last executing test programs:

6m33.990020104s ago: executing program 3 (id=1818):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@mcast1, 0xffff}, {@in=@rand_addr=0x64010101, 0x2, 0x32}, @in6=@loopback, {0x0, 0x3, 0x0, 0x0, 0x1800000000000000, 0x0, 0x0, 0x3}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x8}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)

6m33.466001061s ago: executing program 3 (id=1825):
syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f00000002c0)='./file0\x00', 0x2000002, &(0x7f000001fac0)={[{@balloc_no_unhash_reloc}, {@usrjquota_file, 0x4}, {@grpquota}, {@expose_privroot}, {@usrjquota, 0x3d}]}, 0x2, 0x1115, &(0x7f00000033c0)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=")
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)

6m32.490127522s ago: executing program 3 (id=1835):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x4b47, &(0x7f0000000000))

6m32.040726366s ago: executing program 3 (id=1842):
syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1008804, &(0x7f0000000280)={[{@keep_last_dots}, {@errors_continue}, {@errors_remount}, {@errors_continue}, {@errors_remount}, {@umask={'umask', 0x3d, 0x26a}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@namecase}, {@time_offset={'time_offset', 0x3d, 0x9}}]}, 0x1, 0x1530, &(0x7f0000006800)="$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")
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)

6m31.633636389s ago: executing program 3 (id=1848):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, 0x0)

6m31.090248356s ago: executing program 3 (id=1855):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001a00)=ANY=[@ANYBLOB="e4000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0008000000000400140003006e657464657673696d30000000000000080004000d040000a8001680840001800c000300030000000900000014000a000b0000000000000003000000000000000c0007000600000003000000280001"], 0xe4}}, 0x800)

6m30.846527444s ago: executing program 32 (id=1855):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001a00)=ANY=[@ANYBLOB="e4000000100001002abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0008000000000400140003006e657464657673696d30000000000000080004000d040000a8001680840001800c000300030000000900000014000a000b0000000000000003000000000000000c0007000600000003000000280001"], 0xe4}}, 0x800)

6m5.7623995s ago: executing program 0 (id=2168):
set_mempolicy(0x3, &(0x7f0000000080)=0x1ff, 0x5)
io_uring_setup(0x833, &(0x7f0000000080)={0x0, 0x92bc, 0x400})

6m5.532334137s ago: executing program 0 (id=2181):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x4, 0x1, 0x34565559, 0x1, 0xb, [{0x7}, {0xd, 0x87}, {0x8000, 0x800b25}, {0x0, 0x3}, {0x5, 0x5}, {0x80000001, 0x1}, {0x1200, 0x1}, {0x8, 0x8}], 0xa, 0xfe, 0x0, 0x0, 0x5}})

6m5.330203884s ago: executing program 0 (id=2175):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000f0000004000000040"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), 0x0}, 0x20)

6m5.254969456s ago: executing program 0 (id=2178):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000480)={[{@utf8}, {}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x6c}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@dmask={'dmask', 0x3d, 0x3}}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@umask={'umask', 0x3d, 0x10001}}]}, 0x1, 0x152b, &(0x7f0000001dc0)="$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")
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xb89046, 0x0)

6m5.006177164s ago: executing program 0 (id=2183):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000080)={[{@block_validity}, {@errors_remount}, {@debug}, {@block_validity}]}, 0xff, 0x268, &(0x7f0000000540)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)

6m4.613638516s ago: executing program 0 (id=2188):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x1c, {0x2, 0x2, @empty}}, 0x24)

6m4.009526356s ago: executing program 33 (id=2188):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x1c, {0x2, 0x2, @empty}}, 0x24)

1m3.698584819s ago: executing program 5 (id=5744):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x64, 0x1, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x19}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x40040)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000029700100001e0a01080000000000000000070000060900020073797a31000000000900010073797a3000000000440103804001ae5e34010180b4"], 0x1f4}}, 0x0)

1m3.494264925s ago: executing program 5 (id=5745):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf11, &(0x7f0000001e80)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

1m3.196794354s ago: executing program 5 (id=5746):
unshare(0x60600)
r0 = socket(0x1d, 0x2, 0x6)
bind$can_j1939(r0, &(0x7f0000000400)={0x1d, 0x0, 0x10000003, {0x1, 0xff, 0x1}, 0x1}, 0x6d)

1m2.944580823s ago: executing program 5 (id=5756):
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=macgreek,umask=00000000000000000000005,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303030303031302c646973636172642c666d61736b3d30303030303030303030303030303030303030303030362c696f636861727365743d6575632d6a702c6572726f72733d636f6e74696e75652c616c6c6f775f7574696d653d30303030303030303030303030303030303134373037302c0092803b831534d131135366249e8a045ee656058ddf6f41400b01a0870e4c656ef6f11325a20c319fd81269acc3b77200feb4294a821f553876d64b4a41390c44492e6f79c4b09bbe8e5cb02585b919505651c34f3e21f9532204a0c936a1da6422edb1108cf73536e8fbe241e030f5b5e1d081994fbe8a093c44b63f3da6a8a46706b47fa3"], 0x1, 0x153e, &(0x7f00000034c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)

1m2.69030836s ago: executing program 5 (id=5750):
unshare(0x20000400)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@cgroup=r0, 0x24, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

1m2.197719376s ago: executing program 5 (id=5758):
r0 = fanotify_init(0x18, 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r0, 0x71, 0x40000009, r1, 0x0)

1m1.818377858s ago: executing program 34 (id=5758):
r0 = fanotify_init(0x18, 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r0, 0x71, 0x40000009, r1, 0x0)

3.948266975s ago: executing program 1 (id=6350):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x2, 0x5525, &(0x7f0000005c00)="$eJzs3L1vG2UYAPDHSdOmH5QIMbD1pAopkWqrTj8EW4FWfIhWUYGBCRz7Yrm1fVHsOCETAyNi4D9BIDEx8hcwMDCzIQYQGxLIdxdoCkhIseOm+f2k83Pv6zfPPa8VRXruIgdwYi0lv/1SiYtxNiLmI+JCRH5eKY/crSK8EBGXImLukaNSzv81cToizkXExXHyImelfOvzK6PLN35+69dvvj9z6vwXX/8wu10Ds/ZiRPQ2i/OdXhGzdhEflPONUSePveujMhZv9B6W46yIO+l6nmGnsb+ukcdr7WJ9trk9GMeNbqM5ju3ORj6/2S8uOBi19/PkP/CgsZWPW+l6HjuDLI/tvaKu3b3ib9veYFjkaZX5PsrTx3C4H4v5dDct9rP5MI/N/rCcL/JmrXR3HEdlLC8XzazbyutYP8wn/WR7u9Pf3k1G6dagk/WTG7X6S7X6zWp9K2ulw/R6tdFr3byeLLe742XVYdro3WpnWbub1ppZbyVZbjeb1Xo9Wb6dri9GRL1eu1a7Wr2xkhRnV5LX772XdFvJ8ji+2ulvDzvdQbKRbSW30/VOo7+SrNauvbySXK4n79xdS9bu37lzd+3dD26/f++Vu2++Vi76R1nJ8urV1dVq/Wp1tb7ypOx/XOiU9/9JWfQE9w+HUpl1AQDHj/4fmIXp9f9b9yOm3/+H/n8ijlX/e9L7/ynsHw5F/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcGL9uPDlG/nJUjE+X84/U049V44rETEXEX/8i/k4fSDnfJln4T/WLzxWw7eVyDOMr3GmPM5FxK3y+P3ZaX8KAAAA8PT66uNLnxXdevGy9Nj7352dSVkcjeKmzdyFDyeUbzEiFpZ+mlC2ufHL8xNKlv9+n4rdCWXLb2AtTihZccvt1KSy/S/zB8LiI6FShLkjLQcAADgSBzuBo+1CAAAAOEqfzroAZqMS+48y958F5/95//cDwbMHRgAAAMAxVJl1AQAAAMDU5f2/7/8DAACAp1vx/X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn+zcz43aQBQH4GeDgfxTUJR7UkpuUEZKyDHHiALSBAXkQFpIA9RAbikhghUzIxZWaLWSjb1afZ/knbUxP94gOMwMGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuKW/zWb5+8enn21z9od2uukNAAAAcM2u2SzTP/N8/qZcf1cufSjnVUTUEXFt7D6KyUXmqOQ09/f/Or+/eVDDn4iUcHyNaTleR8SXcvx/f+t3AQAAAF6u7Wq9yKP1/Gc+dEH0KU/a1G+/dpRXRUQz/9dRWn3M+9hRWPp8j+N725gqN2kCa9a+qixNuY27SnuS9HU/zdrNzpoqN/XVp52K7KzvAABAj0YXTb+jEAAAAPr0begCGEZazCy/xS9LgdPclOW9VxdnAAAAwPP0efLIg1WPhQAAAADDSOP/nvb/O9j/DwAAAIaR9/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADglnbNZrldrRdtc/aHdrrpDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3LE/7ygQAmEQBnvXdyZz/8NKg6amJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCb3/3l/8TUOJPMvTaWnkeStVNj69TYOzeO/jC+fg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8EW/++X/xNQ4k8ydNpaOR5K1q8bWVWPvQePowXj7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxc79+8ZNxQEAf7bPV1pAHAHdEIRAYoCFXq+lpRtiAEUM/AlIUXotoVd+tBloVSGysKHMXRCMCCGBwtb/oXMrdQlbhhuCxAyyz8454SQu0NiX5PORnt/3LMfv+2wpytfPOQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKo3cncZJtOuM4LvY93Lm7kvWP9vWZ+xuPF7OWxVGdSR8NL1c/RN3mEgEAAODEaCVlfR9C2Eo3l7I+7uT1f1oelNX83z87jst6fn/dX/Zl7Z+1337dfnF3pM54nOykV1eHg3NTcjm8ac635/71iFZ+5fNnL0l+Q+IP1l8Ypfn1jL598OC9dh6eqiNbAOC/OFv2RVD+PZT1/SYTA+DEaFUK77L+TzrN5gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQh9F6eLqMoxDCYmsSZx7t3F2Z1t/feLxYtkv37m2EryfnzE6RhhCurg4H52qdzXy7dfvO9eXhcHCz/uCVEMIBfyp6UqO/U0z/+kczHBxCI9fn8IPjOq99QVzc7HnJ52gEDf5SAgDgWEqLltX1W+nmUrYvWgjhrx/21v+vV+IwY/2//fGlh9WxqvV/v7YZzr/e2o3Pe7du33lz9cbytcG1wadvne+/3b9w+eLFy738WUnPExMAAAD+n3bRqvV/vPDP9f8zlTjMWP9/8V3/q+pYifp/qsmiX9OZAAAAnGzPv/rnH9GU/VG7Hb5cXlu72R9vdz+fH28bSPXAThWtWv8nC01nBQAAANRhtB7tWf+/UonDjOv/z/z40s/VcyYhhNPF+v/Zlc+GV+qbzlyr49+Jm54jAAAAzTpdtOr6f5q//x/vvvIQhxDeeG0cF18DOFP9n7z/zU/Vsarv/1+ob4pzKe6Or0fed0NodZvOCAAAgOPsqaJlxf7v6ebSJ7+c+bDt/X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAuv0dAAD//8soPXo=")
syz_mount_image$fuse(0x0, &(0x7f0000000540)='./file0\x00', 0x4400, 0x0, 0x0, 0x0, 0x0)
utime(&(0x7f0000000140)='./file0\x00', 0x0)

3.119720891s ago: executing program 4 (id=6356):
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
r0 = io_uring_setup(0x2c49, &(0x7f00000000c0)={0x0, 0x8000002, 0x1000, 0x1000000, 0x1a6})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1)

2.973985176s ago: executing program 4 (id=6357):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2.815035301s ago: executing program 4 (id=6359):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000130000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000020850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000300000085000000a600000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2.605961827s ago: executing program 4 (id=6360):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r1, r0, 0x7}, 0x10)

2.357464035s ago: executing program 4 (id=6363):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0xffff}}, {@sysvgroups}, {@jqfmt_vfsold}, {@nouid32}, {@grpjquota, 0x2e}, {@grpquota}, {@nolazytime}]}, 0x84, 0x46c, &(0x7f00000004c0)="$eJzs3EtvG0UcAPD/rpP0RR6U8ugDaiiIiELSpAV64AICqRckJDjAMaShKnVb1ASJVhUtCJUj4hMARyQ+ASe4IOAE4gp3hFShXggckNHau40TO6njxHWDfz9pk5ndWc/Mzk4yu7PrAPpWOfuRRFQj4teIGK1Hlyco138t3rg8+/eNy7NJVKuv/pnU0v114/JskbTYb1ceGU8j0o+S2N8i3/mLl87MVCpzF/L45MLZdybnL1566vTZmVNzp+bOTR8/fuzo1LPPTD+9KfUczsq67/3zB/aeeOPTl2er8eYPX2XlvSvf3liPurEN51mO8vJjWTNU+/nYhj/9zjLcEE4GelgQ1qUUEVlzDdb6/2iUYqnxRuOlD3taOKCrqtVqdVvT2lIRuFoF/seS6HUJgN4o/tFn17/FchuHHz13/fn6BVBW78V8qW8ZiDT7tb1+xT7cpfzLEfH61X8+y5ZoeR8CAGBzfZONf55sNf4bSe5rSDeSzw2NRcThiNgdEfdExJ6IuDcisrT3R8QD68y/vCLePP75eUdHFWtTNv57Lp/bWj7+S4skY6U8Nlyr/2Dy1unK3JH8mIzH4LYsPrVGHt+++Msnq21rHP9lS5Z/MRbMy/HHwIobdCdnFmY2UudG1z+I2DfQqv7JzZmAJCL2RsS+Dj4/O2ann/jyQBYe2dW8/cAt67+GTZhnqn4R8Xi9/a/GivoXknpOq81PTm6PytyRyeKsaPbjT9deaYwPNoRv3f7dlbX/zpbnf17/ohsU87Xz68/j2m8fr3pN0+n5P5S8VgsP5evem1lYuDAVMZSvWLZ+emnfIl6kz+o/fqhV/UeS3RH/fp7vtz8/Vx+MiIci4mBe9ocj4pGIOLRG/b9/4dG31z5CvW3/k2u1f8RY0jhf30GgdOa7r1fLv732P1YLjedr2vn7124BN3LsAAAAYKtIa8/AJ+nEzXCaTkzUn+HfEzvTyvn5hcPlePfcyfqz8mMxmBZ3ukYb7odO5feGi/j0ivjRiLi79qTRjlp8YvZ8pVtz6kB7dq3S/zO/l3pdOqDr1jWP1vxGG7CFeV8T+pf+D/1L/4f+pf9D/2rV/69ELPagKMBt5v8/9C/9H/qX/g/9S/+HvtT8SnzxdSudvOm/FNh9YkO791Gg1KVPjsYv7ehCINKeH7rOA+mdUIyDeWBbRLS715WutunK8wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDr+y8AAP//BcXhGA==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000000c0)={0xd270, 0x0, 0x1, 0x9, 0xd5})

2.22723567s ago: executing program 2 (id=6364):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000060900010073797a30000000003c000000090a010400000000000000000700000308000a40000000000900020073797a31000000000900010073797a30000000000800054000000021640000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000003800038034000080040001802c0007800b00010074617267657400001c000280080002400000000a040003000900010053"], 0xe8}}, 0x0)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0xa, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x40000)

1.964852868s ago: executing program 1 (id=6365):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xd0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1.768945814s ago: executing program 2 (id=6366):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00')
exit(0xf)
pread64(r0, &(0x7f0000001400)=""/4108, 0x100c, 0x7)

1.662006477s ago: executing program 4 (id=6367):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8fd00000905060200020d0006090582020002"], 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000001500)={[{0x3d, 0x4e00, "2fff060296b34715b5fa4381e561d64ba93743de00a9e1efb4ae521d90af8ca939a10a48b766167e39cfb6ed14737ffedbbee2ae3af5c4c835bb5baf1d"}]})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffed5, &(0x7f0000000e80)=ANY=[])

1.342118537s ago: executing program 6 (id=6368):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000180001eeffffffffffffff850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x40000)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc)

1.122351635s ago: executing program 1 (id=6369):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40106e80, 0x0)

1.069004406s ago: executing program 6 (id=6370):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="0c000000010001", 0x7)

815.722604ms ago: executing program 6 (id=6371):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x28040}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)

682.797838ms ago: executing program 2 (id=6372):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11070000006641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e2400000000008133455d000040cb31a5fc97fc294891f7c08b96fcd151fba110c30183df23ea32db", 0x2c}], 0x2)

681.545258ms ago: executing program 1 (id=6373):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x1ae}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

562.908272ms ago: executing program 6 (id=6374):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/unix\x00')
preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000100)=""/82, 0x52}], 0x1, 0x7, 0x0)

481.325545ms ago: executing program 2 (id=6375):
r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x53, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xcb, 0x6130}, {0x0, 0x5, 0x1, 0x3, 0x8002, 0x8}]})
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

320.72338ms ago: executing program 6 (id=6376):
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000003c0)='./file1\x00', 0x8680, &(0x7f0000020b00)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES8], 0xfd, 0x2a1, &(0x7f0000000100)="$eJzs3b9u01wYx/HfcdI270tV3D8ICTEVKjGhtgwglkqod8DChChNkKpaRYIi0U6BGXEB7NwCF8DIVDEjsTExMBaWoHN8Quw0jpMoqZP0+5ESJfZ57OfYxz1+UrURgAvrwfb3j3d+2IeRSipJui8FkipSWdIVXa28OjjcO4xq1W4bKrkI+zClrDa7B7VOi22c25cX2ndlzSeXYTQq31QvOgcUz139HQTSnL863frKuWc2Ghd90JtTneq1ForOAwBQLD//B36en48XKQikNT/tp+f/yZ5Aza+GU3QeI/M5Z31i/ndVVsPY83vZrWrVe3YI6K4PcVWi9KfvgzareGSlbjBNXlXpcgn+e7YX1W7vPo+qgd5qy5tpNVtxz9V46DY1a1r7+s3ZTa/GHfOZ5UpurT+XXB9mbB82g5NW/okmy8PdYz7zxZyYxybUB1X/3f+VG8YeDHc8wrYzFee/nr1F18tZuVbJs5Rosuh2ci19xLv2sqSMikTN87ao9AcEYV6eLmqpLSru3UZO1HLHqM2cqJX2qNZozo4cNfPePDKr+qlP2k7c/wf2aK+plyvTtnEt/cjo2p+yaxm6+cRfdfXrHVsGg/YIA3inp7qnhZdHx/s7UVR7MbUv7JU4BmkcHe//boxFGjtR1BwE45LP1L6wB7mQvTfnncG3U9hPJpyj1knvM5DfzUwLe99l4vovUa+su5s1+xSm79PnkrG5tWBiixsZtcGSe/4/u4JLMVJdjczKoK3m6rxHV3PduCXd7GWPsdDnOX62Bgky2/qqJ3z+DwAAAAAAAAAAAAAAAAAAMGmG9ycHFWWtKrqPAAAAAAAAAAAAAAAAAAAAAABMulF8/6//7/DmTJtevv/3oeJ3Zc1rZhg9BJDlbwAAAP//e1SAFg==")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.current\x00', 0x275a, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)

319.72122ms ago: executing program 2 (id=6377):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f024})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0xcb81}, 0x1, 0x9, 0x0, 0x7f, 0x0, 0x6}})

290.428631ms ago: executing program 1 (id=6378):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000708000240000000000800044000000003080003400000000008000540000000080900010073797a30000000000900020073797a32"], 0x98}}, 0x0)

136.118506ms ago: executing program 2 (id=6379):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000085000000a000000095"], &(0x7f0000000380)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

123.437357ms ago: executing program 1 (id=6380):
getpid()
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f00000001c0)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}, {@shortname_win95}, {@shortname_win95}, {@shortname_winnt}, {@shortname_lower}, {@uni_xlate}, {@numtail}, {@utf8}, {@utf8no}, {@utf8no}]}, 0x26, 0x34c, &(0x7f0000001740)="$eJzs3T9oJGUUAPC3mU12EziTQji0Wu0EOS4RC21MOE44TKEni/8aFy7nn+wqZHEhFtlLo1gqNoJWdldoebVYiNhZ2HqCnIqN1x3c4cjuTHY3mcn9EbOn3u9XhJf3fW++byZDdhKSt6+uxua52Th/9eqVqNcrUV09tRrXKrEUM5FE5kIAAP8n19I0/kgzw8RTN5v90ULMZtHcVHYHAByF4ev/a8fGidrd3A0AMA2Fn//LPVuaffvItgUAHKHC6//D+4YP/Jq/OvqbAADgv+v5l15+Zm094myjUY/ovN9r9prx5Hh87Xy8Ee3YiJOxGDcisgeF7Glh8PHpM+unTzYGflmK5qCi14zo9HvN7ElhLRnW12I5FmMpr09H9cmgfnlY34iIC/3h+tGp9JqzsZCv/+NCbMRKLMb9hfqIM+unVxr5AZqdvfp+xG7U905isP8TsRjfzww/OReD2uxYg8zOcqNxKl3fV9+7WBvOAwAAAAAAAAAAAAAAAAAAAACAo3BiPvLuOY2lUf+btNPvvXc2n9Aojg/7+2TDeX+g3aw/UFrb687zQXKwP9D+/jy9ZjVm7uqZAwAAAAAAAAAAAAAAAAAAwL9Hd3suWu32xlZ3+93NcTDX7k9k3vr2i6/n4+CcN5NxJqrZ4fbNyXMxUZXEqDwdlafJvjl5kETkkyvRunhptOPJObXRWRTKB0GtMFTJ99Rqt4899POnZVV/jjNJjIbqpUtU8vUnhjr3Zamy/dw8qHS3V24x53KapoeV73xSrIp6RLXwhfsngm+uvP7AY93jj3cr1c3WV3nTh0ceXXzh8sef/7bZakd+adrtua3ujfRvr5VM3D+V/DpXSu6E8mB3nNnd6m63kh9+f/HBD787MDkpv3/Sycw7h6/15cHMXBYMtnk7ZzpbcvOXB69cH929d34xj3+22rq089OvexfzVlUT3yQ06gAAAAAAAAAAAAAAAAAAgKmY+F/xO/DEc0e3IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYvvH7/08Eu4XM7QTX+1Ecqm1sdQ9dfH6qpwoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD3srwAAAP//JT9zjQ==")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0)

0s ago: executing program 6 (id=6381):
set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17)

kernel console output (not intermixed with test programs):

nerate RBDS Instead of RDS: false
[  499.372430][T18671] vivid-004: RDS Reception: true
[  499.377765][T18671] vivid-004: RDS Program Type: 0 inactive
[  499.383621][T18671] vivid-004: RDS PS Name:  inactive
[  499.395605][T18671] vivid-004: RDS Radio Text:  inactive
[  499.403187][T18671] vivid-004: RDS Traffic Announcement: false inactive
[  499.422283][T18671] vivid-004: RDS Traffic Program: false inactive
[  499.428706][T18671] vivid-004: RDS Music: false inactive
[  499.449765][T18671] vivid-004: ==================  END STATUS  ==================
[  499.500370][   T28] usb 6-1: too many endpoints for config 0 interface 0 altsetting 255: 251, using maximum allowed: 30
[  499.513518][   T28] usb 6-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 251
[  499.540893][   T28] usb 6-1: config 0 interface 0 has no altsetting 0
[  499.552193][   T28] usb 6-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  499.562958][   T28] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.618317][   T28] usb 6-1: config 0 descriptor??
[  499.866431][T18688] loop4: detected capacity change from 0 to 256
[  499.888298][T18688] exfat: Deprecated parameter 'namecase'
[  499.900171][T18688] exfat: Deprecated parameter 'namecase'
[  499.959761][T18688] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8300b014, utbl_chksum : 0xe619d30d)
[  500.044822][T18690] loop1: detected capacity change from 0 to 512
[  500.084050][   T28] dragonrise 0003:0079:0006.0025: unknown main item tag 0x2
[  500.102502][   T28] dragonrise 0003:0079:0006.0025: unknown main item tag 0x4
[  500.109927][   T28] dragonrise 0003:0079:0006.0025: unknown main item tag 0x5
[  500.128330][   T28] dragonrise 0003:0079:0006.0025: unknown main item tag 0x7
[  500.140155][T18690] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  500.140865][   T28] dragonrise 0003:0079:0006.0025: item fetching failed at offset 18/40
[  500.169892][   T28] dragonrise 0003:0079:0006.0025: parse failed
[  500.176158][   T28] dragonrise: probe of 0003:0079:0006.0025 failed with error -22
[  500.220964][T18690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  500.312168][T18690] ext4 filesystem being mounted at /1410/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  500.432363][   T28] usb 6-1: USB disconnect, device number 28
[  500.539029][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  500.594773][T18708] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5382'.
[  501.375012][T18744] loop5: detected capacity change from 0 to 256
[  501.530144][T18744] FAT-fs (loop5): Directory bread(block 64) failed
[  501.539088][T18744] FAT-fs (loop5): Directory bread(block 65) failed
[  501.553216][T18744] FAT-fs (loop5): Directory bread(block 66) failed
[  501.570802][T18744] FAT-fs (loop5): Directory bread(block 67) failed
[  501.607458][T18744] FAT-fs (loop5): Directory bread(block 68) failed
[  501.615526][T18744] FAT-fs (loop5): Directory bread(block 69) failed
[  501.622800][T18744] FAT-fs (loop5): Directory bread(block 70) failed
[  501.630531][T18744] FAT-fs (loop5): Directory bread(block 71) failed
[  501.648216][T18744] FAT-fs (loop5): Directory bread(block 72) failed
[  501.658081][T18744] FAT-fs (loop5): Directory bread(block 73) failed
[  501.803779][T18762] loop4: detected capacity change from 0 to 256
[  502.011617][T18768] loop4: detected capacity change from 0 to 16
[  502.036685][T18768] erofs: (device loop4): mounted with root inode @ nid 36.
[  502.084237][T18768] erofs: (device loop4): erofs_fill_dentries: bogus dirent @ nid 36
[  502.150379][T18772] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5412'.
[  502.172615][T18772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5412'.
[  502.206060][T18772] netlink: 'syz.5.5412': attribute type 11 has an invalid length.
[  502.218520][T18774] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5413'.
[  502.466813][T18785] loop1: detected capacity change from 0 to 16
[  502.525595][T18783] loop4: detected capacity change from 0 to 2048
[  502.573707][T18783] EXT4-fs: Ignoring removed nomblk_io_submit option
[  502.679625][T18783] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  502.763863][ T2133] usb 6-1: new full-speed USB device number 29 using dummy_hcd
[  502.841293][ T9953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  502.968767][ T2133] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  502.990684][ T2133] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  503.025866][ T2133] usb 6-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  503.038791][ T2133] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  503.053236][ T2133] usb 6-1: Manufacturer: syz
[  503.061009][ T2133] usb 6-1: config 0 descriptor??
[  503.206163][T18811] loop4: detected capacity change from 0 to 64
[  503.459364][T18820] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5433'.
[  503.527076][ T2133] cougar 0003:060B:700A.0026: unknown main item tag 0x1
[  503.547844][ T2133] cougar 0003:060B:700A.0026: item fetching failed at offset 2/5
[  503.564435][ T2133] cougar 0003:060B:700A.0026: parse failed
[  503.587034][ T2133] cougar: probe of 0003:060B:700A.0026 failed with error -22
[  503.820944][ T8222] usb 6-1: USB disconnect, device number 29
[  504.385093][T18859] loop2: detected capacity change from 0 to 4096
[  504.456129][T18862] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  504.664263][T18870] netlink: 436 bytes leftover after parsing attributes in process `syz.2.5453'.
[  504.690867][T18870] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5453'.
[  505.058743][T18888] loop4: detected capacity change from 0 to 1024
[  505.202339][T18890] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5462'.
[  505.207340][T18894] syz.4.5459: attempt to access beyond end of device
[  505.207340][T18894] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  505.259262][T18893] loop1: detected capacity change from 0 to 1024
[  505.295517][T18893] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  505.428331][  T991] hfsplus: b-tree write err: -5, ino 8
[  506.146900][T18926] netlink: 209824 bytes leftover after parsing attributes in process `syz.2.5478'.
[  506.182765][T18905] loop4: detected capacity change from 0 to 32768
[  506.237931][T18905] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.5467 (18905)
[  506.301980][T18905] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  506.312177][T18905] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  506.335230][T18905] BTRFS info (device loop4): setting nodatasum
[  506.349709][T18905] BTRFS info (device loop4): force zlib compression, level 3
[  506.361375][T18905] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  506.420166][T18905] BTRFS info (device loop4): use lzo compression, level 0
[  506.427349][T18905] BTRFS info (device loop4): turning on flush-on-commit
[  506.466969][T18905] BTRFS info (device loop4): enabling auto defrag
[  506.503714][T18905] BTRFS info (device loop4): max_inline at 4096
[  506.537895][T18905] BTRFS info (device loop4): using free space tree
[  506.648234][T18905] BTRFS info (device loop4): enabling ssd optimizations
[  506.754407][ T9953] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  507.455573][T18970] loop2: detected capacity change from 0 to 2048
[  507.493431][T18970] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  507.753546][T18978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5494'.
[  508.200367][T18996] loop2: detected capacity change from 0 to 4096
[  508.233317][T18996] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  508.326022][T19004] loop5: detected capacity change from 0 to 164
[  508.335963][T18996] ntfs3: loop2: failed to convert "c46c" to maccenteuro
[  508.531328][T19002] loop1: detected capacity change from 0 to 8192
[  508.619259][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  508.627113][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  508.959584][T19022] trusted_key: encrypted_key: hex blob is missing
[  509.152182][T19028] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  509.337964][T19032] loop4: detected capacity change from 0 to 1024
[  509.396711][T19030] loop2: detected capacity change from 0 to 4096
[  509.418106][T19032] hfsplus: found bad thread record in catalog
[  509.428337][T19030] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  509.444635][T19032] hfsplus: catalog searching failed
[  509.523121][   T49] hfsplus: b-tree write err: -5, ino 4
[  509.526640][T19020] loop1: detected capacity change from 0 to 32768
[  509.528920][   T49] hfsplus: b-tree write err: -5, ino 2
[  509.560132][T19020] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  509.593575][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  509.593588][   T27] audit: type=1800 audit(1780932388.353:278): pid=19030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5517" name="file1" dev="loop2" ino=30 res=0 errno=0
[  509.723572][ T2954] ntfs3: loop2: ino=1e, ntfs3_write_inode failed, -22.
[  509.733884][T19020] XFS (loop1): Ending clean mount
[  509.808068][   T27] audit: type=1800 audit(1780932388.540:279): pid=19020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5511" name="file1" dev="loop1" ino=6150 res=0 errno=0
[  509.828766][    C0] vkms_vblank_simulate: vblank timer overrun
[  509.909299][ T5772] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  510.219715][T19053] loop4: detected capacity change from 0 to 1024
[  510.260364][T19053] hfsplus: invalid length 1280 has been corrected to 255
[  510.972192][T19064] loop1: detected capacity change from 0 to 32768
[  510.995041][T19064] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.5523 (19064)
[  511.054836][T19064] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  511.097362][T19064] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  511.120175][T19064] BTRFS info (device loop1): enabling ssd optimizations
[  511.131717][T19064] BTRFS info (device loop1): not using ssd optimizations
[  511.169584][T19064] BTRFS info (device loop1): turning off barriers
[  511.179559][T19064] BTRFS info (device loop1): using free space tree
[  511.523886][T19100] loop5: detected capacity change from 0 to 4096
[  511.543469][ T5772] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  511.756085][   T27] audit: type=1800 audit(1780932390.383:280): pid=19100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5540" name="file1" dev="loop5" ino=33 res=0 errno=0
[  511.843945][   T27] audit: type=1804 audit(1780932390.383:281): pid=19100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.5540" name=2F6E6577726F6F742F3732342F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F66696C6531 dev="loop5" ino=33 res=1 errno=0
[  511.879976][    C0] vkms_vblank_simulate: vblank timer overrun
[  512.073736][ T5764] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 10 /dev/loop1 scanned by udevd (5764)
[  512.093886][T19110] loop4: detected capacity change from 0 to 4096
[  512.134134][T19116] usb usb1: usbfs: process 19116 (syz.2.5547) did not claim interface 0 before use
[  512.153520][T19110] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512).
[  512.325903][T19110] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  512.534664][ T8222] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  512.567232][T19125] loop2: detected capacity change from 0 to 128
[  512.622501][T19125] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  512.669482][T19125] ext4 filesystem being mounted at /1378/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  512.701391][    C0] vkms_vblank_simulate: vblank timer overrun
[  512.759326][ T8222] usb 6-1: Using ep0 maxpacket: 16
[  512.768737][ T8222] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  512.791308][ T8222] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  512.803431][ T8222] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  512.821582][ T8222] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.822084][   T27] audit: type=1800 audit(1780932391.374:282): pid=19125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5552" name="file1" dev="loop2" ino=12 res=0 errno=0
[  512.835442][ T8222] usb 6-1: Product: syz
[  512.872338][ T8222] usb 6-1: Manufacturer: syz
[  512.878316][ T8222] usb 6-1: SerialNumber: syz
[  512.901684][ T8222] usb 6-1: config 0 descriptor??
[  512.932095][ T5773] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  513.051434][T19135] loop2: detected capacity change from 0 to 256
[  513.078877][T19135] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d)
[  513.159861][ T8222] usb 6-1: USB disconnect, device number 30
[  513.175474][ T5811] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  513.175540][   T27] audit: type=1800 audit(1780932391.711:283): pid=19135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5555" name="file1" dev="loop2" ino=1048826 res=0 errno=0
[  513.367923][ T5811] usb 5-1: Using ep0 maxpacket: 16
[  513.375526][ T5811] usb 5-1: config 0 interface 0 has no altsetting 0
[  513.384104][ T5811] usb 5-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00
[  513.400369][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  513.422725][ T5811] usb 5-1: config 0 descriptor??
[  513.512873][T19147] loop1: detected capacity change from 0 to 4096
[  513.559251][T19148] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  513.583212][   T27] audit: type=1326 audit(1780932392.095:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19149 comm="syz.2.5562" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bb939ce59 code=0x7ffc0000
[  513.631173][   T27] audit: type=1326 audit(1780932392.113:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19149 comm="syz.2.5562" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bb939ce59 code=0x7ffc0000
[  513.688021][   T27] audit: type=1326 audit(1780932392.123:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19149 comm="syz.2.5562" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7bb939ce59 code=0x7ffc0000
[  513.712975][T19147] syz.1.5561: attempt to access beyond end of device
[  513.712975][T19147] loop1: rw=0, sector=6054, nr_sectors = 2 limit=4096
[  513.749310][ T5811] usbhid 5-1:0.0: can't add hid device: -71
[  513.764695][T19147] NILFS (loop1): I/O error reading data block for GC (ino=15, vblocknr=3)
[  513.771886][ T5811] usbhid: probe of 5-1:0.0 failed with error -71
[  513.784951][T19147] NILFS (loop1): error -5 preparing GC: cannot read source blocks
[  513.795391][   T27] audit: type=1326 audit(1780932392.123:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19149 comm="syz.2.5562" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bb939ce59 code=0x7ffc0000
[  513.823781][ T5811] usb 5-1: USB disconnect, device number 16
[  514.404887][   T28] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[  514.472430][T19177] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5574'.
[  514.493560][T19177] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5574'.
[  514.612378][   T28] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  514.634504][   T28] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  514.661053][   T28] usb 3-1: config 1 has no interface number 0
[  514.682051][   T28] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  514.739234][   T28] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  514.752642][   T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.768174][   T28] usb 3-1: Product: syz
[  514.779037][   T28] usb 3-1: Manufacturer: syz
[  514.783779][   T28] usb 3-1: SerialNumber: syz
[  514.814091][   T28] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  514.820950][   T28] cdc_ncm 3-1:1.1: bind() failure
[  514.838080][T19190] loop4: detected capacity change from 0 to 64
[  515.188356][T19200] loop5: detected capacity change from 0 to 164
[  515.233311][T19200] Unsupported NM flag settings (240)
[  515.343606][T10853] Unsupported NM flag settings (240)
[  515.354616][T10853] Unsupported NM flag settings (240)
[  515.361412][T10853] Unsupported NM flag settings (240)
[  515.403974][T10853] Unsupported NM flag settings (240)
[  515.413512][T10853] Unsupported NM flag settings (240)
[  515.419549][T10853] Unsupported NM flag settings (240)
[  515.572819][T19213] netlink: 'syz.1.5591': attribute type 6 has an invalid length.
[  515.703295][T19219] loop5: detected capacity change from 0 to 1024
[  516.018698][   T28] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  516.199125][T19223] loop1: detected capacity change from 0 to 32768
[  516.233739][   T28] usb 5-1: Using ep0 maxpacket: 8
[  516.249894][   T28] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  516.274884][   T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.277183][T19223] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  516.304045][   T28] usb 5-1: Product: syz
[  516.316265][   T28] usb 5-1: Manufacturer: syz
[  516.325678][   T28] usb 5-1: SerialNumber: syz
[  516.349098][   T28] usb 5-1: config 0 descriptor??
[  516.370267][   T28] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  516.403371][   T28] dvb-usb: bulk message failed: -22 (2/0)
[  516.407642][T19223] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  516.425073][   T28] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  516.429439][T19223] XFS (loop1): Tail block (0x29) overwrite detected. Updated to 0x30
[  516.445743][   T28] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  516.461249][T19223] XFS (loop1): Ending clean mount
[  516.466716][   T28] usb 5-1: media controller created
[  516.527298][   T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  516.590364][T19221] dvb-usb: bulk message failed: -22 (3/0)
[  516.598194][   T28] cxusb: set interface failed
[  516.602909][   T28] dvb-usb: bulk message failed: -22 (1/0)
[  516.643793][ T5772] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  516.659494][   T28] DVB: Unable to find symbol mt352_attach()
[  516.667793][   T28] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  516.826494][T19229] loop5: detected capacity change from 0 to 40427
[  516.841403][   T28] rc_core: IR keymap rc-dvico-portable not found
[  516.858274][   T28] Registered IR keymap rc-empty
[  516.864695][T19229] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  516.885414][   T28] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  516.897565][T19229] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  516.910953][   T28] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input37
[  516.931563][T19229] F2FS-fs (loop5): Found nat_bits in checkpoint
[  516.944200][   T28] dvb-usb: schedule remote query interval to 100 msecs.
[  516.958563][   T28] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  516.998574][   T28] usb 5-1: USB disconnect, device number 17
[  517.128266][   T28] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  517.150990][T19229] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  517.158393][T19229] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  517.381260][ T2133] usb 3-1: USB disconnect, device number 27
[  517.520605][T19252] loop2: detected capacity change from 0 to 512
[  517.573709][T19252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  517.589687][T19252] ext4 filesystem being mounted at /1387/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  517.619958][T19252] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:106: comm syz.2.5604: Corrupt inode bitmap - block_group = 0, inode_bitmap = 3
[  517.839384][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  518.317233][ T2133] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[  518.320497][T19282] loop1: detected capacity change from 0 to 1024
[  518.359081][T19282] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  518.445011][ T5811] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  518.457339][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  518.522195][ T2133] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  518.551882][ T2133] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  518.562254][ T2133] usb 3-1: config 0 interface 0 has no altsetting 0
[  518.582810][T19286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5618'.
[  518.583944][ T2133] usb 3-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00
[  518.611711][ T2133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  518.630853][ T2133] usb 3-1: config 0 descriptor??
[  518.648552][ T5811] usb 5-1: Using ep0 maxpacket: 8
[  518.659586][ T5811] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  518.680188][ T5811] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  518.698925][ T5811] usb 5-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00
[  518.709236][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  518.740345][ T5811] usb 5-1: config 0 descriptor??
[  518.746429][ T5785] Bluetooth: hci0: unexpected event for opcode 0x2011
[  518.771808][T19288] loop1: detected capacity change from 0 to 512
[  518.805748][T19288] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  518.818604][T19288] EXT4-fs (loop1): corrupt root inode, run e2fsck
[  518.832064][T19288] EXT4-fs (loop1): mount failed
[  519.131493][ T2133] uclogic 0003:28BD:0078.0027: interface is invalid, ignoring
[  519.224207][ T5811] chicony 0003:04F2:1123.0028: ignoring exceeding usage max
[  519.245991][ T5811] chicony 0003:04F2:1123.0028: unknown main item tag 0x2
[  519.279778][ T5811] chicony 0003:04F2:1123.0028: hidraw0: USB HID v0.05 Device [HID 04f2:1123] on usb-dummy_hcd.4-1/input0
[  519.383936][ T2133] usb 3-1: USB disconnect, device number 28
[  519.499777][ T5811] usb 5-1: USB disconnect, device number 18
[  519.740499][T19309] loop5: detected capacity change from 0 to 2048
[  519.786285][T19309] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  519.817884][T19309] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  520.563953][T19328] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5636'.
[  520.732941][T19311] loop1: detected capacity change from 0 to 32768
[  521.056899][T19342] loop4: detected capacity change from 0 to 1024
[  521.169320][   T27] kauditd_printk_skb: 3 callbacks suppressed
[  521.169335][   T27] audit: type=1800 audit(1780932399.177:291): pid=19342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5644" name="bus" dev="loop4" ino=26 res=0 errno=0
[  521.285592][T19342] hfsplus: b-tree write err: -5, ino 26
[  521.464155][   T42] hfsplus: b-tree write err: -5, ino 25
[  521.470515][   T42] hfsplus: b-tree write err: -5, ino 4
[  521.476117][   T42] hfsplus: b-tree write err: -5, ino 2
[  521.815864][T19369] loop2: detected capacity change from 0 to 64
[  521.873768][T19369] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  521.888068][ T5761] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  521.966285][T19371] loop5: detected capacity change from 0 to 2048
[  521.999442][T19371] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  522.092459][ T5761] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  522.107986][ T5761] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  522.161541][ T5761] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  522.201262][ T5761] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  522.203700][T19380] loop5: detected capacity change from 0 to 64
[  522.250725][ T5761] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  522.305369][ T5761] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  522.315578][T19384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5664'.
[  522.334243][ T5761] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  522.346589][ T5761] usb 5-1: Product: syz
[  522.350792][ T5761] usb 5-1: Manufacturer: syz
[  522.397727][ T5761] cdc_wdm 5-1:1.0: skipping garbage
[  522.408170][ T5761] cdc_wdm 5-1:1.0: skipping garbage
[  522.425581][ T5761] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  522.431607][ T5761] cdc_wdm 5-1:1.0: Unknown control protocol
[  522.674653][ T5761] usb 5-1: USB disconnect, device number 19
[  522.861527][  T967] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  523.073652][  T967] usb 6-1: Using ep0 maxpacket: 16
[  523.091936][  T967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  523.121268][T19414] ucma_write: process 3055 (syz.1.5686) changed security contexts after opening file descriptor, this is not allowed.
[  523.123174][  T967] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  523.150469][  T967] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  523.175454][  T967] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  523.201968][  T967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.219124][  T967] usb 6-1: config 0 descriptor??
[  523.538567][T19426] netlink: 134736 bytes leftover after parsing attributes in process `syz.4.5683'.
[  523.608231][ T5811] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[  523.626551][T19428] loop4: detected capacity change from 0 to 64
[  523.657147][T19428] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  523.676045][  T967] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0
[  523.694987][  T967] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0
[  523.738180][  T967] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0
[  523.745460][  T967] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0
[  523.768288][  T967] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0
[  523.775627][  T967] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0
[  523.800519][  T967] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0
[  523.807808][  T967] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0
[  523.824689][T19430] binder: 19429:19430 ioctl c0306201 200000000080 returned -22
[  523.826178][ T5811] usb 2-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  523.855037][  T967] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0
[  523.862312][  T967] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0
[  523.884682][T19416] loop2: detected capacity change from 0 to 32768
[  523.891773][ T5811] usb 2-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  523.913832][  T967] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0029/input/input38
[  523.929989][ T5811] usb 2-1: config 2 interface 0 has no altsetting 0
[  523.936663][ T5811] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[  523.946444][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.025939][  T967] microsoft 0003:045E:07DA.0029: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  524.085270][  T967] usb 6-1: USB disconnect, device number 31
[  524.228969][T19435] fido_id[19435]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  524.405711][ T5811] elo 0003:04E7:0009.002A: hidraw0: USB HID vff.ff Device [HID 04e7:0009] on usb-dummy_hcd.1-1/input0
[  524.567500][T19444] loop5: detected capacity change from 0 to 1024
[  524.596204][T19446] loop4: detected capacity change from 0 to 256
[  524.670694][   T27] audit: type=1800 audit(1780932402.451:292): pid=19444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5692" name="bus" dev="loop5" ino=26 res=0 errno=0
[  524.690860][T19444] hfsplus: b-tree write err: -5, ino 26
[  524.772258][ T5811] usb 2-1: USB disconnect, device number 33
[  524.827074][  T991] hfsplus: b-tree write err: -5, ino 25
[  524.842783][  T991] hfsplus: b-tree write err: -5, ino 4
[  524.867564][  T991] hfsplus: b-tree write err: -5, ino 2
[  524.964535][T19450] loop5: detected capacity change from 0 to 256
[  524.980125][T19450] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  525.008346][T19450] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  525.054244][T19450] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xdc69dc80, utbl_chksum : 0xe619d30d)
[  525.355466][T19457] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«=
[  525.522252][T19460] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  525.538323][T19462] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  525.544886][T19462] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  525.585036][T19462] vhci_hcd vhci_hcd.0: Device attached
[  525.598096][ T5785] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  525.608393][ T5785] CPU: 1 PID: 5785 Comm: kworker/u5:7 Not tainted syzkaller #0
[  525.615983][ T5785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  525.626073][ T5785] Workqueue: hci1 hci_rx_work
[  525.630887][ T5785] Call Trace:
[  525.634177][ T5785]  <TASK>
[  525.637114][ T5785]  dump_stack_lvl+0x18c/0x250
[  525.641901][ T5785]  ? show_regs_print_info+0x20/0x20
[  525.647108][ T5785]  ? load_image+0x420/0x420
[  525.651647][ T5785]  sysfs_create_dir_ns+0x26e/0x2a0
[  525.656795][ T5785]  ? sysfs_warn_dup+0xa0/0xa0
[  525.661476][ T5785]  ? do_raw_spin_unlock+0x121/0x230
[  525.666687][ T5785]  kobject_add_internal+0x61c/0xcc0
[  525.671921][ T5785]  kobject_add+0x164/0x240
[  525.676352][ T5785]  ? __rwlock_init+0x150/0x150
[  525.681129][ T5785]  ? kobject_init+0x1e0/0x1e0
[  525.685820][ T5785]  ? _raw_spin_unlock+0x28/0x40
[  525.690774][ T5785]  ? get_device_parent+0x366/0x390
[  525.695919][ T5785]  device_add+0x408/0xc50
[  525.700265][ T5785]  hci_conn_add_sysfs+0xd5/0x1e0
[  525.705305][ T5785]  le_conn_complete_evt+0xf5d/0x1540
[  525.710598][ T5785]  ? hci_event_packet+0x4cb/0x1270
[  525.715735][ T5785]  ? hci_le_big_info_adv_report_evt+0x910/0x910
[  525.722073][ T5785]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  525.727722][ T5785]  ? skb_pull_data+0xfb/0x200
[  525.732487][ T5785]  hci_le_enh_conn_complete_evt+0x189/0x460
[  525.738389][ T5785]  ? hci_le_remote_conn_param_req_evt+0xce0/0xce0
[  525.744815][ T5785]  ? hci_remote_host_features_evt+0x150/0x150
[  525.750893][ T5785]  hci_event_packet+0x7ba/0x1270
[  525.755850][ T5785]  ? bis_list+0x290/0x290
[  525.760189][ T5785]  ? lockdep_hardirqs_on+0x98/0x150
[  525.765460][ T5785]  ? hci_send_to_monitor+0xd7/0x4f0
[  525.770671][ T5785]  hci_rx_work+0x43a/0xd60
[  525.775105][ T5785]  ? process_scheduled_works+0x96f/0x15d0
[  525.780865][ T5785]  process_scheduled_works+0xa5d/0x15d0
[  525.786446][ T5785]  ? worker_attach_to_pool+0x380/0x380
[  525.791919][ T5785]  ? assign_work+0x3d2/0x5d0
[  525.796525][ T5785]  worker_thread+0xa55/0xfc0
[  525.801145][ T5785]  kthread+0x2fa/0x390
[  525.805219][ T5785]  ? pr_cont_work+0x560/0x560
[  525.809912][ T5785]  ? kthread_blkcg+0xd0/0xd0
[  525.814509][ T5785]  ret_from_fork+0x48/0x80
[  525.818934][ T5785]  ? kthread_blkcg+0xd0/0xd0
[  525.823529][ T5785]  ret_from_fork_asm+0x11/0x20
[  525.828359][ T5785]  </TASK>
[  525.836561][ T5785] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  525.851165][ T5785] Bluetooth: hci1: failed to register connection device
[  525.911309][T19463] vhci_hcd: connection closed
[  525.915511][  T991] vhci_hcd: stop threads
[  525.928861][ T2133] vhci_hcd: vhci_device speed not set
[  525.972943][  T991] vhci_hcd: release socket
[  526.004518][  T991] vhci_hcd: disconnect device
[  526.014432][T19448] ialloc: diAlloc returned -5!
[  526.023956][ T2133] usb 43-1: new full-speed USB device number 3 using vhci_hcd
[  526.047967][ T2133] usb 43-1: enqueue for inactive port 0
[  526.082589][T19448] ialloc: diAlloc returned -5!
[  526.151956][ T2133] vhci_hcd: vhci_device speed not set
[  526.380704][T19484] set_capacity_and_notify: 2 callbacks suppressed
[  526.380720][T19484] loop2: detected capacity change from 0 to 512
[  526.562134][T19484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  526.661654][T19484] ext4 filesystem being mounted at /1412/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  526.774664][T19484] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:106: comm syz.2.5710: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20
[  526.853800][T19484] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem
[  526.952389][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  527.389807][T19522] loop1: detected capacity change from 0 to 256
[  527.402853][   T28] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  527.475894][T19522] FAT-fs (loop1): Directory bread(block 64) failed
[  527.488550][T19522] FAT-fs (loop1): Directory bread(block 65) failed
[  527.500403][T19522] FAT-fs (loop1): Directory bread(block 66) failed
[  527.507024][T19522] FAT-fs (loop1): Directory bread(block 67) failed
[  527.532789][T19522] FAT-fs (loop1): Directory bread(block 68) failed
[  527.539581][T19522] FAT-fs (loop1): Directory bread(block 69) failed
[  527.549043][T19522] FAT-fs (loop1): Directory bread(block 70) failed
[  527.574154][T19522] FAT-fs (loop1): Directory bread(block 71) failed
[  527.595884][T19522] FAT-fs (loop1): Directory bread(block 72) failed
[  527.621550][   T28] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  527.631352][T19522] FAT-fs (loop1): Directory bread(block 73) failed
[  527.648586][   T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.667510][   T28] usb 3-1: Product: syz
[  527.703864][   T28] usb 3-1: Manufacturer: syz
[  527.708530][   T28] usb 3-1: SerialNumber: syz
[  527.766956][   T28] usb 3-1: config 0 descriptor??
[  528.008156][   T28] usb 3-1: ignoring: probably an ADSL modem
[  528.301641][T19550] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  528.309702][T19550] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  528.316966][T19550] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  528.324740][ T5761] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  528.440855][   T28] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[  528.462689][   T28] usb 3-1: USB disconnect, device number 29
[  528.532832][T19554] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5744'.
[  528.540764][ T5761] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  528.557371][ T5761] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.565407][ T5761] usb 5-1: Product: syz
[  528.593305][ T5761] usb 5-1: Manufacturer: syz
[  528.597963][ T5761] usb 5-1: SerialNumber: syz
[  528.613916][ T5761] usb 5-1: config 0 descriptor??
[  528.732639][T19556] loop5: detected capacity change from 0 to 4096
[  528.774765][T19557] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  528.827043][T19556] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0
[  528.856437][ T5761] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  528.888817][T19556] Remounting filesystem read-only
[  528.899209][T19556] NILFS error (device loop5): nilfs_readdir: bad page in #2
[  529.162358][T19561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5747'.
[  529.273775][T19563] loop5: detected capacity change from 0 to 256
[  529.286667][ T5761] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71
[  529.302659][T19563] exfat: Deprecated parameter 'namecase'
[  529.307551][T19546] loop1: detected capacity change from 0 to 65536
[  529.311853][ T5761] usb 5-1: USB disconnect, device number 20
[  529.332206][ T5764] udevd[5764]: setting owner of /dev/bus/usb/005/020 to uid=0, gid=0 failed: No such file or directory
[  529.377489][T19563] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d)
[  529.415645][T19546] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  529.523498][T19546] XFS (loop1): Ending clean mount
[  529.621324][ T5772] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  530.979669][T19612] loop1: detected capacity change from 0 to 512
[  531.011273][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  531.023578][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  531.045100][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  531.048634][T19612] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.5770: inode has both inline data and extents flags
[  531.082528][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  531.092937][T19612] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.5770: couldn't read orphan inode 15 (err -117)
[  531.105197][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  531.114634][T19612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  531.127412][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  531.150772][T19617] loop4: detected capacity change from 0 to 4096
[  531.171873][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  531.185809][T19617] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512).
[  531.275660][T19613] lo speed is unknown, defaulting to 1000
[  531.308119][T19617] ntfs3: loop4: Failed to initialize $Extend/$ObjId.
[  531.429572][T19617] ntfs3: loop4: ino=1e, "file1" failed to parse mft record
[  531.456651][T19617] ntfs3: loop4: ino=1e, "file1" attr_set_size
[  531.547428][   T27] audit: type=1800 audit(1780932408.887:293): pid=19625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5771" name="file1" dev="loop4" ino=30 res=0 errno=0
[  531.638737][T19613] chnl_net:caif_netlink_parms(): no params data found
[  531.775708][ T2133] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  531.812088][T19613] bridge0: port 1(bridge_slave_0) entered blocking state
[  531.814969][T19613] bridge0: port 1(bridge_slave_0) entered disabled state
[  531.849683][T19613] bridge_slave_0: entered allmulticast mode
[  531.880866][T19613] bridge_slave_0: entered promiscuous mode
[  531.884188][T19613] bridge0: port 2(bridge_slave_1) entered blocking state
[  531.920097][T19613] bridge0: port 2(bridge_slave_1) entered disabled state
[  531.940208][T19613] bridge_slave_1: entered allmulticast mode
[  531.950371][T19613] bridge_slave_1: entered promiscuous mode
[  532.001427][ T2133] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  532.021479][ T2133] usb 3-1: config 0 has no interface number 0
[  532.027643][ T2133] usb 3-1: too many endpoints for config 0 interface 1 altsetting 0: 64, using maximum allowed: 30
[  532.048609][T19613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  532.049126][ T2133] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 64
[  532.082539][T19613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  532.089761][ T2133] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[  532.114510][ T2133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.141300][ T2133] usb 3-1: config 0 descriptor??
[  532.193602][T19613] team0: Port device team_slave_0 added
[  532.216679][T19613] team0: Port device team_slave_1 added
[  532.263339][T19613] batman_adv: batadv0: Adding interface: batadv_slave_0
[  532.276264][T19613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  532.308263][T19613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  532.332673][T19613] batman_adv: batadv0: Adding interface: batadv_slave_1
[  532.339659][T19613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  532.369963][T19613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  532.394437][ T2133] usb 3-1: string descriptor 0 read error: -71
[  532.423125][ T2133] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[  532.425385][T19613] hsr_slave_0: entered promiscuous mode
[  532.450468][T19613] hsr_slave_1: entered promiscuous mode
[  532.468575][T19613] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  532.476773][T19613] Cannot create hsr debugfs directory
[  532.563261][ T2133] snd-usb-audio: probe of 3-1:0.1 failed with error -2
[  532.572561][T19648] netlink: 'syz.4.5782': attribute type 3 has an invalid length.
[  532.591651][ T2133] usb 3-1: USB disconnect, device number 30
[  532.788371][T19652] loop4: detected capacity change from 0 to 256
[  532.849987][T19652] FAT-fs (loop4): Directory bread(block 64) failed
[  532.867774][T19652] FAT-fs (loop4): Directory bread(block 65) failed
[  532.874437][T19652] FAT-fs (loop4): Directory bread(block 66) failed
[  532.918903][T19652] FAT-fs (loop4): Directory bread(block 67) failed
[  532.942783][T19652] FAT-fs (loop4): Directory bread(block 68) failed
[  532.949364][T19652] FAT-fs (loop4): Directory bread(block 69) failed
[  532.968428][T19652] FAT-fs (loop4): Directory bread(block 70) failed
[  532.993835][T19652] FAT-fs (loop4): Directory bread(block 71) failed
[  533.000492][T19652] FAT-fs (loop4): Directory bread(block 72) failed
[  533.025297][T19652] FAT-fs (loop4): Directory bread(block 73) failed
[  533.096598][T19613] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  533.123864][T19613] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  533.192519][T19613] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  533.214554][T19613] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  533.231234][T19661] nbd: socks must be embedded in a SOCK_ITEM attr
[  533.399336][ T5784] Bluetooth: hci1: command tx timeout
[  533.407294][T19665] loop4: detected capacity change from 0 to 164
[  533.459295][T19613] 8021q: adding VLAN 0 to HW filter on device bond0
[  533.481895][T19613] 8021q: adding VLAN 0 to HW filter on device team0
[  533.505722][T16728] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.512947][T16728] bridge0: port 1(bridge_slave_0) entered forwarding state
[  533.576689][T16728] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.583901][T16728] bridge0: port 2(bridge_slave_1) entered forwarding state
[  533.667969][T19669] loop1: detected capacity change from 0 to 128
[  533.755411][T19669] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  533.778780][T19667] loop2: detected capacity change from 0 to 8192
[  533.831288][T19669] ext4 filesystem being mounted at /1526/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  533.865754][T19667] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  533.913084][T19667] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  533.922362][T19667] REISERFS (device loop2): using ordered data mode
[  533.967647][T19667] reiserfs: using flush barriers
[  533.974919][T19667] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  534.004749][T19667] REISERFS (device loop2): checking transaction log (loop2)
[  534.033801][ T5772] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  534.053904][T19667] REISERFS (device loop2): Using tea hash to sort names
[  534.061315][T19667] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  534.264625][T19613] 8021q: adding VLAN 0 to HW filter on device batadv0
[  534.618941][   T27] audit: type=1326 audit(1780932411.769:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19698 comm="syz.4.5801" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde74d9ce59 code=0x7ffc0000
[  534.654917][   T27] audit: type=1326 audit(1780932411.769:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19698 comm="syz.4.5801" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde74d9ce59 code=0x7ffc0000
[  534.680408][   T27] audit: type=1326 audit(1780932411.769:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19698 comm="syz.4.5801" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde74d9ce59 code=0x7ffc0000
[  534.706932][   T27] audit: type=1326 audit(1780932411.769:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19698 comm="syz.4.5801" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde74d9ce59 code=0x7ffc0000
[  534.725123][  T967] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  534.772682][   T27] audit: type=1326 audit(1780932411.769:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19698 comm="syz.4.5801" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fde74d9ce59 code=0x7ffc0000
[  534.841008][   T27] audit: type=1326 audit(1780932411.769:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19698 comm="syz.4.5801" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde74d9ce59 code=0x7ffc0000
[  534.852211][T19613] veth0_vlan: entered promiscuous mode
[  534.871711][   T27] audit: type=1326 audit(1780932411.769:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19698 comm="syz.4.5801" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde74d9ce59 code=0x7ffc0000
[  534.898596][   T27] audit: type=1326 audit(1780932411.769:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19698 comm="syz.4.5801" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde74d9ce59 code=0x7ffc0000
[  534.927359][   T27] audit: type=1326 audit(1780932411.769:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19698 comm="syz.4.5801" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde74d9ce59 code=0x7ffc0000
[  534.952679][  T967] usb 2-1: Using ep0 maxpacket: 8
[  534.970459][T19613] veth1_vlan: entered promiscuous mode
[  535.005260][  T967] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  535.015042][  T967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.023193][  T967] usb 2-1: Product: syz
[  535.032797][  T967] usb 2-1: Manufacturer: syz
[  535.051709][  T967] usb 2-1: SerialNumber: syz
[  535.073981][  T967] usb 2-1: config 0 descriptor??
[  535.096268][  T967] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  535.107037][T19613] veth0_macvtap: entered promiscuous mode
[  535.118361][T19613] veth1_macvtap: entered promiscuous mode
[  535.154211][T19613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  535.184878][T19613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.200283][T19613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  535.238429][T19613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.248288][T19613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  535.268252][T19613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.279519][T19613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  535.291293][T19613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.304958][T19613] batman_adv: batadv0: Interface activated: batadv_slave_0
[  535.352819][T19613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  535.363506][ T2133] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  535.373721][T19613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.384676][T19613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  535.396181][T19613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.406130][T19613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  535.417759][T19613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.427890][T19613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  535.438427][T19613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.449992][T19613] batman_adv: batadv0: Interface activated: batadv_slave_1
[  535.469294][T19613] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  535.478251][T19613] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  535.487595][T19613] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  535.498123][T19613] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  535.593639][ T2133] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  535.612090][ T2133] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  535.623008][ T5784] Bluetooth: hci1: command tx timeout
[  535.634364][ T2133] usb 5-1: config 0 descriptor??
[  535.645453][T16728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  535.656503][ T2133] cp210x 5-1:0.0: cp210x converter detected
[  535.663388][T16728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  535.705020][T16728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  535.713309][T16728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  535.776568][  T967] gspca_sonixj: reg_w1 err -71
[  535.783736][  T967] sonixj: probe of 2-1:0.0 failed with error -71
[  535.813947][  T967] usb 2-1: USB disconnect, device number 34
[  536.109691][T19721] loop6: detected capacity change from 0 to 8192
[  536.139847][T19721] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  536.160077][T19721] REISERFS (device loop6): found reiserfs format "3.5" with non-standard journal
[  536.169580][T19721] REISERFS (device loop6): using ordered data mode
[  536.176171][T19721] reiserfs: using flush barriers
[  536.184964][T19721] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  536.202174][T19721] REISERFS (device loop6): checking transaction log (loop6)
[  536.214933][T19721] REISERFS (device loop6): Using tea hash to sort names
[  536.226022][T19721] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  536.340415][ T2133] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71
[  536.361453][ T2133] cp210x 5-1:0.0: GPIO initialisation failed: -71
[  536.407037][ T2133] usb 5-1: cp210x converter now attached to ttyUSB0
[  536.467727][ T2133] usb 5-1: USB disconnect, device number 21
[  536.478509][ T5766] udevd[5766]: setting mode of /dev/ttyUSB0 to 020660 failed: No such file or directory
[  536.510458][ T2133] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  536.521176][ T5766] udevd[5766]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory
[  536.533035][ T2133] cp210x 5-1:0.0: device disconnected
[  537.663116][T19773] loop2: detected capacity change from 0 to 1024
[  537.684174][T19773] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  537.846582][ T5784] Bluetooth: hci1: command tx timeout
[  537.878332][ T8222] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[  538.097883][ T8222] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  538.113248][ T8222] usb 5-1: config 0 has no interface number 0
[  538.130507][ T8222] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  538.156002][ T8222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  538.164126][ T8222] usb 5-1: Product: syz
[  538.185654][ T8222] usb 5-1: Manufacturer: syz
[  538.199021][ T8222] usb 5-1: SerialNumber: syz
[  538.216560][ T8222] usb 5-1: config 0 descriptor??
[  538.226564][ T8222] usb 5-1: selecting invalid altsetting 1
[  538.232649][ T8222] dvb_ttusb_budget: ttusb_init_controller: error
[  538.239132][ T8222] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  538.297223][ T8222] DVB: Unable to find symbol stv0299_attach()
[  538.389047][ T8222] DVB: Unable to find symbol tda8083_attach()
[  538.414841][ T8222] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  538.553300][T19714] usb 5-1: USB disconnect, device number 22
[  538.939805][T19815] loop1: detected capacity change from 0 to 16
[  538.947931][T19815] erofs: (device loop1): mounted with root inode @ nid 36.
[  539.054619][ T8222] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  539.268332][ T8222] usb 3-1: Using ep0 maxpacket: 8
[  539.290938][ T8222] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  539.310261][ T8222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.314692][   T27] kauditd_printk_skb: 19 callbacks suppressed
[  539.314706][   T27] audit: type=1326 audit(1780932416.156:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19826 comm="syz.4.5859" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde74d9ce59 code=0x0
[  539.319826][ T8222] usb 3-1: Product: syz
[  539.356491][ T8222] usb 3-1: Manufacturer: syz
[  539.361124][ T8222] usb 3-1: SerialNumber: syz
[  539.368519][ T8222] usb 3-1: config 0 descriptor??
[  539.376942][ T8222] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  539.396176][ T8222] pctv452e: pctv452e_power_ctrl: 1
[  539.396176][ T8222] 
[  539.403548][ T8222] usb 3-1: selecting invalid altsetting 3
[  539.410323][ T8222] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  539.410323][ T8222] 
[  539.421070][ T8222] dvb-usb: bulk message failed: -22 (5/0)
[  539.430831][ T8222] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  539.443002][ T8222] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[  539.452330][ T8222] usb 3-1: media controller created
[  539.460224][T19830] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached
[  539.470338][ T8222] dvb-usb: bulk message failed: -22 (8/0)
[  539.478776][ T8222] pctv452e: I2C error -22; AA 01  A0 01 14 -> aa 01 31 04 a0 01 14
[  539.486974][ T8222] dvb-usb: MAC address reading failed.
[  539.514257][ T8222] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  539.581930][ T8222] DVB: Unable to find symbol stb0899_attach()
[  539.588070][ T8222] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[  539.631526][T19807] pctv452e: I2C error -22; AA 02  00 00 EA -> 00 00 00 00 00 00 00
[  539.741591][ T8222] rc_core: IR keymap rc-tt-1500 not found
[  539.747429][ T8222] Registered IR keymap rc-empty
[  539.754570][ T8222] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  539.768052][ T8222] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input40
[  539.785253][ T8222] dvb-usb: schedule remote query interval to 100 msecs.
[  539.794430][ T8222] pctv452e: pctv452e_power_ctrl: 0
[  539.794430][ T8222] 
[  539.801840][ T8222] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[  539.848667][ T8222] usb 3-1: USB disconnect, device number 31
[  539.912431][ T8222] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[  540.069725][ T5784] Bluetooth: hci1: command tx timeout
[  540.344721][T19843] loop1: detected capacity change from 0 to 2368
[  540.581759][T19848] loop2: detected capacity change from 0 to 64
[  540.750504][T19854] loop4: detected capacity change from 0 to 64
[  541.056615][   T27] audit: type=1326 audit(1780932417.793:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19861 comm="syz.4.5873" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde74d9ce59 code=0x7ffc0000
[  541.069069][T19860] loop2: detected capacity change from 0 to 256
[  541.125963][   T27] audit: type=1326 audit(1780932417.793:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19861 comm="syz.4.5873" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde74d9ce59 code=0x7ffc0000
[  541.144712][T19860] exfat: Deprecated parameter 'namecase'
[  541.185192][T19860] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8d2f696c, utbl_chksum : 0xe619d30d)
[  541.207683][   T27] audit: type=1326 audit(1780932417.821:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19861 comm="syz.4.5873" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde74d9ce59 code=0x7ffc0000
[  541.257629][T19852] loop1: detected capacity change from 0 to 32768
[  541.288456][   T27] audit: type=1326 audit(1780932417.821:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19861 comm="syz.4.5873" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde74d9ce59 code=0x7ffc0000
[  541.355515][   T27] audit: type=1326 audit(1780932417.821:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19861 comm="syz.4.5873" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde74d9ce59 code=0x7ffc0000
[  541.410355][   T27] audit: type=1326 audit(1780932417.821:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19861 comm="syz.4.5873" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fde74d9ce59 code=0x7ffc0000
[  541.555848][   T27] audit: type=1326 audit(1780932417.821:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19861 comm="syz.4.5873" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde74d9ce59 code=0x7ffc0000
[  541.683988][   T27] audit: type=1326 audit(1780932417.821:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19861 comm="syz.4.5873" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fde74d9ce59 code=0x7ffc0000
[  541.821331][   T27] audit: type=1326 audit(1780932417.821:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19861 comm="syz.4.5873" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fde74d9ce59 code=0x7ffc0000
[  541.982358][ T5784] Bluetooth: hci1: hcon ffff888067d50000 sent 1 < count 107
[  542.272082][T19892] loop2: detected capacity change from 0 to 4096
[  542.314733][T19895] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  542.597433][ T5761] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  542.807542][ T5761] usb 2-1: too many configurations: 168, using maximum allowed: 8
[  542.824469][ T5761] usb 2-1: config index 0 descriptor too short (expected 65016, got 133)
[  542.834099][ T5761] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  542.859504][ T5761] usb 2-1: config index 1 descriptor too short (expected 65016, got 133)
[  542.868326][ T5761] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  542.897263][ T5761] usb 2-1: config index 2 descriptor too short (expected 65016, got 133)
[  542.910240][ T5761] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  542.914992][T19901] loop2: detected capacity change from 0 to 32768
[  542.927715][ T5761] usb 2-1: config index 3 descriptor too short (expected 65016, got 133)
[  542.944267][T19901] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.5893 (19901)
[  542.952077][ T5761] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  542.986163][T19901] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  542.988719][ T5761] usb 2-1: config index 4 descriptor too short (expected 65016, got 133)
[  543.015857][ T5761] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  543.039193][T19901] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  543.040460][ T5761] usb 2-1: config index 5 descriptor too short (expected 65016, got 133)
[  543.068024][ T5761] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  543.072350][T19901] BTRFS info (device loop2): setting nodatasum
[  543.092491][ T5761] usb 2-1: config index 6 descriptor too short (expected 65016, got 133)
[  543.101344][ T5761] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  543.105658][T19901] BTRFS info (device loop2): force zlib compression, level 3
[  543.124330][ T5761] usb 2-1: config index 7 descriptor too short (expected 65016, got 133)
[  543.134315][ T5761] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  543.137282][T19901] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  543.166853][ T5761] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  543.170463][T19901] BTRFS info (device loop2): use lzo compression, level 0
[  543.188801][ T5761] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.197289][T19901] BTRFS info (device loop2): turning on flush-on-commit
[  543.209064][ T5761] usb 2-1: Product: syz
[  543.212585][T19901] BTRFS info (device loop2): enabling auto defrag
[  543.219856][T19901] BTRFS info (device loop2): max_inline at 4096
[  543.224843][ T5761] usb 2-1: Manufacturer: syz
[  543.231156][T19901] BTRFS info (device loop2): using free space tree
[  543.237735][ T5761] usb 2-1: SerialNumber: syz
[  543.257245][ T5761] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  543.274514][ T8222] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  543.428443][T19901] BTRFS info (device loop2): enabling ssd optimizations
[  543.677489][T19907] loop6: detected capacity change from 0 to 32768
[  543.834840][ T5773] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  544.088912][ T5761] usb 2-1: USB disconnect, device number 35
[  544.592026][T19925] loop4: detected capacity change from 0 to 32768
[  544.652816][T19925] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  544.698829][ T8222] usb 2-1: Service connection timeout for: 256
[  544.705061][ T8222] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[  544.720890][ T8222] ath9k_htc: Failed to initialize the device
[  544.728522][ T5761] usb 2-1: ath9k_htc: USB layer deinitialized
[  544.744301][T19925] XFS (loop4): Ending clean mount
[  544.995558][ T9953] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  545.018290][T19953] loop2: detected capacity change from 0 to 512
[  545.036994][T19953] EXT4-fs: Ignoring removed nomblk_io_submit option
[  545.116465][T19953] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  545.125015][T19953] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  545.246295][T19953] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4059: comm syz.2.5906: Allocating blocks 41-42 which overlap fs metadata
[  545.320324][T19953] EXT4-fs (loop2): Remounting filesystem read-only
[  545.327479][T19953] Quota error (device loop2): write_blk: dquota write failed
[  545.374498][T19953] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[  545.406236][T19953] Quota error (device loop2): write_blk: dquota write failed
[  545.446130][T19953] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  545.456241][T19953] EXT4-fs (loop2): 1 truncate cleaned up
[  545.486335][T19953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  545.696023][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  545.773126][T19949] loop6: detected capacity change from 0 to 32768
[  545.889970][T19949] JBD2: Ignoring recovery information on journal
[  545.921480][T19965] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5911'.
[  545.928344][T19951] loop1: detected capacity change from 0 to 40427
[  545.979854][T19951] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff
[  546.031340][T19951] F2FS-fs (loop1): heap/no_heap options were deprecated
[  546.065903][T19949] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  546.106580][T19951] F2FS-fs (loop1): invalid crc value
[  546.179522][T19951] F2FS-fs (loop1): Found nat_bits in checkpoint
[  546.301815][T19949] (syz.6.5904,19949,0):ocfs2_verify_group_and_input:424 ERROR: add a group which is in the current volume.
[  546.355008][T19949] (syz.6.5904,19949,0):ocfs2_group_add:505 ERROR: status = -22
[  546.393102][T19951] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  546.547317][T19613] ocfs2: Unmounting device (7,6) on (node local)
[  546.588970][   T27] audit: type=1800 audit(1780932422.957:332): pid=19951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5905" name="file1" dev="loop1" ino=10 res=0 errno=0
[  546.690473][T19967] loop2: detected capacity change from 0 to 32768
[  546.711733][ T5772] syz-executor: attempt to access beyond end of device
[  546.711733][ T5772] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  546.746047][ T5772] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  546.779989][T19967] JBD2: Ignoring recovery information on journal
[  546.901692][T19967] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  546.990861][T19974] loop4: detected capacity change from 0 to 32768
[  547.026130][T19979] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5914'.
[  547.047627][T19974] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  547.121123][T19974] XFS (loop4): Ending clean mount
[  547.230587][T19989] loop6: detected capacity change from 0 to 256
[  547.269581][T19989] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ(ýÞHVE[*ŒUbCJÁ" or missing value
[  547.335517][T19989] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5916'.
[  547.349565][ T9953] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  547.460692][ T5773] ocfs2: Unmounting device (7,2) on (node local)
[  547.682634][T19994] tipc: Enabling <eth:lo> not permitted
[  547.688268][T19994] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  547.975097][T20000] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5921'.
[  547.991959][T20000] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5921'.
[  548.247011][ T5834] usb 3-1: new full-speed USB device number 32 using dummy_hcd
[  548.338329][T19992] loop1: detected capacity change from 0 to 32768
[  548.462809][ T5834] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  548.487025][ T5834] usb 3-1: config 0 interface 0 has no altsetting 0
[  548.514956][ T5834] usb 3-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00
[  548.545659][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.574398][ T5834] usb 3-1: config 0 descriptor??
[  549.033280][T20031] loop4: detected capacity change from 0 to 512
[  549.063646][ T5834] holtek_mouse 0003:04D9:A04A.002B: unexpected long global item
[  549.077487][ T5834] holtek_mouse 0003:04D9:A04A.002B: hid parse failed: -22
[  549.086164][ T5834] holtek_mouse: probe of 0003:04D9:A04A.002B failed with error -22
[  549.108667][T20031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  549.143211][T20031] ext4 filesystem being mounted at /1055/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  549.227730][T20033] loop6: detected capacity change from 0 to 4096
[  549.237356][ T9953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  549.297719][T20033] NILFS (loop6): invalid segment: Checksum error in segment payload
[  549.342026][ T5834] usb 3-1: USB disconnect, device number 32
[  549.348118][T20033] NILFS (loop6): trying rollback from an earlier position
[  549.438118][T20033] NILFS (loop6): recovery complete
[  549.466105][T20039] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  549.680901][T20045] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5940'.
[  549.712608][T20045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  550.063657][T20059] loop2: detected capacity change from 0 to 512
[  550.165517][T20059] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  550.217876][T20059] ext4 filesystem being mounted at /1469/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  550.402284][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  550.538151][T20071] loop2: detected capacity change from 0 to 256
[  550.926050][T20057] loop6: detected capacity change from 0 to 32768
[  551.001463][T20057] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  551.164003][T20057] XFS (loop6): Ending clean mount
[  551.211220][T20057] XFS (loop6): Quotacheck needed: Please wait.
[  551.341872][T20057] XFS (loop6): Quotacheck: Done.
[  551.612507][T19613] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  551.759420][T20097] loop2: detected capacity change from 0 to 32768
[  551.799132][T20097] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.5958 (20097)
[  551.851644][T20097] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  551.881134][T20097] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  551.902421][T20097] BTRFS info (device loop2): setting nodatacow, compression disabled
[  551.919138][T20097] BTRFS info (device loop2): force clearing of disk cache
[  551.933524][T20097] BTRFS info (device loop2): turning on sync discard
[  551.957281][T20097] BTRFS info (device loop2): turning off barriers
[  551.976206][T20097] BTRFS info (device loop2): use no compression
[  551.989613][T20097] BTRFS info (device loop2): disabling free space tree
[  552.003576][T20097] BTRFS info (device loop2): enabling ssd optimizations
[  552.017972][T20097] BTRFS info (device loop2): using spread ssd allocation scheme
[  552.039274][T20097] BTRFS info (device loop2): not using ssd optimizations
[  552.060006][T20097] BTRFS info (device loop2): not using spread ssd allocation scheme
[  552.204129][T20097] BTRFS info (device loop2): rebuilding free space tree
[  552.218190][T20106] loop1: detected capacity change from 0 to 32768
[  552.280963][T20126] pimreg: entered allmulticast mode
[  552.302774][T20097] BTRFS info (device loop2): disabling free space tree
[  552.341597][T20097] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  552.351429][T20126] pimreg: left allmulticast mode
[  552.369707][T20097] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  552.695739][ T5773] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  553.143721][T20144] vlan3: entered allmulticast mode
[  553.162596][T20144] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  553.395612][T20150] loop1: detected capacity change from 0 to 1024
[  553.531277][T20150] hfsplus: request for non-existent node 211 in B*Tree
[  553.545988][T20154] loop2: detected capacity change from 0 to 256
[  553.555166][T20150] hfsplus: request for non-existent node 211 in B*Tree
[  553.658675][   T49] hfsplus: b-tree write err: -5, ino 8
[  554.082077][T20148] loop4: detected capacity change from 0 to 32768
[  554.885242][T20186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5993'.
[  554.915892][T20186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5993'.
[  554.937389][T20186] netlink: 'syz.2.5993': attribute type 14 has an invalid length.
[  554.948195][T20186] netlink: 'syz.2.5993': attribute type 13 has an invalid length.
[  555.203103][T20183] loop4: detected capacity change from 0 to 40427
[  555.240908][T20183] F2FS-fs (loop4): Invalid SB checksum offset: 0
[  555.247288][T20183] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  555.271314][T20183] F2FS-fs (loop4): invalid crc value
[  555.434629][T20176] loop1: detected capacity change from 0 to 65536
[  555.441258][T20183] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  555.441287][T20183] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  555.507264][T20176] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  555.596618][T20176] XFS (loop1): Ending clean mount
[  555.641614][T20176] XFS (loop1): Quotacheck needed: Please wait.
[  555.740592][T20176] XFS (loop1): Quotacheck: Done.
[  555.891290][T20208] loop2: detected capacity change from 0 to 256
[  555.921164][T20208] exfat: Deprecated parameter 'namecase'
[  555.938171][T20208] exfat: Deprecated parameter 'namecase'
[  555.989028][T20208] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[  556.126440][ T5772] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  556.153052][T20211] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5996'.
[  556.420441][T20221] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6003'.
[  557.072056][T20252] netlink: 'syz.6.6018': attribute type 1 has an invalid length.
[  557.080780][T20252] netlink: 244 bytes leftover after parsing attributes in process `syz.6.6018'.
[  557.203651][T20256] loop6: detected capacity change from 0 to 64
[  557.258651][T20256] syz.6.6020: attempt to access beyond end of device
[  557.258651][T20256] loop6: rw=2049, sector=16777216, nr_sectors = 2 limit=64
[  557.283245][T20260] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6022'.
[  557.334183][T20256] Buffer I/O error on dev loop6, logical block 8388608, lost async page write
[  557.789745][T20272] loop6: detected capacity change from 0 to 512
[  557.905926][T20272] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  557.942111][T20272] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  558.025775][T20272] EXT4-fs error (device loop6): ext4_empty_dir:3145: inode #12: block 32: comm syz.6.6028: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  558.119218][T20272] EXT4-fs (loop6): Remounting filesystem read-only
[  558.135411][T20272] EXT4-fs warning (device loop6): ext4_empty_dir:3147: inode #12: comm syz.6.6028: directory missing '.'
[  558.213929][T20288] loop1: detected capacity change from 0 to 256
[  558.256997][T20286] loop2: detected capacity change from 0 to 4096
[  558.345703][T19613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  558.634112][T20296] loop1: detected capacity change from 0 to 2048
[  558.725581][T20296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  558.965304][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  559.269659][T20320] loop1: detected capacity change from 0 to 128
[  559.283300][ T5761] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  559.327163][T20320] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  559.481161][ T5761] usb 3-1: Using ep0 maxpacket: 8
[  559.491007][ T5761] usb 3-1: unable to get BOS descriptor or descriptor too short
[  559.523985][ T5761] usb 3-1: config 4 interface 0 has no altsetting 0
[  559.576742][ T5761] usb 3-1: string descriptor 0 read error: -22
[  559.583398][ T5761] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  559.609809][ T5761] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  559.622993][T20324] loop4: detected capacity change from 0 to 1024
[  559.655624][ T5761] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  559.686338][ T5761] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  559.716696][ T5761] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  559.746484][ T5761] usb 3-1: media controller created
[  559.841435][ T5761] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  559.904001][T20310] usb 3-1: dvb_usb_au6610: wlen=0, aborting
[  559.938683][ T5761] zl10353_read_register: readreg error (reg=127, ret==0)
[  559.950194][T20318] loop6: detected capacity change from 0 to 40427
[  559.986256][T20318] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  560.016505][T20318] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  560.072872][ T5761] usb 3-1: USB disconnect, device number 33
[  560.093843][T20318] F2FS-fs (loop6): Found nat_bits in checkpoint
[  560.269638][T20318] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  560.290831][T20318] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  560.853035][T20359] dccp_invalid_packet: P.Data Offset(4) too small
[  560.870876][T20358] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6062'.
[  561.216820][T20373] loop4: detected capacity change from 0 to 256
[  561.658392][T20391] loop4: detected capacity change from 0 to 128
[  561.815381][T20395] loop1: detected capacity change from 0 to 1024
[  561.849154][T20395] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  562.080132][T20403] loop2: detected capacity change from 0 to 512
[  562.116278][T20403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  562.168259][T20403] EXT4-fs warning (device loop2): dx_probe:869: inode #2: comm syz.2.6084: Unimplemented hash flags: 0x0001
[  562.190764][T20403] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.6084: Corrupt directory, running e2fsck is recommended
[  562.238147][T20410] loop4: detected capacity change from 0 to 512
[  562.271535][T20403] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.6084: path /1517/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0
[  562.297675][T20410] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  562.480586][T20412] loop1: detected capacity change from 0 to 4096
[  562.528211][T20412] ntfs: (device loop1): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  562.544656][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  562.559675][T20412] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  562.609344][T20412] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  562.641589][T20412] ntfs: volume version 3.1.
[  562.705324][T20418] vlan0: entered promiscuous mode
[  562.751286][T20418] team0: Port device vlan0 added
[  562.812426][ T1095] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  562.826351][ T5772] ntfs: (device loop1): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  562.891013][T20420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6092'.
[  563.649666][T20452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6108'.
[  563.688692][T20452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6108'.
[  564.065952][T20469] loop4: detected capacity change from 0 to 8
[  564.385439][T20484] loop4: detected capacity change from 0 to 512
[  564.413735][T20484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  564.521079][T20484] EXT4-fs warning (device loop4): dx_probe:869: inode #2: comm syz.4.6121: Unimplemented hash flags: 0x0001
[  564.591678][T20484] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.6121: Corrupt directory, running e2fsck is recommended
[  564.622682][T20484] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.6121: path /1110/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0
[  564.851820][  T967] hid-generic 00A0:0006:0003.002C: unknown main item tag 0x0
[  564.865600][  T967] hid-generic 00A0:0006:0003.002C: unknown main item tag 0x0
[  564.876808][  T967] hid-generic 00A0:0006:0003.002C: unknown main item tag 0x0
[  564.877640][ T9953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  564.884903][  T967] hid-generic 00A0:0006:0003.002C: unknown main item tag 0x0
[  564.902588][  T967] hid-generic 00A0:0006:0003.002C: unknown main item tag 0x0
[  564.908741][T20483] loop2: detected capacity change from 0 to 40427
[  564.909985][  T967] hid-generic 00A0:0006:0003.002C: unknown main item tag 0x0
[  564.924976][  T967] hid-generic 00A0:0006:0003.002C: unknown main item tag 0x0
[  564.955323][  T967] hid-generic 00A0:0006:0003.002C: unknown main item tag 0x0
[  564.973774][  T967] hid-generic 00A0:0006:0003.002C: unknown main item tag 0x0
[  564.982343][T20483] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  564.995833][  T967] hid-generic 00A0:0006:0003.002C: unknown main item tag 0x0
[  565.002878][T20483] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  565.004533][  T967] hid-generic 00A0:0006:0003.002C: unknown main item tag 0x0
[  565.019071][T20483] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x7ffff
[  565.019100][T20483] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x7
[  565.029447][  T967] hid-generic 00A0:0006:0003.002C: unknown main item tag 0x0
[  565.055478][  T967] hid-generic 00A0:0006:0003.002C: unknown main item tag 0x0
[  565.068073][  T967] hid-generic 00A0:0006:0003.002C: unknown main item tag 0x0
[  565.068137][T20483] F2FS-fs (loop2): invalid crc value
[  565.077918][  T967] hid-generic 00A0:0006:0003.002C: unknown main item tag 0x0
[  565.126877][T20483] F2FS-fs (loop2): Found nat_bits in checkpoint
[  565.132470][  T967] hid-generic 00A0:0006:0003.002C: hidraw0: <UNKNOWN> HID v0.05 Device [syz0] on syz0
[  565.281673][T20497] fido_id[20497]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  565.296660][T20483] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  565.303732][T20483] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  565.450213][ T5773] syz-executor: attempt to access beyond end of device
[  565.450213][ T5773] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  565.470745][ T5773] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  565.478094][ T5761] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  565.581161][T20508] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6133'.
[  565.672873][ T5761] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  565.696997][ T5761] usb 5-1: config 0 interface 0 has no altsetting 0
[  565.718563][ T5761] usb 5-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00
[  565.719021][T20512] loop1: detected capacity change from 0 to 1024
[  565.745491][ T5761] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  565.759064][ T5761] usb 5-1: config 0 descriptor??
[  565.764756][T20499] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  565.791493][T20512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  565.883063][T20512] EXT4-fs (loop1): resizing filesystem from 512 to 0 blocks
[  565.916287][T20512] EXT4-fs warning (device loop1): ext4_resize_fs:2048: can't shrink FS - resize aborted
[  565.991189][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  566.222618][ T5761] logitech-djreceiver 0003:046D:C70E.002D: unknown main item tag 0x3
[  566.261313][ T5761] logitech-djreceiver 0003:046D:C70E.002D: unknown main item tag 0x0
[  566.274736][ T5761] logitech-djreceiver 0003:046D:C70E.002D: unknown main item tag 0x0
[  566.299378][ T5761] logitech-djreceiver 0003:046D:C70E.002D: unknown main item tag 0x0
[  566.311456][ T5761] logitech-djreceiver 0003:046D:C70E.002D: unknown main item tag 0x0
[  566.335855][ T5761] logitech-djreceiver 0003:046D:C70E.002D: unknown main item tag 0x0
[  566.353469][ T5761] logitech-djreceiver 0003:046D:C70E.002D: unknown main item tag 0x0
[  566.362991][ T5761] logitech-djreceiver 0003:046D:C70E.002D: unknown main item tag 0x0
[  566.438317][ T5761] usb 5-1: USB disconnect, device number 23
[  566.877114][T20543] loop6: detected capacity change from 0 to 512
[  566.897946][T20543] EXT4-fs (loop6): orphan cleanup on readonly fs
[  566.906237][T20543] EXT4-fs error (device loop6): ext4_ext_check_inode:530: inode #4: comm syz.6.6148: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 1(1)
[  566.925349][  T967] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  566.940728][ T8222] usb 2-1: new full-speed USB device number 36 using dummy_hcd
[  566.952724][T20543] EXT4-fs error (device loop6): ext4_quota_enable:7147: comm syz.6.6148: Bad quota inode: 4, type: 1
[  566.966384][T20543] EXT4-fs warning (device loop6): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  566.982142][T20543] EXT4-fs (loop6): Cannot turn on quotas: error -117
[  566.989850][T20543] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  567.034877][T20543] EXT4-fs error (device loop6): ext4_lookup:1855: inode #2: comm syz.6.6148: 'file0' linked to parent dir
[  567.092583][T20546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6149'.
[  567.101594][T20546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6149'.
[  567.112589][T19613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  567.113939][T20546] netlink: 'syz.4.6149': attribute type 12 has an invalid length.
[  567.126571][  T967] usb 3-1: Using ep0 maxpacket: 8
[  567.130164][T20546] netlink: 'syz.4.6149': attribute type 11 has an invalid length.
[  567.150837][  T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  567.172911][  T967] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  567.190330][  T967] usb 3-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.00
[  567.199893][  T967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.221741][ T8222] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  567.221954][  T967] usb 3-1: config 0 descriptor??
[  567.247711][ T8222] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64
[  567.271597][ T8222] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  567.291072][T20548] loop6: detected capacity change from 0 to 512
[  567.300737][ T8222] usb 2-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00
[  567.316799][ T8222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.317225][T20548] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  567.340802][ T8222] usb 2-1: config 0 descriptor??
[  567.346549][T20536] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  567.448796][T20548] EXT4-fs warning (device loop6): dx_probe:869: inode #2: comm syz.6.6150: Unimplemented hash flags: 0x0001
[  567.471499][T20548] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.6150: Corrupt directory, running e2fsck is recommended
[  567.502343][T20548] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 3: comm syz.6.6150: path /64/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0
[  567.692264][T19613] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  567.731224][  T967] wacom 0003:056A:0090.002E: unknown main item tag 0x0
[  567.757875][  T967] wacom 0003:056A:0090.002E: unknown main item tag 0x0
[  567.773857][T20551] loop4: detected capacity change from 0 to 32768
[  567.782078][  T967] wacom 0003:056A:0090.002E: unknown main item tag 0x0
[  567.836664][  T967] wacom 0003:056A:0090.002E: unknown main item tag 0x0
[  567.854245][ T8222] betop 0003:11C2:2208.002F: ignoring exceeding usage max
[  567.861753][T20551] ERROR: (device loop4): dbAllocAG: unable to allocate blocks
[  567.861753][T20551] 
[  567.863261][  T967] wacom 0003:056A:0090.002E: unknown main item tag 0x0
[  567.888168][ T8222] betop 0003:11C2:2208.002F: unknown main item tag 0x4
[  567.897894][T20551] ERROR: (device loop4): remounting filesystem as read-only
[  567.902296][  T967] wacom 0003:056A:0090.002E: unknown main item tag 0x0
[  567.916018][T20551] ERROR: (device loop4): dbDiscardAG: -EIO
[  567.916018][T20551] 
[  567.916570][  T967] wacom 0003:056A:0090.002E: unknown main item tag 0x0
[  567.933555][ T8222] betop 0003:11C2:2208.002F: hidraw0: USB HID v0.01 Device [HID 11c2:2208] on usb-dummy_hcd.1-1/input0
[  567.977850][ T8222] betop 0003:11C2:2208.002F: no inputs found
[  567.978357][  T967] wacom 0003:056A:0090.002E: unknown main item tag 0x0
[  568.018378][  T967] wacom 0003:056A:0090.002E: unknown main item tag 0x0
[  568.039950][  T967] wacom 0003:056A:0090.002E: unknown main item tag 0x0
[  568.072584][  T967] wacom 0003:056A:0090.002E: unknown main item tag 0x0
[  568.105124][  T967] wacom 0003:056A:0090.002E: hidraw1: USB HID v0.08 Device [HID 056a:0090] on usb-dummy_hcd.2-1/input0
[  568.172124][  T967] usb 3-1: USB disconnect, device number 34
[  568.195780][ T5834] usb 2-1: USB disconnect, device number 36
[  568.333477][T20559] fido_id[20559]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  568.532465][T20563] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  568.546753][T20563] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  569.165547][ T8222] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  569.186984][T19945] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  569.379302][ T8222] usb 2-1: Using ep0 maxpacket: 32
[  569.402469][ T8222] usb 2-1: config 2 has an invalid interface number: 88 but max is 0
[  569.410590][ T8222] usb 2-1: config 2 has no interface number 0
[  569.416807][T19945] usb 5-1: Using ep0 maxpacket: 32
[  569.433389][ T8222] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[  569.444573][T19945] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  569.452799][T19945] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  569.468121][ T8222] usb 2-1: config 2 interface 88 has no altsetting 0
[  569.475013][T19945] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  569.487147][T19945] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  569.510616][T19945] usb 5-1: config 0 interface 0 has no altsetting 0
[  569.520803][ T8222] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[  569.536785][ T8222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.545177][ T8222] usb 2-1: Product: syz
[  569.549707][ T8222] usb 2-1: Manufacturer: syz
[  569.554754][ T8222] usb 2-1: SerialNumber: syz
[  569.560578][T19945] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  569.576627][T19945] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  569.586997][T20580] loop2: detected capacity change from 0 to 32768
[  569.590479][T20573] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  569.607113][T19945] usb 5-1: Product: syz
[  569.613578][T19945] usb 5-1: Manufacturer: syz
[  569.625521][T19945] usb 5-1: SerialNumber: syz
[  569.655771][T20580] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  569.669515][T19945] usb 5-1: config 0 descriptor??
[  569.679650][T19945] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  569.694046][T19945] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  569.747610][T20580] XFS (loop2): Ending clean mount
[  569.841397][   T27] audit: type=1800 audit(1780932444.718:333): pid=20580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6164" name="file1" dev="loop2" ino=4422 res=0 errno=0
[  569.901765][T20573] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  569.910073][ T5773] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  569.929864][T19945] usb 5-1: USB disconnect, device number 24
[  569.939116][T19945] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  570.379932][ T8222] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  570.416315][ T8222] asix: probe of 2-1:2.88 failed with error -71
[  570.442422][ T8222] usb 2-1: USB disconnect, device number 37
[  571.073897][T20603] loop1: detected capacity change from 0 to 512
[  571.110150][T20603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  571.231622][T20603] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.6170: Unimplemented hash flags: 0x0001
[  571.260187][T20603] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.6170: Corrupt directory, running e2fsck is recommended
[  571.283263][T20603] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.6170: path /1614/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0
[  571.570098][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  571.697630][T20621] loop4: detected capacity change from 0 to 64
[  571.908532][T20627] loop4: detected capacity change from 0 to 512
[  572.004045][T20627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  572.050935][T20627] ext4 filesystem being mounted at /1126/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  572.279122][ T9953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  572.570664][T20645] loop2: detected capacity change from 0 to 512
[  572.591280][T20645] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  572.622339][ T5781] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  572.704306][T20645] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.6189: invalid indirect mapped block 9 (level 0)
[  572.743262][T20645] EXT4-fs (loop2): 1 truncate cleaned up
[  572.764298][T20645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  572.842810][ T5781] usb 2-1: Using ep0 maxpacket: 16
[  572.862543][ T5781] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  572.897692][ T5781] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  572.928211][ T5781] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  572.960485][ T5781] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  572.980454][ T5781] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  572.994735][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  573.012364][ T5781] usb 2-1: config 0 descriptor??
[  573.049801][T20657] loop4: detected capacity change from 0 to 1024
[  573.120837][T20657] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  573.489711][ T5781] microsoft 0003:045E:07DA.0030: ignoring exceeding usage max
[  573.514943][ T5781] microsoft 0003:045E:07DA.0030: ignoring exceeding usage max
[  573.534079][ T5781] microsoft 0003:045E:07DA.0030: usage index exceeded
[  573.543462][ T5781] microsoft 0003:045E:07DA.0030: item 0 1 2 2 parsing failed
[  573.552062][ T5781] microsoft 0003:045E:07DA.0030: parse failed
[  573.560703][ T5781] microsoft: probe of 0003:045E:07DA.0030 failed with error -22
[  573.765909][ T5781] usb 2-1: USB disconnect, device number 38
[  573.875350][T20675] loop4: detected capacity change from 0 to 8
[  573.910557][T20675] SQUASHFS error: Unable to read directory block [1d0:74]
[  574.190356][T20671] loop6: detected capacity change from 0 to 32768
[  574.281721][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  574.288452][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  574.440122][T20685] loop4: detected capacity change from 0 to 64
[  574.508113][T20685] netlink: 'syz.4.6207': attribute type 1 has an invalid length.
[  574.607546][  T967] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  574.659183][T20689] loop1: detected capacity change from 0 to 4096
[  574.711418][T20689] NILFS (loop1): invalid segment: Checksum error in segment payload
[  574.745342][T20689] NILFS (loop1): trying rollback from an earlier position
[  574.809051][T20689] NILFS (loop1): recovery complete
[  574.824708][  T967] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  574.844714][T20694] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  574.863826][  T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.873251][  T967] usb 3-1: Product: syz
[  574.882756][  T967] usb 3-1: Manufacturer: syz
[  574.895511][  T967] usb 3-1: SerialNumber: syz
[  574.918367][  T967] usb 3-1: config 0 descriptor??
[  575.311160][T20702] loop6: detected capacity change from 0 to 2048
[  575.381473][T19945] usb 3-1: USB disconnect, device number 35
[  575.635156][T20693] loop4: detected capacity change from 0 to 32768
[  575.824657][T20709] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  575.862682][T20709] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  575.904092][T20711] loop6: detected capacity change from 0 to 128
[  575.930026][T20711] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  575.970501][T20711] hpfs: filesystem error: improperly stopped
[  576.011128][T20711] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  576.036444][T20711] hpfs: You really don't want any checks? You are crazy...
[  576.046611][T20711] hpfs: Code page index out of array
[  576.079196][T20711] hpfs: code page support is disabled
[  576.114178][T20711] hpfs: hpfs_map_4sectors(): unaligned read
[  576.120237][T20711] hpfs: hpfs_map_4sectors(): unaligned read
[  576.146399][T20711] hpfs: filesystem error: unable to find root dir
[  576.356092][T20717] loop2: detected capacity change from 0 to 4096
[  576.400264][T20720] bridge_slave_0: default FDB implementation only supports local addresses
[  576.690903][T20728] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6226'.
[  576.700260][T20728] unsupported nlmsg_type 40
[  577.013625][T20740] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.6232: dx entry: limit 1024 != root limit 124
[  577.120501][T20740] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.6232: Corrupt directory, running e2fsck is recommended
[  577.169352][T20740] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117
[  577.226921][T20740] EXT4-fs error (device loop4): ext4_iget_extra_inode:4739: inode #15: comm syz.4.6232: corrupted in-inode xattr: invalid ea_ino
[  577.287439][T20740] EXT4-fs (loop4): Remounting filesystem read-only
[  577.331622][T20740] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  577.439834][T20740] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #2: comm syz.4.6232: directory missing '.'
[  577.573787][ T9953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  577.749179][  T967] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  577.953671][  T967] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  577.961996][  T967] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  577.970972][ T5834] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  577.978714][  T967] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  577.989119][  T967] usb 3-1: config 220 has no interface number 2
[  577.997974][  T967] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  578.011179][  T967] usb 3-1: config 220 interface 0 has no altsetting 0
[  578.018148][  T967] usb 3-1: config 220 interface 76 has no altsetting 0
[  578.025010][  T967] usb 3-1: config 220 interface 1 has no altsetting 0
[  578.034110][  T967] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  578.043547][  T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.051630][  T967] usb 3-1: Product: syz
[  578.055809][  T967] usb 3-1: Manufacturer: syz
[  578.060701][  T967] usb 3-1: SerialNumber: syz
[  578.187453][ T5834] usb 5-1: Using ep0 maxpacket: 8
[  578.194663][ T5834] usb 5-1: unable to get BOS descriptor or descriptor too short
[  578.203461][ T5834] usb 5-1: config 4 interface 0 has no altsetting 0
[  578.215123][ T5834] usb 5-1: string descriptor 0 read error: -22
[  578.221506][ T5834] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  578.231132][ T5834] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  578.247683][ T5834] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  578.269201][ T5834] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  578.280282][ T5834] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  578.288029][ T5834] usb 5-1: media controller created
[  578.305644][  T967] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[  578.312031][  T967] usb 3-1: No valid video chain found.
[  578.324131][ T5834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  578.332868][  T967] usb 3-1: selecting invalid altsetting 0
[  578.358846][  T967] usb 3-1: selecting invalid altsetting 0
[  578.365593][  T967] usbtest: probe of 3-1:220.1 failed with error -22
[  578.398314][  T967] usb 3-1: USB disconnect, device number 36
[  578.595685][T20775] syz.1.6248 (20775): /proc/20774/oom_adj is deprecated, please use /proc/20774/oom_score_adj instead.
[  578.957769][  T967] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  579.144349][T20779] set_capacity_and_notify: 1 callbacks suppressed
[  579.144361][T20779] loop2: detected capacity change from 0 to 32768
[  579.160129][  T967] usb 2-1: Using ep0 maxpacket: 16
[  579.181555][T20779] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  579.188538][  T967] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  579.207983][  T967] usb 2-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3
[  579.222816][  T967] usb 2-1: Product: syz
[  579.226577][T20779] XFS (loop2): Ending clean mount
[  579.238321][  T967] usb 2-1: Manufacturer: syz
[  579.243198][  T967] usb 2-1: SerialNumber: syz
[  579.255462][  T967] usb 2-1: config 0 descriptor??
[  579.270599][  T967] ums-onetouch 2-1:0.0: USB Mass Storage device detected
[  579.310500][ T5773] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  579.498717][ T5834] zl10353_read_register: readreg error (reg=127, ret==0)
[  579.546218][ T8222] usb 2-1: USB disconnect, device number 39
[  579.646742][ T5834] usb 5-1: USB disconnect, device number 25
[  579.907466][T20793] loop2: detected capacity change from 0 to 32768
[  579.922548][T20793] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.6252 (20793)
[  579.949544][T20793] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  579.960872][T20793] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  579.973472][T20793] BTRFS info (device loop2): using free space tree
[  580.008475][T20793] BTRFS info (device loop2): enabling ssd optimizations
[  580.015758][T20793] BTRFS info (device loop2): auto enabling async discard
[  580.068779][   T27] audit: type=1800 audit(1780932454.279:334): pid=20793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6252" name="file1" dev="loop2" ino=260 res=0 errno=0
[  580.239050][T20811] loop1: detected capacity change from 0 to 256
[  580.263654][T20813] loop4: detected capacity change from 0 to 1024
[  580.271321][T20811] exfat: Deprecated parameter 'utf8'
[  580.320755][T20813] hfsplus: bad catalog entry type
[  580.344252][T20811] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  580.387946][T20206] hfsplus: b-tree write err: -5, ino 25
[  580.405581][ T5773] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  580.421147][T20206] hfsplus: b-tree write err: -5, ino 4
[  580.447937][T20206] hfsplus: b-tree write err: -5, ino 2
[  581.250353][    C0] IPv4: Oversized IP packet from 127.0.0.1
[  581.973406][T20864] sch_tbf: burst 240 is lower than device lo mtu (65550) !
[  582.114831][T20871] loop1: detected capacity change from 0 to 2048
[  582.126349][T20870] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6281'.
[  582.159092][T20871] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  582.294202][T20875] loop4: detected capacity change from 0 to 64
[  582.364204][T20877] loop2: detected capacity change from 0 to 64
[  582.472873][T20881] loop1: detected capacity change from 0 to 24
[  583.220281][T20889] loop4: detected capacity change from 0 to 32768
[  583.248786][T20889] (syz.4.6291,20889,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  583.263333][T20889] (syz.4.6291,20889,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  583.291313][T20889] JBD2: Ignoring recovery information on journal
[  583.355923][T20889] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  583.433201][T20909] loop2: detected capacity change from 0 to 512
[  583.517493][T20909] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  583.543223][T20909] EXT4-fs (loop2): orphan cleanup on readonly fs
[  583.569050][T20909] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated!
[  583.593442][T20909] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota
[  583.624238][T20909] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.6300: Failed to acquire dquot type 1
[  583.685290][T20909] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.6300: bg 0: block 40: padding at end of block bitmap is not set
[  583.717418][T20909] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  583.742070][T20909] EXT4-fs (loop2): 1 truncate cleaned up
[  583.758289][T20909] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  583.917776][ T9953] ocfs2: Unmounting device (7,4) on (node local)
[  583.926403][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  584.363109][T20930] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  584.419593][T20930] CIFS mount error: No usable UNC path provided in device string!
[  584.419593][T20930] 
[  584.475748][T20930] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  584.487679][   T27] audit: type=1326 audit(1780932458.423:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20937 comm="syz.6.6313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499b99ce59 code=0x7ffc0000
[  584.511746][    C1] vkms_vblank_simulate: vblank timer overrun
[  584.523729][   T27] audit: type=1326 audit(1780932458.451:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20937 comm="syz.6.6313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499b99ce59 code=0x7ffc0000
[  584.576325][   T27] audit: type=1326 audit(1780932458.451:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20937 comm="syz.6.6313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f499b99ce59 code=0x7ffc0000
[  584.600348][    C1] vkms_vblank_simulate: vblank timer overrun
[  584.698536][   T27] audit: type=1326 audit(1780932458.451:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20937 comm="syz.6.6313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499b99ce59 code=0x7ffc0000
[  584.770217][   T27] audit: type=1326 audit(1780932458.451:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20937 comm="syz.6.6313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499b99ce59 code=0x7ffc0000
[  584.817683][   T27] audit: type=1326 audit(1780932458.451:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20937 comm="syz.6.6313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f499b99ce59 code=0x7ffc0000
[  584.921743][   T27] audit: type=1326 audit(1780932458.451:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20937 comm="syz.6.6313" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f499b99ce59 code=0x7ffc0000
[  585.366742][T20944] loop1: detected capacity change from 0 to 32768
[  585.404763][T20944] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop1 scanned by syz.1.6316 (20944)
[  585.465546][T20944] BTRFS info (device loop1): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  585.502286][T20944] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  585.584529][T20944] BTRFS info (device loop1): using free space tree
[  585.813035][T20944] BTRFS info (device loop1): enabling ssd optimizations
[  585.862187][T20944] BTRFS info (device loop1): auto enabling async discard
[  585.924009][T20942] loop6: detected capacity change from 0 to 40427
[  585.967945][T20942] F2FS-fs (loop6): build fault injection attr: rate: 14, type: 0x7ffff
[  586.015978][T20942] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0xe4
[  586.051800][T20942] F2FS-fs (loop6): invalid crc value
[  586.126406][   T27] kauditd_printk_skb: 1 callbacks suppressed
[  586.126421][   T27] audit: type=1800 audit(1780932459.948:343): pid=20944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6316" name="file1" dev="loop1" ino=260 res=0 errno=0
[  586.133928][T20942] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0
[  586.267978][ T5772] BTRFS info (device loop1): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  586.539358][T20942] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  586.649042][T20942] F2FS-fs (loop6): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910
[  586.790912][ T5764] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 9 /dev/loop1 scanned by udevd (5764)
[  587.504029][T21018] loop1: detected capacity change from 0 to 512
[  587.543721][   T27] audit: type=1326 audit(1780932461.276:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21019 comm="syz.2.6345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bb939ce59 code=0x7ffc0000
[  587.600918][T21018] EXT4-fs (loop1): Test dummy encryption mode enabled
[  587.609613][T21018] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  587.634550][T21020] loop2: detected capacity change from 0 to 1024
[  587.658350][   T27] audit: type=1326 audit(1780932461.276:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21019 comm="syz.2.6345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bb939ce59 code=0x7ffc0000
[  587.696704][T21018] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.6344: bad orphan inode 131083
[  587.708395][   T27] audit: type=1326 audit(1780932461.314:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21019 comm="syz.2.6345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bb939ce59 code=0x7ffc0000
[  587.732565][T21018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  587.746111][   T27] audit: type=1326 audit(1780932461.314:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21019 comm="syz.2.6345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bb939ce59 code=0x7ffc0000
[  587.770176][    C1] vkms_vblank_simulate: vblank timer overrun
[  587.784074][   T27] audit: type=1326 audit(1780932461.323:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21019 comm="syz.2.6345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7bb939ce59 code=0x7ffc0000
[  587.808281][    C1] vkms_vblank_simulate: vblank timer overrun
[  587.882035][   T27] audit: type=1326 audit(1780932461.323:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21019 comm="syz.2.6345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7bb939cbc2 code=0x7ffc0000
[  587.978896][   T27] audit: type=1326 audit(1780932461.323:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21019 comm="syz.2.6345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7bb935d68e code=0x7ffc0000
[  588.002822][    C1] vkms_vblank_simulate: vblank timer overrun
[  588.045125][T21029] loop4: detected capacity change from 0 to 64
[  588.073988][   T27] audit: type=1326 audit(1780932461.360:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21019 comm="syz.2.6345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7bb939cc87 code=0x7ffc0000
[  588.100445][   T27] audit: type=1326 audit(1780932461.360:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21019 comm="syz.2.6345" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7bb935d68e code=0x7ffc0000
[  588.102213][T20206] hfsplus: b-tree write err: -5, ino 25
[  588.138038][T21029] syz.4.6348: attempt to access beyond end of device
[  588.138038][T21029] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64
[  588.164027][T21029] Buffer I/O error on dev loop4, logical block 512, async page read
[  588.178595][T21031] loop6: detected capacity change from 0 to 512
[  588.186756][T20206] hfsplus: b-tree write err: -5, ino 4
[  588.198461][T21029] syz.4.6348: attempt to access beyond end of device
[  588.198461][T21029] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64
[  588.206372][T20206] hfsplus: b-tree write err: -5, ino 2
[  588.219538][T21031] journal_path: Lookup failure for './file0'
[  588.233516][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  588.237320][T21029] Buffer I/O error on dev loop4, logical block 56576, async page read
[  588.243052][T21031] EXT4-fs: error: could not find journal device path
[  588.361003][T21034] loop2: detected capacity change from 0 to 64
[  588.606195][T21038] loop6: detected capacity change from 0 to 256
[  588.723737][T21038] FAT-fs (loop6): Directory bread(block 64) failed
[  588.760196][T21038] FAT-fs (loop6): Directory bread(block 65) failed
[  588.766911][T21038] FAT-fs (loop6): Directory bread(block 66) failed
[  588.789944][T21038] FAT-fs (loop6): Directory bread(block 67) failed
[  588.812175][T21038] FAT-fs (loop6): Directory bread(block 68) failed
[  588.833944][T21038] FAT-fs (loop6): Directory bread(block 69) failed
[  588.845819][T21038] FAT-fs (loop6): Directory bread(block 70) failed
[  588.852391][T21038] FAT-fs (loop6): Directory bread(block 71) failed
[  588.880903][T21038] FAT-fs (loop6): Directory bread(block 72) failed
[  588.930348][T21038] FAT-fs (loop6): Directory bread(block 73) failed
[  589.342309][T21052] loop6: detected capacity change from 0 to 1764
[  589.453324][T21036] loop1: detected capacity change from 0 to 40427
[  589.493529][T21036] F2FS-fs (loop1): invalid crc value
[  589.533969][T21036] F2FS-fs (loop1): Found nat_bits in checkpoint
[  589.754358][T21036] F2FS-fs (loop1): Start checkpoint disabled!
[  589.816775][T21036] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  589.920382][T21036] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=4000000, run fsck to fix.
[  590.002585][T21036] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=4000000, run fsck to fix.
[  590.039735][T21066] fscrypt (loop4, inode 2): Error -61 getting encryption context
[  590.121196][T21066] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61
[  590.183404][T21066] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #13: comm syz.4.6363: iget: bad i_size value: 12154757448730
[  590.243701][T21066] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.6363: couldn't read orphan inode 13 (err -117)
[  590.283578][T21066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  590.344395][T21061] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.6361 (21061)
[  590.411419][T21061] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  590.443795][T21061] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  590.490955][T21061] BTRFS info (device loop6): using free space tree
[  590.517398][ T9953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  590.726318][T21061] BTRFS info (device loop6): enabling ssd optimizations
[  590.734085][T21061] BTRFS info (device loop6): auto enabling async discard
[  590.820388][T19613] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  590.973084][ T5834] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  590.973908][ T5764] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 9 /dev/loop6 scanned by udevd (5764)
[  591.164377][ T5834] usb 5-1: Using ep0 maxpacket: 32
[  591.171155][T21101] set_capacity_and_notify: 3 callbacks suppressed
[  591.171171][T21101] loop1: detected capacity change from 0 to 4096
[  591.184959][ T5834] usb 5-1: too many configurations: 17, using maximum allowed: 8
[  591.215238][ T5834] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  591.224982][ T5834] usb 5-1: config 0 has no interface number 0
[  591.281021][ T5834] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  591.309426][T21104] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  591.322978][ T5834] usb 5-1: config 0 has no interface number 0
[  591.351017][ T5834] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  591.386589][ T5834] usb 5-1: config 0 has no interface number 0
[  591.397668][ T5834] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  591.421641][ T5834] usb 5-1: config 0 has no interface number 0
[  591.429628][ T5834] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  591.450797][ T5834] usb 5-1: config 0 has no interface number 0
[  591.472059][ T5834] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  591.502872][ T5834] usb 5-1: config 0 has no interface number 0
[  591.512876][ T5834] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  591.537832][ T5834] usb 5-1: config 0 has no interface number 0
[  591.585346][ T5834] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  591.600854][ T5834] usb 5-1: config 0 has no interface number 0
[  591.637538][ T5834] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  591.666960][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.694149][ T5834] usb 5-1: Product: syz
[  591.699794][ T5834] usb 5-1: Manufacturer: syz
[  591.704432][ T5834] usb 5-1: SerialNumber: syz
[  591.717260][ T5834] usb 5-1: config 0 descriptor??
[  591.735611][ T5834] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz)
[  591.961060][T21118] loop6: detected capacity change from 0 to 64
[  592.125629][T21125] loop1: detected capacity change from 0 to 256
[  592.176523][ T2954] ------------[ cut here ]------------
[  592.182421][ T2954] kernel BUG at fs/hfs/inode.c:449!
[  592.195885][ T2954] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  592.202076][ T2954] CPU: 0 PID: 2954 Comm: kworker/u4:9 Not tainted syzkaller #0
[  592.209628][ T2954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  592.213458][T21125] FAT-fs (loop1): Directory bread(block 64) failed
[  592.219672][ T2954] Workqueue: writeback wb_workfn (flush-7:6)
[  592.232172][ T2954] RIP: 0010:hfs_write_inode+0x87a/0x880
[  592.237766][ T2954] Code: c7 c1 00 73 31 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 73 31 97 e8 f0 f2 83 ff e9 62 fe ff ff e8 e6 b2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49
[  592.237895][T21125] FAT-fs (loop1): Directory bread(block 65) failed
[  592.257367][ T2954] RSP: 0018:ffffc9000b9ff340 EFLAGS: 00010293
[  592.257390][ T2954] RAX: ffffffff825b78aa RBX: ffff88802c3681a8 RCX: ffff88802bc85a00
[  592.257400][ T2954] RDX: 0000000000000000 RSI: ffffffff8d33a040 RDI: 0000000000000000
[  592.257409][ T2954] RBP: ffffc9000b9ff4d0 R08: ffff88802bc85a00 R09: 0000000000000003
[  592.257419][ T2954] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
[  592.257428][ T2954] R13: 1ffff9200173fe6c R14: ffff88802c368158 R15: 0000000000000000
[  592.257439][ T2954] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  592.264264][T21125] FAT-fs (loop1): Directory bread(block 66) failed
[  592.269958][ T2954] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  592.269971][ T2954] CR2: 0000555563063a38 CR3: 000000002d7a3000 CR4: 00000000003506f0
[  592.269984][ T2954] Call Trace:
[  592.269991][ T2954]  <TASK>
[  592.269999][ T2954]  ? hfs_inode_write_fork+0x1a0/0x1a0
[  592.270028][ T2954]  ? __rwlock_init+0x150/0x150
[  592.270052][ T2954]  __writeback_single_inode+0x705/0xec0
[  592.270076][ T2954]  writeback_sb_inodes+0x7cd/0xf50
[  592.270106][ T2954]  ? queue_io+0x550/0x550
[  592.270133][ T2954]  ? rcu_is_watching+0x15/0xb0
[  592.270153][ T2954]  wb_writeback+0x46a/0xbf0
[  592.270172][ T2954]  ? queue_io+0x3d1/0x550
[  592.270194][ T2954]  ? percpu_ref_tryget+0x250/0x250
[  592.270214][ T2954]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  592.270234][ T2954]  ? _raw_spin_unlock_irq+0x23/0x50
[  592.270259][ T2954]  wb_workfn+0x400/0xe60
[  592.270275][ T2954]  ? try_to_wake_up+0x70a/0x1190
[  592.270302][ T2954]  ? inode_wait_for_writeback+0x230/0x230
[  592.270326][ T2954]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  592.308209][T21125] FAT-fs (loop1): Directory bread(block 67) failed
[  592.310121][ T2954]  ? read_lock_is_recursive+0x20/0x20
[  592.310150][ T2954]  ? _raw_spin_unlock_irq+0x23/0x50
[  592.438655][ T2954]  ? process_scheduled_works+0x96f/0x15d0
[  592.444371][ T2954]  ? process_scheduled_works+0x96f/0x15d0
[  592.450085][ T2954]  process_scheduled_works+0xa5d/0x15d0
[  592.455632][ T2954]  ? worker_attach_to_pool+0x380/0x380
[  592.461083][ T2954]  ? assign_work+0x3d2/0x5d0
[  592.465662][ T2954]  worker_thread+0xa55/0xfc0
[  592.470250][ T2954]  kthread+0x2fa/0x390
[  592.474305][ T2954]  ? pr_cont_work+0x560/0x560
[  592.478971][ T2954]  ? kthread_blkcg+0xd0/0xd0
[  592.483546][ T2954]  ret_from_fork+0x48/0x80
[  592.487949][ T2954]  ? kthread_blkcg+0xd0/0xd0
[  592.492523][ T2954]  ret_from_fork_asm+0x11/0x20
[  592.497284][ T2954]  </TASK>
[  592.500307][ T2954] Modules linked in:
[  592.505114][T21125] FAT-fs (loop1): Directory bread(block 68) failed
[  592.512210][T21125] FAT-fs (loop1): Directory bread(block 69) failed
[  592.518951][T21125] FAT-fs (loop1): Directory bread(block 70) failed
[  592.525553][T21125] FAT-fs (loop1): Directory bread(block 71) failed
[  592.528133][ T2954] ---[ end trace 0000000000000000 ]---
[  592.534106][T21125] FAT-fs (loop1): Directory bread(block 72) failed
[  592.539501][ T2954] RIP: 0010:hfs_write_inode+0x87a/0x880
[  592.547858][T21125] FAT-fs (loop1): Directory bread(block 73) failed
[  592.551830][ T2954] Code: c7 c1 00 73 31 97 80 e1 07 80 c1 03 38 c1 0f 8c 73 fe ff ff 48 c7 c7 00 73 31 97 e8 f0 f2 83 ff e9 62 fe ff ff e8 e6 b2 2b ff <0f> 0b 0f 1f 40 00 f3 0f 1e fa 55 41 57 41 56 41 54 53 48 89 fb 49
[  592.578781][ T2954] RSP: 0018:ffffc9000b9ff340 EFLAGS: 00010293
[  592.584935][ T2954] RAX: ffffffff825b78aa RBX: ffff88802c3681a8 RCX: ffff88802bc85a00
[  592.594982][ T2954] RDX: 0000000000000000 RSI: ffffffff8d33a040 RDI: 0000000000000000
[  592.603510][ T2954] RBP: ffffc9000b9ff4d0 R08: ffff88802bc85a00 R09: 0000000000000003
[  592.613579][ T2954] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000
[  592.623221][ T2954] R13: 1ffff9200173fe6c R14: ffff88802c368158 R15: 0000000000000000
[  592.634507][ T2954] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  592.644062][ T2954] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  592.651227][ T2954] CR2: 0000001b3221eff8 CR3: 000000003121a000 CR4: 00000000003506f0
[  592.661603][ T2954] Kernel panic - not syncing: Fatal exception
[  592.667820][ T2954] Kernel Offset: disabled
[  592.672131][ T2954] Rebooting in 86400 seconds..