last executing test programs:

4m46.255209397s ago: executing program 1 (id=384):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x200214, &(0x7f0000000000)=ANY=[], 0x1, 0x250, &(0x7f0000000740)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0/file3\x00', 0x2800000, 0x0, 0x1, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file3\x00', &(0x7f0000000180), 0x100)

4m46.191709287s ago: executing program 1 (id=386):
r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f00000000c0)=0x31)
ioctl$CEC_S_MODE(r0, 0xc05c6104, &(0x7f00000000c0)=0x4)

4m46.112431935s ago: executing program 1 (id=387):
r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x5, 0x40240)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000340)={0x9f0000, 0x4, 0x81, 0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x980923, 0x8001, '\x00', @value64=0x7fffffff000000}})

4m46.112155673s ago: executing program 1 (id=388):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0x1513, &(0x7f0000002d00)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000d40))

4m45.990238421s ago: executing program 1 (id=389):
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x96, 0xc9, 0xff}}}, 0x8)

4m45.764734574s ago: executing program 1 (id=391):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x0)

4m45.606139147s ago: executing program 32 (id=391):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x0)

2m59.044448974s ago: executing program 0 (id=1522):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000190001090000000000000000021800000002fd010000000008000100ac14140008000500ac1e0101100016800c000880070002002dae000008000b0004"], 0x4c}}, 0x0)

2m59.044315255s ago: executing program 0 (id=1523):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000)

2m58.924375603s ago: executing program 0 (id=1525):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir")
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7}, 0x0, 0x9}}, &(0x7f0000000000), 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)

2m58.801630271s ago: executing program 0 (id=1528):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x47c, &(0x7f0000000a80)="$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")
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f00000001c0)={[{@gid}, {}]})
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020)

2m58.723583549s ago: executing program 0 (id=1529):
add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="010000000600fe000000006bb57ae0fffc5a2a630b00c145", 0x18, 0xffffffffffffffff)

2m58.464277095s ago: executing program 0 (id=1530):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x12, &(0x7f0000000000)={[{@datacow}, {@datacow}, {@compress_algo={'compress', 0x3d, 'lzo'}}]}, 0x1, 0x510c, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTsT3573JENYvrOR3E/wmHm5XUpgfKxQ6WkmPbbFHXpgfLxQ65pIemydDeHBhZX/jei4r/D8W2kmPK2vzwpGkcDoW8vOhWziWFE7EM+3ztfl008L3sZBfYDEfr6BY070kIulxtV+PhcINe5ztHhwAAOCeEsNznmXHepshjbLztUE7rB60w8igHeqDdhhNdkh37Lc9zPYW4vb2mY1Le/7/keHyf3wrVmWLftf/h3j9f/5cw+71/7Ox0EgK87HQSu8Y0IrHyMLux/EYjVbe48r6bgEAAADuavF7gfoKzwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+Ye/eY+Sq7sOBn32O9+H1QvJTCL8o2SQ1jpt4vbbJQy1V1pSqEWmadUODqiiNjb0mixfs2KbEKETGJqIRgtIGKfmjCKMoqvkDagUikgLCRYojVB4RVVEAgUJriIJIKUlEmiDF1ey9Z/bOuTuPtb3GSz4fyTtn5nuedx6ec++dcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN8Nh79y1d82iz/82wuefu7i8cv2rb/45WsuOPPxECZmHu/Iwh391986/vM7z79r331rb7vn6IXv783L5fEwUP3Tmd+5LtZ6dGkI93aE0J0GVg1mgZ78/mCs7x2DIZwRZgO1EpP9WYm04fD9vhAOhNlArarv9YUwWAhc9MRDD95YTdzSF8LyEEIlbePZStZGXxo4pzcL9KeB7d1Z4FfHMrXAdzuzAJyw+GaovegPTdRnGJ67XIPXX89J69gbKx1eV0wMN873s/UL3KmC3vSBiRN62krVsSBKb4/D3m2L4N1W2s43e9qKX6TybyjHZkOV0LllcuumK6d3x0c6w+hoV6OaFuh5furVL22eT3rRvA5jB4ZPyuvwpseW39m18hOP3rNq+YsHP7D/pRPt5o8Km7SYXmiVkL/mFs3zGI37PFkEb7/St6QRX7pCCFs//3ufbBYvzf+Hm8//48s53nbW5Y61vj6Uzc3jI4Mx8cpQNjcHAACARWMx7DXdPvrAR5rVV5r/j7R3/D8e8s8n89loD4cwPpPYvyyEs2YezwJ3xOYuWRbCu2dSE/WB9UngcAhvn0msrFWVlFgSS4wkgZ8M5YHxJHAkBiaSwLdi4OYkcF0MHEoCm2PgcBI4PwbCVP04fn8oH0fbgb4Y2JhtxEPxLIRfDMXWkm31TK0qAACAkySfHfbU3y2c63CiGeL08lBfqwzxDOyGGSpJDekMtjatalhDd6saOlvVUBv33ubDL9Xc0arm0mkYHfUZbv3l33wqNFGa/481n/9X5uhIR+n4fwgbZv7G3J15ZLoW3zhRlwEAAAA4AQP/+/w3m8VL8//x9s7/j/tEugqZwyNxN8S2ZSGM1Qeyav+wHMiOeg/kAQAAAFgMasfja8fCp/Lb7BTtdD5dzj8xz/zxwP/4nPl7D9+/sVl/S/P/ifbO/++vv806cST24mvLQlhSCPwg9rIamDESAz/+aH0gH/+RuAFuiFXlJybUqrohltgYA2NJ4ECjEj+slTirPpA/WbXG99fGMZWXKAQAAADglIu7A+Jx+Xj+/3t+s/aqZuVK8/+N8zv/f2YeXDq9f3oghNXdIXSlPwx4pD9bGDAGBjvyxAP9WV1daVXX9odwXnVgaVXP5+v/d6drDD7Rl1UVA2e95+Cr51QT3+wLYXUx8ORnbv9gNbE7CdQa/8u+EN5VHW3a+HeWZI33pI1/fUkI7ywEalVdsiSEamO9aVUPVfLrGKRV/XMlhLcUArWqPlQJYU8AYJGK/5VuKT64a8/V2zZNT0/uXMBE3IffF7ZOTU+Obt4+vaXSoE9bkj7XLWN0bXlM7V755pl8iaJP371hsJ107XeCY8W28v34pRMH8/vxu1DPzDjX9tTdXZcO+X3vLTcRCt+kGg25c4GH3F+sZPZJLNUf8/eGgbDkyl2TO0e/uGn37p1rsr/tZl+b/Y2HmbJttSbdVv1z9a2Nl0fD1bISx7utVhQrWb378h2rd+25etXU5Zsunbx08oo1H1o7du7YurEPn7u6Oqqx7G+Loa6Yq+pkqMdub3NcJ3GoZ3cXKjkVnxoSEhKLLbF9YEXT/5NL8/8dzef/8VMnfvLn6zM0Ov4/HA/zZ4/PHubfGAMHysf/6/6XqB3/H250NL92YsBIEtgbA3sd5gcAAODNIU7y49w57pX+6crvvNisXGn+v7e93/+fpPX/a0vXX9homf+VscRYo/X/02X+a+v/7220/n+6zH9t/f8Db8D6/1fWAskm+YX1/wEAgDeDU7f+f8vl/dMLBJQytFzeP71AQClDy2X8271AwLzX/3/2P//qv0MTpfn/ze3N/y3cDwAAAKePL//ZVf+vWbw0/z/Q3vz/1K//Fxqd/z/SKDDRaGFA6/8BAACwSDVa/2/4+v7PNStXmv8fam/+H0+76KzLHWt9fShb0y6ka9q9MlT7yQAAAAAsDp1hdLSnzbx1K6OuP/42n8qXAm2WLnr+T47O7/z/w+3N/+t+l3HTY8vv7Fr5iUdfv2fV8hcPfmD/S7PH/wEAAICF0+5+CQAAAAAAAAAAAAAA4I33/H/sW9csXvr9f9gw83ij3//H6/7F3xe8tS53rLX1+n/5/Ys+fteemSULHxkK4b3FwLZ9284I+bX5VxQDD3525duqiX1pifufO/+FauJzaeBjq858rZo4LwlsjIskvj0NxKsqvrY0CcTlFf89DcTtcSgN9OaBry7NxtGRbqufDmbbqiPdVk8PhrCsEKhtq3sHszY60gHekgRqA/xCGogD/PM80Jn26q6BrFcxMBiL3jaQ9QoAgNNW/BbYE7ZOTU+Oxa/w8fbs7vrbqG7JsmvL1Xa02fwz+dJkn757w2A76a70u+jstcZ7QqU6hDWlr6vFLB0zozw5tbTYdG9tMORWq711NiiXmu+m6208or5sRKObt09v6Wk58HWts6ztbpllTWmyU8zSObNJ26iljb60MaI2t00bXY73O8PoaFeS6w9icDjUafWKaPf3+sV1/hq9Cop5rji6/1fN6ivN/4fbm/9XiuN6Lb8YwN54Zb2/W2aZfwAAAFhYX13/62/Ef5+6/uEnm+Utzf9H2pv/xz1Y+aHgbG/H4Xj9//3LQpi5tP5wFrgjNnfJshDePZOaiCWyC+pfGEuMZYE74g6TlbHExon6qpbEwKEk8JOhPHA4CRyJgXwvxcGQ78r5+6EQPjiT2lBfYkcsMZwEPhkDI0lgNAbGksDSGBhPAi8vzQMTSeDfYiBM1W+ru5fm2woAAGA+8nlWT/3dkM7zDnW3ytDRKkN/qwydrTJUWmVoNIp4/9sxQ09y8kpHIVNPWmtfUkspQ7wY/rz7VcoQflifMy1Yajqef1A736CjPsN9H+muhCZK8/+x9ub/2ZN5rL71I3H+P3v9vyzwg9i9r8VTx0di4McfrQ/kOwaOxMnuDbWqJvIS+aT9hlhiPAZGksCOGBhPAhs35IEDb6sP5DPtWuP7a41P5SUKAQAAADjl4g6CuJsmzv9v2/WVgWblSvP/8fbm/7G9gWJj18Vajy4N4d6O2d7UAqsGs0DcjzEYfx7/jsEQzijs4KiVmOzPSvQmDYfv92W/UO9Nq/peX/bjg3j/oiceevDGauKWvhCWF/a+1Np4tpK10ZcGzunNAv1pYHt3Foh7fmqB73ZmAThhtb2C8QWVn+pSMzx3uQavvzfLNUHT4ZX2gc6Rb67fXC2U0g7XfJ9qzfyetqb7bzlpSm+Pw95ti/HdNuzdVvwilX9DOTYbqoTOLZNbN105vTs+Uvwla8kCPc/FX6m2kz4Jr8O9x9/b1ippB8aSj4+xucvN/TrsiNXd9NjyO7tWfuLRe1Ytf/HgB/a/1HY3Gog/FH7omn8d/FFh8y60Sshfc4vu82TC58li/G9gxNMWQtjw8tdvaBYvzf8n2pv/dye3M34dN+auZSG8r7BxH4mb/4+XZZ+DhUD2KfmWciA75P5fQw0/OQEAAOBkq+3uqO0vmMpvsxPC03lyOf/EPPPH/RXjc+Zvt9/9f/3Z5c3ipfn/xubz/yVJNx3/d/yfBeL4/5xO913RS9IH9p7QruhSdSwIx//ndLq/2xz/n5Pj/47/z8Xx/xYc/5/T6f60lb4l7fClK4Tw4h898HSzeGn+v6O9+b/1/+ZetK+2/t/GRuv/7Wi0/t9e6/8BAAALqsFCc+k8r7R6XylDunpfKUPLBQJbLjFo/b95r//3wtnP/iY0UZr/721v/h9fDgPF1hfL+n8jGxpUdXMM7LAwIAAAAKejRjsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeGPd9w//s6VZ/OHfXvD0cxePX7Zv/cUvX3PBmY+HMDXzeEcW7ui//tbxn995/l377lt72z1HL3x/JS/Xk9/+/7rcsdbXh0I4UHhkMCZeGaremQ1c9PG79nRXE48MhfDeYmDbvm1nVBPfGgphRTHw4GdXvq2a2JeWuP+581+oJj6XBj626szXqonzNnVm3Uy7+49Ls+52pN29cWkIywqBWncvW5q10ZG28ad5oDNt458GszZiYDAW/cZg1kYMTMcSU0tCWN0dQlda1cOVrKqutKp/qWRVdaVVfbkSwnkhhO60qud6s6q605E/3ptVFQNnvefgq+dUEwd6Q1hdDDz5mds/WE18IQnUGv+L3hDeVX3JpI1/uydrvCdt/JaeEN4ZQuhNS/yyOyvRm5Z4vjuEtxQCtcY/3x3CnsCbQvzwqftE27Xn6m2bpqcndy5gojdvqy9snZqeHN28fXpLJelTIx2F9LFrj3/sz7z6pc3V20/fvWGwnXR3Xq5npstre+rurjvdex/71V+sZPb5KNUf8/eGgbDkyl2TO0e/uGn37p1rsr/tZl+b/e3Ko9m2WtNkW3UV77zR22pFsZLVuy/fsXrXnqtXTV2+6dLJSyevWPOhtWPnjq0b+/C5q6ujGsv+tj/U0HCot5/6oZ7dXajkVHwAzC8RN8/p0h8Jid/FRGfdp9vY6f6fXumL/mxHe0Jl5gO6NK0oZumYGeXJGPT64xzx8XxPaTmiNaWJQynL2tZZ1pUmE7NZ+rIsM9/rSpPDYk2dM5s03u8Mo6NdjbbDcP3d4ub92Qls3qfyTdduGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4P3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRs8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMClAAAA///9yyc9")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000100))

2m58.391601736s ago: executing program 33 (id=1530):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x12, &(0x7f0000000000)={[{@datacow}, {@datacow}, {@compress_algo={'compress', 0x3d, 'lzo'}}]}, 0x1, 0x510c, &(0x7f000000a2c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000100))

2m16.224037918s ago: executing program 4 (id=1921):
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000000040), &(0x7f0000000000)=0x30)

2m16.223934159s ago: executing program 4 (id=1922):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000060c0)={0x20, r1, 0x301, 0x0, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0)

2m16.095693776s ago: executing program 4 (id=1923):
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x2, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000540)=0x7b1)

2m16.010821512s ago: executing program 4 (id=1924):
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$eJzs3c9rHGUfAPDvbJKmTfu+yQsvaL0YEDRQmpgaWwWFigcRLBT0bLtstqFmky3ZTWlCQIsIXgQVD4JeevLgj3rz6o+r/hcexFI1LVY8SGQ2s+2m2U03abIbzecDk32emdl8n+/Or2d3hpkA9qzh9E8u4nBEvJtEDGbjk4joq5V6I06uzndreamQDkmsrLz8a1Kb5+byUiEa3pM6mFUejIhv34o4klsft7KwOJ0vlYpzWX2sOnNhrLKwePT8TH6qOFWcPT4+MXHsxJMnjm9frr//sHjo2nsvPPbFyT/ffODqO98lcTIOZdMa89iyZ9dWh2M4+0z60o9wjefvO9juknS7AWxJumn2rG7lcTgGo6dWAgD+zV6PiBUAYI9JHP8BYI+p/w5wc3mpUB+6+4tEZ11/LiL2r+ZfP7+5OqU3O2e3v3YedOBmsubMSBIRQ9sQfzgiPv7q1c/SIbbrPCRAG964HBFnh4bX7/+TddcsbNbjG0zbl70O3zU+je8MNHTG12n/56lm/b/c7f5PNOn/9DfZdrei2fa/ZsSBbQiygeufRDzTcG3brYb8M0M9We0/tT5fX3LufKmY7tv+GxEj0def1sc3iDFy468braY19v9+e/+1T9P46eudOXI/9/avfc9kvpq/n5wbXb8c8VBvs/yT28s/adH/Pd1mjBeffvujVtPS/NN868P6/CO7OmlnrFyJeLTp8r9zRVuy4fWJY7XVYay+UjTx5Y8fDrSK37j80yGNX/8u0Anp8h/YOP+hpPF6zcrmY3x/ZfCbVtPunX/z9X9f8kqtXO9HXMpXq3PjEfuSl9aPP3bnvZfyD2el1fnT/Eceab79b7T+p98Jz7aZf++1Xz7fev47K81/clPLf/OFq7eme1rFb2/5T9RKI9mYdvZ/7Tbwfj47AAAAAAAAAAAAAAAAAAAAAAAAAGhXLiIORZIbvV3O5UZHV5/h/f8YyJXKleqRc+X52cmoPSt7KPpy9VtdDjbcD3U8ux9+vX7srvoTEfG/iPig/0BSv4/iZJdzBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC6gy2e/5/6qb/brQMAdsz+bjcAAOg4x38A2Hsc/wFg72nv+N+z4+0AADrH938A2Hsc/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhhp0+dSoeVP5aXCml98uLC/HT54tHJYmV6dGa+MFooz10YnSqXp0rF0UJ55l7/r1QuX5iI2flLY9VipTpWWVg8M1Oen62eOT+TnyqeKfZ1JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JzKwuJ0vlQqzilsobCyO5rR/UJPtjrtlvZ0tJDsjmZsc6HLOyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf4i/AwAA//+3ACFj")
creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r1, 0x0, 0x0)

2m15.682929317s ago: executing program 4 (id=1928):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000000)=0xff)

2m15.181764209s ago: executing program 4 (id=1932):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0)

2m14.969675455s ago: executing program 34 (id=1932):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0)

22.362156618s ago: executing program 5 (id=3340):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)=0xab)
socket(0x1e, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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")
inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000423)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x2, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x3, 0x1, 0x5, 0xa, 0x3, 0x1, {0x3, 0x17d, 0x8, 0x8, 0x100, 0x3, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x20000000, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x2, 0x7f03)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x3, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x3}]}, @func={0x1}, @func={0x2, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x5f]}}, 0x0, 0x47}, 0x28)

21.434491403s ago: executing program 5 (id=3345):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = dup(r1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x39d}, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)

20.505730744s ago: executing program 5 (id=3365):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000110001002cbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="570fa80001030000140003007866726d30"], 0x34}}, 0x800)

20.362920863s ago: executing program 5 (id=3367):
socket(0x200000000000011, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000002a40)={[{}, {@uid}, {@creator={'creator', 0x3d, "e152ecf5"}}, {@nodecompose}, {@umask={'umask', 0x3d, 0x10001}}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6b2, &(0x7f0000000280)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000a00)={0x2020}, 0x2020)

20.264784545s ago: executing program 5 (id=3371):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
listen(r0, 0x100)
sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f0000000340)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x2, 0x0, 0x8}}], 0x38, 0x8000}, 0x20000000)

19.952107775s ago: executing program 5 (id=3376):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

19.842268046s ago: executing program 35 (id=3376):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

1.405329817s ago: executing program 6 (id=3605):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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")

1.065938232s ago: executing program 6 (id=3606):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x2, 0x9, 0x6, 0xffffffffffffffff, 0x3, 0x3e, 0x0, 0x4, 0x40, 0x19a, 0x0, 0x0, 0x38, 0x1, 0x0, 0x1}, [{0x3, 0x4, 0x2000e5, 0x0, 0x6, 0x96d, 0x1ff, 0x10}]}, 0x78)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)

985.686873ms ago: executing program 6 (id=3607):
r0 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='macvtap0\x00', 0x10)

814.187596ms ago: executing program 6 (id=3609):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2b, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x60, 0x10}, {0x0, 0x7f, 0x7, 0x3, 0x9, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bbfe80000000aa"], 0x0)

755.764417ms ago: executing program 6 (id=3610):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$rds(0xffffffffffffffff, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0)
socket$packet(0x11, 0xa, 0x300)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

545.522706ms ago: executing program 2 (id=3613):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRES16=r1], 0x58)
mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

545.305585ms ago: executing program 6 (id=3614):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f00000002c0)={[{@quota}, {@noquota}, {@nointegrity}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@noquota}, {@gid}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00')

545.149548ms ago: executing program 3 (id=3615):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @empty}, 0x261, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4004})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2})

415.067724ms ago: executing program 2 (id=3616):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x30}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

352.965818ms ago: executing program 2 (id=3617):
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f00000013c0)='./file0\x00', 0x10090, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x1, 0x14e4, &(0x7f0000001540)="$eJzs3Hl0VUXWKPDaVXUgxBivERkCtWsfuGKAIiIiMoiIDCIiIiIiMomAgBEREQERAjKJGBCReYiIDAEBkSFCROZ5knky0oiIiMgkk0C9hd39+Lrtb/G91/0ef2T/1qqV2vfcve8+2Vm559y1kp+7DK3RqGbVBkQk/i3w1y+pQogYIcRAIcRtQohACFE2oWzCteN5FKT+ey/C/rOeybjZHbCbieefs/H8czaef87G88/ZeP45G88/Z+P552w8f8Zysq0zCt7OK+cu/vw/J+P3/5yN55+z8fxzNp5/zsbzz0n0nx7h+edsPP+cjeefs/H8GcvJbvbnz7xu7rrZP3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxnKGC/46LYT4+/5m98UYY4wxxhhjjLH/HJ/7ZnfAGGOMMcYYY4yx//dASKGEFoHIJXKLGJFHxIpbRJy4VcSL20RE3C4SxB0ir7hT5BP5RQFRUCSKQqKwMAKFFSRCUUQUFVFxlygm7hZJorgoIUoKJ0qJZHGPKC3uFWXEfaKsuF+UEw+I8qKCqCgqiQdFZfGQqCIeFlXFI6KaqC5qiJriUVFLPCZqi8dFHfGEqCueFPXEU6K+eFo0EM+IhuJZ0Ug8JxqL50UT0VQ0E81Fi/+r/LdED/G26Cl6iVTRW/QR74i+op/oLwaIgeJdMUi8JwaL90WaGCKGig/EMPGhGC4+EiPESDFKjBZjxFgxTowXE8REkS4+FpPEJ2Ky+FRMEVPFNDFdZIgZYqb4TMwSs8Uc8bmYK74Q88R8sUAsFJniS7FILBZZ4iuxRHwtloplYrlYIVaKVWK1WCPWinVivdggNopNYrPYIraKb8Q2sV3sEDvFLrFb7BF7xT6xXxwQ34ps8d3/Yf75f8rvCgIESJCgQUMuyAUxEAOxEAtxEAfxEA8RiEACJEBeyAv5IB8UgAKQCIlQGAoDAgIBQREoAlGIQjEoBkmQBCWgBDhwkAzJUBruhTJQBspCWSgH5aA8VIAKUAkqQWWoDFWgClSFqlANqkENqAGPwqPwGNSG2lAH6kBdqAv1oB7Uh/rQABpAQ2gIjaARNIbG0ASaQDNoBi2gBbSEltAKWkEbaANtoS20h/aQAinQATpAO+gInaATdIbO0AW6QFfoBt3gLXgL3oa3oRdUk72hD/SBvtAX+sMAGADvwiB4D96D9yENhsBQ+AA+gA9hOJyDETASRsEoqCzHwjgYDyQnQjqkwySYBJNhMkyBqTAVpkMGzICZMBNmwWyYDZ/DXPgCvoD5MB8WQiZkwiJYDFmQBUvgPCyFZbAcVsBKWAUrYQ2shTWwHjbAetgEm2ALbIFv4BsYDdthJ+yE3bAb9sJe2A/7IQ2yIRsOwkE4BIfgMByGI3AEjsJROAbH4DgchxNwAk7CKTgNp+AsnIVzcB4uwAW4BJfgMryR+GPD3cXXpQl5jZZa5pK5ZIyMkbEyVsbJOBkv42VERmSCTJB5ZV6ZT+aTBWQBmSgTZWFZWKJESTKURWQRGZVRWUwWk0kySZaQJaSTTibLZFlalpZlZBlZVt4vy8kHZHlZQbZ2lWQlWVm2cVXkw7KqrCqryeqyhqwpa8paspasLWvLOrKOrCvrynryKVlf9ob+8Iy8NplGcgg0lkOhiWwqm8nm8kN4QbaUw6GVbC3byJfkSBgB7WVLlyJfkR3kOOgoX5Pj4XXZWU6ELvJN2VV2k93lW7KHbOV6yl5yCvSWfeR06Cv7yf5ygJwF1eW1idWQ78s0OUQOlR/IhfChHC4/kiPkSDlKjpZj5Fg5To6XE+REmS4/lpPkJ3Ky/FROkVPlNDldZsgZcqb8TM6Ss+Uc+bmcK7+Q8+R8uUAulJnyS7lILpZZ8iu5RH4tl8plcrlcIVfKVXK1XCPXynVyvdwgN8pNcrPcIrfKb+Q2uV3ukDvlLrlb7pF75T65Xx6Q38ps+Z08KP8iD8nv5WH5gzwif5RH5U/ymPxZHpe/yBPyV3lSnpKn5Rl5Vv4mz8nz8oK8KC/J3+VleUVelV4KBUoqpbQKVC6VW8WoPCpW3aLi1K0qXt2mIup2laDuUHnVnSqfyq8KqIIqURVShZVRqKwiFaoiqqiKqrtUMXW3SlLFVQlVUjlVSiWre1Rpda8qo+5TZdX9qpx6QJVXFVRFVUk9qCqrh1QV9bCqqh5R1VR1VUPVVI+qWuoxVVs9ruqoJ1Rd9aSqp55S9dXTqoF6RjVUz6pG6jnVWD2vmqimqplqrlqoF1RL9aJqpVqrNuol1Va1U+3VyypFvaI6qFdVR/Wa6qReV53VG6qLelN1Vd1Ud3VFXVVe9VS9VKrqrfqod1Rf1U/1VwPUQPWuGqTeU4PV+ypNDVFD1QdqmPpQDVcfqRFqpBqlRqsxaqwap8arCWqiSlcfq0nqEzVZfaqmqKlqmpquMtQM1f9vleb8D/I/+Rf5g/949S1qq/pGbVPb1Q61U+1Su9UetUftU/vUAXVAZatsdVAdVIfUIXVYHVZH1BF1VB1Vx9QxdVwdVyfUCXVSnVIX1Rl1Vv2mzqnz6ry6qC6pS+ry374HQoOWWmmtA51L59YxOo+O1bfoOH2rjte36Yi+XSfoO3RefafOp/PrArqgTtSFdGFtNGqrSYe6iC6qo/ouXUzfrZN0cV1Cl9ROl9LJ+p5/O/9G/bXQLXRL3VK30q10G91Gt9VtdXvdXqfoFN1Bd9AddUfdSXfSnXVn3UV30V11V91dd9c9dA/dU/fUqTpV99Hv6L66n+6vB+iB+l09SA/Sg/VgnabT9FA9VA/Tw/RwPVyP0CP0KD1Kj9Fj9Dg9Tk/QE3S6TteT9CQ9WU/WU/QUPU1P0xk6Q8/UM/UsPUvP0XP0XD1Xz9Pz9AK9QGfqTL1IL9JZOksv0Uv0Ur1ML9Mr9Aq9Sq/Sa/QavU6v0xv0Br1Jb9JL9Va9VW/T2/QOvUPv0rv0Hr1H79P79AF9QGfrbH1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9Al9Up/Up/VpfVaf1ef0OX1BX9CX9CV9WV/WV/XVa5d9gQxkoAMd5ApyBTFBTBAbxAZxQVwQH8QHkSASJAQJQd7gziBfkD8oEBQMEoNCQeHABBjYgIIwKBIUDaLBXUGx4O4gKSgelAhKBi4oFSQH9wSlg3uDMsF9Qdng/qBc8EBQPqgQVAwqBQ8GlYOHgirBw0HV4JGgWlA9qBHUDB4NagWPBbWDx4M6wRNB3eDJoF7wVFA/eDpoEDwTNAyeDRoFzwWNg+eDJkHToFnQPGjxH63v/bn8L7qeppdJNb1NH/OO6Wv6mf5mgBlo3jWDzHtmsHnfpJkhZqj5wAwzH5rh5iMzwow0o8xoM8aMNePMeDPBTDTp5mMzyXxiJptPzRQz1Uwz002GmWFmms/MLDPbzDGfm7nmCzPPzDcLzEKTab40i8xik2W+MkvM12apWWaWmxVmpVllVps1Zq1ZZ9abDWaj2WQ2my1mq/nGbDPbzQ6z0+wyu80es9fsM/vNAfOtyTbfmYPmL+aQ+d4cNj+YI+ZHc9T8ZI6Zn81x84s5YX41J80pc9qcMWfNb+acOW8umIvmkvndXDZXzFXjr13cX3t7R40ac2EujMEYjMVYjMM4jMd4jGAEEzAB82JezIf5sAAWwERMxMJYGK8hJCyCRTCKUSyGxTAJk7AElkCHDpMxGUtjaSyDZbAslsVyWA7LY3msiBXxQXwQH8KH8GF8GB/BR7A6VseaWBNrYS2sjbWxDtbBulgX62E9rI/1sQE2wIbYEBthI2yMjbEJNsFm2AxbYAtsiS2xFbbCNtgG22JbbI/tMQVTsAN2wI7YETthJ+yMnbELdsGu2BW7Y3fsgT2wJ/bEVEzFPtgH+2Jf7I/9cSAOxEE4CAfjYEzDNByKQ3EYDsPhOBxH4EgchaNxDI7FcTgeJ+BETMd0nISTcDJOxik4BafhNMzADJyJM3EWzsI5OAfn4lych/NwAS7ATMzERbgIszALl+ASXIpLcTkux5W4ElfjalyLa3E9rseNuBE342bciltxG27DHbgDd+Eu3IN7cB/uwwN4ALMxGw/iQTyEh/AwHsYjeASP4lE8hsfwOB7HE3gCT+JJPI2n8SyexXN4Di/gBbyEv+NlvIJX0WOMzWNj7S02zt5q4+1t9p/jAragTbSFbGFrbD6b/x9itNYm2eK2hC1pnS1lk+09f4rL2wq2oq1kH7SV7UO2yp/iWvYxW9s+buvYJ2xN++g/xHXtk7aefc7Wt8/bBrapbWib20b2OdvYPm+b2Ka2mW1u29p2tr192abYV2wH++qf4kV2sV1r19n1doPdZ/fbC/aiPWZ/tpfs77an7WUH2nftIPueHWzft2l2yJ/iUXa0HWPH2nF2vJ1gJ/4pnman2ww7w860n9lZdvaf4kz7pZ1rs+w8O98usAv/iK/1lGW/skvs1zYav8wutyvsSrvKrrZrrt2o/9HrCrvJbrZb7B67126z2+0Ou9Pusrv/iK+dxwH7rc2239mj9id7yH5vD9vj9oj98Y/42vkdt7/YE/ZXe9KesqftGXvW/mbP2fN/nP+1cz9jr9ir1ltBQJIUaQooF+WmGMpDsXQLxdGtFE+3UYRupwS6g/LSnZSP8lMBKkiJVIgKkyEkS0QhFaGiFKW7qBjdTUlUnEpQSXJUipLpHipN91IZuo/K0v1Ujh6g8lSBKlIlepAq00NUhR6mqvQIVaPqVINq0qNUix6j2vQ41aEnqC49SfXoKapPT1MDeoYa0rPUiJ6jxvQ8NaGm1IyaUwt6gVrSi9SKWlMbeonaUjtqTy9TCr1CHehV6kivUSd6nTrTG9SF3qSu1I2601vUg96mntSLUqk39aF3qC/1o/40gAbSuzSI3qPB9D6l0RAaSh/QMPqQhtNHNIJG0igaTWNoLI2j8TSBJlI6fUyT6BOaTJ/SFJpK02g6ZdAMmkmf0SyaTXPoc5pLX9A8mk8LaCFl0pe0iBZTlhZC0Ne0lJbRclpBK2kVraY1tJbW0XraQBtpE22mLbSVvqFttJ120E7aRbtpD+2lfbSfDtC3lE3f0UH6Cx2i7+kw/UBH6Ec6Sj/RMfqZjtMvdIJ+pZN0ik7TGTpLv9E5Ok8X6CJdot/pMl2hq+RJhBDKUIU6DMJcYe4wJswTxoa3hHHhrWF8eFsYCW8PE8I7wrzhnWG+MH9YICwYJoaFwsKhCTG0IYVhWCQsGkbDu8Ji4d1hUlg8LBGWDF1YKkwO7wlLh/eGZcL7wrLh/WG58IGwfFghfO6JSuGDYeXwobBK+HBYNXwkrBZWD2uENcNHw1rhY2Ht8PGwTvhEWCZ8MqwXPhXWD58OG4TPhA3DZ8NG4XNh4/D5sEnYNGwWNg9bhC+ELcMXw1Zh67BN+FLYNmwXtg9fDlPCV8IO4as3PJ4a9g77hO+E74TeP64WRBdGM6NfRhdFF0ezol9Fl0S/ji6NLosuj66Iroyuiq6Oromuja6Lro9uiG6Mbopujm6Jel8zt3DgpFNOu8DlcrldjMvjYt0tLs7d6uLdbS7ibncJ7g6X193p8rn8roAr6BJdIVfYGYfOOnKhK+KKuqi7yxVzd7skV9yVcCWdc6VcsmvuWrgWrqV70bVyrV0b95J7ybVz7dzL7mX3iuvgXnUd3Wuuk3vddXZvuDfcm66r6+a6u7dcD/e26+l6uVSX6vq4Pq6v6+v6u/5uoBvoBrlBbrAb7NJcmhvqhrphbpgb7oa7EW6EG+VGuTFujBvnxrkJboJLd+lukpvkJrvJboqb4qa5aS7DZbiZbqab5Wa5OW6Om5s0181z89wCt8Bluky3yC1yWS7LLXFL3FK31C13y91Kt9KtdqvdWrfWrXfr3Ua30W12m91Wt9Vtc9vcDrfD7XK73B63x+1z+9wBd8Blu2x30B10h9whd9j94I64H91R95M75n52x90v7oT71Z10p9xpd8addb+5c+68u+Auukvud3fZXXFXnXfpkY8jkyKfRCZHPo1MiUyNTItMj2REZkRmRj6LzIrMjsyJfB6ZG/kiMi8yP7IgsjCSGfkysiiyOJIV+SqyJPJ1ZGlkWWR5ZEVkZWRVxPtC20JfxBf1UX+XL+bv9km+uC/hS3rnS/lkf48v7e/1Zfx9vqy/35fzD/jyvoKv6J/3TXxT38w39y38C76lf9G38q19G/+Sb+vb+fb+ZZ/iX/Ed/Ku+o3/Nd/Kv+87+Dd/Fv+m7+m6+u3/L9/Bv+56+l0/1vX0f/47v6/v5/n6AH+jf9YP8e36wf9+n+SF+qP/AD/Mf+uH+Iz/Cj/Sj/Gg/xo/14/x4P8FP9On+Yz/Jf+In+0/9FD/VT/PTfYaf4Wf6z/wsP9vP8Z/7uf4LP8/P9wv8Qp/pv/SL/GKf5b/yS/zXfqlf5pf7FX6lX+VX+zV+rV/n1/sNfqPf5Df7LX6r/8Zv89v9Dr/T7/K7/R6/1+/z+/0B/63P9t/5g/4v/pD/3h/2P/gj/scLR/1P/pj/2R/3v/gT/ld/0p/yp/0Zf9b/5s/58/6Cv+gv+d/9ZX/FX+W/WWOMMcYY+x9RNzje+188Jv+2rukjhLh1e8Ej/1xzY76/7vvJxLYRIcQrvbo88/dVrVpqaurfnrtUiaDofCFEROT6e/4fm8hf98tEG9FOpIjWovS/7K+f7HaJblA/er8Qsf8lJ0Zcj32vv9e/97+pP3buDevPFyKp6PWcPOJ6fL3/Mv9N/fwtb1A/z/fpQrT6Lzlx4np8vX6yeFG8KlL+4ZmMMcYYY4wxxthf9ZMVO93o/vba/Xmivp6TW1yPb3R/zhhjjDHGGGOMsZvv9W7dX34hJaV1J97whje8+d+bm/2biTHGGGOMMfafdv2i/2Z3whhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM5Vz/P/6d2M0+R8YYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY+xm+18BAAD//w60Myw=")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
chmod(&(0x7f0000000880)='./file0/file0\x00', 0x1c1)

244.844196ms ago: executing program 3 (id=3618):
syz_open_dev$MSR(0x0, 0x100000001, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)

194.382469ms ago: executing program 3 (id=3619):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)=0x15)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000440)=0xff)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13)

133.97827ms ago: executing program 3 (id=3620):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0)

133.867681ms ago: executing program 2 (id=3621):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0)

54.178473ms ago: executing program 2 (id=3622):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
rseq(&(0x7f0000000340), 0x20, 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000580)=""/31, 0x1f, 0x20000000009)

54.010315ms ago: executing program 3 (id=3623):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a64000000060a0b040000000000000000020000003800048034000180090001007866726d000000002400028008000140000000140500030000000000080002400000000108000440000000040900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x20040805}, 0x40000)

53.827762ms ago: executing program 2 (id=3624):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x4, 0x3, 0x2, 0x800000000400000, 0x81, 0x0, {0x1, 0xfffffffffffffffe, 0x80000000000, 0x80000000004, 0x400000000003, 0x6, 0x0, 0xfffffffd, 0x1, 0x2000, 0x4000000, 0x0, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = dup(r0)
ioctl$PTP_EXTTS_REQUEST2(r1, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9})

0s ago: executing program 3 (id=3625):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @action={{{}, {}, @device_b}, @addba_resp}}]}, 0x48}}, 0x0)

kernel console output (not intermixed with test programs):

mm="syz.2.2177" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb953f8ebe9 code=0x7ffc0000
[  273.402784][   T33] audit: type=1326 audit(2000000122.120:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12151 comm="syz.2.2177" exe="/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7fb953f8ebe9 code=0x7ffc0000
[  273.427336][   T33] audit: type=1326 audit(2000000122.130:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12151 comm="syz.2.2177" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb953f8ebe9 code=0x7ffc0000
[  273.449579][   T33] audit: type=1326 audit(2000000122.130:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12151 comm="syz.2.2177" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb953f8ebe9 code=0x7ffc0000
[  273.570615][T12154] loop5: detected capacity change from 0 to 32768
[  273.657995][ T5900] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  273.827270][ T5900] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  273.850707][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 69, changing to 10
[  273.869741][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 17408, setting to 1024
[  273.894048][ T5900] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  273.899720][ T5900] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  273.903638][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.908784][ T5900] usb 4-1: config 0 descriptor??
[  274.462041][T12168] loop5: detected capacity change from 0 to 32768
[  274.559232][T12168] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section crypt: bad kdf type 8
[  274.559232][T12168] crypt (size 152):
[  274.559232][T12168] KFD:               8
[  274.559232][T12168] scrypt n:          63098
[  274.559232][T12168] scrypt r:          11127
[  274.559232][T12168] scrypt p:          56832
[  274.559232][T12168] 
[  274.573407][T12168] bcachefs: bch2_fs_get_tree() error: invalid_sb_crypt
[  274.816052][ T5900] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  275.144614][ T5900] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  275.304644][ T5900] usb 6-1: Using ep0 maxpacket: 16
[  275.308106][ T5900] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  275.312411][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  275.322906][ T5900] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  275.327411][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.330404][ T5900] usb 6-1: Product: syz
[  275.332141][ T5900] usb 6-1: Manufacturer: syz
[  275.334003][ T5900] usb 6-1: SerialNumber: syz
[  275.337391][ T5900] usb 6-1: config 0 descriptor??
[  275.345278][ T5900] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  275.349772][ T5900] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[  275.948636][ T5900] em28xx 6-1:0.0: chip ID is em2874
[  276.175388][   T47] usb 6-1: USB disconnect, device number 8
[  276.178337][   T47] em28xx 6-1:0.0: Disconnecting em28xx
[  276.188973][   T47] em28xx 6-1:0.0: Freeing device
[  276.956713][  T792] usb 4-1: USB disconnect, device number 31
[  276.988285][T12241] vlan0: entered allmulticast mode
[  277.369771][ T5900] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  277.546659][ T5900] usb 6-1: Using ep0 maxpacket: 8
[  277.551211][ T5900] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[  277.554617][ T5900] usb 6-1: config 0 has no interface number 0
[  277.559286][ T5900] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  277.562959][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.567027][ T5900] usb 6-1: Product: syz
[  277.568649][ T5900] usb 6-1: Manufacturer: syz
[  277.570675][ T5900] usb 6-1: SerialNumber: syz
[  277.575084][ T5900] usb 6-1: config 0 descriptor??
[  277.794767][ T5900] usb 6-1: Found UVC 0.04 device syz (046d:08c3)
[  277.796965][ T5900] uvcvideo 6-1:0.31: Entity type for entity Output 6 was not initialized!
[  277.801893][ T5900] usb 6-1: Failed to create links for entity 5
[  277.804209][ T5900] usb 6-1: Failed to register entities (-22).
[  277.810040][ T5900] usb 6-1: USB disconnect, device number 9
[  278.284607][ T5900] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  278.434689][ T5900] usb 4-1: Using ep0 maxpacket: 8
[  278.439066][ T5900] usb 4-1: config 5 has an invalid interface number: 206 but max is 0
[  278.442264][ T5900] usb 4-1: config 5 has no interface number 0
[  278.446283][ T5900] usb 4-1: config 5 interface 206 has no altsetting 0
[  278.451019][ T5900] usb 4-1: New USB device found, idVendor=2639, idProduct=0017, bcdDevice=be.0b
[  278.459176][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.462280][ T5900] usb 4-1: Product: syz
[  278.463867][ T5900] usb 4-1: Manufacturer: syz
[  278.467307][ T5900] usb 4-1: SerialNumber: syz
[  278.565243][  T792] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  278.658606][T12273] overlayfs: failed to clone upperpath
[  278.679186][ T5900] usb 4-1: USB disconnect, device number 32
[  278.716851][  T792] usb 6-1: not running at top speed; connect to a high speed hub
[  278.722371][  T792] usb 6-1: config 95 has an invalid interface number: 1 but max is 0
[  278.726603][  T792] usb 6-1: config 95 has no interface number 0
[  278.731108][  T792] usb 6-1: config 95 interface 1 has no altsetting 0
[  278.736919][  T792] usb 6-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice=ad.3f
[  278.740545][  T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.743468][  T792] usb 6-1: Product: syz
[  278.745123][  T792] usb 6-1: Manufacturer: syz
[  278.747198][  T792] usb 6-1: SerialNumber: syz
[  278.989954][  T792] usb 6-1: USB disconnect, device number 10
[  279.839325][T12300] loop5: detected capacity change from 0 to 1024
[  279.864588][T12300] hfsplus: bad catalog entry type
[  279.898601][   T53] hfsplus: b-tree write err: -5, ino 4
[  279.926683][T12308] netlink: 'syz.3.2246': attribute type 9 has an invalid length.
[  280.184686][ T5898] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  280.191757][T12315] loop3: detected capacity change from 0 to 512
[  280.197474][T12315] EXT4-fs (loop3): external journal device major/minor numbers have changed
[  280.201200][T12315] EXT4-fs (loop3): failed to open journal device unknown-block(8,0) -16
[  280.279399][T12319] syzkaller1: entered promiscuous mode
[  280.281575][T12319] syzkaller1: entered allmulticast mode
[  280.345658][ T5898] usb 6-1: Using ep0 maxpacket: 16
[  280.351034][ T5898] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  280.355521][ T5898] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  280.359716][ T5898] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  280.360738][T12321] loop3: detected capacity change from 0 to 1024
[  280.364694][ T5898] usb 6-1: config 0 interface 0 has no altsetting 0
[  280.370605][ T5898] usb 6-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00
[  280.374774][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.379888][ T5898] usb 6-1: config 0 descriptor??
[  280.792047][ T5898] hid-generic 0003:045E:05DA.0016: ignoring exceeding usage max
[  280.798760][ T5898] hid-generic 0003:045E:05DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.5-1/input0
[  280.999941][   T47] usb 6-1: USB disconnect, device number 11
[  281.645257][T12347] vivid-000: =================  START STATUS  =================
[  281.647952][T12347] vivid-000: Generate PTS: true
[  281.652599][T12347] vivid-000: Generate SCR: true
[  281.654272][T12347] tpg source WxH: 320x180 (R'G'B)
[  281.656928][T12347] tpg field: 1
[  281.658148][T12347] tpg crop: (0,0)/320x180
[  281.659585][T12347] tpg compose: (0,0)/320x180
[  281.661121][T12347] tpg colorspace: 8
[  281.662464][T12347] tpg transfer function: 0/2
[  281.664099][T12347] tpg quantization: 0/1
[  281.666175][T12347] tpg RGB range: 0/2
[  281.667571][T12347] vivid-000: ==================  END STATUS  ==================
[  281.746781][T12355] fuse: Bad value for 'fd'
[  281.799015][T12363] loop3: detected capacity change from 0 to 128
[  281.808884][T12363] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  281.813136][T12363] ext4 filesystem being mounted at /660/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  281.829839][ T7016] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  281.927280][T12370] loop5: detected capacity change from 0 to 4096
[  281.932169][T12370] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  281.959935][T12370] ntfs3(loop5): Failed to initialize $Secure (-22).
[  281.998193][T12368] loop3: detected capacity change from 0 to 32768
[  282.001526][T12368] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2271 (12368)
[  282.008509][T12368] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  282.013572][T12368] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  282.017419][T12368] BTRFS info (device loop3): using free-space-tree
[  282.186891][ T7016] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  282.557035][T12395] loop3: detected capacity change from 0 to 4096
[  283.606547][T12412] loop5: detected capacity change from 0 to 1024
[  283.613271][T12412] EXT4-fs: inline encryption not supported
[  283.634850][T12412] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.764300][T11410] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.176037][T12436] loop3: detected capacity change from 0 to 256
[  284.184051][T12436] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  284.189798][T12436] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  284.369514][T12444] loop3: detected capacity change from 0 to 4096
[  284.373009][T12444] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  284.939679][T12453] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2301'.
[  284.943675][T12453] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2301'.
[  285.458361][T12473] loop5: detected capacity change from 0 to 256
[  285.463512][T12473] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  285.501092][T12471] loop3: detected capacity change from 0 to 32768
[  285.503924][T12471] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2309 (12471)
[  285.511691][T12471] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  285.518782][T12471] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  285.523027][T12471] BTRFS info (device loop3): using free-space-tree
[  285.596392][   T33] audit: type=1800 audit(2000000134.320:93): pid=12471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2309" name="file0" dev="loop3" ino=258 res=0 errno=0
[  285.644036][ T7016] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  285.868521][T12498] loop3: detected capacity change from 0 to 4096
[  285.871537][T12498] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  285.975840][T12502] loop3: detected capacity change from 0 to 4096
[  285.979189][T12502] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  285.993405][T12502] ntfs3(loop3): ino=19, mi_enum_attr
[  286.053875][T12502] ntfs3: Cannot load iocharset cp94./file1
[  286.091658][T12507] loop3: detected capacity change from 0 to 512
[  286.097204][T12507] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  286.102241][T12507] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 2)!
[  286.111160][T12507] EXT4-fs (loop3): group descriptors corrupted!
[  286.394745][   T47] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  286.614629][   T47] usb 4-1: Using ep0 maxpacket: 8
[  286.618759][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  286.624614][   T47] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=37.a3
[  286.628132][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.631035][   T47] usb 4-1: Product: syz
[  286.632600][   T47] usb 4-1: Manufacturer: syz
[  286.634634][   T47] usb 4-1: SerialNumber: syz
[  286.640927][   T47] usb 4-1: config 0 descriptor??
[  286.855394][    T9] usb 4-1: USB disconnect, device number 33
[  287.227520][T12541] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.588576][T12563] loop3: detected capacity change from 0 to 2048
[  287.592733][T12563] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  287.601756][T12563] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  287.702470][T12567] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check.
[  287.834619][    T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  287.986406][    T9] usb 6-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c
[  287.990778][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.996545][    T9] usb 6-1: config 0 descriptor??
[  288.001531][    T9] usb 6-1: bad CDC descriptors
[  288.021205][T12569] loop3: detected capacity change from 0 to 1024
[  288.028482][T12569] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  288.207234][    T9] usb 6-1: USB disconnect, device number 12
[  288.337663][T12578] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  288.340725][ T5913] IPVS: starting estimator thread 0...
[  288.424681][T12580] IPVS: using max 81 ests per chain, 194400 per kthread
[  288.644579][   T47] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  288.814648][   T47] usb 4-1: Using ep0 maxpacket: 8
[  288.823471][   T47] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  288.827551][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.831084][   T47] usb 4-1: Product: syz
[  288.832972][   T47] usb 4-1: Manufacturer: syz
[  288.838880][   T47] usb 4-1: SerialNumber: syz
[  288.843312][   T47] usb 4-1: config 0 descriptor??
[  288.854137][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  288.858037][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  288.861606][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  288.865148][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  288.868563][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  288.872664][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  288.876460][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  288.880095][    C0] IPv4: Oversized IP packet from 172.20.20.170
[  289.051535][   T47] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  289.093333][T12613] loop5: detected capacity change from 0 to 512
[  289.108229][T12613] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  289.112272][T12613] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  289.118689][   T33] audit: type=1800 audit(2000000137.840:94): pid=12613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2365" name="file2" dev="loop5" ino=16 res=0 errno=0
[  289.135866][T11410] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.202057][T12620] loop5: detected capacity change from 0 to 4096
[  289.210885][T12620] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  289.227178][T11410] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.262705][   T47] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  289.267578][   T47] usb 4-1: USB disconnect, device number 34
[  289.302055][T12627] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2370'.
[  289.420679][T12633] binder: 12630:12633 ioctl c0306201 0 returned -14
[  289.461142][T12638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2374'.
[  289.464336][T12638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2374'.
[  289.537783][T12644] loop5: detected capacity change from 0 to 128
[  289.541017][T12644] EXT4-fs: Ignoring removed nomblk_io_submit option
[  289.543304][T12644] EXT4-fs: Ignoring removed nomblk_io_submit option
[  289.547187][T12644] EXT4-fs (loop5): Test dummy encryption mode enabled
[  289.552473][T12644] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  289.557480][T12644] ext4 filesystem being mounted at mnt:[4026532726] supports timestamps until 2038-01-19 (0x7fffffff)
[  289.564254][T12644] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  290.302069][T12673] IPv6: NLM_F_CREATE should be specified when creating new route
[  290.319114][T12673] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  290.321947][T12673] IPv6: NLM_F_CREATE should be set when creating new route
[  290.599957][T12681] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2393'.
[  290.662455][T12684] loop5: detected capacity change from 0 to 8192
[  290.956436][T12704] loop3: detected capacity change from 0 to 8
[  290.959762][T12704] SQUASHFS error: zlib decompression failed, data probably corrupt
[  290.962577][T12704] SQUASHFS error: Failed to read block 0x9b: -5
[  290.966484][T12706] loop5: detected capacity change from 0 to 256
[  290.969295][T12704] SQUASHFS error: Unable to read metadata cache entry [99]
[  290.971777][T12704] SQUASHFS error: Unable to read inode 0x127
[  290.993204][T12706] FAT-fs (loop5): Directory bread(block 64) failed
[  290.999083][T12706] FAT-fs (loop5): Directory bread(block 65) failed
[  291.001715][T12706] FAT-fs (loop5): Directory bread(block 66) failed
[  291.004350][T12706] FAT-fs (loop5): Directory bread(block 67) failed
[  291.007388][T12706] FAT-fs (loop5): Directory bread(block 68) failed
[  291.010184][T12706] FAT-fs (loop5): Directory bread(block 69) failed
[  291.013220][T12706] FAT-fs (loop5): Directory bread(block 70) failed
[  291.016776][T12706] FAT-fs (loop5): Directory bread(block 71) failed
[  291.019278][T12706] FAT-fs (loop5): Directory bread(block 72) failed
[  291.021531][T12706] FAT-fs (loop5): Directory bread(block 73) failed
[  291.117817][T12720] loop5: detected capacity change from 0 to 128
[  291.123372][T12720] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  291.181619][T12725] loop5: detected capacity change from 0 to 128
[  291.216573][T12727] fuse: Bad value for 'fd'
[  291.269853][   T33] audit: type=1326 audit(2000000139.990:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12734 comm="syz.2.2419" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb953f8ebe9 code=0x0
[  291.487349][T12745] loop5: detected capacity change from 0 to 4096
[  291.495907][T12748] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  291.500173][T12745] NILFS (loop5): corrupt root inode
[  291.894585][   T47] usb 6-1: new low-speed USB device number 13 using dummy_hcd
[  292.048666][   T47] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  292.051240][   T47] usb 6-1: config 0 has no interface number 0
[  292.053205][   T47] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  292.057368][   T47] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  292.061149][   T47] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  292.065841][   T47] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  292.070295][   T47] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  292.073879][   T47] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  292.079200][   T47] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  292.082352][   T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.087373][   T47] usb 6-1: config 0 descriptor??
[  292.093013][T12762] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  292.095638][T12762] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  292.099542][   T47] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  292.326244][   T47] usb 6-1: USB disconnect, device number 13
[  292.336580][   T47] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  292.371230][   T33] audit: type=1326 audit(2000000141.090:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.3.2448" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365038ebe9 code=0x7ffc0000
[  292.380659][   T33] audit: type=1326 audit(2000000141.090:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.3.2448" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365038ebe9 code=0x7ffc0000
[  292.388994][   T33] audit: type=1326 audit(2000000141.100:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.3.2448" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f365038ebe9 code=0x7ffc0000
[  292.398084][   T33] audit: type=1326 audit(2000000141.100:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.3.2448" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365038ebe9 code=0x7ffc0000
[  292.675684][   T33] audit: type=1326 audit(2000000141.100:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.3.2448" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365038ebe9 code=0x7ffc0000
[  292.683260][   T33] audit: type=1326 audit(2000000141.110:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.3.2448" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f365038ebe9 code=0x7ffc0000
[  292.690453][   T33] audit: type=1326 audit(2000000141.110:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.3.2448" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365038ebe9 code=0x7ffc0000
[  292.700713][   T33] audit: type=1326 audit(2000000141.110:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.3.2448" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365038ebe9 code=0x7ffc0000
[  292.709458][   T33] audit: type=1326 audit(2000000141.120:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12797 comm="syz.3.2448" exe="/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f365038ebe9 code=0x7ffc0000
[  292.900835][T12809] netlink: 'syz.5.2451': attribute type 1 has an invalid length.
[  292.952860][T12813] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2453'.
[  294.246298][ T5898] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  294.250104][T12848] loop5: detected capacity change from 0 to 32768
[  294.258089][T12848] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  294.267575][T12848] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  294.304657][T11410] ocfs2: Unmounting device (7,5) on (node local)
[  294.394727][ T5898] usb 4-1: Using ep0 maxpacket: 16
[  294.400645][ T5898] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  294.533074][ T5898] usb 4-1: config 0 has no interfaces?
[  294.535772][ T5898] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  294.539291][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.544044][ T5898] usb 4-1: config 0 descriptor??
[  294.834584][ T5898] usb 4-1: USB disconnect, device number 35
[  295.300102][T12874] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2478'.
[  295.516503][T12878] loop5: detected capacity change from 0 to 40427
[  295.521991][T12878] F2FS-fs (loop5): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[  295.525812][T12878] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  295.529559][T12878] F2FS-fs (loop5): build fault injection type: 0x6
[  295.534069][T12878] F2FS-fs (loop5): invalid crc value
[  295.586789][T12878] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  295.591033][T12878] F2FS-fs (loop5): Start checkpoint disabled!
[  295.596975][T12878] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  295.600536][T12878] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  296.834602][T12907] loop3: detected capacity change from 0 to 8192
[  296.905134][T12907]  loop3: p3 < >
[  297.066951][T12909] loop3: detected capacity change from 0 to 16
[  297.083711][T12909] erofs (device loop3): mounted with root inode @ nid 36.
[  297.101694][T12909] syz.3.2492: attempt to access beyond end of device
[  297.101694][T12909] loop3: rw=0, sector=14546590680, nr_sectors = 8 limit=16
[  297.111971][T12909] erofs (device loop3): failed to decompress -2 in[1, 1440] out[1677]
[  297.116736][T12909] erofs (device loop3): read error -5 @ 87 of nid 36
[  297.120960][T12909] erofs (device loop3): failed to readdir of logical block 87 of nid 36
[  297.210271][   T53] kworker/u9:2: attempt to access beyond end of device
[  297.210271][   T53] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  297.216804][   T53] CPU: 0 UID: 0 PID: 53 Comm: kworker/u9:2 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  297.216819][   T53] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  297.216825][   T53] Workqueue: writeback wb_workfn (flush-7:5)
[  297.216840][   T53] Call Trace:
[  297.216845][   T53]  <TASK>
[  297.216850][   T53]  dump_stack_lvl+0x189/0x250
[  297.216864][   T53]  ? __pfx_dump_stack_lvl+0x10/0x10
[  297.216872][   T53]  ? __pfx_queue_work_on+0x10/0x10
[  297.216880][   T53]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  297.216890][   T53]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  297.216904][   T53]  f2fs_handle_critical_error+0x37c/0x540
[  297.216918][   T53]  f2fs_write_end_io+0x886/0xb60
[  297.216934][   T53]  __submit_merged_bio+0x27a/0x6a0
[  297.216947][   T53]  __submit_merged_write_cond+0x255/0x530
[  297.216960][   T53]  f2fs_write_data_pages+0x261d/0x3000
[  297.216993][   T53]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  297.217009][   T53]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  297.217033][   T53]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  297.217048][   T53]  ? trace_f2fs_writepages+0x7f/0x200
[  297.217058][   T53]  ? f2fs_write_node_pages+0x478/0x6e0
[  297.217070][   T53]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  297.217077][   T53]  ? lock_list_lru_of_memcg+0x238/0x4c0
[  297.217092][   T53]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  297.217102][   T53]  do_writepages+0x32e/0x550
[  297.217114][   T53]  ? reacquire_held_locks+0x127/0x1d0
[  297.217121][   T53]  ? writeback_sb_inodes+0x384/0x1010
[  297.217134][   T53]  __writeback_single_inode+0x145/0xff0
[  297.217143][   T53]  ? do_raw_spin_unlock+0x4d/0x240
[  297.217153][   T53]  writeback_sb_inodes+0x6c7/0x1010
[  297.217174][   T53]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  297.217202][   T53]  ? rcu_is_watching+0x15/0xb0
[  297.217215][   T53]  wb_writeback+0x43b/0xaf0
[  297.217227][   T53]  ? queue_io+0x361/0x590
[  297.217237][   T53]  ? __pfx_wb_writeback+0x10/0x10
[  297.217250][   T53]  ? _raw_spin_unlock_irq+0x23/0x50
[  297.217262][   T53]  wb_workfn+0x409/0xef0
[  297.217278][   T53]  ? __pfx_wb_workfn+0x10/0x10
[  297.217288][   T53]  ? __lock_acquire+0xab9/0xd20
[  297.217304][   T53]  ? process_scheduled_works+0x9ef/0x17b0
[  297.217315][   T53]  ? _raw_spin_unlock_irq+0x23/0x50
[  297.217323][   T53]  ? process_scheduled_works+0x9ef/0x17b0
[  297.217330][   T53]  ? process_scheduled_works+0x9ef/0x17b0
[  297.217338][   T53]  process_scheduled_works+0xae1/0x17b0
[  297.217393][   T53]  ? __pfx_process_scheduled_works+0x10/0x10
[  297.217412][   T53]  worker_thread+0x8a0/0xda0
[  297.217421][   T53]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  297.217434][   T53]  ? __kthread_parkme+0x7b/0x200
[  297.217448][   T53]  kthread+0x711/0x8a0
[  297.217459][   T53]  ? __pfx_worker_thread+0x10/0x10
[  297.217466][   T53]  ? __pfx_kthread+0x10/0x10
[  297.217476][   T53]  ? _raw_spin_unlock_irq+0x23/0x50
[  297.217484][   T53]  ? lockdep_hardirqs_on+0x9c/0x150
[  297.217494][   T53]  ? __pfx_kthread+0x10/0x10
[  297.217503][   T53]  ret_from_fork+0x3fc/0x770
[  297.217513][   T53]  ? __pfx_ret_from_fork+0x10/0x10
[  297.217524][   T53]  ? __switch_to_asm+0x39/0x70
[  297.217533][   T53]  ? __switch_to_asm+0x33/0x70
[  297.217541][   T53]  ? __pfx_kthread+0x10/0x10
[  297.217551][   T53]  ret_from_fork_asm+0x1a/0x30
[  297.217568][   T53]  </TASK>
[  297.217572][   T53] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  297.338218][   T53] CPU: 0 UID: 0 PID: 53 Comm: kworker/u9:2 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  297.338237][   T53] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  297.338246][   T53] Workqueue: writeback wb_workfn (flush-7:5)
[  297.338267][   T53] Call Trace:
[  297.338273][   T53]  <TASK>
[  297.338279][   T53]  dump_stack_lvl+0x189/0x250
[  297.338303][   T53]  ? __pfx_dump_stack_lvl+0x10/0x10
[  297.338317][   T53]  ? __pfx_queue_work_on+0x10/0x10
[  297.338329][   T53]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  297.338345][   T53]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  297.338404][   T53]  f2fs_handle_critical_error+0x37c/0x540
[  297.338428][   T53]  f2fs_write_end_io+0x886/0xb60
[  297.338456][   T53]  __submit_merged_bio+0x27a/0x6a0
[  297.338479][   T53]  __submit_merged_write_cond+0x255/0x530
[  297.338502][   T53]  f2fs_write_data_pages+0x261d/0x3000
[  297.338545][   T53]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  297.338573][   T53]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  297.338610][   T53]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  297.338634][   T53]  ? trace_f2fs_writepages+0x7f/0x200
[  297.338650][   T53]  ? f2fs_write_node_pages+0x478/0x6e0
[  297.338669][   T53]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  297.338681][   T53]  ? lock_list_lru_of_memcg+0x238/0x4c0
[  297.338707][   T53]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  297.338726][   T53]  do_writepages+0x32e/0x550
[  297.338755][   T53]  ? reacquire_held_locks+0x127/0x1d0
[  297.338767][   T53]  ? writeback_sb_inodes+0x384/0x1010
[  297.338791][   T53]  __writeback_single_inode+0x145/0xff0
[  297.338807][   T53]  ? do_raw_spin_unlock+0x4d/0x240
[  297.338825][   T53]  writeback_sb_inodes+0x6c7/0x1010
[  297.338865][   T53]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  297.338917][   T53]  ? rcu_is_watching+0x15/0xb0
[  297.338937][   T53]  wb_writeback+0x43b/0xaf0
[  297.338959][   T53]  ? queue_io+0x361/0x590
[  297.338978][   T53]  ? __pfx_wb_writeback+0x10/0x10
[  297.338999][   T53]  ? _raw_spin_unlock_irq+0x23/0x50
[  297.339018][   T53]  wb_workfn+0x409/0xef0
[  297.339044][   T53]  ? __pfx_wb_workfn+0x10/0x10
[  297.339061][   T53]  ? __lock_acquire+0xab9/0xd20
[  297.339087][   T53]  ? process_scheduled_works+0x9ef/0x17b0
[  297.339105][   T53]  ? _raw_spin_unlock_irq+0x23/0x50
[  297.339118][   T53]  ? process_scheduled_works+0x9ef/0x17b0
[  297.339128][   T53]  ? process_scheduled_works+0x9ef/0x17b0
[  297.339141][   T53]  process_scheduled_works+0xae1/0x17b0
[  297.339179][   T53]  ? __pfx_process_scheduled_works+0x10/0x10
[  297.339205][   T53]  worker_thread+0x8a0/0xda0
[  297.339220][   T53]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  297.339241][   T53]  ? __kthread_parkme+0x7b/0x200
[  297.339263][   T53]  kthread+0x711/0x8a0
[  297.339279][   T53]  ? __pfx_worker_thread+0x10/0x10
[  297.339291][   T53]  ? __pfx_kthread+0x10/0x10
[  297.339307][   T53]  ? _raw_spin_unlock_irq+0x23/0x50
[  297.339321][   T53]  ? lockdep_hardirqs_on+0x9c/0x150
[  297.339334][   T53]  ? __pfx_kthread+0x10/0x10
[  297.339376][   T53]  ret_from_fork+0x3fc/0x770
[  297.339393][   T53]  ? __pfx_ret_from_fork+0x10/0x10
[  297.339412][   T53]  ? __switch_to_asm+0x39/0x70
[  297.339426][   T53]  ? __switch_to_asm+0x33/0x70
[  297.339439][   T53]  ? __pfx_kthread+0x10/0x10
[  297.339454][   T53]  ret_from_fork_asm+0x1a/0x30
[  297.339482][   T53]  </TASK>
[  297.339488][   T53] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  297.367146][T12918] loop3: detected capacity change from 0 to 1024
[  297.568316][T12924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2494'.
[  297.623966][T12926] loop5: detected capacity change from 0 to 4096
[  297.867963][T12932] loop5: detected capacity change from 0 to 32768
[  297.875480][   T33] kauditd_printk_skb: 309 callbacks suppressed
[  297.875488][   T33] audit: type=1800 audit(2000000146.600:414): pid=12932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2502" name="file1" dev="loop5" ino=4 res=0 errno=0
[  298.610069][   T33] audit: type=1326 audit(2000000147.330:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12945 comm="syz.5.2508" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c2d8ebe9 code=0x7ffc0000
[  298.629206][   T33] audit: type=1326 audit(2000000147.340:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12945 comm="syz.5.2508" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c2d8ebe9 code=0x7ffc0000
[  298.647035][   T33] audit: type=1326 audit(2000000147.340:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12945 comm="syz.5.2508" exe="/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f54c2d8ebe9 code=0x7ffc0000
[  298.666152][   T33] audit: type=1326 audit(2000000147.340:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12945 comm="syz.5.2508" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c2d8ebe9 code=0x7ffc0000
[  298.688164][ T5898] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  298.858373][ T5898] usb 4-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=6f.3b
[  298.862048][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.078285][ T5898] pegasus 4-1:254.0: probe with driver pegasus failed with error -71
[  299.084281][ T5898] usb 4-1: USB disconnect, device number 36
[  299.422066][T12974] ./file0: Can't lookup blockdev
[  299.858522][T13002] loop3: detected capacity change from 0 to 1024
[  299.939150][ T3638] hfsplus: b-tree write err: -5, ino 4
[  300.027993][T13008] loop3: detected capacity change from 0 to 512
[  300.032976][T13008] EXT4-fs: Ignoring removed orlov option
[  300.036364][T13008] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  300.055164][T13008] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  300.059225][T13008] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.2535: corrupted in-inode xattr: e_value size too large
[  300.074432][T13008] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2535: couldn't read orphan inode 15 (err -117)
[  300.084187][T13008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  300.189566][ T7016] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.344308][T13012] capability: warning: `syz.3.2536' uses 32-bit capabilities (legacy support in use)
[  300.591397][T13021] netlink: 'syz.2.2540': attribute type 10 has an invalid length.
[  300.943069][T13026] loop3: detected capacity change from 0 to 2048
[  300.965695][T13026] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  301.309408][T13042] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  301.424035][T13056] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2556'.
[  303.011326][T13083] netlink: 'syz.5.2567': attribute type 10 has an invalid length.
[  303.014422][T13083] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.017112][T13083] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.027623][T13083] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.030850][T13083] bridge0: port 2(bridge_slave_1) entered forwarding state
[  303.033611][T13083] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.036026][T13083] bridge0: port 1(bridge_slave_0) entered forwarding state
[  303.042605][T13083] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  303.207795][T13089] fuse: Bad value for 'fd'
[  303.673057][T13087] loop5: detected capacity change from 0 to 32768
[  303.692768][T13087] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  303.714285][T13087] XFS (loop5): Ending clean mount
[  303.807987][T11410] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  303.988665][T13115] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2578'.
[  303.991796][T13115] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2578'.
[  304.039992][T13117] loop5: detected capacity change from 0 to 65
[  304.047470][T13117] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing
[  304.049825][T13117] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop5
[  304.586833][T13144] trusted_key: syz.2.2592 sent an empty control message without MSG_MORE.
[  304.905625][ T5900] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  305.077138][ T5900] usb 6-1: Using ep0 maxpacket: 32
[  305.085159][ T5900] usb 6-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0
[  305.089538][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.105409][ T5900] usb 6-1: config 0 descriptor??
[  305.108838][ T5900] rndis_host 6-1:0.0: probe with driver rndis_host failed with error -22
[  305.430825][ T5898] usb 6-1: USB disconnect, device number 14
[  305.465926][T13173] vivid-001: disconnect
[  305.471675][T13172] vivid-001: reconnect
[  305.651742][T13179] loop3: detected capacity change from 0 to 512
[  305.667829][T13179] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0
[  305.673935][T13179] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  305.678413][T13179] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2607: Failed to acquire dquot type 1
[  305.684231][T13179] EXT4-fs (loop3): 1 truncate cleaned up
[  305.686978][T13179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  305.691058][T13179] ext4 filesystem being mounted at /745/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  305.780405][ T7016] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.104804][ T5900] usb 4-1: new full-speed USB device number 37 using dummy_hcd
[  306.217981][T13208] loop5: detected capacity change from 0 to 2048
[  306.241247][T13208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  306.250557][T13208] EXT4-fs (loop5): shut down requested (2)
[  306.268939][T11410] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.295836][ T5900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.300204][ T5900] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  306.315573][ T5900] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  306.319645][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.329530][ T5900] usb 4-1: config 0 descriptor??
[  306.334311][ T5900] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  306.337411][ T5900] dvb-usb: bulk message failed: -22 (3/0)
[  306.342221][ T5900] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  306.346792][ T5900] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  306.349639][ T5900] usb 4-1: media controller created
[  306.353712][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  306.360411][ T5900] dvb-usb: bulk message failed: -22 (6/0)
[  306.362439][T13212] loop5: detected capacity change from 0 to 4096
[  306.362915][ T5900] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  306.367143][T13212] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  306.370579][ T5900] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input35
[  306.377715][ T5900] dvb-usb: schedule remote query interval to 150 msecs.
[  306.381663][ T5900] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  306.382193][T13212] ntfs3(loop5): ino=19, mi_enum_attr
[  306.387526][T13212] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  306.393653][T13212] ntfs3(loop5): failed to convert "c46c" to cp869
[  306.396149][T13212] ntfs3(loop5): ino=20, mi_enum_attr
[  306.551992][ T5900] dvb-usb: bulk message failed: -22 (1/0)
[  306.555705][ T5900] dvb-usb: error while querying for an remote control event.
[  306.629179][T13223] syz_tun: entered promiscuous mode
[  306.629721][ T5898] usb 4-1: USB disconnect, device number 37
[  306.633768][T13223] syz_tun: left promiscuous mode
[  306.742030][ T5898] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  307.649521][T13242] loop3: detected capacity change from 0 to 40427
[  307.654598][T13242] F2FS-fs (loop3): Invalid log sectors per block(0) log sectorsize(9)
[  307.657338][T13242] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  307.665687][T13242] F2FS-fs (loop3): invalid crc value
[  307.697568][T13242] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  307.700731][T13242] F2FS-fs (loop3): Start checkpoint disabled!
[  307.708432][T13242] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  307.711249][T13242] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  307.963147][T13253] loop3: detected capacity change from 0 to 32768
[  307.970770][T13253] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  307.999460][ T7016] ocfs2: Unmounting device (7,3) on (node local)
[  308.079589][T13257] loop5: detected capacity change from 0 to 2048
[  308.132605][T13263] loop5: detected capacity change from 0 to 1024
[  308.141768][T13265] loop3: detected capacity change from 0 to 256
[  308.163064][T13265] FAT-fs (loop3): Directory bread(block 64) failed
[  308.167889][T13265] FAT-fs (loop3): Directory bread(block 65) failed
[  308.170524][T13265] FAT-fs (loop3): Directory bread(block 66) failed
[  308.184536][T13265] FAT-fs (loop3): Directory bread(block 67) failed
[  308.188508][T13265] FAT-fs (loop3): Directory bread(block 68) failed
[  308.191177][T13265] FAT-fs (loop3): Directory bread(block 69) failed
[  308.193872][T13265] FAT-fs (loop3): Directory bread(block 70) failed
[  308.200397][T13265] FAT-fs (loop3): Directory bread(block 71) failed
[  308.202681][T13265] FAT-fs (loop3): Directory bread(block 72) failed
[  308.206122][T13265] FAT-fs (loop3): Directory bread(block 73) failed
[  308.217292][   T33] audit: type=1800 audit(2000000156.940:419): pid=13265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2641" name="file1" dev="loop3" ino=1048722 res=0 errno=0
[  309.319158][T13299] loop5: detected capacity change from 0 to 32768
[  309.324009][T13299] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2656 (13299)
[  309.335409][T13299] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  309.339756][T13299] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  309.343015][T13299] BTRFS info (device loop5): disk space caching is enabled
[  309.346384][T13299] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  309.368544][T13299] BTRFS info (device loop5): rebuilding free space tree
[  309.374570][ T5913] usb 4-1: new full-speed USB device number 38 using dummy_hcd
[  309.377196][T13299] BTRFS info (device loop5): disabling free space tree
[  309.380013][T13299] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  309.384191][T13299] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  309.442198][T11410] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  309.559499][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  309.563063][ T5913] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  309.574573][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.581475][ T5913] usb 4-1: config 0 descriptor??
[  309.584827][T13298] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  309.996299][ T5913] elan 0003:04F3:0755.0017: unknown main item tag 0x0
[  309.999095][ T5913] elan 0003:04F3:0755.0017: item fetching failed at offset 3/5
[  310.002152][ T5913] elan 0003:04F3:0755.0017: Hid Parse failed
[  310.005282][ T5913] elan 0003:04F3:0755.0017: probe with driver elan failed with error -22
[  310.106686][ T5898] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  310.200737][ T5913] usb 4-1: USB disconnect, device number 38
[  310.259206][ T5898] usb 6-1: Using ep0 maxpacket: 32
[  310.262834][ T5898] usb 6-1: config 0 has an invalid interface number: 86 but max is 0
[  310.266907][ T5898] usb 6-1: config 0 has no interface number 0
[  310.269042][ T5898] usb 6-1: config 0 interface 86 altsetting 2 endpoint 0x9 has invalid wMaxPacketSize 0
[  310.273222][ T5898] usb 6-1: config 0 interface 86 has no altsetting 0
[  310.278594][ T5898] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=33.7a
[  310.282175][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.285779][ T5898] usb 6-1: Product: syz
[  310.287177][ T5898] usb 6-1: Manufacturer: syz
[  310.288710][ T5898] usb 6-1: SerialNumber: syz
[  310.292482][ T5898] usb 6-1: config 0 descriptor??
[  310.340538][T13339] fuse: Bad value for 'fd'
[  310.501635][ T5913] usb 6-1: USB disconnect, device number 15
[  312.686576][T13410] loop3: detected capacity change from 0 to 1024
[  312.714012][T13410] hfsplus: xattr search failed
[  312.737207][  T997] hfsplus: b-tree write err: -5, ino 3
[  313.417665][T13457] netlink: 'syz.5.2720': attribute type 39 has an invalid length.
[  313.545264][ T5900] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  313.698329][ T5900] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  313.701814][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.706967][ T5900] usb 4-1: Product: syz
[  313.708799][ T5900] usb 4-1: Manufacturer: syz
[  313.710638][ T5900] usb 4-1: SerialNumber: syz
[  313.715203][ T5900] usb 4-1: config 0 descriptor??
[  313.726537][ T5900] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 039
[  313.897642][T13467] loop5: detected capacity change from 0 to 32768
[  313.946886][T13467] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  313.965322][T13467] XFS (loop5): Ending clean mount
[  313.970436][T13467] XFS (loop5): Quotacheck needed: Please wait.
[  314.005409][T13467] XFS (loop5): Quotacheck: Done.
[  314.386405][ T5900] i2c i2c-2: failure reading functionality
[  314.393376][ T5900] i2c i2c-2: connected i2c-tiny-usb device
[  314.401804][ T5900] usb 4-1: USB disconnect, device number 39
[  314.939566][T13487] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2729'.
[  314.943994][T13487] net_ratelimit: 25 callbacks suppressed
[  314.944007][T13487] openvswitch: netlink: Missing key (keys=40, expected=80)
[  315.123476][T13494] loop3: detected capacity change from 0 to 1024
[  315.185830][T11410] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  315.644256][T13501] nbd0: detected capacity change from 0 to 127
[  315.649486][ T6905] block nbd0: Receive control failed (result -32)
[  315.804077][T13509] netlink: 'syz.2.2739': attribute type 2 has an invalid length.
[  315.820026][T13505] loop5: detected capacity change from 0 to 4096
[  315.829130][T13505] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  316.738030][   T36] hfsplus: b-tree write err: -5, ino 4
[  316.789104][T13523] program syz.3.2745 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  316.802004][T13525] 9pnet_fd: Insufficient options for proto=fd
[  316.826541][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  316.828741][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  317.109970][T13550] geneve2: entered allmulticast mode
[  317.166091][T13552] loop3: detected capacity change from 0 to 64
[  317.219434][T13554] loop3: detected capacity change from 0 to 64
[  317.471446][   T33] audit: type=1326 audit(2000002744.189:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.2.2764" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb953f8ebe9 code=0x7ffc0000
[  317.483052][   T33] audit: type=1326 audit(2000002744.189:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.2.2764" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb953f8ebe9 code=0x7ffc0000
[  317.494681][   T33] audit: type=1326 audit(2000002744.189:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.2.2764" exe="/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7fb953f8ebe9 code=0x7ffc0000
[  317.507468][   T33] audit: type=1326 audit(2000002744.189:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.2.2764" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb953f8ebe9 code=0x7ffc0000
[  317.517744][   T33] audit: type=1326 audit(2000002744.189:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.2.2764" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb953f8ebe9 code=0x7ffc0000
[  317.636811][T13570] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2768'.
[  318.739811][   T33] audit: type=1326 audit(2000002745.459:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13588 comm="syz.5.2778" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c2d8ebe9 code=0x7fc00000
[  318.795101][T13630] loop3: detected capacity change from 0 to 32768
[  318.819100][T13630] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  318.842002][T13630] XFS (loop3): Ending clean mount
[  318.929044][ T7016] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  319.295852][T13656] loop3: detected capacity change from 0 to 4096
[  319.320288][T13656] ntfs3(loop3): ino=19, mi_enum_attr
[  319.322667][T13656] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  319.708856][T13665] overlayfs: failed to clone upperpath
[  320.126251][T13685] loop5: detected capacity change from 0 to 1024
[  320.137702][T13685] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  320.159686][T11410] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  320.193807][ T5898] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  320.275856][T13696] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2820'.
[  320.279486][T13696] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2820'.
[  320.347805][ T5898] usb 4-1: Using ep0 maxpacket: 16
[  320.351589][ T5898] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  320.355466][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.360801][ T5898] usb 4-1: config 0 descriptor??
[  320.365100][ T5898] gspca_main: sonixj-2.14.0 probing 0471:0327
[  320.533847][    T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  320.685856][    T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  320.689658][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  320.694316][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  320.698283][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  320.706049][    T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  320.710435][    T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  320.715234][    T9] usb 6-1: Product: syz
[  320.717150][    T9] usb 6-1: Manufacturer: syz
[  320.723354][    T9] cdc_wdm 6-1:1.0: skipping garbage
[  320.726604][    T9] cdc_wdm 6-1:1.0: skipping garbage
[  320.729050][    T9] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[  320.928346][  T792] usb 6-1: USB disconnect, device number 16
[  321.371821][    T9] usb 4-1: USB disconnect, device number 40
[  321.750373][   T33] audit: type=1326 audit(2000002748.460:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.2.2829" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb953f8ebe9 code=0x7ffc0000
[  321.760460][   T33] audit: type=1326 audit(2000002748.470:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.2.2829" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb953f2add9 code=0x7ffc0000
[  321.771874][   T33] audit: type=1326 audit(2000002748.480:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.2.2829" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb953f8ebe9 code=0x7ffc0000
[  321.779743][   T33] audit: type=1326 audit(2000002748.480:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13714 comm="syz.2.2829" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb953f8ebe9 code=0x7ffc0000
[  321.966259][T13721] loop3: detected capacity change from 0 to 8
[  322.038432][T13723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2831'.
[  323.216837][T13738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2838'.
[  323.370786][T13734] loop5: detected capacity change from 0 to 32768
[  323.375504][T13734] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2836 (13734)
[  323.390043][T13734] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  323.403684][T13734] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  323.407237][T13734] BTRFS info (device loop5): using free-space-tree
[  323.458618][T13763] loop3: detected capacity change from 0 to 256
[  323.475249][T13763] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  323.583545][T11410] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  323.623179][T13782] loop3: detected capacity change from 0 to 256
[  323.687548][T13782] FAT-fs (loop3): Directory bread(block 64) failed
[  323.694534][T13782] FAT-fs (loop3): Directory bread(block 65) failed
[  323.697382][T13782] FAT-fs (loop3): Directory bread(block 66) failed
[  323.700189][T13782] FAT-fs (loop3): Directory bread(block 67) failed
[  323.702896][T13782] FAT-fs (loop3): Directory bread(block 68) failed
[  323.730726][T13782] FAT-fs (loop3): Directory bread(block 69) failed
[  323.733051][T13782] FAT-fs (loop3): Directory bread(block 70) failed
[  323.745899][T13782] FAT-fs (loop3): Directory bread(block 71) failed
[  323.748912][T13782] FAT-fs (loop3): Directory bread(block 72) failed
[  323.751228][T13782] FAT-fs (loop3): Directory bread(block 73) failed
[  323.923100][T13800] netlink: 'syz.3.2859': attribute type 1 has an invalid length.
[  324.027276][ T5855] Bluetooth: hci1: command 0x0406 tx timeout
[  324.261747][T13809] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20004
[  324.361743][T13819] loop3: detected capacity change from 0 to 4096
[  324.386650][T13819] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  324.516688][ T7016] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.263198][ T5898] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  325.415013][ T5898] usb 4-1: config 0 has an invalid interface number: 104 but max is 0
[  325.422018][ T5898] usb 4-1: config 0 has no interface number 0
[  325.428797][ T5898] usb 4-1: config 0 interface 104 has no altsetting 0
[  325.434175][ T5898] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9
[  325.437956][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.443544][ T5898] usb 4-1: Product: syz
[  325.445576][ T5898] usb 4-1: Manufacturer: syz
[  325.447706][ T5898] usb 4-1: SerialNumber: syz
[  325.457172][ T5898] usb 4-1: config 0 descriptor??
[  325.462452][ T5898] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  325.661845][ T5898] gspca_vc032x: reg_r err -71
[  325.674242][ T5898] gspca_vc032x: I2c Bus Busy Wait 00
[  325.675950][ T5898] gspca_vc032x: I2c Bus Busy Wait 00
[  325.677658][ T5898] gspca_vc032x: I2c Bus Busy Wait 00
[  325.679389][ T5898] gspca_vc032x: I2c Bus Busy Wait 00
[  325.681696][ T5898] gspca_vc032x: I2c Bus Busy Wait 00
[  325.685647][ T5898] gspca_vc032x: I2c Bus Busy Wait 00
[  325.687516][ T5898] gspca_vc032x: I2c Bus Busy Wait 00
[  325.689276][ T5898] gspca_vc032x: I2c Bus Busy Wait 00
[  325.690990][ T5898] gspca_vc032x: I2c Bus Busy Wait 00
[  325.696846][ T5898] gspca_vc032x: I2c Bus Busy Wait 00
[  325.698982][ T5898] gspca_vc032x: I2c Bus Busy Wait 00
[  325.701181][ T5898] gspca_vc032x: I2c Bus Busy Wait 00
[  325.703826][ T5898] gspca_vc032x: I2c Bus Busy Wait 00
[  325.706081][ T5898] gspca_vc032x: I2c Bus Busy Wait 00
[  325.708274][ T5898] gspca_vc032x: I2c Bus Busy Wait 00
[  325.710420][ T5898] gspca_vc032x: I2c Bus Busy Wait 00
[  325.712580][ T5898] gspca_vc032x: I2c Bus Busy Wait 00
[  325.715963][ T5898] gspca_vc032x: I2c Bus Busy Wait 00
[  325.718181][ T5898] gspca_vc032x: Unknown sensor...
[  325.720243][ T5898] vc032x 4-1:0.104: probe with driver vc032x failed with error -22
[  325.725097][ T5898] usb 4-1: USB disconnect, device number 41
[  326.385829][T13878] loop3: detected capacity change from 0 to 32768
[  326.388926][T13878] XFS: attr2 mount option is deprecated.
[  326.407772][T13878] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  326.411537][T13878] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  326.432150][T13878] XFS (loop3): Ending clean mount
[  326.437305][T13878] XFS (loop3): Quotacheck needed: Please wait.
[  326.469247][T13878] XFS (loop3): Quotacheck: Done.
[  326.485202][ T7016] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  326.615833][T13899] Falling back ldisc for ptm0.
[  326.835287][T13917] loop3: detected capacity change from 0 to 64
[  327.043591][ T5898] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  327.060580][T13931] IPv6: NLM_F_CREATE should be specified when creating new route
[  327.255615][ T5898] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[  327.259190][ T5898] usb 6-1: config 0 has no interface number 0
[  327.262192][ T5898] usb 6-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2
[  327.267395][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.273232][ T5898] usb 6-1: config 0 descriptor??
[  327.284980][ T5898] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.105/input/input36
[  327.419534][T13941] can0: slcan on ttyS3.
[  327.584322][ T5281] bcm5974 6-1:0.105: could not read from device
[  327.593545][ T5281] bcm5974 6-1:0.105: could not read from device
[  327.596144][ T5898] usb 6-1: USB disconnect, device number 17
[  327.599699][ T5281] bcm5974 6-1:0.105: could not read from device
[  327.616360][T13941] can0 (unregistered): slcan off ttyS3.
[  327.691539][T13951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2918'.
[  328.750906][T14002] netlink: 'syz.3.2935': attribute type 10 has an invalid length.
[  328.760270][T14002] team0: Device hsr_slave_0 failed to register rx_handler
[  329.202991][T14022] loop5: detected capacity change from 0 to 1024
[  329.228900][   T36] hfsplus: b-tree write err: -5, ino 4
[  329.962859][ T5900] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  330.069687][T14064] netlink: 'syz.2.2969': attribute type 7 has an invalid length.
[  330.126526][ T5900] usb 6-1: Using ep0 maxpacket: 32
[  330.130028][ T5900] usb 6-1: config 2 has an invalid interface number: 45 but max is 0
[  330.134804][ T5900] usb 6-1: config 2 has no interface number 0
[  330.136754][ T5900] usb 6-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  330.140170][ T5900] usb 6-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  330.145841][ T5900] usb 6-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92
[  330.149119][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.162479][ T5900] usb 6-1: Product: syz
[  330.164062][ T5900] usb 6-1: Manufacturer: syz
[  330.165872][ T5900] usb 6-1: SerialNumber: syz
[  330.175496][ T5900] kobil_sct 6-1:2.45: KOBIL USB smart card terminal converter detected
[  330.182623][ T5900] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  330.272300][T14072] loop3: detected capacity change from 0 to 32768
[  330.385995][T14049] loop5: detected capacity change from 0 to 256
[  330.389765][T14049] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  330.394398][T14049] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  330.402634][T14049] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  332.263941][   T33] kauditd_printk_skb: 75 callbacks suppressed
[  332.263954][   T33] audit: type=1326 audit(2000002758.981:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14127 comm="syz.3.2990" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365038ebe9 code=0x7ffc0000
[  332.275540][   T33] audit: type=1326 audit(2000002758.991:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14127 comm="syz.3.2990" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365038ebe9 code=0x7ffc0000
[  332.287138][   T33] audit: type=1326 audit(2000002758.991:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14127 comm="syz.3.2990" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f365038ebe9 code=0x7ffc0000
[  332.296298][   T33] audit: type=1326 audit(2000002758.991:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14127 comm="syz.3.2990" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365038ebe9 code=0x7ffc0000
[  332.304726][   T33] audit: type=1326 audit(2000002758.991:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14127 comm="syz.3.2990" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365038ebe9 code=0x7ffc0000
[  332.324050][T14130] loop3: detected capacity change from 0 to 512
[  332.328041][T14130] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  332.338699][T14130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  332.345114][T14130] ext4 filesystem being mounted at /885/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  332.364663][   T33] audit: type=1800 audit(2000002759.081:510): pid=14130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2991" name="file1" dev="loop3" ino=15 res=0 errno=0
[  332.374548][   T33] audit: type=1800 audit(2000002759.091:511): pid=14130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2991" name="file2" dev="loop3" ino=16 res=0 errno=0
[  332.406196][ T7016] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.637452][T14136] loop3: detected capacity change from 0 to 8192
[  332.694028][T14136]  loop3: p1 p2[DM] p4
[  332.695801][T14136] loop3: p1 size 196608 extends beyond EOD, truncated
[  332.717833][T14136] loop3: p2 start 4292936063 is beyond EOD, truncated
[  332.720544][T14136] loop3: p4 size 50331648 extends beyond EOD, truncated
[  332.749588][  T792] usb 6-1: USB disconnect, device number 18
[  332.761798][  T792] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  332.765610][  T792] kobil_sct 6-1:2.45: device disconnected
[  333.110762][T14154] loop5: detected capacity change from 0 to 32768
[  333.386882][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3007'.
[  333.396213][T14156] loop5: detected capacity change from 0 to 32768
[  333.402864][T14156] ERROR: (device loop5): dbAlloc: unable to allocate blocks
[  333.402864][T14156] 
[  333.406717][T14156] jfs_create: dtInsert returned -EIO
[  333.408517][T14156] ERROR: (device loop5): jfs_create: 
[  333.408517][T14156] 
[  333.727917][T14183] loop5: detected capacity change from 0 to 40427
[  333.731110][T14183] F2FS-fs (loop5): Image doesn't support compression
[  333.734578][T14183] F2FS-fs (loop5): build fault injection rate: 4
[  333.736838][T14183] F2FS-fs (loop5): build fault injection type: 0x5288
[  333.740437][T14183] F2FS-fs (loop5): invalid crc value
[  333.795772][T14183] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  333.805115][T14183] F2FS-fs (loop5): Start checkpoint disabled!
[  333.808964][T14183] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  334.230708][T14190] loop5: detected capacity change from 0 to 32768
[  334.238764][T14190] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  334.249529][T14190] XFS (loop5): Ending clean mount
[  334.254352][T14190] XFS (loop5): Quotacheck needed: Please wait.
[  334.288963][T14190] XFS (loop5): Quotacheck: Done.
[  334.330336][T11410] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  334.490660][T14206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3021'.
[  334.766889][T14228] loop5: detected capacity change from 0 to 16
[  334.770378][T14228] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  334.805459][T14218] loop3: detected capacity change from 0 to 32768
[  334.809371][T14218] (syz.3.3027,14218,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #66: rec_len % 4 != 0 - offset=108, inode=18446744073709486150, rec_len=65535, name_len=9
[  334.816231][T14218] (syz.3.3027,14218,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  334.819148][T14218] (syz.3.3027,14218,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 3, possibly corrupt fs?
[  334.819162][T14218] (syz.3.3027,14218,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  334.826956][T14218] (syz.3.3027,14218,0):ocfs2_initialize_super:2198 ERROR: status = -22
[  334.829704][T14218] (syz.3.3027,14218,0):ocfs2_fill_super:1177 ERROR: status = -22
[  335.539858][T14243] loop5: detected capacity change from 0 to 512
[  335.851905][ T5913] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  336.013606][ T5913] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  336.021301][ T5913] usb 6-1: config 0 has no interfaces?
[  336.029787][ T5913] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  336.033639][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.037238][ T5913] usb 6-1: Product: syz
[  336.039001][ T5913] usb 6-1: Manufacturer: syz
[  336.041127][ T5913] usb 6-1: SerialNumber: syz
[  336.046707][ T5913] usb 6-1: config 0 descriptor??
[  337.008399][T14276] loop5: detected capacity change from 0 to 8192
[  337.014795][T14276] ntfs3: Unknown parameter ''
[  337.962954][T14301] 9pnet_fd: Insufficient options for proto=fd
[  338.824456][ T5913] usb 6-1: USB disconnect, device number 19
[  338.844590][T14320] loop3: detected capacity change from 0 to 1024
[  338.847699][T14320] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  338.853158][T14320] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  338.856151][T14320] EXT4-fs (loop3): orphan cleanup on readonly fs
[  338.858699][T14320] Quota error (device loop3): v2_read_file_info: Can't read info structure
[  338.863699][T14320] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  338.870431][T14320] EXT4-fs (loop3): Cannot turn on quotas: error -5
[  338.875696][T14320] EXT4-fs (loop3): 1 truncate cleaned up
[  338.878954][T14320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  338.898786][ T7016] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.949862][T14318] loop5: detected capacity change from 0 to 32768
[  338.953559][T14318] XFS: noikeep mount option is deprecated.
[  338.960331][T14318] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  338.977535][T14318] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  338.988925][T14318] XFS (loop5): Starting recovery (logdev: internal)
[  339.001529][T14318] XFS (loop5): Ending recovery (logdev: internal)
[  339.021519][T11410] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  339.192049][  T792] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  339.342070][  T792] usb 4-1: Using ep0 maxpacket: 16
[  339.353213][  T792] usb 4-1: config 0 has an invalid interface number: 64 but max is 0
[  339.356271][  T792] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  339.359717][  T792] usb 4-1: config 0 has no interface number 0
[  339.377803][  T792] usb 4-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b
[  339.381376][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.390321][  T792] usb 4-1: config 0 descriptor??
[  339.395724][  T792] usb 4-1: Found UVC 0.00 device <unnamed> (0bd3:05f4)
[  339.398370][  T792] usb 4-1: No valid video chain found.
[  339.523379][T14345] loop5: detected capacity change from 0 to 32768
[  339.527328][T14345] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3078 (14345)
[  339.534995][T14345] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  339.539294][T14345] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  339.543155][T14345] BTRFS info (device loop5): disk space caching is enabled
[  339.546222][T14345] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  339.576145][T14345] BTRFS info (device loop5): rebuilding free space tree
[  339.591504][T14345] BTRFS info (device loop5): disabling free space tree
[  339.594656][T14345] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  339.596729][  T792] usb 4-1: USB disconnect, device number 42
[  339.598798][T14345] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  339.640906][T11410] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  339.770674][T14365] loop5: detected capacity change from 0 to 1024
[  339.777814][T14365] EXT4-fs: Ignoring removed bh option
[  339.779629][T14365] EXT4-fs: inline encryption not supported
[  339.783422][T14365] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  339.787861][T14365] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  339.794001][T14365] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.3080: lblock 2 mapped to illegal pblock 2 (length 1)
[  339.799777][T14365] Quota error (device loop5): qtree_write_dquot: dquota write failed
[  339.805268][T14365] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.3080: lblock 0 mapped to illegal pblock 48 (length 1)
[  339.810850][T14365] Quota error (device loop5): v2_write_file_info: Can't write info structure
[  339.813911][T14365] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3080: Failed to acquire dquot type 0
[  339.817774][T14365] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  339.821110][T14365] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.3080: mark_inode_dirty error
[  339.825150][T14365] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  339.828915][T14365] EXT4-fs (loop5): 1 orphan inode deleted
[  339.831567][T14365] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  339.845268][ T6900] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u10:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  339.851590][ T6900] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  339.856175][ T6900] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u10:6: Failed to release dquot type 0
[  339.863600][T14365] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  339.880482][T11410] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.994589][T14373] kAFS: No cell specified
[  340.452641][ T5913] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  340.612075][ T5913] usb 4-1: Using ep0 maxpacket: 8
[  340.619857][ T5913] usb 4-1: unable to get BOS descriptor or descriptor too short
[  340.624731][ T5913] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[  340.628718][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  340.639305][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  340.644053][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  340.647570][ T5913] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1
[  340.650820][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  340.654654][ T5913] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[  340.660962][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64
[  340.667287][ T5913] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  340.670299][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.673423][ T5913] usb 4-1: Product: syz
[  340.674843][ T5913] usb 4-1: Manufacturer: syz
[  340.676413][ T5913] usb 4-1: SerialNumber: syz
[  340.679258][ T5913] usb 4-1: config 0 descriptor??
[  340.682842][T14379] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  340.686965][ T5913] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  340.891494][ T5913] usb 4-1: USB disconnect, device number 43
[  341.320857][    T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  341.560297][    T9] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  341.564762][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  341.572558][    T9] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  341.576949][    T9] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  341.580373][    T9] usb 6-1: Manufacturer: syz
[  341.585110][    T9] usb 6-1: config 0 descriptor??
[  341.642045][    T9] rc_core: IR keymap rc-hauppauge not found
[  341.644613][    T9] Registered IR keymap rc-empty
[  341.647502][    T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  341.655278][    T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input37
[  341.867446][    C0] igorplugusb 6-1:0.0: Error: urb status = -32
[  341.869462][  T792] usb 6-1: USB disconnect, device number 20
[  341.870180][    C0] igorplugusb 6-1:0.0: submit urb failed: -19
[  342.415422][   T33] audit: type=1326 audit(2000002769.132:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.5.3105" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c2d8ebe9 code=0x7ffc0000
[  342.461968][   T33] audit: type=1326 audit(2000002769.132:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.5.3105" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c2d8ebe9 code=0x7ffc0000
[  342.492524][   T33] audit: type=1326 audit(2000002769.132:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.5.3105" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54c2d8ebe9 code=0x7ffc0000
[  342.502259][   T33] audit: type=1326 audit(2000002769.132:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.5.3105" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c2d8ebe9 code=0x7ffc0000
[  342.509566][   T33] audit: type=1326 audit(2000002769.132:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.5.3105" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54c2d8ebe9 code=0x7ffc0000
[  342.517775][   T33] audit: type=1326 audit(2000002769.132:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14423 comm="syz.5.3105" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c2d8ebe9 code=0x7ffc0000
[  342.556164][T14426] loop5: detected capacity change from 0 to 1024
[  342.635597][T14438] loop3: detected capacity change from 0 to 4096
[  343.924331][T14469] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  344.576229][T14496] random: crng reseeded on system resumption
[  344.686225][ T5898] IPVS: starting estimator thread 0...
[  344.794085][T14497] IPVS: using max 80 ests per chain, 192000 per kthread
[  344.919313][T14501] loop3: detected capacity change from 0 to 2364
[  345.213241][T14505] loop3: detected capacity change from 0 to 32768
[  345.217275][T14505] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3140 (14505)
[  345.309595][T14505] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  345.315218][T14505] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  345.321120][T14505] BTRFS info (device loop3): using free-space-tree
[  345.639535][ T7016] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  345.820766][   T47] kernel write not supported for file /sequencer (pid: 47 comm: kworker/1:1)
[  346.085828][T14550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3151'.
[  346.124663][T14556] loop3: detected capacity change from 0 to 256
[  346.135033][T14556] FAT-fs (loop3): Directory bread(block 64) failed
[  346.137179][T14556] FAT-fs (loop3): Directory bread(block 65) failed
[  346.139306][T14556] FAT-fs (loop3): Directory bread(block 66) failed
[  346.141389][T14556] FAT-fs (loop3): Directory bread(block 67) failed
[  346.144891][T14556] FAT-fs (loop3): Directory bread(block 68) failed
[  346.146986][T14556] FAT-fs (loop3): Directory bread(block 69) failed
[  346.149317][T14556] FAT-fs (loop3): Directory bread(block 70) failed
[  346.151403][T14556] FAT-fs (loop3): Directory bread(block 71) failed
[  346.154480][T14556] FAT-fs (loop3): Directory bread(block 72) failed
[  346.156523][T14556] FAT-fs (loop3): Directory bread(block 73) failed
[  346.316390][T14567] loop3: detected capacity change from 0 to 512
[  346.327600][T14567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  346.334458][T14567] ext4 filesystem being mounted at /935/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  346.347112][T14567] EXT4-fs warning (device loop3): verify_group_input:156: Last group not full
[  346.369386][ T7016] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.444387][T14574] loop3: detected capacity change from 0 to 128
[  346.449914][T14574] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  346.453997][T14574] ext4 filesystem being mounted at /937/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  346.478797][ T7016] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  346.578496][T14579] loop5: detected capacity change from 0 to 2048
[  346.582365][T14579] UDF-fs: error (device loop5): udf_load_logicalvol: error loading logical volume descriptor: Partition table too long (2048 > 72)
[  346.587336][T14579] UDF-fs: Scanning with blocksize 512 failed
[  346.591531][T14579] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  346.592428][T14581] loop3: detected capacity change from 0 to 512
[  346.597403][T14581] EXT4-fs: Ignoring removed nobh option
[  346.601379][T14579] UDF-fs: Scanning with blocksize 1024 failed
[  346.617871][T14581] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.3164: corrupted inode contents
[  346.630187][T14579] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  346.634728][T14579] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  346.637736][T14581] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.3164: mark_inode_dirty error
[  346.638285][T14579] UDF-fs: Scanning with blocksize 2048 failed
[  346.648824][T14581] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.3164: corrupted inode contents
[  346.649461][T14579] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  346.653751][T14581] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.3164: mark_inode_dirty error
[  346.659347][T14579] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  346.667101][T14581] __quota_error: 8 callbacks suppressed
[  346.667111][T14581] Quota error (device loop3): write_blk: dquota write failed
[  346.669819][T14579] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  346.672307][T14581] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  346.672382][T14581] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3164: Failed to acquire dquot type 0
[  346.676414][T14581] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.3164: corrupted inode contents
[  346.680224][T14579] UDF-fs: Scanning with blocksize 4096 failed
[  346.684330][T14581] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.3164: mark_inode_dirty error
[  346.690743][T14579] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1)
[  346.691958][T14581] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.3164: corrupted inode contents
[  346.705641][T14581] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.3164: mark_inode_dirty error
[  346.709922][T14581] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.3164: corrupted inode contents
[  346.714432][T14581] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  346.717559][T14581] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.3164: corrupted inode contents
[  346.722201][T14581] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.3164: mark_inode_dirty error
[  346.728500][T14581] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  346.733263][T14581] EXT4-fs (loop3): 1 truncate cleaned up
[  346.736584][T14581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  346.752096][T14581] ext4 filesystem being mounted at /939/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  346.796835][ T7016] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.862408][   T33] audit: type=1800 audit(2000002773.582:526): pid=14585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.5.3165" name="/" dev="sockfs" ino=33812 res=0 errno=0
[  346.904790][T14593] syz.5.3167 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  346.959735][T14600] loop5: detected capacity change from 0 to 8
[  347.632991][ T5913] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  347.793659][ T5913] usb 6-1: unable to get BOS descriptor or descriptor too short
[  347.803402][ T5913] usb 6-1: config 6 has an invalid interface number: 158 but max is 0
[  347.811017][ T5913] usb 6-1: config 6 has no interface number 0
[  347.819648][ T5913] usb 6-1: config 6 interface 158 altsetting 8 endpoint 0x1 has invalid wMaxPacketSize 0
[  347.827660][ T5913] usb 6-1: config 6 interface 158 has no altsetting 0
[  347.856366][ T5913] usb 6-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29
[  347.860191][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.867636][ T5913] usb 6-1: Product: syz
[  347.870478][ T5913] usb 6-1: Manufacturer: syz
[  347.873365][ T5913] usb 6-1: SerialNumber: syz
[  348.157092][ T5913] rtsx_usb 6-1:6.158: probe with driver rtsx_usb failed with error -8
[  348.195653][ T5913] usb 6-1: USB disconnect, device number 21
[  348.431335][T14639] loop3: detected capacity change from 0 to 2048
[  348.437921][T14639] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  348.756312][T14646] loop3: detected capacity change from 0 to 1024
[  348.759689][T14646] EXT4-fs: Ignoring removed bh option
[  348.766065][T14646] EXT4-fs: inline encryption not supported
[  348.770079][T14646] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  348.784931][T14646] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.3193: lblock 2 mapped to illegal pblock 2 (length 1)
[  348.791051][T14646] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  348.800092][T14646] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.3193: lblock 0 mapped to illegal pblock 48 (length 1)
[  348.806374][T14646] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  348.809909][T14646] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3193: Failed to acquire dquot type 0
[  348.816999][T14646] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  348.821278][T14646] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.3193: mark_inode_dirty error
[  348.829047][T14646] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  348.835274][T14646] EXT4-fs (loop3): 1 orphan inode deleted
[  348.839124][T14646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  348.848113][T14646] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 16: comm syz.3.3193: lblock 0 mapped to illegal pblock 16 (length 1)
[  348.856017][   T65] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u10:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  348.862539][   T65] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  348.872426][   T65] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u10:3: Failed to release dquot type 0
[  348.903515][ T7016] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.907251][ T7016] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  348.914518][ T7016] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  348.918549][ T7016] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  348.990444][T14644] loop5: detected capacity change from 0 to 32768
[  348.994000][T14644] XFS: attr2 mount option is deprecated.
[  348.998578][T14644] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  349.023712][T14644] XFS (loop5): Ending clean mount
[  349.027224][T14644] XFS (loop5): Quotacheck needed: Please wait.
[  349.059684][T14644] XFS (loop5): Quotacheck: Done.
[  349.104229][T11410] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  349.357137][T14671] loop5: detected capacity change from 0 to 256
[  349.360672][T14671] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  349.365055][T14671] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  349.376309][T14671] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  349.475244][T14672] loop3: detected capacity change from 0 to 32768
[  349.494318][T14672] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  349.551074][ T7016] ocfs2: Unmounting device (7,3) on (node local)
[  349.631015][T14684] loop5: detected capacity change from 0 to 2048
[  349.640202][T14685] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  349.784683][T14697] loop3: detected capacity change from 0 to 8
[  349.794370][T14697] SQUASHFS error: zlib decompression failed, data probably corrupt
[  349.799978][T14697] SQUASHFS error: Failed to read block 0x9b: -5
[  349.803042][T14697] SQUASHFS error: Unable to read metadata cache entry [99]
[  349.806389][T14697] SQUASHFS error: Unable to read inode 0x127
[  350.110933][T14717] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 3, id = 0
[  350.311496][T14713] loop3: detected capacity change from 0 to 40427
[  350.317498][T14713] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288)
[  350.325929][T14713] F2FS-fs (loop3): invalid crc value
[  350.329497][T14713] F2FS-fs (loop3): Current segment's next free block offset is inconsistent with bitmap, logtype:5, segno:2, type:0, next_blkoff:0, blkofs:1
[  350.338037][T14713] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117)
[  350.614166][T14727] loop3: detected capacity change from 0 to 4096
[  350.618328][T14727] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  350.634815][T14727] ntfs3(loop3): ino=1a, mi_enum_attr
[  350.637156][T14727] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  350.640403][T14727] ntfs3(loop3): ino=1a, mi_enum_attr
[  350.643119][T14727] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  351.925389][T14798] loop5: detected capacity change from 0 to 128
[  352.141869][ T5898] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  352.232546][    T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  352.295020][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  352.299302][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  352.303196][ T5898] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  352.308176][ T5898] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  352.311911][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.316770][ T5898] usb 4-1: config 0 descriptor??
[  352.391948][    T9] usb 6-1: Using ep0 maxpacket: 32
[  352.396014][    T9] usb 6-1: config 0 has an invalid interface number: 111 but max is 0
[  352.399706][    T9] usb 6-1: config 0 has no interface number 0
[  352.404912][    T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[  352.409018][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.413203][    T9] usb 6-1: Product: syz
[  352.415107][    T9] usb 6-1: Manufacturer: syz
[  352.417236][    T9] usb 6-1: SerialNumber: syz
[  352.421403][    T9] usb 6-1: config 0 descriptor??
[  352.626852][    T9] snd-usb-6fire 6-1:0.111: unable to receive device firmware state.
[  352.630512][    T9] snd-usb-6fire 6-1:0.111: probe with driver snd-usb-6fire failed with error -71
[  352.639407][    T9] usb 6-1: USB disconnect, device number 22
[  352.735908][ T5898] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  353.174974][T14820] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  354.128527][   T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  354.200016][T14841] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3274'.
[  354.203403][T14841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3274'.
[  354.610957][ T5898] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  354.771875][ T5898] usb 6-1: Using ep0 maxpacket: 8
[  354.776663][ T5898] usb 6-1: unable to get BOS descriptor or descriptor too short
[  354.778151][T14852] gfs2: path_lookup on GPL returned error -2
[  354.781239][ T5898] usb 6-1: config 2 has an invalid interface number: 164 but max is 0
[  354.787846][ T5898] usb 6-1: config 2 has no interface number 0
[  354.789994][ T5898] usb 6-1: config 2 interface 164 has no altsetting 0
[  354.794953][ T5898] usb 6-1: New USB device found, idVendor=0424, idProduct=9730, bcdDevice=50.16
[  354.799185][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.804369][ T5898] usb 6-1: Product: syz
[  354.808322][ T5898] usb 6-1: Manufacturer: syz
[  354.812433][ T5898] usb 6-1: SerialNumber: syz
[  354.828516][    T9] usb 4-1: USB disconnect, device number 44
[  355.027754][ T5898] smsc95xx v2.0.0
[  355.029139][ T5898] smsc95xx 6-1:2.164 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  355.035574][ T5898] smsc95xx 6-1:2.164: probe with driver smsc95xx failed with error -22
[  355.041246][ T5898] usb 6-1: USB disconnect, device number 23
[  355.367008][T14874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3289'.
[  355.585554][T14874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3289'.
[  355.671705][T14874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3289'.
[  355.877331][T14891] loop3: detected capacity change from 0 to 256
[  355.880841][T14891] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  355.972684][T14901] netlink: 'syz.3.3301': attribute type 1 has an invalid length.
[  356.038841][T14907] /dev/nullb0: Can't open blockdev
[  356.116723][   T47] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  356.126855][T14913] comedi: No check for data length of config insn id 4095 is implemented
[  356.129732][T14913] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c
[  356.135165][T14913] comedi: Assuming n=15 is correct
[  356.210465][ T5898] kernel write not supported for file /input/mice (pid: 5898 comm: kworker/1:4)
[  356.286150][   T47] usb 6-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd
[  356.289701][   T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.294381][   T47] usb 6-1: Product: syz
[  356.296295][   T47] usb 6-1: Manufacturer: syz
[  356.298195][   T47] usb 6-1: SerialNumber: syz
[  356.302358][   T47] usb 6-1: config 0 descriptor??
[  356.314242][   T55] Bluetooth: hci3: urb ffff888112c71f00 submission failed (2)
[  356.354303][T14921] loop3: detected capacity change from 0 to 32768
[  356.361099][T14921] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  356.385129][ T7016] ocfs2: Unmounting device (7,3) on (node local)
[  356.485737][T14925] loop3: detected capacity change from 0 to 64
[  356.516574][   T47] usb 6-1: USB disconnect, device number 24
[  356.679567][T14931] pim6reg: entered allmulticast mode
[  357.001876][ T5900] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  357.152232][ T5900] usb 4-1: Using ep0 maxpacket: 16
[  357.160764][ T5900] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  357.167740][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.174636][ T5900] usb 4-1: Product: syz
[  357.177243][ T5900] usb 4-1: Manufacturer: syz
[  357.179336][ T5900] usb 4-1: SerialNumber: syz
[  357.185672][ T5900] usb 4-1: config 0 descriptor??
[  357.188939][ T5900] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  357.395332][ T5900] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71
[  357.411982][ T5900] usb 4-1: USB disconnect, device number 45
[  358.262012][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  358.423807][T14994] loop5: detected capacity change from 0 to 128
[  358.428280][T14994] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  358.436457][T14994] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  359.636085][T15015] loop3: detected capacity change from 0 to 32768
[  359.958160][T15032] loop3: detected capacity change from 0 to 32768
[  359.972563][T15032] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[  359.972563][T15032] 
[  360.452706][T15056] loop5: detected capacity change from 0 to 1024
[  360.495646][T11410] hfsplus: bad catalog entry type
[  360.502307][T11410] hfsplus: bad catalog entry type
[  360.521118][ T3638] hfsplus: b-tree write err: -5, ino 4
[  361.163048][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  361.171488][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  361.179246][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  361.187181][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  361.190236][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  361.357583][T15082] chnl_net:caif_netlink_parms(): no params data found
[  361.412299][T15082] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.414798][T15082] bridge0: port 1(bridge_slave_0) entered disabled state
[  361.417363][T15082] bridge_slave_0: entered allmulticast mode
[  361.420148][T15082] bridge_slave_0: entered promiscuous mode
[  361.424146][T15082] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.426616][T15082] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.429679][T15082] bridge_slave_1: entered allmulticast mode
[  361.432701][T15082] bridge_slave_1: entered promiscuous mode
[  361.452976][T15082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  361.457688][T15082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  361.479264][T15082] team0: Port device team_slave_0 added
[  361.483114][T15082] team0: Port device team_slave_1 added
[  361.500727][T15082] batman_adv: batadv0: Adding interface: batadv_slave_0
[  361.504285][T15082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.513415][T15082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  361.518250][T15082] batman_adv: batadv0: Adding interface: batadv_slave_1
[  361.520661][T15082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.529377][T15082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  361.553090][T15082] hsr_slave_0: entered promiscuous mode
[  361.555410][T15082] hsr_slave_1: entered promiscuous mode
[  361.557641][T15082] debugfs: 'hsr0' already exists in 'hsr'
[  361.559505][T15082] Cannot create hsr debugfs directory
[  361.683897][T15082] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  361.687936][T15082] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  361.692030][T15082] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  361.696979][T15082] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  361.740253][T15082] 8021q: adding VLAN 0 to HW filter on device bond0
[  361.753521][T15082] 8021q: adding VLAN 0 to HW filter on device team0
[  361.762530][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  361.765424][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  361.786786][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  361.789712][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  361.933555][T15113] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3388'.
[  361.937197][T15113] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  361.971051][T15082] 8021q: adding VLAN 0 to HW filter on device batadv0
[  362.099945][T15082] veth0_vlan: entered promiscuous mode
[  362.107941][T15082] veth1_vlan: entered promiscuous mode
[  362.129346][T15082] veth0_macvtap: entered promiscuous mode
[  362.135265][T15082] veth1_macvtap: entered promiscuous mode
[  362.148152][T15082] batman_adv: batadv0: Interface activated: batadv_slave_0
[  362.158022][T15082] batman_adv: batadv0: Interface activated: batadv_slave_1
[  362.164777][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  362.171873][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  362.179123][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  362.188375][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  362.249272][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.253319][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.271717][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.275191][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.286601][T15125] loop3: detected capacity change from 0 to 32768
[  362.307103][T15125] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  362.339060][T15125] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  362.351595][T15125] XFS (loop3): Starting recovery (logdev: internal)
[  362.359184][T15125] XFS (loop3): Ending recovery (logdev: internal)
[  362.398194][ T7016] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  362.516518][T15140] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  363.224105][   T55] Bluetooth: hci0: command tx timeout
[  363.558704][T15171] loop3: detected capacity change from 0 to 256
[  363.564216][T15173] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3407'.
[  363.571057][T15171] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  363.591374][T15175] netlink: 'syz.6.3408': attribute type 8 has an invalid length.
[  363.638506][T15179] loop6: detected capacity change from 0 to 256
[  363.641574][T15179] exfat: Deprecated parameter 'namecase'
[  363.645579][T15179] exfat: Deprecated parameter 'namecase'
[  363.656506][T15179] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xec4b13f1, utbl_chksum : 0xe619d30d)
[  363.722563][T15182] loop6: detected capacity change from 0 to 64
[  363.788012][T15184] loop3: detected capacity change from 0 to 4096
[  363.793276][T15184] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  363.948889][T15191] loop3: detected capacity change from 0 to 128
[  363.954301][T15191] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  365.092651][T10253] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  365.371926][   T55] Bluetooth: hci0: command tx timeout
[  365.421895][T10253] usb 7-1: Using ep0 maxpacket: 16
[  365.426249][T10253] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  365.430640][T10253] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  365.435039][T10253] usb 7-1: config 0 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  365.439761][T10253] usb 7-1: config 0 interface 0 has no altsetting 0
[  365.442433][T10253] usb 7-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.00
[  365.445982][T10253] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.451101][T10253] usb 7-1: config 0 descriptor??
[  365.456782][T10253] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input38
[  365.658709][ T5281] bcm5974 7-1:0.0: could not read from device
[  365.658986][  T792] usb 7-1: USB disconnect, device number 2
[  366.292088][T15241] futex_wake_op: syz.6.3434 tries to shift op by 32; fix this program
[  366.514904][T15253] Invalid ELF header magic: != ELF
[  366.741976][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  367.352136][  T792] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  367.382381][   T55] Bluetooth: hci0: command tx timeout
[  367.594140][  T792] usb 4-1: unable to get BOS descriptor or descriptor too short
[  367.597596][  T792] usb 4-1: config 3 has an invalid interface number: 8 but max is 3
[  367.601082][  T792] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  367.604824][  T792] usb 4-1: config 3 has 1 interface, different from the descriptor's value: 4
[  367.607920][  T792] usb 4-1: config 3 has no interface number 0
[  367.610078][  T792] usb 4-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 52, changing to 9
[  367.614324][  T792] usb 4-1: config 3 interface 8 altsetting 6 endpoint 0x82 has invalid maxpacket 8241, setting to 1024
[  367.618939][  T792] usb 4-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  367.624223][  T792] usb 4-1: config 3 interface 8 has no altsetting 0
[  367.628655][  T792] usb 4-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be
[  367.631732][  T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.634524][  T792] usb 4-1: Product: syz
[  367.636025][  T792] usb 4-1: Manufacturer: syz
[  367.637731][  T792] usb 4-1: SerialNumber: syz
[  368.040216][  T792] appledisplay 4-1:3.8: Error while getting initial brightness: -71
[  368.045673][  T792] appledisplay 4-1:3.8: probe with driver appledisplay failed with error -71
[  368.055870][  T792] usb 4-1: USB disconnect, device number 46
[  368.129519][T15271] loop6: detected capacity change from 0 to 8
[  368.134232][T15271] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  368.145374][T15271] cramfs: bad data blocksize 4159700568
[  368.149037][T15271] cramfs: bad data blocksize 4159700568
[  368.309660][T15279] loop6: detected capacity change from 0 to 1024
[  368.342657][T15279] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  368.381237][T15082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.109560][T15311] loop3: detected capacity change from 0 to 512
[  369.116346][T15311] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  369.125103][T15311] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002]
[  369.128610][T15311] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.3464: corrupted in-inode xattr: e_value size too large
[  369.137289][T15311] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3464: couldn't read orphan inode 15 (err -117)
[  369.145393][T15311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  369.160434][   T33] audit: type=1800 audit(2000002795.872:527): pid=15311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3464" name="file1" dev="loop3" ino=18 res=0 errno=0
[  369.174118][   T33] audit: type=1804 audit(2000002795.882:528): pid=15311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3464" name="/newroot/1036/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file1" dev="loop3" ino=18 res=1 errno=0
[  369.190141][   T33] audit: type=1800 audit(2000002795.902:529): pid=15311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3464" name="file1" dev="loop3" ino=18 res=0 errno=0
[  369.211274][ T7016] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.461887][   T55] Bluetooth: hci0: command tx timeout
[  369.511868][ T5898] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  369.644472][T15319] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3467'.
[  369.647763][T15319] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3467'.
[  369.650774][T15319] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3467'.
[  369.662233][ T5898] usb 4-1: Using ep0 maxpacket: 32
[  369.676016][ T5898] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a
[  369.681212][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.685036][ T5898] usb 4-1: Product: syz
[  369.686968][ T5898] usb 4-1: Manufacturer: syz
[  369.689121][ T5898] usb 4-1: SerialNumber: syz
[  369.694286][ T5898] usb 4-1: config 0 descriptor??
[  369.699050][ T5898] xr_serial 4-1:0.0: skipping garbage
[  369.735773][T15323] loop6: detected capacity change from 0 to 4096
[  369.739114][T15323] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities
[  369.904153][    T9] usb 4-1: USB disconnect, device number 47
[  370.078852][ T5898] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  370.231969][ T5898] usb 7-1: Using ep0 maxpacket: 32
[  370.238974][ T5898] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  370.241914][ T5898] usb 7-1: config 0 has no interface number 0
[  370.244476][ T5898] usb 7-1: config 0 interface 2 has no altsetting 0
[  370.256889][ T5898] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  370.260682][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.264441][ T5898] usb 7-1: Product: syz
[  370.266371][ T5898] usb 7-1: Manufacturer: syz
[  370.268246][ T5898] usb 7-1: SerialNumber: syz
[  370.280538][ T5898] usb 7-1: config 0 descriptor??
[  370.506291][ T5898] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  370.654760][T15345] loop3: detected capacity change from 0 to 32768
[  370.719556][ T5898] usb 7-1: USB disconnect, device number 3
[  370.760717][T15347] loop3: detected capacity change from 0 to 4096
[  370.763884][T15347] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  370.775292][T15347] ntfs3(loop3): ino=19, mi_enum_attr
[  370.777072][T15347] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  370.956722][T15358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  371.708799][   T33] audit: type=1326 audit(2000002798.422:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15385 comm="syz.2.3496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb953f8ebe9 code=0x7ffc0000
[  371.727000][   T33] audit: type=1326 audit(2000002798.432:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15385 comm="syz.2.3496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb953f8ebe9 code=0x7ffc0000
[  371.754207][   T33] audit: type=1326 audit(2000002798.442:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15385 comm="syz.2.3496" exe="/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7fb953f8ebe9 code=0x7ffc0000
[  371.776314][   T33] audit: type=1326 audit(2000002798.442:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15385 comm="syz.2.3496" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb953f8ebe9 code=0x7ffc0000
[  372.359137][T15408] sctp: [Deprecated]: syz.3.3506 (pid 15408) Use of struct sctp_assoc_value in delayed_ack socket option.
[  372.359137][T15408] Use struct sctp_sack_info instead
[  372.434921][T15414] loop3: detected capacity change from 0 to 4096
[  372.437620][T15414] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  372.447799][T15414] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  372.450813][T15414] ntfs3(loop3): Failed to load $Extend (-22).
[  372.454070][T15414] ntfs3(loop3): Failed to initialize $Extend.
[  372.554639][T15424] loop6: detected capacity change from 0 to 128
[  372.557190][T15424] ufs: Bad value for 'onerror'
[  372.620027][T15432] loop3: detected capacity change from 0 to 2048
[  372.627295][T15432] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  372.669132][T15436] loop3: detected capacity change from 0 to 256
[  372.686247][T15438] loop6: detected capacity change from 0 to 256
[  372.703439][T15438] FAT-fs (loop6): Directory bread(block 64) failed
[  372.706269][T15438] FAT-fs (loop6): Directory bread(block 65) failed
[  372.709174][T15438] FAT-fs (loop6): Directory bread(block 66) failed
[  372.716509][T15440] loop3: detected capacity change from 0 to 512
[  372.720522][T15438] FAT-fs (loop6): Directory bread(block 67) failed
[  372.723868][T15438] FAT-fs (loop6): Directory bread(block 68) failed
[  372.726644][T15438] FAT-fs (loop6): Directory bread(block 69) failed
[  372.730024][T15438] FAT-fs (loop6): Directory bread(block 70) failed
[  372.734572][T15438] FAT-fs (loop6): Directory bread(block 71) failed
[  372.737587][T15438] FAT-fs (loop6): Directory bread(block 72) failed
[  372.740398][T15438] FAT-fs (loop6): Directory bread(block 73) failed
[  372.755926][T15440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  372.762215][T15440] ext4 filesystem being mounted at /1056/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  372.770374][   T33] audit: type=1800 audit(2000002799.482:534): pid=15438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3520" name="bus" dev="loop6" ino=1048775 res=0 errno=0
[  372.780983][T15440] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  372.790963][T15440] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28
[  372.797506][T15440] EXT4-fs (loop3): This should not happen!! Data will be lost
[  372.797506][T15440] 
[  372.801426][T15440] EXT4-fs (loop3): Total free blocks count 0
[  372.804633][T15440] EXT4-fs (loop3): Free/Dirty block details
[  372.806735][T15440] EXT4-fs (loop3): free_blocks=65280
[  372.808597][T15440] EXT4-fs (loop3): dirty_blocks=33
[  372.810826][T15440] EXT4-fs (loop3): Block reservation details
[  372.813117][T15440] EXT4-fs (loop3): i_reserved_data_blocks=33
[  372.856690][ T7016] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  372.893856][  T792] kernel write not supported for file /vcsa (pid: 792 comm: kworker/1:2)
[  372.967074][T15456] loop3: detected capacity change from 0 to 16
[  372.989105][T15456] erofs (device loop3): mounted with root inode @ nid 36.
[  372.995657][T15458] loop6: detected capacity change from 0 to 512
[  372.999517][T15458] EXT4-fs: Ignoring removed nomblk_io_submit option
[  373.019369][T15458] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  373.025336][T15458] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  373.046366][T15458] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #2: block 7: comm syz.6.3528: lblock 12 mapped to illegal pblock 7 (length 22)
[  373.078119][T15082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  373.081419][T15462] loop3: detected capacity change from 0 to 256
[  373.085674][T15462] exfat: Deprecated parameter 'namecase'
[  373.095262][T15462] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  373.382011][    T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  373.533682][    T9] usb 4-1: config 2 has an invalid interface number: 233 but max is 0
[  373.536609][    T9] usb 4-1: config 2 has no interface number 0
[  373.539668][    T9] usb 4-1: config 2 interface 233 has no altsetting 0
[  373.548832][    T9] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0109, bcdDevice=33.00
[  373.552440][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.555392][    T9] usb 4-1: Product: syz
[  373.557038][    T9] usb 4-1: Manufacturer: syz
[  373.558778][    T9] usb 4-1: SerialNumber: syz
[  373.769697][    T9] ftdi_sio 4-1:2.233: FTDI USB Serial Device converter detected
[  373.774595][    T9] usb 4-1: Detected FT232HP
[  373.776718][    T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  373.779662][    T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  373.786365][    T9] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  373.792567][    T9] usb 4-1: USB disconnect, device number 48
[  373.796789][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  373.800723][    T9] ftdi_sio 4-1:2.233: device disconnected
[  373.899485][T15480] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3537'.
[  373.905188][T15480] netlink: zone id is out of range
[  373.906945][T15480] netlink: zone id is out of range
[  373.908790][T15480] netlink: zone id is out of range
[  373.910499][T15480] netlink: zone id is out of range
[  373.913108][T15480] netlink: zone id is out of range
[  373.914845][T15480] netlink: zone id is out of range
[  373.916560][T15480] netlink: zone id is out of range
[  373.918563][T15480] netlink: zone id is out of range
[  373.920777][T15480] netlink: zone id is out of range
[  374.373723][T15494] loop3: detected capacity change from 0 to 256
[  374.377866][T15494] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  376.349663][T15519] loop6: detected capacity change from 0 to 4096
[  376.359588][T15520] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  376.587075][T15530] loop6: detected capacity change from 0 to 1024
[  376.590927][T15530] EXT4-fs: Ignoring removed orlov option
[  376.595126][T15530] EXT4-fs: Ignoring removed nomblk_io_submit option
[  376.606659][T15530] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  376.646872][T15082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.690369][   T33] audit: type=1326 audit(2000002803.402:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15534 comm="syz.6.3561" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be6b8ebe9 code=0x7ffc0000
[  376.699708][   T33] audit: type=1326 audit(2000002803.402:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15534 comm="syz.6.3561" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be6b8ebe9 code=0x7ffc0000
[  376.710884][   T33] audit: type=1326 audit(2000002803.422:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15534 comm="syz.6.3561" exe="/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f9be6b8ebe9 code=0x7ffc0000
[  376.720177][   T33] audit: type=1326 audit(2000002803.422:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15534 comm="syz.6.3561" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be6b8ebe9 code=0x7ffc0000
[  376.733068][   T33] audit: type=1326 audit(2000002803.422:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15534 comm="syz.6.3561" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9be6b8ebe9 code=0x7ffc0000
[  376.762116][T15539] tipc: Cannot configure node identity twice
[  376.788808][T15541] loop6: detected capacity change from 0 to 1024
[  376.794019][T15543] overlayfs: failed to clone upperpath
[  376.810137][T15541] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  376.826551][T15541] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #11: comm syz.6.3565: missing EA_INODE flag
[  376.850395][T15541] EXT4-fs (loop6): Remounting filesystem read-only
[  376.853892][T15541] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  376.881257][T15082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.943494][T15553] netlink: 'syz.2.3569': attribute type 5 has an invalid length.
[  376.976327][T15555] loop6: detected capacity change from 0 to 16
[  376.980305][T15555] erofs (device loop6): mounted with root inode @ nid 36.
[  376.989511][   T33] audit: type=1800 audit(2000002803.702:540): pid=15555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3570" name="file1" dev="loop6" ino=86 res=0 errno=0
[  377.955375][T15568] loop6: detected capacity change from 0 to 128
[  377.958258][T15568] EXT4-fs (loop6): Test dummy encryption mode enabled
[  377.963489][T15568] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  377.967797][T15568] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  377.985100][T15568] EXT4-fs (loop6): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  378.019427][T15082] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  378.274586][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  378.277144][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  378.429243][   T33] audit: type=1326 audit(2000002805.142:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.3.3583" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365038ebe9 code=0x7ffc0000
[  378.438825][   T33] audit: type=1326 audit(2000002805.142:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.3.3583" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f365038ebe9 code=0x7ffc0000
[  378.447975][   T33] audit: type=1326 audit(2000002805.142:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.3.3583" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f365038ebe9 code=0x7ffc0000
[  378.458524][   T33] audit: type=1326 audit(2000002805.142:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15585 comm="syz.3.3583" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f365038ebe9 code=0x7ffc0000
[  378.785022][T15601] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3590'.
[  378.794879][T15601] gretap0: entered promiscuous mode
[  378.799501][T15601] gretap0: left promiscuous mode
[  379.144261][T15625] loop6: detected capacity change from 0 to 22
[  379.147755][T15625] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  379.151020][T15625] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  379.249238][T15630] 9pnet_fd: Insufficient options for proto=fd
[  379.347465][T15633] loop6: detected capacity change from 0 to 512
[  379.576500][T15633] EXT4-fs (loop6): 1 orphan inode deleted
[  379.615104][T15633] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  379.626054][T15633] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  379.626486][   T36] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u10:1: Failed to release dquot type 1
[  379.661256][T15082] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.686923][T15656] loop6: detected capacity change from 0 to 32768
[  380.749877][T15656] read_mapping_page failed!
[  380.755989][T15656] ERROR: (device loop6): txCommit: 
[  380.755989][T15656] 
[  380.801186][  T116] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0)
[  380.815091][  T116] ------------[ cut here ]------------
[  380.817496][  T116] kernel BUG at fs/jfs/jfs_txnmgr.c:931!
[  380.821386][T15683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3625'.
[  380.828210][  T116] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  380.830847][  T116] CPU: 1 UID: 0 PID: 116 Comm: jfsCommit Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  380.835939][  T116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  380.840074][  T116] RIP: 0010:txUnlock+0xdaf/0xdf0
[  380.842170][  T116] Code: e5 fd 90 0f 0b e8 01 23 7d fe 48 c7 c7 60 1b c4 8b 48 c7 c6 59 17 c4 8b ba a3 03 00 00 48 c7 c1 60 28 c4 8b e8 f2 16 e5 fd 90 <0f> 0b e8 da 22 7d fe 48 c7 c7 60 1b c4 8b 48 c7 c6 59 17 c4 8b ba
[  380.850248][  T116] RSP: 0018:ffffc9000248fbc8 EFLAGS: 00010246
[  380.852846][  T116] RAX: 0000000000000037 RBX: 0000000000001000 RCX: aef17c36622f4000
[  380.856024][  T116] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  380.859286][  T116] RBP: ffffc90002002558 R08: 0000000000000003 R09: 0000000000000004
[  380.862654][  T116] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: dffffc0000000000
[  380.865997][  T116] R13: 1ffff11023d03ab0 R14: ffff88811e81d580 R15: 0000000000000000
[  380.869370][  T116] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  380.873173][  T116] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  380.875985][  T116] CR2: 0000001b33920ff8 CR3: 000000003858a000 CR4: 00000000000006f0
[  380.879407][  T116] Call Trace:
[  380.880886][  T116]  <TASK>
[  380.882190][  T116]  ? lockdep_hardirqs_on+0x9c/0x150
[  380.884444][  T116]  jfs_lazycommit+0x584/0xa90
[  380.886488][  T116]  ? __pfx_jfs_lazycommit+0x10/0x10
[  380.888647][  T116]  ? __pfx_default_wake_function+0x10/0x10
[  380.891109][  T116]  ? __kthread_parkme+0x7b/0x200
[  380.893244][  T116]  ? __kthread_parkme+0x1a1/0x200
[  380.895414][  T116]  kthread+0x711/0x8a0
[  380.897192][  T116]  ? __pfx_jfs_lazycommit+0x10/0x10
[  380.899439][  T116]  ? __pfx_kthread+0x10/0x10
[  380.901386][  T116]  ? _raw_spin_unlock_irq+0x23/0x50
[  380.903641][  T116]  ? lockdep_hardirqs_on+0x9c/0x150
[  380.905884][  T116]  ? __pfx_kthread+0x10/0x10
[  380.907909][  T116]  ret_from_fork+0x3fc/0x770
[  380.909911][  T116]  ? __pfx_ret_from_fork+0x10/0x10
[  380.912093][  T116]  ? __switch_to_asm+0x39/0x70
[  380.914142][  T116]  ? __switch_to_asm+0x33/0x70
[  380.916213][  T116]  ? __pfx_kthread+0x10/0x10
[  380.918142][  T116]  ret_from_fork_asm+0x1a/0x30
[  380.920139][  T116]  </TASK>
[  380.921463][  T116] Modules linked in:
[  380.923880][  T116] ---[ end trace 0000000000000000 ]---
[  380.927743][  T116] RIP: 0010:txUnlock+0xdaf/0xdf0
[  380.929904][  T116] Code: e5 fd 90 0f 0b e8 01 23 7d fe 48 c7 c7 60 1b c4 8b 48 c7 c6 59 17 c4 8b ba a3 03 00 00 48 c7 c1 60 28 c4 8b e8 f2 16 e5 fd 90 <0f> 0b e8 da 22 7d fe 48 c7 c7 60 1b c4 8b 48 c7 c6 59 17 c4 8b ba
[  380.938783][  T116] RSP: 0018:ffffc9000248fbc8 EFLAGS: 00010246
[  380.944580][  T116] RAX: 0000000000000037 RBX: 0000000000001000 RCX: aef17c36622f4000
[  380.947867][  T116] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  380.951174][  T116] RBP: ffffc90002002558 R08: 0000000000000003 R09: 0000000000000004
[  380.955274][  T116] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: dffffc0000000000
[  380.958808][  T116] R13: 1ffff11023d03ab0 R14: ffff88811e81d580 R15: 0000000000000000
[  380.962961][  T116] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  380.966606][  T116] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  380.969373][  T116] CR2: 00005555586a25c8 CR3: 0000000112fb4000 CR4: 00000000000006f0
[  380.972232][  T116] Kernel panic - not syncing: Fatal exception
[  380.974866][  T116] Kernel Offset: disabled
[  380.976467][  T116] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:27:48  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000074 RBX=0000000000000074 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000584 RDI=0000000000000585 RBP=00000000000003f8 RSP=ffffc9000262ead0
R8 =ffff888108578237 R9 =1ffff110210af046 R10=dffffc0000000000 R11=ffffffff854f1730
R12=dffffc0000000000 R13=ffffffff99afa8f4 R14=ffffffff99def3a0 R15=0000000000000000
RIP=ffffffff854f17ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f365118e6c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056417e4aad38 CR3=000000003858a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ff00000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007f36510ed100 00007f3650587460 XMM05=00007f3650587478 00007f36505874c0
XMM06=00007f36505874b8 00007f36505874b0 XMM07=00007f36505874a8 00007f36505874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f3650412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=dffffc0000000000 RCX=dffffc0000000000 RDX=1ffff11026cc7558
RSI=0000000000000000 RDI=ffff88813663aa70 RBP=ffff88813663aac4 RSP=ffffc900001b7790
R8 =ffffffff8fa37f37 R9 =1ffffffff1f46fe6 R10=dffffc0000000000 R11=fffffbfff1f46fe7
R12=ffff88813663a080 R13=0000000000000000 R14=ffff88813663aa70 R15=ffff88813663ab48
RIP=ffffffff8197ce21 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b33920ff8 CR3=000000003858a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81cea1ca ffffffff81cea1ca
XMM02=00007f3650587498 ffffffff81cea1ca XMM03=00007f36505874a8 00007f36505874a0
XMM04=00007f36510ed100 00007f3650587460 XMM05=00007f3650587478 00007f36505874c0
XMM06=00007f36505874b8 00007f36505874b0 XMM07=00007f36505874a8 00007f36505874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f3650412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
