last executing test programs:

4m56.527396093s ago: executing program 4 (id=4249):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7)

4m56.366798825s ago: executing program 4 (id=4251):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000003f40)={[{@noinit_itable}, {@noblock_validity}, {@jqfmt_vfsv0}, {@abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xd}}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0x1, 0x565, &(0x7f00000039c0)="$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")
lgetxattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000140)=@known='system.posix_acl_default\x00', 0x0, 0x0)

4m55.850625613s ago: executing program 4 (id=4257):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000240)={'bridge_slave_1\x00', {0x2, 0x4e24, @private=0xa010101}})

4m55.292655562s ago: executing program 4 (id=4262):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000019c0)=ANY=[@ANYBLOB='allow_utime=00000000000000000000304,namecase=1,errors=remount-ro,umask=00000000000000000000020,fmask=00000000000000000000005,iocharset=cp1251,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000003,errors=continue,fmask=00000000000000000000005,allow_utime=0000000000000002\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x152a, &(0x7f0000000340)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)

4m54.80614443s ago: executing program 4 (id=4268):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1ff, 0x80)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0x8)

4m54.053835271s ago: executing program 4 (id=4282):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x10b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0xffffffffffffff12, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

4m53.624661227s ago: executing program 32 (id=4282):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x10b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0xffffffffffffff12, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

4m50.326712058s ago: executing program 1 (id=4320):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x4bfa, &(0x7f0000000000))

4m50.102091102s ago: executing program 1 (id=4324):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_mr_vif\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])

4m49.825636036s ago: executing program 1 (id=4327):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x5b59a396928ba8c6}]}}}]}], {0x14, 0x10}}, 0xa0}}, 0x0)

4m49.5854695s ago: executing program 1 (id=4330):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000019c0)=ANY=[@ANYBLOB='allow_utime=00000000000000000000304,namecase=1,errors=remount-ro,umask=00000000000000000000020,fmask=00000000000000000000005,iocharset=cp1251,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000003,errors=continue,fmask=00000000000000000000005,allow_utime=0000000000000002\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x152a, &(0x7f0000000340)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)

4m48.857482571s ago: executing program 1 (id=4333):
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0)
mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='romfs\x00', 0x0, 0x0)

4m48.218128651s ago: executing program 1 (id=4338):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

4m47.816389067s ago: executing program 33 (id=4338):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

1m59.783221925s ago: executing program 6 (id=6390):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1200}}}}}}]}, 0x48}}, 0x0)

1m59.45302236s ago: executing program 6 (id=6393):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x40, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2e}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0xc000)

1m59.117117006s ago: executing program 6 (id=6396):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="88450300000000002c00128009000100626f6e64000000001c000280050001000600000008000200", @ANYRES32=0x0, @ANYBLOB="080014"], 0x4c}, 0x1, 0x0, 0x0, 0x20000894}, 0x40)

1m58.754132051s ago: executing program 6 (id=6399):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@umask={'umask', 0x3d, 0xb}}, {@nodecompose}, {@nls={'nls', 0x3d, 'cp775'}}, {@uid}, {@type={'type', 0x3d, "0ff88dbf"}}, {@nobarrier}]}, 0x20, 0x6e7, &(0x7f00000006c0)="$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")
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)

1m58.309534078s ago: executing program 6 (id=6404):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0)

1m57.588011329s ago: executing program 6 (id=6409):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDADDIO(r0, 0x4b34, 0x100)

1m57.106247876s ago: executing program 34 (id=6409):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDADDIO(r0, 0x4b34, 0x100)

4.681285278s ago: executing program 7 (id=7677):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x60}}, 0x0)

4.504622191s ago: executing program 7 (id=7681):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x48, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_csum={0x30, 0x14, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008800)

4.278431604s ago: executing program 7 (id=7686):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x70bd28, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e, 0xfffffffd}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0)

4.025338819s ago: executing program 7 (id=7690):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0x1c4, 0x10, 0x633, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffd, 0x0, 0x0, 0x2dcd}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x89, 0x1, {{'md5\x00'}, 0x208, "fd03480f2e2ebb04183ebca2d78f40b20e8473b935f6cf6f3d2c402e34b339e1b0cd2b29cd33e8f258cf85e6c1348f664a094fe82198b2247fe438734b6b8a3542"}}]}, 0x1c4}}, 0x0)

4.023847859s ago: executing program 3 (id=7691):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@dellinkprop={0x28, 0x6d, 0x807, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x8, 0x8}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x34000894}, 0x2)

3.696437393s ago: executing program 3 (id=7696):
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f15241313560608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"})

3.474784807s ago: executing program 3 (id=7699):
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000000340)=[{{&(0x7f00000000c0)={0xa, 0x0, 0xb4ef, @rand_addr=' \x01\x00', 0x40000}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000000000002900000039"], 0x18}}], 0x1, 0x0)

3.332503099s ago: executing program 7 (id=7703):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1fc0a0869fd0e76753a00000400", 0x0, 0x400006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.156130161s ago: executing program 3 (id=7705):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x3800844, &(0x7f0000000140)={[{@fat=@nfs}, {@numtail}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@rodir}, {@uni_xlateno}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@fat=@umask={'umask', 0x3d, 0x8002}}, {@shortname_win95}, {@shortname_lower}, {@uni_xlateno}]}, 0x3, 0x366, &(0x7f0000000840)="$eJzs3U9om2UYAPAn+9KkHdT2IAwF4dOboGWteNBTy+hgmItK8M9BDK5TaeqgwWB3aFov4lHwqCdvCnrwsLMIinjz4NUJMhUPutvA4SfJl79N2nVg68p+v0N48rzPs/f99n00XxPy9tXlWL84FZdu3Lge09OFKC6fW46bhZiPJHp2YlxpQg4AOBluZln8leUO1zFVOOo1AQBHq/P6//rsUObdbw6qz7z6A8CJ1/39fyZ/lkysmd6v+fKRLQsAOEJj7/8/MjJcGv2ov7jPHQIAcJI8/9LLz6xUIp5L0+mIjfea1WY1nh6Mr1yKN6Mea3E25uJWRH6j0H4odB7PX6isnk3TtBW/zke13dGsRmy0mtX8TmEl6fSXYzHmYr7b373byLIsOf9lZXUxTdO087nCTqszf2wUmtWpON2d/6fTsRZLkcb9Y/0RFyqrS2kuqhu9/lbE7uB9i/b6F2IufngtLkc9Lka7t3dbU1ndXkzTc1llpL9ZLXfqctPx2eyxnRIAAAAAAAAAAAAAAAAAAAAAAO4BC2nffH//m2ywf8/CwoTxzv44eX93f6DdfH+grJxFlv35zuPV95MY2R9o7/48zWoxTv2/hw4AAAAAAAAAAAAAAAAAAAB3jcZWKWr1+tpmY+vK+nDQ2mxsnYqIduat7z7/eibGa24TFLtzDA2l3dSV9VqW9IqzJK+ZGWlP2pP3Mp9e7a94uKbcP4qJyyjvP1Svzz78y0eDzENJ71/+Z1CTxOQDTPYsYzjYuC9f0p38R/WDpdvUXMuybL/27VfGu6IQUbzzE3dwkLWDb6+/8cATjTNPdjJfZblHH5t74dqHn/y+Xqu3Z47OGSxtNm5l67Xu88kX2/5BMnT9FCIPCsNXQvGg9t3RTC358Y8XH/zg+8PNng0yhfrbE2qS/HC+2DtUyoP2MvcM9a/w0tCVORXFgy/j/yY48/Fy7er2z78dtmvoh4SNOgAAAAAAAAAAAAAAAAAA4FgMfVe8q/tl36mDup569uhXBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADHZ/D3/4eC3bHMeFCOvZm/WzFeXF7bbESUJk++c9xHCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAverfAAAA//+Gb2jU")
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)

2.522409302s ago: executing program 2 (id=7714):
syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x538, &(0x7f0000000600)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)

2.107849868s ago: executing program 0 (id=7717):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getsockopt$bt_BT_POWER(r0, 0x112, 0x4, 0x0, &(0x7f0000000200))

2.066901259s ago: executing program 7 (id=7719):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xaac, 0x0, 0x7, 0x42, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x3f})

2.029202559s ago: executing program 3 (id=7720):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x3}, @IFLA_LINKMODE={0x5, 0x11, 0x30}]}, 0x48}}, 0x0)

2.013227509s ago: executing program 2 (id=7721):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x26, 0x343, &(0x7f0000000c40)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101442, 0x1ff)

1.743459974s ago: executing program 3 (id=7723):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f00000000c0)='./file2\x00', 0x18000, &(0x7f0000000440)=ANY=[], 0x1, 0x555f, &(0x7f000000cdc0)="$eJzs3M2LG2UYAPBnst1+Wxfx4K0DpbALTWi2H+itaosf2FKqHjxpNklD2iSzbNJ0LQgePIoH/xNR8OTRv8GDZ2/iQfEmVDIz0a5aUJuPbvv7weSZefPmmecNy8AzsySAp9Za+uvPSZyIIxGxEhHHIyb795OISKaTLhXhhYg4GRGVB7akHP9j4GBEHI2IE5PkRc6kfOvzM+NTF35685dvvjt04NgXX3+/vFUDy3Z6coEo3e0XMesU8dZ2ERvjbh7758dlLN7o3y6PsyLebW/lGe42pvMaeTzXKeZn23eGk3iz12hOYqd7Mx/fHhQnHI470zz5B241dvLjVnsrj91hlsfOvaKu3XvFte3ecFTkaZX5PszTx2g0jcV4e7ddrGf7dh6bg1E5XuTNWu3dSRyXcXrtbWa9Vl7H1v/9lh9/b3UHd3bTcXtn2M0G6YVa/cVa/WK1vpO12qP2+Wqj37p4Pl3v9CbTqqN2o3+pk2WdXrvWzPob6Xqn2azW6+n65fZWtzFI6/XaudrZ6oWNcu9M+tq1d9NeK12fxFe6gzujbm+Y3sx20uITG+lm7dxLG+mpevr21evp9RtXrly9/s77l9+79vLVN14tJ/2trHR98+zmZrV+trpZ33iK1v9JWfQM1w+PJFl2AQD7z0P6/9D/A/N0etKnl33+bPv/nRsR8+//Y479f3k6/f/j1v/u7/6/Eo/h+uGR/Nf+/6M51QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwML9sPrl6/nOWnF8rBx/phx6rjxOIqISEff/wUoc3JNzpcyz+pD5q3+p4dsk8gyTcxwqt6MRcancfnt23t8CAAAAPLm++vjkZ0W3XrysLbsgFqm4aVM5/sGM8iURsbr244yyVSYvz88oWf73fSB2Z5Qtv4F1eEbJiltuB2aV7V9Z2RMOPxCSIlQWWg4AALAQezuBxXYhAAAALNKnyy6A5Uhi+ihz+iw4/8/7Px8IHtlzBAAAAOxDybILAAAAAOYu7//9/h8AAAA82Yrf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+Z+d+cpWI4TiA/2be63s8/0Ri3HsVd3AK4xFcujQcwEuwcj1ewQtwBowbb6BhDDOFgBHU0IFgPp9kKB2GLy1hQVsoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM6Utqpp/ev/xwas6qbe8iov2Dh0PXlOkNAAAA8DvL1Ey7O+O+/jiff5pPPc/1KiLqA4P3m7jbSRxtc9KB69PNfhs+R3QJ69e4z8ejiHiVjx/PBn8bAAAA4L+1mM0nEd1gvLsZX7pBnFM/aVM/eVMor4qINP5WKK1e570oFNZ9vm/jXaG0FNt5rgK6KbfbUml/pZ+A28zajXaKqi/q488v1ncAAOCM8lJ8/r7/j6OQ7362DwAAcD3eXroBDOT18Yer2CxlbpcC7/siL+897NUAAACAK1RdugEAAADA4Lrx/zI1H7/GqOD+f/1/Co7u//dLQ+z/BwAAAMPp9/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgSMvUTBez+eTUnFV7mjK9AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgJ/vzigMwCIRhcPtuHeH+h23+JshqzIzYfGFBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPw7vrlkrCO2RKuqPadt3OpVdWaVuLJK3Fknnjzoc38DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHzT7375PzE1ziRzp42l45Fk7aqxddXYe9A4ejDe/g0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcvW/cZBgA8Mf23ZUUECGgDGEAiQEWml5LSzdgAEUM/AlIUXotoVc+2gy0qkBZ2CBzF1RGhJBAYevM2rmVuoStQ4YiIbEdss9OHJqI46P20fx+0nvvY8vn93l9VZPHry8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUNl+czfO8pfZcZyW+27fv7aS93f+1OdubtxdyFseJ00m/f8wU99I5ttLBAAAgMMhKWv7rNze6m4u5X06W9T/3eq4vOa/8eTue2Kfur/qq9o/bz/9eO/ZncFmx+PkJz23OhwcfzCdzsOb6XR76i+P6BRXvrj3khUfSPrO+jPb3eJ6Jl/euvVWrwiPNJEtAHCg0cE/jI+Nu60bZVD9PpT3/YbSA+Bw69QK76r+z2bbzQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgCdvr8XgVJxGx0NmNc3fuX1vZr7+5cXehaqevX9+onzM/RTcizq0OB8cbnMu0u3zl6oXl4XBwqfng+Yhoa/TXy+lfeG+CgyMmO/Pvo9Eoi4g2Lqbg4CAtP+xpyWcc/PzP3z6q/vU+pAzfiIhhS/8hAQDwyOqWLa/rt7qbS/m+ZC5i9M3e+v+lWhwT1v/33j99uzj4q3TPeHn9329uilNvce3ix4uXr1x9ZfXi8vnB+cGHr57ov9Y/eebUqTOLxb2SRXdMAAAA+Hd6ZavX/+ncg+v/R2txTFj/f/J1/7P6WJn6f1+7i35tZwIAAHC4Pf3Cb78m++xPer34dHlt7VJ//LqzfWL82kKqf9uRstXr/2yu7awAAACAJmyvJ3vW/8/W4phw/f+Jb5/7vn7OLCJmyvX/YysfDc82N52p9l9+efjzA74n3/YcAQAAaNdM2err/93i+f9055GHNCJefnEcl38GcKL6P3v7i+/qY9Wf/z/Z3BSnUjo/vh5FPx/RmW87IwAAAB5lj5UtL/Z/6W4uffDD0Xd7nv8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaNofAQAA///8ozjz")
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.630116505s ago: executing program 0 (id=7724):
r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40044160, 0x0)

1.471700358s ago: executing program 0 (id=7725):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)

1.158108263s ago: executing program 5 (id=7727):
r0 = socket$inet(0x2, 0x3, 0x9)
sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x20, 0x10080000}}], 0x2, 0x0)

922.982696ms ago: executing program 2 (id=7728):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}]}], {0x14}}, 0x68}}, 0x0)

905.837217ms ago: executing program 5 (id=7729):
r0 = socket$netlink(0x10, 0x3, 0x15)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={{0x14, 0x3f5}, [], {0x14, 0x3ed}}, 0x28}}, 0x4010)

840.619918ms ago: executing program 0 (id=7730):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)="9d0caf7376dc9a7060b5c8b811344652", 0x10)

598.102811ms ago: executing program 5 (id=7731):
r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000280)={'fscrypt:', @desc3}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x7fffff}, 0x48, 0xffffffffffffffff)
keyctl$unlink(0x9, r0, r0)

594.112741ms ago: executing program 0 (id=7732):
r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0)

589.289351ms ago: executing program 2 (id=7733):
r0 = add_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="000001020200", 0x6, 0xfffffffffffffffb)
keyctl$read(0xb, r0, &(0x7f0000000140)=""/169, 0xfffffffffffffeef)

370.059945ms ago: executing program 5 (id=7734):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, 0x0, &(0x7f0000009c40))

323.740366ms ago: executing program 0 (id=7735):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}}, 0x0)

263.931747ms ago: executing program 5 (id=7736):
r0 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000000)={0x7, 0xffffffffffffff09, 0x1, 0x0, 0x0})

172.351718ms ago: executing program 2 (id=7737):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f00000001c0))

13.9729ms ago: executing program 5 (id=7738):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x35dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1883e, 0x823}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004080}, 0x8ae257a062cc3564)

0s ago: executing program 2 (id=7739):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x18)

kernel console output (not intermixed with test programs):

674][T19275] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6261'.
[  766.187972][T19281] loop2: detected capacity change from 0 to 512
[  766.260871][T19287] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6267'.
[  766.288809][T19287] netlink: 4260 bytes leftover after parsing attributes in process `syz.5.6267'.
[  766.323843][T19281] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.6264: iget: bad i_size value: 360287970189639690
[  766.402154][T19281] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.6264: couldn't read orphan inode 15 (err -117)
[  766.458796][T19281] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  766.638321][T19294] mmap: syz.5.6270 (19294): VmData 54239232 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  766.652823][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  766.953458][T19304] netlink: 'syz.5.6275': attribute type 8 has an invalid length.
[  767.213264][T19282] loop6: detected capacity change from 0 to 40427
[  767.316849][T19282] F2FS-fs (loop6): Found nat_bits in checkpoint
[  767.512659][T19327] netlink: 'syz.3.6285': attribute type 20 has an invalid length.
[  767.526463][T19282] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  767.917015][T19334] loop5: detected capacity change from 0 to 4096
[  767.993769][T19334] ntfs: (device loop5): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  768.037396][T19334] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing.
[  768.069251][T19334] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  768.142812][T19334] ntfs: (device loop5): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  768.237514][T19334] ntfs: volume version 3.1.
[  768.241457][T19347] loop2: detected capacity change from 0 to 16
[  768.265566][T19347] erofs: (device loop2): mounted with root inode @ nid 36.
[  768.286893][T19342] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6294'.
[  768.353472][T19347] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  768.391260][T19347] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851]
[  768.421133][T19347] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117]
[  768.782181][T19361] netlink: 'syz.2.6301': attribute type 2 has an invalid length.
[  768.822587][T19366] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6303'.
[  769.057855][T19375] loop3: detected capacity change from 0 to 128
[  769.169749][T19372] loop5: detected capacity change from 0 to 4096
[  769.232673][T19372] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  769.275855][T19372] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  769.310163][T19379] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  769.311656][T19372] ntfs: volume version 3.1.
[  769.641890][T19391] netlink: 45 bytes leftover after parsing attributes in process `syz.0.6316'.
[  769.900228][T19393] loop5: detected capacity change from 0 to 4096
[  770.014339][T19402] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  770.061550][T19393] NILFS error (device loop5): nilfs_dotdot: directory #12 missing '.'
[  770.143179][T19393] Remounting filesystem read-only
[  770.699507][ T4677] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  770.728766][T19389] loop2: detected capacity change from 0 to 40427
[  770.781612][T19389] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64)
[  770.816125][T19389] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  770.883094][T19389] F2FS-fs (loop2): Found nat_bits in checkpoint
[  770.913237][ T4677] usb 7-1: Using ep0 maxpacket: 8
[  770.923367][ T4677] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55
[  770.959116][ T4677] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  770.988634][ T4677] usb 7-1: Product: syz
[  771.003800][ T4677] usb 7-1: Manufacturer: syz
[  771.008477][ T4677] usb 7-1: SerialNumber: syz
[  771.031687][ T4677] usb 7-1: config 0 descriptor??
[  771.082048][T19389] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  771.105784][T19389] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  771.276141][ T4677] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  771.296642][ T4677] dvb_usb_af9015: probe of 7-1:0.0 failed with error -22
[  771.312042][T19440] loop0: detected capacity change from 0 to 164
[  771.330881][ T4677] usb 7-1: USB disconnect, device number 6
[  772.863823][T19490] loop0: detected capacity change from 0 to 64
[  772.942043][T19490] MINIX-fs: mounting file system with errors, running fsck is recommended
[  773.009575][T19494] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614)
[  773.758074][T19519] loop5: detected capacity change from 0 to 512
[  773.840230][T19519] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  773.905088][T19519] __quota_error: 14 callbacks suppressed
[  773.905109][T19519] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  773.944992][T19519] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  774.009515][T19519] EXT4-fs error (device loop5): ext4_acquire_dquot:6814: comm syz.5.6377: Failed to acquire dquot type 0
[  774.159765][T14420] EXT4-fs (loop5): unmounting filesystem.
[  774.548406][T19513] loop0: detected capacity change from 0 to 32768
[  774.561981][T19513] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.6375 (19513)
[  774.587520][T19541] tmpfs: Bad value for 'size'
[  774.620164][T19513] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  774.652116][T19513] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  774.673659][T19513] BTRFS info (device loop0): force zlib compression, level 3
[  774.700052][T19513] BTRFS info (device loop0): force clearing of disk cache
[  774.718819][T19513] BTRFS info (device loop0): setting nodatasum
[  774.725298][T19513] BTRFS info (device loop0): allowing degraded mounts
[  774.781348][T19513] BTRFS info (device loop0): using free space tree
[  774.892392][T19529] loop3: detected capacity change from 0 to 32768
[  774.941306][T19529] 
[  774.941306][T19529]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  774.941306][T19529] 
[  774.981054][T19529] __jfs_setxattr: xattr_size = 243, new_size = 337
[  775.100044][   T75] 
[  775.100044][   T75]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  775.100044][   T75] 
[  775.175311][T19513] BTRFS info (device loop0): rebuilding free space tree
[  775.206814][   T75] 
[  775.206814][   T75]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  775.206814][   T75] 
[  775.263077][T19513] BTRFS info (device loop0): balance: start -susage=34359738372,drange=7..526332,limit=25770852352,limit=1048576..6
[  775.284389][  T107] 
[  775.284389][  T107]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  775.284389][  T107] 
[  775.295657][T19513] BTRFS info (device loop0): balance: ended with status: 0
[  775.331279][ T4266] 
[  775.331279][ T4266]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  775.331279][ T4266] 
[  775.352562][ T4266] 
[  775.352562][ T4266]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  775.352562][ T4266] 
[  775.473111][T19575] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-alb(6)
[  775.562132][ T4280] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  775.637678][   T26] audit: type=1400 audit(740.385:106): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=19576 comm="syz.3.6394"
[  775.924906][T19581] loop6: detected capacity change from 0 to 1024
[  776.012184][ T4440] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 12 /dev/loop0 scanned by udevd (4440)
[  776.172384][T14571] hfsplus: bad catalog entry type
[  776.231966][T19555] loop2: detected capacity change from 0 to 32768
[  776.354398][T19555] JBD2: Ignoring recovery information on journal
[  776.594811][T19555] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  776.720560][T19555] (syz.2.6392,19555,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10
[  776.742659][T19600] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6407'.
[  776.765366][T19597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6398'.
[  776.779075][T19555] (syz.2.6392,19555,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2
[  776.790178][T19597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6398'.
[  776.803864][   T46] hfsplus: b-tree write err: -5, ino 4
[  776.847558][T19555] (syz.2.6392,19555,1):ocfs2_mknod:298 ERROR: status = -2
[  776.885652][T19602] loop5: detected capacity change from 0 to 1764
[  776.915879][T19555] (syz.2.6392,19555,1):ocfs2_mknod:502 ERROR: status = -2
[  776.982467][T19555] (syz.2.6392,19555,1):ocfs2_mkdir:659 ERROR: status = -2
[  777.105885][ T4297] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  777.161166][ T4270] ocfs2: Unmounting device (7,2) on (node local)
[  777.283894][ T4297] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  777.507202][ T4297] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  777.625972][ T4297] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  778.159544][T19628] loop0: detected capacity change from 0 to 2048
[  778.216246][ T4440] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  778.393314][ T4269] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  778.406289][ T4269] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  778.423484][ T4269] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  778.433549][ T4269] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  778.441776][ T4269] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  778.452187][ T4269] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  778.625935][T19637] bond0 speed is unknown, defaulting to 1000
[  779.501436][T19676] loop0: detected capacity change from 0 to 164
[  779.582502][T19637] chnl_net:caif_netlink_parms(): no params data found
[  779.610726][ T4440] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  779.719963][T19681] loop2: detected capacity change from 0 to 512
[  779.783839][T19681] EXT4-fs (loop2): orphan cleanup on readonly fs
[  779.929215][T19681] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated!
[  779.985471][T19681] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota
[  780.035526][T19681] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.6441: Failed to acquire dquot type 0
[  780.111560][T19681] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated!
[  780.177822][T19681] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota
[  780.252259][T19681] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.6441: Failed to acquire dquot type 0
[  780.299059][T19681] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.6441: bg 0: block 64: padding at end of block bitmap is not set
[  780.332626][T19681] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  780.366833][T19681] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated!
[  780.413411][T19681] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota
[  780.423466][T19681] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.6441: Failed to acquire dquot type 0
[  780.516485][T19681] EXT4-fs (loop2): 1 orphan inode deleted
[  780.525654][T19708] loop0: detected capacity change from 0 to 128
[  780.532695][T19681] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  780.636622][ T4269] Bluetooth: hci2: command 0x0409 tx timeout
[  780.760590][T19714] xt_cgroup: path and classid specified
[  780.872249][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  780.883494][T19637] bridge0: port 1(bridge_slave_0) entered blocking state
[  780.890625][T19637] bridge0: port 1(bridge_slave_0) entered disabled state
[  780.967937][T19637] device bridge_slave_0 entered promiscuous mode
[  781.226240][T19728] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  781.304525][T19637] bridge0: port 2(bridge_slave_1) entered blocking state
[  781.331089][T19637] bridge0: port 2(bridge_slave_1) entered disabled state
[  781.374074][T19637] device bridge_slave_1 entered promiscuous mode
[  781.489475][ T4297] device hsr_slave_0 left promiscuous mode
[  781.524968][ T4297] device hsr_slave_1 left promiscuous mode
[  781.538554][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  781.578440][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_0
[  781.640398][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  781.672958][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_1
[  781.705820][ T4297] device bridge_slave_1 left promiscuous mode
[  781.712122][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state
[  781.812233][ T4297] device bridge_slave_0 left promiscuous mode
[  781.818566][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state
[  781.973925][ T4297] device veth1_macvtap left promiscuous mode
[  781.981870][ T4297] device veth0_macvtap left promiscuous mode
[  781.989823][T19751] cgroup2: Unexpected value for 'nsdelegate'
[  782.037482][ T4297] device veth1_vlan left promiscuous mode
[  782.043332][ T4297] device veth0_vlan left promiscuous mode
[  782.494614][T19769] trusted_key: encrypted_key: master key parameter '*' is invalid
[  782.867455][ T4269] Bluetooth: hci2: command 0x041b tx timeout
[  782.880760][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  782.887744][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  783.080012][T19743] loop3: detected capacity change from 0 to 40427
[  783.128990][T19743] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[  783.165535][T19743] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  783.295522][T19743] F2FS-fs (loop3): Found nat_bits in checkpoint
[  783.501321][T19743] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  783.508484][T19743] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  784.071623][T19805] loop2: detected capacity change from 0 to 4096
[  784.534919][T19800] loop5: detected capacity change from 0 to 40427
[  784.552965][T19800] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  784.588182][T19800] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  784.658301][ T4297] team0 (unregistering): Port device team_slave_1 removed
[  784.658907][T19800] F2FS-fs (loop5): Found nat_bits in checkpoint
[  784.798451][T19800] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  784.818309][T19800] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  784.837070][ T4297] team0 (unregistering): Port device team_slave_0 removed
[  784.994263][ T4297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  785.081493][ T4269] Bluetooth: hci2: command 0x040f tx timeout
[  785.153277][ T4297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  786.042425][ T4297] bond0 (unregistering): Released all slaves
[  786.217035][T19833] loop5: detected capacity change from 0 to 256
[  786.259381][T19833] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x586fd6de, utbl_chksum : 0xe619d30d)
[  786.341921][T19637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  786.367765][T19819] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  786.543644][T19637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  786.668690][   T26] audit: type=1326 audit(750.708:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19839 comm="syz.2.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f7d8e9a9 code=0x7ffc0000
[  786.749363][T19637] team0: Port device team_slave_0 added
[  786.772155][   T26] audit: type=1326 audit(750.727:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19839 comm="syz.2.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f7d8e9a9 code=0x7ffc0000
[  786.805285][T19637] team0: Port device team_slave_1 added
[  786.884651][   T26] audit: type=1326 audit(750.736:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19839 comm="syz.2.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f06f7d8e9a9 code=0x7ffc0000
[  786.965344][T19637] batman_adv: batadv0: Adding interface: batadv_slave_0
[  786.972449][T19637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  787.021020][   T26] audit: type=1326 audit(750.736:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19839 comm="syz.2.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f7d8e9a9 code=0x7ffc0000
[  787.078875][T19844] 9pnet: Could not find request transport: 0xffffffffffffffff
[  787.100929][T19637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  787.119350][   T26] audit: type=1326 audit(750.736:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19839 comm="syz.2.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f7d8e9a9 code=0x7ffc0000
[  787.156948][T19637] batman_adv: batadv0: Adding interface: batadv_slave_1
[  787.188338][T19637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  787.309122][T19637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  787.311191][ T4269] Bluetooth: hci2: command 0x0419 tx timeout
[  787.345980][   T26] audit: type=1326 audit(751.335:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19856 comm="syz.2.6509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f7d8e9a9 code=0x7ffc0000
[  787.400056][ T4444] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  787.475205][   T26] audit: type=1326 audit(751.363:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19856 comm="syz.2.6509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f7d8e9a9 code=0x7ffc0000
[  787.553090][T19637] device hsr_slave_0 entered promiscuous mode
[  787.567737][   T26] audit: type=1326 audit(751.372:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19856 comm="syz.2.6509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f06f7d8e9a9 code=0x7ffc0000
[  787.615625][ T4444] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  787.620089][T19637] device hsr_slave_1 entered promiscuous mode
[  787.645879][ T4444] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  787.668281][   T26] audit: type=1326 audit(751.372:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19856 comm="syz.2.6509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f7d8e9a9 code=0x7ffc0000
[  787.669333][ T4444] usb 6-1: config 0 descriptor??
[  787.697049][   T26] audit: type=1326 audit(751.372:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19856 comm="syz.2.6509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f7d8e9a9 code=0x7ffc0000
[  787.786309][ T4444] gspca_main: spca508-2.14.0 probing 8086:0110
[  787.942392][T19877] loop2: detected capacity change from 0 to 1024
[  788.074501][T19877] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  788.089213][T19877] EXT4-fs error (device loop2): ext4_get_first_dir_block:3594: inode #11: comm syz.2.6516: directory missing '.'
[  788.211502][T19877] EXT4-fs (loop2): Remounting filesystem read-only
[  788.277162][ T4444] gspca_spca508: reg_read err -71
[  788.287288][ T4444] gspca_spca508: reg_read err -71
[  788.305442][ T4444] gspca_spca508: reg_read err -71
[  788.320333][ T4444] gspca_spca508: reg_read err -71
[  788.330416][ T4444] gspca_spca508: reg write: error -71
[  788.335972][ T4444] spca508: probe of 6-1:0.0 failed with error -71
[  788.376331][ T4444] usb 6-1: USB disconnect, device number 8
[  788.409239][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  788.491220][T19637] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  788.516786][T19637] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  788.552976][T19637] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  788.605569][T19637] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  788.932986][T19637] 8021q: adding VLAN 0 to HW filter on device bond0
[  788.974151][T19907] netlink: 'syz.3.6523': attribute type 25 has an invalid length.
[  788.998759][T19907] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6523'.
[  789.045845][T19887] loop0: detected capacity change from 0 to 40427
[  789.062555][T19637] 8021q: adding VLAN 0 to HW filter on device team0
[  789.096582][T19887] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64)
[  789.124242][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  789.138998][T19887] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  789.151762][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  789.198516][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  789.242900][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  789.253106][T19887] F2FS-fs (loop0): Found nat_bits in checkpoint
[  789.281148][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  789.288420][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  789.346348][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  789.364840][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  789.394151][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  789.401376][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  789.457441][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  789.489297][T19887] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  789.495286][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  789.510910][T19887] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  789.530511][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  789.584149][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  789.632300][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  789.688458][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  789.709537][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  789.740746][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  789.762766][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  789.787249][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  789.809062][T19924] xt_CT: No such helper "pptp"
[  789.865628][T19637] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  789.948166][T19637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  790.005478][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  790.043659][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  790.093180][T19929] netlink: 'syz.2.6531': attribute type 4 has an invalid length.
[  790.656770][T19945] No such timeout policy "syz0"
[  790.803949][T19921] loop5: detected capacity change from 0 to 32768
[  790.857052][T19921] JBD2: Ignoring recovery information on journal
[  790.950306][T19955] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6537'.
[  791.000480][T19921] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  791.103736][T14556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  791.174152][T14556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  791.189865][T19637] 8021q: adding VLAN 0 to HW filter on device batadv0
[  791.351953][T14420] ocfs2: Unmounting device (7,5) on (node local)
[  791.545174][T19973] program syz.2.6542 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  791.712804][T19967] xt_CT: No such helper "pptp"
[  791.823806][T19978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6544'.
[  792.116865][T19986] loop0: detected capacity change from 0 to 2048
[  792.226803][T19986] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  792.431369][ T4280] EXT4-fs (loop0): unmounting filesystem.
[  792.965129][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  792.985616][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  793.065317][T19637] device veth0_vlan entered promiscuous mode
[  793.081635][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  793.117213][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  793.194776][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  793.219306][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  793.274368][T19637] device veth1_vlan entered promiscuous mode
[  793.411424][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  793.449536][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  793.457964][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  793.485766][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  793.520391][T19637] device veth0_macvtap entered promiscuous mode
[  793.536360][T19637] device veth1_macvtap entered promiscuous mode
[  793.603884][T19637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  793.648256][T19637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  793.734747][T19637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  793.766120][T19637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  793.778189][T20051] SET target dimension over the limit!
[  793.818264][T19637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  793.846974][T19637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  793.879234][T19637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  793.913884][T19637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  793.932355][T19637] batman_adv: batadv0: Interface activated: batadv_slave_0
[  793.955413][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  793.968978][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  793.993547][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  794.010604][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  794.035059][T19637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  794.050299][T20057] [U] 	
[  794.085002][T19637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  794.141516][T19637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  794.195361][T19637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  794.216327][T19637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  794.269579][T19637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  794.310003][T19637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  794.355857][T19637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  794.420185][T19637] batman_adv: batadv0: Interface activated: batadv_slave_1
[  794.465613][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  794.484752][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  794.545538][T19637] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  794.633342][T19637] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  794.653786][T19637] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  794.683790][T19637] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  794.892604][T20086] netlink: 'syz.5.6585': attribute type 4 has an invalid length.
[  795.111524][T14556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  795.147365][T14556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  795.225752][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  795.237621][T14556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  795.262200][T20093] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6588'.
[  795.271502][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  795.333085][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  795.358468][T20096] loop3: detected capacity change from 0 to 512
[  795.414781][T20096] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  795.497849][T20096] EXT4-fs (loop3): 1 truncate cleaned up
[  795.542089][T20096] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  795.595038][T20096] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:300: inode #15: comm syz.3.6589: verity file has no extents
[  795.611759][T20101] loop5: detected capacity change from 0 to 512
[  795.659176][T20096] EXT4-fs (loop3): Remounting filesystem read-only
[  795.667853][T20101] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  795.695037][T20096] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size
[  795.762355][T20101] EXT4-fs (loop5): 1 truncate cleaned up
[  795.787991][T20101] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  795.836844][T20101] EXT4-fs error (device loop5): ext4_append:79: inode #2: comm syz.5.6591: Logical block already allocated
[  795.884432][T20101] EXT4-fs (loop5): Remounting filesystem read-only
[  795.892745][ T4266] EXT4-fs (loop3): unmounting filesystem.
[  796.117070][T14420] EXT4-fs (loop5): unmounting filesystem.
[  796.298462][T20121] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6597'.
[  796.339077][T20121] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6597'.
[  797.023386][T20145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6607'.
[  797.334787][T20159] loop7: detected capacity change from 0 to 512
[  797.384432][T20159] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  797.504248][T20159] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  797.558609][T20122] loop3: detected capacity change from 0 to 32768
[  797.624151][T20159] EXT4-fs (loop7): 1 truncate cleaned up
[  797.634929][T20159] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  797.799617][T20122] XFS (loop3): Mounting V5 Filesystem
[  797.866780][T20179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6619'.
[  797.882753][T19637] EXT4-fs (loop7): unmounting filesystem.
[  797.899871][T20122] XFS (loop3): Ending clean mount
[  798.071814][ T4266] XFS (loop3): Unmounting Filesystem
[  798.264103][T20189] loop2: detected capacity change from 0 to 64
[  798.683766][T20202] netlink: 'syz.2.6627': attribute type 11 has an invalid length.
[  798.778649][T20206] netlink: 'syz.3.6621': attribute type 1 has an invalid length.
[  798.819084][T20206] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6621'.
[  800.446377][T20204] loop5: detected capacity change from 0 to 40427
[  800.509195][T20204] F2FS-fs (loop5): invalid crc value
[  800.512107][T20257] loop0: detected capacity change from 0 to 16
[  800.530330][T20204] F2FS-fs (loop5): Found nat_bits in checkpoint
[  800.591728][T20257] erofs: (device loop0): mounted with root inode @ nid 36.
[  800.632732][T20257] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36
[  800.711460][T20257] erofs: (device loop0): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36
[  800.788302][T20257] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[  800.828881][T20204] F2FS-fs (loop5): Start checkpoint disabled!
[  800.901961][T20204] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  801.427611][T20279] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6660'.
[  801.501388][T20279] unsupported nlmsg_type 40
[  802.034175][T20299] loop5: detected capacity change from 0 to 2048
[  802.097463][T20299] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  802.116879][T20301] loop3: detected capacity change from 0 to 1024
[  802.138254][T20299] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  802.226471][T20299] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  802.259199][T20301] hfsplus: extend alloc file! (8192,63991,0)
[  802.452353][T20305] loop2: detected capacity change from 0 to 4096
[  802.820939][T20320] loop0: detected capacity change from 0 to 512
[  802.828465][T20320] EXT4-fs: Ignoring removed nobh option
[  802.862797][ T4270] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  802.905508][ T4270] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  802.966029][T20320] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.6675: iget: bad i_size value: 38620345925642
[  802.990144][T20320] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.6675: couldn't read orphan inode 15 (err -117)
[  803.047524][T20328] loop3: detected capacity change from 0 to 256
[  803.055484][T20320] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  803.070209][T20320] EXT4-fs error (device loop0): empty_inline_dir:1877: inode #12: block 7: comm syz.0.6675: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0
[  803.104150][T20320] EXT4-fs warning (device loop0): empty_inline_dir:1884: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60
[  803.307633][ T4280] EXT4-fs (loop0): unmounting filesystem.
[  803.545436][T20341] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  803.581090][T20338] loop2: detected capacity change from 0 to 2048
[  803.643162][T20338] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  804.182868][T20364] loop3: detected capacity change from 0 to 16
[  804.241681][T20364] erofs: (device loop3): mounted with root inode @ nid 36.
[  805.106054][   T26] audit: type=1326 audit(767.957:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20391 comm="syz.5.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d78f8e9a9 code=0x7ffc0000
[  805.137155][ T4675] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  805.166623][   T26] audit: type=1326 audit(767.966:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20391 comm="syz.5.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f6d78f8e9a9 code=0x7ffc0000
[  805.297272][   T26] audit: type=1326 audit(767.966:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20391 comm="syz.5.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d78f8e9a9 code=0x7ffc0000
[  805.350630][ T4675] usb 4-1: Using ep0 maxpacket: 8
[  805.358122][ T4675] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  805.379570][   T26] audit: type=1326 audit(767.966:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20391 comm="syz.5.6706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d78f8e9a9 code=0x7ffc0000
[  805.426475][ T4675] usb 4-1: config 179 has no interface number 0
[  805.446783][ T4675] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  805.488801][ T4675] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  805.532250][ T4675] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  805.584807][ T4675] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  805.616263][T20404] loop0: detected capacity change from 0 to 512
[  805.617816][ T4675] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  805.677851][ T4675] usb 4-1: config 179 interface 65 has no altsetting 0
[  805.680495][T20404] EXT4-fs: Ignoring removed i_version option
[  805.705627][T20371] loop7: detected capacity change from 0 to 32768
[  805.712259][ T4675] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  805.759590][ T4675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  805.760989][T20404] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  805.810492][ T4675] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input59
[  805.825167][T20404] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002]
[  805.852714][T20371] XFS (loop7): Mounting V5 Filesystem
[  805.879637][T20404] System zones: 1-12
[  805.889673][T20404] EXT4-fs (loop0): orphan cleanup on readonly fs
[  805.920101][T20404] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.6710: invalid indirect mapped block 12 (level 1)
[  806.047570][T20404] EXT4-fs (loop0): Remounting filesystem read-only
[  806.054179][T20404] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.6710: invalid indirect mapped block 2 (level 2)
[  806.086437][T20371] XFS (loop7): Ending clean mount
[  806.096145][T20404] EXT4-fs (loop0): Remounting filesystem read-only
[  806.131066][T20404] EXT4-fs (loop0): 1 truncate cleaned up
[  806.154394][T20371] XFS (loop7): Quotacheck needed: Please wait.
[  806.174309][T20404] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  806.243784][ T4382] usb 4-1: USB disconnect, device number 5
[  806.243871][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  806.259831][ T4382] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  806.288158][T20371] XFS (loop7): Quotacheck: Done.
[  806.470375][T19637] XFS (loop7): Unmounting Filesystem
[  806.506541][ T4280] EXT4-fs (loop0): unmounting filesystem.
[  806.760654][T20431] loop5: detected capacity change from 0 to 2048
[  806.845125][T20431] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d
[  807.376609][T20450] loop3: detected capacity change from 0 to 128
[  807.422758][T20450] FAT-fs (loop3): Directory bread(block 162) failed
[  807.430875][T20450] FAT-fs (loop3): Directory bread(block 163) failed
[  807.440304][T20450] FAT-fs (loop3): Directory bread(block 164) failed
[  807.447571][T20450] FAT-fs (loop3): Directory bread(block 165) failed
[  807.454445][T20450] FAT-fs (loop3): Directory bread(block 166) failed
[  807.498585][T20450] FAT-fs (loop3): Directory bread(block 167) failed
[  807.518501][T20450] FAT-fs (loop3): Directory bread(block 168) failed
[  807.530141][T20450] FAT-fs (loop3): Directory bread(block 169) failed
[  807.541092][ T4678] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  807.586736][T20450] FAT-fs (loop3): Directory bread(block 162) failed
[  807.594237][T20450] FAT-fs (loop3): Directory bread(block 163) failed
[  807.626241][T20450] syz.3.6724: attempt to access beyond end of device
[  807.626241][T20450] loop3: rw=3, sector=226, nr_sectors = 6 limit=128
[  807.629810][T20456] device ip6gretap1 entered promiscuous mode
[  807.649202][T20450] syz.3.6724: attempt to access beyond end of device
[  807.649202][T20450] loop3: rw=2051, sector=232, nr_sectors = 2 limit=128
[  807.760788][ T4678] usb 6-1: Using ep0 maxpacket: 16
[  807.771252][ T4678] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  807.808736][ T4678] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  807.846753][ T4678] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  807.874480][ T4678] usb 6-1: config 1 has no interface number 1
[  807.880844][ T4678] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  807.935332][ T4678] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  807.935570][T20465] loop0: detected capacity change from 0 to 64
[  808.003917][ T4678] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  808.029014][ T4678] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  808.051654][ T4678] usb 6-1: Product: syz
[  808.068144][ T4678] usb 6-1: Manufacturer: syz
[  808.091216][ T4678] usb 6-1: SerialNumber: syz
[  808.202210][T20473] netlink: 'syz.7.6734': attribute type 49 has an invalid length.
[  808.337008][ T4678] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor
[  808.351889][ T4678] usb 6-1: found format II with max.bitrate = 0, frame size=0
[  808.386052][ T4678] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  808.460191][ T4678] usb 6-1: USB disconnect, device number 9
[  808.529339][ T4440] udevd[4440]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  808.859163][   T26] audit: type=1326 audit(771.475:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20494 comm="syz.2.6745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f7d8e9a9 code=0x7ffc0000
[  808.904032][   T26] audit: type=1326 audit(771.475:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20494 comm="syz.2.6745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f06f7d8e9a9 code=0x7ffc0000
[  809.025919][   T26] audit: type=1326 audit(771.475:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20494 comm="syz.2.6745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f7d8e9a9 code=0x7ffc0000
[  809.153549][T20505] loop5: detected capacity change from 0 to 256
[  809.191402][T20505] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  809.876309][T20524] loop3: detected capacity change from 0 to 2048
[  809.933523][T20531] loop0: detected capacity change from 0 to 1024
[  809.937332][T20524] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  810.021309][T20524] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  810.066578][T20531] syz.0.6763: attempt to access beyond end of device
[  810.066578][T20531] loop0: rw=0, sector=201326592, nr_sectors = 2 limit=1024
[  810.169760][T20531] Buffer I/O error on dev loop0, logical block 100663296, async page read
[  810.214091][T20531] syz.0.6763: attempt to access beyond end of device
[  810.214091][T20531] loop0: rw=0, sector=201326592, nr_sectors = 2 limit=1024
[  810.276455][T20531] Buffer I/O error on dev loop0, logical block 100663296, async page read
[  810.336173][T20536] loop7: detected capacity change from 0 to 4096
[  810.511828][T20545] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  810.959657][T20553] loop0: detected capacity change from 0 to 1024
[  811.040707][T20561] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6775'.
[  811.075682][T20553] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5
[  811.170732][T20561] 8021q: adding VLAN 0 to HW filter on device bond2
[  811.190257][T20553] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  811.211111][T20553] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.6773: Failed to acquire dquot type 0
[  811.268845][T20553] EXT4-fs error (device loop0): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  811.273814][T20568] loop3: detected capacity change from 0 to 1024
[  811.368201][T20568] EXT4-fs: Ignoring removed orlov option
[  811.370503][T20553] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #13: comm syz.0.6773: corrupted inode contents
[  811.458936][T20553] EXT4-fs error (device loop0): ext4_dirty_inode:6119: inode #13: comm syz.0.6773: mark_inode_dirty error
[  811.482980][T20553] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #13: comm syz.0.6773: corrupted inode contents
[  811.497926][T20553] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #13: comm syz.0.6773: mark_inode_dirty error
[  811.512404][T20553] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #13: comm syz.0.6773: corrupted inode contents
[  811.531312][T20553] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  811.545275][T20568] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz.3.6776: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  811.574023][T20553] EXT4-fs error (device loop0): ext4_do_update_inode:5254: inode #13: comm syz.0.6773: corrupted inode contents
[  811.606080][T20568] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.6776: couldn't read orphan inode 11 (err -117)
[  811.628357][T20568] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  811.633532][T20553] EXT4-fs error (device loop0): ext4_truncate:4312: inode #13: comm syz.0.6773: mark_inode_dirty error
[  811.659211][ T4679] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  811.664957][T20553] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  811.712221][T20553] EXT4-fs (loop0): 1 truncate cleaned up
[  811.728290][T20568] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.6776: Invalid block bitmap block 0 in block_group 0
[  811.729030][T20553] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  811.792672][T20568] Quota error (device loop3): write_blk: dquota write failed
[  811.807919][T20568] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  811.838156][T20568] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.6776: Failed to acquire dquot type 0
[  811.891907][ T4679] usb 3-1: config 5 has an invalid interface number: 123 but max is 0
[  811.911281][ T4679] usb 3-1: config 5 has no interface number 0
[  811.930336][ T4679] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 65535, setting to 64
[  811.958056][ T4679] usb 3-1: config 5 interface 123 has no altsetting 0
[  811.976549][ T4679] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  811.985749][ T4679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  811.994544][ T4679] usb 3-1: Product: syz
[  811.999548][ T4679] usb 3-1: Manufacturer: syz
[  812.004187][ T4679] usb 3-1: SerialNumber: syz
[  812.019117][T20571] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  812.028778][ T4678] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  812.039944][ T4280] EXT4-fs (loop0): unmounting filesystem.
[  812.088105][ T4266] EXT4-fs (loop3): unmounting filesystem.
[  812.231914][ T4678] usb 8-1: Using ep0 maxpacket: 8
[  812.243784][ T4678] usb 8-1: config 179 has an invalid interface number: 65 but max is 0
[  812.253879][ T4678] usb 8-1: config 179 has no interface number 0
[  812.283959][ T4679] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device.
[  812.296883][ T4678] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  812.313748][ T4679] usb 3-1: USB disconnect, device number 12
[  812.321055][ T4678] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  812.334159][ T4678] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  812.349481][ T4678] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  812.365096][ T4678] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  812.379075][ T4678] usb 8-1: config 179 interface 65 has no altsetting 0
[  812.387446][ T4678] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  812.397130][ T4678] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  812.416067][ T4678] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input60
[  812.457397][T20594] device xfrm0 entered promiscuous mode
[  812.921640][ T4443] usb 8-1: USB disconnect, device number 2
[  812.921679][    C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  812.935928][ T4443] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  812.955583][T20610] loop5: detected capacity change from 0 to 256
[  813.486960][T20624] loop5: detected capacity change from 0 to 256
[  813.707303][T20630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6803'.
[  813.738121][T20630] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  813.775833][T20630] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  813.842478][T20608] loop3: detected capacity change from 0 to 32768
[  813.895114][T20632] xt_bpf: check failed: parse error
[  813.930890][ T4444] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  813.943555][T20608] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt
[  813.943555][T20608] 
[  814.033736][T20608] ERROR: (device loop3): remounting filesystem as read-only
[  814.061994][T20608] ERROR: (device loop3): jfs_rename: 
[  814.061994][T20608] 
[  814.169177][ T4444] usb 8-1: Using ep0 maxpacket: 16
[  814.181207][ T4444] usb 8-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  814.208203][T20640] loop0: detected capacity change from 0 to 256
[  814.222559][ T4444] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  814.252713][ T4444] usb 8-1: Product: syz
[  814.256995][ T4444] usb 8-1: Manufacturer: syz
[  814.261639][ T4444] usb 8-1: SerialNumber: syz
[  814.293045][T20640] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  814.305411][T20644] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6809'.
[  814.318306][ T4444] usb 8-1: config 0 descriptor??
[  814.325701][ T4444] visor 8-1:0.0: Sony Clie 3.5 converter detected
[  814.355834][ T4266] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt
[  814.355834][ T4266] 
[  814.545758][T20648] netlink: 'syz.2.6812': attribute type 13 has an invalid length.
[  814.602032][T20650] loop5: detected capacity change from 0 to 256
[  814.624548][T20648] device veth0_macvtap left promiscuous mode
[  814.664661][T20650] exfat: Deprecated parameter 'namecase'
[  814.678832][T20650] exfat: Deprecated parameter 'utf8'
[  814.686021][T20648] device macvtap0 entered promiscuous mode
[  814.731199][T20648] macvtap0: refused to change device tx_queue_len
[  814.770762][T20650] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  814.784684][ T4444] usb 8-1: clie_3_5_startup: get interface number failed: -71
[  814.802849][ T4444] visor: probe of 8-1:0.0 failed with error -71
[  814.833469][ T4444] usb 8-1: USB disconnect, device number 3
[  815.531270][T20673] loop0: detected capacity change from 0 to 1024
[  815.646736][T20673] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #3: block 1: comm syz.0.6823: lblock 1 mapped to illegal pblock 1 (length 1)
[  815.710747][T20679] loop7: detected capacity change from 0 to 256
[  815.783222][T20673] Quota error (device loop0): write_blk: dquota write failed
[  815.795941][T20679] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  815.834538][T20673] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  815.935676][T20673] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.6823: Failed to acquire dquot type 0
[  815.990881][T20673] EXT4-fs error (device loop0): ext4_free_blocks:6210: comm syz.0.6823: Freeing blocks not in datazone - block = 0, count = 4096
[  816.048508][T20673] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.6823: Invalid inode bitmap blk 0 in block_group 0
[  816.068744][    T9] EXT4-fs error (device loop0): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  816.126762][T20673] EXT4-fs error (device loop0) in ext4_free_inode:362: Corrupt filesystem
[  816.137694][    T9] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  816.164129][T20673] EXT4-fs (loop0): 1 orphan inode deleted
[  816.181095][T20673] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  816.198921][    T9] EXT4-fs error (device loop0): ext4_release_dquot:6850: comm kworker/u4:0: Failed to release dquot type 0
[  816.274209][T20673] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[  816.417923][T20701] netlink: 'syz.5.6831': attribute type 2 has an invalid length.
[  816.509046][ T4280] EXT4-fs (loop0): unmounting filesystem.
[  816.754468][T20711] device netdevsim0 entered promiscuous mode
[  816.760754][T20711] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  817.062890][T20685] loop2: detected capacity change from 0 to 32768
[  817.193436][T20685] XFS (loop2): Mounting V5 Filesystem
[  817.441526][T20685] XFS (loop2): Ending clean mount
[  817.464702][T20685] XFS (loop2): Quotacheck needed: Please wait.
[  817.597856][T20685] XFS (loop2): Quotacheck: Done.
[  817.673598][   T26] audit: type=1326 audit(779.721:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20750 comm="syz.7.6849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709838e9a9 code=0x50000
[  817.775077][   T26] audit: type=1326 audit(779.721:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20750 comm="syz.7.6849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709838e9a9 code=0x50000
[  817.834907][ T4270] XFS (loop2): Unmounting Filesystem
[  817.859173][   T26] audit: type=1326 audit(779.721:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20750 comm="syz.7.6849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709838e9a9 code=0x50000
[  817.931923][   T26] audit: type=1326 audit(779.721:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20750 comm="syz.7.6849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709838e9a9 code=0x50000
[  818.012769][   T26] audit: type=1326 audit(779.721:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20750 comm="syz.7.6849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709838e9a9 code=0x50000
[  818.095437][T20756] loop5: detected capacity change from 0 to 4096
[  818.102070][   T26] audit: type=1326 audit(779.721:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20750 comm="syz.7.6849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709838e9a9 code=0x50000
[  818.160358][   T26] audit: type=1326 audit(779.721:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20750 comm="syz.7.6849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709838e9a9 code=0x50000
[  818.193654][   T26] audit: type=1326 audit(779.721:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20750 comm="syz.7.6849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709838e9a9 code=0x50000
[  818.239919][   T26] audit: type=1326 audit(779.721:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20750 comm="syz.7.6849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709838e9a9 code=0x50000
[  818.328377][   T26] audit: type=1326 audit(779.721:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20750 comm="syz.7.6849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709838e9a9 code=0x50000
[  818.707509][T20773] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6852'.
[  819.975957][T20812] netlink: 148 bytes leftover after parsing attributes in process `syz.5.6872'.
[  820.606193][T20832] loop3: detected capacity change from 0 to 256
[  820.641914][T20832] exfat: Deprecated parameter 'namecase'
[  820.656400][T20838] loop5: detected capacity change from 0 to 1024
[  820.693839][T20832] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  820.785352][T20838] EXT4-fs error (device loop5): ext4_acquire_dquot:6814: comm syz.5.6881: Failed to acquire dquot type 0
[  820.897662][T20838] EXT4-fs error (device loop5): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  820.947082][T20838] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #13: comm syz.5.6881: corrupted inode contents
[  821.054890][T20838] EXT4-fs error (device loop5): ext4_dirty_inode:6119: inode #13: comm syz.5.6881: mark_inode_dirty error
[  821.111930][T20838] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #13: comm syz.5.6881: corrupted inode contents
[  821.165352][T20838] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #13: comm syz.5.6881: mark_inode_dirty error
[  821.223959][T20838] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #13: comm syz.5.6881: corrupted inode contents
[  821.282116][T20838] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  821.314988][T20838] EXT4-fs error (device loop5): ext4_do_update_inode:5254: inode #13: comm syz.5.6881: corrupted inode contents
[  821.343646][T20838] EXT4-fs error (device loop5): ext4_truncate:4312: inode #13: comm syz.5.6881: mark_inode_dirty error
[  821.355943][T20838] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  821.404133][T20838] EXT4-fs (loop5): 1 truncate cleaned up
[  821.415813][T20838] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  821.635614][T20865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6893'.
[  821.677292][T14420] EXT4-fs (loop5): unmounting filesystem.
[  821.965925][ T4677] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  822.126225][T20885] loop2: detected capacity change from 0 to 512
[  822.149513][T20885] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  822.179219][T20885] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  822.190409][ T4677] usb 8-1: Using ep0 maxpacket: 8
[  822.199883][ T4677] usb 8-1: config 0 has an invalid interface number: 52 but max is 0
[  822.231420][ T4677] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  822.249256][T20885] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  822.253733][ T4677] usb 8-1: config 0 has no interface number 0
[  822.265302][ T4677] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  822.277942][ T4677] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  822.288029][ T4677] usb 8-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  822.301983][ T4677] usb 8-1: config 0 interface 52 has no altsetting 0
[  822.304015][ T4677] usb 8-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00
[  822.318915][ T4677] usb 8-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35
[  822.327232][ T4677] usb 8-1: Product: syz
[  822.328473][T20885] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  822.331820][ T4677] usb 8-1: SerialNumber: syz
[  822.354721][ T4677] usb 8-1: config 0 descriptor??
[  822.401250][T20885] System zones: 0-2, 18-18, 34-35
[  822.428496][T20885] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  822.583827][ T4677] input: syz (Stick) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.52/input/input61
[  822.605824][ T3622] synaptics_usb 8-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  822.631632][ T3622] synaptics_usb 8-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  822.704129][ T3622] synaptics_usb 8-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  822.746623][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  822.755945][ T3622] synaptics_usb 8-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  822.850590][ T4381] synaptics_usb 8-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  822.939972][ T4678] usb 8-1: USB disconnect, device number 4
[  822.949201][ T3622] synaptics_usb 8-1:0.52: synusb_open - usb_submit_urb failed, error: -19
[  823.176037][T20911] netlink: 'syz.5.6908': attribute type 9 has an invalid length.
[  823.695323][   T26] kauditd_printk_skb: 1894 callbacks suppressed
[  823.695342][   T26] audit: type=1326 audit(785.355:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20923 comm="syz.7.6913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709838e9a9 code=0x7ffc0000
[  823.814130][   T26] audit: type=1326 audit(785.420:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20923 comm="syz.7.6913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709838e9a9 code=0x7ffc0000
[  823.836003][    C0] vkms_vblank_simulate: vblank timer overrun
[  823.969960][   T26] audit: type=1326 audit(785.430:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20923 comm="syz.7.6913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f709838e9a9 code=0x7ffc0000
[  824.060679][   T26] audit: type=1326 audit(785.430:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20923 comm="syz.7.6913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709838e9a9 code=0x7ffc0000
[  824.082543][    C0] vkms_vblank_simulate: vblank timer overrun
[  824.185663][T20900] loop3: detected capacity change from 0 to 32768
[  824.199221][   T26] audit: type=1326 audit(785.430:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20923 comm="syz.7.6913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709838e9a9 code=0x7ffc0000
[  824.235388][T20900] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.6903 (20900)
[  824.311846][T20900] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  824.380516][T20900] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  824.416452][T20900] BTRFS info (device loop3): enabling ssd optimizations
[  824.449755][T20900] BTRFS info (device loop3): using free space tree
[  824.556425][T20954] loop0: detected capacity change from 0 to 512
[  824.593607][T20954] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  824.833369][ T4280] EXT4-fs (loop0): unmounting filesystem.
[  825.131187][T20986] xt_CT: You must specify a L4 protocol and not use inversions on it
[  825.158719][ T4266] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  825.423330][T20994] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6933'.
[  825.750971][T21002] loop5: detected capacity change from 0 to 16
[  825.791298][T21002] erofs: (device loop5): mounted with root inode @ nid 36.
[  825.839621][T21002] syz.5.6937: attempt to access beyond end of device
[  825.839621][T21002] loop5: rw=524288, sector=7864328, nr_sectors = 8 limit=16
[  825.936877][T21002] syz.5.6937: attempt to access beyond end of device
[  825.936877][T21002] loop5: rw=0, sector=7864328, nr_sectors = 8 limit=16
[  825.992798][T21007] loop0: detected capacity change from 0 to 1024
[  826.012075][   T26] audit: type=1800 audit(787.517:2031): pid=21002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6937" name="file3" dev="loop5" ino=89 res=0 errno=0
[  826.343771][T21015] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6941'.
[  827.307455][T21051] loop2: detected capacity change from 0 to 764
[  827.349775][T21051] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  827.373657][T21048] netlink: 10 bytes leftover after parsing attributes in process `syz.7.6953'.
[  827.647607][T21059] loop5: detected capacity change from 0 to 16
[  827.717441][T21059] erofs: (device loop5): mounted with root inode @ nid 36.
[  827.791370][T21059] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  827.828195][T21059] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117]
[  828.202133][T21082] loop0: detected capacity change from 0 to 1764
[  828.501274][T21089] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6969'.
[  828.553361][T21089] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6969'.
[  828.613849][T21089] device vlan0 entered promiscuous mode
[  828.993424][T21061] loop7: detected capacity change from 0 to 32768
[  829.266581][T21105] loop0: detected capacity change from 0 to 4096
[  829.271450][T21109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6978'.
[  829.330851][T21105] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  830.244231][T21095] loop5: detected capacity change from 0 to 32768
[  830.435704][T21095] XFS (loop5): Mounting V5 Filesystem
[  830.754612][T21095] XFS (loop5): Ending clean mount
[  830.786817][T21158] netlink: 'syz.0.6993': attribute type 3 has an invalid length.
[  830.795769][T21095] XFS (loop5): Quotacheck needed: Please wait.
[  830.833690][T21160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6992'.
[  830.847358][T21158] netlink: 'syz.0.6993': attribute type 28 has an invalid length.
[  830.913624][T21158] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6993'.
[  830.938165][T21095] XFS (loop5): Quotacheck: Done.
[  831.052823][T21121] loop7: detected capacity change from 0 to 32768
[  831.108232][T21121] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.6982 (21121)
[  831.130630][T14420] XFS (loop5): Unmounting Filesystem
[  831.180233][T21121] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  831.240747][T21121] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm
[  831.261758][T21121] BTRFS info (device loop7): force clearing of disk cache
[  831.315009][T21121] BTRFS info (device loop7): metadata ratio 0
[  831.321185][T21121] BTRFS info (device loop7): enabling ssd optimizations
[  831.397776][T21121] BTRFS info (device loop7): using spread ssd allocation scheme
[  831.445909][T21121] BTRFS info (device loop7): using free space tree
[  831.469172][T21172] loop3: detected capacity change from 0 to 64
[  832.024304][T21121] BTRFS info (device loop7): rebuilding free space tree
[  832.320391][T19637] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  833.300668][T21241] tipc: Can't bind to reserved service type 0
[  833.654528][T21258] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7025'.
[  833.809698][T21263] loop0: detected capacity change from 0 to 256
[  833.948880][T21263] FAT-fs (loop0): Directory bread(block 64) failed
[  833.997005][T21263] FAT-fs (loop0): Directory bread(block 65) failed
[  834.003752][T21263] FAT-fs (loop0): Directory bread(block 66) failed
[  834.037082][T21264] loop3: detected capacity change from 0 to 4096
[  834.071831][T21263] FAT-fs (loop0): Directory bread(block 67) failed
[  834.109686][T21264] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  834.123805][T21263] FAT-fs (loop0): Directory bread(block 68) failed
[  834.157224][T21264] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[  834.176882][T21263] FAT-fs (loop0): Directory bread(block 69) failed
[  834.198174][T21263] FAT-fs (loop0): Directory bread(block 70) failed
[  834.243468][T21263] FAT-fs (loop0): Directory bread(block 71) failed
[  834.268467][T21263] FAT-fs (loop0): Directory bread(block 72) failed
[  834.313695][T21264] ntfs: volume version 3.1.
[  834.324927][T21263] FAT-fs (loop0): Directory bread(block 73) failed
[  834.330800][T21273] JFS: discard option not supported on device
[  834.369662][   T93] block nbd5: Attempted send on invalid socket
[  834.376100][   T93] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  834.396514][   T93] block nbd5: Attempted send on invalid socket
[  834.403020][   T93] I/O error, dev nbd5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  834.412658][T21273] Mount JFS Failure: -5
[  834.421226][   T93] block nbd2: Attempted send on invalid socket
[  834.427681][   T93] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  834.439154][   T52] block nbd2: Attempted send on invalid socket
[  834.445397][   T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  834.455550][   T52] block nbd2: Attempted send on invalid socket
[  834.462082][   T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  834.492985][T21264] ntfs: (device loop3): ntfs_nlstoucs(): Name is too long (maximum length for a name on NTFS is 255 Unicode characters.
[  834.506199][   T93] block nbd2: Attempted send on invalid socket
[  834.512476][   T93] I/O error, dev nbd2, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  834.532569][   T52] block nbd2: Attempted send on invalid socket
[  834.538842][   T52] I/O error, dev nbd2, sector 30 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  834.554926][   T52] block nbd2: Attempted send on invalid socket
[  834.561229][   T52] I/O error, dev nbd2, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  834.571004][T21277] VFS: unable to find oldfs superblock on device nbd2
[  834.806416][   T26] audit: type=1326 audit(795.753:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21281 comm="syz.5.7035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d78f8e9a9 code=0x7ffc0000
[  834.905119][   T26] audit: type=1326 audit(795.753:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21281 comm="syz.5.7035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d78f8e9a9 code=0x7ffc0000
[  834.927159][    C0] vkms_vblank_simulate: vblank timer overrun
[  835.022585][   T26] audit: type=1326 audit(795.753:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21281 comm="syz.5.7035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f6d78f8e9a9 code=0x7ffc0000
[  835.076160][   T26] audit: type=1326 audit(795.753:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21281 comm="syz.5.7035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d78f8e9a9 code=0x7ffc0000
[  835.172172][   T26] audit: type=1326 audit(795.753:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21281 comm="syz.5.7035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d78f8e9a9 code=0x7ffc0000
[  835.194117][    C0] vkms_vblank_simulate: vblank timer overrun
[  835.241425][   T26] audit: type=1400 audit(796.052:2037): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=21287 comm="syz.5.7039"
[  835.527080][T21295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7041'.
[  835.863353][T21302] loop7: detected capacity change from 0 to 64
[  835.891481][T21284] loop2: detected capacity change from 0 to 32768
[  835.965996][T21284] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.7036 (21284)
[  836.018659][T21284] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  836.064926][T21284] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  836.100649][T21286] loop3: detected capacity change from 0 to 32768
[  836.107742][T21284] BTRFS info (device loop2): enabling ssd optimizations
[  836.138326][T21284] BTRFS info (device loop2): using free space tree
[  836.152764][T21306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7045'.
[  836.238295][T21306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7045'.
[  836.319092][T21286] XFS (loop3): Mounting V5 Filesystem
[  836.504215][T21286] XFS (loop3): Ending clean mount
[  836.766311][ T4266] XFS (loop3): Unmounting Filesystem
[  836.807423][ T4270] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  837.592891][T21366] AppArmor: change_hat: Invalid input '0x'
[  838.093034][T21373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7067'.
[  838.413187][T21384] loop5: detected capacity change from 0 to 512
[  838.426615][T21363] loop7: detected capacity change from 0 to 32768
[  838.451164][T21384] EXT4-fs: Ignoring removed nomblk_io_submit option
[  838.469768][T21384] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  838.484702][ T4317] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  838.491070][T21384] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002]
[  838.509507][T21384] System zones: 0-1, 15-15, 18-18, 34-34
[  838.528399][T21384] EXT4-fs (loop5): orphan cleanup on readonly fs
[  838.552022][T21390] Lens B: =================  START STATUS  =================
[  838.560035][T21390] Lens B: Focus, Absolute: 0
[  838.567314][T21390] Lens B: ==================  END STATUS  ==================
[  838.568641][T21384] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #16: comm syz.5.7072: casefold flag without casefold feature
[  838.666262][T21384] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.7072: couldn't read orphan inode 16 (err -117)
[  838.705648][T21384] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  838.721922][ T4317] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  838.749565][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  838.796143][ T4317] usb 4-1: config 0 descriptor??
[  838.816717][T21384] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  838.866668][T21384] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002]
[  838.922401][T21394] loop2: detected capacity change from 0 to 4096
[  839.017998][T14420] EXT4-fs (loop5): unmounting filesystem.
[  839.229215][T21403] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  839.236879][ T4317] [drm:udl_init] *ERROR* Selecting channel failed
[  839.354532][ T4317] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2
[  839.392842][ T4317] [drm] Initialized udl on minor 2
[  839.403069][ T4317] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  839.438681][ T4317] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  839.483088][T21410] loop0: detected capacity change from 0 to 256
[  839.515460][ T4317] usb 4-1: USB disconnect, device number 6
[  839.540108][ T4670] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  839.571707][T21410] FAT-fs (loop0): error, clusters badly computed (0 != 128)
[  839.578784][ T4670] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  839.596756][ T4270] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  839.603273][ T4270] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  839.611995][T21410] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  839.652725][ T4670] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  839.837726][T21416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7082'.
[  839.924548][T21416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7082'.
[  840.059553][T21422] CIFS mount error: No usable UNC path provided in device string!
[  840.059553][T21422] 
[  840.103787][T21422] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  840.290589][ T4670] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  840.507232][ T4670] usb 6-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid maxpacket 1032, setting to 1024
[  840.526988][ T4670] usb 6-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid wMaxPacketSize 0
[  840.557375][ T4670] usb 6-1: config 16 interface 0 has no altsetting 0
[  840.569351][ T4670] usb 6-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a
[  840.611325][ T4670] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  840.653662][T21420] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  840.769162][T21448] TCP: TCP_TX_DELAY enabled
[  840.906185][ T4670] usb 6-1: string descriptor 0 read error: -71
[  840.914823][ T4670] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  840.931630][ T4670] imon 6-1:16.0: unable to initialize intf0, err -19
[  840.952714][ T4670] imon:imon_probe: failed to initialize context!
[  840.959116][ T4670] imon 6-1:16.0: unable to register, err -19
[  840.998153][ T4670] usb 6-1: USB disconnect, device number 10
[  841.088508][T21456] usb usb9: usbfs: process 21456 (syz.3.7106) did not claim interface 0 before use
[  841.219658][T21460] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready
[  841.747823][T21463] loop0: detected capacity change from 0 to 32768
[  841.809038][T21463] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.7110 (21463)
[  841.859415][T21463] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  841.888941][T21463] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  841.914114][T21463] BTRFS info (device loop0): force clearing of disk cache
[  841.941083][T21481] loop5: detected capacity change from 0 to 256
[  841.948847][T21463] BTRFS info (device loop0): metadata ratio 0
[  841.965940][T21463] BTRFS info (device loop0): enabling ssd optimizations
[  841.974093][T21463] BTRFS info (device loop0): using spread ssd allocation scheme
[  842.051218][T21463] BTRFS info (device loop0): using free space tree
[  842.105061][T21481] FAT-fs (loop5): Directory bread(block 64) failed
[  842.143937][T21481] FAT-fs (loop5): Directory bread(block 65) failed
[  842.176633][T21481] FAT-fs (loop5): Directory bread(block 66) failed
[  842.202752][T21481] FAT-fs (loop5): Directory bread(block 67) failed
[  842.267310][T21481] FAT-fs (loop5): Directory bread(block 68) failed
[  842.294796][T21481] FAT-fs (loop5): Directory bread(block 69) failed
[  842.342897][T21481] FAT-fs (loop5): Directory bread(block 70) failed
[  842.349515][T21481] FAT-fs (loop5): Directory bread(block 71) failed
[  842.451091][T21481] FAT-fs (loop5): Directory bread(block 72) failed
[  842.458803][T21463] BTRFS info (device loop0): rebuilding free space tree
[  842.502149][T21481] FAT-fs (loop5): Directory bread(block 73) failed
[  842.655926][T21515] loop3: detected capacity change from 0 to 128
[  842.746180][T21515] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  842.763158][ T4280] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  842.883767][T21517] loop2: detected capacity change from 0 to 1024
[  842.890595][T21469] loop7: detected capacity change from 0 to 32768
[  842.971949][T21469] ERROR: (device loop7): diAllocAG: numfree > numinos
[  842.971949][T21469] 
[  843.012939][T21469] ERROR: (device loop7): remounting filesystem as read-only
[  843.039926][T21517] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  843.149402][T21469] ialloc: diAlloc returned -5!
[  843.261987][T21517] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[  843.305921][T21517] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  843.346362][T21517] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.7128: Failed to acquire dquot type 1
[  843.637216][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  843.893978][T21542] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.7139'.
[  844.215844][T21556] device veth1_macvtap left promiscuous mode
[  844.658720][T21571] device ip6tnl3 entered promiscuous mode
[  844.853876][T21576] loop7: detected capacity change from 0 to 2048
[  844.878564][T21580] loop2: detected capacity change from 0 to 64
[  844.903110][T21576] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  845.358171][T21592] loop7: detected capacity change from 0 to 256
[  845.378783][T21595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7160'.
[  845.405750][T21592] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  845.479138][T21592] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  845.514787][T21592] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  845.595485][T21600] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  845.643035][T21603] xt_recent: Unsupported userspace flags (000000de)
[  845.922922][T21614] netlink: 'syz.0.7170': attribute type 3 has an invalid length.
[  845.941712][T21614] netlink: 216 bytes leftover after parsing attributes in process `syz.0.7170'.
[  846.295300][T21627] loop2: detected capacity change from 0 to 256
[  846.308386][T21629] loop3: detected capacity change from 0 to 128
[  846.409013][T21629] autofs4:pid:21629:autofs_fill_super: called with bogus options
[  846.740383][T21641] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7183'.
[  846.795390][T21637] loop2: detected capacity change from 0 to 4096
[  846.876854][T21637] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  846.973639][T21637] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz.2.7182: directory missing '..'
[  847.151006][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  847.167191][T21658] loop5: detected capacity change from 0 to 1024
[  847.223470][T21658] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  847.276694][T21655] loop7: detected capacity change from 0 to 4096
[  847.342913][T21658] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[  847.363153][T21655] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512)
[  847.380560][T21658] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  847.441715][T21658] EXT4-fs error (device loop5): ext4_acquire_dquot:6814: comm syz.5.7190: Failed to acquire dquot type 1
[  847.467635][T21655] ntfs3: loop7: Mark volume as dirty due to NTFS errors
[  847.588538][T21655] ntfs3: loop7: ino=1c, "file0" attr_set_size
[  847.648810][T14420] EXT4-fs (loop5): unmounting filesystem.
[  847.761204][T19637] ntfs3: loop7: ntfs_evict_inode r=5 failed, -22.
[  848.233065][T21686] device netdevsim0 entered promiscuous mode
[  848.261277][T21686] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  848.335335][T21691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  848.511075][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  848.517503][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  848.566903][T21692] xt_connbytes: Forcing CT accounting to be enabled
[  848.582865][T21692] xt_NFQUEUE: number of total queues is 0
[  848.858065][T21677] loop7: detected capacity change from 0 to 32768
[  848.898407][T21707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7213'.
[  848.913271][T21677] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 scanned by syz.7.7198 (21677)
[  848.949338][T21677] BTRFS info (device loop7): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  848.993585][T21677] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  849.021969][T21677] BTRFS info (device loop7): use no compression
[  849.042248][T21677] BTRFS info (device loop7): setting nodatasum
[  849.050033][T21677] BTRFS info (device loop7): enabling auto defrag
[  849.105080][T21677] BTRFS info (device loop7): turning on sync discard
[  849.123246][T21677] BTRFS info (device loop7): allowing degraded mounts
[  849.145928][T21677] BTRFS info (device loop7): turning off discard
[  849.158738][ T4444] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  849.169846][T21677] BTRFS info (device loop7): setting datasum
[  849.175931][T21677] BTRFS info (device loop7): using free space tree
[  849.181528][T21715] CIFS mount error: No usable UNC path provided in device string!
[  849.181528][T21715] 
[  849.233617][T21715] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  849.370772][ T4444] usb 6-1: Using ep0 maxpacket: 16
[  849.378424][ T4444] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  849.393967][ T4444] usb 6-1: config 0 has no interface number 0
[  849.406883][ T4444] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  849.427343][ T4444] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  849.454014][ T4444] usb 6-1: Product: syz
[  849.465768][ T4444] usb 6-1: Manufacturer: syz
[  849.492141][T21677] BTRFS info (device loop7): enabling ssd optimizations
[  849.504976][ T4444] usb 6-1: SerialNumber: syz
[  849.530910][ T4444] usb 6-1: config 0 descriptor??
[  849.559533][ T4444] hub 6-1:0.132: bad descriptor, ignoring hub
[  849.611827][ T4444] hub: probe of 6-1:0.132 failed with error -5
[  849.650490][ T4444] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input63
[  849.760041][T19637] BTRFS info (device loop7): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  850.452187][T21762] netlink: 'syz.2.7230': attribute type 4 has an invalid length.
[  850.460543][T21762] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7230'.
[  850.526975][T21762] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  850.898265][T21770] loop0: detected capacity change from 0 to 4096
[  850.937015][T21770] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  850.955469][T21770] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  850.977713][T21780] loop3: detected capacity change from 0 to 512
[  851.004746][T21780] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  851.038503][T21770] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  851.074437][T21780] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec02c, mo2=0002]
[  851.092821][T21780] System zones: 0-2, 18-18, 34-34
[  851.100173][T21770] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  851.118875][T21780] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.7237: iget: bad i_size value: 360287970189639680
[  851.134851][T21780] EXT4-fs (loop3): Remounting filesystem read-only
[  851.139555][T21770] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  851.142181][T21780] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.7237: couldn't read orphan inode 15 (err -117)
[  851.167657][T21780] EXT4-fs (loop3): Remounting filesystem read-only
[  851.174243][T21780] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  851.213667][T21788] kernel read not supported for file /  jT­ì5þE|( (pid: 21788 comm: syz.2.7240)
[  851.224191][   T26] audit: type=1800 audit(811.130:2038): pid=21788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7240" name=2004206A54ADEC35FE457C2808 dev="mqueue" ino=82841 res=0 errno=0
[  851.272620][T21770] ntfs: volume version 3.1.
[  851.293057][T21770] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  851.359285][T21770] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  851.368113][T21780] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.7237: iget: bad i_size value: 360287970189639680
[  851.384333][T12924] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  851.414212][T21770] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  851.457750][T21770] ntfs: (device loop0): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt.
[  851.472430][T21780] EXT4-fs (loop3): Remounting filesystem read-only
[  851.587577][T12924] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  851.622180][T12924] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b
[  851.642619][T12924] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  851.646562][ T4266] EXT4-fs (loop3): unmounting filesystem.
[  851.661779][T12924] usb 8-1: Product: syz
[  851.684046][T12924] usb 8-1: Manufacturer: syz
[  851.694326][T12924] usb 8-1: SerialNumber: syz
[  851.745641][T12924] usb 8-1: config 0 descriptor??
[  852.247668][ T4670] usb 8-1: USB disconnect, device number 5
[  852.349386][T21815] x_tables: duplicate underflow at hook 1
[  852.448110][T21813] loop3: detected capacity change from 0 to 4096
[  852.531879][T21813] ntfs: volume version 3.1.
[  852.775016][T21830] cgroup: Unexpected value for 'cpuset_v2_mode'
[  853.595498][T21855] loop5: detected capacity change from 0 to 4096
[  853.657113][T21855] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  853.749288][T21861] loop0: detected capacity change from 0 to 512
[  853.766088][T21855] ntfs3: loop5: failed to convert "c46c" to koi8-u
[  853.908757][T21861] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  854.117133][T21843] loop2: detected capacity change from 0 to 32768
[  854.178136][ T4280] EXT4-fs (loop0): unmounting filesystem.
[  854.184391][T21843] jfs_strtoUCS: char2uni returned -22.
[  854.189906][T21843] charset = cp950, char = 0xd4
[  854.240056][T21872] ip6t_rpfilter: unknown options
[  854.270344][T21843] jfs_strtoUCS: char2uni returned -22.
[  854.337777][T21843] charset = cp950, char = 0xd4
[  854.428568][T21877] xt_nat: multiple ranges no longer supported
[  854.884828][ T4317] usb 6-1: USB disconnect, device number 11
[  855.107929][T21899] loop0: detected capacity change from 0 to 2048
[  855.128697][T21902] xt_ecn: cannot match TCP bits for non-tcp packets
[  855.183010][T21899] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  855.641077][T21915] loop2: detected capacity change from 0 to 512
[  856.321770][T21943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7311'.
[  856.351865][T21941] loop2: detected capacity change from 0 to 1024
[  856.370046][T21943] netlink: 6 bytes leftover after parsing attributes in process `syz.3.7311'.
[  856.425927][T21943] tc_dump_action: action bad kind
[  857.443373][T21989] misc userio: The device must be registered before sending interrupts
[  857.635264][T21991] tipc: Trying to set illegal importance in message
[  857.832617][T21998] loop2: detected capacity change from 0 to 4096
[  857.892505][T21998] __ntfs_error: 21 callbacks suppressed
[  857.892526][T21998] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  857.948231][T21998] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  857.980444][T22006] netlink: 2 bytes leftover after parsing attributes in process `syz.5.7343'.
[  857.995484][T21998] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  858.024070][T22007] netlink: 'syz.3.7344': attribute type 11 has an invalid length.
[  858.040454][T21998] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  858.078301][T21998] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  858.134993][T21998] ntfs: volume version 3.1.
[  858.161880][T21998] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  858.224175][T21998] ntfs: (device loop2): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  858.269450][T21998] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  858.312105][T21998] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  858.355858][T21998] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  858.486696][ T4670] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  858.539310][T22017] loop3: detected capacity change from 0 to 2048
[  858.609850][T22017] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  858.706911][ T4670] usb 6-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  858.721294][ T4670] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  858.762394][ T4670] usb 6-1: Product: syz
[  858.777117][ T4670] usb 6-1: Manufacturer: syz
[  858.781842][ T4670] usb 6-1: SerialNumber: syz
[  858.830434][ T4670] usb 6-1: config 0 descriptor??
[  858.867115][ T4670] ch341 6-1:0.0: ch341-uart converter detected
[  859.270734][ T4670] usb 6-1: failed to send control message: -71
[  859.277158][T22031] loop3: detected capacity change from 0 to 512
[  859.289530][T22003] loop7: detected capacity change from 0 to 40427
[  859.301855][ T4670] ch341-uart: probe of ttyUSB0 failed with error -71
[  859.310447][T22031] EXT4-fs (loop3): filesystem is read-only
[  859.330017][ T4670] usb 6-1: USB disconnect, device number 12
[  859.365143][ T4670] ch341 6-1:0.0: device disconnected
[  859.393883][T22031] EXT4-fs (loop3): filesystem is read-only
[  859.401148][T22003] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  859.437903][T22031] EXT4-fs (loop3): orphan cleanup on readonly fs
[  859.444337][T22003] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  859.459253][T22031] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.7356: bad orphan inode 16
[  859.503895][T22031] ext4_test_bit(bit=15, block=3) = 0
[  859.509263][T22031] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  859.533848][T22003] F2FS-fs (loop7): invalid crc value
[  859.636827][T22003] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[  859.662365][T22003] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  859.681309][ T4266] EXT4-fs (loop3): unmounting filesystem.
[  859.751925][T22044] loop2: detected capacity change from 0 to 256
[  859.878755][T22044] FAT-fs (loop2): Directory bread(block 64) failed
[  859.885373][T22044] FAT-fs (loop2): Directory bread(block 65) failed
[  859.896038][T22047] loop3: detected capacity change from 0 to 512
[  859.931776][T22044] FAT-fs (loop2): Directory bread(block 66) failed
[  859.947652][T22044] FAT-fs (loop2): Directory bread(block 67) failed
[  859.971082][T22003] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  859.990700][T22003] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  860.001319][T22044] FAT-fs (loop2): Directory bread(block 68) failed
[  860.018751][T22044] FAT-fs (loop2): Directory bread(block 69) failed
[  860.054405][T22044] FAT-fs (loop2): Directory bread(block 70) failed
[  860.068778][T22047] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  860.102885][T22044] FAT-fs (loop2): Directory bread(block 71) failed
[  860.109744][T22044] FAT-fs (loop2): Directory bread(block 72) failed
[  860.117601][T22044] FAT-fs (loop2): Directory bread(block 73) failed
[  860.266336][T22047] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.7361: Failed to acquire dquot type 0
[  860.571163][ T4266] EXT4-fs (loop3): unmounting filesystem.
[  860.715358][T22062] netlink: 'syz.0.7367': attribute type 29 has an invalid length.
[  860.775694][T22062] netlink: 'syz.0.7367': attribute type 29 has an invalid length.
[  861.161051][T22079] loop7: detected capacity change from 0 to 2048
[  861.201484][T22079] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  861.307493][ T4443] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  861.453529][T22088] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check.
[  861.500066][ T4443] usb 3-1: Using ep0 maxpacket: 16
[  861.507172][ T4443] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  861.564060][ T4443] usb 3-1: config 0 has no interface number 0
[  861.589864][ T4443] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  861.641911][ T4443] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  861.694786][ T4443] usb 3-1: Product: syz
[  861.699040][ T4443] usb 3-1: Manufacturer: syz
[  861.726166][ T4443] usb 3-1: SerialNumber: syz
[  861.733679][ T4443] usb 3-1: config 0 descriptor??
[  861.752258][ T4443] hub 3-1:0.132: bad descriptor, ignoring hub
[  861.764466][ T4443] hub: probe of 3-1:0.132 failed with error -5
[  861.780635][ T4443] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input64
[  862.228132][T22106] loop5: detected capacity change from 0 to 164
[  862.313925][T22092] loop3: detected capacity change from 0 to 32768
[  862.362810][T22092] JBD2: Ignoring recovery information on journal
[  862.556157][T22092] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  862.765669][T22092] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature 
[  862.824902][T22092] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  862.852841][T22092] OCFS2: File system is now read-only.
[  862.869041][T22092] (syz.3.7380,22092,1):ocfs2_search_chain:1785 ERROR: status = -30
[  862.910344][T22092] (syz.3.7380,22092,1):ocfs2_search_chain:1871 ERROR: status = -30
[  862.974397][T22092] (syz.3.7380,22092,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30
[  862.985324][T22126] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7394'.
[  862.994548][T22126] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7394'.
[  863.017070][T22092] (syz.3.7380,22092,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30
[  863.026128][T22092] (syz.3.7380,22092,1):ocfs2_claim_new_inode:2216 ERROR: status = -30
[  863.090449][T22092] (syz.3.7380,22092,1):ocfs2_claim_new_inode:2231 ERROR: status = -30
[  863.154119][T22092] (syz.3.7380,22092,1):ocfs2_mknod_locked:639 ERROR: status = -30
[  863.196950][T22092] (syz.3.7380,22092,1):ocfs2_mknod:385 ERROR: status = -30
[  863.222908][T22092] (syz.3.7380,22092,1):ocfs2_mknod:502 ERROR: status = -30
[  863.252381][T22092] (syz.3.7380,22092,1):ocfs2_create:676 ERROR: status = -30
[  863.444898][ T4266] ocfs2: Unmounting device (7,3) on (node local)
[  863.582860][T22146] loop2: detected capacity change from 0 to 1764
[  863.752013][T22146] iso9660: Corrupted directory entry in block 2 of inode 1920
[  864.127714][T22157] loop3: detected capacity change from 0 to 4096
[  864.170759][T22157] __ntfs_warning: 8 callbacks suppressed
[  864.170777][T22157] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  864.532075][T22157] ntfs: (device loop3): parse_options(): NLS character set iso8(ê;3 not found. Using previous one utf8.
[  864.581282][T22157] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  864.641368][T22157] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  864.771706][T22157] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute.
[  864.812184][T22157] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5).
[  864.908010][T22157] ntfs: (device loop3): check_mft_mirror(): Failed to read $MFTMirr.
[  864.939595][T22157] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  865.033611][T22157] ntfs: volume version 3.1.
[  865.095264][T22157] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry with child node found in a leaf node in directory inode 0x5.
[  865.214411][T22157] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  865.746792][T22212] libceph: resolve '0' (ret=-3): failed
[  866.407632][T22234] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7432'.
[  866.443217][T22234] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7432'.
[  866.468046][T22239] Cannot find set identified by id 0 to match
[  866.490080][T22234] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7432'.
[  866.929396][ T4317] usb 3-1: USB disconnect, device number 13
[  867.286130][T22260] loop5: detected capacity change from 0 to 4096
[  867.308848][T22268] loop3: detected capacity change from 0 to 2048
[  867.395267][T22268] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  867.408868][ T4317] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  867.442241][T22260] ntfs3: loop5: ino=1e, "file1" attr_set_size
[  867.474938][T22260] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  867.516897][T22272] No such timeout policy "syz1"
[  867.646030][ T4317] usb 3-1: config index 0 descriptor too short (expected 3133, got 61)
[  867.666598][ T4317] usb 3-1: config 0 has an invalid interface number: 156 but max is 1
[  867.677368][ T4317] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  867.727045][ T4317] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  867.776414][ T4317] usb 3-1: config 0 has no interface number 0
[  867.800278][ T4317] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  867.843426][ T4317] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  867.882230][ T4317] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  867.916526][ T4317] usb 3-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  867.973612][ T4317] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  868.017011][ T4317] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  868.029812][ T4317] usb 3-1: config 0 descriptor??
[  868.039159][ T4317] gspca_main: spca561-2.14.0 probing abcd:cdee
[  868.135609][T22286] loop7: detected capacity change from 0 to 2048
[  868.209588][T22286] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  868.255470][ T4317] spca561: probe of 3-1:0.156 failed with error -22
[  868.265821][ T4317] usb 3-1: MIDIStreaming interface descriptor not found
[  868.335483][ T4317] usb 3-1: USB disconnect, device number 14
[  868.693697][T22303] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7455'.
[  868.765623][T22303] netlink: 'syz.7.7455': attribute type 1 has an invalid length.
[  868.974360][T22308] loop0: detected capacity change from 0 to 256
[  868.980018][T22309] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0.
[  869.074360][T22308] FAT-fs (loop0): Directory bread(block 64) failed
[  869.101259][T22308] FAT-fs (loop0): Directory bread(block 65) failed
[  869.128975][T22308] FAT-fs (loop0): Directory bread(block 66) failed
[  869.182279][T22308] FAT-fs (loop0): Directory bread(block 67) failed
[  869.193322][T22308] FAT-fs (loop0): Directory bread(block 68) failed
[  869.221717][T22308] FAT-fs (loop0): Directory bread(block 69) failed
[  869.243104][T22308] FAT-fs (loop0): Directory bread(block 70) failed
[  869.295585][T22308] FAT-fs (loop0): Directory bread(block 71) failed
[  869.333208][T22308] FAT-fs (loop0): Directory bread(block 72) failed
[  869.338827][T22317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7462'.
[  869.339792][T22308] FAT-fs (loop0): Directory bread(block 73) failed
[  869.386635][T22317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7462'.
[  870.565460][T22354] netlink: 'syz.7.7481': attribute type 11 has an invalid length.
[  870.621958][T22354] netlink: 216 bytes leftover after parsing attributes in process `syz.7.7481'.
[  870.623831][T22360] netlink: 'syz.2.7483': attribute type 9 has an invalid length.
[  870.647200][T22359] loop5: detected capacity change from 0 to 512
[  870.947728][T22367] loop5: detected capacity change from 0 to 64
[  871.293441][T22376] netlink: 'syz.5.7490': attribute type 2 has an invalid length.
[  871.383475][T22376] netlink: 'syz.5.7490': attribute type 11 has an invalid length.
[  871.391714][T22376] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7490'.
[  871.613663][T22388] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7495'.
[  871.661412][T22388] netlink: 'syz.7.7495': attribute type 1 has an invalid length.
[  871.695436][T22388] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7495'.
[  871.748647][T22395] loop2: detected capacity change from 0 to 64
[  871.855743][T22391] loop5: detected capacity change from 0 to 4096
[  871.924128][T22391] __ntfs_error: 3 callbacks suppressed
[  871.924145][T22391] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  872.020268][T22391] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  872.085503][T22391] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  872.120872][T22391] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  872.146241][T22391] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  872.211483][T22391] ntfs: volume version 3.1.
[  872.220697][T22391] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  872.254274][T22391] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  872.287785][T22391] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  872.323758][ T4670] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  872.348536][T22391] ntfs: (device loop5): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt.
[  872.377431][T22391] ntfs: (device loop5): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2.
[  872.540586][ T4670] usb 3-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e
[  872.574707][ T4670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  872.619064][ T4670] pwc: Logitech ViewPort AV 100 webcam detected.
[  873.065958][ T4670] pwc: send_video_command error -71
[  873.071360][ T4670] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  873.102233][ T4670] Philips webcam: probe of 3-1:127.0 failed with error -71
[  873.122477][ T4670] usb 3-1: USB disconnect, device number 15
[  873.192976][T22401] loop3: detected capacity change from 0 to 40427
[  873.227891][T22401] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  873.264011][T22401] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  873.296464][T22401] F2FS-fs (loop3): invalid crc value
[  873.360729][T22401] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[  873.449866][T22401] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  873.514564][T22426] loop0: detected capacity change from 0 to 1024
[  873.661528][T22423] loop5: detected capacity change from 0 to 4096
[  873.680119][T22401] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  873.733267][T22423] ntfs: volume version 3.1.
[  873.744731][T22401] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  874.065321][T22433] 8021q: VLANs not supported on lo
[  874.312478][T22400] loop7: detected capacity change from 0 to 65536
[  874.453455][T22400] XFS (loop7): Mounting V5 Filesystem
[  874.685753][T22400] XFS (loop7): Ending clean mount
[  874.725872][T22400] XFS (loop7): Quotacheck needed: Please wait.
[  874.880824][T22400] XFS (loop7): Quotacheck: Done.
[  875.131825][T22474] netlink: 'syz.2.7523': attribute type 1 has an invalid length.
[  875.134867][T19637] XFS (loop7): Unmounting Filesystem
[  875.383569][T22478] loop0: detected capacity change from 0 to 4096
[  875.414409][T22478] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  876.384300][T22476] loop5: detected capacity change from 0 to 40427
[  876.426636][T22476] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  876.454263][T22476] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  876.496876][T22476] F2FS-fs (loop5): invalid crc value
[  876.595897][T22476] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669)
[  876.675563][T22476] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  876.939786][T22512] (unnamed net_device) (uninitialized): option lacp_active: invalid value (7)
[  876.958055][T22476] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  876.970583][T22476] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  877.161776][T22521] loop7: detected capacity change from 0 to 1024
[  877.470098][   T11] hfsplus: b-tree write err: -5, ino 4
[  877.770786][T22533] loop2: detected capacity change from 0 to 4096
[  877.824337][T22533] __ntfs_warning: 23 callbacks suppressed
[  877.824355][T22533] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  878.062804][T22533] ntfs: volume version 3.1.
[  878.174287][T22551] syz.7.7552 (22551): /proc/22547/oom_adj is deprecated, please use /proc/22547/oom_score_adj instead.
[  878.205169][T22550] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7553'.
[  878.231081][T22553] netlink: 'syz.3.7554': attribute type 11 has an invalid length.
[  878.264578][T22553] netlink: 216 bytes leftover after parsing attributes in process `syz.3.7554'.
[  878.573553][T22562] loop0: detected capacity change from 0 to 1024
[  878.735005][T22566] netlink: 'syz.5.7559': attribute type 30 has an invalid length.
[  878.759767][    T9] hfsplus: b-tree write err: -5, ino 4
[  879.385867][T22583] netlink: 'syz.2.7563': attribute type 10 has an invalid length.
[  879.439554][T22583] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7563'.
[  879.517780][T22586] loop7: detected capacity change from 0 to 4096
[  879.536046][T22583] device virt_wifi0 entered promiscuous mode
[  879.542475][T22583] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  879.581956][T22586] ntfs: (device loop7): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  879.600101][T22583] batman_adv: batadv0: Removing interface: virt_wifi0
[  879.660633][T22586] ntfs: (device loop7): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  879.738473][T22583] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  879.754766][T22586] ntfs: (device loop7): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  879.786373][T22586] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  879.832905][T22586] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  879.929898][T22586] ntfs: volume version 3.1.
[  880.010488][T22586] ntfs: (device loop7): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  880.048841][T22586] ntfs: (device loop7): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  880.117294][T22586] ntfs: (device loop7): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  880.221265][T22586] ntfs: (device loop7): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt.
[  880.428969][T22607] loop3: detected capacity change from 0 to 8192
[  880.550792][T22607] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  880.598837][T22620] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7577'.
[  880.700625][T22620] netlink: 'syz.7.7577': attribute type 1 has an invalid length.
[  880.708565][T22607] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  880.722830][T22607] REISERFS (device loop3): using ordered data mode
[  880.729413][T22607] reiserfs: using flush barriers
[  880.776425][T22607] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7143454, max trans age 30
[  880.853939][T22607] REISERFS (device loop3): checking transaction log (loop3)
[  880.920014][T22607] REISERFS (device loop3): Using rupasov hash to sort names
[  880.945195][T22607] REISERFS (device loop3): using 3.5.x disk format
[  880.989381][T22607] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  881.053601][T22607] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  881.111045][T22607] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4106497 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  881.181503][T22607] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  881.218826][T22632] loop5: detected capacity change from 0 to 2048
[  881.226478][T22607] REISERFS (device loop3): Remounting filesystem read-only
[  881.233850][T22607] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4106497 0x0 SD] stat data
[  881.314927][T22632] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  881.338795][T22634] loop0: detected capacity change from 0 to 1024
[  881.351836][T22607] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4106497 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  881.386044][T22634] EXT4-fs: Ignoring removed oldalloc option
[  881.416510][T22634] EXT4-fs: Ignoring removed orlov option
[  881.444198][T22607] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  881.491323][T22607] REISERFS error (device loop3): zam-7001 reiserfs_find_entry: io error
[  881.532497][T22607] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 4106497 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  881.549704][T22634] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  881.587993][T22607] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  881.616542][T22607] REISERFS error (device loop3): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 4106497 0x0 SD] stat data
[  881.697193][T22607] REISERFS warning (device loop3): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount.
[  881.851786][ T4280] EXT4-fs (loop0): unmounting filesystem.
[  882.373538][T22653] loop0: detected capacity change from 0 to 1024
[  882.391782][T22630] loop7: detected capacity change from 0 to 32768
[  882.519548][T22651] loop3: detected capacity change from 0 to 4096
[  882.553723][T22630] XFS (loop7): Mounting V5 Filesystem
[  882.574527][T22653] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  882.720310][T22651] ntfs: volume version 3.1.
[  882.855465][T22630] XFS (loop7): Ending clean mount
[  882.881641][T22630] XFS (loop7): Quotacheck needed: Please wait.
[  883.010995][ T4280] EXT4-fs (loop0): unmounting filesystem.
[  883.029535][T22630] XFS (loop7): Quotacheck: Done.
[  883.430851][T19637] XFS (loop7): Unmounting Filesystem
[  884.537703][   T26] kauditd_printk_skb: 6 callbacks suppressed
[  884.537721][   T26] audit: type=1326 audit(842.304:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22720 comm="syz.0.7608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d898e9a9 code=0x7ffc0000
[  884.704460][   T26] audit: type=1326 audit(842.304:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22720 comm="syz.0.7608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f97d898e9a9 code=0x7ffc0000
[  884.803895][   T26] audit: type=1326 audit(842.304:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22720 comm="syz.0.7608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d898e9a9 code=0x7ffc0000
[  884.895657][   T26] audit: type=1326 audit(842.304:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22720 comm="syz.0.7608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d898e9a9 code=0x7ffc0000
[  885.583626][T22756] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7626'.
[  885.592744][T22756] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7626'.
[  885.897414][T22764] ieee802154 phy0 wpan0: encryption failed: -22
[  886.110550][T22772] loop7: detected capacity change from 0 to 256
[  886.191288][T22772] FAT-fs (loop7): Directory bread(block 64) failed
[  886.212772][T22772] FAT-fs (loop7): Directory bread(block 65) failed
[  886.233691][T22772] FAT-fs (loop7): Directory bread(block 66) failed
[  886.255073][T22772] FAT-fs (loop7): Directory bread(block 67) failed
[  886.276072][T22772] FAT-fs (loop7): Directory bread(block 68) failed
[  886.312524][T22772] FAT-fs (loop7): Directory bread(block 69) failed
[  886.319700][T22772] FAT-fs (loop7): Directory bread(block 70) failed
[  886.326993][T22772] FAT-fs (loop7): Directory bread(block 71) failed
[  886.335593][T22772] FAT-fs (loop7): Directory bread(block 72) failed
[  886.348861][T22772] FAT-fs (loop7): Directory bread(block 73) failed
[  886.441881][T22747] loop5: detected capacity change from 0 to 40427
[  886.485257][T22747] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  886.509321][T22747] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  886.576847][T22747] F2FS-fs (loop5): invalid crc value
[  886.582563][   T26] audit: type=1326 audit(844.214:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22780 comm="syz.3.7638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef5d8e9a9 code=0x7ffc0000
[  886.592222][   T26] audit: type=1326 audit(844.223:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22780 comm="syz.3.7638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fdef5d8e9a9 code=0x7ffc0000
[  886.702084][   T26] audit: type=1326 audit(844.279:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22780 comm="syz.3.7638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef5d8e9a9 code=0x7ffc0000
[  886.770795][T22747] F2FS-fs (loop5): Found nat_bits in checkpoint
[  886.872929][   T26] audit: type=1326 audit(844.279:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22780 comm="syz.3.7638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef5d8e9a9 code=0x7ffc0000
[  886.939905][T22791] loop3: detected capacity change from 0 to 764
[  886.979138][T22747] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  886.993983][T22747] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  887.028071][T22791] rock: directory entry would overflow storage
[  887.071792][T22791] rock: sig=0x4654, size=5, remaining=4
[  887.133445][T22791] isofs: Unable to find the ".." directory for NFS.
[  887.696277][T22808] device bond1 entered promiscuous mode
[  887.703076][T22808] 8021q: adding VLAN 0 to HW filter on device bond1
[  888.282665][T22824] loop7: detected capacity change from 0 to 4096
[  888.348423][T22824] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512)
[  888.552701][T22824] syz.7.7654 (22824) used greatest stack depth: 19440 bytes left
[  890.063922][T22893] netlink: 'syz.7.7681': attribute type 6 has an invalid length.
[  890.337200][T22903] netlink: 'syz.7.7686': attribute type 30 has an invalid length.
[  890.498027][T22908] comedi comedi2: rti800: I/O port conflict (0x3c,16)
[  890.514417][T22914] ..: renamed from ipvlan0
[  891.360110][T22945] netlink: 'syz.2.7704': attribute type 28 has an invalid length.
[  891.532198][T22951] loop3: detected capacity change from 0 to 256
[  891.724738][T22951] FAT-fs (loop3): Directory bread(block 64) failed
[  891.767492][T22951] FAT-fs (loop3): Directory bread(block 65) failed
[  891.812052][T22951] FAT-fs (loop3): Directory bread(block 66) failed
[  891.842871][T22951] FAT-fs (loop3): Directory bread(block 67) failed
[  891.864751][T22951] FAT-fs (loop3): Directory bread(block 68) failed
[  891.892118][T22951] FAT-fs (loop3): Directory bread(block 69) failed
[  891.924448][T22951] FAT-fs (loop3): Directory bread(block 70) failed
[  891.973110][T22951] FAT-fs (loop3): Directory bread(block 71) failed
[  891.979854][T22951] FAT-fs (loop3): Directory bread(block 72) failed
[  892.026608][T22951] FAT-fs (loop3): Directory bread(block 73) failed
[  892.140710][T22966] loop2: detected capacity change from 0 to 1024
[  892.256887][T22966] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  892.463461][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  892.656757][T22987] device wireguard0 entered promiscuous mode
[  892.768656][T22990] loop2: detected capacity change from 0 to 256
[  892.863250][T22990] FAT-fs (loop2): Directory bread(block 64) failed
[  892.933741][T22990] FAT-fs (loop2): Directory bread(block 65) failed
[  892.987944][T22990] FAT-fs (loop2): Directory bread(block 66) failed
[  893.020346][T22990] FAT-fs (loop2): Directory bread(block 67) failed
[  893.055520][T22990] FAT-fs (loop2): Directory bread(block 68) failed
[  893.115847][T22990] FAT-fs (loop2): Directory bread(block 69) failed
[  893.131294][T22990] FAT-fs (loop2): Directory bread(block 70) failed
[  893.151840][T22990] FAT-fs (loop2): Directory bread(block 71) failed
[  893.158576][T22990] FAT-fs (loop2): Directory bread(block 72) failed
[  893.187290][T22990] FAT-fs (loop2): Directory bread(block 73) failed
[  893.740316][T22981] loop7: detected capacity change from 0 to 32768
[  893.811885][T22981] (syz.7.7719,22981,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  893.900341][T22981] (syz.7.7719,22981,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  894.040361][T22981] JBD2: Ignoring recovery information on journal
[  894.193130][T22981] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  894.453936][T22981] 
[  894.456353][T22981] ======================================================
[  894.463414][T22981] WARNING: possible circular locking dependency detected
[  894.470578][T22981] 6.1.146-syzkaller #0 Not tainted
[  894.475719][T22981] ------------------------------------------------------
[  894.482771][T22981] syz.7.7719/22981 is trying to acquire lock:
[  894.488963][T22981] ffff88806ffdb120 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e5/0x270
[  894.499901][T22981] 
[  894.499901][T22981] but task is already holding lock:
[  894.507303][T22981] ffff88806ffdb488 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1c7/0x270
[  894.519982][T22981] 
[  894.519982][T22981] which lock already depends on the new lock.
[  894.519982][T22981] 
[  894.530397][T22981] 
[  894.530397][T22981] the existing dependency chain (in reverse order) is:
[  894.539415][T22981] 
[  894.539415][T22981] -> #6 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8){+.+.}-{3:3}:
[  894.549951][T22981]        down_write+0x36/0x60
[  894.554651][T22981]        ocfs2_lock_global_qf+0x1c7/0x270
[  894.560390][T22981]        ocfs2_acquire_dquot+0x2a0/0xb10
[  894.566031][T22981]        dqget+0x778/0xeb0
[  894.570471][T22981]        dquot_set_dqblk+0x27/0xf90
[  894.575715][T22981]        quota_setquota+0x4ac/0x530
[  894.580930][T22981]        __se_sys_quotactl+0x295/0x6b0
[  894.586402][T22981]        do_syscall_64+0x4c/0xa0
[  894.591454][T22981]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  894.597918][T22981] 
[  894.597918][T22981] -> #5 (&dquot->dq_lock){+.+.}-{3:3}:
[  894.605589][T22981]        __mutex_lock+0x120/0xaf0
[  894.610634][T22981]        dquot_commit+0x5a/0x410
[  894.615582][T22981]        ext4_write_dquot+0x1f0/0x360
[  894.620976][T22981]        mark_all_dquot_dirty+0xf9/0x400
[  894.626630][T22981]        __dquot_free_space+0x7ec/0xbc0
[  894.632203][T22981]        ext4_free_blocks+0x1bab/0x2640
[  894.637779][T22981]        ext4_ext_remove_space+0x1f0d/0x4490
[  894.643781][T22981]        ext4_ext_truncate+0x211/0x370
[  894.649261][T22981]        ext4_truncate+0xa0b/0x1230
[  894.654497][T22981]        ext4_evict_inode+0xb35/0x1100
[  894.659980][T22981]        evict+0x485/0x870
[  894.664413][T22981]        ext4_orphan_cleanup+0xbd3/0x1400
[  894.670149][T22981]        ext4_fill_super+0x7b78/0x8110
[  894.675705][T22981]        get_tree_bdev+0x3f1/0x610
[  894.681004][T22981]        vfs_get_tree+0x88/0x270
[  894.685961][T22981]        do_new_mount+0x24a/0xa40
[  894.691004][T22981]        __se_sys_mount+0x2d6/0x3c0
[  894.696212][T22981]        do_syscall_64+0x4c/0xa0
[  894.701176][T22981]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  894.707613][T22981] 
[  894.707613][T22981] -> #4 (&ei->i_data_sem){++++}-{3:3}:
[  894.715276][T22981]        down_write+0x36/0x60
[  894.719988][T22981]        ext4_truncate+0x987/0x1230
[  894.725233][T22981]        ext4_setattr+0x10cb/0x19f0
[  894.730469][T22981]        notify_change+0xc74/0xf40
[  894.735611][T22981]        do_truncate+0x197/0x220
[  894.740563][T22981]        do_sys_ftruncate+0x312/0x3c0
[  894.745951][T22981]        do_syscall_64+0x4c/0xa0
[  894.750993][T22981]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  894.757430][T22981] 
[  894.757430][T22981] -> #3 (jbd2_handle){++++}-{0:0}:
[  894.764744][T22981]        start_this_handle+0x1f49/0x2150
[  894.770486][T22981]        jbd2__journal_start+0x2b7/0x5a0
[  894.776139][T22981]        jbd2_journal_start+0x26/0x30
[  894.781555][T22981]        ocfs2_start_trans+0x372/0x6c0
[  894.787038][T22981]        ocfs2_shutdown_local_alloc+0x1fd/0xa10
[  894.793292][T22981]        ocfs2_dismount_volume+0x1fc/0x930
[  894.799122][T22981]        generic_shutdown_super+0x130/0x340
[  894.805024][T22981]        kill_block_super+0x7c/0xe0
[  894.810229][T22981]        deactivate_locked_super+0x93/0xf0
[  894.816045][T22981]        cleanup_mnt+0x463/0x4f0
[  894.821028][T22981]        task_work_run+0x1ca/0x250
[  894.826154][T22981]        exit_to_user_mode_loop+0xe6/0x110
[  894.831986][T22981]        exit_to_user_mode_prepare+0xb1/0x140
[  894.838070][T22981]        syscall_exit_to_user_mode+0x16/0x40
[  894.844076][T22981]        do_syscall_64+0x58/0xa0
[  894.849058][T22981]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  894.855541][T22981] 
[  894.855541][T22981] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  894.864076][T22981]        down_read+0x42/0x2d0
[  894.868777][T22981]        ocfs2_start_trans+0x366/0x6c0
[  894.874258][T22981]        ocfs2_shutdown_local_alloc+0x1fd/0xa10
[  894.880510][T22981]        ocfs2_dismount_volume+0x1fc/0x930
[  894.886344][T22981]        generic_shutdown_super+0x130/0x340
[  894.892255][T22981]        kill_block_super+0x7c/0xe0
[  894.897468][T22981]        deactivate_locked_super+0x93/0xf0
[  894.903290][T22981]        cleanup_mnt+0x463/0x4f0
[  894.908239][T22981]        task_work_run+0x1ca/0x250
[  894.913367][T22981]        exit_to_user_mode_loop+0xe6/0x110
[  894.919191][T22981]        exit_to_user_mode_prepare+0xb1/0x140
[  894.925276][T22981]        syscall_exit_to_user_mode+0x16/0x40
[  894.931273][T22981]        do_syscall_64+0x58/0xa0
[  894.936239][T22981]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  894.942697][T22981] 
[  894.942697][T22981] -> #1 (sb_internal#3){.+.+}-{0:0}:
[  894.950195][T22981]        ocfs2_start_trans+0x267/0x6c0
[  894.955676][T22981]        ocfs2_write_info+0x117/0x350
[  894.961056][T22981]        dquot_set_dqinfo+0x459/0x6c0
[  894.966437][T22981]        quota_setinfo+0x2a4/0x2b0
[  894.971563][T22981]        __se_sys_quotactl+0x295/0x6b0
[  894.977040][T22981]        do_syscall_64+0x4c/0xa0
[  894.982017][T22981]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  894.988564][T22981] 
[  894.988564][T22981] -> #0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}:
[  894.997456][T22981]        __lock_acquire+0x2cf8/0x7c50
[  895.002870][T22981]        lock_acquire+0x1b4/0x490
[  895.007924][T22981]        down_write+0x36/0x60
[  895.012630][T22981]        ocfs2_lock_global_qf+0x1e5/0x270
[  895.018369][T22981]        ocfs2_acquire_dquot+0x2a0/0xb10
[  895.024020][T22981]        dqget+0x778/0xeb0
[  895.028572][T22981]        dquot_set_dqblk+0x27/0xf90
[  895.033792][T22981]        quota_setquota+0x4ac/0x530
[  895.039030][T22981]        __se_sys_quotactl+0x295/0x6b0
[  895.044525][T22981]        do_syscall_64+0x4c/0xa0
[  895.049552][T22981]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  895.056002][T22981] 
[  895.056002][T22981] other info that might help us debug this:
[  895.056002][T22981] 
[  895.066243][T22981] Chain exists of:
[  895.066243][T22981]   &ocfs2_quota_ip_alloc_sem_key --> &dquot->dq_lock --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8
[  895.066243][T22981] 
[  895.083404][T22981]  Possible unsafe locking scenario:
[  895.083404][T22981] 
[  895.090872][T22981]        CPU0                    CPU1
[  895.096253][T22981]        ----                    ----
[  895.101632][T22981]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8);
[  895.109092][T22981]                                lock(&dquot->dq_lock);
[  895.116054][T22981]                                lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8);
[  895.125897][T22981]   lock(&ocfs2_quota_ip_alloc_sem_key);
[  895.131551][T22981] 
[  895.131551][T22981]  *** DEADLOCK ***
[  895.131551][T22981] 
[  895.139698][T22981] 3 locks held by syz.7.7719/22981:
[  895.144931][T22981]  #0: ffff8880541380e0 (&type->s_umount_key#86){++++}-{3:3}, at: user_get_super+0x118/0x240
[  895.155143][T22981]  #1: ffff88804e3720a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x293/0xb10
[  895.165173][T22981]  #2: ffff88806ffdb488 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1c7/0x270
[  895.178170][T22981] 
[  895.178170][T22981] stack backtrace:
[  895.184068][T22981] CPU: 0 PID: 22981 Comm: syz.7.7719 Not tainted 6.1.146-syzkaller #0
[  895.192383][T22981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  895.202456][T22981] Call Trace:
[  895.205750][T22981]  <TASK>
[  895.208694][T22981]  dump_stack_lvl+0x168/0x22e
[  895.213390][T22981]  ? load_image+0x3b0/0x3b0
[  895.217913][T22981]  ? show_regs_print_info+0x12/0x12
[  895.223126][T22981]  ? print_circular_bug+0x12b/0x1a0
[  895.228354][T22981]  check_noncircular+0x274/0x310
[  895.233324][T22981]  ? add_chain_block+0x940/0x940
[  895.238289][T22981]  ? lockdep_lock+0xdc/0x1e0
[  895.242909][T22981]  ? lockdep_unlock+0x133/0x2d0
[  895.247777][T22981]  ? lockdep_lock+0x1e0/0x1e0
[  895.252488][T22981]  ? _find_first_zero_bit+0xcf/0x100
[  895.257799][T22981]  __lock_acquire+0x2cf8/0x7c50
[  895.262700][T22981]  ? verify_lock_unused+0x140/0x140
[  895.267929][T22981]  ? ocfs2_inode_lock_full_nested+0xcb3/0x1b20
[  895.274108][T22981]  lock_acquire+0x1b4/0x490
[  895.278718][T22981]  ? ocfs2_lock_global_qf+0x1e5/0x270
[  895.284196][T22981]  ? __might_sleep+0xd0/0xd0
[  895.288807][T22981]  ? preempt_count_add+0x8d/0x190
[  895.293852][T22981]  ? read_lock_is_recursive+0x10/0x10
[  895.299275][T22981]  ? rwsem_write_trylock+0x12f/0x1b0
[  895.304577][T22981]  ? clear_nonspinnable+0x60/0x60
[  895.309630][T22981]  ? __rwlock_init+0x140/0x140
[  895.314417][T22981]  down_write+0x36/0x60
[  895.318596][T22981]  ? ocfs2_lock_global_qf+0x1e5/0x270
[  895.324095][T22981]  ocfs2_lock_global_qf+0x1e5/0x270
[  895.329356][T22981]  ? lock_buffer+0x80/0x80
[  895.333806][T22981]  ? trace_contention_end+0x5f/0x170
[  895.339133][T22981]  ocfs2_acquire_dquot+0x2a0/0xb10
[  895.344275][T22981]  ? __mutex_unlock_slowpath+0x19e/0x6a0
[  895.350018][T22981]  ? from_kgid+0x159/0x680
[  895.354449][T22981]  ? ocfs2_destroy_dquot+0x40/0x40
[  895.359585][T22981]  dqget+0x778/0xeb0
[  895.363678][T22981]  dquot_set_dqblk+0x27/0xf90
[  895.368381][T22981]  quota_setquota+0x4ac/0x530
[  895.373082][T22981]  ? quota_getnextquota+0x450/0x450
[  895.378306][T22981]  ? bpf_lsm_capable+0x5/0x10
[  895.383002][T22981]  ? do_quotactl+0x4f3/0x710
[  895.387610][T22981]  __se_sys_quotactl+0x295/0x6b0
[  895.392570][T22981]  ? __x64_sys_quotactl+0xa0/0xa0
[  895.397623][T22981]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  895.403627][T22981]  ? lock_chain_count+0x20/0x20
[  895.408502][T22981]  ? lockdep_hardirqs_on+0x94/0x140
[  895.413807][T22981]  do_syscall_64+0x4c/0xa0
[  895.418238][T22981]  ? clear_bhb_loop+0x60/0xb0
[  895.422937][T22981]  ? clear_bhb_loop+0x60/0xb0
[  895.427631][T22981]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  895.433554][T22981] RIP: 0033:0x7f709838e9a9
[  895.438012][T22981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  895.457652][T22981] RSP: 002b:00007f7099169038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
[  895.466089][T22981] RAX: ffffffffffffffda RBX: 00007f70985b5fa0 RCX: 00007f709838e9a9
[  895.474076][T22981] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffff80000801
[  895.482061][T22981] RBP: 00007f7098410ca1 R08: 0000000000000000 R09: 0000000000000000
[  895.490044][T22981] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000
[  895.498060][T22981] R13: 0000000000000000 R14: 00007f70985b5fa0 R15: 00007ffe6f0ccc58
[  895.506052][T22981]  </TASK>
[  895.558040][T22999] loop3: detected capacity change from 0 to 40427
[  895.572743][T22999] F2FS-fs (loop3): Invalid log blocks per segment (4278190089)
[  895.583335][T22999] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  895.593771][T22999] F2FS-fs (loop3): invalid crc value
[  895.630897][T22999] F2FS-fs (loop3): Found nat_bits in checkpoint
[  895.677810][T19637] ocfs2: Unmounting device (7,7) on (node local)
[  895.726007][T22999] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  895.739097][T22999] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  895.839519][ T4266] syz-executor: attempt to access beyond end of device
[  895.839519][ T4266] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427