last executing test programs:

8.524521154s ago: executing program 3 (id=583):
syz_mount_image$ocfs2(&(0x7f0000001200), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000001400)=ANY=[@ANYBLOB="6e6f757365725f78617474722c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c646174613d77726974656261636b2c6572726f72733d72656d6f756e742d726f2c6e6f61636c2c0033b67a38edf7ca65cff4aecf1bccac7b7847e83ec6928ad9eff2281ff7a2314d9a8541a9772b98d067c1463bb01ed3ebf5764745d29402107611df2e22d6cfb25eb0a8b970f339cf6413aaef25cee228060d70ce0ade90d917a9c5", @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRESOCT, @ANYRESOCT], 0x1, 0x443b, &(0x7f0000010200)="$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")

5.530953731s ago: executing program 3 (id=593):
syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004480)='./file0\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f61636c2c636f686572656e63793d66756c6c2c6865617274626561743d6e6f6e652c6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f757365725f78617474722c008e1d54758732e066b2e39f7bd9e6e2dab460"], 0x1, 0x4460, &(0x7f0000009680)="$eJzs2M1vG2kdB/DfTJLGSZPiQg9BcIgEEhVCIckJARIgXqpKiFSBIkSQIuelbcCJQ+KgHHoAqUcORXDizBHOnJAq7iDtP7D7B+zuoXvo7mm98nicemJ74+7GTpr9fA4Zz/Myz5N8Pc88kzRXf7RzOL9zOF/Zm69tPjhcnv9DrXq0ux3piFz0+AxmGDnJ/uKs/PAnP//lcsT+k+W1RqPRiIgoR29LHZ9fPH+82XlsS0/1aV63z+XOya8j4lbXvJrGIuJX/45IIiLJf6k0P07lvZp1v/n9V/8cpVcZc6pvzR/X/z/zz+O73/zXg/996cXbK0/7Nkwi/l794jce7r7zlbHvvPX1rKwx+Az++yrTBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBG5s7py/97iUjxLytn5/pPltc76yXL+odS7f6Mx9CkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJfcndWV+/cWl+JZEqX3JiP2nyyvddaPl/MP5d79G98bwSQZmrs/W/nRjxeXstwbjaSr/lt50bs/GIubEfHi+ePNKBzfnO1sn5z6npz+PuWtzm3+7fm1xy1Hki4UztN0YSEiOW6dzyXTabV2WJ6IONrbOrdpvLaK+adZWSGdVtHH5N86njQfKP/z9IWub1N2PjfcUa+Kl/nPrDUaY33b/eNPSeER0C//sQvI/5OaPNd5vJ6K9/94Vla8n1qBNvP/y/jZ9//4Gfmf18p/o/mjlF2v1LkCNPcwzfJ++xWKivlPZGX98u+1/n9wKv+J3vnf++vQfoM+6//+0Aa8Uor5X8vKin/P1gYgyz89+/6/dlme//PDHfWqKOY/+d20u0n25xx0/Z8cUf7l9sp0I+n6BmTlpYjZYQx8xRTzL3XVv3z/Swfa/5cu6P2vdOr9r/0ecjtpvf/RWzH/qb7tBr3/p0a8/rf2fwOYGOYsXl/F/Kezsk+z/58eUf7Zc6rH/v/D9v7/eBijXj3F/K9nZcVV4Gn2M9v/Jd25v38q/+uXYP+Xzf/2cEe9Kor5z/Rt18z/jQGe/zMjzz9i+pV7nOxz+v/D6zOimH++Y/5Pd7vs/i+dnf/siPP/2pkt/CMIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DJKy61jOZJ0oXCepgsLEWP5+VxMJxuVrfWNam3zd4cR43n5fHw+eVitbVSq6zt7ta3t9Uq1WtuMmMjrb0UpOazW6uu7lf1rJ9eaSh5tVw7qG9uVekRM5uVfjtn2tTZ26ruV/YgondR9Lq0d7D+q7K1v7Rx8e3FxcTGmTuZwM9k+rm/v1Vujt2ojpk/6lpOOyWXV10/mMpP8tnZ0sFepZuUzHX2qtc1KtaPPbF73t7iZ1A+O9jYr9e31au1he7zeps4nqDN8Pz+md1d/sfrTpe4Gc3l9eSTTAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CN255gGYSgMAvA9YMQBIpgJBmBCAhsakMGICBDAhoHWSPfOTdM+AZ26fF/yJ//ddAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACzyP5/eSXZT2iS51KfMV41dfvd2/3lej99Hc+i72yvZlnWWAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYVdeldNIIjCADwzKXKp9jFSLbup0gYSQpqsCFaWvoClhaWva2FnJaLMgqy7aKOFfF+zlzOHc2B+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH8DtuJqOqDiGGl91zCPPVx/S0/lbkl0V//9MdduR2/v6b75+qzvcez+qf+df6Kx2r281yFnqerdjJSTdP+dTlxQbyNrRfO7cIMZWH75zb95hSWfZ1vl43AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPbswIEAAAAAgCB/6xUGKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGApAAD//y5GmuM=")

4.500798519s ago: executing program 2 (id=598):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x80a, &(0x7f0000001400), 0x1, 0x7aa, &(0x7f0000001440)="$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")

4.049408733s ago: executing program 2 (id=599):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYBLOB="82"], 0x0)

3.978606628s ago: executing program 3 (id=600):
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x22, 0x17, 0x4a, 0x20, 0x4b4, 0x861f, 0xf9d6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x73, 0xa7, 0x7a}}]}}]}}, 0x0)

3.5793764s ago: executing program 0 (id=604):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.485417985s ago: executing program 0 (id=605):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f0000000340)={[{@errors_remount}, {@nombcache}, {}]}, 0xfe, 0x450, &(0x7f0000000d80)="$eJzs3MtvG0UYAPBvnTh9URJKofQFgYKoeCRN+qAHLkUg9QASEhyKOJk0rUrdBjVBolUFhUM5okrcEUck/gIulAsCTkhc4Y6QIpQLhZPR2rupcWwnTpy4xL+ftPWMd9yZb3cnHs94HUDfGo2I/RFxX0T8GhHDEZE0FhitPdxZuD7198L1qSQqlTf+TKrl/lq4PpUXzV+3o5apDLSp9+bbEaVyefpKlh+fu/Te+OzVa89fuFQ6P31++vLkyZPHjh4cOjF5vCtx7kzbuu/DmQN7T79167WpM7fe+fHrJIs7GuLoltHqUWvuqW5X1mM769LJYA8bQkfSPpqermK1/w/HQGxb3Dccr3zS08YB66pSKVS2tN59owJsYuloHuhH+Rt9+vk33zZo6HFPmD8Vi/MYd7KttmcwClmZ4jrWPxoRZ27880W6xTrNQwAA1Lt9KiKeazb+K8TDdeXuz9aGRiLigYjYFREPRsTuiHgoolp2T0Q80mH9jSskS8c/leFVBbZC6fjvxWxt67/jv3z0FyMDWW5nNf5icu5CefpIdkwOR3FLmp9oU8d3L//yWat99eO/dEvrz8eCWTv+GGyYoDtbKpbWEnO9+Y/Tf083iT+JfBknHR/vjYh9Hf7fe7LHC898daBVmeXjb6ML60yVLyOerp3/G9EQfy5puT458cKJyePjW6M8fWQ8vyqW+unnm6+3qn9N8XfB/O1KbG96/S/GP5JsjZi9eu1idb12tvM6bv72acvPNKu7/udKQ8mb1fRQ9twHpbm5KxMRQ8mrS5+fvPvaPJ+XT6//w4ea9/9dcfdI7I+I9CI+GBGPRsRjWdsfj4gnIuJQm/h/eOnJdzuPv82sfBel8Z9d7vxH/fnvPDFw8ftvOo8/l57/Y9XU4eyZ9PwvF9dKG7iWYwcAAAD/F4Xqd+CTwthiulAYG6t9h393bC+UZ2bnnj038/7ls7Xvyo9EsZDPdA3XzYdOZHPDeX6yIX80mzf+fGBbNT82NVPudD4R6K4dLfp/6vd2N/AAm4P7taB/6f/Qv/R/6F/6P/Qv/R/6V7P+/1EP2gFsvGXe/7dtVDuAjWf8D/1L/4f+pf9DX2p5b3xhTbf8S/Qo8e3Q2n6rYeWJKNwjIW+aRDGa7hpc8Y9ZrDKxpemuXv9lAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA//84IOG2")

3.360766292s ago: executing program 0 (id=606):
syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x64, 0x2}, {0x8}}}}, 0xf)

3.293917816s ago: executing program 1 (id=607):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x35, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.175152273s ago: executing program 1 (id=608):
syz_usb_connect(0x5, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xd, 0x15, 0x13, 0x10, 0x424, 0x12c, 0x5861, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x94, 0x6, 0x2, 0xc5, 0xc7, 0x77, 0x0, [], [{{0x9, 0x5, 0x1, 0x0, 0x40, 0x9, 0x0, 0x3}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x4, 0x9, 0x5}}]}}]}}]}}, 0x0)

3.05028241s ago: executing program 0 (id=609):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c41f4040110f0010020000e8ff010902120001000000000904"], 0x0)

2.423313654s ago: executing program 2 (id=610):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6e6f636865636b706f696e745f6d657267652c6e6f696e6c696e655f64617461000000006976655f6c6f67733d362c61636c2c666c7573685f6d657267652c61636c2c686561702c636f6d70726573735f636168652c6261636b67726f756e645f67633d6f66662c6e6f65782c548b1d33a44e5fe95aef4947d008636f6d70726573735f63616368652c6d6f64653d6c66732c00"/175], 0x1, 0x5505, &(0x7f0000002480)="$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")

2.303846152s ago: executing program 3 (id=611):
clock_adjtime(0xa, &(0x7f0000004dc0)={0xb, 0x45, 0x8f0f, 0x2, 0x9, 0x7cca, 0x5, 0xc632, 0x2, 0x4, 0x7c, 0x7, 0x5, 0xfff, 0x8001, 0x0, 0x0, 0x9, 0xfffffffffffffff9, 0xffffffffffffff00, 0x200000000000, 0xa5, 0x3c0000000000000, 0x9011, 0x10, 0x18})

2.072818245s ago: executing program 3 (id=612):
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000000)='./file2\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa84, &(0x7f0000001380)="$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")

1.692771286s ago: executing program 3 (id=613):
syz_usb_connect(0x5, 0x3f, &(0x7f0000000480)={{0x12, 0x1, 0x141, 0x30, 0xd5, 0x44, 0x40, 0x763, 0x1015, 0xc251, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x10, 0x20, [{{0x9, 0x4, 0x6b, 0x7, 0x3, 0xff, 0xf8, 0xcc, 0x0, [], [{{0x9, 0x5, 0xf, 0x10, 0x8, 0xf5, 0xe, 0xe1}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0xef, 0x4, 0x8}}, {{0x9, 0x5, 0x1, 0x19, 0x40, 0x2, 0x9, 0x1}}]}}]}}]}}, 0x0)

1.567456442s ago: executing program 0 (id=614):
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x62, 0x6f, 0x8f, 0x10, 0x4e8, 0xff30, 0x6dc5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x42, 0x0, 0x2, 0xaa, 0x44, 0xc0, 0x0, [], [{{0x9, 0x5, 0x7, 0x2, 0x10, 0x0, 0x0, 0xff}}, {{0x9, 0x5, 0xa, 0x0, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0)

1.558439203s ago: executing program 1 (id=615):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000440)='./file3\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x1, 0x62b7, &(0x7f0000014500)="$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")

1.268436379s ago: executing program 2 (id=616):
get_mempolicy(&(0x7f0000000000), 0xfffffffffffffffc, 0x401, &(0x7f0000ffd000/0x2000)=nil, 0x4)

678.170423ms ago: executing program 1 (id=617):
syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRES8, @ANYRES8, @ANYBLOB="3f57a9af561e0d343bb6cf6caad3c1a8ff8842b05478a6c1cfa91e9b0f1b809783136955ac312d97b85edcaca0e3a8bb27d300000000000000030cfd3e03b4443d204fd363b4cd4771ad598101ea2ab92be4583228848c9edc916b211ed99788a8f2a6a11010c354b5fac9faa9a5a05a943d22aa4626a1a8b6b5da73dad93561f56ba0"], 0x1, 0xac8, &(0x7f0000001940)="$eJzs3U2MW0cBAOCxd73JNilx2oQuaWgTCrT8dNNslvATQVKlQiIkFeKCVHGJ0rREhCBoJaCqRJITN1qhIHHiR5x6qQpCgguKeuJSiUaqkHoqXKMgKvUAgcRo7Zm39sTusze7/om/TxqP5817nnn2e8/vdyYAU6vafF1eXqiEcOlPP3viq/c+/97KkMOt7O+FUG++mY3jr6RqIYRKTM8Wn3S++frOTCt1490XT3WLK2Gp+ZrS4clrxSdsaX7KnnA51MOuS1defmPp+IkLxy7uffOVQ1c39EsAAIAp8bXLh5Z3/v2v92+//uoDR8KmYnjaP6/H9Na4338k7vin/f9q6ExX2kK7uWy82Riq853jzXQZr72cWjbebI/y57Lyaz3G2xTev/yZtmHd5hsmWVqO66FSXexIV6uLi61j8tA8rp+rLJ47c/aZ50ZUUWDdvfdgCGFPWzh6sTM9buHwGNRhjaExBnWYyHBko8uoFevD9UbLyOd5SKGxbaSbH4BCfr3wFufzMwu3p/i02f7Kv/Z4tfv0sA6GvfwPVP7ciMsPyv/tBVsc1s+dujSl+Urr0daYzq8jzGbT9V7/8isdnUPz6xG1PuvZ6zrCpFxf6FXPmSHXY6161T9fLu5UX4xx+h6+lOW3rz/5bzopvzHQ3b/z8/+CIIx3CB3p2u18VmPE2x9gfOX3zTXS9dEov68vz99Ukr+5JH++JP+ukvwtJfkwzX7//E/DS5XV4/z8mH7Q8+HpPNvdMf7AgPXJz0cOWn5+3++gbrf8/H5iGGd/PPmN0597+qkrrfv/K8XyfzMu7+lwox7XrctxhHS+MD+vXtz7X+8sp9pjvHuy+tzdZfzm+x2d41V2rH5OaNvO3FKPhc7ptvUab3fnePVsvPkYNmf1zfdP7sqmS/sfabuavq/ZbH5r2XzMZfVI25XtMc7rAWuRlsde9/+n5XMh1CrPnDl7+rGYTsvpX2Zqm1aG7x9yvYHb1+/zPwuh8/mfrcXwWrV9u7BtdXiltV14LX5e5/ClopzO4QdiOv3PfWtmvjl88dR3zz69/rMPU+25H73w7ZNnz57+/pi/mR+PanR98+XxqMYgb9Jhy7jUx5uxezPiDROw4fb9uLUT8OiZ75x89vSzp88dOHjwwNLSwc8fWN7X3K/f17533+78CGoLrKfVP/1R1wQAAAAAAAAAAADo1w+OPXHlrdc/+3br+f/V5//S8//pzt/0/P9Psuf/8+fk03Pw6TnA7V3ym+NkDazOZePVYrg3q++OrJyd2XQfjHHRj198/j8Vl7frmupzXza81iOZNSdwS3spc1kbJHl/gR+J8cUY/ybACFXmuw+OcVn71mlZT+1TtLVL0dA+8ORIv1taGlI7Jun5767tOrX92NuHUEfW3zAeJxz1PALd/XOq2v/+1+qMj7wuQu8wO9zyfjG9y0Sj5156vz3YAKyPUff/mc57pvjcn7+yeSWk0a493rm9zNsvhUH87a3O9Lj3P7nR5ef99g27/FHP/7D7/yz6v+t7+5f1mFdfW7n/+eXVt9uKDbv6LT+f/9QO9I7Byr8ey09z83Dor/zGr7Py8wtCffpvVv5dfZZ/y/zvXlv5/4vlp6/tkYf6Lb9V40q1sx75eeN0/S8/b5zcyOY/te35PuV//YVu87/GjhpvxvJhmvXXz+yFDa/Hesv2I4qd9rX3/xudX9/+f4vKZpu1/D6Mz8R02hCn+xzy/k4GrX+6vyL9D+zMPr9S8v+m/9/J9oUYl60Pqf/ftDzW419+W7r5XaZ0rct3Oyl9WsO0eGeqrv9NRNg8BnVYz9Da7I++HhsVGjNrmK7oJ27E9W80Ght7QqtEc9d3Wna2xtBIf/yO44TjI7ngPOrjlFF//2Xy/n/zffi8/988P+//N8/P+//N8+fjL9QrP+//N/8+8/5/8/z7ss/N+wdeKMn/UEn+ru75xWH7/SXT7y7J/3BJ/t4i/3DHGCn/gZLpHyzJv6ck/6GS/I+W5H+sJP/jJfmPtOW39wGd8j9RMn0PJ7rfNT950vMoA84/cAfIn8+z/sP0SNd/eq3/O0rygcn181f3H33qd9+st57/nyvOh6TreEdiuhaPn34Y0/l179CWXsl7Pab/keWP+/kOmCZ5+xn5//vDJfnA5Er3eVm/YQpVNncfHOOydqt67eczWT4Z40/F+NMxfjTGizHeF+P9MV4aUv3YGEdf+8Ohlyqrx/vbsvx+7yfPnwfqaCcqhHCgz/rk5wcGvZ89b8dvULdb/hofBwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABiZavN1eXlhPg44cWbfSnS4GKPefJ1tS9WK6UJ4LMYzMf5VfHPj3RdPtcc3Y1wJS6ESKsXw8OS1oqQtIYTzYU+4HOph16UrL7+xdPzEhWMX9775yqGrGzP3AAAAMB3+HwAA//88cQ3J")

645.726824ms ago: executing program 2 (id=618):
syz_emit_ethernet(0x3b6, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0x380, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x18}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000000026000400"}, {0x4, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x6, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f026"}, {0x21, 0x7, "fcd1876deaf8e9264e6fa3ce2dff9281c9fe68a3000000006f0000044e43e740e077e1d16212fb00"/55}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)

417.711177ms ago: executing program 2 (id=619):
syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x1c485, &(0x7f0000000400)={[{@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x600006}}, {@datacow}, {@nossd}, {@nossd_spread}, {@usebackuproot}, {@nodiscard}, {@discard_async}, {@thread_pool={'thread_pool', 0x3d, 0x4}}, {@datacow}, {@compress_force_algo={'compress-force', 0x3d, 'no'}}]}, 0x9, 0x559d, &(0x7f000000ac40)="$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")

211.530518ms ago: executing program 1 (id=620):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000020202b631af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007100000018010000202070250000000000202020631af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

108.393134ms ago: executing program 1 (id=621):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x22004002, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@nodelalloc}, {@sysvgroups}, {@jqfmt_vfsold}, {@nombcache}, {@grpjquota, 0x2e}], [{@seclabel}]}, 0x84, 0x46c, &(0x7f00000004c0)="$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")

0s ago: executing program 0 (id=622):
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2)

kernel console output (not intermixed with test programs):

S errors
[  112.580489][    T9] usb 4-1: config index 0 descriptor too short (expected 1307, got 27)
[  112.617224][    T9] usb 4-1: config 0 has an invalid interface number: 0 but max is -1
[  112.637407][ T6272] ntfs3: loop2: Failed to load $UpCase (-22).
[  112.646692][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0
[  112.693411][    T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  112.732795][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  112.754040][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  112.779362][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  112.844546][    T9] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  112.869055][ T6280] loop0: detected capacity change from 0 to 4096
[  112.879378][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.899527][    T9] usb 4-1: Product: syz
[  112.903770][    T9] usb 4-1: Manufacturer: syz
[  112.908425][    T9] usb 4-1: SerialNumber: syz
[  112.950042][ T6280] NILFS (loop0): unsupported revision (superblock rev.=1.0, current rev.=2.0). Please check the version of mkfs.nilfs(2).
[  113.001679][    T9] usb 4-1: config 0 descriptor??
[  113.030383][    T9] hub 4-1:0.0: bad descriptor, ignoring hub
[  113.036397][    T9] hub: probe of 4-1:0.0 failed with error -5
[  113.072022][    T9] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5
[  113.393983][  T788] usb 4-1: USB disconnect, device number 8
[  113.744282][ T6278] (syz.1.190,6278,1):ocfs2_journal_init:961 ERROR: Journal file size (0) is too small!
[  113.754674][ T6278] (syz.1.190,6278,1):ocfs2_check_volume:2403 ERROR: Could not initialize journal!
[  113.764445][ T6278] (syz.1.190,6278,1):ocfs2_check_volume:2488 ERROR: status = -22
[  113.773252][ T6278] (syz.1.190,6278,1):ocfs2_mount_volume:1820 ERROR: status = -22
[  113.785072][ T6278] (syz.1.190,6278,1):ocfs2_fill_super:1178 ERROR: status = -22
[  113.819737][    T9] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  114.054288][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  114.089374][    T9] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  114.125995][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  114.162908][ T6297] SQUASHFS error: xz decompression failed, data probably corrupt
[  114.176386][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  114.187951][ T6297] SQUASHFS error: Failed to read block 0x108: -5
[  114.209796][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  114.225891][ T6297] SQUASHFS error: Unable to read metadata cache entry [106]
[  114.238065][ T6297] SQUASHFS error: Unable to read inode 0x11f
[  114.248497][    T9] usb 3-1: SerialNumber: syz
[  114.291382][    T9] cdc_acm 3-1:1.0: skipping garbage
[  114.553265][ T6292] XFS: noikeep mount option is deprecated.
[  114.567756][    T9] usb 3-1: USB disconnect, device number 7
[  114.581847][ T6292] XFS: attr2 mount option is deprecated.
[  114.625118][ T6292] XFS (loop0): Invalid device [./file0], error=-15
[  115.156909][ T6315]  loop0: p2 p3 p7
[  115.254500][ T5139]  loop0: p2 p3 p7
[  115.399738][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  115.455392][ T6319] set_capacity_and_notify: 4 callbacks suppressed
[  115.455408][ T6319] loop2: detected capacity change from 0 to 4096
[  115.497014][ T6319] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 3) do not match.  Run ntfsfix or chkdsk.
[  115.529746][ T6319] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  115.568175][ T5891] udevd[5891]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  115.578447][ T5759] udevd[5759]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  115.588656][ T5761] udevd[5761]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[  115.619850][    T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7
[  115.638538][ T6319] ntfs: (device loop2): load_system_files(): Failed to load $Volume.
[  115.652191][    T9] usb 2-1: string descriptor 0 read error: -22
[  115.660568][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  115.688113][ T6319] ntfs: (device loop2): ntfs_fill_super(): Failed to load system files.
[  115.706964][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.721384][ T5759] udevd[5759]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  115.743768][ T5891] udevd[5891]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  115.753824][ T5761] udevd[5761]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[  115.778900][    T9] usb 2-1: found format II with max.bitrate = 65528, frame size=65535
[  115.797739][    T9] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  115.843125][ T6303] loop3: detected capacity change from 0 to 32768
[  115.895853][ T6303] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  115.927503][ T6326] loop0: detected capacity change from 0 to 64
[  115.933294][ T6303] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  115.971988][ T6303] syz.3.202: attempt to access beyond end of device
[  115.971988][ T6303] loop3: rw=12288, sector=18446744073709551608, nr_sectors = 8 limit=32768
[  115.994081][ T6303] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  115.994081][ T6303]   inode = 1 19
[  115.994081][ T6303]   function = gfs2_jdesc_check, file = fs/gfs2/super.c, line = 119
[  116.012884][ T6303] gfs2: fsid=syz:syz.0: G:  s:SH n:2/13 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:6
[  116.022023][ T6303] gfs2: fsid=syz:syz.0:  H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320
[  116.032126][ T6303] gfs2: fsid=syz:syz.0:  I: n:1/19 t:8 f:0x00 d:0x00000200 s:8388608 p:0
[  116.041104][ T6303] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  116.048824][ T6303] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  116.099830][ T6303] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  116.130784][ T6303] gfs2: fsid=syz:syz.0: File system withdrawn
[  116.136970][ T6303] CPU: 1 PID: 6303 Comm: syz.3.202 Not tainted syzkaller #0
[  116.144312][ T6303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  116.154444][ T6303] Call Trace:
[  116.157783][ T6303]  <TASK>
[  116.160762][ T6303]  dump_stack_lvl+0x18c/0x250
[  116.165505][ T6303]  ? kobject_uevent_env+0x363/0x8b0
[  116.170767][ T6303]  ? show_regs_print_info+0x20/0x20
[  116.176024][ T6303]  ? load_image+0x400/0x400
[  116.180602][ T6303]  ? kobject_uevent_env+0x363/0x8b0
[  116.185874][ T6303]  gfs2_withdraw+0xb24/0x13d0
[  116.190642][ T6303]  ? gfs2_lm+0x240/0x240
[  116.194967][ T6303]  ? gfs2_consist_inode_i+0xf5/0x110
[  116.200308][ T6303]  gfs2_jdesc_check+0x13b/0x2a0
[  116.205205][ T6303]  init_journal+0xd34/0x2330
[  116.209876][ T6303]  ? init_inodes+0xdb/0x320
[  116.214429][ T6303]  ? _compound_head+0x120/0x120
[  116.219349][ T6303]  ? vsnprintf+0x1ac7/0x1ba0
[  116.223985][ T6303]  ? snprintf+0xe9/0x140
[  116.228263][ T6303]  ? init_inodes+0xdb/0x320
[  116.232807][ T6303]  ? vscnprintf+0x80/0x80
[  116.237173][ T6303]  ? gfs2_glock_nq_num+0x183/0x1c0
[  116.242337][ T6303]  init_inodes+0xdb/0x320
[  116.246714][ T6303]  gfs2_fill_super+0x17bc/0x1f30
[  116.251694][ T6303]  ? __might_sleep+0xe0/0xe0
[  116.256420][ T6303]  ? gfs2_reconfigure+0xb10/0xb10
[  116.261583][ T6303]  ? init_locking+0xb8/0x200
[  116.266280][ T6303]  ? setup_bdev_super+0x56b/0x660
[  116.271346][ T6303]  get_tree_bdev+0x3f3/0x520
[  116.275970][ T6303]  ? end_current_label_crit_section+0x170/0x170
[  116.282245][ T6303]  ? gfs2_reconfigure+0xb10/0xb10
[  116.287307][ T6303]  ? setup_bdev_super+0x660/0x660
[  116.292404][ T6303]  gfs2_get_tree+0x51/0x1e0
[  116.296984][ T6303]  vfs_get_tree+0x8c/0x280
[  116.301443][ T6303]  do_new_mount+0x24b/0xa40
[  116.305991][ T6303]  __se_sys_mount+0x2e7/0x3d0
[  116.310715][ T6303]  ? __x64_sys_mount+0xc0/0xc0
[  116.315520][ T6303]  ? lockdep_hardirqs_on+0x98/0x150
[  116.320751][ T6303]  ? __x64_sys_mount+0x20/0xc0
[  116.325550][ T6303]  do_syscall_64+0x55/0xa0
[  116.330015][ T6303]  ? clear_bhb_loop+0x40/0x90
[  116.334787][ T6303]  ? clear_bhb_loop+0x40/0x90
[  116.339527][ T6303]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  116.345456][ T6303] RIP: 0033:0x7f152f79c14a
[  116.349914][ T6303] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  116.369569][ T6303] RSP: 002b:00007f153070ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  116.378036][ T6303] RAX: ffffffffffffffda RBX: 00007f153070eee0 RCX: 00007f152f79c14a
[  116.386042][ T6303] RDX: 00002000000000c0 RSI: 0000200000000000 RDI: 00007f153070eea0
[  116.394046][ T6303] RBP: 00002000000000c0 R08: 00007f153070eee0 R09: 0000000000210401
[  116.402064][ T6303] R10: 0000000000210401 R11: 0000000000000246 R12: 0000200000000000
[  116.410076][ T6303] R13: 00007f153070eea0 R14: 000000000001263b R15: 0000200000000040
[  116.418185][ T6303]  </TASK>
[  116.452415][    T9] usb 2-1: USB disconnect, device number 5
[  116.470216][ T6303] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5
[  116.790730][ T6332] loop0: detected capacity change from 0 to 8
[  116.820434][ T6332] squashfs image failed sanity check
[  116.919469][  T788] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  117.060660][ T6336] ip6_tunnel: non-ECT from fe80:0000:0000:00ed:ffff:ffff:ffff:ffaa with DS=0x2d
[  117.131722][  T788] usb 3-1: config 0 has an invalid interface number: 255 but max is 0
[  117.149320][  T788] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[  117.188675][  T788] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  117.216173][  T788] usb 3-1: config 0 has no interface number 0
[  117.244206][  T788] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 72, using maximum allowed: 30
[  117.274909][  T788] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 72
[  117.315746][  T788] usb 3-1: config 0 interface 255 has no altsetting 0
[  117.339416][  T788] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  117.354403][  T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.365861][  T788] usb 3-1: config 0 descriptor??
[  117.386439][  T788] usb-storage 3-1:0.255: USB Mass Storage device detected
[  117.430210][  T788] usb-storage 3-1:0.255: Quirks match for vid 1908 pid 1315: 20000
[  117.660582][    T9] usb 3-1: USB disconnect, device number 8
[  117.855031][ T6354] loop1: detected capacity change from 0 to 4096
[  117.887505][ T6354] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  118.019419][ T6354] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  118.046854][ T6339] loop3: detected capacity change from 0 to 32768
[  118.089567][ T6339] XFS (loop3): Mounting V5 Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b
[  118.327001][ T6339] XFS (loop3): Ending clean mount
[  118.359035][ T6350] loop0: detected capacity change from 0 to 32768
[  118.596290][ T5771] XFS (loop3): Unmounting Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b
[  118.842569][  T788] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  119.039836][ T5816] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  119.049726][  T788] usb 2-1: Using ep0 maxpacket: 16
[  119.061602][  T788] usb 2-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06
[  119.081853][  T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.121108][  T788] usb 2-1: Product: syz
[  119.125441][  T788] usb 2-1: Manufacturer: syz
[  119.148093][  T788] usb 2-1: SerialNumber: syz
[  119.149781][ T6379] loop3: detected capacity change from 0 to 4096
[  119.160711][ T6379] ntfs: (device loop3): parse_options(): Unrecognized mount option 0xffffffffffffffff01777777777777777777777017777777777777777777770xffffffffffffffffÿÿ0x000000000000ee00ÿdmask.
[  119.181274][  T788] usb 2-1: config 0 descriptor??
[  119.204750][ T6377] loop0: detected capacity change from 0 to 4096
[  119.251063][ T5816] usb 3-1: Using ep0 maxpacket: 32
[  119.272442][ T5816] usb 3-1: unable to get BOS descriptor or descriptor too short
[  119.295128][ T5816] usb 3-1: config 3 has an invalid interface number: 243 but max is 0
[  119.306014][ T6377] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  119.321627][ T5816] usb 3-1: config 3 has no interface number 0
[  119.347578][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  119.368620][ T5816] usb 3-1: config 3 interface 243 altsetting 9 bulk endpoint 0x6 has invalid maxpacket 32
[  119.379605][ T6377] ntfs3: loop0: volume is dirty and "force" flag is not set!
[  119.404891][ T5816] usb 3-1: config 3 interface 243 altsetting 9 has an invalid endpoint with address 0x72, skipping
[  119.431080][ T5816] usb 3-1: config 3 interface 243 has no altsetting 0
[  119.486689][ T5816] usb 3-1: New USB device found, idVendor=305a, idProduct=1405, bcdDevice=a4.69
[  119.521280][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.539606][ T5816] usb 3-1: Product: syz
[  119.544612][ T5816] usb 3-1: Manufacturer: syz
[  119.559544][ T5816] usb 3-1: SerialNumber: syz
[  119.571799][   T23] usb 2-1: USB disconnect, device number 6
[  119.594166][ T5816] usb 3-1: Interface #243 referenced by multiple IADs
[  119.618397][ T6372] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  119.862452][ T5816] option 3-1:3.243: GSM modem (1-port) converter detected
[  119.871205][ T6386] loop0: detected capacity change from 0 to 136
[  119.906218][ T5816] usb 3-1: USB disconnect, device number 9
[  119.917650][ T5816] option 3-1:3.243: device disconnected
[  119.955414][ T6386] isofs_fill_super: bread failed, dev=loop0, iso_blknum=34, block=68
[  120.024320][ T5763] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  120.272022][ T6382] OCFS2: ERROR (device loop3): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #70: signature = 
[  120.299170][ T6382] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  120.311467][ T6382] OCFS2: File system is now read-only.
[  120.317099][ T6382] (syz.3.234,6382,1):ocfs2_read_locked_inode:521 ERROR: status = -30
[  120.329938][ T6382] (syz.3.234,6382,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  120.339223][ T6382] (syz.3.234,6382,1):ocfs2_init_global_system_inodes:461 ERROR: status = -30
[  120.356849][ T6382] (syz.3.234,6382,1):ocfs2_init_global_system_inodes:463 ERROR: Unable to load system inode 3, possibly corrupt fs?
[  120.356885][ T6382] (syz.3.234,6382,1):ocfs2_init_global_system_inodes:472 ERROR: status = -30
[  120.382203][ T6382] (syz.3.234,6382,1):ocfs2_initialize_super:2254 ERROR: status = -30
[  120.390868][ T6382] (syz.3.234,6382,1):ocfs2_fill_super:1178 ERROR: status = -30
[  120.472884][ T6390] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  120.495692][ T6390] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  120.545938][ T6390] REISERFS (device loop1): using ordered data mode
[  120.588957][ T6396] set_capacity_and_notify: 2 callbacks suppressed
[  120.588973][ T6396] loop2: detected capacity change from 0 to 1024
[  120.598740][ T6390] reiserfs: using flush barriers
[  120.658627][ T6390] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  120.681103][ T6396] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  120.740183][ T6390] REISERFS (device loop1): checking transaction log (loop1)
[  121.078961][ T6402] loop0: detected capacity change from 0 to 4096
[  121.093245][ T6402] ntfs3: Invalid value for umask.
[  121.167777][ T5759] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  121.317334][ T6404] loop2: detected capacity change from 0 to 8192
[  121.358112][ T6404] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  121.416130][ T5850] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  121.442325][ T6404] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  121.483644][ T6404] REISERFS (device loop2): using ordered data mode
[  121.524354][ T6404] reiserfs: using flush barriers
[  121.575927][ T6404] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7
[  121.630047][ T6404] REISERFS (device loop2): checking transaction log (loop2)
[  121.667453][ T5850] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  121.683478][ T6404] REISERFS (device loop2): Using r5 hash to sort names
[  121.706114][ T6404] REISERFS (device loop2): using 3.5.x disk format
[  121.714128][ T5850] usb 2-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6d.4d
[  121.725115][ T6404] REISERFS warning (device loop2): jdm-2005 xattr_mount_check: xattrs/ACLs not supported on pre-v3.6 format filesystems. Failing mount.
[  121.752322][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.765688][ T6400] loop3: detected capacity change from 0 to 40427
[  121.785174][ T5850] usb 2-1: config 0 descriptor??
[  121.805575][ T6400] F2FS-fs (loop3): Corrupted extension count (720933 + 1 > 64)
[  121.816451][ T5850] gspca_main: jl2005bcd-2.14.0 probing 0979:0227
[  121.835132][ T6400] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  121.864082][ T5850] command write [95] error -22
[  122.057496][ T5797] usb 2-1: USB disconnect, device number 7
[  122.264626][ T6417] loop3: detected capacity change from 0 to 4096
[  122.279671][ T5816] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  122.300741][ T6417] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  122.320300][ T6417] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  122.337280][ T6417] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  122.357139][ T6417] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  122.374865][ T6417] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  122.388358][ T6417] ntfs: volume version 3.1.
[  122.400952][ T6417] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  122.421374][ T6417] ntfs: (device loop3): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  122.441405][ T6417] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  122.453395][ T6417] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  122.464903][ T6417] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  122.480526][ T5816] usb 1-1: Using ep0 maxpacket: 32
[  122.485903][   T28] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  122.496835][ T5816] usb 1-1: unable to get BOS descriptor or descriptor too short
[  122.509433][ T5816] usb 1-1: config 128 has an invalid interface number: 127 but max is 3
[  122.519539][ T5816] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  122.530774][ T5816] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4
[  122.541617][ T5816] usb 1-1: config 128 has no interface number 0
[  122.548709][ T5816] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 124, changing to 10
[  122.563118][ T5816] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 18072, setting to 1024
[  122.578627][ T5816] usb 1-1: config 128 interface 127 has no altsetting 0
[  122.594472][ T5816] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  122.613966][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.632419][ T5816] usb 1-1: Product: syz
[  122.646880][ T5816] usb 1-1: Manufacturer: syz
[  122.652343][ T5816] usb 1-1: SerialNumber: syz
[  122.664938][ T6415] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  122.679568][   T28] usb 3-1: Using ep0 maxpacket: 8
[  122.691155][   T28] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55
[  122.739967][   T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.777833][   T28] usb 3-1: Product: syz
[  122.789310][   T28] usb 3-1: Manufacturer: syz
[  122.804301][   T28] usb 3-1: SerialNumber: syz
[  122.831263][   T28] usb 3-1: config 0 descriptor??
[  122.860878][ T6421] loop1: detected capacity change from 0 to 4096
[  123.031840][ T5816] usb 1-1: USB disconnect, device number 8
[  123.110991][   T28] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  123.128284][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  123.156313][   T28] dvb_usb_af9015: probe of 3-1:0.0 failed with error -22
[  123.168811][   T28] usb 3-1: USB disconnect, device number 10
[  123.364736][ T6431] loop1: detected capacity change from 0 to 1024
[  123.389435][ T5850] usb 4-1: new low-speed USB device number 9 using dummy_hcd
[  123.399071][ T6431] hfsplus: extend alloc file! (8192,8,110)
[  123.407486][ T6431] hfsplus: b-tree write err: -5, ino 4
[  123.572094][ T5850] usb 4-1: unable to get BOS descriptor or descriptor too short
[  123.585438][ T5850] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  123.594571][ T5850] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  123.605639][ T5850] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0
[  123.616330][ T5850] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 139, changing to 4
[  123.645935][ T5850] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0
[  123.670292][ T5850] usb 4-1: string descriptor 0 read error: -22
[  123.676759][ T5850] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  123.700274][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.727248][ T5850] usb 4-1: low speed audio streaming not supported
[  123.743228][ T5850] usb 4-1: unit 5 not found!
[  123.780585][  T788] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  123.956545][ T5850] usb 4-1: USB disconnect, device number 9
[  123.984451][  T788] usb 2-1: unable to get BOS descriptor or descriptor too short
[  123.994928][  T788] usb 2-1: config 0 has an invalid interface number: 23 but max is 0
[  124.005097][    T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  124.018039][  T788] usb 2-1: config 0 has no interface number 0
[  124.025840][  T788] usb 2-1: config 0 interface 23 has no altsetting 0
[  124.037388][  T788] usb 2-1: New USB device found, idVendor=04dd, idProduct=8003, bcdDevice= d.09
[  124.048289][  T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.056697][  T788] usb 2-1: Product: syz
[  124.062117][  T788] usb 2-1: Manufacturer: syz
[  124.066802][  T788] usb 2-1: SerialNumber: syz
[  124.074571][  T788] usb 2-1: config 0 descriptor??
[  124.109411][   T28] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  124.219367][    T9] usb 1-1: Using ep0 maxpacket: 16
[  124.227037][    T9] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  124.235547][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  124.245848][    T9] usb 1-1: config 0 has no interface number 0
[  124.256630][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  124.266022][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.274176][    T9] usb 1-1: Product: syz
[  124.278429][    T9] usb 1-1: Manufacturer: syz
[  124.299491][   T28] usb 3-1: Using ep0 maxpacket: 32
[  124.299516][    T9] usb 1-1: SerialNumber: syz
[  124.316686][   T28] usb 3-1: config 2 has an invalid interface number: 66 but max is 0
[  124.325490][   T28] usb 3-1: config 2 has no interface number 0
[  124.335110][  T788] safe_serial 2-1:0.23: safe_serial converter detected
[  124.345104][    T9] usb 1-1: config 0 descriptor??
[  124.346396][   T28] usb 3-1: config 2 interface 66 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  124.364484][   T28] usb 3-1: config 2 interface 66 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  124.378107][  T788] usb 2-1: safe_serial converter now attached to ttyUSB0
[  124.384629][   T28] usb 3-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= b.5d
[  124.394894][   T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.401718][    T9] usb 1-1: Found UVC 0.00 device syz (046d:08f3)
[  124.406677][   T28] usb 3-1: Product: syz
[  124.414739][   T28] usb 3-1: Manufacturer: syz
[  124.426192][  T788] usb 2-1: USB disconnect, device number 8
[  124.429522][   T28] usb 3-1: SerialNumber: syz
[  124.435942][    T9] usb 1-1: No valid video chain found.
[  124.462870][  T788] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0
[  124.476626][   T28] usb 3-1: Found UVC 0.00 device syz (046d:08c6)
[  124.486483][  T788] safe_serial 2-1:0.23: device disconnected
[  124.493818][   T28] usb 3-1: No valid video chain found.
[  124.629227][    T9] usb 1-1: USB disconnect, device number 9
[  124.677152][ T6439] loop3: detected capacity change from 0 to 4096
[  124.707787][ T6439] ntfs: volume version 3.1.
[  124.719712][   T28] usb 3-1: USB disconnect, device number 11
[  125.099376][    T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  125.189137][ T6443] loop1: detected capacity change from 0 to 32768
[  125.207859][ T6443] (syz.1.261,6443,0):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  125.229405][ T6443] (syz.1.261,6443,0):ocfs2_read_locked_inode:521 ERROR: status = -12
[  125.237750][ T6443] (syz.1.261,6443,0):ocfs2_init_global_system_inodes:448 ERROR: status = -12
[  125.286298][ T6443] (syz.1.261,6443,0):ocfs2_init_global_system_inodes:472 ERROR: status = -12
[  125.315181][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.328145][ T6445] loop0: detected capacity change from 0 to 128
[  125.340053][ T6443] (syz.1.261,6443,0):ocfs2_initialize_super:2254 ERROR: status = -12
[  125.357625][    T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  125.375678][ T6443] (syz.1.261,6443,0):ocfs2_fill_super:1178 ERROR: status = -12
[  125.404028][    T8] usb 4-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.00
[  125.441142][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.459352][ T5763] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  125.501202][    T8] usb 4-1: config 0 descriptor??
[  125.546284][    T8] usbhid 4-1:0.0: can't add hid device: -22
[  125.563129][    T8] usbhid: probe of 4-1:0.0 failed with error -22
[  125.816226][    T8] usb 4-1: USB disconnect, device number 10
[  126.001555][ T6463] loop2: detected capacity change from 0 to 128
[  126.039605][ T6463] ADFS-fs (loop2): error: can't find an ADFS filesystem on dev loop2.
[  126.131324][ T6462] loop0: detected capacity change from 0 to 4096
[  126.224999][ T6462] ntfs3: loop0: $Secure::$SII is corrupted.
[  126.251314][ T6462] ntfs3: loop0: Failed to initialize $Secure (-22).
[  126.499588][  T788] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  126.699785][  T788] usb 3-1: Using ep0 maxpacket: 32
[  126.735943][  T788] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  126.749406][  T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.767879][  T788] usb 3-1: Product: syz
[  126.778017][  T788] usb 3-1: Manufacturer: syz
[  126.788155][  T788] usb 3-1: SerialNumber: syz
[  126.807836][  T788] usb 3-1: config 0 descriptor??
[  126.903361][ T6460] loop1: detected capacity change from 0 to 32768
[  126.925318][ T6460] XFS: noattr2 mount option is deprecated.
[  126.999506][ T6460] XFS (loop1): Cannot mount a V5 filesystem as noattr2. attr2 is always enabled for V5 filesystems.
[  127.036490][  T788] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: failure sending bit rate
[  127.059414][  T788] RobotFuzz Open Source InterFace, OSIF: probe of 3-1:0.0 failed with error -71
[  127.077674][ T6475] loop3: detected capacity change from 0 to 4096
[  127.095308][  T788] usb 3-1: USB disconnect, device number 12
[  127.190700][ T5759] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  127.228056][ T6467] loop0: detected capacity change from 0 to 32768
[  127.265859][ T6467] XFS: noikeep mount option is deprecated.
[  127.407250][ T6467] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  127.536860][ T6467] XFS (loop0): invalid iclog size (4096 bytes), using lsunit (32768 bytes)
[  127.576718][ T6467] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  127.674745][ T6467] XFS (loop0): Starting recovery (logdev: internal)
[  127.816135][ T6467] XFS (loop0): Ending recovery (logdev: internal)
[  127.969717][ T5768] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  128.106557][   T28] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  128.312631][ T6496] loop3: detected capacity change from 0 to 4096
[  128.324185][ T6487] loop1: detected capacity change from 0 to 40427
[  128.331925][ T6496] __ntfs_error: 18 callbacks suppressed
[  128.331942][ T6496] ntfs: (device loop3): parse_options(): The disable_sparse option requires a boolean argument.
[  128.351343][ T6487] F2FS-fs (loop1): build fault injection attr: rate: 19, type: 0x7ffff
[  128.360512][   T28] usb 3-1: Using ep0 maxpacket: 16
[  128.373035][ T6487] F2FS-fs (loop1): inline encryption not supported
[  128.381635][   T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  128.402997][   T28] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d
[  128.433415][   T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.442378][   T28] usb 3-1: Product: syz
[  128.446893][   T28] usb 3-1: Manufacturer: syz
[  128.452793][   T28] usb 3-1: SerialNumber: syz
[  128.460881][   T28] usb 3-1: config 0 descriptor??
[  128.520455][ T6501] tmpfs: Bad value for 'mpol'
[  128.553009][   T28] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  128.786861][ T2995] usb 3-1: Failed to submit usb control message: -71
[  128.795325][   T28] usb 3-1: USB disconnect, device number 13
[  128.809843][ T2995] usb 3-1: unable to send the bmi data to the device: -71
[  128.829613][ T2995] usb 3-1: unable to get target info from device
[  128.836084][ T2995] usb 3-1: could not get target info (-71)
[  128.848004][ T2995] usb 3-1: could not probe fw (-71)
[  129.019630][    T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  129.209417][    T9] usb 4-1: Using ep0 maxpacket: 8
[  129.217552][    T9] usb 4-1: config 0 has an invalid interface number: 122 but max is 0
[  129.236517][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  129.255279][    T9] usb 4-1: config 0 has no interface number 0
[  129.263970][    T9] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  129.280910][    T9] usb 4-1: config 0 interface 122 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  129.304620][    T9] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[  129.317870][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.337038][    T9] usb 4-1: Product: syz
[  129.341480][    T9] usb 4-1: Manufacturer: syz
[  129.346125][    T9] usb 4-1: SerialNumber: syz
[  129.379076][    T9] usb 4-1: config 0 descriptor??
[  129.539736][   T28] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  129.613029][    T9] usb 4-1: NFC: intf ffff88807a587000 id ffffffff8da44020
[  129.628133][    T9] usb 4-1: USB disconnect, device number 11
[  129.738756][ T6525] loop2: detected capacity change from 0 to 8192
[  129.749604][   T28] usb 1-1: Using ep0 maxpacket: 16
[  129.759898][   T28] usb 1-1: unable to get BOS descriptor or descriptor too short
[  129.778652][   T28] usb 1-1: config 227 has an invalid interface number: 101 but max is 0
[  129.788603][   T28] usb 1-1: config 227 has no interface number 0
[  129.802334][   T28] usb 1-1: config 227 interface 101 altsetting 158 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  129.830060][   T28] usb 1-1: config 227 interface 101 has no altsetting 0
[  129.854874][   T28] usb 1-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=c6.59
[  129.868702][   T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.877993][   T28] usb 1-1: Product: syz
[  129.896398][   T28] usb 1-1: Manufacturer: syz
[  129.907414][   T28] usb 1-1: SerialNumber: syz
[  130.133861][ T6529] syz.2.296 uses obsolete (PF_INET,SOCK_PACKET)
[  130.160169][   T28] xbox_remote_probe: Unexpected endpoint_in
[  130.177396][   T28] usb 1-1: USB disconnect, device number 10
[  130.247394][ T6523] loop1: detected capacity change from 0 to 32768
[  130.304386][ T6531] loop3: detected capacity change from 0 to 128
[  130.317825][ T6531] VFS: Found a Xenix FS (block size = 1024) on device loop3
[  130.345142][ T6531] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  131.040833][ T6549] loop1: detected capacity change from 0 to 2048
[  131.106079][ T6549] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  131.359727][ T5816] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  131.570401][ T5816] usb 1-1: Using ep0 maxpacket: 8
[  131.581181][ T5816] usb 1-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17
[  131.602995][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.620121][ T5816] usb 1-1: Product: syz
[  131.630365][ T5816] usb 1-1: Manufacturer: syz
[  131.635047][ T5816] usb 1-1: SerialNumber: syz
[  131.672000][ T5816] usb 1-1: config 0 descriptor??
[  131.692599][ T5816] gspca_main: jeilinj-2.14.0 probing 0979:0270
[  131.915252][ T5816] usb 1-1: USB disconnect, device number 11
[  132.059468][    T8] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  132.067233][    T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  132.132461][ T6572] loop1: detected capacity change from 0 to 32768
[  132.141298][ T6572] XFS (loop1): invalid logbufsize: 535 [not 16k,32k,64k,128k or 256k]
[  132.259848][    T9] usb 4-1: Using ep0 maxpacket: 32
[  132.271054][    T8] usb 3-1: config 10 has an invalid interface number: 38 but max is 0
[  132.287325][    T8] usb 3-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config
[  132.301327][    T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  132.309884][    T8] usb 3-1: config 10 has no interface number 0
[  132.316144][    T8] usb 3-1: config 10 interface 38 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  132.329506][    T9] usb 4-1: config 0 has no interface number 0
[  132.336412][    T9] usb 4-1: config 0 interface 184 has no altsetting 0
[  132.350145][    T8] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=a4.a6
[  132.361526][    T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  132.370755][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.378838][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.387116][    T8] usb 3-1: Product: syz
[  132.391380][    T9] usb 4-1: Product: syz
[  132.395595][    T9] usb 4-1: Manufacturer: syz
[  132.400821][    T8] usb 3-1: Manufacturer: syz
[  132.405482][    T8] usb 3-1: SerialNumber: syz
[  132.410288][    T9] usb 4-1: SerialNumber: syz
[  132.423803][    T9] usb 4-1: config 0 descriptor??
[  132.454157][    T9] smsc75xx v1.0.0
[  132.457926][    T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  132.488585][    T9] smsc75xx: probe of 4-1:0.184 failed with error -22
[  132.503702][ T5816] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  132.642952][    T8] legousbtower 3-1:10.38: interrupt endpoints not found
[  132.673001][ T5810] usb 4-1: USB disconnect, device number 12
[  132.683040][    T8] usb 3-1: USB disconnect, device number 14
[  132.714547][ T5816] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  132.737286][ T5816] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x6 has invalid wMaxPacketSize 0
[  132.767509][ T5816] usb 2-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  132.802493][ T5816] usb 2-1: config 0 interface 0 has no altsetting 0
[  132.812419][ T5816] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[  132.822655][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.832496][ T5816] usb 2-1: Product: syz
[  132.836797][ T5816] usb 2-1: Manufacturer: syz
[  132.841953][ T5816] usb 2-1: SerialNumber: syz
[  132.854661][ T5816] usb 2-1: config 0 descriptor??
[  133.114589][ T5810] usb 2-1: USB disconnect, device number 9
[  133.164180][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  133.171286][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  133.469979][ T6600] loop2: detected capacity change from 0 to 4096
[  133.481378][ T6601] loop3: detected capacity change from 0 to 4096
[  133.488259][ T6600] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  133.589226][ T6600] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  133.617473][ T6601] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  133.645037][ T6601] ntfs3: loop3: Failed to load $Secure (-22).
[  133.653420][ T6601] ntfs3: loop3: Failed to initialize $Secure (-22).
[  134.097913][ T6603] loop1: detected capacity change from 0 to 8192
[  134.137839][ T6603] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  134.222649][ T6599] loop0: detected capacity change from 0 to 32768
[  134.228439][ T6603] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  134.262779][ T6603] REISERFS (device loop1): using ordered data mode
[  134.272344][ T6603] reiserfs: using flush barriers
[  134.303292][ T6603] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  134.322624][ T6603] REISERFS (device loop1): checking transaction log (loop1)
[  134.337678][ T6603] REISERFS warning (device loop1): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore
[  134.472016][ T6599] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  134.505313][ T1097] (kworker/u4:6,1097,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  134.523522][ T5816] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  134.607694][ T5768] (syz-executor,5768,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 70
[  134.660039][ T5768] (syz-executor,5768,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  134.733142][ T5816] usb 3-1: config 0 has no interfaces?
[  134.752556][ T5816] usb 3-1: New USB device found, idVendor=27c6, idProduct=5395, bcdDevice=eb.bb
[  134.758941][ T5768] ocfs2: Unmounting device (7,0) on (node local)
[  134.769611][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.787894][ T5816] usb 3-1: Product: syz
[  134.792965][ T5816] usb 3-1: Manufacturer: syz
[  134.797616][ T5816] usb 3-1: SerialNumber: syz
[  134.831615][ T5816] usb 3-1: config 0 descriptor??
[  134.878818][ T6618] loop1: detected capacity change from 0 to 8192
[  134.898463][ T6618] FAT-fs (loop1): bogus sectors per cluster 254
[  134.906277][ T6618] FAT-fs (loop1): Can't find a valid FAT filesystem
[  134.989426][ T5797] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  135.068585][ T6624] loop0: detected capacity change from 0 to 2048
[  135.109198][ T5850] usb 3-1: USB disconnect, device number 15
[  135.200680][ T5797] usb 4-1: Using ep0 maxpacket: 16
[  135.209151][ T5797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 26232, setting to 64
[  135.232305][ T5797] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  135.249467][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.257546][ T5797] usb 4-1: Product: syz
[  135.288610][ T5797] usb 4-1: Manufacturer: syz
[  135.303117][ T5797] usb 4-1: SerialNumber: syz
[  135.321546][ T5797] usb 4-1: config 0 descriptor??
[  135.364862][ T5797] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  135.586913][   T11] usb 4-1: Failed to submit usb control message: -71
[  135.587285][ T5797] usb 4-1: USB disconnect, device number 13
[  135.601431][   T11] usb 4-1: unable to send the bmi data to the device: -71
[  135.620439][   T11] usb 4-1: unable to get target info from device
[  135.639566][   T11] usb 4-1: could not get target info (-71)
[  135.646008][   T11] usb 4-1: could not probe fw (-71)
[  135.708827][ T6633] loop0: detected capacity change from 0 to 8192
[  135.724196][ T6633] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  135.745140][ T6633] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  135.759812][ T6633] REISERFS (device loop0): using ordered data mode
[  135.766538][ T6633] reiserfs: using flush barriers
[  135.789510][ T6633] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  135.828543][ T6633] REISERFS (device loop0): checking transaction log (loop0)
[  135.851610][ T6640] loop2: detected capacity change from 0 to 164
[  135.876560][ T6640] ISOFS: Bad logical zone size 25856
[  136.187508][ T6648] loop2: detected capacity change from 0 to 512
[  136.201457][ T6648] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  136.269719][ T6648] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002]
[  136.278044][ T6648] EXT4-fs (loop2): orphan cleanup on readonly fs
[  136.316161][ T6648] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  136.326411][ T6651] loop0: detected capacity change from 0 to 64
[  136.380390][ T6646] loop1: detected capacity change from 0 to 8192
[  136.402495][ T6651] MINIX-fs: bad superblock
[  136.407958][ T6646] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  136.408665][ T6648] EXT4-fs warning (device loop2): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  136.453637][ T6646] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  136.463964][ T6648] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  136.477287][ T6646] REISERFS (device loop1): using ordered data mode
[  136.486071][ T6646] reiserfs: using flush barriers
[  136.491634][ T5759] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  136.513225][ T6648] EXT4-fs error (device loop2): mb_free_blocks:1954: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  136.546265][ T6646] block device autoloading is deprecated and will be removed.
[  136.558373][ T6646] syz.1.350: attempt to access beyond end of device
[  136.558373][ T6646] md0: rw=0, sector=3670160, nr_sectors = 8 limit=0
[  136.571852][ T6646] REISERFS warning (device loop1): sh-459 journal_init: unable to read journal header
[  136.585746][ T6646] REISERFS warning (device loop1): sh-2022 reiserfs_fill_super: unable to initialize journal space
[  136.606932][ T6648] EXT4-fs (loop2): Remounting filesystem read-only
[  136.636903][ T6648] EXT4-fs (loop2): 1 truncate cleaned up
[  136.660725][ T6648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  136.966348][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.639548][ T5797] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  137.664410][ T6682] loop3: detected capacity change from 0 to 8
[  137.705426][ T6682] SQUASHFS error: zlib decompression failed, data probably corrupt
[  137.730089][ T6682] SQUASHFS error: Failed to read block 0x9b: -5
[  137.746675][ T6682] SQUASHFS error: Unable to read metadata cache entry [99]
[  137.766941][ T6682] SQUASHFS error: Unable to read inode 0x127
[  137.824253][ T6661] loop1: detected capacity change from 0 to 32768
[  137.831373][ T5797] usb 3-1: Using ep0 maxpacket: 32
[  137.839411][ T5797] usb 3-1: unable to get BOS descriptor or descriptor too short
[  137.879496][ T6661] (syz.1.357,6661,1):ocfs2_initialize_super:2149 ERROR: couldn't mount RDWR because of unsupported optional features (8).
[  137.899430][ T5797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 256, setting to 64
[  137.914657][ T6661] (syz.1.357,6661,1):ocfs2_fill_super:1178 ERROR: status = -22
[  137.925147][ T5797] usb 3-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe
[  137.934630][ T5797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.959445][ T5797] usb 3-1: Product: syz
[  137.963730][ T5797] usb 3-1: Manufacturer: syz
[  137.968370][ T5797] usb 3-1: SerialNumber: syz
[  138.021850][ T5797] usb 3-1: config 0 descriptor??
[  138.264028][ T5797] usbtouchscreen: probe of 3-1:0.0 failed with error -71
[  138.298283][ T5797] usb 3-1: USB disconnect, device number 16
[  138.313448][ T6680] loop0: detected capacity change from 0 to 32768
[  138.339953][ T5850] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  138.429415][    T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  138.549328][ T5850] usb 4-1: Using ep0 maxpacket: 8
[  138.556536][ T5850] usb 4-1: config 2 has an invalid interface number: 31 but max is 0
[  138.566494][ T5850] usb 4-1: config 2 has no interface number 0
[  138.588661][ T5850] usb 4-1: config 2 interface 31 has no altsetting 0
[  138.599223][ T5850] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  138.616002][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.624450][    T8] usb 2-1: Using ep0 maxpacket: 32
[  138.639327][ T5850] usb 4-1: Product: syz
[  138.643573][ T5850] usb 4-1: Manufacturer: syz
[  138.648235][ T5850] usb 4-1: SerialNumber: syz
[  138.655762][    T8] usb 2-1: config 0 has an invalid interface number: 83 but max is 0
[  138.664134][    T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  138.710895][    T8] usb 2-1: config 0 has no interface number 0
[  138.740680][    T8] usb 2-1: config 0 interface 83 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  138.776389][    T8] usb 2-1: config 0 interface 83 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0
[  138.809401][    T8] usb 2-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  138.841423][    T8] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  138.859378][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.878508][    T8] usb 2-1: Product: syz
[  138.887812][    T8] usb 2-1: Manufacturer: syz
[  138.892521][ T6690] loop0: detected capacity change from 0 to 8
[  138.938583][ T5850] ch9200: probe of 4-1:2.31 failed with error -71
[  138.950358][    T8] usb 2-1: SerialNumber: syz
[  138.962068][    T8] usb 2-1: config 0 descriptor??
[  138.986012][    T8] redrat3 2-1:0.83: Couldn't find all endpoints
[  138.995192][ T5850] usb 4-1: USB disconnect, device number 14
[  139.240983][ T5797] usb 2-1: USB disconnect, device number 10
[  139.494984][ T6704] loop0: detected capacity change from 0 to 128
[  139.524150][ T6704] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  139.548246][ T6704] hpfs: filesystem error: improperly stopped
[  139.554753][ T6704] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  139.563285][ T6704] hpfs: You really don't want any checks? You are crazy...
[  139.572857][ T6704] hpfs: Code page index out of array
[  139.578211][ T6704] hpfs: code page support is disabled
[  139.585728][ T6704] hpfs: hpfs_map_4sectors(): unaligned read
[  139.602093][ T6704] hpfs: hpfs_map_4sectors(): unaligned read
[  139.618347][ T6704] hpfs: filesystem error: unable to find root dir
[  139.947436][ T6716] loop0: detected capacity change from 0 to 8
[  139.977540][ T6716] squashfs image failed sanity check
[  140.017773][ T6718] hfsplus: unable to find HFS+ superblock
[  140.479373][ T5816] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  140.511674][ T6738] loop3: detected capacity change from 0 to 512
[  140.540980][ T6738] EXT4-fs (loop3): orphan cleanup on readonly fs
[  140.547542][ T6738] EXT4-fs error (device loop3): ext4_find_extent:900: inode #4: comm syz.3.395: inode has invalid extent depth: 7
[  140.550489][ T5797] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  140.569529][ T6738] EXT4-fs (loop3): Remounting filesystem read-only
[  140.576140][ T6738] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=-117
[  140.586350][ T6738] EXT4-fs warning (device loop3): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  140.601624][ T6738] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  140.609951][ T6738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  140.649398][    T8] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  140.670243][ T5816] usb 1-1: Using ep0 maxpacket: 32
[  140.684127][ T5816] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=db.74
[  140.691363][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.714696][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.739624][ T5816] usb 1-1: Product: syz
[  140.749502][ T5816] usb 1-1: Manufacturer: syz
[  140.757253][ T5816] usb 1-1: SerialNumber: syz
[  140.762364][ T5797] usb 3-1: Using ep0 maxpacket: 16
[  140.771234][ T5797] usb 3-1: config 0 has an invalid interface number: 147 but max is 0
[  140.780837][ T5797] usb 3-1: config 0 has no interface number 0
[  140.786989][ T5797] usb 3-1: config 0 interface 147 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32
[  140.800293][ T5816] usb 1-1: config 0 descriptor??
[  140.821971][ T5797] usb 3-1: config 0 interface 147 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024
[  140.836225][ T5816] usb 1-1: bad CDC descriptors
[  140.842498][    T8] usb 2-1: Using ep0 maxpacket: 8
[  140.846564][    T8] usb 2-1: config 5 has an invalid interface number: 151 but max is 0
[  140.857978][ T5797] usb 3-1: config 0 interface 147 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  140.869909][    T8] usb 2-1: config 5 has no interface number 0
[  140.879726][ T5816] usb 1-1: bad CDC descriptors
[  140.893220][ T5797] usb 3-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44
[  140.899925][    T8] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=1e.b5
[  140.913354][ T5797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.932087][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.944802][ T5797] usb 3-1: Product: syz
[  140.949178][ T5797] usb 3-1: Manufacturer: syz
[  140.954191][ T5797] usb 3-1: SerialNumber: syz
[  140.969581][    T8] usb 2-1: Product: syz
[  140.976945][    T8] usb 2-1: Manufacturer: syz
[  140.981985][ T5797] usb 3-1: config 0 descriptor??
[  140.991181][ T6730] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  140.999714][ T6730] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  141.007375][    T8] usb 2-1: SerialNumber: syz
[  141.071129][    T8] usb 1-1: USB disconnect, device number 12
[  141.241851][ T5797] net1080: probe of 3-1:0.147 failed with error -71
[  141.275259][ T5797] usb 3-1: USB disconnect, device number 17
[  141.309886][ T5810] usb 2-1: USB disconnect, device number 11
[  141.560734][ T6746] loop3: detected capacity change from 0 to 32768
[  141.577323][ T6746] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  141.609321][ T6746] gfs2: fsid=syz:syz: unknown hostdata (gfs2)
[  142.173183][ T6755] loop2: detected capacity change from 0 to 4096
[  142.182532][ T6755] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  142.247297][ T6765] loop3: detected capacity change from 0 to 1024
[  142.319444][    T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  142.327214][ T5850] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  142.388742][   T11] hfsplus: b-tree write err: -5, ino 4
[  142.495714][ T6769] loop3: detected capacity change from 0 to 512
[  142.513539][ T6769] EXT4-fs: Ignoring removed nobh option
[  142.519190][ T6769] EXT4-fs: user quota file already specified
[  142.541288][    T8] usb 2-1: Using ep0 maxpacket: 16
[  142.546596][ T5850] usb 1-1: Using ep0 maxpacket: 32
[  142.560398][ T5850] usb 1-1: config 0 has an invalid interface number: 230 but max is 0
[  142.569790][ T5850] usb 1-1: config 0 has no interface number 0
[  142.576085][    T8] usb 2-1: config 8 has an invalid interface number: 206 but max is 0
[  142.605811][ T5850] usb 1-1: config 0 interface 230 has no altsetting 0
[  142.616472][    T8] usb 2-1: config 8 has no interface number 0
[  142.629582][    T8] usb 2-1: config 8 interface 206 altsetting 1 has an invalid endpoint with address 0xF7, skipping
[  142.641126][    T8] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0
[  142.654472][ T5850] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  142.673795][    T8] usb 2-1: config 8 interface 206 altsetting 1 bulk endpoint 0xC has invalid maxpacket 0
[  142.685070][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.721839][ T5850] usb 1-1: Product: syz
[  142.726175][ T5850] usb 1-1: Manufacturer: syz
[  142.731083][    T8] usb 2-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  142.749224][ T5850] usb 1-1: SerialNumber: syz
[  142.764388][ T5850] usb 1-1: config 0 descriptor??
[  142.779406][    T8] usb 2-1: config 8 interface 206 has no altsetting 0
[  142.800093][ T5850] ums-usbat 1-1:0.230: USB Mass Storage device detected
[  142.805855][ T6773] loop3: detected capacity change from 0 to 128
[  142.821021][    T8] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[  142.834121][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.845108][    T8] usb 2-1: Product: syz
[  142.853069][    T8] usb 2-1: Manufacturer: syz
[  142.857912][    T8] usb 2-1: SerialNumber: syz
[  142.864378][ T5850] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1
[  142.937978][ T6773] affs: No valid root block on device loop3
[  143.113781][ T5850] ums-usbat: probe of 1-1:0.230 failed with error -5
[  143.170790][    T8] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected
[  143.180243][ T5850] usb 1-1: USB disconnect, device number 13
[  143.206849][    T8] garmin_gps ttyUSB0: failed to submit interrupt urb: -22
[  143.222343][    T8] garmin_gps: probe of ttyUSB0 failed with error -22
[  143.239814][    T8] usb 2-1: USB disconnect, device number 12
[  143.251359][    T8] garmin_gps 2-1:8.206: device disconnected
[  143.339488][ T5816] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  143.521897][ T5816] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  143.538136][ T5816] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.551007][ T5816] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  143.565598][ T5816] usb 3-1: config 1 interface 1 altsetting 157 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[  143.580382][ T5816] usb 3-1: config 1 interface 1 has no altsetting 0
[  143.596511][ T5816] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  143.606695][ T6783] loop3: detected capacity change from 0 to 32768
[  143.613198][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.613226][ T5816] usb 3-1: Product: syz
[  143.613241][ T5816] usb 3-1: Manufacturer: syz
[  143.613257][ T5816] usb 3-1: SerialNumber: syz
[  143.648096][ T6783] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.415 (6783)
[  143.668575][ T5816] usb 3-1: selecting invalid altsetting 0
[  143.679750][ T5816] cdc_ether: probe of 3-1:1.0 failed with error -22
[  143.702477][ T5816] usb 3-1: selecting invalid altsetting 0
[  143.706773][ T6783] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  143.718316][ T5816] usbtest: probe of 3-1:1.1 failed with error -22
[  143.747964][ T6783] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  143.780531][ T6783] BTRFS info (device loop3): enabling ssd optimizations
[  143.787554][ T6783] BTRFS info (device loop3): using spread ssd allocation scheme
[  143.830506][ T6783] BTRFS info (device loop3): disabling free space tree
[  143.859460][ T6783] BTRFS info (device loop3): max_inline at 0
[  143.889722][ T6783] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  143.925212][ T6783] BTRFS info (device loop3): use lzo compression, level 0
[  143.942937][ T6783] BTRFS info (device loop3): turning off barriers
[  143.951547][    T8] usb 3-1: USB disconnect, device number 18
[  143.979886][ T6783] BTRFS error (device loop3): support for check_integrity* not compiled in!
[  144.010738][ T6783] BTRFS error (device loop3): cannot disable free space tree
[  144.036778][ T6783] BTRFS error (device loop3): open_ctree failed: -22
[  144.129451][ T5850] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  144.319354][ T5850] usb 1-1: Using ep0 maxpacket: 8
[  144.333720][ T5850] usb 1-1: config 4 has an invalid interface number: 244 but max is 0
[  144.353985][ T5850] usb 1-1: config 4 has no interface number 0
[  144.369577][ T5850] usb 1-1: config 4 interface 244 altsetting 1 endpoint 0x1 has an invalid bInterval 41, changing to 7
[  144.392274][ T5850] usb 1-1: config 4 interface 244 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0
[  144.417826][ T5850] usb 1-1: config 4 interface 244 has no altsetting 0
[  144.439085][ T5850] usb 1-1: New USB device found, idVendor=05ac, idProduct=fa33, bcdDevice=cb.aa
[  144.454889][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.469760][ T5850] usb 1-1: Product: syz
[  144.479361][ T5850] usb 1-1: Manufacturer: syz
[  144.500443][ T5850] usb 1-1: SerialNumber: syz
[  144.519884][ T5816] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  144.734368][ T5816] usb 4-1: Using ep0 maxpacket: 8
[  144.736053][ T5850] ipheth 1-1:4.244: Unable to find endpoints
[  144.759445][ T5850] usb 1-1: USB disconnect, device number 14
[  144.773896][ T5816] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  144.792867][ T6790] loop1: detected capacity change from 0 to 40427
[  144.799672][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.808157][ T5816] usb 4-1: Product: syz
[  144.822966][ T5816] usb 4-1: Manufacturer: syz
[  144.827680][ T5816] usb 4-1: SerialNumber: syz
[  144.842631][ T6790] F2FS-fs (loop1): Mismatch start address, segment0(0) cp_blkaddr(512)
[  144.851665][ T6790] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  144.861944][ T5816] usb 4-1: config 0 descriptor??
[  144.869450][    T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  145.071659][    T9] usb 3-1: Using ep0 maxpacket: 32
[  145.084164][    T9] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  145.096186][    T9] usb 3-1: config 0 has no interface number 0
[  145.098100][ T5816] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71
[  145.114340][    T9] usb 3-1: config 0 interface 12 has no altsetting 0
[  145.129498][ T5816] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71
[  145.144909][    T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  145.168047][ T5816] usb 4-1: USB disconnect, device number 15
[  145.170264][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.192524][    T9] usb 3-1: Product: syz
[  145.196863][    T9] usb 3-1: Manufacturer: syz
[  145.212980][    T9] usb 3-1: SerialNumber: syz
[  145.230469][    T9] usb 3-1: config 0 descriptor??
[  145.475421][    T9] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71
[  145.496489][    T9] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  145.508917][    T9] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  145.517453][    T9] f81534: probe of 3-1:0.12 failed with error -71
[  145.549883][    T9] usb 3-1: USB disconnect, device number 19
[  145.630422][ T6802] loop0: detected capacity change from 0 to 8
[  145.655502][ T6802] SQUASHFS error: xz decompression failed, data probably corrupt
[  145.664206][ T6802] SQUASHFS error: Failed to read block 0x108: -5
[  145.671026][ T6802] SQUASHFS error: Unable to read metadata cache entry [106]
[  145.678569][ T6802] SQUASHFS error: Unable to read inode 0x11f
[  145.855311][ T6798] loop1: detected capacity change from 0 to 40427
[  145.873546][ T6798] F2FS-fs (loop1): build fault injection attr: rate: 16, type: 0x7ffff
[  145.884262][ T6798] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x77
[  145.927296][ T6798] F2FS-fs (loop1): invalid crc value
[  145.951412][ T6798] F2FS-fs (loop1): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x453b/0x6be0
[  145.978062][ T6798] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-12)
[  145.997295][   T27] audit: type=1326 audit(1769422601.546:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6808 comm="syz.3.427" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f152f79aeb9 code=0x0
[  146.099729][ T6811] process 'syz.0.428' launched '/dev/fd/-1/./file1' with NULL argv: empty string added
[  146.471596][ T6822] loop1: detected capacity change from 0 to 8
[  146.512216][ T6822] SQUASHFS error: lzo decompression failed, data probably corrupt
[  146.533877][ T6822] SQUASHFS error: Failed to read block 0x91: -5
[  146.549397][ T6822] SQUASHFS error: Unable to read metadata cache entry [8f]
[  146.577257][ T6822] SQUASHFS error: Unable to read inode 0x11f
[  146.605520][ T6819] loop0: detected capacity change from 0 to 4096
[  146.614932][ T6819] ntfs: (device loop0): parse_options(): Unrecognized mount option mft_zone_%sltiplier.
[  146.629370][ T5891] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  146.689851][ T6819] ntfs: (device loop0): parse_options(): Unrecognized mount option showÿÿÿÿ_files.
[  147.199538][ T5850] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  147.288239][ T6833] loop1: detected capacity change from 0 to 4096
[  147.307869][ T6833] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  147.391444][ T5850] usb 3-1: config 9 has an invalid interface number: 109 but max is 0
[  147.408550][ T5850] usb 3-1: config 9 has no interface number 0
[  147.425207][ T5850] usb 3-1: config 9 interface 109 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[  147.457652][ T5850] usb 3-1: config 9 interface 109 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  147.492438][ T5850] usb 3-1: New USB device found, idVendor=2040, idProduct=4902, bcdDevice=b5.f2
[  147.512779][ T5850] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.533834][ T5850] usb 3-1: Product: syz
[  147.538173][ T5850] usb 3-1: Manufacturer: syz
[  147.545694][ T5850] usb 3-1: SerialNumber: syz
[  147.565667][ T6829] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  147.589569][    T9] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  147.782021][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64
[  147.824139][ T5850] hdpvr 3-1:9.109: Could not find bulk-in endpoint
[  147.834174][    T9] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  147.845393][ T5850] hdpvr: probe of 3-1:9.109 failed with error -12
[  147.855423][    T9] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  147.875933][ T5850] usb 3-1: USB disconnect, device number 20
[  147.884084][    T9] usb 1-1: Product: syz
[  147.892089][    T9] usb 1-1: Manufacturer: syz
[  147.896759][    T9] usb 1-1: SerialNumber: syz
[  147.922933][    T9] usb 1-1: config 0 descriptor??
[  147.940830][ T6837] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  147.997701][ T6817] loop3: detected capacity change from 0 to 65536
[  148.055796][ T6817] XFS (loop3): Mounting V5 Filesystem 96fa0d02-eac2-4cc4-980a-feab0601d24f
[  148.190273][ T6817] XFS (loop3): Ending clean mount
[  148.237294][ T5810] usb 1-1: USB disconnect, device number 15
[  148.322880][ T5771] XFS (loop3): Unmounting Filesystem 96fa0d02-eac2-4cc4-980a-feab0601d24f
[  148.751446][ T6839] loop1: detected capacity change from 0 to 32768
[  148.801616][ T6839] gfs2: fsid=commit: Trying to join cluster "lock_nolock", "commit"
[  148.874254][ T6839] gfs2: fsid=commit: Now mounting FS (format 1802)...
[  149.001468][ T6839] gfs2: fsid=commit.0: journal 0 mapped with 7 extents in 0ms
[  149.033656][ T5850] gfs2: fsid=commit.0: jid=0, already locked for use
[  149.053831][ T5850] gfs2: fsid=commit.0: jid=0: Looking at journal...
[  149.077023][ T5850] kworker/0:3: attempt to access beyond end of device
[  149.077023][ T5850] loop1: rw=0, sector=19193135816, nr_sectors = 8 limit=32768
[  149.221755][ T5850] gfs2: fsid=commit.0: jid=0: Failed
[  149.249346][ T6839] gfs2: fsid=commit.0: error recovering journal 0: -5
[  149.379821][    T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  149.481094][ T6862] loop2: detected capacity change from 0 to 128
[  149.609446][    T9] usb 1-1: Using ep0 maxpacket: 16
[  149.630633][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  149.645900][    T9] usb 1-1: config 13 has an invalid interface number: 50 but max is 0
[  149.675797][    T9] usb 1-1: config 13 has no interface number 0
[  149.699410][    T9] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16
[  149.722051][    T9] usb 1-1: config 13 interface 50 has no altsetting 0
[  149.736541][    T9] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  149.769885][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.807638][    T9] usb 1-1: Product: syz
[  149.822494][    T9] usb 1-1: Manufacturer: syz
[  149.827281][    T9] usb 1-1: SerialNumber: syz
[  149.857683][ T6854] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  150.121357][    T9] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  150.138051][    T9] usb 1-1: MIDIStreaming interface descriptor not found
[  150.210154][  T788] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  150.255771][    T9] usb 1-1: USB disconnect, device number 16
[  150.316588][ T5759] udevd[5759]: setting mode of /dev/bus/usb/001/016 to 020664 failed: No such file or directory
[  150.341382][ T5759] udevd[5759]: setting owner of /dev/bus/usb/001/016 to uid=0, gid=0 failed: No such file or directory
[  150.433135][  T788] usb 2-1: config 0 has an invalid interface number: 238 but max is 0
[  150.467401][  T788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.476966][ T6327] udevd[6327]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  150.488995][  T788] usb 2-1: config 0 has no interface number 0
[  150.516908][  T788] usb 2-1: config 0 interface 238 altsetting 2 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  150.547707][  T788] usb 2-1: config 0 interface 238 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  150.558881][  T788] usb 2-1: config 0 interface 238 has no altsetting 0
[  150.588373][  T788] usb 2-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=44.ca
[  150.598231][  T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.607799][  T788] usb 2-1: Product: syz
[  150.616870][  T788] usb 2-1: Manufacturer: syz
[  150.621908][  T788] usb 2-1: SerialNumber: syz
[  150.650068][  T788] usb 2-1: config 0 descriptor??
[  150.666219][  T788] HFC-S_USB: probe of 2-1:0.238 failed with error -5
[  150.709421][ T5797] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  150.897690][ T5810] usb 2-1: USB disconnect, device number 13
[  150.903981][ T5797] usb 3-1: Using ep0 maxpacket: 8
[  150.920850][ T5797] usb 3-1: config index 0 descriptor too short (expected 29970, got 18)
[  150.951177][ T5797] usb 3-1: config 0 has too many interfaces: 168, using maximum allowed: 32
[  150.966290][ T5797] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 168
[  151.001023][ T5797] usb 3-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[  151.021099][ T5797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.029226][ T5797] usb 3-1: Product: syz
[  151.034367][ T5797] usb 3-1: Manufacturer: syz
[  151.039022][ T5797] usb 3-1: SerialNumber: syz
[  151.050509][ T5797] usb 3-1: config 0 descriptor??
[  151.063501][ T5797] gspca_main: xirlink-cit-2.14.0 probing 0545:800c
[  151.081402][ T6886] loop3: detected capacity change from 0 to 32768
[  151.092944][ T5797] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7
[  151.122983][ T6886] jfs_mount: dbMount failed w/rc = -22
[  151.136716][ T6886] Mount JFS Failure: -22
[  151.141994][ T6886] jfs_mount failed w/return code = -22
[  151.349771][ T5810] usb 3-1: USB disconnect, device number 21
[  151.619509][ T5797] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  151.809499][ T5797] usb 4-1: Using ep0 maxpacket: 32
[  151.821886][ T5797] usb 4-1: config 251 has an invalid interface number: 229 but max is 0
[  151.830759][ T5797] usb 4-1: config 251 has no interface number 0
[  151.831805][ T6895] loop0: detected capacity change from 0 to 32768
[  151.837192][ T5797] usb 4-1: config 251 interface 229 altsetting 218 bulk endpoint 0xF has invalid maxpacket 8
[  151.864401][ T5797] usb 4-1: config 251 interface 229 altsetting 218 bulk endpoint 0x1 has invalid maxpacket 32
[  151.865061][ T6895] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.464 (6895)
[  151.878628][ T5797] usb 4-1: config 251 interface 229 has no altsetting 0
[  151.924977][ T6895] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  151.937363][ T5797] usb 4-1: New USB device found, idVendor=0bfd, idProduct=001d, bcdDevice=72.c3
[  151.949137][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.963349][ T5797] usb 4-1: Product: syz
[  151.967602][ T5797] usb 4-1: Manufacturer: syz
[  151.974037][ T5797] usb 4-1: SerialNumber: syz
[  151.979457][ T6895] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  151.992648][ T6893] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  151.999596][ T6895] BTRFS info (device loop0): setting nodatacow, compression disabled
[  152.030898][ T6893] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  152.048423][ T6895] BTRFS info (device loop0): ignoring bad roots
[  152.080411][ T6895] BTRFS info (device loop0): enabling all of the rescue options
[  152.088161][ T6895] BTRFS info (device loop0): ignoring data csums
[  152.112158][ T6895] BTRFS info (device loop0): disabling log replay at mount time
[  152.120720][ T6895] BTRFS info (device loop0): turning on async discard
[  152.127570][ T6895] BTRFS info (device loop0): metadata ratio 0
[  152.134413][ T6895] BTRFS error (device loop0): unrecognized mount option 'obj_user=-'
[  152.151967][ T6895] BTRFS error (device loop0): open_ctree failed: -22
[  152.166457][ T5891] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by udevd (5891)
[  152.292943][ T5797] kvaser_usb 4-1:251.229: Cannot get usb endpoint(s)
[  152.315053][ T5797] usb 4-1: USB disconnect, device number 16
[  152.379382][  T788] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  152.570207][  T788] usb 2-1: Using ep0 maxpacket: 16
[  152.588019][  T788] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9
[  152.609897][  T788] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.639661][  T788] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  152.669836][  T788] usb 2-1: config 0 interface 0 has no altsetting 0
[  152.686908][  T788] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00
[  152.706910][  T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.745280][  T788] usb 2-1: config 0 descriptor??
[  152.928776][ T6908] loop0: detected capacity change from 0 to 512
[  152.944575][ T6908] EXT4-fs warning (device loop0): read_mmp_block:115: Error -74 while reading MMP block 13
[  152.982605][  T788] usbhid 2-1:0.0: can't add hid device: -71
[  152.988693][  T788] usbhid: probe of 2-1:0.0 failed with error -71
[  153.028945][ T6904] loop2: detected capacity change from 0 to 32768
[  153.048240][  T788] usb 2-1: USB disconnect, device number 14
[  153.147989][ T6904] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  153.273672][ T6904] XFS (loop2): Starting recovery (logdev: internal)
[  153.342844][ T5816] XFS (loop2): Metadata CRC error detected at xfs_refcountbt_read_verify+0x42/0xd0, xfs_refcountbt block 0x28 
[  153.375829][ T5816] XFS (loop2): Unmount and run xfs_repair
[  153.388968][ T5816] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  153.420576][ T6925] loop0: detected capacity change from 0 to 128
[  153.426980][ T5816] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff  R...............
[  153.456782][ T5816] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00  .......(........
[  153.487720][ T5816] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  153.509386][ T5816] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00  .......]........
[  153.518774][ T5816] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  153.549377][ T5816] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  153.572951][ T5816] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  153.604205][ T5816] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  153.647964][ T6904] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x28 len 8 error 74
[  153.696297][ T6904] XFS (loop2): Failed to recover leftover CoW staging extents, err -117.
[  153.729326][ T6904] XFS (loop2): Filesystem has been shut down due to log error (0x2).
[  153.737644][ T6904] XFS (loop2): Please unmount the filesystem and rectify the problem(s).
[  153.780054][ T6904] XFS (loop2): Ending recovery (logdev: internal)
[  153.789826][ T6904] XFS (loop2): Error -5 reserving per-AG metadata reserve pool.
[  154.023978][ T6931] loop0: detected capacity change from 0 to 8192
[  154.049428][ T6931] REISERFS warning (device loop0): super-6515 reiserfs_parse_options: journaled quota format not specified.
[  154.568195][ T6943] futex_wake_op: syz.2.485 tries to shift op by -1; fix this program
[  154.572738][ T6928] loop3: detected capacity change from 0 to 32768
[  154.586908][ T6939] loop1: detected capacity change from 0 to 8192
[  154.614132][ T6939] REISERFS warning (device loop1): super-6515 reiserfs_parse_options: journaled quota format not specified.
[  154.666639][ T6928] (syz.3.477,6928,0):ocfs2_check_set_options:1208 ERROR: User quotas were requested, but this filesystem does not have the feature enabled.
[  154.695079][ T6928] (syz.3.477,6928,0):ocfs2_fill_super:1178 ERROR: status = -22
[  155.443796][ T6969] loop1: detected capacity change from 0 to 8
[  155.533561][ T6969] unable to read xattr id index table
[  155.648814][ T5763] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  155.789464][    T8] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  156.026925][    T8] usb 1-1: config 4 has an invalid interface number: 53 but max is 0
[  156.035857][    T8] usb 1-1: config 4 has no interface number 0
[  156.053778][    T8] usb 1-1: config 4 interface 53 altsetting 12 endpoint 0x8 has invalid maxpacket 1064, setting to 64
[  156.086871][    T8] usb 1-1: config 4 interface 53 has no altsetting 0
[  156.100295][    T8] usb 1-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=ce.56
[  156.119310][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.137663][    T8] usb 1-1: Product: syz
[  156.144165][    T8] usb 1-1: Manufacturer: syz
[  156.159132][    T8] usb 1-1: SerialNumber: syz
[  156.185546][ T6987] loop1: detected capacity change from 0 to 1156
[  156.206412][ T6973] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  156.245128][ T6987] ISOFS: unable to read i-node block
[  156.262806][ T6987] isofs_fill_super: get root inode failed
[  156.296163][ T6971] loop3: detected capacity change from 0 to 32768
[  156.320711][ T6971] (syz.3.496,6971,1):ocfs2_fill_super:1178 ERROR: status = -22
[  156.379436][ T5759] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  156.456060][    T8] cypress_cy7c63 1-1:4.53: Cypress CY7C63xxx device now attached
[  156.471552][ T6991] tmpfs: Bad value for 'nr_inodes'
[  156.486435][    T8] usb 1-1: USB disconnect, device number 17
[  156.531140][    T8] cypress_cy7c63 1-1:4.53: Cypress CY7C63xxx device now disconnected
[  156.922355][ T6999] loop1: detected capacity change from 0 to 1764
[  156.999036][ T6997] loop2: detected capacity change from 0 to 4096
[  157.030684][ T6997] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  157.128586][ T6997] ntfs3: loop2: $Secure::$SII is corrupted.
[  157.143176][ T6997] ntfs3: loop2: Failed to initialize $Secure (-22).
[  157.295531][ T7009] loop1: detected capacity change from 0 to 1024
[  157.308708][ T7009] hfsplus: failed to load catalog file
[  157.319463][  T788] usb 4-1: new low-speed USB device number 17 using dummy_hcd
[  157.491118][ T7013] loop1: detected capacity change from 0 to 512
[  157.508068][ T7013] EXT4-fs (loop1): filesystem is read-only
[  157.529431][    T8] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  157.559311][  T788] usb 4-1: unable to get BOS descriptor or descriptor too short
[  157.587066][  T788] usb 4-1: config 7 has an invalid interface number: 67 but max is 0
[  157.605809][  T788] usb 4-1: config 7 has no interface number 0
[  157.622620][  T788] usb 4-1: string descriptor 0 read error: -22
[  157.643899][  T788] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16
[  157.656111][  T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.777789][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.798222][    T8] usb 1-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00
[  157.824447][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.844001][    T8] usb 1-1: config 0 descriptor??
[  157.984462][    T9] usb 4-1: USB disconnect, device number 17
[  158.079470][    T8] usbhid 1-1:0.0: can't add hid device: -71
[  158.085571][    T8] usbhid: probe of 1-1:0.0 failed with error -71
[  158.109676][    T8] usb 1-1: USB disconnect, device number 18
[  158.214748][ T5816] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  158.399409][ T5816] usb 2-1: Using ep0 maxpacket: 8
[  158.420448][ T5816] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  158.439851][ T5816] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  158.459911][ T5816] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  158.469934][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  158.478516][ T5816] usb 2-1: SerialNumber: syz
[  158.499597][ T5816] cdc_acm 2-1:1.0: skipping garbage
[  158.504899][ T5816] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[  158.513312][ T5816] cdc_acm 2-1:1.0: This needs exactly 3 endpoints
[  158.520798][ T5816] cdc_acm: probe of 2-1:1.0 failed with error -22
[  158.777481][    T9] usb 2-1: USB disconnect, device number 15
[  158.888219][ T7044] loop2: detected capacity change from 0 to 8192
[  158.917368][ T7044] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  158.931079][ T7046] loop3: detected capacity change from 0 to 8192
[  158.945552][ T7044] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  158.956366][ T7044] REISERFS (device loop2): using ordered data mode
[  158.963828][ T7044] reiserfs: using flush barriers
[  158.970026][    T8] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  158.988352][ T7044] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  159.007589][ T7046]  loop3: p1 < > p2 p3 < > p4 < p5 >
[  159.013783][ T7046] loop3: partition table partially beyond EOD, truncated
[  159.022104][ T7044] REISERFS (device loop2): checking transaction log (loop2)
[  159.029798][ T7046] loop3: p1 start 30976 is beyond EOD, truncated
[  159.037234][ T7046] loop3: p2 size 16128 extends beyond EOD, truncated
[  159.046425][ T7044] REISERFS warning (device loop2): vs-13075 reiserfs_read_locked_inode: dead inode read from disk [1 2 0x0 SD]. This is likely to be race with knfsd. Ignore
[  159.060297][ T7046] loop3: p3 start 327168 is beyond EOD, truncated
[  159.124969][ T7046] loop3: p5 size 16128 extends beyond EOD, truncated
[  159.169408][    T8] usb 1-1: Using ep0 maxpacket: 16
[  159.212186][    T8] usb 1-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa
[  159.231566][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.249732][    T8] usb 1-1: Product: syz
[  159.260330][    T8] usb 1-1: Manufacturer: syz
[  159.269365][    T8] usb 1-1: SerialNumber: syz
[  159.288422][    T8] usb 1-1: config 0 descriptor??
[  159.481617][ T7053] loop2: detected capacity change from 0 to 128
[  159.504825][ T7053] befs: Unrecognized mount option "[)})" or missing value
[  159.541856][ T7053] befs: (loop2): cannot parse mount options
[  159.551423][    T8] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  159.558845][    T8] dvb_usb_af9015: probe of 1-1:0.0 failed with error -22
[  159.611428][    T8] usb 1-1: USB disconnect, device number 19
[  159.773603][ T5891] udevd[5891]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  159.791942][ T5759] udevd[5759]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  159.821663][ T5763] udevd[5763]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  159.974732][ T7066] loop1: detected capacity change from 0 to 128
[  160.004934][ T7067] tmpfs: Bad value for 'mpol'
[  160.192927][ T7073] syz.1.546: attempt to access beyond end of device
[  160.192927][ T7073] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0
[  160.234398][ T7073] syz.1.546: attempt to access beyond end of device
[  160.234398][ T7073] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0
[  160.280939][ T7075] loop2: detected capacity change from 0 to 8
[  160.351240][ T7075] squashfs image failed sanity check
[  160.622859][ T7081] loop2: detected capacity change from 0 to 64
[  160.640874][ T7081] hfs: can't find a HFS filesystem on dev loop2
[  160.696744][ T5891] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  160.773071][ T7079]  loop1: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22
[  160.776719][ T7079] loop1: p2 size 589824 extends beyond EOD, truncated
[  160.887278][ T7079] loop1: p3 start 327168 is beyond EOD, truncated
[  160.918663][ T7079] loop1: p5 size 589824 extends beyond EOD, truncated
[  160.943238][ T7079] loop1: p7 size 589824 extends beyond EOD, truncated
[  160.971598][ T7079] loop1: p9 size 589824 extends beyond EOD, truncated
[  161.005781][ T7079] loop1: p11 size 589824 extends beyond EOD, truncated
[  161.037932][ T7079] loop1: p13 size 589824 extends beyond EOD, truncated
[  161.086017][ T7079] loop1: p15 size 589824 extends beyond EOD, truncated
[  161.137130][ T7079] loop1: p17 size 589824 extends beyond EOD, truncated
[  161.167152][ T7079] loop1: p19 size 589824 extends beyond EOD, truncated
[  161.197076][ T7079] loop1: p21 size 589824 extends beyond EOD, truncated
[  161.225947][ T7079] loop1: p23 size 589824 extends beyond EOD, truncated
[  161.250876][ T7079] loop1: p25 size 589824 extends beyond EOD, truncated
[  161.279664][ T7079] loop1: p27 size 589824 extends beyond EOD, truncated
[  161.299808][ T7079] loop1: p29 size 589824 extends beyond EOD, truncated
[  161.342949][ T7079] loop1: p31 size 589824 extends beyond EOD, truncated
[  161.378814][ T7085] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512).
[  161.433774][ T7085] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  161.444149][ T7079] loop1: p33 size 589824 extends beyond EOD, truncated
[  161.519541][ T7079] loop1: p35 size 589824 extends beyond EOD, truncated
[  161.535213][ T7085] ntfs3: loop2: volume is dirty and "force" flag is not set!
[  161.608151][ T7079] loop1: p37 size 589824 extends beyond EOD, truncated
[  161.659842][ T7079] loop1: p39 size 589824 extends beyond EOD, truncated
[  161.702547][ T7079] loop1: p41 size 589824 extends beyond EOD, truncated
[  161.762122][ T7079] loop1: p43 size 589824 extends beyond EOD, truncated
[  161.801010][ T7072] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  161.809872][ T7079] loop1: p45 size 589824 extends beyond EOD, truncated
[  161.852859][ T7079] loop1: p47 size 589824 extends beyond EOD, truncated
[  161.890612][ T7072] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  161.926414][ T7079] loop1: p49 size 589824 extends beyond EOD, truncated
[  161.964916][ T7072] gfs2: fsid=syz:syz.0: journal 0 mapped with 18 extents in 0ms
[  161.986129][ T7079] loop1: p51 size 589824 extends beyond EOD, truncated
[  162.015788][ T7079] loop1: p53 size 589824 extends beyond EOD, truncated
[  162.029882][    T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  162.036734][    T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  162.069668][ T7079] loop1: p55 size 589824 extends beyond EOD, truncated
[  162.110543][ T7079] loop1: p57 size 589824 extends beyond EOD, truncated
[  162.164181][ T7079] loop1: p59 size 589824 extends beyond EOD, truncated
[  162.202774][ T7079] loop1: p61 size 589824 extends beyond EOD, truncated
[  162.246101][ T7079] loop1: p63 size 589824 extends beyond EOD, truncated
[  162.259657][    T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 222ms
[  162.271762][ T7079] loop1: p65 size 589824 extends beyond EOD, truncated
[  162.278987][    T9] gfs2: fsid=syz:syz.0: jid=0: Done
[  162.291246][ T7079] loop1: p67 size 589824 extends beyond EOD, truncated
[  162.302284][ T7072] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  162.312373][ T7079] loop1: p69 size 589824 extends beyond EOD, truncated
[  162.331534][ T7072] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  162.331534][ T7072]   inode = 0 2341
[  162.331534][ T7072]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 472
[  162.353646][ T7079] loop1: p71 size 589824 extends beyond EOD, truncated
[  162.365052][ T7079] loop1: p73 size 589824 extends beyond EOD, truncated
[  162.373946][ T7072] gfs2: fsid=syz:syz.0: G:  s:SH n:2/925 f:qobnN t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1
[  162.388013][ T7079] loop1: p75 size 589824 extends beyond EOD, truncated
[  162.395393][ T7072] gfs2: fsid=syz:syz.0:  H: s:SH f:AH e:0 p:7072 [syz.3.547] inode_permission+0x23d/0x480
[  162.410371][ T7079] loop1: p77 size 589824 extends beyond EOD, truncated
[  162.418493][ T7072] gfs2: fsid=syz:syz.0:  I: n:0/2341 t:4 f:0x00 d:0x00000000 s:0 p:0
[  162.428926][ T7072] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  162.437257][ T7079] loop1: p79 size 589824 extends beyond EOD, truncated
[  162.444645][ T7072] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  162.463207][ T7079] loop1: p81 size 589824 extends beyond EOD, truncated
[  162.479485][ T7072] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  162.489583][ T7079] loop1: p83 size 589824 extends beyond EOD, truncated
[  162.498174][ T7072] gfs2: fsid=syz:syz.0: File system withdrawn
[  162.512479][ T7079] loop1: p85 size 589824 extends beyond EOD, truncated
[  162.520908][ T7072] CPU: 0 PID: 7072 Comm: syz.3.547 Not tainted syzkaller #0
[  162.528272][ T7072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  162.538389][ T7072] Call Trace:
[  162.541724][ T7072]  <TASK>
[  162.544694][ T7072]  dump_stack_lvl+0x18c/0x250
[  162.549498][ T7072]  ? kobject_uevent_env+0x363/0x8b0
[  162.554774][ T7072]  ? show_regs_print_info+0x20/0x20
[  162.560044][ T7072]  ? load_image+0x400/0x400
[  162.564597][ T7072]  ? kobject_uevent_env+0x363/0x8b0
[  162.569845][ T7072]  gfs2_withdraw+0xb24/0x13d0
[  162.574673][ T7072]  ? gfs2_lm+0x240/0x240
[  162.578962][ T7072]  ? preempt_schedule+0xc0/0xd0
[  162.583862][ T7072]  ? gfs2_consist_inode_i+0xf5/0x110
[  162.589189][ T7072]  gfs2_inode_refresh+0xb89/0x1000
[  162.594344][ T7072]  ? gfs2_inode_metasync+0xf0/0xf0
[  162.599501][ T7072]  ? gfs2_glock_nq+0xd4f/0x1420
[  162.604403][ T7072]  ? do_raw_spin_lock+0x11f/0x2c0
[  162.609472][ T7072]  gfs2_instantiate+0x162/0x220
[  162.614359][ T7072]  gfs2_glock_wait+0x1d4/0x2a0
[  162.619160][ T7072]  gfs2_permission+0x25a/0x460
[  162.623989][ T7072]  ? gfs2_lookupi+0x640/0x640
[  162.628729][ T7072]  ? inode_permission+0x23d/0x480
[  162.633819][ T7072]  ? gfs2_lookupi+0x640/0x640
[  162.638629][ T7072]  inode_permission+0x23d/0x480
[  162.643533][ T7072]  may_open+0x2e9/0x440
[  162.647736][ T7072]  path_openat+0x268c/0x3230
[  162.652386][ T7072]  ? do_sys_openat2+0xda/0x1d0
[  162.657200][ T7072]  ? verify_lock_unused+0x140/0x140
[  162.662443][ T7072]  ? do_filp_open+0x430/0x430
[  162.667164][ T7072]  ? __virt_addr_valid+0x18c/0x540
[  162.672327][ T7072]  do_filp_open+0x1f5/0x430
[  162.676872][ T7072]  ? vfs_tmpfile+0x490/0x490
[  162.681515][ T7072]  ? _raw_spin_unlock+0x28/0x40
[  162.686413][ T7072]  ? alloc_fd+0x58f/0x630
[  162.690885][ T7072]  do_sys_openat2+0x134/0x1d0
[  162.695608][ T7072]  ? do_sys_open+0xe0/0xe0
[  162.700065][ T7072]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  162.706081][ T7072]  ? lock_chain_count+0x20/0x20
[  162.711053][ T7072]  __x64_sys_openat+0x139/0x160
[  162.716069][ T7072]  do_syscall_64+0x55/0xa0
[  162.720541][ T7072]  ? clear_bhb_loop+0x40/0x90
[  162.725259][ T7072]  ? clear_bhb_loop+0x40/0x90
[  162.730009][ T7072]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  162.735945][ T7072] RIP: 0033:0x7f152f75b78e
[  162.740411][ T7072] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  162.760151][ T7072] RSP: 002b:00007f153070eda8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  162.768625][ T7072] RAX: ffffffffffffffda RBX: 00007f153070f6c0 RCX: 00007f152f75b78e
[  162.776636][ T7072] RDX: 0000000000010000 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  162.784648][ T7072] RBP: 00002000000002c0 R08: 0000000000000000 R09: 0000000000000000
[  162.792665][ T7072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000100
[  162.800668][ T7072] R13: 00007f153070eea0 R14: 0000000000012806 R15: 0000200000002080
[  162.808683][ T7072]  </TASK>
[  162.857205][ T7079] loop1: p87 size 589824 extends beyond EOD, truncated
[  162.889890][ T7079] loop1: p89 size 589824 extends beyond EOD, truncated
[  162.931521][ T7079] loop1: p91 size 589824 extends beyond EOD, truncated
[  162.965958][ T7079] loop1: p93 size 589824 extends beyond EOD, truncated
[  162.985038][ T7079] loop1: p95 size 589824 extends beyond EOD, truncated
[  163.015474][ T7079] loop1: p97 size 589824 extends beyond EOD, truncated
[  163.049829][ T7079] loop1: p99 size 589824 extends beyond EOD, truncated
[  163.069581][ T7079] loop1: p101 size 589824 extends beyond EOD, truncated
[  163.098109][ T7079] loop1: p103 size 589824 extends beyond EOD, truncated
[  163.147154][ T7079] loop1: p105 size 589824 extends beyond EOD, truncated
[  163.178793][ T7089] set_capacity_and_notify: 4 callbacks suppressed
[  163.178811][ T7089] loop0: detected capacity change from 0 to 32768
[  163.199756][ T7079] loop1: p107 size 589824 extends beyond EOD, truncated
[  163.211937][ T7079] loop1: p109 size 589824 extends beyond EOD, truncated
[  163.224257][ T7079] loop1: p111 size 589824 extends beyond EOD, truncated
[  163.243085][ T7079] loop1: p113 size 589824 extends beyond EOD, truncated
[  163.337069][ T7079] loop1: p115 size 589824 extends beyond EOD, truncated
[  163.350296][ T7089] JBD2: Ignoring recovery information on journal
[  163.361065][ T7089] JBD2: Journal too short (blocks 2-2).
[  163.367038][ T7089] JBD2: journal reset failed
[  163.380000][ T7089] (syz.0.555,7089,1):ocfs2_journal_load:1167 ERROR: Failed to load journal!
[  163.381569][ T7079] loop1: p117 size 589824 extends beyond EOD, 
[  163.388919][ T7089] (syz.0.555,7089,1):ocfs2_check_volume:2432 ERROR: ocfs2 journal load failed! -22
[  163.425959][ T7079] truncated
[  163.442276][ T7079] loop1: p119 size 589824 extends beyond EOD, truncated
[  163.458676][ T7089] (syz.0.555,7089,0):ocfs2_check_volume:2488 ERROR: status = -22
[  163.468354][ T7089] (syz.0.555,7089,0):ocfs2_mount_volume:1820 ERROR: status = -22
[  163.492213][ T7089] (syz.0.555,7089,0):ocfs2_fill_super:1178 ERROR: status = -22
[  163.514797][ T7079] loop1: p121 size 589824 extends beyond EOD, truncated
[  163.543114][ T7079] loop1: p123 size 589824 extends beyond EOD, truncated
[  163.563236][ T7103] loop2: detected capacity change from 0 to 1024
[  163.579808][ T7079] loop1: p125 size 589824 extends beyond EOD, truncated
[  163.591710][ T7103] EXT4-fs: Ignoring removed mblk_io_submit option
[  163.620051][ T7103] EXT4-fs error (device loop2): ext4_quota_enable:7140: inode #4: comm syz.2.562: casefold flag without casefold feature
[  163.650863][ T7079] loop1: p127 size 589824 extends beyond EOD, truncated
[  163.658204][ T7103] EXT4-fs error (device loop2): ext4_quota_enable:7143: comm syz.2.562: Bad quota inode: 4, type: 1
[  163.673171][ T7079] loop1: p129 size 589824 extends beyond EOD, truncated
[  163.700629][ T7103] EXT4-fs warning (device loop2): ext4_enable_quotas:7184: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  163.722919][ T7103] EXT4-fs (loop2): mount failed
[  163.735384][ T7079] loop1: p131 size 589824 extends beyond EOD, truncated
[  163.783726][ T7079] loop1: p133 size 589824 extends beyond EOD, truncated
[  163.821865][ T7079] loop1: p135 size 589824 extends beyond EOD, truncated
[  163.848099][ T7079] loop1: p137 size 589824 extends beyond EOD, truncated
[  163.892305][ T7079] loop1: p139 size 589824 extends beyond EOD, truncated
[  163.903892][ T7079] loop1: p141 size 589824 extends beyond EOD, truncated
[  163.914097][ T7079] loop1: p143 size 589824 extends beyond EOD, truncated
[  163.927568][ T7079] loop1: p145 size 589824 extends beyond EOD, truncated
[  163.947566][ T7079] loop1: p147 size 589824 extends beyond EOD, truncated
[  163.975453][ T7079] loop1: p149 size 589824 extends beyond EOD, truncated
[  163.993100][ T7079] loop1: p151 size 589824 extends beyond EOD, truncated
[  164.021693][ T7079] loop1: p153 size 589824 extends beyond EOD, truncated
[  164.050133][ T7079] loop1: p155 size 589824 extends beyond EOD, truncated
[  164.063384][ T7107] loop3: detected capacity change from 0 to 4096
[  164.083071][ T7079] loop1: p157 size 589824 extends beyond EOD, truncated
[  164.109680][ T7079] loop1: p159 size 589824 extends beyond EOD, truncated
[  164.120316][ T7107] ntfs: (device loop3): ntfs_read_inode_mount(): $MFT/$DATA attribute not found. $MFT is corrupt. Run chkdsk.
[  164.143204][ T7079] loop1: p161 size 589824 extends beyond EOD, truncated
[  164.154494][ T7107] ntfs: (device loop3): ntfs_read_inode_mount(): Failed. Marking inode as bad.
[  164.179224][ T7079] loop1: p163 size 589824 extends beyond EOD, truncated
[  164.190245][ T7107] ntfs: (device loop3): ntfs_fill_super(): Failed to load essential metadata.
[  164.219394][ T7079] loop1: p165 size 589824 extends beyond EOD, truncated
[  164.251086][ T7079] loop1: p167 size 589824 extends beyond EOD, truncated
[  164.283653][ T7079] loop1: p169 size 589824 extends beyond EOD, truncated
[  164.322134][ T7079] loop1: p171 size 589824 extends beyond EOD, truncated
[  164.346584][ T7079] loop1: p173 size 589824 extends beyond EOD, truncated
[  164.375607][ T7079] loop1: p175 size 589824 extends beyond EOD, truncated
[  164.420195][ T7079] loop1: p177 size 589824 extends beyond EOD, truncated
[  164.439135][ T7117] loop3: detected capacity change from 0 to 64
[  164.459992][ T7079] loop1: p179 size 589824 extends beyond EOD, truncated
[  164.499480][ T7079] loop1: p181 size 589824 extends beyond EOD, truncated
[  164.509805][ T7117] hfs: request for non-existent node 1061 in B*Tree
[  164.516983][ T7117] hfs: request for non-existent node 1061 in B*Tree
[  164.536067][ T7117] hfs: get root inode failed
[  164.547220][ T7079] loop1: p183 size 589824 extends beyond EOD, truncated
[  164.580289][ T7079] loop1: p185 size 589824 extends beyond EOD, truncated
[  164.595439][ T7079] loop1: p187 size 589824 extends beyond EOD, truncated
[  164.609148][ T7079] loop1: p189 size 589824 extends beyond EOD, truncated
[  164.622267][ T7079] loop1: p191 size 589824 extends beyond EOD, truncated
[  164.636440][ T7079] loop1: p193 size 589824 extends beyond EOD, truncated
[  164.651067][ T7079] loop1: p195 size 589824 extends beyond EOD, truncated
[  164.679699][ T7079] loop1: p197 size 589824 extends beyond EOD, truncated
[  164.694821][ T7079] loop1: p199 size 589824 extends beyond EOD, truncated
[  164.701343][ T5816] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  164.717165][ T7079] loop1: p201 size 589824 extends beyond EOD, truncated
[  164.732862][ T7079] loop1: p203 size 589824 extends beyond EOD, truncated
[  164.750260][ T7079] loop1: p205 size 589824 extends beyond EOD, truncated
[  164.763220][ T7079] loop1: p207 size 589824 extends beyond EOD, truncated
[  164.774521][ T7079] loop1: p209 size 589824 extends beyond EOD, truncated
[  164.781759][ T5810] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  164.791305][ T7079] loop1: p211 size 589824 extends beyond EOD, truncated
[  164.803675][ T7079] loop1: p213 size 589824 extends beyond EOD, truncated
[  164.813398][ T7079] loop1: p215 size 589824 extends beyond EOD, truncated
[  164.825053][ T7079] loop1: p217 size 589824 extends beyond EOD, truncated
[  164.834899][ T7079] loop1: p219 size 589824 extends beyond EOD, truncated
[  164.844583][ T7079] loop1: p221 size 589824 extends beyond EOD, truncated
[  164.856778][ T7079] loop1: p223 size 589824 extends beyond EOD, truncated
[  164.866518][ T7079] loop1: p225 size 589824 extends beyond EOD, truncated
[  164.877326][ T7079] loop1: p227 size 589824 extends beyond EOD, truncated
[  164.888663][ T7079] loop1: p229 size 589824 extends beyond EOD, truncated
[  164.898692][ T7079] loop1: p231 size 589824 extends beyond EOD, truncated
[  164.900190][ T5816] usb 1-1: Using ep0 maxpacket: 16
[  164.914262][ T5816] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  164.926303][ T7079] loop1: p233 size 589824 extends beyond EOD, truncated
[  164.927959][ T5816] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  164.946283][ T5816] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  164.950236][ T7079] loop1: p235 size 589824 extends beyond EOD, 
[  164.956121][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.958674][ T7079] truncated
[  164.963824][ T5816] usb 1-1: Product: syz
[  164.978396][ T5816] usb 1-1: Manufacturer: syz
[  164.983178][ T5810] usb 3-1: Using ep0 maxpacket: 8
[  164.989560][ T5816] usb 1-1: SerialNumber: syz
[  164.996540][ T5810] usb 3-1: unable to get BOS descriptor or descriptor too short
[  165.009407][ T5797] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  165.017642][ T7079] loop1: p237 size 589824 extends beyond EOD, truncated
[  165.035718][ T5810] usb 3-1: config 7 has an invalid interface number: 67 but max is 0
[  165.044437][ T5810] usb 3-1: config 7 has no interface number 0
[  165.051235][ T7079] loop1: p239 size 589824 extends beyond EOD, truncated
[  165.056290][ T5810] usb 3-1: language id specifier not provided by device, defaulting to English
[  165.072671][ T7079] loop1: p241 size 589824 extends beyond EOD, truncated
[  165.082153][ T5810] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16
[  165.091659][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.096771][ T7079] loop1: p243 size 589824 extends beyond EOD, 
[  165.103151][ T5810] usb 3-1: Product: syz
[  165.116021][ T5810] usb 3-1: SerialNumber: syz
[  165.119565][ T7079] truncated
[  165.134485][ T7079] loop1: p245 size 589824 extends beyond EOD, truncated
[  165.146519][ T7079] loop1: p247 size 589824 extends beyond EOD, truncated
[  165.158032][ T7079] loop1: p249 size 589824 extends beyond EOD, truncated
[  165.179027][ T7079] loop1: p251 size 589824 extends beyond EOD, truncated
[  165.194124][ T7079] loop1: p253 size 589824 extends beyond EOD, truncated
[  165.204904][ T7079] loop1: p255 size 589824 extends beyond EOD, truncated
[  165.204927][ T5797] usb 4-1: config 0 has an invalid interface number: 10 but max is 0
[  165.204954][ T5797] usb 4-1: config 0 has no interface number 0
[  165.227444][ T5797] usb 4-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=69.f6
[  165.256968][ T5797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.273292][ T5816] usb 1-1: 0:2 : does not exist
[  165.285151][ T5797] usb 4-1: config 0 descriptor??
[  165.300469][ T5816] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  165.368286][ T5816] usb 1-1: USB disconnect, device number 20
[  165.471389][ T5810] usb 3-1: USB disconnect, device number 22
[  165.513264][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  165.548664][ T5797] pegasus: probe of 4-1:0.10 failed with error -71
[  165.591621][ T5797] usb 4-1: USB disconnect, device number 18
[  166.389471][ T5850] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[  166.584047][ T6327] udevd[6327]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  166.598736][ T5762] udevd[5762]: inotify_add_watch(7, /dev/loop1p10, 10) failed: No such file or directory
[  166.599101][ T6079] udevd[6079]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory
[  166.623125][ T5763] udevd[5763]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  166.624175][ T6328] udevd[6328]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory
[  166.647820][ T5761] udevd[5761]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[  166.661027][ T6212] udevd[6212]: inotify_add_watch(7, /dev/loop1p8, 10) failed: No such file or directory
[  166.687889][ T5759] udevd[5759]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  166.689193][ T5891] udevd[5891]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  166.745314][ T5850] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  166.755934][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.795731][ T5850] usb 1-1: Product: syz
[  166.819543][ T5850] usb 1-1: Manufacturer: syz
[  166.840957][ T5850] usb 1-1: SerialNumber: syz
[  166.930698][ T5850] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  167.134604][ T5850] vp7045: USB control message 'out' went wrong.
[  167.166241][ T7137] loop1: detected capacity change from 0 to 512
[  167.178434][ T5850] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  167.221723][ T7137] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  167.239452][ T5850] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  167.251843][ T7137] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  167.276390][ T5850] usb 1-1: USB disconnect, device number 21
[  167.340174][ T7137] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  167.377632][ T7137] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  167.390356][ T7137] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000]
[  167.398558][ T7137] EXT4-fs (loop1): orphan cleanup on readonly fs
[  167.441693][ T7137] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.575: bg 0: block 34: padding at end of block bitmap is not set
[  167.494325][ T7137] Quota error (device loop1): write_blk: dquota write failed
[  167.518246][ T7137] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  167.530724][ T7137] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.575: Failed to acquire dquot type 1
[  167.556820][ T7137] EXT4-fs (loop1): 1 truncate cleaned up
[  167.595139][ T7137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  167.608291][ T7128] loop2: detected capacity change from 0 to 40427
[  167.655481][ T7128] F2FS-fs (loop2): Invalid log_blocksize (64), supports only 12
[  167.670228][ T7128] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  167.719564][ T7128] F2FS-fs (loop2): invalid crc value
[  167.905002][ T5777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.131786][ T7130] loop3: detected capacity change from 0 to 40427
[  168.186616][ T7130] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  168.207313][ T7130] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  168.278674][ T7130] F2FS-fs (loop3): invalid crc value
[  168.285115][ T7128] F2FS-fs (loop2): Start checkpoint disabled!
[  168.341895][ T7128] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  168.379516][ T7128] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  168.649315][ T7130] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  168.662551][ T7130] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  168.810491][ T7157] loop1: detected capacity change from 0 to 512
[  168.829410][    T8] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  168.855459][ T7157] EXT4-fs (loop1): ea_inode feature is not supported for Hurd
[  168.936229][ T5891] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  169.049468][    T8] usb 1-1: Using ep0 maxpacket: 8
[  169.067264][    T8] usb 1-1: config index 0 descriptor too short (expected 30482, got 18)
[  169.109416][    T8] usb 1-1: config 0 has too many interfaces: 101, using maximum allowed: 32
[  169.118210][    T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 101
[  169.209755][    T8] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00
[  169.218887][    T8] usb 1-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0
[  169.249490][    T8] usb 1-1: Product: syz
[  169.253729][    T8] usb 1-1: Manufacturer: syz
[  169.270878][    T8] usb 1-1: config 0 descriptor??
[  169.287569][    T8] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  169.300573][    T8] usb 1-1: Detected FT2232C/D
[  169.539643][    T8] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  169.589536][    T8] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  169.621876][    T8] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  169.687362][    T8] usb 1-1: USB disconnect, device number 22
[  169.795847][    T8] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  169.850821][    T8] ftdi_sio 1-1:0.0: device disconnected
[  170.203226][ T5850] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  170.419361][ T5850] usb 2-1: Using ep0 maxpacket: 16
[  170.440304][ T5850] usb 2-1: config 0 has an invalid interface number: 189 but max is 0
[  170.465985][ T7173] loop0: detected capacity change from 0 to 4096
[  170.472579][ T5850] usb 2-1: config 0 has no interface number 0
[  170.478753][ T5850] usb 2-1: config 0 interface 189 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  170.512161][ T5850] usb 2-1: New USB device found, idVendor=1b3d, idProduct=9314, bcdDevice= 9.00
[  170.530055][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.554925][ T7173] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[  170.565885][ T5850] usb 2-1: Product: syz
[  170.580206][ T7173] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  170.594324][ T5850] usb 2-1: Manufacturer: syz
[  170.598996][ T5850] usb 2-1: SerialNumber: syz
[  170.620762][ T5850] usb 2-1: config 0 descriptor??
[  170.627464][ T7173] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[  170.657335][ T5850] ftdi_sio 2-1:0.189: FTDI USB Serial Device converter detected
[  170.677921][ T5850] usb 2-1: Detected FT232H
[  170.707397][ T7173] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  170.751409][ T7173] ntfs: (device loop0): load_system_files(): Failed to load $Volume.
[  170.779633][ T7173] ntfs: (device loop0): ntfs_fill_super(): Failed to load system files.
[  170.855932][ T7171] loop3: detected capacity change from 0 to 32768
[  170.935111][ T5850] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  170.936119][ T7171] journal_load_superblock: Cannot read journal superblock
[  170.964642][ T7169] loop2: detected capacity change from 0 to 32768
[  170.988019][ T7171] (syz.3.583,7171,0):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  171.008482][ T5850] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  171.023798][ T7171] (syz.3.583,7171,0):ocfs2_check_volume:2403 ERROR: Could not initialize journal!
[  171.050799][ T5850] ftdi_sio 2-1:0.189: GPIO initialisation failed: -71
[  171.087611][ T7171] (syz.3.583,7171,0):ocfs2_check_volume:2488 ERROR: status = -5
[  171.108522][ T7169] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  171.123239][ T5850] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  171.137894][ T7171] (syz.3.583,7171,0):ocfs2_mount_volume:1820 ERROR: status = -5
[  171.178921][ T7171] (syz.3.583,7171,0):ocfs2_fill_super:1178 ERROR: status = -5
[  171.200507][ T5850] usb 2-1: USB disconnect, device number 16
[  171.239042][ T5850] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  171.269971][ T5850] ftdi_sio 2-1:0.189: device disconnected
[  171.477224][ T7169] XFS (loop2): Starting recovery (logdev: internal)
[  171.569627][ T7169] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xd0, xfs_rmapbt block 0x14 
[  171.619327][ T7169] XFS (loop2): Unmount and run xfs_repair
[  171.625246][ T7169] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  171.657403][ T7169] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  171.676848][   T27] audit: type=1326 audit(1769422627.226:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.1.591" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f858ff9aeb9 code=0x0
[  171.689424][ T7169] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 10  ................
[  171.739434][ T7169] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  171.748377][ T7169] 00000030: 00 00 00 00 05 1b 0d 00 02 00 00 00 00 00 00 01  ................
[  171.773239][ T7169] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  171.819357][ T7169] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  171.828295][ T7169] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  171.859320][ T7169] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  171.901739][ T7169] XFS (loop2): Filesystem has been shut down due to log error (0x2).
[  171.928057][ T7176] loop0: detected capacity change from 0 to 32768
[  171.934694][ T7169] XFS (loop2): Please unmount the filesystem and rectify the problem(s).
[  171.935212][ T7169] XFS (loop2): log mount/recovery failed: error -74
[  171.954879][ T7176] XFS: ikeep mount option is deprecated.
[  171.986594][ T7169] XFS (loop2): log mount failed
[  172.056244][ T7176] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  172.307093][ T7176] XFS (loop0): Ending clean mount
[  172.327659][ T7176] XFS (loop0): Quotacheck needed: Please wait.
[  172.354423][ T2920] XFS (loop0): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  172.441091][ T5810] XFS (loop0): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xd0, xfs_rmapbt block 0x14 
[  172.480593][ T5810] XFS (loop0): Unmount and run xfs_repair
[  172.487115][ T5810] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  172.519589][ T5810] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  172.528533][ T5810] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 10  ................
[  172.569336][ T5810] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d  ..BNy.B..... ...
[  172.578274][ T5810] 00000030: 00 00 00 00 6c 4b dc c9 00 00 00 00 00 00 00 01  ....lK..........
[  172.619628][ T5810] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  172.628576][ T5810] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  172.669349][ T5810] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  172.678297][ T5810] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  172.706488][ T2920] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x14 len 4 error 74
[  172.727780][ T2920] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x519/0x8b0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  172.769338][ T2920] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  172.800230][ T7176] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  172.818590][ T7176] XFS (loop0): Error -5 reserving per-AG metadata reserve pool.
[  172.827502][ T7190] loop3: detected capacity change from 0 to 32768
[  172.842018][  T788] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  172.919885][ T7190] JBD2: Ignoring recovery information on journal
[  172.978337][ T7209] loop2: detected capacity change from 0 to 2048
[  173.060620][  T788] usb 2-1: Using ep0 maxpacket: 8
[  173.066481][ T7209] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #2: comm syz.2.598: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5)
[  173.113511][ T7209] EXT4-fs (loop2): get root inode failed
[  173.134834][  T788] usb 2-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f
[  173.149473][ T7209] EXT4-fs (loop2): mount failed
[  173.154552][  T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  173.170512][ T7190] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  173.199913][  T788] usb 2-1: Product: syz
[  173.209604][  T788] usb 2-1: Manufacturer: syz
[  173.214270][  T788] usb 2-1: SerialNumber: syz
[  173.233414][  T788] usb 2-1: config 0 descriptor??
[  173.262202][  T788] usbtest 2-1:0.0: FX2 device
[  173.279373][  T788] usbtest 2-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt)
[  173.470150][ T5771] ocfs2: Unmounting device (7,3) on (node local)
[  173.502883][  T788] usb 2-1: USB disconnect, device number 17
[  173.779477][ T5810] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  173.924488][ T7226] loop0: detected capacity change from 0 to 512
[  173.944519][ T7226] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 1024: comm syz.0.605: invalid block
[  173.958223][ T7226] EXT4-fs (loop0): Remounting filesystem read-only
[  173.974851][ T5810] usb 3-1: Using ep0 maxpacket: 8
[  173.979708][ T7226] EXT4-fs (loop0): 1 truncate cleaned up
[  173.987059][ T7226] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.998797][ T5810] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  174.036693][ T5810] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  174.048834][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.050048][  T788] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  174.068984][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.094702][ T5810] usb 3-1: Product: syz
[  174.108815][ T5810] usb 3-1: Manufacturer: syz
[  174.149392][ T5810] usb 3-1: SerialNumber: syz
[  174.167423][ T5810] usb 3-1: config 0 descriptor??
[  174.194640][ T5810] streamzap 3-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200
[  174.250110][  T788] usb 4-1: Using ep0 maxpacket: 32
[  174.276759][  T788] usb 4-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6
[  174.295504][  T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.308366][  T788] usb 4-1: config 0 descriptor??
[  174.328031][  T788] usb 4-1: dvb_usb_v2: found a 'Anysee' in warm state
[  174.345867][  T788] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  174.357458][  T788] dvb_usb_anysee: probe of 4-1:0.0 failed with error -22
[  174.422594][  T788] usb 3-1: USB disconnect, device number 23
[  174.541118][ T5810] usb 4-1: USB disconnect, device number 19
[  174.649489][    T8] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  174.699525][ T5816] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  174.849779][    T8] usb 2-1: Using ep0 maxpacket: 16
[  174.860882][    T8] usb 2-1: config 7 has an invalid interface number: 148 but max is 0
[  174.869374][    T8] usb 2-1: config 7 has no interface number 0
[  174.875587][    T8] usb 2-1: config 7 interface 148 altsetting 6 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  174.886954][    T8] usb 2-1: config 7 interface 148 has no altsetting 0
[  174.896781][    T8] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=58.61
[  174.897964][ T5816] usb 1-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02
[  174.906261][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.924686][    T8] usb 2-1: Product: syz
[  174.926685][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255
[  174.928873][    T8] usb 2-1: Manufacturer: syz
[  174.928889][    T8] usb 2-1: SerialNumber: syz
[  174.963635][ T5816] usb 1-1: Product: syz
[  174.967970][ T5816] usb 1-1: SerialNumber: syz
[  175.000314][ T5816] usb 1-1: config 0 descriptor??
[  175.188895][    T8] usb 2-1: probing VID:PID(0424:012C)   
[  175.202677][    T8] usb 2-1: vub300 testing UNKNOWN EndPoint(0) 01
[  175.217841][ T5816] ldusb 1-1:0.0: Interrupt in endpoint not found
[  175.220845][    T8] usb 2-1: vub300 ignoring EndPoint(0) 01
[  175.239895][ T5816] usb 1-1: USB disconnect, device number 23
[  175.254850][    T8] usb 2-1: vub300 testing UNKNOWN EndPoint(1) 05
[  175.271613][    T8] usb 2-1: vub300 ignoring EndPoint(1) 05
[  175.281746][    T8] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs
[  175.326742][    T8] vub300: probe of 2-1:7.148 failed with error -22
[  175.369315][    T8] usb 2-1: USB disconnect, device number 18
[  175.436943][ T7242] loop3: detected capacity change from 0 to 2048
[  175.460140][ T7242] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  175.497750][ T5891] udevd[5891]: incorrect nilfs2 checksum on /dev/loop3
[  175.528702][ T7243] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  175.548866][ T7242] NILFS (loop3): corrupt root inode
[  175.745852][ T7238] loop2: detected capacity change from 0 to 40427
[  175.768825][ T7238] F2FS-fs (loop2): invalid crc value
[  175.832003][ T7238] F2FS-fs (loop2): Found nat_bits in checkpoint
[  175.998085][ T7238] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  176.069374][ T5816] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  176.169495][ T5810] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  176.282792][ T5816] usb 4-1: config 0 has an invalid interface number: 107 but max is 0
[  176.299323][ T5816] usb 4-1: config 0 has no interface number 0
[  176.309840][ T5816] usb 4-1: config 0 interface 107 has no altsetting 0
[  176.330158][ T5816] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=c2.51
[  176.349913][ T5816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.358027][ T5816] usb 4-1: Product: syz
[  176.370207][ T5810] usb 1-1: config 0 has an invalid interface number: 66 but max is 0
[  176.379309][ T5810] usb 1-1: config 0 has no interface number 0
[  176.385498][ T5810] usb 1-1: config 0 interface 66 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  176.399285][ T5816] usb 4-1: Manufacturer: syz
[  176.403953][ T5816] usb 4-1: SerialNumber: syz
[  176.422091][ T5810] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=6d.c5
[  176.437130][ T5816] usb 4-1: config 0 descriptor??
[  176.443246][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.458526][ T5810] usb 1-1: Product: syz
[  176.462915][ T5810] usb 1-1: Manufacturer: syz
[  176.467865][ T5810] usb 1-1: SerialNumber: syz
[  176.478655][ T5816] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  176.503397][ T5810] usb 1-1: config 0 descriptor??
[  176.533645][ T5810] imon_raw 1-1:0.66: IR endpoint missing
[  176.541766][ T7251] loop1: detected capacity change from 0 to 32768
[  176.581856][ T7251] 
[  176.581856][ T7251]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  176.581856][ T7251] 
[  176.760979][ T5777] 
[  176.760979][ T5777]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  176.760979][ T5777] 
[  176.799412][ T5777] 
[  176.799412][ T5777]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  176.799412][ T5777] 
[  176.800182][ T5761] udevd[5761]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.107/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  176.826126][  T788] usb 1-1: USB disconnect, device number 24
[  176.935416][ T5816] usb 4-1: USB disconnect, device number 20
[  177.030340][ T7258] loop1: detected capacity change from 0 to 2048
[  177.056193][ T7258] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  177.066138][ T7258] NILFS (loop1): segment count 8142508126285856831 exceeds upper limit (1152921504606846975 segments)
[  177.376082][ T7264] loop1: detected capacity change from 0 to 512
[  177.417916][ T7264] ==================================================================
[  177.426055][ T7264] BUG: KASAN: slab-use-after-free in __ext4_iget+0x2c0/0x3f40
[  177.433581][ T7264] Read of size 8 at addr ffff88805e3485d0 by task syz.1.621/7264
[  177.441349][ T7264] 
[  177.443725][ T7264] CPU: 0 PID: 7264 Comm: syz.1.621 Not tainted syzkaller #0
[  177.451053][ T7264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  177.461165][ T7264] Call Trace:
[  177.464490][ T7264]  <TASK>
[  177.467469][ T7264]  dump_stack_lvl+0x18c/0x250
[  177.472224][ T7264]  ? __lock_acquire+0x7d40/0x7d40
[  177.477320][ T7264]  ? show_regs_print_info+0x20/0x20
[  177.482586][ T7264]  ? load_image+0x400/0x400
[  177.487149][ T7264]  ? __virt_addr_valid+0x469/0x540
[  177.492335][ T7264]  print_report+0xa8/0x210
[  177.496818][ T7264]  ? __ext4_iget+0x2c0/0x3f40
[  177.501571][ T7264]  kasan_report+0x117/0x150
[  177.506128][ T7264]  ? __ext4_iget+0x2c0/0x3f40
[  177.510868][ T7264]  __ext4_iget+0x2c0/0x3f40
[  177.515442][ T7264]  ? free_unref_page+0x190/0x2e0
[  177.520535][ T7264]  ? apply_workqueue_attrs+0x180/0x180
[  177.526138][ T7264]  ? ext4_get_projid+0x140/0x140
[  177.531144][ T7264]  ext4_fill_super+0x5020/0x6790
[  177.536147][ T7264]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  177.542448][ T7264]  ? __might_sleep+0xe0/0xe0
[  177.547114][ T7264]  ? read_lock_is_recursive+0x20/0x20
[  177.552539][ T7264]  ? snprintf+0xe9/0x140
[  177.556843][ T7264]  ? down_read_killable+0x340/0x340
[  177.562108][ T7264]  ? setup_bdev_super+0x56b/0x660
[  177.567181][ T7264]  get_tree_bdev+0x3f3/0x520
[  177.571826][ T7264]  ? vfs_parse_fs_string+0x170/0x170
[  177.577166][ T7264]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  177.583468][ T7264]  ? setup_bdev_super+0x660/0x660
[  177.588631][ T7264]  ? apparmor_capable+0x137/0x1a0
[  177.593716][ T7264]  ? bpf_lsm_capable+0x9/0x10
[  177.598445][ T7264]  ? security_capable+0x89/0xb0
[  177.603349][ T7264]  vfs_get_tree+0x8c/0x280
[  177.607834][ T7264]  do_new_mount+0x24b/0xa40
[  177.612400][ T7264]  __se_sys_mount+0x2e7/0x3d0
[  177.617140][ T7264]  ? __x64_sys_mount+0xc0/0xc0
[  177.621970][ T7264]  ? lockdep_hardirqs_on+0x98/0x150
[  177.627220][ T7264]  ? __x64_sys_mount+0x20/0xc0
[  177.632649][ T7264]  do_syscall_64+0x55/0xa0
[  177.637136][ T7264]  ? clear_bhb_loop+0x40/0x90
[  177.641867][ T7264]  ? clear_bhb_loop+0x40/0x90
[  177.646610][ T7264]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  177.652563][ T7264] RIP: 0033:0x7f858ff9c14a
[  177.657033][ T7264] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  177.676780][ T7264] RSP: 002b:00007f8590eebe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  177.685250][ T7264] RAX: ffffffffffffffda RBX: 00007f8590eebee0 RCX: 00007f858ff9c14a
[  177.693321][ T7264] RDX: 0000200000000100 RSI: 0000200000000000 RDI: 00007f8590eebea0
[  177.701435][ T7264] RBP: 0000200000000100 R08: 00007f8590eebee0 R09: 0000000022004002
[  177.709495][ T7264] R10: 0000000022004002 R11: 0000000000000246 R12: 0000200000000000
[  177.717515][ T7264] R13: 00007f8590eebea0 R14: 000000000000046c R15: 0000200000000040
[  177.725635][ T7264]  </TASK>
[  177.728711][ T7264] 
[  177.731089][ T7264] Allocated by task 6603:
[  177.735459][ T7264]  kasan_set_track+0x4e/0x70
[  177.740102][ T7264]  __kasan_slab_alloc+0x6c/0x80
[  177.745047][ T7264]  slab_post_alloc_hook+0x6e/0x4b0
[  177.750308][ T7264]  kmem_cache_alloc_lru+0x111/0x2d0
[  177.755573][ T7264]  reiserfs_alloc_inode+0x2a/0xc0
[  177.760661][ T7264]  iget5_locked+0xa2/0x260
[  177.765126][ T7264]  reiserfs_fill_super+0x11d7/0x23b0
[  177.770474][ T7264]  mount_bdev+0x221/0x2d0
[  177.774853][ T7264]  legacy_get_tree+0xea/0x180
[  177.779597][ T7264]  vfs_get_tree+0x8c/0x280
[  177.784062][ T7264]  do_new_mount+0x24b/0xa40
[  177.788649][ T7264]  __se_sys_mount+0x2e7/0x3d0
[  177.793906][ T7264]  do_syscall_64+0x55/0xa0
[  177.798379][ T7264]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  177.804333][ T7264] 
[  177.806697][ T7264] Last potentially related work creation:
[  177.812453][ T7264]  kasan_save_stack+0x3e/0x60
[  177.817186][ T7264]  __kasan_record_aux_stack+0xaf/0xc0
[  177.822625][ T7264]  call_rcu+0x153/0x950
[  177.826846][ T7264]  evict+0x835/0x8d0
[  177.830987][ T7264]  reiserfs_fill_super+0x1479/0x23b0
[  177.836343][ T7264]  mount_bdev+0x221/0x2d0
[  177.840730][ T7264]  legacy_get_tree+0xea/0x180
[  177.845465][ T7264]  vfs_get_tree+0x8c/0x280
[  177.849932][ T7264]  do_new_mount+0x24b/0xa40
[  177.854490][ T7264]  __se_sys_mount+0x2e7/0x3d0
[  177.859216][ T7264]  do_syscall_64+0x55/0xa0
[  177.863694][ T7264]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  177.869838][ T7264] 
[  177.872201][ T7264] Second to last potentially related work creation:
[  177.878836][ T7264]  kasan_save_stack+0x3e/0x60
[  177.883574][ T7264]  __kasan_record_aux_stack+0xaf/0xc0
[  177.889018][ T7264]  call_rcu+0x153/0x950
[  177.893328][ T7264]  evict+0x835/0x8d0
[  177.897375][ T7264]  reiserfs_fill_super+0x1479/0x23b0
[  177.902721][ T7264]  mount_bdev+0x221/0x2d0
[  177.907181][ T7264]  legacy_get_tree+0xea/0x180
[  177.911917][ T7264]  vfs_get_tree+0x8c/0x280
[  177.916385][ T7264]  do_new_mount+0x24b/0xa40
[  177.921117][ T7264]  __se_sys_mount+0x2e7/0x3d0
[  177.925970][ T7264]  do_syscall_64+0x55/0xa0
[  177.930447][ T7264]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  177.936384][ T7264] 
[  177.938748][ T7264] The buggy address belongs to the object at ffff88805e348000
[  177.938748][ T7264]  which belongs to the cache reiser_inode_cache of size 1568
[  177.953554][ T7264] The buggy address is located 1488 bytes inside of
[  177.953554][ T7264]  freed 1568-byte region [ffff88805e348000, ffff88805e348620)
[  177.967622][ T7264] 
[  177.969983][ T7264] The buggy address belongs to the physical page:
[  177.976529][ T7264] page:ffffea000178d200 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805e348000 pfn:0x5e348
[  177.988128][ T7264] head:ffffea000178d200 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  177.997195][ T7264] memcg:ffff888030ed5d01
[  178.001479][ T7264] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  178.009518][ T7264] page_type: 0xffffffff()
[  178.013901][ T7264] raw: 00fff00000000840 ffff888141aedc80 dead000000000122 0000000000000000
[  178.022545][ T7264] raw: ffff88805e348000 0000000080130012 00000001ffffffff ffff888030ed5d01
[  178.031167][ T7264] page dumped because: kasan: bad access detected
[  178.037671][ T7264] page_owner tracks the page as allocated
[  178.043427][ T7264] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 6390, tgid 6389 (syz.1.238), ts 120789379109, free_ts 27607089454
[  178.067831][ T7264]  post_alloc_hook+0x1c1/0x200
[  178.072661][ T7264]  get_page_from_freelist+0x1951/0x19e0
[  178.078266][ T7264]  __alloc_pages+0x1f0/0x460
[  178.082924][ T7264]  alloc_slab_page+0x5d/0x160
[  178.087705][ T7264]  new_slab+0x87/0x2d0
[  178.091839][ T7264]  ___slab_alloc+0xc5d/0x12f0
[  178.096765][ T7264]  kmem_cache_alloc_lru+0x1aa/0x2d0
[  178.102027][ T7264]  reiserfs_alloc_inode+0x2a/0xc0
[  178.107117][ T7264]  iget5_locked+0xa2/0x260
[  178.111593][ T7264]  reiserfs_fill_super+0x11d7/0x23b0
[  178.116941][ T7264]  mount_bdev+0x221/0x2d0
[  178.121413][ T7264]  legacy_get_tree+0xea/0x180
[  178.126150][ T7264]  vfs_get_tree+0x8c/0x280
[  178.130629][ T7264]  do_new_mount+0x24b/0xa40
[  178.135192][ T7264]  __se_sys_mount+0x2e7/0x3d0
[  178.139938][ T7264]  do_syscall_64+0x55/0xa0
[  178.144417][ T7264] page last free stack trace:
[  178.149126][ T7264]  free_unref_page_prepare+0x7b2/0x8c0
[  178.154652][ T7264]  free_unref_page+0x32/0x2e0
[  178.159412][ T7264]  free_contig_range+0xa1/0x150
[  178.164318][ T7264]  destroy_args+0x80/0x850
[  178.168790][ T7264]  debug_vm_pgtable+0x411/0x440
[  178.173698][ T7264]  do_one_initcall+0x242/0x790
[  178.178522][ T7264]  do_initcall_level+0x137/0x1f0
[  178.183538][ T7264]  do_initcalls+0x69/0xd0
[  178.187981][ T7264]  kernel_init_freeable+0x3ed/0x580
[  178.193259][ T7264]  kernel_init+0x1d/0x1c0
[  178.197659][ T7264]  ret_from_fork+0x48/0x80
[  178.202309][ T7264]  ret_from_fork_asm+0x11/0x20
[  178.207135][ T7264] 
[  178.209495][ T7264] Memory state around the buggy address:
[  178.215253][ T7264]  ffff88805e348480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  178.223551][ T7264]  ffff88805e348500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  178.231666][ T7264] >ffff88805e348580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  178.239775][ T7264]                                                  ^
[  178.246492][ T7264]  ffff88805e348600: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[  178.254616][ T7264]  ffff88805e348680: fc fc fc fc 00 00 00 00 00 00 00 00 00 00 00 00
[  178.262846][ T7264] ==================================================================
[  178.317131][ T7264] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  178.324408][ T7264] CPU: 0 PID: 7264 Comm: syz.1.621 Not tainted syzkaller #0
[  178.332013][ T7264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  178.342122][ T7264] Call Trace:
[  178.345540][ T7264]  <TASK>
[  178.348524][ T7264]  dump_stack_lvl+0x18c/0x250
[  178.353279][ T7264]  ? show_regs_print_info+0x20/0x20
[  178.358539][ T7264]  ? load_image+0x400/0x400
[  178.363115][ T7264]  panic+0x2dc/0x730
[  178.367062][ T7264]  ? bpf_jit_dump+0xd0/0xd0
[  178.371630][ T7264]  ? _raw_spin_unlock_irqrestore+0x111/0x120
[  178.377674][ T7264]  ? _raw_spin_unlock+0x40/0x40
[  178.382598][ T7264]  ? print_memory_metadata+0x314/0x400
[  178.388118][ T7264]  ? __ext4_iget+0x2c0/0x3f40
[  178.392990][ T7264]  check_panic_on_warn+0x84/0xa0
[  178.398018][ T7264]  ? __ext4_iget+0x2c0/0x3f40
[  178.402751][ T7264]  end_report+0x6f/0x130
[  178.407040][ T7264]  kasan_report+0x128/0x150
[  178.411576][ T7264]  ? __ext4_iget+0x2c0/0x3f40
[  178.416291][ T7264]  __ext4_iget+0x2c0/0x3f40
[  178.421107][ T7264]  ? free_unref_page+0x190/0x2e0
[  178.426133][ T7264]  ? apply_workqueue_attrs+0x180/0x180
[  178.431632][ T7264]  ? ext4_get_projid+0x140/0x140
[  178.436624][ T7264]  ext4_fill_super+0x5020/0x6790
[  178.441794][ T7264]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  178.448076][ T7264]  ? __might_sleep+0xe0/0xe0
[  178.452702][ T7264]  ? read_lock_is_recursive+0x20/0x20
[  178.458105][ T7264]  ? snprintf+0xe9/0x140
[  178.462376][ T7264]  ? down_read_killable+0x340/0x340
[  178.467601][ T7264]  ? setup_bdev_super+0x56b/0x660
[  178.472646][ T7264]  get_tree_bdev+0x3f3/0x520
[  178.477264][ T7264]  ? vfs_parse_fs_string+0x170/0x170
[  178.482576][ T7264]  ? ext4_parse_test_dummy_encryption+0xb0/0xb0
[  178.488847][ T7264]  ? setup_bdev_super+0x660/0x660
[  178.493897][ T7264]  ? apparmor_capable+0x137/0x1a0
[  178.498951][ T7264]  ? bpf_lsm_capable+0x9/0x10
[  178.503659][ T7264]  ? security_capable+0x89/0xb0
[  178.508553][ T7264]  vfs_get_tree+0x8c/0x280
[  178.512999][ T7264]  do_new_mount+0x24b/0xa40
[  178.517625][ T7264]  __se_sys_mount+0x2e7/0x3d0
[  178.522330][ T7264]  ? __x64_sys_mount+0xc0/0xc0
[  178.527131][ T7264]  ? lockdep_hardirqs_on+0x98/0x150
[  178.532358][ T7264]  ? __x64_sys_mount+0x20/0xc0
[  178.537152][ T7264]  do_syscall_64+0x55/0xa0
[  178.541596][ T7264]  ? clear_bhb_loop+0x40/0x90
[  178.546323][ T7264]  ? clear_bhb_loop+0x40/0x90
[  178.551023][ T7264]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  178.556973][ T7264] RIP: 0033:0x7f858ff9c14a
[  178.561408][ T7264] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  178.581033][ T7264] RSP: 002b:00007f8590eebe58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  178.589480][ T7264] RAX: ffffffffffffffda RBX: 00007f8590eebee0 RCX: 00007f858ff9c14a
[  178.597478][ T7264] RDX: 0000200000000100 RSI: 0000200000000000 RDI: 00007f8590eebea0
[  178.605480][ T7264] RBP: 0000200000000100 R08: 00007f8590eebee0 R09: 0000000022004002
[  178.613478][ T7264] R10: 0000000022004002 R11: 0000000000000246 R12: 0000200000000000
[  178.621560][ T7264] R13: 00007f8590eebea0 R14: 000000000000046c R15: 0000200000000040
[  178.629579][ T7264]  </TASK>
[  178.633188][ T7264] Kernel Offset: disabled
[  178.637526][ T7264] Rebooting in 86400 seconds..