last executing test programs:

4m13.956421051s ago: executing program 3 (id=181):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x1000000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x6)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000100)={0xff9c, 0x8001})

4m13.573065781s ago: executing program 3 (id=186):
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a41535900002000000010902270001010080fa0904000003ff00000007050202000200070581020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200))
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000240))
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000110)="00000000ffff")

4m11.22166374s ago: executing program 3 (id=198):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000180)={[{@noflush_merge}, {@adaptive_mode}, {@block_mode}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@discard}, {@nouser_xattr}, {@jqfmt_vfsv1}, {@errors_remount}, {@fsync_mode_strict}, {@age_extent_cache}, {@nocheckpoint_merge}, {@resuid}]}, 0x1, 0x552b, &(0x7f0000005a40)="$eJzs3M2LG2UYAPAn2W6/rYt48NaBIuxCE5rtB3qr2uIHtpSqB0+aTdKQNsksmzRde1HBo3jw7D8hCp48in+CB8/exIPiTahk3ol2q0Jx000/fj+YPDPvvHnyvGEJeWaWBPDEWsl+/7USx+JQRCxFxNGIYr9SboXzKTwXEccjonrXVinH/xrYHxGHI+LYNHnKWSlPfX5ycuLsL2/89u0PB/Yd+fKbHxe3amDRno+IwWbav1UpPm2qs3PXy/HmpFfEwZlJGdOJwY3yOE/xVmdjUMTmbF6ziKe7aX6+eXM0jdf6zdY0dnvXivHNYbeIo0l3lqd4wvXmVnHc7mwUsTfKi9i9neravp0+226PxilPu8z3QZE+xuNZTOOd7U5az+aNIraG43I85c3bne1pnJSxfLlo5f12UcfGbt7ph9ubveHN7WzS2Rr18mF2tt54od44V2ts5e3OuHOm1hy0z53JVrv96bTauNMcnO/mebffqbfywVq22m21ao1Gtnqhs9FrDrNGo366fqp2dq3cO5m9evmdrN/OVqfx5d7w5rjXH2XX8q0sPWMtW6+ffnEtO9HI3rp0Jbty9eLFS1fefu/Cu5dfuvT6K+Wkf5SVra6fWl+vNU7V1htrj+L6q/G/1v9JWXS2+sX3aW/X64ddSV9U7yQfLroagEfCffX/Jf0/MC87+v9Binlqw3fZ/29djXjw/X/o/+dC/7+A9X/88KwfduXeL6oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwxflr+6rViZyUdHynHnyqHnimPKxFRjYg7/2Ip9u/IuVTmWf6P+cv31PBdJYoM09c4UG6HI+J8uf3x9IN+FwAAAODx9fVHxz9L3Xp6WFl0QeyldNGmevT9OeWrRMTyys9zyladPjw7p2TF3/e+2J5TtuIC1sE5JUuX3PbNK9t9WdoRDt4VKilU97QcAABgT+zsBPa2CwEAAGAvfbroAliMSsxuZc7uBRf/ef/3DcFDO44AAACAR1Bl0QUAAAAAD1zR//v9PwAAAHi8pd//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2bmf28SBKA7AzwYv7D8tWu19W9kblLEl7HGPEQWkCQrIgbSQBqiB3FJCBBEeh0DEIZLHthJ9n+RMxjI/3iA4zIw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECX7qv14vbq93XbnN2+nTyjAQAAAC7ZVutF/c8s9b829783t342/SIiyoi4NHcfxaezzFGTU708f3P6fPWqhruIOuHwHpPm+hIRf5rr8UfXnwIAAAB8XJvlap5m6+nPbOiC6FNatCm//c2UV0RENXvIlFYe8n5lCqu/3+P4nymtXsCaZgpLS27jXGlvUv/cj6t205OmSE158WXHIrONHQAA6NHorOl3FgIAAECf/g1dAMMo4nkr87gVOElNs733+awHAAAAvEPF0AUAAAAAnavn/z2d/7d3/h8AAAAMI53/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJe21XqxWa7mbXN2+3byjAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAntifdxQIgTAIg73rO5O5/2GlQVNTkyoQPv7GYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgze/+8n9iapxJ5l4bS88jydqpsXVq7J0bR38YX78GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYn/uTiAEgiAM9v3t6Zts/sFKi8YgQhUIHzOMsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMATvc4v7ys+jS3Jt9PGr+OZZHTV+HfVWHrQWHswj1+Oe18EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAzs79vMZRxQEAfzOzs7VVcY2yh4goeNCL3W5ra2/iQQke/BOEkG5r7NYfbQ62FDEXb5JzL6JHEUGJt/4PPbfQS731sIcKnpU3O5OdJgFXpTOb5POBN++7wzDv+14g5DtvsgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDR5dxZn8dCbxml57u6jm2uxv7erj25v3V+OLcZJk0kfDC/XPyT99hIBAADg6Miq+j6E8CDfXol92ivq/7y6Jtb83z87jat6fnfdX/VV7R/bb78+fHFnoN50nHjTi+vj0am9qXSe3CwX23P/eEWnWPni2UtW/EDSDzZfmOTFeibf3rnzXrcIjzWRLQDwX5ys+jKo/h6K/bDNxAA4Mjq1wruq/7NeuzkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANGGyGZ6u4iSEsNyZxdG9RzfX9utvb91frtq5W7e2wteze8Zb5CGEi+vj0alGZ7PYrl2/cXl1PB5dbT54JYTQ1ujvlNO//NEcF4fQyvoc9CAt17j1fKpEFmNZDkrQ0i8kAAAOrbxssa5/kG+vxHPJUgh//fB4/f96LQ5z1v8PPz53tz5Wvf4fNjbDxTfYuPL54Nr1G2+uX1m9NLo0+vSt08O3h2fOnz17flA8Kxl4YgIAAMD/0y1bvf5Pl/bu/5+oxWHO+v+L74Zf1cfK1P/7mm36tZ0JAADA0fb8q3/+kexzPul2w5erGxtXh9PjzufT02MLqf5rx8pWr/+zpbazAgAAAJow2Uwe2/+/UIvDnPv/z/z40s/1e2YhhOPl/v/Jtc/GF5qbzkJr4t+J254jAAAA7Tpetvr+f168/5/uvPKQhhDeeG0al18DOFf9n73/zU/1serv/59pbooLKe1P16Po+yF0+m1nBAAAwGH2VNlisf97vr3yyS8nPux6/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgaX8HAAD//6zHQEI=")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000300)={@desc={0x1, 0x0, @desc4}})

4m9.757242677s ago: executing program 3 (id=211):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xd, 0x20e, &(0x7f0000000dc0)="$eJzsVUtrU0EU/s7NJLfRLAru3BpsN9reWxDXbuxef4AhvdZi4qMTsQkFo5tuFMQ/UfBP6ELQvQsRwY0uFHRRcaVI5Mycmd48MPeKj818EM53vjmPmbmZmSv6po4B/DjYbWMRBoQG3hBBAVgiq32rWftF7EjwQVk/Ef2x2PdidX/w8r6lg6utTifb1v1fkxgEzIkZJ9PSuScPjhXPnyAv7o0rhCJZpEr2GpWemCU4VHoVu7PTwQ/HlHhWjORiskVy4Tcn9u9JfWryjnxtAHnl4x/sXuXdrGJmDFGp//oMwgUMAfzQ98b0Z5okrx/ZzjNjKpJex/i2zCV8iv/3V2bCd5EhUYksBQ35Hvr83QifCaji1cFum9VLcovx8Ib9uSNhsth5los5roAhQBWMTFGuoyR2CcBKr3tjRfcHp7a6rc1sM7uWpmtnVp8flSM6ugNsdbJVMtOw6RETBQ8+p/XcOP/T3h6OD5ED5aYGXhe7VvYl3eW8fMKFmAaIcrm5GlL3qe8fi3ZLd3ERJ7EA4PaQh1PZoCa4msJlXto6CBVxEjeHyD4fiLBgBk63r3c29kAgl7YP5Wsk71D1TioON8rWzvrl74ltil0Xu+/2ReDeLvcmKVPhk3jLQ6CGnRYvkqWdVq+3nTCv+QpGSxd950i6utfQNWvGKIgjRQMDAgICAgICAv4SfgYAAP//SqQ9DQ==")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80)
getdents64(r0, &(0x7f0000000180)=""/42, 0x2a)

4m8.83153702s ago: executing program 3 (id=224):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000400)={r1, r1, 0xd, 0xffffffffffffff94, 0x0, 0x9, 0x1, 0x16c0, 0x5505, 0x8b, 0x1, 0x9, 'syz0\x00'})

4m8.265247754s ago: executing program 3 (id=229):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10)

4m8.03419131s ago: executing program 32 (id=229):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x10)

1m32.141378488s ago: executing program 2 (id=1696):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)={0x3, 0x0, [{0x7, 0xffffffff, 0x1, 0xffffff89, 0x6, 0x6, 0x2}, {0xb, 0x8, 0x3, 0x3ff, 0x7ffffdff, 0x8003, 0xffff}, {0x1, 0x101, 0x6, 0x8000, 0x27, 0x7, 0x9}]})

1m31.968596223s ago: executing program 2 (id=1698):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x84)
write(r0, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff000000", 0x2f)

1m31.845709706s ago: executing program 2 (id=1700):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)={0x40002001})
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180), 0x4)

1m31.66830931s ago: executing program 2 (id=1704):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@usrjquota}, {@oldalloc}, {@jqfmt_vfsv0}, {@i_version}]}, 0xff, 0x523, &(0x7f0000000900)="$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")
mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0)
chdir(&(0x7f0000000080)='./file0\x00')
symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1m30.989022247s ago: executing program 2 (id=1713):
r0 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x6, @empty, 0x1}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x17)

1m30.265366315s ago: executing program 2 (id=1720):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./security\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/tomoyo/domain_policy\x00', 0x0, 0x0)
read$FUSE(r0, 0x0, 0x4000)

1m30.133802838s ago: executing program 33 (id=1720):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./security\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/tomoyo/domain_policy\x00', 0x0, 0x0)
read$FUSE(r0, 0x0, 0x4000)

2.901180356s ago: executing program 5 (id=2548):
syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f0000000080)={[{@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0xff}}, {@grpid}]}, 0x1, 0x513, &(0x7f00000017c0)="$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")
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0xb2)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x1000, 0x6})

2.130897556s ago: executing program 5 (id=2554):
r0 = socket$inet(0x2, 0x2000000000003, 0x2)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)

1.824575354s ago: executing program 4 (id=2556):
mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0)
writev(r0, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aeae41b5fde2f28d891ffda7e94646233f4e80b9ff2507f07db3ee231cecc4f81c70d0c5a37b16e6b254ad7bd22e49ddb83263ace4aabe6b0937a16821b6895fc9850f484d076854903d422", 0x95}], 0x1)

1.711052116s ago: executing program 5 (id=2558):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='GPL\x00', 0x80000005, 0x0, 0x0, 0x41000, 0x7e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r0, 0x8b2a, &(0x7f0000000040))

1.608930009s ago: executing program 4 (id=2560):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x5, @empty, 'vcan0\x00'}}, 0x1e)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)

1.477165762s ago: executing program 5 (id=2562):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0)
ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0)

1.220822859s ago: executing program 5 (id=2565):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x9, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x24}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20004080)

1.090066502s ago: executing program 0 (id=2567):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100), 0x8)

890.313127ms ago: executing program 4 (id=2569):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc04}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MTU={0x8, 0x4, 0x87f}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000090)

808.503129ms ago: executing program 5 (id=2570):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)

779.79675ms ago: executing program 1 (id=2571):
r0 = semget$private(0x0, 0x6, 0x0)
semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x9, 0x1800}], 0x1, 0x0)
semop(r0, &(0x7f0000000240)=[{0x1, 0x0, 0x800}, {0x2, 0x0, 0x2000}], 0x2)
semop(r0, &(0x7f0000000140)=[{0x1, 0xfff, 0x1800}, {0x4, 0x0, 0x800}], 0x2)

700.822422ms ago: executing program 0 (id=2572):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000440)=r0, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000)

606.352644ms ago: executing program 1 (id=2573):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800005000000010000000000000060018200000", @ANYRES32=r0, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0xdf, &(0x7f0000001400)=""/223}, 0x94)

605.593044ms ago: executing program 4 (id=2574):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0xc005}, 0x4000890)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200), &(0x7f0000000240)=0x8)

518.034096ms ago: executing program 0 (id=2575):
r0 = fanotify_init(0xf00, 0x1000)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
fanotify_mark(r0, 0x105, 0x10000818, r1, 0x0)
readv(r0, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1)

516.650567ms ago: executing program 1 (id=2576):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x9e, &(0x7f0000000580)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x68, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x1a, 0x4, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @mptcp=@remove_addr={0x1e, 0x1f, 0xb, 0x0, "05c8395c5053e5b105818587ef52e10a47d0da66be4aa0bf03d43b0f"}, @fastopen={0x22, 0x2}, @sack={0x5, 0xe, [0x220, 0x130c, 0xabc]}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0xe, [0x1, 0xfffffffe, 0x3]}]}}}}}}}}, 0x0)

386.36986ms ago: executing program 1 (id=2577):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58)
r1 = accept(r0, 0x0, 0x0)
sendmsg$netlink(r1, &(0x7f0000004540)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)={0x38, 0x21, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@nested={0x19, 0x13d, 0x0, 0x1, [@generic="6163a5e212d498e6dc524e2316bef8321eacccf2b0"]}, @typed={0xc, 0x17, 0x0, 0x0, @u64=0xfffffffffffffffa}]}, 0x38}], 0x1, 0x0, 0x0, 0x10}, 0x10)

316.801032ms ago: executing program 0 (id=2578):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth1_macvtap\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@bridge_getneigh={0x28, 0x1e, 0x903, 0x3, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x4109, 0x318}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x44)

255.026283ms ago: executing program 1 (id=2579):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x20000020)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xc, &(0x7f0000000540)=@ccm_128={{0x303}, "f340cceb37bafac8", "22968ddfe15c9a1b88d78d123f5c48e7", "c1a33d18", "271d734267d49519"}, 0x28)

184.388725ms ago: executing program 0 (id=2580):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/smt/control\x00', 0x2, 0x80)
write$char_usb(r0, &(0x7f00000001c0)="0ab1", 0x2)

120.252557ms ago: executing program 1 (id=2581):
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

42.988148ms ago: executing program 0 (id=2582):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r0, &(0x7f00000003c0)='\\x01000000 2000000000 0 -', 0x19)

42.041239ms ago: executing program 4 (id=2583):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x19, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0700007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000021d00008500000082000000b708000000000000dbaaf8fff1000000b5080000010000087b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)

0s ago: executing program 4 (id=2584):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x8, 0x7ff}})
ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffe7527, 0xcd, 0x6a31, 0x7f7, 0x3, "bd31c267a000002000002000", 0x10, 0x200008})
ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

op4): write_blk: dquota write failed
[  225.680215][ T9730] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  225.703691][ T9730] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.1423: Failed to acquire dquot type 0
[  225.799423][ T9730] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.1423: corrupted inode contents
[  225.839379][ T9730] EXT4-fs error (device loop4): ext4_dirty_inode:6144: inode #16: comm syz.4.1423: mark_inode_dirty error
[  225.868758][ T9730] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.1423: corrupted inode contents
[  225.891482][ T9730] EXT4-fs error (device loop4): __ext4_ext_dirty:208: inode #16: comm syz.4.1423: mark_inode_dirty error
[  225.916816][ T9730] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.1423: corrupted inode contents
[  225.945785][ T9730] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  225.952552][ T9743] loop2: detected capacity change from 0 to 4096
[  225.964183][ T9730] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #16: comm syz.4.1423: corrupted inode contents
[  225.966847][ T9743] EXT4-fs: Ignoring removed mblk_io_submit option
[  225.994861][ T9730] EXT4-fs error (device loop4): ext4_truncate:4302: inode #16: comm syz.4.1423: mark_inode_dirty error
[  226.023279][ T9730] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  226.034742][ T9743] EXT4-fs (loop2): Test dummy encryption mode enabled
[  226.052546][ T9730] EXT4-fs (loop4): 1 truncate cleaned up
[  226.068795][ T9743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.083424][ T9730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.122794][ T9730] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.260839][ T6387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.365101][ T9743] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  226.394577][ T9743] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  226.410374][ T9747] loop4: detected capacity change from 0 to 8
[  226.450729][ T9747] SQUASHFS error: Unknown LZ4 version
[  226.470443][ T9747] squashfs image failed sanity check
[  226.494572][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.187636][ T9751] loop4: detected capacity change from 0 to 40427
[  227.205378][ T9751] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  227.241014][ T9751] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  227.255297][ T9751] F2FS-fs (loop4): invalid crc value
[  227.297764][ T9751] F2FS-fs (loop4): Found nat_bits in checkpoint
[  227.354452][ T9750] loop2: detected capacity change from 0 to 32768
[  227.424346][ T9751] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  227.431429][ T9751] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  227.493936][ T9751] syz.4.1431: attempt to access beyond end of device
[  227.493936][ T9751] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  227.524310][ T9751] syz.4.1431: attempt to access beyond end of device
[  227.524310][ T9751] loop4: rw=2049, sector=45104, nr_sectors = 48 limit=40427
[  227.634866][ T6387] syz-executor: attempt to access beyond end of device
[  227.634866][ T6387] loop4: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[  227.679362][ T6387] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  229.039940][ T9773] loop4: detected capacity change from 0 to 8192
[  229.067855][ T9773] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  229.082924][ T9773] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  229.094616][ T9773] REISERFS (device loop4): using ordered data mode
[  229.101375][ T9773] reiserfs: using flush barriers
[  229.111233][ T9773] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  229.131284][ T9773] REISERFS (device loop4): checking transaction log (loop4)
[  229.182405][ T9773] REISERFS (device loop4): Using r5 hash to sort names
[  229.189680][ T9773] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  229.264187][ T9781] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1'
[  229.292658][ T9781] CPU: 0 PID: 9781 Comm: syz.1.1442 Not tainted syzkaller #0
[  229.300077][ T9781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  229.310153][ T9781] Call Trace:
[  229.313466][ T9781]  <TASK>
[  229.316417][ T9781]  dump_stack_lvl+0x18c/0x250
[  229.321128][ T9781]  ? show_regs_print_info+0x20/0x20
[  229.326396][ T9781]  ? load_image+0x420/0x420
[  229.330938][ T9781]  sysfs_create_dir_ns+0x26e/0x2a0
[  229.336076][ T9781]  ? __lock_acquire+0x7d80/0x7d80
[  229.341130][ T9781]  ? sysfs_warn_dup+0xa0/0xa0
[  229.345828][ T9781]  ? rcu_is_watching+0x15/0xb0
[  229.350628][ T9781]  ? do_raw_spin_unlock+0x121/0x230
[  229.355861][ T9781]  kobject_add_internal+0x617/0xc90
[  229.361103][ T9781]  kobject_add+0x164/0x240
[  229.365558][ T9781]  ? kobject_init+0x1d0/0x1d0
[  229.370273][ T9781]  ? get_device_parent+0x366/0x390
[  229.375416][ T9781]  device_add+0x3fa/0xc40
[  229.379777][ T9781]  tty_register_device_attr+0x425/0x950
[  229.382775][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1444'.
[  229.385341][ T9781]  ? tty_register_device+0x30/0x30
[  229.399325][ T9781]  ? tty_port_init+0x132/0x1a0
[  229.404113][ T9781]  ? gsm_dlci_alloc+0x32a/0x630
[  229.408993][ T9781]  ? __might_fault+0xaa/0x120
[  229.413707][ T9781]  gsm_activate_mux+0x110/0x2a0
[  229.418591][ T9781]  gsmld_ioctl+0x12ca/0x1900
[  229.423204][ T9781]  ? gsmld_write+0x120/0x120
[  229.427808][ T9781]  ? __init_ldsem+0x150/0x150
[  229.432485][ T9781]  ? __fget_files+0x28/0x460
[  229.437080][ T9781]  ? gsmld_write+0x120/0x120
[  229.441665][ T9781]  tty_ioctl+0x9b5/0xdc0
[  229.445907][ T9781]  ? tty_get_icount+0xb0/0xb0
[  229.450579][ T9781]  __se_sys_ioctl+0xfd/0x170
[  229.455169][ T9781]  do_syscall_64+0x55/0xb0
[  229.459581][ T9781]  ? clear_bhb_loop+0x40/0x90
[  229.464252][ T9781]  ? clear_bhb_loop+0x40/0x90
[  229.468926][ T9781]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  229.474815][ T9781] RIP: 0033:0x7fe92c39e0d9
[  229.479245][ T9781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  229.498864][ T9781] RSP: 002b:00007fe92d288028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  229.507286][ T9781] RAX: ffffffffffffffda RBX: 00007fe92c626090 RCX: 00007fe92c39e0d9
[  229.515259][ T9781] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000003
[  229.523225][ T9781] RBP: 00007fe92c435024 R08: 0000000000000000 R09: 0000000000000000
[  229.531190][ T9781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  229.539156][ T9781] R13: 00007fe92c626128 R14: 00007fe92c626090 R15: 00007ffd4be61cc8
[  229.547136][ T9781]  </TASK>
[  229.572471][ T9781] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory.
[  230.223513][ T9802] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1451'.
[  231.017791][ T9828] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000
[  231.100078][ T9828] pci 0000:00:05.0: BAR 0 [mem 0xfe000000-0xfe7fffff]
[  231.208806][ T9828] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  231.246074][ T9828] pci 0000:00:05.0: vgaarb: setting as boot VGA device
[  231.253258][ T9828] pci 0000:00:05.0: vgaarb: bridge control possible
[  231.255510][ T9818] loop1: detected capacity change from 0 to 32768
[  231.259849][ T9828] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  231.281103][ T9828] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned
[  232.231325][ T9858] netlink: 316 bytes leftover after parsing attributes in process `syz.4.1475'.
[  232.698036][ T9870] loop0: detected capacity change from 0 to 1024
[  232.803893][ T9870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  232.860120][ T9870] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  232.881345][ T9879] loop2: detected capacity change from 0 to 4096
[  232.957675][ T9880] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  233.059813][ T9884] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[  233.076983][   T27] audit: type=1800 audit(1787833256.295:25): pid=9879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1484" name="file1" dev="loop2" ino=15 res=0 errno=0
[  233.287163][ T9886] loop1: detected capacity change from 0 to 512
[  233.301624][ T9886] EXT4-fs: Ignoring removed nobh option
[  233.407605][ T9886] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #3: comm syz.1.1486: corrupted inode contents
[  233.443264][ T9886] EXT4-fs error (device loop1): ext4_dirty_inode:6144: inode #3: comm syz.1.1486: mark_inode_dirty error
[  233.473132][ T9886] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #3: comm syz.1.1486: corrupted inode contents
[  233.498124][ T9886] EXT4-fs error (device loop1): __ext4_ext_dirty:208: inode #3: comm syz.1.1486: mark_inode_dirty error
[  233.542397][ T9886] Quota error (device loop1): write_blk: dquota write failed
[  233.549951][ T9886] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  233.594496][ T9886] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.1486: Failed to acquire dquot type 0
[  233.639673][ T9886] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #16: comm syz.1.1486: corrupted inode contents
[  233.652869][ T9890] loop4: detected capacity change from 0 to 512
[  233.675164][ T1117] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm kworker/u4:8: lblock 0 mapped to illegal pblock 0 (length 6)
[  233.705232][ T9890] EXT4-fs error (device loop4): ext4_iget_extra_inode:4740: inode #15: comm syz.4.1487: corrupted in-inode xattr: invalid ea_ino
[  233.711523][ T9886] EXT4-fs error (device loop1): ext4_dirty_inode:6144: inode #16: comm syz.1.1486: mark_inode_dirty error
[  233.749342][ T1117] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  233.782117][ T9890] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.1487: couldn't read orphan inode 15 (err -117)
[  233.802427][ T1117] EXT4-fs (loop0): This should not happen!! Data will be lost
[  233.802427][ T1117] 
[  233.824054][   T12] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8)
[  233.838443][ T9886] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #16: comm syz.1.1486: corrupted inode contents
[  233.858381][   T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  233.859082][ T9890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  233.870800][   T12] EXT4-fs (loop0): This should not happen!! Data will be lost
[  233.870800][   T12] 
[  233.886802][ T9886] EXT4-fs error (device loop1): __ext4_ext_dirty:208: inode #16: comm syz.1.1486: mark_inode_dirty error
[  233.933024][ T9886] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #16: comm syz.1.1486: corrupted inode contents
[  233.988302][ T6387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.001694][ T9886] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  234.019931][ T9886] EXT4-fs error (device loop1): ext4_do_update_inode:5256: inode #16: comm syz.1.1486: corrupted inode contents
[  234.044100][ T8063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  234.059093][ T9886] EXT4-fs error (device loop1): ext4_truncate:4302: inode #16: comm syz.1.1486: mark_inode_dirty error
[  234.116399][ T9886] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  234.129464][ T9886] EXT4-fs (loop1): 1 truncate cleaned up
[  234.152826][ T9886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.169489][ T9886] ext4 filesystem being mounted at /385/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  234.445279][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.642472][ T9909] tun0: tun_chr_ioctl cmd 35108
[  234.789632][ T9914] loop2: detected capacity change from 0 to 256
[  234.836491][ T9914] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d)
[  235.157489][ T9903] loop0: detected capacity change from 0 to 40427
[  235.179055][ T9903] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  235.198966][ T9903] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  235.220278][ T9903] F2FS-fs (loop0): invalid crc value
[  235.240443][ T9903] F2FS-fs (loop0): Found nat_bits in checkpoint
[  235.434036][ T9903] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  235.455501][ T9903] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  235.636959][ T9903] syz.0.1491: attempt to access beyond end of device
[  235.636959][ T9903] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  235.726793][ T9938] syz.0.1491: attempt to access beyond end of device
[  235.726793][ T9938] loop0: rw=2049, sector=45104, nr_sectors = 48 limit=40427
[  235.898021][ T8063] syz-executor: attempt to access beyond end of device
[  235.898021][ T8063] loop0: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[  235.947347][ T8063] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  236.170943][ T9954] loop4: detected capacity change from 0 to 1024
[  236.225145][ T9954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  236.258225][ T9954] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  236.511664][ T9963] loop0: detected capacity change from 0 to 64
[  237.083618][ T9971] loop1: detected capacity change from 0 to 16
[  237.117684][   T49] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: comm kworker/u4:3: lblock 0 mapped to illegal pblock 0 (length 6)
[  237.121963][ T9971] erofs: (device loop1): mounted with root inode @ nid 36.
[  237.162389][   T49] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  237.184471][   T49] EXT4-fs (loop4): This should not happen!! Data will be lost
[  237.184471][   T49] 
[  237.198532][   T49] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:3: lblock 8 mapped to illegal pblock 8 (length 8)
[  237.215978][   T49] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  237.231888][   T49] EXT4-fs (loop4): This should not happen!! Data will be lost
[  237.231888][   T49] 
[  237.249031][ T9971] erofs: (device loop1): erofs_find_target_block: corrupted dir block 0 @ nid 36
[  237.281299][ T9971] erofs: (device loop1): erofs_map_blocks_flatmode: internal error @ nid: 36 (size 18446462598732841076), m_la 0x1000
[  237.610438][ T9981] loop1: detected capacity change from 0 to 4096
[  237.644469][ T9983] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  237.742332][   T27] audit: type=1800 audit(1787833260.975:26): pid=9981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1521" name="file1" dev="loop1" ino=15 res=0 errno=0
[  238.251348][ T6387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  238.746354][T10016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1531'.
[  238.987995][T10030] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1536'.
[  239.130213][T10035] loop2: detected capacity change from 0 to 128
[  239.631633][T10055] loop4: detected capacity change from 0 to 2048
[  239.709265][T10055] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  240.611549][T10079] loop2: detected capacity change from 0 to 1024
[  240.657271][T10079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  240.749432][T10079] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.705310][   T59] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm kworker/u4:4: lblock 0 mapped to illegal pblock 0 (length 6)
[  241.751895][   T59] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  241.790789][   T59] EXT4-fs (loop2): This should not happen!! Data will be lost
[  241.790789][   T59] 
[  241.839809][   T12] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8)
[  241.882189][   T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  241.901810][   T12] EXT4-fs (loop2): This should not happen!! Data will be lost
[  241.901810][   T12] 
[  242.239946][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  242.263240][T10130] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1565'.
[  242.318059][T10130] veth1: entered promiscuous mode
[  242.366607][T10130] veth1: left promiscuous mode
[  242.666689][T10143] pim6reg0: tun_chr_ioctl cmd 1074025694
[  242.684972][T10147] loop2: detected capacity change from 0 to 1024
[  242.699352][T10150] loop1: detected capacity change from 0 to 1024
[  242.767239][T10147] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  242.816515][T10147] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.806912][   T12] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: comm kworker/u4:1: lblock 0 mapped to illegal pblock 0 (length 6)
[  243.857312][T10188] loop0: detected capacity change from 0 to 1024
[  243.863331][   T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  243.908845][   T12] EXT4-fs (loop2): This should not happen!! Data will be lost
[  243.908845][   T12] 
[  243.930208][T10188] hfsplus: bad catalog entry type
[  243.935291][   T12] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8)
[  244.023356][   T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  244.047354][ T1144] hfsplus: b-tree write err: -5, ino 25
[  244.057444][ T1144] hfsplus: b-tree write err: -5, ino 4
[  244.061885][   T12] EXT4-fs (loop2): This should not happen!! Data will be lost
[  244.061885][   T12] 
[  244.072103][ T1144] hfsplus: b-tree write err: -5, ino 2
[  244.170152][T10198] loop0: detected capacity change from 0 to 128
[  244.290368][T10198] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  244.299769][   T27] audit: type=1800 audit(1787833267.525:27): pid=10198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1588" name="file1" dev="loop0" ino=1048640 res=0 errno=0
[  244.321102][T10198] FAT-fs (loop0): Filesystem has been set read-only
[  244.385093][ T5775] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  244.713994][T10210] loop0: detected capacity change from 0 to 2048
[  244.784956][T10210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.878245][   T27] audit: type=1800 audit(1787833268.115:28): pid=10210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1592" name="file1" dev="loop0" ino=15 res=0 errno=0
[  244.907535][T10210] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  244.928870][T10210] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[  244.948551][T10210] EXT4-fs (loop0): This should not happen!! Data will be lost
[  244.948551][T10210] 
[  244.960293][T10210] EXT4-fs (loop0): Total free blocks count 0
[  244.967138][T10210] EXT4-fs (loop0): Free/Dirty block details
[  244.973905][T10210] EXT4-fs (loop0): free_blocks=2415919104
[  244.979900][T10210] EXT4-fs (loop0): dirty_blocks=64
[  244.988301][T10210] EXT4-fs (loop0): Block reservation details
[  244.994777][T10210] EXT4-fs (loop0): i_reserved_data_blocks=4
[  245.014834][T10220] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  245.944176][T10256] loop0: detected capacity change from 0 to 1024
[  245.958895][   T27] audit: type=1400 audit(1787833269.195:29): apparmor="STATUS" operation="profile_load" profile="unconfined" name="f/o" pid=10257 comm="syz.1.1613"
[  246.015938][T10256] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  246.043291][T10256] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.815408][T10282] loop4: detected capacity change from 0 to 128
[  246.865418][T10282] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  246.896185][T10282] ext4 filesystem being mounted at /346/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  246.963738][   T59] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: comm kworker/u4:4: lblock 0 mapped to illegal pblock 0 (length 6)
[  246.982216][   T59] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  246.988403][ T6387] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  246.995157][   T59] EXT4-fs (loop0): This should not happen!! Data will be lost
[  246.995157][   T59] 
[  247.016175][   T59] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:4: lblock 8 mapped to illegal pblock 8 (length 8)
[  247.033692][   T59] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  247.046106][   T59] EXT4-fs (loop0): This should not happen!! Data will be lost
[  247.046106][   T59] 
[  247.242480][  T174] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  247.460148][ T8063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  247.462581][  T174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11
[  247.488094][T10299] loop1: detected capacity change from 0 to 1024
[  247.514081][  T174] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  247.530717][  T174] usb 3-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00
[  247.540786][  T174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.551288][  T174] usb 3-1: config 0 descriptor??
[  247.576256][T10299] hfsplus: invalid length 32517 has been corrected to 255
[  247.614953][T10301] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input14
[  247.719792][ T1144] hfsplus: b-tree write err: -5, ino 2
[  248.046048][  T174] input: HID 0458:500f as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:500F.000A/input/input15
[  248.162767][  T174] input: HID 0458:500f as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:500F.000A/input/input16
[  248.228711][T10320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1638'.
[  248.312994][  T174] kye 0003:0458:500F.000A: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:500f] on usb-dummy_hcd.2-1/input0
[  248.414772][  T174] usb 3-1: USB disconnect, device number 12
[  248.539841][T10321] fido_id[10321]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  248.830310][T10334] loop4: detected capacity change from 0 to 64
[  248.841898][ T5818] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  248.967214][T10315] loop1: detected capacity change from 0 to 32768
[  249.055365][ T5818] usb 1-1: Using ep0 maxpacket: 32
[  249.073374][ T5818] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  249.086302][T10336] loop2: detected capacity change from 0 to 1024
[  249.098632][T10315] ERROR: (device loop1): xtSearch: XT_GETPAGE: xtree page corrupt
[  249.098632][T10315] 
[  249.111740][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.137575][ T5818] usb 1-1: config 0 descriptor??
[  249.143288][T10315] xtLookup: xtSearch returned -5
[  249.159802][T10315] free_index: error reading directory table
[  249.168598][ T5818] gspca_main: sq930x-2.14.0 probing 041e:403c
[  249.976871][T10359] loop2: detected capacity change from 0 to 256
[  250.062766][ T5818] gspca_sq930x: reg_w 0105 bf00 failed -71
[  250.143811][ T5818] sq930x: probe of 1-1:0.0 failed with error -71
[  250.165206][ T5818] usb 1-1: USB disconnect, device number 15
[  250.211067][T10367] loop1: detected capacity change from 0 to 164
[  250.503949][  T790] usb 5-1: new low-speed USB device number 14 using dummy_hcd
[  250.615075][T10381] block2mtd: too many arguments
[  250.696673][T10385] netlink: 774 bytes leftover after parsing attributes in process `syz.0.1668'.
[  250.732585][T10385] netlink: 'syz.0.1668': attribute type 1 has an invalid length.
[  250.746637][  T790] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  250.763488][  T790] usb 5-1: config 0 has no interface number 0
[  250.769624][  T790] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  250.785910][  T790] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  250.806853][  T790] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  250.836080][  T790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.868795][  T790] usb 5-1: config 0 descriptor??
[  250.912511][T10369] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  250.928132][  T790] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  251.190778][  T174] usb 5-1: USB disconnect, device number 14
[  251.395755][T10409] loop0: detected capacity change from 0 to 1024
[  251.420540][T10413] loop1: detected capacity change from 0 to 736
[  252.237446][T10440] loop1: detected capacity change from 0 to 1024
[  252.241579][T10438] loop0: detected capacity change from 0 to 1024
[  252.275616][T10438] EXT4-fs: Ignoring removed oldalloc option
[  252.322816][T10438] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  252.545803][ T8063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.027793][T10465] loop2: detected capacity change from 0 to 512
[  253.073795][T10465] EXT4-fs: Ignoring removed oldalloc option
[  253.079775][T10465] EXT4-fs: Ignoring removed i_version option
[  253.143718][T10465] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  253.207143][T10471] program syz.0.1707 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  253.216787][T10465] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1704: invalid indirect mapped block 4294967295 (level 1)
[  253.315803][T10476] loop1: detected capacity change from 0 to 4096
[  253.324608][T10465] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1704: invalid indirect mapped block 4294967295 (level 1)
[  253.353863][T10465] EXT4-fs (loop2): 2 truncates cleaned up
[  253.367316][T10465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.390339][T10478] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  253.422383][T10465] jffs2: notice: (10465) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  253.563808][ T5775] EXT4-fs error (device loop2): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904
[  253.631628][ T5775] EXT4-fs error (device loop2): ext4_lookup:1858: inode #17: comm syz-executor: iget: bad extended attribute block 6904
[  253.820401][ T8890] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.335831][ T1117] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.425236][ T1117] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.479815][ T1117] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.541713][ T1117] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.562039][  T174] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  254.779901][ T1117] netdevsim netdevsim12 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.796949][  T174] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  254.816987][  T174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.848368][  T174] usb 2-1: config 0 descriptor??
[  254.884082][  T174] cp210x 2-1:0.0: cp210x converter detected
[  255.097087][ T1117] netdevsim netdevsim100 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.180365][T10516] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  255.180365][T10516] The task syz.4.1725 (10516) triggered the difference, watch for misbehavior.
[  255.307542][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  255.338047][  T174] usb 2-1: cp210x converter now attached to ttyUSB0
[  255.363898][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  255.375134][ T1117] tipc: Disabling bearer <udp:syz2>
[  255.380486][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  255.390191][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  255.408222][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  255.417514][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  255.418206][ T1117] tipc: Left network mode
[  255.572608][  T174] usb 2-1: USB disconnect, device number 11
[  255.585467][  T174] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  255.596036][  T174] cp210x 2-1:0.0: device disconnected
[  255.738247][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  255.745135][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  256.234068][T10545] loop0: detected capacity change from 0 to 256
[  256.262947][T10520] chnl_net:caif_netlink_parms(): no params data found
[  256.289701][T10545] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  256.637794][T10550] loop4: detected capacity change from 0 to 4096
[  256.672809][  T790] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  256.801557][T10562] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  256.930478][  T790] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  256.961243][  T790] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 47, changing to 4
[  256.998208][  T790] usb 2-1: config 1 interface 2 has no altsetting 0
[  257.036116][  T790] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40
[  257.057442][  T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.081865][  T790] usb 2-1: Product: syz
[  257.086131][  T790] usb 2-1: Manufacturer: syz
[  257.101012][T10520] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.108363][  T790] usb 2-1: SerialNumber: syz
[  257.121075][T10520] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.141312][T10520] bridge_slave_0: entered allmulticast mode
[  257.149855][T10520] bridge_slave_0: entered promiscuous mode
[  257.167801][T10520] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.192205][T10520] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.212497][T10520] bridge_slave_1: entered allmulticast mode
[  257.220077][T10520] bridge_slave_1: entered promiscuous mode
[  257.357280][  T790] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  257.391180][  T790] snd-usb-audio: probe of 2-1:1.0 failed with error -2
[  257.422674][  T790] hub 2-1:1.2: Invalid hub with more than one config or interface
[  257.445624][  T790] hub: probe of 2-1:1.2 failed with error -22
[  257.481400][T10576] loop4: detected capacity change from 0 to 2048
[  257.501168][ T5785] Bluetooth: hci0: command tx timeout
[  257.516778][  T790] usb 2-1: USB disconnect, device number 12
[  257.630853][T10520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  257.684982][T10520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  257.761172][T10576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.862035][T10576] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  258.002563][T10576] fs-verity (loop4, inode 13): Unknown hash algorithm number: 3
[  258.132965][T10520] team0: Port device team_slave_0 added
[  258.161161][T10589] loop1: detected capacity change from 0 to 256
[  258.171334][T10520] team0: Port device team_slave_1 added
[  258.188275][T10590] program syz.0.1741 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  258.224896][ T6387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.243691][T10589] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  258.256957][ T1117] hsr_slave_0: left promiscuous mode
[  258.266093][ T1117] hsr_slave_1: left promiscuous mode
[  258.322993][   T27] audit: type=1800 audit(1787833281.555:30): pid=10589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1740" name="bus" dev="loop1" ino=1048645 res=0 errno=0
[  258.354735][ T1117] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  258.391512][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_0
[  258.399260][T10589] Invalid ELF header magic: != ELF
[  258.427831][ T1117] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  258.452083][ T1117] batman_adv: batadv0: Removing interface: batadv_slave_1
[  258.459976][ T1117] bridge_slave_1: left allmulticast mode
[  258.472407][ T1117] bridge_slave_1: left promiscuous mode
[  258.478334][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.552944][ T1117] bridge_slave_0: left allmulticast mode
[  258.558645][ T1117] bridge_slave_0: left promiscuous mode
[  258.593791][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.609768][T10598] loop1: detected capacity change from 0 to 8
[  258.653611][T10598] SQUASHFS error: lzo decompression failed, data probably corrupt
[  258.661493][T10598] SQUASHFS error: Failed to read block 0x95: -5
[  258.683427][T10598] SQUASHFS error: Unable to read metadata cache entry [93]
[  258.690675][T10598] SQUASHFS error: Unable to read inode 0x400a7
[  258.723281][ T1117] veth1_macvtap: left promiscuous mode
[  258.732112][ T1117] veth0_macvtap: left promiscuous mode
[  258.736417][T10598] SQUASHFS error: Unable to read metadata cache entry [93]
[  258.747944][ T1117] veth1_vlan: left promiscuous mode
[  258.755426][T10598] SQUASHFS error: Unable to read inode 0x40087
[  258.762537][ T1117] veth0_vlan: left promiscuous mode
[  258.811177][   T27] audit: type=1326 audit(1787833282.045:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10601 comm="syz.4.1746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f77f2d9e0d9 code=0x0
[  259.576694][ T5785] Bluetooth: hci0: command tx timeout
[  259.984480][T10626] loop0: detected capacity change from 0 to 512
[  259.999460][T10626] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  260.030942][T10626] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.1756: bad orphan inode 131083
[  260.054413][T10626] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  260.163478][ T8063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.352730][   T28] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  260.563284][   T28] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  260.582816][   T28] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  260.593576][ T1117] team0 (unregistering): Port device team_slave_1 removed
[  260.612224][   T28] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  260.641918][   T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.680432][   T28] hub 5-1:4.0: USB hub found
[  260.765702][ T1117] team0 (unregistering): Port device team_slave_0 removed
[  260.901495][   T28] hub 5-1:4.0: 2 ports detected
[  260.913807][   T28] usb 5-1: selecting invalid altsetting 1
[  260.941881][   T28] hub 5-1:4.0: Using single TT (err -22)
[  260.953457][ T1117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  261.066029][ T1117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  261.342052][   T28] usb 5-1: USB disconnect, device number 15
[  261.643934][ T1117] bond0 (unregistering): Released all slaves
[  261.651968][ T5785] Bluetooth: hci0: command tx timeout
[  261.811285][T10520] batman_adv: batadv0: Adding interface: batadv_slave_0
[  261.851845][T10520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.926464][T10520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  261.950265][T10520] batman_adv: batadv0: Adding interface: batadv_slave_1
[  261.981844][T10520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  262.072788][T10520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  262.206989][T10520] hsr_slave_0: entered promiscuous mode
[  262.252584][T10520] hsr_slave_1: entered promiscuous mode
[  262.291270][T10657] loop1: detected capacity change from 0 to 512
[  262.332061][T10657] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  262.427748][T10657] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.1767: bg 0: block 104: invalid block bitmap
[  262.570171][T10657] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  262.620685][T10657] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1767: invalid indirect mapped block 1 (level 1)
[  262.665891][T10657] EXT4-fs (loop1): 1 truncate cleaned up
[  262.703617][T10657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  262.752665][T10672] ima: Unable to open file: /e (-2)
[  262.789764][T10671] ima: policy update failed
[  262.827951][T10657] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  262.848265][   T27] audit: type=1802 audit(1787833286.085:32): pid=10671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1772" res=0 errno=0
[  262.949228][T10520] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  262.978554][T10520] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  263.015144][T10676] loop4: detected capacity change from 0 to 4096
[  263.025177][T10520] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  263.067643][T10520] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  263.077752][T10676] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  263.080446][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.126131][T10676] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  263.185041][T10676] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  263.231986][T10676] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  263.275135][T10676] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  263.335607][T10676] ntfs: volume version 3.1.
[  263.379260][T10676] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  263.392957][T10520] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.395393][T10684] loop0: detected capacity change from 0 to 128
[  263.407128][T10676] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  263.441571][T10520] 8021q: adding VLAN 0 to HW filter on device team0
[  263.458416][T10676] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  263.489856][ T1117] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.497106][ T1117] bridge0: port 1(bridge_slave_0) entered forwarding state
[  263.515367][T10676] ntfs: (device loop4): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt.
[  263.525452][T10684] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[  263.533917][T10684] System zones: 1-3, 19-19, 35-36
[  263.540615][T10684] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  263.574974][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state
[  263.582152][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state
[  263.591672][T10676] ntfs: (device loop4): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2.
[  263.599067][T10684] ext4 filesystem being mounted at /216/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  263.683595][T10676] ntfs: (device loop4): load_and_init_quota(): Failed to load $Quota/$Q index.
[  263.710714][T10684] EXT4-fs warning (device loop0): ext4_group_add:1742: No reserved GDT blocks, can't resize
[  263.727860][T10676] ntfs: (device loop4): load_system_files(): Failed to load $Quota.  Will not be able to remount read-write.  Run chkdsk.
[  263.732856][ T5785] Bluetooth: hci0: command tx timeout
[  263.826819][ T8063] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  263.853841][T10676] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set macturkish.  You might want to try to use the mount option nls=utf8.
[  263.902246][T10676] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  263.942703][ T5786] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  263.982442][T10695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1778'.
[  263.994494][T10695] IPVS: Error joining to the multicast group
[  264.153814][ T5786] usb 2-1: unable to get BOS descriptor or descriptor too short
[  264.175474][ T5786] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  264.208535][ T5786] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  264.232426][ T5786] usb 2-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  264.281461][ T5786] usb 2-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  264.320548][T10520] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.327767][ T5786] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  264.357355][ T5786] usb 2-1: config 1 interface 1 has no altsetting 0
[  264.387693][ T5786] usb 2-1: string descriptor 0 read error: -22
[  264.406773][ T5786] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  264.429290][ T5786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.746027][T10723] loop0: detected capacity change from 0 to 512
[  264.779641][T10723] EXT4-fs: Ignoring removed orlov option
[  264.808377][T10723] EXT4-fs: Ignoring removed mblk_io_submit option
[  264.839276][T10726] netlink: 209832 bytes leftover after parsing attributes in process `syz.4.1785'.
[  264.897407][T10723] EXT4-fs error (device loop0): ext4_iget_extra_inode:4740: inode #15: comm syz.0.1784: corrupted in-inode xattr: e_value size too large
[  264.927315][T10723] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1784: couldn't read orphan inode 15 (err -117)
[  264.949933][T10723] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.065627][T10520] veth0_vlan: entered promiscuous mode
[  265.086765][ T8063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.118843][T10520] veth1_vlan: entered promiscuous mode
[  265.225601][T10520] veth0_macvtap: entered promiscuous mode
[  265.238065][T10520] veth1_macvtap: entered promiscuous mode
[  265.306248][ T5786] usb 2-1: 2:0: failed to get current value for ch 1 (-71)
[  265.319030][T10520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.335258][T10520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.372794][T10520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.380796][ T5786] usb 2-1: USB disconnect, device number 13
[  265.407773][T10520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.430801][T10520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.448492][T10520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.471323][T10520] batman_adv: batadv0: Interface activated: batadv_slave_0
[  265.494551][T10738] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1789'.
[  265.534182][T10520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.541881][T10738] netlink: 528 bytes leftover after parsing attributes in process `syz.0.1789'.
[  265.550602][T10520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.575143][T10520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.586130][T10520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.596044][T10520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.606618][T10520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.618270][T10520] batman_adv: batadv0: Interface activated: batadv_slave_1
[  265.638428][T10520] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  265.648963][T10520] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  265.659740][T10520] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  265.668893][T10520] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  265.846690][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  265.883384][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  265.943760][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  265.955047][   T27] audit: type=1400 audit(1787833289.195:33): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=10747 comm="syz.0.1792" name="p" offset=58
[  265.989191][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.659240][T10772] loop5: detected capacity change from 0 to 128
[  266.760589][T10772] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  266.856323][T10772] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  267.075129][T10520] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  267.261018][T10787] loop5: detected capacity change from 0 to 256
[  267.380083][T10787] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  268.122083][   T28] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  268.343373][   T28] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  268.360876][   T28] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  268.387995][   T28] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  268.405572][   T28] usb 5-1: config 220 has no interface number 2
[  268.415023][   T28] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  268.446038][   T28] usb 5-1: config 220 interface 0 has no altsetting 0
[  268.463891][   T28] usb 5-1: config 220 interface 76 has no altsetting 0
[  268.470798][   T28] usb 5-1: config 220 interface 1 has no altsetting 0
[  268.500465][   T28] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  268.510203][   T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.535998][   T28] usb 5-1: Product: syz
[  268.543101][   T28] usb 5-1: Manufacturer: syz
[  268.547733][   T28] usb 5-1: SerialNumber: syz
[  268.793857][   T28] usb 5-1: selecting invalid altsetting 0
[  268.811507][   T28] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  268.831953][   T28] usb 5-1: No valid video chain found.
[  268.853479][   T28] usb 5-1: selecting invalid altsetting 0
[  268.859584][   T28] usbtest: probe of 5-1:220.1 failed with error -22
[  268.885372][   T28] usb 5-1: USB disconnect, device number 16
[  269.098648][T10854] program syz.1.1825 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  269.170120][T10858] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1827'.
[  269.442668][T10868] device-mapper: ioctl: Invalid data size in the ioctl structure: 0
[  269.713059][T10879] program syz.1.1834 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  269.879571][T10887] loop1: detected capacity change from 0 to 512
[  269.902331][T10883] block2mtd: error: cannot open device /dev
[  269.976736][T10887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.060403][T10887] ext4 filesystem being mounted at /481/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  270.165705][   T27] audit: type=1800 audit(1787833293.405:34): pid=10887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1838" name="file2" dev="loop1" ino=16 res=0 errno=0
[  270.242613][T10897] loop4: detected capacity change from 0 to 512
[  270.252347][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.278526][T10897] EXT4-fs: Ignoring removed nobh option
[  270.428573][T10897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.486165][T10913] netlink: 'syz.1.1846': attribute type 32 has an invalid length.
[  270.519623][T10913] bond1: Setting coupled_control to off (0)
[  270.525763][T10913] bond1: entered promiscuous mode
[  270.568448][T10897] ext4 filesystem being mounted at /400/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  270.712910][T10897] Quota error (device loop4): do_check_range: Getting block 1280 out of range 0-5
[  270.749317][T10920] xt_CT: You must specify a L4 protocol and not use inversions on it
[  270.852630][ T6387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.931655][T10927] input: syz1 as /devices/virtual/input/input17
[  270.957470][T10927] input: failed to attach handler leds to device input17, error: -6
[  271.001383][T10931] loop1: detected capacity change from 0 to 256
[  271.023466][T10933] loop4: detected capacity change from 0 to 1024
[  271.112526][T10931] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  271.512339][T10946] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1856'.
[  271.513050][T10947] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1857'.
[  272.430124][T10970] loop0: detected capacity change from 0 to 1024
[  272.478209][T10970] EXT4-fs: Ignoring removed bh option
[  272.593429][T10970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  272.866053][T10989] bond0: entered promiscuous mode
[  272.871143][T10989] bond_slave_0: entered promiscuous mode
[  272.902743][T10989] bond_slave_1: entered promiscuous mode
[  272.932443][ T8063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.948637][T10989] bond0: left promiscuous mode
[  272.953984][T10989] bond_slave_0: left promiscuous mode
[  272.959665][T10989] bond_slave_1: left promiscuous mode
[  273.376226][ T5874] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  273.401060][ T5874] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  273.433339][ T5874] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  273.570410][T11015] loop0: detected capacity change from 0 to 512
[  273.687776][T11012] fido_id[11012]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  273.723151][T11015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  273.758827][T11015] ext4 filesystem being mounted at /244/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  273.962702][T11030] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1878'.
[  273.982221][T11015] EXT4-fs error (device loop0): ext4_get_first_dir_block:3584: inode #12: comm syz.0.1875: Attempting to read directory block (0) that is past i_size (3)
[  274.183722][ T8063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.368353][T11044] loop4: detected capacity change from 0 to 512
[  274.445022][T11048] program syz.5.1885 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  274.487205][  T790] kernel write not supported for file /1061/clear_refs (pid: 790 comm: kworker/1:2)
[  274.504841][T11044] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  274.689157][T11044] EXT4-fs error (device loop4): ext4_get_first_dir_block:3584: inode #12: comm syz.4.1884: Directory block failed checksum
[  274.825332][ T6387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.822530][T11103] netlink: 'syz.1.1904': attribute type 12 has an invalid length.
[  275.830551][T11103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1904'.
[  276.005645][T11109] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1907'.
[  276.032203][T11110] Bluetooth: MGMT ver 1.22
[  276.037059][T11109] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1907'.
[  276.080944][T11114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1907'.
[  276.152494][T11114] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1907'.
[  276.264221][T11121] loop0: detected capacity change from 0 to 2048
[  276.277928][T11122] loop4: detected capacity change from 0 to 64
[  276.381973][T11121] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  276.415878][T11121] UDF-fs: Scanning with blocksize 512 failed
[  276.488033][T11121] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  277.069563][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1920'.
[  277.432510][T11169] loop1: detected capacity change from 0 to 2048
[  277.479225][T11172] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  277.522042][ T5874] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  277.616258][T11172] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  277.660902][T11172] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  277.705185][T11172] Remounting filesystem read-only
[  277.732212][ T5874] usb 1-1: Using ep0 maxpacket: 8
[  277.746905][ T5874] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  277.769571][ T5874] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  277.785763][ T5783] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  277.805017][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.813777][ T5783] NILFS (loop1): discard dirty page: offset=0, ino=18
[  277.843007][ T5874] usb 1-1: config 0 descriptor??
[  277.845215][ T5783] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  277.859572][ T5874] gspca_main: vc032x-2.14.0 probing 046d:0892
[  277.867919][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  277.880836][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  277.890097][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  277.912549][ T5783] NILFS (loop1): discard dirty page: offset=0, ino=2
[  277.919263][ T5783] NILFS (loop1): discard dirty block: blocknr=18, size=1024
[  277.944570][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  277.978384][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  278.010301][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  278.051169][ T5783] NILFS (loop1): discard dirty page: offset=0, ino=6
[  278.074950][ T5783] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  278.107276][ T5783] NILFS (loop1): discard dirty block: blocknr=36, size=1024
[  278.127344][ T5783] NILFS (loop1): discard dirty block: blocknr=37, size=1024
[  278.156813][ T5783] NILFS (loop1): discard dirty block: blocknr=38, size=1024
[  278.165352][ T5783] NILFS (loop1): discard dirty page: offset=4096, ino=6
[  278.173173][ T5783] NILFS (loop1): discard dirty block: blocknr=39, size=1024
[  278.181004][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  278.202290][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  278.221887][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  278.242783][ T5783] NILFS (loop1): discard dirty page: offset=0, ino=5
[  278.249493][ T5783] NILFS (loop1): discard dirty block: blocknr=41, size=1024
[  278.273860][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  278.284172][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  278.300122][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  278.335842][ T5783] NILFS (loop1): discard dirty page: offset=0, ino=4
[  278.354329][ T5783] NILFS (loop1): discard dirty block: blocknr=40, size=1024
[  278.361658][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  278.393204][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  278.412763][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  278.439717][ T5783] NILFS (loop1): discard dirty page: offset=0, ino=3
[  278.456593][ T5783] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[  278.471908][ T5783] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[  278.480018][ T5783] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[  278.511942][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  278.538821][ T5783] NILFS (loop1): discard dirty page: offset=65536, ino=3
[  278.549667][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  278.570480][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  278.596496][ T5783] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  278.618982][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  278.641603][ T5783] NILFS (loop1): discard dirty page: offset=196608, ino=3
[  278.665738][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  278.684044][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  278.703830][ T5874] gspca_vc032x: reg_w err -71
[  278.708651][ T5874] vc032x: probe of 1-1:0.0 failed with error -71
[  278.709716][ T5783] NILFS (loop1): discard dirty block: blocknr=49, size=1024
[  278.741920][ T5783] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  278.760348][ T5874] usb 1-1: USB disconnect, device number 16
[  279.962399][  T790] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  279.982745][T11223] loop4: detected capacity change from 0 to 40427
[  280.004305][T11223] F2FS-fs (loop4): Wrong segment_count / block_count (31 > 0)
[  280.024099][T11223] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  280.033152][ T5788] block nbd0: Receive control failed (result -32)
[  280.045376][ T5780] block nbd0: Receive control failed (result -32)
[  280.055649][T11223] F2FS-fs (loop4): invalid crc value
[  280.063583][T11223] F2FS-fs (loop4): Found nat_bits in checkpoint
[  280.140357][T11234] loop0: detected capacity change from 0 to 512
[  280.151018][T11234] EXT4-fs: inline encryption not supported
[  280.178126][  T790] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11
[  280.225470][  T790] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  280.241424][T11234] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  280.263798][  T790] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  280.268333][T11223] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  280.275077][  T790] usb 6-1: config 1 interface 0 has no altsetting 0
[  280.287577][  T790] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  280.294536][T11223] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  280.297220][  T790] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.310946][T11234] EXT4-fs error (device loop0): ext4_iget_extra_inode:4740: inode #15: comm syz.0.1947: corrupted in-inode xattr: e_value size too large
[  280.331225][  T790] ums-sddr09 6-1:1.0: USB Mass Storage device detected
[  280.352373][T11234] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.1947: couldn't read orphan inode 15 (err -117)
[  280.397041][T11234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  280.423563][T11223] syz.4.1944: attempt to access beyond end of device
[  280.423563][T11223] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  280.465667][T11223] syz.4.1944: attempt to access beyond end of device
[  280.465667][T11223] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  280.495653][T11223] syz.4.1944: attempt to access beyond end of device
[  280.495653][T11223] loop4: rw=2049, sector=45152, nr_sectors = 32 limit=40427
[  280.518375][T11223] syz.4.1944: attempt to access beyond end of device
[  280.518375][T11223] loop4: rw=2049, sector=45216, nr_sectors = 24 limit=40427
[  280.539835][T11223] syz.4.1944: attempt to access beyond end of device
[  280.539835][T11223] loop4: rw=2049, sector=45264, nr_sectors = 8 limit=40427
[  280.547704][ T8063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.556966][T11223] syz.4.1944: attempt to access beyond end of device
[  280.556966][T11223] loop4: rw=2049, sector=45296, nr_sectors = 8 limit=40427
[  280.571686][  T790] scsi host1: usb-storage 6-1:1.0
[  280.578970][T11223] syz.4.1944: attempt to access beyond end of device
[  280.578970][T11223] loop4: rw=2049, sector=45312, nr_sectors = 16 limit=40427
[  280.690964][T11244] netlink: 'syz.0.1948': attribute type 12 has an invalid length.
[  280.698961][T11244] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1948'.
[  280.717031][ T6387] syz-executor: attempt to access beyond end of device
[  280.717031][ T6387] loop4: rw=2049, sector=45328, nr_sectors = 8 limit=40427
[  280.750010][ T6387] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  280.776499][  T174] usb 6-1: USB disconnect, device number 2
[  281.226496][T11250] loop4: detected capacity change from 0 to 4096
[  281.243652][T11250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.411944][ T5785] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  281.546480][T11258] loop0: detected capacity change from 0 to 256
[  281.588455][ T6387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.834559][T11266] loop4: detected capacity change from 0 to 512
[  281.922675][T11266] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1955: invalid indirect mapped block 4294967295 (level 1)
[  281.957242][T11269] bridge_slave_0: left allmulticast mode
[  281.999017][T11266] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1955: invalid indirect mapped block 4294967295 (level 1)
[  282.013163][T11269] bridge_slave_0: left promiscuous mode
[  282.013388][T11269] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.038541][T11266] EXT4-fs (loop4): 2 truncates cleaned up
[  282.041574][T11269] bridge_slave_1: left allmulticast mode
[  282.046783][T11266] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  282.063911][T11269] bridge_slave_1: left promiscuous mode
[  282.069919][T11269] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.097017][T11269] bond0: (slave bond_slave_0): Releasing backup interface
[  282.110853][T11266] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1430: inode #12: block 7: comm syz.4.1955: path /427/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  282.134008][T11269] bond0: (slave bond_slave_1): Releasing backup interface
[  282.179889][T11269] team0: Port device team_slave_0 removed
[  282.181271][ T6387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.199251][T11269] team0: Port device team_slave_1 removed
[  282.228885][T11269] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  282.245576][T11269] batman_adv: batadv0: Removing interface: batadv_slave_0
[  282.264815][T11269] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  282.287146][T11269] batman_adv: batadv0: Removing interface: batadv_slave_1
[  282.559492][T11281] loop4: detected capacity change from 0 to 4096
[  282.580634][T11281] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512).
[  282.634578][T11287] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1966'.
[  283.013475][T11295] loop0: detected capacity change from 0 to 4096
[  283.040970][T11295] NILFS (loop0): invalid segment: Checksum error in segment payload
[  283.049302][T11295] NILFS (loop0): trying rollback from an earlier position
[  283.095279][T11295] NILFS (loop0): recovery complete
[  283.111804][T11301] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  283.271932][ T5874] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  283.364516][T11305] loop0: detected capacity change from 0 to 256
[  283.373802][T11305] exfat: Deprecated parameter 'namecase'
[  283.379558][T11305] exfat: Deprecated parameter 'namecase'
[  283.392276][T11305] exfat: Deprecated parameter 'namecase'
[  283.422691][T11305] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  283.475330][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  283.496587][ T5874] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  283.515972][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.543039][ T5874] usb 6-1: config 0 descriptor??
[  283.776157][ T5874] usbhid 6-1:0.0: can't add hid device: -71
[  283.790265][ T5874] usbhid: probe of 6-1:0.0 failed with error -71
[  283.816574][ T5874] usb 6-1: USB disconnect, device number 3
[  284.032027][ T5818] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  284.221863][ T5818] usb 5-1: Using ep0 maxpacket: 32
[  284.238922][ T5818] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  284.256400][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.269147][ T5818] usb 5-1: config 0 descriptor??
[  284.391892][ T5874] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  284.487473][ T5818] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  284.509966][ T5818] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  284.528067][T11343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1986'.
[  284.566072][ T5818] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  284.582003][ T5874] usb 6-1: Using ep0 maxpacket: 16
[  284.596247][ T5818] usb 5-1: media controller created
[  284.611248][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  284.656526][ T5874] usb 6-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40
[  284.666841][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.683332][ T5818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  284.724065][ T5874] usb 6-1: config 0 descriptor??
[  284.781198][ T5818] az6027: usb out operation failed. (-71)
[  284.825991][ T5818] az6027: usb out operation failed. (-71)
[  284.833820][ T5818] stb0899_attach: Driver disabled by Kconfig
[  284.839926][ T5818] az6027: no front-end attached
[  284.839926][ T5818] 
[  284.848043][ T5818] az6027: usb out operation failed. (-71)
[  284.854200][ T5818] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  284.863666][ T5818] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18
[  285.086579][ T5818] dvb-usb: schedule remote query interval to 400 msecs.
[  285.094438][ T5818] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  285.107119][ T5818] usb 5-1: USB disconnect, device number 17
[  285.135982][T11350] loop0: detected capacity change from 0 to 4096
[  285.186572][T11350] ext4: Unknown parameter 'obj_role'
[  285.186615][ T5818] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  285.193373][ T5874] powermate: Expected payload of 3--6 bytes, found 8 bytes!
[  285.304522][ T5874] input: Griffin PowerMate as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input19
[  285.369547][    C1] powermate: config urb returned -71
[  285.375479][    C1] powermate: config urb returned -71
[  285.380931][    C1] powermate: config urb returned -71
[  285.387053][    C1] powermate: config urb returned -71
[  285.430833][ T5874] usb 6-1: USB disconnect, device number 4
[  285.430915][    C1] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  285.651640][T11364] rnbd_client L127: Can't parse path ip:: -22
[  285.741059][T11366] loop0: detected capacity change from 0 to 1024
[  285.777905][T11366] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  285.871145][T11370] loop4: detected capacity change from 0 to 256
[  286.239917][T11380] loop1: detected capacity change from 0 to 1024
[  286.283066][T11380] EXT4-fs (loop1): stripe (15220) is not aligned with cluster size (16), stripe is disabled
[  286.389013][   T27] audit: type=1107 audit(1787833565.630:35): pid=11385 uid=0 auid=0 ses=1 subj=unconfined msg=''
[  286.393057][T11380] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.593340][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.614036][T11394] syzkaller1: tun_chr_ioctl cmd 1074025677
[  286.645024][T11394] syzkaller1: linktype set to 826
[  286.997467][  T790] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  287.192126][  T790] usb 5-1: Using ep0 maxpacket: 32
[  287.204837][  T790] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  287.233725][  T790] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  287.267553][  T790] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  287.296524][T11413] loop1: detected capacity change from 0 to 4096
[  287.305273][  T790] usb 5-1: Product: syz
[  287.321451][T11413] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  287.329858][  T790] usb 5-1: Manufacturer: syz
[  287.365721][T11413] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  287.376186][  T790] usb 5-1: SerialNumber: syz
[  287.412887][  T790] usb 5-1: config 0 descriptor??
[  287.432475][T11400] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  287.432856][T11413] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  287.442914][  T790] hub 5-1:0.0: bad descriptor, ignoring hub
[  287.491951][  T790] hub: probe of 5-1:0.0 failed with error -5
[  287.509968][T11413] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing.
[  287.537700][T11413] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  287.568507][T11413] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  287.619605][T11413] ntfs: volume version 3.1.
[  287.634175][T11413] ntfs: (device loop1): load_and_init_quota(): Failed to find inode number for $Quota.
[  287.658652][T11413] ntfs: (device loop1): load_system_files(): Failed to load $Quota.  Will not be able to remount read-write.  Run chkdsk.
[  287.796198][T11413] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp932.  You might want to try to use the mount option nls=utf8.
[  288.327138][T11431] loop0: detected capacity change from 0 to 2048
[  288.397425][T11431] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.446689][T11431] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  288.534818][T11431] fs-verity (loop0, inode 13): Unsupported log_blocksize: 13
[  288.616596][ T8063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.675938][T11427] loop1: detected capacity change from 0 to 40427
[  288.718941][T11427] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0)
[  288.733223][T11427] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  288.755733][T11427] F2FS-fs (loop1): invalid crc value
[  288.796118][T11427] F2FS-fs (loop1): Found nat_bits in checkpoint
[  288.925935][T11427] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  288.947670][T11427] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  289.062255][T11427] syz.1.2011: attempt to access beyond end of device
[  289.062255][T11427] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  289.082983][T11427] syz.1.2011: attempt to access beyond end of device
[  289.082983][T11427] loop1: rw=2049, sector=45112, nr_sectors = 32 limit=40427
[  289.098680][T11427] syz.1.2011: attempt to access beyond end of device
[  289.098680][T11427] loop1: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[  289.118954][T11427] syz.1.2011: attempt to access beyond end of device
[  289.118954][T11427] loop1: rw=2049, sector=45184, nr_sectors = 32 limit=40427
[  289.161332][T11427] syz.1.2011: attempt to access beyond end of device
[  289.161332][T11427] loop1: rw=2049, sector=45232, nr_sectors = 8 limit=40427
[  289.182043][T11427] syz.1.2011: attempt to access beyond end of device
[  289.182043][T11427] loop1: rw=2049, sector=45248, nr_sectors = 8 limit=40427
[  289.206366][T11427] syz.1.2011: attempt to access beyond end of device
[  289.206366][T11427] loop1: rw=2049, sector=45272, nr_sectors = 8 limit=40427
[  289.304034][ T5783] syz-executor: attempt to access beyond end of device
[  289.304034][ T5783] loop1: rw=2049, sector=45280, nr_sectors = 8 limit=40427
[  289.345657][ T5783] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  289.704347][T11454] TCP: tcp_parse_options: Illegal window scaling value 173 > 14 received
[  289.716240][T11455] loop5: detected capacity change from 0 to 1024
[  289.730190][T11455] EXT4-fs: Ignoring removed nomblk_io_submit option
[  289.828457][T11455] EXT4-fs (loop5): mounted filesystem 00000000-0100-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  289.880695][T11455] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  289.893069][ T5874] usb 5-1: USB disconnect, device number 18
[  290.116972][T10520] EXT4-fs (loop5): unmounting filesystem 00000000-0100-0006-0000-000000000000.
[  290.840415][T11491] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  290.881133][T11491] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  290.935291][T11496] loop0: detected capacity change from 0 to 512
[  290.963560][T11496] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  291.033467][T11496] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002]
[  291.073288][T11496] EXT4-fs (loop0): orphan cleanup on readonly fs
[  291.146271][T11496] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.2036: bad orphan inode 3
[  291.220508][T11496] EXT4-fs (loop0): Remounting filesystem read-only
[  291.269200][T11496] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  291.313485][T11496] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.2036: dx entry: limit 0 != root limit 125
[  291.330098][T11496] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.2036: Corrupt directory, running e2fsck is recommended
[  291.389634][T11510] team0: entered allmulticast mode
[  291.409823][T11510] team_slave_0: entered allmulticast mode
[  291.429234][T11510] team_slave_1: entered allmulticast mode
[  291.452448][T11510] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  291.472675][ T8063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  291.472773][T11470] loop4: detected capacity change from 0 to 32768
[  291.570802][T11470] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  291.866577][T11470] XFS (loop4): Ending clean mount
[  291.900897][T11531] loop1: detected capacity change from 0 to 1024
[  291.935336][T11531] hfsplus: unable to parse mount options
[  292.252018][ T6387] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  292.428919][T11551] loop5: detected capacity change from 0 to 256
[  292.589574][T11551] FAT-fs (loop5): Directory bread(block 64) failed
[  292.622148][T11551] FAT-fs (loop5): Directory bread(block 65) failed
[  292.652864][T11551] FAT-fs (loop5): Directory bread(block 66) failed
[  292.659433][T11551] FAT-fs (loop5): Directory bread(block 67) failed
[  292.724114][T11551] FAT-fs (loop5): Directory bread(block 68) failed
[  292.730687][T11551] FAT-fs (loop5): Directory bread(block 69) failed
[  292.770068][T11551] FAT-fs (loop5): Directory bread(block 70) failed
[  292.805055][T11551] FAT-fs (loop5): Directory bread(block 71) failed
[  292.813140][T11551] FAT-fs (loop5): Directory bread(block 72) failed
[  292.836897][T11551] FAT-fs (loop5): Directory bread(block 73) failed
[  293.245246][T11572] sd 0:0:1:0: PR command failed: 1026
[  293.250855][T11572] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  293.263706][T11572] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  293.754868][T11561] loop4: detected capacity change from 0 to 32768
[  293.845821][T11561] JBD2: Ignoring recovery information on journal
[  293.995300][T11561] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  294.305000][ T6387] ocfs2: Unmounting device (7,4) on (node local)
[  294.620684][T11614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2070'.
[  295.381548][T11644] input: syz0 as /devices/virtual/input/input20
[  295.664640][T11656] loop5: detected capacity change from 0 to 64
[  295.781578][   T27] kauditd_printk_skb: 1 callbacks suppressed
[  295.781594][   T27] audit: type=1800 audit(1787833575.020:36): pid=11656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2085" name="file1" dev="loop5" ino=5 res=0 errno=0
[  295.892044][   T27] audit: type=1800 audit(1787833575.030:37): pid=11656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2085" name="file1" dev="loop5" ino=5 res=0 errno=0
[  296.296562][T11678] loop5: detected capacity change from 0 to 512
[  296.368999][T11678] EXT4-fs (loop5): 1 truncate cleaned up
[  296.373880][T11681] loop1: detected capacity change from 0 to 512
[  296.391097][T11678] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  296.463449][T11681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  296.695695][T10520] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.779210][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.790685][T11700] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2098'.
[  297.033886][T11708] rt1711h 0-0004: check vid/pid fail
[  297.039926][T11708] rt1711h: probe of 0-0004 failed with error -5
[  297.072696][T11708] i2c i2c-0: new_device: Instantiated device rt1715 at 0x04
[  297.573385][T11732] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2109'.
[  298.249832][T11760] loop0: detected capacity change from 0 to 256
[  298.376073][T11760] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[  298.765141][T11768] Bluetooth: MGMT ver 1.22
[  299.644681][T11796] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2127'.
[  299.788200][T11802] loop1: detected capacity change from 0 to 256
[  299.886715][T11802] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  299.932065][T11802] FAT-fs (loop1): Filesystem has been set read-only
[  299.968277][T11802] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  299.998578][T11802] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  300.066080][   T27] audit: type=1800 audit(1787833579.290:38): pid=11802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2129" name=CD dev="loop1" ino=1048662 res=0 errno=0
[  300.172681][ T5874] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  300.280683][T11819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2133'.
[  300.371483][ T5874] usb 6-1: Using ep0 maxpacket: 32
[  300.418021][ T5874] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  300.436887][ T5874] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  300.457249][ T5874] usb 6-1: config 0 interface 0 has no altsetting 0
[  300.474623][ T5874] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  300.501835][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.509911][ T5874] usb 6-1: Product: syz
[  300.543288][ T5874] usb 6-1: Manufacturer: syz
[  300.547965][ T5874] usb 6-1: SerialNumber: syz
[  300.583902][ T5874] usb 6-1: config 0 descriptor??
[  301.021984][ T5874] gs_usb 6-1:0.0: Configuring for 1 interfaces
[  301.132025][T11841] loop1: detected capacity change from 0 to 2048
[  301.193237][T11841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  301.419844][ T5874] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-EPROTO)
[  301.444290][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  301.483529][ T5874] usb 6-1: USB disconnect, device number 5
[  301.656709][T11858] loop1: detected capacity change from 0 to 512
[  301.669727][T11858] EXT4-fs: Ignoring removed oldalloc option
[  301.699240][T11858] EXT4-fs (loop1): Test dummy encryption mode enabled
[  301.729746][T11858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  301.816693][ T5786] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  302.021880][ T5786] usb 1-1: Using ep0 maxpacket: 32
[  302.042621][ T5786] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  302.077121][ T5786] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  302.097439][ T5786] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  302.111949][ T5786] usb 1-1: Product: syz
[  302.116189][ T5786] usb 1-1: Manufacturer: syz
[  302.120913][ T5786] usb 1-1: SerialNumber: syz
[  302.133290][ T5786] usb 1-1: config 0 descriptor??
[  302.139180][T11856] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  302.152595][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.193322][ T5786] hub 1-1:0.0: bad descriptor, ignoring hub
[  302.205883][ T5786] hub: probe of 1-1:0.0 failed with error -5
[  302.809417][T11892] netem: change failed
[  303.123879][T11900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2153'.
[  304.170771][T11929] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0
[  304.652219][ T5786] usb 1-1: USB disconnect, device number 17
[  304.916361][T11961] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.923633][T11961] bridge0: port 1(bridge_slave_0) entered forwarding state
[  304.999756][T11965] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2171'.
[  305.140454][T11968] loop5: detected capacity change from 0 to 2048
[  305.190524][T11968] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  305.238587][ T5786] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  305.304933][T11942] loop4: detected capacity change from 0 to 40427
[  305.321445][T11942] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  305.328542][T11942] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  305.341038][T11942] F2FS-fs (loop4): invalid crc value
[  305.460821][ T5786] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 214, changing to 7
[  305.477558][ T5786] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 172, changing to 7
[  305.512991][ T5786] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  305.528242][ T5786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.531503][T10520] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.551697][T11979] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2174'.
[  305.580664][ T5786] usb 1-1: Product: syz
[  305.585508][T11942] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  305.588926][ T5786] usb 1-1: Manufacturer: syz
[  305.599982][T11942] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  305.611814][ T5786] usb 1-1: SerialNumber: syz
[  305.883644][ T5786] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  305.909158][ T5786] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  305.959984][ T5786] usb 1-1: USB disconnect, device number 18
[  306.038489][ T9795] udevd[9795]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  306.389869][T11987] loop5: detected capacity change from 0 to 32768
[  306.577519][ T5786] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  306.772114][ T5786] usb 2-1: Using ep0 maxpacket: 32
[  306.821640][ T5786] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  306.841832][ T5786] usb 2-1: config 0 has no interface number 0
[  306.856206][ T5786] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  306.863657][T11997] device-mapper: ioctl: Invalid ioctl structure: name o, dev 6f70796d00000000
[  306.877904][ T5786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.896501][ T5786] usb 2-1: Product: syz
[  306.900761][ T5786] usb 2-1: Manufacturer: syz
[  306.917511][ T5786] usb 2-1: SerialNumber: syz
[  306.940383][ T5786] usb 2-1: config 0 descriptor??
[  306.960063][ T5786] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  307.212519][ T5786] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  307.239194][T12007] loop0: detected capacity change from 0 to 128
[  307.254302][ T5786] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  307.283620][T12007] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  307.375365][   T27] audit: type=1800 audit(1787833586.620:39): pid=12007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2186" name="file1" dev="loop0" ino=94 res=0 errno=0
[  307.467552][T12007] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  307.514175][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short
[  307.719875][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  307.720249][ T5776] usb 2-1: USB disconnect, device number 14
[  307.758674][ T5776] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  307.799189][ T5776] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  307.833866][ T5776] quatech2 2-1:0.51: device disconnected
[  308.240579][T12020] loop0: detected capacity change from 0 to 2048
[  308.303235][T12020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  308.486108][ T8063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.944137][T12041] loop6: detected capacity change from 0 to 7
[  308.997433][T12041] Dev loop6: unable to read RDB block 7
[  309.007213][T12041]  loop6: unable to read partition table
[  309.015431][T12041] loop6: partition table beyond EOD, truncated
[  309.027470][T12041] loop_reread_partitions: partition scan of loop6 (���������S�j̖�P=ý?�}X���	���%��`��ր����5) failed (rc=-5)
[  309.212419][T12051] loop5: detected capacity change from 0 to 256
[  309.241004][T12051] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d)
[  309.641990][  T174] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  309.682410][T12064] futex_wake_op: syz.1.2209 tries to shift op by 144; fix this program
[  309.713799][T12064] futex_wake_op: syz.1.2209 tries to shift op by 144; fix this program
[  309.852046][  T174] usb 1-1: Using ep0 maxpacket: 8
[  309.880355][  T174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  309.913116][  T174] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  309.925963][  T174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.945231][  T174] usb 1-1: config 0 descriptor??
[  310.106930][T12059] loop4: detected capacity change from 0 to 40427
[  310.130768][T12059] F2FS-fs (loop4): invalid crc value
[  310.167870][T12059] F2FS-fs (loop4): Found nat_bits in checkpoint
[  310.174937][  T174] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  310.310011][T12059] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  310.619846][  T174] usb 1-1: USB disconnect, device number 19
[  310.769026][T12090] loop1: detected capacity change from 0 to 512
[  310.780585][T12090] EXT4-fs: Ignoring removed bh option
[  310.826078][T12090] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  310.903915][T12090] EXT4-fs (loop1): 1 truncate cleaned up
[  310.927457][T12090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  311.029321][T12098] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  311.059869][   T27] audit: type=1800 audit(1787833590.300:40): pid=12090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2219" name="file1" dev="loop1" ino=15 res=0 errno=0
[  311.203248][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.379898][T12097] loop5: detected capacity change from 0 to 32768
[  311.470725][T12097] JBD2: Ignoring recovery information on journal
[  311.564591][T12097] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  311.717259][T12112] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2227'.
[  311.763173][T10520] ocfs2: Unmounting device (7,5) on (node local)
[  312.087523][T12104] loop1: detected capacity change from 0 to 32768
[  312.436489][ T5776] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  312.632897][ T5776] usb 6-1: Using ep0 maxpacket: 8
[  312.643978][ T5776] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  312.678525][ T5776] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  312.695732][ T5776] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.728520][ T5776] usb 6-1: config 0 descriptor??
[  312.787515][T12142] netlink: 'syz.0.2242': attribute type 2 has an invalid length.
[  312.795821][T12142] netlink: 'syz.0.2242': attribute type 1 has an invalid length.
[  312.804229][T12142] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2242'.
[  312.813728][T12142] netlink: 'syz.0.2242': attribute type 2 has an invalid length.
[  312.821655][T12142] netlink: 'syz.0.2242': attribute type 1 has an invalid length.
[  312.830047][T12142] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2242'.
[  312.839947][T12142] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2
[  312.954059][ T5776] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  313.003243][T12148] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2244'.
[  313.415263][ T5776] usb 6-1: USB disconnect, device number 6
[  313.565895][T12164] netlink: 766 bytes leftover after parsing attributes in process `syz.0.2252'.
[  313.787519][T12154] loop1: detected capacity change from 0 to 32768
[  313.840799][T12154] read_mapping_page failed!
[  313.867262][T12154] ERROR: (device loop1): txCommit: 
[  313.867262][T12154] 
[  314.087031][T12178] program syz.5.2259 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  314.334145][   T27] audit: type=1800 audit(1787833593.580:41): pid=12183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2262" name="mode" dev="configfs" ino=29760 res=0 errno=0
[  314.405360][T12173] loop0: detected capacity change from 0 to 32768
[  314.460236][T12173] JBD2: Ignoring recovery information on journal
[  314.524311][T12186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2258'.
[  314.555624][T12173] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  314.856981][T12193] loop5: detected capacity change from 0 to 128
[  314.873922][T12193] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  314.915134][ T8063] ocfs2: Unmounting device (7,0) on (node local)
[  314.972752][T12193] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  315.557361][T12213] loop0: detected capacity change from 0 to 1024
[  315.613587][T12213] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  315.663945][T12213] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  315.771973][ T5776] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  315.805889][T12213] EXT4-fs error (device loop0): ext4_free_blocks:6694: comm syz.0.2274: Freeing blocks not in datazone - block = 0, count = 16
[  315.925435][ T8063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  315.993233][ T5776] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  316.011955][ T5776] usb 5-1: config 0 interface 0 has no altsetting 0
[  316.043346][ T5776] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  316.072207][ T5776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.075454][T12227] IPv6: NLM_F_CREATE should be specified when creating new route
[  316.108858][   T27] audit: type=1400 audit(1787833595.340:42): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=12228 comm="syz.0.2280"
[  316.109734][ T5776] usb 5-1: config 0 descriptor??
[  316.467807][T12221] loop5: detected capacity change from 0 to 32768
[  316.517440][T12221] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  316.563617][ T5776] steelseries 0003:1038:1410.000C: unknown main item tag 0x0
[  316.571069][ T5776] steelseries 0003:1038:1410.000C: unknown main item tag 0x0
[  316.578877][ T5776] steelseries 0003:1038:1410.000C: item fetching failed at offset 2/40
[  316.591391][ T5776] steelseries 0003:1038:1410.000C: parse failed
[  316.598141][ T5776] steelseries: probe of 0003:1038:1410.000C failed with error -22
[  316.620124][T12221] XFS (loop5): Ending clean mount
[  316.678939][T12249] loop0: detected capacity change from 0 to 512
[  316.703047][T12249] EXT4-fs: Ignoring removed bh option
[  316.712844][T12249] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  316.774618][T12249] EXT4-fs (loop0): 1 truncate cleaned up
[  316.781542][T12249] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  316.874084][ T5776] usb 5-1: USB disconnect, device number 19
[  316.927484][T10520] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  316.956530][   T27] audit: type=1800 audit(1787833596.200:43): pid=12249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2287" name="file1" dev="loop0" ino=15 res=0 errno=0
[  317.140643][ T8063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.193439][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  317.199833][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  317.450849][T12258] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  317.671076][T12269] loop1: detected capacity change from 0 to 1024
[  317.688871][T12269] EXT4-fs: Ignoring removed orlov option
[  317.720382][T12269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  317.781847][ T5786] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  317.961837][ T5786] usb 5-1: Using ep0 maxpacket: 8
[  317.969051][ T5786] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  317.989719][ T5786] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  318.031877][ T5786] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  318.041713][ T5786] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  318.074013][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.074936][ T5786] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  318.131822][ T5786] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  318.140955][ T5786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.156665][T12265] loop0: detected capacity change from 0 to 32768
[  318.256977][   T27] audit: type=1326 audit(1787833597.490:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12276 comm="syz.5.2299" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdd59e0d9 code=0x7ffc0000
[  318.290433][T12277] loop5: detected capacity change from 0 to 256
[  318.331430][T12277] exfat: Deprecated parameter 'utf8'
[  318.348416][T12277] exfat: Deprecated parameter 'utf8'
[  318.359691][   T27] audit: type=1326 audit(1787833597.500:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12276 comm="syz.5.2299" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdd59e0d9 code=0x7ffc0000
[  318.389187][T12265] (syz.0.2292,12265,0):ocfs2_journal_addressable:1991 ERROR: The journal cannot address the entire volume. Enable the 'block64' journal option with tunefs.ocfs2
[  318.389224][T12265] (syz.0.2292,12265,0):ocfs2_check_volume:2486 ERROR: status = -27
[  318.392561][T12277] exfat: Deprecated parameter 'utf8'
[  318.419816][ T5786] usb 5-1: GET_CAPABILITIES returned 0
[  318.425539][ T5786] usbtmc 5-1:16.0: can't read capabilities
[  318.436795][T12265] (syz.0.2292,12265,1):ocfs2_mount_volume:1820 ERROR: status = -27
[  318.462356][T12265] (syz.0.2292,12265,1):ocfs2_fill_super:1178 ERROR: status = -27
[  318.476121][   T27] audit: type=1326 audit(1787833597.500:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12276 comm="syz.5.2299" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bdd59e0d9 code=0x7ffc0000
[  318.490438][T12277] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x117c3960, utbl_chksum : 0xe619d30d)
[  318.563326][   T27] audit: type=1326 audit(1787833597.530:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12276 comm="syz.5.2299" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0bdd59e0d9 code=0x7ffc0000
[  318.625188][   T27] audit: type=1326 audit(1787833597.530:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12276 comm="syz.5.2299" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0bdd59de42 code=0x7ffc0000
[  318.651144][   T27] audit: type=1326 audit(1787833597.530:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12276 comm="syz.5.2299" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0bdd55e90e code=0x7ffc0000
[  318.734792][ T5786] usb 5-1: USB disconnect, device number 20
[  318.761077][   T27] audit: type=1326 audit(1787833597.530:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12276 comm="syz.5.2299" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0bdd59df07 code=0x7ffc0000
[  319.283094][T12295] program syz.1.2305 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  319.456233][T12299] loop1: detected capacity change from 0 to 128
[  319.502128][T12299] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[  319.510312][T12299] System zones: 1-3, 19-19, 35-36
[  319.519464][T12299] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: writeback.
[  319.589167][ T5783] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  319.671369][T12306] loop1: detected capacity change from 0 to 1024
[  319.686431][T12306] EXT4-fs: Ignoring removed bh option
[  319.691215][T12308] bonding: no command found in bonding_masters - use +ifname or -ifname
[  319.719536][T12306] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  319.745723][T12306] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2310'.
[  319.772048][  T790] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  319.843190][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.856060][T12312] loop0: detected capacity change from 0 to 256
[  319.921115][T12314] loop5: detected capacity change from 0 to 128
[  319.929430][ T9798] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  319.971351][T12314] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  319.983264][  T790] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  319.983291][  T790] usb 5-1: config 0 has no interface number 0
[  319.985280][  T790] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  320.026832][T12314] hpfs: filesystem error: improperly stopped
[  320.067934][  T790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.086628][T12314] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  320.108040][  T790] usb 5-1: Product: syz
[  320.129818][  T790] usb 5-1: Manufacturer: syz
[  320.135605][T12314] hpfs: You really don't want any checks? You are crazy...
[  320.151833][  T790] usb 5-1: SerialNumber: syz
[  320.171537][  T790] usb 5-1: config 0 descriptor??
[  320.186029][T12314] hpfs: hpfs_map_sector(): read error
[  320.201235][T12314] hpfs: code page support is disabled
[  320.209961][T12314] hpfs: hpfs_map_4sectors(): unaligned read
[  320.226456][T12314] hpfs: hpfs_map_4sectors(): unaligned read
[  320.241717][T12314] hpfs: filesystem error: unable to find root dir
[  320.325770][T12314] hpfs: hpfs_map_4sectors(): unaligned read
[  320.360606][T12314] hpfs: hpfs_map_sector(): read error
[  320.412440][  T790] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  320.448201][  T790] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  320.470663][  T790] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  320.519626][  T790] usb 5-1: media controller created
[  320.570703][  T790] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  320.672917][  T790] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  320.794073][  T790] usb 5-1: USB disconnect, device number 21
[  320.817514][T12342] program syz.5.2325 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  320.871998][ T5786] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  320.972054][T12346] sd 0:0:1:0: PR command failed: 1026
[  320.980686][T12346] sd 0:0:1:0: Sense Key : Illegal Request [current] 
[  320.992892][T12346] sd 0:0:1:0: Add. Sense: Invalid command operation code
[  321.094557][ T5786] usb 1-1: unable to get BOS descriptor or descriptor too short
[  321.112970][ T5786] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  321.128101][ T5786] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  321.142175][ T5786] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  321.151606][T12353] loop1: detected capacity change from 0 to 128
[  321.188538][T12353] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  321.191880][ T5786] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  321.245639][T12353] hpfs: filesystem error: improperly stopped
[  321.252991][ T5786] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  321.264732][T12353] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  321.287103][ T5786] usb 1-1: config 1 interface 1 has no altsetting 0
[  321.291772][T12353] hpfs: You really don't want any checks? You are crazy...
[  321.309547][ T5786] usb 1-1: string descriptor 0 read error: -22
[  321.311506][T12353] hpfs: hpfs_map_sector(): read error
[  321.322072][ T5786] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  321.332786][T12353] hpfs: code page support is disabled
[  321.338571][T12353] hpfs: hpfs_map_4sectors(): unaligned read
[  321.374350][T12353] hpfs: hpfs_map_4sectors(): unaligned read
[  321.377064][ T5786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.388316][T12353] hpfs: filesystem error: unable to find root dir
[  321.452345][T12353] hpfs: hpfs_map_4sectors(): unaligned read
[  321.500104][T12353] hpfs: hpfs_map_sector(): read error
[  321.689577][ T5786] usb 1-1: 2:0: failed to get current value for ch 0 (-32)
[  321.778777][ T5776] smpboot: CPU 1 is now offline
[  321.908054][ T5786] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2)
[  321.982087][ T5786] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2)
[  322.044024][ T5786] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2)
[  322.108020][ T5786] usb 1-1: USB disconnect, device number 20
[  322.496497][T12381] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2341'.
[  322.626242][T12374] loop1: detected capacity change from 0 to 32768
[  323.599337][T12408] loop1: detected capacity change from 0 to 164
[  323.657223][T12408] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[  323.730999][T12408] rock: corrupted directory entry. extent=41 out of volume (nzones=41)
[  324.094588][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2359'.
[  324.120545][T12397] loop0: detected capacity change from 0 to 40427
[  324.144590][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2359'.
[  324.171869][T12397] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504)
[  324.217843][T12397] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  324.278302][T12397] F2FS-fs (loop0): heap/no_heap options were deprecated
[  324.316476][T12397] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x7ffff
[  324.387409][T12397] F2FS-fs (loop0): invalid crc value
[  324.425272][T12397] F2FS-fs (loop0): Found nat_bits in checkpoint
[  324.611317][T12397] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  324.638374][T12397] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  324.968771][ T8063] syz-executor: attempt to access beyond end of device
[  324.968771][ T8063] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  325.055788][ T8063] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  325.536441][T12448] sctp: [Deprecated]: syz.4.2372 (pid 12448) Use of int in max_burst socket option deprecated.
[  325.536441][T12448] Use struct sctp_assoc_value instead
[  325.615742][T12450] loop5: detected capacity change from 0 to 1024
[  325.931907][ T5836] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  326.054452][T12460] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2375'.
[  326.121859][ T5836] usb 2-1: Using ep0 maxpacket: 16
[  326.138227][ T5836] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  326.205547][ T5836] usb 2-1: config 0 interface 0 has no altsetting 0
[  326.238357][ T5836] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  326.251938][T12466] loop0: detected capacity change from 0 to 256
[  326.268557][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.342396][T12466] FAT-fs (loop0): Directory bread(block 64) failed
[  326.348980][T12466] FAT-fs (loop0): Directory bread(block 65) failed
[  326.359622][ T5836] usb 2-1: config 0 descriptor??
[  326.410159][T12466] FAT-fs (loop0): Directory bread(block 66) failed
[  326.446814][T12466] FAT-fs (loop0): Directory bread(block 67) failed
[  326.471961][T12466] FAT-fs (loop0): Directory bread(block 68) failed
[  326.527487][T12466] FAT-fs (loop0): Directory bread(block 69) failed
[  326.565917][T12466] FAT-fs (loop0): Directory bread(block 70) failed
[  326.592437][T12466] FAT-fs (loop0): Directory bread(block 71) failed
[  326.620768][ T5836] usbhid 2-1:0.0: can't add hid device: -71
[  326.639510][T12466] FAT-fs (loop0): Directory bread(block 72) failed
[  326.649578][ T5836] usbhid: probe of 2-1:0.0 failed with error -71
[  326.668429][T12466] FAT-fs (loop0): Directory bread(block 73) failed
[  326.684063][ T5836] usb 2-1: USB disconnect, device number 15
[  326.829989][   T27] kauditd_printk_skb: 26 callbacks suppressed
[  326.830001][   T27] audit: type=1800 audit(1787833606.070:77): pid=12466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2379" name="bus" dev="loop0" ino=1048668 res=0 errno=0
[  326.875577][T12466] syz.0.2379: attempt to access beyond end of device
[  326.875577][T12466] loop0: rw=2049, sector=1224, nr_sectors = 76 limit=256
[  327.287462][T12478] loop1: detected capacity change from 0 to 1024
[  327.308594][T12468] loop4: detected capacity change from 0 to 32768
[  327.474709][T12468] JBD2: Ignoring recovery information on journal
[  327.587489][T12483] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  327.702769][T12468] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  327.978798][T12494] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  327.986624][T12494] IPv6: NLM_F_CREATE should be set when creating new route
[  327.993866][T12494] IPv6: NLM_F_CREATE should be set when creating new route
[  328.036784][T12491] loop0: detected capacity change from 0 to 4096
[  328.088008][T12494] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  328.840880][ T6387] ocfs2: Unmounting device (7,4) on (node local)
[  329.128293][T12518] bond0: option slaves: invalid value (-veth0)
[  329.655848][T12529] loop5: detected capacity change from 0 to 4096
[  329.758277][T12529] EXT4-fs: inline encryption not supported
[  329.842439][T12529] EXT4-fs (loop5): Test dummy encryption mode enabled
[  329.928426][T12529] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003]
[  330.043840][T12529] System zones: 0-5
[  330.084279][T12529] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  330.408319][T10520] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.425282][T12534] loop1: detected capacity change from 0 to 32768
[  330.480332][T12534] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  330.539395][T12534] XFS (loop1): Ending clean mount
[  330.784050][ T5783] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  331.373350][T12573] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2426'.
[  331.644748][T12585] loop5: detected capacity change from 0 to 256
[  331.684606][T12585] exfat: Deprecated parameter 'namecase'
[  331.690320][T12585] exfat: Deprecated parameter 'namecase'
[  331.802658][T12585] exfat: Deprecated parameter 'utf8'
[  331.891679][T12585] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[  332.836368][T12615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2444'.
[  333.365670][T12635] loop1: detected capacity change from 0 to 64
[  333.438982][T12635] hfs: request for non-existent node 131072 in B*Tree
[  333.499336][T12635] hfs: request for non-existent node 131072 in B*Tree
[  333.689100][   T42] Bluetooth: hci4: Frame reassembly failed (-84)
[  333.708003][T12639] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  333.952825][  T174] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized
[  333.974134][  T174] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized
[  333.995283][  T174] lpc_ich 0000:00:00.0: I/O space for GPIO uninitialized
[  334.015764][  T174] lpc_ich 0000:00:00.0: No MFD cells added
[  334.033906][  T174] lpc_ich 0000:00:01.0: I/O space for ACPI uninitialized
[  334.057942][  T174] lpc_ich 0000:00:01.0: I/O space for ACPI uninitialized
[  334.081183][  T174] lpc_ich 0000:00:01.0: I/O space for GPIO uninitialized
[  334.100833][T12633] loop0: detected capacity change from 0 to 32768
[  334.113617][  T174] lpc_ich 0000:00:01.0: No MFD cells added
[  334.150708][  T174] lpc_ich 0000:00:01.3: RCBA is disabled by hardware/BIOS, device disabled
[  334.185149][  T174] lpc_ich 0000:00:01.3: I/O space for GPIO uninitialized
[  334.210325][T12633] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  334.225307][  T174] lpc_ich 0000:00:01.3: No MFD cells added
[  334.246545][  T174] lpc_ich 0000:00:05.0: I/O space for ACPI uninitialized
[  334.276713][  T174] lpc_ich 0000:00:05.0: I/O space for ACPI uninitialized
[  334.305430][T12633] XFS (loop0): Ending clean mount
[  334.310536][  T174] lpc_ich 0000:00:05.0: I/O space for GPIO uninitialized
[  334.355125][  T174] lpc_ich 0000:00:05.0: No MFD cells added
[  334.498423][ T8063] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  335.674919][T12698] bond1: option ad_user_port_key: invalid value (65535)
[  335.731017][T12698] bond1: option ad_user_port_key: allowed values 0 - 1023
[  335.741096][ T5780] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  335.748269][ T5785] Bluetooth: hci4: command 0x1003 tx timeout
[  335.791273][T12698] bond1 (unregistering): Released all slaves
[  335.797910][T12702] program syz.1.2479 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  336.182048][T12711] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2482'.
[  336.246839][T12711] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2482'.
[  336.345699][T12711] erspan0: entered promiscuous mode
[  336.404979][T12711] gretap0: entered promiscuous mode
[  336.469131][T12721] loop0: detected capacity change from 0 to 512
[  336.497093][T12723] i2c-slave-eeprom 0-0001: i2c_slave_register: client slave flag not set. You might see address collisions
[  336.518106][T12721] EXT4-fs: Ignoring removed orlov option
[  336.584290][T12723] i2c-slave-eeprom 0-0001: i2c_slave_register: invalid address
[  336.635760][T12723] i2c-slave-eeprom: probe of 0-0001 failed with error -22
[  336.643887][T12721] EXT4-fs (loop0): 1 truncate cleaned up
[  336.657553][T12723] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x01
[  336.666601][T12721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  336.930073][T12734] loop1: detected capacity change from 0 to 128
[  336.968254][T12734] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  337.000545][T12734] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  337.086635][   T27] audit: type=1800 audit(1787833872.333:78): pid=12734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2494" name="file1" dev="loop1" ino=104 res=0 errno=0
[  337.344408][ T8063] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.669055][T12752] loop4: detected capacity change from 0 to 2048
[  337.754645][T12752] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  337.823282][T12752] UDF-fs: Scanning with blocksize 512 failed
[  337.918081][T12752] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  337.983685][T12760] vxcan0: tx address claim with dest, not broadcast
[  338.674929][  T174] kernel write not supported for file bpf-map (pid: 174 comm: kworker/0:2)
[  338.742302][T12785] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2515'.
[  338.849224][T12788] loop0: detected capacity change from 0 to 8
[  338.915084][T12788] SQUASHFS error: Failed to read block 0x26067d: -5
[  338.974528][T12788] SQUASHFS error: Unable to read metadata cache entry [26067d]
[  339.024300][T12788] SQUASHFS error: Unable to read directory block [26067d:ffff]
[  339.112578][T12796] netlink: 'syz.5.2521': attribute type 1 has an invalid length.
[  339.148168][T12798] loop1: detected capacity change from 0 to 128
[  339.195273][T12796] netlink: 'syz.5.2521': attribute type 2 has an invalid length.
[  339.219111][T12798] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  339.285012][T12803] netlink: 'syz.5.2521': attribute type 1 has an invalid length.
[  339.305750][T12798] ext4 filesystem being mounted at /676/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  339.360699][T12803] netlink: 'syz.5.2521': attribute type 2 has an invalid length.
[  339.648352][ T5783] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  339.792265][T12813] netlink: 'syz.1.2528': attribute type 5 has an invalid length.
[  339.986896][T12818] vxcan0: tx address claim with dest, not broadcast
[  340.191993][T12826] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2534'.
[  340.517021][  T174] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  340.619241][T12805] loop4: detected capacity change from 0 to 32768
[  340.645340][T12838] loop0: detected capacity change from 0 to 128
[  340.715007][  T174] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  340.726563][T12805] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  340.737841][T12838] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  340.766986][  T174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  340.796602][T12838] ext4 filesystem being mounted at /426/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  340.820429][  T174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  340.864835][  T174] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  340.951088][  T174] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  340.992111][  T174] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  341.020655][T12805] XFS (loop4): Ending clean mount
[  341.037903][  T174] usb 2-1: Manufacturer: syz
[  341.047005][ T8063] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  341.065616][  T174] usb 2-1: config 0 descriptor??
[  341.087102][T12805] XFS (loop4): Quotacheck needed: Please wait.
[  341.242627][T12805] XFS (loop4): Quotacheck: Done.
[  341.516863][  T174] appleir 0003:05AC:8243.000D: unknown main item tag 0x0
[  341.552673][  T174] appleir 0003:05AC:8243.000D: No inputs registered, leaving
[  341.588764][  T174] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  341.704081][ T6387] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  341.819888][T12866] loop5: detected capacity change from 0 to 512
[  341.885354][ T5776] usb 2-1: USB disconnect, device number 16
[  341.994006][T12866] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  342.007382][T12867] fido_id[12867]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  342.147164][T12866] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  342.507521][T10520] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.639829][T12881] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2549'.
[  343.193368][T12900] bonding: no command found in bonding_masters - use +ifname or -ifname
[  344.647779][T12948] ==================================================================
[  344.647790][T12948] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1bac/0x25d0
[  344.647808][T12948] Write of size 4 at addr ffffc90004309000 by task syz.4.2584/12948
[  344.647819][T12948] 
[  344.647829][T12948] CPU: 0 PID: 12948 Comm: syz.4.2584 Not tainted syzkaller #0
[  344.647840][T12948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  344.647852][T12948] Call Trace:
[  344.647857][T12948]  <TASK>
[  344.647861][T12948]  dump_stack_lvl+0x18c/0x250
[  344.647882][T12948]  ? sys_imageblit+0x1bac/0x25d0
[  344.647893][T12948]  ? show_regs_print_info+0x20/0x20
[  344.647904][T12948]  ? load_image+0x420/0x420
[  344.647918][T12948]  print_report+0xa8/0x210
[  344.647930][T12948]  ? sys_imageblit+0x1bac/0x25d0
[  344.647939][T12948]  kasan_report+0x117/0x150
[  344.647952][T12948]  ? sys_imageblit+0x1bac/0x25d0
[  344.647963][T12948]  sys_imageblit+0x1bac/0x25d0
[  344.647976][T12948]  ? sys_copyarea+0x2530/0x2530
[  344.647989][T12948]  drm_fbdev_generic_defio_imageblit+0x2c/0x110
[  344.648004][T12948]  soft_cursor+0xa01/0xc30
[  344.648021][T12948]  bit_cursor+0x16dd/0x1f60
[  344.648039][T12948]  ? bit_clear_margins+0x550/0x550
[  344.648054][T12948]  ? get_color+0x2e8/0x4d0
[  344.648067][T12948]  ? bit_clear_margins+0x550/0x550
[  344.648080][T12948]  ? fbcon_cursor+0x430/0x640
[  344.648092][T12948]  ? add_softcursor+0x8c/0x440
[  344.648105][T12948]  con_flush_chars+0x1fa/0x280
[  344.648118][T12948]  con_write+0x2e/0x40
[  344.648131][T12948]  do_output_char+0x64a/0x960
[  344.648146][T12948]  __process_echoes+0x2e0/0x9f0
[  344.648162][T12948]  n_tty_receive_buf_common+0xc81/0x1380
[  344.648182][T12948]  ? paste_selection+0x1cb/0x4d0
[  344.648196][T12948]  paste_selection+0x329/0x4d0
[  344.648212][T12948]  ? set_selection_kernel+0x17b0/0x17b0
[  344.648227][T12948]  ? do_task_dead+0xd0/0xd0
[  344.648238][T12948]  ? __might_fault+0xaa/0x120
[  344.648248][T12948]  ? __might_fault+0xc6/0x120
[  344.648258][T12948]  ? __might_fault+0xaa/0x120
[  344.648268][T12948]  ? tioclinux+0x34e/0x450
[  344.648280][T12948]  vt_ioctl+0x813/0x1f20
[  344.648295][T12948]  ? __vt_event_wait+0x260/0x260
[  344.648318][T12948]  ? __fget_files+0x28/0x460
[  344.648334][T12948]  ? tty_jobctrl_ioctl+0x378/0xba0
[  344.648347][T12948]  tty_ioctl+0x91e/0xdc0
[  344.648360][T12948]  ? tty_get_icount+0xb0/0xb0
[  344.648372][T12948]  __se_sys_ioctl+0xfd/0x170
[  344.648386][T12948]  do_syscall_64+0x55/0xb0
[  344.648397][T12948]  ? clear_bhb_loop+0x40/0x90
[  344.648409][T12948]  ? clear_bhb_loop+0x40/0x90
[  344.648421][T12948]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  344.648436][T12948] RIP: 0033:0x7f77f2d9e0d9
[  344.648450][T12948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  344.648470][T12948] RSP: 002b:00007f77f3cb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  344.648485][T12948] RAX: ffffffffffffffda RBX: 00007f77f3025fa0 RCX: 00007f77f2d9e0d9
[  344.648493][T12948] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000003
[  344.648501][T12948] RBP: 00007f77f2e35024 R08: 0000000000000000 R09: 0000000000000000
[  344.648508][T12948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  344.648514][T12948] R13: 00007f77f3026038 R14: 00007f77f3025fa0 R15: 00007ffc1f920118
[  344.648526][T12948]  </TASK>
[  344.648530][T12948] 
[  344.648532][T12948] The buggy address belongs to a 768-page vmalloc region starting at 0xffffc90004009000 allocated at drm_fbdev_generic_helper_fb_probe+0x247/0x520
[  344.648558][T12948] Memory state around the buggy address:
[  344.648564][T12948]  ffffc90004308f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  344.648571][T12948]  ffffc90004308f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  344.648577][T12948] >ffffc90004309000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  344.648582][T12948]                    ^
[  344.648588][T12948]  ffffc90004309080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  344.648595][T12948]  ffffc90004309100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  344.648600][T12948] ==================================================================
[  344.648610][T12948] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  344.648615][T12948] CPU: 0 PID: 12948 Comm: syz.4.2584 Not tainted syzkaller #0
[  344.648625][T12948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  344.648631][T12948] Call Trace:
[  344.648635][T12948]  <TASK>
[  344.648639][T12948]  dump_stack_lvl+0x18c/0x250
[  344.648651][T12948]  ? show_regs_print_info+0x20/0x20
[  344.648663][T12948]  ? load_image+0x420/0x420
[  344.648675][T12948]  panic+0x2ca/0x720
[  344.648689][T12948]  ? lock_chain_count+0x20/0x20
[  344.648701][T12948]  ? bpf_jit_dump+0xd0/0xd0
[  344.648716][T12948]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  344.648727][T12948]  ? lockdep_hardirqs_on+0x98/0x150
[  344.648741][T12948]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  344.648751][T12948]  ? _raw_spin_unlock+0x40/0x40
[  344.648759][T12948]  ? print_memory_metadata+0x314/0x400
[  344.648771][T12948]  ? sys_imageblit+0x1bac/0x25d0
[  344.648780][T12948]  check_panic_on_warn+0x84/0xa0
[  344.648794][T12948]  ? sys_imageblit+0x1bac/0x25d0
[  344.648803][T12948]  end_report+0x6f/0x130
[  344.648814][T12948]  kasan_report+0x128/0x150
[  344.648827][T12948]  ? sys_imageblit+0x1bac/0x25d0
[  344.648838][T12948]  sys_imageblit+0x1bac/0x25d0
[  344.648851][T12948]  ? sys_copyarea+0x2530/0x2530
[  344.648864][T12948]  drm_fbdev_generic_defio_imageblit+0x2c/0x110
[  344.648878][T12948]  soft_cursor+0xa01/0xc30
[  344.648893][T12948]  bit_cursor+0x16dd/0x1f60
[  344.648911][T12948]  ? bit_clear_margins+0x550/0x550
[  344.648926][T12948]  ? get_color+0x2e8/0x4d0
[  344.648938][T12948]  ? bit_clear_margins+0x550/0x550
[  344.648952][T12948]  ? fbcon_cursor+0x430/0x640
[  344.648963][T12948]  ? add_softcursor+0x8c/0x440
[  344.648976][T12948]  con_flush_chars+0x1fa/0x280
[  344.648988][T12948]  con_write+0x2e/0x40
[  344.649000][T12948]  do_output_char+0x64a/0x960
[  344.649015][T12948]  __process_echoes+0x2e0/0x9f0
[  344.649030][T12948]  n_tty_receive_buf_common+0xc81/0x1380
[  344.649050][T12948]  ? paste_selection+0x1cb/0x4d0
[  344.649065][T12948]  paste_selection+0x329/0x4d0
[  344.649080][T12948]  ? set_selection_kernel+0x17b0/0x17b0
[  344.649095][T12948]  ? do_task_dead+0xd0/0xd0
[  344.649106][T12948]  ? __might_fault+0xaa/0x120
[  344.649115][T12948]  ? __might_fault+0xc6/0x120
[  344.649125][T12948]  ? __might_fault+0xaa/0x120
[  344.649135][T12948]  ? tioclinux+0x34e/0x450
[  344.649147][T12948]  vt_ioctl+0x813/0x1f20
[  344.649161][T12948]  ? __vt_event_wait+0x260/0x260
[  344.649177][T12948]  ? __fget_files+0x28/0x460
[  344.649191][T12948]  ? tty_jobctrl_ioctl+0x378/0xba0
[  344.649203][T12948]  tty_ioctl+0x91e/0xdc0
[  344.649215][T12948]  ? tty_get_icount+0xb0/0xb0
[  344.649226][T12948]  __se_sys_ioctl+0xfd/0x170
[  344.649239][T12948]  do_syscall_64+0x55/0xb0
[  344.649250][T12948]  ? clear_bhb_loop+0x40/0x90
[  344.649261][T12948]  ? clear_bhb_loop+0x40/0x90
[  344.649273][T12948]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  344.649284][T12948] RIP: 0033:0x7f77f2d9e0d9
[  344.649292][T12948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  344.649306][T12948] RSP: 002b:00007f77f3cb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  344.649316][T12948] RAX: ffffffffffffffda RBX: 00007f77f3025fa0 RCX: 00007f77f2d9e0d9
[  344.649324][T12948] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000003
[  344.649331][T12948] RBP: 00007f77f2e35024 R08: 0000000000000000 R09: 0000000000000000
[  344.649337][T12948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  344.649343][T12948] R13: 00007f77f3026038 R14: 00007f77f3025fa0 R15: 00007ffc1f920118
[  344.649354][T12948]  </TASK>
[  344.649404][T12948] Kernel Offset: disabled