: syz
[  183.444025][ T2132] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input15
[  183.495406][ T5808] rc_core: IR keymap rc-hauppauge not found
[  183.501565][ T5808] Registered IR keymap rc-empty
[  183.508440][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  183.545315][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  183.590260][ T5808] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  183.614777][ T5808] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14
[  183.644574][ T5122] bcm5974 1-1:1.0: could not read from device
[  183.661979][ T2132] bcm5974 1-1:1.0: could not read from device
[  183.676232][ T5122] bcm5974 1-1:1.0: could not read from device
[  183.688251][ T2132] input: failed to attach handler mousedev to device input15, error: -5
[  183.706659][ T5122] bcm5974 1-1:1.0: could not read from device
[  183.716549][ T5122] bcm5974 1-1:1.0: could not read from device
[  183.722906][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  183.723027][ T2132] usb 1-1: USB disconnect, device number 5
[  183.785328][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  183.835289][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  183.886696][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  183.934838][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  183.975210][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  183.992813][ T5828] em28xx 2-1:0.89: chip ID is em2710
[  184.005473][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  184.035305][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  184.065168][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  184.100041][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  184.135244][ T5808] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  184.169454][ T5808] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  184.179087][ T5808] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  184.198022][ T5808] usb 3-1: USB disconnect, device number 10
[  184.235248][ T5770] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  184.283868][ T5828] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  184.292870][ T5828] em28xx 2-1:0.89: board has no eeprom
[  184.377046][ T5828] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[  184.399400][ T5828] em28xx 2-1:0.89: analog set to bulk mode.
[  184.409432][ T2132] em28xx 2-1:0.89: Registering V4L2 extension
[  184.426993][ T7674] loop0: detected capacity change from 0 to 4096
[  184.436728][ T5828] usb 2-1: USB disconnect, device number 12
[  184.443586][ T5770] usb 4-1: Using ep0 maxpacket: 16
[  184.456885][ T5770] usb 4-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config
[  184.474886][ T5770] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  184.489052][ T5828] em28xx 2-1:0.89: Disconnecting em28xx
[  184.510416][ T5770] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24929, setting to 1024
[  184.554202][ T7677] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  184.568821][ T5770] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  184.585160][ T5770] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  184.600708][ T5770] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  184.610380][ T5770] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  184.623348][ T2132] em28xx 2-1:0.89: Config register raw data: 0xffffffed
[  184.631131][ T5770] usb 4-1: Manufacturer: syz
[  184.636290][ T2132] em28xx 2-1:0.89: AC97 chip type couldn't be determined
[  184.643413][ T2132] em28xx 2-1:0.89: No AC97 audio processor
[  184.671283][ T5770] usb 4-1: config 0 descriptor??
[  184.682155][ T2132] usb 2-1: Decoder not found
[  184.696174][ T2132] em28xx 2-1:0.89: failed to create media graph
[  184.696530][ T7674] netlink: 256 bytes leftover after parsing attributes in process `syz.0.678'.
[  184.703666][ T2132] em28xx 2-1:0.89: V4L2 device video103 deregistered
[  184.784245][ T2132] em28xx 2-1:0.89: Registering snapshot button...
[  184.830736][ T2132] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input16
[  184.886675][ T2132] em28xx 2-1:0.89: Remote control support is not available for this card.
[  184.922319][ T5828] em28xx 2-1:0.89: Closing input extension
[  184.966717][ T5828] em28xx 2-1:0.89: Deregistering snapshot button
[  185.116055][ T5770] rc_core: IR keymap rc-hauppauge not found
[  185.124146][ T7682] loop1: detected capacity change from 0 to 2048
[  185.132057][ T5770] Registered IR keymap rc-empty
[  185.152003][ T5770] mceusb 4-1:0.0: Error: mce write urb status = -71
[  185.170812][ T7682] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  185.180972][ T5828] em28xx 2-1:0.89: Freeing device
[  185.227218][ T5770] mceusb 4-1:0.0: Error: mce write urb status = -71
[  185.274702][ T7688] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  185.288565][ T5770] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  185.357384][ T5770] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17
[  185.462401][ T5770] mceusb 4-1:0.0: Error: mce write urb status = -71
[  185.499890][ T5767] syz-executor: attempt to access beyond end of device
[  185.499890][ T5767] loop1: rw=0, sector=262216, nr_sectors = 2 limit=2048
[  185.517082][ T5770] mceusb 4-1:0.0: Error: mce write urb status = -71
[  185.523314][ T5767] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1)
[  185.555480][ T5770] mceusb 4-1:0.0: Error: mce write urb status = -71
[  185.566151][ T5767] syz-executor: attempt to access beyond end of device
[  185.566151][ T5767] loop1: rw=0, sector=262216, nr_sectors = 2 limit=2048
[  185.594448][ T5770] mceusb 4-1:0.0: Error: mce write urb status = -71
[  185.601430][ T5767] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1)
[  185.602109][ T5767] syz-executor: attempt to access beyond end of device
[  185.602109][ T5767] loop1: rw=0, sector=262216, nr_sectors = 2 limit=2048
[  185.639953][ T5767] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1)
[  185.658360][ T5770] mceusb 4-1:0.0: Error: mce write urb status = -71
[  185.662722][ T5767] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 147
[  185.681007][ T5767] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=15)
[  185.720217][ T5770] mceusb 4-1:0.0: Error: mce write urb status = -71
[  185.734626][ T5767] Remounting filesystem read-only
[  185.743286][ T5767] NILFS (loop1): error -5 truncating bmap (ino=15)
[  185.765239][ T5767] syz-executor: attempt to access beyond end of device
[  185.765239][ T5767] loop1: rw=0, sector=262216, nr_sectors = 2 limit=2048
[  185.785499][ T5770] mceusb 4-1:0.0: Error: mce write urb status = -71
[  185.812677][ T5767] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1)
[  185.825396][ T5770] mceusb 4-1:0.0: Error: mce write urb status = -71
[  185.835358][ T5767] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  185.846762][ T5767] NILFS (loop1): discard dirty page: offset=0, ino=2
[  185.865067][ T5767] NILFS (loop1): discard dirty block: blocknr=18, size=1024
[  185.874845][ T5770] mceusb 4-1:0.0: Error: mce write urb status = -71
[  185.894827][ T5767] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  185.915659][ T5767] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  185.924680][ T5767] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  185.925335][ T5770] mceusb 4-1:0.0: Error: mce write urb status = -71
[  185.940849][ T5767] NILFS (loop1): discard dirty page: offset=0, ino=6
[  185.948929][ T5767] NILFS (loop1): discard dirty block: blocknr=35, size=1024
[  185.964229][ T5767] NILFS (loop1): discard dirty block: blocknr=131108, size=1024
[  185.965560][ T7697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.686'.
[  185.974117][ T5767] NILFS (loop1): discard dirty block: blocknr=37, size=1024
[  185.997164][ T5770] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  186.009673][ T5767] NILFS (loop1): discard dirty block: blocknr=38, size=1024
[  186.017027][ T7697] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.018884][ T5770] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  186.028745][ T5767] NILFS (loop1): discard dirty page: offset=163840, ino=3
[  186.047997][ T7697] bridge_slave_1: left allmulticast mode
[  186.059846][ T7697] bridge_slave_1: left promiscuous mode
[  186.062902][ T5767] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  186.072003][ T5770] usb 4-1: USB disconnect, device number 10
[  186.085113][ T5767] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  186.086969][ T7697] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.094236][ T5767] NILFS (loop1): discard dirty block: blocknr=47, size=1024
[  186.094262][ T5767] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  186.094296][ T5767] NILFS (loop1): discard dirty page: offset=196608, ino=3
[  186.178584][ T5767] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  186.215065][ T5767] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  186.224096][ T5767] NILFS (loop1): discard dirty block: blocknr=49, size=1024
[  186.267317][ T5767] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  186.432480][ T7699] loop1: detected capacity change from 0 to 256
[  186.458327][ T7699] exfat: Deprecated parameter 'utf8'
[  186.541899][ T7699] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  186.735146][ T5827] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  186.821550][ T7710] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  186.939253][ T5827] usb 1-1: unable to get BOS descriptor or descriptor too short
[  186.963855][ T5827] usb 1-1: not running at top speed; connect to a high speed hub
[  186.987883][ T5827] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  187.013312][ T5827] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  187.043122][ T5827] usb 1-1: string descriptor 0 read error: -22
[  187.053278][ T5827] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  187.091992][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.117591][ T5827] usb 1-1: 0:2 : does not exist
[  187.435400][ T7714] loop1: detected capacity change from 0 to 8192
[  187.453525][ T7714] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  187.475337][ T7714] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  187.522863][ T7714] REISERFS (device loop1): using ordered data mode
[  187.542136][ T7714] reiserfs: using flush barriers
[  187.570038][ T7707] loop2: detected capacity change from 0 to 40427
[  187.592607][ T7707] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  187.615812][ T7714] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  187.621860][ T7707] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  187.653713][ T7714] REISERFS (device loop1): checking transaction log (loop1)
[  187.664430][ T7707] F2FS-fs (loop2): invalid crc value
[  187.701459][ T7707] F2FS-fs (loop2): Found nat_bits in checkpoint
[  187.911155][ T7707] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  187.931778][ T7707] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  187.993093][ T5827] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[  188.020558][ T5827] usb 1-1: 5:0: failed to get current value for ch 1 (-22)
[  188.035222][ T7714] REISERFS (device loop1): Using tea hash to sort names
[  188.042811][ T7714] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  188.176241][ T5827] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[  188.249127][ T5827] usb 1-1: USB disconnect, device number 6
[  188.675458][ T7719] loop3: detected capacity change from 0 to 40427
[  188.715074][ T7719] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  188.723476][ T7719] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  188.805860][ T7719] F2FS-fs (loop3): invalid crc value
[  188.851063][ T7719] F2FS-fs (loop3): Found nat_bits in checkpoint
[  189.020645][ T7730] loop1: detected capacity change from 0 to 2048
[  189.089285][ T7730] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  189.130814][ T7719] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  189.160329][ T7719] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  189.299638][ T7730] overlayfs: upper fs needs to support d_type.
[  189.313090][ T7730] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  189.323015][ T7735] loop2: detected capacity change from 0 to 128
[  189.324354][ T7730] overlayfs: failed to set xattr on upper
[  189.337281][ T7730] overlayfs: ...falling back to redirect_dir=nofollow.
[  189.344313][ T7730] overlayfs: ...falling back to index=off.
[  189.350672][ T5827] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  189.360518][ T7730] overlayfs: ...falling back to uuid=null.
[  189.371270][ T7735] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  189.397004][ T7735] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  189.485530][ T5767] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh
[  189.511889][ T5767] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh
[  189.558112][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.588812][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  189.615166][ T5827] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  189.635070][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.668018][ T5827] usb 1-1: config 0 descriptor??
[  190.128949][ T5827] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor
[  190.227081][ T5827] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0008/input/input18
[  190.285981][   T34] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.436909][ T5827] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  190.549939][   T34] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.687168][ T5770] usb 1-1: USB disconnect, device number 7
[  190.764836][   T34] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.922027][   T34] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  191.080970][ T7750] loop2: detected capacity change from 0 to 128
[  191.094894][ T7743] loop3: detected capacity change from 0 to 32768
[  191.176011][ T7743] ea_get: invalid extended attribute
[  191.202777][ T7743] ffff88805dbbc3f0: 04 00 00 00                                      ....
[  191.223049][ T7751] ea_get: invalid extended attribute
[  191.240527][ T7751] ffff88805dbbc3f0: 04 00 00 00                                      ....
[  191.287445][ T7743] ea_get: invalid extended attribute
[  191.315137][ T7743] ffff88805dbbc3f0: 04 00 00 00                                      ....
[  191.577238][ T7758] loop2: detected capacity change from 0 to 256
[  191.937564][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  191.961333][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  191.986210][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  192.005806][ T5771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  192.028206][ T5771] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  192.045575][ T5771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  193.615061][ T2132] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  193.676517][ T7805] loop3: detected capacity change from 0 to 2048
[  193.814190][ T7815] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  193.867170][ T2132] usb 1-1: Using ep0 maxpacket: 16
[  193.885292][ T2132] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  193.935081][ T2132] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  193.975377][ T2132] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  194.019239][ T2132] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  194.053756][ T2132] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.078427][ T2132] usb 1-1: config 0 descriptor??
[  194.128167][ T5771] Bluetooth: hci0: command tx timeout
[  194.136599][ T7763] chnl_net:caif_netlink_parms(): no params data found
[  194.342167][ T7821] loop3: detected capacity change from 0 to 128
[  194.380542][ T7821] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  194.445069][ T7821] hpfs: filesystem error: improperly stopped
[  194.451746][ T7821] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  194.487754][ T7821] hpfs: You really don't want any checks? You are crazy...
[  194.502847][ T7821] hpfs: hpfs_map_sector(): read error
[  194.532320][ T2132] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  194.537951][ T7821] hpfs: code page support is disabled
[  194.547378][ T7821] hpfs: hpfs_map_4sectors(): unaligned read
[  194.554023][ T7821] hpfs: hpfs_map_4sectors(): unaligned read
[  194.560759][ T7821] hpfs: filesystem error: unable to find root dir
[  194.656878][ T2132] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0009/input/input19
[  194.695645][ T7821] hpfs: hpfs_map_4sectors(): unaligned read
[  194.727355][ T7821] hpfs: hpfs_map_sector(): read error
[  194.751555][   T34] hsr_slave_0: left promiscuous mode
[  194.771343][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  194.785343][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  194.815124][   T34] hsr_slave_1: left promiscuous mode
[  194.826175][ T2132] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  194.841336][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.871537][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[  194.884760][ T2132] usb 1-1: USB disconnect, device number 8
[  194.956991][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.995180][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.160243][ T7830] fido_id[7830]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  195.176290][   T34] bridge_slave_1: left allmulticast mode
[  195.182115][   T34] bridge_slave_1: left promiscuous mode
[  195.232347][ T7835] input: syz1 as /devices/virtual/input/input20
[  195.242767][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.355324][   T34] bridge_slave_0: left allmulticast mode
[  195.383711][   T34] bridge_slave_0: left promiscuous mode
[  195.435194][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.715153][   T34] veth1_macvtap: left promiscuous mode
[  195.749845][   T34] veth0_macvtap: left promiscuous mode
[  195.775408][   T34] veth1_vlan: left promiscuous mode
[  195.786283][ T7840] capability: warning: `syz.0.729' uses 32-bit capabilities (legacy support in use)
[  195.806718][   T34] veth0_vlan: left promiscuous mode
[  195.866094][ T7840] program syz.0.729 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  196.211489][ T5771] Bluetooth: hci0: command tx timeout
[  196.276916][ T7832] loop3: detected capacity change from 0 to 131072
[  196.303178][ T7832] F2FS-fs (loop3): invalid crc value
[  196.334367][ T7832] F2FS-fs (loop3): Found nat_bits in checkpoint
[  196.400839][ T7832] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  197.846817][ T5770] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  198.068360][ T5770] usb 1-1: Using ep0 maxpacket: 8
[  198.079540][ T5770] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  198.113685][ T5770] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  198.133682][ T5770] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  198.159223][ T5770] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  198.203612][ T5770] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  198.217409][ T5770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.295649][ T5771] Bluetooth: hci0: command tx timeout
[  198.468938][ T5770] usb 1-1: GET_CAPABILITIES returned 0
[  198.485127][ T5770] usbtmc 1-1:16.0: can't read capabilities
[  198.747350][   T34] team0 (unregistering): Port device team_slave_1 removed
[  198.756182][    C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  198.795122][ T7864] usbtmc 1-1:16.0: Unable to send data, error -71
[  198.837762][ T5770] usb 1-1: USB disconnect, device number 9
[  198.859432][   T34] team0 (unregistering): Port device team_slave_0 removed
[  198.973239][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  199.062180][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  199.686934][ T7886] loop0: detected capacity change from 0 to 256
[  199.746822][ T7886] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  199.785775][   T34] bond0 (unregistering): Released all slaves
[  200.072550][ T7763] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.095853][ T7763] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.103238][ T7763] bridge_slave_0: entered allmulticast mode
[  200.112077][ T7763] bridge_slave_0: entered promiscuous mode
[  200.131449][ T7763] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.144411][ T7763] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.167772][ T7763] bridge_slave_1: entered allmulticast mode
[  200.181404][ T7763] bridge_slave_1: entered promiscuous mode
[  200.298530][ T7763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.331143][ T7763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.370163][ T7895] loop3: detected capacity change from 0 to 1024
[  200.381345][ T5774] Bluetooth: hci0: command tx timeout
[  200.473806][ T7763] team0: Port device team_slave_0 added
[  200.488823][ T7895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  200.556548][ T7763] team0: Port device team_slave_1 added
[  200.576003][ T7895] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  200.623170][ T7763] batman_adv: batadv0: Adding interface: batadv_slave_0
[  200.633325][ T7895] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 3: comm syz.3.751: lblock 3 mapped to illegal pblock 3 (length 3)
[  200.674908][ T7895] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  200.690684][ T7904] loop2: detected capacity change from 0 to 64
[  200.713365][ T7763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.738860][ T7895] EXT4-fs (loop3): This should not happen!! Data will be lost
[  200.738860][ T7895] 
[  200.771164][ T7763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.810782][ T7903] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: block 8: comm syz.3.751: lblock 8 mapped to illegal pblock 8 (length 8)
[  200.843358][ T7763] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.863283][ T7763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.920643][ T7763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  200.936821][ T7903] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  200.949634][ T7903] EXT4-fs (loop3): This should not happen!! Data will be lost
[  200.949634][ T7903] 
[  201.091653][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  201.293170][ T7763] hsr_slave_0: entered promiscuous mode
[  201.336160][ T7763] hsr_slave_1: entered promiscuous mode
[  201.346891][ T7915] loop3: detected capacity change from 0 to 1024
[  201.354501][ T7763] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  201.366395][ T7763] Cannot create hsr debugfs directory
[  201.965173][ T5774] Bluetooth: hci1: command 0x0406 tx timeout
[  201.965272][ T5781] Bluetooth: hci2: command 0x0406 tx timeout
[  201.990808][ T7926] loop3: detected capacity change from 0 to 256
[  202.106349][ T7926] exfat: Deprecated parameter 'namecase'
[  202.127796][ T7763] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  202.151263][ T7910] loop2: detected capacity change from 0 to 32768
[  202.180503][ T7926] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  202.249221][ T7763] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  202.299010][ T7910] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  202.331995][ T7763] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  202.430740][ T7763] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  202.443915][ T7910] XFS (loop2): Ending clean mount
[  202.450975][ T5771] Bluetooth: hci0: command tx timeout
[  202.594067][ T7913] loop0: detected capacity change from 0 to 32768
[  202.633291][ T7763] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.735430][ T7913] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  202.805609][ T5768] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  202.829076][ T7763] 8021q: adding VLAN 0 to HW filter on device team0
[  202.922428][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.929707][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.952521][ T7913] XFS (loop0): Ending clean mount
[  202.987378][ T7952] program syz.3.759 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  203.006947][ T7913] XFS (loop0): Quotacheck needed: Please wait.
[  203.024578][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.032007][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.147294][ T7913] XFS (loop0): Quotacheck: Done.
[  203.422660][ T5766] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  204.122179][ T7763] 8021q: adding VLAN 0 to HW filter on device batadv0
[  204.584420][ T7985] loop0: detected capacity change from 0 to 512
[  204.622525][ T7985] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  204.661431][ T7985] EXT4-fs (loop0): 1 truncate cleaned up
[  204.669048][ T7985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.719142][ T7956] loop3: detected capacity change from 0 to 40427
[  204.775716][ T7956] F2FS-fs (loop3): invalid crc value
[  204.852421][ T7956] F2FS-fs (loop3): Found nat_bits in checkpoint
[  205.169622][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.185405][ T7956] F2FS-fs (loop3): Start checkpoint disabled!
[  205.223025][ T7956] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  205.457174][ T7763] veth0_vlan: entered promiscuous mode
[  205.488320][ T7763] veth1_vlan: entered promiscuous mode
[  205.630211][ T7763] veth0_macvtap: entered promiscuous mode
[  205.684427][ T7763] veth1_macvtap: entered promiscuous mode
[  205.744558][ T7763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.785344][ T7763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.827371][ T7763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.838330][ T7763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.848785][ T7763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.859535][ T7763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.881137][ T7763] batman_adv: batadv0: Interface activated: batadv_slave_0
[  205.904464][   T12] kworker/u4:1: attempt to access beyond end of device
[  205.904464][   T12] loop3: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  205.918219][ T7763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.945126][ T7763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.975144][ T7763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.977624][   T12] kworker/u4:1: attempt to access beyond end of device
[  205.977624][   T12] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  205.995040][ T7763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.036893][ T7763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.063464][   T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  206.075230][   T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  206.082418][ T7763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.095227][   T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  206.131684][ T7763] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.188923][ T7763] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.221317][ T7763] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.245021][ T7763] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.269838][ T7763] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.582438][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.625119][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.771711][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.790982][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.235571][ T5808] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  207.435155][ T5808] usb 3-1: Using ep0 maxpacket: 8
[  207.442687][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  207.484691][ T5808] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  207.487756][ T8051] loop0: detected capacity change from 0 to 2048
[  207.527987][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.556439][ T5808] usb 3-1: config 0 descriptor??
[  207.557883][ T8051] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  207.632257][ T8048] loop4: detected capacity change from 0 to 8192
[  207.689266][ T8048] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  207.715506][ T8048] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  207.783442][ T8048] REISERFS (device loop4): using ordered data mode
[  207.803031][ T5808] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  207.842170][ T8048] reiserfs: using flush barriers
[  207.890665][ T8048] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  207.948316][ T8048] REISERFS (device loop4): checking transaction log (loop4)
[  208.010362][ T8048] REISERFS (device loop4): Using r5 hash to sort names
[  208.034613][ T8048] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  208.053641][ T5808] usb 3-1: USB disconnect, device number 11
[  208.226850][ T8048] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "ÿÿ18446744073709551615ÿÿÿÿ0177777777777777777777701777777777777777777777ÿÿ18446744073709551615ÿÿ"
[  208.771161][ T8074] loop0: detected capacity change from 0 to 512
[  208.841318][ T8074] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  208.952056][ T8074] EXT4-fs (loop0): 1 truncate cleaned up
[  208.961465][ T8074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  209.108135][   T28] audit: type=1800 audit(1776947475.049:12): pid=8074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.798" name="file1" dev="loop0" ino=15 res=0 errno=0
[  209.570709][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.414225][ T8092] loop4: detected capacity change from 0 to 32768
[  210.476140][ T8090] loop2: detected capacity change from 0 to 32768
[  210.522260][ T8101] loop0: detected capacity change from 0 to 32768
[  210.542877][ T8092] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  210.572941][ T8090] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  210.622711][ T8101] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop0 scanned by syz.0.796 (8101)
[  210.699453][ T8101] BTRFS info (device loop0): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9
[  210.736409][ T8101] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  210.772462][ T8101] BTRFS info (device loop0): using free space tree
[  210.846094][ T8090] XFS (loop2): Ending clean mount
[  210.926787][   T27] XFS (loop2): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:112). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  210.975311][ T8092] XFS (loop4): Ending clean mount
[  210.985115][   T27] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x20 
[  210.997039][   T27] XFS (loop2): Unmount and run xfs_repair
[  211.002817][   T27] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  211.012214][   T27] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  211.021503][   T27] 00000010: 00 00 00 00 00 00 00 20 00 00 00 02 00 00 00 10  ....... ........
[  211.031608][   T27] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  211.041485][   T27] 00000030: 00 00 00 00 ca b4 20 ce 00 00 11 40 00 00 40 37  ...... ....@..@7
[  211.050926][   T27] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  211.062471][   T27] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  211.071960][   T27] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  211.081403][   T27] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  211.085082][ T8101] BTRFS info (device loop0): enabling ssd optimizations
[  211.098152][ T8090] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x20 len 8 error 74
[  211.133679][ T8090] XFS (loop2): Failed to initialize disk quotas.
[  211.165483][ T8101] BTRFS info (device loop0): auto enabling async discard
[  211.344573][ T5768] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  211.657777][ T5766] BTRFS info (device loop0): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9
[  211.723542][ T7763] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  211.903695][ T8154] program syz.3.804 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  212.546889][ T8167] loop3: detected capacity change from 0 to 512
[  212.634153][ T8167] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  212.742746][ T8167] EXT4-fs (loop3): 1 truncate cleaned up
[  212.750233][ T8167] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.796898][   T28] audit: type=1800 audit(1776947478.739:13): pid=8167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.806" name="file1" dev="loop3" ino=15 res=0 errno=0
[  213.335298][ T5780] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  213.366287][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.555161][ T5780] usb 5-1: Using ep0 maxpacket: 32
[  213.576718][ T5780] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  213.595012][ T5780] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  213.627622][ T5780] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  213.666534][ T5780] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  213.727318][ T5780] usb 5-1: config 0 interface 0 has no altsetting 0
[  213.766420][ T5780] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  213.785210][ T5780] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  213.814180][ T5780] usb 5-1: Product: syz
[  213.821436][ T5780] usb 5-1: Manufacturer: syz
[  213.837182][ T5780] usb 5-1: SerialNumber: syz
[  213.856232][ T5780] usb 5-1: config 0 descriptor??
[  213.868188][ T8158] loop0: detected capacity change from 0 to 40427
[  213.882181][ T5780] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  213.907646][ T5780] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  213.916967][ T8158] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  213.924815][ T8158] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  213.969033][ T8158] F2FS-fs (loop0): invalid crc value
[  214.047510][ T8158] F2FS-fs (loop0): Found nat_bits in checkpoint
[  214.103898][ T8169] loop2: detected capacity change from 0 to 40427
[  214.175153][ T8169] F2FS-fs (loop2): Invalid log blocks per segment (4278190089)
[  214.182895][ T8169] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  214.216633][ T8158] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  214.234132][ T8158] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  214.281081][ T8169] F2FS-fs (loop2): invalid crc value
[  214.319562][   T23] usb 5-1: USB disconnect, device number 2
[  214.320333][    C0] ldusb 5-1:0.0: usb_submit_urb failed (-19)
[  214.343655][   T23] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  214.369986][ T8169] F2FS-fs (loop2): Found nat_bits in checkpoint
[  214.534094][ T8189] f2fs_ckpt-7:0: attempt to access beyond end of device
[  214.534094][ T8189] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  214.537040][ T8169] F2FS-fs (loop2): Try to recover 1th superblock, ret: -30
[  214.572842][ T8169] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  214.581265][ T8189] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  214.613385][ T8189] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  214.672179][ T8169] F2FS-fs (loop2): Corrupted max_depth of 3: 255
[  214.687753][ T8169] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  214.810952][ T8206] loop3: detected capacity change from 0 to 512
[  215.552698][ T8219] loop2: detected capacity change from 0 to 256
[  215.668288][ T8219] FAT-fs (loop2): Directory bread(block 64) failed
[  215.686821][ T8219] FAT-fs (loop2): Directory bread(block 65) failed
[  215.693559][ T8219] FAT-fs (loop2): Directory bread(block 66) failed
[  215.744886][ T8219] FAT-fs (loop2): Directory bread(block 67) failed
[  215.754693][ T8219] FAT-fs (loop2): Directory bread(block 68) failed
[  215.765043][ T8219] FAT-fs (loop2): Directory bread(block 69) failed
[  215.771752][ T8219] FAT-fs (loop2): Directory bread(block 70) failed
[  215.787637][ T8219] FAT-fs (loop2): Directory bread(block 71) failed
[  215.801429][ T8219] FAT-fs (loop2): Directory bread(block 72) failed
[  215.809317][ T8219] FAT-fs (loop2): Directory bread(block 73) failed
[  216.584643][ T8218] loop4: detected capacity change from 0 to 32768
[  216.694144][ T8218] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  216.785867][ T8243] loop2: detected capacity change from 0 to 256
[  216.791276][ T8233] loop3: detected capacity change from 0 to 4096
[  216.890982][ T8218] XFS (loop4): Ending clean mount
[  216.937215][ T8243] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  216.944381][ T8218] XFS (loop4): Quotacheck needed: Please wait.
[  217.184673][ T8218] XFS (loop4): Quotacheck: Done.
[  217.239952][ T8218] XFS (loop4): User initiated shutdown received.
[  217.274517][ T8218] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[  217.385077][ T8218] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  217.561494][ T7763] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  217.917830][ T8260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.833'.
[  218.425485][ T5770] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  218.533909][ T8274] loop3: detected capacity change from 0 to 8192
[  218.548934][ T8274] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  218.575267][ T8274] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  218.585286][ T8274] REISERFS (device loop3): using ordered data mode
[  218.591961][ T8274] reiserfs: using flush barriers
[  218.627385][ T5770] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  218.629134][ T8274] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  218.637402][ T5770] usb 5-1: config 0 has no interface number 0
[  218.664844][ T5770] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  218.675548][ T5770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.684127][ T5770] usb 5-1: Product: syz
[  218.690195][ T5770] usb 5-1: Manufacturer: syz
[  218.695530][ T5770] usb 5-1: SerialNumber: syz
[  218.711600][ T5770] usb 5-1: config 0 descriptor??
[  218.747203][ T8274] REISERFS (device loop3): checking transaction log (loop3)
[  218.794903][ T8274] REISERFS (device loop3): Using r5 hash to sort names
[  218.802359][ T8274] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  218.919951][ T8258] loop2: detected capacity change from 0 to 40427
[  218.955168][ T8258] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x7
[  218.991166][ T5770] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  219.003498][ T8258] F2FS-fs (loop2): invalid crc value
[  219.017274][ T5770] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  219.039578][ T8258] F2FS-fs (loop2): Found nat_bits in checkpoint
[  219.046463][ T2132] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  219.067019][ T5770] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  219.092394][ T5770] usb 5-1: media controller created
[  219.144385][ T5770] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  219.218632][ T8258] F2FS-fs (loop2): Start checkpoint disabled!
[  219.241885][ T8258] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  219.265040][ T2132] usb 1-1: Using ep0 maxpacket: 32
[  219.290476][ T5770] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  219.298804][ T2132] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  219.344528][ T2132] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  219.394089][ T2132] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  219.455298][ T2132] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.496353][ T2132] usb 1-1: config 0 descriptor??
[  219.511457][ T8258] syz.2.832: attempt to access beyond end of device
[  219.511457][ T8258] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  219.533954][ T5770] usb 5-1: USB disconnect, device number 3
[  219.544163][ T2132] hub 1-1:0.0: USB hub found
[  219.728434][ T2132] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  219.803382][   T49] kworker/u4:3: attempt to access beyond end of device
[  219.803382][   T49] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  219.819122][   T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  219.834005][   T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  220.147250][ T2132] hid-generic 0003:046D:C31C.000A: item fetching failed at offset 0/1
[  220.172359][ T2132] hid-generic: probe of 0003:046D:C31C.000A failed with error -22
[  220.555845][ T5827] usb 1-1: USB disconnect, device number 10
[  220.618609][ T8310] loop3: detected capacity change from 0 to 4096
[  220.632827][ T8310] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  220.734842][ T8314] loop2: detected capacity change from 0 to 256
[  220.986198][ T8310] ntfs3: loop3: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record
[  221.119641][   T49] ntfs3: loop3: ino=1e, failed to parse mft record
[  222.121058][ T8318] loop2: detected capacity change from 0 to 32768
[  222.191597][ T8318] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  222.316095][ T8318] XFS (loop2): Ending clean mount
[  222.354347][ T8326] loop4: detected capacity change from 0 to 32768
[  222.491803][ T8326] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  222.558644][ T5768] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  222.658055][ T8326] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  222.701276][ T8332] loop0: detected capacity change from 0 to 32768
[  222.809073][ T8326] XFS (loop4): Starting recovery (logdev: internal)
[  222.817892][ T8332] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  222.922968][ T8326] XFS (loop4): Ending recovery (logdev: internal)
[  222.932296][ T8332] XFS (loop0): Ending clean mount
[  223.013143][ T8332] XFS (loop0): Quotacheck needed: Please wait.
[  223.170853][ T8332] XFS (loop0): Quotacheck: Done.
[  223.348210][ T8332] XFS (loop0): User initiated shutdown received.
[  223.354719][ T8332] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[  223.417316][ T7763] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  223.438342][ T8332] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  223.592232][ T8381] loop3: detected capacity change from 0 to 2048
[  223.645565][ T5766] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  223.671675][ T8381] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  223.721713][ T8379] loop2: detected capacity change from 0 to 4096
[  223.759276][ T8379] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  223.765016][ T8381] NILFS (loop3): mounting unchecked fs
[  223.855498][ T5760] udevd[5760]: incorrect nilfs2 checksum on /dev/loop3
[  223.888722][ T8381] NILFS (loop3): recovery complete
[  223.961740][ T8386] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  224.116003][ T8379] ntfs3: loop2: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record
[  224.414201][ T8391] sch_fq: defrate 0 ignored.
[  224.421194][  T144] ntfs3: loop2: ino=1e, failed to parse mft record
[  224.440380][ T8393] loop0: detected capacity change from 0 to 256
[  224.480671][ T8393] exfat: Deprecated parameter 'utf8'
[  224.489292][ T8396] loop3: detected capacity change from 0 to 256
[  224.535327][ T8393] exfat: Deprecated parameter 'utf8'
[  224.615687][ T8393] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  224.789713][ T8401] loop4: detected capacity change from 0 to 1024
[  224.946724][ T8401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.037866][ T8414] loop0: detected capacity change from 0 to 128
[  225.064096][ T8413] loop3: detected capacity change from 0 to 128
[  225.417744][ T7763] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.571796][ T8430] loop0: detected capacity change from 0 to 32768
[  226.619470][ T8430] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  226.662435][ T8430] JBD2: Ignoring recovery information on journal
[  226.739907][ T8427] loop4: detected capacity change from 0 to 32768
[  226.756908][ T8427] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.876 (8427)
[  226.784503][ T8427] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  226.796727][ T8427] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  226.806123][ T8427] BTRFS info (device loop4): force clearing of disk cache
[  226.814757][ T8427] BTRFS info (device loop4): force zlib compression, level 3
[  226.828999][ T8430] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  226.885742][ T8427] BTRFS info (device loop4): enabling auto defrag
[  226.904839][ T8423] loop3: detected capacity change from 0 to 32768
[  226.920722][ T8427] BTRFS info (device loop4): max_inline at 0
[  226.946169][ T8427] BTRFS info (device loop4): enabling disk space caching
[  226.953286][ T8427] BTRFS info (device loop4): disk space caching is enabled
[  226.991962][ T8423] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  227.155405][ T8423] XFS (loop3): Ending clean mount
[  227.183587][ T8423] XFS (loop3): Quotacheck needed: Please wait.
[  227.316702][ T8427] BTRFS info (device loop4): enabling ssd optimizations
[  227.322160][ T8423] XFS (loop3): Quotacheck: Done.
[  227.324530][ T8427] BTRFS info (device loop4): auto enabling async discard
[  227.438535][ T8427] BTRFS info (device loop4): rebuilding free space tree
[  227.546224][ T8427] BTRFS info (device loop4): disabling free space tree
[  227.553420][ T8427] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  227.605155][ T8427] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  227.636643][ T5766] ocfs2: Unmounting device (7,0) on (node local)
[  227.782476][ T5769] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  227.878443][ T8441] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  227.910292][ T7763] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  228.065069][ T8441] XFS (loop2): Ending clean mount
[  228.117084][ T8441] XFS (loop2): Quotacheck needed: Please wait.
[  228.308963][ T8441] XFS (loop2): Quotacheck: Done.
[  228.730158][ T5768] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  228.914574][ T8507] set_capacity_and_notify: 1 callbacks suppressed
[  228.914591][ T8507] loop4: detected capacity change from 0 to 64
[  229.057403][ T8507] hfs: request for non-existent node 24 in B*Tree
[  229.164837][ T8507] hfs: request for non-existent node 24 in B*Tree
[  229.185568][ T8508] hfs: request for non-existent node 25 in B*Tree
[  229.255201][ T8508] hfs: request for non-existent node 25 in B*Tree
[  230.315819][ T8511] loop2: detected capacity change from 0 to 32768
[  230.329883][ T8513] loop0: detected capacity change from 0 to 32768
[  230.338497][ T8511] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop2 scanned by syz.2.887 (8511)
[  230.360680][ T8511] BTRFS info (device loop2): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  230.380265][ T8513] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.888 (8513)
[  230.404526][ T8511] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  230.444012][ T8511] BTRFS info (device loop2): using free space tree
[  230.456355][ T8513] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  230.485326][ T8513] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  230.525335][ T8513] BTRFS info (device loop0): using free space tree
[  230.669997][ T8511] BTRFS info (device loop2): enabling ssd optimizations
[  230.695052][ T8513] BTRFS info (device loop0): enabling ssd optimizations
[  230.703003][ T8511] BTRFS info (device loop2): auto enabling async discard
[  230.723241][ T8513] BTRFS info (device loop0): auto enabling async discard
[  230.921663][ T8517] loop4: detected capacity change from 0 to 32768
[  231.051466][ T8517] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  231.100513][ T5768] BTRFS info (device loop2): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  231.111988][   T28] audit: type=1800 audit(1776947497.039:14): pid=8513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.888" name="file1" dev="loop0" ino=260 res=0 errno=0
[  231.335518][ T8517] XFS (loop4): Ending clean mount
[  231.488031][ T8517] XFS (loop4): Quotacheck needed: Please wait.
[  231.688116][ T5766] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  231.818256][ T8517] XFS (loop4): Quotacheck: Done.
[  232.300157][ T7763] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  232.941943][ T8609] loop0: detected capacity change from 0 to 8192
[  233.038857][ T8609] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  233.055176][ T8609] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  233.115231][ T8609] REISERFS (device loop0): using ordered data mode
[  233.160886][ T8609] reiserfs: using flush barriers
[  233.215926][ T8609] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  233.277828][ T8609] REISERFS (device loop0): checking transaction log (loop0)
[  233.670703][ T8609] REISERFS (device loop0): Using r5 hash to sort names
[  233.694639][ T8609] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  234.557340][ T8616] loop4: detected capacity change from 0 to 32768
[  234.599734][ T8616] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.897 (8616)
[  234.650803][ T8616] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  234.712465][ T8616] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  234.755065][ T8616] BTRFS info (device loop4): setting nodatasum
[  234.761505][ T8616] BTRFS info (device loop4): force zlib compression, level 3
[  234.836026][ T8616] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  234.846003][ T8616] BTRFS info (device loop4): use lzo compression, level 0
[  234.853192][ T8616] BTRFS info (device loop4): turning on flush-on-commit
[  234.885489][ T8616] BTRFS info (device loop4): enabling auto defrag
[  234.903513][ T8616] BTRFS info (device loop4): max_inline at 4096
[  234.918976][ T8616] BTRFS info (device loop4): using free space tree
[  234.998715][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.914'.
[  235.078850][ T8616] BTRFS info (device loop4): enabling ssd optimizations
[  235.746016][ T7763] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  235.822501][ T8698] loop2: detected capacity change from 0 to 256
[  236.065195][ T8703] 8021q: adding VLAN 0 to HW filter on device bond1
[  236.475268][ T8714] program syz.2.923 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  236.523564][ T8717] netlink: 'syz.4.925': attribute type 11 has an invalid length.
[  236.557608][ T8717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.925'.
[  237.115122][ T2132] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  237.325633][ T2132] usb 3-1: Using ep0 maxpacket: 8
[  237.338925][ T2132] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  237.375152][ T2132] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  237.414208][ T2132] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  237.440004][ T2132] usb 3-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  237.452349][ T2132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.465910][ T2132] usb 3-1: config 0 descriptor??
[  237.818689][ T8735] loop3: detected capacity change from 0 to 32768
[  237.830345][ T8735] XFS: noikeep mount option is deprecated.
[  237.881898][ T8735] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  237.908771][ T2132] dragonrise 0003:0079:0006.000B: unbalanced collection at end of report description
[  237.928531][ T2132] dragonrise 0003:0079:0006.000B: parse failed
[  237.945636][ T2132] dragonrise: probe of 0003:0079:0006.000B failed with error -22
[  238.126139][ T2132] usb 3-1: USB disconnect, device number 12
[  238.171772][ T8735] XFS (loop3): Ending clean mount
[  238.217362][ T8735] XFS (loop3): Quotacheck needed: Please wait.
[  238.311228][ T8735] XFS (loop3): Quotacheck: Done.
[  238.616431][ T5769] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  238.636918][ T8762] loop0: detected capacity change from 0 to 4096
[  238.787844][ T8762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.146778][ T5766] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.770494][ T8794] loop4: detected capacity change from 0 to 512
[  239.778654][ T8794] EXT4-fs: inline encryption not supported
[  239.784538][ T8794] EXT4-fs: inline encryption not supported
[  239.803590][ T8794] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  239.883095][ T8794] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  239.904012][ T8794] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.951: bg 0: block 248: padding at end of block bitmap is not set
[  239.931423][ T8794] Quota error (device loop4): write_blk: dquota write failed
[  239.943439][ T8794] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  239.958364][ T8794] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.951: Failed to acquire dquot type 1
[  239.999929][ T8794] EXT4-fs (loop4): 1 truncate cleaned up
[  240.011089][ T8794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  240.025537][ T5770] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  240.116929][ T8794] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0008-000000000000 ro.
[  240.202118][ T7763] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  240.256062][ T5770] usb 3-1: Using ep0 maxpacket: 32
[  240.269767][ T5770] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  240.299863][ T5770] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  240.324087][ T5770] usb 3-1: config 0 interface 0 has no altsetting 0
[  240.340455][ T5770] usb 3-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00
[  240.351131][ T5770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.366007][ T5770] usb 3-1: config 0 descriptor??
[  240.683549][ T8813] loop0: detected capacity change from 0 to 256
[  240.716441][ T8813] exfat: Deprecated parameter 'utf8'
[  240.752580][ T8813] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  240.846924][ T8813] netlink: 116 bytes leftover after parsing attributes in process `syz.0.959'.
[  241.017803][ T5770] usb 3-1: language id specifier not provided by device, defaulting to English
[  241.145837][ T5808] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  241.225256][ T5770] uclogic 0003:5543:3031.000C: failed retrieving Huion firmware version: -71
[  241.254404][ T5770] uclogic 0003:5543:3031.000C: failed probing parameters: -71
[  241.282141][ T5770] uclogic: probe of 0003:5543:3031.000C failed with error -71
[  241.302505][ T5770] usb 3-1: USB disconnect, device number 13
[  241.345831][ T5808] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  241.378353][ T5808] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  241.396634][ T5808] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  241.415030][ T5808] usb 4-1: config 0 interface 0 has no altsetting 0
[  241.433535][ T5808] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  241.442995][ T5808] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  241.476399][ T5808] usb 4-1: config 0 interface 0 has no altsetting 0
[  241.498883][ T5808] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  241.525273][ T5808] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  241.548462][ T5808] usb 4-1: config 0 interface 0 has no altsetting 0
[  241.576372][ T5808] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  241.585716][ T5808] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  241.597122][ T5808] usb 4-1: config 0 interface 0 has no altsetting 0
[  241.606626][ T5808] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  241.625065][ T5808] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  241.645541][ T5808] usb 4-1: config 0 interface 0 has no altsetting 0
[  241.657150][ T5808] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  241.687425][ T5808] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  241.709434][ T5808] usb 4-1: config 0 interface 0 has no altsetting 0
[  241.739226][ T5808] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  241.749151][ T5808] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  241.761684][ T5808] usb 4-1: config 0 interface 0 has no altsetting 0
[  241.780974][ T5808] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  241.798738][ T5808] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  241.817643][ T5808] usb 4-1: config 0 interface 0 has no altsetting 0
[  241.833836][ T5808] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  241.852320][ T5808] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  241.876111][ T5808] usb 4-1: Product: syz
[  241.880455][ T5808] usb 4-1: Manufacturer: syz
[  241.897200][ T5808] usb 4-1: SerialNumber: syz
[  241.904557][ T5808] usb 4-1: config 0 descriptor??
[  241.926235][ T5808] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[  242.322518][ T5770] usb 4-1: USB disconnect, device number 11
[  242.350278][ T5770] yurex 4-1:0.0: USB YUREX #0 now disconnected
[  242.484745][ T8844] loop7: detected capacity change from 0 to 7
[  242.506201][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  242.515672][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  242.526397][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  242.535837][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  242.545747][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  242.555006][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  242.563393][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  242.572993][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  242.582584][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  242.592008][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  242.602055][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  242.611463][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  242.620179][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  242.629734][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  242.638110][ T8844] ldm_validate_partition_table(): Disk read failed.
[  242.662453][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  242.671815][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  242.693041][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  242.700930][ T8840] loop2: detected capacity change from 0 to 32768
[  242.702888][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  242.722525][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  242.722632][ T8840] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.971 (8840)
[  242.731957][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  242.749043][ T8844] Dev loop7: unable to read RDB block 0
[  242.767407][ T8844]  loop7: unable to read partition table
[  242.773643][ T8844] loop7: partition table beyond EOD, truncated
[  242.784889][ T8844] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰üg¾CêjÌ–ã¢P=×!MX‹ºÐ	œëÜ%õ«`Éæ�˜Èµ4FLQkÝŠ5) failed (rc=-5)
[  242.824142][ T8845] ldm_validate_partition_table(): Disk read failed.
[  242.837749][ T8845] Dev loop7: unable to read RDB block 0
[  242.847655][ T8845]  loop7: unable to read partition table
[  242.853910][ T8845] loop7: partition table beyond EOD, truncated
[  242.873363][ T8840] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  242.925838][ T8840] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  242.934639][ T8840] BTRFS info (device loop2): setting nodatasum
[  242.966361][ T5808] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  242.982550][ T8840] BTRFS info (device loop2): force zlib compression, level 3
[  243.017337][ T8840] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  243.045129][ T8840] BTRFS info (device loop2): use lzo compression, level 0
[  243.065058][ T8840] BTRFS info (device loop2): turning on flush-on-commit
[  243.075417][ T8840] BTRFS info (device loop2): enabling auto defrag
[  243.082057][ T8840] BTRFS info (device loop2): max_inline at 4096
[  243.116341][ T8840] BTRFS info (device loop2): using free space tree
[  243.188313][ T5808] usb 1-1: Using ep0 maxpacket: 32
[  243.216439][ T5808] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  243.225839][ T5808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.236703][ T5808] usb 1-1: config 0 descriptor??
[  243.305015][ T8840] BTRFS info (device loop2): enabling ssd optimizations
[  243.318360][ T8869] loop4: detected capacity change from 0 to 512
[  243.365292][ T8869] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  243.462557][ T5808] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  243.481412][ T5808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  243.505688][ T5808] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  243.513221][ T5808] usb 1-1: media controller created
[  243.517089][ T8869] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  243.538290][ T5808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  243.595573][ T8869] Quota error (device loop4): write_blk: dquota write failed
[  243.604104][ T8869] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5
[  243.657873][ T8869] Quota error (device loop4): write_blk: dquota write failed
[  243.693964][ T5808] az6027: usb out operation failed. (-71)
[  243.707465][ T8869] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  243.735148][ T5808] az6027: usb out operation failed. (-71)
[  243.741080][ T5808] stb0899_attach: Driver disabled by Kconfig
[  243.750225][ T5768] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  243.755381][ T8869] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.977: Failed to acquire dquot type 1
[  243.772364][ T5808] az6027: no front-end attached
[  243.772364][ T5808] 
[  243.789478][ T5808] az6027: usb out operation failed. (-71)
[  243.799446][ T5808] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  243.814761][ T8869] EXT4-fs (loop4): 1 truncate cleaned up
[  243.829906][ T5808] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21
[  243.843351][ T8869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.875392][ T5808] dvb-usb: schedule remote query interval to 400 msecs.
[  243.924340][ T5808] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  243.979911][ T5808] usb 1-1: USB disconnect, device number 11
[  244.140411][ T8869] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  244.205311][ T8869] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  244.241850][ T8885] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  244.319932][ T8885] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  244.337345][ T5808] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  244.471997][ T8889] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  244.490346][ T8889] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  244.490639][ T7763] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.025014][ T8895] loop2: detected capacity change from 0 to 8192
[  245.055425][   T27] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  245.255308][   T27] usb 1-1: Using ep0 maxpacket: 16
[  245.276704][   T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  245.318422][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  245.402326][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  245.427722][   T27] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  245.440092][   T27] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  245.457684][   T27] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  245.467178][   T27] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  245.485259][   T27] usb 1-1: Manufacturer: syz
[  245.496867][   T27] usb 1-1: config 0 descriptor??
[  245.593918][ T8905] loop3: detected capacity change from 0 to 8192
[  245.936533][   T27] rc_core: IR keymap rc-hauppauge not found
[  245.942675][   T27] Registered IR keymap rc-empty
[  245.954896][ T8894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.969330][   T27] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  245.985635][ T8894] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  246.019563][   T27] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  246.086612][   T27] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  246.122802][   T27] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input22
[  246.188970][   T27] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  246.249282][   T27] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  246.295227][   T27] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  246.326427][   T27] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  246.365290][   T27] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  246.400903][   T27] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  246.435342][   T27] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  246.495270][   T27] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  246.535259][   T27] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  246.580310][   T27] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  246.627088][   T27] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[  246.644865][   T27] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  246.710885][   T27] usb 1-1: USB disconnect, device number 12
[  247.205375][   T23] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  247.371983][ T8934] loop3: detected capacity change from 0 to 1024
[  247.418065][   T23] usb 3-1: Using ep0 maxpacket: 32
[  247.438728][   T23] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  247.468271][ T8934] hfsplus: can't free extent
[  247.479894][   T23] usb 3-1: config 0 interface 0 has no altsetting 0
[  247.505324][   T23] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  247.547706][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.567323][   T23] usb 3-1: config 0 descriptor??
[  248.237585][   T23] usbhid 3-1:0.0: can't add hid device: -71
[  248.243856][   T23] usbhid: probe of 3-1:0.0 failed with error -71
[  248.289990][   T23] usb 3-1: USB disconnect, device number 14
[  248.702900][ T8966] loop3: detected capacity change from 0 to 1024
[  248.796304][ T8966] hfsplus: walked past end of dir
[  249.026454][ T8973] loop3: detected capacity change from 0 to 1024
[  249.554568][ T8981] loop4: detected capacity change from 0 to 512
[  249.573062][ T8981] EXT4-fs: Ignoring removed orlov option
[  249.605160][ T8981] EXT4-fs (loop4): Test dummy encryption mode enabled
[  249.622871][ T8981] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  249.692322][ T8981] EXT4-fs (loop4): 1 truncate cleaned up
[  249.751130][ T8981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.770949][ T8969] loop0: detected capacity change from 0 to 32768
[  249.799821][ T8971] loop2: detected capacity change from 0 to 32768
[  249.817500][ T8969] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1015 (8969)
[  249.904031][ T8971] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  250.012718][ T8969] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  250.072016][ T8969] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  250.073179][ T8971] XFS (loop2): Ending clean mount
[  250.135270][ T8969] BTRFS info (device loop0): using free space tree
[  250.239386][ T5768] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  250.351865][ T8969] BTRFS info (device loop0): enabling ssd optimizations
[  250.378462][ T8969] BTRFS info (device loop0): auto enabling async discard
[  250.468498][ T8981] fscrypt (loop4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  250.522886][ T8996] overlayfs: failed to resolve './bus': -2
[  250.666409][ T5766] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  250.777769][ T7763] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.961838][ T9035] program syz.2.1025 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  251.460588][ T9047] loop4: detected capacity change from 0 to 256
[  251.551997][ T9047] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d)
[  251.560873][ T9052] loop0: detected capacity change from 0 to 16
[  251.647209][ T9052] erofs: (device loop0): mounted with root inode @ nid 36.
[  251.949125][ T9061] loop4: detected capacity change from 0 to 256
[  252.038644][ T9061] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d)
[  252.664696][ T9085] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1049'.
[  252.735510][ T5827] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  252.751073][ T9087] xt_hashlimit: size too large, truncated to 1048576
[  252.845164][   T23] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  252.948387][ T5827] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  252.978437][ T5827] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  252.996394][ T5827] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  253.014126][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  253.033365][ T5827] usb 1-1: SerialNumber: syz
[  253.049206][   T23] usb 5-1: unable to get BOS descriptor or descriptor too short
[  253.063469][   T23] usb 5-1: not running at top speed; connect to a high speed hub
[  253.089339][   T23] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f
[  253.107276][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.124620][   T23] usb 5-1: Product: syz
[  253.131661][   T23] usb 5-1: Manufacturer: syz
[  253.136762][   T23] usb 5-1: SerialNumber: syz
[  253.288263][ T5827] usb 1-1: 0:2 : does not exist
[  253.339166][ T5827] usb 1-1: USB disconnect, device number 13
[  253.360873][   T23] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  253.399647][ T7752] udevd[7752]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  253.557314][ T9091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1051'.
[  253.573374][ T9091] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1051'.
[  253.603774][ T9091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1051'.
[  253.959693][   T23] gp8psk: usb out operation failed.
[  253.993362][   T23] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  254.025164][   T23] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19)
[  254.057918][   T23] usb 5-1: USB disconnect, device number 4
[  255.040025][ T9099] loop0: detected capacity change from 0 to 32768
[  255.075101][ T9099] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.1055 (9099)
[  255.150797][ T9099] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  255.169029][ T9099] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  255.192356][ T9099] BTRFS info (device loop0): enabling disk space caching
[  255.230063][ T9099] BTRFS info (device loop0): force clearing of disk cache
[  255.245095][ T9099] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  255.275769][ T9099] BTRFS info (device loop0): use zstd compression, level 3
[  255.283158][ T9099] BTRFS info (device loop0): disk space caching is enabled
[  255.424841][ T9099] BTRFS info (device loop0): enabling ssd optimizations
[  255.464962][ T9099] BTRFS info (device loop0): auto enabling async discard
[  255.503100][ T9099] BTRFS info (device loop0): rebuilding free space tree
[  255.532384][ T9099] BTRFS info (device loop0): disabling free space tree
[  255.542249][ T9099] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  255.558529][ T9099] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  255.959659][ T5766] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  256.211083][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  256.220997][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  256.258646][ T9130] loop4: detected capacity change from 0 to 128
[  256.282106][ T9132] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1060'.
[  256.325031][ T9130] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  256.757088][ T9122] loop3: detected capacity change from 0 to 32768
[  256.881644][ T9122] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  257.066559][ T9122] XFS (loop3): Ending clean mount
[  257.368146][ T9153] loop4: detected capacity change from 0 to 1024
[  257.390662][ T5769] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  258.463574][ T9155] loop0: detected capacity change from 0 to 32768
[  258.515809][ T9155] (syz.0.1069,9155,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  258.555838][ T9155] (syz.0.1069,9155,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  258.639179][ T9155] JBD2: Ignoring recovery information on journal
[  258.747958][ T9159] loop3: detected capacity change from 0 to 40427
[  258.802259][ T9159] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  258.820792][ T9155] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  258.831343][ T9159] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  258.872356][ T9159] F2FS-fs (loop3): invalid crc value
[  259.171378][ T9159] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  259.205075][ T9159] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  259.417122][   T28] audit: type=1800 audit(1776947525.349:15): pid=9159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1068" name="file1" dev="loop3" ino=10 res=0 errno=0
[  259.437762][    C1] vkms_vblank_simulate: vblank timer overrun
[  259.608575][ T5766] ocfs2: Unmounting device (7,0) on (node local)
[  259.665233][ T5769] syz-executor: attempt to access beyond end of device
[  259.665233][ T5769] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  259.724078][ T5769] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  261.074674][ T9185] loop4: detected capacity change from 0 to 32768
[  261.074860][ T9189] loop0: detected capacity change from 0 to 32768
[  261.121592][ T9185] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  261.145230][ T9189] JBD2: Ignoring recovery information on journal
[  261.197935][ T9185] JBD2: Ignoring recovery information on journal
[  261.213937][ T9206] loop3: detected capacity change from 0 to 1024
[  261.249063][ T9189] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  261.332755][ T9185] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  261.484857][   T34] hfsplus: b-tree write err: -5, ino 25
[  261.515524][   T34] hfsplus: b-tree write err: -5, ino 4
[  261.521190][   T34] hfsplus: b-tree write err: -5, ino 2
[  261.564864][   T34] hfsplus: b-tree write err: -5, ino 20
[  261.604018][   T28] audit: type=1326 audit(1776947527.539:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4339c819 code=0x7fc00000
[  261.672456][ T9209] 
[  261.674864][ T9209] ======================================================
[  261.681927][ T9209] WARNING: possible circular locking dependency detected
[  261.688979][ T9209] syzkaller #0 Not tainted
[  261.693587][ T9209] ------------------------------------------------------
[  261.700720][ T9209] syz.4.1078/9209 is trying to acquire lock:
[  261.706746][ T9209] ffff8880595b1818 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_xattr_set+0xba4/0x13e0
[  261.718958][ T9209] 
[  261.718958][ T9209] but task is already holding lock:
[  261.726479][ T9209] ffff88805da506f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0
[  261.736030][ T9209] 
[  261.736030][ T9209] which lock already depends on the new lock.
[  261.736030][ T9209] 
[  261.746470][ T9209] 
[  261.746470][ T9209] the existing dependency chain (in reverse order) is:
[  261.755669][ T9209] 
[  261.755669][ T9209] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}:
[  261.763733][ T9209]        down_read+0x46/0x2e0
[  261.768526][ T9209]        ocfs2_init_acl+0x30a/0x770
[  261.773943][ T9209]        ocfs2_mknod+0x140f/0x2300
[  261.779088][ T9209]        ocfs2_mkdir+0x196/0x430
[  261.784046][ T9209]        vfs_mkdir+0x296/0x440
[  261.788916][ T9209]        do_mkdirat+0x1dc/0x450
[  261.793865][ T9209]        __x64_sys_mkdirat+0x89/0xa0
[  261.799156][ T9209]        do_syscall_64+0x55/0xa0
[  261.804283][ T9209]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  261.810806][ T9209] 
[  261.810806][ T9209] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  261.819439][ T9209]        down_read+0x46/0x2e0
[  261.824125][ T9209]        ocfs2_start_trans+0x3a8/0x6f0
[  261.829595][ T9209]        ocfs2_mknod+0xf1d/0x2300
[  261.834703][ T9209]        ocfs2_create+0x196/0x430
[  261.839738][ T9209]        path_openat+0x12a0/0x3230
[  261.845209][ T9209]        do_filp_open+0x1f5/0x430
[  261.850415][ T9209]        do_sys_openat2+0x134/0x1d0
[  261.855631][ T9209]        __x64_sys_open+0x11f/0x140
[  261.860846][ T9209]        do_syscall_64+0x55/0xa0
[  261.865882][ T9209]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  261.872356][ T9209] 
[  261.872356][ T9209] -> #1 (sb_internal#6){.+.+}-{0:0}:
[  261.880032][ T9209]        ocfs2_start_trans+0x2a9/0x6f0
[  261.885588][ T9209]        ocfs2_remove_btree_range+0x849/0x15e0
[  261.891760][ T9209]        ocfs2_commit_truncate+0xb7f/0x2280
[  261.897677][ T9209]        ocfs2_evict_inode+0x1926/0x41e0
[  261.903330][ T9209]        evict+0x4ca/0x8d0
[  261.907759][ T9209]        ocfs2_dentry_iput+0x24e/0x390
[  261.913331][ T9209]        __dentry_kill+0x431/0x650
[  261.918473][ T9209]        dentry_kill+0xb8/0x290
[  261.923345][ T9209]        dput+0xfe/0x1e0
[  261.927637][ T9209]        do_renameat2+0x8f9/0xce0
[  261.932697][ T9209]        __x64_sys_rename+0x86/0x90
[  261.938016][ T9209]        do_syscall_64+0x55/0xa0
[  261.943007][ T9209]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  261.949615][ T9209] 
[  261.949615][ T9209] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}:
[  261.960164][ T9209]        __lock_acquire+0x2df1/0x7d40
[  261.965728][ T9209]        lock_acquire+0x19e/0x420
[  261.970935][ T9209]        down_write+0x97/0x200
[  261.975887][ T9209]        ocfs2_xattr_set+0xba4/0x13e0
[  261.981292][ T9209]        __vfs_setxattr+0x431/0x470
[  261.986769][ T9209]        __vfs_setxattr_noperm+0x12d/0x5e0
[  261.992598][ T9209]        vfs_setxattr+0x16b/0x2f0
[  261.997724][ T9209]        path_setxattr+0x3f3/0x5d0
[  262.002975][ T9209]        __x64_sys_lsetxattr+0xb8/0xd0
[  262.008709][ T9209]        do_syscall_64+0x55/0xa0
[  262.013653][ T9209]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  262.020077][ T9209] 
[  262.020077][ T9209] other info that might help us debug this:
[  262.020077][ T9209] 
[  262.030311][ T9209] Chain exists of:
[  262.030311][ T9209]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  262.030311][ T9209] 
[  262.047768][ T9209]  Possible unsafe locking scenario:
[  262.047768][ T9209] 
[  262.055221][ T9209]        CPU0                    CPU1
[  262.060684][ T9209]        ----                    ----
[  262.066054][ T9209]   lock(&oi->ip_xattr_sem);
[  262.070775][ T9209]                                lock(&journal->j_trans_barrier);
[  262.078770][ T9209]                                lock(&oi->ip_xattr_sem);
[  262.085892][ T9209]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5);
[  262.093206][ T9209] 
[  262.093206][ T9209]  *** DEADLOCK ***
[  262.093206][ T9209] 
[  262.101525][ T9209] 3 locks held by syz.4.1078/9209:
[  262.106638][ T9209]  #0: ffff88802677e418 (sb_writers#26){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  262.115982][ T9209]  #1: ffff88805da509d8 (&sb->s_type->i_mutex_key#33){+.+.}-{3:3}, at: vfs_setxattr+0x144/0x2f0
[  262.126595][ T9209]  #2: ffff88805da506f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0
[  262.136576][ T9209] 
[  262.136576][ T9209] stack backtrace:
[  262.143415][ T9209] CPU: 0 PID: 9209 Comm: syz.4.1078 Not tainted syzkaller #0
[  262.151539][ T9209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  262.162084][ T9209] Call Trace:
[  262.165479][ T9209]  <TASK>
[  262.168426][ T9209]  dump_stack_lvl+0x18c/0x250
[  262.173219][ T9209]  ? load_image+0x420/0x420
[  262.177741][ T9209]  ? show_regs_print_info+0x20/0x20
[  262.183373][ T9209]  ? print_circular_bug+0x12b/0x1a0
[  262.190125][ T9209]  check_noncircular+0x2fc/0x400
[  262.195592][ T9209]  ? look_up_lock_class+0x75/0x140
[  262.200839][ T9209]  ? print_deadlock_bug+0x5d0/0x5d0
[  262.206226][ T9209]  ? lockdep_lock+0xf5/0x230
[  262.211007][ T9209]  ? lockdep_unlock+0x146/0x2e0
[  262.215867][ T9209]  ? _find_first_zero_bit+0xd3/0x100
[  262.221164][ T9209]  __lock_acquire+0x2df1/0x7d40
[  262.226053][ T9209]  ? ocfs2_inode_lock_full_nested+0xcdf/0x1b70
[  262.232251][ T9209]  ? _raw_spin_unlock+0x40/0x40
[  262.237257][ T9209]  ? verify_lock_unused+0x140/0x140
[  262.242907][ T9209]  ? stack_trace_save+0xaa/0x100
[  262.247897][ T9209]  lock_acquire+0x19e/0x420
[  262.252531][ T9209]  ? ocfs2_xattr_set+0xba4/0x13e0
[  262.257681][ T9209]  ? __might_sleep+0xe0/0xe0
[  262.262298][ T9209]  ? read_lock_is_recursive+0x20/0x20
[  262.267685][ T9209]  ? _raw_spin_unlock+0x28/0x40
[  262.272743][ T9209]  ? ocfs2_inode_lock_tracker+0x437/0x700
[  262.278606][ T9209]  ? ocfs2_xattr_block_find+0x15b/0x4d0
[  262.284363][ T9209]  down_write+0x97/0x200
[  262.288630][ T9209]  ? ocfs2_xattr_set+0xba4/0x13e0
[  262.293688][ T9209]  ? down_read_killable+0x340/0x340
[  262.299158][ T9209]  ? ocfs2_xattr_ibody_find+0xcb/0x7c0
[  262.304650][ T9209]  ocfs2_xattr_set+0xba4/0x13e0
[  262.309724][ T9209]  ? __ocfs2_xattr_set_handle+0xf40/0xf40
[  262.315468][ T9209]  ? __lock_acquire+0x1347/0x7d40
[  262.320975][ T9209]  ? verify_lock_unused+0x140/0x140
[  262.326363][ T9209]  ? ____kasan_slab_free+0x126/0x1e0
[  262.331661][ T9209]  ? aa_get_newest_label+0xfd/0x5c0
[  262.336878][ T9209]  ? end_current_label_crit_section+0x170/0x170
[  262.343239][ T9209]  ? posix_xattr_acl+0x93/0xb0
[  262.348017][ T9209]  ? ocfs2_xattr_trusted_get+0x40/0x40
[  262.353667][ T9209]  __vfs_setxattr+0x431/0x470
[  262.358379][ T9209]  __vfs_setxattr_noperm+0x12d/0x5e0
[  262.363732][ T9209]  vfs_setxattr+0x16b/0x2f0
[  262.368270][ T9209]  ? xattr_permission+0x470/0x470
[  262.373328][ T9209]  ? __mnt_want_write+0x223/0x2a0
[  262.378383][ T9209]  ? path_setxattr+0x3a1/0x5d0
[  262.383195][ T9209]  path_setxattr+0x3f3/0x5d0
[  262.387844][ T9209]  ? simple_xattrs_free+0x150/0x150
[  262.393282][ T9209]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  262.399485][ T9209]  ? lock_chain_count+0x20/0x20
[  262.404374][ T9209]  __x64_sys_lsetxattr+0xb8/0xd0
[  262.409427][ T9209]  do_syscall_64+0x55/0xa0
[  262.413968][ T9209]  ? clear_bhb_loop+0x40/0x90
[  262.418768][ T9209]  ? clear_bhb_loop+0x40/0x90
[  262.423592][ T9209]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  262.429621][ T9209] RIP: 0033:0x7fc549f9c819
[  262.434174][ T9209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  262.454244][ T9209] RSP: 002b:00007fc5481d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[  262.462681][ T9209] RAX: ffffffffffffffda RBX: 00007fc54a216090 RCX: 00007fc549f9c819
[  262.470754][ T9209] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 00002000000001c0
[  262.479017][ T9209] RBP: 00007fc54a032c91 R08: 0000000000000000 R09: 0000000000000000
[  262.487081][ T9209] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000
[  262.495248][ T9209] R13: 00007fc54a216128 R14: 00007fc54a216090 R15: 00007ffd285a0b58
[  262.503413][ T9209]  </TASK>
[  262.533680][   T28] audit: type=1326 audit(1776947527.539:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ffa4339c819 code=0x7fc00000
[  262.569851][   T28] audit: type=1326 audit(1776947527.539:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4339c819 code=0x7fc00000
[  262.592643][   T28] audit: type=1326 audit(1776947527.539:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4339c819 code=0x7fc00000
[  262.615814][   T28] audit: type=1326 audit(1776947527.539:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4339c819 code=0x7fc00000
[  262.638811][   T28] audit: type=1326 audit(1776947527.539:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4339c819 code=0x7fc00000
[  262.665007][   T28] audit: type=1326 audit(1776947527.539:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4339c819 code=0x7fc00000
[  262.690128][   T28] audit: type=1326 audit(1776947527.539:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4339c819 code=0x7fc00000
[  262.716952][   T28] audit: type=1326 audit(1776947527.539:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9196 comm="syz.2.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa4339c819 code=0x7fc00000
[  262.776961][ T5766] ocfs2: Unmounting device (7,0) on (node local)
[  262.785196][ T9211] batadv_slave_0: entered promiscuous mode
[  262.792907][ T9211] batman_adv: batadv0: Adding interface: macvtap1
[  262.829016][ T9211] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  262.854653][    C1] vkms_vblank_simulate: vblank timer overrun
[  262.870334][ T7763] ocfs2: Unmounting device (7,4) on (node local)
[  262.877042][ T9211] batman_adv: batadv0: Interface activated: macvtap1