last executing test programs:

5m18.280360343s ago: executing program 4 (id=466):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000f40)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xc4}}}, 0xb8}}, 0x0)

5m18.092476943s ago: executing program 4 (id=470):
r0 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2)
ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x800})

5m17.832470724s ago: executing program 4 (id=474):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000001000010000000000000000000000000a04000000050001"], 0x64}}, 0x0)

5m17.616484284s ago: executing program 4 (id=478):
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x1210080, &(0x7f0000000140)={[{@uid}, {@creator={'creator', 0x3d, "aa80aaf6"}}, {@dir_umask}, {@creator={'creator', 0x3d, "0de07c34"}}, {@codepage={'codepage', 0x3d, 'cp949'}}, {@dir_umask}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@dir_umask={'dir_umask', 0x3d, 0x200}}, {}, {@umask={'umask', 0x3d, 0x16}}]}, 0x7, 0x318, &(0x7f00000004c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)

5m17.388751505s ago: executing program 4 (id=483):
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendto$inet6(r0, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0xffff0000, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)

5m16.725274787s ago: executing program 4 (id=497):
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x10)

5m16.460098537s ago: executing program 32 (id=497):
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x80002, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x10)

3m59.537126845s ago: executing program 5 (id=1831):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {{0x6, 0x0, 0xb}, {0x6d}}, [@printk={@lld, {0x3, 0x0, 0x3, 0xa, 0x9}, {0x4, 0x1, 0x2, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x67}}], {{0x6, 0x1, 0xc, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

3m59.419504986s ago: executing program 5 (id=1834):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r0, 0x104, 0x7, 0x0, 0x0)

3m59.272540396s ago: executing program 5 (id=1838):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x804, &(0x7f00000000c0)={[{@rodir}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@utf8no}, {@uni_xlate}, {@shortname_mixed}, {@utf8no}, {@shortname_winnt}, {@utf8no}, {@fat=@uid}, {@shortname_lower}, {@fat=@check_strict}, {@utf8}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@utf8no}, {@rodir}]}, 0x1, 0x27b, &(0x7f0000000640)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c0)

3m59.052945157s ago: executing program 5 (id=1842):
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x1210080, &(0x7f0000000140)={[{@uid}, {@creator={'creator', 0x3d, "aa80aaf6"}}, {@dir_umask}, {@creator={'creator', 0x3d, "0de07c34"}}, {@codepage={'codepage', 0x3d, 'cp949'}}, {@dir_umask}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@dir_umask={'dir_umask', 0x3d, 0x200}}, {}, {@umask={'umask', 0x3d, 0x16}}]}, 0x7, 0x318, &(0x7f00000004c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)

3m58.747777187s ago: executing program 5 (id=1849):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10)

3m58.292281889s ago: executing program 5 (id=1860):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x197, &(0x7f00000002c0), 0x0, 0x557, &(0x7f0000000a40)="$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")
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0)

3m58.066026789s ago: executing program 33 (id=1860):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x197, &(0x7f00000002c0), 0x0, 0x557, &(0x7f0000000a40)="$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")
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, 0x0)

4.648321218s ago: executing program 2 (id=6496):
r0 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x101b, 0xffffffffffffffff, 0x0, 0x0})

4.532491888s ago: executing program 2 (id=6499):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipmr_delroute={0x24, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x80, 0x20, 0x0, 0x0, 0xfe, 0x4, 0x0, 0x5, 0x4200}, [@RTA_SRC={0x8, 0x2, @rand_addr=0x64010101}]}, 0x24}}, 0x0)

4.400059779s ago: executing program 2 (id=6502):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[], 0xff, 0x5f35, &(0x7f0000006180)="$eJzs3cuOHFf9B/BfX6bn4sSxor8i/y0WE4dLQojvNoRbHBYsYAESyhpbk0lkcADZBpHIwhN5gdgAjwCbbFjkFXiAPAPiAbBkZ5UFoVDNnGPXlHvcM3imq3vO5yONq351uqdP+Ts1VT1V1ScAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjB939ythcRV36TFhyLeCYGEf2I5bpejXrmcn78MCKOx2ZzvBARg8WI+vmb/zwXcSEiPjkacf/B7bV68bld9uPimVs3Pv/h9/7x+z/dPf6zt3/6Ubv9x/93/uM/3Ik49qPXP/78zv6sOwAAAJSiqqqql97mn0jv7/tddwoAmIq8/6+SvFytVqvV+1r/sb+Xxz9zpOv+qg9p3VSNd6dZRMRG8zn1MYPT8QAwZzbis667QIfkX7RhRBzpuhPATOt13QEOxP0Ht9d6Kd9ec3+wutWe/065Lf+N3sP7O3aaTtK+xmRaP193YxDP79Cf5Sn1YZbk/Pvt/K9stY/S4w46/2nZKf/R1q1Pxcn5D9r5t2zL/88RMbf598fmX6qc/3Av+W8M5nj7lz8AAAAAAIdf/vv/sY7P/y4+/arsypPO/65OqQ8AAAAAAAAAsN+edvy/h4z/BwAAADOrfq9e+8vRR8t2+iy2evlbvYhnW48HCrPa+HBAAAAAAAAAAAAAAGA6hhEr6br+hYh4dmWlqqr6q6ld79XTPn/elb7+ULKuf8kDAMCWT4627uXvRSxFxFvps/4WVlZWqmppeaVaqZYX8/HsaHGpWm68r83TetniaBcHxMNRVX+zpcbzmia9X57U3v5+9WuNqsEuOjYdHQYOABGxtTe6b490yFTVc9H1UQ7zwfZ/+Nj+2Y2uf04BAACAg1dVVdVLH+d9Ip3z73fdKQBgKvL+v31eQK1Wq4upP91aODP9UasPsG6qxrvTLCJio/mc+pjBcPwAMGc24rOuu0CH5F+0YUQc77oTwEzrdd0BDsT9B7fXeinfXnN/sLrVnq8F2Zb/Rm/zefn546aTtK8xmdbP190YxPM79OeFKfVhluT8++38r2y15yH+Dzr/adkp/3o9j3XQn67l/Aft/FsOT/79sfmXKuc/3FP+A/kDAAAAAMAMy3//P+b8b15lAAAAAAAAAJg79x/cXsv3vebz/18Y87hec879n4dGzr+36/zd/3uY5Pz77fxbF+QMGvP33nyU/6cPbq99dOtf/5+nM5//wmBUv/ZCrz8Ypmt+qoV34lpcj/U489jjh9vazz7WvrCt/dyE9vOPtY/q9uXcfirW4pdxPd5+2L444cKopQnt1YT2nP/A9l+knP+w8VXnv5Lae61p7d6H/ce2++Z03Otc/tu/v/z41jUNw23V3Rg8XLemev1OTq1Pj2z+nxwZxa9vrt849durt27dOBtpsm3puUiTfZbzX0hfOf+XX9pqz7/3m9vrvQ9He85/VtyN4Y75v9SYr9f3lSn3rQs5/1H6yvnnPdD47X+e8995+3+1g/4AAAAAAAAAAAAAAADAk1RVtXmL6OWIuJTu/+nq3kwAYLry/r9K8nK1Wq1Wq9WHr26qxnujWUTE35vPqY8ZfjfumwEAs+w/EfHPrjtBZ+RfsPx5f/X0i113Bpiqm+9/8POr16+v37jZdU8AAAAAAAAAgP9VHv9ztTH+8+Z1QK1xo7eN//pmrM7t+J/90WBzrPO0Qi/Gk8f/PhlPHv97OOH1Fia0jya0L05oX5rQPvZGj4ac/4sp45z/ibRiJY3/+nIH/elazv9kGus55/+V1uOa+Vd/nef8+9vyP33rvV+dvvn+B69de+/qu+vvrv/i7JlLF85fvHD+4sXT71y7vn5m698Oe3ywcv557GvXgZYl558zl39Zcv5fSrX8y5Lyf3gYKv+y5O0/H+/Jvyw5//zeR/5lyfm/kmr5lyXn/9VUy78sOf9XUy3/suT8v5Zq+Zcl5/9aquVflpz/qVTLvyw5/9Opln9Zcv75DJf8y5Lzz1c2yL8sOf9zqZZ/WXL+51Mt/7Lk/C+kWv5lyflfTLX8y5Lzv5Rq+Zcl5//1VMu/LDn/b6Ra/mXJ+b+eavmXJef/zVTLvyw5/2+lWv5lyfl/O9XyL0vO/zupln9Zcv7fTbX8y5LzfyPV8i/Lo8//N7PnmZXZ6IYZM/s/0/VvJgAAAAAAAAAAAACgbRqXE3e9jgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwH/ZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX27jVGrvI+A/jZm702BNxwJw7Y5mZgYXd9A4cYTBJSSnqhJKRNS2oce22c+FbvmgBCZVNoSxSkIrUf6IemSZRGkdoKVEVqKtEIqZHab82nRqhS1EqR6g9QOSiplCqw1Znzvq9nZmdn1utd+8w5vx+y/96ZMzPvnDkzu8+iZwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBmGz869ScDWZblfxp/rcuyi/N/r8l251/O7rjQKwQAAADO1buNv//20nTC7kVcqGmbf7nu374zNzc3l33unVPv/dncXDpjQ5YNrc6yxnnRv/78Z3PN2wTPZ6MDg01fD/a4+aEe5w/3OH+kx/mrepy/usf5oz3On7cD5llT/D6mcWU3Nv65rtil2eXZSOO8Gztc6vmB1YOD8Xc5DQONy8yNHMgOZYezqWxi3mUGGv9l2esb89t6MIu3Ndh0W+uzLDv9k2f3xTUMhH18Y9ZyYw3Nj93b92cb3vnJs/u+NfPWNZ1mz90wb6VZtnlTvs4XsuzMr6uygWx12idxnYNN61zfYZ1DLescaFwu/3f7Ok8vcp3xfo+Gdf6gyzrXh9OeuiHLstlswW3aPZ8NZmvbbjXt79HiiMivI38o358Nn9VxsnERx0l+mR/f0HqctB+Tcf9vDPtkeIE1ND8cb39p1bz9vtTjJL/XZThW8+t+OL/R0dHmX622HKv5Ns/etPAx0PGx63AMpGO56RjY1OsYGFw11DgGBs+seVPLMTA57zKD2UDjtk7d1P0YGJ85cnx8+uln7jh0ZO/BqYNTRycndmzbun3b1u3bxw8cOjw1Ufx9dru0j6zNBtMxuCm81sRj8Ja2bZsPybmvL9/zYLQkz4P8vn/q5nxBFw9mCxzj+TYvbD7350H6vt/0PBhueh50fE3t8DwYXsTzIN/m9ObFfc8cbvrTaQ0r9Vq4rukYuJDfD/PbfOzWhV8L14d1vXjb2X4/HJp3DMS7NRCee/kp6ee90bvDfpl/XFybn3HRquzk9NSJO5/aOzNzYjIL47y4rOmxaj9e1jbdp2ze8TJ41sfL7r/5xc3Xdjh9XdhXo7d3f6zybbaNdX+sGq/unfdny6lbsjCW2fnen52+m+X7M2WJLvsz3+aFO879Z8GUS5pe/0Z6vf4NjQwXr39DaW+MtLz+zX9ohhory7LTdyzu9W8k/Dnfr3+Xl+T1L99Xj93Z/RjIt3lx/GyPgeGur383hDkQ1nNrSAyjTbn/vcb5s8Vh2vRY9jxuhodHwnEzHG+x9bjZOu8y+bXlt715YmnHzeYbWh+rlp9bKnjc5Pvqzye6Hzf5Nm9Mnvtrx5r4z6bXjlW9joGRoVX5ekfSQVC83s2ticfAndm+7Fh2ONufLpM/yvltjW1Z3DGwKvw5368dV5fkGMj31Stbuh8D+Tbf37q8PzttDqekbZp+dmr//cJCmf/a4TPX177bljvz5+v82LbuvxvKt3lr29nmjO776fZwykUd9lP782ehY3p/dn7209VhnYe3d//dVL7N5TsWeTztzrLszck3G7/vCr/f/fuT//6dlt/7dvqd8puTbz40/sgPz2b9AAAs3XuNv2dXFT9rNv0f68X8/38AAACgL8TcPxhmIv8DAABAZcTcPxRmIv8DAABAZcTcPxxmUpP8/8TdO19997ksvRvgXBDPj7vh4XuL7WLHezZ8vWHujPz0j3xz5NUvP7e42x7MsuwXD32g4/ZP3BvXVTge1/mh1tPnufr6Rd3+44+e2a75/RNO7yyuP96fxR4Gsav8+viWxvVueHqyMd94KGvMR2ZffL64/uLruP2prcX2fxnetGT3gYGWy28O67kxzA3hPWUe3n1mP+QzXu7V9df982WfPnN78XIDmy5p3M1X/qC43vgeUS9fVmwf7/dC6/+nr3z71Xz7p27qvP7nBjuv/1S43h+H+fNdxfbN+/zLTev/o7D+eHvxcnd+43sd1//aVcX2r4Xj4mthtq///j/94LudHq94O7vvKS4Xb3/if7c1LhevL15/+/pHn5ts2R/t1//GO8X17Hryp0PN28fT4+1Ej9/TenwPhMe3pUeeZdm3/zhr2c/Zh4vL/WPb+uP1Hb+n8/pvb1vn8YHrG5c/c3/Wtdyvr/71lo73N65n99+ta7k/Lz8Q9t8749/Pr/fUI+F4DOf/3w+K62t/L9PXHmh9vYnbf21d8byN1zfetv6X29Y/e32+73qv/8F3ivW/dt/qlvXv/ng4nh4sZq/1H/yrS1su//VvFY/HiS+OHT02ffLQ/nBn1rU9j1ePrll70cXvu+TS8Fra/vWeYzNPTJ3YMLFhIss29OFbBq70+r8R5v8UY3b5b6Hww58Wx91Lnyi+b93ys+Lrl8Ppj4fHM35//OpfjLQcr+2P++x9xTzX9d8W1rFYV33lv67vcPJ/z3vP31Offf3kP/zhW+0/F8T7c/yK0cb9e2XjlY3zBt4ozm9/verlP69ofV7/aHiiMb8b9utceGfmTVcWt9d+/fG9SV76ZPH8jT/Jxctnbe8nsm6o9X6c6/p/FH6O+d7Vra9/8fj47nNt7+a8LhvIlzAbXh+y2eL8uFXc3y+dvrLj7cX34clmrzmbZS5o+unp8cOHjp58anxmanpmfPrpZ/YcOXby6MyexnuX7vl8r8ufeX6vbTy/90/t2JY1nu3HirHCLvT6jz+6b/9dEzfvnzqw9+SBmUePT504uG96et/U/umb9x44MPXFXpc/tH/X5JadW+/aMnbw0P5dd+/cuXXn2KGjx/JlFIvqYcfEF8aOntjTuMj0rm07J7dv3zYxduTY/qldd01MjJ3sdfnG96ax/NJPjp2YOrx35tCRqbHpQ89M7ZrcuWPHlp7v/njk+IHpDeMnTh4dPzk9dWK8uC8bZhon59/7el2eepg+Fl7v2gyEn84/c/uO9P64uW9+acGrKjZp/fE0ezu8F1T8/tbr65j7R8JMapL/AQAAoA5i7g9v/H/mDPkfAAAAKiPm/tVhJvI/AAAAVEbM/aNhJjXJ//r/+v/6//r/+v/nsf+f6f8vN/3/Zen/z6f/vyj6//r/+v/6/3RXtv5/zP1rsqyW+R8AAADqIOb+tWEm8j8AAABURsz9F4WZyP8AAABQGTH3XxxmUo/8P9L+T/1//X/9/+b+f9xW/z/T/9f/XyL9f/3/bvT/9f/7ef0l7P+v0f+nbMrW/4+5/31hJvXI/wAAAFALMfdfEmYi/wMAAEBlxNx/aZiJ/A8AAACVEXP/ujCTmuR/n/+v/6//7/P/9f/1/1eS/r/+fzf6//r//bz+Evb/ff4/pVO2/n/M/b8UZlKT/A8AAAB1EHP/+8NM5H8AAACojJj7Lwszkf8BAACgMmLuvzzMpCb5X/9f/1//X/9f/1//fyXp/+v/d6P/r//fz+vX/9f/p7ey9f9j7r8izKQm+R8AAADqIOb+K8NM5H8AAACojJj7rwozkf8BAACgMmLuvzrMpCb5X/9f/1//X/9f/1//fyXp/+v/d6P/r//fz+vX/9f/p7ey9f9j7r8mzKQm+R8AAADqIOb+a8NM5H8AAACojJj7PxBmIv8DAABAZcTcvz7MpCb5X/9f/1//X/9f/1//fyX1V/9/cMFz9P8L+v+t9P/1//X/9f/prmz9/5j7PxhmUpP8DwAAAHUQc/91YSbyPwAAAFRGzP3Xh5nI/wAAAFAZMfdvCDOpSf7X/9f/1//X/9f/1/9fSf3V/1+Y/n9B/7+V/r/+v/6//j/dla3/H3P/xjCTmuR/AAAAqIOY+zeFmcj/AAAAUBkx998QZiL/AwAAQGXE3H9jmElN8r/+v/6//r/+v/6//v9K0v/X/+9G/1//v5/Xr/+/uP7/ql5XRKWVrf8fc/9NYSY1yf8AAABQBzH33xxmIv8DAABAZcTcf0uYifwPAAAAlRFz/+Ywk5rkf/1//X/9f/1//X/9/5Wk/7/o/v+apaxL/7+g/780F7o/3+/r1//3+f/0Vrb+f8z9t4aZ1CT/AwAAQB3E3H9bmIn8DwAAAJURc//tYSbyPwAAAFRGzP1jYSY1yf/6//r/+v/6//r/+v8rqar9//Q66vP/9f/1//X/9f/1/1lQ2fr/MfffEWZSk/wPAAAAdRBz/51hJvI/AAAAVEbM/eNhJvI/AAAAVEbM/RNhJjXJ//r/+v/6//r/+v/6/yupqv3/Ffj8/yWtX/+/oP+/NBe6P9/v69f/1/+nt7L1/2PunwwzqUn+BwAAgDqIuX9LmIn8DwAAAJURc//WMBP5HwAAACoj5v5tYSY1yf/6//r/+v/6//r/+v8rSf9f/78b/X/9/35ev/6//j+tBjucVrb+f8z928NMapL/AQAAoA5i7t8RZiL/AwAAQGXE3H9XmIn8DwAAAJURc//dYSY1yf/6//r/+v/6/+Xt/7fevv6//n8n+v/6/5n+/5Jd6P58v69f/1//n96Wt/9/6Tn3/2Pu3xlmUpP8DwAAAHUQc/+HwkzkfwAAAKiMmPvvCTOR/wEAAKCvdPocwijm/g+HmdQk/+v/V73/P7da/1//v3/7/637U/9f/78T/X/9/0z/f8kudH++39ev/6//T2/L2/+f9+PpWff/Y+7fFWZSk/wPAAAAdRBz/71hJvI/AAAAVEbM/feFmcj/AAAAUBkx9+8OM6lJ/tf/r3r/v3yf/z+Q6f/r/xf0//X/l4P+v/5/pv+/ZEvtz4cfW/T/S9T/z48h/X/KqGz9/5j77w8zqUn+BwAAgDqIuf8jYSbyPwAAAFRGzP0fDTOR/wEAAKAyYu7/WJhJTfK//r/+v8//1//X/9f/X0n6//r/3ej/92f/P9L/L0//3+f/U1Zl6//H3P9AmElN8j8AAADUQcz9Hw8zkf8BAACgMmLu/+UwE/kfAAAAKiPm/gfDTGqS//X/9f/1//X/9f/1/1eS/r/+fzf6//r//bx+/X/9f3orW/8/5v5fCTOpSf4HAACAOoi5/6EwE/kfAAAAKiPm/k+Emcj/AAAAUBkx9/9qmElN8r/+//np/w+m69f/1//X/9f/1/9fTvr/+v+Z/v+SXej+fL+vX/9f/5/eytb/j7n/18JMapL/AQAAoA5i7v/1MBP5HwAAACoj5v7fCDOR/wEAAKAyYu5/OMykJvlf/9/n/+v/6/+Xtv8/3Lo/9f/1/zvR/9f/z/T/l+xC9+f7ff36//r/9Fa2/n/M/b8ZZlKT/A8AAAB1EHP/I2Em8j8AAABURsz9nwwzkf8BAACgMmLu/1SYSU3yv/6//r/+v/5/afv/bftT/7+s/f//6Hqu/r/+fzf6//r//bx+/X/9f3orW/8/5v5Hw0xqkv8BAACgDmLu/3SYifwPAAAAlRFz/2+Fmcj/AAAAUBkx9/92mElN8r/+v/6//r/+v/6//v9K0v+f3//PX8MuZP9/1WI21P9fFP1//X/9f/1/uitb/z/m/s+EmdQk/wMAAEAdxNz/O2Em8j8AAABURsz9vxtmIv8DAABAZcTc/1iYSU3yv/6//r/+v/6//r/+/0rS//f5/93o/+v/9/P69f/1/+mtbP3/mPs/G2ZSk/wPAAAAdRBz/++Fmcj/AAAAUBkx9+8JM5H/AQAAoDJi7n88zKQm+V//X/9f/1//X/9f/38l6f/r/3ej/6//38/r1//X/6e3svX/Y+7fG2ZSk/wPAAAAdRBz/+fCTOR/AAAAqIyY+/eFmcj/AAAAUBkx9+8PM6lJ/tf/1//X/9f/1//X/19J+v/6/93o/+v/9/P69f/1/+mtbP3/mPunwkxqkv8BAACgDmLuPxBmIv8DAABAZcTcfzDMRP4HAACAyoi5/4kwk5rkf/1//X/9f/1//X/9/5Wk/6//343+v/5/P69f/1//n97K1v+Puf9QmElN8j8AAADUQcz9nw8zkf8BAACgMmLu/0KYifwPAAAAlRFz/+Ewk5rkf/1//X/9/wr2/4f1/zP9/9LQ/9f/70b/X/+/n9ev/6//T29l6//H3H8kzKQm+R8AAADqIOb+o2Em8j8AAABURsz9x8JM5H8AAACojJj7j4eZ1CT/6//r/+v/V7D/7/P/G/T/y0H/X/+/G/1//f9+Xr/+v/4/vZWt/x9z/++HmdQk/wMAAEAdxNx/IsxE/gcAAIDKiLl/OsxE/gcAAIDKiLl/JsykJvlf/1//X/9f/1//X/9/Jen/6/93o/+v/9/P69f/1/+nt7L1/2PuPxlmUpP8DwAAAHUQc/+TYSbyPwAAwP+zdx87mp1FHIe/wTggC7Fizy2wYwd34GtgwxaxIudowOScc84555xzzjkZhgwGycjuqrKH6Tmnp93f9Hveep5NYTPYL24J9NfopwPTyN1/37jF/gcAAIBp5O6/X9zSZP/r//X/+v9h+v+Dzk//r//X/18U/b/+f6f/P7bT7ue3/n79v/6fdaP1/7n77x+3NNn/AAAA0EHu/gfELfY/AAAATCN3/wPjFvsfAAAAppG7/0FxS5P9r//X/8/b/1+5tf7f9//z5zpj/3/mlr+t/v9k6f/1/zv9/7Gddj+/9ffr//X/rBut/8/d/+C4pcn+BwAAgA5y9z8kbrH/AQAAYBq5+x8at9j/AAAAMI3c/Q+LW5rsf/2//n/e/n9z3//X/+fPdcb+3/f/9f/6/0Pp//X/W36//l//z7rR+v/c/Q+PW5rsfwAAAOggd/8j4hb7HwAAAKaRu/+RcYv9DwAAANPI3f+ouKXJ/tf/6//1//p//b/+f5/0//r/Jfp//f+W36//1/+zbrT+P3f/o+OWJvsfAAAAOsjd/5i4xf4HAACAaeTuf2zcYv8DAADANHL3Py5uabL/9f/6f/2//l//r//fJ/2//n+J/l//v+X36//1/6zbe/9/zbU336P2/7n7r41bmux/AAAA6CB3/+PjFvsfAAAAppG7/wlxi/0PAAAA08jd/8S4pcn+P6T/v2yn/2/a/994Rv+v/x+z/78h/ldG/6//P9+2+/+r9P/6/5v/9Hj9/9H+Sej/9f/6f9bsvf9f6f3//49z918XtzTZ/wAAANBB7v4nxS32PwAAAEwjd/+T4xb7HwAAAKaRu/8pcUuT/e/7//r/k/z+f/519f8H9P++/6//1//7/v+yPfb/98p/mPr/Czvtfn7r71/q/+9+hPfr/+lgtP4/d/9T45Ym+x8AAAA6yN3/tLjF/gcAAIBp5O5/etxi/wMAAMA0cvc/I25psv/1//r/k+z/23z//w4H/3n9/7nv0f/r/w+j/9f/L/H9f/3/lt/v+//r/f/Va38Rpjda/5+7/5lxS5P9DwAAAB3k7n9W3GL/AwAAwDRy9z87brH/AQAAYBq5+58TtzTZ//p//b/+3/f/b1P/f5n+X/+/TP+v/1+i/9f/b/n9+n/f/2fdaP1/7v7nxi01/G5/jP+WAAAAwEhy9z8vbmny+/8AAADQQe7+58ct9j8AAABMI3f/C+KWJvtf/6//1//r/33/X/+/T/r/6fr/M/r/W+j/9f/6f/0/y0br/3P3vzBuabL/AQAAoIPc/S+KW+x/AAAAmEbu/hfHLfY/AAAATCN3/0vilib7X/+v/9f/6//1//r/fdL/T9f/+/7/rej/9f/6f/0/y0br/3P3vzRuabL/AQAAoIPc/S+LW+x/AAAAmEbu/pfHLfY/AAAATCN3/yvilib7X/+v/9f/6//1//r/fRq//7/8SL9K/39A/3+uffX/V13g76f/H+v9J9P/509f/8+cBuj/73HrP87d/8q4pcn+BwAAgA5y978qbrH/AQAAYBq5+18dt9j/AAAAMI3c/a+JW5rs/wv1/2evPvj39f9Ho/8//P36f/2//l//P37/fzT6/wP6/3P5/r/+3/f/9f8sG6D/P+ePc/e/Nm5psv8BAACgg9z9r4tb7H8AAACYRu7+18ct9j8AAABMI3f/G+KWJvvf9//1//p//b/+X/+/T/p//f+SDfX/Vx72J/X/+n/9v/6fZaP1/7n73xi3NNn/AAAA0EHu/jfFLfY/AAAATCN3/5vjFvsfAAAAppG7/y1xS5P9r//X/596/387/X/S/8fPVf+v/78I+n/9/873/4/ttPv5rb9f/6//Z91o/X/u/rfGLU32PwAAAHSQu/9tcYv9DwAAANPI3f/2uMX+BwAAgGnk7n9H3NJk/+v/9f+n3v/7/n/R/8fPVf+v/78I+n/9/07/f2yn3c9v/f36f/0/60br/3P3vzNuabL/AQAAoIPc/e+KW+x/AAAAmEbu/nfHLfY/AAAATCN3/3vilib7X/+v/9f/6//1//r/fdL/6/+XXNr+/7qz+v9znXY/v/X36//1/6wbrf/P3f/euKXJ/gcAAIAOcve/L26x/wEAAGAaufvfH7fY/wAAADCN3P0fiFua7H/9/9b7/3teHy8Yrf/PX6L/1//r//X/+n/9/wX5/r/+f8vv1//r/1l3yfr/e19zn7vd9C9W+v/c/R+MW5rsfwAAAOggd/+H4hb7HwAAAKaRu//DcYv9DwAAANPI3f+RuKXJ/u/R/19+3i+bp//3/X/9v/5f/z82/b/+f4n+X/+/5ffr//X/rBvt+/+5+z8atzTZ/wAAANBB7v6PxS32PwAAAEwjd//H4xb7HwAAAKaRu/8TcUuT/d+j/z+f/v/Aiff/N95J/6//L/p//f9O/6//X6H/1/9v+f1T9/9ndvp/TsRo/X/u/k/GLU32PwAAAHSQu/9TcYv9DwAAANPI3f/puMX+BwAAgGnk7v9M3HDXO57eky4p/b/+3/f/9f/6f/3/Pun/9f9L9P/6/y2/f+r+3/f/OSGj9f+5+z8bt/j9fwAAAJhG7v7PxS32PwAAAEwjd//n4xb7HwAAACZw0Lvn7v9C3NJk/+v/9f/6f/2//l//v0/6f/3/Ev2//n/L79f/6/9ZN1r/n7v/i3FLk/0PAAAAHeTu/1LcYv8DAADANHL3fzlusf8BAABgGrn7vxK3NNn/+n/9v/5f/6//1//vk/5f/79E/6//3/L79f/6f9aN1v/n7v9q3NJk/wMAAEAHufu/FrfY/wAAADCN3P1fj1vsfwAAAJhG7v5vxC1N9r/+X/+v/9f/6/9Pvf+/fKf/Pzb9v/5/p/8/ttPu57f+fv2//p91o/X/ufu/Gbc02f8AAADQQe7+b8Ut9j8AAABMI3f/t+MW+x8AAACmkbv/O3FLk/0/c/+/9Mv0/wf0//r/nf5/hP7f9/9vA/2//n+n/z+20+7nt/5+/b/+n3Wj9f+5+78btzTZ/wAAANBB7v7vxS32PwAAAEwjd//34xb7HwAAAKaRu/8HcUuT/T9z/79E/39A/6//3+n/9f97pv/X/y/R/+v/t/x+/b/+n3Wj9f+5+38YtzTZ/wAAANBB7v4fxS32PwAAAEwjd/+P4xb7HwAAAKaRu/8ncUuT/a//1//r//X/+n/9/z7p//X/S/T/+v8tv1//r/9n3Wj9f+7+n8YtTfY/AAAAdJC7/2dxi/0PAAAA08jd//O4xf4HAACAaeTu/0Xc0mT/6//1//p//b/+X/+/T/p//f8S/b/+f8vv1//r/1k3Wv+fu/+XcUuT/Q8AAAAd5O7/Vdxi/wMAAMA0cvf/Om6x/wEAAGAauft/E7c02f/6f/2//l//r//X/+9T2/7/pv9b1f+v0v/r/7f8fv2//p91o/X/uft/G7c02f8AAADQQe7+38Ut9j8AAABMI3f/7+MW+x8AAACmkbv/D3FLk/2v/9f/6//1/9vo/6/Q/+v/DzVs/+/7/0ei/9f/b/n9+n/9P+tG6/9z918ftzTZ/wAAANBB7v4/xi32PwAAAEwjd/+f4hb7HwAAAKaRu/9s3NJk/+v/9f9T9v9X6v/n6/99/3+T/f9d9P/6/2X6f/3/lt+v/9f/s260/j93/5/jlib7HwAAADrI3f+XuMX+BwAAgGnk7v9r3GL/AwAAwDRy9/8tbmmy//X/+v8p+3/f/9f/6/+Hof/X/y/R/+v/t/x+/b/+n3Wj9f+5+/8etzTZ/wAAANBB7v5/xC32PwAAAEwjd/8/4xb7HwAAAKaRu/9fcUuT/a//1//r//X/+n/9/z7p/7fb/1+x0/+v0f/r//X/+n+Wjdb/5+7/d9zSZP8DAABAB7n7b4hbDt3/d75ErwIAAABOUu7+/8Qtfv8fAAAAppG7/79xS5P9r//X/+v/9f/6f/3/Pun/t9v/+/7/Ov2//l//r/9n2Wj9f+7+/wUAAP//cvskkg==")
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)

2.754014401s ago: executing program 0 (id=6524):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x18, 0x2d, 0xb, 0x0, 0x0, {0x2}, [@nested={0x4, 0x1}]}, 0x18}}, 0x8000)

2.666609431s ago: executing program 0 (id=6526):
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000100)={[{@showassoc}, {@overriderock}, {@utf8}, {@overriderock}, {@showassoc}, {@check_strict}]}, 0x1, 0x3e9, &(0x7f0000000840)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)

2.599190082s ago: executing program 2 (id=6528):
r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2)
write$tun(r0, 0x0, 0x0)

2.472688673s ago: executing program 0 (id=6531):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=@setlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x464}}}}}}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0x50}}, 0x8000)

2.214698004s ago: executing program 2 (id=6535):
syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x1c005, &(0x7f00000002c0)={[{@nospace_cache}, {@flushoncommit}, {@autodefrag}, {@thread_pool={'thread_pool', 0x3d, 0x100}}, {@acl}, {@rescan_uuid_tree}, {@flushoncommit}, {@clear_cache}, {@nodatacow}, {@discard_async}, {@nodatacow}]}, 0x0, 0x559d, &(0x7f000000ac40)="$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")
mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./file1\x00', &(0x7f0000000280)='btrfs\x00', 0x814008, 0x0)

2.209404084s ago: executing program 0 (id=6536):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

2.069918055s ago: executing program 0 (id=6539):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_helper', 0x2202, 0x0)
sendfile(r0, r0, 0x0, 0x7)

1.929499086s ago: executing program 0 (id=6542):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x9, 0x6, 0x20000000000081, 0x9, 0xcb2, 0x4, 0x0, 0x100000000, 0x7})

1.716446208s ago: executing program 3 (id=6545):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100001e000100000000000000000002"], 0x114}], 0x1}, 0x0)

1.522909839s ago: executing program 3 (id=6548):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x25dfdbfe, {0x2}, [@NHA_ID={0x8, 0x6, 0xf7ffffff}, @NHA_FDB={0x4}]}, 0x24}}, 0x0)

1.41910592s ago: executing program 1 (id=6549):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40f55, 0x403a2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x51}, 0x20040040)

1.322605071s ago: executing program 3 (id=6550):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f00000001c0)={0x8, 'vlan0\x00', {'macvlan1\x00'}})

1.173391892s ago: executing program 1 (id=6551):
openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0)

1.072428482s ago: executing program 1 (id=6552):
r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2)
ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000080)={0x0, 0x4, 0x2000000})

1.072167632s ago: executing program 3 (id=6553):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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")
move_mount(0xffffffffffffff9c, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)

950.948843ms ago: executing program 1 (id=6555):
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffc, 0x0, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380), 0x0, 0x8356, 0x30, 0x0, 0x0})

876.659244ms ago: executing program 6 (id=6556):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x74, 0x30, 0x1, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40)

836.012884ms ago: executing program 1 (id=6557):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r0, 0x5607, 0x1)

729.267905ms ago: executing program 6 (id=6558):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000180100002020782500000000f01f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc)

690.485995ms ago: executing program 6 (id=6559):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0xc000003, 0xf, &(0x7f0000000180)=[0x7d2, 0xa, 0xf909, 0x200005, 0x80, 0x1, 0x7, 0x10, 0xfffffe01, 0x4d, 0x4, 0x2, 0x88, 0x8811, 0x2], 0x1, 0x4000007})

659.968475ms ago: executing program 1 (id=6560):
syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='.\x02\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=")
symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

617.295505ms ago: executing program 6 (id=6561):
r0 = syz_open_dev$dri(&(0x7f00000029c0), 0x0, 0x40)
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000240))

607.939385ms ago: executing program 3 (id=6562):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

451.278447ms ago: executing program 3 (id=6563):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000140)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@bsdgroups}, {@nobarrier}]}, 0x1, 0x625, &(0x7f0000000800)="$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")

410.336297ms ago: executing program 6 (id=6564):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000300)='ceph\x00', 0x0, &(0x7f00000003c0)="000006000000495ded000000", 0xc, r0)

289.525168ms ago: executing program 6 (id=6565):
set_mempolicy(0x3, &(0x7f0000000080)=0x5, 0x9)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$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")

0s ago: executing program 2 (id=6566):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x7, 0x8000001})
bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0xc, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005d0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

 T5986] usb 4-1: New USB device strings: Mfr=72, Product=223, SerialNumber=3
[  318.079538][ T5986] usb 4-1: Product: syz
[  318.083798][ T5986] usb 4-1: Manufacturer: syz
[  318.094726][ T5986] usb 4-1: SerialNumber: syz
[  318.106502][ T5986] usb 4-1: config 0 descriptor??
[  318.145793][T15235] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  318.424513][ T5986] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71
[  318.432109][ T5986] ipheth: probe of 4-1:0.196 failed with error -71
[  318.499134][ T5986] usb 4-1: USB disconnect, device number 20
[  318.633170][T15315] xt_TCPMSS: Only works on TCP SYN packets
[  318.672308][T15285] loop6: detected capacity change from 0 to 32768
[  318.762448][T15322] loop2: detected capacity change from 0 to 1764
[  318.782350][T15285] XFS (loop6): Mounting V5 Filesystem
[  318.899524][T15322] iso9660: Corrupted directory entry in block 2 of inode 1920
[  318.939943][T15285] XFS (loop6): Ending clean mount
[  318.968718][T15285] XFS (loop6): Quotacheck needed: Please wait.
[  319.006526][T15297] loop1: detected capacity change from 0 to 32768
[  319.137160][T15285] XFS (loop6): Quotacheck: Done.
[  319.249049][ T8866] XFS (loop6): Unmounting Filesystem
[  320.327122][T15389] netlink: 'syz.0.4770': attribute type 1 has an invalid length.
[  320.828432][T15373] loop1: detected capacity change from 0 to 32768
[  320.914226][ T5996] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  321.152119][T15419] netlink: 'syz.0.4786': attribute type 1 has an invalid length.
[  321.160093][ T5996] usb 7-1: Using ep0 maxpacket: 32
[  321.214369][T15419] __nla_validate_parse: 23 callbacks suppressed
[  321.214389][T15419] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.4786'.
[  321.284410][ T5996] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  321.304532][ T5996] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  321.334222][ T5996] usb 7-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  321.381790][ T5996] usb 7-1: config 0 interface 0 has no altsetting 1
[  321.429183][T15429] loop0: detected capacity change from 0 to 16
[  321.499042][T15429] erofs: (device loop0): mounted with root inode @ nid 36.
[  321.574586][ T5996] usb 7-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57
[  321.583698][ T5996] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.631782][ T5996] usb 7-1: Product: syz
[  321.645236][ T5996] usb 7-1: Manufacturer: syz
[  321.649932][ T5996] usb 7-1: SerialNumber: syz
[  321.669149][T15406] loop3: detected capacity change from 0 to 32768
[  321.675124][ T5996] usb 7-1: config 0 descriptor??
[  321.809470][ T5996] snd-usb-audio: probe of 7-1:0.0 failed with error -2
[  321.858899][T15406] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  321.943504][ T4196] (syz-executor,4196,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  321.962837][ T4263] usb 7-1: USB disconnect, device number 11
[  321.969660][ T4196] ocfs2: Unmounting device (7,3) on (node local)
[  322.085619][T15453] loop2: detected capacity change from 0 to 1024
[  322.148718][T15453] EXT4-fs (loop2): Ignoring removed oldalloc option
[  322.229737][T15453] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,oldalloc,,errors=continue. Quota mode: none.
[  322.251213][ T4764] udevd[4764]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  322.275469][T15453] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #11: comm syz.2.4803: directory missing '..'
[  322.849934][T15500] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  323.080246][T15517] loop6: detected capacity change from 0 to 256
[  323.103599][T15520] netlink: 'syz.2.4834': attribute type 10 has an invalid length.
[  323.164798][T15517] FAT-fs (loop6): Directory bread(block 64) failed
[  323.189921][T15517] FAT-fs (loop6): Directory bread(block 65) failed
[  323.216610][T15517] FAT-fs (loop6): Directory bread(block 66) failed
[  323.223217][T15517] FAT-fs (loop6): Directory bread(block 67) failed
[  323.248790][T15517] FAT-fs (loop6): Directory bread(block 68) failed
[  323.282706][T15517] FAT-fs (loop6): Directory bread(block 69) failed
[  323.312641][T15517] FAT-fs (loop6): Directory bread(block 70) failed
[  323.342379][T15517] FAT-fs (loop6): Directory bread(block 71) failed
[  323.360919][T15517] FAT-fs (loop6): Directory bread(block 72) failed
[  323.392542][T15517] FAT-fs (loop6): Directory bread(block 73) failed
[  323.489019][   T26] audit: type=1800 audit(1762450517.933:17): pid=15517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4833" name="bus" dev="loop6" ino=1048656 res=0 errno=0
[  323.607009][T15548] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4848'.
[  324.037591][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4863'.
[  324.223287][T15587] loop3: detected capacity change from 0 to 1024
[  324.243059][T15587] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5
[  324.243059][T15587] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  324.243059][T15587] 
[  324.294481][ T4263] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  324.343037][T15587] EXT4-fs (loop3): Ignoring removed bh option
[  324.402908][T15587] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,journal_ioprio=0x0000000000000000,barrier,nouser_xattr,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback.
[  324.564356][ T4263] usb 1-1: Using ep0 maxpacket: 8
[  324.694693][ T4263] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  324.863547][T15575] loop1: detected capacity change from 0 to 40427
[  324.908119][ T4263] usb 1-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=11.85
[  324.927767][ T4263] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.952668][ T4263] usb 1-1: Product: syz
[  324.960969][ T4263] usb 1-1: Manufacturer: syz
[  324.974173][ T4263] usb 1-1: SerialNumber: syz
[  324.980857][ T4263] usb 1-1: config 0 descriptor??
[  325.045720][ T4263] ipw 1-1:0.0: IPWireless converter converter detected
[  325.270410][ T4263] usb 1-1: USB disconnect, device number 20
[  325.281589][ T4263] ipw 1-1:0.0: device disconnected
[  325.324225][T15575] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff
[  325.345956][T15601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4873'.
[  325.364288][T15575] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4
[  325.382553][T15575] F2FS-fs (loop1): invalid crc value
[  325.430567][T15575] F2FS-fs (loop1): Found nat_bits in checkpoint
[  325.570784][T15575] F2FS-fs (loop1): Start checkpoint disabled!
[  325.648977][T15575] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  326.032805][ T5008] attempt to access beyond end of device
[  326.032805][ T5008] loop1: rw=2049, want=40976, limit=40427
[  326.297954][T15641] loop2: detected capacity change from 0 to 4096
[  326.400314][T15641] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  326.442720][T15653] loop0: detected capacity change from 0 to 512
[  326.448195][T15641] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  326.508154][T15641] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  326.550378][T15641] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  326.553882][T15658] netlink: 'syz.3.4901': attribute type 5 has an invalid length.
[  326.576122][T15653] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  326.605960][T15641] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  326.673492][T15641] ntfs: volume version 3.1.
[  326.731902][T15653] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,noload,acl,mblk_io_submit,sysvgroups,,errors=continue. Quota mode: writeback.
[  326.749028][T15641] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  326.819736][T15641] ntfs: (device loop2): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  326.852377][T15668] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4904'.
[  326.862134][T15653] ext4 filesystem being mounted at /1014/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  326.917763][T15641] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  326.963603][T15641] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  327.038155][T15677] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4908'.
[  327.061999][T15677] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4908'.
[  327.081491][T15677] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4908'.
[  327.599470][T15706] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4921'.
[  327.767950][T15699] loop0: detected capacity change from 0 to 4096
[  327.791317][T15714] loop2: detected capacity change from 0 to 512
[  327.855795][T15699] ntfs: volume version 3.1.
[  327.901599][T15714] EXT4-fs (loop2): Ignoring removed orlov option
[  327.934337][T15714] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  328.001889][T15727] netlink: 'syz.1.4929': attribute type 21 has an invalid length.
[  328.140841][T15714] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2229: inode #15: comm syz.2.4925: corrupted in-inode xattr
[  328.162650][T15735] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4932'.
[  328.237718][T15714] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.4925: couldn't read orphan inode 15 (err -117)
[  328.273272][T15714] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,sysvgroups,noload,nombcache,noblock_validity,init_itable=0x0000000000000051,nogrpid,,errors=continue. Quota mode: none.
[  328.379270][T15743] syz.0.4937 (15743): /proc/15742/oom_adj is deprecated, please use /proc/15742/oom_score_adj instead.
[  328.393936][T15738] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready
[  328.694762][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4944'.
[  328.731984][T15757] netlink: get zone limit has 8 unknown bytes
[  328.748877][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4944'.
[  328.826570][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4944'.
[  328.876315][T15755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4944'.
[  328.896998][T15765] loop1: detected capacity change from 0 to 164
[  328.913931][T15755] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  328.925406][T15755] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  328.965919][T15755] 8021q: adding VLAN 0 to HW filter on device team0
[  329.019992][T15755] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  329.031151][T15769] loop6: detected capacity change from 0 to 8
[  329.050905][T15763] netlink: 'syz.2.4941': attribute type 44 has an invalid length.
[  329.184065][   T26] kauditd_printk_skb: 18 callbacks suppressed
[  329.184082][   T26] audit: type=1800 audit(1762450523.623:18): pid=15769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4950" name="file0" dev="loop6" ino=1 res=0 errno=0
[  329.344058][T15782] loop1: detected capacity change from 0 to 47
[  329.408777][T15775] loop2: detected capacity change from 0 to 4096
[  329.508835][T15787] CIFS mount error: No usable UNC path provided in device string!
[  329.508835][T15787] 
[  329.534540][T15787] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  329.612712][T15775] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  329.648813][T15775] ntfs3: loop2: Failed to load $Extend.
[  329.728528][T15797] netlink: 'syz.3.4963': attribute type 1 has an invalid length.
[  329.750308][T15799] dlm: non-version read from control device 8192
[  330.342367][T15832] loop2: detected capacity change from 0 to 512
[  330.401707][ T5983] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  330.443271][T15832] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e028, mo2=0002]
[  330.508624][T15832] System zones: 1-12
[  330.552457][T15832] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 33261: comm syz.2.4981: invalid block
[  330.635943][T15832] EXT4-fs (loop2): Remounting filesystem read-only
[  330.663860][T15832] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.4981: invalid indirect mapped block 8 (level 2)
[  330.683186][T15832] EXT4-fs (loop2): Remounting filesystem read-only
[  330.690157][ T5983] usb 1-1: Using ep0 maxpacket: 32
[  330.709408][T15832] EXT4-fs (loop2): 1 truncate cleaned up
[  330.753568][T15832] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,data_err=ignore,noinit_itable,sysvgroups,errors=remount-ro,. Quota mode: none.
[  330.825501][ T5983] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[  330.840699][ T5983] usb 1-1: config 0 has no interface number 0
[  330.873154][T15850] loop6: detected capacity change from 0 to 4096
[  330.962471][T15850] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512)
[  330.999869][T15860] device gtp0 entered promiscuous mode
[  331.034472][ T5983] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  331.043944][ T5983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.089536][ T5983] usb 1-1: Product: syz
[  331.093777][ T5983] usb 1-1: Manufacturer: syz
[  331.127961][T15850] ntfs3: loop6: failed to convert "c46c" to maccyrillic
[  331.148312][ T5983] usb 1-1: SerialNumber: syz
[  331.188697][ T5983] usb 1-1: config 0 descriptor??
[  331.256720][ T5983] radio-si470x 1-1:0.35: could not find interrupt in endpoint
[  331.278511][ T5983] radio-si470x: probe of 1-1:0.35 failed with error -5
[  331.437625][T15880] netlink: 'syz.1.5004': attribute type 21 has an invalid length.
[  331.451625][T15880] IPv6: NLM_F_CREATE should be specified when creating new route
[  331.484405][ T5983] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  331.502427][T15880] IPv6: Can't replace route, no match found
[  331.595303][T15890] loop6: detected capacity change from 0 to 512
[  331.646234][T15894] No such timeout policy "syz1"
[  331.694352][ T5983] radio-raremono 1-1:0.35: raremono_cmd_main failed (-71)
[  331.722576][T15890] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  331.731892][ T5983] radio-raremono 1-1:0.35: V4L2 device registered as radio48
[  331.756574][T15890] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[  331.783337][ T5983] usb 1-1: USB disconnect, device number 21
[  331.788301][T15902] netlink: 'syz.2.5014': attribute type 10 has an invalid length.
[  331.801681][T15902] device vxcan0 entered promiscuous mode
[  331.807803][T15902] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  331.820029][T15902] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  331.827709][T15902] A link change request failed with some changes committed already. Interface vxcan0 may have been left with an inconsistent configuration, please check.
[  331.843635][T15890] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.5009: bad orphan inode 13
[  331.853963][ T5983] radio-raremono 1-1:0.35: Thanko's Raremono disconnected
[  331.863543][T15890] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="data_err=ignore,noload,data_err=ignore,grpjquota="errors=continue,max_dir_size_kb=0x00000000000001ff,nobarrier,,errors=continue. Quota mode: writeback.
[  331.886327][    C1] vkms_vblank_simulate: vblank timer overrun
[  332.260091][T15916] loop2: detected capacity change from 0 to 4096
[  332.274374][ T5996] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  332.333900][T15930] __nla_validate_parse: 16 callbacks suppressed
[  332.333921][T15930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5027'.
[  332.370927][T15916] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  332.382519][T15930] openvswitch: netlink: Actions may not be safe on all matching packets
[  332.412751][T15935] loop0: detected capacity change from 0 to 64
[  332.423311][T15916] overlayfs: bad mount option "redirect_dir=follow:/"
[  332.514199][ T5996] usb 2-1: Using ep0 maxpacket: 16
[  332.647329][ T5996] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  332.666775][ T5996] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  332.712851][ T5996] usb 2-1: config 0 has no interface number 0
[  332.811403][T15959] ipt_CLUSTERIP: bad local_nodes[1] 0
[  332.841631][T15958] loop3: detected capacity change from 0 to 2048
[  332.889293][T15958] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  332.898632][ T5996] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  332.916793][ T5996] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.935729][ T5996] usb 2-1: Product: syz
[  332.960270][ T5996] usb 2-1: Manufacturer: syz
[  332.974709][ T5996] usb 2-1: SerialNumber: syz
[  332.991999][T15965] loop0: detected capacity change from 0 to 256
[  333.006526][ T5996] usb 2-1: config 0 descriptor??
[  333.066447][ T5996] usb 2-1: Found UVC 0.00 device syz (046c:14e8)
[  333.083114][ T5996] usb 2-1: No valid video chain found.
[  333.112695][T15969] xt_limit: Overflow, try lower: 33554432/384
[  333.317776][ T4248] usb 2-1: USB disconnect, device number 19
[  333.318055][T15978] xt_CONNSECMARK: invalid mode: 0
[  333.502012][T15989] loop3: detected capacity change from 0 to 64
[  334.107647][T16031] netlink: 'syz.2.5077': attribute type 2 has an invalid length.
[  334.247358][T16037] loop6: detected capacity change from 0 to 2048
[  334.344179][T16042] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  334.535494][T16044] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  334.587970][T16044] overlayfs: missing 'lowerdir'
[  335.450127][T16091] netlink: 'syz.0.5106': attribute type 3 has an invalid length.
[  335.572599][T16096] netlink: 'syz.0.5109': attribute type 5 has an invalid length.
[  335.586709][T16062] loop6: detected capacity change from 0 to 32768
[  335.824798][ T5983] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  336.067894][ T5983] usb 3-1: Using ep0 maxpacket: 32
[  336.080714][T16130] loop0: detected capacity change from 0 to 8
[  336.115018][T16128] loop3: detected capacity change from 0 to 1024
[  336.184554][ T5983] usb 3-1: config 0 has an invalid interface number: 166 but max is 0
[  336.232721][ T5983] usb 3-1: config 0 has no interface number 0
[  336.249267][ T5983] usb 3-1: config 0 interface 166 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16
[  336.292861][ T5008] hfsplus: b-tree write err: -5, ino 4
[  336.484633][ T5983] usb 3-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=19.a8
[  336.504727][ T5983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.524246][ T5983] usb 3-1: Product: syz
[  336.546340][ T5983] usb 3-1: Manufacturer: syz
[  336.572281][ T5983] usb 3-1: SerialNumber: syz
[  336.610530][T16149] loop0: detected capacity change from 0 to 512
[  336.629083][ T5983] usb 3-1: config 0 descriptor??
[  336.664514][T16095] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  336.686394][ T5983] ti_usb_3410_5052 3-1:0.166: TI USB 3410 1 port adapter converter detected
[  336.702957][ T5983] ti_usb_3410_5052 3-1:0.166: missing endpoints
[  336.750544][T16157] loop3: detected capacity change from 0 to 512
[  336.797666][T16149] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  336.861506][T16168] xt_l2tp: unknown flags: 3b
[  336.898885][ T5983] usb 3-1: USB disconnect, device number 22
[  336.923501][T16157] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,auto_da_alloc=0x0000000000000007,noauto_da_alloc,. Quota mode: writeback.
[  336.976118][T16157] ext4 filesystem being mounted at /1023/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  336.999375][T16157] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present
[  337.011248][T16157] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  337.021747][T16157] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.5139: Failed to acquire dquot type 0
[  337.054033][T16157] EXT4-fs (loop3): Remounting filesystem read-only
[  337.770753][T16176] loop1: detected capacity change from 0 to 32768
[  337.784272][ T4248] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  337.851922][T16176] ialloc: diAlloc returned -5!
[  337.955069][ T4834] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  338.020783][T16210] bond0: Error: Cannot enslave bond to itself.
[  338.064301][ T4248] usb 3-1: Using ep0 maxpacket: 8
[  338.085846][T16188] loop3: detected capacity change from 0 to 32768
[  338.337472][ T4834] usb 1-1: config 0 has an invalid descriptor of length 91, skipping remainder of the config
[  338.357850][ T4834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  338.373805][ T4248] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  338.396190][ T4248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.410922][ T4834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10
[  338.423993][ T4248] usb 3-1: Product: syz
[  338.432534][ T4248] usb 3-1: Manufacturer: syz
[  338.437804][ T4248] usb 3-1: SerialNumber: syz
[  338.442670][ T4834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  338.461441][ T4834] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  338.475558][ T4248] usb 3-1: config 0 descriptor??
[  338.497038][ T4834] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  338.526487][ T4248] gspca_main: sq930x-2.14.0 probing 2770:930c
[  338.532823][ T4834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.563256][ T4834] usb 1-1: config 0 descriptor??
[  338.568698][T16232] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5173'.
[  338.588103][T16232] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  338.721706][T16239] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551614)
[  338.785476][T16239] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  338.792368][ T4834] rc_core: IR keymap rc-hauppauge not found
[  338.802480][ T4834] Registered IR keymap rc-empty
[  338.840301][ T4834] mceusb 1-1:0.0: Error: mce write urb status = -71
[  338.898961][T16246] Zero length message leads to an empty skb
[  338.904541][ T4834] mceusb 1-1:0.0: Error: mce write urb status = -71
[  338.940013][ T4834] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  338.964846][ T4248] gspca_sq930x: ucbus_write failed -71
[  338.970942][ T4248] sq930x: probe of 3-1:0.0 failed with error -71
[  338.985494][ T4834] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input18
[  339.010238][ T4248] usb 3-1: USB disconnect, device number 23
[  339.064594][ T4834] mceusb 1-1:0.0: Error: mce write urb status = -71
[  339.147612][ T4834] mceusb 1-1:0.0: Error: mce write urb status = -71
[  339.204317][ T4834] mceusb 1-1:0.0: Error: mce write urb status = -71
[  339.267627][ T4834] mceusb 1-1:0.0: Error: mce write urb status = -71
[  339.334735][ T4834] mceusb 1-1:0.0: Error: mce write urb status = -71
[  339.404387][ T4834] mceusb 1-1:0.0: Error: mce write urb status = -71
[  339.467712][ T4834] mceusb 1-1:0.0: Error: mce write urb status = -71
[  339.534533][ T4834] mceusb 1-1:0.0: Error: mce write urb status = -71
[  339.567934][T16276] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5195'.
[  339.625856][ T4834] mceusb 1-1:0.0: Error: mce write urb status = -71
[  339.676678][ T4834] mceusb 1-1:0.0: Error: mce write urb status = -71
[  339.707637][ T4834] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[  339.732543][ T4834] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  339.778919][T16247] loop1: detected capacity change from 0 to 32768
[  339.794034][T16290] loop2: detected capacity change from 0 to 1764
[  339.804282][ T4834] usb 1-1: USB disconnect, device number 22
[  339.879121][T16247] ERROR: (device loop1): diAllocAG: error reading iag
[  339.879121][T16247] 
[  339.907872][T16247] ialloc: diAlloc returned -5!
[  339.908058][T16290] iso9660: Corrupted directory entry in block 2 of inode 1920
[  340.014411][ T5986] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  340.066681][T16298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5205'.
[  340.114954][T16298] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5205'.
[  340.144418][T16298] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5205'.
[  340.284328][ T5986] usb 7-1: Using ep0 maxpacket: 32
[  340.374382][ T4834] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  340.404359][ T5986] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  340.604491][ T5986] usb 7-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  340.635068][ T5986] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.644283][ T4834] usb 1-1: Using ep0 maxpacket: 8
[  340.653348][ T5986] usb 7-1: Product: syz
[  340.657931][ T5986] usb 7-1: Manufacturer: syz
[  340.662651][ T5986] usb 7-1: SerialNumber: syz
[  340.695880][ T5986] usb 7-1: config 0 descriptor??
[  340.705951][T16326] loop2: detected capacity change from 0 to 1024
[  340.731054][T16326] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  340.735694][ T5986] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out.
[  340.762631][T16326] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  340.772503][T16326] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  340.797283][T16326] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,sysvgroups,journal_ioprio=0x0000000000000004,noauto_da_alloc,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,bsddf,,errors=continue. Quota mode: writeback.
[  340.834553][ T4834] usb 1-1: unable to get BOS descriptor or descriptor too short
[  340.944501][ T4834] usb 1-1: config 4 has an invalid interface number: 116 but max is 0
[  340.953784][ T4834] usb 1-1: config 4 has no interface number 0
[  340.956892][ T1107] usb 7-1: USB disconnect, device number 12
[  340.964006][ T4834] usb 1-1: config 4 interface 116 has no altsetting 0
[  341.168452][ T4834] usb 1-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=a9.28
[  341.195134][ T4834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.203195][ T4834] usb 1-1: Product: syz
[  341.214167][ T4834] usb 1-1: Manufacturer: syz
[  341.218817][ T4834] usb 1-1: SerialNumber: syz
[  341.528794][ T4834] esd_usb2 1-1:4.116: sending version message failed
[  341.549665][ T4834] esd_usb2: probe of 1-1:4.116 failed with error -22
[  341.577907][ T4834] usb 1-1: USB disconnect, device number 23
[  341.611838][T16351] loop1: detected capacity change from 0 to 1024
[  341.659054][T16357] xt_recent: hitcount (4294901760) is larger than allowed maximum (255)
[  341.669076][T16351] hfsplus: session requires an argument
[  341.685445][T16351] hfsplus: unable to parse mount options
[  341.875134][ T1107] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  342.268606][ T1107] usb 7-1: config 0 has an invalid interface number: 36 but max is 0
[  342.296952][ T1107] usb 7-1: config 0 has no interface number 0
[  342.455180][ T1107] usb 7-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=ce.72
[  342.474821][ T1107] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.514038][ T1107] usb 7-1: Product: syz
[  342.532930][ T1107] usb 7-1: Manufacturer: syz
[  342.543077][ T1107] usb 7-1: SerialNumber: syz
[  342.586927][ T1107] usb 7-1: config 0 descriptor??
[  342.636612][ T1107] gspca_main: spca505-2.14.0 probing 0733:0430
[  342.655426][T16405] loop1: detected capacity change from 0 to 512
[  342.715731][T16405] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  342.736823][T16405] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  342.750121][T16405] System zones: 0-1, 15-15, 18-18, 34-34
[  342.757226][T16405] EXT4-fs (loop1): orphan cleanup on readonly fs
[  342.763789][T16405] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0
[  342.774518][T16405] EXT4-fs warning (device loop1): ext4_enable_quotas:6461: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  342.860644][T16405] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  342.911355][T16405] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.5256: bg 0: block 40: padding at end of block bitmap is not set
[  342.930466][T16389] loop3: detected capacity change from 0 to 32768
[  342.967610][T16405] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6178: Corrupt filesystem
[  342.976107][T16416] netlink: 'syz.2.5261': attribute type 10 has an invalid length.
[  342.982445][T16405] EXT4-fs (loop1): 1 truncate cleaned up
[  342.989048][T16416] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5261'.
[  342.999356][T16405] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  343.007985][T16416] device batadv0 entered promiscuous mode
[  343.030384][T16416] bridge0: port 3(batadv0) entered blocking state
[  343.040957][T16416] bridge0: port 3(batadv0) entered disabled state
[  343.049614][T16416] bridge0: port 3(batadv0) entered blocking state
[  343.054482][ T1107] gspca_spca505: reg write: error -71
[  343.056229][T16416] bridge0: port 3(batadv0) entered forwarding state
[  343.062161][ T1107] spca505: probe of 7-1:0.36 failed with error -5
[  343.077608][T16405] fscrypt (loop1, inode 16): Error -61 getting encryption context
[  343.098871][T16389] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  343.118581][T16389] (syz.3.5248,16389,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=288, inode=0, rec_len=0, name_len=0
[  343.135925][T16389] (syz.3.5248,16389,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2
[  343.145020][T16389] (syz.3.5248,16389,1):ocfs2_mknod:298 ERROR: status = -2
[  343.152362][T16389] (syz.3.5248,16389,1):ocfs2_mknod:502 ERROR: status = -2
[  343.159926][T16389] (syz.3.5248,16389,1):ocfs2_create:676 ERROR: status = -2
[  343.167509][ T1107] usb 7-1: USB disconnect, device number 13
[  343.195422][ T5003] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  343.205600][ T5003] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  343.356746][ T4196] ocfs2: Unmounting device (7,3) on (node local)
[  343.512851][T16436] loop2: detected capacity change from 0 to 64
[  343.620672][T16436] Trying to free block not in datazone
[  343.661498][T16438] loop3: detected capacity change from 0 to 1024
[  344.021279][T16457] loop3: detected capacity change from 0 to 512
[  344.056854][T16460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5281'.
[  344.084294][ T1107] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  344.170296][T16457] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.5279: inode has both inline data and extents flags
[  344.213170][T16468] Sensor A: =================  START STATUS  =================
[  344.251210][T16457] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.5279: couldn't read orphan inode 15 (err -117)
[  344.303939][T16468] Sensor A: Test Pattern: 75% Colorbar
[  344.314496][T16468] Sensor A: Show Information: All
[  344.334280][ T1107] usb 2-1: Using ep0 maxpacket: 8
[  344.354779][T16457] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  344.383533][T16468] Sensor A: Vertical Flip: false
[  344.442169][T16468] Sensor A: Horizontal Flip: false
[  344.454429][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  344.472442][T16468] Sensor A: Brightness: 128
[  344.497929][T16468] Sensor A: Contrast: 128
[  344.519328][T16468] Sensor A: Hue: 0
[  344.564473][T16468] Sensor A: Saturation: 128
[  344.564561][ T1107] usb 2-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da
[  344.578582][T16468] Sensor A: ==================  END STATUS  ==================
[  344.592860][ T1107] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  344.621533][ T1107] usb 2-1: Manufacturer: syz
[  344.662921][ T1107] usb 2-1: config 0 descriptor??
[  344.726811][ T1107] appledisplay 2-1:0.0: Could not find int-in endpoint
[  344.756847][ T1107] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  344.782139][T16481] ieee802154 phy0 wpan0: encryption failed: -90
[  344.920934][T16488] loop2: detected capacity change from 0 to 256
[  344.953206][ T4838] usb 2-1: USB disconnect, device number 20
[  345.022382][T16488] FAT-fs (loop2): Directory bread(block 64) failed
[  345.033486][T16488] FAT-fs (loop2): Directory bread(block 65) failed
[  345.040008][T16467] loop0: detected capacity change from 0 to 32768
[  345.041633][T16488] FAT-fs (loop2): Directory bread(block 66) failed
[  345.053636][T16488] FAT-fs (loop2): Directory bread(block 67) failed
[  345.104425][T16467] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  345.107193][T16488] FAT-fs (loop2): Directory bread(block 68) failed
[  345.131660][T16492] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5295'.
[  345.137358][T16488] FAT-fs (loop2): Directory bread(block 69) failed
[  345.147869][T16467] BTRFS info (device loop0): force clearing of disk cache
[  345.159209][T16467] BTRFS info (device loop0): using free space tree
[  345.166517][T16488] FAT-fs (loop2): Directory bread(block 70) failed
[  345.175344][T16467] BTRFS info (device loop0): has skinny extents
[  345.191891][T16488] FAT-fs (loop2): Directory bread(block 71) failed
[  345.200081][T16488] FAT-fs (loop2): Directory bread(block 72) failed
[  345.231456][T16488] FAT-fs (loop2): Directory bread(block 73) failed
[  345.450818][T16467] BTRFS info (device loop0): enabling ssd optimizations
[  345.488279][T16467] BTRFS info (device loop0): clearing free space tree
[  345.552036][T16517] loop3: detected capacity change from 0 to 164
[  345.564290][T16467] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  345.634303][T16467] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  345.678179][T16523] loop2: detected capacity change from 0 to 764
[  345.716560][T16467] BTRFS info (device loop0): creating free space tree
[  345.720543][T16517] iso9660: Corrupted directory entry in block 2 of inode 1920
[  345.748715][T16467] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  345.819255][T16526] loop6: detected capacity change from 0 to 512
[  345.824217][T16467] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  345.957940][T16526] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  346.023728][T16526] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.5302: invalid indirect mapped block 8 (level 2)
[  346.057966][T16532] loop1: detected capacity change from 0 to 2048
[  346.205721][T16526] EXT4-fs (loop6): 1 truncate cleaned up
[  346.229273][T16532] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  346.240351][T16526] EXT4-fs (loop6): mounted filesystem without journal. Opts: journal_dev=0x0000000000000008,noauto_da_alloc,nomblk_io_submit,auto_da_alloc=0x0000000000000002,nouid32,barrier=0x0000000000000009,noauto_da_alloc,,errors=continue. Quota mode: none.
[  346.254247][T16532] NILFS (loop1): unrecognized mount option "ÿÿ"
[  346.433077][T16532] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  346.588157][T16544] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  347.042245][T16541] loop3: detected capacity change from 0 to 32768
[  347.087853][ T4227] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  347.093226][T16548] loop6: detected capacity change from 0 to 512
[  347.178485][T16541] (syz.3.5309,16541,1):ocfs2_init_local_system_inodes:493 ERROR: status=-22, sysfile=10, slot=0
[  347.204273][T16541] (syz.3.5309,16541,0):ocfs2_init_local_system_inodes:502 ERROR: status = -22
[  347.221460][T16548] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  347.269380][T16541] (syz.3.5309,16541,0):ocfs2_mount_volume:1818 ERROR: status = -22
[  347.277865][T16548] ext4 filesystem being mounted at /695/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  347.314769][T16541] (syz.3.5309,16541,1):ocfs2_fill_super:1177 ERROR: status = -22
[  347.374414][ T4227] usb 3-1: Using ep0 maxpacket: 16
[  347.528873][ T4227] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  347.564452][ T4227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.612622][ T4227] usb 3-1: config 0 descriptor??
[  347.685892][ T4227] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  347.747886][T16577] loop6: detected capacity change from 0 to 16
[  347.824660][T16577] erofs: (device loop6): mounted with root inode @ nid 36.
[  347.863937][T16582] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5326'.
[  347.869642][T16577] erofs: (device loop6): erofs_read_inode: bogus i_mode (0) @ nid 46
[  347.904853][ T4227] usb 3-1: Detected FT8U232AM
[  347.914519][ T4227] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  348.131317][ T4844] usb 3-1: USB disconnect, device number 24
[  348.141241][T16592] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5330'.
[  348.185245][ T4844] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  348.214377][ T4844] ftdi_sio 3-1:0.0: device disconnected
[  348.317608][T16588] loop1: detected capacity change from 0 to 4096
[  348.389423][T16588] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match.  Run ntfsfix or chkdsk.
[  348.416503][T16588] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  348.463847][T16588] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  348.484528][T16588] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  348.518848][T16607] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5339'.
[  348.527596][T16588] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  348.575828][T16588] ntfs: volume version 3.1.
[  348.618645][T16588] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  348.664979][T16588] ntfs: (device loop1): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  348.704512][T16588] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  348.765367][T16588] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  348.800693][T16588] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  349.130300][T16636] loop6: detected capacity change from 0 to 8
[  349.169512][T16639] netlink: 'syz.0.5356': attribute type 1 has an invalid length.
[  349.183586][T16636] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  349.214372][T16639] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5356'.
[  349.229873][T16636] cramfs: bad data blocksize 3221485570
[  349.238396][T16636] cramfs: bad data blocksize 3221485570
[  349.274390][ T4844] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  349.373974][T16641] loop3: detected capacity change from 0 to 4096
[  349.397873][ T4764] udevd[4764]: incorrect cramfs checksum on /dev/loop6
[  349.508552][T16641] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  349.554329][ T4844] usb 3-1: Using ep0 maxpacket: 8
[  349.559478][T16658] device bond1 entered promiscuous mode
[  349.589737][T16658] 8021q: adding VLAN 0 to HW filter on device bond1
[  349.658583][T16661] program syz.0.5365 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  349.726267][T16641] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  349.884700][ T4844] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  349.916929][T16663] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5366'.
[  349.929653][ T4844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.960399][ T4844] usb 3-1: Product: syz
[  349.968767][ T4844] usb 3-1: Manufacturer: syz
[  349.982804][ T4844] usb 3-1: SerialNumber: syz
[  350.045970][ T4844] usb 3-1: config 0 descriptor??
[  350.086904][ T4844] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  350.128659][ T4844] dvb-usb: bulk message failed: -22 (2/0)
[  350.159629][T16672] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5370'.
[  350.168118][ T4844] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  350.228856][ T4844] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  350.274206][ T4844] usb 3-1: media controller created
[  350.347130][ T4844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  350.517745][ T4844] dvb-usb: bulk message failed: -22 (1/0)
[  350.651560][ T4844] DVB: Unable to find symbol mt352_attach()
[  350.665008][ T4844] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  350.683309][T16684] loop3: detected capacity change from 0 to 4096
[  350.936937][T16684] ntfs3: Invalid value for gid.
[  350.984257][ T4844] rc_core: IR keymap rc-dvico-portable not found
[  350.991622][ T4844] Registered IR keymap rc-empty
[  351.041664][ T4844] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  351.103532][ T4844] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input19
[  351.173517][ T4844] dvb-usb: schedule remote query interval to 100 msecs.
[  351.198471][ T4844] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  351.255165][ T4844] usb 3-1: USB disconnect, device number 25
[  351.312046][T16712] binder: 16711:16712 ioctl c00c620f 0 returned -14
[  351.343756][T16715] loop6: detected capacity change from 0 to 8
[  351.435053][ T4844] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  351.462450][T16715] SQUASHFS error: Failed to read block 0x26067d: -5
[  351.464064][T16719] loop0: detected capacity change from 0 to 22
[  351.491936][T16715] SQUASHFS error: Unable to read metadata cache entry [26067d]
[  351.528586][T16715] SQUASHFS error: Unable to read directory block [26067d:ffff]
[  351.659013][T16719] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  351.678230][T16719] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  351.787604][T16732] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  351.804455][T16732] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  352.225420][T16749] loop0: detected capacity change from 0 to 256
[  352.257067][T16753] loop1: detected capacity change from 0 to 128
[  352.476227][T16757] loop6: detected capacity change from 0 to 22
[  352.555104][T16757] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  352.604880][T16757] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  352.834587][T16766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5416'.
[  353.013611][T16723] loop2: detected capacity change from 0 to 32768
[  353.027821][T16769] loop1: detected capacity change from 0 to 1024
[  353.138150][T16723] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  353.189299][T16723] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  353.320719][T16773] loop6: detected capacity change from 0 to 64
[  353.337188][T16723] gfs2: fsid=syz:syz.0: journal 0 mapped with 18 extents in 0ms
[  353.367856][ T4844] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  353.377579][ T4844] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  353.495009][T16773] MINIX-fs: file system does not have enough zmap blocks allocated.  Refusing to mount.
[  353.540413][T16773] MINIX-fs: bad superblock or unable to read bitmaps
[  353.552329][T16779] netlink: 'syz.0.5422': attribute type 7 has an invalid length.
[  353.558777][ T4844] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 181ms
[  353.609025][ T4844] gfs2: fsid=syz:syz.0: jid=0: Done
[  353.609691][T16779] netlink: 'syz.0.5422': attribute type 8 has an invalid length.
[  353.618663][T16723] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  353.649436][T16779] netlink: 'syz.0.5422': attribute type 9 has an invalid length.
[  353.719010][T16752] loop3: detected capacity change from 0 to 32768
[  354.071623][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5427'.
[  354.081783][ T4263] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  354.155923][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5427'.
[  354.189555][T16799] QAT: failed to copy from user.
[  354.208535][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5427'.
[  354.256312][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5427'.
[  354.308882][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5427'.
[  354.368568][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5427'.
[  354.388557][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5427'.
[  354.431591][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5427'.
[  354.474749][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5427'.
[  354.498757][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5427'.
[  354.504426][ T4844] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  354.523932][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5427'.
[  354.550400][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5427'.
[  354.560432][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5427'.
[  354.571354][T16795] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  354.601537][T16795] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  354.724254][ T4263] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  354.733350][ T4263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.754479][ T4227] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  354.762611][ T4263] usb 2-1: Product: syz
[  354.767616][ T4263] usb 2-1: Manufacturer: syz
[  354.772252][ T4263] usb 2-1: SerialNumber: syz
[  354.779719][ T4263] usb 2-1: config 0 descriptor??
[  354.858772][T16821] loop2: detected capacity change from 0 to 1024
[  354.907877][T16821] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  354.925862][ T4844] usb 4-1: config 0 has an invalid interface number: 205 but max is 0
[  354.943693][ T4844] usb 4-1: config 0 has no interface number 0
[  354.962534][T16821] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,bsddf,barrier=0x00000000000001ff,commit=0x0000000000000005,debug_want_extra_isize=0x000000000000007e,grpjquota=,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none.
[  355.044689][ T4227] usb 7-1: Using ep0 maxpacket: 32
[  355.065021][ T4263] usb-storage 2-1:0.0: USB Mass Storage device detected
[  355.156678][ T4844] usb 4-1: New USB device found, idVendor=04dd, idProduct=9031, bcdDevice=65.c7
[  355.174162][ T4844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.190124][ T4844] usb 4-1: Product: syz
[  355.198419][ T4844] usb 4-1: Manufacturer: syz
[  355.203403][ T4844] usb 4-1: SerialNumber: syz
[  355.214656][ T4844] usb 4-1: config 0 descriptor??
[  355.264850][ T4227] usb 7-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00
[  355.274046][ T4227] usb 7-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0
[  355.283553][ T4844] usb 4-1: bad CDC descriptors
[  355.304887][ T4844] usb 4-1: unsupported MDLM descriptors
[  355.371503][ T4227] usb 7-1: Product: syz
[  355.400971][ T4227] usb 7-1: config 0 descriptor??
[  355.448534][ T4844] usb 2-1: USB disconnect, device number 21
[  355.505006][ T5996] usb 4-1: USB disconnect, device number 21
[  355.641816][T16855] loop2: detected capacity change from 0 to 128
[  355.716593][ T4227] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input20
[  355.849628][T16846] loop0: detected capacity change from 0 to 32768
[  355.958462][ T4227] usb 7-1: USB disconnect, device number 14
[  356.122379][T16846] XFS (loop0): Mounting V5 Filesystem
[  356.178298][T16875] loop2: detected capacity change from 0 to 256
[  356.215203][T16875] exfat: Deprecated parameter 'utf8'
[  356.228784][T16875] exfat: Deprecated parameter 'namecase'
[  356.238281][T16875] exfat: Deprecated parameter 'utf8'
[  356.261439][T16846] XFS (loop0): Ending clean mount
[  356.279657][T16875] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4b823b56, utbl_chksum : 0xe619d30d)
[  356.315878][T16881] ipt_CLUSTERIP: no config found for 127.0.0.1, need 'new'
[  356.339528][T16846] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x20 
[  356.370749][T16877] loop3: detected capacity change from 0 to 256
[  356.398183][T16846] XFS (loop0): Unmount and run xfs_repair
[  356.427681][T16846] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  356.458774][T16877] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  356.466535][T16846] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  356.511889][T16877] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  356.527724][T16846] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40  ....... .......@
[  356.530529][T16877] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  356.587577][T16846] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[  356.639362][T16846] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37  .......F......@7
[  356.714175][T16846] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  356.723107][T16846] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00  ................
[  356.746088][T16897] netlink: 'syz.2.5474': attribute type 1 has an invalid length.
[  356.774265][T16846] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  356.783186][T16846] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  356.843807][T16846] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x20 len 8 error 74
[  356.907260][T16846] XFS (loop0): Failed to initialize disk quotas.
[  357.008944][T16912] netlink: 'syz.1.5480': attribute type 40 has an invalid length.
[  357.058090][T16912] device team0 left promiscuous mode
[  357.078244][T16912] device team_slave_0 left promiscuous mode
[  357.088556][T16912] device team_slave_1 left promiscuous mode
[  357.271200][T16922] overlayfs: missing 'workdir'
[  357.290482][ T4186] XFS (loop0): Unmounting Filesystem
[  357.299846][T16925] loop6: detected capacity change from 0 to 24
[  357.395184][T16925] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  357.427629][T16925] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  357.490242][T16925] romfs: read error for inode 0x70040
[  357.589099][T16939] loop3: detected capacity change from 0 to 1024
[  357.683179][T16939] EXT4-fs (loop3): Test dummy encryption mode enabled
[  357.740441][T16939] EXT4-fs (loop3): mounted filesystem without journal. Opts: data=ordered,barrier=0x00000000000003ff,stripe=0x0000000000000007,nombcache,nogrpid,inode_readahead_blks=0x0000000000800000,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  357.884831][T16951] loop1: detected capacity change from 0 to 256
[  358.130275][T16958] loop1: detected capacity change from 0 to 16
[  358.154357][ T4844] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  358.245094][T16958] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  358.434279][ T4844] usb 7-1: Using ep0 maxpacket: 16
[  358.448331][T16967] trusted_key: encrypted_key: master key parameter '' is invalid
[  358.574691][ T4844] usb 7-1: unable to get BOS descriptor set
[  358.664548][ T4844] usb 7-1: config 26 has an invalid interface number: 87 but max is 0
[  358.672805][ T4844] usb 7-1: config 26 has no interface number 0
[  358.709887][ T4844] usb 7-1: config 26 interface 87 has no altsetting 0
[  358.914556][ T4844] usb 7-1: New USB device found, idVendor=1199, idProduct=0301, bcdDevice=36.7e
[  358.929054][ T4844] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.945059][T16987] loop3: detected capacity change from 0 to 256
[  358.985265][T16987] exfat: Deprecated parameter 'namecase'
[  358.991421][T16987] exfat: Deprecated parameter 'namecase'
[  359.004200][ T4844] usb 7-1: Product: syz
[  359.008505][ T4844] usb 7-1: Manufacturer: syz
[  359.013124][ T4844] usb 7-1: SerialNumber: syz
[  359.056086][T16987] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7808ae6a, utbl_chksum : 0xe619d30d)
[  359.084546][T16982] loop2: detected capacity change from 0 to 4096
[  359.144159][T16987] exFAT-fs (loop3): hint_cluster is invalid (4278190089)
[  359.189267][T16987] exFAT-fs (loop3): error, failed to bmap (inode : ffff88805e8aa860 iblock : 8, err : -5)
[  359.189484][T16994] loop0: detected capacity change from 0 to 1024
[  359.217655][T16987] exFAT-fs (loop3): error, invalid access to FAT (entry 0xff000008)
[  359.267824][T16987] exFAT-fs (loop3): error, invalid access to FAT (entry 0xff000008)
[  359.280285][T16982] ntfs3: loop2: ino=5, "/" directory corrupted
[  359.296543][T16982] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  359.359724][T16994] EXT4-fs (loop0): Test dummy encryption mode enabled
[  359.404882][  T150] block nbd1: Attempted send on invalid socket
[  359.413088][  T150] blk_update_request: I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  359.429055][ T4844] sierra 7-1:26.87: Sierra USB modem converter detected
[  359.469735][  T150] block nbd1: Attempted send on invalid socket
[  359.476259][  T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  359.489006][ T4991] attempt to access beyond end of device
[  359.489006][ T4991] loop3: rw=1, want=34225520826, limit=256
[  359.493295][ T4844] usb 7-1: Sierra USB modem converter now attached to ttyUSB0
[  359.502230][ T1308] block nbd1: Attempted send on invalid socket
[  359.512355][ T4844] usb 7-1: USB disconnect, device number 15
[  359.514841][ T1308] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  359.524382][ T4844] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  359.536780][ T1308] block nbd1: Attempted send on invalid socket
[  359.546421][ T1308] blk_update_request: I/O error, dev nbd1, sector 18 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  359.557854][  T150] block nbd1: Attempted send on invalid socket
[  359.564192][  T150] blk_update_request: I/O error, dev nbd1, sector 30 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  359.567901][ T4991] Buffer I/O error on dev loop3, logical block 34225520825, lost async page write
[  359.581600][  T150] block nbd1: Attempted send on invalid socket
[  359.587490][ T4991] attempt to access beyond end of device
[  359.587490][ T4991] loop3: rw=1, want=34225520827, limit=256
[  359.590870][  T150] blk_update_request: I/O error, dev nbd1, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  359.614515][ T4844] sierra 7-1:26.87: device disconnected
[  359.615163][T16998] VFS: unable to find oldfs superblock on device nbd1
[  359.624731][ T4991] Buffer I/O error on dev loop3, logical block 34225520826, lost async page write
[  359.638085][ T4991] attempt to access beyond end of device
[  359.638085][ T4991] loop3: rw=1, want=34225520828, limit=256
[  359.649518][ T4991] Buffer I/O error on dev loop3, logical block 34225520827, lost async page write
[  359.659019][ T4991] attempt to access beyond end of device
[  359.659019][ T4991] loop3: rw=1, want=34225520829, limit=256
[  359.661505][ T4178] udevd[4178]: setting mode of /dev/bus/usb/007/015 to 020664 failed: No such file or directory
[  359.670373][ T4991] Buffer I/O error on dev loop3, logical block 34225520828, lost async page write
[  359.670435][ T4991] attempt to access beyond end of device
[  359.670435][ T4991] loop3: rw=1, want=34225520830, limit=256
[  359.670456][ T4991] Buffer I/O error on dev loop3, logical block 34225520829, lost async page write
[  359.708572][T16994] EXT4-fs (loop0): mounted filesystem without journal. Opts: data=ordered,barrier=0x00000000000003ff,stripe=0x0000000000000007,nombcache,nogrpid,inode_readahead_blks=0x0000000000800000,max_batch_time=0x0000000000000000,test_dummy_encryption,,errors=continue. Quota mode: writeback.
[  359.760468][ T4178] udevd[4178]: setting owner of /dev/bus/usb/007/015 to uid=0, gid=0 failed: No such file or directory
[  359.784803][ T4991] attempt to access beyond end of device
[  359.784803][ T4991] loop3: rw=1, want=34225520831, limit=256
[  359.828528][ T4991] Buffer I/O error on dev loop3, logical block 34225520830, lost async page write
[  359.848373][ T4991] attempt to access beyond end of device
[  359.848373][ T4991] loop3: rw=1, want=34225520832, limit=256
[  359.925429][ T4991] Buffer I/O error on dev loop3, logical block 34225520831, lost async page write
[  361.007001][T17069] loop0: detected capacity change from 0 to 64
[  361.171400][T17079] loop1: detected capacity change from 0 to 2048
[  361.204324][ T4844] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  361.212223][ T4227] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  361.228848][T17083] __nla_validate_parse: 10 callbacks suppressed
[  361.228867][T17083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5562'.
[  361.323913][T17079] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  361.415465][T17094] loop2: detected capacity change from 0 to 1024
[  361.470583][T17094] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  361.485257][T17094] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  361.520115][ T4227] usb 7-1: Using ep0 maxpacket: 16
[  361.525509][ T4844] usb 4-1: Using ep0 maxpacket: 16
[  361.534526][T17098] netlink: 'syz.0.5569': attribute type 1 has an invalid length.
[  361.552221][T17094] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  361.608759][T17094] System zones: 0-1, 3-36
[  361.617159][T17094] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  361.664686][ T4844] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  361.677708][ T4844] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  361.696738][ T4844] usb 4-1: config 0 has no interface number 0
[  361.857851][ T4227] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  361.867234][ T4844] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  361.877954][ T4844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.889651][ T4227] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.898028][ T4844] usb 4-1: Product: syz
[  361.902233][ T4844] usb 4-1: Manufacturer: syz
[  361.907284][ T4227] usb 7-1: Product: syz
[  361.911519][ T4227] usb 7-1: Manufacturer: syz
[  361.923100][ T4844] usb 4-1: SerialNumber: syz
[  361.930444][ T4227] usb 7-1: SerialNumber: syz
[  361.939983][ T4844] usb 4-1: config 0 descriptor??
[  361.946401][ T4227] usb 7-1: config 0 descriptor??
[  362.003892][T17115] loop2: detected capacity change from 0 to 512
[  362.049333][T17119] netlink: 'syz.0.5578': attribute type 30 has an invalid length.
[  362.088651][T17115] EXT4-fs (loop2): inline encryption not supported
[  362.118302][T17115] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  362.134370][ T5986] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  362.149344][T17115] EXT4-fs (loop2): 1 truncate cleaned up
[  362.155399][T17115] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,jqfmt=vfsv0,inlinecrypt,noblock_validity,usrjquota=,,errors=continue. Quota mode: none.
[  362.207418][ T4227] speedtch 7-1:0.0: speedtch_bind: wrong device class 68
[  362.215247][ T4227] speedtch 7-1:0.0: usbatm_usb_probe: bind failed: -19!
[  362.264387][ T4844] usb 4-1: Found UVC 0.00 device syz (046d:08f3)
[  362.277790][ T4844] usb 4-1: No valid video chain found.
[  362.304541][ T4844] usb 4-1: USB disconnect, device number 22
[  362.360658][T17128] xt_hashlimit: invalid rate
[  362.410404][T17130] SET target dimension over the limit!
[  362.416254][ T5986] usb 2-1: Using ep0 maxpacket: 32
[  362.435561][ T4227] usb 7-1: USB disconnect, device number 16
[  362.457437][ T5986] usb 2-1: too many configurations: 15, using maximum allowed: 8
[  362.909937][T17149] loop3: detected capacity change from 0 to 4096
[  363.016525][T17149] ntfs: volume version 3.1.
[  363.044620][T17149] __ntfs_error: 7 callbacks suppressed
[  363.044637][T17149] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  363.090131][T17149] ntfs: (device loop3): load_and_init_quota(): Failed to find inode number for $Quota.
[  363.110455][T17149] ntfs: (device loop3): load_system_files(): Failed to load $Quota.  Mounting read-only.  Run chkdsk.
[  363.161951][T17149] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  363.200201][T17149] ntfs: (device loop3): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl.
[  363.238772][T17149] ntfs: (device loop3): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[  363.264412][ T5986] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d
[  363.296950][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.338531][ T5986] usb 2-1: Product: syz
[  363.346662][ T5986] usb 2-1: Manufacturer: syz
[  363.351491][ T5986] usb 2-1: SerialNumber: syz
[  363.378649][ T5986] usb 2-1: config 0 descriptor??
[  363.411062][T17169] loop2: detected capacity change from 0 to 4096
[  363.475577][T17169] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  363.625550][T17169] ntfs: volume version 3.1.
[  363.655450][ T5986] mdc800 2-1:0.0: probe fails -> wrong Number of Configuration
[  363.672348][ T5986] usb 2-1: USB disconnect, device number 22
[  363.755167][T17193] openvswitch: netlink: Actions may not be safe on all matching packets
[  363.894334][T17199] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5617'.
[  364.055031][T17207] loop6: detected capacity change from 0 to 512
[  364.166417][T17207] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  364.229224][T17207] ext4 filesystem being mounted at /748/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  364.362021][T17232] loop2: detected capacity change from 0 to 64
[  364.500450][T17232] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  364.524414][T17232] hfs: filesystem is marked locked, mounting read-only.
[  364.657751][T17245] loop6: detected capacity change from 0 to 512
[  364.748028][T17254] netlink: 'syz.3.5644': attribute type 1 has an invalid length.
[  364.784587][T17245] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  364.802290][T17245] System zones: 1-12
[  364.836782][T17245] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 33619980: comm syz.6.5637: invalid block
[  364.870798][T17245] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.5637: invalid indirect mapped block 1819239214 (level 1)
[  364.887457][T17245] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.5637: bg 0: block 361: padding at end of block bitmap is not set
[  364.991997][T17245] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6178: Corrupt filesystem
[  364.993696][T17260] 8021q: adding VLAN 0 to HW filter on device bond3
[  365.028656][T17264] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5647'.
[  365.056542][T17264] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5647'.
[  365.098159][T17245] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.5637: attempt to clear invalid blocks 33619980 len 1
[  365.119952][T17264] netlink: 81 bytes leftover after parsing attributes in process `syz.0.5647'.
[  365.163558][T17245] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.5637: invalid indirect mapped block 1819239214 (level 0)
[  365.209346][T17274] loop2: detected capacity change from 0 to 64
[  365.217394][T17245] EXT4-fs (loop6): 1 truncate cleaned up
[  365.223620][T17245] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,,errors=continue. Quota mode: none.
[  365.246744][T17277] loop1: detected capacity change from 0 to 16
[  365.271431][T17245] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.5637: Directory hole found for htree index block 0
[  365.284944][T17245] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.5637: Directory hole found for htree index block 0
[  365.297747][T17282] rtc_cmos 00:00: Alarms can be up to one day in the future
[  365.322731][T17277] erofs: (device loop1): mounted with root inode @ nid 36.
[  365.343788][T17274] hfs: filesystem is marked locked, mounting read-only.
[  365.463087][T17286] loop3: detected capacity change from 0 to 1024
[  365.524289][ T5986] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  365.585414][T17295] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5664'.
[  365.857288][T17314] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5671'.
[  365.905244][T17316] Option '                                   Ë´ÄÔ-]' to dns_resolver key: bad/missing value
[  366.054544][ T5986] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  366.074060][ T5986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.082396][ T5986] usb 1-1: Product: syz
[  366.147624][ T5986] usb 1-1: Manufacturer: syz
[  366.161509][ T5986] usb 1-1: SerialNumber: syz
[  366.248476][ T5986] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  366.296267][T17329] loop6: detected capacity change from 0 to 1024
[  366.379881][T17330] loop1: detected capacity change from 0 to 4096
[  366.412186][T17329] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  366.430475][T17330] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  366.439483][T17329] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  366.447711][T17329] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  366.469536][T17329] System zones: 0-1, 3-36
[  366.510497][T17329] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  366.668106][T17330] ntfs3: loop1: failed to convert "c46c" to maciceland
[  366.874411][ T5986] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  366.919713][T17354] loop6: detected capacity change from 0 to 4096
[  367.031785][T17354] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  367.335732][ T4844] usb 1-1: USB disconnect, device number 24
[  367.657464][T17401] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5713'.
[  367.797534][T17410] netlink: 'syz.6.5718': attribute type 21 has an invalid length.
[  367.802746][T17411] loop3: detected capacity change from 0 to 8
[  367.815139][T17410] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5718'.
[  367.871257][T17411] SQUASHFS error: zlib decompression failed, data probably corrupt
[  367.894311][ T5986] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  367.910970][ T5986] ath9k_htc: Failed to initialize the device
[  367.922396][T17411] SQUASHFS error: Failed to read block 0x9b: -5
[  367.936269][ T4844] usb 1-1: ath9k_htc: USB layer deinitialized
[  367.939326][T17411] SQUASHFS error: Unable to read metadata cache entry [99]
[  367.975648][T17411] SQUASHFS error: Unable to read inode 0x127
[  368.360608][T17431] loop3: detected capacity change from 0 to 4096
[  368.371884][T17439] 9pnet: p9_fd_create_unix (17439): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  368.434864][T17431] ntfs3: Unknown parameter 'windows_names'
[  368.670637][T17455] dlm: no locking on control device
[  368.884385][ T5996] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  368.904437][ T4844] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  368.979916][T17470] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5748'.
[  369.092877][T17475] loop0: detected capacity change from 0 to 128
[  369.120727][T17479] loop2: detected capacity change from 0 to 1024
[  369.127276][ T5996] usb 4-1: Using ep0 maxpacket: 8
[  369.158157][T17475] sysv_free_block: flc_count > flc_size
[  369.163929][T17475] sysv_free_block: flc_count > flc_size
[  369.170791][T17475] sysv_free_block: flc_count > flc_size
[  369.217666][T17475] sysv_free_block: flc_count > flc_size
[  369.223874][T17475] sysv_free_block: flc_count > flc_size
[  369.231307][T17475] sysv_free_block: flc_count > flc_size
[  369.238306][T17475] sysv_free_block: flc_count > flc_size
[  369.243975][T17475] sysv_free_block: flc_count > flc_size
[  369.250426][ T5996] usb 4-1: config 0 has an invalid interface number: 110 but max is 0
[  369.274205][T17475] sysv_free_block: flc_count > flc_size
[  369.279976][ T5996] usb 4-1: config 0 has no interface number 0
[  369.290684][T17475] sysv_free_block: flc_count > flc_size
[  369.296637][ T5996] usb 4-1: too many endpoints for config 0 interface 110 altsetting 44: 105, using maximum allowed: 30
[  369.315229][ T4844] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  369.326045][ T5996] usb 4-1: config 0 interface 110 altsetting 44 has 0 endpoint descriptors, different from the interface descriptor's value: 105
[  369.328949][ T4844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  369.347797][T17475] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  369.368350][ T5996] usb 4-1: config 0 interface 110 has no altsetting 0
[  369.383949][ T5016] hfsplus: b-tree write err: -5, ino 4
[  369.512327][ T4844] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  369.522386][ T4844] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  369.530491][ T4844] usb 2-1: Manufacturer: syz
[  369.537547][ T4844] usb 2-1: config 0 descriptor??
[  369.544439][ T5996] usb 4-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[  369.564283][ T5996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.572348][ T5996] usb 4-1: Product: syz
[  369.576967][ T5996] usb 4-1: Manufacturer: syz
[  369.581610][ T5996] usb 4-1: SerialNumber: syz
[  369.596129][ T5996] usb 4-1: config 0 descriptor??
[  369.596622][ T4844] igorplugusb 2-1:0.0: endpoint incorrect
[  369.745712][T17496] device sit0 entered promiscuous mode
[  369.787019][T17496] netlink: 'syz.6.5761': attribute type 1 has an invalid length.
[  369.837139][T17496] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5761'.
[  369.898752][ T5996] usb 4-1: USB disconnect, device number 23
[  369.907947][T17505] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5765'.
[  369.933044][T17505] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5765'.
[  369.959722][ T4844] usb 2-1: USB disconnect, device number 23
[  370.155840][ T1107] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  370.314395][ T5986] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  370.462297][T17524] tmpfs: Bad value for 'mpol'
[  370.517845][ T1107] usb 1-1: config index 0 descriptor too short (expected 26, got 18)
[  370.575545][ T5986] usb 3-1: Using ep0 maxpacket: 16
[  370.670628][  T150] block nbd6: Attempted send on invalid socket
[  370.677005][  T150] blk_update_request: I/O error, dev nbd6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  370.685789][ T1107] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=b7.de
[  370.690202][T17535] VFS: could not find a valid V7 on nbd6.
[  370.701915][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.734501][ T1107] usb 1-1: Product: syz
[  370.738736][ T1107] usb 1-1: Manufacturer: syz
[  370.743404][ T1107] usb 1-1: SerialNumber: syz
[  370.809854][ T1107] usb 1-1: config 0 descriptor??
[  370.855765][ T5986] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  370.867406][ T1107] ttusb_dec_send_command: command bulk message failed: error -22
[  370.897259][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.905653][ T1107] ttusb-dec: probe of 1-1:0.0 failed with error -22
[  370.915422][ T5986] usb 3-1: Product: syz
[  370.919642][ T5986] usb 3-1: Manufacturer: syz
[  370.927247][T17548] loop1: detected capacity change from 0 to 128
[  370.939156][ T4838] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  370.945917][ T5986] usb 3-1: SerialNumber: syz
[  370.963095][ T5986] r8152-cfgselector 3-1: config 0 descriptor??
[  371.007542][T17548] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000004000,usrjquota=,acl,grpjquota=,,errors=continue. Quota mode: none.
[  371.026333][T17548] ext4 filesystem being mounted at /1217/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  371.087160][ T1107] usb 1-1: USB disconnect, device number 25
[  371.364373][ T4838] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1024
[  371.374582][ T4838] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 16
[  371.385405][ T4838] usb 4-1: config 1 interface 0 has no altsetting 0
[  371.464347][ T5986] r8152-cfgselector 3-1: Unknown version 0x0000
[  371.470840][ T5986] r8152-cfgselector 3-1: bad CDC descriptors
[  371.494392][ T5986] r8152-cfgselector 3-1: Unknown version 0x0000
[  371.505379][ T5986] r8152-cfgselector 3-1: USB disconnect, device number 26
[  371.564487][ T4838] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  371.573699][ T4838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.582041][ T4838] usb 4-1: Product: syz
[  371.586392][ T4838] usb 4-1: Manufacturer: syz
[  371.591701][ T4838] usb 4-1: SerialNumber: syz
[  371.614540][T17533] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  371.628741][T17533] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  371.954602][ T4838] cdc_ether: probe of 4-1:1.0 failed with error -71
[  371.965670][ T4838] usb 4-1: USB disconnect, device number 24
[  372.608577][T17568] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5793'.
[  373.000209][T17592] loop3: detected capacity change from 0 to 256
[  373.023133][T17586] loop1: detected capacity change from 0 to 2048
[  373.070785][T17586] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  373.110980][T17596] netlink: 244 bytes leftover after parsing attributes in process `syz.6.5809'.
[  373.118251][T17586] UDF-fs: Scanning with blocksize 512 failed
[  373.134368][ T4844] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  373.174396][T17592] FAT-fs (loop3): Directory bread(block 64) failed
[  373.180996][T17592] FAT-fs (loop3): Directory bread(block 65) failed
[  373.182308][T17586] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  373.234486][T17592] FAT-fs (loop3): Directory bread(block 66) failed
[  373.251514][T17592] FAT-fs (loop3): Directory bread(block 67) failed
[  373.271977][T17592] FAT-fs (loop3): Directory bread(block 68) failed
[  373.316465][T17592] FAT-fs (loop3): Directory bread(block 69) failed
[  373.333514][T17592] FAT-fs (loop3): Directory bread(block 70) failed
[  373.349104][T17592] FAT-fs (loop3): Directory bread(block 71) failed
[  373.358344][T17592] FAT-fs (loop3): Directory bread(block 72) failed
[  373.371618][T17592] FAT-fs (loop3): Directory bread(block 73) failed
[  373.448634][T17592] attempt to access beyond end of device
[  373.448634][T17592] loop3: rw=524288, want=1164, limit=256
[  373.498549][T17592] attempt to access beyond end of device
[  373.498549][T17592] loop3: rw=0, want=1164, limit=256
[  373.514646][ T4844] usb 1-1: config index 0 descriptor too short (expected 29, got 18)
[  373.530433][ T4844] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  373.553949][   T26] audit: type=1800 audit(1762450567.993:20): pid=17592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5807" name="file0" dev="loop3" ino=1048663 res=0 errno=0
[  373.577934][ T4844] usb 1-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f
[  373.587297][ T4844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.626864][ T4844] usb 1-1: config 0 descriptor??
[  373.878508][T17615] overlayfs: missing 'lowerdir'
[  373.904357][ T4844] usb 1-1: string descriptor 0 read error: -71
[  373.904414][ T4844] ldusb 1-1:0.0: Interrupt in endpoint not found
[  373.906698][ T4844] usb 1-1: USB disconnect, device number 26
[  373.967709][T17588] loop2: detected capacity change from 0 to 32768
[  374.061189][T17588] diRead: diIAGRead returned -5
[  374.068320][T17588] jfs_lookup: iget failed on inum 196612
[  374.413386][T17634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5827'.
[  374.587533][T17630] loop1: detected capacity change from 0 to 4096
[  374.650317][T17630] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  374.658266][T17642] loop3: detected capacity change from 0 to 256
[  374.748891][T17642] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  374.807700][T17642] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  374.863558][T17630] ntfs3: loop1: failed to convert "c46c" to cp1250
[  374.876062][T17642] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  374.974564][T17651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5835'.
[  375.127359][T17658] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5837'.
[  375.218393][T17662] loop2: detected capacity change from 0 to 16
[  375.221059][T17658] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5837'.
[  375.291368][T17658] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5837'.
[  375.291423][T17662] erofs: (device loop2): mounted with root inode @ nid 36.
[  375.381991][T17662] erofs: (device loop2): z_erofs_readahead: readahead error at page 1 @ nid 89
[  375.450020][T17662] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 89
[  375.497463][   T26] audit: type=1800 audit(1762450569.943:21): pid=17662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5841" name="file3" dev="loop2" ino=89 res=0 errno=0
[  375.715262][T17678] ALSA: mixer_oss: invalid OSS volume ''
[  375.725794][ T1107] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  375.751952][T17678] ALSA: mixer_oss: invalid OSS volume 'é›'
[  375.838319][T17685] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0
[  375.886413][T17687] loop2: detected capacity change from 0 to 2048
[  375.946537][T17691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5854'.
[  376.014434][ T1107] usb 2-1: Using ep0 maxpacket: 8
[  376.060481][T17687] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (24)
[  376.154540][ T1107] usb 2-1: config 2 has an invalid interface number: 241 but max is 0
[  376.172741][ T1107] usb 2-1: config 2 has no interface number 0
[  376.205722][ T1107] usb 2-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  376.243499][ T1107] usb 2-1: config 2 interface 241 has no altsetting 0
[  376.447927][ T1107] usb 2-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3
[  376.467471][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.503960][ T1107] usb 2-1: Product: syz
[  376.534318][ T1107] usb 2-1: Manufacturer: syz
[  376.539003][ T1107] usb 2-1: SerialNumber: syz
[  376.659927][ T1107] ti_usb_3410_5052 2-1:2.241: TI USB 3410 1 port adapter converter detected
[  376.694306][ T1107] ti_usb_3410_5052 2-1:2.241: missing endpoints
[  376.856339][T17717] loop6: detected capacity change from 0 to 256
[  376.901794][ T4844] usb 2-1: USB disconnect, device number 24
[  376.969310][T17717] exFAT-fs (loop6): bogus data start sector
[  376.987669][T17717] exFAT-fs (loop6): failed to read boot sector
[  377.024266][T17717] exFAT-fs (loop6): failed to recognize exfat type
[  377.217105][T17696] loop3: detected capacity change from 0 to 32768
[  377.302798][T17696] jfs_strtoUCS: char2uni returned -22.
[  377.332620][T17696] charset = cp949, char = 0xd4
[  377.628011][T17713] loop2: detected capacity change from 0 to 32768
[  377.659630][T17739] loop0: detected capacity change from 0 to 512
[  377.729118][T17739] EXT4-fs (loop0): Ignoring removed bh option
[  377.761956][T17739] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  377.807372][T17739] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  377.871886][T17739] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  377.902139][T17739] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  378.010047][T17739] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none.
[  378.037520][T17755] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5883'.
[  378.471031][T17764] loop3: detected capacity change from 0 to 512
[  378.567283][T17761] loop2: detected capacity change from 0 to 4096
[  378.577730][T17753] loop6: detected capacity change from 0 to 8192
[  378.612108][T17761] ntfs: (device loop2): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  378.628004][T17764] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  378.644262][T17761] ntfs: (device loop2): ntfs_read_locked_inode(): $DATA attribute is missing.
[  378.683283][T17761] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  378.700016][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  378.700845][T17753] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal
[  378.706383][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  378.751428][T17753] REISERFS (device loop6): using ordered data mode
[  378.759166][T17753] reiserfs: using flush barriers
[  378.764622][T17761] ntfs: (device loop2): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  378.884526][T17753] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  378.936992][T17761] ntfs: volume version 3.1.
[  378.972744][T17753] REISERFS (device loop6): checking transaction log (loop6)
[  379.027371][T17761] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[  379.108443][T17761] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0x40 as bad.  Run chkdsk.
[  379.277928][T17778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5895'.
[  379.337378][T17780] loop0: detected capacity change from 0 to 1764
[  379.361031][T17778] netlink: 'syz.3.5895': attribute type 1 has an invalid length.
[  379.457868][T17780] iso9660: Corrupted directory entry in block 2 of inode 1920
[  379.596178][T17762] loop1: detected capacity change from 0 to 32768
[  379.647947][T17789] loop3: detected capacity change from 0 to 1024
[  379.731943][T17753] REISERFS (device loop6): Using tea hash to sort names
[  379.782408][T17762] XFS (loop1): Mounting V5 Filesystem
[  379.831691][T17753] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  379.908591][T17811] loop0: detected capacity change from 0 to 512
[  380.008776][T17753] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  380.052347][T17762] XFS (loop1): Ending clean mount
[  380.073389][T17804] loop2: detected capacity change from 0 to 2048
[  380.099374][T17811] EXT4-fs (loop0): orphan cleanup on readonly fs
[  380.114895][T17811] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.5908: bg 0: block 248: padding at end of block bitmap is not set
[  380.173258][T17811] Quota error (device loop0): write_blk: dquota write failed
[  380.199162][T17804] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  380.210771][T17816] loop3: detected capacity change from 0 to 512
[  380.260752][T17811] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  380.278119][T17816] EXT4-fs (loop3): Ignoring removed bh option
[  380.289572][T17816] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  380.315013][ T4184] XFS (loop1): Unmounting Filesystem
[  380.322387][T17816] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  380.335425][T17817] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  380.350765][T17811] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.5908: Failed to acquire dquot type 1
[  380.390660][T17816] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  380.428352][T17816] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006]
[  380.437701][T17811] EXT4-fs (loop0): 1 truncate cleaned up
[  380.470138][T17811] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  380.476698][T17804] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 3044605952
[  380.493388][T17804] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=15)
[  380.561396][T17816] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,bh,noblock_validity,,errors=continue. Quota mode: none.
[  380.610460][T17804] Remounting filesystem read-only
[  380.632831][T17804] NILFS (loop2): error -5 truncating bmap (ino=15)
[  381.390618][T17846] ipt_CLUSTERIP: Please specify destination IP
[  381.878006][T17882] ieee802154 phy0 wpan0: encryption failed: -22
[  381.956338][   T26] audit: type=1326 audit(1762450576.393:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17886 comm="syz.3.5943" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c0ee7d6c9 code=0x0
[  382.276284][T17898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  382.276316][T17898] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  382.276328][T17898] overlayfs: missing 'lowerdir'
[  382.329100][T17894] loop3: detected capacity change from 0 to 4096
[  382.372142][T17894] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match.  Run ntfsfix or chkdsk.
[  382.375377][T17894] ntfs: volume version 3.1.
[  382.596850][T17909] x_tables: duplicate entry at hook 2
[  382.976179][T17939] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5967'.
[  383.034271][T17939] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5967'.
[  383.044626][ T5991] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  383.102698][T17946] device sit0 entered promiscuous mode
[  383.137784][T17946] netlink: 'syz.2.5971': attribute type 1 has an invalid length.
[  383.154325][T17946] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5971'.
[  383.324322][ T5991] usb 7-1: Using ep0 maxpacket: 32
[  383.466762][ T5991] usb 7-1: config 0 has an invalid interface number: 85 but max is 0
[  383.489033][ T5991] usb 7-1: config 0 has no interface number 0
[  383.509489][ T5991] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  383.560076][ T5991] usb 7-1: config 0 interface 85 has no altsetting 0
[  383.788409][ T5991] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  383.811728][ T5991] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.849681][ T5991] usb 7-1: Product: syz
[  383.865174][ T5991] usb 7-1: Manufacturer: syz
[  383.883563][ T5991] usb 7-1: SerialNumber: syz
[  383.901686][ T5991] usb 7-1: config 0 descriptor??
[  384.036932][T17991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5993'.
[  384.135475][T17998] tipc: Trying to set illegal importance in message
[  384.186762][T18003] netlink: 272 bytes leftover after parsing attributes in process `syz.1.5999'.
[  384.306171][T18009] loop1: detected capacity change from 0 to 1024
[  384.348888][T18013] loop3: detected capacity change from 0 to 512
[  384.394231][T18013] EXT4-fs (loop3): Test dummy encryption mode enabled
[  384.415215][T18013] EXT4-fs (loop3): Test dummy encryption mode enabled
[  384.424560][ T5991] appletouch 7-1:0.85: Failed to request geyser raw mode
[  384.431768][ T5991] appletouch: probe of 7-1:0.85 failed with error -5
[  384.438908][ T5983] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  384.485411][T18013] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,minixdf,jqfmt=vfsv1,prjquota,inode_readahead_blks=0x0000000000000100,barrier=0x000000000000000b,errors=remount-ro,auto_da_alloc,test_dummy_encryption,min_batch_time=0x0000. Quota mode: writeback.
[  384.527849][ T5991] usb 7-1: USB disconnect, device number 17
[  384.744226][ T5983] usb 1-1: Using ep0 maxpacket: 8
[  384.823954][T18013] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  384.843683][T18013] EXT4-fs error (device loop3): ext4_add_entry:2486: inode #2: comm syz.3.6004: Directory hole found for htree leaf block 0
[  384.874679][T18013] EXT4-fs (loop3): Remounting filesystem read-only
[  384.890647][ T5983] usb 1-1: config 11 has an invalid interface number: 95 but max is 0
[  384.903504][ T5983] usb 1-1: config 11 has no interface number 0
[  384.913841][ T5983] usb 1-1: config 11 interface 95 altsetting 64 endpoint 0x82 has an invalid bInterval 147, changing to 7
[  384.968372][ T5983] usb 1-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid maxpacket 1293, setting to 1024
[  384.990830][T18044] xt_socket: unknown flags 0x50
[  385.010075][ T5983] usb 1-1: config 11 interface 95 has no altsetting 0
[  385.194433][ T5983] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d
[  385.210365][ T5983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.238817][ T5983] usb 1-1: Product: syz
[  385.253370][ T5983] usb 1-1: Manufacturer: syz
[  385.273713][ T5983] usb 1-1: SerialNumber: syz
[  385.382729][T18062] tmpfs: Bad value for 'mpol'
[  385.451673][T18064] loop3: detected capacity change from 0 to 512
[  385.618628][T18064] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.6026: bad orphan inode 13
[  385.632710][T18045] loop2: detected capacity change from 0 to 32768
[  385.666099][ T5983] usbtouchscreen: probe of 1-1:11.95 failed with error -22
[  385.677084][ T5983] usb 1-1: USB disconnect, device number 27
[  385.695607][T18064] ext4_test_bit(bit=12, block=4) = 1
[  385.700961][T18064] is_bad_inode(inode)=0
[  385.773526][T18064] NEXT_ORPHAN(inode)=0
[  385.785154][T18064] max_ino=32
[  385.788625][T18064] i_nlink=1
[  385.791826][T18064] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  385.839886][T18064] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.6026: Unrecognised inode hash code 20
[  385.852235][T18064] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.6026: Corrupt directory, running e2fsck is recommended
[  385.865847][T18064] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.6026: Unrecognised inode hash code 20
[  385.899190][T18074] loop1: detected capacity change from 0 to 4096
[  385.916157][T18064] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.6026: Corrupt directory, running e2fsck is recommended
[  386.073516][T18074] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  386.988097][T18133] ALSA: mixer_oss: invalid OSS volume 'u'
[  387.105796][T18146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6067'.
[  387.116900][T18145] loop2: detected capacity change from 0 to 512
[  387.132288][T18146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6067'.
[  387.218299][T18145] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  387.247830][T18145] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  387.278928][T18145] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  387.311819][T18145] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  387.336209][T18162] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6074'.
[  387.373424][T18145] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.6065: Allocating blocks 41-42 which overlap fs metadata
[  387.403468][T18145] __quota_error: 9 callbacks suppressed
[  387.403487][T18145] Quota error (device loop2): write_blk: dquota write failed
[  387.467699][T18145] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[  387.497463][T18145] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.6065: Allocating blocks 41-42 which overlap fs metadata
[  387.521998][T18145] Quota error (device loop2): write_blk: dquota write failed
[  387.532848][T18145] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  387.543554][T18145] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.6065: Failed to acquire dquot type 1
[  387.564268][T18145] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  387.584689][T18145] EXT4-fs error (device loop2): ext4_do_update_inode:5218: inode #12: comm syz.2.6065: corrupted inode contents
[  387.645474][T18145] EXT4-fs error (device loop2): ext4_dirty_inode:6054: inode #12: comm syz.2.6065: mark_inode_dirty error
[  387.682074][T18183] loop1: detected capacity change from 0 to 256
[  387.722214][T18145] EXT4-fs error (device loop2): ext4_do_update_inode:5218: inode #12: comm syz.2.6065: corrupted inode contents
[  387.775037][T18145] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #12: comm syz.2.6065: mark_inode_dirty error
[  387.838891][T18183] FAT-fs (loop1): Directory bread(block 64) failed
[  387.857220][T18183] FAT-fs (loop1): Directory bread(block 65) failed
[  387.863904][T18183] FAT-fs (loop1): Directory bread(block 66) failed
[  387.876235][T18145] EXT4-fs error (device loop2): ext4_do_update_inode:5218: inode #12: comm syz.2.6065: corrupted inode contents
[  387.922973][T18183] FAT-fs (loop1): Directory bread(block 67) failed
[  387.947661][T18145] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem
[  387.961624][T18183] FAT-fs (loop1): Directory bread(block 68) failed
[  387.979132][T18183] FAT-fs (loop1): Directory bread(block 69) failed
[  387.986101][T18145] EXT4-fs error (device loop2): ext4_do_update_inode:5218: inode #12: comm syz.2.6065: corrupted inode contents
[  388.004861][T18183] FAT-fs (loop1): Directory bread(block 70) failed
[  388.024291][T18183] FAT-fs (loop1): Directory bread(block 71) failed
[  388.037007][T18145] EXT4-fs error (device loop2): ext4_truncate:4279: inode #12: comm syz.2.6065: mark_inode_dirty error
[  388.070514][T18183] FAT-fs (loop1): Directory bread(block 72) failed
[  388.084611][T18183] FAT-fs (loop1): Directory bread(block 73) failed
[  388.091260][T18145] EXT4-fs error (device loop2) in ext4_process_orphan:343: Corrupt filesystem
[  388.115562][T18145] EXT4-fs (loop2): 1 truncate cleaned up
[  388.139819][T18145] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000002000000,noblock_validity,mblk_io_submit,jqfmt=vfsold,nodelalloc,nomblk_io_submit,usrjquota=,minixdf,resgid=0x00000000000000002,errors=continue. Quota mode: writeback.
[  388.200777][T18204] JFS: discard option not supported on device
[  388.241194][T18145] Quota error (device loop2): write_blk: dquota write failed
[  388.257786][T18204] Mount JFS Failure: -22
[  388.262775][T18204] jfs_mount failed w/return code = -22
[  388.291158][T18145] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  388.327690][T18145] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.6065: Failed to acquire dquot type 1
[  388.434280][ T1107] usb 4-1: new low-speed USB device number 25 using dummy_hcd
[  388.867992][ T1107] usb 4-1: config 0 has an invalid interface number: 65 but max is 5
[  388.887015][ T1107] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  388.929915][ T1107] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 6
[  388.957594][T18240] loop6: detected capacity change from 0 to 256
[  388.960006][ T1107] usb 4-1: config 0 has no interface number 0
[  388.975253][ T5867] Bluetooth: hci1: command 0x0405 tx timeout
[  389.015819][ T1107] usb 4-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 4
[  389.055284][ T1107] usb 4-1: config 0 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23
[  389.124186][ T1107] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  389.163175][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.183515][ T1107] usb 4-1: config 0 descriptor??
[  389.449032][T18251] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  389.462129][ T1107] usb 4-1: USB disconnect, device number 25
[  389.499015][T18257] loop6: detected capacity change from 0 to 512
[  389.511582][T18251] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  389.626598][T18257] EXT4-fs (loop6): orphan cleanup on readonly fs
[  389.638831][T18257] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.6120: inode has both inline data and extents flags
[  389.650731][T18251] syz.2.6118 (18251) used greatest stack depth: 19808 bytes left
[  389.723815][T18257] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.6120: couldn't read orphan inode 15 (err -117)
[  389.795898][T18257] EXT4-fs (loop6): mounted filesystem without journal. Opts: data_err=abort,delalloc,,errors=continue. Quota mode: none.
[  389.955024][T18274] loop2: detected capacity change from 0 to 512
[  389.984254][T18223] loop0: detected capacity change from 0 to 40427
[  390.039399][T18274] EXT4-fs (loop2): Ignoring removed bh option
[  390.046611][T18274] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5
[  390.046611][T18274] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  390.046611][T18274] 
[  390.091318][T18223] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff
[  390.104542][T18274] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  390.166786][T18223] F2FS-fs (loop0): invalid crc value
[  390.187218][T18274] EXT4-fs (loop2): 1 truncate cleaned up
[  390.229360][T18274] EXT4-fs (loop2): mounted filesystem without journal. Opts: bh,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006c,nouser_xattr,nodelalloc,quota,,errors=continue. Quota mode: writeback.
[  390.273246][T18223] F2FS-fs (loop0): Found nat_bits in checkpoint
[  390.538501][T18300] loop2: detected capacity change from 0 to 16
[  390.564795][T18223] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  390.595131][T18300] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  391.011551][T18317] loop1: detected capacity change from 0 to 1764
[  391.384233][ T1107] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  391.525610][T18339] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6152'.
[  391.674236][ T1107] usb 4-1: Using ep0 maxpacket: 16
[  391.770408][T18311] loop6: detected capacity change from 0 to 32768
[  391.792479][T18351] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6160'.
[  391.849056][T18311] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop6 scanned by syz.6.6140 (18311)
[  391.905756][T18311] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm
[  391.940717][T18311] BTRFS info (device loop6): using free space tree
[  391.958209][T18311] BTRFS info (device loop6): has skinny extents
[  391.968669][ T1107] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  391.984149][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.002733][ T1107] usb 4-1: Product: syz
[  392.012926][ T1107] usb 4-1: Manufacturer: syz
[  392.028298][ T1107] usb 4-1: SerialNumber: syz
[  392.045726][ T1107] usb 4-1: config 0 descriptor??
[  392.088366][ T1107] visor 4-1:0.0: Sony Clie 3.5 converter detected
[  392.098952][T18373] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  392.124619][T18373] overlayfs: missing 'lowerdir'
[  392.308018][ T1107] usb 4-1: clie_3_5_startup: get config number bad return length: 0
[  392.323948][T18311] BTRFS info (device loop6): enabling ssd optimizations
[  392.339173][ T1107] visor: probe of 4-1:0.0 failed with error -5
[  392.364405][T18396] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6170'.
[  392.373613][T18396] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6170'.
[  392.384918][T18396] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6170'.
[  392.438403][T18400] device geneve5 entered promiscuous mode
[  392.536748][ T5991] usb 4-1: USB disconnect, device number 26
[  392.982314][T18422] loop2: detected capacity change from 0 to 8
[  393.013701][ T4378] udevd[4378]: incorrect cramfs checksum on /dev/loop2
[  393.082026][T18422] cramfs: bad data blocksize 3222268820
[  393.102646][T18422] cramfs: Error -3 while decompressing!
[  393.137505][    C1] vkms_vblank_simulate: vblank timer overrun
[  393.172342][T18422] cramfs: ffffffff961ed0dc(16)->ffff888057bcf000(4096)
[  393.184661][T18422] cramfs: bad data blocksize 3222268820
[  393.190443][   T26] audit: type=1800 audit(1762450587.633:23): pid=18422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6185" name="file2" dev="loop2" ino=348 res=0 errno=0
[  393.346469][T18435] xt_cgroup: xt_cgroup: no path or classid specified
[  393.423407][T18438] loop0: detected capacity change from 0 to 128
[  393.508232][   T26] audit: type=1400 audit(1762450587.953:24): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=18440 comm="syz.3.6193"
[  393.557538][T18438] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  393.618708][T18438] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  393.630745][T18450] mmap: syz.3.6198 (18450) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  393.837039][T18458] loop3: detected capacity change from 0 to 2048
[  393.964907][T18472] netlink: 'syz.2.6208': attribute type 6 has an invalid length.
[  393.994795][T18458] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  394.005611][ T5988] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  394.315159][T18488] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  394.445868][ T5988] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  394.463234][ T5988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.483570][ T5988] usb 2-1: config 0 descriptor??
[  394.532666][T18500] loop0: detected capacity change from 0 to 512
[  394.554411][ T4227] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  394.589328][T18500] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.6221: bad orphan inode 15
[  394.619649][T18500] ext4_test_bit(bit=14, block=5) = 0
[  394.625245][T18500] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,journal_dev=0x0000000000000003,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none.
[  394.665608][T18507] netlink: 'syz.3.6224': attribute type 10 has an invalid length.
[  394.673850][T18507] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6224'.
[  394.683853][T18507] device team0 entered promiscuous mode
[  394.696802][T18507] device team_slave_0 entered promiscuous mode
[  394.703195][T18507] device team_slave_1 entered promiscuous mode
[  394.711834][T18507] bridge0: port 3(team0) entered blocking state
[  394.719859][T18507] bridge0: port 3(team0) entered disabled state
[  394.939591][ T4227] usb 3-1: config 0 has an invalid interface number: 64 but max is 0
[  394.964230][ T4227] usb 3-1: config 0 has no interface number 0
[  394.994472][ T5988] hackrf 2-1:0.0: usb_control_msg() failed -71 request 0f
[  395.001666][ T5988] hackrf 2-1:0.0: Could not detect board
[  395.021371][ T5988] hackrf: probe of 2-1:0.0 failed with error -71
[  395.042803][ T5988] usb 2-1: USB disconnect, device number 25
[  395.124445][ T4227] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[  395.133589][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.164548][ T4227] usb 3-1: Product: syz
[  395.168777][ T4227] usb 3-1: Manufacturer: syz
[  395.189635][ T4227] usb 3-1: SerialNumber: syz
[  395.202542][T18527] loop3: detected capacity change from 0 to 4096
[  395.219202][ T4227] usb 3-1: config 0 descriptor??
[  395.236566][ T5867] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  395.276223][T18527] EXT4-fs (loop3): Test dummy encryption mode enabled
[  395.291591][T18536] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6238'.
[  395.309925][T18527] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  395.333854][T18527] System zones: 0-5
[  395.351273][T18527] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,delalloc,resuid=0x0000000000000000,test_dummy_encryption,nodiscard,data_err=ignore,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  395.513333][ T5867] usb 7-1: Using ep0 maxpacket: 32
[  395.565743][T18544] loop3: detected capacity change from 0 to 64
[  395.629793][ T4227] usb 3-1: Found UVC 0.08 device syz (046d:0823)
[  395.646455][ T4227] usb 3-1: No valid video chain found.
[  395.674378][ T5867] usb 7-1: unable to get BOS descriptor or descriptor too short
[  395.705155][ T4227] usb 3-1: USB disconnect, device number 27
[  395.756144][ T5867] usb 7-1: config 3 has an invalid interface number: 224 but max is 0
[  395.774970][ T5867] usb 7-1: config 3 has no interface number 0
[  395.786880][T18555] QAT: failed to copy from user cfg_data.
[  395.791400][ T5867] usb 7-1: config 3 interface 224 altsetting 9 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  395.838120][ T5867] usb 7-1: config 3 interface 224 has no altsetting 0
[  395.986255][T18561] loop0: detected capacity change from 0 to 4096
[  396.017503][ T5867] usb 7-1: New USB device found, idVendor=1199, idProduct=9055, bcdDevice=35.1f
[  396.036568][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.072676][T18561] EXT4-fs (loop0): Test dummy encryption mode enabled
[  396.080252][ T5867] usb 7-1: Product: syz
[  396.091042][ T5867] usb 7-1: Manufacturer: syz
[  396.100610][T18561] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  396.144257][ T5867] usb 7-1: SerialNumber: syz
[  396.145908][T18561] System zones: 0-5
[  396.165947][T18561] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,resuid=0x0000000000000000,test_dummy_encryption,nodiscard,data_err=ignore,acl,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback.
[  396.284006][T18580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6257'.
[  396.411766][T18584] xt_NFQUEUE: number of total queues is 0
[  396.474941][ T5867] rndis_host 7-1:3.224: invalid descriptor buffer length
[  396.482172][ T5867] usb 7-1: bad CDC descriptors
[  396.550104][ T5867] usb 7-1: USB disconnect, device number 18
[  396.621999][T18593] loop2: detected capacity change from 0 to 1024
[  396.772157][ T4991] hfsplus: b-tree write err: -5, ino 4
[  397.114783][T18620] device wireguard0 entered promiscuous mode
[  397.325798][T18638] loop2: detected capacity change from 0 to 16
[  397.401436][T18638] erofs: (device loop2): mounted with root inode @ nid 36.
[  397.461936][T18638] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  397.512671][T18638] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117]
[  397.586866][T18655] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6296'.
[  397.622455][T18655] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6296'.
[  397.684773][T18655] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6296'.
[  398.257332][ T4227] usb 7-1: new full-speed USB device number 19 using dummy_hcd
[  398.314777][ T5867] usb 4-1: new full-speed USB device number 27 using dummy_hcd
[  398.367609][T18653] loop1: detected capacity change from 0 to 40427
[  398.388547][T18653] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  398.397051][T18653] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  398.422304][T18681] loop2: detected capacity change from 0 to 736
[  398.431260][T18653] F2FS-fs (loop1): invalid crc value
[  398.469094][T18653] F2FS-fs (loop1): Found nat_bits in checkpoint
[  398.570549][T18681] rock: directory entry would overflow storage
[  398.578314][T18653] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  398.594460][T18681] rock: sig=0x3b10, size=4, remaining=3
[  398.601513][T18653] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  398.624633][ T4227] usb 7-1: config 0 has an invalid interface number: 110 but max is 0
[  398.641776][ T4227] usb 7-1: config 0 has no interface number 0
[  398.659077][ T4227] usb 7-1: config 0 interface 110 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  398.686633][ T5867] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[  398.698751][ T4227] usb 7-1: config 0 interface 110 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  398.727167][ T5867] usb 4-1: config 0 has no interface number 0
[  398.744208][ T5867] usb 4-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023
[  398.767623][ T4227] usb 7-1: config 0 interface 110 has no altsetting 0
[  398.774864][ T5867] usb 4-1: config 0 interface 128 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64
[  398.790558][ T5867] usb 4-1: config 0 interface 128 altsetting 6 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  398.802756][ T5867] usb 4-1: config 0 interface 128 has no altsetting 0
[  398.944404][ T4227] usb 7-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55
[  398.953513][ T4227] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.985259][ T4227] usb 7-1: Product: syz
[  398.994617][ T5867] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91
[  399.013825][ T4227] usb 7-1: Manufacturer: syz
[  399.024321][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.033077][ T5867] usb 4-1: Product: syz
[  399.037834][ T4227] usb 7-1: SerialNumber: syz
[  399.055281][ T4227] usb 7-1: config 0 descriptor??
[  399.060439][ T5867] usb 4-1: Manufacturer: syz
[  399.071125][ T5867] usb 4-1: SerialNumber: syz
[  399.078736][ T5867] usb 4-1: config 0 descriptor??
[  399.117310][T18704] loop2: detected capacity change from 0 to 2048
[  399.138380][ T5867] radio-si470x 4-1:0.128: could not find interrupt in endpoint
[  399.146436][ T5867] radio-si470x: probe of 4-1:0.128 failed with error -5
[  399.154948][ T5867] usbhid 4-1:0.128: couldn't find an input interrupt endpoint
[  399.198016][T18704] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  399.315129][ T4227] cdc_subset: probe of 7-1:0.110 failed with error -22
[  399.369975][ T4227] usb 4-1: USB disconnect, device number 27
[  399.517405][T18714] comedi comedi1: Minor 12032 is invalid!
[  399.535491][ T5996] usb 7-1: USB disconnect, device number 19
[  399.695120][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6328'.
[  399.760395][T18726] loop0: detected capacity change from 0 to 2048
[  399.782261][T18728] xt_l2tp: invalid flags combination: c
[  399.943934][T18726] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  400.356900][T18769] SET target dimension over the limit!
[  400.574716][T18783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6356'.
[  401.148103][T18805] loop1: detected capacity change from 0 to 4096
[  401.231845][T18823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6376'.
[  401.251250][T18805] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  401.262234][T18823] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5)
[  401.307906][T18805] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  401.499894][ T4184] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  401.583784][T18835] loop2: detected capacity change from 0 to 64
[  401.607369][T18763] loop6: detected capacity change from 0 to 40427
[  401.649261][T18840] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6384'.
[  401.705090][T18763] F2FS-fs (loop6): invalid crc value
[  401.746708][T18763] F2FS-fs (loop6): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  401.764025][T18843] xt_TCPMSS: Only works on TCP SYN packets
[  401.834894][T18763] F2FS-fs (loop6): Found nat_bits in checkpoint
[  402.049296][T18763] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0
[  402.119400][T18763] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1
[  402.160326][T18763] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  402.467766][T18879] netlink: 220 bytes leftover after parsing attributes in process `syz.0.6401'.
[  402.529671][T18885] loop1: detected capacity change from 0 to 64
[  403.057619][T18917] SET target dimension over the limit!
[  403.339189][T18938] loop6: detected capacity change from 0 to 64
[  403.443657][T18947] loop2: detected capacity change from 0 to 1024
[  403.498581][T18953] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring
[  403.511881][T18938] attempt to access beyond end of device
[  403.511881][T18938] loop6: rw=0, want=2060, limit=64
[  403.558594][T18938] Buffer I/O error on dev loop6, logical block 1029, async page read
[  403.588765][   T26] audit: type=1326 audit(1762450598.033:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18956 comm="syz.0.6441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6e6476c9 code=0x7ffc0000
[  403.621489][T18938] attempt to access beyond end of device
[  403.621489][T18938] loop6: rw=0, want=2060, limit=64
[  403.649373][T18938] Buffer I/O error on dev loop6, logical block 1029, async page read
[  403.670902][   T26] audit: type=1326 audit(1762450598.053:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18956 comm="syz.0.6441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f8c6e6476c9 code=0x7ffc0000
[  403.695286][   T26] audit: type=1326 audit(1762450598.053:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18956 comm="syz.0.6441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6e6476c9 code=0x7ffc0000
[  403.824997][   T26] audit: type=1326 audit(1762450598.053:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18956 comm="syz.0.6441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6e6476c9 code=0x7ffc0000
[  404.017369][T18983] loop3: detected capacity change from 0 to 8
[  404.114300][T18985] ipt_CLUSTERIP: unknown mode 1850529072
[  404.122096][T18988] loop2: detected capacity change from 0 to 128
[  404.221575][T18989] loop6: detected capacity change from 0 to 2048
[  404.290316][T18989] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  404.326194][T18993] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.6458' sets config #4096
[  404.371510][T18989] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  404.742916][T19015] loop2: detected capacity change from 0 to 1024
[  404.940089][T18967] loop1: detected capacity change from 0 to 32768
[  404.979144][T18967] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 scanned by syz.1.6446 (18967)
[  405.056193][T18967] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  405.100836][T19037] netlink: 'syz.2.6481': attribute type 24 has an invalid length.
[  405.107057][T18967] BTRFS info (device loop1): using free space tree
[  405.118022][T19034] loop0: detected capacity change from 0 to 2048
[  405.172718][T18967] BTRFS info (device loop1): has skinny extents
[  405.243046][T19051] loop2: detected capacity change from 0 to 64
[  405.329369][T19034] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,lazytime,stripe=0x0000000000001200,quota,,errors=continue. Quota mode: writeback.
[  405.396178][T18967] BTRFS info (device loop1): enabling ssd optimizations
[  405.400757][T19034] EXT4-fs error (device loop0): ext4_find_extent:929: inode #2: comm syz.0.6479: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  405.822795][T19090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge4: link becomes ready
[  406.206409][ T4764] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 9 /dev/loop1 scanned by udevd (4764)
[  406.367131][T19110] tmpfs: Bad value for 'mpol'
[  406.622332][T19120] loop0: detected capacity change from 0 to 256
[  406.801897][T19120] FAT-fs (loop0): Directory bread(block 64) failed
[  406.844208][T19120] FAT-fs (loop0): Directory bread(block 65) failed
[  406.864365][T19120] FAT-fs (loop0): Directory bread(block 66) failed
[  406.871013][T19120] FAT-fs (loop0): Directory bread(block 67) failed
[  406.946377][T19120] FAT-fs (loop0): Directory bread(block 68) failed
[  406.952987][T19120] FAT-fs (loop0): Directory bread(block 69) failed
[  407.032265][T19131] loop3: detected capacity change from 0 to 64
[  407.044328][T19120] FAT-fs (loop0): Directory bread(block 70) failed
[  407.051741][T19120] FAT-fs (loop0): Directory bread(block 71) failed
[  407.107423][T19120] FAT-fs (loop0): Directory bread(block 72) failed
[  407.138240][T19120] FAT-fs (loop0): Directory bread(block 73) failed
[  407.152193][T19133] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6517'.
[  407.198441][T19133] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6517'.
[  407.572305][T19098] loop2: detected capacity change from 0 to 32768
[  407.785080][T19151] loop0: detected capacity change from 0 to 136
[  407.892270][T19155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6529'.
[  407.964335][T19155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6529'.
[  408.017601][T19155] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6529'.
[  408.304488][T19175] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6538'.
[  408.551341][T19135] loop1: detected capacity change from 0 to 32768
[  408.770851][T19189] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6545'.
[  408.893779][T19193] ptrace attach of "./syz-executor exec"[4184] was attempted by ""[19193]
[  409.156259][T19169] loop2: detected capacity change from 0 to 32768
[  409.175095][T19198] device bond4 entered promiscuous mode
[  409.198656][T19169] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.6535 (19169)
[  409.254782][T19169] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  409.289360][T19169] BTRFS info (device loop2): disabling free space tree
[  409.323820][T19169] BTRFS info (device loop2): turning on flush-on-commit
[  409.376153][T19169] BTRFS info (device loop2): enabling auto defrag
[  409.382729][T19169] BTRFS info (device loop2): force clearing of disk cache
[  409.440045][T19169] BTRFS info (device loop2): setting nodatacow, compression disabled
[  409.481332][T19169] BTRFS info (device loop2): turning on async discard
[  409.494634][T19169] BTRFS info (device loop2): has skinny extents
[  409.522335][T19207] loop3: detected capacity change from 0 to 4096
[  409.669766][T19183] loop0: detected capacity change from 0 to 32768
[  409.704173][T19228] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  409.801944][T19183] (syz.0.6542,19183,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  409.858120][T19183] (syz.0.6542,19183,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  409.930929][T19183] JBD2: Ignoring recovery information on journal
[  410.026415][T19236] loop1: detected capacity change from 0 to 8192
[  410.071882][T19169] BTRFS info (device loop2): enabling ssd optimizations
[  410.177398][T19236] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  410.185322][T19249] loop3: detected capacity change from 0 to 1024
[  410.200694][T19253] loop6: detected capacity change from 0 to 512
[  410.210765][T19236] REISERFS (device loop1): using ordered data mode
[  410.217784][T19236] reiserfs: using flush barriers
[  410.235539][T19249] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  410.255868][T19183] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  410.301578][T19236] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  410.345325][T19249] EXT4-fs error (device loop3): ext4_get_journal_inode:5160: inode #32: comm syz.3.6563: iget: special inode unallocated
[  410.365904][T19253] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  410.384621][T19236] REISERFS (device loop1): checking transaction log (loop1)
[  410.392651][T19249] EXT4-fs (loop3): no journal found
[  410.399765][T19249] EXT4-fs (loop3): can't get journal size
[  410.416349][T19249] EXT4-fs (loop3): filesystem is read-only
[  410.417172][T19253] ext4 filesystem being mounted at /918/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  410.422221][T19249] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none.
[  410.482854][T19183] 
[  410.485413][T19183] ======================================================
[  410.485952][T19236] REISERFS (device loop1): Using r5 hash to sort names
[  410.492447][T19183] WARNING: possible circular locking dependency detected
[  410.492471][T19183] syzkaller #0 Not tainted
[  410.510764][T19183] ------------------------------------------------------
[  410.518032][T19183] syz.0.6542/19183 is trying to acquire lock:
[  410.524115][T19183] ffff88805e9a3f60 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e5/0x270
[  410.535025][T19183] 
[  410.535025][T19183] but task is already holding lock:
[  410.542407][T19183] ffff88805e9a42c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1c7/0x270
[  410.550539][T19236] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  410.554989][T19183] 
[  410.554989][T19183] which lock already depends on the new lock.
[  410.554989][T19183] 
[  410.554999][T19183] 
[  410.554999][T19183] the existing dependency chain (in reverse order) is:
[  410.555006][T19183] 
[  410.555006][T19183] -> #6 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8){+.+.}-{3:3}:
[  410.555046][T19183]        down_write+0x38/0x60
[  410.555075][T19183]        ocfs2_lock_global_qf+0x1c7/0x270
[  410.555095][T19183]        ocfs2_acquire_dquot+0x29d/0xaf0
[  410.555113][T19183]        dqget+0x778/0xeb0
[  410.555133][T19183]        dquot_set_dqblk+0x27/0xf90
[  410.555154][T19183]        quota_setquota+0x4ac/0x530
[  410.555176][T19183]        __se_sys_quotactl+0x295/0x6c0
[  410.630349][T19183]        do_syscall_64+0x4c/0xa0
[  410.635299][T19183]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  410.641716][T19183] 
[  410.641716][T19183] -> #5 (&dquot->dq_lock){+.+.}-{3:3}:
[  410.649365][T19183]        __mutex_lock_common+0x1eb/0x2390
[  410.655092][T19183]        mutex_lock_nested+0x17/0x20
[  410.660381][T19183]        dquot_commit+0x5a/0x410
[  410.665328][T19183]        ext4_write_dquot+0x1f0/0x360
[  410.670701][T19183]        mark_all_dquot_dirty+0xf9/0x400
[  410.676331][T19183]        __dquot_free_space+0x7ca/0xb90
[  410.681880][T19183]        ext4_free_blocks+0x1af5/0x2480
[  410.687435][T19183]        ext4_ext_remove_space+0x1eaa/0x43a0
[  410.693417][T19183]        ext4_ext_truncate+0x192/0x240
[  410.698881][T19183]        ext4_truncate+0x9f1/0x10d0
[  410.704081][T19183]        ext4_evict_inode+0xb43/0x1080
[  410.709545][T19183]        evict+0x485/0x870
[  410.713963][T19183]        ext4_orphan_cleanup+0xaa9/0x12e0
[  410.719683][T19183]        ext4_fill_super+0x92f0/0x9a60
[  410.725148][T19183]        mount_bdev+0x287/0x3c0
[  410.730000][T19183]        legacy_get_tree+0xe6/0x180
[  410.735294][T19183]        vfs_get_tree+0x88/0x270
[  410.740229][T19183]        do_new_mount+0x24a/0xa40
[  410.745265][T19183]        __se_sys_mount+0x2d6/0x3c0
[  410.750468][T19183]        do_syscall_64+0x4c/0xa0
[  410.755403][T19183]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  410.761844][T19183] 
[  410.761844][T19183] -> #4 (&ei->i_data_sem){++++}-{3:3}:
[  410.769492][T19183]        down_write+0x38/0x60
[  410.774174][T19183]        ext4_truncate+0x96d/0x10d0
[  410.779372][T19183]        ext4_setattr+0xffe/0x19e0
[  410.784488][T19183]        notify_change+0xbcd/0xee0
[  410.789610][T19183]        do_truncate+0x197/0x220
[  410.794555][T19183]        do_sys_ftruncate+0x31b/0x3d0
[  410.799935][T19183]        do_syscall_64+0x4c/0xa0
[  410.804881][T19183]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  410.811311][T19183] 
[  410.811311][T19183] -> #3 (jbd2_handle){++++}-{0:0}:
[  410.818701][T19183]        start_this_handle+0x1338/0x15a0
[  410.824336][T19183]        jbd2__journal_start+0x2b7/0x5a0
[  410.830064][T19183]        jbd2_journal_start+0x26/0x30
[  410.835441][T19183]        ocfs2_start_trans+0x374/0x6c0
[  410.840912][T19183]        ocfs2_shutdown_local_alloc+0x1fd/0xa10
[  410.847155][T19183]        ocfs2_dismount_volume+0x1de/0x880
[  410.853061][T19183]        generic_shutdown_super+0x130/0x300
[  410.859047][T19183]        kill_block_super+0x7c/0xe0
[  410.864253][T19183]        deactivate_locked_super+0x93/0xf0
[  410.870068][T19183]        cleanup_mnt+0x418/0x4d0
[  410.875017][T19183]        task_work_run+0x125/0x1a0
[  410.880134][T19183]        exit_to_user_mode_loop+0x10f/0x130
[  410.886037][T19183]        exit_to_user_mode_prepare+0xee/0x180
[  410.892108][T19183]        syscall_exit_to_user_mode+0x16/0x40
[  410.898124][T19183]        do_syscall_64+0x58/0xa0
[  410.903069][T19183]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  410.909486][T19183] 
[  410.909486][T19183] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  410.918005][T19183]        down_read+0x44/0x2e0
[  410.922716][T19183]        ocfs2_start_trans+0x368/0x6c0
[  410.928181][T19183]        ocfs2_shutdown_local_alloc+0x1fd/0xa10
[  410.934423][T19183]        ocfs2_dismount_volume+0x1de/0x880
[  410.940237][T19183]        generic_shutdown_super+0x130/0x300
[  410.946141][T19183]        kill_block_super+0x7c/0xe0
[  410.951349][T19183]        deactivate_locked_super+0x93/0xf0
[  410.957278][T19183]        cleanup_mnt+0x418/0x4d0
[  410.962305][T19183]        task_work_run+0x125/0x1a0
[  410.967421][T19183]        exit_to_user_mode_loop+0x10f/0x130
[  410.973326][T19183]        exit_to_user_mode_prepare+0xee/0x180
[  410.979395][T19183]        syscall_exit_to_user_mode+0x16/0x40
[  410.985470][T19183]        do_syscall_64+0x58/0xa0
[  410.990412][T19183]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  410.996830][T19183] 
[  410.996830][T19183] -> #1 (sb_internal#4){.+.+}-{0:0}:
[  411.004309][T19183]        ocfs2_start_trans+0x269/0x6c0
[  411.009779][T19183]        ocfs2_write_info+0x117/0x350
[  411.015149][T19183]        dquot_set_dqinfo+0x459/0x6c0
[  411.020535][T19183]        quota_setinfo+0x2a4/0x2b0
[  411.025738][T19183]        __se_sys_quotactl+0x295/0x6c0
[  411.031219][T19183]        do_syscall_64+0x4c/0xa0
[  411.036162][T19183]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  411.042583][T19183] 
[  411.042583][T19183] -> #0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}:
[  411.051473][T19183]        __lock_acquire+0x2c33/0x7c60
[  411.056853][T19183]        lock_acquire+0x197/0x3f0
[  411.062001][T19183]        down_write+0x38/0x60
[  411.066681][T19183]        ocfs2_lock_global_qf+0x1e5/0x270
[  411.072418][T19183]        ocfs2_acquire_dquot+0x29d/0xaf0
[  411.078051][T19183]        dqget+0x778/0xeb0
[  411.082470][T19183]        dquot_set_dqblk+0x27/0xf90
[  411.087676][T19183]        quota_setquota+0x4ac/0x530
[  411.092876][T19183]        __se_sys_quotactl+0x295/0x6c0
[  411.098341][T19183]        do_syscall_64+0x4c/0xa0
[  411.103285][T19183]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  411.109704][T19183] 
[  411.109704][T19183] other info that might help us debug this:
[  411.109704][T19183] 
[  411.119929][T19183] Chain exists of:
[  411.119929][T19183]   &ocfs2_quota_ip_alloc_sem_key --> &dquot->dq_lock --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8
[  411.119929][T19183] 
[  411.137050][T19183]  Possible unsafe locking scenario:
[  411.137050][T19183] 
[  411.144502][T19183]        CPU0                    CPU1
[  411.149860][T19183]        ----                    ----
[  411.155223][T19183]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8);
[  411.162640][T19183]                                lock(&dquot->dq_lock);
[  411.169579][T19183]                                lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8);
[  411.179391][T19183]   lock(&ocfs2_quota_ip_alloc_sem_key);
[  411.185112][T19183] 
[  411.185112][T19183]  *** DEADLOCK ***
[  411.185112][T19183] 
[  411.193254][T19183] 3 locks held by syz.0.6542/19183:
[  411.198446][T19183]  #0: ffff8880191c00e0 (&type->s_umount_key#72){++++}-{3:3}, at: user_get_super+0x118/0x240
[  411.208660][T19183]  #1: ffff88804e46e0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x290/0xaf0
[  411.218679][T19183]  #2: ffff88805e9a42c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1c7/0x270
[  411.231659][T19183] 
[  411.231659][T19183] stack backtrace:
[  411.237546][T19183] CPU: 0 PID: 19183 Comm: syz.0.6542 Not tainted syzkaller #0
[  411.245010][T19183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  411.255087][T19183] Call Trace:
[  411.258379][T19183]  <TASK>
[  411.261316][T19183]  dump_stack_lvl+0x168/0x230
[  411.266040][T19183]  ? load_image+0x3b0/0x3b0
[  411.270595][T19183]  ? show_regs_print_info+0x20/0x20
[  411.275811][T19183]  ? print_circular_bug+0x12b/0x1a0
[  411.281031][T19183]  check_noncircular+0x274/0x310
[  411.285999][T19183]  ? add_chain_block+0x940/0x940
[  411.290956][T19183]  ? lockdep_lock+0xdc/0x1e0
[  411.295554][T19183]  ? lockdep_unlock+0x134/0x2d0
[  411.300434][T19183]  ? lockdep_lock+0x1e0/0x1e0
[  411.305119][T19183]  ? mark_lock+0x94/0x320
[  411.309455][T19183]  __lock_acquire+0x2c33/0x7c60
[  411.314321][T19183]  ? ocfs2_read_inode_block_full+0x1a0/0x1a0
[  411.320334][T19183]  ? verify_lock_unused+0x140/0x140
[  411.325544][T19183]  ? ocfs2_inode_lock_full_nested+0xcb3/0x1b20
[  411.331702][T19183]  ? __lock_acquire+0x13ad/0x7c60
[  411.336766][T19183]  lock_acquire+0x197/0x3f0
[  411.341278][T19183]  ? ocfs2_lock_global_qf+0x1e5/0x270
[  411.346665][T19183]  ? __might_sleep+0xf0/0xf0
[  411.351559][T19183]  ? preempt_count_add+0x8d/0x190
[  411.356602][T19183]  ? read_lock_is_recursive+0x10/0x10
[  411.361990][T19183]  ? rwsem_write_trylock+0x12f/0x1b0
[  411.367390][T19183]  ? clear_nonspinnable+0x60/0x60
[  411.372423][T19183]  ? __rwlock_init+0x140/0x140
[  411.377196][T19183]  down_write+0x38/0x60
[  411.381359][T19183]  ? ocfs2_lock_global_qf+0x1e5/0x270
[  411.386734][T19183]  ocfs2_lock_global_qf+0x1e5/0x270
[  411.391937][T19183]  ? dqget+0x6f8/0xeb0
[  411.396023][T19183]  ? lock_buffer+0x80/0x80
[  411.400446][T19183]  ocfs2_acquire_dquot+0x29d/0xaf0
[  411.405561][T19183]  ? dqget+0x3b0/0xeb0
[  411.409632][T19183]  ? ocfs2_destroy_dquot+0x40/0x40
[  411.414751][T19183]  dqget+0x778/0xeb0
[  411.418653][T19183]  dquot_set_dqblk+0x27/0xf90
[  411.423334][T19183]  quota_setquota+0x4ac/0x530
[  411.428019][T19183]  ? quota_getnextquota+0x450/0x450
[  411.433225][T19183]  ? bpf_lsm_capable+0x5/0x10
[  411.437911][T19183]  ? do_quotactl+0x4f3/0x710
[  411.442511][T19183]  __se_sys_quotactl+0x295/0x6c0
[  411.447481][T19183]  ? __x64_sys_quotactl+0xa0/0xa0
[  411.452508][T19183]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  411.458497][T19183]  ? lock_chain_count+0x20/0x20
[  411.463354][T19183]  ? vtime_user_exit+0x2dc/0x400
[  411.468296][T19183]  ? lockdep_hardirqs_on+0x94/0x140
[  411.473516][T19183]  do_syscall_64+0x4c/0xa0
[  411.477956][T19183]  ? clear_bhb_loop+0x30/0x80
[  411.482685][T19183]  ? clear_bhb_loop+0x30/0x80
[  411.487374][T19183]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  411.493282][T19183] RIP: 0033:0x7f8c6e6476c9
[  411.497704][T19183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  411.517314][T19183] RSP: 002b:00007f8c6c8ae038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
[  411.525734][T19183] RAX: ffffffffffffffda RBX: 00007f8c6e89dfa0 RCX: 00007f8c6e6476c9
[  411.533818][T19183] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffff80000801
[  411.541817][T19183] RBP: 00007f8c6e6c9f91 R08: 0000000000000000 R09: 0000000000000000
[  411.549813][T19183] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000
[  411.557790][T19183] R13: 00007f8c6e89e038 R14: 00007f8c6e89dfa0 R15: 00007ffe8c012e08
[  411.565774][T19183]  </TASK>
[  411.568880][    C0] vkms_vblank_simulate: vblank timer overrun
[  411.822753][ T4186] ocfs2: Unmounting device (7,0) on (node local)