last executing test programs:

3m20.479036592s ago: executing program 1 (id=1189):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_io_uring_setup(0x67ca, &(0x7f00000006c0)={0x0, 0x5dda, 0x10100, 0x0, 0x268, 0x0, r1}, &(0x7f0000000140), &(0x7f00000000c0)=<r3=>0x0)
syz_io_uring_setup(0x80c, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x40000000, 0x54}, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000040))
read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0x2020)
syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4})
io_uring_enter(r2, 0x381b, 0x0, 0x0, 0x0, 0x0)
write(r1, &(0x7f0000000340), 0x11000)

3m20.378535031s ago: executing program 1 (id=1190):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x3, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xa}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff02c}]})
bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38)

3m20.37829324s ago: executing program 1 (id=1191):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x0)

3m20.295749818s ago: executing program 1 (id=1192):
syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000000)='./bus\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0x152a, &(0x7f0000003000)="$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")
mount(0x0, &(0x7f0000000640)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)

3m20.207427781s ago: executing program 1 (id=1193):
r0 = syz_io_uring_setup(0x49e, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r3 = eventfd2(0xff, 0x80001)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r3, 0x1)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x2, 0x0, 0x1, 0x40, 0x1})
io_uring_enter(r0, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0)

3m20.106158141s ago: executing program 1 (id=1194):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e20, @rand_addr=0x64010100}, {0x0, @local}, 0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, 'xfrm0\x00'})

3m19.983741134s ago: executing program 32 (id=1194):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e20, @rand_addr=0x64010100}, {0x0, @local}, 0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, 'xfrm0\x00'})

3m14.635002608s ago: executing program 0 (id=1220):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000540)='/sys/power/reserved_size', 0x80001, 0xd1)
writev(r0, &(0x7f0000000940)=[{&(0x7f00000006c0)='\x00', 0x1}], 0x1)

3m14.634438495s ago: executing program 0 (id=1222):
socket(0x29, 0x5, 0x8)

3m14.566154317s ago: executing program 0 (id=1223):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000001400)='./file1\x00', 0x0, &(0x7f00000013c0)={[{@compress_algo={'compress', 0x3d, 'no'}}, {@compress}]}, 0x1, 0x559a, &(0x7f0000005680)="$eJzs3X2QVWUdB/Bzd1lYZGI3BMGBFShfQEIhpVRS7kBBuDJtkjU2GQtioaAwzBI1ii04WLgam1kz5QxCiwjDUmszGmXlygyQk9PWjIPIgjLThjG9SMXEFjU2e+99Lveey+5eyVxfPh9m99zn/s7znOeeOX/c72WfcyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACIoujgjtr/rB1ZV75+06hFt199cPSq0RNWVDWdHHWg+rzdl/absWjovuntdw6b0bH6SPX65tsu6IyiRKpfItN/3vSPX/+FufPmlIcBaz+Z3lZWdnfIdNfD6Ub/vCe7+uX/zI+iqCw2QGlmu7s0p52IHyBaXjhgj8pmbVsycEGyduvmp+ouX7J1XOFLp0t5X0+gr2Suq45T11Iy9bsktke2nXPpJfIu0XT/+AX3prwIAOB1mVST2mTfjmbe4mbb9fF6rJ2MtRtj7fAOoTG3cSbS4/bvbp5j4vU+mmcyHRUGdDvPWD1z/rPtmnj/WDsWNV7HPPN3zUSa8u7muSxW76t5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyVvFa3Ys34z714sOyX549bvfLk4WvLL3zoq/8uWXrzS68dqlnzl7ah+6a33zlsRsfqI9Xrm2+7oDOKKlP9EunuiWknXr1kYvWcUeuf+N7ETc+OP16aGTds++XsHO0PD66siKIFOZWOMOzRwVFUk19INaPvFhZuTT2YHQoAAAC8k5yb+l2SbafjYFleO5FKk4nUvyAdFstmbVsycEGyduvmp+ouX7J13JmPV9PNeMnTjpdtV576SeQE4xB/4+OdqoddlxeM07P4iPE8P+X5l1+oGHHtT5+pOu+mlde/NPKax9tmfnP48UX7K+8YtGrc2CsK8n9lz/k/nDn5HwAAgP+F/B8fp2e95f/PzK+75Y5HvnJszD2HVw66+8H9G4eVH7nplsn7/jj8hosvvqz2xoL8PybvkAX5P8w45P+S6MzyPwAAALyV/b/zf7JgnJ71lv/bhzff/MB7Di2sbOt4evtlK/b0X3j1RUMOPHTR3In3XjdozPkNBfl/UnH5v1/utMOTz4UJL66IoknFn1QAAAAgT/h/91MfLYS8nv7kIJ7XW+dtGd3y6swvTxj78KH6P1Vtnvj5jUMe37lh5jd2PXf3/RPbzi7I/8ni8n/Zm/NyAQAAgCI0HTpnxNBPJ38e3X/01vnf/+yuR+9b+sWrLtnbOWvC2l9UP72jviD/1xSX/wf0zcsBAAAATuPE+GsW/mPnkd9e1/yJ+5qO/v5Lq0p/NaNp9/62hqZ/bh81e/XkgvxfW1z+Pyuzzax8SHfaE/4K4VsVUVTe9WBZurA3apyWLQAAAABvkJDT75ryfMm9A6edu2Xub06Me+KFPZ/aN3vxhnPWTGp69n2tiz9y4WMF+X9Zz/f/D3c6COv/8+7/V7D+P6eQvuvfVDcGAAAA4N2ocD1/uD1++psLuvv+/WLX///w6xv+mqiqf/ID8342q/P9zT/Z2zr1wZNVf5hz/OGW5MgnL32xIP/XF5f/S3O3b+T3/wEAAMAZeLt9/9+NBeP0rLf7/7c980j1o1d+6GtXza2buuN3H77iz68Mn9qwPXpl+UfbFx342K5fF+T/xuLyf9gOyn15reH83FMRRSO6HmTuJrgtTHdxrNBSllNIn/hYj7mhR6bQMiCnkLIs1uODFVE0tutBfazw3lBojBWODc4UNsYKbaGQuR6yhR/ECq3hSvvO4Mx044Ufh0JmgUVLWEExKLskItbj79316Cqctkd79uAAAADvKiE8Z7JsWX4zikfZlkRvO5zV2w4lve1Q2tsO/WI7xHfs7vmoNr8Qnv/Rt294ecBdD2yom7Jl04KqhrPX/euxyZNuX7Z2Z93SziF/W7euIP9vLC7/h1PRP73pbv1/FNb/Z77XMLv+vzYUKmOFllCoid8xoCYcIx12G8IxKmsyPY6NyBYAAADgHS18LlDax/MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7J373FW1nXiwL8zzIUZhplRMS+RISaKwTCMKYaZID/TnwQOq6WFJgSDjgxCXEzQTUTd1VzB2+ZtE0jdtIwoNbVUeGnekspLsKl5SfHSK41lS5Js133NnPM9nPOcOc5BQBn3/f5jzvecz/f6nMuc7/M85/sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/N2z85GVfeHmfj/xg3cKBi1eP+krfI4cMn3DMNTceu/jhb0/e777f//8+aw575sydR60955XRi245de+3QmjuKFeSKl5y6F/XNQwePabvotuvGbz0kYF/qUjXm46HXu1/StN3zoutru0dwh0lIZQlA4NrUoHy9P2aWF/fmhB2CJsCmRIt1akSyYbDA1UhLAmbApmq7qoKoSYrcOwT9624uD1xRVUIe4cQKpNtPFuZaqMqGRhQkQpUJwPTy1KBv76TkgncWZoKwBaLb4bMi355c26G+s7LFXj9lW+1jn2wksPrERP1hfO9MXIbdypLRfKB5i162vKqY5vIe3us9G7rBu+2vO18iact+4tU+hvKO5tClaF0csuUiXPaZsdHSkNDQ49CNW2j5/np9WdN2px0t3kdxg7Ub5XX4aoLe49d/OhRw2+tG35Dn0ELN25pNwtt3m2tMqRfc93meYxG+DzpBm+/vG9J/XzpCiHsf9v42798wcs3L7h87K4HPbHTsDc+u/vdLT+75YTxxx++fsVXf//jvPl//bvP/+PLOd6W5uSOrb5dm5qbx0dqYmJdbWpuDgAAAN1Gd9hr+srq/5722X3HDX185OrqW2+659SL7/v8tT9r3a/t4bE77fj8vvN+lDf/71fc8f94yL8me7QrQxjRkTi3LoRdOx5PBW6O3flqXQh7dqSacwMjE4GVIezWkRiYqSpRomcs0S8ReLU2HRiRCDwYA82JwI0xcEkicF4MLE8EJsXAykTgsBgIrbnj2K82PY6iA1UxMCG1EZfHsxD+XBtbS2yrZzJVAQAAbCXp2WF57t2scx22NEOcXi6v6ipDPAO7YIbKRA3JGWxmWlWwhrKuaijtqobMuOe/+/Dzai7pqua80zBKcjNcWXXLpT8aNumNu2e8tOG0Iz7x2quP1S/96afXXfPGU9Mr79/j8ofz5v+N7z7/r+ykIyV5x/9DGNfxN+YuTUfaMvEJzTkZAAAAgC3w1sADvvydsq/NfeH3jwz75K+vfez1lQ9/dO8zb1v7/Bk/+NZ3au4fnTf/H1Hc+f9xn0iPrMxhVdwNMbUuhMbcQKrag/MDqaPevdIBAAAA6A4yx+Mzx8Jb07epU7ST8+n8/M2bmT8e+B/Raf7131p2/Y6feGT2Q7W3zXhqw+NfWTl64bEz3xh05dmP7HvoQU+N/Gze/L+5uPP/q3NvU514MPbi8roQemYFHoq9bA906BcDLxyaG0iP/8G4AS6KVaVPTMhUdVEsMSEGGhOBJYVKPJYpsWtuIP1kZRo/NzOO1nSJrAAAAAC87+LugHhcPp7/v2LBXZf9x41/umzVgUtnnzz98de+V1H5zknL7zyxzwX39li008hJefP/CZt3/n/HPDjv9P62XiEMKQuhR/KHAauqUwsDxkBNSTpxT3Wqrh7JqhZUh3Bw+8CSVb2YXv+/LLnG4JNVqapiYNf+N60f0J64oSqEIdmBNeOXHtCemJMIZBr/YlUIH28fbbLxn/RMNV6ebPyqniHskRXIVDWpZwjtjVUkq7q/Mn0dg2RVyytD2CkrkKlqWGUIcwMA3VX8Xzo5+8FZc+dNndjW1jJzGybiTvyqMKW1raVh0vS2yZUF+jQ50eecdYzOyR9TsZe++V16jaLVx0ytKyad+aFgY3Zb6R35eWcOpu/HL0PlHeNsKs+5u39yyPvuld9EyPoqVWjIpdt4yNXZlWx6EvPqj/krQq/Qc86slpkNZ0ycPXvm0NTfYrM3pf7G40ypbTU0ua2qO+tbES+PgstlJbzXbTUgu5Ihs6fNGDJr7rzBrdMmntxycstpwz7VNKxp6P5NjUPaB5X+28VIB3RWc2Kk7ywtclhbcaS7l2VV8n58aEhISHS3xE2Xj39m0UcXV3538UmXPHH++WefcvrOt1057ft9p48fdOXnlkz9et78f8a7z//jp0784E+vz1Do+H99PMyfenzTYf4JMbCk2OP/9YWO5mdODOiXCMyPgfkO8wMAAPDhEHdHxr2Zcad07SvfOP1/Tjii9NA/HP2LpqGDdrnw1qkDbnx94+kf23vekmvLKvKv/ze/uN//b6X1/zNL1x9VaJn/gbFEY6H1/5PL/GfW/59faP3/5DL/mfX/l3wA6//PyQQSm+TP1v8HAAA+DN6/9f+7XN4/eYGAvAxdLu+fvEBAXoYul/Ev9gIBm73+/89/XrbDx47YrW/ZF56YuNedB/7mpGkP7vKjUVev+3RT/TfPWPPzZXnz/0uKm/9buB8AAAC2Hyfs+6UBC14a8vVzpj/ww8Ezdn7purOfH3HPL4/75MYxfddVr+v76bz5/5Li5v/v//p/odD5//0KBZoLLQxo/T8AAAC6qULr//3t42d987p+O24Y1O/M29+6emrJ8L2fO/XXbRc9NOrwj435xyWTrs2b/y8vbv4fT7sozckde/N2bWpNu5Bc025dbeYnAwAAANA9lIaGhvIi8+YsjDryvbf5dHop0HdLZ9vtE6vWnHvvdX8fcvP5C9Ydf3rtQUf+oeyQOydf99KCU/boX/Pc2rz5/8ri5v85v8tYdWHvsYsfPWr427fWDb+hz6CFGzcd/wcAAAC2nWL3SwAAAAAAAAAAAAAAAB+8Y1b95Kz/+uWY4+4cNu/qR3d+/OT//PqsM1on/aLtiHUHPLv0hk/tk/f7/zCuo1yh3//H6/7F3xf0yckdW+16/b/0/WNHL5vbsWThqtoQ9soOTF0wdYeQvjb/PtmBFScO3KU9sSBZ4u7nDnu5PXFSMnDk4B03tCc+kwhMiIsk7pYMxKsqbuidCMTlFZ9MBuL2WJ4MVKQDF/ZOjaMkua3+UJPaViXJbfV0TQh1WYHMtrqjJtVGSXKAVyQCmQF+LRmIAxybDpQme7WsV6pXMVATiy7uleoVAADbrfgtsDxMaW1raYxf4ePt7mW5t1HOkmXn5FdbUmTzv0svTbb6mKl1xaR7JL+LbrrWeHmobB/C0Lyvq9lZSjpGuXVq6WLT9Skw5K5WeystUC5pczddReERVaVG1DBpetvk8i4Hvn/XWZrKuswyNG+yk52ltGOTFlFLEX0pYkRFbpsiuhzvl4aGhh6JXMNjsD7k6OoVUezv9bPX+Sv0KsjOs3zUQQOOW/bcgRMWPXnQtKnhI5e9M2Li5FmHXPHiU0vnjxw0oUfe/L++uPl/Zfa4NqQvBjA/Xlnv4LoQJhQ5IgAAAPjwO+W05y674P5LX32hecDL04dcuuK3c6+aV1Z783mHP3336W+OX3jSlsYHDHtj6Kl3/ebcjU2jHrqy99X3X7PTkXU//H/Vvea+tWLQmy/cvVfe/L9fcfP/uAcrfSg4tbdjZbz+/7l1IXRcWr8+Fbg5DverdSHs2ZFqjiVSF9Q/KpZoTAVujjtMBsYSE5pzq+oZA8sTgVdr04GVicCDMZDeS3FTSO/KubQ2hAM6UuNyS8yIJeoTgaNjoF8i0BADjYlA7xgYkQi83jsdaE4EHo2B0Jq7rW7tnd5WAAAAmyM9zyrPvRuS87zlZV1lKOkqQ3VXGUq7ylDZVYZCo4j3fxwzlCdOXinJylSerLUqUUtehngx/M3uV16G8FhuzmTBvKbj+QeZ8w1KcjNccWbF9Dc/33/R8UPGrB/ftPhzc38a/uHtOW9d8OYvz6977pqNJXnz/8bi5v/Vubep1h+M8/9N1/9LBR6K3bs8njreLwZeODQ3kN4x8GCc7F6Uqao5XSI9ab8olhgRA/0SgRkxMCIRmDAuHViyS24gPdPONH5upvHWdImsAAAAALzv4g6CuJsmzv+fXTv+iWnjf3vQZX1nLzx/+VFffvrXx736i3t73v3d/osebitZuzpv/j+iuPl/bK9XdmPnxd6s7R3CHSWbepMJDK5JBeJ+jJr48/i+NSHskLWDI1OipTpVoiLRcHigKvUL9YpkVXdVpdYYiPePfeK+FRe3J66oCmHvrL0vmTaerUy1UZUMDKhIBaqTgellqUDc85MJ3FmaCsAWy+wVjC+o9KkuGfWdlyvw+vuwXBM0Oby8faCd5OvsN1fbSmXygfQ+1YzNe9ryqmObyHt7rPRu647vtnrvtuwvUulvKO9sClWG0sktUybOaZsdH8n+JWuebfQ8Z/9KtZj0Vngdzn/vve1aZbIDjYmPj8bOy3X+OiyJ1a26sPfYxY8eNfzWuuE39Bm0cGPR3Sgg/lB45rCr6rM377ZWGdKvuW73edLs86Q7/hvo52kLIYy7d+xFjYfcuHDSiP7X73xH7fDLvzT4lkMbnx1XM2eXw8e89sV5efP/5uLm/2WJ2w4b48acVRfCvlkbd1Xc/KPqUp+DWYHUp+RO+YHUIfeXagt+cgIAAMDWltndkdlf0Jq+TZ0Qnpwn5+dv3sz8cX/FiE7zF9vv/lecsnL0hAN/23f8XoccvM9Zdy04er+/Tbz+tT9Wj5z0wPd+tfr6vPn/hHef//dMdNPxf8f/2UYc/+/U9r4rumfygflbtCs6rzq2Ccf/O7W9v9sc/++U4/+O/3fG8f8uOP7fqe39acv7ljTDl64Qwr9f/vm/vX3Pbv02LC393pQH5vU//rLvL1r2k52f+efH/mn69H33/FXe/H9GcfN/6/91vmhfZv2/CYXW/5tRaP2/+db/AwAAtqkCC80l53l5q/flZUiu3peXocsFArtcYtD6f5u9/t+L/3Lpgr2mjv3GiWc9dnDvR+tHrRkz6O8nvbrnmuuevHLoIyf8/dt58//5xc3/48uhV3br3WX9v37jClR1SQzMsDAgAAAA26NCOwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4YJ31xynnjVjw+J+ap39l/fLx32nd8fGHprzefMQPRy87es0pu5xyb581hz1z5s6j1p7zyuhFt5y691shtHaUK0kVLzn0r+saBo8e03fR7dcMXvrIwL9UpustT99+NCd3bPXt2hCWZD1SExPratvvbAocO3rZ3LL2xKraEPbKDkxdMHWH9sSNtSHskx1YceLAXdoTC5Il7n7usJfbEyclA0cO3nFDe+Iz6UBJsrv/1jvV3ZJkdy/uHUJdViDT3VN751aVaeOIdKA02cZ3a1JtxEBNLHpVTaqNGGiLJVp7hjCkLIQeyaoeqUxV1SNZ1U8rU1X1SFZ1dmUIB4cQypJVPV+RqqosOfLHKlJVxcCu/W9aP6A9sbQihCHZgTXjlx7QnpiZCGQaP6YihI+3v2SSjd9anmq8PNn4v5aHsEcIoSJZ4s2yVImKZIkXy0LYKSuwaSOWhTA38OEQP30mZz84a+68qRPb2lpmbsNERbqtqjClta2lYdL0tsmViT4VUpKVfuec9z72360/a1L77epjptYVky5Llyvv6HJTec7d/bf33sd+VWdXsun5yKs/5q8IvULPObNaZjacMXH27JlDU3+Lzd6U+tsjHU1tq6HdZVsNyK5kyOxpM4bMmjtvcOu0iSe3nNxy2rBPNQ1rGrp/U+OQ9kGl/26NkS59/0e6e1lWJe/H+19CQqK7JUpzPt0at/fP8bwv+ps6Wh4qOz6g86YV2VlKOka5NQY98j2O+L18TelyREPzJg55WZq6zrJ/3mRiU5aqVJaOr3V5k8Psmko7Nmm8XxoaGnoU2g71uXezN+8bW7B5n05vumLTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwv+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwLAAAAAAgzN86jJ4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAD//+GI8JI=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwritev2(r0, &(0x7f0000001100)=[{&(0x7f0000000080)='\r', 0x1}], 0x1, 0x7, 0x3, 0x8)

3m14.092495235s ago: executing program 0 (id=1224):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000340)={[{@dots}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@nodots}, {@fat=@flush}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@fat=@flush}, {@fat=@umask={'umask', 0x3d, 0x7}}, {@dots}, {@dots}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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")
setxattr$incfs_id(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737fe0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf75592f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d302000000000000000000000001000100", [0x204]})
unlink(&(0x7f0000000080)='./file0/file0\x00')

3m12.0546402s ago: executing program 0 (id=1229):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6)

3m11.748033517s ago: executing program 0 (id=1231):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000680)='>', 0x1)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x9, 0x4)

3m11.596325477s ago: executing program 33 (id=1231):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000680)='>', 0x1)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x9, 0x4)

32.491887414s ago: executing program 2 (id=2705):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4580}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000)

32.443017731s ago: executing program 2 (id=2706):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180))
ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="1a9bbeed934a", 0x0, 0x2000000, 0x10, 0x0, 0x0})

32.442638819s ago: executing program 2 (id=2707):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0)

32.339495972s ago: executing program 2 (id=2708):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000840)={[{@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@fmask={'fmask', 0x3d, 0xa0}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@dmask={'dmask', 0x3d, 0x1}}, {@gid}, {@dmask={'dmask', 0x3d, 0x1}}, {@errors_continue}, {@errors_continue}]}, 0x1, 0x152f, &(0x7f00000037c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

32.273691096s ago: executing program 2 (id=2709):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r1 = syz_io_uring_setup(0x460, &(0x7f0000000480)={0x0, 0x40000020, 0x10, 0x2, 0x1ef}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x2f, 0x1, 0x0, 0x4}]}, 0x8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc})
io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0xffffffffffffff8a)

32.111206383s ago: executing program 2 (id=2710):
r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00')
r1 = socket(0x18, 0x800, 0x0)
connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x1, @multicast, 'wg2\x00'}}, 0x1e)
sendfile(r1, r0, 0x0, 0x8)

31.908451521s ago: executing program 34 (id=2710):
r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00')
r1 = socket(0x18, 0x800, 0x0)
connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x1, @multicast, 'wg2\x00'}}, 0x1e)
sendfile(r1, r0, 0x0, 0x8)

528.700938ms ago: executing program 5 (id=3019):
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)

528.426276ms ago: executing program 5 (id=3020):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010)

456.377466ms ago: executing program 5 (id=3022):
mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f0000000080)={0x0, 0x0, 0x10000}, 0x20)

399.768661ms ago: executing program 3 (id=3023):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0x7e, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x70, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x5, 0x6, 0x0, {0x15, 0x4, 0x3, 0x3, 0x8, 0x67, 0x4, 0x77, 0x1, 0x8, @multicast1, @broadcast, {[@ssrr={0x89, 0x1f, 0xec, [@empty, @dev={0xac, 0x14, 0x14, 0x3d}, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x18}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x14, 0x35, 0x3, 0x4, [{@loopback}, {@private=0xa010102, 0x4}]}, @ssrr={0x89, 0x7, 0x4b, [@remote]}, @timestamp_prespec={0x44, 0x4, 0x1}]}}}}}}}, 0x0)

399.633308ms ago: executing program 5 (id=3024):
r0 = socket(0x15, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x40002717, 0x0, &(0x7f0000000000)=0xfffffffffffffeeb)

348.22363ms ago: executing program 3 (id=3025):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/65, 0x41}, 0x5}], 0x1, 0x1832b, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

348.027124ms ago: executing program 5 (id=3026):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000000c0)=0xbc5d371c1acb29ed, 0x4)

250.064754ms ago: executing program 4 (id=3027):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000080)=@udp}, 0x20)
getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9)

249.549364ms ago: executing program 5 (id=3028):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f757365725f78617474722c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c646174613d77726974656261636b2c6572726f72733d72656d6f756e742d726f2c6e6f61636c2c0033b67a38edf7ca65cff4aecf1bccac7b7847e83ec6928ad9eff2281ff7a2314d9a8541a9772b98d067c1463bb01ed3ebf5764745d29402107611df2e22d6cfb25eb0a8b970f339cf6413aaef25cee228060d70ce0ade90d917a9c5"], 0x1, 0x442f, &(0x7f0000004480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r2, &(0x7f0000000140)='Q', 0x1, 0x200980)
r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
lseek(r3, 0x0, 0x4)

249.412654ms ago: executing program 4 (id=3029):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x40000cc4, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000140)={0x0, 0x0, 0x3008, 0x0, 0x0, 0x0, 0x200000})

249.112349ms ago: executing program 3 (id=3030):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x10000080)

245.776052ms ago: executing program 4 (id=3031):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x221c0, 0xac)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x201, 0x800003f, r1, 0x0)
fanotify_mark(r1, 0x1, 0x11, r0, 0x0)
fanotify_mark(r1, 0x80, 0x800, 0xffffffffffffffff, 0x0)

132.290039ms ago: executing program 4 (id=3032):
r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x0, '\x00', @string=0x0}})

131.705038ms ago: executing program 3 (id=3033):
r0 = socket$kcm(0x11, 0xa, 0x300)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000500000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011e"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042700920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90856112be7f0a54b39a3f66cc4c39544300093158af39cdde429f50d8c750", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0)

131.379543ms ago: executing program 4 (id=3034):
r0 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x1)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1)

68.765673ms ago: executing program 4 (id=3035):
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f0000000000)=0x1, 0x6, 0x0, 0x0, 0x0, 0x3)
futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, &(0x7f0000000000), 0x0)

68.445762ms ago: executing program 3 (id=3036):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd29, 0x400000, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}}, 0x1c}}, 0x0)

0s ago: executing program 3 (id=3037):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$vsock_stream(0x28, 0x1, 0x0)
r2 = shmget(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil)
shmctl$IPC_RMID(r2, 0x0)
futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000004000)=0x2, 0x92020006)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0x0, 0xfffffffe, 0x8000}, 0x50)
r3 = openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
unlinkat(r3, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)

kernel console output (not intermixed with test programs):

se_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  323.148351][T11969]   allowing incompatible features above 0.0: (unknown version)
[  323.148557][T11969]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  323.182546][T11969] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  323.186045][T11969] bcachefs (loop2): initializing new filesystem
[  323.223108][T11969] bcachefs (loop2): going read-write
[  323.237940][T11969] bcachefs (loop2): marking superblocks
[  323.293103][T11969] bcachefs (loop2): initializing freespace
[  323.298620][T11969] bcachefs (loop2): done initializing freespace
[  323.306380][T11969] bcachefs (loop2): reading snapshots table
[  323.308121][T11969] bcachefs (loop2): reading snapshots done
[  323.318724][T11969] bcachefs (loop2): done starting filesystem
[  323.365794][ T5861] bcachefs (loop2): shutting down
[  323.367946][ T5861] bcachefs (loop2): going read-only
[  323.369634][ T5861] bcachefs (loop2): finished waiting for writes to stop
[  323.375889][ T5861] bcachefs (loop2): flushing journal and stopping allocators, journal seq 6
[  323.409721][ T5861] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 8
[  323.415339][ T5861] bcachefs (loop2): clean shutdown complete, journal seq 9
[  323.420649][ T5861] bcachefs (loop2): marking filesystem clean
[  323.447342][ T5861] bcachefs (loop2): shutdown complete
[  324.394179][   T24] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  324.477209][T11998] loop4: detected capacity change from 0 to 4096
[  324.532464][T11999] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  324.569427][   T24] usb 4-1: config 10 has an invalid interface number: 185 but max is 0
[  324.572706][   T24] usb 4-1: config 10 has no interface number 0
[  324.577154][   T24] usb 4-1: config 10 interface 185 has no altsetting 0
[  324.586051][   T24] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice=72.2f
[  324.589567][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.592655][   T24] usb 4-1: Product: syz
[  324.597603][   T24] usb 4-1: Manufacturer: syz
[  324.599444][   T24] usb 4-1: SerialNumber: syz
[  324.739425][T12009] block nbd2: NBD_DISCONNECT
[  324.742038][T12009] block nbd2: Send disconnect failed -107
[  324.746352][T12008] block nbd2: Disconnected due to user request.
[  324.748629][T12008] block nbd2: shutting down sockets
[  324.917637][T12024] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2330'.
[  324.982083][   T24] snd-usb-caiaq 4-1:10.185: can't set alt interface.
[  324.984964][   T24] usb 4-1: unable to init card! (ret=-5)
[  324.987588][   T24] snd-usb-caiaq 4-1:10.185: probe with driver snd-usb-caiaq failed with error -5
[  324.992721][   T24] usb 4-1: USB disconnect, device number 19
[  325.972303][T12036] loop4: detected capacity change from 0 to 256
[  325.990040][T12036] FAT-fs (loop4): Directory bread(block 64) failed
[  325.992704][T12036] FAT-fs (loop4): Directory bread(block 65) failed
[  325.996900][T12036] FAT-fs (loop4): Directory bread(block 66) failed
[  325.999260][T12036] FAT-fs (loop4): Directory bread(block 67) failed
[  326.001436][T12036] FAT-fs (loop4): Directory bread(block 68) failed
[  326.003682][T12036] FAT-fs (loop4): Directory bread(block 69) failed
[  326.006495][T12036] FAT-fs (loop4): Directory bread(block 70) failed
[  326.008843][T12036] FAT-fs (loop4): Directory bread(block 71) failed
[  326.011368][T12036] FAT-fs (loop4): Directory bread(block 72) failed
[  326.013929][T12036] FAT-fs (loop4): Directory bread(block 73) failed
[  326.236655][T12049] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2340'.
[  326.358481][T12062] loop4: detected capacity change from 0 to 8
[  326.364841][T12062] unable to read id index table
[  326.370685][T12062] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2344'.
[  327.222777][T12077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2350'.
[  327.244383][T12077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2350'.
[  327.259391][T12079] loop4: detected capacity change from 0 to 512
[  327.262481][T12079] EXT4-fs: Ignoring removed oldalloc option
[  327.316821][T12079] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.2352: Parent and EA inode have the same ino 15
[  327.328895][T12079] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.2352: Parent and EA inode have the same ino 15
[  327.335434][T12079] EXT4-fs (loop4): 1 orphan inode deleted
[  327.338979][T12079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  327.399702][ T9144] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.484552][T12092] tmpfs: Bad value for 'mpol'
[  327.946282][T12096] ceph: No mds server is up or the cluster is laggy
[  328.002180][ T5920] libceph: connect (1)[c::]:6789 error -101
[  328.012381][ T5920] libceph: mon0 (1)[c::]:6789 connect error
[  328.049162][T12086] loop2: detected capacity change from 0 to 32768
[  328.206936][T12086] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 255,nocow
[  328.206959][T12086]   allowing incompatible features above 0.0: (unknown version)
[  328.206968][T12086]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  328.215124][T12108] mkiss: ax0: crc mode is auto.
[  328.229334][T12086] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  328.232742][T12086] bcachefs (loop2): initializing new filesystem
[  328.246965][T12086] bcachefs (loop2): going read-write
[  328.257721][T12086] bcachefs (loop2): marking superblocks
[  328.281449][T12086] bcachefs (loop2): initializing freespace
[  328.287840][T12086] bcachefs (loop2): done initializing freespace
[  328.348093][T12086] bcachefs (loop2): reading snapshots table
[  328.356667][T12086] bcachefs (loop2): reading snapshots done
[  328.415523][T12086] bcachefs (loop2):  loop2: Superblock write was silently dropped! (seq 0 expected 42)
[  328.421126][T12086] bcachefs (loop2): done starting filesystem
[  328.513379][T12121] loop3: detected capacity change from 0 to 128
[  328.518205][T12121] EXT4-fs (loop3): Test dummy encryption mode enabled
[  328.525458][T12121] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  328.530625][T12121] ext4 filesystem being mounted at /372/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  328.559649][ T5861] bcachefs (loop2): shutting down
[  328.561765][ T5861] bcachefs (loop2): going read-only
[  328.564482][ T5861] bcachefs (loop2): finished waiting for writes to stop
[  328.570078][ T5861] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  328.600095][ T9026] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  328.646252][ T5861] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  328.661434][ T5861] bcachefs (loop2): clean shutdown complete, journal seq 4
[  328.670375][ T5861] bcachefs (loop2): marking filesystem clean
[  328.689292][T12125] loop3: detected capacity change from 0 to 2048
[  328.696356][T12125] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  328.703151][ T5861] bcachefs (loop2): shutdown complete
[  329.258502][T12132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2369'.
[  330.079415][T12140] loop3: detected capacity change from 0 to 32768
[  330.083477][T12140] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2374 (12140)
[  330.183005][T12145] loop4: detected capacity change from 0 to 32768
[  330.195732][T12145] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  330.195732][T12145] clean (size 2912):
[  330.195732][T12145] flags:          0
[  330.195732][T12145] journal_seq:    10
[  330.195732][T12145] usage: type=inodes v=8
[  330.195732][T12145] usage: type=key_version v=0
[  330.195732][T12145] usage: type=reserved v=0
[  330.195732][T12145] usage: type=reserved v=0
[  330.195732][T12145] usage: type=reserved v=0
[  330.195732][T12145] usage: type=reserved v=0
[  330.195732][T12145] data_usage: btree: 1/1 [0]=2816
[  330.195732][T12145] data_usage: journal: 1/1 [0]=0
[  330.195732][T12145] data_usage: user: 1/1 [0]=16
[  330.195732][T12145] dev_usage: dev=0  
[  330.195732][T12145]   free: buckets=83 sectors=0 fragmented=0
[  330.195732][T12145]   sb: buckets=25 sectors=6152 fragmented=248
[  330.195732][T12145]   journal: buckets=8 sectors=2048 fragmented=0
[  330.195732][T12145]   btree: buckets=11 sectors=2816 fragmented=0
[  330.195732][T12145]   user: buckets=1 sectors=16 fragmented=240
[  330.195732][T12145]   cached: buckets=0 sectors=0 fragmented=0
[  330.195732][T12145]   parity: buckets=0 sectors=0 fragmented=0
[  330.195732][T12145]   stripe: buckets=0 sectors=0 fragmented=0
[  330.195732][T12145]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  330.195732][T12145]   need_discard: buckets=0 sectors=0 fragmented=0
[  330.195732][T12145] clock: read=0
[  330.195732][T12145] clock: write=1280
[  330.195732][T12145] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 POS_MAX len 511 ver 0: seq c
[  330.195937][T12145] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  330.269916][T12140] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  330.278541][T12140] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  330.379126][T12140] BTRFS info (device loop3): enabling ssd optimizations
[  330.381615][T12140] BTRFS info (device loop3): enabling free space tree
[  330.392446][T12140] BTRFS info (device loop3): setting incompat feature flag for SIMPLE_QUOTA (0x10000)
[  330.416386][ T9026] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  330.934191][   T10] usb 4-1: new low-speed USB device number 20 using dummy_hcd
[  331.013780][T12174] loop4: detected capacity change from 0 to 4096
[  331.017790][T12174] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  331.021683][T12174] ntfs3(loop4): ino=3, mi_enum_attr
[  331.043829][T12174] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  331.048255][T12174] ntfs3(loop4): ino=1f, "file2" failed to open parent directory r=5 to update
[  331.070187][ T1090] ntfs3(loop4): ino=1f, failed to open parent directory r=5 to update
[  331.088771][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  331.092746][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  331.103564][   T10] usb 4-1: string descriptor 0 read error: -22
[  331.106381][   T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  331.109944][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.123115][   T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  331.126149][   T10] usb 4-1: MIDIStreaming interface descriptor not found
[  331.214541][   T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  331.276801][T12185] loop4: detected capacity change from 0 to 16
[  331.280459][T12185] erofs (device loop4): mounted with root inode @ nid 36.
[  331.325906][ T5907] usb 4-1: USB disconnect, device number 20
[  331.365117][   T24] usb 3-1: Using ep0 maxpacket: 16
[  331.368228][   T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  331.372899][   T24] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  331.379433][   T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  331.383026][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  331.387464][   T24] usb 3-1: SerialNumber: syz
[  331.397124][   T24] cdc_acm 3-1:1.0: skipping garbage
[  331.575687][T12187] loop4: detected capacity change from 0 to 32768
[  331.579747][T12187] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2386 (12187)
[  331.586866][T12187] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  331.590872][T12187] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  331.605237][   T24] usb 3-1: USB disconnect, device number 37
[  331.623854][T12187] BTRFS info (device loop4): turning off barriers
[  331.626740][T12187] BTRFS info (device loop4): enabling free space tree
[  331.629409][T12187] BTRFS info (device loop4): doing ref verification
[  331.632092][T12187] BTRFS info (device loop4): force zlib compression, level 3
[  331.646427][   T33] audit: type=1800 audit(1756522873.827:193): pid=12187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2386" name="bus" dev="loop4" ino=263 res=0 errno=0
[  331.692291][ T9144] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  331.889262][T12206] loop3: detected capacity change from 0 to 8
[  331.946115][T12208] loop3: detected capacity change from 0 to 2048
[  331.948548][T12208] EXT4-fs: Ignoring removed i_version option
[  331.957839][T12208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  331.961723][T12208] ext4 filesystem being mounted at /382/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  332.076508][ T9026] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.111202][T12212] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[  332.117004][ T5907] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  332.160229][T12214] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2392'.
[  332.267944][ T5907] usb 5-1: config 128 has an invalid interface number: 138 but max is 0
[  332.271738][ T5907] usb 5-1: config 128 has no interface number 0
[  332.287863][ T5907] usb 5-1: config 128 interface 138 has no altsetting 0
[  332.297391][ T5907] usb 5-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=c1.78
[  332.300972][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.304412][ T5907] usb 5-1: Product: syz
[  332.306036][ T5907] usb 5-1: Manufacturer: syz
[  332.307885][ T5907] usb 5-1: SerialNumber: syz
[  332.444179][   T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  332.534162][ T5907] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.138/input/input15
[  332.545674][ T5907] usb 5-1: USB disconnect, device number 14
[  332.605958][   T10] usb 4-1: Using ep0 maxpacket: 8
[  332.657509][   T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  332.678468][   T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  332.682104][   T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  332.694031][   T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  332.698932][   T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  332.712281][T12237] loop2: detected capacity change from 0 to 4096
[  332.729618][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.937393][   T10] usb 4-1: GET_CAPABILITIES returned 0
[  332.939812][   T10] usbtmc 4-1:16.0: can't read capabilities
[  333.140042][   T10] usb 4-1: USB disconnect, device number 21
[  333.298210][T12251] loop2: detected capacity change from 0 to 40427
[  333.301717][T12251] F2FS-fs (loop2): build fault injection rate: 1
[  333.304286][T12251] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[  333.307786][T12251] F2FS-fs (loop2): inject slab alloc in f2fs_alloc_inode of alloc_inode+0x6a/0x1b0
[  333.311458][T12251] F2FS-fs (loop2): Failed to read F2FS meta data inode
[  334.174152][   T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  334.304262][ T5920] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  334.347900][   T24] usb 4-1: config 1 has an invalid descriptor of length 99, skipping remainder of the config
[  334.351909][   T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  334.357998][   T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  334.364333][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  334.374166][   T24] usb 4-1: SerialNumber: syz
[  334.474545][ T5920] usb 3-1: Using ep0 maxpacket: 32
[  334.485431][ T5920] usb 3-1: config 0 has an invalid interface number: 202 but max is 1
[  334.489815][ T5920] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  334.498547][ T5920] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  334.502177][ T5920] usb 3-1: config 0 has no interface number 0
[  334.504838][ T5920] usb 3-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30
[  334.509255][ T5920] usb 3-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64
[  334.514044][ T5920] usb 3-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182
[  334.519491][ T5920] usb 3-1: config 0 interface 202 has no altsetting 0
[  334.528345][ T5920] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b
[  334.535017][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.538287][ T5920] usb 3-1: Product: syz
[  334.540026][ T5920] usb 3-1: Manufacturer: syz
[  334.541945][ T5920] usb 3-1: SerialNumber: syz
[  334.549458][ T5920] usb 3-1: config 0 descriptor??
[  334.591335][ T5920] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  334.597968][   T24] usb 4-1: 0:2 : does not exist
[  334.604184][   T24] usb 4-1: unit 5: unexpected type 0x0d
[  334.739197][   T24] usb 4-1: USB disconnect, device number 22
[  334.756498][ T5920] usb 3-1: USB disconnect, device number 38
[  334.761298][ T5898] usb 3-1: Failed to submit usb control message: -71
[  334.765122][ T5898] usb 3-1: unable to send the bmi data to the device: -71
[  334.767700][ T5898] usb 3-1: unable to get target info from device
[  334.769720][ T5898] usb 3-1: could not get target info (-71)
[  334.771954][ T5898] usb 3-1: could not probe fw (-71)
[  335.251351][T12301] loop3: detected capacity change from 0 to 8
[  335.258800][T12301] SQUASHFS error: Unable to read inode 0x6
[  335.358413][T12303] loop2: detected capacity change from 0 to 2048
[  335.417149][T12303]  loop2: p2 < > p4
[  335.420399][T12303] loop2: p4 size 8192 extends beyond EOD, truncated
[  335.789184][T12305] loop3: detected capacity change from 0 to 256
[  335.793298][T12305] exfat: Unknown parameter 'uT0x0000000000000000'
[  338.199921][T12350] loop3: detected capacity change from 0 to 256
[  338.808177][T12364] loop4: detected capacity change from 0 to 1024
[  338.811675][T12364] EXT4-fs: Ignoring removed mblk_io_submit option
[  338.814292][T12364] EXT4-fs: Ignoring removed bh option
[  338.827031][T12364] EXT4-fs: Mount option(s) incompatible with ext2
[  339.002019][T12370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2446'.
[  339.005884][T12370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2446'.
[  339.009806][T12370] netlink: 'syz.3.2446': attribute type 18 has an invalid length.
[  339.089624][T12372] input: syz0 as /devices/virtual/input/input17
[  339.157258][T12374] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0)
[  339.223750][T12378] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2450'.
[  339.325347][T12384] sp0: Synchronizing with TNC
[  339.647069][T12393] loop2: detected capacity change from 0 to 1024
[  339.807549][T12325] hfsplus: b-tree write err: -5, ino 3
[  340.295983][T12411] 9pnet_fd: p9_fd_create_unix (12411): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  340.407901][T12413] loop2: detected capacity change from 0 to 16
[  340.443053][    C0] vkms_vblank_simulate: vblank timer overrun
[  340.479156][T12413] erofs (device loop2): mounted with root inode @ nid 36.
[  340.502069][T12413] erofs (device loop2): inline data across blocks @ nid 36
[  340.915442][ T5907] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  341.077049][ T5907] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  341.080730][ T5907] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  341.087088][ T5907] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  341.090685][ T5907] usb 3-1: config 1 has no interface number 1
[  341.093233][ T5907] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  341.110251][ T5907] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  341.118767][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.122230][ T5907] usb 3-1: Product: syz
[  341.124370][ T5907] usb 3-1: Manufacturer: syz
[  341.126313][ T5907] usb 3-1: SerialNumber: syz
[  341.134208][   T24] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  341.230882][T12438] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  341.290306][   T24] usb 5-1: unable to get BOS descriptor or descriptor too short
[  341.300711][   T24] usb 5-1: no configurations
[  341.303934][   T24] usb 5-1: can't read configurations, error -22
[  341.343687][ T5907] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  341.347148][ T5907] usb 3-1: MIDIStreaming interface descriptor not found
[  341.377259][ T5907] usb 3-1: USB disconnect, device number 39
[  341.657116][T12446] loop3: detected capacity change from 0 to 128
[  341.665988][T12446] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  341.671102][T12446] ext4 filesystem being mounted at /414/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  341.728451][ T9026] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  342.001987][T12461] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2487'.
[  342.017819][T12461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2487'.
[  342.549533][T12466] loop4: detected capacity change from 0 to 512
[  342.572336][T12466] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2489: casefold flag without casefold feature
[  342.578823][T12466] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2489: couldn't read orphan inode 15 (err -117)
[  342.586076][T12466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  342.610446][T12466] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload
[  342.617702][T12466] fscrypt: key with description 'fscrypt:0000111122223333' has invalid payload
[  342.641424][ T9144] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.128669][T12489] loop3: detected capacity change from 0 to 16
[  343.138685][T12489] erofs (device loop3): mounted with root inode @ nid 36.
[  343.157456][   T33] audit: type=1800 audit(1756522885.337:194): pid=12489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2498" name="file1" dev="loop3" ino=86 res=0 errno=0
[  343.978424][T12497] loop4: detected capacity change from 0 to 2048
[  344.003111][T12497] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  344.003638][T12491] loop3: detected capacity change from 0 to 32768
[  344.017118][T12491] btrfs: Deprecated parameter 'usebackuproot'
[  344.019217][T12491] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  344.028107][T12491] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2499 (12491)
[  344.030946][T12497] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  344.063608][T12491] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  344.068528][T12491] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  344.126929][   T26] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  344.134753][T12491] BTRFS error (device loop3): failed to load root extent
[  344.144879][T12491] BTRFS warning (device loop3): try to load backup roots slot 1
[  344.149962][   T26] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  344.161613][T12491] BTRFS warning (device loop3): couldn't read tree root
[  344.167852][T12512] tmpfs: Bad value for 'mpol'
[  344.173252][T12491] BTRFS warning (device loop3): try to load backup roots slot 2
[  344.177941][T12325] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  344.182683][T12491] BTRFS warning (device loop3): couldn't read tree root
[  344.186599][T12491] BTRFS warning (device loop3): try to load backup roots slot 3
[  344.206508][T12491] BTRFS info (device loop3): rebuilding free space tree
[  344.237641][T12491] BTRFS info (device loop3): checking UUID tree
[  344.243220][T12491] BTRFS info (device loop3): setting nodatasum
[  344.249720][T12491] BTRFS info (device loop3): setting nodatacow
[  344.254051][T12491] BTRFS info (device loop3): enabling ssd optimizations
[  344.256450][T12491] BTRFS info (device loop3): turning off barriers
[  344.258464][T12491] BTRFS info (device loop3): turning on sync discard
[  344.260772][T12491] BTRFS info (device loop3): enabling free space tree
[  344.271681][T12491] BTRFS info (device loop3): force clearing of disk cache
[  344.275937][T12491] BTRFS info (device loop3): enabling auto defrag
[  344.278275][T12491] BTRFS info (device loop3): doing ref verification
[  344.280705][T12491] BTRFS info (device loop3): trying to use backup root at mount time
[  344.283840][T12491] BTRFS info (device loop3): max_inline set to 0
[  344.357449][ T9026] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  344.505680][T12522] loop2: detected capacity change from 0 to 32768
[  344.526310][T12522] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  344.535686][T12522] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  344.761349][ T5861] ocfs2: Unmounting device (7,2) on (node local)
[  344.834750][   T52] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  345.014213][   T52] usb 5-1: Using ep0 maxpacket: 32
[  345.023059][   T52] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  345.027091][   T52] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  345.030660][   T52] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  345.034452][   T52] usb 5-1: config 1 has no interface number 0
[  345.037027][   T52] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  345.041518][   T52] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  345.046770][   T52] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  345.050407][   T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.106965][   T52] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  345.288691][T12530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  345.305515][T12530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  345.326167][T12530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  345.329678][T12530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  345.349094][   T52] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached
[  345.374137][T12545] loop2: detected capacity change from 0 to 128
[  345.785748][ T5907] usb 5-1: USB disconnect, device number 17
[  345.796810][ T5907] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  346.080803][T12551] loop3: detected capacity change from 0 to 512
[  346.099936][T12551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  346.105871][T12551] ext4 filesystem being mounted at /422/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  346.123367][T12551] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2519: corrupted xattr block 33: invalid header
[  346.137190][T12551] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.2519: corrupted xattr block 33: invalid header
[  346.146065][T12551] fscrypt (loop3, inode 15): Error -117 getting encryption context
[  346.171448][ T9026] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.222824][T12556] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  346.949829][   T52] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  347.084283][   T24] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  347.107095][   T52] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  347.112725][   T52] usb 4-1: config 0 interface 0 has no altsetting 0
[  347.118512][   T52] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  347.122644][   T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.128315][   T52] usb 4-1: Product: syz
[  347.130324][   T52] usb 4-1: Manufacturer: syz
[  347.132466][   T52] usb 4-1: SerialNumber: syz
[  347.137490][   T52] usb 4-1: config 0 descriptor??
[  347.146042][   T52] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  347.157780][   T52] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  347.162582][   T52] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  347.168215][   T52] usb 4-1: media controller created
[  347.197995][   T52] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  347.235610][   T52] DVB: Unable to find symbol tda10046_attach()
[  347.238548][   T52] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  347.242395][   T24] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  347.246485][   T24] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  347.250771][   T52] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  347.254368][   T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  347.257570][   T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  347.261226][   T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  347.296588][   T24] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  347.300334][   T24] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  347.303322][   T24] usb 3-1: Product: syz
[  347.307223][   T24] usb 3-1: Manufacturer: syz
[  347.313602][   T24] cdc_wdm 3-1:1.0: skipping garbage
[  347.315808][   T24] cdc_wdm 3-1:1.0: skipping garbage
[  347.321147][   T24] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  347.323298][   T24] cdc_wdm 3-1:1.0: Unknown control protocol
[  347.748746][   T52] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  347.763514][   T52] usb 4-1: USB disconnect, device number 23
[  348.352860][T12587] loop3: detected capacity change from 0 to 16
[  348.360139][T12587] erofs (device loop3): mounted with root inode @ nid 36.
[  348.381663][T12587] erofs (device loop3): readahead error at folio 21 @ nid 36
[  348.391091][T12587] erofs (device loop3): readahead error at folio 20 @ nid 36
[  348.400798][T12587] erofs (device loop3): readahead error at folio 18 @ nid 36
[  348.409506][T12587] erofs (device loop3): readahead error at folio 16 @ nid 36
[  348.418461][T12587] erofs (device loop3): readahead error at folio 12 @ nid 36
[  348.427482][T12587] erofs (device loop3): readahead error at folio 9 @ nid 36
[  348.438043][T12587] erofs (device loop3): readahead error at folio 6 @ nid 36
[  348.440999][T12587] syz.3.2531: attempt to access beyond end of device
[  348.440999][T12587] loop3: rw=524288, sector=376, nr_sectors = 16 limit=16
[  348.446847][T12587] syz.3.2531: attempt to access beyond end of device
[  348.446847][T12587] loop3: rw=524288, sector=720, nr_sectors = 16 limit=16
[  348.452229][T12587] syz.3.2531: attempt to access beyond end of device
[  348.452229][T12587] loop3: rw=524288, sector=525144, nr_sectors = 16 limit=16
[  348.457692][T12587] syz.3.2531: attempt to access beyond end of device
[  348.457692][T12587] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16
[  348.576581][ T5907] kernel write not supported for file /sg0 (pid: 5907 comm: kworker/0:5)
[  348.908887][T12609] loop4: detected capacity change from 0 to 2048
[  348.921925][T12609] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  348.938630][T12609] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  348.960707][T12603] loop3: detected capacity change from 0 to 32768
[  348.964641][T12603] btrfs: Deprecated parameter 'usebackuproot'
[  348.966910][T12603] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  348.973644][ T9144] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.976198][T12603] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2539 (12603)
[  349.000394][T12603] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  349.003590][T12603] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  349.037189][T12603] BTRFS info (device loop3): rebuilding free space tree
[  349.056334][T12603] BTRFS info (device loop3): enabling ssd optimizations
[  349.058986][T12603] BTRFS info (device loop3): turning on sync discard
[  349.061053][T12603] BTRFS info (device loop3): enabling free space tree
[  349.063421][T12603] BTRFS info (device loop3): force clearing of disk cache
[  349.067063][T12603] BTRFS info (device loop3): enabling auto defrag
[  349.069537][T12603] BTRFS info (device loop3): trying to use backup root at mount time
[  349.072082][T12603] BTRFS info (device loop3): max_inline set to 0
[  349.150494][ T9026] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  349.355634][T12637] loop3: detected capacity change from 0 to 1024
[  349.358191][T12637] EXT4-fs: Ignoring removed nobh option
[  349.359953][T12637] EXT4-fs: Ignoring removed bh option
[  349.368347][T12637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  349.551073][   T10] usb 3-1: USB disconnect, device number 40
[  350.351177][ T9026] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.628663][T12662] loop3: detected capacity change from 0 to 1024
[  350.657626][T12662] hfsplus: request for non-existent node 62977 in B*Tree
[  350.661993][T12662] hfsplus: request for non-existent node 62977 in B*Tree
[  350.689506][ T1089] hfsplus: b-tree write err: -5, ino 3
[  350.694296][   T52] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  350.747971][T12666] program syz.2.2557 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  350.859597][   T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  350.862868][   T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  350.870233][   T52] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDA, changing to 0x8A
[  350.874955][   T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  350.880022][   T52] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  350.883534][   T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  350.888351][   T52] usb 5-1: SerialNumber: syz
[  350.891415][   T52] usb 5-1: config 0 descriptor??
[  351.028495][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2563'.
[  351.032182][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2563'.
[  351.035381][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2563'.
[  351.038292][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2563'.
[  351.041048][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2563'.
[  351.043784][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2563'.
[  351.046859][   T24] usb 3-1: new full-speed USB device number 41 using dummy_hcd
[  351.048684][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2563'.
[  351.053338][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2563'.
[  351.058090][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2563'.
[  351.062176][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2563'.
[  351.098362][   T52] usb 5-1: USB disconnect, device number 18
[  351.196066][   T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  351.199555][   T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  351.207547][   T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  351.211291][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.217243][   T24] usb 3-1: Product: syz
[  351.218761][   T24] usb 3-1: Manufacturer: syz
[  351.220629][   T24] usb 3-1: SerialNumber: syz
[  351.289013][T12690] vlan0: entered promiscuous mode
[  351.430301][   T24] usb 3-1: 0:2 : does not exist
[  351.436673][   T24] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  351.460479][   T24] usb 3-1: USB disconnect, device number 41
[  351.584186][ T5907] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  351.640281][T12694] delete_channel: no stack
[  351.642435][T12694] delete_channel: no stack
[  351.754222][ T5907] usb 4-1: Using ep0 maxpacket: 8
[  351.760363][ T5907] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  351.763217][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.766634][ T5907] usb 4-1: Product: syz
[  351.768291][ T5907] usb 4-1: Manufacturer: syz
[  351.769920][ T5907] usb 4-1: SerialNumber: syz
[  351.773103][ T5907] usb 4-1: config 0 descriptor??
[  351.778775][ T5907] gspca_main: se401-2.14.0 probing 047d:5003
[  351.852244][T12702] loop4: detected capacity change from 0 to 256
[  351.855320][T12702] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  351.858591][T12702] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  351.864911][T12702] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  351.876225][   T33] audit: type=1800 audit(1756522894.057:195): pid=12702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2573" name="file1" dev="loop4" ino=1048673 res=0 errno=0
[  351.882517][   T33] audit: type=1800 audit(1756522894.057:196): pid=12702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2573" name="file1" dev="loop4" ino=1048673 res=0 errno=0
[  352.524298][   T24] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  352.676812][   T24] usb 3-1: unable to get BOS descriptor or descriptor too short
[  352.680976][   T24] usb 3-1: config 0 has an invalid interface number: 238 but max is 0
[  352.686764][   T24] usb 3-1: config 0 has no interface number 0
[  352.689186][   T24] usb 3-1: config 0 interface 238 has no altsetting 0
[  352.694760][   T24] usb 3-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=f1.0d
[  352.698162][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  352.701234][   T24] usb 3-1: Product: syz
[  352.703140][   T24] usb 3-1: Manufacturer: syz
[  352.714261][   T24] usb 3-1: SerialNumber: syz
[  352.719383][   T24] usb 3-1: config 0 descriptor??
[  352.748834][T12710] netlink: 'syz.3.2576': attribute type 2 has an invalid length.
[  352.929647][   T24] gspca_main: spca501-2.14.0 probing 1776:501c
[  352.932073][   T24] gspca_spca501: reg write: error -71
[  352.933917][   T24] spca501 3-1:0.238: Reg write failed for 0x02,0x07,0x05
[  352.936251][   T24] spca501 3-1:0.238: probe with driver spca501 failed with error -22
[  352.941064][   T24] usb 3-1: USB disconnect, device number 42
[  353.020231][T12716] netlink: 'syz.4.2579': attribute type 1 has an invalid length.
[  353.048275][T12716] 8021q: adding VLAN 0 to HW filter on device bond2
[  353.187510][ T5907] gspca_se401: read req failed req 0x06 error -19
[  353.195387][ T5907] usb 4-1: USB disconnect, device number 24
[  353.324278][ T5907] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  353.498627][ T5907] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  353.502714][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.509137][ T5907] usb 4-1: config 0 descriptor??
[  353.544183][   T24] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  353.670983][T12739] loop2: detected capacity change from 0 to 4096
[  353.704983][   T24] usb 5-1: config 0 has an invalid interface number: 200 but max is 0
[  353.708193][   T24] usb 5-1: config 0 has no interface number 0
[  353.710639][   T24] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0
[  353.715767][   T24] usb 5-1: config 0 interface 200 has no altsetting 0
[  353.728432][   T24] usb 5-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39
[  353.732045][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.735566][   T24] usb 5-1: Product: syz
[  353.737259][   T24] usb 5-1: Manufacturer: syz
[  353.739127][   T24] usb 5-1: SerialNumber: syz
[  353.743392][   T24] usb 5-1: config 0 descriptor??
[  353.937010][   T33] audit: type=1326 audit(1756522896.117:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12740 comm="syz.2.2591" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f703c58ebe9 code=0x0
[  353.958700][ T5907] lenovo 0003:17EF:6067.000D: hidraw0: USB HID v1.01 Device [HID 17ef:6067] on usb-dummy_hcd.3-1/input0
[  353.960642][   T24] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input18
[  353.973726][   T24] usb 5-1: USB disconnect, device number 19
[  354.155588][ T5907] usb 4-1: USB disconnect, device number 25
[  354.697305][T12754] loop4: detected capacity change from 0 to 256
[  354.700337][T12754] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  354.764321][T12760] loop3: detected capacity change from 0 to 8
[  354.775547][T12760] SQUASHFS error: zlib decompression failed, data probably corrupt
[  354.778517][T12760] SQUASHFS error: Failed to read block 0x9b: -5
[  354.780466][T12760] SQUASHFS error: Unable to read metadata cache entry [99]
[  354.782697][T12760] SQUASHFS error: Unable to read inode 0x127
[  355.462186][T12777] hfsplus: unable to find HFS+ superblock
[  355.590002][T12767] loop3: detected capacity change from 0 to 32768
[  355.614163][T12767] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2604 (12767)
[  355.675588][T12767] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  355.679713][T12767] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  355.734707][T12767] BTRFS info (device loop3): enabling ssd optimizations
[  355.738036][T12767] BTRFS info (device loop3): enabling free space tree
[  355.839141][ T9026] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  355.945567][T12797] loop2: detected capacity change from 0 to 512
[  355.951185][T12797] EXT4-fs: Ignoring removed mblk_io_submit option
[  355.966683][T12797] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  356.003517][T12797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  356.011365][T12797] ext4 filesystem being mounted at /879/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  356.235651][ T5861] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.475518][T12801] ALSA: mixer_oss: invalid OSS volume ''
[  356.477387][T12801] ALSA: mixer_oss: invalid OSS volume '+]OؓOGec9bx'ĮC'
[  356.480541][T12801] ALSA: mixer_oss: invalid OSS volume '_*[bYcq~lr<W|3z'
[  356.483378][T12801] ALSA: mixer_oss: invalid OSS volume '{۱HJ:'
[  356.485663][T12801] ALSA: mixer_oss: invalid OSS volume 'B}s둥"f0^C'
[  356.488501][T12801] ALSA: mixer_oss: invalid OSS volume 'gRy'G!P'
[  356.490989][T12801] ALSA: mixer_oss: invalid OSS volume '{ouD1*ڦi&qrm4_Xn'
[  356.496195][T12801] ALSA: mixer_oss: invalid OSS volume '/U~d?":9S'
[  356.498774][T12801] ALSA: mixer_oss: invalid OSS volume '(8'
[  356.500679][T12801] ALSA: mixer_oss: invalid OSS volume '')3loX+iG9SNW'
[  356.504356][T12801] ALSA: mixer_oss: invalid OSS volume '%X%Ň9WsE?%73'
[  356.510092][T12801] ALSA: mixer_oss: invalid OSS volume 'Ji'
[  356.512372][T12801] ALSA: mixer_oss: invalid OSS volume 'OfSҖ[sx'
[  356.515197][T12801] ALSA: mixer_oss: invalid OSS volume '::IJUTTځA"B^Csb;`c'
[  356.517964][T12801] ALSA: mixer_oss: invalid OSS volume 'cۉ<S٪3nF/Pf'
[  356.520901][T12801] ALSA: mixer_oss: invalid OSS volume '9hĨy^7]'
[  356.524851][T12801] ALSA: mixer_oss: invalid OSS volume '?6<g$/uXAd>=V'
[  356.528437][T12801] ALSA: mixer_oss: invalid OSS volume '+ͿnU<$^EKʘr+'
[  356.531736][T12801] ALSA: mixer_oss: invalid OSS volume '+8iYJz'
[  356.833864][T12813] loop2: detected capacity change from 0 to 512
[  356.839250][T12813] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  356.851732][T12813] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c0a8, mo2=0002]
[  356.855604][T12813] System zones: 1-12
[  356.862407][T12813] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.2615: iget: bogus i_mode (700)
[  356.880896][T12813] EXT4-fs (loop2): Remounting filesystem read-only
[  356.890611][T12813] EXT4-fs (loop2): 1 orphan inode deleted
[  356.901818][T12813] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  357.022958][ T5861] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.231938][T12826] netlink: 'syz.2.2620': attribute type 3 has an invalid length.
[  357.236076][T12826] netlink: 'syz.2.2620': attribute type 1 has an invalid length.
[  357.239777][T12826] __nla_validate_parse: 46 callbacks suppressed
[  357.239789][T12826] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2620'.
[  357.498105][T12836] loop2: detected capacity change from 0 to 512
[  357.508582][T12836] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  357.526768][T12836] EXT4-fs (loop2): 1 truncate cleaned up
[  357.533108][T12836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  357.608861][ T5861] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.629984][T12844] loop4: detected capacity change from 0 to 128
[  358.552969][T12864] loop2: detected capacity change from 0 to 40427
[  358.556890][T12864] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  358.560074][T12864] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  358.573865][T12864] F2FS-fs (loop2): invalid crc value
[  358.632304][T12864] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  358.666715][T12864] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  358.669591][T12864] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  358.756553][   T33] audit: type=1326 audit(1756522900.937:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12858 comm="syz.4.2635" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403a98ebe9 code=0x7fc00000
[  358.851635][T12871] loop3: detected capacity change from 0 to 40427
[  358.861166][T12871] F2FS-fs (loop3): invalid crc value
[  358.924880][T12871] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  358.929217][T12871] F2FS-fs (loop3): Start checkpoint disabled!
[  358.938233][T12871] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  358.966386][T12878] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  359.206142][T12881] F2FS-fs (loop3): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  359.382851][T12888] loop4: detected capacity change from 0 to 1024
[  359.396237][T12888] EXT4-fs: Ignoring removed nomblk_io_submit option
[  359.401858][T12888] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  359.412198][T12888] EXT4-fs (loop4): stripe (3675) is not aligned with cluster size (16), stripe is disabled
[  359.450641][T12888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  359.509468][T12895] netlink: 'syz.2.2647': attribute type 5 has an invalid length.
[  359.512100][T12895] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2647'.
[  359.532050][ T9144] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.548697][ T1090] kworker/u10:6: attempt to access beyond end of device
[  359.548697][ T1090] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  359.560401][ T1090] CPU: 0 UID: 0 PID: 1090 Comm: kworker/u10:6 Not tainted syzkaller #0 PREEMPT(full) 
[  359.560423][ T1090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  359.560432][ T1090] Workqueue: writeback wb_workfn (flush-7:3)
[  359.560458][ T1090] Call Trace:
[  359.560465][ T1090]  <TASK>
[  359.560472][ T1090]  dump_stack_lvl+0x189/0x250
[  359.560505][ T1090]  ? __pfx_dump_stack_lvl+0x10/0x10
[  359.560521][ T1090]  ? __pfx_queue_work_on+0x10/0x10
[  359.560535][ T1090]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  359.560554][ T1090]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  359.560579][ T1090]  f2fs_handle_critical_error+0x37c/0x540
[  359.560605][ T1090]  f2fs_write_end_io+0x886/0xb60
[  359.560633][ T1090]  __submit_merged_bio+0x27a/0x6a0
[  359.560657][ T1090]  __submit_merged_write_cond+0x255/0x530
[  359.560680][ T1090]  f2fs_write_data_pages+0x261d/0x3000
[  359.560727][ T1090]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  359.560803][ T1090]  ? f2fs_write_meta_pages+0x357/0x450
[  359.560829][ T1090]  ? __lock_acquire+0xab9/0xd20
[  359.560850][ T1090]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  359.560870][ T1090]  do_writepages+0x32e/0x550
[  359.560892][ T1090]  ? reacquire_held_locks+0x127/0x1d0
[  359.560904][ T1090]  ? writeback_sb_inodes+0x384/0x1010
[  359.560966][ T1090]  __writeback_single_inode+0x145/0xff0
[  359.560982][ T1090]  ? do_raw_spin_unlock+0x4d/0x240
[  359.561001][ T1090]  writeback_sb_inodes+0x6c7/0x1010
[  359.561038][ T1090]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  359.561087][ T1090]  ? rcu_is_watching+0x15/0xb0
[  359.561108][ T1090]  wb_writeback+0x43b/0xaf0
[  359.561130][ T1090]  ? queue_io+0x3a1/0x590
[  359.561148][ T1090]  ? __pfx_wb_writeback+0x10/0x10
[  359.561171][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  359.561191][ T1090]  wb_workfn+0x409/0xef0
[  359.561214][ T1090]  ? __pfx_wb_workfn+0x10/0x10
[  359.561231][ T1090]  ? __lock_acquire+0xab9/0xd20
[  359.561253][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  359.561268][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  359.561281][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  359.561292][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  359.561304][ T1090]  process_scheduled_works+0xae1/0x17b0
[  359.561337][ T1090]  ? __pfx_process_scheduled_works+0x10/0x10
[  359.561361][ T1090]  worker_thread+0x8a0/0xda0
[  359.561391][ T1090]  kthread+0x711/0x8a0
[  359.561409][ T1090]  ? __pfx_worker_thread+0x10/0x10
[  359.561421][ T1090]  ? __pfx_kthread+0x10/0x10
[  359.561437][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  359.561453][ T1090]  ? lockdep_hardirqs_on+0x9c/0x150
[  359.561469][ T1090]  ? __pfx_kthread+0x10/0x10
[  359.561492][ T1090]  ret_from_fork+0x3fc/0x770
[  359.561509][ T1090]  ? __pfx_ret_from_fork+0x10/0x10
[  359.561529][ T1090]  ? __switch_to_asm+0x39/0x70
[  359.561546][ T1090]  ? __switch_to_asm+0x33/0x70
[  359.561559][ T1090]  ? __pfx_kthread+0x10/0x10
[  359.561575][ T1090]  ret_from_fork_asm+0x1a/0x30
[  359.561605][ T1090]  </TASK>
[  359.602083][ T1090] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  359.607829][T12897] netlink: 'syz.2.2650': attribute type 9 has an invalid length.
[  359.707962][T12897] netlink: 147436 bytes leftover after parsing attributes in process `syz.2.2650'.
[  359.919152][T12915] loop2: detected capacity change from 0 to 128
[  360.789598][ T2201] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  361.047535][ T2201] usb 5-1: Using ep0 maxpacket: 32
[  361.083700][ T2201] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  361.096557][ T2201] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.112834][ T2201] usb 5-1: config 0 descriptor??
[  361.196397][ T2201] gspca_main: sq930x-2.14.0 probing 041e:403c
[  361.384387][T12325] kworker/u9:4: attempt to access beyond end of device
[  361.384387][T12325] loop2: rw=1, sector=145, nr_sectors = 8 limit=128
[  361.396860][T12325] kworker/u9:4: attempt to access beyond end of device
[  361.396860][T12325] loop2: rw=1, sector=161, nr_sectors = 8 limit=128
[  361.402431][T12325] kworker/u9:4: attempt to access beyond end of device
[  361.402431][T12325] loop2: rw=1, sector=177, nr_sectors = 8 limit=128
[  361.410632][T12325] kworker/u9:4: attempt to access beyond end of device
[  361.410632][T12325] loop2: rw=1, sector=193, nr_sectors = 8 limit=128
[  361.415574][T12325] kworker/u9:4: attempt to access beyond end of device
[  361.415574][T12325] loop2: rw=1, sector=209, nr_sectors = 8 limit=128
[  361.420558][T12325] kworker/u9:4: attempt to access beyond end of device
[  361.420558][T12325] loop2: rw=1, sector=225, nr_sectors = 8 limit=128
[  361.426105][T12325] kworker/u9:4: attempt to access beyond end of device
[  361.426105][T12325] loop2: rw=1, sector=241, nr_sectors = 8 limit=128
[  361.431361][T12325] kworker/u9:4: attempt to access beyond end of device
[  361.431361][T12325] loop2: rw=1, sector=257, nr_sectors = 8 limit=128
[  361.446202][T12325] kworker/u9:4: attempt to access beyond end of device
[  361.446202][T12325] loop2: rw=1, sector=273, nr_sectors = 8 limit=128
[  361.796613][T12935] loop2: detected capacity change from 0 to 256
[  361.799384][T12935] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  361.802473][T12935] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  361.815628][T12935] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  361.917088][T12941] loop2: detected capacity change from 0 to 1024
[  361.921272][T12941] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  361.935289][T12941] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002]
[  361.938966][T12941] System zones: 0-1, 2-3, 4-36, 98-101, 102-102
[  361.941986][T12941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  361.960854][ T5861] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.116147][T12950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2671'.
[  362.141457][T12950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2671'.
[  362.214662][ T2201] gspca_sq930x: ucbus_write failed -71
[  362.218114][ T2201] sq930x 5-1:0.0: probe with driver sq930x failed with error -71
[  362.226527][ T2201] usb 5-1: USB disconnect, device number 20
[  362.249641][T12952] loop2: detected capacity change from 0 to 1024
[  362.277735][ T1089] hfsplus: b-tree write err: -5, ino 4
[  362.319400][T12954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2673'.
[  362.519564][T12960] loop2: detected capacity change from 0 to 1024
[  362.535134][T12960] hfsplus: bad catalog entry type
[  362.617241][T12964] netlink: 'syz.2.2678': attribute type 24 has an invalid length.
[  362.839585][T12978] tmpfs: Bad value for 'mpol'
[  362.907066][T12985] netlink: 'syz.3.2688': attribute type 2 has an invalid length.
[  362.913299][T12985] netlink: 'syz.3.2688': attribute type 1 has an invalid length.
[  362.919212][T12985] netlink: 'syz.3.2688': attribute type 1 has an invalid length.
[  363.233777][T12990] loop3: detected capacity change from 0 to 16
[  363.240351][T12990] erofs (device loop3): mounted with root inode @ nid 36.
[  363.247994][   T33] audit: type=1800 audit(1756522905.427:199): pid=12990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2690" name="file1" dev="loop3" ino=86 res=0 errno=0
[  363.378672][T13004] loop4: detected capacity change from 0 to 128
[  363.659513][ T5907] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  363.807672][T13020] loop2: detected capacity change from 0 to 4096
[  363.810569][T13020] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  363.824194][ T5907] usb 4-1: Using ep0 maxpacket: 32
[  363.828342][ T5907] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  363.833233][ T5907] usb 4-1: config 0 has no interface number 0
[  363.837079][ T5907] usb 4-1: config 0 interface 12 has no altsetting 0
[  363.842966][ T5907] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40
[  363.847980][ T5907] usb 4-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3
[  363.850668][ T5907] usb 4-1: Product: syz
[  363.851923][ T5907] usb 4-1: Manufacturer: syz
[  363.853355][ T5907] usb 4-1: SerialNumber: syz
[  363.857188][ T5907] usb 4-1: config 0 descriptor??
[  364.032942][T13030] loop2: detected capacity change from 0 to 256
[  364.043325][T13030] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  364.336095][ T5870] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  364.340399][ T5870] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.433625][ T5870] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  364.437254][ T5870] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.468080][ T5907] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  364.470605][ T5907] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  364.473486][ T5907] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  364.476980][ T5907] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[  364.482848][ T5907] usb 4-1: USB disconnect, device number 26
[  364.515410][ T5870] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  364.518355][ T5870] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.578988][ T5870] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  364.583071][ T5870] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.708735][ T5870] bridge_slave_1: left allmulticast mode
[  364.710939][ T5870] bridge_slave_1: left promiscuous mode
[  364.713310][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.722250][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  364.738292][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  364.742169][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  364.743149][ T5870] veth0_to_bond: left allmulticast mode
[  364.751404][ T5870] veth0_to_bond: left promiscuous mode
[  364.754800][ T5870] bridge1: port 2(veth0_to_bond) entered disabled state
[  364.756371][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  364.762404][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  364.762821][ T5870] veth3: left allmulticast mode
[  364.776218][ T5870] veth3: left promiscuous mode
[  364.778363][ T5870] bridge1: port 1(veth3) entered disabled state
[  365.121054][T13044] loop3: detected capacity change from 0 to 128
[  365.190543][ T5870] team0: Port device bridge0 removed
[  365.213670][T13044] FAT-fs (loop3): error, corrupted directory (invalid i_start)
[  365.218563][T13044] FAT-fs (loop3): Filesystem has been set read-only
[  365.535102][ T5870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  365.543791][ T5870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  365.553685][ T5870] bond0 (unregistering): Released all slaves
[  365.610701][T13035] lo speed is unknown, defaulting to 1000
[  365.624172][T13048] loop3: detected capacity change from 0 to 32768
[  365.629068][T13048] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2718 (13048)
[  365.647242][T13048] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  365.651504][T13048] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  365.700305][ T5870] : left promiscuous mode
[  366.161181][T13048] BTRFS info (device loop3): enabling ssd optimizations
[  366.163454][T13048] BTRFS info (device loop3): enabling free space tree
[  366.239035][ T9026] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  366.275239][T13035] chnl_net:caif_netlink_parms(): no params data found
[  366.669847][T13035] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.675154][T13035] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.697628][T13035] bridge_slave_0: entered allmulticast mode
[  366.706874][T13035] bridge_slave_0: entered promiscuous mode
[  366.715890][T13035] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.718698][T13035] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.721569][T13035] bridge_slave_1: entered allmulticast mode
[  366.725453][T13035] bridge_slave_1: entered promiscuous mode
[  366.740570][ T5870] hsr_slave_0: left promiscuous mode
[  366.750763][ T5870] hsr_slave_1: left promiscuous mode
[  366.753478][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  366.757121][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_0
[  366.767656][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_1
[  366.800925][ T5870] veth1_macvtap: left promiscuous mode
[  366.816842][ T5870] veth0_macvtap: left promiscuous mode
[  366.819227][ T5870] veth1_vlan: left promiscuous mode
[  366.821407][ T5870] veth0_vlan: left promiscuous mode
[  366.845640][ T5238] Bluetooth: hci2: command tx timeout
[  367.991773][ T5870] team0 (unregistering): Port device team_slave_1 removed
[  368.051539][ T5870] team0 (unregistering): Port device team_slave_0 removed
[  368.648414][T13035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  368.672111][T13035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  368.705398][T13111] netlink: 'syz.3.2733': attribute type 298 has an invalid length.
[  368.773175][T13035] team0: Port device team_slave_0 added
[  368.778371][T13035] team0: Port device team_slave_1 added
[  368.780039][T13113] loop3: detected capacity change from 0 to 764
[  368.789469][T13113] rock: directory entry would overflow storage
[  368.791962][T13113] rock: sig=0x5245, size=8, remaining=5
[  368.882707][T13117] IPv6: NLM_F_CREATE should be specified when creating new route
[  368.885187][T13035] batman_adv: batadv0: Adding interface: batadv_slave_0
[  368.888965][T13035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.922603][T13035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  368.932296][T13035] batman_adv: batadv0: Adding interface: batadv_slave_1
[  368.935772][ T5238] Bluetooth: hci2: command tx timeout
[  368.941965][T13035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.987964][T13035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  369.083017][T13035] hsr_slave_0: entered promiscuous mode
[  369.096956][T13035] hsr_slave_1: entered promiscuous mode
[  369.099541][T13035] debugfs: 'hsr0' already exists in 'hsr'
[  369.101420][T13035] Cannot create hsr debugfs directory
[  369.117127][ T5870] IPVS: stop unused estimator thread 0...
[  369.322335][T13035] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  369.330807][T13035] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  369.337342][T13035] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  369.346640][T13035] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  369.436896][ T5920] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  369.441778][T13035] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.461322][T13035] 8021q: adding VLAN 0 to HW filter on device team0
[  369.476357][ T5921] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  369.478701][T12325] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.482291][T12325] bridge0: port 1(bridge_slave_0) entered forwarding state
[  369.492836][T12325] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.495694][T12325] bridge0: port 2(bridge_slave_1) entered forwarding state
[  369.584864][ T5920] usb 5-1: Using ep0 maxpacket: 8
[  369.589257][ T5920] usb 5-1: unable to get BOS descriptor or descriptor too short
[  369.593394][ T5920] usb 5-1: config 8 has an invalid interface number: 154 but max is 0
[  369.598018][ T5920] usb 5-1: config 8 has no interface number 0
[  369.600442][ T5920] usb 5-1: config 8 interface 154 has no altsetting 0
[  369.608462][ T5920] usb 5-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=4f.f6
[  369.613448][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.617543][ T5920] usb 5-1: Product: syz
[  369.619188][ T5920] usb 5-1: Manufacturer: syz
[  369.621023][ T5920] usb 5-1: SerialNumber: syz
[  369.652413][ T5921] usb 4-1: config 118 interface 0 has no altsetting 0
[  369.661069][ T5921] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67
[  369.666299][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.670116][ T5921] usb 4-1: Product: syz
[  369.671900][ T5921] usb 4-1: Manufacturer: syz
[  369.673755][ T5921] usb 4-1: SerialNumber: syz
[  369.729584][T13035] 8021q: adding VLAN 0 to HW filter on device batadv0
[  369.848196][ T5920] mdc800 5-1:8.154: probe fails -> wrong Interface
[  369.855569][ T5920] usb 5-1: USB disconnect, device number 21
[  369.889103][ T5921] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state.
[  369.896214][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  369.900795][ T5921] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e)
[  369.904258][ T5921] usb 4-1: media controller created
[  369.923367][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  369.963702][ T5921] DVB: Unable to find symbol mt352_attach()
[  369.966635][ T5921] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e'
[  369.972244][ T5921] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19
[  369.982185][ T5921] dvb-usb: schedule remote query interval to 100 msecs.
[  369.987858][ T5921] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected.
[  370.003771][T13035] veth0_vlan: entered promiscuous mode
[  370.022294][T13035] veth1_vlan: entered promiscuous mode
[  370.056436][T13035] veth0_macvtap: entered promiscuous mode
[  370.062701][T13035] veth1_macvtap: entered promiscuous mode
[  370.079616][T13035] batman_adv: batadv0: Interface activated: batadv_slave_0
[  370.089760][T13035] batman_adv: batadv0: Interface activated: batadv_slave_1
[  370.101554][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  370.111385][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  370.117219][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  370.121921][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  370.208953][   T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  370.211984][   T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  370.248615][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  370.251702][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  370.289547][ T2201] m920x_read = error: -71
[  370.292860][ T2201] dvb-usb: error while querying for an remote control event.
[  370.296810][ T5921] dvb_usb_m920x 4-1:118.0: probe with driver dvb_usb_m920x failed with error -71
[  370.304080][ T5921] usb 4-1: USB disconnect, device number 27
[  370.394033][T13156] loop5: detected capacity change from 0 to 1024
[  370.397295][T13156] EXT4-fs: quotafile must be on filesystem root
[  370.427638][ T2201] m920x_read = error: -19
[  370.429315][ T2201] dvb-usb: error while querying for an remote control event.
[  370.547956][   T10] m920x_read = error: -19
[  370.549835][   T10] dvb-usb: error while querying for an remote control event.
[  370.664230][   T10] m920x_read = error: -19
[  370.665991][   T10] dvb-usb: error while querying for an remote control event.
[  370.731010][T13163] loop4: detected capacity change from 0 to 32768
[  370.739623][T13163] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  370.762326][T13163] XFS (loop4): Ending clean mount
[  370.774415][   T10] m920x_read = error: -19
[  370.780415][   T10] dvb-usb: error while querying for an remote control event.
[  370.801847][ T9144] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  370.899108][   T10] m920x_read = error: -19
[  370.900943][   T10] dvb-usb: error while querying for an remote control event.
[  371.015324][   T10] m920x_read = error: -19
[  371.017107][   T10] dvb-usb: error while querying for an remote control event.
[  371.020051][ T5238] Bluetooth: hci2: command tx timeout
[  371.134373][   T10] m920x_read = error: -19
[  371.136135][   T10] dvb-usb: error while querying for an remote control event.
[  371.254936][   T10] m920x_read = error: -19
[  371.257714][   T10] dvb-usb: error while querying for an remote control event.
[  371.308525][T13185] loop5: detected capacity change from 0 to 1024
[  371.335639][T13185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  371.375319][   T10] m920x_read = error: -19
[  371.377101][   T10] dvb-usb: error while querying for an remote control event.
[  371.405374][T13035] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  371.484490][   T10] m920x_read = error: -19
[  371.486172][   T10] dvb-usb: error while querying for an remote control event.
[  371.615501][   T10] m920x_read = error: -19
[  371.616879][   T10] dvb-usb: error while querying for an remote control event.
[  371.726187][   T10] m920x_read = error: -19
[  371.728137][   T10] dvb-usb: error while querying for an remote control event.
[  371.740416][T13208] loop5: detected capacity change from 0 to 512
[  371.743811][T13208] EXT4-fs: Ignoring removed nobh option
[  371.756840][T13208] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.2765: iget: bad i_size value: 38620345925642
[  371.762481][T13208] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2765: couldn't read orphan inode 15 (err -117)
[  371.769407][T13208] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  371.834235][   T10] m920x_read = error: -19
[  371.836081][   T10] dvb-usb: error while querying for an remote control event.
[  371.944404][   T10] m920x_read = error: -19
[  371.946032][   T10] dvb-usb: error while querying for an remote control event.
[  372.063651][T13212] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2765: bg 0: block 5: invalid block bitmap
[  372.094985][T13212] overlayfs: failed to verify upper root origin
[  372.118247][   T10] m920x_read = error: -19
[  372.131135][   T10] dvb-usb: error while querying for an remote control event.
[  372.250230][   T10] m920x_read = error: -19
[  372.255574][   T10] dvb-usb: error while querying for an remote control event.
[  372.280204][T13214] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2766'.
[  372.384332][   T10] m920x_read = error: -19
[  372.386848][   T10] dvb-usb: error while querying for an remote control event.
[  372.494278][   T10] m920x_read = error: -19
[  372.496536][   T10] dvb-usb: error while querying for an remote control event.
[  372.604516][   T10] m920x_read = error: -19
[  372.606519][   T10] dvb-usb: error while querying for an remote control event.
[  372.689720][T13035] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  372.725128][ T5921] m920x_read = error: -19
[  372.726991][ T5921] dvb-usb: error while querying for an remote control event.
[  372.748015][T13233] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2775'.
[  372.844488][ T5921] m920x_read = error: -19
[  372.846321][ T5921] dvb-usb: error while querying for an remote control event.
[  372.924101][   T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  372.955842][ T5921] m920x_read = error: -19
[  372.959845][ T5921] dvb-usb: error while querying for an remote control event.
[  373.008930][T13251] netlink: 'syz.3.2782': attribute type 1 has an invalid length.
[  373.046222][T13251] 8021q: adding VLAN 0 to HW filter on device bond3
[  373.064288][ T5921] m920x_read = error: -19
[  373.066081][ T5921] dvb-usb: error while querying for an remote control event.
[  373.077192][T13251] vlan2: entered allmulticast mode
[  373.079378][T13251] veth1: entered allmulticast mode
[  373.086798][T13251] bond3: (slave vlan2): making interface the new active one
[  373.091054][T13251] bond3: (slave vlan2): Enslaving as an active interface with an up link
[  373.094561][   T10] usb 5-1: Using ep0 maxpacket: 32
[  373.095928][ T5238] Bluetooth: hci2: command tx timeout
[  373.098331][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  373.102677][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  373.107473][   T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  373.110933][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.116620][   T10] usb 5-1: config 0 descriptor??
[  373.186661][ T5921] m920x_read = error: -19
[  373.188169][ T5921] dvb-usb: error while querying for an remote control event.
[  373.307159][ T2201] m920x_read = error: -19
[  373.308946][ T2201] dvb-usb: error while querying for an remote control event.
[  373.414604][ T2201] m920x_read = error: -19
[  373.416287][ T2201] dvb-usb: error while querying for an remote control event.
[  373.524244][ T2201] m920x_read = error: -19
[  373.529376][ T2201] dvb-usb: error while querying for an remote control event.
[  373.538064][   T10] savu 0003:1E7D:2D5A.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  373.649321][ T2201] m920x_read = error: -19
[  373.651697][ T2201] dvb-usb: error while querying for an remote control event.
[  373.658687][T13266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2789'.
[  373.744810][   T52] usb 5-1: USB disconnect, device number 22
[  373.764193][ T2201] m920x_read = error: -19
[  373.769168][ T2201] dvb-usb: error while querying for an remote control event.
[  373.874954][ T2201] m920x_read = error: -19
[  373.876854][ T2201] dvb-usb: error while querying for an remote control event.
[  373.975652][T13270] loop5: detected capacity change from 0 to 32768
[  373.986147][T13270] (syz.5.2791,13270,0):ocfs2_find_slot:468 ERROR: no free slots available!
[  373.989740][T13270] (syz.5.2791,13270,0):ocfs2_mount_volume:1751 ERROR: status = -22
[  373.995606][ T2201] m920x_read = error: -19
[  373.997302][ T2201] dvb-usb: error while querying for an remote control event.
[  374.004989][T13270] (syz.5.2791,13270,0):ocfs2_fill_super:1177 ERROR: status = -22
[  374.104243][ T2201] m920x_read = error: -19
[  374.105925][ T2201] dvb-usb: error while querying for an remote control event.
[  374.215842][ T2201] m920x_read = error: -19
[  374.220645][ T2201] dvb-usb: error while querying for an remote control event.
[  374.334193][   T10] m920x_read = error: -19
[  374.336039][   T10] dvb-usb: error while querying for an remote control event.
[  374.447554][ T2201] m920x_read = error: -19
[  374.450658][ T2201] dvb-usb: error while querying for an remote control event.
[  374.575966][ T2201] m920x_read = error: -19
[  374.578984][ T2201] dvb-usb: error while querying for an remote control event.
[  374.695887][   T10] m920x_read = error: -19
[  374.697699][   T10] dvb-usb: error while querying for an remote control event.
[  374.804167][   T10] m920x_read = error: -19
[  374.805920][   T10] dvb-usb: error while querying for an remote control event.
[  374.925139][   T10] m920x_read = error: -19
[  374.926886][   T10] dvb-usb: error while querying for an remote control event.
[  374.974286][   T52] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  375.034206][   T10] m920x_read = error: -19
[  375.036081][   T10] dvb-usb: error while querying for an remote control event.
[  375.128480][   T52] usb 6-1: unable to get BOS descriptor or descriptor too short
[  375.135101][   T52] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  375.139338][   T52] usb 6-1: config 1 has no interface number 1
[  375.144078][   T10] m920x_read = error: -19
[  375.144423][   T52] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  375.145576][   T10] dvb-usb: error while querying for an remote control event.
[  375.165185][   T52] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  375.168345][   T52] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.170953][   T52] usb 6-1: Product: syz
[  375.183249][   T52] usb 6-1: Manufacturer: syz
[  375.186929][   T52] usb 6-1: SerialNumber: syz
[  375.254178][   T10] m920x_read = error: -19
[  375.255814][   T10] dvb-usb: error while querying for an remote control event.
[  375.364234][   T10] m920x_read = error: -19
[  375.366412][   T10] dvb-usb: error while querying for an remote control event.
[  375.476664][ T2201] m920x_read = error: -19
[  375.480269][ T2201] dvb-usb: error while querying for an remote control event.
[  375.584853][ T2201] m920x_read = error: -19
[  375.589466][ T2201] dvb-usb: error while querying for an remote control event.
[  375.706055][ T2201] m920x_read = error: -19
[  375.707948][ T2201] dvb-usb: error while querying for an remote control event.
[  375.824289][ T2201] m920x_read = error: -19
[  375.825660][ T2201] dvb-usb: error while querying for an remote control event.
[  376.474531][   T52] usb 6-1: found format II with max.bitrate = 26774, frame size=2
[  376.477295][   T52] usb 6-1: found format II with max.bitrate = 26774, frame size=2
[  376.498747][   T52] usb 6-1: failed to enable PITCH for EP 0x82
[  376.553696][   T52] usb 6-1: USB disconnect, device number 2
[  376.622786][T13313] openvswitch: netlink: IP tunnel dst address not specified
[  376.798232][ T2201] m920x_read = error: -19
[  376.800005][ T2201] dvb-usb: error while querying for an remote control event.
[  376.904252][ T5921] m920x_read = error: -19
[  376.905886][ T5921] dvb-usb: error while querying for an remote control event.
[  377.014482][ T5921] m920x_read = error: -19
[  377.016086][ T5921] dvb-usb: error while querying for an remote control event.
[  377.057764][T13331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2817'.
[  377.065863][   T52] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  377.126305][ T5921] m920x_read = error: -19
[  377.133083][ T5921] dvb-usb: error while querying for an remote control event.
[  377.217002][T13325] loop5: detected capacity change from 0 to 32768
[  377.224130][   T52] usb 5-1: Using ep0 maxpacket: 16
[  377.231082][   T52] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  377.241104][   T52] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  377.244122][ T5921] m920x_read = error: -19
[  377.247278][ T5921] dvb-usb: error while querying for an remote control event.
[  377.252519][   T52] usb 5-1: New USB device found, idVendor=1d6b, idProduct=1301, bcdDevice= 1.40
[  377.261466][T13325] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  377.268835][   T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.271841][   T52] usb 5-1: Product: syz
[  377.273427][   T52] usb 5-1: Manufacturer: syz
[  377.276158][   T52] usb 5-1: SerialNumber: syz
[  377.327727][T13035] ocfs2: Unmounting device (7,5) on (node local)
[  377.355424][ T5921] m920x_read = error: -19
[  377.357425][ T5921] dvb-usb: error while querying for an remote control event.
[  377.466402][ T5921] m920x_read = error: -19
[  377.468139][ T5921] dvb-usb: error while querying for an remote control event.
[  377.501598][   T52] usb 5-1: 0:2 : does not exist
[  377.508845][   T52] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  377.524495][   T52] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5)
[  377.531446][   T52] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  377.551677][   T52] usb 5-1: 5:0: cannot get min/max values for control 8 (id 5)
[  377.574293][ T5921] m920x_read = error: -19
[  377.576025][ T5921] dvb-usb: error while querying for an remote control event.
[  377.684480][ T5921] m920x_read = error: -19
[  377.686257][ T5921] dvb-usb: error while querying for an remote control event.
[  377.794313][ T5921] m920x_read = error: -19
[  377.795682][ T5921] dvb-usb: error while querying for an remote control event.
[  377.929610][ T2201] m920x_read = error: -19
[  377.935001][ T2201] dvb-usb: error while querying for an remote control event.
[  378.224268][ T2201] m920x_read = error: -19
[  378.228875][ T2201] dvb-usb: error while querying for an remote control event.
[  378.269985][   T52] usb 5-1: USB disconnect, device number 23
[  378.335231][ T5891] m920x_read = error: -19
[  378.339439][ T5891] dvb-usb: error while querying for an remote control event.
[  378.368185][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  378.371241][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  378.454858][ T5891] m920x_read = error: -19
[  378.458942][ T5891] dvb-usb: error while querying for an remote control event.
[  378.652739][T13354] loop4: detected capacity change from 0 to 32768
[  378.664344][ T5891] m920x_read = error: -19
[  378.666109][ T5891] dvb-usb: error while querying for an remote control event.
[  378.682279][T13354] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2825 (13354)
[  378.693335][T13354] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  378.699569][T13354] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  378.766312][T13354] BTRFS info (device loop4): enabling ssd optimizations
[  378.769321][T13354] BTRFS info (device loop4): enabling free space tree
[  378.780760][ T5891] m920x_read = error: -19
[  378.787940][ T5891] dvb-usb: error while querying for an remote control event.
[  378.815869][ T9144] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  378.894855][ T5891] m920x_read = error: -19
[  378.896323][ T5891] dvb-usb: error while querying for an remote control event.
[  378.913695][T13387] loop5: detected capacity change from 0 to 4096
[  378.953634][T13387] ntfs3(loop5): Failed to load $Extend (-22).
[  378.970381][T13387] ntfs3(loop5): Failed to initialize $Extend.
[  379.004617][ T5891] m920x_read = error: -19
[  379.006474][ T5891] dvb-usb: error while querying for an remote control event.
[  379.340542][ T5891] m920x_read = error: -19
[  379.342463][ T5891] dvb-usb: error while querying for an remote control event.
[  379.488562][ T2201] m920x_read = error: -19
[  379.490449][ T2201] dvb-usb: error while querying for an remote control event.
[  379.594436][ T2201] m920x_read = error: -19
[  379.596184][ T2201] dvb-usb: error while querying for an remote control event.
[  379.615148][T13404] loop4: detected capacity change from 0 to 1024
[  379.653112][ T3558] hfsplus: b-tree write err: -5, ino 4
[  379.678287][T13396] loop5: detected capacity change from 0 to 40427
[  379.681476][T13396] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  379.683846][T13396] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  379.691230][T13396] F2FS-fs (loop5): invalid crc value
[  379.704376][ T2201] m920x_read = error: -19
[  379.706145][ T2201] dvb-usb: error while querying for an remote control event.
[  379.815147][ T2201] m920x_read = error: -19
[  379.816990][ T2201] dvb-usb: error while querying for an remote control event.
[  379.834605][T13396] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  379.845954][T13396] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  379.848756][T13396] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  379.912665][T13421] Driver unsupported XDP return value 0 on prog  (id 279) dev N/A, expect packet loss!
[  379.924363][ T2201] m920x_read = error: -19
[  379.926119][ T2201] dvb-usb: error while querying for an remote control event.
[  379.961908][T13425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2850'.
[  380.001358][ T5238] Bluetooth: hci1: unexpected event for opcode 0x0c24
[  380.040072][ T2201] m920x_read = error: -19
[  380.046594][ T2201] dvb-usb: error while querying for an remote control event.
[  380.164413][ T2201] m920x_read = error: -19
[  380.166197][ T2201] dvb-usb: error while querying for an remote control event.
[  380.274706][ T2201] m920x_read = error: -19
[  380.276575][ T2201] dvb-usb: error while querying for an remote control event.
[  380.387049][ T2201] m920x_read = error: -19
[  380.388496][ T2201] dvb-usb: error while querying for an remote control event.
[  380.769565][T13431] loop4: detected capacity change from 0 to 32768
[  380.788625][ T5891] m920x_read = error: -19
[  380.790408][ T5891] dvb-usb: error while querying for an remote control event.
[  380.894949][ T2201] m920x_read = error: -19
[  380.899072][ T2201] dvb-usb: error while querying for an remote control event.
[  380.949210][ T2201] kernel write not supported for file /sequencer (pid: 2201 comm: kworker/0:2)
[  381.014166][ T2201] m920x_read = error: -19
[  381.016110][ T2201] dvb-usb: error while querying for an remote control event.
[  381.246358][ T5891] m920x_read = error: -19
[  381.248175][ T5891] dvb-usb: error while querying for an remote control event.
[  381.255374][  T792] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  381.360266][ T5891] m920x_read = error: -19
[  381.362063][ T5891] dvb-usb: error while querying for an remote control event.
[  381.437082][  T792] usb 5-1: Using ep0 maxpacket: 16
[  381.445177][  T792] usb 5-1: New USB device found, idVendor=0403, idProduct=bca0, bcdDevice=e3.4b
[  381.448961][  T792] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.452157][  T792] usb 5-1: Product: syz
[  381.453759][  T792] usb 5-1: Manufacturer: syz
[  381.464631][  T792] usb 5-1: SerialNumber: syz
[  381.472325][  T792] usb 5-1: config 0 descriptor??
[  381.475346][ T5891] m920x_read = error: -19
[  381.477162][ T5891] dvb-usb: error while querying for an remote control event.
[  381.483140][  T792] ftdi_sio 5-1:0.0: Ignoring interface reserved for JTAG
[  381.556226][T13475] loop5: detected capacity change from 0 to 128
[  381.562380][T13475] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  381.585495][ T5891] m920x_read = error: -19
[  381.587342][ T5891] dvb-usb: error while querying for an remote control event.
[  381.612143][T13475] UDF-fs: error (device loop5): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  381.690617][ T5891] usb 5-1: USB disconnect, device number 24
[  381.695705][ T2201] m920x_read = error: -19
[  381.697565][ T2201] dvb-usb: error while querying for an remote control event.
[  381.707110][T13477] loop5: detected capacity change from 0 to 2048
[  381.725218][   T33] audit: type=1800 audit(1756522923.907:200): pid=13477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2874" name="file1" dev="loop5" ino=1346 res=0 errno=0
[  381.733211][   T33] audit: type=1800 audit(1756522923.907:201): pid=13477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2874" name="file1" dev="loop5" ino=1346 res=0 errno=0
[  381.807651][ T2201] m920x_read = error: -19
[  381.809443][ T2201] dvb-usb: error while querying for an remote control event.
[  381.914293][ T5921] m920x_read = error: -19
[  381.916057][ T5921] dvb-usb: error while querying for an remote control event.
[  382.024648][ T5921] m920x_read = error: -19
[  382.026384][ T5921] dvb-usb: error while querying for an remote control event.
[  382.044451][  T792] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  382.134529][ T5891] m920x_read = error: -19
[  382.136593][ T5891] dvb-usb: error while querying for an remote control event.
[  382.196202][  T792] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  382.200364][  T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  382.206177][  T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  382.209844][  T792] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  382.226622][  T792] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  382.230414][  T792] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  382.233583][  T792] usb 6-1: Manufacturer: syz
[  382.238177][  T792] usb 6-1: config 0 descriptor??
[  382.244447][ T5921] m920x_read = error: -19
[  382.247496][ T5921] dvb-usb: error while querying for an remote control event.
[  382.354230][ T5921] m920x_read = error: -19
[  382.358580][ T5921] dvb-usb: error while querying for an remote control event.
[  382.464220][ T5921] m920x_read = error: -19
[  382.466035][ T5921] dvb-usb: error while querying for an remote control event.
[  382.480880][T13484] loop4: detected capacity change from 0 to 32768
[  382.493110][T13484] JBD2: Ignoring recovery information on journal
[  382.526610][T13484] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  382.584296][ T5921] m920x_read = error: -19
[  382.586213][ T5921] dvb-usb: error while querying for an remote control event.
[  382.606339][ T9144] ocfs2: Unmounting device (7,4) on (node local)
[  382.650256][  T792] appleir 0003:05AC:8243.000F: unknown main item tag 0x0
[  382.660892][  T792] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[  382.694169][ T5921] m920x_read = error: -19
[  382.696037][ T5921] dvb-usb: error while querying for an remote control event.
[  382.805137][ T5921] m920x_read = error: -19
[  382.807091][ T5921] dvb-usb: error while querying for an remote control event.
[  382.855667][  T792] usb 6-1: USB disconnect, device number 3
[  382.914302][ T5891] m920x_read = error: -19
[  382.916161][ T5891] dvb-usb: error while querying for an remote control event.
[  383.062290][ T5891] m920x_read = error: -19
[  383.085818][T13492] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  383.590906][ T5891] dvb-usb: error while querying for an remote control event.
[  383.704308][ T5891] m920x_read = error: -19
[  383.706271][ T5891] dvb-usb: error while querying for an remote control event.
[  383.814256][ T5891] m920x_read = error: -19
[  383.823851][ T5891] dvb-usb: error while querying for an remote control event.
[  383.861155][T13508] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2887'.
[  383.864899][T13508] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2887'.
[  383.868424][T13508] netlink: 'syz.5.2887': attribute type 20 has an invalid length.
[  383.881081][T13095] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  383.881169][T13508] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2887'.
[  383.883825][T13095] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  383.883863][T13095] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  383.883879][T13095] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  383.899473][T13508] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2887'.
[  383.903391][T13508] netlink: 'syz.5.2887': attribute type 20 has an invalid length.
[  383.907716][   T52] usb 5-1: new low-speed USB device number 25 using dummy_hcd
[  383.934370][ T5921] m920x_read = error: -19
[  383.935943][ T5921] dvb-usb: error while querying for an remote control event.
[  384.042288][T13514] netlink: 'syz.5.2890': attribute type 29 has an invalid length.
[  384.045245][ T5921] m920x_read = error: -19
[  384.047058][ T5921] dvb-usb: error while querying for an remote control event.
[  384.068968][   T52] usb 5-1: No LPM exit latency info found, disabling LPM.
[  384.073108][   T52] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  384.076716][   T52] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  384.080727][   T52] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  384.090154][   T52] usb 5-1: string descriptor 0 read error: -22
[  384.094374][   T52] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  384.101919][   T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.118406][   T52] usb 5-1: 0:2 : does not exist
[  384.154162][ T5921] m920x_read = error: -19
[  384.155792][ T5921] dvb-usb: error while querying for an remote control event.
[  384.270959][ T5921] m920x_read = error: -19
[  384.272815][ T5921] dvb-usb: error while querying for an remote control event.
[  384.331657][T13526] netdevsim netdevsim5: Firmware load for './cgroup/../file0' refused, path contains '..' component
[  384.339444][   T52] usb 5-1: USB disconnect, device number 25
[  384.384163][ T5921] m920x_read = error: -19
[  384.385736][ T5921] dvb-usb: error while querying for an remote control event.
[  384.430860][T13535] loop5: detected capacity change from 0 to 1024
[  384.441042][T13535] hfsplus: failed to load attributes file
[  384.494190][ T5921] m920x_read = error: -19
[  384.496037][ T5921] dvb-usb: error while querying for an remote control event.
[  384.604416][ T5891] m920x_read = error: -19
[  384.606297][ T5891] dvb-usb: error while querying for an remote control event.
[  384.704304][T13537] loop5: detected capacity change from 0 to 40427
[  384.708399][T13537] F2FS-fs (loop5): build fault injection rate: 690
[  384.713700][T13537] F2FS-fs (loop5): invalid crc value
[  384.715370][ T5891] m920x_read = error: -19
[  384.717832][ T5891] dvb-usb: error while querying for an remote control event.
[  384.778956][T13537] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  384.783676][T13537] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  384.796217][T13537] bio_check_eod: 10 callbacks suppressed
[  384.796233][T13537] syz.5.2899: attempt to access beyond end of device
[  384.796233][T13537] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  384.824248][ T5891] m920x_read = error: -19
[  384.826646][ T5891] dvb-usb: error while querying for an remote control event.
[  384.829895][T13035] syz-executor: attempt to access beyond end of device
[  384.829895][T13035] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  384.834903][T13035] CPU: 1 UID: 0 PID: 13035 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  384.834915][T13035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  384.834922][T13035] Call Trace:
[  384.834926][T13035]  <TASK>
[  384.834931][T13035]  dump_stack_lvl+0x189/0x250
[  384.834950][T13035]  ? __pfx_dump_stack_lvl+0x10/0x10
[  384.834960][T13035]  ? __pfx_queue_work_on+0x10/0x10
[  384.834970][T13035]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  384.834984][T13035]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  384.835000][T13035]  f2fs_handle_critical_error+0x37c/0x540
[  384.835018][T13035]  f2fs_write_end_io+0x886/0xb60
[  384.835036][T13035]  __submit_merged_bio+0x27a/0x6a0
[  384.835051][T13035]  __submit_merged_write_cond+0x255/0x530
[  384.835066][T13035]  f2fs_write_data_pages+0x261d/0x3000
[  384.835096][T13035]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  384.835137][T13035]  ? folios_put_refs+0x559/0x640
[  384.835155][T13035]  ? __lock_acquire+0xab9/0xd20
[  384.835173][T13035]  ? do_raw_spin_lock+0x121/0x290
[  384.835194][T13035]  ? do_raw_spin_unlock+0x4d/0x240
[  384.835204][T13035]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  384.835216][T13035]  do_writepages+0x32e/0x550
[  384.835235][T13035]  ? do_raw_spin_unlock+0x4d/0x240
[  384.835246][T13035]  filemap_fdatawrite+0x199/0x240
[  384.835259][T13035]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  384.835295][T13035]  ? do_raw_spin_unlock+0x4d/0x240
[  384.835306][T13035]  f2fs_sync_dirty_inodes+0x31f/0x830
[  384.835324][T13035]  f2fs_write_checkpoint+0x95a/0x1df0
[  384.835345][T13035]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  384.835379][T13035]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  384.835388][T13035]  ? kfree+0x18e/0x440
[  384.835400][T13035]  ? kill_f2fs_super+0x298/0x6c0
[  384.835411][T13035]  kill_f2fs_super+0x2c3/0x6c0
[  384.835423][T13035]  ? __pfx_kill_f2fs_super+0x10/0x10
[  384.835429][T13035]  ? radix_tree_delete_item+0x2b6/0x400
[  384.835448][T13035]  ? shrinker_free+0x2ce/0x3e0
[  384.835459][T13035]  deactivate_locked_super+0xbc/0x130
[  384.835472][T13035]  cleanup_mnt+0x425/0x4c0
[  384.835482][T13035]  ? lockdep_hardirqs_on+0x9c/0x150
[  384.835496][T13035]  task_work_run+0x1d4/0x260
[  384.835510][T13035]  ? __pfx_task_work_run+0x10/0x10
[  384.835520][T13035]  ? __x64_sys_umount+0x122/0x160
[  384.835533][T13035]  ? exit_to_user_mode_loop+0x40/0x110
[  384.835575][T13035]  exit_to_user_mode_loop+0xec/0x110
[  384.835587][T13035]  do_syscall_64+0x2bd/0x3b0
[  384.835599][T13035]  ? lockdep_hardirqs_on+0x9c/0x150
[  384.835610][T13035]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.835618][T13035]  ? exc_page_fault+0x9f/0xf0
[  384.835630][T13035]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  384.835637][T13035] RIP: 0033:0x7f03f438ff17
[  384.835646][T13035] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  384.835653][T13035] RSP: 002b:00007ffd5eee3fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  384.835663][T13035] RAX: 0000000000000000 RBX: 00007f03f4411c05 RCX: 00007f03f438ff17
[  384.835669][T13035] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd5eee4070
[  384.835673][T13035] RBP: 00007ffd5eee4070 R08: 0000000000000000 R09: 0000000000000000
[  384.835678][T13035] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd5eee5100
[  384.835683][T13035] R13: 00007f03f4411c05 R14: 000000000005debd R15: 00007ffd5eee5140
[  384.835698][T13035]  </TASK>
[  384.835701][T13035] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  384.934253][ T5921] m920x_read = error: -19
[  385.061579][T13546] fuse: Bad value for 'fd'
[  385.068176][ T5921] dvb-usb: error while querying for an remote control event.
[  385.133725][T13551] loop4: detected capacity change from 0 to 512
[  385.137413][T13551] EXT4-fs: Ignoring removed i_version option
[  385.139656][T13551] EXT4-fs: Ignoring removed mblk_io_submit option
[  385.142592][T13551] EXT4-fs (loop4): Test dummy encryption mode enabled
[  385.149393][T13551] EXT4-fs error (device loop4): ext4_orphan_get:1392: comm syz.4.2905: inode #13: comm syz.4.2905: iget: illegal inode #
[  385.153562][T13551] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2905: couldn't read orphan inode 13 (err -117)
[  385.158475][T13551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  385.165901][T13551] EXT4-fs (loop4): shut down requested (1)
[  385.275034][ T5921] m920x_read = error: -19
[  385.277540][ T5921] dvb-usb: error while querying for an remote control event.
[  385.398461][ T5921] m920x_read = error: -19
[  385.400661][ T5921] dvb-usb: error while querying for an remote control event.
[  385.504851][ T5921] m920x_read = error: -19
[  385.507052][ T5921] dvb-usb: error while querying for an remote control event.
[  385.630837][ T5891] m920x_read = error: -19
[  385.632939][ T5891] dvb-usb: error while querying for an remote control event.
[  385.744122][ T5921] m920x_read = error: -19
[  385.748013][ T5921] dvb-usb: error while querying for an remote control event.
[  385.760095][ T9144] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.831394][T13560] loop5: detected capacity change from 0 to 32768
[  385.841083][T13560] (syz.5.2907,13560,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  385.847373][T13560] (syz.5.2907,13560,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  385.854307][ T5921] m920x_read = error: -19
[  385.859046][ T5921] dvb-usb: error while querying for an remote control event.
[  385.865511][T13560] JBD2: Ignoring recovery information on journal
[  385.921427][T13560] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  386.040401][ T5921] m920x_read = error: -19
[  386.042765][ T5921] dvb-usb: error while querying for an remote control event.
[  386.152293][T13035] ocfs2: Unmounting device (7,5) on (node local)
[  386.155818][ T5921] m920x_read = error: -19
[  386.157799][ T5921] dvb-usb: error while querying for an remote control event.
[  386.274562][ T5921] m920x_read = error: -19
[  386.276776][ T5921] dvb-usb: error while querying for an remote control event.
[  386.396619][ T5921] m920x_read = error: -19
[  386.398459][ T5921] dvb-usb: error while querying for an remote control event.
[  386.465910][T13592] vivid-001: disconnect
[  386.476850][T13590] vivid-001: reconnect
[  386.504426][ T5921] m920x_read = error: -19
[  386.506555][ T5921] dvb-usb: error while querying for an remote control event.
[  386.615060][ T5921] m920x_read = error: -19
[  386.617416][ T5921] dvb-usb: error while querying for an remote control event.
[  386.745169][ T5921] m920x_read = error: -19
[  386.746848][ T5921] dvb-usb: error while querying for an remote control event.
[  387.192177][ T5921] m920x_read = error: -19
[  387.195189][ T5921] dvb-usb: error while querying for an remote control event.
[  387.254155][T13617] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2931'.
[  387.304302][ T2201] m920x_read = error: -19
[  387.307659][ T2201] dvb-usb: error while querying for an remote control event.
[  387.390219][T13623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2934'.
[  387.414617][ T2201] m920x_read = error: -19
[  387.417884][ T2201] dvb-usb: error while querying for an remote control event.
[  387.525539][ T5921] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  387.530720][ T2201] m920x_read = error: -19
[  387.532386][ T2201] dvb-usb: error while querying for an remote control event.
[  387.646718][ T2201] m920x_read = error: -19
[  387.648566][ T2201] dvb-usb: error while querying for an remote control event.
[  387.689026][ T5921] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  387.693658][ T5921] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  387.698705][ T5921] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  387.701537][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  387.706146][ T5921] usb 6-1: SerialNumber: syz
[  387.758723][ T2201] m920x_read = error: -19
[  387.761029][ T2201] dvb-usb: error while querying for an remote control event.
[  387.877461][ T5891] m920x_read = error: -19
[  387.883541][ T5891] dvb-usb: error while querying for an remote control event.
[  387.916723][ T5921] usb 6-1: 0:2 : does not exist
[  387.928415][ T5921] usb 6-1: USB disconnect, device number 4
[  387.994144][ T5891] m920x_read = error: -19
[  387.995941][ T5891] dvb-usb: error while querying for an remote control event.
[  388.106013][ T5921] m920x_read = error: -19
[  388.107931][ T5921] dvb-usb: error while querying for an remote control event.
[  388.214615][ T5921] m920x_read = error: -19
[  388.216312][ T5921] dvb-usb: error while querying for an remote control event.
[  388.324258][ T5891] m920x_read = error: -19
[  388.325833][ T5891] dvb-usb: error while querying for an remote control event.
[  388.436451][ T5891] m920x_read = error: -19
[  388.438246][ T5891] dvb-usb: error while querying for an remote control event.
[  388.567165][ T5891] m920x_read = error: -19
[  388.569413][ T5891] dvb-usb: error while querying for an remote control event.
[  388.745068][   T24] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  388.938930][ T5891] m920x_read = error: -19
[  388.941091][ T5891] dvb-usb: error while querying for an remote control event.
[  388.958907][   T24] usb 6-1: config 8 has an invalid interface number: 177 but max is 0
[  388.962014][   T24] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  388.967214][   T24] usb 6-1: config 8 has no interface number 0
[  388.969594][   T24] usb 6-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  388.976489][   T24] usb 6-1: config 8 interface 177 has no altsetting 0
[  388.979480][   T24] usb 6-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  388.982776][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.993492][   T24] ir_toy 6-1:8.177: required endpoints not found
[  389.054695][ T5921] m920x_read = error: -19
[  389.056632][ T5921] dvb-usb: error while querying for an remote control event.
[  389.164341][ T5921] m920x_read = error: -19
[  389.166226][ T5921] dvb-usb: error while querying for an remote control event.
[  389.183504][T13645] loop4: detected capacity change from 0 to 256
[  389.189193][T13645] exfat: Deprecated parameter 'utf8'
[  389.201508][T13645] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  389.202918][ T5921] usb 6-1: USB disconnect, device number 5
[  389.275602][ T2201] m920x_read = error: -19
[  389.278564][ T2201] dvb-usb: error while querying for an remote control event.
[  389.385612][ T5921] m920x_read = error: -19
[  389.387375][ T5921] dvb-usb: error while querying for an remote control event.
[  389.494856][ T5921] m920x_read = error: -19
[  389.496931][ T5921] dvb-usb: error while querying for an remote control event.
[  389.606270][ T5921] m920x_read = error: -19
[  389.607840][ T5921] dvb-usb: error while querying for an remote control event.
[  389.714218][ T5921] m920x_read = error: -19
[  389.716009][ T5921] dvb-usb: error while querying for an remote control event.
[  389.826345][ T5921] m920x_read = error: -19
[  389.828184][ T5921] dvb-usb: error while querying for an remote control event.
[  389.888941][T13655] loop5: detected capacity change from 0 to 32768
[  389.892228][T13655] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section clean: entry type (unknown jset_entry_type 38) overruns end of section
[  389.892228][T13655] clean (size 2912):
[  389.892228][T13655] flags:          0
[  389.892228][T13655] journal_seq:    8
[  389.892228][T13655]                            log: 
[  389.892228][T13655] usage: type=key_version v=0
[  389.892228][T13655] usage: type=reserved v=0
[  389.892228][T13655] usage: type=reserved v=0
[  389.892228][T13655] usage: type=reserved v=0
[  389.892228][T13655] usage: type=reserved v=0
[  389.892228][T13655] data_usage: btree: 1/1 [0]=2816
[  389.892228][T13655] data_usage: journal: 1/1 [0]=0
[  389.892228][T13655] 
[  389.914930][T13655] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  389.934723][ T5921] m920x_read = error: -19
[  389.936229][ T5921] dvb-usb: error while querying for an remote control event.
[  390.030622][T13657] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2949'.
[  390.047969][ T5921] m920x_read = error: -19
[  390.054220][ T5921] dvb-usb: error while querying for an remote control event.
[  390.097751][T13661] loop5: detected capacity change from 0 to 16
[  390.111111][T13661] erofs (device loop5): mounted with root inode @ nid 36.
[  390.241225][ T2201] m920x_read = error: -19
[  390.243454][ T2201] dvb-usb: error while querying for an remote control event.
[  390.308869][T13670] 9pnet_fd: Insufficient options for proto=fd
[  390.419401][T13671] erofs (device loop5): inline data across blocks @ nid 36
[  390.422260][T13671] syz.5.2951: attempt to access beyond end of device
[  390.422260][T13671] loop5: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16
[  390.664336][ T5921] m920x_read = error: -19
[  390.668646][ T5921] dvb-usb: error while querying for an remote control event.
[  390.695524][T13668] syz.5.2951: attempt to access beyond end of device
[  390.695524][T13668] loop5: rw=0, sector=34359739344, nr_sectors = 8 limit=16
[  390.776027][ T5921] m920x_read = error: -19
[  390.778157][ T5921] dvb-usb: error while querying for an remote control event.
[  390.807108][T13667] loop4: detected capacity change from 0 to 32768
[  390.810615][T13667] XFS: noikeep mount option is deprecated.
[  390.818866][T13667] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  390.853191][T13667] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  390.866344][T13667] XFS (loop4): Starting recovery (logdev: internal)
[  390.884668][ T5921] m920x_read = error: -19
[  390.886765][ T5921] dvb-usb: error while querying for an remote control event.
[  390.887497][T13667] XFS (loop4): Ending recovery (logdev: internal)
[  390.978594][ T9144] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  391.034696][ T5921] m920x_read = error: -19
[  391.036562][ T5921] dvb-usb: error while querying for an remote control event.
[  391.145877][ T2201] m920x_read = error: -19
[  391.154394][ T2201] dvb-usb: error while querying for an remote control event.
[  391.255069][T13689] loop5: detected capacity change from 0 to 4096
[  391.264709][ T2201] m920x_read = error: -19
[  391.266586][ T2201] dvb-usb: error while querying for an remote control event.
[  391.483298][ T5921] m920x_read = error: -19
[  391.486613][ T5921] dvb-usb: error while querying for an remote control event.
[  391.911147][ T5921] m920x_read = error: -19
[  391.912924][ T5921] dvb-usb: error while querying for an remote control event.
[  391.958897][T13691] loop4: detected capacity change from 0 to 32768
[  392.024132][ T5921] m920x_read = error: -19
[  392.026039][ T5921] dvb-usb: error while querying for an remote control event.
[  392.052190][T13691] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  392.111831][T13705] loop5: detected capacity change from 0 to 1024
[  392.121728][T13691] XFS (loop4): Ending clean mount
[  392.134214][ T5921] m920x_read = error: -19
[  392.135967][T13691] XFS (loop4): Quotacheck needed: Please wait.
[  392.136171][ T5921] dvb-usb: error while querying for an remote control event.
[  392.148182][T13705] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  392.153297][T13705] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  392.196590][T13705] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.2963: lblock 0 mapped to illegal pblock 0 (length 6)
[  392.211456][T13691] XFS (loop4): Quotacheck: Done.
[  392.217479][T13705] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.2963: lblock 3 mapped to illegal pblock 3 (length 3)
[  392.244187][ T5921] m920x_read = error: -19
[  392.245117][T13705] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  392.245973][ T5921] dvb-usb: error while querying for an remote control event.
[  392.255948][T13705] EXT4-fs (loop5): This should not happen!! Data will be lost
[  392.255948][T13705] 
[  392.292044][ T1088] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 8: comm kworker/u10:4: lblock 8 mapped to illegal pblock 8 (length 8)
[  392.310722][ T1088] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  392.324081][ T1088] EXT4-fs (loop5): This should not happen!! Data will be lost
[  392.324081][ T1088] 
[  392.340150][T13035] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  392.357564][ T5921] m920x_read = error: -19
[  392.359288][ T5921] dvb-usb: error while querying for an remote control event.
[  392.461586][ T9144] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  392.466212][ T5921] m920x_read = error: -19
[  392.467986][ T5921] dvb-usb: error while querying for an remote control event.
[  392.574951][ T5921] m920x_read = error: -19
[  392.576754][ T5921] dvb-usb: error while querying for an remote control event.
[  392.684396][ T5921] m920x_read = error: -19
[  392.686314][ T5921] dvb-usb: error while querying for an remote control event.
[  392.727120][T13722] loop4: detected capacity change from 0 to 1024
[  392.766351][T13722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  392.770515][T13722] ext4 filesystem being mounted at /605/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  392.794212][ T5921] m920x_read = error: -19
[  392.795863][ T5921] dvb-usb: error while querying for an remote control event.
[  392.823456][ T9144] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  392.904279][ T5921] m920x_read = error: -19
[  392.906103][ T5921] dvb-usb: error while querying for an remote control event.
[  393.016604][ T5921] m920x_read = error: -19
[  393.018376][ T5921] dvb-usb: error while querying for an remote control event.
[  393.116932][T13732] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  393.190503][ T5891] m920x_read = error: -19
[  393.193039][ T5891] dvb-usb: error while querying for an remote control event.
[  393.304763][ T5891] m920x_read = error: -19
[  393.306788][ T5891] dvb-usb: error while querying for an remote control event.
[  393.576224][ T5891] m920x_read = error: -19
[  393.577950][ T5891] dvb-usb: error while querying for an remote control event.
[  393.697213][ T5891] m920x_read = error: -19
[  393.698993][ T5891] dvb-usb: error while querying for an remote control event.
[  393.804385][ T5891] m920x_read = error: -19
[  393.806543][ T5891] dvb-usb: error while querying for an remote control event.
[  393.914276][ T5891] m920x_read = error: -19
[  393.916176][ T5891] dvb-usb: error while querying for an remote control event.
[  394.031910][ T5891] m920x_read = error: -19
[  394.037231][ T5891] dvb-usb: error while querying for an remote control event.
[  394.082654][T13769] fuse: Bad value for 'fd'
[  394.092772][T13767] loop5: detected capacity change from 0 to 2048
[  394.099517][T13767] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  394.123931][T13772] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  394.154322][ T5891] m920x_read = error: -19
[  394.156249][ T5891] dvb-usb: error while querying for an remote control event.
[  394.274175][ T5921] m920x_read = error: -19
[  394.276016][ T5921] dvb-usb: error while querying for an remote control event.
[  394.385888][ T5921] m920x_read = error: -19
[  394.387753][ T5921] dvb-usb: error while querying for an remote control event.
[  394.494113][ T5921] m920x_read = error: -19
[  394.495866][ T5921] dvb-usb: error while querying for an remote control event.
[  394.596539][T13780] loop5: detected capacity change from 0 to 40427
[  394.600460][T13780] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  394.603732][T13780] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  394.612674][T13780] F2FS-fs (loop5): invalid crc value
[  394.614988][ T5891] m920x_read = error: -19
[  394.619642][ T5891] dvb-usb: error while querying for an remote control event.
[  394.687975][T13780] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  394.692903][T13780] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  394.697839][T13780] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  394.724208][ T5891] m920x_read = error: -19
[  394.725978][ T5891] dvb-usb: error while querying for an remote control event.
[  394.732397][T13780] syz.5.2994: attempt to access beyond end of device
[  394.732397][T13780] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  394.779313][T13035] syz-executor: attempt to access beyond end of device
[  394.779313][T13035] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  394.788436][T13035] CPU: 0 UID: 0 PID: 13035 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  394.788463][T13035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  394.788472][T13035] Call Trace:
[  394.788479][T13035]  <TASK>
[  394.788486][T13035]  dump_stack_lvl+0x189/0x250
[  394.788510][T13035]  ? __pfx_dump_stack_lvl+0x10/0x10
[  394.788526][T13035]  ? __pfx_queue_work_on+0x10/0x10
[  394.788539][T13035]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  394.788557][T13035]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  394.788583][T13035]  f2fs_handle_critical_error+0x37c/0x540
[  394.788635][T13035]  f2fs_write_end_io+0x886/0xb60
[  394.788665][T13035]  __submit_merged_bio+0x27a/0x6a0
[  394.788689][T13035]  __submit_merged_write_cond+0x255/0x530
[  394.788713][T13035]  f2fs_write_data_pages+0x261d/0x3000
[  394.788761][T13035]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  394.788843][T13035]  ? folios_put_refs+0x559/0x640
[  394.788867][T13035]  ? __pfx_folios_put_refs+0x10/0x10
[  394.788880][T13035]  ? rcu_is_watching+0x15/0xb0
[  394.788901][T13035]  ? __lock_acquire+0xab9/0xd20
[  394.788934][T13035]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  394.788954][T13035]  do_writepages+0x32e/0x550
[  394.788981][T13035]  ? do_raw_spin_unlock+0x4d/0x240
[  394.789002][T13035]  filemap_fdatawrite+0x199/0x240
[  394.789020][T13035]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  394.789076][T13035]  ? do_raw_spin_unlock+0x4d/0x240
[  394.789095][T13035]  f2fs_sync_dirty_inodes+0x31f/0x830
[  394.789121][T13035]  f2fs_write_checkpoint+0x95a/0x1df0
[  394.789156][T13035]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  394.789203][T13035]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  394.789216][T13035]  ? kfree+0x18e/0x440
[  394.789234][T13035]  ? kill_f2fs_super+0x298/0x6c0
[  394.789257][T13035]  kill_f2fs_super+0x2c3/0x6c0
[  394.789276][T13035]  ? __pfx_kill_f2fs_super+0x10/0x10
[  394.789288][T13035]  ? radix_tree_delete_item+0x2b6/0x400
[  394.789312][T13035]  ? shrinker_free+0x2ce/0x3e0
[  394.789329][T13035]  deactivate_locked_super+0xbc/0x130
[  394.789352][T13035]  cleanup_mnt+0x425/0x4c0
[  394.789368][T13035]  ? lockdep_hardirqs_on+0x9c/0x150
[  394.789389][T13035]  task_work_run+0x1d4/0x260
[  394.789410][T13035]  ? __pfx_task_work_run+0x10/0x10
[  394.789425][T13035]  ? __x64_sys_umount+0x122/0x160
[  394.789447][T13035]  ? exit_to_user_mode_loop+0x40/0x110
[  394.789469][T13035]  exit_to_user_mode_loop+0xec/0x110
[  394.789488][T13035]  do_syscall_64+0x2bd/0x3b0
[  394.789505][T13035]  ? lockdep_hardirqs_on+0x9c/0x150
[  394.789523][T13035]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.789536][T13035]  ? exc_page_fault+0x9f/0xf0
[  394.789556][T13035]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.789569][T13035] RIP: 0033:0x7f03f438ff17
[  394.789583][T13035] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  394.789595][T13035] RSP: 002b:00007ffd5eee3fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  394.789636][T13035] RAX: 0000000000000000 RBX: 00007f03f4411c05 RCX: 00007f03f438ff17
[  394.789645][T13035] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd5eee4070
[  394.789654][T13035] RBP: 00007ffd5eee4070 R08: 0000000000000000 R09: 0000000000000000
[  394.789662][T13035] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd5eee5100
[  394.789672][T13035] R13: 00007f03f4411c05 R14: 000000000006058b R15: 00007ffd5eee5140
[  394.789695][T13035]  </TASK>
[  394.790502][T13035] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  394.929508][ T5891] m920x_read = error: -19
[  394.931244][ T5891] dvb-usb: error while querying for an remote control event.
[  395.044297][ T5921] m920x_read = error: -19
[  395.046168][ T5921] dvb-usb: error while querying for an remote control event.
[  395.157894][ T5921] m920x_read = error: -19
[  395.159623][ T5921] dvb-usb: error while querying for an remote control event.
[  395.261889][T13810] 8021q: VLANs not supported on lo
[  395.268873][ T5921] m920x_read = error: -19
[  395.271222][ T5921] dvb-usb: error while querying for an remote control event.
[  395.310398][   T33] audit: type=1326 audit(1756522937.487:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13812 comm="syz.5.3009" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03f438ebe9 code=0x0
[  395.367000][T13817] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3010'.
[  395.381266][T13817] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3010'.
[  395.394276][ T5921] m920x_read = error: -19
[  395.396130][ T5921] dvb-usb: error while querying for an remote control event.
[  395.507079][ T5921] m920x_read = error: -19
[  395.509001][ T5921] dvb-usb: error while querying for an remote control event.
[  395.614346][ T5921] m920x_read = error: -19
[  395.616362][ T5921] dvb-usb: error while querying for an remote control event.
[  395.725470][ T5891] m920x_read = error: -19
[  395.727273][ T5891] dvb-usb: error while querying for an remote control event.
[  395.834743][ T5921] m920x_read = error: -19
[  395.841994][ T5921] dvb-usb: error while querying for an remote control event.
[  395.954656][ T5921] m920x_read = error: -19
[  395.958566][ T5921] dvb-usb: error while querying for an remote control event.
[  396.064151][ T5921] m920x_read = error: -19
[  396.066802][ T5921] dvb-usb: error while querying for an remote control event.
[  396.184422][ T5921] m920x_read = error: -19
[  396.186836][ T5921] dvb-usb: error while querying for an remote control event.
[  396.304602][ T5921] m920x_read = error: -19
[  396.306363][ T5921] dvb-usb: error while querying for an remote control event.
[  396.456587][T13851] loop5: detected capacity change from 0 to 32768
[  396.469812][T13851] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  396.508747][   T33] audit: type=1800 audit(1756522938.687:203): pid=13851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3028" name="file1" dev="loop5" ino=9553 res=0 errno=0
[  396.527317][ T5921] m920x_read = error: -19
[  396.540617][T13851] 
[  396.541610][T13851] ======================================================
[  396.544260][T13851] WARNING: possible circular locking dependency detected
[  396.546900][T13851] syzkaller #0 Not tainted
[  396.548716][T13851] ------------------------------------------------------
[  396.551928][T13851] syz.5.3028/13851 is trying to acquire lock:
[  396.554725][T13851] ffff88802b36a6c0 (&ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_del_inode_from_orphan+0x134/0x740
[  396.559971][T13851] 
[  396.559971][T13851] but task is already holding lock:
[  396.562797][T13851] ffff88802b37dd60 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_dio_end_io+0x389/0x10f0
[  396.566293][T13851] 
[  396.566293][T13851] which lock already depends on the new lock.
[  396.566293][T13851] 
[  396.569619][T13851] 
[  396.569619][T13851] the existing dependency chain (in reverse order) is:
[  396.572506][T13851] 
[  396.572506][T13851] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}:
[  396.575637][T13851]        lock_acquire+0x120/0x360
[  396.577629][T13851]        down_write+0x96/0x1f0
[  396.579539][T13851]        ocfs2_create_local_dquot+0x19d/0x1a40
[  396.581913][T13851]        ocfs2_acquire_dquot+0x80f/0xb30
[  396.583881][T13851]        dqget+0x7b1/0xf10
[  396.585470][T13851]        __dquot_initialize+0x3b3/0xcb0
[  396.587563][T13851]        ocfs2_get_init_inode+0x13b/0x1b0
[  396.589805][T13851]        ocfs2_mknod+0x863/0x2050
[  396.591375][T13851]        ocfs2_create+0x1a5/0x440
[  396.592940][T13851]        path_openat+0x14f4/0x3830
[  396.594683][T13851]        do_filp_open+0x1fa/0x410
[  396.596109][T13851]        do_sys_openat2+0x121/0x1c0
[  396.597835][T13851]        __x64_sys_openat+0x138/0x170
[  396.599625][T13851]        do_syscall_64+0xfa/0x3b0
[  396.601313][T13851]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.603555][T13851] 
[  396.603555][T13851] -> #2 (&dquot->dq_lock){+.+.}-{4:4}:
[  396.606536][T13851]        lock_acquire+0x120/0x360
[  396.608477][T13851]        __mutex_lock+0x187/0x1350
[  396.610103][T13851]        dqget+0x72a/0xf10
[  396.611785][T13851]        __dquot_initialize+0x3b3/0xcb0
[  396.613843][T13851]        ocfs2_get_init_inode+0x13b/0x1b0
[  396.615553][T13851]        ocfs2_mknod+0x863/0x2050
[  396.617408][T13851]        ocfs2_create+0x1a5/0x440
[  396.619312][T13851]        path_openat+0x14f4/0x3830
[  396.621238][T13851]        do_filp_open+0x1fa/0x410
[  396.623152][T13851]        do_sys_openat2+0x121/0x1c0
[  396.625248][T13851]        __x64_sys_openat+0x138/0x170
[  396.627390][T13851]        do_syscall_64+0xfa/0x3b0
[  396.629336][T13851]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.631806][T13851] 
[  396.631806][T13851] -> #1 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  396.635652][T13851]        lock_acquire+0x120/0x360
[  396.637634][T13851]        down_write+0x96/0x1f0
[  396.640086][T13851]        ocfs2_evict_inode+0x153d/0x40e0
[  396.642204][T13851]        evict+0x504/0x9c0
[  396.643861][T13851]        ocfs2_dentry_iput+0x247/0x370
[  396.645953][T13851]        __dentry_kill+0x209/0x660
[  396.647954][T13851]        dput+0x19f/0x2b0
[  396.649863][T13851]        __fput+0x68e/0xa70
[  396.652379][T13851]        task_work_run+0x1d4/0x260
[  396.654412][T13851]        exit_to_user_mode_loop+0xec/0x110
[  396.656499][T13851]        do_syscall_64+0x2bd/0x3b0
[  396.658556][T13851]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.660993][T13851] 
[  396.660993][T13851] -> #0 (&ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]){+.+.}-{4:4}:
[  396.664554][T13851]        validate_chain+0xb9b/0x2140
[  396.666452][T13851]        __lock_acquire+0xab9/0xd20
[  396.668376][T13851]        lock_acquire+0x120/0x360
[  396.670260][T13851]        down_write+0x96/0x1f0
[  396.672025][T13851]        ocfs2_del_inode_from_orphan+0x134/0x740
[  396.674405][T13851]        ocfs2_dio_end_io+0x479/0x10f0
[  396.676462][T13851]        dio_complete+0x25b/0x790
[  396.678397][T13851]        __blockdev_direct_IO+0x2e63/0x3490
[  396.680261][T13851]        ocfs2_direct_IO+0x25f/0x2d0
[  396.682220][T13851]        generic_file_direct_write+0x1db/0x3e0
[  396.684237][T13851]        __generic_file_write_iter+0x11d/0x230
[  396.686335][T13851]        ocfs2_file_write_iter+0x157a/0x1d10
[  396.688566][T13851]        iter_file_splice_write+0x975/0x10e0
[  396.690750][T13851]        direct_splice_actor+0x101/0x160
[  396.692792][T13851]        splice_direct_to_actor+0x5a8/0xcc0
[  396.696561][T13851]        do_splice_direct+0x181/0x270
[  396.698588][T13851]        do_sendfile+0x4da/0x7e0
[  396.700384][T13851]        __se_sys_sendfile64+0x13e/0x190
[  396.702584][T13851]        do_syscall_64+0xfa/0x3b0
[  396.704497][T13851]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.707033][T13851] 
[  396.707033][T13851] other info that might help us debug this:
[  396.707033][T13851] 
[  396.710759][T13851] Chain exists of:
[  396.710759][T13851]   &ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE] --> &dquot->dq_lock --> &ocfs2_quota_ip_alloc_sem_key
[  396.710759][T13851] 
[  396.717104][T13851]  Possible unsafe locking scenario:
[  396.717104][T13851] 
[  396.720007][T13851]        CPU0                    CPU1
[  396.722179][T13851]        ----                    ----
[  396.724300][T13851]   lock(&ocfs2_quota_ip_alloc_sem_key);
[  396.726530][T13851]                                lock(&dquot->dq_lock);
[  396.729329][T13851]                                lock(&ocfs2_quota_ip_alloc_sem_key);
[  396.732471][T13851]   lock(&ocfs2_sysfile_lock_key[ORPHAN_DIR_SYSTEM_INODE]);
[  396.735243][T13851] 
[  396.735243][T13851]  *** DEADLOCK ***
[  396.735243][T13851] 
[  396.738410][T13851] 3 locks held by syz.5.3028/13851:
[  396.740392][T13851]  #0: ffff888030ce2428 (sb_writers#23){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x160
[  396.744048][T13851]  #1: ffff88802b37e0c0 (&sb->s_type->i_mutex_key#37){+.+.}-{4:4}, at: ocfs2_file_write_iter+0x429/0x1d10
[  396.748473][T13851]  #2: ffff88802b37dd60 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_dio_end_io+0x389/0x10f0
[  396.752778][T13851] 
[  396.752778][T13851] stack backtrace:
[  396.755026][T13851] CPU: 1 UID: 0 PID: 13851 Comm: syz.5.3028 Not tainted syzkaller #0 PREEMPT(full) 
[  396.755046][T13851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  396.755056][T13851] Call Trace:
[  396.755066][T13851]  <TASK>
[  396.755074][T13851]  dump_stack_lvl+0x189/0x250
[  396.755098][T13851]  ? __pfx_dump_stack_lvl+0x10/0x10
[  396.755115][T13851]  ? __pfx__printk+0x10/0x10
[  396.755134][T13851]  ? print_lock_name+0xde/0x100
[  396.755154][T13851]  print_circular_bug+0x2ee/0x310
[  396.755172][T13851]  check_noncircular+0x134/0x160
[  396.755190][T13851]  validate_chain+0xb9b/0x2140
[  396.755205][T13851]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  396.755229][T13851]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  396.755252][T13851]  __lock_acquire+0xab9/0xd20
[  396.755278][T13851]  ? ocfs2_del_inode_from_orphan+0x134/0x740
[  396.755292][T13851]  lock_acquire+0x120/0x360
[  396.755311][T13851]  ? ocfs2_del_inode_from_orphan+0x134/0x740
[  396.755327][T13851]  ? do_raw_spin_unlock+0x4d/0x240
[  396.755345][T13851]  down_write+0x96/0x1f0
[  396.755358][T13851]  ? ocfs2_del_inode_from_orphan+0x134/0x740
[  396.755372][T13851]  ? __pfx_down_write+0x10/0x10
[  396.755394][T13851]  ocfs2_del_inode_from_orphan+0x134/0x740
[  396.755412][T13851]  ? ocfs2_dio_end_io+0x389/0x10f0
[  396.755460][T13851]  ? __pfx_ocfs2_del_inode_from_orphan+0x10/0x10
[  396.755476][T13851]  ? down_write+0x162/0x1f0
[  396.755490][T13851]  ? __pfx_down_write+0x10/0x10
[  396.755503][T13851]  ? ocfs2_direct_IO+0x25f/0x2d0
[  396.755517][T13851]  ? __generic_file_write_iter+0x11d/0x230
[  396.755536][T13851]  ? ocfs2_file_write_iter+0x157a/0x1d10
[  396.755549][T13851]  ? iter_file_splice_write+0x975/0x10e0
[  396.755570][T13851]  ocfs2_dio_end_io+0x479/0x10f0
[  396.755589][T13851]  ? __pfx_ocfs2_dio_end_io+0x10/0x10
[  396.755610][T13851]  ? __lock_acquire+0xab9/0xd20
[  396.755632][T13851]  ? do_raw_spin_lock+0x121/0x290
[  396.755650][T13851]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  396.755667][T13851]  ? lockdep_hardirqs_on+0x9c/0x150
[  396.755687][T13851]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  396.755704][T13851]  ? __pfx_ocfs2_dio_end_io+0x10/0x10
[  396.755719][T13851]  dio_complete+0x25b/0x790
[  396.755741][T13851]  __blockdev_direct_IO+0x2e63/0x3490
[  396.755772][T13851]  ? __pfx___blockdev_direct_IO+0x10/0x10
[  396.755790][T13851]  ? __pfx_invalidate_inode_pages2_range+0x10/0x10
[  396.755811][T13851]  ? __pfx_ocfs2_dio_wr_get_block+0x10/0x10
[  396.755829][T13851]  ? filemap_write_and_wait_range+0x18a/0x320
[  396.755851][T13851]  ? __pfx_filemap_write_and_wait_range+0x10/0x10
[  396.755883][T13851]  ? __pfx_ocfs2_dio_wr_get_block+0x10/0x10
[  396.755899][T13851]  ocfs2_direct_IO+0x25f/0x2d0
[  396.755916][T13851]  generic_file_direct_write+0x1db/0x3e0
[  396.755933][T13851]  ? file_update_time+0x416/0x490
[  396.755949][T13851]  __generic_file_write_iter+0x11d/0x230
[  396.755965][T13851]  ? ocfs2_file_write_iter+0x1551/0x1d10
[  396.755979][T13851]  ocfs2_file_write_iter+0x157a/0x1d10
[  396.755992][T13851]  ? kasan_save_track+0x3e/0x80
[  396.756008][T13851]  ? __kasan_kmalloc+0x93/0xb0
[  396.756025][T13851]  ? __kmalloc_noprof+0x27a/0x4f0
[  396.756048][T13851]  ? __pfx_ocfs2_file_write_iter+0x10/0x10
[  396.756070][T13851]  ? splice_from_pipe_next+0x608/0x660
[  396.756092][T13851]  ? __asan_memset+0x22/0x50
[  396.756109][T13851]  iter_file_splice_write+0x975/0x10e0
[  396.756136][T13851]  ? __pfx_iter_file_splice_write+0x10/0x10
[  396.756156][T13851]  ? rcu_read_lock_any_held+0xb3/0x120
[  396.756175][T13851]  ? __pfx_iter_file_splice_write+0x10/0x10
[  396.756194][T13851]  direct_splice_actor+0x101/0x160
[  396.756215][T13851]  splice_direct_to_actor+0x5a8/0xcc0
[  396.756241][T13851]  ? __pfx_direct_splice_actor+0x10/0x10
[  396.756260][T13851]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  396.756283][T13851]  do_splice_direct+0x181/0x270
[  396.756303][T13851]  ? __pfx_do_splice_direct+0x10/0x10
[  396.756322][T13851]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  396.756346][T13851]  ? rw_verify_area+0x255/0x4d0
[  396.756365][T13851]  do_sendfile+0x4da/0x7e0
[  396.756378][T13851]  ? lockdep_hardirqs_on+0x9c/0x150
[  396.756405][T13851]  ? __pfx_do_sendfile+0x10/0x10
[  396.756453][T13851]  ? __se_sys_futex+0x36f/0x400
[  396.756474][T13851]  __se_sys_sendfile64+0x13e/0x190
[  396.756498][T13851]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  396.756520][T13851]  ? rcu_is_watching+0x15/0xb0
[  396.756536][T13851]  ? do_syscall_64+0xbe/0x3b0
[  396.756557][T13851]  do_syscall_64+0xfa/0x3b0
[  396.756577][T13851]  ? lockdep_hardirqs_on+0x9c/0x150
[  396.756595][T13851]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.756610][T13851]  ? exc_page_fault+0x9f/0xf0
[  396.756629][T13851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  396.756643][T13851] RIP: 0033:0x7f03f438ebe9
[  396.756657][T13851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  396.756670][T13851] RSP: 002b:00007f03f51ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  396.756686][T13851] RAX: ffffffffffffffda RBX: 00007f03f45c5fa0 RCX: 00007f03f438ebe9
[  396.756698][T13851] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[  396.756707][T13851] RBP: 00007f03f4411e19 R08: 0000000000000000 R09: 0000000000000000
[  396.756716][T13851] R10: 0000000020fffe82 R11: 0000000000000246 R12: 0000000000000000
[  396.756725][T13851] R13: 00007f03f45c6038 R14: 00007f03f45c5fa0 R15: 00007ffd5eee4d28
[  396.756741][T13851]  </TASK>
[  396.757227][ T5921] dvb-usb: error while querying for an remote control event.
[  397.184548][ T5921] m920x_read = error: -19
[  397.186506][ T5921] dvb-usb: error while querying for an remote control event.
[  397.237263][T13035] ocfs2: Unmounting device (7,5) on (node local)
[  397.294266][ T5921] m920x_read = error: -19
[  397.296060][ T5921] dvb-usb: error while querying for an remote control event.
[  397.405634][ T5891] m920x_read = error: -19
[  397.407525][ T5891] dvb-usb: error while querying for an remote control event.
[  397.514171][ T5891] m920x_read = error: -19
[  397.516209][ T5891] dvb-usb: error while querying for an remote control event.
[  397.625300][ T5891] m920x_read = error: -19
[  397.627084][ T5891] dvb-usb: error while querying for an remote control event.
[  397.744571][ T5891] m920x_read = error: -19
[  397.746285][ T5891] dvb-usb: error while querying for an remote control event.
[  397.854144][ T5891] m920x_read = error: -19
[  397.856196][ T5891] dvb-usb: error while querying for an remote control event.
[  397.964382][ T5891] m920x_read = error: -19
[  397.966859][ T5891] dvb-usb: error while querying for an remote control event.
[  398.084182][ T5891] m920x_read = error: -19
[  398.086801][ T5891] dvb-usb: error while querying for an remote control event.
[  398.194505][ T5891] m920x_read = error: -19
[  398.196236][ T5891] dvb-usb: error while querying for an remote control event.
[  398.304666][ T5891] m920x_read = error: -19
[  398.306691][ T5891] dvb-usb: error while querying for an remote control event.
[  398.414138][ T5921] m920x_read = error: -19
[  398.415992][ T5921] dvb-usb: error while querying for an remote control event.
[  398.535660][ T5921] m920x_read = error: -19
[  398.537741][ T5921] dvb-usb: error while querying for an remote control event.
[  398.644182][ T5921] m920x_read = error: -19
[  398.646000][ T5921] dvb-usb: error while querying for an remote control event.
[  398.754766][ T5921] m920x_read = error: -19
[  398.756568][ T5921] dvb-usb: error while querying for an remote control event.
[  398.864618][ T5921] m920x_read = error: -19
[  398.866452][ T5921] dvb-usb: error while querying for an remote control event.
[  398.974648][ T5921] m920x_read = error: -19
[  398.976353][ T5921] dvb-usb: error while querying for an remote control event.
[  399.085112][ T5921] m920x_read = error: -19
[  399.086909][ T5921] dvb-usb: error while querying for an remote control event.
[  399.204133][ T5921] m920x_read = error: -19
[  399.205996][ T5921] dvb-usb: error while querying for an remote control event.
[  399.314370][ T5921] m920x_read = error: -19
[  399.316316][ T5921] dvb-usb: error while querying for an remote control event.
[  399.425571][ T5921] m920x_read = error: -19
[  399.427372][ T5921] dvb-usb: error while querying for an remote control event.
[  399.544268][ T5921] m920x_read = error: -19
[  399.547207][ T5921] dvb-usb: error while querying for an remote control event.
[  399.654137][ T5891] m920x_read = error: -19
[  399.656005][ T5891] dvb-usb: error while querying for an remote control event.
[  399.764167][ T5891] m920x_read = error: -19
[  399.765850][ T5891] dvb-usb: error while querying for an remote control event.
[  399.874300][ T5891] m920x_read = error: -19
[  399.876875][ T5891] dvb-usb: error while querying for an remote control event.
[  399.994669][ T5891] m920x_read = error: -19
[  399.996634][ T5891] dvb-usb: error while querying for an remote control event.
[  400.114177][ T5891] m920x_read = error: -19
[  400.116142][ T5891] dvb-usb: error while querying for an remote control event.
[  400.224227][ T5891] m920x_read = error: -19
[  400.225999][ T5891] dvb-usb: error while querying for an remote control event.
[  400.334182][ T5891] m920x_read = error: -19
[  400.336027][ T5891] dvb-usb: error while querying for an remote control event.
[  400.454262][ T5891] m920x_read = error: -19
[  400.456134][ T5891] dvb-usb: error while querying for an remote control event.
[  400.565587][   T24] m920x_read = error: -19
[  400.567226][   T24] dvb-usb: error while querying for an remote control event.
[  400.674637][   T24] m920x_read = error: -19
[  400.676433][   T24] dvb-usb: error while querying for an remote control event.
[  400.784652][   T24] m920x_read = error: -19
[  400.786428][   T24] dvb-usb: error while querying for an remote control event.
[  400.895297][   T24] m920x_read = error: -19
[  400.897285][   T24] dvb-usb: error while querying for an remote control event.
[  401.004684][   T24] m920x_read = error: -19
[  401.006505][   T24] dvb-usb: error while querying for an remote control event.
[  401.114243][   T24] m920x_read = error: -19
[  401.115849][   T24] dvb-usb: error while querying for an remote control event.
[  401.224186][   T24] m920x_read = error: -19
[  401.226176][   T24] dvb-usb: error while querying for an remote control event.
[  401.334644][   T24] m920x_read = error: -19
[  401.336194][   T24] dvb-usb: error while querying for an remote control event.
[  401.444200][   T24] m920x_read = error: -19
[  401.446152][   T24] dvb-usb: error while querying for an remote control event.
[  401.554150][   T24] m920x_read = error: -19
[  401.556095][   T24] dvb-usb: error while querying for an remote control event.
[  401.664611][   T24] m920x_read = error: -19
[  401.666378][   T24] dvb-usb: error while querying for an remote control event.
[  401.774128][   T24] m920x_read = error: -19
[  401.776050][   T24] dvb-usb: error while querying for an remote control event.
[  401.884212][   T24] m920x_read = error: -19
[  401.886039][   T24] dvb-usb: error while querying for an remote control event.
[  401.994154][   T24] m920x_read = error: -19
[  401.996045][   T24] dvb-usb: error while querying for an remote control event.
[  402.104151][   T24] m920x_read = error: -19
[  402.105623][   T24] dvb-usb: error while querying for an remote control event.
[  402.215248][   T24] m920x_read = error: -19
[  402.217048][   T24] dvb-usb: error while querying for an remote control event.
[  402.324266][   T24] m920x_read = error: -19
[  402.326176][   T24] dvb-usb: error while querying for an remote control event.
[  402.434703][   T24] m920x_read = error: -19
[  402.436686][   T24] dvb-usb: error while querying for an remote control event.
[  402.544823][   T24] m920x_read = error: -19
[  402.546628][   T24] dvb-usb: error while querying for an remote control event.
[  402.654096][   T24] m920x_read = error: -19
[  402.655908][   T24] dvb-usb: error while querying for an remote control event.
[  402.764278][   T24] m920x_read = error: -19
[  402.766129][   T24] dvb-usb: error while querying for an remote control event.
[  402.874206][   T24] m920x_read = error: -19
[  402.875990][   T24] dvb-usb: error while querying for an remote control event.
[  402.984084][   T24] m920x_read = error: -19
[  402.985622][   T24] dvb-usb: error while querying for an remote control event.
[  403.095182][   T24] m920x_read = error: -19
[  403.096993][   T24] dvb-usb: error while querying for an remote control event.
[  403.204172][   T24] m920x_read = error: -19
[  403.205952][   T24] dvb-usb: error while querying for an remote control event.
[  403.314161][   T24] m920x_read = error: -19
[  403.316000][   T24] dvb-usb: error while querying for an remote control event.
[  403.424530][   T24] m920x_read = error: -19
[  403.426062][   T24] dvb-usb: error while querying for an remote control event.
[  403.534691][   T24] m920x_read = error: -19
[  403.536507][   T24] dvb-usb: error while querying for an remote control event.
[  403.644220][   T24] m920x_read = error: -19
[  403.646034][   T24] dvb-usb: error while querying for an remote control event.
[  403.754824][   T24] m920x_read = error: -19
[  403.756621][   T24] dvb-usb: error while querying for an remote control event.
[  403.864102][   T24] m920x_read = error: -19
[  403.865930][   T24] dvb-usb: error while querying for an remote control event.
[  403.974522][   T24] m920x_read = error: -19
[  403.975944][   T24] dvb-usb: error while querying for an remote control event.
[  404.084126][   T24] m920x_read = error: -19
[  404.085944][   T24] dvb-usb: error while querying for an remote control event.
[  404.194168][   T24] m920x_read = error: -19
[  404.195954][   T24] dvb-usb: error while querying for an remote control event.
[  404.304456][   T24] m920x_read = error: -19
[  404.306075][   T24] dvb-usb: error while querying for an remote control event.
[  404.414162][   T24] m920x_read = error: -19
[  404.416047][   T24] dvb-usb: error while querying for an remote control event.
[  404.524152][   T24] m920x_read = error: -19
[  404.525999][   T24] dvb-usb: error while querying for an remote control event.
[  404.634642][   T24] m920x_read = error: -19
[  404.636562][   T24] dvb-usb: error while querying for an remote control event.
[  404.744196][   T24] m920x_read = error: -19
[  404.746103][   T24] dvb-usb: error while querying for an remote control event.
[  404.855296][   T24] m920x_read = error: -19
[  404.857283][   T24] dvb-usb: error while querying for an remote control event.
[  404.964131][   T24] m920x_read = error: -19
[  404.966026][   T24] dvb-usb: error while querying for an remote control event.
[  405.074091][   T24] m920x_read = error: -19
[  405.075464][   T24] dvb-usb: error while querying for an remote control event.
[  405.184465][   T24] m920x_read = error: -19
[  405.185893][   T24] dvb-usb: error while querying for an remote control event.
[  405.294099][   T24] m920x_read = error: -19
[  405.295901][   T24] dvb-usb: error while querying for an remote control event.
[  405.404125][   T24] m920x_read = error: -19
[  405.406216][   T24] dvb-usb: error while querying for an remote control event.
[  405.514168][   T24] m920x_read = error: -19
[  405.515907][   T24] dvb-usb: error while querying for an remote control event.
[  405.624552][   T24] m920x_read = error: -19
[  405.626194][   T24] dvb-usb: error while querying for an remote control event.
[  405.734116][   T24] m920x_read = error: -19
[  405.735971][   T24] dvb-usb: error while querying for an remote control event.
[  405.844153][   T24] m920x_read = error: -19
[  405.846047][   T24] dvb-usb: error while querying for an remote control event.
[  405.954111][   T24] m920x_read = error: -19
[  405.955984][   T24] dvb-usb: error while querying for an remote control event.
[  406.065295][   T24] m920x_read = error: -19
[  406.067032][   T24] dvb-usb: error while querying for an remote control event.
[  406.174607][   T24] m920x_read = error: -19
[  406.176342][   T24] dvb-usb: error while querying for an remote control event.
[  406.284717][   T24] m920x_read = error: -19
[  406.286642][   T24] dvb-usb: error while querying for an remote control event.
[  406.394135][   T24] m920x_read = error: -19
[  406.396015][   T24] dvb-usb: error while querying for an remote control event.
[  406.504418][   T24] m920x_read = error: -19
[  406.505998][   T24] dvb-usb: error while querying for an remote control event.

VM DIAGNOSIS:
03:02:18  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b44cfb RBX=1ffff11026cc7f61 RCX=0000000000080000 RDX=ffffc90028f21000
RSI=000000000007ffff RDI=0000000000080000 RBP=ffffc90003fbf6c0 RSP=ffffc90003fbf540
R8 =ffffffff8fa38a37 R9 =1ffffffff1f47146 R10=dffffc0000000000 R11=fffffbfff1f47147
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b44ce3 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fcbbc7266c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcbbc725fc8 CR3=000000002fa18000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fcbbbb97498 00007fcbbbb97470 XMM03=00007fcbbbb974a8 00007fcbbbb974a0
XMM04=00007fcbbc6fd100 00007fcbbbb97460 XMM05=00007fcbbbb97478 00007fcbbbb974c0
XMM06=00007fcbbbb974b8 00007fcbbbb974b0 XMM07=00007fcbbbb974a8 00007fcbbbb974a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fcbbba12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000035 RBX=0000000000000035 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000035f4 RDI=00000000000035f5 RBP=00000000000003f8 RSP=ffffc9000277e130
R8 =ffff88801b3e8237 R9 =1ffff1100367d046 R10=dffffc0000000000 R11=ffffffff854f3380
R12=dffffc0000000000 R13=ffffffff99afa8c9 R14=ffffffff99def420 R15=0000000000000000
RIP=ffffffff854f33fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f03f51ce6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcbbc726d58 CR3=000000002331a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 00007f03f4412e53
XMM06=0000000000000000 00007f03f4412e4d XMM07=0000000000000000 00007f03f4412e61
XMM08=0000000000000000 00007f03f4412ee7 XMM09=0000000000000000 00007f03f4412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
