last executing test programs:

2m55.068834719s ago: executing program 0 (id=37):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="6e6f696e6c696e655f78617474722c6163746976655f6c6f67733d342c6e6f646973636172642c6661756c745f696e6a656374696f6e3d30303030303030303030303030303034313136302c6661756c745f747970653d30303030303030303030303030303030303030362c757365725f78617474722c6661756c745f747970653d30303030303030303030303030303030303030352c66617374626f6f742c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c000ce7e2bf64dcc28850d7c8cf301d9de5c501d9ade9ad845686de6a35fa221f313b4c91877885fc16c59409ba21606e7a10449f72c116fb28d8200197557459c9da918f1bbd23a76fadc2865d92a6b4ef01e0671b4d5ab76f74158fd07a9fa2c9b53c236172a2bac6c66d71804b6177e921a00856789660ecf7733680fd7d62d3a5b3c6204e59c01b6ee4754fd6d3598005214a0711cf8759006f48e66c0f6615957508eaf0aac8e72d6457dc2f557f6293b142786d356d543bf2882162490d9c633e96cc75ac796fcb5c8e79b6c6bd0268b9"], 0x21, 0x5548, &(0x7f00000058c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2, 0x9, 0xfffffffffffffff7})

2m54.376002758s ago: executing program 0 (id=38):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
syz_clone(0x80001100, 0x0, 0x0, 0x0, 0x0, 0x0)

2m54.048783306s ago: executing program 0 (id=44):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000008b00))

2m53.999099127s ago: executing program 0 (id=46):
syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00af268263b121dc03d7d9b98b9cdb76841d31005b31fdfd141b652968fbeae7aac982a517703dc5950f6728aecf5ec337b119ffd66d0a02970718ba573db352906385cece74366e628b6a775c9a6f6fff046416c6240e39a647186c4cf0b360bd17d4cdbd912dc61fd24e6f17d8"], 0x1, 0x152, &(0x7f00000007c0)="$eJzs0E1LKnEUx/Hf3Bnlcq/eBzKwFia0aEjMacRatdBIEtKBwk0rwSYKFCOhXBrRrkXQ1oXlVnwLlrWxRgh7E23cBS0n/o7Rw67977MZ5nsOh2FWlnoqgoAMx3KpuLdvlsvmVnDdSCc3ntrtuOhuAD8/zZ39qziwI54KMDgCRL7xAtu7BXMuXyqI90EcUAEkfjtdg7P7SzSf0+YhSaKp00Bn3Gn6aO9ji47apAIk/r7fsy+AGXHv/9s94BlApRZquZCxbNu2xfeepEJTY5LTm3cZq5sKzwbMUz050fD4ZWTN20skhvPHSDf8EGk1+z0rvWakjV5U1xeimqJpsb5xb6Vi1TMoq54DYPPLPTf8ASULHEvA+XA2uJa8ADr1F6P4Z7E++tfVQzkISJVaPud3NXK+fz8gq5BARERERERERERERERERET0Xa8BAAD//wFeZcY=")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000240)=ANY=[], 0x25, 0x2)

2m53.949510925s ago: executing program 0 (id=47):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000003c00)=ANY=[@ANYBLOB="e00000001000090500c63703b60000000000d00008004300ff030000a90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27d08000000337c000400bf852c8986626691b01b5f44e4ce28715f2d"], 0xe0}], 0x1}, 0x0)

2m53.767806028s ago: executing program 0 (id=48):
ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000040)={0x3, 0x200, 0xb, 0xf6d5, 0x9d1, 0x6, 0x7, 0x10, 0x80000001, 0x80000000, 0xffffff5f, 0x6, 0x8, 0xfffffffc})
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005f0001"], 0x1c}], 0x1, 0x0, 0x0, 0x44000}, 0x4)

2m53.593980881s ago: executing program 32 (id=48):
ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000040)={0x3, 0x200, 0xb, 0xf6d5, 0x9d1, 0x6, 0x7, 0x10, 0x80000001, 0x80000000, 0xffffff5f, 0x6, 0x8, 0xfffffffc})
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005f0001"], 0x1c}], 0x1, 0x0, 0x0, 0x44000}, 0x4)

2.466256703s ago: executing program 2 (id=1812):
mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=f', @ANYRESHEX, @ANYRESHEX, @ANYBLOB="eeb6f8d8574e252f0eca60fbbbd6b066c7d37037ea2e4f3383fecc9230ec02cdb9b0e53a78a0de9953"])

2.346188569s ago: executing program 2 (id=1813):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0)
rmdir(&(0x7f0000000080)='./cgroup/../file0\x00')

2.186647695s ago: executing program 2 (id=1814):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x0, 0x0})
io_uring_enter(r3, 0x3f70, 0x0, 0x0, 0x0, 0x0)

1.120689405s ago: executing program 2 (id=1818):
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x29d})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}, 0x1})
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1c})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1})
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000002c0)='/\x00')

1.024510206s ago: executing program 2 (id=1822):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1, &(0x7f00000000c0)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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")
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000001480)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)='./file0/file0\x00')

827.508434ms ago: executing program 3 (id=1828):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4)

819.137359ms ago: executing program 2 (id=1829):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$eJzs3U1vHVf9B/DfffC147RpVP1V5R+xcFMeWkrznEB5asqCBSxAQl2TyHWrlBRQEhCtIuLKC8QGeAmw6YZFJV4BL6CvASGxJVLSVReUQWOf44xvrn3tJp659vl8pJuZ35w7vmfyveOZ65m5EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/OD7PznXi4irv04Tjkc8FYOIfsSRul6KeuRKfv4wIk7EenM8FxGD+Yh6/vV/nom4GBEfH4u4/+DOcj35/C77cens7Zuf/fB7//jdH9dOvPPmTz8cb//x/1346Pd3I47/6NWPPrv7ZJYdAAAASlFVVdVLH/NPps/3/a47BQC0Im//qyRPV6vVavUTrf/Q38vznzradX/Vh7Ruqia72ywiYrU5T73P4HA8ABwwq/Fp112gQ/Iv2jAijnbdCWCm9bruAPvi/oM7y72Ub6+5PVjaaM9/p9yS/2pv8/qO7YbTjJ9j0tb7ay0G8ew2/TnSUh9mSc6/P57/1Y32UXrefufflu3yH21c+lScnP9gPP8xW/L/U0Qc2Pz7E/MvVc5/uJf8VwcHeP2XPwAAAAAAh1/++//xjo//zj/+ouzKTsd/l1rqAwAAAAAAAAA8aY97/79N7v8HAAAAM6v+rF7787GH07b7LrZ6+hu9iKfHng8UZqnx5YAAAAAAAAAAAAAAQDuGEYvpvP65iHh6cbGqqvrRNF7v1ePOf9CVvvxQsq5/yQMAwIaPj41dy9+LWIiIN9J3/c0tLi5W1VxELFZH5vP+7Gh+oTrS+Fybh/W0+dEudoiHo6r+YQuN+ZqmfV6e1j7+8+rXGlWDXXSsHR0GDgARsbE1um+LdMhU1TPR9V4OB4P1//Cx/rMbXb9PAQAAgP1XVVXVS1/nfTId8+933SkAoBV5+z9+XECtVquLqT/ZmDgz/VGr97Fuqia72ywiYrU5T73P4Hb8AHDArManXXeBDsm/aMOIONF1J4CZ1uu6A+yL+w/uLPdSvr3m9mBpoz2fC7Il/9Xe+nx5/knDacbPMWnr/bUWg3h2m/4811IfZknOvz+e/9WN9nyL/818FvYn/7Zsl3+9nMc76E/Xcv6D8fzH7Pf635a16E/Mv1Q5/+Ge8h/IHwAAAAAAZlj++/9xx3/zIgMAAAAAAADAgXP/wZ3lfN1rPv7/hQnP6zXHXP95aOT8e7vO3/W/h0nOvz+e/9gJOYPG+L3XH+b/yYM7yx/e/vf/5+HM5z83GNWvPdfrD4bpnJ9q7q24HjdiJc4+8vzhlvZzj7TPbWk/P6X9wiPto7r9SG4/Hcvxi7gRb262z085MWphSns1pT3nP7D+FynnP2w86vwXU3tvbFi790H/kfW+OZz0Olf++p8vP7p2tWG4pVqLweayNRyr/znVWp8eWv8/OTqKX91auXn6N9du3755LtJgy9TzkQZPWM5/Lj1y/i++sNGef+8319d7H4z2nP+sWIvhpPzX398vNMbr5X2p5b51Iec/So+cf94CTV7/D3L+E9f/9eV7uYP+AAAAAAAAAAAAAAAAwE6qqlq/RPRKRFxO1/90dW0mANCuvP2vkjxdre6g/tffZqs/arVavbXuzVh/PkfdVE32WrOIiL8356n3GX476YcBALPsvxHxz647QWfkX7D8fX/18ItddwZo1a333v/ZtRs3Vm7e6ronAAAAAAAAAMDnle//udS4//P6eUBj943ecv/X12PpwN7/sz8arN/rPC3Q87Hz/b9Pxc73/x5Oeb25Ke2jKe3zU9oXprRPvNCjIef/fMo4538yLVhJ9399sYP+dC3nfyrd6znn/5Wx5zXzr/5ykPPvb8n/zO13f3nm1nvvv3L93Wtvr7y98vNzZy9fvHDp4oVLl868df3GytmNfzvs8f7K+ed7XzsPtCw5/5y5/MuS8/9SquVflpT/5m6o/MuS1/+8vyf/suT882cf+Zcl5/9SquVflpz/V1Mt/7Lk/F9OtfzLkvP/WqrlX5ac/yupln9Zcv6nUy3/suT8z6Ra/mXJ+ecjXPIvS84/n9kg/7Lk/M+nWv5lyflfSLX8y5Lzv5hq+Zcl538p1fIvS87/cqrlX5ac/9dTLf+y5Py/kWr5lyXn/2qq5V+WnP83Uy3/suT8v5Vq+Zcl5//tVO+U/zst9ot25Py/k2rrf1ly/t9NtfzLkvN/LdXyL8vD7/83sueRxdnoRpsjVRUxA90wsu8jXf9mAgAAAAAAAAAAAADGtXE6cdfLCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX27jVGrrO+H/izV6+TQPwnIYQQiO1cMGST3fUtMcFgrv809JIGQksLdYy9dgy+1buGBKFmaWgLAqmR2hf0RSkgQEhtlahCKpUoilSk9k1VXhVFlVArIdWVoDIRVKICtjpznufZmdnZmV3vrj1zzueD4p+9M2fmmTNnZve76DsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABotuNts380FEIo/mv8sS2E64q/bw2Hin8u7L/aKwQAAADW6+eNP//q+vyFQ6vYqOk6//iaf/n64uLiYvjgixd/8SeLi/mC7SGMbAmhcVnyTz/9yWLzdaKnw8TQcNO/h3vc/UiPy0d7XD7W4/LxHpdv6XH5RI/Ll+2AZbaWv49p3Ngdjb9uK3dpuDGMNS67o8NWTw9tGR5Ov8tpGGpsszh2PJwMp8JsmF62zVDjfyF8c0dxXw+GdF/DTfd1awjh0o8+fjStYSju4ztCy501ND93P3xL2P7ijz5+9KvzP3hlp9lzNyxbaQi7dhbr/GQIS7+uCkNhS94naZ3DTeu8tcM6R1rWOdTYrvh7+zovrXKd6XFPxHV+p8s6b41fe+L2EMJCWPE67Z4Ow+GatnvN+3uiPCKK2yieypeF0TUdJztWcZwU23z/9tbjpP2YTPt/R9wnoyusofnp+OEnxpft98s9TopH3Q/HanHbDxd3OjHR/KvVlmO1uM7H71z5GOj43HU4BvKx3HQM7Ox1DAyPjzSOgeGlNe9sOQZmlm0zHIYa93Xxzu7HwNT86XNTc09+7J6Tp4+cmD0xe2Zmev/ePfv27tm3b+r4yVOz0+Wfa9ulA+SaMJyPwZ3xvSYdg69tu27zIbn4xY17HUz0yeugeOzvuatY0HXDYYVjvLjOJ3et/3WQv+83vQ5Gm14HHd9TO7wORlfxOiiuc2nX6r5njjb912kNm/VeuK3pGLia3w+L+3z/61Z+L7w1rutTr1/r98ORZcdAelhD8bVXfCX/vDdxf9wvy4+LW4oLrh0PF+Zmz9/7xJH5+fMzIY4r4oam56r9eLmm6TGFZcfL8JqPl0N/+bO7bunw9W1xX03cvfRcjXd4Horr7J3s/lw13t0778+Wr+4OcWywK70/O303K/ZnzhJdjv3iOp+8Z/0/C+Zc0vT+N9br/W9kbLR8/xvJe2Os5f1v+VMz0lhZCJfuWd3731j870q//93YJ+9/xb56/73dj4HiOp+aWusxMNr1/e/2OIfiel4XE8NEU+7/RePyhfIwbXouex43o6Nj8bgZTffYetzsWbZNcWvFfe+avrzjZtftrc9Vy88tFTxuin31p9Pdj5viOs/PrP+9Y2v6a9N7x3ivY2BsZLxY71g+CMr3u8Wt6Ri4NxwNZ8OpcCxvUzzLxX1N7l7dMTAe/7vS7x0398kxUOyrz+3ufgwU1/n2no392WlX/Eq+TtPPTu2/X1gp898yunR77bttozN/sc637+3+u6HiOj/Yu9ac0X0/3R2/cm2H/dT++lnpmD4Wrsx+ujmu89S+7r+bKq5z4/5VHk+HQggvzLzQ+H1X/P3u31z416+3/N630++UX5h54aGpR767lvUDAHD5ftH4c2G8/Fmz6f+xXs3//w8AAAAMhJT7h+PM5H8AAACojJT7R+LM5H8AAACojJT7R+PMapL/H7//wLM/fyrkTwNcjNLlaTc8/KbyeqnjvRD/vX1xSfH1t3557NlPP7W6+x4OIfzsoVd1vP7jb0rrKp1L63xD69eXufm2Vd3/Y48uXa/58xMuHShvPz2e1R4Gqav8zandjdvd/uRMYz7/UGjMRxY+9XR5++W/0/Uv7imv/+fxQ0sOHR9q2X5XXM8dcW6Pnynz8KGl/VDMtN2zt77mH25479L9pe2Gdr608TA/93vl7abPiHrmhvL66XGvtP6//8zXni2u/8Sdndf/1HDn9V+Mt/v9OH96sLx+8z7/dNP6/yCuP91f2u7eL32r4/qfe0V5/eficfGFONvX/5Y/fvXPOz1f6X4OPVBul+5/+n/2NrZLt5duv339E0/NtOyP9tt//sXydg5+5McjzddPX0/3kzz2QOvxPRSf35YeeQjha38YWvZzeGO53d+1rT/d3rkHOq//7rZ1nhu6rbH90uPZ1vK4Pv+V3R0fb1rPob/e1vJ4nnlH3H8vTn27uN2Lj8TjMV7+v98pb6/9s0yfe0fr+026/he2la/bdHtTbet/pm39C7cV+673+h98sVz/c2/e0rL+Q++Mx9OD5ey1/hN/cX3L9l/8avl8nP/o5JmzcxdOHosPZlvb63jLxNZrrr3uJS+9Pr6Xtv/78Nn5x2fPb5/ePh3C9gH8yMDNXv+X4vzvcixs/D2Uvvvj8rj77LvK71uv/Un572fi1x+Lz2f6/vj5PxtrOV7bn/eFN5dzvet/fVzHar3iM/9xW4cv/+eyz/y9+IFvXvjb3/9B+88F6fGce/lE4/F9bsdNjcuGni8vb3+/6uXfX976uv7e6HRjfiPu18X4ycw7byrvr/3202eTfPbd5es3/SSXtg9tnyeybaT1cax3/d+LP8d86+bW9790fHzjqbZPc94WhoolLMT3h7BQXp6ulfb3Zy/d1PH+0ufwhIVXrmWZK5p7cm7q1MkzF56Ymp+dm5+ae/Jjh0+fvXBm/nDjs0sPf6jX9kuv72sar+9js/v3hsar/Ww5NtnVXv+5R48eu2/6rmOzx49cOD7/6LnZ8yeOzs0dnT02d9eR48dnP9pr+5PHDs7sPrDnvt2TJ04eO3j/gQN7DkyePHO2WEa5qB72T3948sz5w41N5g7uPTCzb9/e6cnTZ4/NHrxvenryQq/tG9+bJoutPzJ5fvbUkfmTp2cn505+bPbgzIH9+3f3/PTH0+eOz22fOn/hzNSFudnzU+Vj2T7f+HLxva/X9tTD3Nn4ftdmKP50/r679+fPxy18+RMr3lR5ldYfT8MP42dBpe9vvf6dcv9YnFlN8j8AAADUQcr98YP/ly6Q/wEAAKAyUu7fEmcm/wMAAEBlpNw/EWdWk/yv/6//r/+v/6//fwX7/0H/f6Pp/29I/385/f9V0f/X/9f/1/+nu37r/6fcvzWEWuZ/AAAAqIOU+6+JM5P/AQAAoDJS7r82zkz+BwAAgMpIuf+6OLN65P+x9r/q/+v/6/839//TdfX/g/6//v9l0v/X/+9G/1//f5DX34f9/636//Sbfuv/p9z/kjizeuR/AAAAqIWU+18aZyb/AwAAQGWk3H99nJn8DwAAAJWRcv+2OLOa5P8NPP//Z+JF+v/6/4Pe/z+djmPn/9f/1/9fP/1//f9u9P/1/wd5/X3Y/3f+f/pOv/X/U+7/f3FmNcn/AAAAUAcp978szkz+BwAAgMpIuf+GODP5HwAAACoj5f4b48xqkv83sP/v/P/6/1Xp/zed/1//v5n+v/7/5dD/1//vRv9f/3/j1z8Uf0zQ/++1vf4/V0K/9f9T7n95nFlN8j8AAADUQcr9N8WZyf8AAABQGSn3vyLOTP4HAACAyki5/+Y4s5rkf/1//X/9f/1//X/9/82k/6//343+v/7/IK9f/1//n976rf+fcv8r48xqkv8BAACgDlLuvyXOTP4HAACAyki5/1VxZvI/AAAAVEbK/bfGmdUk/+v/91X//8mg/7+8/z+s/6//X1pr/79hoff69f8312D1/4dXvET/v6T/30r/X/9f/1//n+76rf+fcv+r48xqkv8BAACgDlLuf02cmfwPAAAAlZFy/21xZvI/AAAAVEbK/dvjzGqS//X/+6r/7/z/zv+v/+/8/0v9//kh/f9VcP5//f+g/3/ZrnZ/ftDXr/+v/09v/db/T7l/R5xZTfI/AAAA1EHK/TvjzOR/AAAAqIyU+2+PM5P/AQAAoDJS7r8jzqwm+V///zL7/1tb/6n/33n9+v/6//r/zv+v/6//343+v/7/IK9f/391/f/xXjdEpfVb/z/l/jvjzGqS/wEAAKAOUu6/K85M/gcAAIDKSLn/tXFm8j8AAABURsr9u+LMapL/9f+d/1//X/9f/1//fzPp/6+6/7/1cta1Kf3/9Car/9+T/r/+/6D0/yc6bO/8/1wJ/db/T7n/dXFmNcn/AAAAUAcp978+zkz+BwAAgMpIuf/uODP5HwAAACoj5f7JOLOa5H/9f/1//X/9f/1//f/NVNX+f34fdf5//X/9f/3/Te7/f2WF7Qfl/P/UW7/1/1PuvyfOrCb5HwAAAOog5f5748zkfwAAAKiMlPun4szkfwAAAKiMlPun48xqkv+r3/9vbxaX9P9L+v/6/0H/X/9/k1W1/99+/v8Qgv6//n+m/6//32/n/+9E/58rYf39//G8SePPdfb/U+6fiTOrSf4HAACAOki5f3ecmfwPAAAAlZFy/544M/kfAAAAKiPl/r1xZjXJ/9Xv/3em/1/S/9f/D/r/+v+brC79f+f/Ly/X/y/p/+v/6//r/9fRcIevrb//v7RJ48919v9T7t8XZ1aT/A8AAAB1kHL//jgz+R8AAAAqI+X+++LM5H8AAACojJT7748zq0n+1//X/9f/1//v3/5/6/1vXv//v/T/N5H+v/5/N/r/+v+DvH79f/1/etvY/v/16+7/p9x/IM6sJvkfAAAA6iDl/jfEmcn/AAAAUBkp9z8QZyb/AwAAwEDpdB7CJOX+N8aZ1ST/6/9Xvf+/uEX/X/9/cPv/rfvT+f/1/zuJb5/6/6tUr/7/1mX3p//f6mr35wd9/fr/+v/0trH9/2U/nq65/59y/8E4s5rkfwAAAKiDlPvfFGcm/wMAAEBlpNz/5jgz+R8AAAAqI+X+Q3FmNcn/+v9V7//33/n/h8Lg9v9H9f/1//X/18z5//X/u3H+/8Hs/6fP3dD/75/+f3EM6f/Tj/qt/59y/1vizGqS/wEAAKAOUu5/a5yZ/A8AAACVkXL/2+LM5H8AAACojJT73x5nVpP8r/+v/+/8/87/r/+v/7+Z9P/1/7vR/x/M/n+i/98//X/n/6df9Vv/P+X+d8SZ1ST/AwAAQB2k3P/OODP5HwAAACoj5f7/H2cm/wMAAEBlpNz/YJxZTfJ/hfr/Y3Hq/+v/6//r/zfo//cH/X/9/270//X/B3n9+v/6//TWb/3/lPt/Kc6sJvkfAAAA6iDl/ofizOR/AAAAqIyU+98VZyb/AwAAQGWk3P/LcWY1yf8V6v+X+vT8/8P59vX/9f/1//X/9f830oD2/yf0/0v6//r/g7x+/X/9f3rrt/5/yv2/EmdWk/wPAAAAdZBy/6/Gmcn/AAAAUBkp9/9anJn8DwAAAJWRcv/DcWY1yf/6/87/r/+v/9+3/f/R1v2p/6//38mA9v+d/z/S/9f/H+T16//r/9Nbv/X/U+7/9TizmuR/AAAAqIOU+x+JM5P/AQAAoDJS7n93nJn8DwAAAJWRcv974sxqkv/1//X/9f/1//u2/9+2P/X/+7X//29dL9X/1//vRv9f/3+Q16//r/9Pb/3W/0+5/9E4s5rkfwAAAKiDlPvfG2cm/wMAAEBlpNz/G3Fm8j8AAABURsr9vxlnNpj5f3itG+j/6//r/+v/r7r/vxBC0P/X/18j/f/l/f/iPexq9v/HV3NF/f9V0f/X/9f/1/+nu37r/6fc/744s8HM/wAAAEAHKff/VpyZ/A8AAACVkXL/b8eZyf8AAABQGSn3vz/OrCb5X/9f/1//X//f+f/1/zeT/n+9zv8/HvT/g/6//r/+v/4/Wb/1/1Pu/0CcWU3yPwAAANRByv2/E2cm/wMAAEBlpNx/OM5M/gcAAIDKSLn/sTizmuR//f+r1P/fWl5f/1//vzr9/0X9f/3/jvT/69X/d/7/kv6//r/+v/4/pX7r/6fcfyTOrCb5HwAAAOog5f4PxpnJ/wAAAFAZKfcfjTOT/wEAAKAyUu4/FmdWk/yv/+/8//r/+v/O/6//v5n0//X/u9H/1/8f5PXr/+v/01u/9f9T7p+NM6tJ/gcAAIA6SLn/eJyZ/A8AAACVkXL/iTgz+R8AAAAqI+X+x+PMapL/9f/1/1fV/x8L+v/6//r/+v+XRf9f/78b/X/9/0Fev/6//j+9bVz//583pP+fcv/JOLOa5H8AAACog5T7PxRnJv8DAABAZaTc/+E4M/kfAAAAKiPl/lNxZjXJ//r/+v/O/1/B/v+o/n/Q/+8b+v/6/93o/+v/D/L69f/1/+ltKGxU/z9sSP8/5f7TcWY1yf8AAABQByn3n4kzk/8BAACgMlLuPxtnJv8DAABAZaTcfy7OrCb5X/9f/1//v4L9f+f/b9D/7w/6//r/3ej/6/8P8vr1//X/6W3jzv+/Mf3/lPt/N86sJvkfAAAA6iDl/v9j7z6a5LyrPY63riWPVK5bd3X3vAV27OAd+DWwYUuRc44GTE4m55yTiSbnnIPJORlMBkOVKWvOOfZIPd2t0fT08/zP57PgMGaseayhxvUr1beee8ct9j8AAAAMI3f/feIW+x8AAACGkbv/vnFLk/2v/9f/6//1//p//f826f/1/6vo/+fT/59Z8vfr//X/+n/WmVr/n7v/fnFLk/0PAAAAHeTuv3/cYv8DAADAMHL3PyBusf8BAABgGLn7Hxi3NNn/+n/9v/5/Mv3/fuen/9f/6/8vif5f/7/Ydf9/Lj4YvP9fRv+v/9f/s87U+v/c/Q+KW5rsfwAAAOggd/+D4xb7HwAAAIaRu/8hcYv9DwAAAMPI3f/QuKXJ/tf/6//H7f/35tb/e/9/fl9H7P9P3f5l9f/HS/+v/1/suv9v8v7/ZfT/+n/9P+tMrf/P3f+wuKXJ/gcAAIAOcvc/PG6x/wEAAGAYufsfEbfY/wAAADCM3P2PjFua7H/9v/5/3P5/du//1//n93WI/v9c/Tre/6//1/8fTv+v/5/z8+v/9f+sN7X+P3f/o+KWJvsfAAAAOsjd/+i4xf4HAACAYeTuf0zcYv8DAADAMHL3PzZuabL/9f/6f/2//l//fwLv/9f/6//1/0vp//X/c35+/b/+n/Wm1v/n7n9c3NJk/wMAAEAHufsfH7fY/wAAADCM3P1PiFvsfwAAABhG7v4nxi1N9v+l9f+n9P+H0P8vf379v/5f/6//1//r/1fR/+v/5/z8+n/9P+ttvf+/+przd9P+P3f/NXFLk/0PAAAAHeTuf1LcYv8DAADAMHL3Pzlusf8BAABgGLn7nxK3NNn/S/r/KxYzfv//2c2+tP4/vv7B/v/WU/p//f80+/9b4qeM/l//f7F59/9n9f876//39P8r+/nNfif0//p//T/rbL3/X9P7X/hx7v5r45Ym+x8AAAA6yN3/1LjF/gcAAIBh5O5/Wtxi/wMAAMAwcvc/PW5psv8v7f3/0+//vf9/t+//z193C/3/mWXPr//v0v/v8/5//f8y8+7/vf9/i/3/PfI30/v/D7frfn7uz7+q/7/rBs+v/6eDqfX/ufufEbc02f8AAADQQe7+Z8Yt9j8AAAAMI3f/s+IW+x8AAACGkbv/2XFLg/1/Wv9fz5H0/97/v1H/f27/79f/H3we/b/+fxn9v/5/ld29/1//v5hAPz/35/f+//X9/1XrfhGGN7X+P3f/c+KWBvsfAAAAusjd/9y4xf4HAACAYeTuf17cYv8DAADAMHL3Pz9uabL/9f/6f/2/9/9fVv9/xTb6/9NLfz/1//r/ZfT/+v+F/v/Idt3Pz/359f/e/896U+v/c/dfF7fU8Dt9hH9KAAAAYEpy978gbmny5/8AAADQQe7+F8Yt9j8AAAAMI3f/i+KWJvtf/6//1//r/73/X/+/Tfr/4fr/U/r/2+n/9f/6f/0/q02t/8/d/+K4pcn+BwAAgA5y978kbrH/AQAAYBi5+18at9j/AAAAMIzc/S+LW5rsf/2//l//r//X/+v/t0n/P1z/7/3/d6D/1//r//X/rDa1/j93/8vjlib7HwAAADrI3f+KuMX+BwAAgGHk7n9l3GL/AwAAwDBy978qbpnd/r+woN2M/l//r//X/+v/9f/bNP3+/8xGn6X/36f/P2hb/f/ZQ76e/n9az388/X9+9/X/jGkC/f/d7vhx7v5Xxy2z2/8AAADAYXL3vyZusf8BAABgGLn7Xxu32P8AAAAwjNz9r4tbmuz/w/r/m6/a/9/X9P/5G6b/j6v/1/8v9P9F/6//X8yi/9+M/n+f/v8g7//X/3v/v/6f1SbQ/x/4OHf/6+OWJvsfAAAAOsjd/4a4xf4HAACAYeTuf2PcYv8DAADAMHL3vyluabL/vf9f/6//1//r//X/26T/1/+vMqP+f2/ZX9T/6//1//p/Vpta/5+7/81xS5P9DwAAAB3k7n9L3GL/AwAAwDBy9781brH/AQAAYBi5+98WtzTZ//p//f/O+///GbL/P/+I+n/9v/5f/6//X21G/f9S+n/9v/5f/89qU+v/c/e/PW5psv8BAACgg9z974hb7H8AAAAYRu7+d8Yt9j8AAAAMI3f/u+KWJvtf/6//33n/7/3/Rf8f31f9v/7/Euj/9f8L/f+R7bqfn/vz6//1/6w3tf4/d/+745Ym+x8AAAA6yN3/nrjF/gcAAIBh5O6/Pm6x/wEAAGAYufvfG7c02f/6f/2//l//r//X/2+T/l//v8rJ9v/X3qz/P2jX/fzcn1//r/9nvan1/7n73xe3NNn/AAAA0EHu/vfHLfY/AAAADCN3/wfiFvsfAAAAhpG7/4NxS5P9r/+fe/9/95viCabW/+en6P/1/yv7/73FxfT/+v9Lof/X/y+28v7/C39SLKf/1//r//X/rHZi/f89r77XXW77L2v6/9z9H4pbmux/AAAA6CB3/w1xi/0PAAAAw8jd/+G4xf4HAACAYeTu/0jc0mT/9+j/z1z0aeP0/97/r/+fdP+fP1S9/1//r//X/y813f5/M/p//b/+X//PalN7/3/u/o/GLU32PwAAAHSQu/9jcYv9DwAAAMPI3f/xuMX+BwAAgGHk7v9E3NJk//fo/y+m/9937P3/rf+n/9f/l03e/6//1/9fLv2//n+h/z+yXffzc3/+ofv/Uwv9P8diav1/7v5Pxi1N9j8AAAB0kLv/U3GL/Q8AAADDyN3/6bjF/gcAAIBh5O7/TNxw5//d3SOdKP2//t/7//X/+n/9/zbp/4/Q/586vfFz6f/36f+PZtf9/Nyff+j+3/v/OSZT6/9z9382bvHn/wAAADCM3P2fi1vsfwAAABhG7v7Pxy32PwAAAAxgv3fP3f+FuKXJ/l/T/+/l5x25/z93+NfW/+v/F/p//b/+X/9/mYbs/y+B/n+f/v9odt3Pz/35Z9f/X3/wQ/0/J2FJ/3/+J/Gu+v/c/V+MW5rsfwAAAOggd/+X4hb7HwAAAIaRu//LcYv9DwAAAMPI3f+VuKXJ/l/a/+95/7/+X/+v/1/o//X/x0L/r/9fRf+v/5/z88+u/7+A/p+TMLX3/+fu/2rc0mT/AwAAQAe5+78Wt9j/AAAAMIzc/V+PW+x/AAAAGEbu/m/ELU32/5r3/+v/N/tH0f/r/5f+/0H/r//fsP8/s9D/H5n+X/+/0P8f2a77+bk//+X0/+f0/zQxtf4/d/8345Ym+x8AAAA6yN3/rbjF/gcAAIBh5O7/dtxi/wMAAMAwcvd/J25psv9H7v9XfZr+f5/+X/+/0P9Pof/3/v/LoP/X/y/0/0e2635+7s/v/f/6f9abWv+fu/+7cUuT/Q8AAAAd5O7/Xtxi/wMAAMAwcvffuFjcYP8DAADAmG48/59nF9+PW5rs/5H7/1X0//v0//r/hf5f/79l+n/9/yr6f/3/nJ9f/6//Z72p9f+5+38QtzTZ/wAAANBB7v4fxi32PwAAAAwjd/+P4hb7HwAAAIaRu//HcUuT/a//1//r//X/+n/9/zbp//X/q+j/9f9zfn79v/6f9abW/+fu/0nc0mT/AwAAQAe5+38at9j/AAAAMIzc/T+LW+x/AAAAGEbu/p/HLU32v/5f/6//1//r//X/26T/1/+vov/X/8/5+fX/+n/Wm1r/n7v/F3FLk/0PAAAAHeTu/2XcYv8DAADAMHL3/ypusf8BAABgGLn7fx23NNn/+v/bnuNc/XX9v/5f/6//T/r/49G2/7/tX6v6/7X0//r/OT+//l//z3pT6/9z9/8mbmmy/wEAAKCD3P2/jVvsfwAAABhG7v7fxS32PwAAAAwjd//v45Ym+1//7/3/+n/9/zz6/yv1//r/pSbb/3v//0b0//r/OT+//l//z3pT6/9z998UtzTZ/wAAANBB7v4/xC32PwAAAAwjd/8f4xb7HwAAAIaRu//muKXJ/tf/6/+H7P/39P/j9f/e/z/L/v9O+n/9/2r6f/3/nJ9f/6//Z72p9f+5+/8UtzTZ/wAAANBB7v4/xy32PwAAAAwjd/9f4hb7HwAAAIaRu/+vcUuT/a//1/8P2f97/7/+X/8/Gfp//f8q+n/9/5yfX/+v/2e9qfX/ufv/Frc02f8AAADQQe7+v8ct9j8AAAAMI3f/P+IW+x8AAACGkbv/n3FLk/2v/9f/6//1//p//f826f/n2/9fuThC/3/dQv+v/9f/6//1/5Sp9f+5+/8VtzTZ/wAAANBB7v5b4pal+///T+ipAAAAgOOUu//fcYs//wcAAIBh5O7/T9zSZP/r//X/+n/9v/5f/79N+v/59v/e/7+e/l//r//X/7Pa1Pr/3P3/DQAA///E7/7M")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4242, 0x5c)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x0)

726.58948ms ago: executing program 3 (id=1830):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"})
r1 = syz_open_pts(r0, 0x80)
r2 = dup3(r1, r0, 0x80000)
ioctl$TIOCGSERIAL(r2, 0x541e, 0x0)

506.127367ms ago: executing program 3 (id=1834):
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)

505.884812ms ago: executing program 1 (id=1835):
r0 = syz_open_dev$sndctrl(&(0x7f0000002800), 0x1f, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000002880)={{0x7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 'syz0\x00', 0x0})

437.045883ms ago: executing program 3 (id=1836):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x2, &(0x7f0000000000))
pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x4)

386.959976ms ago: executing program 1 (id=1837):
syz_io_uring_setup(0x4a88, &(0x7f0000000580)={0x0, 0x226f, 0x800, 0x0, 0x2f6}, &(0x7f0000000040), 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48)

386.76196ms ago: executing program 3 (id=1838):
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8b}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400e0dc14"], 0xdd12}], 0x1}, 0x20040051)

306.831012ms ago: executing program 1 (id=1839):
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000015c0), 0x80, 0x0)

306.553863ms ago: executing program 1 (id=1840):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
pipe(&(0x7f00000000c0)={<r1=>0xffffffffffffffff})
ioprio_set$uid(0x3, 0x0, 0x0)
io_setup(0x3ff, &(0x7f0000000500)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0x0}])

306.056642ms ago: executing program 3 (id=1841):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
syz_mount_image$udf(&(0x7f0000000500), &(0x7f00000000c0)='./file3\x00', 0x0, &(0x7f0000000700)=ANY=[], 0x3, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=")
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = dup(r2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000"], 0x0, 0x5e, 0x0, 0x1}, 0x28)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x3e, 0x10b, 0xfffffffc, 0x25dfdbfd, {0x4, 0x7c}, [@nested={0x8, 0x136, 0x0, 0x1, [@typed={0x4, 0x2, 0x0, 0x0, @binary}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
write$UHID_INPUT(r3, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006)
r4 = fanotify_init(0x200, 0x0)
ptrace$peeksig(0x4209, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x2}, &(0x7f0000000140)=[{}, {}])
fanotify_mark(r4, 0x39, 0x1a, r0, 0x0)
fanotify_mark(r4, 0x1, 0x4800003e, r0, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0x0, 0x0, 0x90eb, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000540)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x200, 0x20000, 0x40000000000, 0x801, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x3, 0x0, 0x100000001]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)

129.87291ms ago: executing program 1 (id=1842):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x37, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x20050800)

0s ago: executing program 1 (id=1843):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {0x6}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@li, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x2}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

kernel console output (not intermixed with test programs):

n process `syz.2.366'.
[  107.046340][ T6965] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  107.049992][ T6965] IPv6: NLM_F_CREATE should be set when creating new route
[  107.059157][ T6965] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  107.385273][ T6976] netlink: 'syz.1.375': attribute type 1 has an invalid length.
[  107.943679][ T7014] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  108.025266][ T7016] support for cryptoloop has been removed.  Use dm-crypt instead.
[  108.098846][ T7021] loop3: detected capacity change from 0 to 512
[  108.169474][ T7009] loop2: detected capacity change from 0 to 32768
[  108.170673][ T7021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.179217][ T7021] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.187553][ T7009] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  108.219417][ T6032] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.222531][ T7009] XFS (loop2): Ending clean mount
[  108.296811][ T5854] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  108.649079][ T7045] syz.2.402 uses obsolete (PF_INET,SOCK_PACKET)
[  108.658539][ T7047] loop3: detected capacity change from 0 to 1024
[  108.673485][ T7047] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  108.688277][ T7047] EXT4-fs (loop3): group descriptors corrupted!
[  108.836491][ T5911] hid (null): global environment stack underflow
[  108.840567][ T5911] hid (null): unknown global tag 0xe
[  108.868308][ T5911] hid-generic 0005:0B57:000F.0002: reserved main item tag 0xe
[  108.871604][ T5911] hid-generic 0005:0B57:000F.0002: global environment stack underflow
[  108.874849][ T5911] hid-generic 0005:0B57:000F.0002: item 0 1 1 11 parsing failed
[  108.905942][ T5911] hid-generic 0005:0B57:000F.0002: probe with driver hid-generic failed with error -22
[  109.235078][ T5911] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  109.405098][ T5911] usb 4-1: Using ep0 maxpacket: 16
[  109.418926][ T5911] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  109.422961][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.426601][ T5911] usb 4-1: Product: syz
[  109.428474][ T5911] usb 4-1: Manufacturer: syz
[  109.430568][ T5911] usb 4-1: SerialNumber: syz
[  109.436849][ T5911] usb 4-1: config 0 descriptor??
[  109.446738][ T5911] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  109.912832][   T33] audit: type=1326 audit(1755078135.260:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7070 comm="syz.1.413" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f54d8ebe9 code=0x7ffe0000
[  111.120194][ T7082] capability: warning: `syz.2.417' uses deprecated v2 capabilities in a way that may be insecure
[  111.164297][ T5911] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71
[  111.183691][ T5911] usb 4-1: USB disconnect, device number 3
[  112.085607][  T975] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  112.116367][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'.
[  112.119442][ T7128] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  112.122583][ T7128] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  112.451415][  T975] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  112.458291][  T975] usb 2-1: New USB device found, idVendor=0565, idProduct=0001, bcdDevice=57.66
[  112.465124][  T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.468279][  T975] usb 2-1: Product: syz
[  112.469955][  T975] usb 2-1: Manufacturer: syz
[  112.471814][  T975] usb 2-1: SerialNumber: syz
[  112.478259][  T975] usb 2-1: config 0 descriptor??
[  112.486905][  T975] belkin_sa 2-1:0.0: Belkin / Peracom / GoHubs USB Serial Adapter converter detected
[  112.493473][  T975] usb 2-1: bcdDevice: 5766, bfc: 0
[  112.504826][  T975] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0
[  112.698965][   T47] usb 2-1: USB disconnect, device number 8
[  112.711992][   T47] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0
[  112.730445][   T47] belkin_sa 2-1:0.0: device disconnected
[  112.835469][ T5911] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  113.305385][ T5911] usb 3-1: Using ep0 maxpacket: 8
[  113.308606][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.311647][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  113.316735][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  113.320411][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  113.323893][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  113.329129][ T5911] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  113.345381][ T5911] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  113.348784][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.351611][ T5911] usb 3-1: Product: syz
[  113.353368][ T5911] usb 3-1: Manufacturer: syz
[  113.358527][ T5911] usb 3-1: SerialNumber: syz
[  113.363954][ T5911] usb 3-1: config 0 descriptor??
[  113.370197][ T7139] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  113.380251][ T5911] ati_remote 3-1:0.0: ati_remote_probe: Unexpected endpoint_out
[  113.628233][ T5910] usb 3-1: USB disconnect, device number 4
[  114.431265][ T7188] netlink: 132 bytes leftover after parsing attributes in process `syz.1.466'.
[  114.509972][ T7191] loop3: detected capacity change from 0 to 4096
[  114.512736][ T7194] wireguard0: entered promiscuous mode
[  114.515104][ T7194] wireguard0: entered allmulticast mode
[  114.550519][ T7191] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  114.568312][ T7191] ntfs3(loop3): Failed to load $Extend (-22).
[  114.572789][ T7191] ntfs3(loop3): Failed to initialize $Extend.
[  115.356986][ T7217] netlink: 56 bytes leftover after parsing attributes in process `syz.1.477'.
[  115.360297][ T7217] netlink: 56 bytes leftover after parsing attributes in process `syz.1.477'.
[  115.858528][ T7230] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  116.828774][ T5911] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  117.016837][ T5911] usb 3-1: config 0 has an invalid interface number: 83 but max is 0
[  117.021545][ T5911] usb 3-1: config 0 has no interface number 0
[  117.023491][ T5911] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61
[  117.029160][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.042790][ T5911] usb 3-1: config 0 descriptor??
[  117.061952][ T5911] ttusbir 3-1:0.83: cannot find expected altsetting
[  117.278522][ T5911] usb 3-1: USB disconnect, device number 5
[  117.908738][ T7277] loop2: detected capacity change from 0 to 1024
[  117.942630][ T7277] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.984081][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.445237][ T7326] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  119.455359][   T10] IPVS: starting estimator thread 0...
[  119.567250][ T7330] IPVS: using max 44 ests per chain, 105600 per kthread
[  119.585798][ T5910] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  119.785365][ T5910] usb 3-1: Using ep0 maxpacket: 8
[  119.816834][ T5910] usb 3-1: unable to get BOS descriptor or descriptor too short
[  119.870276][ T5910] usb 3-1: config 0 has an invalid interface number: 88 but max is 0
[  119.879640][ T5910] usb 3-1: config 0 has no interface number 0
[  119.889632][ T5910] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  119.902951][ T5910] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[  119.920239][ T5910] usb 3-1: config 0 interface 88 has no altsetting 0
[  119.994577][ T5910] usb 3-1: string descriptor 0 read error: -22
[  120.010830][ T5910] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  120.033227][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  120.127176][ T5910] usb 3-1: config 0 descriptor??
[  120.146906][ T5910] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input6
[  120.219877][ T5853] udevd[5853]: Error opening device "/dev/input/event3": Input/output error
[  120.223390][ T5853] udevd[5853]: Unable to EVIOCGABS device "/dev/input/event3"
[  120.226784][ T5853] udevd[5853]: Unable to EVIOCGABS device "/dev/input/event3"
[  120.346868][ T5910] usb 3-1: USB disconnect, device number 6
[  120.805100][  T975] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  120.956573][  T975] usb 2-1: config 8 has an invalid interface number: 223 but max is 0
[  120.959227][  T975] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  120.962334][  T975] usb 2-1: config 8 has no interface number 0
[  120.964270][  T975] usb 2-1: config 8 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  120.975718][  T975] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.45
[  120.978849][  T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.981367][  T975] usb 2-1: Product: syz
[  120.982634][  T975] usb 2-1: Manufacturer: syz
[  120.984471][  T975] usb 2-1: SerialNumber: syz
[  121.040181][ T7377] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  121.319229][  T975] usb 2-1: USB disconnect, device number 9
[  121.621323][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.556'.
[  121.692586][ T7397] netlink: 'syz.3.558': attribute type 1 has an invalid length.
[  121.755888][ T7401] loop3: detected capacity change from 0 to 128
[  121.921668][ T7406] program syz.1.562 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  122.129882][ T5911] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  122.365086][   T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  122.519263][   T10] usb 2-1: Using ep0 maxpacket: 16
[  122.534561][   T10] usb 2-1: config 0 has an invalid interface number: 104 but max is 1
[  122.542745][   T10] usb 2-1: config 0 has an invalid interface number: 104 but max is 1
[  122.551934][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  122.562661][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  122.572635][   T10] usb 2-1: config 0 has no interface number 0
[  122.577027][   T10] usb 2-1: config 0 interface 104 has no altsetting 1
[  122.591431][   T10] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[  122.601837][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.604781][   T10] usb 2-1: Product: syz
[  122.608318][   T10] usb 2-1: Manufacturer: syz
[  122.611068][   T10] usb 2-1: SerialNumber: syz
[  122.633172][   T10] usb 2-1: config 0 descriptor??
[  122.806975][ T5911] usb 4-1: config 0 has an invalid interface number: 11 but max is 0
[  122.810124][ T5911] usb 4-1: config 0 has no interface number 0
[  122.814822][ T5911] usb 4-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca
[  122.818672][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.821905][ T5911] usb 4-1: Product: syz
[  122.823709][ T5911] usb 4-1: Manufacturer: syz
[  122.825623][ T5911] usb 4-1: SerialNumber: syz
[  122.831825][ T5911] usb 4-1: config 0 descriptor??
[  122.838381][ T5911] usb 4-1: Expected 3 endpoints, found: 0
[  122.854369][   T10] asix 2-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  122.861297][   T10] asix 2-1:0.104: probe with driver asix failed with error -71
[  122.867528][   T10] usb 2-1: USB disconnect, device number 10
[  123.048399][ T5911] usb 4-1: USB disconnect, device number 4
[  124.358505][ T7458] loop3: detected capacity change from 0 to 1024
[  124.365168][   T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  124.382296][ T7458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  124.386444][ T7458] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.446395][ T7468] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  124.541102][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  124.544124][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  124.553384][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  124.568595][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  124.581795][   T10] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  124.584880][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.605953][   T10] usb 3-1: config 0 descriptor??
[  124.642917][ T6032] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  124.804840][ T7487] netlink: 'syz.3.595': attribute type 10 has an invalid length.
[  124.809149][ T7487] netlink: 1948 bytes leftover after parsing attributes in process `syz.3.595'.
[  124.814271][ T7487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.595'.
[  124.821741][   T10] hdpvr 3-1:0.0: firmware version 0x65 dated 
[  124.824811][   T10] hdpvr 3-1:0.0: untested firmware, the driver might not work.
[  125.025924][   T10] hdpvr 3-1:0.0: device init failed
[  125.038154][   T10] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12
[  125.054203][   T10] usb 3-1: USB disconnect, device number 7
[  125.883548][ T7503] netlink: 68 bytes leftover after parsing attributes in process `syz.2.604'.
[  125.998572][ T7507] loop3: detected capacity change from 0 to 64
[  126.043837][ T7507] MINIX-fs: bad superblock or unable to read bitmaps
[  126.407805][ T7523] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.423545][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.425940][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.896295][ T7541] sctp: [Deprecated]: syz.1.621 (pid 7541) Use of int in maxseg socket option.
[  126.896295][ T7541] Use struct sctp_assoc_value instead
[  127.200535][ T7549] loop2: detected capacity change from 0 to 4096
[  127.881262][ T7562] loop2: detected capacity change from 0 to 32768
[  127.896089][ T7562] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.632 (7562)
[  127.915286][ T7562] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  127.920220][ T7562] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  127.935369][ T7562] BTRFS info (device loop2): using free-space-tree
[  128.173404][   T33] audit: type=1800 audit(2000000000.140:10): pid=7562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.632" name="bus" dev="loop2" ino=263 res=0 errno=0
[  128.447213][ T7602] loop3: detected capacity change from 0 to 65536
[  128.466805][ T5854] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  128.495053][ T7602] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  128.541826][ T7602] XFS (loop3): Ending clean mount
[  128.551413][ T7602] XFS (loop3): Quotacheck needed: Please wait.
[  128.600437][ T7602] XFS (loop3): Quotacheck: Done.
[  128.853086][ T6032] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  129.080349][ T7624] loop2: detected capacity change from 0 to 32768
[  129.083559][ T7624] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.650 (7624)
[  129.097904][ T7624] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  129.112754][ T7624] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  129.121623][ T7624] BTRFS info (device loop2): using free-space-tree
[  129.185858][ T7638] loop3: detected capacity change from 0 to 2048
[  129.199812][ T7638] NILFS (loop3): invalid segment: Sequence number mismatch
[  129.216744][ T7638] NILFS (loop3): trying rollback from an earlier position
[  129.234770][ T7638] NILFS (loop3): recovery complete
[  129.255400][ T7659] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  129.294618][ T5854] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  129.551356][ T7669] program syz.3.662 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  129.619775][ T7673] loop2: detected capacity change from 0 to 512
[  129.671627][ T7673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.681373][ T7673] ext4 filesystem being mounted at /196/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.727239][ T7673] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.664: bg 0: block 96: padding at end of block bitmap is not set
[  129.739564][ T7673] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  129.790432][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.041298][ T7688] netlink: 24 bytes leftover after parsing attributes in process `syz.2.669'.
[  130.048625][ T7688] IPVS: Error connecting to the multicast addr
[  130.691970][ T7703] loop2: detected capacity change from 0 to 8
[  130.784557][ T7703] SQUASHFS error: lzo decompression failed, data probably corrupt
[  130.787345][ T7703] SQUASHFS error: Failed to read block 0x144: -5
[  130.789432][ T7703] SQUASHFS error: Unable to read metadata cache entry [142]
[  130.791791][ T7703] SQUASHFS error: Unable to read inode 0x11f
[  131.520999][ T7717] loop3: detected capacity change from 0 to 1024
[  131.568923][ T7717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.623045][ T6032] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.675987][ T7724] sctp: [Deprecated]: syz.3.681 (pid 7724) Use of struct sctp_assoc_value in delayed_ack socket option.
[  131.675987][ T7724] Use struct sctp_sack_info instead
[  132.512024][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.524445][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  133.178639][ T7740] loop2: detected capacity change from 0 to 128
[  133.241058][ T7740] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  133.247603][ T7740] ext4 filesystem being mounted at /206/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  133.408929][ T5854] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  133.696334][ T7749] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  133.706663][ T7749] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  133.747275][ T5911] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  133.945051][ T5911] usb 3-1: Using ep0 maxpacket: 32
[  133.949487][ T5911] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[  133.952220][ T5911] usb 3-1: config 0 has no interface number 0
[  133.954191][ T5911] usb 3-1: config 0 interface 50 has no altsetting 0
[  133.961817][ T5911] usb 3-1: New USB device found, idVendor=067b, idProduct=0307, bcdDevice=13.70
[  133.964658][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.967316][ T5911] usb 3-1: Product: syz
[  133.969519][ T5911] usb 3-1: Manufacturer: syz
[  133.971037][ T5911] usb 3-1: SerialNumber: syz
[  134.002357][ T5911] usb 3-1: config 0 descriptor??
[  134.012165][ T5911] pl2303 3-1:0.50: required interrupt-in endpoint missing
[  134.392774][ T7754] afs: Unknown parameter 'A~|vN'
[  134.545649][  T794] usb 3-1: USB disconnect, device number 8
[  134.827952][ T7756] sch_tbf: burst 0 is lower than device lo mtu (1550) !
[  134.904566][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.694'.
[  134.908903][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.694'.
[  135.257184][ T7773] netlink: 12 bytes leftover after parsing attributes in process `syz.3.701'.
[  135.312441][ T7777] Driver unsupported XDP return value 0 on prog  (id 72) dev N/A, expect packet loss!
[  136.190549][ T7792] loop2: detected capacity change from 0 to 64
[  136.247243][  T794] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  136.284636][ T7794] netlink: 'syz.2.710': attribute type 79 has an invalid length.
[  136.349672][ T7796] geneve2: entered promiscuous mode
[  136.351957][ T7796] geneve2: entered allmulticast mode
[  136.359377][ T5857] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  136.363071][ T5857] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  136.370121][ T5857] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  136.375741][ T5857] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  136.405106][  T794] usb 4-1: Using ep0 maxpacket: 32
[  136.409631][  T794] usb 4-1: unable to get BOS descriptor or descriptor too short
[  136.415929][  T794] usb 4-1: config 128 has an invalid interface number: 127 but max is 3
[  136.419452][  T794] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  136.423634][  T794] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4
[  136.429356][  T794] usb 4-1: config 128 has no interface number 0
[  136.432013][  T794] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024
[  136.440613][  T794] usb 4-1: config 128 interface 127 has no altsetting 0
[  136.446739][  T794] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  136.450463][  T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.454413][  T794] usb 4-1: Product: syz
[  136.456621][  T794] usb 4-1: Manufacturer: syz
[  136.458582][  T794] usb 4-1: SerialNumber: syz
[  136.464704][ T7786] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  136.692361][ T7805] loop2: detected capacity change from 0 to 512
[  136.723640][ T7805] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.082073][  T794] usb 4-1: USB disconnect, device number 5
[  137.252659][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  138.404695][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.475385][ T7822] netlink: 48 bytes leftover after parsing attributes in process `syz.2.721'.
[  139.219158][ T7859] tmpfs: Bad value for 'mpol'
[  140.463497][ T7877] cgroup: Invalid name
[  140.506363][ T7878] netlink: 60 bytes leftover after parsing attributes in process `syz.2.741'.
[  140.519211][ T7875] netlink: 60 bytes leftover after parsing attributes in process `syz.2.741'.
[  140.580457][ T7884] netlink: 'syz.2.745': attribute type 2 has an invalid length.
[  141.105292][ T5911] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  141.485239][ T5911] usb 3-1: Using ep0 maxpacket: 16
[  141.493512][ T5911] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  141.497223][ T5911] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  141.504381][ T5911] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  141.507764][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.510410][ T5911] usb 3-1: Product: syz
[  141.511865][ T5911] usb 3-1: Manufacturer: syz
[  141.513421][ T5911] usb 3-1: SerialNumber: syz
[  141.727083][ T5911] usb 3-1: 0:2 : does not exist
[  141.742585][ T5911] usb 3-1: USB disconnect, device number 9
[  141.763746][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  141.867605][   T47] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  142.048374][   T47] usb 4-1: Using ep0 maxpacket: 16
[  142.052287][   T47] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  142.056758][   T47] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  142.060727][   T47] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  142.070388][   T47] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  142.074022][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.081204][   T47] usb 4-1: Product: syz
[  142.082874][   T47] usb 4-1: Manufacturer: syz
[  142.085603][   T47] usb 4-1: SerialNumber: syz
[  142.503686][   T47] usb 4-1: 0:2 : does not exist
[  142.506548][  T794] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  142.607663][ T7958] netlink: 116 bytes leftover after parsing attributes in process `syz.2.779'.
[  142.611272][ T7958] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  142.675351][  T794] usb 2-1: Using ep0 maxpacket: 8
[  142.683319][  T794] usb 2-1: config 0 has an invalid interface number: 176 but max is 2
[  142.689920][  T794] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  142.693406][  T794] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 3
[  142.703679][  T794] usb 2-1: config 0 has no interface number 0
[  142.710131][  T794] usb 2-1: config 0 has no interface number 1
[  142.712418][  T794] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  142.730094][  T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.740921][  T794] usb 2-1: config 0 descriptor??
[  142.743117][ T7964] kAFS: Can only specify source 'none' with -o dyn
[  142.748237][  T794] usb 2-1: unknown number of interfaces: 2
[  142.819704][ T7966] netlink: 'syz.2.783': attribute type 8 has an invalid length.
[  142.889840][ T7968] can0: slcan on ttyS3.
[  142.956036][ T7968] can0 (unregistered): slcan off ttyS3.
[  142.958580][  T975] usb 2-1: USB disconnect, device number 11
[  143.426573][ T7980] hugetlbfs: syz.2.789 (7980): Using mlock ulimits for SHM_HUGETLB is obsolete
[  143.676548][   T47] usb 4-1: 1:0: failed to get current value for ch 0 (-22)
[  143.701218][   T47] usb 4-1: USB disconnect, device number 6
[  144.779620][ T8004] TCP: TCP_TX_DELAY enabled
[  145.001089][ T8010] Bluetooth: MGMT ver 1.23
[  145.004621][ T8010] Bluetooth: hci0: invalid length 0, exp 2 for type 30
[  145.955019][  T794] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  146.125080][  T794] usb 3-1: Using ep0 maxpacket: 32
[  146.128914][  T794] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.132640][  T794] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  146.138183][  T794] usb 3-1: config 0 interface 0 has no altsetting 0
[  146.140850][  T794] usb 3-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00
[  146.144265][  T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.150981][  T794] usb 3-1: config 0 descriptor??
[  146.509732][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.827'.
[  146.597662][  T794] betop 0003:20BC:5500.0003: hidraw0: USB HID v8.00 Device [HID 20bc:5500] on usb-dummy_hcd.2-1/input0
[  146.601688][  T794] betop 0003:20BC:5500.0003: no inputs found
[  146.610113][ T8072] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8
[  146.779841][  T975] usb 3-1: USB disconnect, device number 10
[  146.855671][ T5910] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  147.005321][ T5910] usb 4-1: Using ep0 maxpacket: 32
[  147.010342][ T5910] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  147.013604][ T5910] usb 4-1: config 0 has no interface number 0
[  147.020385][ T5910] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  147.024123][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.027659][ T5910] usb 4-1: Product: syz
[  147.029381][ T5910] usb 4-1: Manufacturer: syz
[  147.031317][ T5910] usb 4-1: SerialNumber: syz
[  147.045376][ T5910] usb 4-1: config 0 descriptor??
[  147.052570][ T5910] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  147.259050][ T5910] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  147.270330][ T5910] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  147.349988][ T8088] loop2: detected capacity change from 0 to 1024
[  147.393977][ T8088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.400558][ T8088] ext4 filesystem being mounted at /265/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.415527][   T33] audit: type=1800 audit(2000000019.380:11): pid=8088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.835" name="file1" dev="loop2" ino=15 res=0 errno=0
[  147.446008][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.673208][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  147.676269][ T5910] usb 4-1: USB disconnect, device number 7
[  147.686583][ T5910] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  147.692885][ T5910] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  147.696962][ T5910] quatech2 4-1:0.51: device disconnected
[  147.823733][ T8102] veth0_to_bond: entered allmulticast mode
[  147.833075][ T8102] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  148.274843][ T8110] vivid-002: disconnect
[  148.283507][ T8109] vivid-002: reconnect
[  148.883502][ T8129] loop2: detected capacity change from 0 to 32768
[  148.889076][ T8129] XFS: attr2 mount option is deprecated.
[  148.960176][ T8129] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  148.964379][ T8129] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  149.007267][ T8129] XFS (loop2): Ending clean mount
[  149.018717][ T8129] XFS (loop2): Quotacheck needed: Please wait.
[  149.070317][ T8129] XFS (loop2): Quotacheck: Done.
[  149.126811][ T5854] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  149.608760][ T8162] netlink: 20 bytes leftover after parsing attributes in process `syz.3.865'.
[  150.285257][ T5911] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  150.415218][   T47] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  150.437890][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  150.442269][ T5911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.446314][ T5911] usb 3-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  150.450584][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.456694][ T5911] usb 3-1: config 0 descriptor??
[  150.575094][   T47] usb 4-1: Using ep0 maxpacket: 8
[  150.581324][   T47] usb 4-1: config 4 has an invalid interface number: 244 but max is 0
[  150.583990][   T47] usb 4-1: config 4 has no interface number 0
[  150.586295][   T47] usb 4-1: config 4 interface 244 altsetting 1 endpoint 0x1 has an invalid bInterval 41, changing to 7
[  150.589981][   T47] usb 4-1: config 4 interface 244 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0
[  150.593240][   T47] usb 4-1: config 4 interface 244 has no altsetting 0
[  150.600612][   T47] usb 4-1: New USB device found, idVendor=05ac, idProduct=fa33, bcdDevice=cb.aa
[  150.603870][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.606817][   T47] usb 4-1: Product: syz
[  150.608664][   T47] usb 4-1: Manufacturer: syz
[  150.610512][   T47] usb 4-1: SerialNumber: syz
[  150.824072][   T47] ipheth 4-1:4.244: Unable to find endpoints
[  150.830840][   T47] usb 4-1: USB disconnect, device number 8
[  150.872512][ T5911] hid-u2fzero 0003:10C4:8ACF.0004: unbalanced delimiter at end of report description
[  150.876811][ T5911] hid-u2fzero 0003:10C4:8ACF.0004: probe with driver hid-u2fzero failed with error -22
[  151.074831][  T975] usb 3-1: USB disconnect, device number 11
[  151.403445][ T8182] netlink: 'syz.3.871': attribute type 2 has an invalid length.
[  151.765004][ T8184] loop3: detected capacity change from 0 to 32768
[  151.784875][ T8184] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  151.856881][ T8184] XFS (loop3): Ending clean mount
[  151.862731][ T8184] XFS (loop3): Quotacheck needed: Please wait.
[  151.900687][ T8184] XFS (loop3): Quotacheck: Done.
[  151.981132][ T6032] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  152.424311][ T8217] trusted_key: encrypted_key: master key parameter is missing
[  152.470988][ T8219] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  152.743680][ T8209] loop2: detected capacity change from 0 to 40427
[  152.772704][ T8209] F2FS-fs (loop2): invalid crc value
[  152.791808][ T8229] loop3: detected capacity change from 0 to 1024
[  152.812372][ T8229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.870452][ T8209] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  152.882134][ T6032] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.888825][ T8209] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  152.978627][ T8235] overlayfs: failed to decode file handle (len=7, type=78, flags=0, err=-22)
[  152.986220][  T975] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  153.137027][  T975] usb 2-1: Using ep0 maxpacket: 8
[  153.151529][  T975] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[  153.157890][  T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.166422][  T975] usb 2-1: Product: syz
[  153.168164][  T975] usb 2-1: Manufacturer: syz
[  153.170054][  T975] usb 2-1: SerialNumber: syz
[  153.602599][ T8269] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.613821][  T975] mxuport 2-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4)
[  153.616847][  T975] mxuport 2-1:254.0: probe with driver mxuport failed with error -5
[  153.833517][  T975] usb 2-1: USB disconnect, device number 12
[  154.835168][   T47] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  155.008046][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  155.021004][   T47] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  155.039479][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  155.058500][   T47] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  155.065048][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.071183][   T47] usb 4-1: Product: syz
[  155.074604][   T47] usb 4-1: Manufacturer: syz
[  155.078769][   T47] usb 4-1: SerialNumber: syz
[  155.121533][   T47] usb 4-1: config 0 descriptor??
[  155.130727][ T8281] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  155.176986][   T47] usb 4-1: ucan: probing device on interface #0
[  155.184485][   T47] usb 4-1: ucan: invalid in_ep MaxPacketSize
[  155.193105][   T47] usb 4-1: ucan: probe failed; try to update the device firmware
[  155.313264][ T8285] loop2: detected capacity change from 0 to 32768
[  155.413555][  T975] usb 4-1: USB disconnect, device number 9
[  156.469766][ T8307] loop3: detected capacity change from 0 to 16
[  156.478096][ T8292] syz.1.912 (8292): drop_caches: 2
[  156.497086][ T8307] erofs (device loop3): mounted with root inode @ nid 36.
[  156.526486][ T8307] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36
[  156.534637][ T8307] erofs (device loop3): read error -117 @ 43 of nid 36
[  156.694690][   T33] audit: type=1400 audit(2000000028.660:12): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=8312 comm="syz.3.922"
[  157.140647][ T8319] loop2: detected capacity change from 0 to 1024
[  157.151509][ T8319] EXT4-fs: Ignoring removed orlov option
[  157.184603][ T8319] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.273137][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.434711][ T8326] loop3: detected capacity change from 0 to 764
[  157.955136][  T975] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  158.106431][  T794] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  158.117256][  T975] usb 4-1: config index 0 descriptor too short (expected 240, got 45)
[  158.120042][  T975] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  158.123466][  T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.131134][  T975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.136415][  T975] usb 4-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.28
[  158.139294][  T975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.170991][  T975] usb 4-1: config 0 descriptor??
[  158.211267][ T8345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.936'.
[  158.278555][  T794] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[  158.281643][  T794] usb 3-1: config 0 has no interface number 0
[  158.283927][  T794] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  158.297269][  T794] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  158.300863][  T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.303798][  T794] usb 3-1: Product: syz
[  158.306551][  T794] usb 3-1: Manufacturer: syz
[  158.308345][  T794] usb 3-1: SerialNumber: syz
[  158.318988][  T794] usb 3-1: config 0 descriptor??
[  158.337374][  T794] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0
[  158.825379][  T975] kye 0003:0458:0087.0005: hidraw0: USB HID v0.00 Device [HID 0458:0087] on usb-dummy_hcd.3-1/input0
[  159.017259][  T975] usb 3-1: USB disconnect, device number 12
[  159.026623][  T975] yurex 3-1:0.50: USB YUREX #0 now disconnected
[  159.031113][  T794] usb 4-1: USB disconnect, device number 10
[  160.173322][ T8390] loop3: detected capacity change from 0 to 256
[  160.217784][ T8392] netlink: 'syz.2.958': attribute type 21 has an invalid length.
[  160.221634][ T8392] netlink: 132 bytes leftover after parsing attributes in process `syz.2.958'.
[  160.223061][ T8390] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  160.933115][ T8405] wg1 speed is unknown, defaulting to 1000
[  160.940347][ T8405] wg1 speed is unknown, defaulting to 1000
[  160.951122][ T8405] wg1 speed is unknown, defaulting to 1000
[  160.980459][ T8405] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  161.019639][ T8405] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  161.111775][ T8405] wg1 speed is unknown, defaulting to 1000
[  161.123668][ T8405] wg1 speed is unknown, defaulting to 1000
[  161.138771][ T8405] wg1 speed is unknown, defaulting to 1000
[  161.428995][ T8396] loop2: detected capacity change from 0 to 32768
[  161.568630][ T3589] read_mapping_page failed!
[  161.570716][ T3589] ERROR: (device loop2): txCommit: 
[  161.570716][ T3589] 
[  161.584435][ T3589] jfs_write_inode: jfs_commit_inode failed!
[  162.578472][ T8421] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  162.850977][ T8435] loop2: detected capacity change from 0 to 512
[  162.858820][ T8435] EXT4-fs (loop2): Test dummy encryption mode enabled
[  162.860852][ T8435] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  162.878940][ T8435] EXT4-fs (loop2): 1 truncate cleaned up
[  162.884225][ T8435] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.936253][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.029887][ T8445] netlink: 32 bytes leftover after parsing attributes in process `syz.3.982'.
[  163.032634][ T8445] netlink: 168 bytes leftover after parsing attributes in process `syz.3.982'.
[  163.045028][ T8445] netlink: 168 bytes leftover after parsing attributes in process `syz.3.982'.
[  163.055023][ T8445] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  163.084150][ T8450] loop3: detected capacity change from 0 to 16
[  163.091783][ T8450] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  163.139686][ T8452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.985'.
[  163.143459][ T8452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.985'.
[  163.219931][ T8443] loop2: detected capacity change from 0 to 32768
[  163.300523][ T8443] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=ask,norecovery,nojournal_transaction_names,read_only
[  163.300540][ T8443]   allowing incompatible features above 0.0: (unknown version)
[  163.300545][ T8443]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  163.314158][ T8443] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  163.317013][ T8443] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[  163.319584][ T8443] bcachefs (loop2): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[  163.319584][ T8443]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  163.371770][ T8443] bcachefs (loop2): btree node read error at btree lru level 0/0
[  163.371813][ T8443]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key 0:196608:0 durability: 1 ptr: 0:28:0 gen 0
[  163.371820][ T8443]   loop2 node offset 0/16: incorrect min_key: got POS_MIN should be 0:196608:0
[  163.371825][ T8443]   loop2 btree validate error
[  163.371829][ T8443]   flagging btree lru lost data
[  163.371833][ T8443]   running recovery pass check_topology (2), currently at recovery_pass_empty (0)
[  163.371838][ T8443]   running recovery pass check_lrus (14), currently at recovery_pass_empty (0)
[  163.371843][ T8443]   running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0)
[  163.371849][ T8443]   running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0)
[  163.371854][ T8443]   ret btree_node_read_err_bad_node
[  163.372219][ T8466] loop3: detected capacity change from 0 to 128
[  163.387659][ T8443] bcachefs (loop2): error reading btree root btree=lru level=0: btree_node_read_error, fixing
[  163.409047][ T8443] bcachefs (loop2): btree node read error at btree freespace level 0/0
[  163.409058][ T8443]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0
[  163.409065][ T8443]   loop2 node offset 0/32 bset u64s 0: invalid bkey format: field 4 too large: 0 + 4294967296 > 4294967295
[  163.409071][ T8443]   u64s 3 fields 64:0, 64:0, 32:0, 0:0, 0:4294967296, 0:0
[  163.409075][ T8443]   loop2 btree validate error
[  163.409079][ T8443]   flagging btree freespace lost data
[  163.409083][ T8443]   ret btree_node_read_err_bad_node
[  163.424366][ T8466] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  163.430818][ T8466] ext4 filesystem being mounted at /296/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  163.461454][ T8443] bcachefs (loop2): error reading btree root btree=freespace level=0: btree_node_read_error, fixing
[  163.463950][ T6032] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  163.481852][ T8443] bcachefs (loop2): check_topology... done
[  163.485832][ T8443] bcachefs (loop2): accounting_read... done
[  163.491598][ T8443] bcachefs (loop2): alloc_read... done
[  163.493753][ T8443] bcachefs (loop2): snapshots_read... done
[  163.496612][ T8443] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean
[  163.500360][ T8443] bcachefs (loop2): done starting filesystem
[  163.511302][ T8473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.992'.
[  163.838343][ T8476] netlink: 136 bytes leftover after parsing attributes in process `syz.1.993'.
[  163.903197][ T5854] bcachefs (loop2): shutting down
[  163.953019][ T5854] bcachefs (loop2): shutdown complete
[  164.959505][ T8505] could not open pipe file descriptor
[  165.341468][  T794] hid-generic 0005:16C0:5505.0006: item fetching failed at offset 0/2
[  165.355557][  T794] hid-generic 0005:16C0:5505.0006: probe with driver hid-generic failed with error -22
[  165.362937][ T8517] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1011'.
[  166.440787][ T8551] netlink: 'syz.1.1026': attribute type 2 has an invalid length.
[  166.444085][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1026'.
[  167.482946][ T8570] loop2: detected capacity change from 0 to 32768
[  167.508848][ T8570] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  167.587470][ T8570] XFS (loop2): Ending clean mount
[  167.603010][ T8570] XFS (loop2): Quotacheck needed: Please wait.
[  167.644829][ T8570] XFS (loop2): Quotacheck: Done.
[  167.674443][ T8595] loop3: detected capacity change from 0 to 1024
[  167.709220][ T5854] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  167.735266][ T8595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.777471][ T6032] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.120623][ T8601] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1044'.
[  168.418920][ T8609] 9pnet_virtio: no channels available for device syz
[  168.960901][ T8611] raw_sendmsg: syz.1.1046 forgot to set AF_INET. Fix it!
[  169.391444][ T8621] loop3: detected capacity change from 0 to 512
[  169.406978][ T8621] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  169.417709][ T8621] EXT4-fs (loop3): ea_inode feature is not supported for Hurd
[  169.432566][ T8623] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1053'.
[  169.445071][ T8623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1053'.
[  169.465064][ T8623] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1053'.
[  169.523636][ T8632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1056'.
[  170.434035][ T8650] loop2: detected capacity change from 0 to 32768
[  170.480914][ T8650] jfs_mount: Mount Failure: superblock is corrupt!
[  170.483431][ T8650] Mount JFS Failure: -22
[  170.484861][ T8650] jfs_mount failed w/return code = -22
[  171.340825][ T8660] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1067'.
[  171.431625][ T8666] loop2: detected capacity change from 0 to 1024
[  171.537802][ T8666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.564132][ T8666] EXT4-fs error (device loop2): ext4_get_first_dir_block:3556: inode #11: comm syz.2.1070: directory missing '..'
[  171.570467][ T8666] EXT4-fs (loop2): Remounting filesystem read-only
[  171.787334][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.983811][ T8687] loop2: detected capacity change from 0 to 4096
[  172.003559][ T8687] ntfs3(loop2): ino=1a, mi_enum_attr
[  172.006837][ T8687] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  172.108757][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1081'.
[  172.133587][ T8697] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1081'.
[  172.259794][ T8705] macvtap0: entered promiscuous mode
[  172.262450][ T8705] macvtap0: left promiscuous mode
[  172.360602][ T8706] delete_channel: no stack
[  172.435280][ T5911] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  172.600237][ T5911] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86
[  172.605236][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  172.609110][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  172.617885][ T5911] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  172.621377][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.629017][ T5911] usb 4-1: Product: syz
[  172.630723][ T5911] usb 4-1: Manufacturer: syz
[  172.632559][ T5911] usb 4-1: SerialNumber: syz
[  172.640361][ T5911] usb 4-1: config 0 descriptor??
[  172.647143][ T5911] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  172.695314][  T975] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  172.845231][  T975] usb 3-1: Using ep0 maxpacket: 32
[  172.852909][  T975] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  172.861552][  T975] usb 3-1: config 0 has no interface number 0
[  172.868810][ T5910] usb 4-1: USB disconnect, device number 11
[  172.873148][  T975] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  172.884756][  T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.900219][  T975] usb 3-1: Product: syz
[  172.917248][  T975] usb 3-1: Manufacturer: syz
[  172.919230][  T975] usb 3-1: SerialNumber: syz
[  172.936432][  T975] usb 3-1: config 0 descriptor??
[  172.960031][  T975] smsc95xx v2.0.0
[  173.451916][  T975] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  173.472883][  T975] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  173.791468][ T8727] syz.1.1097 (8727): drop_caches: 2
[  174.487933][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1104'.
[  175.218107][  T975] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71
[  175.228909][  T975] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  175.242151][  T975] usb 3-1: USB disconnect, device number 13
[  176.016408][ T8768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1115'.
[  176.084040][ T8771] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1116'.
[  176.090056][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1116'.
[  176.200216][ T8776] loop3: detected capacity change from 0 to 256
[  176.202766][ T8776] exfat: Unknown parameter ''
[  177.383747][ T8788] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  177.772901][ T8790] loop2: detected capacity change from 0 to 32768
[  178.451141][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1135'.
[  178.623314][ T8824] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  178.642057][ T8824] CIFS mount error: No usable UNC path provided in device string!
[  178.642057][ T8824] 
[  178.651267][ T8824] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  178.990426][ T5883] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  179.356025][ T5883] usb 3-1: Using ep0 maxpacket: 16
[  179.366669][ T5883] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=6c.de
[  179.369660][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.372539][ T5883] usb 3-1: Product: syz
[  179.374326][ T5883] usb 3-1: Manufacturer: syz
[  179.376696][ T5883] usb 3-1: SerialNumber: syz
[  179.381283][ T5883] usb 3-1: config 0 descriptor??
[  179.391379][ T5883] ems_usb 3-1:0.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -22
[  179.395813][ T5883] ems_usb 3-1:0.0: probe with driver ems_usb failed with error -22
[  179.598736][ T5883] usb 3-1: USB disconnect, device number 14
[  179.959930][ T8861] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1154'.
[  180.093901][ T8871] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1158'.
[  180.264675][ T8883] loop2: detected capacity change from 0 to 1024
[  180.378572][ T3070] hfsplus: b-tree write err: -5, ino 4
[  180.400627][ T8893] loop3: detected capacity change from 0 to 128
[  180.537139][ T8901] loop2: detected capacity change from 0 to 256
[  180.554354][ T8901] FAT-fs (loop2): Directory bread(block 64) failed
[  180.564888][ T8901] FAT-fs (loop2): Directory bread(block 65) failed
[  180.567327][ T8901] FAT-fs (loop2): Directory bread(block 66) failed
[  180.575077][ T8901] FAT-fs (loop2): Directory bread(block 67) failed
[  180.577426][ T8901] FAT-fs (loop2): Directory bread(block 68) failed
[  180.580845][ T8901] FAT-fs (loop2): Directory bread(block 69) failed
[  180.583363][ T8901] FAT-fs (loop2): Directory bread(block 70) failed
[  180.589833][ T8901] FAT-fs (loop2): Directory bread(block 71) failed
[  180.592295][ T8901] FAT-fs (loop2): Directory bread(block 72) failed
[  180.594529][ T8901] FAT-fs (loop2): Directory bread(block 73) failed
[  180.932193][ T8909] loop3: detected capacity change from 0 to 32768
[  180.944205][ T8909] XFS: ikeep mount option is deprecated.
[  180.968789][ T8909] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  181.020441][ T8909] XFS (loop3): Ending clean mount
[  181.030704][ T8909] XFS (loop3): Quotacheck needed: Please wait.
[  181.100580][ T8909] XFS (loop3): Quotacheck: Done.
[  181.639164][ T6032] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  181.644673][ T8930] 8021q: adding VLAN 0 to HW filter on device batadv1
[  181.650297][ T8930] team0: Port device batadv1 added
[  181.827443][ T8937] batadv_slave_0: entered promiscuous mode
[  181.846628][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1184'.
[  182.046442][ T8937] batadv_slave_0 (unregistering): left promiscuous mode
[  182.065618][ T8937] batman_adv: batadv0: Removing interface: batadv_slave_0
[  182.466278][ T8949] io-wq is not configured for unbound workers
[  182.614483][ T8955] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  182.675306][ T8957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1194'.
[  182.683392][ T8957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1194'.
[  183.062631][ T8975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1203'.
[  183.107657][  T975] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  183.279710][  T975] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  183.283176][  T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.293651][  T975] usb 3-1: Product: syz
[  183.297923][  T975] usb 3-1: Manufacturer: syz
[  183.299804][  T975] usb 3-1: SerialNumber: syz
[  183.323080][  T975] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  183.382982][ T5910] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  183.803121][  T794] usb 3-1: USB disconnect, device number 15
[  184.425614][ T5910] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  184.447282][ T5910] ath9k_htc: Failed to initialize the device
[  184.451399][  T794] usb 3-1: ath9k_htc: USB layer deinitialized
[  184.667611][ T8993] loop2: detected capacity change from 0 to 256
[  185.012188][   T33] audit: type=1800 audit(2000000312.980:13): pid=8995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1210" name="file1" dev="loop2" ino=1048614 res=0 errno=0
[  185.184367][ T8997] wg1 speed is unknown, defaulting to 1000
[  187.814737][ T9020] loop2: detected capacity change from 0 to 4096
[  187.837874][ T9020] ntfs3(loop2): ino=0, mi_enum_attr
[  187.866633][ T9020] ntfs3(loop2): ino=0, mi_enum_attr
[  187.869866][ T9020] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  187.879962][ T9020] ntfs3(loop2): This driver is compiled without CONFIG_NTFS3_64BIT_CLUSTER (like windows driver).
[  187.879962][ T9020] Volume contains 64 bits run: vcn 0, lcn ffffffffff000000, len 7ff.
[  187.879962][ T9020] Activate CONFIG_NTFS3_64BIT_CLUSTER to process this case
[  187.894705][ T9020] ntfs3(loop2): Failed to load $BadClus (-95).
[  188.658583][ T9051] loop2: detected capacity change from 0 to 32768
[  188.667631][ T9051] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section disk_groups: label 3 empty
[  188.667631][ T9051] disk_groups (size 2912):
[  188.667631][ T9051] [deleted] [deleted] [parent 1028 name ] [parent 1028 name ] [parent 0 name ] [parent 32 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [deleted] [parent 146317 name ] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [parent 175370 name ] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [parent 95120 name ] [deleted] [deleted] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 
[  188.667728][ T9051] bcachefs: bch2_fs_get_tree() error: invalid_sb_disk_groups
[  188.922082][ T9057] loop3: detected capacity change from 0 to 32768
[  188.970129][ T9065] netlink: 'syz.1.1239': attribute type 11 has an invalid length.
[  188.981644][ T9065] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.1239'.
[  189.007209][ T9067] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1240'.
[  189.012073][ T9064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  189.273610][  T975] IPVS: starting estimator thread 0...
[  189.365829][ T9089] IPVS: using max 41 ests per chain, 98400 per kthread
[  189.817802][ T5910] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  190.010607][ T5910] usb 3-1: Using ep0 maxpacket: 8
[  190.022553][ T5910] usb 3-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=dc.f4
[  190.031218][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.034376][ T5910] usb 3-1: Product: syz
[  190.041367][ T5910] usb 3-1: Manufacturer: syz
[  190.043283][ T5910] usb 3-1: SerialNumber: syz
[  190.051430][ T5910] usb 3-1: config 0 descriptor??
[  190.061290][ T5910] gl620a 3-1:0.0: probe with driver gl620a failed with error -22
[  190.246288][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1252'.
[  190.249249][ T9154] chnl_net:caif_netlink_parms(): no params data found
[  190.264907][ T5910] usb 3-1: USB disconnect, device number 16
[  190.912476][ T5236] Bluetooth: hci1: command 0x0406 tx timeout
[  192.567719][ T9222] netlink: 'syz.2.1265': attribute type 13 has an invalid length.
[  193.681663][   T33] audit: type=1326 audit(2000000321.650:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9247 comm="syz.1.1277" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f54d8ebe9 code=0x0
[  193.898249][ T5911] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  193.959567][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  193.962108][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.069708][ T5911] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  194.085088][ T5911] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  194.115308][ T5911] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  194.124782][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  194.148276][ T5911] usb 3-1: SerialNumber: syz
[  194.408736][ T5911] usb 3-1: 0:2 : does not exist
[  194.418100][ T5911] usb 3-1: unit 255 not found!
[  194.476356][ T5911] usb 3-1: USB disconnect, device number 17
[  194.538827][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  195.255187][ T5910] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  195.405912][ T5910] usb 3-1: Using ep0 maxpacket: 8
[  195.413901][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.418641][ T5910] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  195.423723][ T5910] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[  195.430846][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.437841][ T5910] usb 3-1: config 0 descriptor??
[  195.859676][ T5910] hid-rmi 0003:06CB:81A7.0007: unknown main item tag 0x0
[  195.871993][ T5910] hid-rmi 0003:06CB:81A7.0007: unknown main item tag 0x0
[  195.887271][ T5910] hid-rmi 0003:06CB:81A7.0007: unknown main item tag 0x0
[  195.893213][ T5910] hid-rmi 0003:06CB:81A7.0007: unknown main item tag 0x0
[  195.902133][ T5910] hid-rmi 0003:06CB:81A7.0007: unknown main item tag 0x7
[  195.910188][ T5910] hid-rmi 0003:06CB:81A7.0007: unknown main item tag 0x0
[  195.916783][ T5910] hid-rmi 0003:06CB:81A7.0007: unknown main item tag 0x0
[  195.929647][ T5910] hid-rmi 0003:06CB:81A7.0007: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0
[  196.062060][ T5910] usb 3-1: USB disconnect, device number 18
[  196.495127][  T794] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  196.614241][ T9324] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1311'.
[  196.618803][ T9324] unsupported nla_type 65024
[  196.645065][  T794] usb 2-1: Using ep0 maxpacket: 32
[  196.664810][  T794] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  196.668180][  T794] usb 2-1: config 0 has no interface number 0
[  196.674074][  T794] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.681373][  T794] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.687586][  T794] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  196.691065][  T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.697817][  T794] usb 2-1: config 0 descriptor??
[  197.108902][  T794] hid (null): global environment stack underflow
[  197.308617][  T794] uclogic 0003:28BD:0094.0008: failed retrieving string descriptor #100: -71
[  197.324703][  T794] uclogic 0003:28BD:0094.0008: failed retrieving pen parameters: -71
[  197.328199][  T794] uclogic 0003:28BD:0094.0008: pen probing failed: -71
[  197.330924][  T794] uclogic 0003:28BD:0094.0008: failed probing parameters: -71
[  197.334043][  T794] uclogic 0003:28BD:0094.0008: probe with driver uclogic failed with error -71
[  197.354197][  T794] usb 2-1: USB disconnect, device number 13
[  197.593230][ T9353] loop2: detected capacity change from 0 to 128
[  197.620950][ T9353] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  197.635501][ T9353] ext4 filesystem being mounted at /414/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  197.708929][ T9353] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  197.741165][ T5854] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  197.992240][ T9360] loop2: detected capacity change from 0 to 32768
[  197.996866][ T9360] XFS: noikeep mount option is deprecated.
[  198.029812][ T9360] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  198.059908][ T9360] XFS (loop2): Ending clean mount
[  198.068716][ T9360] XFS (loop2): Quotacheck needed: Please wait.
[  198.120224][ T9360] XFS (loop2): Quotacheck: Done.
[  198.127625][   T33] audit: type=1800 audit(2000000326.100:15): pid=9360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1326" name="file1" dev="loop2" ino=9286 res=0 errno=0
[  198.159895][ T5854] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  198.511861][ T9383] delete_channel: no stack
[  199.444272][ T9396] overlayfs: overlapping lowerdir path
[  199.565799][ T9399] kernel read not supported for file /!selinu (pid: 9399 comm: syz.2.1338)
[  199.569568][   T33] audit: type=1800 audit(2000000327.540:16): pid=9399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1338" name=2173656C696E75FF7F dev="mqueue" ino=17328 res=0 errno=0
[  200.505234][ T9421] hub 6-0:1.0: USB hub found
[  200.509944][ T9421] hub 6-0:1.0: 1 port detected
[  201.481453][ T9461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1365'.
[  201.525244][ T5911] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  201.690069][ T5911] usb 4-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=6f.3b
[  201.693789][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.915577][ T5911] pegasus 4-1:254.0: probe with driver pegasus failed with error -71
[  201.924714][ T5911] usb 4-1: USB disconnect, device number 12
[  202.726588][ T9483] loop3: detected capacity change from 0 to 16
[  202.740729][ T9483] erofs (device loop3): mounted with root inode @ nid 36.
[  204.533880][ T9499] netlink: 'syz.1.1381': attribute type 2 has an invalid length.
[  204.715339][ T9508] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1385'.
[  204.771400][ T9493] loop2: detected capacity change from 0 to 32768
[  206.591763][ T9529] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1395'.
[  206.704552][ T9532] gfs2: gfs2 mount does not exist
[  206.796062][ T9536] comedi: No check for data length of config insn id 7 is implemented
[  206.802319][ T9536] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c
[  206.806901][ T9536] comedi: Assuming n=15 is correct
[  206.933529][ T9538] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.938982][ T9538] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  207.035756][ T9538] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.039960][ T9538] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  207.143984][ T9538] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.149417][ T9538] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  207.213450][ T9538] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.218293][ T9538] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  207.302891][ T5875] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  207.320226][ T5875] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  207.332766][ T5857] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  207.340308][ T5857] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  207.355548][ T5857] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  207.359585][ T5857] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  207.392224][ T5857] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  207.400239][ T5857] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  207.614040][ T9561] loop2: detected capacity change from 0 to 2048
[  207.640251][ T6028] udevd[6028]: incorrect nilfs2 checksum on /dev/loop2
[  207.656669][ T9561] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  207.674556][   T33] audit: type=1326 audit(2000000335.640:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9566 comm="syz.3.1413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef118ebe9 code=0x7ffc0000
[  207.674718][ T9567] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  207.690441][   T33] audit: type=1326 audit(2000000335.640:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9566 comm="syz.3.1413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef118ebe9 code=0x7ffc0000
[  207.708258][   T33] audit: type=1326 audit(2000000335.670:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9566 comm="syz.3.1413" exe="/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f6ef118ebe9 code=0x7ffc0000
[  207.720016][   T33] audit: type=1326 audit(2000000335.670:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9566 comm="syz.3.1413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef118ebe9 code=0x7ffc0000
[  207.739204][   T33] audit: type=1326 audit(2000000335.670:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9566 comm="syz.3.1413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef118ebe9 code=0x7ffc0000
[  207.847737][   T47] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  207.871298][ T9575] loop2: detected capacity change from 0 to 24
[  208.005398][   T47] usb 2-1: Using ep0 maxpacket: 16
[  208.012035][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.021661][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.029239][ T9582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1419'.
[  208.038183][   T47] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  208.041824][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.062976][   T47] usb 2-1: config 0 descriptor??
[  208.379669][ T9597] netlink: 'syz.1.1410': attribute type 1 has an invalid length.
[  208.682948][ T9603] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1428'.
[  209.319614][ T9609] loop3: detected capacity change from 0 to 32768
[  209.336816][ T9609] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1431 (9609)
[  209.389593][ T9609] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  209.415188][ T9609] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  209.431689][ T9609] BTRFS info (device loop3): using free-space-tree
[  210.168286][ T6032] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  210.186396][   T47] usbhid 2-1:0.0: can't add hid device: -71
[  210.195396][   T47] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  210.208711][   T47] usb 2-1: USB disconnect, device number 14
[  211.198706][   T33] audit: type=1326 audit(2000000339.160:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.2.1445" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6eddd8ebe9 code=0x0
[  212.545226][ T5883] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  212.695104][ T5883] usb 4-1: Using ep0 maxpacket: 8
[  212.699547][ T5883] usb 4-1: config 253 has an invalid interface number: 176 but max is 0
[  212.703204][ T5883] usb 4-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config
[  212.710136][ T5883] usb 4-1: config 253 has no interface number 0
[  212.711367][ T9712] loop2: detected capacity change from 0 to 32768
[  212.714017][ T5883] usb 4-1: config 253 interface 176 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  212.721877][ T5883] usb 4-1: config 253 interface 176 has no altsetting 0
[  212.729050][ T5883] usb 4-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=25.28
[  212.738103][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.741562][ T5883] usb 4-1: Product: syz
[  212.742606][ T9712] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  212.743412][ T5883] usb 4-1: Manufacturer: syz
[  212.750129][ T5883] usb 4-1: SerialNumber: syz
[  212.764242][ T5883] usb 4-1: cannot find UAC_HEADER
[  212.810290][ T5883] snd-usb-audio 4-1:253.176: probe with driver snd-usb-audio failed with error -22
[  212.821130][ T9712] XFS (loop2): Ending clean mount
[  212.829655][ T9712] XFS (loop2): Quotacheck needed: Please wait.
[  212.854547][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:253.176/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  212.875665][ T9712] XFS (loop2): Quotacheck: Done.
[  212.927099][ T5854] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  212.990566][ T5910] usb 4-1: USB disconnect, device number 13
[  213.805140][ T5910] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  213.955713][ T5910] usb 4-1: Using ep0 maxpacket: 16
[  213.970056][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.980594][ T5910] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00
[  213.984330][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.994348][ T5910] usb 4-1: config 0 descriptor??
[  214.470480][ T9748] loop2: detected capacity change from 0 to 164
[  214.479793][ T5910] aquacomputer_d5next 0003:0C70:F00E.0009: hidraw0: USB HID v0.83 Device [HID 0c70:f00e] on usb-dummy_hcd.3-1/input0
[  214.656503][ T5910] usb 4-1: USB disconnect, device number 14
[  215.055804][ T9762] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  215.840010][ T9788] loop3: detected capacity change from 0 to 4096
[  215.843611][ T9788] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  215.859251][ T9788] ntfs3(loop3): ino=1a, mi_enum_attr
[  215.861558][ T9788] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  215.864078][ T9788] ntfs3(loop3): ino=1a, mi_enum_attr
[  215.868435][ T9788] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  215.891083][ T9792] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1500'.
[  216.843512][ T9814] 8021q: adding VLAN 0 to HW filter on device bond2
[  216.879526][ T9814] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  216.905709][ T9814] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  216.957470][ T5875] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  217.077832][ T5857] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  217.675031][ T5910] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  217.825057][ T5910] usb 2-1: Using ep0 maxpacket: 8
[  217.831229][ T5910] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  217.834655][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.837483][ T5910] usb 2-1: Product: syz
[  217.838804][ T5910] usb 2-1: Manufacturer: syz
[  217.840265][ T5910] usb 2-1: SerialNumber: syz
[  217.845648][ T5910] usb 2-1: config 0 descriptor??
[  217.852127][ T5910] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  218.358691][ T9843] gre2: entered promiscuous mode
[  218.360413][ T9843] gre2: entered allmulticast mode
[  218.372380][ T9841] 9pnet_fd: p9_fd_create_tcp (9841): problem connecting socket to 127.0.0.1
[  218.484821][ T9850] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  218.985048][ T5848] Bluetooth: hci0: command tx timeout
[  219.062348][ T5910] gspca_sonixj: reg_w1 err -71
[  219.090228][ T9871] loop2: detected capacity change from 0 to 40427
[  219.101065][ T9871] F2FS-fs (loop2): invalid crc value
[  219.105227][ T5910] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[  219.117096][ T5910] usb 2-1: USB disconnect, device number 15
[  219.172033][ T9871] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  219.178629][ T9871] F2FS-fs (loop2): Start checkpoint disabled!
[  219.184186][ T9871] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  219.231775][  T135] kworker/u9:2: attempt to access beyond end of device
[  219.231775][  T135] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  219.237116][  T135] CPU: 0 UID: 0 PID: 135 Comm: kworker/u9:2 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  219.237130][  T135] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  219.237136][  T135] Workqueue: writeback wb_workfn (flush-7:2)
[  219.237153][  T135] Call Trace:
[  219.237157][  T135]  <TASK>
[  219.237170][  T135]  dump_stack_lvl+0x189/0x250
[  219.237186][  T135]  ? __pfx_dump_stack_lvl+0x10/0x10
[  219.237196][  T135]  ? __pfx_queue_work_on+0x10/0x10
[  219.237205][  T135]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  219.237216][  T135]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  219.237231][  T135]  f2fs_handle_critical_error+0x37c/0x540
[  219.237279][  T135]  f2fs_write_end_io+0x886/0xb60
[  219.237302][  T135]  __submit_merged_bio+0x27a/0x6a0
[  219.237312][  T135]  ? up_write+0x1c4/0x420
[  219.237325][  T135]  __submit_merged_write_cond+0x44c/0x530
[  219.237339][  T135]  f2fs_sync_node_pages+0x1479/0x15e0
[  219.237359][  T135]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  219.237368][  T135]  ? __percpu_counter_sum+0x1c2/0x1e0
[  219.237396][  T135]  ? do_raw_spin_lock+0x121/0x290
[  219.237412][  T135]  ? rcu_is_watching+0x15/0xb0
[  219.237425][  T135]  ? blk_start_plug+0x52/0x1b0
[  219.237445][  T135]  f2fs_write_node_pages+0x303/0x6e0
[  219.237458][  T135]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  219.237475][  T135]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  219.237484][  T135]  do_writepages+0x32e/0x550
[  219.237508][  T135]  ? reacquire_held_locks+0x127/0x1d0
[  219.237518][  T135]  ? writeback_sb_inodes+0x384/0x1010
[  219.237543][  T135]  __writeback_single_inode+0x145/0xff0
[  219.237561][  T135]  ? do_raw_spin_unlock+0x4d/0x240
[  219.237574][  T135]  writeback_sb_inodes+0x6c7/0x1010
[  219.237602][  T135]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  219.237640][  T135]  ? rcu_is_watching+0x15/0xb0
[  219.237654][  T135]  wb_writeback+0x43b/0xaf0
[  219.237668][  T135]  ? queue_io+0x391/0x590
[  219.237680][  T135]  ? __pfx_wb_writeback+0x10/0x10
[  219.237695][  T135]  ? _raw_spin_unlock_irq+0x23/0x50
[  219.237707][  T135]  wb_workfn+0x409/0xef0
[  219.237724][  T135]  ? __pfx_wb_workfn+0x10/0x10
[  219.237735][  T135]  ? __lock_acquire+0xab9/0xd20
[  219.237753][  T135]  ? process_scheduled_works+0x9ef/0x17b0
[  219.237765][  T135]  ? _raw_spin_unlock_irq+0x23/0x50
[  219.237773][  T135]  ? process_scheduled_works+0x9ef/0x17b0
[  219.237780][  T135]  ? process_scheduled_works+0x9ef/0x17b0
[  219.237789][  T135]  process_scheduled_works+0xae1/0x17b0
[  219.237813][  T135]  ? __pfx_process_scheduled_works+0x10/0x10
[  219.237836][  T135]  worker_thread+0x8a0/0xda0
[  219.237860][  T135]  kthread+0x711/0x8a0
[  219.237872][  T135]  ? __pfx_worker_thread+0x10/0x10
[  219.237880][  T135]  ? __pfx_kthread+0x10/0x10
[  219.237890][  T135]  ? _raw_spin_unlock_irq+0x23/0x50
[  219.237898][  T135]  ? lockdep_hardirqs_on+0x9c/0x150
[  219.237908][  T135]  ? __pfx_kthread+0x10/0x10
[  219.237918][  T135]  ret_from_fork+0x3fc/0x770
[  219.237929][  T135]  ? __pfx_ret_from_fork+0x10/0x10
[  219.237941][  T135]  ? __switch_to_asm+0x39/0x70
[  219.237951][  T135]  ? __switch_to_asm+0x33/0x70
[  219.237960][  T135]  ? __pfx_kthread+0x10/0x10
[  219.237970][  T135]  ret_from_fork_asm+0x1a/0x30
[  219.237990][  T135]  </TASK>
[  219.237995][  T135] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  219.348701][  T135] CPU: 0 UID: 0 PID: 135 Comm: kworker/u9:2 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  219.348714][  T135] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  219.348721][  T135] Workqueue: writeback wb_workfn (flush-7:2)
[  219.348736][  T135] Call Trace:
[  219.348739][  T135]  <TASK>
[  219.348745][  T135]  dump_stack_lvl+0x189/0x250
[  219.348759][  T135]  ? __pfx_dump_stack_lvl+0x10/0x10
[  219.348769][  T135]  ? __pfx_queue_work_on+0x10/0x10
[  219.348777][  T135]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  219.348787][  T135]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  219.348801][  T135]  f2fs_handle_critical_error+0x37c/0x540
[  219.348816][  T135]  f2fs_write_end_io+0x886/0xb60
[  219.348837][  T135]  __submit_merged_bio+0x27a/0x6a0
[  219.348846][  T135]  ? up_write+0x1c4/0x420
[  219.348858][  T135]  __submit_merged_write_cond+0x44c/0x530
[  219.348872][  T135]  f2fs_sync_node_pages+0x1479/0x15e0
[  219.348892][  T135]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  219.348902][  T135]  ? __percpu_counter_sum+0x1c2/0x1e0
[  219.348926][  T135]  ? do_raw_spin_lock+0x121/0x290
[  219.348937][  T135]  ? rcu_is_watching+0x15/0xb0
[  219.348945][  T135]  ? blk_start_plug+0x52/0x1b0
[  219.348957][  T135]  f2fs_write_node_pages+0x303/0x6e0
[  219.348970][  T135]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  219.348987][  T135]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  219.348997][  T135]  do_writepages+0x32e/0x550
[  219.349011][  T135]  ? reacquire_held_locks+0x127/0x1d0
[  219.349019][  T135]  ? writeback_sb_inodes+0x384/0x1010
[  219.349034][  T135]  __writeback_single_inode+0x145/0xff0
[  219.349044][  T135]  ? do_raw_spin_unlock+0x4d/0x240
[  219.349062][  T135]  writeback_sb_inodes+0x6c7/0x1010
[  219.349098][  T135]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  219.349137][  T135]  ? rcu_is_watching+0x15/0xb0
[  219.349158][  T135]  wb_writeback+0x43b/0xaf0
[  219.349173][  T135]  ? queue_io+0x391/0x590
[  219.349184][  T135]  ? __pfx_wb_writeback+0x10/0x10
[  219.349199][  T135]  ? _raw_spin_unlock_irq+0x23/0x50
[  219.349211][  T135]  wb_workfn+0x409/0xef0
[  219.349229][  T135]  ? __pfx_wb_workfn+0x10/0x10
[  219.349240][  T135]  ? __lock_acquire+0xab9/0xd20
[  219.349285][  T135]  ? process_scheduled_works+0x9ef/0x17b0
[  219.349297][  T135]  ? _raw_spin_unlock_irq+0x23/0x50
[  219.349305][  T135]  ? process_scheduled_works+0x9ef/0x17b0
[  219.349312][  T135]  ? process_scheduled_works+0x9ef/0x17b0
[  219.349321][  T135]  process_scheduled_works+0xae1/0x17b0
[  219.349345][  T135]  ? __pfx_process_scheduled_works+0x10/0x10
[  219.349368][  T135]  worker_thread+0x8a0/0xda0
[  219.349391][  T135]  kthread+0x711/0x8a0
[  219.349403][  T135]  ? __pfx_worker_thread+0x10/0x10
[  219.349411][  T135]  ? __pfx_kthread+0x10/0x10
[  219.349422][  T135]  ? _raw_spin_unlock_irq+0x23/0x50
[  219.349430][  T135]  ? lockdep_hardirqs_on+0x9c/0x150
[  219.349438][  T135]  ? __pfx_kthread+0x10/0x10
[  219.349449][  T135]  ret_from_fork+0x3fc/0x770
[  219.349459][  T135]  ? __pfx_ret_from_fork+0x10/0x10
[  219.349470][  T135]  ? __switch_to_asm+0x39/0x70
[  219.349480][  T135]  ? __switch_to_asm+0x33/0x70
[  219.349489][  T135]  ? __pfx_kthread+0x10/0x10
[  219.349499][  T135]  ret_from_fork_asm+0x1a/0x30
[  219.349518][  T135]  </TASK>
[  219.349522][  T135] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  219.617653][ T9875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1538'.
[  219.621926][ T9875] tipc: Started in network mode
[  219.632377][ T9875] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711
[  219.640326][ T9875] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  219.708821][ T9879] CIFS mount error: No usable UNC path provided in device string!
[  219.708821][ T9879] 
[  219.712948][ T9879] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  220.207130][ T9886] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  221.066367][  T975] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  221.258721][  T975] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  221.266682][  T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.280419][  T975] usb 3-1: config 0 descriptor??
[  221.493119][  T975] usb 3-1: USB disconnect, device number 19
[  221.766280][ T5890] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  221.928424][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  221.932669][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  221.940821][ T5890] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  221.944307][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.952724][ T5890] usb 4-1: config 0 descriptor??
[  222.243491][ T9952] team0: Port device team_slave_0 removed
[  222.372869][ T5890] hid (null): report_id 0 is invalid
[  222.395445][ T5890] hid-steam 0003:28DE:1142.000A: report_id 0 is invalid
[  222.398361][ T5890] hid-steam 0003:28DE:1142.000A: item 0 0 1 8 parsing failed
[  222.413208][ T5890] hid-steam 0003:28DE:1142.000A: steam_probe:parse of hid interface failed
[  222.424246][ T5890] hid-steam 0003:28DE:1142.000A: probe with driver hid-steam failed with error -22
[  222.631548][   T47] usb 4-1: USB disconnect, device number 15
[  223.294578][ T9979] netlink: 208128 bytes leftover after parsing attributes in process `syz.3.1584'.
[  223.304771][ T9979] openvswitch: netlink: Message has 4 unknown bytes.
[  223.477847][ T9976] loop2: detected capacity change from 0 to 40427
[  223.487529][ T9976] F2FS-fs (loop2): invalid crc value
[  223.537980][ T9986] loop3: detected capacity change from 0 to 4096
[  223.544868][ T9976] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  223.548396][ T9976] F2FS-fs (loop2): Start checkpoint disabled!
[  223.552923][ T9976] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  223.559258][ T9988] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  223.598030][   T33] audit: type=1800 audit(2000000351.570:23): pid=9986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1587" name="file1" dev="loop3" ino=15 res=0 errno=0
[  224.168372][ T9138] kworker/u9:26: attempt to access beyond end of device
[  224.168372][ T9138] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  224.183109][ T9138] CPU: 0 UID: 0 PID: 9138 Comm: kworker/u9:26 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  224.183132][ T9138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  224.183142][ T9138] Workqueue: writeback wb_workfn (flush-7:2)
[  224.183164][ T9138] Call Trace:
[  224.183170][ T9138]  <TASK>
[  224.183176][ T9138]  dump_stack_lvl+0x189/0x250
[  224.183197][ T9138]  ? __pfx_dump_stack_lvl+0x10/0x10
[  224.183210][ T9138]  ? __pfx_queue_work_on+0x10/0x10
[  224.183223][ T9138]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  224.183238][ T9138]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  224.183264][ T9138]  f2fs_handle_critical_error+0x37c/0x540
[  224.183289][ T9138]  f2fs_write_end_io+0x886/0xb60
[  224.183322][ T9138]  __submit_merged_bio+0x27a/0x6a0
[  224.183344][ T9138]  __submit_merged_write_cond+0x255/0x530
[  224.183369][ T9138]  f2fs_write_data_pages+0x261d/0x3000
[  224.183417][ T9138]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  224.183504][ T9138]  ? f2fs_write_meta_pages+0x357/0x450
[  224.183533][ T9138]  ? __lock_acquire+0xab9/0xd20
[  224.183571][ T9138]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  224.183590][ T9138]  do_writepages+0x32e/0x550
[  224.183613][ T9138]  ? reacquire_held_locks+0x127/0x1d0
[  224.183626][ T9138]  ? writeback_sb_inodes+0x384/0x1010
[  224.183653][ T9138]  __writeback_single_inode+0x145/0xff0
[  224.183671][ T9138]  ? do_raw_spin_unlock+0x4d/0x240
[  224.183691][ T9138]  writeback_sb_inodes+0x6c7/0x1010
[  224.183730][ T9138]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  224.183783][ T9138]  ? rcu_is_watching+0x15/0xb0
[  224.183808][ T9138]  wb_writeback+0x43b/0xaf0
[  224.183830][ T9138]  ? queue_io+0x391/0x590
[  224.183850][ T9138]  ? __pfx_wb_writeback+0x10/0x10
[  224.183875][ T9138]  ? _raw_spin_unlock_irq+0x23/0x50
[  224.183923][ T9138]  wb_workfn+0x409/0xef0
[  224.183954][ T9138]  ? __pfx_wb_workfn+0x10/0x10
[  224.183973][ T9138]  ? __lock_acquire+0xab9/0xd20
[  224.184001][ T9138]  ? process_scheduled_works+0x9ef/0x17b0
[  224.184019][ T9138]  ? _raw_spin_unlock_irq+0x23/0x50
[  224.184031][ T9138]  ? process_scheduled_works+0x9ef/0x17b0
[  224.184043][ T9138]  ? process_scheduled_works+0x9ef/0x17b0
[  224.184059][ T9138]  process_scheduled_works+0xae1/0x17b0
[  224.184099][ T9138]  ? __pfx_process_scheduled_works+0x10/0x10
[  224.184138][ T9138]  worker_thread+0x8a0/0xda0
[  224.184156][ T9138]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  224.184180][ T9138]  ? __kthread_parkme+0x7b/0x200
[  224.184205][ T9138]  kthread+0x711/0x8a0
[  224.184227][ T9138]  ? __pfx_worker_thread+0x10/0x10
[  224.184240][ T9138]  ? __pfx_kthread+0x10/0x10
[  224.184260][ T9138]  ? _raw_spin_unlock_irq+0x23/0x50
[  224.184274][ T9138]  ? lockdep_hardirqs_on+0x9c/0x150
[  224.184289][ T9138]  ? __pfx_kthread+0x10/0x10
[  224.184308][ T9138]  ret_from_fork+0x3fc/0x770
[  224.184325][ T9138]  ? __pfx_ret_from_fork+0x10/0x10
[  224.184347][ T9138]  ? __switch_to_asm+0x39/0x70
[  224.184364][ T9138]  ? __switch_to_asm+0x33/0x70
[  224.184378][ T9138]  ? __pfx_kthread+0x10/0x10
[  224.184395][ T9138]  ret_from_fork_asm+0x1a/0x30
[  224.184429][ T9138]  </TASK>
[  224.184437][ T9138] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  224.328705][ T9138] CPU: 0 UID: 0 PID: 9138 Comm: kworker/u9:26 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  224.328727][ T9138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  224.328736][ T9138] Workqueue: writeback wb_workfn (flush-7:2)
[  224.328758][ T9138] Call Trace:
[  224.328764][ T9138]  <TASK>
[  224.328770][ T9138]  dump_stack_lvl+0x189/0x250
[  224.328791][ T9138]  ? __pfx_dump_stack_lvl+0x10/0x10
[  224.328815][ T9138]  ? __pfx_queue_work_on+0x10/0x10
[  224.328827][ T9138]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  224.328841][ T9138]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  224.328865][ T9138]  f2fs_handle_critical_error+0x37c/0x540
[  224.328920][ T9138]  f2fs_write_end_io+0x886/0xb60
[  224.328956][ T9138]  __submit_merged_bio+0x27a/0x6a0
[  224.328977][ T9138]  __submit_merged_write_cond+0x255/0x530
[  224.329000][ T9138]  f2fs_write_data_pages+0x261d/0x3000
[  224.329050][ T9138]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  224.329143][ T9138]  ? f2fs_write_meta_pages+0x357/0x450
[  224.329170][ T9138]  ? __lock_acquire+0xab9/0xd20
[  224.329192][ T9138]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  224.329210][ T9138]  do_writepages+0x32e/0x550
[  224.329232][ T9138]  ? reacquire_held_locks+0x127/0x1d0
[  224.329244][ T9138]  ? writeback_sb_inodes+0x384/0x1010
[  224.329269][ T9138]  __writeback_single_inode+0x145/0xff0
[  224.329286][ T9138]  ? do_raw_spin_unlock+0x4d/0x240
[  224.329305][ T9138]  writeback_sb_inodes+0x6c7/0x1010
[  224.329347][ T9138]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  224.329402][ T9138]  ? rcu_is_watching+0x15/0xb0
[  224.329424][ T9138]  wb_writeback+0x43b/0xaf0
[  224.329447][ T9138]  ? queue_io+0x391/0x590
[  224.329466][ T9138]  ? __pfx_wb_writeback+0x10/0x10
[  224.329489][ T9138]  ? _raw_spin_unlock_irq+0x23/0x50
[  224.329529][ T9138]  wb_workfn+0x409/0xef0
[  224.329557][ T9138]  ? __pfx_wb_workfn+0x10/0x10
[  224.329575][ T9138]  ? __lock_acquire+0xab9/0xd20
[  224.329603][ T9138]  ? process_scheduled_works+0x9ef/0x17b0
[  224.329624][ T9138]  ? _raw_spin_unlock_irq+0x23/0x50
[  224.329638][ T9138]  ? process_scheduled_works+0x9ef/0x17b0
[  224.329650][ T9138]  ? process_scheduled_works+0x9ef/0x17b0
[  224.329666][ T9138]  process_scheduled_works+0xae1/0x17b0
[  224.329708][ T9138]  ? __pfx_process_scheduled_works+0x10/0x10
[  224.329747][ T9138]  worker_thread+0x8a0/0xda0
[  224.329762][ T9138]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  224.329785][ T9138]  ? __kthread_parkme+0x7b/0x200
[  224.329816][ T9138]  kthread+0x711/0x8a0
[  224.329837][ T9138]  ? __pfx_worker_thread+0x10/0x10
[  224.329851][ T9138]  ? __pfx_kthread+0x10/0x10
[  224.329871][ T9138]  ? _raw_spin_unlock_irq+0x23/0x50
[  224.329914][ T9138]  ? lockdep_hardirqs_on+0x9c/0x150
[  224.329930][ T9138]  ? __pfx_kthread+0x10/0x10
[  224.329949][ T9138]  ret_from_fork+0x3fc/0x770
[  224.329967][ T9138]  ? __pfx_ret_from_fork+0x10/0x10
[  224.329988][ T9138]  ? __switch_to_asm+0x39/0x70
[  224.330005][ T9138]  ? __switch_to_asm+0x33/0x70
[  224.330021][ T9138]  ? __pfx_kthread+0x10/0x10
[  224.330039][ T9138]  ret_from_fork_asm+0x1a/0x30
[  224.330068][ T9138]  </TASK>
[  224.330075][ T9138] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  224.339824][T10008] loop3: detected capacity change from 0 to 16
[  224.449693][T10008] erofs (device loop3): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  224.459388][T10008] erofs (device loop3): mounted with root inode @ nid 36.
[  225.052319][T10015] loop2: detected capacity change from 0 to 32768
[  225.058697][T10015] XFS: attr2 mount option is deprecated.
[  225.083561][T10015] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  225.087526][T10027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1603'.
[  225.091035][T10015] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  225.114388][T10015] XFS (loop2): Ending clean mount
[  225.129294][T10015] XFS (loop2): Quotacheck needed: Please wait.
[  225.207955][T10015] XFS (loop2): Quotacheck: Done.
[  225.229376][T10035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  225.266529][ T5854] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  225.472056][T10049] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1610'.
[  225.875188][ T5910] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  226.026054][ T5910] usb 3-1: Using ep0 maxpacket: 32
[  226.038167][ T5910] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  226.038843][T10078] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1624'.
[  226.041849][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.049102][  T975] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  226.053189][T10078] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614)
[  226.053814][ T5910] usb 3-1: config 0 descriptor??
[  226.058305][T10078] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  226.069789][ T5910] gspca_main: nw80x-2.14.0 probing 055f:d001
[  226.205296][  T975] usb 2-1: Using ep0 maxpacket: 8
[  226.218563][  T975] usb 2-1: unable to get BOS descriptor or descriptor too short
[  226.222800][  T975] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  226.234533][  T975] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  226.240610][  T975] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  226.249016][  T975] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  226.252543][  T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.274234][  T975] usb 2-1: Product: syz
[  226.276630][  T975] usb 2-1: Manufacturer: syz
[  226.278702][  T975] usb 2-1: SerialNumber: syz
[  226.485349][ T5910] gspca_nw80x: reg_r err -71
[  226.487426][ T5910] nw80x 3-1:0.0: probe with driver nw80x failed with error -71
[  226.503025][ T5910] usb 3-1: USB disconnect, device number 20
[  226.511318][  T975] usb 2-1: 0:2 : does not exist
[  226.527157][  T975] usb 2-1: USB disconnect, device number 16
[  226.559833][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  227.578402][T10110] loop2: detected capacity change from 0 to 32768
[  227.589917][T10110] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1638 (10110)
[  227.643024][T10110] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  227.653097][T10110] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  227.666070][T10110] BTRFS info (device loop2): using free-space-tree
[  227.688883][T10118] loop3: detected capacity change from 0 to 128
[  227.766487][T10110] BTRFS info (device loop2): checking UUID tree
[  227.871239][T10110] BTRFS info (device loop2): balance: start -d -m
[  227.890568][T10110] BTRFS info (device loop2): relocating block group 6881280 flags data|metadata
[  227.947675][T10110] BTRFS info (device loop2): relocating block group 5242880 flags data|metadata
[  228.036607][T10110] BTRFS info (device loop2): found 9 extents, stage: move data extents
[  228.078806][T10110] BTRFS info (device loop2): found 1 extents, stage: update data pointers
[  228.107852][T10110] BTRFS info (device loop2): balance: ended with status: 0
[  228.167093][ T5854] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  228.305558][ T5910] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  228.455053][ T5910] usb 4-1: Using ep0 maxpacket: 32
[  228.458870][ T5910] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  228.461977][ T5910] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  228.464694][ T5910] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  228.468042][ T5910] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  228.471296][ T5910] usb 4-1: config 1 has no interface number 0
[  228.473863][ T5910] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  228.477166][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.489136][ T5910] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  228.782651][ T5910] snd_usb_pod 4-1:1.1: set_interface failed
[  228.785471][ T5910] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  228.787831][ T5910] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71
[  228.794240][ T5910] usb 4-1: USB disconnect, device number 16
[  229.216173][T10152] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  229.219373][T10152] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  229.227353][T10152] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  229.229476][T10152] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  229.235873][T10152] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  229.443929][T10161] loop3: detected capacity change from 0 to 32768
[  229.449638][T10161] 
[  229.449638][T10161]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  229.449638][T10161] 
[  229.457089][   T33] audit: type=1800 audit(2000000357.430:24): pid=10161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1652" name="file1" dev="loop3" ino=4 res=0 errno=0
[  229.458976][T10161] 
[  229.458976][T10161]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  229.458976][T10161] 
[  229.469579][T10161] 
[  229.469579][T10161]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  229.469579][T10161] 
[  229.472837][T10161] 
[  229.472837][T10161]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  229.472837][T10161] 
[  229.479120][T10161] 
[  229.479120][T10161]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  229.479120][T10161] 
[  229.482467][T10161] 
[  229.482467][T10161]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  229.482467][T10161] 
[  229.492149][  T116] 
[  229.492149][  T116]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  229.492149][  T116] 
[  229.499015][  T135] 
[  229.499015][  T135]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  229.499015][  T135] 
[  229.502508][  T135] 
[  229.502508][  T135]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  229.502508][  T135] 
[  229.509433][T10161] 
[  229.509433][T10161]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  229.509433][T10161] 
[  229.515907][  T117] 
[  229.515907][  T117]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  229.515907][  T117] 
[  229.519242][T10161] 
[  229.519242][T10161]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  229.519242][T10161] 
[  229.533756][ T6032] 
[  229.533756][ T6032]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  229.533756][ T6032] 
[  229.539359][ T6032] 
[  229.539359][ T6032]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  229.539359][ T6032] 
[  229.831583][T10186] loop3: detected capacity change from 0 to 512
[  229.861520][T10186] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  229.873282][T10186] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1663: attempt to clear invalid blocks 2 len 1
[  229.884255][T10186] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  229.899850][T10186] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1663: invalid indirect mapped block 1819239214 (level 0)
[  229.906070][T10186] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1663: invalid indirect mapped block 1819239214 (level 1)
[  229.906331][T10192] syz.1.1665 uses old SIOCAX25GETINFO
[  229.919927][T10186] EXT4-fs (loop3): 1 truncate cleaned up
[  229.923592][T10186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.931608][T10186] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.963389][T10194] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1666'.
[  230.131285][T10201] vivid-003: disconnect
[  230.297733][ T5910] usb 4-1: new low-speed USB device number 17 using dummy_hcd
[  230.425836][ T5848] Bluetooth: hci1: command 0x0406 tx timeout
[  230.462204][ T5910] usb 4-1: unable to get BOS descriptor or descriptor too short
[  230.471281][ T5910] usb 4-1: config 9 has an invalid interface number: 166 but max is 1
[  230.474646][ T5910] usb 4-1: config 9 has an invalid interface number: 224 but max is 1
[  230.478393][ T5910] usb 4-1: config 9 has no interface number 0
[  230.481145][ T5910] usb 4-1: config 9 has no interface number 1
[  230.481187][ T5910] usb 4-1: config 9 interface 166 has no altsetting 0
[  230.481269][ T5910] usb 4-1: config 9 interface 224 has no altsetting 0
[  230.493206][ T5910] usb 4-1: string descriptor 0 read error: -22
[  230.493530][ T5910] usb 4-1: New USB device found, idVendor=06f8, idProduct=3002, bcdDevice=d8.0a
[  230.493552][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.750651][ T5910] usb 4-1: USB disconnect, device number 17
[  230.913384][T10199] vivid-003: reconnect
[  231.315264][ T5848] Bluetooth: hci2: command 0x0405 tx timeout
[  231.379992][T10212] netlink: 340 bytes leftover after parsing attributes in process `syz.1.1673'.
[  231.388731][T10212] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1673'.
[  231.434317][T10218] netlink: 'syz.2.1676': attribute type 1 has an invalid length.
[  231.438242][T10218] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  231.493896][T10224] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1679'.
[  231.773415][T10250] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1692'.
[  231.778277][T10250] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1692'.
[  231.789401][T10250] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1692'.
[  231.845260][T10252] netlink: 'syz.2.1693': attribute type 23 has an invalid length.
[  232.103100][T10265] loop2: detected capacity change from 0 to 2048
[  232.142878][T10265] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  232.478781][T10271] loop2: detected capacity change from 0 to 4096
[  232.505347][ T5848] Bluetooth: hci1: command 0x0406 tx timeout
[  232.540819][T10271] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  232.573568][T10271] ntfs3(loop2): Failed to load $Extend (-22).
[  232.578058][T10271] ntfs3(loop2): Failed to initialize $Extend.
[  233.174660][T10286] program syz.3.1706 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  233.388316][ T5848] Bluetooth: hci2: command 0x0405 tx timeout
[  233.917471][T10308] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  234.095461][T10315] netlink: 'syz.1.1719': attribute type 5 has an invalid length.
[  234.411059][T10328] batadv_slave_1: entered promiscuous mode
[  234.414309][T10327] batadv_slave_1: left promiscuous mode
[  234.424006][T10329] openvswitch: netlink: Message has 8 unknown bytes.
[  234.461802][T10331] syzkaller1: entered promiscuous mode
[  234.463524][T10331] syzkaller1: entered allmulticast mode
[  234.519180][T10335] bridge1: entered promiscuous mode
[  234.955813][  T975] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  235.041702][T10347] loop2: detected capacity change from 0 to 40427
[  235.073381][T10347] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  235.077705][T10347] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  235.089479][T10347] F2FS-fs (loop2): invalid crc value
[  235.105390][  T975] usb 2-1: Using ep0 maxpacket: 32
[  235.109480][  T975] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  235.118460][  T975] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  235.122011][  T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.134884][  T975] usb 2-1: Product: syz
[  235.136832][  T975] usb 2-1: Manufacturer: syz
[  235.138660][  T975] usb 2-1: SerialNumber: syz
[  235.141954][  T975] usb 2-1: config 0 descriptor??
[  235.147419][T10345] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  235.165363][  T975] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11
[  235.191819][T10347] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  235.197320][T10347] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  235.200365][T10347] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  235.262624][   T33] audit: type=1804 audit(2000000363.230:25): pid=10347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1734" name="/newroot/529/file0/bus" dev="loop2" ino=10 res=1 errno=0
[  235.303397][T10347] syz.2.1734: attempt to access beyond end of device
[  235.303397][T10347] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  235.313465][T10347] syz.2.1734: attempt to access beyond end of device
[  235.313465][T10347] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  235.322953][T10347] CPU: 1 UID: 0 PID: 10347 Comm: syz.2.1734 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  235.322987][T10347] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  235.322998][T10347] Call Trace:
[  235.323005][T10347]  <TASK>
[  235.323014][T10347]  dump_stack_lvl+0x189/0x250
[  235.323041][T10347]  ? __pfx_dump_stack_lvl+0x10/0x10
[  235.323061][T10347]  ? __pfx_queue_work_on+0x10/0x10
[  235.323077][T10347]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  235.323123][T10347]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  235.323152][T10347]  f2fs_handle_critical_error+0x37c/0x540
[  235.323178][T10347]  f2fs_write_end_io+0x886/0xb60
[  235.323215][T10347]  __submit_merged_bio+0x27a/0x6a0
[  235.323232][T10347]  ? up_write+0x1c4/0x420
[  235.323254][T10347]  __submit_merged_write_cond+0x44c/0x530
[  235.323278][T10347]  f2fs_sync_node_pages+0x1479/0x15e0
[  235.323312][T10347]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  235.323353][T10347]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  235.323380][T10347]  ? up_write+0x1c4/0x420
[  235.323393][T10347]  ? do_raw_spin_unlock+0x4d/0x240
[  235.323415][T10347]  f2fs_write_checkpoint+0xe6f/0x1df0
[  235.323456][T10347]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  235.323514][T10347]  ? down_write+0x162/0x1f0
[  235.323533][T10347]  ? __pfx_down_write+0x10/0x10
[  235.323562][T10347]  f2fs_issue_checkpoint+0x3ac/0x570
[  235.323587][T10347]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  235.323616][T10347]  ? do_raw_spin_lock+0x121/0x290
[  235.323643][T10347]  ? __up_read+0x280/0x680
[  235.323667][T10347]  ? f2fs_sync_fs+0x200/0x3d0
[  235.323686][T10347]  f2fs_do_sync_file+0x869/0x1860
[  235.323716][T10347]  ? __pfx_f2fs_do_sync_file+0x10/0x10
[  235.323769][T10347]  ? f2fs_file_write_iter+0x4ac/0x2410
[  235.323787][T10347]  ? vfs_fsync_range+0x12c/0x1c0
[  235.323802][T10347]  ? f2fs_sync_file+0xe9/0x160
[  235.323825][T10347]  f2fs_file_write_iter+0x753/0x2410
[  235.323861][T10347]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  235.323883][T10347]  ? __asan_memset+0x22/0x50
[  235.323907][T10347]  iter_file_splice_write+0x93a/0x1000
[  235.323954][T10347]  ? __pfx_iter_file_splice_write+0x10/0x10
[  235.323986][T10347]  ? rcu_read_lock_any_held+0xb3/0x120
[  235.324017][T10347]  ? __pfx_iter_file_splice_write+0x10/0x10
[  235.324041][T10347]  direct_splice_actor+0x101/0x160
[  235.324068][T10347]  splice_direct_to_actor+0x5a8/0xcc0
[  235.324135][T10347]  ? __pfx_direct_splice_actor+0x10/0x10
[  235.324158][T10347]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  235.324190][T10347]  do_splice_direct+0x181/0x270
[  235.324214][T10347]  ? __pfx_do_splice_direct+0x10/0x10
[  235.324235][T10347]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  235.324262][T10347]  ? rw_verify_area+0x255/0x4d0
[  235.324286][T10347]  do_sendfile+0x4da/0x7e0
[  235.324302][T10347]  ? __pfx_vfs_write+0x10/0x10
[  235.324325][T10347]  ? __pfx_do_sendfile+0x10/0x10
[  235.324345][T10347]  ? __se_sys_futex+0x36f/0x400
[  235.324368][T10347]  __se_sys_sendfile64+0x13e/0x190
[  235.324394][T10347]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  235.324414][T10347]  ? rcu_is_watching+0x15/0xb0
[  235.324434][T10347]  ? do_syscall_64+0xbe/0x3b0
[  235.324456][T10347]  do_syscall_64+0xfa/0x3b0
[  235.324472][T10347]  ? lockdep_hardirqs_on+0x9c/0x150
[  235.324490][T10347]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.324506][T10347]  ? exc_page_fault+0x9f/0xf0
[  235.324528][T10347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.324543][T10347] RIP: 0033:0x7f6eddd8ebe9
[  235.324558][T10347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  235.324574][T10347] RSP: 002b:00007f6edec41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  235.324592][T10347] RAX: ffffffffffffffda RBX: 00007f6eddfb5fa0 RCX: 00007f6eddd8ebe9
[  235.324605][T10347] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005
[  235.324615][T10347] RBP: 00007f6edde11e19 R08: 0000000000000000 R09: 0000000000000000
[  235.324625][T10347] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000000
[  235.324635][T10347] R13: 00007f6eddfb6038 R14: 00007f6eddfb5fa0 R15: 00007ffdf661a7c8
[  235.324659][T10347]  </TASK>
[  235.324666][T10347] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  235.498017][   T47] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  235.501213][ T5848] Bluetooth: hci2: command 0x0405 tx timeout
[  235.519912][  T794] usb 2-1: USB disconnect, device number 17
[  235.520029][    C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  235.670429][   T47] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  235.675722][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  235.680192][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  235.684231][   T47] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  235.688967][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.702606][   T47] usb 4-1: config 0 descriptor??
[  236.127987][   T47] sony 0003:054C:024B.000B: unexpected long global item
[  236.131358][   T47] sony 0003:054C:024B.000B: parse failed
[  236.133676][   T47] sony 0003:054C:024B.000B: probe with driver sony failed with error -22
[  236.275736][T10369] loop2: detected capacity change from 0 to 32768
[  236.294510][T10369] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  236.328206][T10369] XFS (loop2): Ending clean mount
[  236.348702][  T975] usb 4-1: USB disconnect, device number 18
[  236.511625][ T5854] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  236.795762][T10382] netlink: 'syz.2.1745': attribute type 1 has an invalid length.
[  236.799374][T10382] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1745'.
[  236.803160][T10382] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1745'.
[  236.908865][T10385] netlink: 'syz.2.1746': attribute type 2 has an invalid length.
[  237.742678][T10399] netlink: 'syz.3.1753': attribute type 9 has an invalid length.
[  237.748367][T10399] netlink: 211988 bytes leftover after parsing attributes in process `syz.3.1753'.
[  237.871202][T10401] loop3: detected capacity change from 0 to 1024
[  237.882349][T10401] EXT4-fs: Ignoring removed orlov option
[  237.920983][T10401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.070771][ T6032] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.340690][   T33] audit: type=1800 audit(2000000366.310:26): pid=10415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1760" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  238.500520][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1763'.
[  238.590496][T10418] syz.2.1761 (10418): drop_caches: 2
[  239.055150][ T5910] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  239.219369][ T5910] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  239.223168][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.226481][ T5910] usb 4-1: Product: syz
[  239.228255][ T5910] usb 4-1: Manufacturer: syz
[  239.230246][ T5910] usb 4-1: SerialNumber: syz
[  239.235356][ T5910] usb 4-1: config 0 descriptor??
[  239.243086][ T5910] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  239.654130][ T5890] usb 4-1: USB disconnect, device number 19
[  239.819156][T10448] loop2: detected capacity change from 0 to 2048
[  239.859594][T10448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  239.874876][   T33] audit: type=1326 audit(2000000367.840:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.1.1777" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f54d8ebe9 code=0x7ffc0000
[  239.884379][   T33] audit: type=1326 audit(2000000367.840:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.1.1777" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f54d8ebe9 code=0x7ffc0000
[  239.899234][   T33] audit: type=1326 audit(2000000367.850:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.1.1777" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2f54d8ebe9 code=0x7ffc0000
[  239.908870][   T33] audit: type=1326 audit(2000000367.850:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.1.1777" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f54d8ebe9 code=0x7ffc0000
[  239.925062][   T33] audit: type=1326 audit(2000000367.850:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.1.1777" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f54d8ebe9 code=0x7ffc0000
[  239.933571][   T33] audit: type=1326 audit(2000000367.850:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.1.1777" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f54d8ebe9 code=0x7ffc0000
[  239.951396][   T33] audit: type=1326 audit(2000000367.850:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.1.1777" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2f54d8ebe9 code=0x7ffc0000
[  239.963958][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.968008][   T33] audit: type=1326 audit(2000000367.850:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10453 comm="syz.1.1777" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2f54d8ebe9 code=0x7ffc0000
[  240.054000][T10460] syz.1.1780 (10460): drop_caches: 2
[  240.395809][ T5910] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  240.549558][ T5910] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.556516][ T5910] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54
[  240.560139][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7
[  240.563198][ T5910] usb 3-1: Product: syz
[  240.564872][ T5910] usb 3-1: Manufacturer: syz
[  240.577285][ T5910] usb 3-1: SerialNumber: syz
[  240.582360][ T5910] usb 3-1: config 0 descriptor??
[  240.598297][ T5910] gspca_main: conex-2.14.0 probing 0572:0041
[  240.619037][T10482] loop3: detected capacity change from 0 to 32768
[  240.632433][T10482] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1791 (10482)
[  240.654490][T10482] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  240.674817][T10482] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  240.678476][T10482] BTRFS info (device loop3): using free-space-tree
[  240.871009][T10482] BTRFS error (device loop3): target device  is invalid!
[  240.912436][ T5910] usb 3-1: USB disconnect, device number 21
[  240.917269][ T6032] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  241.274266][T10518] loop3: detected capacity change from 0 to 512
[  241.277822][T10518] EXT4-fs: Ignoring removed orlov option
[  241.290397][T10518] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=8040c018, mo2=0002]
[  241.297811][T10518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.301863][T10518] ext4 filesystem being mounted at /568/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  241.345741][ T6032] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.415045][ T5910] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  241.418447][T10527] loop3: detected capacity change from 0 to 2048
[  241.454416][T10527] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  241.470342][T10529] netlink: 1053 bytes leftover after parsing attributes in process `syz.2.1803'.
[  241.577877][ T5910] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  241.582613][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.589177][ T5910] usb 2-1: Product: syz
[  241.590688][ T5910] usb 2-1: Manufacturer: syz
[  241.591357][T10534] loop2: detected capacity change from 0 to 512
[  241.592622][ T5910] usb 2-1: SerialNumber: syz
[  241.599484][ T5910] usb 2-1: config 0 descriptor??
[  241.601388][T10534] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  241.610842][ T5910] gspca_main: sq905c-2.14.0 probing 2770:9052
[  241.622622][T10534] EXT4-fs (loop2): 1 truncate cleaned up
[  241.654041][T10534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.774540][T10534] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 1025 (only 1 groups)
[  241.831368][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.967164][T10538] loop2: detected capacity change from 0 to 512
[  242.000968][T10538] EXT4-fs (loop2): corrupt root inode, run e2fsck
[  242.004472][T10538] EXT4-fs (loop2): mount failed
[  242.136716][T10542] loop2: detected capacity change from 0 to 512
[  242.144195][T10542] EXT4-fs: Ignoring removed nomblk_io_submit option
[  242.222501][T10542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.234045][ T5910] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[  242.240050][ T5910] sq905c 2-1:0.0: probe with driver sq905c failed with error -71
[  242.249710][T10542] ext4 filesystem being mounted at /558/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  242.256868][ T5910] usb 2-1: USB disconnect, device number 18
[  242.270441][   T33] audit: type=1800 audit(2000000370.240:35): pid=10542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1807" name="file1" dev="loop2" ino=15 res=0 errno=0
[  242.303036][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.390490][T10546] loop2: detected capacity change from 0 to 512
[  242.413941][T10546] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1808: bad orphan inode 11
[  242.420076][T10546] ext4_test_bit(bit=10, block=4) = 1
[  242.422517][T10546] is_bad_inode(inode)=0
[  242.424898][T10546] NEXT_ORPHAN(inode)=2080374784
[  242.428266][T10546] max_ino=32
[  242.429384][T10546] i_nlink=0
[  242.431428][T10546] EXT4-fs (loop2): 1 truncate cleaned up
[  242.441136][T10546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.459972][T10546] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1808: bg 0: block 393: padding at end of block bitmap is not set
[  242.473157][T10546] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  242.515156][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.827976][T10555] 9pnet: Could not find request transport: f0xffffffffffffffff0xffffffffffffffffWN%/`ְfp7.O3̒0͹:xޙS
[  244.277229][T10579] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1821'.
[  244.281115][T10581] loop2: detected capacity change from 0 to 512
[  244.284733][T10581] EXT4-fs: Ignoring removed mblk_io_submit option
[  244.329241][T10581] EXT4-fs (loop2): orphan cleanup on readonly fs
[  244.331731][T10581] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  244.353103][T10581] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.1822: attempt to clear invalid blocks 2 len 1
[  244.359480][T10581] EXT4-fs (loop2): Remounting filesystem read-only
[  244.364112][T10581] EXT4-fs (loop2): 1 truncate cleaned up
[  244.380223][T10581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  244.390055][T10581] EXT4-fs (loop2): Quota file not on filesystem root. Journaled quota will not work
[  244.420412][T10592] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  244.423072][T10592] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  244.435904][T10592] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  244.438936][T10592] overlayfs: missing 'lowerdir'
[  244.450615][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.865667][T10599] loop2: detected capacity change from 0 to 32768
[  244.898693][   T33] audit: type=1800 audit(2000000372.870:36): pid=10599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1829" name="file1" dev="loop2" ino=4 res=0 errno=0
[  245.001167][T10622] loop3: detected capacity change from 0 to 2048
[  245.013926][T10622] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  245.254460][T10599] ERROR: (device loop2): dbAdjCtl: the maximum free buddy is not the old root
[  245.254460][T10599] 
[  245.278752][T10599] ERROR: (device loop2): remounting filesystem as read-only
[  245.390532][ T5854] ------------[ cut here ]------------
[  245.393064][ T5854] kernel BUG at fs/jfs/inode.c:169!
[  245.404004][ T5854] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  245.406366][ T5854] CPU: 0 UID: 0 PID: 5854 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  245.410723][ T5854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  245.414568][ T5854] RIP: 0010:jfs_evict_inode+0x438/0x440
[  245.416674][ T5854] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 b3 f5 e8 fe e9 16 fe ff ff e8 39 8b 85 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  245.424181][ T5854] RSP: 0018:ffffc9000388fae0 EFLAGS: 00010293
[  245.426616][ T5854] RAX: ffffffff833a2077 RBX: ffff88810fc044b8 RCX: ffff88810737b980
[  245.429779][ T5854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810fc044b8
[  245.432938][ T5854] RBP: 0000000000000001 R08: ffffffff8fa34237 R09: 1ffffffff1f46846
[  245.435970][ T5854] R10: dffffc0000000000 R11: ffffffff8339fd70 R12: dffffc0000000000
[  245.439002][ T5854] R13: dffffc0000000000 R14: ffff88810fc04140 R15: ffffffff833a1c40
[  245.442157][ T5854] FS:  00005555844e5500(0000) GS:ffff8880b8624000(0000) knlGS:0000000000000000
[  245.445932][ T5854] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  245.448595][ T5854] CR2: 00005555845005c8 CR3: 0000000112724000 CR4: 00000000000006f0
[  245.451764][ T5854] Call Trace:
[  245.453086][ T5854]  <TASK>
[  245.454280][ T5854]  ? evict+0x4f8/0x9c0
[  245.456025][ T5854]  ? __pfx_jfs_evict_inode+0x10/0x10
[  245.458127][ T5854]  evict+0x504/0x9c0
[  245.459719][ T5854]  ? __pfx_evict+0x10/0x10
[  245.461534][ T5854]  ? do_raw_spin_unlock+0x4d/0x240
[  245.463556][ T5854]  evict_inodes+0x64c/0x6d0
[  245.465393][ T5854]  ? __pfx_evict_inodes+0x10/0x10
[  245.467426][ T5854]  generic_shutdown_super+0x9a/0x2c0
[  245.469568][ T5854]  kill_block_super+0x44/0x90
[  245.471468][ T5854]  deactivate_locked_super+0xbc/0x130
[  245.473638][ T5854]  cleanup_mnt+0x425/0x4c0
[  245.475334][ T5854]  ? lockdep_hardirqs_on+0x9c/0x150
[  245.477287][ T5854]  task_work_run+0x1d4/0x260
[  245.479147][ T5854]  ? __pfx_task_work_run+0x10/0x10
[  245.481206][ T5854]  ? __x64_sys_umount+0x122/0x160
[  245.483167][ T5854]  ? exit_to_user_mode_loop+0x40/0x110
[  245.484884][ T5854]  exit_to_user_mode_loop+0xec/0x110
[  245.486661][ T5854]  do_syscall_64+0x2bd/0x3b0
[  245.488520][ T5854]  ? lockdep_hardirqs_on+0x9c/0x150
[  245.490598][ T5854]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.492913][ T5854]  ? exc_page_fault+0x9f/0xf0
[  245.494743][ T5854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.496977][ T5854] RIP: 0033:0x7f6eddd8ff17
[  245.498724][ T5854] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  245.506181][ T5854] RSP: 002b:00007ffdf6619a58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  245.509471][ T5854] RAX: 0000000000000000 RBX: 00007f6edde11c05 RCX: 00007f6eddd8ff17
[  245.512617][ T5854] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf6619b10
[  245.515756][ T5854] RBP: 00007ffdf6619b10 R08: 0000000000000000 R09: 0000000000000000
[  245.518900][ T5854] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdf661aba0
[  245.522016][ T5854] R13: 00007f6edde11c05 R14: 000000000003bc92 R15: 00007ffdf661abe0
[  245.525188][ T5854]  </TASK>
[  245.526450][ T5854] Modules linked in:
[  245.528793][ T5854] ---[ end trace 0000000000000000 ]---
[  245.535460][ T5854] RIP: 0010:jfs_evict_inode+0x438/0x440
[  245.537716][ T5854] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 b3 f5 e8 fe e9 16 fe ff ff e8 39 8b 85 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  245.545683][ T5854] RSP: 0018:ffffc9000388fae0 EFLAGS: 00010293
[  245.548170][ T5854] RAX: ffffffff833a2077 RBX: ffff88810fc044b8 RCX: ffff88810737b980
[  245.551267][ T5854] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810fc044b8
[  245.554758][ T5854] RBP: 0000000000000001 R08: ffffffff8fa34237 R09: 1ffffffff1f46846
[  245.559504][ T5854] R10: dffffc0000000000 R11: ffffffff8339fd70 R12: dffffc0000000000
[  245.562841][ T5854] R13: dffffc0000000000 R14: ffff88810fc04140 R15: ffffffff833a1c40
[  245.566348][ T5854] FS:  00005555844e5500(0000) GS:ffff8880b8624000(0000) knlGS:0000000000000000
[  245.570073][ T5854] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  245.575762][ T5854] CR2: 00007f6ef2099fc8 CR3: 0000000112724000 CR4: 00000000000006f0
[  245.579215][ T5854] Kernel panic - not syncing: Fatal exception
[  245.582467][ T5854] Kernel Offset: disabled
[  245.584271][ T5854] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:44:30  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff820ba401 RBX=0000000000000000 RCX=ffffffff820ba49d RDX=0000000000000001
RSI=0000000000000004 RDI=ffffea000438d670 RBP=ffffc90003c2f630 RSP=ffffc90003c2f3a0
R8 =ffffea000438d673 R9 =1ffffd4000871ace R10=dffffc0000000000 R11=fffff94000871acf
R12=00007f6ef0a1d000 R13=dffffc0000000000 R14=dffffc0000000000 R15=ffffea000438d640
RIP=ffffffff820ba4a2 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555580421500 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555845005c8 CR3=000000011273a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffff8881000fd640 RBX=4998d7fdafd41b00 RCX=21bae7b91391e600 RDX=0000000000000000
RSI=ffff8881000fd640 RDI=ffff88811257d640 RBP=ffffc900040cfc38 RSP=ffffc900001b7a60
R8 =ffff88811257ebc7 R9 =1ffff110224afd78 R10=dffffc0000000000 R11=ffffed10224afd79
R12=0000000000000010 R13=1ffff11026cc7557 R14=ffff88811257d640 R15=ffff8881000febd4
RIP=ffffffff81336f14 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2f54d96bd0 CR3=000000010f0d6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000555563cbc7e0 0000555563cbc7e0 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f2f54e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
