last executing test programs:

2m28.167467199s ago: executing program 0 (id=1):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x1)
writev(r0, &(0x7f0000000200)=[{&(0x7f0000000340)="a4eac9fdf22484d4a8dcdbbbb49d5807138a80a2d8cca50db79c6d29", 0x1c}], 0x1)

2m28.020048394s ago: executing program 0 (id=22):
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000080)='./file0\x00', 0x3000450, &(0x7f0000005f80)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2, 0x5576, &(0x7f00000069c0)="$eJzs3E2LW+UXAPCTycz039f/IC7c9UIRZqAZmukLuqva4gu2FF8WrjQzSUPaSe4wSdOxK0GX4sJvIgquBDd+Bheu3YkLxZ2g5D43rbVVW5Im0/b3g5tz75MnJ+e5hAnn3iEBPLVWst9+qcSxOBgR1Yg4Uoliv1JuhfMpPBcRxyNi4S9bpRy/PbAcEYci4tgoecS3/TRn9NTnJ4cnzv78xq/ffH9g8fAXX/8wv1UD8/Z8RHR30v7Nbop5O8Vr5Xhj2Cli98ywjOmJ7vXyOE/xZmuzyHCzMZ7XKOLpdpqf79zoj+LV7cbWKLY7V4vxnV56w/6wPc5TvOBaY7c4brY2i9jp50Vs30p17d1Kfy9v9QcpT7PM92GRPgaDcUzjrb1WWs/O9SJu9VbK8ZQ3b7b2RnFYxvLtYivfbhZ1bE5ypve3Nzu9G3vZsLXb7+S97Ox6/YX1+rlafTdvtgatM7VGt3nuTLba3h5Nqw1aje75dp63t1vrW3l3LVttb23V6vVs9UJrs9PoZfX6+un1U7Wza+XeyezVy+9m281sdRRf7vRuLHe2+9nVfDdLr1jLNtZPv7iWnahnb1+6kl156+LFS1feef/Ce5dfuvT6K+Wke8rKVjdObWzU6qdqG/W1fbD+0ffuA65/MMn6PymLfoj1VyY7PfDvfMAAHto9/X9Mt/+vhv4fuNfj3v/HRP3/oBwv+/9RS6X//+/+d+F2/1t+K8VD9/8T9b/7tf9//Na/ONlZg5L+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgqfXj0pevFTsr6fhwOX60HHqmPK5ExEJE/HEf1Vi+K2e1zLP0D/OX/lbDd5UoMoze40C5HYqI8+X2+/8f9VkAAACAJ9dXHx3/LHXr6WHl/tOqs62KGUkXbRaOfDClfJWIWFr5aUrZFkYPz04pWfEZXoy9KWUrLmD9b0rJ0iW3xWlleyDVcfj46J3BYkGVFBZmWg4AADAT1bvCbLsQAAAAZunTeRfAfFRifCtzfC+4+M/7O7c2D6bj5blUBwAAAExDZd4FAAAAAI9c0f/7/T8AAAB4sqXf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5k535u1AaiOAA/Gwzkn4Ki3NNKblBGSsgxx0ABaYISSAtpgBrILfdcVrDCHiF5haXVMl4L9H2Sx4yNfp4BLm8sDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH36W22Xv39++XVtzuF4nTyzAQAAAC7ZV9tl/WLe9N+l4x/SoU+pX0REGRGXavdRTFqZo5RTdby/ejKGPxF1wuka07S9jYivaXv42DX6ScZPAgAAAO7Tbr1ZNNV608yHHhCvqVk8Kd9/y5RXREQ1/5cprTw1nzOF1b/vcfzIlFYvYM0yhTVLbuPL53pa4Bq1dmkms1X9Jda9sp/rAgAAQ2pXAh1VCAAAAHfg+9ADYBjFuTnfZ5w2u3RD8E2rBwAAANygYugBAAAAAL2r6/9beP7ff39LAAAAgBdrnv8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAn/bVdrlbbxZd51fPzDkcr5NvRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/szz0KhEAYA9Ds4m8nc//DSkRLa5v3YCAkTPEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8+d0v/ydczZFkatswtx5Jlk4Na6eGrXPD3g/j62sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJP9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC/63S//J6bGmWTutLF0PJKsXTW2rhp7DxpHD8bbvwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+/dto4oDAP712ef+AEQIKEMAFYkBFpq4paUjDKCIgT8BKUqdEnAptBloFYGywIQyd0EwIoQEClv/h86N1KVsHTIEibnoznfptXWJKc2dm34+0vP72r6+933nU+Vv3iUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQ2n4vXkmKuJ09TA3j8rUbO2tLWb91X5+5tnFzNmtZ3Nprou/effzJT7ZXq0+OzVSefFN/MgAAADwd2mV9HxG30s2FrE+m8vo/LY/Jav4fnxvGZT1/f92/tbN2uHhrtqz///j99ku7E00N58kGXV4Z9OcfTKWzT0uceM/veUQnP/P5z17a+QeSfLj+4naan8/W99evv9/Nw0N1ZAsAPIrjRX+n+DJVfh/K+l6TiQFwYOy1/96pFN5l/d+e2v+8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJq2vR7PlHErImY7d+PM1s7a0qj+2sbN2bKdvnp1ozpmNkQaEcsrg35a41om3aXLVz5bHAz6F0cGEQ996/8HxyJif0Z+SBAj3vp4jH8e8e/HFJdn1LOK/xa0JiONRoOk+HyKV7r1XnX7G5TX3uMfuaH/kAAAOLDSomV1/a10cyF7rTUdceene+v/NypxjFn/3/7k9I3qXNX6v1fbCiff3Or5L+YuXb7y1sr5xXP9c/3P3z7Re6d38sypU2fmsnM1P7ccSX++6TQBAAB4gnWLVq3/k+kH9/+PVuIYs/7/8ofe19W52ur/ke5u+jWdCQAAwNOouxu98Nrff7VGHNHqduOrxdXVi73h4+7zE8PHWtN9RIeKVq3/29NNZwUAAADUYXu9dc/+/9lKHGPu/z/788u/VsdsR8SRiAsR0T++dGFwtr7lTLQ6flE5n6jb9EoBAABoypGiVff/0/z+/2T3lockIt58fRiXf+tqnPq//cG3v1Tnqt7/f7K+JU6kZGZ4PvJ+JqIz03RGAAAAHGSHi5YV+3+mmwuf/nb0o677/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADq9k8AAAD//4cfM04=")
quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

2m26.148716881s ago: executing program 0 (id=56):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xd9d}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0)

2m25.531814363s ago: executing program 0 (id=70):
syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000040)='./file0\x00', 0x1008408, &(0x7f0000000ac0)=ANY=[@ANYBLOB='nojoliet,dmode=0x000000007fffffff,dmode=0x0000000000000009,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,hide,nocompress,utf8,norock,overriderockperm,mode=0xffffffffffffffff,cruft,map=off,iocharset=macinuit,fund=BPRM_CHECK,\x00', @ANYRESDEC], 0xff, 0x5ac, &(0x7f0000002940)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)

2m25.110605865s ago: executing program 0 (id=81):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743d170ddbbba28854f76e642c756d61736b3d30303030303030303030303030303030303030303030362c696f636861727365743d63703934392c6572726f72733d72656d6f756e742d726f2c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000000003,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,discard,errors=continue,\x00'], 0x5, 0x1510, &(0x7f00000037c0)="$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")
creat(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6a55c0c4ada8324e)

2m24.578704579s ago: executing program 0 (id=96):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f000000d740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46890}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f000000d600)=[@rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x18, 0x20000010}}], 0x2, 0x0)

2m24.46281627s ago: executing program 32 (id=96):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f000000d740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46890}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f000000d600)=[@rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}], 0x18, 0x20000010}}], 0x2, 0x0)

1m59.795833663s ago: executing program 1 (id=530):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0x1b, 0x4e20, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}}, 0x38)

1m59.568396695s ago: executing program 1 (id=534):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x4}]}}}]}, 0x44}}, 0x0)

1m59.397860773s ago: executing program 1 (id=546):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000180081074e81f782db4cb904021d0800fe007c05e8fe55a10a0015000400142603600e12080005007f370401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)

1m59.294595853s ago: executing program 1 (id=538):
syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000040)='./file0\x00', 0x1008408, &(0x7f0000000ac0)=ANY=[@ANYBLOB='nojoliet,dmode=0x000000007fffffff,dmode=0x0000000000000009,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,hide,nocompress,utf8,norock,overriderockperm,mode=0xffffffffffffffff,cruft,map=off,iocharset=macinuit,fund=BPRM_CHECK,\x00', @ANYRESDEC], 0xff, 0x5ac, &(0x7f0000002940)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)

1m58.92853701s ago: executing program 1 (id=545):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000100)=@multiplanar_fd={0x4, 0x3, 0x4, 0x20, 0x7f, {0x0, 0xea60}, {0x1, 0x1, 0x1, 0xb6, 0x0, 0xd, "940d1383"}, 0x6, 0x4, {0x0}, 0x8})

1m58.446562538s ago: executing program 1 (id=550):
setresuid(0x0, 0xee01, 0xffffffffffffffff)
setpriority(0x2, 0x0, 0xffffffffffffffcd)

1m58.172834105s ago: executing program 33 (id=550):
setresuid(0x0, 0xee01, 0xffffffffffffffff)
setpriority(0x2, 0x0, 0xffffffffffffffcd)

3.536505915s ago: executing program 4 (id=3084):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x4, 0xc, "bc8506", 0x1, 0x5})
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcd, 0x8e, 0x6c, 0x40, 0x403, 0x8348, 0x1f, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe5, 0x0, 0x0, 0x9, 0xf9, 0x26}}]}}]}}, 0x0)

2.78684701s ago: executing program 3 (id=3101):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0xa}, 0xc0)

2.709340228s ago: executing program 3 (id=3103):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x38}, 0x2, 0x34005}, 0x0)

2.638330865s ago: executing program 2 (id=3104):
syz_clone(0x0, &(0x7f0000000040)="ff1a27747d127e0a9059551dcb13f60808f0b7c319ed4e15be057bea91b0635e0384b966281ba2669996c3e9a97c16ab1ef0adb6f31dc37fdbd8cd53a6179fef129a923af7baba4ac2cfd7f4963d675e901f8fad8276139c112be19397da7dfbde8d26e323192e66a4fc76cc58903911b6362deec276a390f2137fd332d1c7b497035111cbbdeeaf667382708759146a3411426a45c1c8", 0x97, 0x0, &(0x7f0000000240), 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0655845e0050000000000008877fb88a81516e000000144080511b180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c)

2.637898875s ago: executing program 3 (id=3106):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0xcc, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0xa0, 0x4, 0x0, 0x1, [{0x9c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x8c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_BITWISE_DATA={0x68, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "18"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VALUE={0x18, 0x1, "05f1fc34e7c1f59c25a27b54188f97a37a2bc83d6c4735dc5469d9f2d37be77810ce71583f7335fa1057f21d79b09851823590809aa2e64d2bcc8b"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xf4}}, 0x0)

2.521156427s ago: executing program 3 (id=3108):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000006c0)='./file0\x00', 0x4000, &(0x7f000009f300)=ANY=[@ANYBLOB="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"], 0xfd, 0x652, &(0x7f0000000700)="$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")
r0 = open(&(0x7f0000000080)='.\x00', 0x0, 0x120)
getdents64(r0, 0xfffffffffffffffe, 0x41)

2.430599876s ago: executing program 2 (id=3109):
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c)
setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000400)=0xf0000000, 0x4)

2.305314539s ago: executing program 3 (id=3110):
syz_80211_inject_frame(0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=@newlink={0x4c, 0x10, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0xa482, 0xec5, 0x1}}]}]}]}, 0x4c}}, 0x0)

2.238687955s ago: executing program 2 (id=3112):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f03fffffff5000000000000000100000000000000"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

2.073360682s ago: executing program 2 (id=3113):
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001ac0)={0x20, r0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x24080844)

1.963914003s ago: executing program 2 (id=3114):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1.665411593s ago: executing program 5 (id=3117):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82)
r1 = dup(r0)
read$eventfd(r1, &(0x7f0000002300), 0x8)

1.538700005s ago: executing program 3 (id=3120):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xa, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, ' '}, @main=@item_012={0x2, 0x0, 0x8, "e6ad"}, @local=@item_012={0x1, 0x2, 0x7, '$'}]}}, 0x0}, 0x0)

1.49302732s ago: executing program 5 (id=3122):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000004480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x145)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000180)={0x1fffffffe000, 0xffffffffffffffff, 0x3, 0x1})

1.413714868s ago: executing program 2 (id=3123):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x32b682, 0x0)
fadvise64(r0, 0x3, 0x3, 0x5)

959.988163ms ago: executing program 4 (id=3127):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)={0x24, r1, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x24}}, 0x0)

821.614907ms ago: executing program 4 (id=3128):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x804, &(0x7f0000000800)={[{@uni_xlateno}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@utf8no}, {@shortname_winnt}, {@utf8}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@fat=@check_strict}, {@shortname_win95}, {@shortname_winnt}, {@uni_xlateno}, {@utf8no}, {@rodir}]}, 0x1, 0x28d, &(0x7f0000000cc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x6)
getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9)

820.390798ms ago: executing program 6 (id=3129):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a1000, 0x0)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000580), 0x48000, 0x0)
close_range(r0, r1, 0x0)

652.820794ms ago: executing program 4 (id=3130):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000340), 0x8)
shutdown(r0, 0x0)

627.682327ms ago: executing program 6 (id=3131):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0)

582.549621ms ago: executing program 5 (id=3132):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001900)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x20, 0x111, 0x0, 0x1, {0x1c, 0x5, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x14, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x18}]}]}]}]}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8014}, 0x14)

527.626587ms ago: executing program 6 (id=3133):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x40}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10)
writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="0ccc3611", 0x4}], 0x1)

445.926405ms ago: executing program 5 (id=3134):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000280)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x7c5, 0x1, 0x3, 0xd59f80, 0x4, 0x5, 0xb, 0xb, 0x5, 0x720, 0xe72, 0x7, 0x5, 0xa, 0x13, {0xffffffff, 0x7}, 0x3, 0xec}})

366.567283ms ago: executing program 4 (id=3135):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c00f40e1400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c00aab971573", 0x32}, {&(0x7f0000000180)="7cdb015fbb1990a28714976a2615837b64", 0x11}, {&(0x7f0000001980)="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", 0xed0}], 0x3}, 0x24000008)

366.289153ms ago: executing program 6 (id=3136):
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000080)={0x2}, 0x8, 0x800)
msgrcv(r0, 0x0, 0x0, 0x2, 0x5800)

325.693577ms ago: executing program 5 (id=3137):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3)
ioctl$TIOCSSOFTCAR(r0, 0x80047437, &(0x7f0000000140)=0x10)

300.40407ms ago: executing program 6 (id=3138):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4, &(0x7f0000000340)={[{@uid}, {@type={'type', 0x3d, "0142bc05"}}, {@type={'type', 0x3d, ' qs!'}}, {@barrier}, {@uid}, {@force}, {@gid}, {@nls={'nls', 0x3d, 'koi8-ru'}}, {@nobarrier}, {@creator={'creator', 0x3d, "ef6a7415"}}]}, 0xfc, 0x6e0, &(0x7f0000000580)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000140))

282.807782ms ago: executing program 4 (id=3139):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)

198.01522ms ago: executing program 5 (id=3140):
syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000015c0)='./file0\x00', 0x4000, &(0x7f0000003a40), 0x0, 0x559e, &(0x7f000000ac40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000001600)={{r0}, 0x0, 0x4, @inherit={0x0, 0x0}, @subvolid=0x6})

0s ago: executing program 6 (id=3141):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$sock_linger(r0, 0x1, 0x47, &(0x7f0000000740), &(0x7f0000000780)=0x8)

kernel console output (not intermixed with test programs):

0002: unknown main item tag 0x0
[  134.281005][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.301024][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.316500][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.324579][ T7895] netlink: 'syz.6.1367': attribute type 32 has an invalid length.
[  134.348548][ T7879] EXT4-fs warning (device loop4): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-13, ino=4). Please run e2fsck to fix.
[  134.384596][ T7879] EXT4-fs (loop4): mount failed
[  134.390852][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.429586][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.459155][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.461014][ T7902] netlink: 'syz.5.1370': attribute type 21 has an invalid length.
[  134.479293][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.484853][ T7902] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1370'.
[  134.504623][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.525545][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.545978][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.555663][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.563171][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.570548][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578064][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578089][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578109][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578130][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578150][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578171][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578192][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578213][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578233][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578255][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578275][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578296][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578317][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578337][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578357][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578377][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578398][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578418][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578439][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578460][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578480][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578500][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578519][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578539][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578558][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578578][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578598][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578619][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578639][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578659][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578679][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578700][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578719][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578740][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578760][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578781][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578800][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578821][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578841][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578861][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578880][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578900][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578928][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578949][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578969][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.578990][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.579010][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.579030][ T4254] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  134.588580][ T4254] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz1
[  134.620096][ T7911] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  134.810524][ T7918] netlink: 4568 bytes leftover after parsing attributes in process `syz.2.1376'.
[  134.907066][ T7912] fido_id[7912]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  134.918388][ T7879] loop4: detected capacity change from 0 to 1024
[  135.014028][ T7879] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  135.227814][ T7925] IPv6: NLM_F_CREATE should be specified when creating new route
[  135.375113][ T7925] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1380'.
[  135.541102][ T7942] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock
[  135.736582][ T7952] loop3: detected capacity change from 0 to 1024
[  135.749065][ T7954] loop6: detected capacity change from 0 to 512
[  135.808469][ T7952] EXT4-fs (loop3): #clusters per group too big: 24576
[  135.817746][ T7954] EXT4-fs (loop6): Ignoring removed oldalloc option
[  135.851180][ T7954] EXT4-fs (loop6): Ignoring removed bh option
[  135.879962][ T7959] loop5: detected capacity change from 0 to 256
[  135.887309][ T7954] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b80ee02c, mo2=0002]
[  135.922172][ T7954] System zones: 1-12
[  135.927251][ T7954] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1394: invalid indirect mapped block 1 (level 1)
[  135.942876][ T7954] EXT4-fs (loop6): Remounting filesystem read-only
[  135.949425][ T7954] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1394: invalid indirect mapped block 7 (level 2)
[  135.972492][ T7959] exfat: Deprecated parameter 'namecase'
[  135.978912][ T7959] exfat: Deprecated parameter 'utf8'
[  135.990475][ T7954] EXT4-fs (loop6): Remounting filesystem read-only
[  136.007580][ T7962] device bond1 entered promiscuous mode
[  136.030261][ T7959] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[  136.047181][ T7954] EXT4-fs (loop6): 1 truncate cleaned up
[  136.097012][ T7969] loop4: detected capacity change from 0 to 64
[  136.099252][ T7927] loop2: detected capacity change from 0 to 32768
[  136.120102][ T7954] EXT4-fs (loop6): mounted filesystem without journal. Opts: oldalloc,min_batch_time=0x0000000000000059,min_batch_time=0x0000000000000000,errors=remount-ro,jqfmt=vfsv0,inode_readahead_blks=0x0000000001000000,max_batch_time=0x0000000000000001,usrquota,data_err=abort,bh,journal_ioprio=0. Quota mode: writeback.
[  136.283965][ T7979] loop3: detected capacity change from 0 to 64
[  136.303094][ T7927] XFS (loop2): Mounting V5 Filesystem
[  136.650868][ T7927] XFS (loop2): Ending clean mount
[  136.781138][ T4254] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  136.785759][ T8009] device bridge2 entered promiscuous mode
[  136.907873][ T4196] XFS (loop2): Unmounting Filesystem
[  137.023851][ T4254] usb 7-1: Using ep0 maxpacket: 16
[  137.024241][ T8021] loop4: detected capacity change from 0 to 1024
[  137.101091][ T4271] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  137.174270][ T8027] xt_hashlimit: Unknown mode mask 80FF, kernel too old?
[  137.311328][ T4254] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  137.320408][ T4254] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.371892][ T4254] usb 7-1: Product: syz
[  137.376079][ T4254] usb 7-1: Manufacturer: syz
[  137.381191][ T4271] usb 6-1: Using ep0 maxpacket: 32
[  137.400749][ T4254] usb 7-1: SerialNumber: syz
[  137.417428][ T4254] usb 7-1: config 0 descriptor??
[  137.433346][ T8038] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1432'.
[  137.504593][ T4271] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  137.523153][ T4271] usb 6-1: config 0 has no interface number 0
[  137.681431][ T4254] speedtch 7-1:0.0: speedtch_bind: data interface not found!
[  137.697424][ T4254] speedtch 7-1:0.0: usbatm_usb_probe: bind failed: -19!
[  137.705965][ T4271] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  137.716619][ T4271] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.736731][ T4271] usb 6-1: Product: syz
[  137.746851][ T4271] usb 6-1: Manufacturer: syz
[  137.756983][ T4271] usb 6-1: SerialNumber: syz
[  137.776713][ T4271] usb 6-1: config 0 descriptor??
[  137.832930][ T4271] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  137.847511][ T4271] usb 6-1: selecting invalid altsetting 1
[  137.868436][ T4271] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  137.888420][ T4271] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  137.924206][   T26] usb 7-1: USB disconnect, device number 6
[  137.932330][ T4271] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  137.959495][ T4271] usb 6-1: media controller created
[  137.975795][ T8071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1447'.
[  138.003891][ T8075] netlink: 'syz.2.1449': attribute type 1 has an invalid length.
[  138.018593][ T4271] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  138.121221][ T4271] usb 6-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)...
[  138.141161][ T4271] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered.
[  138.221188][ T8091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1456'.
[  138.287191][ T4271] DVB: Unable to find symbol mxl5005s_attach()
[  138.301248][ T8096] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.341254][ T4271] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  138.439972][ T4271] usb 6-1: USB disconnect, device number 8
[  138.526239][ T8102] loop4: detected capacity change from 0 to 4096
[  138.630461][ T8102] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  138.658478][ T8102] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing.
[  138.684055][ T8102] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  138.732423][ T8102] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  138.784800][ T8102] ntfs: volume version 3.1.
[  138.993099][ T8133] loop2: detected capacity change from 0 to 4096
[  139.007091][ T8141] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1481'.
[  139.088720][ T8133] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  139.185813][ T8149] loop3: detected capacity change from 0 to 512
[  139.255520][ T8149] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  139.272578][ T4196] ntfs3: loop2: ntfs_sync_fs r=9 failed, -22.
[  139.273719][ T4196] ntfs3: loop2: ntfs_evict_inode r=9 failed, -22.
[  139.326898][ T8161] netlink: 'syz.2.1488': attribute type 1 has an invalid length.
[  139.415410][ T8161] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1488'.
[  139.430851][ T8149] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1485: couldn't read orphan inode 26 (err -116)
[  139.431495][ T8149] EXT4-fs (loop3): Remounting filesystem read-only
[  139.431516][ T8149] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,jqfmt=vfsv0,nolazytime,journal_ioprio=0x0000000000000003,dax=never,barrier,. Quota mode: writeback.
[  139.431614][ T8149] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.501223][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1491'.
[  139.646544][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1491'.
[  139.831592][ T8183] netlink: 'syz.6.1500': attribute type 33 has an invalid length.
[  139.831615][ T8183] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1500'.
[  140.313326][ T8207] loop5: detected capacity change from 0 to 2048
[  140.445235][ T8207] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  140.516822][ T8225] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  140.535229][ T8227] netlink: 'syz.4.1521': attribute type 2 has an invalid length.
[  140.697012][ T8187] loop3: detected capacity change from 0 to 32768
[  140.738143][ T8235] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1523'.
[  140.877757][ T8187] XFS (loop3): Mounting V5 Filesystem
[  140.890060][ T8258] loop5: detected capacity change from 0 to 64
[  140.991894][ T8253] XFS (nullb0): Invalid superblock magic number
[  141.084284][ T8187] XFS (loop3): Ending clean mount
[  141.096836][ T8187] XFS (loop3): Quotacheck needed: Please wait.
[  141.270758][ T8187] XFS (loop3): Quotacheck: Done.
[  141.370424][ T8285] loop2: detected capacity change from 0 to 136
[  141.389660][ T4189] XFS (loop3): Unmounting Filesystem
[  141.439874][ T8285] iso9660: Corrupted directory entry in block 2 of inode 1472
[  141.580075][ T8293] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1547'.
[  141.611210][ T4271] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  141.724125][ T8301] ieee802154 phy0 wpan0: encryption failed: -22
[  141.981338][ T4271] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.001015][ T4271] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.060644][ T4271] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  142.060694][ T4271] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  142.060719][ T4271] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.066718][ T4271] usb 7-1: config 0 descriptor??
[  142.101684][ T4271] hub 7-1:0.0: USB hub found
[  142.169307][ T8328] loop4: detected capacity change from 0 to 64
[  142.190151][ T8330] program syz.3.1563 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  142.190364][ T8330] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  142.211097][ T8328] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  142.321121][ T4271] hub 7-1:0.0: 14 ports detected
[  142.349855][ T4271] hub 7-1:0.0: insufficient power available to use all downstream ports
[  142.496082][ T8343] loop3: detected capacity change from 0 to 764
[  142.541253][ T4271] hub 7-1:0.0: hub_hub_status failed (err = -71)
[  142.541366][ T4271] hub 7-1:0.0: config failed, can't get hub status (err -71)
[  142.565594][ T8343] rock: directory entry would overflow storage
[  142.565602][ T8343] rock: sig=0x5850, size=36, remaining=7
[  142.581748][ T4271] usb 7-1: USB disconnect, device number 7
[  142.801432][ T8360] usb usb9: usbfs: interface 0 claimed by hub while 'syz.5.1577' sets config #0
[  142.904272][ T8367] netlink: 22 bytes leftover after parsing attributes in process `syz.4.1580'.
[  142.904300][ T8367] netlink: 22 bytes leftover after parsing attributes in process `syz.4.1580'.
[  142.904317][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1580'.
[  143.150260][ T8380] netlink: 'syz.6.1586': attribute type 1 has an invalid length.
[  143.356650][ T8388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1590'.
[  143.421708][ T8395] loop6: detected capacity change from 0 to 2048
[  143.544881][ T8395] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  143.760166][ T8373] loop3: detected capacity change from 0 to 32768
[  143.776074][ T8411] loop6: detected capacity change from 0 to 8
[  143.815244][ T8415] loop4: detected capacity change from 0 to 164
[  143.823110][ T8411] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  143.830472][ T8417] loop2: detected capacity change from 0 to 256
[  143.852820][ T8373] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  143.884905][ T4487] udevd[4487]: incorrect cramfs checksum on /dev/loop6
[  143.899175][ T8411] cramfs: Error -3 while decompressing!
[  143.924745][ T8373] (syz.3.1583,8373,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8
[  143.928297][ T8394] loop5: detected capacity change from 0 to 32768
[  143.954042][ T8417] FAT-fs (loop2): Directory bread(block 64) failed
[  143.967401][ T8411] cramfs: ffffffff961ed0a8(26)->ffff888073da4000(4096)
[  143.974883][ T8417] FAT-fs (loop2): Directory bread(block 65) failed
[  143.994850][ T4190] iso9660: Corrupted directory entry in block 2 of inode 1920
[  144.002011][ T4487] udevd[4487]: incorrect cramfs checksum on /dev/loop6
[  144.010543][ T8411] cramfs: Error -3 while decompressing!
[  144.017582][ T8417] FAT-fs (loop2): Directory bread(block 66) failed
[  144.024487][ T8373] (syz.3.1583,8373,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2
[  144.033546][ T8411] cramfs: ffffffff961ed0c2(26)->ffff888073da5000(4096)
[  144.033593][ T8394] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  144.041451][ T8417] FAT-fs (loop2): Directory bread(block 67) failed
[  144.060899][ T4190] iso9660: Corrupted directory entry in block 2 of inode 1920
[  144.069146][ T8373] (syz.3.1583,8373,1):ocfs2_mknod:298 ERROR: status = -2
[  144.076194][ T8417] FAT-fs (loop2): Directory bread(block 68) failed
[  144.076228][ T8417] FAT-fs (loop2): Directory bread(block 69) failed
[  144.076291][ T8417] FAT-fs (loop2): Directory bread(block 70) failed
[  144.083342][ T8373] (syz.3.1583,8373,1):ocfs2_mknod:502 ERROR: status = -2
[  144.089475][ T8411] cramfs: Error -3 while decompressing!
[  144.096190][ T8373] (syz.3.1583,8373,1):ocfs2_create:676 ERROR: status = -2
[  144.111050][ T4487] udevd[4487]: incorrect cramfs checksum on /dev/loop6
[  144.124987][ T8417] FAT-fs (loop2): Directory bread(block 71) failed
[  144.131785][ T8417] FAT-fs (loop2): Directory bread(block 72) failed
[  144.138356][ T8417] FAT-fs (loop2): Directory bread(block 73) failed
[  144.155787][ T8411] cramfs: ffffffff961ed0a8(26)->ffff888073da4000(4096)
[  144.168300][   T25] audit: type=1800 audit(1763500202.177:5): pid=8411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1599" name="file2" dev="loop6" ino=348 res=0 errno=0
[  144.247622][ T8394] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  144.270349][ T8425] kAFS: unparsable volume name
[  144.374137][   T25] audit: type=1800 audit(1763500202.377:6): pid=8417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1602" name="file2" dev="loop2" ino=1048607 res=0 errno=0
[  144.395623][ T8394] (syz.5.1593,8394,1):ocfs2_find_entry:1075 ERROR: status = -117
[  144.434880][ T4189] ocfs2: Unmounting device (7,3) on (node local)
[  144.461978][ T8394] (syz.5.1593,8394,1):ocfs2_find_entry:1075 ERROR: status = -117
[  144.503977][ T8394] (syz.5.1593,8394,1):ocfs2_symlink:2065 ERROR: status = -117
[  144.698746][ T4524] ocfs2: Unmounting device (7,5) on (node local)
[  144.763786][ T8446] loop2: detected capacity change from 0 to 256
[  144.898062][ T8446] FAT-fs (loop2): Directory bread(block 64) failed
[  144.929016][ T8446] FAT-fs (loop2): Directory bread(block 65) failed
[  144.941096][ T8446] FAT-fs (loop2): Directory bread(block 66) failed
[  144.982002][ T8446] FAT-fs (loop2): Directory bread(block 67) failed
[  145.020785][ T8446] FAT-fs (loop2): Directory bread(block 68) failed
[  145.039995][ T8446] FAT-fs (loop2): Directory bread(block 69) failed
[  145.079212][ T8446] FAT-fs (loop2): Directory bread(block 70) failed
[  145.110705][ T8446] FAT-fs (loop2): Directory bread(block 71) failed
[  145.123137][ T8446] FAT-fs (loop2): Directory bread(block 72) failed
[  145.136923][ T8446] FAT-fs (loop2): Directory bread(block 73) failed
[  145.321133][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1627'.
[  145.415662][ T8473] loop4: detected capacity change from 0 to 2048
[  145.455362][ T8477] loop3: detected capacity change from 0 to 64
[  145.532517][ T8477] attempt to access beyond end of device
[  145.532517][ T8477] loop3: rw=0, want=268435470, limit=64
[  145.565655][ T8477] Buffer I/O error on dev loop3, logical block 134217734, async page read
[  145.625848][ T8481] loop2: detected capacity change from 0 to 8
[  145.659166][ T8481] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  145.673629][ T4176] udevd[4176]: incorrect cramfs checksum on /dev/loop2
[  145.688648][ T8481] cramfs: Error -3 while decompressing!
[  145.714560][ T8481] cramfs: ffffffff961f10c2(26)->ffff888056165000(4096)
[  145.735408][ T4487] udevd[4487]: incorrect cramfs checksum on /dev/loop2
[  145.773396][ T8481] cramfs: Error -3 while decompressing!
[  145.813260][ T8481] cramfs: ffffffff961f10dc(16)->ffff888058ef0000(4096)
[  145.837923][ T4487] udevd[4487]: incorrect cramfs checksum on /dev/loop2
[  145.855681][ T8481] cramfs: Error -3 while decompressing!
[  145.878021][ T8481] cramfs: ffffffff961f10c2(26)->ffff888056165000(4096)
[  145.900926][   T25] audit: type=1800 audit(1763500203.907:7): pid=8481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1629" name="file2" dev="loop2" ino=348 res=0 errno=0
[  146.114059][ T8496] loop2: detected capacity change from 0 to 64
[  146.254391][ T8503] loop3: detected capacity change from 0 to 256
[  146.299747][ T8479] loop5: detected capacity change from 0 to 32768
[  146.344238][ T8503] FAT-fs (loop3): Directory bread(block 64) failed
[  146.369719][ T8503] FAT-fs (loop3): Directory bread(block 65) failed
[  146.382706][ T8503] FAT-fs (loop3): Directory bread(block 66) failed
[  146.394916][ T8515] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  146.421113][ T8503] FAT-fs (loop3): Directory bread(block 67) failed
[  146.428060][ T8503] FAT-fs (loop3): Directory bread(block 68) failed
[  146.435670][ T8503] FAT-fs (loop3): Directory bread(block 69) failed
[  146.464872][ T8503] FAT-fs (loop3): Directory bread(block 70) failed
[  146.493294][ T8503] FAT-fs (loop3): Directory bread(block 71) failed
[  146.500017][ T8503] FAT-fs (loop3): Directory bread(block 72) failed
[  146.505109][ T8479] XFS (loop5): Mounting V5 Filesystem
[  146.506876][ T8503] FAT-fs (loop3): Directory bread(block 73) failed
[  146.632430][ T8479] XFS (loop5): Ending clean mount
[  146.824229][ T4524] XFS (loop5): Unmounting Filesystem
[  146.901621][ T8542] netlink: 'syz.6.1658': attribute type 13 has an invalid length.
[  147.112037][ T8547] loop4: detected capacity change from 0 to 2048
[  147.178648][ T8547] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  147.426796][ T8568] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1672'.
[  147.569340][ T8577] loop6: detected capacity change from 0 to 256
[  147.861149][ T8599] UBIFS error (pid: 8599): cannot open "(null)", error -22
[  148.398243][ T8587] loop4: detected capacity change from 0 to 32768
[  148.401116][   T13] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  148.515132][ T8587] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  148.589786][ T8587] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  148.634288][  T144] (kworker/u4:1,144,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  148.681218][   T13] usb 3-1: Using ep0 maxpacket: 8
[  148.811224][   T13] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  148.830177][   T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  148.871679][   T13] usb 3-1: config 0 has no interface number 0
[  148.879599][   T13] usb 3-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75
[  148.891698][   T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.911964][   T13] usb 3-1: config 0 descriptor??
[  148.952843][ T4190] ocfs2: Unmounting device (7,4) on (node local)
[  148.997604][ T8667] tmpfs: Bad value for 'mpol'
[  149.207371][ T8679] loop5: detected capacity change from 0 to 1024
[  149.371170][   T13] usb 3-1: USB disconnect, device number 8
[  149.434064][ T8693] netlink: 'syz.3.1734': attribute type 3 has an invalid length.
[  149.443981][ T8691] loop6: detected capacity change from 0 to 512
[  149.465517][ T8693] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1734'.
[  149.477730][ T8696] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«=
[  149.492712][ T8696] [U] J"—e:ÀÆ"


[  149.507203][ T8691] EXT4-fs (loop6): Test dummy encryption mode enabled
[  149.521855][ T8691] EXT4-fs (loop6): Mount option "nouser_xattr" will be removed by 3.5
[  149.521855][ T8691] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  149.521855][ T8691] 
[  149.581802][ T8691] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  149.606036][ T8703] loop4: detected capacity change from 0 to 1764
[  149.667194][ T8691] EXT4-fs (loop6): 1 truncate cleaned up
[  149.696424][ T8691] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,noauto_da_alloc,max_batch_time=0x0000000000000af2,nodioread_nolock,nouser_xattr,grpjquota=,nodiscard,nodioread_nolock,grpquota,minixdf,,errors=continue. Quota mode: writeback.
[  149.726587][ T8703] iso9660: Corrupted directory entry in block 2 of inode 1920
[  149.751115][ T4271] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  149.806798][ T8713] loop3: detected capacity change from 0 to 512
[  149.856217][ T8713] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1741: bg 0: block 248: padding at end of block bitmap is not set
[  149.909204][ T8713] Quota error (device loop3): write_blk: dquota write failed
[  149.939766][ T8713] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  149.950243][ T8713] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.1741: Failed to acquire dquot type 1
[  149.997254][ T8721] Cannot find add_set index 3 as target
[  150.023836][ T4271] usb 6-1: Using ep0 maxpacket: 32
[  150.039131][ T8713] EXT4-fs (loop3): 1 truncate cleaned up
[  150.117263][ T8713] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  150.144008][ T8713] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.287976][ T8713] syz.3.1741 (8713) used greatest stack depth: 20776 bytes left
[  150.301730][ T4271] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  150.310802][ T4271] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.359292][ T4271] usb 6-1: Product: syz
[  150.360660][  T362] Quota error (device loop3): remove_tree: Getting block too big (0 >= 6)
[  150.365320][ T4271] usb 6-1: Manufacturer: syz
[  150.393682][ T4271] usb 6-1: SerialNumber: syz
[  150.408221][ T4271] usb 6-1: config 0 descriptor??
[  150.427407][  T362] EXT4-fs error (device loop3): ext4_release_dquot:6245: comm kworker/u4:3: Failed to release dquot type 1
[  150.437261][ T8747] loop6: detected capacity change from 0 to 256
[  150.508491][ T8747] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  150.594429][ T8747] exFAT-fs (loop6): error, invalid access to FAT free cluster (entry 0x00000008)
[  150.625160][ T8747] exFAT-fs (loop6): Filesystem has been set read-only
[  150.861601][ T8772] loop2: detected capacity change from 0 to 512
[  150.910091][ T8772] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  150.931321][ T4271] airspy 6-1:0.0: usb_control_msg() failed -71 request 0a
[  150.938693][ T4254] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  150.950283][ T4271] airspy 6-1:0.0: Could not detect board
[  150.954824][ T8777] loop6: detected capacity change from 0 to 64
[  150.973765][ T8772] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002]
[  150.981274][ T4271] airspy: probe of 6-1:0.0 failed with error -71
[  150.994147][ T8772] System zones: 1-12
[  150.999457][ T8772] EXT4-fs (loop2): orphan cleanup on readonly fs
[  151.005967][ T4271] usb 6-1: USB disconnect, device number 9
[  151.012296][ T8772] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1769: invalid indirect mapped block 12 (level 1)
[  151.029611][ T8772] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1769: invalid indirect mapped block 2 (level 2)
[  151.035785][ T8777] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  151.061807][ T8777] hfs: filesystem is marked locked, mounting read-only.
[  151.116643][ T8772] EXT4-fs (loop2): 1 truncate cleaned up
[  151.122381][ T8772] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,nobarrier,,,errors=continue. Quota mode: writeback.
[  151.206594][ T8784] netlink: 'syz.3.1774': attribute type 2 has an invalid length.
[  151.216059][ T4254] usb 5-1: Using ep0 maxpacket: 32
[  151.261224][ T4254] usb 5-1: too many configurations: 15, using maximum allowed: 8
[  151.509196][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1785'.
[  151.719691][ T8819] netlink: 'syz.2.1791': attribute type 1 has an invalid length.
[  151.788531][ T8824] dlm: dev_write: no op 0 0
[  152.016726][ T8841] netlink: 'syz.2.1802': attribute type 10 has an invalid length.
[  152.035224][ T8841] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1802'.
[  152.056591][ T8841] device team0 entered promiscuous mode
[  152.075849][ T8841] device team_slave_0 entered promiscuous mode
[  152.084832][ T8841] device team_slave_1 entered promiscuous mode
[  152.092030][ T4254] usb 5-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d
[  152.121009][ T4254] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.132340][ T8841] bridge0: port 3(team0) entered blocking state
[  152.138613][ T8841] bridge0: port 3(team0) entered disabled state
[  152.155296][ T4254] usb 5-1: Product: syz
[  152.159473][ T4254] usb 5-1: Manufacturer: syz
[  152.179863][ T4254] usb 5-1: SerialNumber: syz
[  152.200932][ T8841] bridge0: port 3(team0) entered blocking state
[  152.207870][ T8841] bridge0: port 3(team0) entered forwarding state
[  152.217504][ T4254] usb 5-1: config 0 descriptor??
[  152.230086][ T8847] loop5: detected capacity change from 0 to 4096
[  152.324421][ T8847] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512)
[  152.346942][ T8859] loop6: detected capacity change from 0 to 64
[  152.501959][ T4254] mdc800 5-1:0.0: probe fails -> wrong Number of Configuration
[  152.541502][ T4254] usb 5-1: USB disconnect, device number 5
[  152.561068][    T7] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  152.681163][ T4877] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  152.821023][    T7] usb 4-1: Using ep0 maxpacket: 8
[  152.839376][ T8887] mmap: syz.5.1825 (8887) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  152.914025][ T8891] loop5: detected capacity change from 0 to 512
[  152.941149][    T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  153.045239][ T8891] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1827: bg 0: block 248: padding at end of block bitmap is not set
[  153.068590][ T8891] Quota error (device loop5): write_blk: dquota write failed
[  153.085695][ T8891] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  153.097617][ T4877] usb 3-1: config 2 has an invalid interface number: 174 but max is 0
[  153.111097][    T7] usb 4-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[  153.112021][ T4878] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  153.120552][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.133370][ T4877] usb 3-1: config 2 has no interface number 0
[  153.136622][    T7] usb 4-1: Product: syz
[  153.146298][    T7] usb 4-1: Manufacturer: syz
[  153.151455][    T7] usb 4-1: SerialNumber: syz
[  153.153508][ T8891] EXT4-fs error (device loop5): ext4_acquire_dquot:6209: comm syz.5.1827: Failed to acquire dquot type 1
[  153.159457][    T7] usb 4-1: config 0 descriptor??
[  153.176987][ T8891] EXT4-fs (loop5): 1 truncate cleaned up
[  153.177623][ T4877] usb 3-1: config 2 interface 174 altsetting 0 has an invalid endpoint with address 0x9E, skipping
[  153.197482][ T8891] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  153.210005][ T4877] usb 3-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255
[  153.212827][    T7] gspca_main: stk014-2.14.0 probing 05e1:0893
[  153.235116][    T7] usb 4-1: selecting invalid altsetting 1
[  153.237106][ T8891] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  153.346213][  T154] Quota error (device loop5): remove_tree: Getting block too big (0 >= 6)
[  153.357464][  T154] EXT4-fs error (device loop5): ext4_release_dquot:6245: comm kworker/u4:2: Failed to release dquot type 1
[  153.431254][ T4878] usb 7-1: Using ep0 maxpacket: 32
[  153.451318][ T4877] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e
[  153.467579][ T4877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.494934][ T4877] usb 3-1: Product: syz
[  153.502047][ T4877] usb 3-1: Manufacturer: syz
[  153.507308][ T4877] usb 3-1: SerialNumber: syz
[  153.561318][ T8861] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  153.561335][ T4878] usb 7-1: config index 0 descriptor too short (expected 35577, got 27)
[  153.568377][ T8861] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  153.598087][ T4878] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  153.611550][ T4878] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92
[  153.626796][ T4878] usb 7-1: config 1 has no interface number 0
[  153.633629][ T4878] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  153.667588][ T4878] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  153.698437][ T4878] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  153.727879][ T4878] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.751917][ T7708] usb 4-1: USB disconnect, device number 12
[  153.824122][ T4878] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found
[  153.919668][ T8938] xt_CT: You must specify a L4 protocol and not use inversions on it
[  153.971334][ T4877] usb 3-1: probing VID:PID(0424:012C)   
[  153.999284][ T4877] usb 3-1: vub300 testing BULK IN EndPoint(0) 82
[  154.007468][ T4877] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs
[  154.023897][ T8942] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1847'.
[  154.031115][ T4877] vub300: probe of 3-1:2.174 failed with error -22
[  154.038347][ T8942] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  154.051740][ T4878] snd_usb_pod 7-1:1.1: invalid control EP
[  154.059229][ T4878] snd_usb_pod 7-1:1.1: cannot start listening: -22
[  154.075540][ T4877] usb 3-1: USB disconnect, device number 9
[  154.078730][ T8942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  154.096629][ T4878] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected
[  154.115846][ T4878] snd_usb_pod: probe of 7-1:1.1 failed with error -22
[  154.127605][ T8942] syz.4.1847 (8942) used greatest stack depth: 20576 bytes left
[  154.234285][ T8951] loop4: detected capacity change from 0 to 8192
[  154.288973][ T8951] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  154.298042][ T4878] usb 7-1: USB disconnect, device number 8
[  154.317697][ T8951] REISERFS (device loop4): using ordered data mode
[  154.324493][ T8951] reiserfs: using flush barriers
[  154.353607][ T8951] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  154.354876][ T8954] loop3: detected capacity change from 0 to 64
[  154.381242][    T7] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  154.390208][ T8951] REISERFS (device loop4): checking transaction log (loop4)
[  154.419928][ T8954] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  154.433442][ T8951] REISERFS (device loop4): Using rupasov hash to sort names
[  154.440749][ T8951] REISERFS (device loop4): using 3.5.x disk format
[  154.460583][ T8951] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  154.477822][ T8951] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  154.491778][ T8951] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  154.508799][ T8951] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  154.551482][ T8951] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  154.586815][ T8951] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  154.621111][ T8951] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  154.621145][    T7] usb 6-1: Using ep0 maxpacket: 8
[  154.786477][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  154.796084][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  154.801198][    T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  154.804229][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  154.819165][    T7] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  154.959453][ T8967] device bond1 left promiscuous mode
[  155.051404][    T7] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  155.061628][    T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.069631][    T7] usb 6-1: Product: syz
[  155.104358][    T7] usb 6-1: Manufacturer: syz
[  155.108976][    T7] usb 6-1: SerialNumber: syz
[  155.145625][    T7] usb 6-1: config 0 descriptor??
[  155.461085][ T9010] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1878'.
[  155.698494][ T4878] usb 6-1: USB disconnect, device number 10
[  155.783853][ T9029] loop3: detected capacity change from 0 to 256
[  155.985008][ T9043] xt_TCPMSS: Only works on TCP SYN packets
[  156.275316][ T9057] loop4: detected capacity change from 0 to 4096
[  156.296057][    T7] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  156.336785][ T9057] EXT4-fs (loop4): Test dummy encryption mode enabled
[  156.339139][ T9065] nvme_fabrics: unknown parameter or missing value '.' in ctrl creation request
[  156.356790][ T9057] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  156.408399][ T9057] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  156.430588][ T9057] System zones: 0-5
[  156.462439][ T9057] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,delalloc,journal_ioprio=0x0000000000000000,test_dummy_encryption,nodiscard,min_batch_time=0x0000000000000005,acl,nomblk_io_submit,,errors=continue. Quota mode: writeback.
[  156.473496][ T9064] loop6: detected capacity change from 0 to 4096
[  156.485222][    C1] vkms_vblank_simulate: vblank timer overrun
[  156.521339][ T9074] overlayfs: missing 'lowerdir'
[  156.526573][ T9064] NILFS (loop6): mounting unchecked fs
[  156.541179][    T7] usb 3-1: Using ep0 maxpacket: 16
[  156.561743][ T9064] NILFS (loop6): recovery required for readonly filesystem
[  156.616098][ T9064] NILFS (loop6): write access will be enabled during recovery
[  156.661111][ T7708] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  156.666037][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  156.669359][ T9064] NILFS (loop6): invalid segment: Checksum error in segment payload
[  156.706688][ T9064] NILFS (loop6): trying rollback from an earlier position
[  156.738267][ T9064] NILFS (loop6): norecovery option specified, skipping roll-forward recovery
[  156.821385][ T9079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  156.853757][ T9064] NILFS (loop6): couldn't remount because the filesystem is in an incomplete recovery state
[  156.865208][    T7] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  156.883072][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.903124][    T7] usb 3-1: Product: syz
[  156.907305][    T7] usb 3-1: Manufacturer: syz
[  156.915025][    T7] usb 3-1: SerialNumber: syz
[  156.924037][    T7] usb 3-1: config 0 descriptor??
[  157.011200][ T9078] loop5: detected capacity change from 0 to 32768
[  157.046214][ T9084] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1913'.
[  157.081201][ T7708] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  157.107084][ T7708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.120459][ T9078] XFS (loop5): Mounting V5 Filesystem
[  157.127451][ T7708] usb 4-1: config 0 descriptor??
[  157.201820][    T7] usb 3-1: USB disconnect, device number 10
[  157.250303][ T9078] XFS (loop5): Ending clean mount
[  157.285556][ T9101] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1917'.
[  157.303969][ T9101] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1917'.
[  157.321507][ T9101] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1917'.
[  157.377056][ T4524] XFS (loop5): Unmounting Filesystem
[  157.621758][ T7708] [drm:udl_init] *ERROR* Selecting channel failed
[  157.679205][ T7708] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2
[  157.700056][ T7708] [drm] Initialized udl on minor 2
[  157.761157][ T7708] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  157.780819][ T9119] sctp: [Deprecated]: syz.6.1927 (pid 9119) Use of int in maxseg socket option.
[  157.780819][ T9119] Use struct sctp_assoc_value instead
[  157.813111][ T7708] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  157.831151][ T7708] usb 4-1: USB disconnect, device number 13
[  157.861990][ T4878] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  157.863753][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1928'.
[  157.885314][ T4878] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  157.915126][ T4878] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  158.220612][ T9113] loop4: detected capacity change from 0 to 32768
[  158.235294][ T4878] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  158.346639][ T9113] XFS (loop4): Mounting V5 Filesystem
[  158.464363][ T9161] loop3: detected capacity change from 0 to 64
[  158.531149][ T4878] usb 6-1: Using ep0 maxpacket: 32
[  158.554775][ T9113] XFS (loop4): Ending clean mount
[  158.559608][ T9164] loop6: detected capacity change from 0 to 1764
[  158.691290][ T4878] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  158.721010][ T4878] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  158.743171][ T4878] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  158.756883][ T4190] XFS (loop4): Unmounting Filesystem
[  158.887052][ T9176] xt_socket: unknown flags 0x48
[  158.952265][ T4878] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  158.964829][ T4878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.991389][ T4878] usb 6-1: Product: syz
[  158.995675][ T4878] usb 6-1: Manufacturer: syz
[  159.000261][ T4878] usb 6-1: SerialNumber: syz
[  159.065403][ T4878] cdc_ncm 6-1:1.0: skipping garbage
[  159.074628][ T4878] cdc_ncm 6-1:1.0: skipping garbage
[  159.087567][ T4878] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found
[  159.094944][ T4878] cdc_ncm 6-1:1.0: bind() failure
[  159.199799][ T9188] kAFS: unable to lookup cell '@mTsyz0'
[  159.227775][ T9190] comedi comedi4: bad chanlist[1]=0x000000cf chan=207 range length=2
[  159.318933][ T7710] usb 6-1: USB disconnect, device number 11
[  159.377979][ T9194] loop6: detected capacity change from 0 to 512
[  159.461261][ T9194] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  159.544972][ T9194] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.1959: inode has both inline data and extents flags
[  159.568507][ T9194] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1959: couldn't read orphan inode 15 (err -117)
[  159.581420][ T9194] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  159.833781][ T9216] bridge0: port 3(team0) entered disabled state
[  160.359505][ T9268] [U] 
[  160.472913][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1999'.
[  160.683742][ T9303] loop4: detected capacity change from 0 to 256
[  160.699857][ T9302] netlink: 'syz.6.2011': attribute type 2 has an invalid length.
[  160.868055][ T9303] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d)
[  160.961967][ T9328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2021'.
[  160.991117][ T9328] openvswitch: netlink: Missing key (keys=40, expected=100)
[  161.175046][ T9344] netlink: 'syz.2.2027': attribute type 2 has an invalid length.
[  161.207979][ T9344] netlink: 'syz.2.2027': attribute type 1 has an invalid length.
[  161.461222][    T7] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  161.564915][ T9380] tmpfs: Bad value for 'mpol'
[  161.711143][    T7] usb 6-1: Using ep0 maxpacket: 32
[  161.831347][    T7] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  161.860732][    T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.868975][ T9396] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  161.871596][    T7] usb 6-1: config 0 descriptor??
[  161.931371][ T7710] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  161.973038][    T7] gspca_main: sq930x-2.14.0 probing 041e:403c
[  162.051170][ T7708] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  162.166934][ T9406] tmpfs: Bad value for 'mpol'
[  162.254115][ T9413] loop3: detected capacity change from 0 to 128
[  162.316896][ T9413] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  162.332649][ T9413] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  162.354847][ T9413] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.2061: checksumming directory block 0
[  162.394660][ T7710] usb 5-1: config 0 has an invalid interface number: 251 but max is 0
[  162.403107][ T7710] usb 5-1: config 0 has no interface number 0
[  162.421722][    T7] gspca_sq930x: ucbus_write failed -71
[  162.427607][    T7] sq930x: probe of 6-1:0.0 failed with error -71
[  162.455382][    T7] usb 6-1: USB disconnect, device number 12
[  162.473740][ T7708] usb 3-1: config 0 has an invalid interface number: 229 but max is 0
[  162.487079][ T7708] usb 3-1: config 0 has no interface number 0
[  162.496211][ T7708] usb 3-1: config 0 interface 229 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  162.595683][ T7710] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  162.605674][ T4878] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  162.620011][ T7710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.628613][ T7710] usb 5-1: Product: syz
[  162.638355][ T7710] usb 5-1: Manufacturer: syz
[  162.643324][ T7710] usb 5-1: SerialNumber: syz
[  162.655925][ T7710] usb 5-1: config 0 descriptor??
[  162.673114][ T7708] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38
[  162.688315][ T7708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.697686][ T7708] usb 3-1: Product: syz
[  162.704466][ T7708] usb 3-1: Manufacturer: syz
[  162.709156][ T7708] usb 3-1: SerialNumber: syz
[  162.726553][ T7708] usb 3-1: config 0 descriptor??
[  162.793660][ T9439] loop3: detected capacity change from 0 to 1024
[  162.861074][ T4878] usb 7-1: Using ep0 maxpacket: 16
[  162.878488][ T9439] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  163.033592][ T7708] usb 3-1: USB disconnect, device number 11
[  163.092175][ T9450] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2078'.
[  163.131558][ T7710] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  163.151514][ T7710] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[  163.181259][ T4878] usb 7-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa
[  163.194866][ T7710] asix: probe of 5-1:0.251 failed with error -5
[  163.209967][ T4878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.223569][ T7710] usb 5-1: USB disconnect, device number 6
[  163.229799][ T4878] usb 7-1: Product: syz
[  163.234016][ T4878] usb 7-1: Manufacturer: syz
[  163.238628][ T4878] usb 7-1: SerialNumber: syz
[  163.268295][ T4878] usb 7-1: config 0 descriptor??
[  163.346609][ T9462] loop3: detected capacity change from 0 to 512
[  163.415635][ T9462] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  163.436093][ T9462] EXT4-fs (loop3): orphan cleanup on readonly fs
[  163.455829][ T9462] Quota error (device loop3): v2_read_file_info: Free block number too big (0 >= 0).
[  163.470540][ T9462] EXT4-fs warning (device loop3): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  163.490605][ T9462] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  163.493458][ T9456] loop5: detected capacity change from 0 to 32768
[  163.506964][ T9462] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2084: bg 0: block 40: padding at end of block bitmap is not set
[  163.554535][ T9462] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6178: Corrupt filesystem
[  163.576002][ T4878] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  163.583447][ T9462] EXT4-fs (loop3): 1 truncate cleaned up
[  163.591020][ T9462] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  163.643121][ T4878] dvb_usb_af9015: probe of 7-1:0.0 failed with error -22
[  163.698985][ T4878] usb 7-1: USB disconnect, device number 9
[  163.739285][ T9456] XFS (loop5): Mounting V5 Filesystem
[  163.871093][ T9456] XFS (loop5): Ending clean mount
[  163.907451][ T9493] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2095'.
[  163.930365][ T4524] XFS (loop5): Unmounting Filesystem
[  163.969352][ T9495] loop4: detected capacity change from 0 to 1764
[  163.998370][ T9497] tmpfs: Bad value for 'mpol'
[  164.209337][ T9509] loop4: detected capacity change from 0 to 8
[  164.253293][ T9509] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  164.258175][ T4487] udevd[4487]: incorrect cramfs checksum on /dev/loop4
[  164.287990][ T9509] cramfs: Error -5 while decompressing!
[  164.316067][ T9509] cramfs: ffffffff961ed0a8(26)->ffff888056028000(4096)
[  164.326927][ T4487] udevd[4487]: incorrect cramfs checksum on /dev/loop4
[  164.367220][ T9509] cramfs: Error -3 while decompressing!
[  164.371355][ T9515] cifs: Unknown parameter 'no'‘a�£Nð[G¶zob,erèèµ;%j¸¼
[  164.371355][ T9515] ‡üzæ,€@q¬Ú÷ôÐåéJ#³"ŽÚh/.�W1ȱ¨nNCº"†CÙ׈¡E)Ð8+€î¶á÷'
[  164.377245][ T9509] cramfs: ffffffff961ed0c2(26)->ffff88805a279000(4096)
[  164.448830][ T4487] udevd[4487]: incorrect cramfs checksum on /dev/loop4
[  164.487976][ T9509] cramfs: Error -3 while decompressing!
[  164.489998][ T4487] udevd[4487]: incorrect cramfs checksum on /dev/loop4
[  164.507381][ T9509] cramfs: ffffffff961ed0dc(16)->ffff88805a210000(4096)
[  164.544434][ T9509] cramfs: Error -5 while decompressing!
[  164.588833][ T4487] udevd[4487]: incorrect cramfs checksum on /dev/loop4
[  164.589761][ T9509] cramfs: ffffffff961ed0a8(26)->ffff888056028000(4096)
[  164.630217][   T25] audit: type=1800 audit(1763500222.637:8): pid=9509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2101" name="file2" dev="loop4" ino=348 res=0 errno=0
[  164.669216][ T4487] udevd[4487]: incorrect cramfs checksum on /dev/loop4
[  164.686854][ T9531] loop3: detected capacity change from 0 to 256
[  164.744654][ T4487] udevd[4487]: incorrect cramfs checksum on /dev/loop4
[  164.819527][ T9531] FAT-fs (loop3): Directory bread(block 64) failed
[  164.837447][ T9531] FAT-fs (loop3): Directory bread(block 65) failed
[  164.847026][ T9531] FAT-fs (loop3): Directory bread(block 66) failed
[  164.854059][ T9531] FAT-fs (loop3): Directory bread(block 67) failed
[  164.860772][ T9531] FAT-fs (loop3): Directory bread(block 68) failed
[  164.867687][ T9531] FAT-fs (loop3): Directory bread(block 69) failed
[  164.902479][ T9531] FAT-fs (loop3): Directory bread(block 70) failed
[  164.926300][ T9531] FAT-fs (loop3): Directory bread(block 71) failed
[  164.946833][ T9531] FAT-fs (loop3): Directory bread(block 72) failed
[  164.966313][ T9531] FAT-fs (loop3): Directory bread(block 73) failed
[  165.007118][ T9544] binder: 9543:9544 ioctl c018620b 0 returned -14
[  165.448856][ T9563] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2130'.
[  165.565563][ T9569] netlink: 'syz.4.2133': attribute type 15 has an invalid length.
[  165.590214][ T9569] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2133'.
[  165.816616][ T9534] loop5: detected capacity change from 0 to 32768
[  165.825266][ T9537] loop6: detected capacity change from 0 to 32768
[  165.905722][ T9588] tmpfs: Bad value for 'mpol'
[  165.938183][ T9537] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  165.994211][ T9534] XFS (loop5): Mounting V5 Filesystem
[  166.022992][ T9537] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  166.130682][ T9534] XFS (loop5): Ending clean mount
[  166.140642][ T9534] XFS (loop5): Quotacheck needed: Please wait.
[  166.192846][ T9605] loop4: detected capacity change from 0 to 2048
[  166.233293][ T9534] XFS (loop5): Quotacheck: Done.
[  166.245444][ T9612] netlink: 'syz.3.2149': attribute type 4 has an invalid length.
[  166.291724][ T5727] ocfs2: Unmounting device (7,6) on (node local)
[  166.299357][ T9605] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  166.354536][ T4524] XFS (loop5): Unmounting Filesystem
[  166.361651][ T9605] UDF-fs: unknown compression code (9)
[  166.685918][ T9624] netlink: 22 bytes leftover after parsing attributes in process `syz.6.2150'.
[  166.945141][ T9638] device erspan1 entered promiscuous mode
[  166.970915][ T9641] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2163'.
[  167.042257][ T9641] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2163'.
[  167.104437][ T9641] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2163'.
[  167.121454][ T9641] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2163'.
[  167.140750][ T9641] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2163'.
[  167.761275][ T9648] loop4: detected capacity change from 0 to 32768
[  167.823448][ T9647] loop5: detected capacity change from 0 to 32768
[  167.845097][ T9682] netlink: 'syz.2.2184': attribute type 10 has an invalid length.
[  167.879593][ T9682] team0: Device ipvlan1 failed to register rx_handler
[  167.915797][ T9647] jfs_lookup: iget failed on inum 32
[  167.968133][ T9647] jfs_lookup: iget failed on inum 32
[  168.081584][ T9682] syz.2.2184 (9682) used greatest stack depth: 20224 bytes left
[  168.213384][ T9692] netlink: 'syz.5.2189': attribute type 1 has an invalid length.
[  168.220216][ T9694] cgroup: name respecified
[  168.283404][ T9692] netlink: 'syz.5.2189': attribute type 1 has an invalid length.
[  168.613009][ T9720] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled
[  168.695475][ T9725] __nla_validate_parse: 15 callbacks suppressed
[  168.695491][ T9725] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2205'.
[  168.812198][ T9734] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2210'.
[  168.939700][ T9744] nftables ruleset with unbound chain
[  168.951463][ T9743] device vlan0 entered promiscuous mode
[  169.107334][ T9756] loop3: detected capacity change from 0 to 64
[  169.235316][ T9764] xt_bpf: check failed: parse error
[  169.315028][ T9766] xt_CT: No such helper "netbios-ns"
[  169.570720][ T9796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2240'.
[  169.630519][ T9802] loop3: detected capacity change from 0 to 256
[  169.644896][  T150] block nbd4: Attempted send on invalid socket
[  169.651224][  T150] blk_update_request: I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  169.675003][ T9801] hpfs: hpfs_map_sector(): read error
[  169.748568][ T9802] FAT-fs (loop3): Directory bread(block 64) failed
[  169.787038][ T9802] FAT-fs (loop3): Directory bread(block 65) failed
[  169.812986][ T9802] FAT-fs (loop3): Directory bread(block 66) failed
[  169.886821][ T9802] FAT-fs (loop3): Directory bread(block 67) failed
[  169.904806][ T9802] FAT-fs (loop3): Directory bread(block 68) failed
[  169.921038][ T9802] FAT-fs (loop3): Directory bread(block 69) failed
[  169.943823][ T9802] FAT-fs (loop3): Directory bread(block 70) failed
[  169.950405][ T9802] FAT-fs (loop3): Directory bread(block 71) failed
[  169.952409][ T9826] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2254'.
[  169.991168][ T9802] FAT-fs (loop3): Directory bread(block 72) failed
[  169.997744][ T9802] FAT-fs (loop3): Directory bread(block 73) failed
[  170.125232][ T9828] loop2: detected capacity change from 0 to 4096
[  170.361153][ T9847] Sensor A: =================  START STATUS  =================
[  170.369030][ T9847] Sensor A: Test Pattern: 75% Colorbar
[  170.374809][    T7] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  170.447390][ T9847] Sensor A: Show Information: All
[  170.453049][ T9847] Sensor A: Vertical Flip: false
[  170.463577][ T9847] Sensor A: Horizontal Flip: false
[  170.469418][ T9847] Sensor A: Brightness: 128
[  170.519492][ T9847] Sensor A: Contrast: 0
[  170.527859][ T9847] Sensor A: Hue: 0
[  170.571712][ T9847] Sensor A: Saturation: 128
[  170.602867][ T9847] Sensor A: ==================  END STATUS  ==================
[  170.622165][ T9860] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2272'.
[  170.631578][    T7] usb 5-1: Using ep0 maxpacket: 16
[  170.741263][   T26] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  170.912337][    T7] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  170.928938][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.941930][    T7] usb 5-1: Product: syz
[  170.946113][    T7] usb 5-1: Manufacturer: syz
[  170.950848][    T7] usb 5-1: SerialNumber: syz
[  170.958464][    T7] usb 5-1: config 0 descriptor??
[  171.040435][ T9883] loop6: detected capacity change from 0 to 2048
[  171.126856][ T9883] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  171.158525][ T9883] Invalid option length (0) for dns_resolver key
[  171.161021][   T26] usb 3-1: Using ep0 maxpacket: 32
[  171.176484][ T9887] xt_TCPMSS: Only works on TCP SYN packets
[  171.221198][    T7] speedtch 5-1:0.0: speedtch_bind: data interface not found!
[  171.241275][    T7] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19!
[  171.336625][ T9893] loop3: detected capacity change from 0 to 1024
[  171.384892][ T9892] loop5: detected capacity change from 0 to 4096
[  171.405212][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2290'.
[  171.432111][    T7] usb 5-1: USB disconnect, device number 7
[  171.481463][   T26] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  171.521319][   T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.552533][  T144] hfsplus: b-tree write err: -5, ino 4
[  171.561302][   T26] usb 3-1: Product: syz
[  171.565486][   T26] usb 3-1: Manufacturer: syz
[  171.573568][   T26] usb 3-1: SerialNumber: syz
[  171.605368][   T26] usb 3-1: config 0 descriptor??
[  171.884192][ T9913] loop6: detected capacity change from 0 to 1024
[  171.897115][   T26] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 012
[  171.979358][ T9913] EXT4-fs (loop6): Ignoring removed bh option
[  172.041861][ T9924] netlink: 'syz.5.2302': attribute type 13 has an invalid length.
[  172.055860][ T9913] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x000000000000000a,data_err=ignore,grpquota,abort,user_xattr,bh,errors=remount-ro,. Quota mode: writeback.
[  172.070275][ T9924] device veth0_macvtap entered promiscuous mode
[  172.087822][ T9924] device macvtap0 entered promiscuous mode
[  172.116916][ T7708] usb 3-1: USB disconnect, device number 12
[  172.118546][ T9924] batman_adv: batadv0: Interface activated: macvtap0
[  172.144504][ T9924] macvtap0: refused to change device tx_queue_len
[  172.274546][ T9934] loop3: detected capacity change from 0 to 1024
[  172.332883][ T9940] xt_CT: You must specify a L4 protocol and not use inversions on it
[  172.421436][ T3086] hfsplus: b-tree write err: -5, ino 4
[  172.453100][ T9946] tmpfs: Bad value for 'mpol'
[  172.546617][ T9953] loop6: detected capacity change from 0 to 8
[  172.776170][ T9972] netlink: 'syz.4.2326': attribute type 10 has an invalid length.
[  172.790545][ T9974] loop6: detected capacity change from 0 to 256
[  172.801303][ T9970] netlink: 'syz.2.2325': attribute type 15 has an invalid length.
[  172.807129][ T9972] openvswitch: netlink: Flow key attr not present in new flow.
[  172.809121][ T9970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2325'.
[  172.868333][ T9974] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  173.500834][T10010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2344'.
[  173.548127][T10008] loop5: detected capacity change from 0 to 2048
[  173.564707][   T26] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  173.583436][ T9981] loop3: detected capacity change from 0 to 32768
[  173.590015][T10008] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  173.609294][   T25] audit: type=1400 audit(1763500231.617:9): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=10013 comm="syz.2.2346"
[  173.671816][ T9981] ERROR: (device loop3): diAllocAG: numfree > numinos
[  173.671816][ T9981] 
[  173.689134][T10021] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2349'.
[  173.692325][T10008] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none.
[  173.767035][T10026] loop2: detected capacity change from 0 to 2048
[  173.777211][ T9981] ialloc: diAlloc returned -5!
[  173.823720][T10026] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  173.861332][   T26] usb 7-1: Using ep0 maxpacket: 8
[  173.916520][T10030] loop4: detected capacity change from 0 to 64
[  174.061106][T10030] hfs: unable to locate alternate MDB
[  174.100639][T10030] hfs: continuing without an alternate MDB
[  174.166437][   T26] usb 7-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5
[  174.200803][T10038] loop2: detected capacity change from 0 to 4096
[  174.207463][   T26] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.240739][   T26] usb 7-1: Product: syz
[  174.256137][   T26] usb 7-1: Manufacturer: syz
[  174.260767][   T26] usb 7-1: SerialNumber: syz
[  174.310548][   T26] usb 7-1: config 0 descriptor??
[  174.336896][T10038] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  174.373222][   T26] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected.
[  174.394027][T10038] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing.
[  174.460808][T10038] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  174.470580][T10054] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2364'.
[  174.501144][T10038] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  174.511449][T10054] unsupported nlmsg_type 40
[  174.580515][T10038] ntfs: volume version 3.1.
[  174.641236][   T26] pwc: send_video_command error -71
[  174.648079][   T26] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  174.654375][T10038] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[  174.691338][   T26] Philips webcam: probe of 7-1:0.0 failed with error -71
[  174.697220][T10038] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x40 as bad.  Run chkdsk.
[  174.733719][   T26] usb 7-1: USB disconnect, device number 10
[  175.041163][ T4254] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  175.228827][T10100] loop6: detected capacity change from 0 to 512
[  175.291399][ T4254] usb 6-1: Using ep0 maxpacket: 8
[  175.321422][T10100] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  175.387597][T10100] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.2385: iget: bad i_size value: 360287970189639680
[  175.469882][T10100] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.2385: couldn't read orphan inode 15 (err -117)
[  175.496550][T10100] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  175.573503][T10100] EXT4-fs error (device loop6): ext4_get_first_dir_block:3605: inode #12: block 13: comm syz.6.2385: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=1
[  175.605010][ T4254] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab
[  175.621022][ T4254] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  175.621247][ T4878] Bluetooth: hci2: command 0x0406 tx timeout
[  175.639393][ T4254] usb 6-1: Product: syz
[  175.650276][ T4254] usb 6-1: Manufacturer: syz
[  175.654263][ T4878] Bluetooth: hci3: command 0x0406 tx timeout
[  175.681512][ T4254] usb 6-1: SerialNumber: syz
[  175.693906][ T4878] Bluetooth: hci4: command 0x0406 tx timeout
[  175.700225][T10100] EXT4-fs error (device loop6): ext4_get_first_dir_block:3608: inode #12: comm syz.6.2385: directory missing '.'
[  175.722305][ T4254] usb 6-1: config 0 descriptor??
[  175.879507][T10139] loop4: detected capacity change from 0 to 2048
[  175.942967][T10147] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2403'.
[  175.989132][T10147] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2403'.
[  176.017314][T10139] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  176.049360][T10147] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2403'.
[  176.083809][T10157] loop6: detected capacity change from 0 to 256
[  176.231757][T10157] FAT-fs (loop6): Directory bread(block 64) failed
[  176.238423][T10157] FAT-fs (loop6): Directory bread(block 65) failed
[  176.265969][T10157] FAT-fs (loop6): Directory bread(block 66) failed
[  176.281872][ T4254] usb 6-1: USB disconnect, device number 13
[  176.291157][T10157] FAT-fs (loop6): Directory bread(block 67) failed
[  176.320579][T10157] FAT-fs (loop6): Directory bread(block 68) failed
[  176.352889][T10157] FAT-fs (loop6): Directory bread(block 69) failed
[  176.359486][T10157] FAT-fs (loop6): Directory bread(block 70) failed
[  176.372221][T10157] FAT-fs (loop6): Directory bread(block 71) failed
[  176.384582][T10157] FAT-fs (loop6): Directory bread(block 72) failed
[  176.389584][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  176.392625][T10157] FAT-fs (loop6): Directory bread(block 73) failed
[  176.564744][T10176] netlink: 'syz.3.2416': attribute type 2 has an invalid length.
[  176.591963][T10176] netlink: 'syz.3.2416': attribute type 1 has an invalid length.
[  176.600140][T10179] overlayfs: missing 'lowerdir'
[  176.801860][T10190] ipt_REJECT: TCP_RESET invalid for non-tcp
[  176.840261][T10196] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2425'.
[  177.090596][T10214] device netdevsim0 entered promiscuous mode
[  177.297377][T10221] loop2: detected capacity change from 0 to 4096
[  177.416161][T10221] ntfs3: loop2: ino=3, Correct links count -> 2.
[  177.434848][T10221] ntfs3: loop2: Failed to load $Volume.
[  177.465778][T10241] loop5: detected capacity change from 0 to 1024
[  177.531224][    T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  177.557441][T10241] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  177.583383][T10241] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  177.645889][T10241] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  177.677437][T10241] System zones: 0-1, 3-36
[  177.710920][T10241] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  177.864696][T10266] loop2: detected capacity change from 0 to 256
[  177.901301][    T7] usb 5-1: config 0 has an invalid interface number: 238 but max is 0
[  177.912874][    T7] usb 5-1: config 0 has no interface number 0
[  177.913190][T10266] exfat: Deprecated parameter 'namecase'
[  177.918987][    T7] usb 5-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  177.945541][T10266] exfat: Deprecated parameter 'utf8'
[  177.978529][T10266] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  178.005168][    T7] usb 5-1: config 0 interface 238 altsetting 0 endpoint 0x88 has invalid maxpacket 47698, setting to 1024
[  178.005199][    T7] usb 5-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024
[  178.171283][    T7] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=76.6a
[  178.171315][    T7] usb 5-1: New USB device strings: Mfr=7, Product=2, SerialNumber=3
[  178.171335][    T7] usb 5-1: Product: syz
[  178.171358][    T7] usb 5-1: Manufacturer: syz
[  178.171373][    T7] usb 5-1: SerialNumber: syz
[  178.175192][T10277] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2466'.
[  178.175215][T10277] netlink: 'syz.5.2466': attribute type 1 has an invalid length.
[  178.175261][T10277] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2466'.
[  178.193003][    T7] usb 5-1: config 0 descriptor??
[  178.211462][T10229] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  178.228297][T10280] loop5: detected capacity change from 0 to 256
[  178.254995][    T7] ni6501 5-1:0.238: driver 'ni6501' failed to auto-configure device.
[  178.311448][T10280] FAT-fs (loop5): Directory bread(block 64) failed
[  178.311489][T10280] FAT-fs (loop5): Directory bread(block 65) failed
[  178.311558][T10280] FAT-fs (loop5): Directory bread(block 66) failed
[  178.311588][T10280] FAT-fs (loop5): Directory bread(block 67) failed
[  178.311656][T10280] FAT-fs (loop5): Directory bread(block 68) failed
[  178.311684][T10280] FAT-fs (loop5): Directory bread(block 69) failed
[  178.311748][T10280] FAT-fs (loop5): Directory bread(block 70) failed
[  178.311776][T10280] FAT-fs (loop5): Directory bread(block 71) failed
[  178.311840][T10280] FAT-fs (loop5): Directory bread(block 72) failed
[  178.311868][T10280] FAT-fs (loop5): Directory bread(block 73) failed
[  178.437756][ T4878] usb 5-1: USB disconnect, device number 8
[  178.548739][T10288] netlink: 'syz.3.2472': attribute type 5 has an invalid length.
[  178.598953][T10290] AppArmor: change_hat: Invalid input '0x000000000000'
[  178.626002][T10294] loop3: detected capacity change from 0 to 1024
[  178.885167][T10305] netlink: 'syz.3.2479': attribute type 3 has an invalid length.
[  179.153158][T10286] loop6: detected capacity change from 0 to 32768
[  179.231214][T10286] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.2471 (10286)
[  179.289359][T10286] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  179.339681][T10286] BTRFS info (device loop6): using free space tree
[  179.366273][T10286] BTRFS info (device loop6): has skinny extents
[  179.410266][T10330] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2490'.
[  179.419442][ T4878] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  179.539347][T10344] xt_TCPMSS: Only works on TCP SYN packets
[  179.608511][T10286] BTRFS info (device loop6): enabling ssd optimizations
[  179.669665][T10349] loop5: detected capacity change from 0 to 128
[  179.691138][ T4878] usb 4-1: Using ep0 maxpacket: 32
[  179.842403][ T4878] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  179.926447][ T4487] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop6 scanned by udevd (4487)
[  180.071193][ T4878] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  180.081082][ T4878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.112309][ T4878] usb 4-1: Product: syz
[  180.116487][ T4878] usb 4-1: Manufacturer: syz
[  180.141186][ T4878] usb 4-1: SerialNumber: syz
[  180.177867][ T4878] usb 4-1: config 0 descriptor??
[  180.251893][ T4878] usb 4-1: bad CDC descriptors
[  180.257077][ T4878] usb 4-1: unsupported MDLM descriptors
[  180.258374][T10323] loop4: detected capacity change from 0 to 32768
[  180.396231][T10323] ERROR: (device loop4): dbFindCtl: Corrupt dmapctl page
[  180.396231][T10323] 
[  180.415174][T10368] loop5: detected capacity change from 0 to 736
[  180.452819][T10323] ERROR: (device loop4): remounting filesystem as read-only
[  180.456884][ T4878] usb 4-1: USB disconnect, device number 14
[  180.466355][T10323] ialloc: diAlloc returned -5!
[  180.790413][T10385] loop4: detected capacity change from 0 to 256
[  180.790609][T10382] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  180.806992][T10384] loop5: detected capacity change from 0 to 2048
[  180.827115][T10387] loop2: detected capacity change from 0 to 256
[  180.858843][T10384] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  180.929727][T10387] FAT-fs (loop2): Directory bread(block 64) failed
[  181.001397][T10385] FAT-fs (loop4): Directory bread(block 64) failed
[  181.007964][T10385] FAT-fs (loop4): Directory bread(block 65) failed
[  181.019143][T10387] FAT-fs (loop2): Directory bread(block 65) failed
[  181.055376][T10387] FAT-fs (loop2): Directory bread(block 66) failed
[  181.091086][T10385] FAT-fs (loop4): Directory bread(block 66) failed
[  181.101378][T10385] FAT-fs (loop4): Directory bread(block 67) failed
[  181.110128][T10387] FAT-fs (loop2): Directory bread(block 67) failed
[  181.146679][T10385] FAT-fs (loop4): Directory bread(block 68) failed
[  181.153670][T10387] FAT-fs (loop2): Directory bread(block 68) failed
[  181.160247][T10387] FAT-fs (loop2): Directory bread(block 69) failed
[  181.193653][T10385] FAT-fs (loop4): Directory bread(block 69) failed
[  181.200492][T10385] FAT-fs (loop4): Directory bread(block 70) failed
[  181.213221][T10387] FAT-fs (loop2): Directory bread(block 70) failed
[  181.213745][T10397] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2515'.
[  181.219754][T10387] FAT-fs (loop2): Directory bread(block 71) failed
[  181.219839][T10387] FAT-fs (loop2): Directory bread(block 72) failed
[  181.263042][T10385] FAT-fs (loop4): Directory bread(block 71) failed
[  181.272499][T10385] FAT-fs (loop4): Directory bread(block 72) failed
[  181.280624][T10385] FAT-fs (loop4): Directory bread(block 73) failed
[  181.296570][T10387] FAT-fs (loop2): Directory bread(block 73) failed
[  181.550731][T10405] loop6: detected capacity change from 0 to 4096
[  181.628980][T10405] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512)
[  181.815708][T10405] ntfs3: loop6: failed to convert "c46c" to cp855
[  182.139776][T10448] device bridge1 entered promiscuous mode
[  182.179520][T10452] loop6: detected capacity change from 0 to 512
[  182.188537][T10451] netlink: 'syz.2.2541': attribute type 16 has an invalid length.
[  182.198174][T10451] netlink: 'syz.2.2541': attribute type 17 has an invalid length.
[  182.225911][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  182.239085][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  182.276295][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  182.300158][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  182.316418][T10451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  182.343335][T10458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2544'.
[  182.413035][T10460] xt_CT: You must specify a L4 protocol and not use inversions on it
[  182.431296][T10458] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2544'.
[  182.585774][T10470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2550'.
[  183.004657][T10502] netlink: 'syz.5.2566': attribute type 21 has an invalid length.
[  183.027196][T10502] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2566'.
[  183.081035][ T4271] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  183.108953][T10502] netlink: 'syz.5.2566': attribute type 5 has an invalid length.
[  183.127815][T10502] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2566'.
[  183.157474][T10510] netlink: 'syz.3.2570': attribute type 13 has an invalid length.
[  183.355795][T10516] loop2: detected capacity change from 0 to 4096
[  183.394763][T10520] loop3: detected capacity change from 0 to 4096
[  183.441816][T10520] ntfs3: loop3: ino=3, Correct links count -> 2.
[  183.451250][ T4271] usb 7-1: config index 0 descriptor too short (expected 65207, got 72)
[  183.621277][ T4271] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  183.663477][ T4271] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.705487][ T4271] usb 7-1: Product: syz
[  183.709705][ T4271] usb 7-1: Manufacturer: syz
[  183.724590][ T4271] usb 7-1: SerialNumber: syz
[  183.812394][ T4271] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  183.860724][T10544] loop2: detected capacity change from 0 to 64
[  183.966709][T10550] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2590'.
[  184.027948][T10552] netlink: 'syz.2.2591': attribute type 49 has an invalid length.
[  184.320278][T10569] loop5: detected capacity change from 0 to 2048
[  184.479482][T10569] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  184.510968][ T4271] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  184.569864][T10569] ext4 filesystem being mounted at /407/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.661626][T10584] loop2: detected capacity change from 0 to 4096
[  184.669498][T10569] EXT4-fs error (device loop5): __ext4_new_inode:1076: comm syz.5.2597: reserved inode found cleared - inode=1
[  184.847911][T10600] program syz.3.2614 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  184.917379][    T7] usb 7-1: USB disconnect, device number 11
[  185.153600][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2623'.
[  185.161237][ T4872] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  185.208283][T10623] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 38304 - 0
[  185.225990][T10623] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 38304 - 0
[  185.237385][T10623] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 38304 - 0
[  185.246426][T10623] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 38304 - 0
[  185.255723][T10623] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 42221 - 0
[  185.264901][T10623] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 42221 - 0
[  185.273930][T10623] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 42221 - 0
[  185.282746][T10623] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 42221 - 0
[  185.292080][T10623] device geneve2 entered promiscuous mode
[  185.465759][ T4872] usb 6-1: Using ep0 maxpacket: 16
[  185.496420][T10640] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  185.521095][ T4191] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  185.608203][ T4872] usb 6-1: config 0 has an invalid interface number: 214 but max is 0
[  185.611298][ T4271] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  185.625950][ T4872] usb 6-1: config 0 has no interface number 0
[  185.635579][T10648] loop6: detected capacity change from 0 to 512
[  185.637173][ T4872] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  185.650611][ T4271] ath9k_htc: Failed to initialize the device
[  185.694901][    T7] usb 7-1: ath9k_htc: USB layer deinitialized
[  185.754185][T10658] UBIFS error (pid: 10658): cannot open "", error -22
[  185.801096][ T4191] usb 4-1: Using ep0 maxpacket: 16
[  185.835855][T10648] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,lazytime,minixdf,,errors=continue. Quota mode: writeback.
[  185.881274][ T4872] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  185.900578][ T4872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.901143][T10648] ext4 filesystem being mounted at /346/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  185.918903][ T4872] usb 6-1: Product: syz
[  185.918922][ T4872] usb 6-1: Manufacturer: syz
[  185.918937][ T4872] usb 6-1: SerialNumber: syz
[  185.920625][ T4872] usb 6-1: config 0 descriptor??
[  185.938719][T10670] loop2: detected capacity change from 0 to 4096
[  185.971264][ T4191] usb 4-1: config index 0 descriptor too short (expected 65, got 36)
[  185.979402][ T4191] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  186.001034][ T4191] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  186.013000][T10670] ntfs3: loop2: ino=3, Correct links count -> 2.
[  186.021182][ T4191] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  186.030224][ T4191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.054946][ T4191] usb 4-1: config 0 descriptor??
[  186.102975][ T4191] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13
[  186.165462][T10676] netlink: 'syz.6.2650': attribute type 16 has an invalid length.
[  186.247153][T10676] netlink: 'syz.6.2650': attribute type 17 has an invalid length.
[  186.255708][T10678] program syz.4.2651 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  186.302408][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  186.321986][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  186.362456][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  186.398875][T10676] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  186.424057][ T4872] usbtouchscreen: probe of 6-1:0.214 failed with error -71
[  186.442350][ T4872] usb 6-1: USB disconnect, device number 14
[  186.498305][ T4869] usb 4-1: USB disconnect, device number 15
[  186.504381][    C1] pxrc 4-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19
[  186.652721][T10694] loop2: detected capacity change from 0 to 512
[  186.715989][T10694] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  186.731131][T10694] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  186.759381][T10694] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.2661: inode has both inline data and extents flags
[  186.787641][T10694] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.2661: couldn't read orphan inode 15 (err -117)
[  186.811793][T10694] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,jqfmt=vfsv0,,errors=continue. Quota mode: writeback.
[  186.918119][T10705] netlink: 209820 bytes leftover after parsing attributes in process `syz.6.2665'.
[  186.998222][T10707] netlink: 'syz.2.2664': attribute type 24 has an invalid length.
[  187.018884][T10709] loop5: detected capacity change from 0 to 16
[  187.096223][T10709] erofs: (device loop5): erofs_read_superblock: blkszbits 9 isn't supported on this platform
[  187.186121][T10719] netlink: 'syz.3.2669': attribute type 16 has an invalid length.
[  187.238207][T10717] loop6: detected capacity change from 0 to 1024
[  187.242511][T10721] netlink: 'syz.5.2672': attribute type 2 has an invalid length.
[  187.252714][T10719] netlink: 'syz.3.2669': attribute type 17 has an invalid length.
[  187.281350][T10721] netlink: 'syz.5.2672': attribute type 1 has an invalid length.
[  187.290868][T10719] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  187.306781][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2672'.
[  187.321290][T10719] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  187.345224][T10719] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  187.375792][T10719] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  187.434200][   T25] audit: type=1800 audit(1763500245.447:10): pid=10717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2670" name="file1" dev="loop6" ino=20 res=0 errno=0
[  187.496372][ T3086] hfsplus: b-tree write err: -5, ino 4
[  187.605818][T10729] loop6: detected capacity change from 0 to 512
[  187.648013][T10729] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled
[  187.688121][T10729] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  187.705489][T10733] device bridge2 entered promiscuous mode
[  187.763309][T10729] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.2675: inode has both inline data and extents flags
[  187.872290][T10729] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.2675: couldn't read orphan inode 15 (err -117)
[  187.939910][T10749] ipt_CLUSTERIP: Please specify destination IP
[  187.961071][ T4869] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  187.961651][T10729] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,jqfmt=vfsv0,,errors=continue. Quota mode: writeback.
[  188.055514][T10757] netlink: 'syz.4.2688': attribute type 1 has an invalid length.
[  188.084977][T10757] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2688'.
[  188.098360][T10759] netlink: 'syz.5.2689': attribute type 8 has an invalid length.
[  188.116540][T10759] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2689'.
[  188.566624][ T4869] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[  188.584521][ T4869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.613416][ T4869] usb 3-1: Product: syz
[  188.617592][ T4869] usb 3-1: Manufacturer: syz
[  188.631142][T10786] loop3: detected capacity change from 0 to 4096
[  188.659176][ T4869] usb 3-1: SerialNumber: syz
[  188.671586][T10788] loop6: detected capacity change from 0 to 4096
[  188.687691][ T4869] usb 3-1: config 0 descriptor??
[  188.780217][T10788] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512)
[  188.852911][T10788] ntfs3: loop6: failed to convert "c46c" to maccroatian
[  188.941329][ T4869] peak_usb 3-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels)
[  189.152480][ T4869] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71
[  189.175927][ T4869] peak_usb 3-1:0.0: unable to tell PCAN-USB FD driver is loaded (err -71)
[  189.321903][ T4869] peak_usb: probe of 3-1:0.0 failed with error -71
[  189.350343][ T4869] usb 3-1: USB disconnect, device number 13
[  189.485180][ T4872] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  189.540886][T10853] loop6: detected capacity change from 0 to 64
[  189.617230][T10853] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing
[  189.704526][T10861] cifs: Unknown parameter 'no'‘a�£Nð[G¶zob,erèèµ;%j¸¼
[  189.704526][T10861] ‡üzæ,€@q¬Ú÷ôÐåéJ#³"ŽÚh/.�W1ȱ¨nNCº"†CÙ×ðÚ<“™+`# ÷Ž¢k²–'
[  189.781330][ T4872] usb 5-1: Using ep0 maxpacket: 16
[  189.792450][T10863] QAT: failed to copy from user cfg_data.
[  189.846102][T10869] loop2: detected capacity change from 0 to 64
[  189.941126][ T4872] usb 5-1: config 0 has no interfaces?
[  189.949694][T10875] comedi comedi4: bad chanlist[0]=0x000000dd chan=221 range length=2
[  190.111530][ T4872] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  190.124140][ T4872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.155349][ T4872] usb 5-1: Product: syz
[  190.169189][ T4872] usb 5-1: Manufacturer: syz
[  190.181020][ T4872] usb 5-1: SerialNumber: syz
[  190.217419][ T4872] r8152-cfgselector 5-1: config 0 descriptor??
[  190.395758][T10905] loop5: detected capacity change from 0 to 164
[  190.486672][T10913] affs: No valid root block on device nbd3
[  190.502266][T10905] rock: directory entry would overflow storage
[  190.508860][T10905] rock: sig=0x5252, size=5, remaining=3
[  190.518298][ T4872] usbip-host 5-1: 5-1 is not in match_busid table... skip!
[  190.685188][T10926] loop5: detected capacity change from 0 to 47
[  190.708837][ T4872] usb 5-1: USB disconnect, device number 9
[  190.930649][T10939] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2777'.
[  190.959465][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2779'.
[  190.971263][T10351] Bluetooth: hci0: command 0x0406 tx timeout
[  191.048595][T10948] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2780'.
[  191.095719][T10953] loop2: detected capacity change from 0 to 64
[  191.102246][T10951] netlink: 'syz.5.2784': attribute type 16 has an invalid length.
[  191.110068][T10951] netlink: 'syz.5.2784': attribute type 17 has an invalid length.
[  191.127857][T10951] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  191.135928][T10951] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  191.145781][ T4869] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  191.174857][T10951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  191.194766][T10951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  191.425145][ T4869] usb 4-1: Using ep0 maxpacket: 8
[  191.557624][ T4869] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  191.569629][ T4869] usb 4-1: config 179 has no interface number 0
[  191.594233][ T4869] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  191.615670][ T4869] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  191.637020][T10981] xt_CT: You must specify a L4 protocol and not use inversions on it
[  191.649246][ T4869] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  191.674016][ T4869] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  191.705899][ T4869] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  191.723310][ T4869] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  191.734576][ T4869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.761411][T10934] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  192.105197][T11016] loop2: detected capacity change from 0 to 512
[  192.181893][T11010] loop4: detected capacity change from 0 to 4096
[  192.183865][T11022] binder: 11021:11022 ioctl 40046210 0 returned -14
[  192.198167][ T4869] usb 4-1: USB disconnect, device number 16
[  192.220993][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  192.243613][T11010] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  192.268683][T11010] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  192.304724][T11010] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  192.329776][T11016] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback.
[  192.339532][T11010] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  192.370580][T11010] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  192.371171][T11016] ext4 filesystem being mounted at /620/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  192.519508][T11010] ntfs: volume version 3.1.
[  192.526321][T11010] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  192.563054][T11010] ntfs: (device loop4): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  192.591263][T11040] netlink: 'syz.6.2825': attribute type 6 has an invalid length.
[  192.611350][T11040] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2825'.
[  192.620793][T11010] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  192.671551][T11010] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  192.731156][T11010] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  192.789721][T11010] ntfs: (device loop4): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute name is placed after the attribute value.
[  192.839338][T11010] ntfs: (device loop4): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2.
[  192.908230][T11010] ntfs: (device loop4): load_and_init_quota(): Failed to load $Quota/$Q index.
[  192.950992][T11010] ntfs: (device loop4): load_system_files(): Failed to load $Quota.  Will not be able to remount read-write.  Run chkdsk.
[  192.959977][T11054] loop3: detected capacity change from 0 to 4096
[  193.056212][T11010] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  193.097270][T11054] ntfs: volume version 3.1.
[  193.308955][T11087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2850'.
[  193.397638][T11098] loop6: detected capacity change from 0 to 16
[  193.426538][T11104] hsr0: VLAN not yet supported
[  193.469752][T11098] erofs: (device loop6): mounted with root inode @ nid 36.
[  193.520311][T11110] netlink: 'syz.4.2859': attribute type 16 has an invalid length.
[  193.537520][T11112] loop2: detected capacity change from 0 to 256
[  193.547635][T11110] netlink: 'syz.4.2859': attribute type 17 has an invalid length.
[  193.560299][T11098] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  193.566053][T11110] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  193.592021][T11110] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  193.609980][T11098] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117]
[  193.619773][T11110] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  193.637414][T11112] FAT-fs (loop2): Directory bread(block 64) failed
[  193.657294][T11110] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  193.664656][T11112] FAT-fs (loop2): Directory bread(block 65) failed
[  193.682846][T11112] FAT-fs (loop2): Directory bread(block 66) failed
[  193.689854][T11112] FAT-fs (loop2): Directory bread(block 67) failed
[  193.690832][T11110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  193.706660][T11112] FAT-fs (loop2): Directory bread(block 68) failed
[  193.713578][T11110] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  193.717122][T11112] FAT-fs (loop2): Directory bread(block 69) failed
[  193.729805][T11112] FAT-fs (loop2): Directory bread(block 70) failed
[  193.736646][T11112] FAT-fs (loop2): Directory bread(block 71) failed
[  193.743999][T11112] FAT-fs (loop2): Directory bread(block 72) failed
[  193.750591][T11112] FAT-fs (loop2): Directory bread(block 73) failed
[  193.803279][T11114] bridge2: the hash_elasticity option has been deprecated and is always 16
[  194.014569][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  194.020873][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  194.126317][T11134] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3)
[  194.431112][ T4254] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  194.521691][T11150] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2880'.
[  194.535443][T11152] ipt_CLUSTERIP: unknown mode 1850529072
[  194.615338][T11154] netlink: 'syz.3.2882': attribute type 6 has an invalid length.
[  194.686109][T11158] loop6: detected capacity change from 0 to 512
[  194.701043][ T4254] usb 3-1: Using ep0 maxpacket: 8
[  194.821215][ T4254] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  194.846036][T11158] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.2884: iget: bad extra_isize 50264 (inode size 256)
[  194.871570][T11158] EXT4-fs (loop6): Remounting filesystem read-only
[  194.878146][T11158] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.2884: couldn't read orphan inode 15 (err -117)
[  194.935455][T11130] loop5: detected capacity change from 0 to 40427
[  194.942135][T11158] EXT4-fs (loop6): Remounting filesystem read-only
[  194.948674][T11158] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,journal_dev=0x0000000000000010,inode_readahead_blks=0x0000000000000000,noinit_itable,errors=continue,errors=continue,errors=remount-ro,inode_readahead_blks=0x0000000000000004,auto_da_alloc,norecovery,stripe=0x000000000. Quota mode: none.
[  194.977324][    C0] vkms_vblank_simulate: vblank timer overrun
[  195.049032][T11130] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504)
[  195.061213][ T4254] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  195.064496][T11130] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  195.092644][ T4254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.121141][ T4254] usb 3-1: Product: syz
[  195.131264][T11130] F2FS-fs (loop5): build fault injection attr: rate: 17008, type: 0x1ffff
[  195.133173][ T4254] usb 3-1: Manufacturer: syz
[  195.166020][T11130] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x1f8
[  195.174949][ T4254] usb 3-1: SerialNumber: syz
[  195.213978][ T4254] usb 3-1: config 0 descriptor??
[  195.239693][T11130] F2FS-fs (loop5): invalid crc value
[  195.301552][T11183] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2893'.
[  195.319705][T11130] F2FS-fs (loop5): Found nat_bits in checkpoint
[  195.334441][T11178] loop3: detected capacity change from 0 to 8192
[  195.336330][T11183] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2893'.
[  195.346036][ T4271] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  195.465893][T11130] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  195.483374][T11130] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  195.492807][   T13] usb 3-1: USB disconnect, device number 14
[  195.664403][T11130] attempt to access beyond end of device
[  195.664403][T11130] loop5: rw=2049, want=45104, limit=40427
[  195.791175][ T4271] usb 5-1: unable to get BOS descriptor or descriptor too short
[  195.817933][T11198] loop6: detected capacity change from 0 to 512
[  195.871189][ T4271] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  195.886977][ T4271] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  195.912451][ T4271] usb 5-1: config 1 interface 0 has no altsetting 1
[  195.921802][T11198] EXT4-fs (loop6): Test dummy encryption mode enabled
[  195.937756][T11198] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended
[  195.953947][T11198] EXT4-fs (loop6): Errors on filesystem, clearing orphan list.
[  195.976295][T11198] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,usrquota,prjquota,usrquota,resuid=0x000000000000ee00,usrjquota=min_batch_time=0x00000000ffffffff,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  196.101195][ T4271] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  196.120073][ T4271] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.128667][ T4271] usb 5-1: Product: syz
[  196.133153][ T4271] usb 5-1: Manufacturer: syz
[  196.137823][ T4271] usb 5-1: SerialNumber: syz
[  196.182799][ T4271] smsusb:smsusb_probe: board id=8, interface number 0
[  196.246945][T11198] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  196.270374][T11198] EXT4-fs error (device loop6): ext4_add_entry:2486: inode #2: comm syz.6.2903: Directory hole found for htree leaf block 0
[  196.318373][T11223] netlink: 'syz.2.2911': attribute type 1 has an invalid length.
[  196.335233][T11223] netlink: 'syz.2.2911': attribute type 2 has an invalid length.
[  196.401189][ T4271] smsusb:smsusb_probe: usb_set_interface failed, rc -71
[  196.407377][T11223] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2911'.
[  196.413176][ T4271] smsusb: probe of 5-1:1.0 failed with error -71
[  196.458412][ T4271] usb 5-1: USB disconnect, device number 10
[  196.690198][T11242] loop6: detected capacity change from 0 to 512
[  196.713804][T11232] loop3: detected capacity change from 0 to 4096
[  196.752949][T11232] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  196.759421][T11242] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.2920: Invalid inode bitmap blk 4 in block_group 0
[  196.805330][T11242] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback.
[  196.835216][T11242] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.2920: Invalid inode bitmap blk 4 in block_group 0
[  196.853604][T11242] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem
[  196.887348][T11252] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2925'.
[  196.967692][T11232] ntfs3: loop3: failed to convert "076c" to cp949
[  197.071523][T11261] kcapi: manufacturer command 4294967295 unknown.
[  197.203816][T11269] trusted_key: encrypted_key: key user:syz not found
[  197.296794][T11277] xt_time: invalid argument - start or stop time greater than 23:59:59
[  197.431077][T10351] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  197.630702][T11298] loop5: detected capacity change from 0 to 1024
[  197.668007][T11305] loop3: detected capacity change from 0 to 8
[  197.711079][T10351] usb 3-1: Using ep0 maxpacket: 32
[  197.799362][ T3086] hfsplus: b-tree write err: -5, ino 4
[  197.836585][T11315] loop6: detected capacity change from 0 to 512
[  197.916563][T11321] device bridge3 entered promiscuous mode
[  197.979361][T11315] EXT4-fs error (device loop6): ext4_xattr_inode_iget:400: comm syz.6.2956: Parent and EA inode have the same ino 15
[  197.994853][T11321] team0: Port device bridge3 added
[  198.035089][T11315] EXT4-fs (loop6): 1 orphan inode deleted
[  198.040853][T11315] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  198.061268][T10351] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  198.061307][T10351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.061328][T10351] usb 3-1: Product: syz
[  198.061347][T10351] usb 3-1: Manufacturer: syz
[  198.061362][T10351] usb 3-1: SerialNumber: syz
[  198.064143][T10351] usb 3-1: config 0 descriptor??
[  198.102880][T10351] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  198.103561][T10351] dvb-usb: bulk message failed: -22 (2/0)
[  198.105421][T10351] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  198.121252][T10351] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  198.121322][T10351] usb 3-1: media controller created
[  198.143946][T10351] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  198.175290][T10351] usb 3-1: selecting invalid altsetting 7
[  198.175311][T10351] cxusb: set interface failed
[  198.175324][T10351] dvb-usb: bulk message failed: -22 (1/0)
[  198.223831][T11340] loop5: detected capacity change from 0 to 256
[  198.268999][T10351] DVB: Unable to find symbol lgdt330x_attach()
[  198.269026][T10351] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  198.329276][T11264] dvb-usb: bulk message failed: -22 (5/0)
[  198.485415][T11347] loop4: detected capacity change from 0 to 512
[  198.526157][T11353] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2973'.
[  198.535488][T10351] rc_core: IR keymap rc-dvico-portable not found
[  198.545389][T10351] Registered IR keymap rc-empty
[  198.555190][T10351] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  198.573960][T11353] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2973'.
[  198.587797][T10351] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input15
[  198.618205][T11347] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  198.631447][T10351] dvb-usb: schedule remote query interval to 100 msecs.
[  198.649692][T10351] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  198.660911][T10351] usb 3-1: USB disconnect, device number 15
[  198.679145][T11347] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.2972: invalid block
[  198.741917][T10351] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  198.759165][T11335] loop3: detected capacity change from 0 to 32768
[  198.833200][T11347] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2972: invalid indirect mapped block 10 (level 1)
[  198.864336][T11347] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.2972: invalid indirect mapped block 8 (level 1)
[  198.894881][T11335] ialloc: diAlloc returned -5!
[  198.944331][T11347] EXT4-fs (loop4): 1 truncate cleaned up
[  198.984683][T11347] EXT4-fs (loop4): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none.
[  199.335439][T11368] loop6: detected capacity change from 0 to 1024
[  199.427701][T11368] hfsplus: bad catalog entry type
[  199.571400][T11351] loop5: detected capacity change from 0 to 32768
[  199.603525][T11384] loop6: detected capacity change from 0 to 512
[  199.713051][T11384] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  199.730602][T11394] xt_TCPMSS: Only works on TCP SYN packets
[  199.748579][T11351] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  199.763162][T11384] ext4 filesystem being mounted at /428/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.950386][ T4524] ocfs2: Unmounting device (7,5) on (node local)
[  200.204551][T11410] loop4: detected capacity change from 0 to 256
[  200.307302][T11410] FAT-fs (loop4): Directory bread(block 64) failed
[  200.313750][T11418] syz.5.2993 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  200.320628][T11410] FAT-fs (loop4): Directory bread(block 65) failed
[  200.371305][T11410] FAT-fs (loop4): Directory bread(block 66) failed
[  200.385404][T11410] FAT-fs (loop4): Directory bread(block 67) failed
[  200.428301][T11410] FAT-fs (loop4): Directory bread(block 68) failed
[  200.462043][T10351] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  200.469837][T11410] FAT-fs (loop4): Directory bread(block 69) failed
[  200.490085][T11410] FAT-fs (loop4): Directory bread(block 70) failed
[  200.517231][T11410] FAT-fs (loop4): Directory bread(block 71) failed
[  200.528852][T11410] FAT-fs (loop4): Directory bread(block 72) failed
[  200.535655][T11410] FAT-fs (loop4): Directory bread(block 73) failed
[  200.576219][T11431] loop5: detected capacity change from 0 to 1024
[  200.662793][   T13] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[  200.881272][T10351] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  200.893948][T11445] loop5: detected capacity change from 0 to 2048
[  200.898799][T10351] usb 3-1: New USB device found, idVendor=056a, idProduct=0302, bcdDevice= 0.00
[  200.910302][T10351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.923211][T10351] usb 3-1: config 0 descriptor??
[  200.964439][T11445] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  200.981470][   T13] usb 7-1: not running at top speed; connect to a high speed hub
[  201.007835][T11445] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.3014: bg 0: block 234: padding at end of block bitmap is not set
[  201.081306][   T13] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  201.090354][   T13] usb 7-1: config 1 has no interface number 1
[  201.096870][   T13] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  201.261321][   T13] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  201.274526][   T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.291259][   T13] usb 7-1: Product: syz
[  201.295437][   T13] usb 7-1: Manufacturer: syz
[  201.300028][   T13] usb 7-1: SerialNumber: syz
[  201.404622][T10351] wacom 0003:056A:0302.0003: unknown main item tag 0x0
[  201.412646][T10351] wacom 0003:056A:0302.0003: unknown main item tag 0x0
[  201.419523][T10351] wacom 0003:056A:0302.0003: unknown main item tag 0x0
[  201.431772][T10351] wacom 0003:056A:0302.0003: unknown main item tag 0x0
[  201.438652][T10351] wacom 0003:056A:0302.0003: unknown main item tag 0x0
[  201.450347][T10351] wacom 0003:056A:0302.0003: unknown main item tag 0x0
[  201.460821][T10351] wacom 0003:056A:0302.0003: unknown main item tag 0x0
[  201.473858][T10351] wacom 0003:056A:0302.0003: Unknown device_type for 'HID 056a:0302'. Assuming pen.
[  201.496708][T10351] wacom 0003:056A:0302.0003: hidraw0: USB HID v0.00 Device [HID 056a:0302] on usb-dummy_hcd.2-1/input0
[  201.513684][T10351] input: Wacom Intuos PT S Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0302.0003/input/input16
[  201.529323][T11459] loop3: detected capacity change from 0 to 32768
[  201.628488][T11459] XFS (loop3): Mounting V5 Filesystem
[  201.741201][   T13] usb 7-1: failed to enable PITCH for EP 0x82
[  201.785321][ T4878] usb 3-1: USB disconnect, device number 16
[  201.832781][T11459] XFS (loop3): Ending clean mount
[  201.867990][   T13] usb 7-1: USB disconnect, device number 12
[  201.888759][T11459] XFS (loop3): Quotacheck needed: Please wait.
[  201.974258][T11459] XFS (loop3): Quotacheck: Done.
[  202.133572][ T4189] XFS (loop3): Unmounting Filesystem
[  202.155375][ T4488] udevd[4488]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  202.229140][T11485] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3027'.
[  202.652956][T11507] loop5: detected capacity change from 0 to 764
[  202.774821][T11521] capability: warning: `syz.3.3028' uses 32-bit capabilities (legacy support in use)
[  202.872012][T11526] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3046'.
[  202.996548][ T1107] usb 5-1: new low-speed USB device number 11 using dummy_hcd
[  203.381362][ T1107] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  203.397762][ T1107] usb 5-1: config 0 interface 0 has no altsetting 0
[  203.426537][ T1107] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  203.445642][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.446259][ T4878] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  203.489204][ T1107] usb 5-1: config 0 descriptor??
[  203.532996][T11516] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  203.554647][T11542] loop2: detected capacity change from 0 to 32768
[  203.621528][T11542] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.3054 (11542)
[  203.664877][T11542] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  203.685544][T11542] BTRFS info (device loop2): enabling ssd optimizations
[  203.710041][T11542] BTRFS info (device loop2): not using ssd optimizations
[  203.729185][T11542] BTRFS info (device loop2): turning off barriers
[  203.737025][T11542] BTRFS info (device loop2): using free space tree
[  203.743684][ T4878] usb 4-1: Using ep0 maxpacket: 8
[  203.759040][T11542] BTRFS info (device loop2): has skinny extents
[  203.861447][ T4872] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  203.877537][ T4878] usb 4-1: config 140 has an invalid interface number: 41 but max is 0
[  203.900154][ T4878] usb 4-1: config 140 has no interface number 0
[  203.930009][ T4878] usb 4-1: config 140 interface 41 altsetting 0 endpoint 0x6 has invalid maxpacket 926, setting to 64
[  204.032830][ T1107] elecom 0003:056E:010D.0004: unknown main item tag 0x0
[  204.041551][ T1107] elecom 0003:056E:010D.0004: unknown global tag 0xd
[  204.048251][ T1107] elecom 0003:056E:010D.0004: item 0 4 1 13 parsing failed
[  204.062651][ T1107] elecom: probe of 0003:056E:010D.0004 failed with error -22
[  204.097129][ T4878] usb 4-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=77.86
[  204.115755][ T4878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.127738][ T4878] usb 4-1: Product: syz
[  204.141581][ T4878] usb 4-1: Manufacturer: syz
[  204.146354][ T4878] usb 4-1: SerialNumber: syz
[  204.161126][ T4872] usb 7-1: Using ep0 maxpacket: 32
[  204.245381][ T4246] usb 5-1: USB disconnect, device number 11
[  204.316400][ T4872] usb 7-1: config 9 has an invalid interface number: 95 but max is 0
[  204.351335][ T4872] usb 7-1: config 9 has no interface number 0
[  204.366477][ T4872] usb 7-1: config 9 interface 95 altsetting 82 endpoint 0x9 has invalid maxpacket 2039, setting to 64
[  204.383993][ T4872] usb 7-1: config 9 interface 95 altsetting 82 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  204.397257][ T4872] usb 7-1: config 9 interface 95 has no altsetting 0
[  204.528524][ T4878] rndis_wlan 4-1:140.41: invalid descriptor buffer length
[  204.543765][ T4878] usb 4-1: bad CDC descriptors
[  204.549993][ T4878] rndis_host 4-1:140.41: invalid descriptor buffer length
[  204.558425][ T4878] usb 4-1: bad CDC descriptors
[  204.564321][ T4878] cdc_acm 4-1:140.41: invalid descriptor buffer length
[  204.574125][ T4872] usb 7-1: New USB device found, idVendor=0763, idProduct=1041, bcdDevice=da.59
[  204.583990][ T4872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.596601][ T4878] usb 4-1: USB disconnect, device number 17
[  204.610982][ T4872] usb 7-1: Product: syz
[  204.635509][ T4872] usb 7-1: Manufacturer: syz
[  204.640125][ T4872] usb 7-1: SerialNumber: syz
[  204.718960][T11623] loop2: detected capacity change from 0 to 64
[  205.030933][ T4246] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  205.102975][ T4872] usb 7-1: USB disconnect, device number 13
[  205.121067][ T4254] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  205.281017][ T4246] usb 6-1: Using ep0 maxpacket: 8
[  205.334006][ T4404] udevd[4404]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:9.95/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  205.401159][ T4246] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  205.409475][ T4246] usb 6-1: config 179 has no interface number 0
[  205.425950][ T4246] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  205.449534][T11660] loop2: detected capacity change from 0 to 64
[  205.453805][ T4246] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  205.467698][ T4246] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  205.480745][ T4246] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  205.506575][ T4254] usb 5-1: config 0 has an invalid interface number: 229 but max is 0
[  205.512813][ T4246] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  205.525461][ T4254] usb 5-1: config 0 has no interface number 0
[  205.533042][ T4246] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  205.549110][T11660] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop2
[  205.571929][ T4246] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.574458][ T4254] usb 5-1: New USB device found, idVendor=0403, idProduct=8348, bcdDevice= 0.1f
[  205.596530][T11626] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  205.600046][ T4254] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.629576][ T4254] usb 5-1: config 0 descriptor??
[  205.681754][ T4254] hub 5-1:0.229: bad descriptor, ignoring hub
[  205.687884][ T4254] hub: probe of 5-1:0.229 failed with error -5
[  205.708477][T11670] loop6: detected capacity change from 0 to 512
[  205.722956][ T4254] ftdi_sio 5-1:0.229: FTDI USB Serial Device converter detected
[  205.749584][T11675] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3106'.
[  205.752339][ T4254] usb 5-1: Detected SIO
[  205.797989][ T4254] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  205.854667][T11677] loop3: detected capacity change from 0 to 764
[  206.065043][T11684] loop6: detected capacity change from 0 to 128
[  206.123775][ T4254] usb 6-1: USB disconnect, device number 15
[  206.128649][T11687] xt_HMARK: proto mask must be zero with L3 mode
[  206.151000][    C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  206.151306][T11684] EXT4-fs (loop6): Test dummy encryption mode enabled
[  206.179138][T11685] device wlan0 entered promiscuous mode
[  206.204302][T11682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  206.227360][T11684] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none.
[  206.241211][T11684] ext4 filesystem being mounted at /442/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  206.406699][T11684] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  206.439949][T11698] loop2: detected capacity change from 0 to 2048
[  206.484982][T11698] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  206.607442][T11698] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,usrjquota=,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none.
[  206.811788][ T4246] Bluetooth: hci4: command 0x0401 tx timeout
[  206.840224][T11716] loop6: detected capacity change from 0 to 128
[  206.918170][ T4196] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /677/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[  206.941339][ T4254] usb 5-1: USB disconnect, device number 12
[  206.952497][ T4254] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  206.972533][ T4254] ftdi_sio 5-1:0.229: device disconnected
[  206.979012][ T4196] EXT4-fs (loop2): Remounting filesystem read-only
[  206.997383][ T4196] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[  207.101028][   T13] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  207.127132][ T4196] EXT4-fs (loop2): Remounting filesystem read-only
[  207.187374][ T4196] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /677/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[  207.229713][T11722] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3125'.
[  207.268779][ T4196] EXT4-fs (loop2): Remounting filesystem read-only
[  207.279164][ T4196] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[  207.357067][ T4196] EXT4-fs (loop2): Remounting filesystem read-only
[  207.375067][T11718] loop5: detected capacity change from 0 to 32768
[  207.400408][ T4196] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /677/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[  207.459208][ T4196] EXT4-fs (loop2): Remounting filesystem read-only
[  207.473570][ T4196] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[  207.486052][   T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.514169][T11718] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  207.528415][ T4196] EXT4-fs (loop2): Remounting filesystem read-only
[  207.536177][T11730] loop4: detected capacity change from 0 to 256
[  207.542972][ T4196] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /677/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[  207.584524][   T13] usb 4-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00
[  207.657873][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.679756][ T4196] EXT4-fs (loop2): Remounting filesystem read-only
[  207.703426][   T13] usb 4-1: config 0 descriptor??
[  207.729442][ T4524] ocfs2: Unmounting device (7,5) on (node local)
[  207.749229][ T4196] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[  207.896359][ T4196] EXT4-fs (loop2): Remounting filesystem read-only
[  207.952186][ T4196] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /677/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0
[  208.044099][ T4196] EXT4-fs (loop2): Remounting filesystem read-only
[  208.089736][T11752] loop6: detected capacity change from 0 to 1024
[  208.109899][ T4196] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0
[  208.232365][   T13] wacom 0003:056A:00E3.0005: hidraw0: USB HID v0.02 Device [HID 056a:00e3] on usb-dummy_hcd.3-1/input0
[  208.293307][ T4196] EXT4-fs (loop2): Remounting filesystem read-only
[  208.399086][T11754] 
[  208.401446][T11754] ======================================================
[  208.408451][T11754] WARNING: possible circular locking dependency detected
[  208.415472][T11754] syzkaller #0 Not tainted
[  208.419879][T11754] ------------------------------------------------------
[  208.426888][T11754] syz.4.3139/11754 is trying to acquire lock:
[  208.432947][T11754] ffff888079e84c28 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xc1/0x1b0
[  208.434733][ T4872] usb 4-1: USB disconnect, device number 18
[  208.444003][T11754] 
[  208.444003][T11754] but task is already holding lock:
[  208.444010][T11754] ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560
[  208.466884][T11754] 
[  208.466884][T11754] which lock already depends on the new lock.
[  208.466884][T11754] 
[  208.477361][T11754] 
[  208.477361][T11754] the existing dependency chain (in reverse order) is:
[  208.486360][T11754] 
[  208.486360][T11754] -> #4 (rfkill_global_mutex){+.+.}-{3:3}:
[  208.494352][T11754]        __mutex_lock_common+0x1eb/0x2390
[  208.500076][T11754]        mutex_lock_nested+0x17/0x20
[  208.505358][T11754]        rfkill_register+0x33/0x8a0
[  208.510560][T11754]        hci_register_dev+0x452/0x970
[  208.515933][T11754]        vhci_create_device+0x32c/0x5c0
[  208.521478][T11754]        vhci_write+0x391/0x450
[  208.526327][T11754]        vfs_write+0x712/0xd00
[  208.531090][T11754]        ksys_write+0x14d/0x250
[  208.535940][T11754]        do_syscall_64+0x4c/0xa0
[  208.540876][T11754]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  208.547289][T11754] 
[  208.547289][T11754] -> #3 (&data->open_mutex){+.+.}-{3:3}:
[  208.555106][T11754]        __mutex_lock_common+0x1eb/0x2390
[  208.560827][T11754]        mutex_lock_nested+0x17/0x20
[  208.566108][T11754]        vhci_send_frame+0x88/0x100
[  208.571305][T11754]        hci_send_frame+0x1a9/0x2e0
[  208.576505][T11754]        hci_tx_work+0x9f9/0x1710
[  208.581527][T11754]        process_one_work+0x863/0x1000
[  208.586984][T11754]        worker_thread+0xaa8/0x12a0
[  208.592185][T11754]        kthread+0x436/0x520
[  208.596771][T11754]        ret_from_fork+0x1f/0x30
[  208.601707][T11754] 
[  208.601707][T11754] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}:
[  208.610913][T11754]        __flush_work+0xdd/0x1b0
[  208.615848][T11754]        hci_dev_do_close+0x1e7/0x1030
[  208.621302][T11754]        hci_unregister_dev+0x2d7/0x580
[  208.626847][T11754]        vhci_release+0x73/0xc0
[  208.631695][T11754]        __fput+0x234/0x930
[  208.636198][T11754]        task_work_run+0x125/0x1a0
[  208.641307][T11754]        do_exit+0x61e/0x20a0
[  208.645980][T11754]        do_group_exit+0x12e/0x300
[  208.651101][T11754]        __x64_sys_exit_group+0x3b/0x40
[  208.656647][T11754]        do_syscall_64+0x4c/0xa0
[  208.661584][T11754]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  208.668003][T11754] 
[  208.668003][T11754] -> #1 (&hdev->req_lock){+.+.}-{3:3}:
[  208.675644][T11754]        __mutex_lock_common+0x1eb/0x2390
[  208.681362][T11754]        mutex_lock_nested+0x17/0x20
[  208.686650][T11754]        bg_scan_update+0x44/0x3b0
[  208.691761][T11754]        process_one_work+0x863/0x1000
[  208.697219][T11754]        worker_thread+0xaa8/0x12a0
[  208.702414][T11754]        kthread+0x436/0x520
[  208.707003][T11754]        ret_from_fork+0x1f/0x30
[  208.711940][T11754] 
[  208.711940][T11754] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}:
[  208.721755][T11754]        __lock_acquire+0x2c33/0x7c60
[  208.727131][T11754]        lock_acquire+0x197/0x3f0
[  208.732155][T11754]        __flush_work+0xdd/0x1b0
[  208.737089][T11754]        __cancel_work_timer+0x3ac/0x520
[  208.742715][T11754]        hci_request_cancel_all+0xcc/0x300
[  208.748520][T11754]        hci_dev_do_close+0x4e/0x1030
[  208.753893][T11754]        hci_rfkill_set_block+0x10a/0x190
[  208.759628][T11754]        rfkill_set_block+0x1c6/0x420
[  208.765008][T11754]        rfkill_fop_write+0x458/0x560
[  208.770380][T11754]        vfs_write+0x300/0xd00
[  208.775136][T11754]        ksys_write+0x14d/0x250
[  208.779992][T11754]        do_syscall_64+0x4c/0xa0
[  208.784924][T11754]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  208.791336][T11754] 
[  208.791336][T11754] other info that might help us debug this:
[  208.791336][T11754] 
[  208.801552][T11754] Chain exists of:
[  208.801552][T11754]   (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex
[  208.801552][T11754] 
[  208.817276][T11754]  Possible unsafe locking scenario:
[  208.817276][T11754] 
[  208.824712][T11754]        CPU0                    CPU1
[  208.830067][T11754]        ----                    ----
[  208.835422][T11754]   lock(rfkill_global_mutex);
[  208.840181][T11754]                                lock(&data->open_mutex);
[  208.847289][T11754]                                lock(rfkill_global_mutex);
[  208.854566][T11754]   lock((work_completion)(&hdev->bg_scan_update));
[  208.861144][T11754] 
[  208.861144][T11754]  *** DEADLOCK ***
[  208.861144][T11754] 
[  208.869272][T11754] 1 lock held by syz.4.3139/11754:
[  208.874373][T11754]  #0: ffffffff8d4c0f28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x19e/0x560
[  208.874590][T11756] loop5: detected capacity change from 0 to 32768
[  208.884460][T11754] 
[  208.884460][T11754] stack backtrace:
[  208.884467][T11754] CPU: 0 PID: 11754 Comm: syz.4.3139 Not tainted syzkaller #0
[  208.884484][T11754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  208.884505][T11754] Call Trace:
[  208.884512][T11754]  <TASK>
[  208.884518][T11754]  dump_stack_lvl+0x168/0x230
[  208.884541][T11754]  ? load_image+0x3b0/0x3b0
[  208.884561][T11754]  ? show_regs_print_info+0x20/0x20
[  208.884586][T11754]  ? print_circular_bug+0x12b/0x1a0
[  208.884605][T11754]  check_noncircular+0x274/0x310
[  208.884623][T11754]  ? add_chain_block+0x940/0x940
[  208.884637][T11754]  ? lockdep_lock+0xdc/0x1e0
[  208.954396][T11754]  ? __lock_acquire+0x12d9/0x7c60
[  208.959429][T11754]  ? lockdep_lock+0x1e0/0x1e0
[  208.964106][T11754]  ? mark_lock+0x94/0x320
[  208.968441][T11754]  __lock_acquire+0x2c33/0x7c60
[  208.973298][T11754]  ? verify_lock_unused+0x140/0x140
[  208.978497][T11754]  ? verify_lock_unused+0x140/0x140
[  208.983704][T11754]  lock_acquire+0x197/0x3f0
[  208.988203][T11754]  ? __flush_work+0xc1/0x1b0
[  208.992791][T11754]  ? __lock_acquire+0x7c60/0x7c60
[  208.997818][T11754]  ? read_lock_is_recursive+0x10/0x10
[  209.003194][T11754]  ? start_flush_work+0x776/0x820
[  209.008218][T11754]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  209.014124][T11754]  ? _raw_spin_unlock+0x40/0x40
[  209.018980][T11754]  __flush_work+0xdd/0x1b0
[  209.023390][T11754]  ? __flush_work+0xc1/0x1b0
[  209.027980][T11754]  ? flush_work+0x20/0x20
[  209.032303][T11754]  ? try_to_grab_pending+0xf3/0x7e0
[  209.037499][T11754]  ? lockdep_hardirqs_off+0x70/0x100
[  209.042799][T11754]  ? mark_lock+0x94/0x320
[  209.047138][T11754]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  209.053124][T11754]  ? lock_chain_count+0x20/0x20
[  209.057982][T11754]  ? mark_lock+0x94/0x320
[  209.062321][T11754]  ? __cancel_work_timer+0x331/0x520
[  209.067609][T11754]  __cancel_work_timer+0x3ac/0x520
[  209.072724][T11754]  ? cancel_work_sync+0x20/0x20
[  209.077575][T11754]  ? __cancel_work+0x1f4/0x2d0
[  209.082337][T11754]  ? lockdep_hardirqs_on+0x94/0x140
[  209.087539][T11754]  ? __cancel_work+0x26f/0x2d0
[  209.092306][T11754]  ? cancel_work+0x20/0x20
[  209.096723][T11754]  ? lock_chain_count+0x20/0x20
[  209.101578][T11754]  hci_request_cancel_all+0xcc/0x300
[  209.106875][T11754]  hci_dev_do_close+0x4e/0x1030
[  209.111727][T11754]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  209.117619][T11754]  ? _raw_spin_unlock+0x40/0x40
[  209.122469][T11754]  hci_rfkill_set_block+0x10a/0x190
[  209.127674][T11754]  ? rcu_lock_release+0x20/0x20
[  209.132527][T11754]  rfkill_set_block+0x1c6/0x420
[  209.137385][T11754]  rfkill_fop_write+0x458/0x560
[  209.142239][T11754]  ? rfkill_fop_read+0x4b0/0x4b0
[  209.147176][T11754]  ? common_file_perm+0x130/0x1c0
[  209.152201][T11754]  ? fsnotify_perm+0x5d/0x560
[  209.156883][T11754]  ? security_file_permission+0x75/0xa0
[  209.162444][T11754]  ? rfkill_fop_read+0x4b0/0x4b0
[  209.167388][T11754]  vfs_write+0x300/0xd00
[  209.171634][T11754]  ? file_end_write+0x250/0x250
[  209.176489][T11754]  ? __fget_files+0x40f/0x480
[  209.181171][T11754]  ? __fdget_pos+0x1e2/0x370
[  209.185761][T11754]  ? ksys_write+0x71/0x250
[  209.190176][T11754]  ksys_write+0x14d/0x250
[  209.194511][T11754]  ? __ia32_sys_read+0x80/0x80
[  209.199276][T11754]  ? lockdep_hardirqs_on+0x94/0x140
[  209.204477][T11754]  do_syscall_64+0x4c/0xa0
[  209.208896][T11754]  ? clear_bhb_loop+0x30/0x80
[  209.213580][T11754]  ? clear_bhb_loop+0x30/0x80
[  209.218259][T11754]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  209.224153][T11754] RIP: 0033:0x7f328083c6c9
[  209.228569][T11754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  209.248174][T11754] RSP: 002b:00007f327eaa3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  209.256587][T11754] RAX: ffffffffffffffda RBX: 00007f3280a92fa0 RCX: 00007f328083c6c9
[  209.264559][T11754] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003
[  209.272528][T11754] RBP: 00007f32808bef91 R08: 0000000000000000 R09: 0000000000000000
[  209.280497][T11754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  209.288469][T11754] R13: 00007f3280a93038 R14: 00007f3280a92fa0 R15: 00007ffdeec58538
[  209.296445][T11754]  </TASK>
[  209.299523][    C0] vkms_vblank_simulate: vblank timer overrun
[  209.328959][T11772] fido_id[11772]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  209.760373][ T3086] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.770850][ T3086] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 38304 - 0
[  209.784751][ T3086] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 42221 - 0
[  209.845481][ T3086] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.869240][ T3086] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 38304 - 0
[  209.881749][ T3086] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 42221 - 0
[  209.925015][ T3086] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.941577][ T3086] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 38304 - 0
[  209.953590][ T3086] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 42221 - 0
[  210.024674][ T3086] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.036587][ T3086] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 38304 - 0
[  210.047589][ T3086] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 42221 - 0
[  210.673126][ T3086] device hsr_slave_0 left promiscuous mode
[  210.679317][ T3086] device hsr_slave_1 left promiscuous mode
[  210.701300][ T3086] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.708716][ T3086] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.721047][ T3086] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.728428][ T3086] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.761772][ T3086] bridge0: port 3(team0) entered disabled state
[  210.768985][ T3086] device bridge_slave_1 left promiscuous mode
[  210.776968][ T3086] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.785541][ T3086] device bridge_slave_0 left promiscuous mode
[  210.793457][ T3086] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.803997][ T3086] device veth1_macvtap left promiscuous mode
[  210.810013][ T3086] device veth0_macvtap left promiscuous mode
[  210.832575][ T3086] device veth1_vlan left promiscuous mode
[  210.838362][ T3086] device veth0_vlan left promiscuous mode
[  210.928965][ T3086] bond1 (unregistering): Released all slaves
[  211.038958][ T3086] device team_slave_1 left promiscuous mode
[  211.045414][ T3086] team0 (unregistering): Port device team_slave_1 removed
[  211.056518][ T3086] device team_slave_0 left promiscuous mode
[  211.066867][ T3086] team0 (unregistering): Port device team_slave_0 removed
[  211.078499][ T3086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  211.092237][ T3086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  211.145043][ T3086] bond0 (unregistering): Released all slaves