last executing test programs:

1m26.299703801s ago: executing program 1 (id=1330):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x11, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1m26.145808898s ago: executing program 1 (id=1331):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$eJzs3c9PXFsdAPDvveB7gO9V+t5bPBMTJ/ElGjUEulJpYktpKbRYU21j3EwHmLbowDQwGBdd4K6JKxMXjYtGE3esGhZu65/gxmVdN9GFGxOTRszMXOjcy4xMGwZs3+ez4DDnN3zvPZy7uJw007i/ulla3SxV1kv15bub50q/qNe21qqRDt5wROTHj+2THJ/XMIjr5BSvvc+9G5eu/Oj2uYg/r/z1xd7e3l40DUdXUx3f/+ufD5c7031poU2z3+69HZefRsQnh+bVNBQRP/lTRBIRF7O8mSwdjYgz0S67/fDXd0rHNJunz6vnyy8XH+1Of7aw82S398+eRPyu9uVv31v7+9eGpv/2zWMaHgAAAAAAAAAAAAAAAACAt9zczRu3fjg5Fc+SGN5JDr+vO5elvd6P3Ts2Xx38DwsAAAAAAAAAAAAAAAAAAAD/p169/19KPury/v9sll7o0X7v+4OfI4Mz/4Mbs5cnp7Lz35ND5d/Jsv5xcSjOdjn3vXj++8VC++7nvx8e503tz29/3PFI0pGO8vFI04mJiD9kB79/moyltfpm41t361vrK8c2jbdWPv7t0/tz0ckO9O83/jOF/gd//v/Hh66m5uc7x3eJvdPy8R/qWe+Pv0r6iv+lfLPHA5p2h48HP8Q7LB//4VbeaGeF99tJM/6/GT46/rOF/gd1/5+JiFLSnGsptwI09zDN/F77FfLy8f9CKy+3dGa/yF73/78L8b9c6P+01v/t4h8iusrH/71W3kiuRnsD0Ip/evT9f6XQ/2nEvzn/bX//+5KPf7bYD+eqtH6T/a7/c4X+u8S/9ybjNdxKs3meSXJXwE7Szu/1/+rIy8d/5FD5q+e/tK/939VC+5N6/tsft/n8N9HxHPKNpP38R3f5+I/2rNfv/T9faDfo9f9Ca//Hm8rHf6yVl987j7e+9hv/hUL/g4p/a1cysh//V+vJf95v5//e/q8v+fh/sZ2ZdtbYbn1t7f+So/f/1wr9n8b+rzn/7XSwo74r8vH/oGe9Zvz/ksV97H/c/9cL7QYf/4hJe/03lo//hz3rte7/kaPX/8VCu0HH/+uD7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLTCTpeORpBO5z2k6MRFxKfv8aYwlS5WV8lKtvvzzzYjZLL8UHyX3avWlSq28ul5fqZYrtVp9OeJyVv5JjCSbtXqjvFZ5cOWgr9HkfrWy0ViqVhoRMZflfyU+3O9rabWxVnkQEVcPyr6U1jce3K+sl1dWN743OTk5GfMHczibVH/ZqK432qO3SyMWDtqOJx2TaxVfO5jLB8nP6lsb65VaK/96R5tafblS62izmJX9Ns4mjY2t9eVKo1qu1e/tj3eaLmTp7PzNH9+8PnWo/E7STmdOdloAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvKZn0999HBHD7U9pRJSS5jfv9aj/9Hn1fPnl4qPd6c8Wdp7svoiI5CTnCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCLt2jRBAEYQCtbgUNPYbRMJOZjiiigSOCJ9BjeBg9ipfwDgYGpgbLwm4PLPMDy8Amy3tJQX9UV0MXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBs7p67l6e6iUhxvjqL+Hr7/tnNH0r9uJ7uP1kw83RBD4dx/9jd3NZN+fc0yq/K0W+bN+n/3/trTNTe52BPhvu0NZ4zNLdvc+/r515EylVEtCW/TDlX1X53AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8raPo2wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0yJHBw=")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x820008, 0x0, 0xda, 0x0, &(0x7f0000000280))
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x70820a2, 0x0, 0x1, 0x0, &(0x7f0000000000))
rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1m24.887393189s ago: executing program 1 (id=1337):
mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff)
mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0)
writev(r0, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009a0)='4 ', 0x2}, {&(0x7f00000009c0)='0 3', 0x3}], 0x3)

1m23.648207178s ago: executing program 1 (id=1349):
mkdir(&(0x7f0000000140)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1000, 0x0)

1m23.461920867s ago: executing program 1 (id=1351):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000080)={[{@discard}, {@errors_continue}, {@nobarrier}, {@nobarrier}]}, 0x3, 0xda4, &(0x7f0000001c40)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
lseek(r0, 0x1, 0x3)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

1m23.015950948s ago: executing program 1 (id=1355):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$nfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x861, 0x0)

1m22.77033618s ago: executing program 32 (id=1355):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$nfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x861, 0x0)

4.457054276s ago: executing program 0 (id=2015):
r0 = socket(0x2000000015, 0x80005, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)

4.252316126s ago: executing program 0 (id=2018):
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x22c82, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x3, 0x2})

4.082654925s ago: executing program 0 (id=2020):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000080)={0x6, 0x118, 0xfa00, {{0x2, 0x5, "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", 0x10, 0xf, 0xf8, 0xfe, 0xf, 0x0, 0xe, 0x1}, r2}}, 0x120)

3.936569861s ago: executing program 0 (id=2021):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x2, 0x0, [{0x80000000, 0x7, 0x7, 0x1, 0x6, 0x7aa, 0x1}, {0x0, 0x0, 0x1, 0xa2, 0x1ff, 0x3}]})

3.683587244s ago: executing program 0 (id=2022):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r0, &(0x7f0000000100)='0fc5:1227:fd', 0xc)

3.488269223s ago: executing program 0 (id=2023):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000280)={r1, 0x5, 0x4000003})

2.262015992s ago: executing program 2 (id=2031):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000200)={0x3, 0x0, [{0x76b48f433226e54c, 0x5, 0x4, 0x0, 0xcdd, 0x2, 0x810000}, {0xc0000000, 0x0, 0x4, 0x0, 0x0, 0x1}, {0xd, 0x3, 0x6, 0x10, 0x0, 0xa, 0x7fe}]})

2.030000493s ago: executing program 2 (id=2033):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x6, 0x8001, 0x9, 0xe, 0xe, "100056f200"})
ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8004)
openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x6001, 0x0)

1.994766925s ago: executing program 3 (id=2034):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000480)={[{@fat=@nfs}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@rodir}, {@shortname_win95}, {@uni_xlateno}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@fat=@check_normal}, {@fat=@codepage={'codepage', 0x3d, '861'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@numtail}, {@rodir}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@utf8no}]}, 0x2, 0x289, &(0x7f00000001c0)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)

1.767756325s ago: executing program 2 (id=2035):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
read$alg(r1, &(0x7f0000000100)=""/122, 0x7a)

1.733078327s ago: executing program 3 (id=2037):
unshare(0x2020600)
io_uring_setup(0x3a52, &(0x7f0000001540)={0x0, 0x3b1e, 0x1, 0x1, 0xfffffffe})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1\x00', &(0x7f0000000440)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x5, 0x3, 0x9, 0xa4, 0xffb, 0x5, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x9, 0x101, 0x1080, 0x8, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x9, 0x4, 0x2, 0x762, 0x3, 0x80, 0x3, 0x2b12, 0x100, 0x6, 0x1c06, 0xb, 0x0, 0xbed4, 0x8, 0x80000fe, 0x3, 0x800000, 0x11000, 0x80000000, 0x2f, 0x79b, 0x0, 0x1, 0x7d, 0x8, 0x2, 0x7, 0xd, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x6, 0x180000, 0x400a, 0x8b, 0x5, 0x2af, 0x0, 0x5, 0x5, 0x6, 0x8, 0x9, 0xb, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1003, 0x8, 0xffff, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x7ffffffe, 0xfdffffff, 0xfffffffe, 0x6, 0x84, 0x800100, 0x5, 0x255, 0x81, 0xb, 0x5, 0x20006, 0x5, 0xffffffff, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x7, 0x1, 0x0, 0x9, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

1.619754803s ago: executing program 2 (id=2039):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010)

1.480584259s ago: executing program 3 (id=2040):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.events\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000340)={0x0, 0x2, 0x2, 0x216})
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x20006, 0x1})

1.385543934s ago: executing program 2 (id=2042):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', <r2=>0x0})
bind$can_raw(r0, &(0x7f0000000040)={0x1d, r2}, 0x10)

1.346216666s ago: executing program 5 (id=2043):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x4070bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x68}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000e020}, 0x18)

1.330662656s ago: executing program 3 (id=2044):
syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, &(0x7f0000000000))

1.171377034s ago: executing program 5 (id=2045):
mkdirat(0xffffffffffffff9c, &(0x7f0000006000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000006000)='./sys\x00', &(0x7f0000006100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/module/psmouse/parameters/proto\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='bar', 0x3)

1.169347624s ago: executing program 4 (id=2046):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001ac0)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xe, [0x9, 0x3, 0x2, 0x3, 0xe, 0x3, 0xa, 0x0, 0x6, 0x2, 0x12, 0x3, 0xc, 0x8, 0x7, 0xc], 0x1, [0x5, 0x1, 0x43, 0x449, 0x3, 0x401, 0x3, 0x5, 0xeb24, 0x7, 0x4, 0x1, 0x6, 0xf27, 0x4, 0xfff], [0x6, 0x6, 0x7fff, 0x2, 0x3, 0x0, 0xa74, 0x3, 0x5, 0x82, 0x200, 0x5, 0x2, 0x7ff, 0x200, 0x400]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8804}, 0x40814)

1.129145186s ago: executing program 2 (id=2047):
syz_usb_connect$printer(0x0, 0x2d, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240), 0x7, 0x504, &(0x7f0000001180)="$eJzs3E9sVMcdAODfe15jA6a4lNLi0mJKq1qtaoOhhUOliqqVemilKOSQHC3bIOIFR7YjxRaCRYrIMULKNYpyzDWHXJMol4RTpFzJMRckFHEBctro7b5d767Xi/+tHezvk9aemZ19M7Pz5u28Ga8D2LOGsx9JxEBEPIiIwxGRtmYYrv56+vjm5LPHNyejVC5f/j7JXhZPsnguqfxM42AeGUkj0reT2hNN5heXZnqjOD2Xx8cWrr8xNr+49Ndr1yeuTl+dvjF+8eL5c2cv/H38b+tvVJvysnY9Gbo1e+L4f1+79//JQi29P//d2I6tMhzD7apS8cetLmyHHWoIJ4VOOf/Z/cqwZtn5n3VXb2X8H46e6Nh5wC5SLpfLfas/XSq3urMiBXhhJdHp2XT7KgJss9oHfXb/W3u0mwjs6870Y8c9ulS9Acra/TR/RJysJKYRMZLfwB/qUvnDUYhXSz98kD2yeKEL6xAAAI0+u1SbCbbM/wYjjjXk+1m+hzIYET+PiCMR8YuIOBoRv4xq3l9FxK9bjt8TEeUO5Q+3xFfOP9OHm2thZ9n87x/53tby/C8ad8EGe/LYoYjahHn6TP6ejERv35VrxemzHcr4/N/fvLsyNSlF3v7a/C97ZOXX5oJ5PR4WWhbopiYWJjbX6mWP7kQMFVrbnxQikvpOQDYFPh4RQ1+8v+bjDjaEr/35oxP1SG9zvue3v+Krk+0K2YKtivKHEX+q9n8pmvp/eecu6bw/OdYfxekzY9lZcKZtGfe/vvtSS1L94M9t/yfftR7uPxc+vZyPrM3L+v9Aw/mfpR1sruJgEpHMLy7NTBSL03Pzqxzo9upl3P32nVXvaTZ6/u9LXqmEa/elb00sLMydjdiX/G9l+vjya2vx7HeUqu0fOd1+/B/JX5O9E7+JiOwk/m1E/C6qd4jDUb59KiJ+HxGnV29+fPmvP7y+8fZ3V9b+qbbXv6b+j+X+X1yayVLnmlImitXLWcRySj3QM3PqwbOh9uWvrf/PV0IjeUr761/StNW+shbtA5t8+wAAAOCFkEbEQMNa0kCk6ehodQ3oaBxIi7PzC39JZt+8MVX9jsBgQ97qenBvUlv/HGyIj7fEz+Xrxu/17K/ERydni1M71Gag6mBlzCfpaP1akKajtS/FbM0SM/BT5is/sHc9b/wfu7dNFQG2nc9/2KvmbjVESqtkKvlLGdid1vL5by0Qdqd247/D33O7YYBdomw4w562nvFfaPr3jvcPd6M+wPYpxMv1cLqjNQG2m/k/7Elr+pL8hgPlvvZP9cfKzNHf+YA9sbFq7G9T1o4EspnVjpS+fyOvqv03hVXzRLq+A/ZFPVA/8kb69Mqm35a0Cyd/Od8fW0PmvvUc+eNtGaftAp2vG+MD3bgaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbL0fAwAA//+1kNRC")
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys\x00', 0x4c42, 0x23)
write$binfmt_aout(r0, 0x0, 0x20)

1.129047256s ago: executing program 3 (id=2048):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@quota}, {@jqfmt_vfsold}, {@oldalloc}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f00000017c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x80)

985.474203ms ago: executing program 5 (id=2049):
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FIBMAP(r0, 0x2282, 0x0)

887.408758ms ago: executing program 4 (id=2050):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff000000", 0x2f)

788.072912ms ago: executing program 5 (id=2051):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x4070bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x40}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008001}, 0x18)

626.49437ms ago: executing program 4 (id=2052):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0)
write(r0, 0x0, 0x0)

540.610095ms ago: executing program 5 (id=2053):
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt_trace/trace\x00', 0x1, 0x0)
lseek(r0, 0x100000001, 0x1)

422.71287ms ago: executing program 5 (id=2054):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000001c0)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6865617274626561743d6e6f6e652c6c6f63616c666c6f636b732c696e6f646536342c6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f61636c2c6e6f61636c2c6572726f72733d636f6e74696e75652c00edc97523793b5022d016bb24c65ba594abbd38fd9c301bfa101e61d574eb5cc84215aa20846b6f33df6281eaedb4b4afaaacd321e4df0d16b4f5a8a992efe2554b52ec9c980e5544cd4b8df3e1ba594d07e0bfe3471c164430a36b7ebddc35caf2959224d8330f1807117fc520d8ff5660c5691afd66a8e397bb802ed69df198008fb799cc37"], 0x1, 0x470e, &(0x7f0000008f40)="$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")
creat(0x0, 0x82)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@i_version}, {@noblock_validity}, {@noquota}, {@nouid32}, {@norecovery}, {@abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@nouid32}, {@resgid, 0x32}]}, 0x1, 0x527, &(0x7f0000001380)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

410.681381ms ago: executing program 4 (id=2055):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000007b80), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000007c40)={&(0x7f0000007bc0)={0x24, r1, 0xa5c59466aaff822d, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x48805}, 0x64040)

163.046352ms ago: executing program 4 (id=2056):
capset(&(0x7f0000000540)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x0, 0x89, 0x8010001, 0x8001})
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0xfffff7ff8)

69.435127ms ago: executing program 3 (id=2057):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x161, 0x17, "00020000f7fd00"})
r1 = syz_open_pts(r0, 0xc0000)
ioctl$sock_inet_udp_SIOCINQ(r1, 0x540d, 0x0)

0s ago: executing program 4 (id=2058):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x78, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff7, 0xfff1}, {}, {0x2, 0xfffd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1, 0x4, 0x8, 0xb84, 0xef8}, 0x4, 0x0, 0x2, 0x4, 0x3, 0x1c, 0x8, 0x17, 0x8, 0x7, {0x0, 0x4, 0x80000000, 0x3, 0x8, 0x2}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40098}, 0x4008000)

kernel console output (not intermixed with test programs):

6
[  151.037228][ T6822] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  151.154156][ T4187] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  151.723973][ T6828] loop2: detected capacity change from 0 to 32768
[  151.784262][ T6828] XFS (loop2): Mounting V5 Filesystem
[  151.866770][ T6828] XFS (loop2): Ending clean mount
[  151.970798][ T4202] XFS (loop2): Unmounting Filesystem
[  151.981426][ T6826] loop4: detected capacity change from 0 to 32768
[  152.172029][ T6826] UFO tlock:0xffffc900028d2048
[  152.197048][ T6856] MetaData crosses page boundary!!
[  152.204971][ T6856] lblock = 6300000010, size  = -820051968
[  152.217606][ T6856] CPU: 0 PID: 6856 Comm: syz.4.1013 Not tainted syzkaller #0
[  152.225021][ T6856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  152.235087][ T6856] Call Trace:
[  152.238368][ T6856]  <TASK>
[  152.241292][ T6856]  dump_stack_lvl+0x188/0x250
[  152.245970][ T6856]  ? remove_wait_queue+0x120/0x120
[  152.251080][ T6856]  ? show_regs_print_info+0x20/0x20
[  152.256279][ T6856]  ? load_image+0x410/0x410
[  152.260780][ T6856]  ? unlock_page+0x17c/0x1f0
[  152.265372][ T6856]  __get_metapage+0xbf4/0x1060
[  152.270146][ T6856]  dtSearch+0x598/0x1f60
[  152.274412][ T6856]  dtDelete+0x122/0x2b70
[  152.278663][ T6856]  ? __mutex_lock_common+0x435/0x2400
[  152.284052][ T6856]  ? dtInsertEntry+0x12c0/0x12c0
[  152.289005][ T6856]  ? _raw_spin_unlock+0x24/0x40
[  152.293868][ T6856]  jfs_unlink+0x29b/0x9f0
[  152.298212][ T6856]  ? jfs_link+0x640/0x640
[  152.302531][ T6856]  ? rwsem_write_trylock+0x135/0x1c0
[  152.307814][ T6856]  ? clear_nonspinnable+0x60/0x60
[  152.312836][ T6856]  ? bpf_lsm_inode_unlink+0x5/0x10
[  152.317975][ T6856]  ? security_inode_unlink+0xcb/0x110
[  152.323347][ T6856]  vfs_unlink+0x376/0x600
[  152.327676][ T6856]  do_unlinkat+0x391/0x710
[  152.332096][ T6856]  ? fsnotify_link_count+0xf0/0xf0
[  152.337219][ T6856]  ? getname_flags+0x1f9/0x4f0
[  152.341975][ T6856]  __x64_sys_unlink+0x45/0x50
[  152.346653][ T6856]  do_syscall_64+0x4c/0xa0
[  152.351093][ T6856]  ? clear_bhb_loop+0x30/0x80
[  152.355783][ T6856]  ? clear_bhb_loop+0x30/0x80
[  152.360461][ T6856]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  152.366374][ T6856] RIP: 0033:0x7f045bb4b159
[  152.370782][ T6856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  152.390395][ T6856] RSP: 002b:00007f0459d82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[  152.398804][ T6856] RAX: ffffffffffffffda RBX: 00007f045bdd3090 RCX: 00007f045bb4b159
[  152.406771][ T6856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440
[  152.414738][ T6856] RBP: 00007f045bbe206b R08: 0000000000000000 R09: 0000000000000000
[  152.422722][ T6856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  152.430685][ T6856] R13: 00007f045bdd3128 R14: 00007f045bdd3090 R15: 00007fff746bae78
[  152.438666][ T6856]  </TASK>
[  152.441799][    C0] vkms_vblank_simulate: vblank timer overrun
[  152.457772][ T6782] block2mtd: error: cannot open device /dev/l
[  152.574054][ T6856] bread failed!
[  152.606068][ T6856] jfs_unlink: dtDelete returned -5
[  152.660243][ T6856] ERROR: (device loop4): jfs_unlink: 
[  152.660243][ T6856] 
[  152.736226][ T6856] ERROR: (device loop4): remounting filesystem as read-only
[  153.385845][ T6885] loop3: detected capacity change from 0 to 512
[  153.424611][ T6887] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1047'.
[  153.461854][ T6885] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  153.495980][ T6887] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1047'.
[  153.521292][ T6885] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  153.592296][ T6885] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  153.660849][ T6885] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  153.750849][ T6885] System zones: 0-2, 18-18, 34-35
[  153.787539][ T6885] EXT4-fs (loop3): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000000,,errors=continue. Quota mode: none.
[  154.093111][ T6903] loop1: detected capacity change from 0 to 4096
[  154.264826][ T6903] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  154.414086][ T6918] tipc: Started in network mode
[  154.435307][ T6918] tipc: Node identity ac1414aa, cluster identity 4711
[  154.459485][ T4193] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  154.471858][ T6918] tipc: New replicast peer: 172.20.20.187
[  154.487826][ T4271] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  154.512746][ T6919] tipc: New replicast peer: 172.20.20.187
[  154.524110][ T6918] tipc: Enabled bearer <udp:syz0>, priority 10
[  154.749642][ T4271] usb 4-1: Using ep0 maxpacket: 8
[  154.877912][ T4271] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  154.886116][ T4271] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  154.938017][ T4313] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  154.974127][ T4271] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  154.995379][ T6933] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1055'.
[  155.024880][ T4271] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  155.055429][ T4271] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  155.091600][ T4271] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  155.111291][ T4271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.187796][ T4313] usb 2-1: Using ep0 maxpacket: 16
[  155.259075][   T26] audit: type=1800 audit(1789720297.276:14): pid=6935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1056" name="tcp_port" dev="configfs" ino=43549 res=0 errno=0
[  155.279478][    C0] vkms_vblank_simulate: vblank timer overrun
[  155.307455][ T6937] netlink: 'syz.0.1057': attribute type 2 has an invalid length.
[  155.329875][ T4313] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  155.351319][ T6925] loop2: detected capacity change from 0 to 32768
[  155.364737][ T4313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.397826][ T4271] usb 4-1: GET_CAPABILITIES returned 0
[  155.419657][ T4271] usbtmc 4-1:16.0: can't read capabilities
[  155.440460][ T4313] usb 2-1: config 0 descriptor??
[  155.508808][ T4313] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  155.612534][ T4271] usb 4-1: USB disconnect, device number 8
[  155.672092][ T4175] tipc: Node number set to 2886997162
[  155.719494][ T4313] usb 2-1: Detected FT8U232AM
[  155.739966][ T4313] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  155.802678][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1063'.
[  155.936260][ T4271] usb 2-1: USB disconnect, device number 5
[  155.973277][ T6949] loop0: detected capacity change from 0 to 1024
[  155.983129][ T4271] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  156.050996][ T4271] ftdi_sio 2-1:0.0: device disconnected
[  156.113009][ T6949] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,. Quota mode: none.
[  156.239909][ T6949] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.341271][ T6949] EXT4-fs (loop0): shut down requested (2)
[  156.595061][ T6965] program syz.3.1072 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  156.882837][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1075'.
[  157.324295][ T6998] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1084'.
[  157.382022][ T7000] tipc: Started in network mode
[  157.414893][ T7000] tipc: Node identity ac1414aa, cluster identity 4711
[  157.460290][ T7000] tipc: New replicast peer: 172.20.20.187
[  157.525579][ T7001] tipc: New replicast peer: 172.20.20.187
[  157.558375][ T7000] tipc: Enabled bearer <udp:syz0>, priority 10
[  157.921027][ T7017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1092'.
[  158.028687][   T26] audit: type=1400 audit(1789720300.046:15): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7019 comm="syz.0.1094" name="p" offset=43
[  158.256874][ T6987] loop1: detected capacity change from 0 to 32768
[  158.360942][ T6987] (syz.1.1080,6987,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  158.451535][ T4313] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  158.476779][ T7033] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1099'.
[  158.519836][ T6987] (syz.1.1080,6987,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  158.666764][ T7037] debugfs: Directory 'netdev:wlan0' with parent 'phy13' already present!
[  158.679795][ T6987] (syz.1.1080,6987,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  158.735373][ T7040] CacheFiles: Failed to register: -95
[  158.758106][  T150] block nbd1: Possible stuck request ffff888020c18000: control (read@0,4096B). Runtime 30 seconds
[  158.774813][ T4271] tipc: Node number set to 2886997162
[  158.811364][ T6987] JBD2: Ignoring recovery information on journal
[  158.857763][ T4313] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  158.920024][ T4313] usb 3-1: config 0 interface 0 has no altsetting 0
[  158.974311][ T6987] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  159.081478][ T7051] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1107'.
[  159.117735][ T4313] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  159.144465][   T26] audit: type=1400 audit(1789720301.156:16): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7052 comm="syz.4.1108" name="p" offset=43
[  159.171883][ T4313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.184615][ T7051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1107'.
[  159.219786][ T4313] usb 3-1: Product: syz
[  159.230622][ T7051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1107'.
[  159.251780][ T4313] usb 3-1: Manufacturer: syz
[  159.267541][ T4313] usb 3-1: SerialNumber: syz
[  159.275811][ T7051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1107'.
[  159.297297][ T4313] usb 3-1: config 0 descriptor??
[  159.339483][ T4313] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  159.362386][ T4193] ocfs2: Unmounting device (7,1) on (node local)
[  159.404674][ T4313] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  159.489724][ T4313] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  159.533915][ T4313] usb 3-1: media controller created
[  159.620978][ T7061] loop3: detected capacity change from 0 to 1024
[  159.627813][ T4313] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  159.673455][ T7061] EXT4-fs (loop3): Ignoring removed oldalloc option
[  159.728898][ T7061] EXT4-fs (loop3): Ignoring removed oldalloc option
[  159.786280][ T7061] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  159.858671][ T4313] DVB: Unable to find symbol tda10046_attach()
[  159.871588][ T4313] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  159.917149][ T7061] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,bsddf,nodioread_nolock,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue. Quota mode: none.
[  159.951198][ T4313] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  160.477784][ T4313] dvb_usb_m920x: probe of 3-1:0.0 failed with error -71
[  160.534515][ T4313] usb 3-1: USB disconnect, device number 9
[  160.610311][ T7088] tipc: Started in network mode
[  160.615191][ T7088] tipc: Node identity ac1414aa, cluster identity 4711
[  160.705262][ T7088] tipc: New replicast peer: 172.20.20.187
[  160.728198][ T7088] tipc: Enabled bearer <udp:syz0>, priority 10
[  160.801866][ T7059] loop4: detected capacity change from 0 to 32768
[  160.814287][ T7096] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1125'.
[  160.932910][ T7059] JBD2: Invalid start block of journal: 2
[  161.018072][ T7059] (syz.4.1113,7059,0):ocfs2_journal_wipe:1155 ERROR: status = -22
[  161.106341][ T7059] (syz.4.1113,7059,0):ocfs2_check_volume:2422 ERROR: status = -22
[  161.223564][ T7059] (syz.4.1113,7059,0):ocfs2_check_volume:2491 ERROR: status = -22
[  161.337382][ T7059] (syz.4.1113,7059,0):ocfs2_mount_volume:1824 ERROR: status = -22
[  161.468195][ T7059] (syz.4.1113,7059,0):ocfs2_fill_super:1177 ERROR: status = -22
[  161.852373][ T4234] tipc: Node number set to 2886997162
[  162.061803][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  162.522223][ T7117] loop1: detected capacity change from 0 to 32768
[  162.675712][ T7117] UFO tlock:0xffffc900028d2090
[  162.735422][ T7161] MetaData crosses page boundary!!
[  162.760249][ T4234] hid-generic 0005:16C0:05DF.0005: item fetching failed at offset 0/1
[  162.823784][ T7161] lblock = 6300000010, size  = -820051968
[  162.858127][ T4234] hid-generic: probe of 0005:16C0:05DF.0005 failed with error -22
[  162.877226][ T7161] CPU: 0 PID: 7161 Comm: syz.1.1136 Not tainted syzkaller #0
[  162.884608][ T7161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  162.894653][ T7161] Call Trace:
[  162.897926][ T7161]  <TASK>
[  162.900849][ T7161]  dump_stack_lvl+0x188/0x250
[  162.905518][ T7161]  ? remove_wait_queue+0x120/0x120
[  162.910620][ T7161]  ? show_regs_print_info+0x20/0x20
[  162.915811][ T7161]  ? load_image+0x410/0x410
[  162.920315][ T7161]  ? unlock_page+0x17c/0x1f0
[  162.924904][ T7161]  __get_metapage+0xbf4/0x1060
[  162.929847][ T7161]  dtSearch+0x598/0x1f60
[  162.934086][ T7161]  ? __lock_acquire+0x13dc/0x7b50
[  162.939127][ T7161]  dtDelete+0x122/0x2b70
[  162.943370][ T7161]  ? __mutex_lock_common+0x435/0x2400
[  162.948741][ T7161]  ? dtInsertEntry+0x12c0/0x12c0
[  162.953698][ T7161]  ? _raw_spin_unlock+0x24/0x40
[  162.958546][ T7161]  jfs_unlink+0x29b/0x9f0
[  162.962881][ T7161]  ? jfs_link+0x640/0x640
[  162.967198][ T7161]  ? rwsem_write_trylock+0x135/0x1c0
[  162.972472][ T7161]  ? clear_nonspinnable+0x60/0x60
[  162.977486][ T7161]  ? bpf_lsm_inode_unlink+0x5/0x10
[  162.982583][ T7161]  ? security_inode_unlink+0xcb/0x110
[  162.987955][ T7161]  vfs_unlink+0x376/0x600
[  162.992302][ T7161]  do_unlinkat+0x391/0x710
[  162.996741][ T7161]  ? fsnotify_link_count+0xf0/0xf0
[  163.001845][ T7161]  ? getname_flags+0x1f9/0x4f0
[  163.006602][ T7161]  __x64_sys_unlink+0x45/0x50
[  163.011276][ T7161]  do_syscall_64+0x4c/0xa0
[  163.015685][ T7161]  ? clear_bhb_loop+0x30/0x80
[  163.020356][ T7161]  ? clear_bhb_loop+0x30/0x80
[  163.025030][ T7161]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  163.030913][ T7161] RIP: 0033:0x7fea9d982159
[  163.035322][ T7161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  163.054928][ T7161] RSP: 002b:00007fea9bbb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[  163.063333][ T7161] RAX: ffffffffffffffda RBX: 00007fea9dc0a090 RCX: 00007fea9d982159
[  163.071405][ T7161] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440
[  163.079366][ T7161] RBP: 00007fea9da1906b R08: 0000000000000000 R09: 0000000000000000
[  163.087343][ T7161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  163.095304][ T7161] R13: 00007fea9dc0a128 R14: 00007fea9dc0a090 R15: 00007ffcad777ce8
[  163.103283][ T7161]  </TASK>
[  163.106395][    C0] vkms_vblank_simulate: vblank timer overrun
[  163.296454][ T7175] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  163.445546][ T7175] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  163.673537][ T7183] loop4: detected capacity change from 0 to 512
[  163.754661][ T7183] EXT4-fs (loop4): Test dummy encryption mode enabled
[  163.808483][ T7185] nfsd: exp_rootfh path not found \
[  163.844700][ T7183] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  163.984411][ T7183] EXT4-fs error (device loop4): ext4_orphan_get:1436: comm syz.4.1165: bad orphan inode 131083
[  164.084177][ T7183] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,nodioread_nolock,norecovery,,errors=continue. Quota mode: none.
[  164.111252][ T7168] loop3: detected capacity change from 0 to 32768
[  164.168357][ T7168] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  164.480416][ T7183] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  164.524804][ T7213] overlayfs: invalid origin (0000)
[  164.546243][ T7214] loop0: detected capacity change from 0 to 2048
[  164.572533][ T7168] syz.3.1160 (7168) used greatest stack depth: 17088 bytes left
[  164.592513][ T7183] EXT4-fs error (device loop4): ext4_generic_delete_entry:2731: inode #2: block 13: comm syz.4.1165: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  164.612937][    C0] vkms_vblank_simulate: vblank timer overrun
[  164.692026][ T4187] ocfs2: Unmounting device (7,3) on (node local)
[  164.702326][ T7214] Alternate GPT is invalid, using primary GPT.
[  164.724461][ T7214]  loop0: p2 p3 p7
[  164.940763][ T7183] EXT4-fs error (device loop4) in ext4_delete_entry:2802: Corrupt filesystem
[  165.060721][ T7183] EXT4-fs warning (device loop4): ext4_rename_delete:3794: inode #2: comm syz.4.1165: Deleting old file: nlink 5, error=-117
[  165.205542][ T7161] bread failed!
[  165.220728][ T4949] udevd[4949]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  165.240179][ T7161] jfs_unlink: dtDelete returned -5
[  165.260878][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[  165.276194][ T5061] udevd[5061]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  165.353350][ T7161] ERROR: (device loop1): jfs_unlink: 
[  165.353350][ T7161] 
[  165.462934][ T7161] ERROR: (device loop1): remounting filesystem as read-only
[  165.524697][ T5061] udevd[5061]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[  165.553867][ T7231] udevd[7231]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  165.581405][ T4949] udevd[4949]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  165.626156][ T7237] loop0: detected capacity change from 0 to 2048
[  165.661806][ T7241] loop2: detected capacity change from 0 to 512
[  165.725570][ T7237] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  165.822481][ T7241] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,errors=remount-ro,mb_optimize_scan=0x0000000000000001,delalloc,data_err=ignore,. Quota mode: writeback.
[  165.955486][ T7241] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  166.104385][ T7252] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22)
[  166.155715][ T7241] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #2: comm syz.2.1188: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  166.183266][ T7252] iwpm_mapping_info_cb: Unable to parse nlmsg
[  166.386828][ T7241] EXT4-fs (loop2): Remounting filesystem read-only
[  166.460376][ T7258] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.1188: corrupted inode contents
[  166.583335][ T7258] EXT4-fs (loop2): Remounting filesystem read-only
[  166.632404][ T7258] EXT4-fs error (device loop2): ext4_dirty_inode:6087: inode #2: comm syz.2.1188: mark_inode_dirty error
[  166.742948][ T7258] EXT4-fs (loop2): Remounting filesystem read-only
[  166.802968][ T7258] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #2: comm syz.2.1188: corrupted inode contents
[  166.893759][ T7258] EXT4-fs (loop2): Remounting filesystem read-only
[  166.937295][ T7258] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.1188: mark_inode_dirty error
[  167.053395][ T7258] EXT4-fs (loop2): Remounting filesystem read-only
[  167.163959][ T7284] netlink: 'syz.1.1205': attribute type 1 has an invalid length.
[  167.180619][ T7285] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1206'.
[  167.254615][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1206'.
[  167.391643][ T7295] ip_tables: iptables: counters copy to user failed while replacing table
[  167.440007][ T7292] tun0: tun_chr_ioctl cmd 1074812118
[  168.798565][ T7346] loop0: detected capacity change from 0 to 8
[  169.020317][ T7354] WARNING! power/level is deprecated; use power/control instead
[  169.364857][ T7368] loop0: detected capacity change from 0 to 512
[  169.384222][ T7372] netlink: 'syz.3.1245': attribute type 3 has an invalid length.
[  169.440938][ T7368] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  169.460253][ T7372] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1245'.
[  169.541918][ T7368] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1243: invalid indirect mapped block 9 (level 0)
[  169.666160][ T7368] EXT4-fs (loop0): 1 truncate cleaned up
[  169.735882][ T7368] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,inode_readahead_blks=0x0000000008000000,nodiscard,,errors=continue. Quota mode: none.
[  169.991737][ T7385] loop1: detected capacity change from 0 to 4096
[  170.170283][ T7400] loop0: detected capacity change from 0 to 256
[  170.270241][ T7400] exfat: Deprecated parameter 'utf8'
[  170.345983][ T7400] exfat: Deprecated parameter 'namecase'
[  170.376510][ T7400] exfat: Deprecated parameter 'namecase'
[  170.457331][ T7397] loop4: detected capacity change from 0 to 4096
[  170.487815][ T7400] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  170.945822][ T7419] netlink: 'syz.3.1268': attribute type 2 has an invalid length.
[  170.966136][   T26] audit: type=1400 audit(1789720312.976:17): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="foo" pid=7418 comm="syz.0.1267" name="foo" offset=71
[  171.020677][ T7419] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1268'.
[  171.999891][ T7436] MPI: mpi too large (113216 bits)
[  172.018557][ T7433] loop0: detected capacity change from 0 to 1024
[  172.157082][ T7433] hfsplus: walked past end of dir
[  173.350423][ T7437] loop4: detected capacity change from 0 to 32768
[  173.547180][ T7437] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1270 (7437)
[  173.869470][ T7437] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  173.959887][ T7437] BTRFS info (device loop4): use zlib compression, level 3
[  174.073058][ T7437] BTRFS info (device loop4): turning on sync discard
[  174.157147][ T7437] BTRFS info (device loop4): using free space tree
[  174.171229][ T7505] loop3: detected capacity change from 0 to 512
[  174.196655][ T7437] BTRFS info (device loop4): has skinny extents
[  174.254944][ T7505] EXT4-fs error (device loop3): ext4_orphan_get:1436: comm syz.3.1308: bad orphan inode 15
[  174.277912][    T7] Bluetooth: hci2: command 0x0405 tx timeout
[  174.299494][ T7504] loop0: detected capacity change from 0 to 4096
[  174.329848][ T7505] ext4_test_bit(bit=14, block=5) = 0
[  174.369815][ T7504] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  174.394439][ T7505] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none.
[  174.485756][ T7504] NILFS (loop0): mounting unchecked fs
[  174.527391][ T5061] udevd[5061]: incorrect nilfs2 checksum on /dev/loop0
[  174.596881][ T7504] NILFS (loop0): recovery complete
[  174.615006][ T7437] BTRFS info (device loop4): enabling ssd optimizations
[  174.646186][ T7505] EXT4-fs (loop3): shut down requested (2)
[  174.677196][ T7531] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  174.785810][ T7504] NILFS error (device loop0): nilfs_readdir: zero-length directory entry
[  174.914392][   T26] audit: type=1800 audit(1789720316.926:18): pid=7437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1270" name="file1" dev="loop4" ino=260 res=0 errno=0
[  175.537908][ T7548] loop0: detected capacity change from 0 to 512
[  175.644193][ T7548] EXT4-fs (loop0): 1 orphan inode deleted
[  175.686033][ T7548] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  175.763650][ T7548] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.890799][ T7548] EXT4-fs (loop0): shut down requested (1)
[  176.037892][  T150] block nbd0: Possible stuck request ffff8880207e0000: control (read@0,4096B). Runtime 60 seconds
[  176.136028][ T4253] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  176.207351][ T4253] Quota error (device loop0): write_blk: dquota write failed
[  176.254191][ T4253] Quota error (device loop0): free_dqentry: Can't write quota data block 5
[  176.609578][ T7577] overlayfs: invalid origin (0000)
[  176.812763][ T7581] loop2: detected capacity change from 0 to 1024
[  176.989938][ T7588] loop0: detected capacity change from 0 to 128
[  177.037843][ T7581] EXT4-fs (loop2): Ignoring removed bh option
[  177.120575][ T7588] hpfs: hpfs_map_sector(): read error
[  177.125990][ T7588] hpfs: filesystem error: can't load hotfix map; already mounted read-only
[  177.199698][ T7581] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e80ce028, mo2=0000]
[  177.261781][ T7588] hpfs: hpfs_map_sector(): read error
[  177.358295][ T7581] System zones: 0-1, 3-12
[  177.423958][ T7581] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #3: block 1: comm syz.2.1327: lblock 1 mapped to illegal pblock 1 (length 1)
[  177.454923][ T7599] netlink: 'syz.4.1334': attribute type 1 has an invalid length.
[  177.501244][ T7599] netlink: 'syz.4.1334': attribute type 2 has an invalid length.
[  177.536849][ T7599] netlink: 568 bytes leftover after parsing attributes in process `syz.4.1334'.
[  177.579104][ T7581] EXT4-fs (loop2): Remounting filesystem read-only
[  177.651921][ T7581] Quota error (device loop2): write_blk: dquota write failed
[  177.699294][ T7581] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  177.804630][ T7581] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.1327: Failed to acquire dquot type 0
[  177.948619][ T7581] EXT4-fs (loop2): Remounting filesystem read-only
[  177.955295][ T7581] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.1327: Freeing blocks not in datazone - block = 0, count = 4096
[  177.991933][ T7592] loop1: detected capacity change from 0 to 32768
[  178.061577][ T7592] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  178.134242][ T7581] EXT4-fs (loop2): Remounting filesystem read-only
[  178.201894][ T7581] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.1327: Invalid inode bitmap blk 0 in block_group 0
[  178.220875][ T4252] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  178.267009][ T4252] EXT4-fs (loop2): Remounting filesystem read-only
[  178.296761][ T4252] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  178.323064][ T7581] EXT4-fs (loop2): Remounting filesystem read-only
[  178.335502][ T4252] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:6: Failed to release dquot type 0
[  178.353107][ T7591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  178.378018][ T7581] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem
[  178.386746][ T4252] EXT4-fs (loop2): Remounting filesystem read-only
[  178.427133][ T7581] EXT4-fs (loop2): Remounting filesystem read-only
[  178.462192][ T4193] ocfs2: Unmounting device (7,1) on (node local)
[  178.531327][ T7581] EXT4-fs (loop2): 1 orphan inode deleted
[  178.537077][ T7581] EXT4-fs (loop2): mounted filesystem without journal. Opts: €�; usrquota,auto_da_alloc,bh,max_batch_time=0x00000000000008c9,debug,errors=remount-ro,. Quota mode: writeback.
[  178.707042][ T7608] loop3: detected capacity change from 0 to 128
[  178.877743][ T7608] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  179.273650][ T4252] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  179.321332][ T7622] vhci_hcd vhci_hcd.0: failed to lookup sock
[  179.877858][  T150] block nbd2: Possible stuck request ffff888020c70000: control (read@0,4096B). Runtime 30 seconds
[  180.018409][ T7564] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  180.132161][ T7643] ip_tables: iptables: counters copy to user failed while replacing table
[  180.438029][ T7564] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  180.500813][ T7564] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024
[  180.562980][ T7564] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  180.635981][ T7564] usb 1-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255
[  180.692200][ T7627] loop4: detected capacity change from 0 to 32768
[  180.714215][ T7564] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00
[  180.775761][ T7564] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.887899][ T7637] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  180.904478][ T7627] XFS (loop4): Mounting V5 Filesystem
[  181.056646][ T7627] XFS (loop4): Ending clean mount
[  181.084225][ T7672] netlink: 'syz.2.1362': attribute type 10 has an invalid length.
[  181.130773][ T7627] XFS (loop4): Quotacheck needed: Please wait.
[  181.148744][ T7672] 8021q: adding VLAN 0 to HW filter on device batadv0
[  181.183644][ T7672] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  181.270532][ T7673] netlink: 'syz.2.1362': attribute type 10 has an invalid length.
[  181.295110][ T7627] XFS (loop4): Quotacheck: Done.
[  181.303391][ T7673] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1362'.
[  181.341247][ T7673] device batadv0 entered promiscuous mode
[  181.382162][ T7673] bond0: (slave batadv0): Releasing backup interface
[  181.407795][ T7564] ims_pcu 1-1:1.0: GET_INFO command failed, error: -71
[  181.449358][ T7564] ims_pcu: probe of 1-1:1.0 failed with error -71
[  181.464703][ T7673] bridge0: port 3(batadv0) entered blocking state
[  181.510820][ T7673] bridge0: port 3(batadv0) entered disabled state
[  181.531711][ T5297] XFS (loop4): Unmounting Filesystem
[  181.592071][ T7565] usb 1-1: USB disconnect, device number 7
[  181.722301][   T26] audit: type=1400 audit(1789720323.736:19): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="p" pid=7674 comm="syz.2.1364" name="p" offset=33
[  181.827888][ T4252] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  181.837475][ T4252] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  181.873666][ T7663] chnl_net:caif_netlink_parms(): no params data found
[  182.094034][ T7663] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.177127][ T7663] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.247275][ T7663] device bridge_slave_0 entered promiscuous mode
[  182.319054][ T7663] bridge0: port 2(bridge_slave_1) entered blocking state
[  182.375869][ T7663] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.439681][ T7663] device bridge_slave_1 entered promiscuous mode
[  182.545063][ T7700] siw: device registration error -23
[  182.556042][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1369'.
[  182.602636][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1369'.
[  182.703121][ T7694] netlink: 'syz.3.1369': attribute type 11 has an invalid length.
[  182.741610][ T7694] netlink: 'syz.3.1369': attribute type 13 has an invalid length.
[  182.879837][ T7663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  182.927839][    T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  182.956645][ T7663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  183.003494][ T7566] Bluetooth: hci3: command 0x0409 tx timeout
[  183.167062][ T7663] team0: Port device team_slave_0 added
[  183.187769][    T7] usb 3-1: Using ep0 maxpacket: 32
[  183.279265][ T7663] team0: Port device team_slave_1 added
[  183.316171][    T7] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  183.343504][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.378853][    T7] usb 3-1: config 0 descriptor??
[  183.445208][ T7663] batman_adv: batadv0: Adding interface: batadv_slave_0
[  183.519755][ T7663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.545663][    C0] vkms_vblank_simulate: vblank timer overrun
[  183.643762][ T7663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  183.657812][    T7] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  183.692618][    T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  183.725045][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  183.759635][ T7663] batman_adv: batadv0: Adding interface: batadv_slave_1
[  183.808011][    T7] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  183.831944][ T7663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  183.887766][    T7] usb 3-1: media controller created
[  183.946445][    T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  184.007853][ T7663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.103189][    T7] az6027: usb out operation failed. (-71)
[  184.167792][    T7] az6027: usb out operation failed. (-71)
[  184.192726][    T7] stb0899_attach: Driver disabled by Kconfig
[  184.229677][    T7] az6027: no front-end attached
[  184.229677][    T7] 
[  184.287945][    T7] az6027: usb out operation failed. (-71)
[  184.335894][    T7] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  184.423023][    T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7
[  184.553371][    T7] dvb-usb: schedule remote query interval to 400 msecs.
[  184.612141][    T7] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  184.726929][    T7] usb 3-1: USB disconnect, device number 10
[  185.077798][ T7566] Bluetooth: hci3: command 0x041b tx timeout
[  185.117455][ T7711] loop3: detected capacity change from 0 to 32768
[  185.434926][ T7711] XFS (loop3): Mounting V5 Filesystem
[  185.705149][ T7711] XFS (loop3): Ending clean mount
[  185.797171][ T7711] XFS (loop3): Quotacheck needed: Please wait.
[  185.803995][ T4175] Bluetooth: hci0: command 0x0406 tx timeout
[  185.814624][ T7743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  185.832140][ T4175] Bluetooth: hci4: command 0x0406 tx timeout
[  185.860035][ T4175] Bluetooth: hci1: command 0x0406 tx timeout
[  186.019435][ T7711] XFS (loop3): Quotacheck: Done.
[  186.042021][ T7663] device hsr_slave_0 entered promiscuous mode
[  186.155993][    T7] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  186.314245][ T7766] program syz.0.1397 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  186.323988][ T7663] device hsr_slave_1 entered promiscuous mode
[  186.392157][ T4187] XFS (loop3): Unmounting Filesystem
[  186.397653][ T7663] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  186.415347][ T7663] Cannot create hsr debugfs directory
[  186.595288][ T7770] netlink: 'syz.0.1400': attribute type 8 has an invalid length.
[  186.877165][ T7775] loop4: detected capacity change from 0 to 64
[  187.180255][ T7565] Bluetooth: hci3: command 0x040f tx timeout
[  187.259303][ T7566] hid-generic 0005:16C0:05DF.0006: item fetching failed at offset 0/1
[  187.339378][ T7663] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  187.356809][ T7566] hid-generic: probe of 0005:16C0:05DF.0006 failed with error -22
[  187.388834][   T26] audit: type=1800 audit(1789720329.406:20): pid=7775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1402" name="file1" dev="loop4" ino=5 res=0 errno=0
[  187.409069][    C0] vkms_vblank_simulate: vblank timer overrun
[  187.534484][ T7663] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  187.634381][ T7663] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  188.472383][ T7663] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  188.646592][ T7795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  188.849762][  T150] block nbd1: Possible stuck request ffff888020c18000: control (read@0,4096B). Runtime 60 seconds
[  188.959748][ T7663] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.071458][ T7663] 8021q: adding VLAN 0 to HW filter on device team0
[  189.156128][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  189.226695][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  189.317908][ T4175] Bluetooth: hci3: command 0x0419 tx timeout
[  189.327855][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  189.413587][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  189.484518][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.491649][ T4252] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.575723][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  189.634162][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  189.676042][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.683184][ T4252] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.704805][ T7827] loop3: detected capacity change from 0 to 16384
[  189.831680][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  189.884967][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  189.916800][ T7842] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  190.008541][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  190.066599][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  190.163309][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  190.242059][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  190.318651][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  190.413864][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  190.467188][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  190.546893][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  190.601740][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  190.674426][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  190.720522][ T7663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  190.753496][ T7862] netlink: 'syz.2.1426': attribute type 1 has an invalid length.
[  190.931031][    T7] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  191.153021][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  191.166254][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  191.196310][ T7663] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.229383][    T7] usb 5-1: Using ep0 maxpacket: 8
[  191.367824][    T7] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  191.414011][    T7] usb 5-1: config 179 has no interface number 0
[  191.460653][    T7] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  191.526260][    T7] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  191.575201][    T7] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  191.616466][    T7] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  191.665158][    T7] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  191.746906][    T7] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  191.778623][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  191.817945][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.826527][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  191.925897][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  191.977913][ T7866] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  192.007070][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  192.088868][ T7663] device veth0_vlan entered promiscuous mode
[  192.155310][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  192.202874][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  192.220047][ T7906] udc dummy_udc.0: soft-connect without a gadget driver
[  192.285176][ T7663] device veth1_vlan entered promiscuous mode
[  192.323155][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  192.388720][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  192.478325][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  192.541580][ T7663] device veth0_macvtap entered promiscuous mode
[  192.593733][ T7663] device veth1_macvtap entered promiscuous mode
[  192.626057][ T7565] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input8
[  192.706141][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.768024][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.801808][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.821799][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.844950][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.868834][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.893414][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.926964][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.942708][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.967658][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.016198][ T7663] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.034816][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  193.047188][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  193.055107][ T4175] usb 5-1: USB disconnect, device number 5
[  193.061015][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  193.061121][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  193.088274][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  193.109050][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  193.128278][ T4175] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  193.149495][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  193.181862][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.221978][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  193.232878][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.269133][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  193.289197][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.311719][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  193.335781][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.358354][ T7663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  193.378442][ T7663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.432298][ T7663] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.452357][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  193.472362][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  193.493150][ T7663] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.510925][ T7663] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.533092][ T7663] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.552858][ T7663] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.679092][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.706182][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.766434][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  193.782581][ T1450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  193.817776][ T1450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  193.884770][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  193.952550][ T7927] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1451'.
[  193.971393][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  193.977829][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  194.012723][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1453'.
[  194.511587][ T7565] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  194.781632][ T7565] usb 4-1: Using ep0 maxpacket: 8
[  194.861877][ T7923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  194.908653][ T7565] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  194.965006][ T7565] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  194.990063][ T7948] loop2: detected capacity change from 0 to 512
[  195.006569][ T7565] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  195.032500][ T7948] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  195.064989][ T7565] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  195.108179][ T7948] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1454: invalid indirect mapped block 256 (level 2)
[  195.131886][ T7565] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  195.147524][ T7952] loop4: detected capacity change from 0 to 256
[  195.154402][ T7948] EXT4-fs (loop2): 2 truncates cleaned up
[  195.164458][ T7565] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.181824][ T7948] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,auto_da_alloc,lazytime,dioread_nolock,,errors=continue. Quota mode: writeback.
[  195.294598][ T7954] loop5: detected capacity change from 0 to 256
[  195.387039][ T7952] exFAT-fs (loop4): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d)
[  195.457832][ T7565] usb 4-1: GET_CAPABILITIES returned 0
[  195.463368][ T7565] usbtmc 4-1:16.0: can't read capabilities
[  195.578308][   T26] audit: type=1400 audit(1789720337.596:21): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="/" pid=7957 comm="syz.0.1467" name="/" offset=53
[  195.680798][ T4175] usb 4-1: USB disconnect, device number 9
[  195.785137][   T26] audit: type=1800 audit(1789720337.796:22): pid=7952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1464" name="file1" dev="loop4" ino=1048654 res=0 errno=0
[  195.827542][ T7952] attempt to access beyond end of device
[  195.827542][ T7952] loop4: rw=1, want=4282, limit=256
[  196.083702][ T7952] Buffer I/O error on dev loop4, logical block 4281, lost async page write
[  196.510857][ T7979] loop3: detected capacity change from 0 to 128
[  196.598845][ T7979] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  196.699546][ T7979] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  196.935313][ T7987] loop0: detected capacity change from 0 to 2048
[  196.956716][ T7989] loop3: detected capacity change from 0 to 64
[  196.966711][ T7959] loop2: detected capacity change from 0 to 40427
[  197.055553][ T7991] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  197.095866][ T7959] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288)
[  197.195235][ T7959] F2FS-fs (loop2): Fix alignment : done, start(4096) end(16896) block(12288)
[  197.259375][ T7996] kAFS: Invalid Command on /proc/fs/afs/cells file
[  197.278452][ T7959] F2FS-fs (loop2): invalid crc value
[  197.358041][ T7959] F2FS-fs (loop2): invalid crc value
[  197.363412][ T7959] F2FS-fs (loop2): Failed to get valid F2FS checkpoint
[  198.049603][ T8014] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1489'.
[  198.108668][ T8017] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1492'.
[  198.593808][ T8034] loop4: detected capacity change from 0 to 512
[  198.730345][ T8038] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1502'.
[  198.824500][ T8034] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  198.929596][ T8034] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  199.053935][ T8034] System zones: 0-1, 15-15, 18-18, 34-34
[  199.165604][ T8034] EXT4-fs (loop4): orphan cleanup on readonly fs
[  199.199638][ T8046] loop3: detected capacity change from 0 to 512
[  199.253292][ T8046] EXT4-fs (loop3): Ignoring removed nobh option
[  199.277419][ T8034] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0
[  199.385268][ T8046] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback.
[  199.472373][ T8036] loop2: detected capacity change from 0 to 32768
[  199.481817][ T8034] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  199.501839][ T8046] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.551005][ T8036] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1501 (8036)
[  199.624686][ T8046] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.1505: corrupted inode contents
[  199.705940][ T8036] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  199.736281][ T8034] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  199.745613][ T8046] EXT4-fs error (device loop3): ext4_dirty_inode:6087: inode #2: comm syz.3.1505: mark_inode_dirty error
[  199.770292][ T8036] BTRFS info (device loop2): enabling auto defrag
[  199.807326][ T8036] BTRFS info (device loop2): max_inline at 4096
[  199.814929][ T8027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  199.833376][ T8046] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.1505: corrupted inode contents
[  199.860608][ T8036] BTRFS info (device loop2): using free space tree
[  199.871114][ T8034] EXT4-fs (loop4): 1 truncate cleaned up
[  199.892933][ T8036] BTRFS info (device loop2): has skinny extents
[  199.915813][ T8052] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.1505: corrupted inode contents
[  199.951731][ T8034] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  199.986977][ T8052] EXT4-fs error (device loop3): ext4_dirty_inode:6087: inode #2: comm syz.3.1505: mark_inode_dirty error
[  200.126868][ T8052] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.1505: corrupted inode contents
[  200.186085][ T8036] BTRFS info (device loop2): enabling ssd optimizations
[  200.228350][ T8071] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  200.235270][ T8071] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  200.260052][ T8052] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.1505: mark_inode_dirty error
[  200.368152][ T8030] fscrypt (loop4, inode 16): Error -61 getting encryption context
[  200.381868][ T8052] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.1505: corrupted inode contents
[  200.414153][   T26] audit: type=1807 audit(1789720342.426:23): action=measure func=F res=0
[  200.429184][ T8073] ima: policy update failed
[  200.455711][   T26] audit: type=1802 audit(1789720342.446:24): pid=8074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.1508" res=0 errno=0
[  200.508505][ T8052] EXT4-fs error (device loop3): ext4_dirty_inode:6087: inode #2: comm syz.3.1505: mark_inode_dirty error
[  200.670373][   T26] audit: type=1802 audit(1789720342.576:25): pid=8073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1508" res=0 errno=0
[  200.784344][ T8046] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.1505: corrupted inode contents
[  202.432884][   T26] audit: type=1807 audit(1789720344.446:26): action=measure uid>+ res=0
[  202.442838][ T8116] ima: policy update failed
[  202.517892][   T26] audit: type=1802 audit(1789720344.456:27): pid=8117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.1526" res=0 errno=0
[  202.642833][   T26] audit: type=1802 audit(1789720344.636:28): pid=8116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1526" res=0 errno=0
[  202.885376][   T26] audit: type=1807 audit(1789720344.896:29): action=measure uid>1000 res=1
[  202.900802][ T8123] ima: policy update completed
[  202.980839][   T26] audit: type=1802 audit(1789720344.996:30): pid=8123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.0.1529" res=1 errno=0
[  203.097860][    T7] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  203.347767][    T7] usb 4-1: Using ep0 maxpacket: 8
[  203.487913][    T7] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  203.519749][    T7] usb 4-1: config 179 has no interface number 0
[  203.553760][    T7] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  203.634517][    T7] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  203.670936][ T8082] loop5: detected capacity change from 0 to 40427
[  203.705208][    T7] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  203.757383][ T8141] loop0: detected capacity change from 0 to 65
[  203.782473][    T7] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  203.836624][ T8082] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1ffff
[  203.881768][ T8141] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway
[  203.905717][    T7] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  203.947337][ T8143] netlink: 'syz.4.1538': attribute type 1 has an invalid length.
[  203.980661][ T8082] F2FS-fs (loop5): invalid crc value
[  203.991940][    T7] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  204.046891][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.078462][ T8082] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-4)
[  204.096552][ T8143] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  204.104433][ T8143] IPv6: NLM_F_CREATE should be set when creating new route
[  204.111669][ T8143] IPv6: NLM_F_CREATE should be set when creating new route
[  204.167901][ T8127] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  204.547393][ T7564] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input9
[  204.566325][ T8147] loop2: detected capacity change from 0 to 4096
[  204.678185][ T8147] NILFS (loop2): invalid segment: Checksum error in segment payload
[  204.686207][ T8147] NILFS (loop2): trying rollback from an earlier position
[  204.852157][ T8147] NILFS (loop2): recovery complete
[  204.940099][ T8148] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  205.105940][ T7566] usb 4-1: USB disconnect, device number 10
[  205.117636][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  205.126236][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  205.153699][ T8150] loop4: detected capacity change from 0 to 1764
[  205.177139][ T7566] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  205.377041][ T8152] loop0: detected capacity change from 0 to 1024
[  205.419880][ T8154] loop2: detected capacity change from 0 to 136
[  205.661765][ T8154] iso9660: Corrupted directory entry in block 2 of inode 1472
[  206.118438][  T150] block nbd0: Possible stuck request ffff8880207e0000: control (read@0,4096B). Runtime 90 seconds
[  207.309336][ T8162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  207.523885][ T8173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1552'.
[  207.733524][ T8177] <
[  207.771922][ T8181] loop9: detected capacity change from 0 to 2640
[  207.829776][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  207.840720][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  207.853657][ T8158] loop5: detected capacity change from 0 to 32768
[  207.946254][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  207.957302][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  208.029417][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  208.040375][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  208.102301][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  208.113353][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  208.196377][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  208.207314][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  208.239733][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  208.250679][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  208.331907][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  208.342874][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  208.419277][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  208.430244][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  208.448238][ T7231] ldm_validate_partition_table(): Disk read failed.
[  208.515626][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  208.526589][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  208.604109][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  208.615070][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  208.629395][ T4201] block nbd3: Receive control failed (result -32)
[  208.780290][ T7231] Dev loop9: unable to read RDB block 0
[  208.822933][ T7231]  loop9: unable to read partition table
[  208.908241][ T8181] ldm_validate_partition_table(): Disk read failed.
[  208.961957][ T8181] Dev loop9: unable to read RDB block 0
[  208.993190][ T8181]  loop9: unable to read partition table
[  209.034699][ T8181] loop_reread_partitions: partition scan of loop9 (3Ÿ¾‚³˜) failed (rc=-5)
[  209.054962][ T8206] loop4: detected capacity change from 0 to 1024
[  209.082060][ T3558] ldm_validate_partition_table(): Disk read failed.
[  209.107566][ T3558] Dev loop9: unable to read RDB block 0
[  209.143149][ T3558]  loop9: unable to read partition table
[  209.267744][ T7564] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  209.287053][ T8206] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,dioread_lock,nodioread_nolock,noquota,debug_want_extra_isize=0x0000000000000080,grpquota,nodelalloc,jqfmt=vfsv1,norecovery,,errors=continue. Quota mode: writeback.
[  209.309594][    C0] vkms_vblank_simulate: vblank timer overrun
[  209.509073][ T8214] loop3: detected capacity change from 0 to 1024
[  209.580503][ T8214] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  209.644201][ T8214] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  209.697967][ T7564] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  209.752295][ T7564] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  209.767818][   T26] audit: type=1326 audit(1789720351.776:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.2.1565" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fe016159 code=0x7fc00000
[  209.791784][    C0] vkms_vblank_simulate: vblank timer overrun
[  209.865004][ T7564] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  209.912153][ T7564] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.933097][ T8205] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2812: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  209.946269][   T26] audit: type=1326 audit(1789720351.776:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.2.1565" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f20fe016159 code=0x7fc00000
[  209.974514][  T150] block nbd2: Possible stuck request ffff888020c70000: control (read@0,4096B). Runtime 60 seconds
[  210.107865][   T26] audit: type=1326 audit(1789720351.776:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.2.1565" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fe016159 code=0x7fc00000
[  210.197094][ T8220] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1569'.
[  210.252073][ T7564] usb 1-1: GET_CAPABILITIES returned 0
[  210.272266][   T26] audit: type=1326 audit(1789720351.776:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.2.1565" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fe016159 code=0x7fc00000
[  210.296273][    C0] vkms_vblank_simulate: vblank timer overrun
[  210.313083][ T7564] usbtmc 1-1:16.0: can't read capabilities
[  210.485795][ T7566] usb 1-1: USB disconnect, device number 8
[  210.535354][   T26] audit: type=1326 audit(1789720351.776:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.2.1565" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fe016159 code=0x7fc00000
[  210.559365][    C0] vkms_vblank_simulate: vblank timer overrun
[  210.662278][   T26] audit: type=1326 audit(1789720351.776:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.2.1565" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fe016159 code=0x7fc00000
[  210.753072][   T26] audit: type=1326 audit(1789720351.776:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.2.1565" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fe016159 code=0x7fc00000
[  210.777080][    C0] vkms_vblank_simulate: vblank timer overrun
[  210.795246][ T8218] loop5: detected capacity change from 0 to 40427
[  210.854728][ T8218] F2FS-fs (loop5): build fault injection attr: rate: 14, type: 0x1ffff
[  210.928225][ T8218] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0xe4
[  210.984806][ T8218] F2FS-fs (loop5): invalid crc value
[  211.004791][   T26] audit: type=1326 audit(1789720351.776:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.2.1565" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fe016159 code=0x7fc00000
[  211.028777][    C0] vkms_vblank_simulate: vblank timer overrun
[  211.092825][ T8218] F2FS-fs (loop5): Found nat_bits in checkpoint
[  211.118240][ T8235] loop3: detected capacity change from 0 to 64
[  211.253304][   T26] audit: type=1326 audit(1789720351.776:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.2.1565" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fe016159 code=0x7fc00000
[  211.277284][    C0] vkms_vblank_simulate: vblank timer overrun
[  211.303172][ T8218] F2FS-fs (loop5) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0
[  211.423669][ T8218] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  211.447130][   T26] audit: type=1326 audit(1789720351.776:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.2.1565" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20fe016159 code=0x7fc00000
[  211.629933][ T8218] F2FS-fs (loop5) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0
[  211.795912][ T8218] attempt to access beyond end of device
[  211.795912][ T8218] loop5: rw=2049, want=45104, limit=40427
[  212.248477][ T8263] kAFS: bad VL server IP address
[  212.895996][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1595'.
[  213.085523][ T8287] netlink: 'syz.3.1597': attribute type 11 has an invalid length.
[  213.165798][ T8287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1597'.
[  213.503866][ T8301] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1603'.
[  213.784610][ T8313] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1608'.
[  214.044414][ T8320] loop3: detected capacity change from 0 to 512
[  214.181847][ T8320] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.1613: inode has both inline data and extents flags
[  214.307920][ T8320] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.1613: couldn't read orphan inode 15 (err -117)
[  214.393517][ T8320] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  214.551827][    T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  214.948238][    T7] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  215.002181][    T7] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  215.063559][    T7] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  215.117727][    T7] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.318186][    T7] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  215.369613][    T7] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  215.420744][    T7] usb 6-1: Product: syz
[  215.455333][    T7] usb 6-1: Manufacturer: syz
[  215.538559][    T7] cdc_wdm 6-1:1.0: skipping garbage
[  215.557819][    T7] cdc_wdm 6-1:1.0: skipping garbage
[  215.625060][    T7] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  215.644814][ T8340] loop2: detected capacity change from 0 to 32768
[  215.676377][    T7] cdc_wdm 6-1:1.0: Unknown control protocol
[  215.812764][ T8340] XFS (loop2): Mounting V5 Filesystem
[  215.868367][    T7] usb 6-1: USB disconnect, device number 2
[  215.985864][ T8348] loop3: detected capacity change from 0 to 32768
[  216.013349][ T8340] XFS (loop2): Ending clean mount
[  216.139888][ T8348] XFS (loop3): Mounting V5 Filesystem
[  216.195173][ T8379] rnbd_client L125: Can't parse path ip:1: -22
[  216.290655][ T8348] XFS (loop3): Ending clean mount
[  216.447566][ T4202] XFS (loop2): Unmounting Filesystem
[  216.568097][ T4187] XFS (loop3): Unmounting Filesystem
[  216.593370][ T8397] loop5: detected capacity change from 0 to 1024
[  216.679455][ T8398] loop0: detected capacity change from 0 to 2048
[  216.782270][ T8398] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  216.946965][ T8398] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  217.438555][   T26] kauditd_printk_skb: 57 callbacks suppressed
[  217.438566][   T26] audit: type=1400 audit(1789720359.456:98): apparmor="STATUS" info="failed to unpack policydb" error=-71 profile="unconfined" name="p" pid=8411 comm="syz.5.1638" name="p" offset=92
[  217.987518][ T8432] loop0: detected capacity change from 0 to 512
[  218.054365][ T8432] EXT4-fs (loop0): Ignoring removed nobh option
[  218.136024][ T8432] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback.
[  218.250918][ T8432] ext4 filesystem being mounted at /416/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  218.357016][ T8432] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.1644: corrupted inode contents
[  218.438530][ T8432] EXT4-fs error (device loop0): ext4_dirty_inode:6087: inode #2: comm syz.0.1644: mark_inode_dirty error
[  218.483829][ T8432] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.1644: corrupted inode contents
[  218.527715][ T7564] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  218.613031][ T8450] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.1644: corrupted inode contents
[  218.676053][ T8450] EXT4-fs error (device loop0): ext4_dirty_inode:6087: inode #2: comm syz.0.1644: mark_inode_dirty error
[  218.772686][ T8450] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.1644: corrupted inode contents
[  218.853038][ T8450] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz.0.1644: mark_inode_dirty error
[  218.915275][ T8450] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.1644: corrupted inode contents
[  218.930223][  T150] block nbd1: Possible stuck request ffff888020c18000: control (read@0,4096B). Runtime 90 seconds
[  218.948446][ T7564] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  218.989726][ T7564] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  219.027964][ T8450] EXT4-fs error (device loop0): ext4_dirty_inode:6087: inode #2: comm syz.0.1644: mark_inode_dirty error
[  219.150853][ T8432] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #2: comm syz.0.1644: corrupted inode contents
[  219.217912][ T7564] usb 4-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00
[  219.267701][ T7564] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.306121][ T7564] usb 4-1: Product: syz
[  219.321890][ T7564] usb 4-1: Manufacturer: syz
[  219.351992][ T7564] usb 4-1: SerialNumber: syz
[  219.376270][ T8448] loop2: detected capacity change from 0 to 40427
[  219.507524][ T8448] F2FS-fs (loop2): invalid crc value
[  219.577559][ T8448] F2FS-fs (loop2): Found nat_bits in checkpoint
[  219.684766][ T8455] loop5: detected capacity change from 0 to 32768
[  219.706474][ T7564] kaweth 4-1:1.0: Firmware present in device.
[  219.800967][ T8448] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  219.877889][ T7564] kaweth 4-1:1.0: Statistics collection: 0
[  219.915718][ T7564] kaweth 4-1:1.0: Multicast filter limit: 0
[  219.962806][ T7564] kaweth 4-1:1.0: MTU: 0
[  220.003275][ T7564] kaweth 4-1:1.0: Read MAC address 00:00:00:00:00:00
[  220.054696][ T8472] MTRR 1 not used
[  220.075036][ T4202] attempt to access beyond end of device
[  220.075036][ T4202] loop2: rw=2049, want=45104, limit=40427
[  220.295807][ T8474] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1661'.
[  220.317813][ T7564] kaweth 4-1:1.0: Error setting SOFS wait
[  220.323637][ T7564] kaweth: probe of 4-1:1.0 failed with error -5
[  220.390701][ T7564] usb 4-1: USB disconnect, device number 11
[  220.584418][ T8480] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  220.584418][ T8480] The task syz.5.1658 (8480) triggered the difference, watch for misbehavior.
[  220.826168][ T8487] gadgetfs: bound to dummy_udc driver
[  220.939873][ T8490] loop2: detected capacity change from 0 to 512
[  221.013065][ T8490] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #2: comm syz.2.1660: missing EA_INODE flag
[  221.100875][ T8490] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1660: error while reading EA inode 2 err=-117
[  221.163835][ T8490] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.1660: inode #3584: comm syz.2.1660: iget: illegal inode #
[  221.226198][ T8490] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1660: error while reading EA inode 3584 err=-117
[  221.310587][ T8490] EXT4-fs (loop2): 1 orphan inode deleted
[  221.316329][ T8490] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback.
[  221.422454][ T8505] netlink: 1371 bytes leftover after parsing attributes in process `syz.3.1672'.
[  221.530401][ T8499] loop4: detected capacity change from 0 to 4096
[  221.674559][ T8510] loop3: detected capacity change from 0 to 64
[  222.175648][ T8499] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  222.851742][ T8550] loop0: detected capacity change from 0 to 4096
[  222.954183][ T8563] loop2: detected capacity change from 0 to 512
[  223.043079][ T8550] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  223.080164][ T8563] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  223.510198][ T8569] loop5: detected capacity change from 0 to 4096
[  223.624234][ T8569] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512)
[  224.078387][ T8587] loop9: detected capacity change from 0 to 2640
[  224.172430][    C0] print_req_error: 46 callbacks suppressed
[  224.172442][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  224.189216][    C0] buffer_io_error: 46 callbacks suppressed
[  224.189225][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  224.253241][ T8594] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1711'.
[  224.262506][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1712'.
[  224.303782][    C0] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  224.314739][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  224.425006][ T8587] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  224.532577][ T8587] Buffer I/O error on dev loop9, logical block 0, async page read
[  224.593307][ T8587] ldm_validate_partition_table(): Disk read failed.
[  224.672742][ T8587] Dev loop9: unable to read RDB block 0
[  224.767367][ T8587]  loop9: unable to read partition table
[  224.806005][ T8587] loop9: partition table beyond EOD, truncated
[  224.838773][ T8605] pimreg: tun_chr_ioctl cmd 1074025677
[  224.878820][ T8605] pimreg: linktype set to 1
[  224.927927][ T8587] loop_reread_partitions: partition scan of loop9 () failed (rc=-5)
[  225.595159][ T8630] device team0 entered promiscuous mode
[  225.648375][ T8630] device team_slave_0 entered promiscuous mode
[  225.688629][ T8630] device team_slave_1 entered promiscuous mode
[  225.723043][ T8630] device team0 left promiscuous mode
[  225.743653][ T8630] device team_slave_0 left promiscuous mode
[  225.750910][ T8603] loop0: detected capacity change from 0 to 32768
[  225.766144][ T8630] device team_slave_1 left promiscuous mode
[  225.795677][ T8603] (syz.0.1717,8603,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  225.896990][ T8603] (syz.0.1717,8603,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  226.028284][ T8603] (syz.0.1717,8603,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  226.134845][ T8603] JBD2: Ignoring recovery information on journal
[  226.309167][ T8603] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  226.648836][ T4186] ocfs2: Unmounting device (7,0) on (node local)
[  226.996520][ T8662] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1745'.
[  227.263616][ T8667] loop2: detected capacity change from 0 to 2048
[  227.313652][ T8667] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  227.612448][ T8671] loop3: detected capacity change from 0 to 4096
[  227.643550][ T8673] program syz.2.1749 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  227.672071][ T8671] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  227.896187][ T8629] loop4: detected capacity change from 0 to 32768
[  228.215618][ T8683] CIFS: Attempting to mount \\127.0.0.1\share
[  228.253055][ T8683] CIFS: VFS: No username specified
[  228.497158][ T8694] loop3: detected capacity change from 0 to 512
[  228.584275][ T8694] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  228.656912][ T8694] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.1760: invalid indirect mapped block 32768 (level 2)
[  228.757738][ T8633] block2mtd: error: cannot open device #! 
[  228.797717][ T8694] EXT4-fs (loop3): Remounting filesystem read-only
[  228.804623][ T8694] EXT4-fs (loop3): 1 orphan inode deleted
[  228.848722][ T8701] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  228.907002][ T8694] EXT4-fs (loop3): 1 truncate cleaned up
[  228.952596][ T8694] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,usrquota,. Quota mode: writeback.
[  228.973741][    C0] vkms_vblank_simulate: vblank timer overrun
[  228.986055][ T8700] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  229.085644][ T8704] loop0: detected capacity change from 0 to 4096
[  229.190746][ T8704] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  229.225306][ T8694] EXT4-fs warning (device loop3): ext4_resize_begin:83: There are errors in the filesystem, so online resizing is not allowed
[  229.371249][ T8712] device sit1 entered promiscuous mode
[  229.588090][ T8715] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1768'.
[  230.184858][ T8728] loop3: detected capacity change from 0 to 4096
[  230.289698][ T8728] EXT4-fs (loop3): Ignoring removed nobh option
[  230.342796][ T8728] EXT4-fs (loop3): Test dummy encryption mode enabled
[  230.402308][ T8728] EXT4-fs (loop3): Ignoring removed bh option
[  230.502520][ T8728] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,nobh,nodioread_nolock,test_dummy_encryption,lazytime,nojournal_checksum,minixdf,bh,,errors=continue. Quota mode: writeback.
[  230.671874][ T8732] loop4: detected capacity change from 0 to 4096
[  231.005742][ T8728] EXT4-fs (loop3): Cannot change journaled quota options when quota turned on
[  231.044449][ T8747] comedi comedi0: ni_at_a2150: I/O port conflict (0x20,28)
[  231.155213][ T8747] comedi comedi0: ni_at_a2150: I/O port conflict (0x80,28)
[  231.368351][ T8727] loop5: detected capacity change from 0 to 32768
[  231.437461][ T8751] loop0: detected capacity change from 0 to 256
[  231.551656][ T8751] exfat: Deprecated parameter 'utf8'
[  231.572105][ T8727] XFS (loop5): Mounting V5 Filesystem
[  231.596282][ T8751] exfat: Deprecated parameter 'namecase'
[  231.679624][ T8751] exfat: Deprecated parameter 'namecase'
[  231.725565][ T8727] XFS (loop5): Ending clean mount
[  231.752701][ T8765] loop3: detected capacity change from 0 to 64
[  231.767349][ T8751] exfat: Deprecated parameter 'utf8'
[  231.880264][ T8751] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x69f3fdb7, utbl_chksum : 0xe619d30d)
[  231.919046][ T8765] gfs2: path_lookup on c::: returned error -2
[  232.127487][ T8769] FAT-fs (loop2): Directory bread(block 64) failed
[  232.190327][ T8769] FAT-fs (loop2): Directory bread(block 65) failed
[  232.197020][ T8769] FAT-fs (loop2): Directory bread(block 66) failed
[  232.222740][ T7663] XFS (loop5): Unmounting Filesystem
[  232.288080][ T8732] ntfs: volume version 3.1.
[  232.325284][ T8769] FAT-fs (loop2): Directory bread(block 67) failed
[  232.413524][ T8769] FAT-fs (loop2): Directory bread(block 68) failed
[  232.486056][ T8769] FAT-fs (loop2): Directory bread(block 69) failed
[  232.550849][ T8769] FAT-fs (loop2): Directory bread(block 70) failed
[  232.557419][ T8769] FAT-fs (loop2): Directory bread(block 71) failed
[  232.694902][ T8769] FAT-fs (loop2): Directory bread(block 72) failed
[  232.751941][ T8769] FAT-fs (loop2): Directory bread(block 73) failed
[  233.157128][ T8790] sctp: [Deprecated]: syz.0.1796 (pid 8790) Use of struct sctp_assoc_value in delayed_ack socket option.
[  233.157128][ T8790] Use struct sctp_sack_info instead
[  233.626352][ T8802] set_capacity_and_notify: 1 callbacks suppressed
[  233.626364][ T8802] loop5: detected capacity change from 0 to 1024
[  233.733934][ T8802] EXT4-fs (loop5): Ignoring removed oldalloc option
[  233.820423][ T8810] loop0: detected capacity change from 0 to 1024
[  233.859150][ T8802] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000002,nodioread_nolock,oldalloc,barrier,delalloc,grpjquota=,,errors=continue. Quota mode: none.
[  233.962217][ T8802] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  234.134765][ T8802] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: block 3: comm syz.5.1802: lblock 3 mapped to illegal pblock 3 (length 3)
[  234.205088][ T7566] hid-generic 0000:FFFFFFFE:0800.0007: unknown main item tag 0x0
[  234.230537][ T7566] hid-generic 0000:FFFFFFFE:0800.0007: unknown main item tag 0x0
[  234.244747][ T8825] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: comm syz.5.1802: lblock 0 mapped to illegal pblock 0 (length 1)
[  234.313282][ T7566] hid-generic 0000:FFFFFFFE:0800.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  234.336923][ T8802] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  234.446139][ T8829] fido_id[8829]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  234.472990][ T8802] EXT4-fs (loop5): This should not happen!! Data will be lost
[  234.472990][ T8802] 
[  234.639839][ T4252] EXT4-fs error (device loop5): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 8)
[  234.772133][ T4252] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  234.830823][ T4252] EXT4-fs (loop5): This should not happen!! Data will be lost
[  234.830823][ T4252] 
[  234.934791][ T8848] autofs4:pid:8848:autofs_fill_super: pipe file descriptor does not contain proper ops
[  234.948012][ T8090] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  235.145254][ T8854] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1820'.
[  235.169292][ T8856] loop5: detected capacity change from 0 to 136
[  235.217819][ T8090] usb 1-1: Using ep0 maxpacket: 16
[  235.266391][ T8856] iso9660: Corrupted directory entry in block 2 of inode 1472
[  235.347959][ T8090] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  235.390988][ T8090] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  235.453320][ T8090] usb 1-1: config 0 interface 0 has no altsetting 0
[  235.491989][ T8090] usb 1-1: New USB device found, idVendor=1b96, idProduct=0006, bcdDevice= 0.00
[  235.540618][ T8090] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.556623][ T8868] loop3: detected capacity change from 0 to 256
[  235.574387][ T8090] usb 1-1: config 0 descriptor??
[  235.888010][ T8876] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  235.914083][    C0] vkms_vblank_simulate: vblank timer overrun
[  235.920871][ T4175] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  236.087536][ T8876] CIFS: Attempting to mount \\127.0.0.1\share
[  236.096733][ T8090] input: HID 1b96:0006 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:1B96:0006.0008/input/input10
[  236.147178][ T8876] CIFS: VFS: Error connecting to socket. Aborting operation.
[  236.197947][  T150] block nbd0: Possible stuck request ffff8880207e0000: control (read@0,4096B). Runtime 120 seconds
[  236.209341][ T4175] usb 5-1: Using ep0 maxpacket: 32
[  236.231666][ T8876] CIFS: VFS: cifs_mount failed w/return code = -111
[  236.252289][ T8090] ntrig 0003:1B96:0006.0008: input,hidraw0: USB HID v0.53 Joystick [HID 1b96:0006] on usb-dummy_hcd.0-1/input0
[  236.328605][ T4175] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  236.365783][ T8090] usb 1-1: USB disconnect, device number 9
[  236.382607][ T4175] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.423497][ T8889] program syz.3.1837 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  236.501040][ T4175] usb 5-1: config 0 descriptor??
[  236.641369][ T8891] fido_id[8891]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  236.747901][ T4175] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  236.789910][ T4175] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  236.857900][ T4175] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  236.916554][ T4175] usb 5-1: media controller created
[  236.995474][ T4175] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  237.046256][ T8900] loop0: detected capacity change from 0 to 64
[  237.095914][ T8902] Failed to get privilege flags for destination (handle=0x2:0x1)
[  237.148737][ T4175] az6027: usb out operation failed. (-71)
[  237.213456][ T4175] az6027: usb out operation failed. (-71)
[  237.237111][ T4175] stb0899_attach: Driver disabled by Kconfig
[  237.261862][ T4175] az6027: no front-end attached
[  237.261862][ T4175] 
[  237.307889][ T4175] az6027: usb out operation failed. (-71)
[  237.321493][ T4175] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  237.347203][ T4175] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11
[  237.403610][ T4175] dvb-usb: schedule remote query interval to 400 msecs.
[  237.421188][ T4175] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  237.450518][ T4175] usb 5-1: USB disconnect, device number 6
[  237.585685][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1847'.
[  237.703372][ T4175] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  237.756673][ T8917] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1849'.
[  237.949742][ T8923] loop4: detected capacity change from 0 to 1024
[  237.986379][ T8926] loop2: detected capacity change from 0 to 256
[  238.002147][ T8928] program syz.5.1854 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  238.186045][ T8923] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  238.224410][ T8926] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[  238.357997][ T8923] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  238.466055][ T8933] loop0: detected capacity change from 0 to 8192
[  238.543356][ T8942] loop3: detected capacity change from 0 to 256
[  238.610562][ T8923] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1852: bg 0: block 112: padding at end of block bitmap is not set
[  238.654753][ T8933] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  238.715208][ T8945] loop2: detected capacity change from 0 to 1024
[  238.734486][ T8933] REISERFS (device loop0): using ordered data mode
[  238.788569][ T8933] reiserfs: using flush barriers
[  238.816225][ T8945] EXT4-fs (loop2): Ignoring removed oldalloc option
[  238.918925][ T8923] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 149 with max blocks 1 with error 28
[  238.946651][ T8933] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  239.028828][ T8945] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000002,nodioread_nolock,oldalloc,barrier,delalloc,grpjquota=,,errors=continue. Quota mode: none.
[  239.081745][ T8950] EXT4-fs error (device loop4): ext4_free_blocks:6231: comm syz.4.1852: Freeing blocks not in datazone - block = 0, count = 16
[  239.108040][ T8933] REISERFS (device loop0): checking transaction log (loop0)
[  239.219816][ T8933] REISERFS (device loop0): Using r5 hash to sort names
[  239.233371][ T8945] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  239.299248][ T8933] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  239.327736][ T8923] EXT4-fs (loop4): This should not happen!! Data will be lost
[  239.327736][ T8923] 
[  239.405385][ T8945] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 3: comm syz.2.1859: lblock 3 mapped to illegal pblock 3 (length 3)
[  239.442207][ T8933] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  239.474124][ T8923] EXT4-fs (loop4): Total free blocks count 0
[  239.525922][ T8923] EXT4-fs (loop4): Free/Dirty block details
[  239.538234][ T8945] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  239.605511][ T8923] EXT4-fs (loop4): free_blocks=0
[  239.616397][ T8933] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  239.658056][ T8945] EXT4-fs (loop2): This should not happen!! Data will be lost
[  239.658056][ T8945] 
[  239.683176][ T8923] EXT4-fs (loop4): dirty_blocks=16
[  239.740145][ T8923] EXT4-fs (loop4): Block reservation details
[  239.747332][ T8962] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: comm syz.2.1859: lblock 0 mapped to illegal pblock 0 (length 1)
[  239.763144][ T8933] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  239.833023][ T8923] EXT4-fs (loop4): i_reserved_data_blocks=1
[  239.922279][ T8933] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  240.003987][  T154] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:2: lblock 8 mapped to illegal pblock 8 (length 8)
[  240.041679][  T150] block nbd2: Possible stuck request ffff888020c70000: control (read@0,4096B). Runtime 90 seconds
[  240.143689][ T8972] loop3: detected capacity change from 0 to 256
[  240.182000][  T154] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  240.224329][ T8972] exfat: Deprecated parameter 'utf8'
[  240.264328][ T8972] exfat: Deprecated parameter 'namecase'
[  240.273878][  T154] EXT4-fs (loop2): This should not happen!! Data will be lost
[  240.273878][  T154] 
[  240.313470][ T8972] exfat: Deprecated parameter 'namecase'
[  240.344972][ T8972] exfat: Deprecated parameter 'utf8'
[  240.465905][ T8972] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x69f3fdb7, utbl_chksum : 0xe619d30d)
[  240.578142][ T4313] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  240.949867][ T8985] loop0: detected capacity change from 0 to 24
[  240.987804][ T4313] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  241.027238][ T4313] usb 5-1: config 0 has no interface number 0
[  241.058863][ T8985] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  241.082758][ T4313] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.174309][ T8985] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  241.190014][ T4313] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  241.211595][ T8989] CIFS: Attempting to mount \\127.0.0.1\share
[  241.267245][ T4313] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  241.282485][ T8989] CIFS: VFS: Error connecting to socket. Aborting operation.
[  241.313018][ T8969] loop5: detected capacity change from 0 to 32768
[  241.330094][ T8989] CIFS: VFS: cifs_mount failed w/return code = -111
[  241.347356][ T4313] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  241.374963][ T8969] 
[  241.374963][ T8969]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  241.374963][ T8969] 
[  241.416378][ T4313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.484036][ T8969] ERROR: (device loop5): diWrite: ixpxd invalid
[  241.484036][ T8969] 
[  241.504203][ T4313] usb 5-1: config 0 descriptor??
[  241.562448][ T8969] ERROR: (device loop5): txCommit: 
[  241.562448][ T8969] 
[  241.692318][ T8969] ERROR: (device loop5): dtSearch: stack overrun!
[  241.692318][ T8969] 
[  241.713059][ T8997] loop0: detected capacity change from 0 to 1024
[  241.742585][ T8969] btstack dump:
[  241.789571][ T8969] bn = 0, index = 0
[  241.826660][ T8969] bn = 0, index = 0
[  241.843515][ T8997] EXT4-fs (loop0): Ignoring removed oldalloc option
[  241.883348][ T8969] bn = 0, index = 0
[  241.913097][ T8969] bn = 0, index = 0
[  241.916924][ T8969] bn = 0, index = 0
[  241.939030][ T8997] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000002,nodioread_nolock,oldalloc,barrier,delalloc,grpjquota=,,errors=continue. Quota mode: none.
[  241.995481][ T9001] loop2: detected capacity change from 0 to 4096
[  242.018316][ T8969] bn = 0, index = 0
[  242.042426][ T8969] bn = 0, index = 0
[  242.056552][ T9005] loop3: detected capacity change from 0 to 256
[  242.063046][ T8969] bn = 0, index = 0
[  242.078522][ T8997] ext4 filesystem being mounted at /462/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  242.124498][ T9001] EXT4-fs (loop2): inline encryption not supported
[  242.164239][ T9005] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  242.192806][ T7663] 
[  242.192806][ T7663]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  242.192806][ T7663] 
[  242.204579][ T9001] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c019, mo2=0003]
[  242.247730][ T4313] uclogic 0003:28BD:0042.0009: failed retrieving string descriptor #100: -71
[  242.284542][ T8997] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: block 3: comm syz.0.1882: lblock 3 mapped to illegal pblock 3 (length 3)
[  242.300011][ T4313] uclogic 0003:28BD:0042.0009: failed retrieving pen parameters: -71
[  242.327898][ T9001] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,dioread_nolock,inlinecrypt,noblock_validity,grpjquota=,lazytime,delalloc,nombcache,,errors=continue. Quota mode: writeback.
[  242.377294][ T7663] 
[  242.377294][ T7663]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  242.377294][ T7663] 
[  242.406323][ T4313] uclogic 0003:28BD:0042.0009: pen probing failed: -71
[  242.432530][ T4313] uclogic 0003:28BD:0042.0009: failed probing parameters: -71
[  242.447517][ T8997] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  242.507271][ T4313] uclogic: probe of 0003:28BD:0042.0009 failed with error -71
[  242.545507][ T9001] EXT4-fs (loop2): shut down requested (2)
[  242.572014][ T8997] EXT4-fs (loop0): This should not happen!! Data will be lost
[  242.572014][ T8997] 
[  242.592253][ T4313] usb 5-1: USB disconnect, device number 7
[  242.661953][ T9007] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: comm syz.0.1882: lblock 0 mapped to illegal pblock 0 (length 1)
[  242.921221][ T8934] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  243.072823][ T1161] EXT4-fs error (device loop0): ext4_map_blocks:741: inode #15: block 8: comm kworker/u4:3: lblock 8 mapped to illegal pblock 8 (length 8)
[  243.185531][ T9020] vivid-003: disconnect
[  243.200199][ T1161] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  243.264259][ T9013] vivid-003: reconnect
[  243.292994][ T1161] EXT4-fs (loop0): This should not happen!! Data will be lost
[  243.292994][ T1161] 
[  243.327794][ T7566] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  243.607751][ T7566] usb 6-1: Using ep0 maxpacket: 32
[  243.762281][ T7566] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  243.805963][ T7566] usb 6-1: config 0 has no interface number 0
[  243.997972][ T7566] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  244.062697][ T7566] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.126004][ T7566] usb 6-1: Product: syz
[  244.134059][ T9048] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  244.176084][ T7566] usb 6-1: Manufacturer: syz
[  244.217335][ T7566] usb 6-1: SerialNumber: syz
[  244.252961][ T7566] usb 6-1: config 0 descriptor??
[  244.338856][ T7566] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  244.559075][ T7566] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  244.622272][ T7566] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  244.633350][ T9062] loop2: detected capacity change from 0 to 64
[  244.754070][ T9062] attempt to access beyond end of device
[  244.754070][ T9062] loop2: rw=0, want=1026, limit=64
[  244.841996][ T9062] Buffer I/O error on dev loop2, logical block 512, async page read
[  244.884160][ T9062] attempt to access beyond end of device
[  244.884160][ T9062] loop2: rw=0, want=113154, limit=64
[  244.934705][ T9062] Buffer I/O error on dev loop2, logical block 56576, async page read
[  244.982192][ T4313] usb 6-1: USB disconnect, device number 3
[  244.997659][    C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  245.041604][ T4313] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  245.130607][ T4313] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  245.214894][ T4313] quatech2 6-1:0.51: device disconnected
[  245.475276][ T9081] loop0: detected capacity change from 0 to 2048
[  245.576942][ T9085] program syz.2.1920 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  245.622735][ T9081] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  245.862388][ T9089] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1923'.
[  246.118697][ T8090] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  246.507802][ T8090] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  246.552755][ T9105] loop3: detected capacity change from 0 to 8192
[  246.580381][ T8090] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  246.646220][ T9105] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  246.687676][ T8090] usb 6-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice= 0.00
[  246.724120][ T9105] REISERFS (device loop3): using ordered data mode
[  246.753536][ T8090] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.782416][ T9105] reiserfs: using flush barriers
[  246.833436][ T9105] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  246.872007][ T8090] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2
[  246.935579][ T9105] REISERFS (device loop3): checking transaction log (loop3)
[  246.982093][ T9094] loop2: detected capacity change from 0 to 32768
[  247.010726][ T9105] REISERFS (device loop3): Using r5 hash to sort names
[  247.066366][ T9105] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  247.108310][ T9094] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  247.187715][ T9105] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  247.347397][ T9105] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  247.373876][ T4202] ocfs2: Unmounting device (7,2) on (node local)
[  247.489143][ T9105] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  247.547668][ T2424] pvrusb2: control-write URB short, expected=6 got=0
[  247.568282][ T2424] pvrusb2: Device being rendered inoperable
[  247.617761][ T7564] usb 6-1: USB disconnect, device number 4
[  247.631651][ T9105] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  247.648266][ T2424] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  247.701817][ T2424] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  247.747779][ T2424] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  247.859879][ T2424] cx25840 3-0044: Unable to detect h/w, assuming cx23887
[  247.867397][ T2424] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  248.060841][ T9112] loop4: detected capacity change from 0 to 32768
[  248.087685][ T2424] pvrusb2: Attached sub-driver cx25840
[  248.147702][ T9134] i2c i2c-0: new_device: Instantiated device stusb1600 at 0x28
[  248.253491][ T9112] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1932 (9112)
[  248.295037][ T2424] pvrusb2: Attempted to execute control transfer when device not ok
[  248.351920][ T2424] pvrusb2: Attempted to execute control transfer when device not ok
[  248.427417][ T2424] pvrusb2: Attempted to execute control transfer when device not ok
[  248.481824][ T9112] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  248.531260][ T2424] pvrusb2: Attempted to execute control transfer when device not ok
[  248.597811][ T4313] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  248.617711][ T9112] BTRFS info (device loop4): allowing degraded mounts
[  248.624764][ T9112] BTRFS info (device loop4): turning on flush-on-commit
[  248.637984][ T2424] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  248.784886][ T9112] BTRFS info (device loop4): max_inline at 0
[  248.820890][ T9156] loop5: detected capacity change from 0 to 64
[  248.886953][ T9112] BTRFS info (device loop4): setting nodatasum
[  248.924031][ T4313] usb 4-1: Using ep0 maxpacket: 16
[  248.968362][ T9112] BTRFS info (device loop4): turning on sync discard
[  248.998043][  T150] block nbd1: Possible stuck request ffff888020c18000: control (read@0,4096B). Runtime 120 seconds
[  249.030501][ T9156] attempt to access beyond end of device
[  249.030501][ T9156] loop5: rw=0, want=1026, limit=64
[  249.071188][ T9112] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  249.117560][ T2424] TUNER: Unable to find symbol tda829x_probe()
[  249.144275][ T9156] Buffer I/O error on dev loop5, logical block 512, async page read
[  249.197875][ T9112] BTRFS info (device loop4): trying to use backup root at mount time
[  249.216258][ T9156] attempt to access beyond end of device
[  249.216258][ T9156] loop5: rw=0, want=113154, limit=64
[  249.238231][ T2424] DVB: Unable to find symbol tda9887_attach()
[  249.244313][ T2424] tuner: 3-0043: Tuner 4 found with type(s) Radio TV.
[  249.253962][ T4313] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  249.294509][ T4313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.304781][ T9112] BTRFS info (device loop4): using free space tree
[  249.315530][ T9156] Buffer I/O error on dev loop5, logical block 56576, async page read
[  249.346253][ T2424] pvrusb2: Attached sub-driver tuner
[  249.383660][ T4313] usb 4-1: Product: syz
[  249.392375][ T2424] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  249.411804][ T9112] BTRFS info (device loop4): has skinny extents
[  249.438280][ T9160] attempt to access beyond end of device
[  249.438280][ T9160] loop5: rw=0, want=1026, limit=64
[  249.450312][ T4313] usb 4-1: Manufacturer: syz
[  249.454942][ T4313] usb 4-1: SerialNumber: syz
[  249.500689][ T2424] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  249.528230][ T4313] r8152-cfgselector 4-1: config 0 descriptor??
[  249.538229][ T9160] Buffer I/O error on dev loop5, logical block 512, async page read
[  249.616092][ T9160] attempt to access beyond end of device
[  249.616092][ T9160] loop5: rw=0, want=113154, limit=64
[  249.709600][ T9160] Buffer I/O error on dev loop5, logical block 56576, async page read
[  249.787843][ T4313] r8152-cfgselector 4-1: Unknown version 0x0000
[  249.847853][ T4313] r8152-cfgselector 4-1: Unknown version 0x0000
[  249.877203][ T4313] r8152-cfgselector 4-1: bad CDC descriptors
[  249.952252][ T4313] usbip-host 4-1: 4-1 is not in match_busid table... skip!
[  250.136234][ T9165] loop0: detected capacity change from 0 to 32768
[  250.148277][ T9162] loop2: detected capacity change from 0 to 32768
[  250.227458][ T9165] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  250.296100][ T9165] JBD2: Ignoring recovery information on journal
[  250.415670][ T9165] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  250.470384][ T8089] usb 4-1: USB disconnect, device number 12
[  250.480835][ T9112] BTRFS error (device loop4): open_ctree failed: -12
[  250.517211][ T9162] XFS (loop2): Mounting V5 Filesystem
[  250.622040][ T9194] loop5: detected capacity change from 0 to 512
[  250.639775][ T9162] XFS (loop2): Ending clean mount
[  250.757424][ T9194] EXT4-fs (loop5): Ignoring removed bh option
[  250.825385][ T4186] ocfs2: Unmounting device (7,0) on (node local)
[  250.845893][ T9194] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.1956: corrupted in-inode xattr
[  250.951923][ T9194] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.1956: couldn't read orphan inode 15 (err -117)
[  251.000511][ T4202] XFS (loop2): Unmounting Filesystem
[  251.126480][ T9194] EXT4-fs (loop5): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none.
[  251.154522][    C0] vkms_vblank_simulate: vblank timer overrun
[  251.276659][ T9202] loop3: detected capacity change from 0 to 4096
[  251.331319][ T9202] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  251.582234][ T9206] loop4: detected capacity change from 0 to 164
[  251.720931][ T9206] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[  251.946861][ T9206] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[  252.164512][ T9216] loop3: detected capacity change from 0 to 512
[  252.310899][ T9216] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.1965: bg 0: block 5: invalid block bitmap
[  252.421710][ T9216] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  252.493317][ T9216] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1965: invalid indirect mapped block 3 (level 2)
[  252.575621][ T9216] EXT4-fs (loop3): 1 orphan inode deleted
[  252.617886][ T9216] EXT4-fs (loop3): 1 truncate cleaned up
[  252.657507][ T9216] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  252.692878][ T9210] comedi comedi1: reset error (fatal)
[  252.774086][ T9209] loop0: detected capacity change from 0 to 32768
[  252.864319][ T9209] XFS (loop0): Mounting V5 Filesystem
[  253.031423][ T9209] XFS (loop0): Ending clean mount
[  253.061590][ T9209] XFS (loop0): Quotacheck needed: Please wait.
[  253.154559][ T9218] loop2: detected capacity change from 0 to 32768
[  253.243975][ T9218] (syz.2.1960,9218,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  253.282916][ T9209] XFS (loop0): Quotacheck: Done.
[  253.361024][ T9209] XFS (loop0): User initiated shutdown received.
[  253.417022][ T9209] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495).  Shutting down filesystem.
[  253.442049][ T9218] (syz.2.1960,9218,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  253.628339][ T9218] JBD2: Ignoring recovery information on journal
[  253.639224][ T9209] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  253.805180][ T9218] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  253.875567][ T4186] XFS (loop0): Unmounting Filesystem
[  254.195057][ T9258] loop3: detected capacity change from 0 to 512
[  254.216813][ T9260] loop5: detected capacity change from 0 to 8
[  254.255965][ T4202] ocfs2: Unmounting device (7,2) on (node local)
[  254.281738][ T9258] EXT4-fs (loop3): Ignoring removed oldalloc option
[  254.367029][ T9258] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  254.483123][ T9258] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1978: invalid indirect mapped block 4294967295 (level 1)
[  254.575393][ T9258] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1978: invalid indirect mapped block 4294967295 (level 1)
[  254.742443][ T9258] EXT4-fs (loop3): 2 truncates cleaned up
[  254.785376][ T9258] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,oldalloc,jqfmt=vfsv0,i_version,,errors=continue. Quota mode: writeback.
[  254.959292][ T9270] EXT4-fs (loop5): 1 orphan inode deleted
[  255.015311][ T9270] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  255.054461][ T9276] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1985'.
[  255.118217][ T9270] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  255.300693][ T9270] EXT4-fs (loop5): shut down requested (2)
[  255.400905][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  255.407329][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  256.096178][   T26] audit: type=1326 audit(1789720399.097:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9310 comm="syz.2.2000" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20fe016159 code=0x0
[  256.121125][ T4231] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  256.314208][ T9319] netlink: 'syz.3.2003': attribute type 1 has an invalid length.
[  256.336466][ T9319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2003'.
[  256.539155][ T4231] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  256.566506][ T4231] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  256.597478][ T4231] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  256.623089][ T9301] set_capacity_and_notify: 1 callbacks suppressed
[  256.623098][ T9301] loop4: detected capacity change from 0 to 32768
[  256.645223][ T4231] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.671161][ T4231] usb 6-1: config 0 descriptor??
[  256.729069][ T4231] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  256.757496][ T4231] dvb-usb: bulk message failed: -22 (3/0)
[  256.799634][ T4231] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  256.850021][ T4231] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  256.871942][ T4231] usb 6-1: media controller created
[  256.885870][ T4231] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  256.953956][ T4231] dvb-usb: bulk message failed: -22 (6/0)
[  256.987909][ T4231] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  257.035338][ T9301] XFS (loop4): Mounting V5 Filesystem
[  257.050850][ T9321] loop3: detected capacity change from 0 to 40427
[  257.068490][ T4231] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input12
[  257.097059][ T9330] loop2: detected capacity change from 0 to 1764
[  257.128353][ T9321] F2FS-fs (loop3): invalid crc value
[  257.144017][ T4231] dvb-usb: schedule remote query interval to 150 msecs.
[  257.202934][ T9321] F2FS-fs (loop3): Found nat_bits in checkpoint
[  257.222071][ T4231] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  257.292708][ T4231] usb 6-1: USB disconnect, device number 5
[  257.319801][ T9301] XFS (loop4): Ending clean mount
[  257.367906][ T4231] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  257.416061][ T9321] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  257.717820][ T4231] Bluetooth: hci0: command 0x0c1a tx timeout
[  257.729155][ T4187] attempt to access beyond end of device
[  257.729155][ T4187] loop3: rw=2049, want=45104, limit=40427
[  257.855203][ T5297] XFS (loop4): Unmounting Filesystem
[  257.902913][ T9348] loop2: detected capacity change from 0 to 4096
[  257.964617][ T9348] EXT4-fs (loop2): Test dummy encryption mode enabled
[  258.016968][ T9348] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a803c02c, mo2=0002]
[  258.050059][ T9348] System zones: 0-5
[  258.090516][ T9348] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,test_dummy_encryption=v1,dioread_nolock,journal_dev=0x0000000000000003,dioread_lock,auto_da_alloc=0x0000000000000000,nodioread_nolock,nodioread_nolock,errors=remount-ro,bsddf,grpid,max_dir_size_kb=0x0000000000000001,. Quota mode: writeback.
[  258.603341][ T9289] block2mtd: error: cannot open device /dev/
[  258.795024][ T9360] loop5: detected capacity change from 0 to 512
[  258.930593][ T9360] EXT4-fs (loop5): Ignoring removed oldalloc option
[  258.992260][ T9367] loop3: detected capacity change from 0 to 512
[  259.001515][ T9360] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  259.073464][ T9360] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  259.137782][ T9367] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  259.178051][ T9360] EXT4-fs (loop5): 1 truncate cleaned up
[  259.201756][ T9367] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2019: invalid indirect mapped block 256 (level 1)
[  259.235979][ T9360] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,quota,jqfmt=vfsold,oldalloc,grpjquota=,,errors=continue. Quota mode: writeback.
[  259.254413][    C0] vkms_vblank_simulate: vblank timer overrun
[  259.321287][ T9367] EXT4-fs (loop3): Remounting filesystem read-only
[  259.373210][ T9367] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2019: invalid indirect mapped block 2683928664 (level 1)
[  259.403543][ T9352] loop2: detected capacity change from 0 to 32768
[  259.486242][ T9352] (syz.2.2013,9352,0):ocfs2_init_global_system_inodes:462 ERROR: status = -22
[  259.502371][ T9367] EXT4-fs (loop3): Remounting filesystem read-only
[  259.550945][ T9367] EXT4-fs (loop3): 1 truncate cleaned up
[  259.563673][ T9352] (syz.2.2013,9352,0):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 3, possibly corrupt fs?
[  259.563695][ T9352] (syz.2.2013,9352,0):ocfs2_init_global_system_inodes:473 ERROR: status = -22
[  259.606614][ T9367] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,auto_da_alloc=0x0000000000000006,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.jqfmt=vfsv1,noauto_da_alloc,jqfmt=vfsv0,barrier,errors=remount-ro,,. Quota mode: writeback.
[  259.715376][ T9352] (syz.2.2013,9352,0):ocfs2_initialize_super:2279 ERROR: status = -22
[  259.752138][ T9352] (syz.2.2013,9352,0):ocfs2_fill_super:1177 ERROR: status = -22
[  259.796565][   T26] audit: type=1326 audit(1789720402.797:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.2023" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46dc684159 code=0x7fc00000
[  259.820789][    C0] vkms_vblank_simulate: vblank timer overrun
[  260.113964][ T9388] loop3: detected capacity change from 0 to 256
[  260.204845][ T9388] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  260.278640][ T9390] loop5: detected capacity change from 0 to 4096
[  260.344031][ T9388] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008)
[  260.409874][ T9352] loop2: detected capacity change from 0 to 1024
[  260.434900][ T9393] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  260.461406][ T9388] exFAT-fs (loop3): error, failed to bmap (inode : ffff888073be94e0 iblock : 8, err : -5)
[  260.523619][   T26] audit: type=1326 audit(1789720403.527:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.2023" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f46dc684159 code=0x7fc00000
[  260.592542][ T9388] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008)
[  260.644282][ T9390] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean
[  260.692016][ T9388] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008)
[  260.729382][   T26] audit: type=1326 audit(1789720403.527:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.2023" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46dc684159 code=0x7fc00000
[  260.753472][    C0] vkms_vblank_simulate: vblank timer overrun
[  260.807980][ T9397] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008)
[  260.914671][   T26] audit: type=1326 audit(1789720403.527:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.2023" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46dc684159 code=0x7fc00000
[  260.938918][    C0] vkms_vblank_simulate: vblank timer overrun
[  261.066559][   T26] audit: type=1326 audit(1789720403.527:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.2023" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46dc684159 code=0x7fc00000
[  261.090789][    C0] vkms_vblank_simulate: vblank timer overrun
[  261.297707][   T26] audit: type=1326 audit(1789720403.527:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.2023" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46dc684159 code=0x7fc00000
[  261.322010][    C0] vkms_vblank_simulate: vblank timer overrun
[  261.609992][   T26] audit: type=1326 audit(1789720403.527:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.2023" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46dc684159 code=0x7fc00000
[  261.836199][   T26] audit: type=1326 audit(1789720403.527:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.2023" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46dc684159 code=0x7fc00000
[  261.860269][    C0] vkms_vblank_simulate: vblank timer overrun
[  262.073175][   T26] audit: type=1326 audit(1789720403.527:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.2023" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46dc684159 code=0x7fc00000
[  262.109702][ T9432] set_capacity_and_notify: 1 callbacks suppressed
[  262.109712][ T9432] loop3: detected capacity change from 0 to 512
[  262.130528][ T9435] loop2: detected capacity change from 0 to 512
[  262.213630][ T9435] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.2047: bg 0: block 5: invalid block bitmap
[  262.264358][ T9432] EXT4-fs (loop3): Ignoring removed oldalloc option
[  262.308038][   T26] audit: type=1326 audit(1789720403.527:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.2023" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46dc684159 code=0x7fc00000
[  262.353174][ T9435] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  262.383401][ T9432] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  262.448457][ T9435] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2047: invalid indirect mapped block 3 (level 2)
[  262.477767][ T9432] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  262.543084][   T26] audit: type=1326 audit(1789720403.527:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.2023" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46dc684159 code=0x7fc00000
[  262.585884][ T9432] EXT4-fs (loop3): 1 truncate cleaned up
[  262.598885][ T9435] EXT4-fs (loop2): 1 orphan inode deleted
[  262.637687][ T9432] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,quota,jqfmt=vfsold,oldalloc,grpjquota=,,errors=continue. Quota mode: writeback.
[  262.658064][ T9435] EXT4-fs (loop2): 1 truncate cleaned up
[  262.663708][ T9435] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  262.724920][   T26] audit: type=1326 audit(1789720403.527:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.2023" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46dc684159 code=0x7fc00000
[  262.916105][   T26] audit: type=1326 audit(1789720403.527:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.2023" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46dc684159 code=0x7fc00000
[  262.940238][    C0] vkms_vblank_simulate: vblank timer overrun
[  263.078339][   T27] INFO: task udevd:4303 blocked for more than 143 seconds.
[  263.092574][   T26] audit: type=1326 audit(1789720403.527:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.2023" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46dc684159 code=0x7fc00000
[  263.136558][   T27]       Not tainted syzkaller #0
[  263.168508][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  263.204429][   T27] task:udevd           state:D stack:23344 pid: 4303 ppid:  3558 flags:0x00004002
[  263.225950][   T26] audit: type=1326 audit(1789720403.527:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.0.2023" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46dc684159 code=0x7fc00000
[  263.263385][   T27] Call Trace:
[  263.276028][   T27]  <TASK>
[  263.285233][   T27]  __schedule+0x11c3/0x4350
[  263.299461][   T27]  ? release_firmware_map_entry+0x190/0x190
[  263.316776][   T27]  ? preempt_schedule+0xbc/0xd0
[  263.351745][   T27]  ? preempt_schedule_common+0xa5/0xd0
[  263.378617][   T27]  ? release_firmware_map_entry+0x190/0x190
[  263.415501][   T27]  ? preempt_schedule+0xbc/0xd0
[  263.431815][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  263.445430][   T27]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  263.461553][   T27]  ? __lock_acquire+0x7b50/0x7b50
[  263.476559][   T27]  ? lock_chain_count+0x20/0x20
[  263.491978][ T9451] loop5: detected capacity change from 0 to 32768
[  263.499759][   T27]  schedule+0x11b/0x1e0
[  263.504807][   T27]  io_schedule+0x7c/0xd0
[  263.525467][ T9451] (syz.5.2054,9451,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  263.550017][   T27]  wait_on_page_bit_common+0x8bf/0xeb0
[  263.566994][   T27]  ? wait_on_page_bit+0x50/0x50
[  263.582992][   T27]  ? blkdev_fallocate+0x4a0/0x4a0
[  263.591324][ T9451] (syz.5.2054,9451,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  263.616459][   T27]  ? rcu_lock_release+0x20/0x20
[  263.631806][   T27]  do_read_cache_page+0xae6/0x1010
[  263.641554][   T27]  read_part_sector+0xd7/0x4c0
[  263.647507][ T9451] (syz.5.2054,9451,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  263.667005][   T27]  ? vsnprintf+0x14e/0x1c20
[  263.672840][   T27]  adfspart_check_ICS+0xc3/0xe90
[  263.684409][ T9451] JBD2: Ignoring recovery information on journal
[  263.692551][   T27]  ? vsnprintf+0x1b22/0x1c20
[  263.697249][   T27]  ? adfspart_check_ADFS+0x840/0x840
[  263.714863][   T27]  ? snprintf+0xe5/0x140
[  263.736019][   T27]  ? vscnprintf+0x80/0x80
[  263.755410][   T27]  bdev_disk_changed+0x936/0x1690
[  263.766036][ T9451] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  263.780652][   T27]  ? blk_drop_partitions+0x1b0/0x1b0
[  263.786338][   T27]  ? iput+0x345/0x880
[  263.813208][   T27]  blkdev_get_whole+0x2f9/0x390
[  263.840173][   T27]  blkdev_get_by_dev+0x2da/0xa50
[  263.861698][   T27]  blkdev_open+0x128/0x2c0
[  263.883095][   T27]  ? block_ioctl+0xf0/0xf0
[  263.903807][   T27]  do_dentry_open+0x7f7/0xf90
[  263.924084][   T27]  path_openat+0x2718/0x2fb0
[  263.941007][   T27]  ? __kasan_slab_alloc+0xa9/0xc0
[  263.952772][   T27]  ? do_filp_open+0x400/0x400
[  263.960805][   T27]  do_filp_open+0x1df/0x400
[  263.965392][   T27]  ? vfs_tmpfile+0x300/0x300
[  263.972947][   T27]  ? _raw_spin_unlock+0x24/0x40
[  263.979741][   T27]  ? alloc_fd+0x59e/0x650
[  263.984169][   T27]  do_sys_openat2+0x14b/0x500
[  263.993138][   T27]  ? __lock_acquire+0x7b50/0x7b50
[  264.001879][   T27]  ? do_sys_open+0xe0/0xe0
[  264.006398][   T27]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  264.015302][   T27]  ? lock_chain_count+0x20/0x20
[  264.022153][   T27]  __x64_sys_openat+0x135/0x160
[  264.027095][   T27]  do_syscall_64+0x4c/0xa0
[  264.034950][   T27]  ? clear_bhb_loop+0x30/0x80
[  264.042762][   T27]  ? clear_bhb_loop+0x30/0x80
[  264.047507][   T27]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  264.056991][   T27] RIP: 0033:0x7f34bd762407
[  264.063375][   T27] RSP: 002b:00007ffe535301f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  264.075745][   T27] RAX: ffffffffffffffda RBX: 00007f34bd674880 RCX: 00007f34bd762407
[  264.085309][   T27] RDX: 00000000000a0800 RSI: 000055e513670290 RDI: ffffffffffffff9c
[  264.097123][   T27] RBP: 000055e51364e910 R08: 0000000000000000 R09: 0000000000000000
[  264.112046][   T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e513662ba0
[  264.122890][   T27] R13: 000055e513666410 R14: 0000000000000000 R15: 000055e513662ba0
[  264.134370][   T27]  </TASK>
[  264.139601][ T9459] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2058'.
[  264.187240][ T7663] ocfs2: Unmounting device (7,5) on (node local)
[  264.193738][   T27] 
[  264.193738][   T27] Showing all locks held in the system:
[  264.253590][   T27] 2 locks held by kworker/0:0/7:
[  264.298655][   T27]  #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0
[  264.364408][   T27]  #1: ffffc90000cc7d00 ((work_completion)(&m->mpeg_thread)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0
[  264.402322][   T27] 1 lock held by khungtaskd/27:
[  264.410143][   T27]  #0: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
[  264.422458][   T27] 2 locks held by kworker/0:2/1107:
[  264.430699][   T27]  #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0
[  264.444227][   T27]  #1: ffffc900049afd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0
[  264.461165][   T27] 2 locks held by getty/3947:
[  264.465891][   T27]  #0: ffff88802c9f3098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  264.479974][   T27]  #1: ffffc900025e62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50
[  264.493242][   T27] 1 lock held by udevd/4178:
[  264.499635][   T27]  #0: ffff888020418518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x162/0xa50
[  264.513728][   T27] 1 lock held by udevd/4179:
[  264.521617][   T27]  #0: ffff88802041a518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x162/0xa50
[  264.534921][   T27] 2 locks held by kworker/0:5/4231:
[  264.543454][   T27]  #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0
[  264.557398][   T27]  #1: ffffc900031dfd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0
[  264.574703][   T27] 3 locks held by kworker/0:6/4233:
[  264.580096][   T27]  #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0
[  264.594694][   T27]  #1: ffffc900031ffd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0
[  264.614017][   T27]  #2: ffffffff8c3239e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750
[  264.625892][   T27] 1 lock held by udevd/4303:
[  264.634495][   T27]  #0: ffff888020484d18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x162/0xa50
[  264.644680][   T27] 3 locks held by kworker/0:16/7565:
[  264.655484][   T27]  #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0
[  264.667313][   T27]  #1: ffffc90004307d00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0
[  264.684996][   T27]  #2: ffffffff8c3239e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3a5/0x750
[  264.696109][   T27] 2 locks held by syz-executor/7663:
[  264.706263][   T27]  #0: ffff88802007fd18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf1/0x780
[  264.722487][   T27]  #1: ffff8880201e5468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xa9/0xb50
[  264.732401][   T27] 2 locks held by kworker/0:20/9191:
[  264.741847][   T27]  #0: ffff888016c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0
[  264.752310][   T27]  #1: ffffc90003e07d00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0
[  264.769233][   T27] 
[  264.773072][   T27] =============================================
[  264.773072][   T27] 
[  264.808149][   T27] NMI backtrace for cpu 0
[  264.812516][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  264.819703][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  264.829747][   T27] Call Trace:
[  264.833013][   T27]  <TASK>
[  264.835945][   T27]  dump_stack_lvl+0x188/0x250
[  264.840646][   T27]  ? show_regs_print_info+0x20/0x20
[  264.845836][   T27]  ? load_image+0x410/0x410
[  264.850345][   T27]  ? tick_nohz_tick_stopped+0x7b/0xb0
[  264.855714][   T27]  ? nmi_cpu_backtrace+0x1b2/0x3d0
[  264.860844][   T27]  nmi_cpu_backtrace+0x3a2/0x3d0
[  264.865777][   T27]  ? nmi_trigger_cpumask_backtrace+0x280/0x280
[  264.871946][   T27]  ? _printk+0xda/0x130
[  264.876102][   T27]  ? load_image+0x410/0x410
[  264.880606][   T27]  ? load_image+0x410/0x410
[  264.885101][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  264.891181][   T27]  nmi_trigger_cpumask_backtrace+0x163/0x280
[  264.897150][   T27]  watchdog+0xe1b/0xe60
[  264.901308][   T27]  kthread+0x42e/0x520
[  264.905365][   T27]  ? hungtask_pm_notify+0x40/0x40
[  264.910376][   T27]  ? kthread_blkcg+0xd0/0xd0
[  264.914961][   T27]  ret_from_fork+0x1f/0x30
[  264.919383][   T27]  </TASK>
[  264.922448][    C0] vkms_vblank_simulate: vblank timer overrun
[  265.039310][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  265.046301][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  265.053497][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  265.063626][   T27] Call Trace:
[  265.066899][   T27]  <TASK>
[  265.069834][   T27]  dump_stack_lvl+0x188/0x250
[  265.074544][   T27]  ? show_regs_print_info+0x20/0x20
[  265.079737][   T27]  ? load_image+0x410/0x410
[  265.084250][   T27]  panic+0x2f8/0x850
[  265.088138][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  265.093762][   T27]  ? bpf_jit_dump+0xd0/0xd0
[  265.098281][   T27]  ? __irq_work_queue_local+0x12c/0x190
[  265.103835][   T27]  ? nmi_trigger_cpumask_backtrace+0x260/0x280
[  265.109982][   T27]  watchdog+0xe5a/0xe60
[  265.114131][   T27]  kthread+0x42e/0x520
[  265.118187][   T27]  ? hungtask_pm_notify+0x40/0x40
[  265.123251][   T27]  ? kthread_blkcg+0xd0/0xd0
[  265.127857][   T27]  ret_from_fork+0x1f/0x30
[  265.132276][   T27]  </TASK>
[  265.135374][   T27] Kernel Offset: disabled
[  265.139710][   T27] Rebooting in 86400 seconds..