last executing test programs:

1m22.582301923s ago: executing program 2 (id=1210):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
syz_clone(0x20000, 0x0, 0x2c, 0x0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)

1m22.437638015s ago: executing program 2 (id=1213):
r0 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x4000)
shmctl$IPC_RMID(r0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)

1m22.333164061s ago: executing program 2 (id=1216):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x28, 0x5a, 0x1, 0x470bd2c, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x28}}, 0xd4)

1m22.255738515s ago: executing program 2 (id=1218):
syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f00000005c0)=ANY=[], 0x1, 0x6a4, &(0x7f0000000cc0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

1m22.154226801s ago: executing program 2 (id=1221):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0xffc9)

1m21.929607007s ago: executing program 2 (id=1222):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0)
sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf251200000008001500c0000000080001001b"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8880)

1m21.80906149s ago: executing program 32 (id=1222):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0)
sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf251200000008001500c0000000080001001b"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8880)

40.131428993s ago: executing program 1 (id=1524):
socket$pppl2tp(0x18, 0x1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080))
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
socket$igmp(0x2, 0x3, 0x2)
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000300)=""/251)
socket$nl_route(0x10, 0x3, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000480)=""/104, 0x68, 0x8000000000000000)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip6tnl0\x00', 0x0})
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x2)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000100)=[<r3=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f00000060c0)={r3, 0x0, 0x0, 0x9, 0xb, 0xb65, 0x3, 0x7, 0xacb, 0x2, 0x0, 0x4})

38.327463232s ago: executing program 1 (id=1532):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {}, {}, {}, 0x0, 0x0, 0xa, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)

38.232154465s ago: executing program 1 (id=1533):
unshare(0x20000400)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed}, 0x8)

38.137550045s ago: executing program 1 (id=1534):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080))
chdir(&(0x7f00000000c0)='./bus\x00')
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3010009, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

37.802906572s ago: executing program 1 (id=1540):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
sendmmsg$inet(r1, &(0x7f00000013c0)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044)
sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0)

37.522638409s ago: executing program 1 (id=1543):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000001000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b7543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910ab193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68fe6b7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f8ce659e340c714809ec4d060bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd192595369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d4f17a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9570d730a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b94952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d830e1431ed6d646d13e8e7230300ef0a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000002000000000044ff72f96f084f4b6cdcb1b4a9d8e9f9021b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded5027a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b092b70f77f0f428d2000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634009aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3f19f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19006952fe2724c0105ab158a54a6a73000000000000000000000000b0d135da438cbe303f3ae070def97d6649b5a693ff5c788e5a406e1d06942ed51bff073011f6e6c29d3ea22e5fc26c7fbe37656229a6a12857ae9ed131ccdd513066bc9422ec38a1dc5212986d9bc330a23eb3b200af1a3678c2bfbe4b4ba6e8471495f6e82c5ee425973c590253e875352a3acaee044868f9b80f8fdc9d402007bb4c8df1b69d3d2b364ec9e4ed2f554118684eff1adf5b49b6b29232198e682dfa45dced8b332c404c8f292f36730845dc37dfe7a59e252ddc33ea9072dcd697a700cfac90b487660795f564ddb61fa3e4835f936984200000000000000000008e9f7bc3a00cd72ced7684e264e45398f7087734fcf2023a7a4c880f562f46f14cdc1bf472d74bc0c777b1021ff75de086c08f72a41399d3a3065b2f50a531cc90edbf88370ff50ba1aa6cc59076165a3ab90a3c90527b7c9711cf85bbb0cb0aebc47ab5c65458c40020f2cfb10e5f0a1594ae491e8756446e6873a8b222ae7e58dd7640666e359fc583e17ed6bcb30c0fafbba761e756ca80286d38bb92dd9ba17c1bb628e5b8d52c9a02a67f788ab88dca817cb4886942a279e06f45c8c936f5c46e1a008097471ca0ee26bcfabf7adb9c90a10539d960dec5c84464f6bc68318e7e899acf20ea41b071132d7a5945e941334855ce6149deaae1b5b83045e83bfc208079e6e58ebb4176b126c743111c5a712f465a3007d665ac21c43a544947c9d13e5206a21025f6acd47c2d333e648dcbf2e4989a1d4a176fe8f7a8cf0aeaf9736118b036639cb35810ea88213ff2a0842d420d418d026a101222a4ebd18fc89f04b5a9056ca6c00308936679474fa83bdf6eac126c9be33c551bccd42d8000736ed9a64ff7cb87d44c9bcf821c96dcd34aadfcc42fabd5976cedc9a4eef24764168056d0645c7aa007d69df4fa8de1224a56f0799ad59ee5c84418a1faae590b6c896cdd808376b6b51b217fcad5fbd7e3208d009e37484378df3ee5969f817d715d60fdd02c04e3fdd62a29285ac92f6836cbeb4d04d84c396150b2e17828d924013978173c48635e0b1ad4a0c5956717629794b39cf18d599e723d3c24689a5fea6cc1f59d1ba1fccfba88e02f9907"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x18000000000002a0, 0x14, 0x0, &(0x7f00000001c0)="b9e403c6631e394901a05dc7cf1c8cef782da475", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

37.273171496s ago: executing program 33 (id=1543):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x18000000000002a0, 0x14, 0x0, &(0x7f00000001c0)="b9e403c6631e394901a05dc7cf1c8cef782da475", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

2.937369014s ago: executing program 4 (id=1849):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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")
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0\x00', 0x2040, 0x0)
ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

2.801934953s ago: executing program 4 (id=1852):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x2000c805}, 0x800)

2.736058965s ago: executing program 4 (id=1854):
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x8d0, &(0x7f0000000140)={[{@fat=@sys_immutable}]}, 0x1, 0x25f, &(0x7f0000000840)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)

2.587896072s ago: executing program 4 (id=1857):
syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d65000905040210"], 0x0)

2.510457617s ago: executing program 0 (id=1859):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @rand_addr=0x44010100}]}, &(0x7f0000000140)=0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000000)={r1, 0x4, 0x1, 0xb, 0x1c0, 0x2}, &(0x7f00000000c0)=0x14)

2.470353843s ago: executing program 0 (id=1860):
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x222, &(0x7f0000000000)="$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")

2.34983482s ago: executing program 0 (id=1863):
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)={r0})

2.277164574s ago: executing program 0 (id=1865):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000780)=ANY=[@ANYRESHEX=r0, @ANYRESOCT, @ANYRESDEC, @ANYRES64, @ANYRESOCT, @ANYRESDEC, @ANYRES32, @ANYBLOB="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"])

1.228448703s ago: executing program 3 (id=1867):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000001400)={0xe0, 0x12, 0x509, 0x0, 0x25dfdbff, "", [@generic="6ed4cc8c424781f46c6694759842c1368623d31df674b03308ef85178985a80f557909bf9d80dc93dd78a794092fb1729cbdc8fd08549afe14a7ce77dc819d6ae9ab8bd60c830645007f3107dbed000f108170fd95e701ee45f89a77ad82c451ca81bd583484349c5b19bbf5f61be913c318ba42c3f4eb9e9b4e5a088f64531581", @nested={0x4}, @nested={0x45, 0x141, 0x0, 0x1, [@generic="a0673460ace47a801eef38af56dff77c83aeab6fa185fa1b710b3037e3c826e12b34f64df32fb25164bbf82538944720d5e21a22909a5a813203424ce2dcf67b2c"]}]}, 0xe0}], 0x1, 0x0, 0x0, 0x2800c011}, 0x0)

1.227848236s ago: executing program 3 (id=1868):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1c802, &(0x7f0000000780)=ANY=[], 0x1, 0x603b, &(0x7f0000009140)="$eJzs3cuOHFcZB/CvL9NzCXGsCEXGYuE4EBJCfLch3OKwYAFIICGvsTWZRAYHkG0QiSw8kReIBZdHgE02LPIaLMIrIB4ASzOsIkEoVDPnjGtqetxj7OmanvP7Se2qr0/X9Cn/p6YvdTkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMR3vv3Ds72IuPrLdMfRiE/FIKIfsVjXJ6KeuZwfP4yIY7HRHM9FxGA+ol5+459nIi5ExEdHItbW7yzXd5/bYz8unrl985Pvfuvvv/nDvWM/fvNHH7Tbf/Dp8x/+9m7E0e+/9uEnd5/MugMAAEApqqqqeulj/vH0+b7fdacAgKnIr/9Vku9Xq9Vq9ROtf98/WP1RF1o3VePdbRYRsdpcpn7PYHc8AMyY1fi46y7QIfkXbRgRT3XdCeBA63XdAfbF2vqd5V7Kt9d8PTix2Z6/p9yW/2pv6/yO3aaTtI8xmdbv170YxLO79GdxSn04SHL+/Xb+VzfbR+lx+53/tOyW/2jz1Kfi5PwH7fxbtuX/x4iY2fz7Y/MvVc5/+Cj5rw5mePuXPwAAAAAAh1/+/v/o1vf/q53s/51//FXZk932/w0erDIAAAAAAAAAzJzHHf9vi/H/AAAA4MCqP6vX/nTkwX27XYutvv9KL+Lp1uOBwqSTZZa67gcAAAAAAAAAAAAAlGS4eQzvlV7EXEQ8vbRUVVV9a2rXj+pxl591pa8/lKzrP/IAALDpoyOtc/l7EQsRcSVd629uaWmpqhYWl6qlanE+v58dzS9Ui43PtXla3zc/2sMb4uGoqn/YQmO5pkmflye1t39e/VyjarCHjk1Hh4EDQERsvhqteUU6ZKrqmej6XQ6zwfZ/+Nj+2Yuuf08BAACA/VdVVdVLl/M+nvb597vuFAAwDQv59b+9X0CtVqvVavXhq5uq8e42i4hYbS5Tv2cwHD8AzJjV+LjrLtAh+RdtGBHHuu4EcKD1uu4A+2Jt/c5yL+Xba74epPHd87Eg2/Jf7W0sl5cfN52kfYzJtH6/7sUgnt2lP89NqQ8HSc6/387/6mb7KD1uv/Oflt3yr9fzaAf96VrOf9DOv+Xw5N8fm3+pcv7DR8p/IH8AAAAAADjA8vf/R+3/zasMAAAAAAAAADNnbf3Ocj7vNe///+yYx/Wac1v7/+cjwvl/syzn39tz/s7/PUxy/v12/q0DcgaN+ftvPMj/X+t3lj+4/c/P5OnY/P+6tuOio53lPzcY1c891+sPhumYn2rurbgeN2Ilzux4/HBb+9kd7XPb2s9NaD+/o31Uty/m9lOxHD+LG/HmVvv8hAOjFia0VxPac/4D23+Rcv7Dxq3Ofym191rT2v33+zu2++Z03PNc/st/Xty5dU3fvRhsrVtTvX4nO+jPxv/JU6P4xa2Vm6d+de327ZtnI0223Xsu0uQJy/nPpVvO/6UXNtvz3/3m9nr//dEj539Q3Ivhrvm/0Jiv1/flKfetCzn/Ubrl/PMr0Pjtf5bz3337f6WD/gAAAAAAAAAAAAAAAMDDVFW1cYro5Yi4lM7/6ercTABgqn73vTRTVdsv1aFWq9Vqtfrw1U3VeK83i1jYvsyliPj1uB8GABxk/42If3TdCToj/4Ll6/3V08913Rlgqm69+95Prt24sXLzVtc9AQAAAAAAAAD+X3n8zxON8Z83jgNqjRu9bfzXN+LEjnE/BzMy/md/NNgY6zyt0PPx8PG/T8bDx/8eTni+uQntownt8xPaFya0jz3RoyHn/3zKOOd/PK1YSeO/vtRBf7qW8z+ZxnrO+X+h9bhm/tWfZzn//rb8T99+5+enb7373qvX37n29srbKz89e+bShfMXL5y/ePH0W9dvrJzZ/LfDHu+vnH8e+9pxoGXJ+efM5V+WnP/nUy3/suT8X0y1/MuS88/v9+Rflpx//uwj/7Lk/F9OtfzLkvP/YqrlX5ac/yupln9Zcv5fSrX8y5LzfzXV8i9Lzv9UquVflpz/6VTLvyw5/7yHS/5lyfnnIxvkX5ac/7lUy78sOf/zqZZ/WXL+F1It/7Lk/C+mWv5lyflfSrX8y5Lz/3Kq5V+WnP9XUi3/suT8X0u1/MuS8/9qquVflpz/11It/7Lk/L+eavmXJef/jVTLvyw5/2+mWv5lyfm/nmr5l+XB9f/NTHnm33+LOADdMGNm3EzXf5kAAAAAAAAAAAAAgLZpHE7c9ToCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUV9u4uRq7yvh/42Td7bUjwP7wTB9bGgIHFu34FhxhMEvKnpE0pCWnTkhrHXhsnfqt3nQBCZSm0JQpSkdoLetE0RGkUqa1AUaSmEo2QGqm9K1eJuGjUSlxYKlQOSiqlArY6c57n2ZnZ2Zlde9c7c87ng8zPu3Nm5pkzZ2bnu9Z3BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOpt+MTEn/ZlWZb/qf1vXZZdnP99TbY3/3J610qvEAAAADhf79X+/3eXpG/sXcCZ6rb5l2v/7QczMzMz2ZfeOfP+n8/MpBNGsmxgdZbVTov+9Ve/nKnfJngmG+7rr/u6v8PVD3Q4fbDD6UMdTl/V4fTVHU4f7nD6nB0wx5ri9zG1C9tU++u6Ypdml2VDtdM2tTjXM32r+/vj73Jq+mrnmRk6lB3JjmYT2fic8/TV/suyVzfk13VfFq+rv+661mdZdvbnTx6Ia+gL+3hT1nBlNfX33dv3ZCPv/PzJA9+deuvqVrPjbpiz0izbvDFf57NZNvvrqqwvW532SVxnf90617dY50DDOvtq58v/3rzOswtcZ7zdw2Gdr7dZ5/rwvceuz7JsOpt3m2bPZP3Z2qZrTft7uDgi8svI78oPZYOLOk42LOA4yc/z5vWNx0nzMRn3/4awTwbnWUP93fH206vm7PdzPU7yW90Nx2p+2Q/kVzo8XP+r1YZjNd/myRvmPwZa3nctjoF0LNcdAxs7HQP9qwZqx0D/7Jo3NhwDW+ecpz/rq13XmRvaHwNjU8dOjk0+/sRtR47tPzxxeOL41vFdO7bv3LF9586xQ0eOToyPHRo6OjH3GCuLtVl/OgY3hueaeAze1LRt/SE589LSPQ6Gu+RxkN/2z92YL+ji/myeYzzf5tnN5/84SD/36x4Hg3WPg5bPqTNzHweDC3gc5Nuc3bywn5mDdX9arWG5ngvX1R0DK/nzML/Oh2+e/7lwfVjXc7cs9ufhwJxjIN6svvDYy7+TXu8N3xH2y9zj4pr8hItWZacnJ05teWz/1NSprVkYF8SldfdV8/Gytu42ZXOOl/5FHy97//bdG69p8f11YV8N39r+vsq32THa/r6qPbs37s9VWbE/G767LQtj4Tq9/F+R/dnqp1m+P1OWaLM/822eve38XwumXFL3/DfU6flvYGiweP4bSHtjqOH5b+5dM1BbWZadvW1hz39D4c+Ffv67rEue//J99fCW9sdAvs1zY4s9BgbbPv9dH2ZfWM/NITEM1+X+92unTxeHad192fG4GRwcCsfNYLzGxuNm+5zz5JeWX/fm8XM7bjZf33hfNbxuKeFxk++rvxhvf9zk27y29fyfO9bEv9Y9d6zqdAwMDazK1zuUDoLi+W5mTTwGtmQHshPZ0exgOk9+L+fXNbptYcfAqvDnQj93XNUlx0C+r17c1v4YyLf58falfe20OXwnbVP32qn59wvzZf5rBmcvr3m3LXXmz9f5yZ98Jn2vVYbIt3lrx2JzRvv9dGv4zkUt9lPz42e+Y/pgdmH201VhnUd3tv/dVL7NZbsWeDztzbLsjXffqP2+K/x+9/unf/KDht/7tvqd8htb37h/7MGfLmb9AACcu/dr/59eVbzWrPsX64X8+z8AAADQE2Lu7w8zkf8BAACgNGLuHwgzkf8BAACgNGLuHwwzqUj+f/SO3S+/91SW3g1wJoinx93wwF3FdrHjPR2+HpmZlX//498ZevnrTy3suvuzLHv3/g+33P7Ru+K6CifjOj/a+P05rrpuQdf/yEOz29W/f8LZ3cXlx9uz0MMgdpVfHdtWu9yRx7fW5mv3Z7X54PRzzxSXX3wdtz+zvdj+r8Kbluw91Ndw/s1hPZvCHAnvKfPA3tn9kM94vpfXX/vPl35+9vri+fo2frB2M1/8w+Jy43tEvXBpsX283fOt/5++8b2X8+0fu6H1+p/qb73+M+Fy3wzzV3uK7ev3+dfr1v/HYf3x+uL5tnz7Ry3X/8qVxfavhOPiW2E2r/+eP/vIe63ur3g9e+8szhevf/x/dtTOFy8vXn7z+oef2tqwP5ov/7V3isvZ89VfDNRvH78fryd65M7G47sv3L8NPfIsy773J1nDfs4+VpzvH5vWHy/v5J2t139r0zpP9l1XO//s7VnXcLu++TfbWt7euJ69f7+u4fa8cG/Yf++M/Ti/3DMPhuMxnP6/rxeX1/xmRq/c2/h8E7f/1rricRsvb6xp/S80rX/6unzfdV7/fe8U63/l7tUN69/7qXA83VfMTus//NeXNJz/pe8W98epr40ePzF5+sjBur1a/zhePbxm7UUXf+CDl4Tn0uav952YenTi1Mj4yHiWjfTgWwYu9/q/HeZ/F2N66a+h8NNfFMfd858ufm7d9Mvi6xfC9x8J92f8+fjNvxxqOF6b7/fpu4t5vuu/Jaxjoa78xn9et6ANz3zx1dP/8EdvNb8uiLfn5OXDtdv34oYraqf1vVac3vx81cl/XN74uP7Z4Hht/jDs15nwzswbryiur/ny43uTPP/Z4vEbX8nF82dN7yeybqDxdpzv+n8WXsf86KrG5794fPzwqaZ3c16X9eVLmA7PD9l0cXrcKu7v589e0fL64vvwZNNXL2aZ85p8fHLs6JHjpx8bm5qYnBqbfPyJfcdOnD4+ta/23qX7vtzp/LOP77W1x/fBiV07stqj/UQxltlKr//kQwcO3j5+48GJQ/tPH5p66OTEqcMHJicPTBycvHH/oUMTX+t0/iMH92zdtnv77dtGDx85uOeO3bu37x49cvxEvoxiUR3sGv/K6PFT+2pnmdyzY/fWnTt3jI8eO3FwYs/t4+Ojpzudv/azaTQ/91dHT00c3T915NjE6OSRJyb2bN29a9e2ju/+eOzkocmRsVOnj4+dnpw4NVbclpGp2rfzn32dzk81TJ4Iz3dN+sKr8y/cuiu9P27uO0/Pe1HFJo0vT7O3w3tBxZ9vnb6OuX8ozKQi+R8AAACqIOb+8Mb/syfI/wAAAFAaMfevDjOR/wEAAKA0Yu4vkv9w+vj3quT/per/P63/X6P/r/+f6f8nXdT/j8/t+v8rQP9f/78d/X/9/15ev/6//j+ddVv/P+T+8OLQv/8DAABAGcXcvzbMZL78/+8fGt90IRYGAAAALJmY+y8KM/Hv/wAAAFAaMfdfHGZSkfzv8//1//X/2/X/47b6/1lv9//brr+H+v+b/kv/fw79f/3/TP//nK10f77X19+F/f81+v90m27r/8fc/4Ewk4rkfwAAAKiCmPs/GGYi/wMAAEBpxNx/SZiJ/A8AAAClEXP/ujCTiuR//X/9f/3/in/+/z36/z3U//f5/y3o/+v/Z/r/52yl+/O9vv4u7P/7/H+6Trf1/2Pu/39hJhXJ/wAAAFAFMfd/KMxE/gcAAIDSiLn/0jAT+R8AAABKI+b+y8JMKpL/q9n/fzPLshXt/6c+l/6//v+K9/99/r/+/zLT/9f/b0f/X/+/l9ev/6//T2fd1v+Puf/yMJOK5H8AAACogpj7rwgzkf8BAACgNGLuvzLMRP4HAACA0oi5/6owk4rk/2r2/33+v/5/Qf+/cZ36//r/y0H/X/+/Hf1//f9eXr/+v/4/nXVb/z/m/qvDTCqS/wEAAKAKYu6/JsxE/gcAAIDSiLn/w2Em8j8AAACURsz968NMKpL/9f/1//X/9f/1//X/l9JQ09e91f/vn/cU/f+C/n+jpev/T88uoAv6//ly9P/1/zudX/+fhTi//n9f/bP4kvT/Y+7/SJhJRfI/AAAAVEHM/deGmcj/AAAAUBox918XZiL/AwAAQGnE3D8SZlKR/K//r/+v/6//r/+v/7+ceqv/Pz/9/4L+fyOf/6//r/+v/0973fb5/zH3bwgzqUj+BwAAgCqIuX9jmIn8DwAAAKURc//1YSbyPwAAAJRGzP2bwkwqkv/1//X/9f/1//X/9f+Xk/6//n87+v/6/728fv1//X8667b+f8z9N4SZVCT/AwAAQBXE3H9jmIn8DwAAAN1p9eLPEnP/TWEm8j8AAACURsz9m8NMKpL/9f/1//X/e7j/P6D/n+n/d5fmnav/r//fgf6//n8vr1//X/+fzrqt/x9z/81hJhXJ/wAAAFAFMfffEmYi/wMAAEBpxNx/a5iJ/A8AAAClEXP/aJhJRfK//r/+v/5/D/f/ff5/w/r1/7uT/r/+fzv6//r/vbx+/X/9fzrrtv5/zP23hZksNPj1L3A7AAAAYMXE3L8lzKQi//4PAAAAVRBz/1iYifwPAAAApRFz/3iYSUXyv/6//r/+v/6//r/+/3LS/9f/b0f/X/+/l9e/TP3//IlA/5/S6Lb+f8z9W8NMKpL/AQAAoApi7t8WZiL/AwAAQGnE3L89zET+BwAAgNKIuX9HmElF8n+P9P+3pAKU/r/+v/6//r/+f0/R/9f/b0f/X/+/l9fv8//1/2nU6qPxL1j/v/nrefr/MffvDDOpSP4HAACAKoi5f1eYifwPAAAApRFz/+1hJvI/AAAAlEbM/XeEmVQk//dI/9/n/+v/d0P/Pz1B6P830v8v6P+3pv+v/9+O/r/+fy+vX/9f/5/Ouu3z/2Pu3x1mUpH8DwAAAFUQc/9Hw0zkfwAAACiNmPvvDDOR/wEAAKCntPocwijm/o+FmVQk/y9h//+lcJL+f1f1/2dW6//7/H/9//br1/9fXvr/+v/t6P/r//fy+vX/9f/prNv6/zH37wkzqUj+BwAAgCqIuf+uMBP5HwAAAEoj5v67w0zkfwAAACiNmPv3hplUJP/7/P+y9/99/r/+v/5/p/Xr/y8v/X/9/3b0/3uz/x9etuj/d1H/Pz+G9P/pRt3W/4+5/54wk4rkfwAAAKiCmPs/HmYi/wMAAEBpxNz/iTAT+R8AAABKI+b+T4aZVCT/6//r/+v/6//r/+v/Lyf9/2Xr/9eeCvX/C/r/52al+/O9vv5u6v/7/H+6Vbf1/2PuvzfMpCL5HwAAAKog5v5PhZnI/wAAAFAaMff//zAT+R8AAABKI+b++8JMKpL/9f/1//X/9f/1//X/l5P+v8//b0f/X/+/l9ev/6//T2fd1v+Puf/Xwkwqkv8BAACgCmLuvz/MRP4HAACA0oi5/9NhJvI/AAAA9JhV854Sc/+vh5lUJP/3Xv9/pCf7//3p8vX/9f/1//X/9f+Xkv6//n+m/3/OVro/3+vr1//X/6ezbuv/x9z/G2EmFcn/AAAAUAUx938mzET+BwAAgNKIuf83w0zkfwAAACiNmPsfCDOpSP5f6v5/8/nb8fn/+v+Z/r/+v/6//v950v/X/8/0/8/ZSvfne339+v/6/3TWbf3/mPt/K8ykIvkfAAAAqiDm/gfDTOR/AAAA6FKPLvocMfd/NsxE/gcAAIDSiLn/c2EmFcn/vff5//r/+v/6//r/+v+9RP9f/78d/X/9/15ev/6//j+ddVv/P+b+h8JMKpL/AQAAoApi7v98mIn8DwAAAKURc/9vh5nI/wAAAFAaMff/TphJRfK//r/+v/6//r/+v/7/ctL/n9v/z5/D9P8L+v/6/728fv1//X8667b+f8z9XwgzqUj+BwAAgCqIuf93w0zkfwAAACiNmPt/L8xE/gcAAIDSiLn/4TCTiuR//X/9f/1//X/9f/3/5aT/7/P/29H/1//v5fXr/+v/01m39f9j7v9imElF8j8AAABUQcz9vx9mIv8DAABAacTcvy/MRP4HAACA0oi5/5Ewk4rkf/1//X/9f/1//X/9/+Wk/6//385i+v/DLS5f///8rHR/vtfXr/+v/09n3db/j7l/f5jJ3sarAQAAAHpXzP1fCjOpyL//AwAAQBXE3H8gzET+BwAAgNKIuf9gmElF8r/+v/6//r/+v/6//v9y0v/X/2/H5//r//fy+vX/9f/prNv6/zH3T4SZVCT/AwAAQBXE3H8ozET+BwAAgNKIuf9wmIn8DwAAAKURc/+jYSYVyf/6//r/+v+V7f+//v2mder/6/8vB/1//f929P/1/3t5/fr/+v901m39/5j7j4SZVCT/AwAAQBXE3P/lMBP5HwAAAEoj5v6vhJnI/wAAAFAaMfcfDTOpSP7X/9f/1/+vbP9/YZ//v2b2evX/9f/Phf6//n87+v/6/728fv1//X8667b+f8z9x8JMKpL/AQAAoApi7j8eZiL/AwAAQGnE3H8izET+BwAAgNKIuf9kmElF8r/+/+L6/33zdAP1/1uvX/+/BP3/Ovr/+v/nQv9f/78d/X/9/15ev/6//j+ddVv/P+b+PwgzqUj+BwAAgCqIuf9UmIn8DwAAAKURc/9kmIn8DwDwf+zd145ed9XH8ed17MTWq9wBB7kFxAVwCVwDEgdcAL0m9NAh9N5C6BA6hN577723EAi9BAmU8Vor8WRm74k9zzN7/9fnc5AVxpZnD7Ylfhq+2gAwjNz9D4hbmux//b/3/+v/9f/6f/3/Nun/9f9T9P/6/zU/v/5f/8+8pfX/ufsfGLc02f8AAADQQe7+B8Ut9j8AAAAMI3f/g+MW+x8AAACGkbv/IXFLk/2v/9f/6//1//p//f826f/1/1N23P/foP+/0O76+YO/nvU8/8H0//p/5i2t/8/d/9C45dDhd+YIXyUAAACwJLn7Hxa3NPn+PwAAAHSQu//hcYv9DwAAAMPI3f+IuKXJ/tf/6//1/8fV/192l19f/6//1//r/3v0/3f8LV5c/3/5hZ9P/3+hk+7n1/78+n/9P/OW1v/n7n9k3NJk/wMAAEAHufsfFbfY/wAAADCM3P2PjlvsfwAAABhG7v6r45Ym+1//r//X/6/w/f+n9f/6//XQ/3fo/1fz/n/9/z4n3c+v/fn1//p/5i2t/8/df03c0mT/AwAAQAe5+x8Tt9j/AAAAMITT9W9nN4+NW+x/AAAAGEbu/sfFLU32v/5f/6//X2H/7/3/+v8V0f/r/6fo//X/a35+/b/+n3lL6/9z9z8+bmmy/wEAAKCD3P1PiFvsfwAAABhG7v4nxi32PwAAAAwjd/+T4pa77P9zO3yq3dH/6//1//p//b/+f5v0//r/Kfp//f+an1//r/9n3tb7//tcu3eP2v/n7r82bvH9fwAAABhG7v4nxy32PwAAAAwjd/9T4hb7HwAAAIaRu/+pcUuT/a//1//f0f//9//0//p//f8dH9f/Hw/9v/5/iv5f/7/m59f/6/+Zt/X+f6b33/+fc/c/LW5psv8BAACgg9z9T49b7H8AAAAYRu7+Z8Qt9j8AAAAMI3f/M+OWJvtf/6//9/7/Hfb/t230//p//f8x0/9fdP+//6/ehfT/R6L/1/8f1v/f+wjPr/+ng6X1/7n7nxW3NNn/AAAA0EHu/mfHLfY/AAAADCN3/3Vxi/0PAAAAw8jd/5y4pcn+X2L/f4X+X/8/av+/ivf/n2rZ/9/+Mf3/duj/F9v/T9P/H4n+X//v/f/6f6Ytrf/P3f/cuOXI+/9eZ4/6MwEAAICTkbv/eXFLk+//AwAAQAe5+58ft9j/AAAAMIzc/S+IW5rs/yX2/xv9v/5f/1+/zuLf/3/ZGP2/9/9vj/5f/z9F/6//X/Pz6//1/8xbWv+fu/+FcUuT/Q8AAADDO7Wp3f+iuMX+BwAAgGHk7n9x3GL/AwAAwDBy978kbmmy//X/+n/9v/7/kvr/Qd7/r//fHv2//n/KUfv/jf6/vhb9/3KeX/+v/2fe0vr/3P0vjVua7H8AAADoIHf/y+IW+x8AAACGkbv/5XGL/Q8AAADDyN3/irilyf7X/2+p/z+70f/r//X/+n/9v/5f/z/D+//1/2t+fv2//p95S+v/c/e/Mm5psv8BAACgg9z9r4pb7H8AAAAYRu7+V8ct9j8AAAAMI3f/a+KW/fv/1C6fanf0/97/r//X/+v/9f/bpP/X/0/R/x/c/5895PPp/5f1/Pp//T/zltb/5+6/Pm7x/X8AAAAYRu7+18Yt9j8AAAAMI3f/DXGL/Q8AAADDyN3/urilyf4/rP+/9f/P/7j+/2j0/wc/v/5f/6//1//r//X/U/T/3v+/5ufX/+v/mbe0/j93/+vjlib7HwAAADrI3f+GuMX+BwAAgGHk7n9j3GL/AwAAwDBy978pbmmy/4///f9X6f/1//r/uPp//b/+X/+v/5+m/9f/r/n59f/6f+Ytrf/P3f/muKXJ/gcAAIAOcve/JW6x/wEAAGAYufvfGrfY/wAAADCM3P1vi1ua7P/j7/+9/383/f81m2H6/1P6/6T/j99X/b/+/27Q/+v/N/r/i3bS/fzan1//r/9n3tL6/9z9N+5NvX77HwAAADq4ce+fZzdvj1vsfwAAABhG7v53xC32PwAAAAwjd/8745Ym+1//v9b+3/v/N/p//f++59f/L5P+X/8/Rf+v/1/z8+v/9f/MW1r/n7v/XXFLk/0PAAAAHeTuf3fcYv8DAADAMGL3n/8/v9v/AAAAMKT37P3z7Oa9cUuT/d+4/7/qUvv/c3f6d/3/wc+v/z+W/v/G/X/29P/6/zXR/+v/p+j/9f9rfv5L7P/zf0oeQ/8fH7ha/8/yLK3/z93/vrilyf4HAACADnL3vz9usf8BAABgGLn7b4pb7H8AAAAYRu7+D8QtTfZ/4/5/kPf/3/eWeAL9/7j9v/f/x9X/6/8Pov/X/2/0/xftpPv5tT+/9//r/5m3tP4/d/8H45Ym+x8AAAA6yN3/objF/gcAAIBh5O7/cNxi/wMAAMAwcvd/JG5psv/1/2vv/y/y/f/xG6n/1/9vttf/n96M0f9fqf+/NPp//f8U/b/+f83Pr//X/zNvaf1/7v6Pxi1N9j8AAAB0kLv/Y3GL/Q8AAADDyN3/8bjF/gcAAIBh5O7/RNzSZP/r/5v2//H5t9n/3/5J9P9N+v9rvP9/o/8/lP5f/z9F/6//X/Pz6//1/8xbWv+fu/+TcUuT/Q8AAAAd5O7/VNxi/wMAAMAwcvd/Om6x/wEAAGAYufs/Ezfc88qTe6TjdeaQj0dvrv/X/3v//4D9/+Wbzebk3/+v/9f/79H/6/+n6P/1/2t+fv2//p95S+v/c/d/Nm7x/X8AAAAYRu7+z8Ut9j8AAAAMI3f/5+MW+x8AAACGkbv/C3FLk/2v/9f/6/9X2/+fW8z7//X/e/T/B9P/6/+n6P/1/2t+fv2//p95S+v/c/d/MW5psv8BAACgg9z9X4pb7H8AAAAYRu7+L8ct9j8AAAAMI3f/V+KWJvtf/6//1/+vtv8//P3/+v89+v9l0P/r/6fo//X/a35+/b/+n3lL6/9z9381bmmy/wEAAKCD3P1fi1vsfwAAABhG7v6vxy32PwAAAAwjd/834pYm+//+pzb6/zt9XP+v/9f/6/+T/v946P/1/1P0//r/NT+//l//z7yl9f+5+78ZtzTZ/wAAANBB7v5vxS32PwAAAAwjd/+34xb7HwAAAIaRu/87cUuT/T/y+/+nfpr+/zz9v/5/o//X/2+Z/l//P0X/r/9f8/Pr//X/zFta/5+7/7txS5P9DwAAAB3k7v9e3GL/AwAAwDBy938/brH/AQAAYBi5+38QtzTZ/yP3/1OW1P/ffI+T6P/PBzf6f/3/Rv+v/98y/f+u+v/TR/r5+v8Lvw79v/5f/6//Z7tOqP8/szmk/8/d/8O4pcn+BwAAgA5y9/8obrH/AQAAYBi5+38ct9j/AAAAMIzc/T+JW8bZ//e7aeIH9f/H3v/v/SHy/n/9/0b/r//X/+/R/3v//xT9v/5/zc+v/9f/M29p7//P3f/TuGWc/Q8AAADt5e7/Wdxi/wMAAMAwcvf/PG6x/wEAAGAYuft/Ebc02f/6/5N//7/+X/+fdtD/X7bR/+v/d0z/r/+fov9fcf9/Lq7+X/+v/2fC0vr/3P2/jFua7H8AAADoIHf/r+IW+x8AAACGkbv/13GL/Q8AAADDyN3/m7ilyf7X/+v/9f+t+n/v/9f/75z+X/8/Rf+/4v7f+/+r/88/d/p//T93tbT+P3f/b+OWJvsfAAAAOsjd/7u4xf4HAACAYeTuvzlusf8BAABgGLn7fx+3NNn/x9X/539z+n/9v/5f/5/0//r/jf5f/z9D/6//X/Pze/+//p95S+v/c/ffErc02f8AAADQQe7+P8Qt9j8AAAAMI3f/H+MW+x8AAACGkbv/1rilyf73/n/9/5D9/xX6f/2//n8pTrD/3/9bfUn0/+fp/y+k/9f/6//1/0xbWv+fu/9PcUuT/Q8AAAAd5O7/c9xi/wMAAMAwcvf/JW6x/wEAAGAYufv/Grc02f/6f/3/3e//z9TXvdj+3/v/9f/6/8UY9/3/l+v/9f+X3P9fd/35D+v/1/n8+n/9P/OW1v/n7v9b3NJk/wMAAEAHufv/HrfY/wAAADCM3P3/iFvsfwAAABhG7v5/xi1N9r/+X/8/5Pv/9f/6f/3/Yozb/3v/v/7f+//1//p//T9zltb/5+7/V9zSZP8DAABAB7n7/x232P8AAAAwjNz9t8Ut9j8AAAAMI3f/f+KWJvtf/6//1//r//X/+v9t0v/r/6fo//X/a35+/b/+n3lL6/9z9/8vAAD//4a5JeY=")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)

1.016836999s ago: executing program 4 (id=1869):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2294], 0xff, 0x5e54, &(0x7f0000005d80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0xb9cbbe05c791f09e)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
sendfile(r0, r1, 0x0, 0xff7e82)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x22201, 0xa9)

864.978488ms ago: executing program 3 (id=1870):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f024})
r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x0, {0x8000, 0x1000, 0x4, 0x1}})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x80000000, 0x34524742, [0x1000, 0x7], [0x9, 0xfff], 0x108}})

679.725498ms ago: executing program 3 (id=1871):
r0 = socket$kcm(0x2, 0xa, 0x2)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000540)={0x2, 0x3, 0x516e, 0x4, 0xffff, 0xfff})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

609.569345ms ago: executing program 3 (id=1872):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x871a15abc695fa3d, 0x0, 0x80004, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x100, 0x0, 0x7, 0x6}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

533.913333ms ago: executing program 3 (id=1873):
r0 = socket$inet6(0xa, 0x5, 0x0)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000240)=@base={0x12, 0x2, 0x8, 0x2}, 0x50)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000100), 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2}, &(0x7f0000000500), &(0x7f0000000600)=r3}, 0x20)

258.25801ms ago: executing program 0 (id=1874):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x101, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x8000000000000000}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0)

412.881µs ago: executing program 0 (id=1875):
r0 = epoll_create1(0x80000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r2, &(0x7f0000006140)={0x2020}, 0x2076)

0s ago: executing program 4 (id=1876):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'s526\x00', [0x2f00, 0x5, 0xd09a, 0xffffffff, 0x3, 0x10001, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1, 0x4, 0x100004, 0xffff, 0x6, 0x5, 0x40000009, 0x830, 0x30000, 0x10000, 0x9, 0xa4df, 0x101, 0x2, 0x0, 0x7, 0x3, 0x8, 0x5, 0x713]})
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f0000000080)=[0x3, 0x3, 0x4, 0x7, 0x4660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x2, 0x200, 0x4, 0x6], 0x3, 0x4})

kernel console output (not intermixed with test programs):

670][ T4365]  f2fs_handle_critical_error+0x37c/0x540
[  178.831698][ T4365]  f2fs_write_end_io+0x886/0xb60
[  178.831729][ T4365]  __submit_merged_bio+0x27a/0x6a0
[  178.831755][ T4365]  __submit_merged_write_cond+0x255/0x530
[  178.831781][ T4365]  f2fs_write_data_pages+0x261d/0x3000
[  178.831835][ T4365]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  178.831869][ T4365]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  178.831919][ T4365]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  178.831940][ T4365]  ? look_up_lock_class+0x74/0x170
[  178.831969][ T4365]  ? trace_f2fs_writepages+0x7f/0x200
[  178.831989][ T4365]  ? f2fs_write_node_pages+0x478/0x6e0
[  178.832012][ T4365]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  178.832045][ T4365]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  178.832066][ T4365]  do_writepages+0x32e/0x550
[  178.832090][ T4365]  ? reacquire_held_locks+0x127/0x1d0
[  178.832104][ T4365]  ? writeback_sb_inodes+0x384/0x1010
[  178.832170][ T4365]  __writeback_single_inode+0x145/0xff0
[  178.832188][ T4365]  ? do_raw_spin_unlock+0x4d/0x240
[  178.832210][ T4365]  writeback_sb_inodes+0x6c7/0x1010
[  178.832253][ T4365]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  178.832311][ T4365]  ? rcu_is_watching+0x15/0xb0
[  178.832335][ T4365]  wb_writeback+0x43b/0xaf0
[  178.832360][ T4365]  ? queue_io+0x341/0x590
[  178.832381][ T4365]  ? __pfx_wb_writeback+0x10/0x10
[  178.832406][ T4365]  ? _raw_spin_unlock_irq+0x23/0x50
[  178.832428][ T4365]  wb_workfn+0x409/0xef0
[  178.832458][ T4365]  ? __pfx_wb_workfn+0x10/0x10
[  178.832478][ T4365]  ? __lock_acquire+0xab9/0xd20
[  178.832508][ T4365]  ? process_scheduled_works+0x9ef/0x17b0
[  178.832529][ T4365]  ? _raw_spin_unlock_irq+0x23/0x50
[  178.832544][ T4365]  ? process_scheduled_works+0x9ef/0x17b0
[  178.832557][ T4365]  ? process_scheduled_works+0x9ef/0x17b0
[  178.832573][ T4365]  process_scheduled_works+0xae1/0x17b0
[  178.832616][ T4365]  ? __pfx_process_scheduled_works+0x10/0x10
[  178.832647][ T4365]  worker_thread+0x8a0/0xda0
[  178.832664][ T4365]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  178.832689][ T4365]  ? __kthread_parkme+0x7b/0x200
[  178.832715][ T4365]  kthread+0x711/0x8a0
[  178.832735][ T4365]  ? __pfx_worker_thread+0x10/0x10
[  178.832749][ T4365]  ? __pfx_kthread+0x10/0x10
[  178.832767][ T4365]  ? _raw_spin_unlock_irq+0x23/0x50
[  178.832783][ T4365]  ? lockdep_hardirqs_on+0x9c/0x150
[  178.832798][ T4365]  ? __pfx_kthread+0x10/0x10
[  178.832815][ T4365]  ret_from_fork+0x3fc/0x770
[  178.832833][ T4365]  ? __pfx_ret_from_fork+0x10/0x10
[  178.832854][ T4365]  ? __switch_to_asm+0x39/0x70
[  178.832869][ T4365]  ? __switch_to_asm+0x33/0x70
[  178.832884][ T4365]  ? __pfx_kthread+0x10/0x10
[  178.832902][ T4365]  ret_from_fork_asm+0x1a/0x30
[  178.832935][ T4365]  </TASK>
[  178.832941][ T4365] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  179.035711][ T8344] loop1: detected capacity change from 0 to 1024
[  179.074153][   T33] audit: type=1800 audit(1755176964.462:20): pid=8344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1042" name="file1" dev="loop1" ino=20 res=0 errno=0
[  179.103956][ T6009] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  179.209055][ T8346] batadv_slave_1: entered promiscuous mode
[  179.212676][ T8346] batadv_slave_1: left promiscuous mode
[  179.243945][ T8348] bridge_slave_0: left allmulticast mode
[  179.254437][ T8348] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.389109][ T8352] overlayfs: missing 'lowerdir'
[  179.439952][ T6009] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  179.444554][ T6009] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  179.451133][ T6009] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  179.454707][ T6009] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  179.460006][ T6009] usb 1-1: SerialNumber: syz
[  179.850172][ T6009] usb 1-1: 0:2 : does not exist
[  179.863236][ T6009] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5)
[  179.874601][   T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.877012][ T6009] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[  179.885107][ T6009] usb 1-1: unit 6 not found!
[  179.906705][ T6009] usb 1-1: USB disconnect, device number 10
[  179.962088][ T6383] udevd[6383]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  179.964289][ T8361] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1048'.
[  180.558298][ T6037] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  180.730989][ T6037] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  180.742702][ T6037] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  180.746332][ T6037] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.763264][ T8391] loop2: detected capacity change from 0 to 256
[  180.776328][ T6037] usb 2-1: Product: syz
[  180.778261][ T6037] usb 2-1: Manufacturer: syz
[  180.778519][ T8391] FAT-fs (loop2): Directory bread(block 64) failed
[  180.780299][ T6037] usb 2-1: SerialNumber: syz
[  180.786593][ T8391] FAT-fs (loop2): Directory bread(block 65) failed
[  180.789847][ T8391] FAT-fs (loop2): Directory bread(block 66) failed
[  180.792735][ T8391] FAT-fs (loop2): Directory bread(block 67) failed
[  180.799483][ T6037] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  180.806484][ T8391] FAT-fs (loop2): Directory bread(block 68) failed
[  180.810723][ T8391] FAT-fs (loop2): Directory bread(block 69) failed
[  180.813481][ T8391] FAT-fs (loop2): Directory bread(block 70) failed
[  180.818071][ T8391] FAT-fs (loop2): Directory bread(block 71) failed
[  180.821743][ T8391] FAT-fs (loop2): Directory bread(block 72) failed
[  180.824483][ T8391] FAT-fs (loop2): Directory bread(block 73) failed
[  180.942111][ T8399] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144
[  181.134746][   T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  181.426741][ T6037] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  181.468452][ T6037] usb 2-1: USB disconnect, device number 17
[  182.426549][ T8427] loop1: detected capacity change from 0 to 256
[  182.482206][ T8427] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  182.501704][ T8427] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  182.538002][ T8427] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  182.996168][ T8447] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1087'.
[  182.999166][ T8447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1087'.
[  183.127888][ T8454] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1091'.
[  183.431031][ T8467] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1098'.
[  183.451284][ T8457] loop2: detected capacity change from 0 to 32768
[  183.718824][ T8457] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  183.790375][ T5980] ocfs2: Unmounting device (7,2) on (node local)
[  184.481466][ T8483] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  184.485126][ T8483] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  184.538042][ T8483] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  184.557450][ T8483] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  184.560621][ T8483] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  184.609397][ T8483] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  184.645868][ T8483] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  184.648155][ T8483] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  185.393814][    T9] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  185.586313][    T9] usb 2-1: config 16 has an invalid interface number: 131 but max is 0
[  185.593286][    T9] usb 2-1: config 16 has no interface number 0
[  185.595998][    T9] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  185.599672][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.625484][    T9] usb-storage 2-1:16.131: USB Mass Storage device detected
[  185.645157][    T9] usb-storage 2-1:16.131: Quirks match for vid 04e6 pid 000b: 4
[  185.767950][ T8491] loop2: detected capacity change from 0 to 32768
[  185.812608][ T8491] JBD2: Ignoring recovery information on journal
[  185.829481][ T6009] usb 2-1: USB disconnect, device number 18
[  185.857608][ T8491] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  185.902086][   T33] audit: type=1326 audit(1755176970.841:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8509 comm="syz.0.1113" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8b598ebe9 code=0x0
[  185.929060][ T5980] ocfs2: Unmounting device (7,2) on (node local)
[  186.088187][ T8516] loop2: detected capacity change from 0 to 256
[  186.092089][ T8516] exfat: Deprecated parameter 'namecase'
[  186.104411][ T8516] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  186.220616][ T8522] team_slave_1: entered promiscuous mode
[  186.223153][ T8522] netlink: 'syz.2.1119': attribute type 10 has an invalid length.
[  186.229089][ T8522] team0: Port device team_slave_0 removed
[  186.298998][ T6009] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  186.464523][ T6009] usb 1-1: Using ep0 maxpacket: 8
[  186.486037][ T6009] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  186.491549][ T6009] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.507407][ T6009] pvrusb2: Hardware description: Terratec Grabster AV400
[  186.516801][ T6009] pvrusb2: **********
[  186.520637][ T6009] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  186.538773][ T6009] pvrusb2: Important functionality might not be entirely working.
[  186.541909][ T6009] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  186.569394][ T6009] pvrusb2: **********
[  186.591207][ T8525] syz.2.1120 (8525): drop_caches: 2
[  186.686764][   T55] Bluetooth: hci0: command 0x0401 tx timeout
[  186.750204][   T55] Bluetooth: hci1: command 0x0c1a tx timeout
[  186.755105][ T2396] pvrusb2: Invalid write control endpoint
[  187.063699][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  187.076654][ T2396] pvrusb2: Invalid write control endpoint
[  187.079543][ T2396] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  187.083584][ T2396] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  187.086659][ T2396] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  187.093626][ T2396] pvrusb2: Device being rendered inoperable
[  187.098659][ T2396] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  187.101782][ T2396] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  187.102713][    T9] usb 1-1: USB disconnect, device number 11
[  187.111909][ T2396] pvrusb2: Attached sub-driver cx25840
[  187.117078][ T2396] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  187.124355][ T2396] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  187.429149][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1131'.
[  187.793731][   T33] audit: type=1326 audit(1755176972.609:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.0.1142" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b598ebe9 code=0x7ffc0000
[  187.832012][   T33] audit: type=1326 audit(1755176972.609:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.0.1142" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b598ebe9 code=0x7ffc0000
[  187.858196][   T33] audit: type=1326 audit(1755176972.618:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.0.1142" exe="/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7fa8b598ebe9 code=0x7ffc0000
[  187.876591][   T33] audit: type=1326 audit(1755176972.618:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.0.1142" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b598ebe9 code=0x7ffc0000
[  187.893893][   T33] audit: type=1326 audit(1755176972.618:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.0.1142" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b598ebe9 code=0x7ffc0000
[  187.958142][ T8582] raw_sendmsg: syz.1.1146 forgot to set AF_INET. Fix it!
[  187.964601][ T8584] loop2: detected capacity change from 0 to 512
[  187.994833][ T8584] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  188.004600][ T8584] EXT4-fs (loop2): orphan cleanup on readonly fs
[  188.017080][ T8584] Quota error (device loop2): find_block_dqentry: Quota for id 0 referenced but not present
[  188.025856][ T8584] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  188.039782][ T8584] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1147: Failed to acquire dquot type 1
[  188.048192][ T8584] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1147: bg 0: block 40: padding at end of block bitmap is not set
[  188.054652][ T8584] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  188.060643][ T8584] EXT4-fs (loop2): 1 truncate cleaned up
[  188.087259][ T8584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  188.098759][ T8584] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.1147: bad symlink.
[  188.103636][ T8584] EXT4-fs error (device loop2): ext4_get_link:106: inode #16: comm syz.2.1147: bad symlink.
[  188.127274][ T5980] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.250513][ T8597] tmpfs: Bad value for 'mpol'
[  188.378874][ T8589] loop1: detected capacity change from 0 to 32768
[  188.385818][ T8589] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1149 (8589)
[  188.402455][ T8589] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  188.409426][ T8589] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  188.416293][ T8589] BTRFS info (device loop1): using free-space-tree
[  188.564541][ T8589] BTRFS warning (device loop1): can't clear the compat:0,compat:1 feature bits while mounted
[  188.604004][ T5975] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  188.856090][   T55] Bluetooth: hci0: command 0x0401 tx timeout
[  188.898279][ T8646] loop1: detected capacity change from 0 to 512
[  188.918000][ T8646] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  188.949474][   T55] Bluetooth: hci1: command 0x0c1a tx timeout
[  188.973862][ T8646] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  188.979971][ T8646] EXT4-fs (loop1): 1 truncate cleaned up
[  189.001598][ T8646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.055178][ T8652] loop2: detected capacity change from 0 to 4096
[  189.087650][ T5975] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.236184][ T8658] /dev/nullb0: Can't open blockdev
[  189.288426][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  189.363862][ T8662] loop2: detected capacity change from 0 to 4096
[  189.379944][ T8662] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  189.621815][ T8656] loop1: detected capacity change from 0 to 32768
[  189.641790][ T8656] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  189.666723][ T8656] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  189.846018][ T8666] ntfs3(loop2): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  189.859766][ T8666] ntfs3(loop2): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  190.041010][ T8656] (syz.1.1173,8656,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=9
[  190.050688][ T8656] (syz.1.1173,8656,0):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2
[  190.054392][ T8656] (syz.1.1173,8656,0):ocfs2_mknod:301 ERROR: status = -2
[  190.057932][ T8656] (syz.1.1173,8656,0):ocfs2_mknod:505 ERROR: status = -2
[  190.060852][ T8656] (syz.1.1173,8656,0):ocfs2_mkdir:661 ERROR: status = -2
[  190.093111][ T5975] ocfs2: Unmounting device (7,1) on (node local)
[  190.359723][ T8674] loop2: detected capacity change from 0 to 512
[  190.363641][ T8674] EXT4-fs: Ignoring removed nobh option
[  190.385517][ T8674] EXT4-fs (loop2): Test dummy encryption mode enabled
[  190.398936][ T8674] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  190.423454][ T8674] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.1180: invalid indirect mapped block 2683928664 (level 1)
[  190.438764][ T8674] EXT4-fs (loop2): Remounting filesystem read-only
[  190.441304][ T8674] EXT4-fs (loop2): 1 truncate cleaned up
[  190.443956][ T8674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.534810][ T5980] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.729335][ T8685] loop1: detected capacity change from 0 to 2048
[  190.766720][ T8685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.771288][ T8691] netlink: 'syz.0.1185': attribute type 30 has an invalid length.
[  190.808127][ T8685] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  190.858893][ T5975] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.099301][   T55] Bluetooth: hci0: command 0x0401 tx timeout
[  191.123331][ T8708] netlink: 'syz.1.1195': attribute type 1 has an invalid length.
[  191.148012][ T8708] 8021q: adding VLAN 0 to HW filter on device bond2
[  191.195436][ T8708] bond2: (slave geneve2): making interface the new active one
[  191.206087][   T55] Bluetooth: hci1: command 0x0c1a tx timeout
[  191.246736][ T8708] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  191.507232][ T8708] bond2: entered promiscuous mode
[  191.512988][ T8708] geneve2: entered promiscuous mode
[  193.229408][ T8763] netlink: 'syz.2.1216': attribute type 1 has an invalid length.
[  193.319760][ T8769] loop2: detected capacity change from 0 to 1024
[  193.382683][ T5980] hfsplus: bad catalog entry type
[  193.400547][ T5980] hfsplus: bad catalog entry type
[  193.421035][   T40] hfsplus: b-tree write err: -5, ino 4
[  193.854126][ T6023] bridge_slave_1: left promiscuous mode
[  193.859715][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.102202][ T5977] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  194.109649][ T5977] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  194.116204][ T5977] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  194.120930][ T5977] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  194.126744][ T5977] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  194.365732][ T8790] loop1: detected capacity change from 0 to 512
[  194.380547][ T8790] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  194.419462][ T8790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  194.425074][ T8790] ext4 filesystem being mounted at /349/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  194.462699][ T6023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  194.470183][ T6023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  194.479811][ T5975] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  194.491957][ T6023] bond0 (unregistering): Released all slaves
[  194.558686][ T8795] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0)
[  194.657958][ T6023] team0: Port device bond1 removed
[  194.662427][ T6023] bond1 (unregistering): Released all slaves
[  194.710881][    C1] vcan0: j1939_tp_rxtimer: 0xffff888108ba2000: rx timeout, send abort
[  194.717610][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888108ba2000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  194.871846][ T8781] chnl_net:caif_netlink_parms(): no params data found
[  195.020734][ T8781] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.029164][ T8781] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.033353][ T8781] bridge_slave_0: entered allmulticast mode
[  195.036620][ T8781] bridge_slave_0: entered promiscuous mode
[  195.061672][ T8781] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.073926][ T8781] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.078914][ T8781] bridge_slave_1: entered allmulticast mode
[  195.082653][ T8781] bridge_slave_1: entered promiscuous mode
[  195.134525][ T8781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  195.141456][ T8781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  195.156061][ T8820] loop1: detected capacity change from 0 to 256
[  195.165565][ T8820] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  195.178112][ T8820] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  195.182107][ T8820] FAT-fs (loop1): Filesystem has been set read-only
[  195.258745][ T8781] team0: Port device team_slave_0 added
[  195.266029][ T8781] team0: Port device team_slave_1 added
[  195.323746][ T8781] batman_adv: batadv0: Adding interface: batadv_slave_0
[  195.332236][ T8781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.345437][ T8781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  195.367035][ T8781] batman_adv: batadv0: Adding interface: batadv_slave_1
[  195.369673][ T8781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  195.379132][ T8781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  195.454130][ T8781] hsr_slave_0: entered promiscuous mode
[  195.457128][ T8781] hsr_slave_1: entered promiscuous mode
[  195.459912][ T8781] debugfs: 'hsr0' already exists in 'hsr'
[  195.468854][ T8781] Cannot create hsr debugfs directory
[  195.503320][ T6009] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  195.676490][ T6009] usb 2-1: Using ep0 maxpacket: 16
[  195.682836][ T6009] usb 2-1: config 0 has an invalid interface number: 107 but max is 0
[  195.696166][ T6009] usb 2-1: config 0 has no interface number 0
[  195.698583][ T6009] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 41, changing to 9
[  195.707407][ T6009] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 16848, setting to 1024
[  195.725165][ T6009] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[  195.740531][ T6009] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  195.744413][ T6009] usb 2-1: Product: syz
[  195.746085][ T6009] usb 2-1: Manufacturer: syz
[  195.747910][ T6009] usb 2-1: SerialNumber: syz
[  195.768694][ T6009] usb 2-1: config 0 descriptor??
[  195.789178][ T6009] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected
[  195.799183][ T6009] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81
[  195.804429][ T6009] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1
[  195.809177][ T6009] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  195.816446][ T6009] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2
[  195.830562][ T6009] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  195.840049][ T6009] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4
[  195.854858][ T6009] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  195.872356][ T6009] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6
[  195.883003][ T6009] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  195.941820][ T8781] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  195.970868][ T8781] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  196.008801][ T8781] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  196.046632][ T8781] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  196.059877][ T6009] usb 2-1: USB disconnect, device number 19
[  196.064959][ T6009] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  196.081365][ T6009] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  196.098433][ T6009] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  196.118895][ T6009] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  196.123090][ T6009] keyspan 2-1:0.107: device disconnected
[  196.211868][ T8781] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.264019][ T8781] 8021q: adding VLAN 0 to HW filter on device team0
[  196.303511][ T5977] Bluetooth: hci1: command tx timeout
[  196.348614][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.351480][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.374218][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.378417][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.416038][ T8854] mmap: syz.0.1236 (8854): VmData 45854720 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  196.685338][ T6023] hsr_slave_0: left promiscuous mode
[  196.691726][ T6023] hsr_slave_1: left promiscuous mode
[  196.694310][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_0
[  196.697959][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.409016][ T6023] team0 (unregistering): Port device team_slave_1 removed
[  197.843696][ T8879] netlink: 'syz.0.1244': attribute type 1 has an invalid length.
[  197.860201][ T8879] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1244'.
[  197.863399][ T8879] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1244'.
[  198.054746][ T8867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1240'.
[  198.250589][ T8781] 8021q: adding VLAN 0 to HW filter on device batadv0
[  198.430571][ T8781] veth0_vlan: entered promiscuous mode
[  198.440805][ T8781] veth1_vlan: entered promiscuous mode
[  198.528098][ T5977] Bluetooth: hci1: command tx timeout
[  198.561610][ T8781] veth0_macvtap: entered promiscuous mode
[  198.590542][ T8781] veth1_macvtap: entered promiscuous mode
[  198.660089][ T8781] batman_adv: batadv0: Interface activated: batadv_slave_0
[  198.682260][ T8781] batman_adv: batadv0: Interface activated: batadv_slave_1
[  198.730783][ T5959] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.739039][ T5959] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.759693][ T5959] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.768132][ T5959] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.874372][ T8908] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1252'.
[  198.877798][ T8908] netlink: 'syz.0.1252': attribute type 1 has an invalid length.
[  199.526668][ T8903] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  199.526778][ T8902] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  199.529392][ T8903] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  199.534510][ T8903] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  199.536507][ T8902] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  199.543611][ T8903] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  199.547319][ T8902] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  199.549347][ T8902] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  199.560026][ T8902] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  199.562342][ T8902] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  199.617877][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.622457][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.646059][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.649527][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.875843][  T792] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  199.886678][ T6009] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  200.129920][ T6009] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10
[  200.159638][ T6009] usb 1-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00
[  200.180531][ T6009] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.234445][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  200.244691][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  200.282243][ T6009] usb 1-1: config 0 descriptor??
[  200.358697][  T792] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.365303][  T792] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  200.369297][  T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.372532][  T792] usb 2-1: Product: syz
[  200.374220][  T792] usb 2-1: Manufacturer: syz
[  200.376144][  T792] usb 2-1: SerialNumber: syz
[  200.746385][ T6009] aquacomputer_d5next 0003:0C70:F011.0003: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.0-1/input0
[  200.955942][ T5317] usb 1-1: USB disconnect, device number 12
[  201.126157][ T8946] loop3: detected capacity change from 0 to 16
[  201.136665][ T8946] cramfs: empty filesystem
[  201.323829][ T8954] loop3: detected capacity change from 0 to 4096
[  201.329128][ T8954] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  201.357875][ T8954] ntfs3(loop3): ino=1a, mi_enum_attr
[  201.359928][ T8954] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  201.364548][ T8954] ntfs3(loop3): ino=1a, mi_enum_attr
[  201.366985][ T8954] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  201.455449][ T8958] vivid-002: disconnect
[  201.462914][ T8958] vivid-002: reconnect
[  201.468444][  T792] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[  201.476968][  T792] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  201.480557][  T792] cdc_ncm 2-1:1.0: setting rx_max = 2048
[  201.908922][  T792] cdc_ncm 2-1:1.0: setting tx_max = 88
[  201.945569][  T792] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  201.970598][  T792] usb 2-1: USB disconnect, device number 20
[  201.982364][  T792] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP)
[  202.376674][ T8979] loop3: detected capacity change from 0 to 32768
[  202.386324][ T8979] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1275 (8979)
[  202.415037][ T8979] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  202.419491][ T8979] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  202.427610][ T8979] BTRFS info (device loop3): using free-space-tree
[  202.744337][ T8979] BTRFS info (device loop3): Snapshot src from another FS
[  202.769410][ T8781] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  203.721027][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1290'.
[  203.732393][ T9029] veth0_to_bond: entered allmulticast mode
[  203.866307][   T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  204.023803][   T10] usb 2-1: Using ep0 maxpacket: 32
[  204.031808][   T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  204.035683][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.044952][   T10] usb 2-1: config 0 descriptor??
[  204.371309][   T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  204.399356][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  204.416570][   T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  204.423883][   T10] usb 2-1: media controller created
[  204.488149][ T6009] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  204.531089][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  204.591746][   T10] az6027: usb out operation failed. (-71)
[  204.599545][   T10] az6027: usb out operation failed. (-71)
[  204.603899][   T10] stb0899_attach: Driver disabled by Kconfig
[  204.607027][   T10] az6027: no front-end attached
[  204.607027][   T10] 
[  204.610777][   T10] az6027: usb out operation failed. (-71)
[  204.616867][   T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  204.632610][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12
[  204.641579][   T10] dvb-usb: schedule remote query interval to 400 msecs.
[  204.649669][   T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  204.665492][ T6009] usb 1-1: Using ep0 maxpacket: 8
[  204.667769][   T10] usb 2-1: USB disconnect, device number 21
[  204.683042][ T6009] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  204.692760][ T6009] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  204.720273][ T6009] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  204.724116][ T6009] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  204.742095][ T6009] usb 1-1: SerialNumber: syz
[  204.776815][ T6009] cdc_acm 1-1:1.0: skipping garbage
[  204.782971][ T6009] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[  204.791069][   T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  204.795057][ T6009] cdc_acm 1-1:1.0: This needs exactly 3 endpoints
[  204.801769][ T6009] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22
[  205.005133][   T10] usb 1-1: USB disconnect, device number 13
[  205.316805][ T9053] netlink: 'syz.3.1300': attribute type 8 has an invalid length.
[  205.410179][ T9059] loop3: detected capacity change from 0 to 1024
[  205.429300][ T9059] hfsplus: bad catalog entry type
[  205.485491][ T1089] hfsplus: b-tree write err: -5, ino 4
[  205.566422][ T9061] loop1: detected capacity change from 0 to 32768
[  205.614297][ T9063] loop3: detected capacity change from 0 to 2048
[  205.667276][ T9061] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  205.667294][ T9061]   allowing incompatible features above 0.0: (unknown version)
[  205.667300][ T9061]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  205.682408][ T5979] udevd[5979]: incorrect nilfs2 checksum on /dev/loop3
[  205.685166][ T9061] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  205.691276][ T9061] bcachefs (loop1): initializing new filesystem
[  205.694870][ T6383] udevd[6383]: incorrect nilfs2 checksum on /dev/loop3
[  205.704320][ T9061] bcachefs (loop1): going read-write
[  205.711554][ T9063] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  205.728475][ T9061] bcachefs (loop1): marking superblocks
[  205.744592][ T9061] bcachefs (loop1): initializing freespace
[  205.752263][ T9061] bcachefs (loop1): done initializing freespace
[  205.757836][ T9061] bcachefs (loop1): reading snapshots table
[  205.760293][ T9061] bcachefs (loop1): reading snapshots done
[  205.773891][ T9079] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  205.806686][ T9061] bcachefs (loop1): done starting filesystem
[  205.812531][ T9063] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: unaligned directory entry - offset=152, inode=18446462598732840977, rec_len=65535, name_len=254
[  205.876554][ T9063] Remounting filesystem read-only
[  206.487029][ T6009] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  206.531224][ T9061] syz.1.1304 (9061) used greatest stack depth: 17448 bytes left
[  206.641869][ T5975] bcachefs (loop1): shutting down
[  206.644672][ T5975] bcachefs (loop1): going read-only
[  206.648772][ T5975] bcachefs (loop1): finished waiting for writes to stop
[  206.659937][ T5975] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[  206.682269][ T6009] usb 1-1: unable to get BOS descriptor or descriptor too short
[  206.694236][ T6009] usb 1-1: config 2 has an invalid interface number: 218 but max is 0
[  206.698989][ T6009] usb 1-1: config 2 has no interface number 0
[  206.702992][ T6009] usb 1-1: config 2 interface 218 has no altsetting 0
[  206.710215][ T6009] usb 1-1: New USB device found, idVendor=0cf3, idProduct=7015, bcdDevice=95.ef
[  206.713913][ T6009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.715255][ T5975] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 4
[  206.717194][ T6009] usb 1-1: Product: syz
[  206.717214][ T6009] usb 1-1: Manufacturer: syz
[  206.724977][ T5975] bcachefs (loop1): clean shutdown complete, journal seq 5
[  206.733720][ T5975] bcachefs (loop1): marking filesystem clean
[  206.734743][ T6009] usb 1-1: SerialNumber: syz
[  206.770598][ T5975] bcachefs (loop1): shutdown complete
[  206.847043][ T5959] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.970634][ T5959] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.998114][ T6009] usb 1-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  207.013777][ T6009] usb 1-1: USB disconnect, device number 14
[  207.069236][ T5959] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.174199][ T5959] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.322282][ T5959] bridge_slave_1: left allmulticast mode
[  207.324742][ T5959] bridge_slave_1: left promiscuous mode
[  207.329108][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.341278][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  207.346370][ T5959] bridge_slave_0: left allmulticast mode
[  207.349618][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  207.352934][ T5959] bridge_slave_0: left promiscuous mode
[  207.353433][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  207.355517][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.358928][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  207.364393][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  208.314187][ T5959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  208.377633][ T5959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  208.384449][ T5959] bond0 (unregistering): Released all slaves
[  208.807790][ T9149] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  208.811886][ T9149] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  208.814818][ T9149] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  208.824752][ T9149] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4)
[  208.828684][ T9149] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  208.841120][ T9149] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  208.843594][ T9149] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  208.866029][ T9149] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  208.877726][ T9149] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  208.881696][ T9149] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  208.889889][ T9149] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  208.911306][ T9149] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  209.004703][ T5959] hsr_slave_0: left promiscuous mode
[  209.015048][ T5959] hsr_slave_1: left promiscuous mode
[  209.019678][ T5959] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.022829][ T5959] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.039712][ T5959] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.042721][ T5959] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.050117][ T9138] loop1: detected capacity change from 0 to 32768
[  209.113165][ T9138] ERROR: (device loop1): dtSearch: DT_GETPAGE: dtree page corrupt
[  209.113165][ T9138] 
[  209.122873][ T5959] veth1_macvtap: left promiscuous mode
[  209.128092][ T5959] veth0_macvtap: left promiscuous mode
[  209.129881][ T5959] veth1_vlan: left promiscuous mode
[  209.132071][ T5959] veth0_vlan: left promiscuous mode
[  209.132969][ T9138] ERROR: (device loop1): remounting filesystem as read-only
[  209.143568][ T9138] jfs_lookup: dtSearch returned -5
[  209.186471][  T114] blkno = 8ed2c, nblocks = 1
[  209.188487][  T114] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  209.188487][  T114] 
[  209.192339][  T114] JFS: metapage_get_blocks failed
[  209.194885][  T114] ERROR: (device loop1): release_metapage: metapage_write_one() failed
[  209.194885][  T114] 
[  209.212147][  T114] blkno = 8ed2c, nblocks = 1
[  209.213930][  T114] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map
[  209.213930][  T114] 
[  209.551333][   T55] Bluetooth: hci1: command tx timeout
[  209.694236][ T5959] team0 (unregistering): Port device team_slave_1 removed
[  209.738095][ T5959] team0 (unregistering): Port device team_slave_0 removed
[  210.603686][ T9104] chnl_net:caif_netlink_parms(): no params data found
[  210.878215][ T9200] loop1: detected capacity change from 0 to 40427
[  210.885608][ T9200] F2FS-fs (loop1): Image doesn't support compression
[  210.889669][ T9200] F2FS-fs (loop1): build fault injection rate: 690
[  210.894671][ T9200] F2FS-fs (loop1): invalid crc value
[  210.977719][ T9200] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  210.981157][ T9200] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  211.033019][ T9104] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.036920][ T9104] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.043447][ T9104] bridge_slave_0: entered allmulticast mode
[  211.085756][   T33] audit: type=1107 audit(1755176994.385:27): pid=9205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  211.118251][ T9104] bridge_slave_0: entered promiscuous mode
[  211.259005][ T9104] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.272167][ T9104] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.278308][ T9104] bridge_slave_1: entered allmulticast mode
[  211.282061][ T9104] bridge_slave_1: entered promiscuous mode
[  211.360646][ T9104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  211.367745][ T9104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  211.441225][ T9104] team0: Port device team_slave_0 added
[  211.458878][ T9104] team0: Port device team_slave_1 added
[  211.510242][ T9104] batman_adv: batadv0: Adding interface: batadv_slave_0
[  211.519892][ T9104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.551136][ T9104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  211.575923][ T9104] batman_adv: batadv0: Adding interface: batadv_slave_1
[  211.579738][ T9104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.590950][ T9104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  211.659278][ T9104] hsr_slave_0: entered promiscuous mode
[  211.662604][ T9104] hsr_slave_1: entered promiscuous mode
[  211.665584][ T9104] debugfs: 'hsr0' already exists in 'hsr'
[  211.668540][ T9104] Cannot create hsr debugfs directory
[  211.774852][   T55] Bluetooth: hci1: command tx timeout
[  213.163255][ T9104] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  213.189409][ T9104] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  213.200724][ T9104] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  213.207820][ T9260] loop1: detected capacity change from 0 to 512
[  213.212601][ T9260] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  213.223920][ T9104] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  213.231253][ T9260] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c11c, mo2=0102]
[  213.236848][ T9260] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1363: corrupted in-inode xattr: e_value size too large
[  213.251578][ T9260] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1363: couldn't read orphan inode 15 (err -117)
[  213.259708][ T9260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.806536][ T9104] 8021q: adding VLAN 0 to HW filter on device bond0
[  213.820888][ T9104] 8021q: adding VLAN 0 to HW filter on device team0
[  213.842784][ T4360] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.845576][ T4360] bridge0: port 1(bridge_slave_0) entered forwarding state
[  213.867304][ T4360] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.869844][ T4360] bridge0: port 2(bridge_slave_1) entered forwarding state
[  213.998556][   T55] Bluetooth: hci1: command tx timeout
[  214.049039][ T9104] 8021q: adding VLAN 0 to HW filter on device batadv0
[  214.134187][ T9104] veth0_vlan: entered promiscuous mode
[  214.148070][ T6037] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  214.257861][ T9104] veth1_vlan: entered promiscuous mode
[  214.259617][ T5975] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.290165][ T9104] veth0_macvtap: entered promiscuous mode
[  214.295958][ T9104] veth1_macvtap: entered promiscuous mode
[  214.335530][ T9104] batman_adv: batadv0: Interface activated: batadv_slave_0
[  214.344292][ T6037] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  214.348555][ T6037] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  214.359705][ T9104] batman_adv: batadv0: Interface activated: batadv_slave_1
[  214.360644][ T6037] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  214.377548][ T6037] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  214.380850][ T6037] usb 1-1: SerialNumber: syz
[  214.420941][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  214.442821][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  214.446745][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  214.478533][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  214.572431][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.582360][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.633121][ T6037] usb 1-1: 0:2 : does not exist
[  214.635535][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  214.639296][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  214.666471][ T6037] usb 1-1: USB disconnect, device number 15
[  214.697452][ T6383] udevd[6383]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  214.703689][   T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  214.874667][   T10] usb 2-1: Using ep0 maxpacket: 16
[  214.878061][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  214.888962][   T10] usb 2-1: config 1 has an invalid interface number: 231 but max is 0
[  214.892003][   T10] usb 2-1: config 1 has no interface number 0
[  214.894352][   T10] usb 2-1: config 1 interface 231 has no altsetting 0
[  214.914134][   T10] usb 2-1: string descriptor 0 read error: -22
[  214.916796][   T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=5c.f5
[  214.921543][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.045838][ T6009] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  215.155750][   T10] usbtest 2-1:1.231: Linux gadget zero
[  215.157562][   T10] usbtest 2-1:1.231: high-speed {control in/out int-out} tests (+alt)
[  215.206321][ T6009] usb 4-1: Using ep0 maxpacket: 16
[  215.211783][ T6009] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  215.214554][ T6009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.234509][ T6009] usb 4-1: config 0 descriptor??
[  215.243442][ T6009] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  215.380345][ T6037] usb 2-1: USB disconnect, device number 22
[  215.457878][ T6009] usb 4-1: Detected FT232B
[  215.584932][   T52] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  215.672389][ T6009] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  215.678900][ T6009] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  215.684629][ T6009] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  215.690297][ T6009] usb 4-1: USB disconnect, device number 2
[  215.697172][ T6009] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  215.707956][ T6009] ftdi_sio 4-1:0.0: device disconnected
[  215.764522][   T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.768932][   T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  215.775251][   T52] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  215.780533][   T52] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  215.784739][   T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.799759][   T52] usb 1-1: config 0 descriptor??
[  216.079890][ T9347] loop1: detected capacity change from 0 to 8192
[  216.221818][   T55] Bluetooth: hci1: command tx timeout
[  216.246993][   T52] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  216.249897][   T52] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  216.252831][   T52] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  216.285848][   T52] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  216.288803][   T52] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  216.291656][   T52] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0
[  216.454948][   T52] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  216.887089][    T9] usb 1-1: USB disconnect, device number 16
[  216.906543][ T6009] libceph: connect (1)[c::]:6789 error -101
[  216.909655][ T6009] libceph: mon0 (1)[c::]:6789 connect error
[  216.925431][ T9349] loop1: detected capacity change from 0 to 40427
[  216.931408][ T9349] F2FS-fs (loop1): build fault injection rate: 771
[  216.942645][ T9349] F2FS-fs (loop1): invalid crc value
[  217.007688][ T9349] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  217.016565][ T9349] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  217.042360][ T5975] syz-executor: attempt to access beyond end of device
[  217.042360][ T5975] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  217.048159][ T5975] CPU: 1 UID: 0 PID: 5975 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  217.048180][ T5975] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  217.048190][ T5975] Call Trace:
[  217.048196][ T5975]  <TASK>
[  217.048204][ T5975]  dump_stack_lvl+0x189/0x250
[  217.048231][ T5975]  ? __pfx_dump_stack_lvl+0x10/0x10
[  217.048247][ T5975]  ? __pfx_queue_work_on+0x10/0x10
[  217.048262][ T5975]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  217.048283][ T5975]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  217.048311][ T5975]  f2fs_handle_critical_error+0x37c/0x540
[  217.048360][ T5975]  f2fs_write_end_io+0x886/0xb60
[  217.048391][ T5975]  __submit_merged_bio+0x27a/0x6a0
[  217.048417][ T5975]  __submit_merged_write_cond+0x255/0x530
[  217.048442][ T5975]  f2fs_write_data_pages+0x261d/0x3000
[  217.048494][ T5975]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  217.048553][ T5975]  ? __mod_zone_page_state+0xd7/0x140
[  217.048583][ T5975]  ? folios_put_refs+0x560/0x640
[  217.048610][ T5975]  ? __lock_acquire+0xab9/0xd20
[  217.048639][ T5975]  ? do_raw_spin_lock+0x121/0x290
[  217.048667][ T5975]  ? do_raw_spin_unlock+0x4d/0x240
[  217.048683][ T5975]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  217.048703][ T5975]  do_writepages+0x32e/0x550
[  217.048733][ T5975]  ? do_raw_spin_unlock+0x4d/0x240
[  217.048755][ T5975]  filemap_fdatawrite+0x199/0x240
[  217.048775][ T5975]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  217.048840][ T5975]  ? do_raw_spin_unlock+0x4d/0x240
[  217.048860][ T5975]  f2fs_sync_dirty_inodes+0x31f/0x830
[  217.048890][ T5975]  f2fs_write_checkpoint+0x95a/0x1df0
[  217.048926][ T5975]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  217.049005][ T5975]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  217.049021][ T5975]  ? kfree+0x18e/0x440
[  217.049038][ T5975]  ? kill_f2fs_super+0x298/0x6c0
[  217.049058][ T5975]  kill_f2fs_super+0x2c3/0x6c0
[  217.049077][ T5975]  ? __pfx_kill_f2fs_super+0x10/0x10
[  217.049090][ T5975]  ? radix_tree_delete_item+0x2b6/0x400
[  217.049122][ T5975]  ? shrinker_free+0x2ce/0x3e0
[  217.049141][ T5975]  deactivate_locked_super+0xbc/0x130
[  217.049162][ T5975]  cleanup_mnt+0x425/0x4c0
[  217.049179][ T5975]  ? lockdep_hardirqs_on+0x9c/0x150
[  217.049199][ T5975]  task_work_run+0x1d4/0x260
[  217.049221][ T5975]  ? __pfx_task_work_run+0x10/0x10
[  217.049237][ T5975]  ? __x64_sys_umount+0x122/0x160
[  217.049260][ T5975]  ? exit_to_user_mode_loop+0x40/0x110
[  217.049283][ T5975]  exit_to_user_mode_loop+0xec/0x110
[  217.049303][ T5975]  do_syscall_64+0x2bd/0x3b0
[  217.049322][ T5975]  ? lockdep_hardirqs_on+0x9c/0x150
[  217.049338][ T5975]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.049352][ T5975]  ? exc_page_fault+0x9f/0xf0
[  217.049371][ T5975]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  217.049384][ T5975] RIP: 0033:0x7f784898ff17
[  217.049398][ T5975] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  217.049411][ T5975] RSP: 002b:00007ffe1c6b59f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  217.049426][ T5975] RAX: 0000000000000000 RBX: 00007f7848a11c05 RCX: 00007f784898ff17
[  217.049436][ T5975] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe1c6b5ab0
[  217.049443][ T5975] RBP: 00007ffe1c6b5ab0 R08: 0000000000000000 R09: 0000000000000000
[  217.049451][ T5975] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe1c6b6b40
[  217.049460][ T5975] R13: 00007f7848a11c05 R14: 00000000000332f7 R15: 00007ffe1c6b6b80
[  217.049487][ T5975]  </TASK>
[  217.050644][ T5975] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  217.190169][    T9] libceph: connect (1)[c::]:6789 error -101
[  217.192522][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  217.212124][ T9353] ceph: No mds server is up or the cluster is laggy
[  217.340834][ T9362] loop3: detected capacity change from 0 to 256
[  217.359132][ T9362] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  217.382721][ T9362] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d)
[  217.510304][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1377'.
[  217.513514][ T9366] netlink: 'syz.0.1377': attribute type 30 has an invalid length.
[  217.616652][ T9366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1377'.
[  217.619493][ T9366] netlink: 'syz.0.1377': attribute type 30 has an invalid length.
[  217.695076][ T9379] tmpfs: Bad value for 'mpol'
[  217.791003][ T9383] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1385'.
[  217.798357][ T9383] bond_slave_0: entered promiscuous mode
[  217.800910][ T9383] bond_slave_1: entered promiscuous mode
[  218.552325][   T52] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  218.719763][   T52] usb 2-1: Using ep0 maxpacket: 16
[  218.733603][   T52] usb 2-1: config 0 has an invalid interface number: 94 but max is 0
[  218.737092][   T52] usb 2-1: config 0 has no interface number 0
[  218.743207][   T52] usb 2-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=45.90
[  218.752046][   T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.766275][   T52] usb 2-1: Product: syz
[  218.768031][   T52] usb 2-1: Manufacturer: syz
[  218.769894][   T52] usb 2-1: SerialNumber: syz
[  218.791683][   T52] usb 2-1: config 0 descriptor??
[  218.811716][   T52] usb 2-1: unsupported MDLM descriptors
[  219.049248][ T9405] loop3: detected capacity change from 0 to 512
[  219.080696][    T9] usb 2-1: USB disconnect, device number 23
[  219.083962][ T9405] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  219.141238][ T9405] EXT4-fs (loop3): 1 truncate cleaned up
[  219.145011][ T9405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.229936][ T9104] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.329015][ T9413] trusted_key: syz.1.1397 sent an empty control message without MSG_MORE.
[  219.855956][ T9450] sg_write: data in/out 16514940/4 bytes for SCSI command 0x1c-- guessing data in;
[  219.855956][ T9450]    program syz.0.1412 not setting count and/or reply_len properly
[  220.134522][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  220.297362][    T9] usb 4-1: Using ep0 maxpacket: 16
[  220.306811][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.311361][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.319308][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  220.323156][    T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[  220.329015][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.345855][    T9] usb 4-1: config 0 descriptor??
[  220.791615][    T9] apple 0003:05AC:0247.0005: unexpected long global item
[  220.794890][    T9] apple 0003:05AC:0247.0005: parse failed
[  220.797043][    T9] apple 0003:05AC:0247.0005: probe with driver apple failed with error -22
[  221.109532][   T52] usb 4-1: USB disconnect, device number 3
[  222.801492][ T9567] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  222.803825][ T9567] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  222.813711][ T9567] vhci_hcd vhci_hcd.0: Device attached
[  222.822644][ T9567] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10)
[  222.824919][ T9567] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  222.829471][ T9567] vhci_hcd vhci_hcd.0: Device attached
[  222.834303][ T9567] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12)
[  222.836704][ T9567] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  222.840033][ T9567] vhci_hcd vhci_hcd.0: Device attached
[  222.840274][ T9555] loop3: detected capacity change from 0 to 32768
[  222.843626][ T9567] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  222.859609][ T9555] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1427 (9555)
[  222.866252][ T9567] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(16)
[  222.868699][ T9567] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  222.877069][ T9567] vhci_hcd vhci_hcd.0: Device attached
[  222.897482][ T9567] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(18)
[  222.899903][ T9567] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  222.910132][ T9555] BTRFS info (device loop3 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  222.914874][ T9555] BTRFS info (device loop3 state S): using crc32c (crc32c-lib) checksum algorithm
[  222.915204][ T9567] vhci_hcd vhci_hcd.0: Device attached
[  222.925375][ T9555] BTRFS info (device loop3 state S): using free-space-tree
[  222.936427][ T9567] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  222.948421][ T9567] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  222.962141][ T9567] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  222.969128][   T52] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  222.974781][ T9567] vhci_hcd vhci_hcd.0: port 0 already used
[  222.994814][ T9570] vhci_hcd: connection closed
[  222.995158][ T9576] vhci_hcd: connection closed
[  222.996390][ T9568] vhci_hcd: connection closed
[  222.996838][ T9574] vhci_hcd: connection closed
[  223.001351][ T9572] vhci_hcd: connection closed
[  223.004153][   T13] vhci_hcd: stop threads
[  223.007894][ T9510] BTRFS warning (device loop3 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored
[  223.016963][   T13] vhci_hcd: release socket
[  223.020288][   T13] vhci_hcd: disconnect device
[  223.026550][ T9508] BTRFS warning (device loop3 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x13388982 level 0, ignored
[  223.031310][   T13] vhci_hcd: stop threads
[  223.033312][   T13] vhci_hcd: release socket
[  223.035245][ T9510] BTRFS warning (device loop3 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x28b693f7 level 0, ignored
[  223.040192][   T13] vhci_hcd: disconnect device
[  223.042805][   T13] vhci_hcd: stop threads
[  223.044104][   T13] vhci_hcd: release socket
[  223.046569][ T9555] BTRFS error (device loop3 state S): failed to load root free space
[  223.050381][   T13] vhci_hcd: disconnect device
[  223.069545][   T13] vhci_hcd: stop threads
[  223.071011][   T13] vhci_hcd: release socket
[  223.072946][   T13] vhci_hcd: disconnect device
[  223.077313][    T9] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[  223.077347][   T13] vhci_hcd: stop threads
[  223.080419][    T9] usb 35-1: enqueue for inactive port 0
[  223.082214][   T13] vhci_hcd: release socket
[  223.104653][   T13] vhci_hcd: disconnect device
[  223.125528][ T9555] BTRFS error (device loop3 state S): open_ctree failed: -2
[  223.163835][   T52] usb 1-1: Using ep0 maxpacket: 32
[  223.178981][    T9] vhci_hcd: vhci_device speed not set
[  223.186541][   T52] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  223.204205][   T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.218714][   T52] usb 1-1: config 0 descriptor??
[  223.441637][   T52] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  223.460920][   T52] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  223.466303][   T52] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  223.469179][   T52] usb 1-1: media controller created
[  223.508899][   T52] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  223.605007][ T9604] loop1: detected capacity change from 0 to 512
[  223.615832][ T9604] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1439: bad orphan inode 13
[  223.619400][ T9604] ext4_test_bit(bit=12, block=4) = 1
[  223.622468][ T9604] is_bad_inode(inode)=0
[  223.623860][ T9604] NEXT_ORPHAN(inode)=0
[  223.625210][ T9604] max_ino=32
[  223.626295][ T9604] i_nlink=1
[  223.628779][ T9604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.650822][ T9604] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.1439: Unrecognised inode hash code 20
[  223.656641][ T9609] vim2m vim2m.0: Fourcc format (0x47425247) invalid.
[  223.657137][ T9604] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1439: Corrupt directory, running e2fsck is recommended
[  223.661773][   T52] az6027: usb out operation failed. (-71)
[  223.675517][   T52] az6027: usb out operation failed. (-71)
[  223.677607][   T52] stb0899_attach: Driver disabled by Kconfig
[  223.678280][ T9604] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.1439: path /414/file0: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  223.684998][   T52] az6027: no front-end attached
[  223.684998][   T52] 
[  223.694189][ T9604] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.1.1439: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0
[  223.707758][   T52] az6027: usb out operation failed. (-71)
[  223.710204][   T52] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  223.714857][   T52] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input13
[  223.747908][   T52] dvb-usb: schedule remote query interval to 400 msecs.
[  223.750830][   T52] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  223.769538][   T52] usb 1-1: USB disconnect, device number 17
[  223.785519][ T5975] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.858058][   T52] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  223.932300][ T9619] loop3: detected capacity change from 0 to 2048
[  223.945941][ T9617] loop1: detected capacity change from 0 to 1764
[  223.976663][ T6712]  loop3: p1 p2 < > p3 < p5 p6 > p4
[  223.978847][ T6712] loop3: partition table partially beyond EOD, truncated
[  223.986282][ T6712] loop3: p2 start 4278190080 is beyond EOD, truncated
[  223.990794][ T6712] loop3: p4 size 8192 extends beyond EOD, truncated
[  224.002553][ T6712] loop3: p6 size 8192 extends beyond EOD, truncated
[  224.088460][ T9619]  loop3: p1 p2 < > p3 < p5 p6 > p4
[  224.090861][ T9619] loop3: partition table partially beyond EOD, truncated
[  224.097082][ T9619] loop3: p2 start 4278190080 is beyond EOD, truncated
[  224.153300][ T9619] loop3: p4 size 8192 extends beyond EOD, truncated
[  224.168414][ T9619] loop3: p6 size 8192 extends beyond EOD, truncated
[  224.386930][ T6712] udevd[6712]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  224.397728][ T6166] udevd[6166]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory
[  224.404395][ T7882] udevd[7882]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  224.405329][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  224.458077][ T6383] udevd[6383]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  224.561327][ T6009] usb usb36-port1: attempt power cycle
[  224.576029][ T5979] udevd[5979]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  224.578741][ T6712] udevd[6712]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  224.596205][ T7882] udevd[7882]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  224.598235][ T6383] udevd[6383]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  224.600867][ T6166] udevd[6166]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory
[  225.194084][ T6009] usb usb36-port1: unable to enumerate USB device
[  225.534215][ T9634] loop3: detected capacity change from 0 to 32768
[  225.557548][ T9643] net_ratelimit: 2 callbacks suppressed
[  225.557563][ T9643] netlink: ct family unspecified
[  225.561150][ T9643] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.045919][ T9634] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  226.119364][ T9104] ocfs2: Unmounting device (7,3) on (node local)
[  226.595179][ T9646] loop1: detected capacity change from 0 to 131072
[  226.691617][ T9646] F2FS-fs (loop1): Test dummy encryption mode enabled
[  226.704026][ T9646] F2FS-fs (loop1): invalid crc value
[  226.809010][ T9646] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  226.823007][ T9646] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  227.489836][    T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  227.665847][    T9] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  227.670154][    T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  227.693123][    T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  227.697211][    T9] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  227.702459][    T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  227.709299][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.742041][    T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  227.748413][    T9] usb 4-1: invalid MIDI out EP 0
[  228.060345][    T9] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22
[  228.091123][    T9] usb 4-1: USB disconnect, device number 4
[  228.651423][ T9695] binder_alloc: binder_alloc_mmap_handler: 9692 200000ffc000-200000ffd000 already mapped failed -16
[  228.676963][    T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  228.799606][ T9706] loop3: detected capacity change from 0 to 512
[  228.805269][ T9706] EXT4-fs: Ignoring removed nobh option
[  228.827143][ T9706] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1482: iget: bad i_size value: 38620345925642
[  228.833192][ T9706] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1482: couldn't read orphan inode 15 (err -117)
[  228.838105][    T9] usb 2-1: Using ep0 maxpacket: 32
[  228.843886][    T9] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[  228.846549][    T9] usb 2-1: config 0 has no interface number 0
[  228.848385][ T9706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.849521][    T9] usb 2-1: config 0 interface 89 has no altsetting 0
[  228.859698][    T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  228.862537][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.865929][    T9] usb 2-1: Product: syz
[  228.868305][    T9] usb 2-1: Manufacturer: syz
[  228.870312][    T9] usb 2-1: SerialNumber: syz
[  228.873747][    T9] usb 2-1: config 0 descriptor??
[  228.882343][    T9] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  228.887097][    T9] em28xx 2-1:0.89: Video interface 89 found: bulk
[  228.890921][ T9104] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.998099][ T7685] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  229.158711][ T7685] usb 1-1: Using ep0 maxpacket: 32
[  229.163323][ T7685] usb 1-1: unable to get BOS descriptor or descriptor too short
[  229.167857][ T7685] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  229.176821][ T7685] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  229.182386][ T7685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.187328][ T7685] usb 1-1: Product: syz
[  229.188717][ T7685] usb 1-1: Manufacturer: syz
[  229.190374][ T7685] usb 1-1: SerialNumber: syz
[  229.630618][ T7685] usb 1-1: Invalid number of CPorts: 0
[  229.632974][    T9] em28xx 2-1:0.89: unknown em28xx chip ID (0)
[  229.635217][ T7685] es2_ap_driver 1-1:7.0: probe with driver es2_ap_driver failed with error -22
[  229.846602][ T5317] usb 1-1: USB disconnect, device number 18
[  230.303446][    T9] em28xx 2-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64)
[  230.309725][    T9] em28xx 2-1:0.89: board has no eeprom
[  230.590139][    T9] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[  230.593143][    T9] em28xx 2-1:0.89: analog set to bulk mode.
[  230.609006][ T7685] em28xx 2-1:0.89: Registering V4L2 extension
[  230.622576][    T9] usb 2-1: USB disconnect, device number 24
[  230.626013][    T9] em28xx 2-1:0.89: Disconnecting em28xx
[  230.680172][ T7685] em28xx 2-1:0.89: Config register raw data: 0xffffffed
[  230.683080][ T7685] em28xx 2-1:0.89: AC97 chip type couldn't be determined
[  230.687443][ T7685] em28xx 2-1:0.89: No AC97 audio processor
[  230.694893][ T7685] usb 2-1: Decoder not found
[  230.697940][ T7685] em28xx 2-1:0.89: failed to create media graph
[  230.700534][ T7685] em28xx 2-1:0.89: V4L2 device video103 deregistered
[  230.711925][ T7685] em28xx 2-1:0.89: Registering snapshot button...
[  230.715817][ T7685] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input14
[  230.726499][ T7685] em28xx 2-1:0.89: Remote control support is not available for this card.
[  230.732838][    T9] em28xx 2-1:0.89: Closing input extension
[  230.735497][    T9] em28xx 2-1:0.89: Deregistering snapshot button
[  230.753402][    T9] em28xx 2-1:0.89: Freeing device
[  232.691447][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1499'.
[  232.741515][ T9756] loop3: detected capacity change from 0 to 2048
[  232.759411][ T9756] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  232.776865][ T9758] loop1: detected capacity change from 0 to 1024
[  232.780472][ T9758] EXT4-fs: Ignoring removed bh option
[  232.796859][ T9758] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  232.805936][ T9756] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 3200 lbcount: 4096 extent 56+4096
[  232.813262][ T9758] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869)
[  232.818706][ T9758] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  232.825299][ T9758] EXT4-fs (loop1): filesystem has both journal inode and journal device!
[  233.094235][   T33] audit: type=1326 audit(1755177014.992:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.1.1506" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784898ebe9 code=0x7ffc0000
[  233.101996][   T33] audit: type=1326 audit(1755177014.992:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.1.1506" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784898ebe9 code=0x7ffc0000
[  233.114050][   T33] audit: type=1326 audit(1755177014.992:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.1.1506" exe="/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f784898ebe9 code=0x7ffc0000
[  233.122750][   T33] audit: type=1326 audit(1755177014.992:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.1.1506" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784898ebe9 code=0x7ffc0000
[  233.136096][   T33] audit: type=1326 audit(1755177014.992:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9768 comm="syz.1.1506" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f784898ebe9 code=0x7ffc0000
[  233.163253][ T9771] loop1: detected capacity change from 0 to 256
[  233.168193][ T7685] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  233.184313][ T9771] FAT-fs (loop1): Directory bread(block 64) failed
[  233.186634][ T9771] FAT-fs (loop1): Directory bread(block 65) failed
[  233.189396][ T9771] FAT-fs (loop1): Directory bread(block 66) failed
[  233.192763][ T9771] FAT-fs (loop1): Directory bread(block 67) failed
[  233.196552][ T9771] FAT-fs (loop1): Directory bread(block 68) failed
[  233.199374][ T9771] FAT-fs (loop1): Directory bread(block 69) failed
[  233.202074][ T9771] FAT-fs (loop1): Directory bread(block 70) failed
[  233.204877][ T9771] FAT-fs (loop1): Directory bread(block 71) failed
[  233.208026][ T9771] FAT-fs (loop1): Directory bread(block 72) failed
[  233.211101][ T9771] FAT-fs (loop1): Directory bread(block 73) failed
[  233.305441][    T9] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  233.330659][ T7685] usb 4-1: Using ep0 maxpacket: 16
[  233.335519][ T7685] usb 4-1: config 1 interface 0 has no altsetting 0
[  233.341243][ T7685] usb 4-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.40
[  233.348998][ T7685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.357406][ T7685] usb 4-1: Product: syz
[  233.359458][ T7685] usb 4-1: Manufacturer: syz
[  233.361004][ T7685] usb 4-1: SerialNumber: syz
[  233.471543][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  233.475850][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  233.479955][    T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  233.480497][ T9781] loop1: detected capacity change from 0 to 256
[  233.483657][    T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 28865, setting to 64
[  233.491128][ T9781] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  233.495390][ T9781] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  233.502807][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  233.510720][ T9781] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  233.514582][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.517218][    T9] usb 1-1: Product: syz
[  233.520922][    T9] usb 1-1: Manufacturer: syz
[  233.526787][    T9] usb 1-1: SerialNumber: syz
[  233.534884][ T9767] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  233.543030][   T33] audit: type=1800 audit(1755177015.413:33): pid=9781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1512" name="file1" dev="loop1" ino=1048677 res=0 errno=0
[  233.545098][    T9] cdc_mbim 1-1:1.0: skipping garbage
[  233.757751][ T9767] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  233.761321][ T9767] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  233.858995][ T7685] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input15
[  234.429413][ T9767] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  234.461522][ T9767] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  234.522073][ T7685] usb 4-1: USB disconnect, device number 5
[  234.525916][ T5284] bcm5974 4-1:1.0: could not read from device
[  234.543480][ T5284] bcm5974 4-1:1.0: could not read from device
[  234.647564][ T6712] udevd[6712]: Error opening device "/dev/input/event3": No such file or directory
[  234.651730][ T6712] udevd[6712]: Unable to EVIOCGABS device "/dev/input/event3"
[  234.657904][ T6712] udevd[6712]: Unable to EVIOCGABS device "/dev/input/event3"
[  234.672933][ T6712] udevd[6712]: Unable to EVIOCGABS device "/dev/input/event3"
[  234.680973][ T6712] udevd[6712]: Unable to EVIOCGABS device "/dev/input/event3"
[  234.692141][    T9] cdc_mbim 1-1:1.0: bind() failure
[  234.718281][    T9] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71
[  234.722401][    T9] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71
[  234.739315][    T9] usbtest 1-1:1.1: probe with driver usbtest failed with error -71
[  234.756055][    T9] usb 1-1: USB disconnect, device number 19
[  235.320559][ T9801] tipc: Started in network mode
[  235.325596][ T9801] tipc: Node identity 921899224034, cluster identity 4711
[  235.330813][ T9801] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  235.334209][ T9801] syzkaller0: entered promiscuous mode
[  235.335969][ T9801] syzkaller0: entered allmulticast mode
[  235.392619][ T9801] tipc: Resetting bearer <eth:syzkaller0>
[  235.395211][ T9806] binder: 9804:9806 ioctl c00c6211 0 returned -14
[  235.432569][ T9800] tipc: Resetting bearer <eth:syzkaller0>
[  235.478495][ T9800] tipc: Disabling bearer <eth:syzkaller0>
[  235.543906][ T9810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1525'.
[  235.887166][ T9817] loop3: detected capacity change from 0 to 2048
[  235.899395][ T9817] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  235.911624][ T9817] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  235.915973][ T9817] UDF-fs: error (device loop3): udf_read_inode: (ino 1408) failed !bh
[  235.919384][ T9817] UDF-fs: error (device loop3): udf_fill_super: Error in udf_iget, block=96, partition=0
[  236.182360][ T9820] input: syz0 as /devices/virtual/input/input16
[  236.491532][    C0] hpet: Lost 2 RTC interrupts
[  236.566347][    C0] hpet: Lost 2 RTC interrupts
[  236.684832][    C0] hpet: Lost 2 RTC interrupts
[  236.726588][    C0] hpet: Lost 1 RTC interrupts
[  237.494356][ T9832] loop1: detected capacity change from 0 to 512
[  237.543582][ T9832] EXT4-fs (loop1): Test dummy encryption mode enabled
[  237.546221][ T9832] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  237.577025][ T9832] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1534: bad orphan inode 131083
[  237.584766][ T9832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  237.594794][ T9840] tmpfs: Bad value for 'nr_inodes'
[  237.633309][ T9832] overlayfs: upper fs needs to support d_type.
[  237.708604][ T5975] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz-executor: path /444/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  237.969515][ T7500] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.028772][ T9842] loop3: detected capacity change from 0 to 32768
[  238.043489][ T9842] XFS: ikeep mount option is deprecated.
[  238.125544][ T9842] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  238.137318][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.213193][ T9842] XFS (loop3): Ending clean mount
[  238.226352][ T9842] XFS (loop3): Quotacheck needed: Please wait.
[  238.311841][ T9842] XFS (loop3): Quotacheck: Done.
[  238.323596][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.393686][ T9104] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  238.517161][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.624946][ T9865] netlink: 'syz.0.1549': attribute type 10 has an invalid length.
[  238.665782][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.731082][ T9865] team0: Port device dummy0 added
[  238.805754][ T9869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  238.811132][ T9869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  238.817366][ T9869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  238.839434][ T9869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  238.846350][ T9869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  238.945122][ T9874] loop3: detected capacity change from 0 to 1024
[  238.961989][   T13] bridge_slave_1: left allmulticast mode
[  238.964374][   T13] bridge_slave_1: left promiscuous mode
[  238.967892][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.991004][   T13] bridge_slave_0: left allmulticast mode
[  239.004562][   T13] bridge_slave_0: left promiscuous mode
[  239.007010][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.344116][   T52] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  239.354178][   T13] bond2 (unregistering): (slave geneve2): Releasing active interface
[  239.358397][   T13] geneve2 (unregistering): left promiscuous mode
[  239.489044][ T5977] Bluetooth: hci1: command 0x0405 tx timeout
[  239.529251][   T52] usb 4-1: config 0 has an invalid interface number: 194 but max is 0
[  239.532610][   T52] usb 4-1: config 0 has no interface number 0
[  239.576289][   T52] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.d2
[  239.580432][   T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.583983][   T52] usb 4-1: Product: syz
[  239.586159][   T52] usb 4-1: Manufacturer: syz
[  239.588215][   T52] usb 4-1: SerialNumber: syz
[  239.605363][   T52] usb 4-1: config 0 descriptor??
[  239.659013][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  239.666375][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  239.672884][   T13] bond0 (unregistering): Released all slaves
[  239.837046][   T52] f81534a_ctrl 4-1:0.194: failed to set register 0x116: -5
[  239.857369][   T52] f81534a_ctrl 4-1:0.194: failed to enable ports: -5
[  239.862093][   T52] f81534a_ctrl 4-1:0.194: probe with driver f81534a_ctrl failed with error -5
[  239.869619][   T52] usb 4-1: USB disconnect, device number 6
[  239.924955][   T13] bond1 (unregistering): Released all slaves
[  240.139835][ T9884] kernel read not supported for file /cpuacct.usage_percpu (pid: 9884 comm: syz.0.1555)
[  240.155462][   T33] audit: type=1800 audit(1755177021.587:34): pid=9884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1555" name="cpuacct.usage_percpu" dev="mqueue" ino=20536 res=0 errno=0
[  240.252637][   T13] bond2 (unregistering): Released all slaves
[  240.480183][   T13] IPVS: stopping master sync thread 8131 ...
[  240.561508][ T9868] chnl_net:caif_netlink_parms(): no params data found
[  241.026755][   T55] Bluetooth: hci0: command tx timeout
[  241.390739][ T9868] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.398258][ T9868] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.401386][ T9868] bridge_slave_0: entered allmulticast mode
[  241.453103][ T9868] bridge_slave_0: entered promiscuous mode
[  241.457871][ T9868] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.460790][ T9868] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.469870][ T9868] bridge_slave_1: entered allmulticast mode
[  241.482063][ T9868] bridge_slave_1: entered promiscuous mode
[  241.514770][ T9912] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253
[  241.527952][ T9912] PKCS7: Only support pkcs7_signedData type
[  241.546947][   T13] hsr_slave_0: left promiscuous mode
[  241.554674][   T13] hsr_slave_1: left promiscuous mode
[  241.557299][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  241.563189][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  241.567829][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  241.585576][   T13] veth1_macvtap: left promiscuous mode
[  241.587998][   T13] veth0_macvtap: left promiscuous mode
[  241.590321][   T13] veth1_vlan: left promiscuous mode
[  241.592247][   T13] veth0_vlan: left promiscuous mode
[  242.338253][   T13] team0 (unregistering): Port device team_slave_1 removed
[  242.400109][   T13] team0 (unregistering): Port device team_slave_0 removed
[  242.743665][   T10] kernel write not supported for file /163/gid_map (pid: 10 comm: kworker/0:1)
[  243.247907][   T55] Bluetooth: hci0: command tx timeout
[  243.347017][    C0] hpet: Lost 1 RTC interrupts
[  243.598133][ T9868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  243.610913][ T9868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  243.611102][    T9] infiniband syz1: ib_query_port failed (-19)
[  243.667211][ T9868] team0: Port device team_slave_0 added
[  243.672771][ T9868] team0: Port device team_slave_1 added
[  243.744473][ T9868] batman_adv: batadv0: Adding interface: batadv_slave_0
[  243.746880][ T9868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.759811][ T9868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  243.766391][ T9868] batman_adv: batadv0: Adding interface: batadv_slave_1
[  243.769409][ T9868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.785031][ T9868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  243.962577][ T9868] hsr_slave_0: entered promiscuous mode
[  243.977259][ T9868] hsr_slave_1: entered promiscuous mode
[  243.980683][ T9868] debugfs: 'hsr0' already exists in 'hsr'
[  243.983084][ T9868] Cannot create hsr debugfs directory
[  244.324115][   T33] audit: type=1326 audit(1755177025.403:35): auid=4294967295 uid=33792 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.0.1568" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b598ebe9 code=0x7ffc0000
[  244.428708][   T33] audit: type=1326 audit(1755177025.412:36): auid=4294967295 uid=33792 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.0.1568" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa8b598ebe9 code=0x7ffc0000
[  244.444185][   T33] audit: type=1326 audit(1755177025.422:37): auid=4294967295 uid=33792 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.0.1568" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b598ebe9 code=0x7ffc0000
[  244.458254][   T33] audit: type=1326 audit(1755177025.431:38): auid=4294967295 uid=33792 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.0.1568" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa8b598ebe9 code=0x7ffc0000
[  244.470444][   T33] audit: type=1326 audit(1755177025.571:39): auid=4294967295 uid=33792 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.0.1568" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b598ebe9 code=0x7ffc0000
[  244.485817][   T33] audit: type=1326 audit(1755177025.571:40): auid=4294967295 uid=33792 gid=0 ses=4294967295 subj=unconfined pid=9932 comm="syz.0.1568" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b598ebe9 code=0x7ffc0000
[  244.560443][ T9946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1571'.
[  244.678374][ T9868] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  244.688484][ T9868] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  244.695032][ T9868] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  244.714105][ T9868] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  244.806996][ T9868] 8021q: adding VLAN 0 to HW filter on device bond0
[  244.827951][ T9868] 8021q: adding VLAN 0 to HW filter on device team0
[  244.839195][ T9508] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.842263][ T9508] bridge0: port 1(bridge_slave_0) entered forwarding state
[  244.852779][ T9508] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.855181][ T9508] bridge0: port 2(bridge_slave_1) entered forwarding state
[  244.908709][ T9868] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  244.912260][ T9868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  245.121719][ T9868] 8021q: adding VLAN 0 to HW filter on device batadv0
[  245.448302][ T9868] veth0_vlan: entered promiscuous mode
[  245.457156][ T9868] veth1_vlan: entered promiscuous mode
[  245.471589][   T55] Bluetooth: hci0: command tx timeout
[  245.496043][ T9868] veth0_macvtap: entered promiscuous mode
[  245.501325][ T9868] veth1_macvtap: entered promiscuous mode
[  245.595753][ T9868] batman_adv: batadv0: Interface activated: batadv_slave_0
[  245.653616][ T9868] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.693180][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.715753][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.774252][ T6023] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.778150][ T6023] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.042175][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.045315][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.087273][ T9505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.090236][ T9505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.295742][T10017] loop4: detected capacity change from 0 to 4096
[  246.304722][T10017] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  246.366526][T10009] loop3: detected capacity change from 0 to 32768
[  246.445370][T10017] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  246.470229][T10017] ntfs3(loop4): ino=1e, mi_enum_attr
[  246.472807][T10017] ntfs3(loop4): ino=1e, mi_enum_attr
[  247.084921][T10041] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1587'.
[  247.545902][   T52] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  247.643507][T10064] loop4: detected capacity change from 0 to 8
[  247.698606][T10064] SQUASHFS error: zlib decompression failed, data probably corrupt
[  247.702113][T10064] SQUASHFS error: Failed to read block 0x4e8: -5
[  247.753416][T10064] SQUASHFS error: Failed to read block 0x6e6: -5
[  247.756301][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  247.759426][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  247.763094][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  247.766160][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  247.769310][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  247.772553][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  247.775632][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  247.778508][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  247.781752][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  247.784372][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  247.787249][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  247.790676][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  247.793849][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  247.797001][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  247.799931][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  247.802520][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  247.805041][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  247.807870][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  247.810132][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  247.813525][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  247.816928][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  247.817720][   T33] audit: type=1800 audit(1755177028.658:41): pid=10064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1596" name="file1" dev="loop4" ino=5 res=0 errno=0
[  247.820286][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  247.829036][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  247.831832][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  247.834318][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  247.837145][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  247.839723][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  247.842261][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  247.844909][   T55] Bluetooth: hci0: command tx timeout
[  247.845208][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  247.849740][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  247.852224][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  247.855948][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  247.859750][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  247.862628][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  247.865568][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  247.869212][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  247.871766][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  247.874587][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  247.877350][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  247.879395][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  247.882083][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  247.884309][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  247.886355][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  247.888871][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  247.891213][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  247.893577][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  247.896253][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  247.898614][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  247.901250][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  247.904024][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  247.906383][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  247.908547][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  247.911074][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  247.913207][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  247.915176][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  247.917472][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  247.920210][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  247.922237][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  247.924580][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  247.926809][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  247.929287][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  247.931644][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  247.933853][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  247.936458][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  247.939325][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  247.941798][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  247.943788][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  247.946061][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  247.948261][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  247.950243][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  247.952652][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  247.954813][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  247.956915][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  247.960121][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  247.962980][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  247.965559][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  247.968413][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  247.971130][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  247.973997][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  247.976558][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  247.979714][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  247.982987][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  247.986044][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  247.988877][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  247.991456][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  247.994499][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  247.997152][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  247.999617][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  248.002533][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  248.005507][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  248.008024][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  248.010911][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  248.013676][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  248.017503][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  248.020511][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  248.023236][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  248.026112][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  248.029139][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  248.031834][T10064] SQUASHFS error: Failed to read block 0x0: -5
[  248.034955][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  248.038061][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  248.041858][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  248.045142][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  248.048311][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  248.051369][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  248.054336][T10064] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  248.057288][T10064] SQUASHFS error: read_indexes: reading block [6e4:0]
[  248.091549][   T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.095772][   T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.099772][   T52] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  248.111922][   T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.117157][   T52] usb 1-1: config 0 descriptor??
[  248.514609][T10084] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3
[  248.572825][   T52] cm6533_jd 0003:0D8C:0022.0006: invalid report_size -101239751
[  248.575377][   T52] cm6533_jd 0003:0D8C:0022.0006: item 0 4 1 7 parsing failed
[  248.582971][   T52] cm6533_jd 0003:0D8C:0022.0006: parse failed
[  248.585250][   T52] cm6533_jd 0003:0D8C:0022.0006: probe with driver cm6533_jd failed with error -22
[  248.668877][T10094] capability: warning: `syz.4.1606' uses deprecated v2 capabilities in a way that may be insecure
[  248.717861][T10096] loop4: detected capacity change from 0 to 1024
[  248.737621][T10098] loop3: detected capacity change from 0 to 1024
[  248.746765][T10096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  248.752068][T10096] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.776637][T10096] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  248.802126][   T52] usb 1-1: USB disconnect, device number 20
[  248.816674][T10096] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 1 with error 28
[  248.833747][T10096] EXT4-fs (loop4): This should not happen!! Data will be lost
[  248.833747][T10096] 
[  248.837065][T10096] EXT4-fs (loop4): Total free blocks count 0
[  248.849956][T10096] EXT4-fs (loop4): Free/Dirty block details
[  248.852109][T10096] EXT4-fs (loop4): free_blocks=4293918720
[  248.855289][T10096] EXT4-fs (loop4): dirty_blocks=16
[  248.856923][T10096] EXT4-fs (loop4): Block reservation details
[  248.858832][T10096] EXT4-fs (loop4): i_reserved_data_blocks=1
[  248.901555][ T9868] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  249.541617][T10137] (unnamed net_device) (uninitialized): (slave wg2): Device is not bonding slave
[  249.565794][T10137] (unnamed net_device) (uninitialized): option active_slave: invalid value (wg2)
[  249.828891][T10151] loop4: detected capacity change from 0 to 64
[  249.855871][T10154] loop3: detected capacity change from 0 to 16
[  249.866899][T10154] erofs: Unknown parameter '00000000000000000000017777777777777777777770177777777777777777777718446744073709551615000000000000000000000x000000000000000018446744073709551615$'
[  250.072588][T10157] syz.4.1630: attempt to access beyond end of device
[  250.072588][T10157] loop4: rw=0, sector=16777216, nr_sectors = 2 limit=64
[  250.116041][T10157] Buffer I/O error on dev loop4, logical block 8388608, async page read
[  250.145088][T10157] syz.4.1630: attempt to access beyond end of device
[  250.145088][T10157] loop4: rw=0, sector=16777216, nr_sectors = 2 limit=64
[  250.152840][T10157] Buffer I/O error on dev loop4, logical block 8388608, async page read
[  250.626330][T10167] loop3: detected capacity change from 0 to 4096
[  250.639337][T10167] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  251.251416][   T33] audit: type=1326 audit(1755177031.970:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10175 comm="syz.0.1638" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b598ebe9 code=0x7ffc0000
[  251.267940][   T33] audit: type=1326 audit(1755177031.970:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10175 comm="syz.0.1638" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b598ebe9 code=0x7ffc0000
[  251.268677][   T33] audit: type=1326 audit(1755177031.988:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10175 comm="syz.0.1638" exe="/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fa8b598ebe9 code=0x7ffc0000
[  251.397515][   T33] audit: type=1326 audit(1755177032.007:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10175 comm="syz.0.1638" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b598ebe9 code=0x7ffc0000
[  251.416009][   T33] audit: type=1326 audit(1755177032.007:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10175 comm="syz.0.1638" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b598ebe9 code=0x7ffc0000
[  251.681191][T10184] loop4: detected capacity change from 0 to 256
[  251.951006][    C1] ata1: illegal qc_active transition (00000000->00000080)
[  252.295122][T10186] loop4: detected capacity change from 0 to 32768
[  252.304827][T10186] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1643 (10186)
[  252.311247][ T1058] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[  252.346109][ T1058] ata1.00: configured for UDMA/100
[  252.432827][T10186] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  252.453307][T10186] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  252.481915][T10186] BTRFS info (device loop4): using free-space-tree
[  252.928788][   T55] Bluetooth: Wrong link type (-71)
[  252.992406][ T9868] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  253.363391][    C0] hpet: Lost 1 RTC interrupts
[  254.585477][T10233] loop4: detected capacity change from 0 to 32768
[  254.610107][T10233] jfs_strtoUCS: char2uni returned -22.
[  254.614529][T10233] charset = cp932, char = 0xfc
[  254.884565][T10259] tipc: Can't bind to reserved service type 0
[  256.763614][T10286] loop4: detected capacity change from 0 to 128
[  256.905529][T10271] loop3: detected capacity change from 0 to 32768
[  256.929271][T10271] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1670 (10271)
[  256.961358][T10271] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  256.965976][T10271] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  256.969565][T10271] BTRFS info (device loop3): using free-space-tree
[  257.020574][T10271] BTRFS info (device loop3): rebuilding free space tree
[  257.280346][ T9104] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  257.562412][   T33] audit: type=1326 audit(1755177037.844:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10322 comm="syz.0.1687" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b598ebe9 code=0x7ffc0000
[  257.573616][   T33] audit: type=1326 audit(1755177037.853:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10322 comm="syz.0.1687" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa8b598ebe9 code=0x7ffc0000
[  257.624174][   T33] audit: type=1326 audit(1755177037.853:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10322 comm="syz.0.1687" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b598ebe9 code=0x7ffc0000
[  257.659007][   T33] audit: type=1326 audit(1755177037.853:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10322 comm="syz.0.1687" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b598ebe9 code=0x7ffc0000
[  257.667882][   T33] audit: type=1326 audit(1755177037.853:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10322 comm="syz.0.1687" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa8b598ebe9 code=0x7ffc0000
[  257.783188][    C0] hpet: Lost 1 RTC interrupts
[  257.885250][T10312] loop4: detected capacity change from 0 to 32768
[  257.888038][   T33] audit: type=1326 audit(1755177038.134:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10322 comm="syz.0.1687" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b598ebe9 code=0x7ffc0000
[  257.930181][   T33] audit: type=1326 audit(1755177038.134:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10322 comm="syz.0.1687" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8b598ebe9 code=0x7ffc0000
[  257.969681][T10312] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  258.194852][   T33] audit: type=1326 audit(1755177038.452:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10322 comm="syz.0.1687" exe="/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fa8b598ebe9 code=0x7ffc0000
[  258.291296][ T9868] (syz-executor,9868,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  258.318262][ T9868] ocfs2: Unmounting device (7,4) on (node local)
[  258.459970][T10338] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  258.902932][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  258.902950][   T33] audit: type=1326 audit(1755177039.135:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10354 comm="syz.3.1700" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f21b058ebe9 code=0x0
[  259.321404][T10367] loop4: detected capacity change from 0 to 2048
[  259.343675][T10367] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  259.367537][T10367] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  259.706700][T10380] loop4: detected capacity change from 0 to 512
[  259.774573][T10380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.795169][T10380] ext4 filesystem being mounted at /40/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  259.892244][T10380] EXT4-fs error (device loop4): ext4_get_first_dir_block:3533: inode #12: comm syz.4.1705: Attempting to read directory block (0) that is past i_size (3)
[  259.981944][ T9868] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.120951][T10399] loop4: detected capacity change from 0 to 4096
[  260.138934][T10399] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  260.152133][T10404] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1712'.
[  260.156995][T10404] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1712'.
[  260.417813][T10412] loop3: detected capacity change from 0 to 2048
[  260.437327][T10412] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  261.084103][T10420] loop4: detected capacity change from 0 to 32768
[  261.102972][T10420] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1717 (10420)
[  261.155748][T10420] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  261.159953][T10420] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  261.163749][T10420] BTRFS info (device loop4): using free-space-tree
[  261.487805][T10452] loop3: detected capacity change from 0 to 2048
[  261.623365][T10452]  loop3: p1 < > p4
[  261.646241][T10452] loop3: p4 size 8388608 extends beyond EOD, truncated
[  261.651206][ T9868] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  261.693082][T10452] EXT4-fs (loop3p1): unable to read superblock
[  261.896956][T10462] pim6reg: entered allmulticast mode
[  261.948799][T10462] pim6reg: left allmulticast mode
[  262.476312][T10483] loop3: detected capacity change from 0 to 1764
[  262.498517][T10483] ISOFS: Unable to identify CD-ROM format.
[  262.972835][T10501] input input17: cannot allocate more than FF_MAX_EFFECTS effects
[  263.111493][ T7685] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[  263.272709][ T7685] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  263.275969][ T7685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.283868][ T7685] usb 1-1: config 0 descriptor??
[  263.784909][ T5317] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  263.945813][ T5317] usb 4-1: Using ep0 maxpacket: 32
[  263.951699][ T5317] usb 4-1: config 0 has an invalid interface number: 131 but max is 0
[  263.956895][ T5317] usb 4-1: config 0 has no interface number 0
[  263.961188][ T5317] usb 4-1: New USB device found, idVendor=5ccd, idProduct=0325, bcdDevice=d4.7c
[  263.964646][ T5317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.967432][ T5317] usb 4-1: Product: syz
[  263.969205][ T5317] usb 4-1: Manufacturer: syz
[  263.970868][ T5317] usb 4-1: SerialNumber: syz
[  263.978647][ T5317] usb 4-1: config 0 descriptor??
[  263.982411][ T5317] usb-storage 4-1:0.131: USB Mass Storage device detected
[  264.209215][ T5317] usb 4-1: USB disconnect, device number 7
[  264.258201][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  264.417588][    T9] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3
[  264.421365][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 110, changing to 7
[  264.425335][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 10099, setting to 1024
[  264.429442][    T9] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  264.436025][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  264.439528][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  264.442190][    T9] usb 5-1: SerialNumber: syz
[  264.590477][ T7685] pegasus 1-1:0.0: can't reset MAC
[  264.593780][ T7685] pegasus 1-1:0.0: probe with driver pegasus failed with error -5
[  264.603025][ T7685] usb 1-1: USB disconnect, device number 21
[  264.666403][    T9] usbtest 5-1:1.0: Linux user mode ISO test driver
[  264.669015][    T9] usbtest 5-1:1.0: high-speed {control bulk-in iso-out} tests (+alt)
[  264.675627][    T9] usb 5-1: USB disconnect, device number 2
[  264.975099][T10541] loop3: detected capacity change from 0 to 2048
[  265.012854][T10542] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  265.419725][T10556] loop4: detected capacity change from 0 to 8192
[  265.434566][T10556] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  265.505604][ T6009] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  265.914912][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  265.922557][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  265.976457][ T6009] usb 4-1: Using ep0 maxpacket: 8
[  265.979923][ T6009] usb 4-1: unable to get BOS descriptor or descriptor too short
[  265.988179][ T6009] usb 4-1: config 1 interface 0 has no altsetting 0
[  265.994880][ T6009] usb 4-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.40
[  266.004683][ T6009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.011377][ T6009] usb 4-1: Product: syz
[  266.012791][ T6009] usb 4-1: Manufacturer: syz
[  266.014283][ T6009] usb 4-1: SerialNumber: syz
[  266.015927][T10563] program syz.4.1759 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  266.269805][ T6009] usbhid 4-1:1.0: can't add hid device: -71
[  266.272122][ T6009] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  266.292737][ T6009] usb 4-1: USB disconnect, device number 8
[  266.353527][T10569] loop4: detected capacity change from 0 to 8
[  266.356873][T10569] squashfs: Bad value for 'errors'
[  266.670804][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  266.678363][T10575] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  266.831337][    T9] usb 5-1: Using ep0 maxpacket: 16
[  266.844263][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  266.849263][    T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  266.861480][T10583] loop3: detected capacity change from 0 to 1024
[  266.864401][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.869847][T10583] EXT4-fs: Ignoring removed nomblk_io_submit option
[  266.878680][    T9] usb 5-1: config 0 descriptor??
[  266.918302][T10583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  266.989184][ T9104] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.339999][    T9] mcp2221 0003:04D8:00DD.0007: item fetching failed at offset 2/5
[  267.349444][    T9] mcp2221 0003:04D8:00DD.0007: can't parse reports
[  267.351685][    T9] mcp2221 0003:04D8:00DD.0007: probe with driver mcp2221 failed with error -22
[  267.492629][T10607] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1778'.
[  267.550396][ T5317] usb 5-1: USB disconnect, device number 3
[  267.641179][T10616] overlayfs: workdir and upperdir must be separate subtrees
[  267.899558][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1794'.
[  267.916213][T10641] PKCS8: Unsupported PKCS#8 version
[  268.410112][T10661] loop3: detected capacity change from 0 to 64
[  268.441996][T10661] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  268.716910][T10674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1809'.
[  268.868178][T10680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1812'.
[  269.047439][T10696] loop4: detected capacity change from 0 to 128
[  269.069463][T10696] FAT-fs (loop4): bogus number of reserved sectors
[  269.079314][T10696] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  269.085770][T10696] FAT-fs (loop4): Can't find a valid FAT filesystem
[  269.165594][T10704] io-wq is not configured for unbound workers
[  269.370926][T10715] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.1827'.
[  269.519313][T10719] loop3: detected capacity change from 0 to 4096
[  270.263384][    C0] hpet: Lost 1 RTC interrupts
[  271.661780][T10741] cgroup: noprefix used incorrectly
[  271.988004][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1846'.
[  271.990821][T10760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1846'.
[  272.573681][T10768] loop4: detected capacity change from 0 to 1024
[  272.634293][T10768] hfsplus: xattr searching failed
[  272.645123][T10768] hfsplus: xattr searching failed
[  272.654905][T10770] netlink: 'syz.0.1850': attribute type 2 has an invalid length.
[  272.681956][ T9468] hfsplus: b-tree write err: -5, ino 3
[  272.842371][T10778] loop4: detected capacity change from 0 to 512
[  272.934247][T10782] loop3: detected capacity change from 0 to 4096
[  272.959807][T10782] ntfs3(loop3): It is recommened to use chkdsk.
[  272.966906][T10782] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  272.980421][T10782] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  272.983598][T10782] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  272.987310][T10782] ntfs3(loop3): try to read out of volume at offset 0x3fffffc0c00
[  272.997055][T10782] ntfs3(loop3): try to read out of volume at offset 0x3fffffc1c00
[  273.002226][T10782] ntfs3(loop3): try to read out of volume at offset 0x3fffffc2c00
[  273.005360][T10782] ntfs3(loop3): try to read out of volume at offset 0x3fffffc4c00
[  273.008551][T10782] ntfs3(loop3): try to read out of volume at offset 0x3fffffc8c00
[  273.012801][T10782] ntfs3(loop3): try to read out of volume at offset 0x3fffffd0c00
[  273.213512][   T24] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  273.519400][   T24] usb 5-1: config 0 has an invalid interface number: 251 but max is 0
[  273.528199][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  273.532655][   T24] usb 5-1: config 0 has no interface number 0
[  273.562190][   T24] usb 5-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  273.588624][   T24] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  273.591745][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.594809][   T24] usb 5-1: Product: syz
[  273.596247][   T24] usb 5-1: Manufacturer: syz
[  273.598038][   T24] usb 5-1: SerialNumber: syz
[  273.680871][   T24] usb 5-1: config 0 descriptor??
[  273.739032][   T24] asix 5-1:0.251: probe with driver asix failed with error -22
[  273.767119][ T7685] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  273.907958][ T6009] usb 5-1: USB disconnect, device number 4
[  273.940356][ T7685] usb 1-1: Using ep0 maxpacket: 32
[  273.944979][ T7685] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  273.947899][ T7685] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  273.952460][ T7685] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  273.956927][ T7685] usb 1-1: config 1 has no interface number 0
[  273.959409][ T7685] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  273.963727][ T7685] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  273.969017][ T7685] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  273.973343][ T7685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.985729][ T7685] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  274.202040][ T7685] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached
[  274.566958][T10809] loop3: detected capacity change from 0 to 32768
[  274.596892][T10809] ialloc: diAlloc returned -17!
[  274.665102][ T6009] usb 1-1: USB disconnect, device number 22
[  274.678801][ T6009] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  274.792000][T10811] loop4: detected capacity change from 0 to 32768
[  274.851740][   T33] audit: type=1800 audit(1755177054.045:61): pid=10811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1869" name="file1" dev="loop4" ino=7 res=0 errno=0
[  275.303402][T10823] netlink: 'syz.0.1874': attribute type 11 has an invalid length.
[  275.310708][T10823] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1874'.
[  275.349336][T10811] ERROR: (device loop4): dbAdjCtl: the maximum free buddy is not the old root
[  275.349336][T10811] 
[  275.357498][T10811] ERROR: (device loop4): remounting filesystem as read-only
[  275.539742][ T9868] ------------[ cut here ]------------
[  275.542354][ T9868] kernel BUG at fs/jfs/inode.c:169!
[  275.547698][ T9868] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  275.550746][ T9868] CPU: 1 UID: 0 PID: 9868 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  275.554678][ T9868] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  275.558667][ T9868] RIP: 0010:jfs_evict_inode+0x438/0x440
[  275.560881][ T9868] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 43 79 e8 fe e9 16 fe ff ff e8 89 09 85 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  275.568632][ T9868] RSP: 0018:ffffc90004d97ae0 EFLAGS: 00010293
[  275.571106][ T9868] RAX: ffffffff833aa207 RBX: ffff88802af10430 RCX: ffff88801c3c3980
[  275.574241][ T9868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88802af10430
[  275.577405][ T9868] RBP: 0000000000000001 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  275.580705][ T9868] R10: dffffc0000000000 R11: ffffffff833a7f00 R12: dffffc0000000000
[  275.583937][ T9868] R13: dffffc0000000000 R14: ffff88802af100b8 R15: ffffffff833a9dd0
[  275.587118][ T9868] FS:  0000555566c72500(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  275.590681][ T9868] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  275.593326][ T9868] CR2: 00007fa8b5bb7dac CR3: 0000000039c20000 CR4: 00000000000006f0
[  275.596614][ T9868] Call Trace:
[  275.597981][ T9868]  <TASK>
[  275.599118][ T9868]  ? evict+0x4f8/0x9c0
[  275.600739][ T9868]  ? __pfx_jfs_evict_inode+0x10/0x10
[  275.602857][ T9868]  evict+0x504/0x9c0
[  275.604427][ T9868]  ? __pfx_evict+0x10/0x10
[  275.606195][ T9868]  ? preempt_schedule_thunk+0x16/0x30
[  275.608394][ T9868]  evict_inodes+0x64c/0x6d0
[  275.610247][ T9868]  ? __pfx_evict_inodes+0x10/0x10
[  275.612140][ T9868]  generic_shutdown_super+0x9a/0x2c0
[  275.614151][ T9868]  kill_block_super+0x44/0x90
[  275.615927][ T9868]  deactivate_locked_super+0xbc/0x130
[  275.618011][ T9868]  cleanup_mnt+0x425/0x4c0
[  275.619829][ T9868]  task_work_run+0x1d4/0x260
[  275.621732][ T9868]  ? __pfx_task_work_run+0x10/0x10
[  275.623829][ T9868]  ? __x64_sys_umount+0x122/0x160
[  275.625924][ T9868]  ? exit_to_user_mode_loop+0x40/0x110
[  275.628043][ T9868]  exit_to_user_mode_loop+0xec/0x110
[  275.630240][ T9868]  do_syscall_64+0x2bd/0x3b0
[  275.632051][ T9868]  ? lockdep_hardirqs_on+0x9c/0x150
[  275.634079][ T9868]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.636544][ T9868]  ? exc_page_fault+0x9f/0xf0
[  275.638450][ T9868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.640749][ T9868] RIP: 0033:0x7f4f6558ff17
[  275.642532][ T9868] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  275.650082][ T9868] RSP: 002b:00007ffdf20c5848 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  275.653218][ T9868] RAX: 0000000000000000 RBX: 00007f4f65611c05 RCX: 00007f4f6558ff17
[  275.656269][ T9868] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf20c5900
[  275.659324][ T9868] RBP: 00007ffdf20c5900 R08: 0000000000000000 R09: 0000000000000000
[  275.662471][ T9868] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdf20c6990
[  275.665451][ T9868] R13: 00007f4f65611c05 R14: 0000000000040854 R15: 00007ffdf20c69d0
[  275.668548][ T9868]  </TASK>
[  275.669800][ T9868] Modules linked in:
[  275.672657][ T9868] ---[ end trace 0000000000000000 ]---
[  275.676012][ T9868] RIP: 0010:jfs_evict_inode+0x438/0x440
[  275.685068][ T9868] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 43 79 e8 fe e9 16 fe ff ff e8 89 09 85 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  275.736525][ T9868] RSP: 0018:ffffc90004d97ae0 EFLAGS: 00010293
[  275.739382][ T9868] RAX: ffffffff833aa207 RBX: ffff88802af10430 RCX: ffff88801c3c3980
[  275.742842][ T9868] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88802af10430
[  275.746273][ T9868] RBP: 0000000000000001 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  275.751222][ T9868] R10: dffffc0000000000 R11: ffffffff833a7f00 R12: dffffc0000000000
[  275.755859][ T9868] R13: dffffc0000000000 R14: ffff88802af100b8 R15: ffffffff833a9dd0
[  275.764555][ T9868] FS:  0000555566c72500(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  275.771439][ T9868] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  275.774437][ T9868] CR2: 00007fb47fe3dff8 CR3: 0000000039c20000 CR4: 00000000000006f0
[  275.778165][ T9868] Kernel panic - not syncing: Fatal exception
[  275.781432][ T9868] Kernel Offset: disabled
[  275.783284][ T9868] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:11:05  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff1100451c3b0 RBX=ffff8880228e1d80 RCX=dffffc0000000000 RDX=0000000000000001
RSI=ffff8880228e1cc0 RDI=ffff8880228e1d88 RBP=ffff88804b03abb0 RSP=ffffc90007c67a90
R8 =ffff888022bdd6e7 R9 =0000000000000000 R10=ffff888022bdd6d8 R11=ffffffff81952860
R12=ffff8880228e1de0 R13=dffffc0000000000 R14=ffff8880228e1cc0 R15=ffff88804b03abb0
RIP=ffffffff84d00bc1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007efcc9233380 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555cfed7e288 CR3=0000000026640000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000ff000000 0000000000000000 XMM01=276e6163007b2064 6574616e696d7265
XMM02=0000000000ff0000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006c RBX=000000000000006c RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90004d97230
R8 =ffff888106898237 R9 =1ffff11020d13046 R10=dffffc0000000000 R11=ffffffff854f0970
R12=dffffc0000000000 R13=ffffffff99af98e2 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f09ec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555566c72500 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa8b5bb7dac CR3=0000000039c20000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fa8b5b87498 00007fa8b5b87470 XMM03=00007fa8b5b874a8 00007fa8b5b874a0
XMM04=00007fa8b66ed100 00007fa8b5b87460 XMM05=00007fa8b5b87478 00007fa8b5b874c0
XMM06=00007fa8b5b874b8 00007fa8b5b874b0 XMM07=00007fa8b5b874a8 00007fa8b5b874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fa8b5a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
