last executing test programs:

2m12.380854787s ago: executing program 2 (id=3):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@nouid32}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
mount(&(0x7f0000000080)=@nullb, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})

2m12.15588164s ago: executing program 2 (id=8):
syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004480)='./file0\x00', 0x10040, &(0x7f0000000140), 0x1, 0x4466, &(0x7f0000008940)="$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")

2m9.612221448s ago: executing program 2 (id=32):
r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000600)={0x0, 0x0, r1, r2, 0x3, 0x6, 0x7, 0x5b, {0xabac, 0x0, 0x2, 0x6, 0xffff, 0x8, 0x5, 0x8, 0xf, 0x4, 0x8000, 0x5, 0xfffffffc, 0x1, "3c07653f7bc421b2e2bd166b8459a3fcded06e494223aa5db3e5e050b399d71c"}})

2m9.199070216s ago: executing program 32 (id=32):
r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000600)={0x0, 0x0, r1, r2, 0x3, 0x6, 0x7, 0x5b, {0xabac, 0x0, 0x2, 0x6, 0xffff, 0x8, 0x5, 0x8, 0xf, 0x4, 0x8000, 0x5, 0xfffffffc, 0x1, "3c07653f7bc421b2e2bd166b8459a3fcded06e494223aa5db3e5e050b399d71c"}})

1m14.891711633s ago: executing program 3 (id=703):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x100004, 0x5, 0x4, 0x1, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000540), 0x20000402, r0}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000100), &(0x7f0000000240)=""/99}, 0x20)

1m14.721286719s ago: executing program 3 (id=704):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000100), 0x1)

1m14.720830535s ago: executing program 3 (id=706):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r2, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x0)

1m14.697701694s ago: executing program 3 (id=707):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0xfffffffc, 0x2110, 0x2})
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000980)='./file0\x00', 0x24a080, &(0x7f0000000000)={[{@gid}, {@unhide}, {@block={'block', 0x3d, 0x100}}]}, 0x1, 0x92f, &(0x7f0000001c80)="$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")

1m14.130555519s ago: executing program 3 (id=714):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000380)='./file0\x00', 0x4cd1, &(0x7f0000000640)={[{@utf8}, {@cruft}, {@map_off}, {@utf8}, {@uid}, {@session={'session', 0x3d, 0x5}}, {@check_strict}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@session={'session', 0x3d, 0x23}}, {@uid}, {@nocompress}, {@unhide}]}, 0x4, 0xa0d, &(0x7f00000014c0)="$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")
mount$afs(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0)

1m13.771901237s ago: executing program 3 (id=722):
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="00f3000000be5500200800000000c19e57fc847c52a19b0b247df0690ca7d757194d0335d8e8a065e069e1294e9f28bcee7085d4988309e751e0eec20f77d6c68ae8"], 0x1, 0x14a, &(0x7f0000000080)="$eJzs2j9Lw0AYBvBXEJSOjk6FShQ0/7WuOoqbu0OouTR4MSURpP0C4iQonINfQvAT+Akko5suRfwSkWsPTaNCFk2E57f0gbe93r0HN716Ekc2S3WijcHVwXgpiaN2193uMZt5NLVHRG0Zsjy/MeiL5496lpPxzRfqtfI2/eysBWL/goXcd+reEgAAAAAAAAAAAAAAAAAAAAAAVKS1VGj1RXTOQu7bhWo6HB17nPtJSrRY0w7rpbXVDBcxwW9lf9yZVqzLvCNTKHYTWbdmf3+twmpf8Jdyf83TaGCmw5EeRl7gB/6J47hda9OythxzspZZXlG7U3uiLL+3CuNkxuOhK+uFebOnKvNm6v7nl0NxeVb+t8/7R2hCmKPfWfm1KQdE+Ceh+gvacJP3b0xEC27nQb5/Ri/mR6r4F+2s9/gA8JP3AAAA///ltzsl")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f00000004c0)=""/55, 0x37)

1m13.614268302s ago: executing program 33 (id=722):
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="00f3000000be5500200800000000c19e57fc847c52a19b0b247df0690ca7d757194d0335d8e8a065e069e1294e9f28bcee7085d4988309e751e0eec20f77d6c68ae8"], 0x1, 0x14a, &(0x7f0000000080)="$eJzs2j9Lw0AYBvBXEJSOjk6FShQ0/7WuOoqbu0OouTR4MSURpP0C4iQonINfQvAT+Akko5suRfwSkWsPTaNCFk2E57f0gbe93r0HN716Ekc2S3WijcHVwXgpiaN2193uMZt5NLVHRG0Zsjy/MeiL5496lpPxzRfqtfI2/eysBWL/goXcd+reEgAAAAAAAAAAAAAAAAAAAAAAVKS1VGj1RXTOQu7bhWo6HB17nPtJSrRY0w7rpbXVDBcxwW9lf9yZVqzLvCNTKHYTWbdmf3+twmpf8Jdyf83TaGCmw5EeRl7gB/6J47hda9OythxzspZZXlG7U3uiLL+3CuNkxuOhK+uFebOnKvNm6v7nl0NxeVb+t8/7R2hCmKPfWfm1KQdE+Ceh+gvacJP3b0xEC27nQb5/Ri/mR6r4F+2s9/gA8JP3AAAA///ltzsl")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f00000004c0)=""/55, 0x37)

2.287864351s ago: executing program 0 (id=1564):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4078, 0x100000}], 0x1}, 0x0)

2.232610221s ago: executing program 0 (id=1565):
syz_usb_connect(0x3, 0x48, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000047482908951300037581000000010902360041000000000904960102502f7e0009050f10200001ff08090401"], 0x0)

1.061496104s ago: executing program 0 (id=1577):
r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f02b, 0x1})

990.463224ms ago: executing program 0 (id=1578):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x9}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)="c09bd65a75b56b924573f105bd55ef2b455326e4af9f174c2609f3fb9f52", 0x1e}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x1)
shutdown(r0, 0x1)

911.240121ms ago: executing program 0 (id=1580):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x883e}]}, 0x34}}, 0x20000070)

800.825381ms ago: executing program 0 (id=1582):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0)

750.200366ms ago: executing program 4 (id=1583):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0)

701.03339ms ago: executing program 4 (id=1585):
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@private0={0xfc, 0x0, '\x00', 0x98}, 0x10})
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)

700.785586ms ago: executing program 4 (id=1586):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x10001, &(0x7f0000000500)={[{@nossd_spread}]}, 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR")
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000400)={0x1, 0x2, @status={[0x4, 0x8, 0x100, 0x0, 0x7, 0x7f]}, [0xb2, 0x2, 0x6, 0x101, 0x3, 0x5, 0x2, 0x800000000000, 0x10001, 0x10000, 0x4, 0x797, 0x58dc, 0x76, 0x100, 0x45, 0x3, 0x10, 0x0, 0x2, 0x7, 0x6, 0x7, 0x7, 0x0, 0x3, 0x5, 0x401, 0x1, 0x62, 0x6b, 0x2, 0x9, 0x8000, 0xfffffffeffffffff, 0x5, 0x4, 0x0, 0x8, 0xffffffffffffff85, 0xff, 0x80000000, 0xffffffff, 0x2, 0x200, 0xf, 0x616, 0xfffffffffffffffa, 0xe, 0x176d, 0x1, 0x6, 0xfff, 0x9, 0x5, 0x1, 0xffffffffffff0000, 0x9, 0x3, 0x0, 0x8000, 0x7fffffffffffffff, 0xbbe8, 0xf9]})

450.780853ms ago: executing program 1 (id=1589):
r0 = syz_open_dev$usbfs(&(0x7f0000000340), 0x206, 0x8401)
ioctl$USBDEVFS_BULK(r0, 0xc0185502, 0x0)

450.569139ms ago: executing program 4 (id=1590):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e21, 0x5, @mcast1, 0x6}}, [0x1, 0x3, 0x2, 0x2, 0x6, 0x9, 0x6, 0x2, 0x8, 0x0, 0x1, 0x3ff, 0xfffffffffffffffe, 0x84, 0x8]}, &(0x7f0000000300)=0x100)

400.265813ms ago: executing program 1 (id=1591):
r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x4481, 0x3380, 0x1, 0x40024a}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000380)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x10, 0x4004, @fd_index=0x3, 0x8000000000, 0x0, 0x0, 0x2, 0x1})
io_uring_enter(r0, 0x627, 0x14, 0x4b, 0x0, 0x0)

222.694186ms ago: executing program 1 (id=1592):
r0 = socket(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000007c0)="7800000018002502b9409b02ffff48000203be04020406050a08040c5c000900580004000a0000000d0085a168d0bf46d32345653600648d270015000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a000f4a32000407160005000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0)

222.500216ms ago: executing program 4 (id=1593):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'geneve1\x00', {}, 0x2})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000280)={0x0, 'team0\x00', {0x4}, 0x8001})

160.535348ms ago: executing program 1 (id=1594):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}]}]}]}, 0x38}}, 0x0)

100.320652ms ago: executing program 1 (id=1595):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_delrule={0x24, 0x18, 0x301, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0xff, 0x3, 0x0, 0x6, 0x2}, [@FIB_RULE_POLICY=@FRA_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

99.846153ms ago: executing program 4 (id=1596):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)

0s ago: executing program 1 (id=1597):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x1c5b02, 0x2f)
write(r0, &(0x7f0000004200), 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x798})

kernel console output (not intermixed with test programs):

erialNumber=3
[  109.640974][ T5891] usb 4-1: Product: syz
[  109.642853][ T5891] usb 4-1: Manufacturer: syz
[  109.644457][ T5891] usb 4-1: SerialNumber: syz
[  109.653957][ T5891] usb 4-1: config 0 descriptor??
[  109.873476][ T5891] mos7840 4-1:0.0: required endpoints missing
[  109.993406][ T7645] loop1: detected capacity change from 0 to 4096
[  110.003924][ T7645] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  110.029678][ T7645] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  110.036696][ T7645] ntfs3(loop1): Failed to load $Extend (-22).
[  110.038806][ T7645] ntfs3(loop1): Failed to initialize $Extend.
[  110.088801][ T5891] usb 4-1: USB disconnect, device number 12
[  110.187788][ T7647] loop1: detected capacity change from 0 to 512
[  110.238518][ T7647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.244440][ T7647] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.288459][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.289408][ T7652] loop0: detected capacity change from 0 to 1024
[  110.315316][ T7652] hfsplus: Unknown parameter '5_%{쑤>VW϶$Ec_7ɱK<X'
[  110.590651][ T7654] loop1: detected capacity change from 0 to 32768
[  110.597708][ T7654] 
[  110.597708][ T7654]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  110.597708][ T7654] 
[  110.622322][ T7654] read_mapping_page failed!
[  110.637347][ T7656] loop0: detected capacity change from 0 to 32768
[  110.641325][ T7654] ERROR: (device loop1): txCommit: 
[  110.641325][ T7654] 
[  110.667757][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.647'.
[  110.678401][ T7654] jfs_rmdir: dtDelete returned -2
[  110.685427][ T7656] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  110.747891][ T1138] ERROR: (device loop1): diWrite: ixpxd invalid
[  110.747891][ T1138] 
[  110.755528][ T1138] ERROR: (device loop1): txCommit: 
[  110.755528][ T1138] 
[  110.758903][ T1138] jfs_write_inode: jfs_commit_inode failed!
[  110.761523][ T5843] 
[  110.761523][ T5843]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  110.761523][ T5843] 
[  110.769898][ T5843] 
[  110.769898][ T5843]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  110.769898][ T5843] 
[  110.969193][   T33] audit: type=1800 audit(1755281374.808:34): pid=7665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.648" name="file1" dev="overlay" ino=1044 res=0 errno=0
[  110.999008][ T5850] ocfs2: Unmounting device (7,0) on (node local)
[  111.400563][ T5845] Bluetooth: hci1: link tx timeout
[  111.406329][ T5845] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  111.774561][ T7701] loop1: detected capacity change from 0 to 8192
[  111.840808][ T7708] loop1: detected capacity change from 0 to 1024
[  111.849397][ T7708] EXT4-fs: inline encryption not supported
[  111.851404][ T7708] EXT4-fs: Ignoring removed bh option
[  111.865630][ T7708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.899022][ T7708] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[  111.919715][ T7708] EXT4-fs (loop1): Remounting filesystem read-only
[  111.932099][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.973078][   T51] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  112.114086][ T7724] loop1: detected capacity change from 0 to 512
[  112.118318][ T7724] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  112.122721][   T51] usb 4-1: Using ep0 maxpacket: 16
[  112.135966][   T51] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00
[  112.139811][   T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.145287][   T51] usb 4-1: Product: syz
[  112.147027][   T51] usb 4-1: Manufacturer: syz
[  112.148213][ T7724] EXT4-fs (loop1): 1 truncate cleaned up
[  112.149416][   T51] usb 4-1: SerialNumber: syz
[  112.154285][ T7724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.161747][   T51] usb 4-1: config 0 descriptor??
[  112.166205][   T51] usb-storage 4-1:0.0: USB Mass Storage device detected
[  112.176143][   T33] audit: type=1800 audit(1755281376.008:35): pid=7724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.675" name="file2" dev="loop1" ino=16 res=0 errno=0
[  112.194189][   T51] usb-storage 4-1:0.0: Quirks match for vid 054c pid 002e: 1
[  112.197406][   T51] usb-storage 4-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty)
[  112.197406][   T51]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  112.244481][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.371679][  T793] usb 4-1: USB disconnect, device number 13
[  112.918426][ T7772] netlink: 36 bytes leftover after parsing attributes in process `syz.1.689'.
[  112.967035][ T7771] loop3: detected capacity change from 0 to 4096
[  112.999536][ T7775] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  113.022966][ T7774] loop1: detected capacity change from 0 to 256
[  113.043663][ T7774] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  113.057082][   T33] audit: type=1804 audit(1755281376.898:36): pid=7774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.691" name="/newroot/236/file0/file1" dev="loop1" ino=1048646 res=1 errno=0
[  113.096731][ T7777] Driver unsupported XDP return value 0 on prog  (id 47) dev N/A, expect packet loss!
[  113.173325][ T7783] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  113.422756][ T5891] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  113.482795][ T5845] Bluetooth: hci1: command 0x0405 tx timeout
[  113.592772][ T5891] usb 4-1: Using ep0 maxpacket: 32
[  113.596880][ T5891] usb 4-1: config 0 interface 0 has no altsetting 0
[  113.602184][ T5891] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  113.606306][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.609570][ T5891] usb 4-1: Product: syz
[  113.611487][ T5891] usb 4-1: Manufacturer: syz
[  113.613591][ T5891] usb 4-1: SerialNumber: syz
[  113.616671][ T5891] usb 4-1: config 0 descriptor??
[  113.620957][ T5891] gs_usb 4-1:0.0: Required endpoints not found
[  113.822159][ T5891] usb 4-1: USB disconnect, device number 14
[  114.621997][ T7796] loop0: detected capacity change from 0 to 40427
[  114.625051][ T7796] F2FS-fs: heap/no_heap options were deprecated
[  114.632944][ T7796] F2FS-fs (loop0): Invalid segment count (1)
[  114.634888][ T7796] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  114.639364][ T7796] F2FS-fs (loop0): invalid crc value
[  114.678891][ T7796] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  114.683319][ T7796] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30
[  114.685813][ T7796] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  114.727982][ T7805] netlink: 'syz.3.706': attribute type 11 has an invalid length.
[  114.730686][ T7805] netlink: 36 bytes leftover after parsing attributes in process `syz.3.706'.
[  114.911848][ T7811] loop0: detected capacity change from 0 to 2048
[  114.923817][ T7807] loop3: detected capacity change from 0 to 40427
[  114.927854][ T7807] F2FS-fs (loop3): invalid crc value
[  114.944173][ T7811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.995124][ T7807] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  115.004632][ T7807] F2FS-fs (loop3): Start checkpoint disabled!
[  115.015091][ T7807] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  115.041075][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.073701][ T7807] loop3: detected capacity change from 40427 to 0
[  115.082035][ T7807] syz.3.707: attempt to access beyond end of device
[  115.082035][ T7807] loop3: rw=12288, sector=28736, nr_sectors = 8 limit=0
[  115.088866][ T7807] syz.3.707: attempt to access beyond end of device
[  115.088866][ T7807] loop3: rw=12288, sector=28736, nr_sectors = 8 limit=0
[  115.099198][ T7807] syz.3.707: attempt to access beyond end of device
[  115.099198][ T7807] loop3: rw=12288, sector=28736, nr_sectors = 8 limit=0
[  115.113463][ T7807] syz.3.707: attempt to access beyond end of device
[  115.113463][ T7807] loop3: rw=12288, sector=28736, nr_sectors = 8 limit=0
[  115.119613][ T7807] syz.3.707: attempt to access beyond end of device
[  115.119613][ T7807] loop3: rw=12288, sector=28736, nr_sectors = 8 limit=0
[  115.124468][ T7807] syz.3.707: attempt to access beyond end of device
[  115.124468][ T7807] loop3: rw=12288, sector=28736, nr_sectors = 8 limit=0
[  115.128822][ T7807] syz.3.707: attempt to access beyond end of device
[  115.128822][ T7807] loop3: rw=12288, sector=28736, nr_sectors = 8 limit=0
[  115.134872][ T7807] syz.3.707: attempt to access beyond end of device
[  115.134872][ T7807] loop3: rw=12288, sector=28736, nr_sectors = 8 limit=0
[  115.139728][ T7807] syz.3.707: attempt to access beyond end of device
[  115.139728][ T7807] loop3: rw=12288, sector=28736, nr_sectors = 8 limit=0
[  115.146192][ T7807] CPU: 0 UID: 0 PID: 7807 Comm: syz.3.707 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  115.146206][ T7807] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  115.146212][ T7807] Call Trace:
[  115.146216][ T7807]  <TASK>
[  115.146248][ T7807]  dump_stack_lvl+0x189/0x250
[  115.146265][ T7807]  ? __pfx_dump_stack_lvl+0x10/0x10
[  115.146275][ T7807]  ? __pfx_queue_work_on+0x10/0x10
[  115.146283][ T7807]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  115.146294][ T7807]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  115.146309][ T7807]  f2fs_handle_critical_error+0x37c/0x540
[  115.146324][ T7807]  f2fs_get_meta_folio_retry+0x84/0xa0
[  115.146336][ T7807]  do_garbage_collect+0x72e/0x6410
[  115.146355][ T7807]  ? f2fs_get_victim+0x5a9a/0x6260
[  115.146365][ T7807]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  115.146379][ T7807]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  115.146391][ T7807]  ? check_path+0x21/0x40
[  115.146403][ T7807]  ? __pfx_do_garbage_collect+0x10/0x10
[  115.146410][ T7807]  ? f2fs_get_victim+0x5a9a/0x6260
[  115.146429][ T7807]  ? __lock_acquire+0xab9/0xd20
[  115.146457][ T7807]  ? up_write+0x1c4/0x420
[  115.146468][ T7807]  f2fs_gc+0xc87/0x2590
[  115.146491][ T7807]  ? __pfx_f2fs_gc+0x10/0x10
[  115.146501][ T7807]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  115.146516][ T7807]  ? sb_start_write+0x114/0x1c0
[  115.146525][ T7807]  ? mnt_want_write_file+0x164/0x200
[  115.146535][ T7807]  __f2fs_ioc_gc_range+0x754/0xb10
[  115.146552][ T7807]  ? __pfx___f2fs_ioc_gc_range+0x10/0x10
[  115.146566][ T7807]  __f2fs_ioctl+0x2e00/0xb610
[  115.146582][ T7807]  ? file_ioctl+0x22d/0x780
[  115.146592][ T7807]  ? __pfx_file_ioctl+0x10/0x10
[  115.146606][ T7807]  ? kasan_quarantine_put+0xdd/0x220
[  115.146618][ T7807]  ? __pfx___f2fs_ioctl+0x10/0x10
[  115.146627][ T7807]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  115.146638][ T7807]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  115.146649][ T7807]  ? do_vfs_ioctl+0xb33/0x1430
[  115.146659][ T7807]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  115.146675][ T7807]  ? __lock_acquire+0xab9/0xd20
[  115.146692][ T7807]  ? has_not_enough_free_secs+0xf8b/0x18c0
[  115.146709][ T7807]  ? f2fs_ioctl+0x184/0x250
[  115.146716][ T7807]  ? __pfx_f2fs_ioctl+0x10/0x10
[  115.146724][ T7807]  __se_sys_ioctl+0xfc/0x170
[  115.146734][ T7807]  do_syscall_64+0xfa/0x3b0
[  115.146745][ T7807]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.146752][ T7807]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  115.146762][ T7807]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.146769][ T7807] RIP: 0033:0x7f3b0538ebe9
[  115.146777][ T7807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  115.146784][ T7807] RSP: 002b:00007f3b061ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  115.146793][ T7807] RAX: ffffffffffffffda RBX: 00007f3b055b5fa0 RCX: 00007f3b0538ebe9
[  115.146799][ T7807] RDX: 0000200000000000 RSI: 000000004018f50b RDI: 0000000000000004
[  115.146804][ T7807] RBP: 00007f3b05411e19 R08: 0000000000000000 R09: 0000000000000000
[  115.146808][ T7807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  115.146813][ T7807] R13: 00007f3b055b6038 R14: 00007f3b055b5fa0 R15: 00007ffe62957468
[  115.146826][ T7807]  </TASK>
[  115.146829][ T7807] F2FS-fs (loop3): Stopped filesystem due to reason: 2
[  115.261371][ T5913] kworker/0:5: attempt to access beyond end of device
[  115.261371][ T5913] loop3: rw=395265, sector=8, nr_sectors = 8 limit=0
[  115.267747][ T5913] F2FS-fs (loop3): f2fs_commit_super fails to record stop_reason, err:-5
[  115.649993][ T6086] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.734915][ T6086] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.801313][ T6086] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.878724][ T6086] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.007518][ T7850] netlink: 16 bytes leftover after parsing attributes in process `syz.0.726'.
[  116.075991][ T6086] bridge_slave_1: left allmulticast mode
[  116.077961][ T6086] bridge_slave_1: left promiscuous mode
[  116.079822][ T6086] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.100311][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  116.106153][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  116.109485][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  116.113824][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  116.118323][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  116.121612][ T6086] bridge_slave_0: left allmulticast mode
[  116.124895][ T6086] bridge_slave_0: left promiscuous mode
[  116.128555][ T6086] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.322808][ T7856] netlink: 'syz.1.728': attribute type 32 has an invalid length.
[  116.326010][ T7856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.728'.
[  116.507790][ T6086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.514248][ T6086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.518391][ T6086] bond0 (unregistering): Released all slaves
[  116.527880][ T7856] (unnamed net_device) (uninitialized): option coupled_control: invalid value (228)
[  117.191559][ T7883] tmpfs: Group quota block hardlimit too large.
[  117.287500][ T6086] hsr_slave_0: left promiscuous mode
[  117.295035][ T6086] hsr_slave_1: left promiscuous mode
[  117.297646][ T6086] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  117.300031][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.304621][ T6086] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  117.307116][ T6086] batman_adv: batadv0: Removing interface: batadv_slave_1
[  117.317791][ T6086] veth1_macvtap: left promiscuous mode
[  117.319808][ T6086] veth0_macvtap: left promiscuous mode
[  117.321599][ T6086] veth1_vlan: left promiscuous mode
[  117.417649][ T7889] loop1: detected capacity change from 0 to 32768
[  117.423170][ T7889] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.736 (7889)
[  117.447635][ T7889] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  117.451634][ T7889] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  117.456069][ T7889] BTRFS info (device loop1): using free-space-tree
[  117.658518][ T5843] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  117.894956][ T7913] loop1: detected capacity change from 0 to 256
[  117.913698][ T7913] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001034b, chksum : 0x6322ccb6, utbl_chksum : 0xe619d30d)
[  118.007235][ T7919] loop1: detected capacity change from 0 to 1024
[  118.098436][   T27] hfsplus: b-tree write err: -5, ino 4
[  118.119538][ T6086] team0 (unregistering): Port device team_slave_1 removed
[  118.214811][ T5854] Bluetooth: hci1: command tx timeout
[  118.238147][ T6086] team0 (unregistering): Port device team_slave_0 removed
[  118.436520][ T7944] loop1: detected capacity change from 0 to 4096
[  118.457919][ T7944] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00
[  118.462087][ T7944] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00
[  118.467805][ T7944] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00
[  118.471319][ T7944] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00
[  118.479683][ T7944] ntfs3(loop1): try to read out of volume at offset 0x3fffffc1c00
[  118.494333][ T7944] ntfs3(loop1): try to read out of volume at offset 0x3fffffc2c00
[  118.497696][ T7944] ntfs3(loop1): try to read out of volume at offset 0x3fffffc4c00
[  118.502009][ T7944] ntfs3(loop1): try to read out of volume at offset 0x3fffffc8c00
[  118.505811][ T7944] ntfs3(loop1): try to read out of volume at offset 0x3fffffd0c00
[  118.509284][ T7944] ntfs3(loop1): try to read out of volume at offset 0x3fffffe0c00
[  118.738545][ T7957] loop0: detected capacity change from 0 to 4096
[  118.754949][ T7957] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  118.783965][ T7957] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  118.890232][ T7851] chnl_net:caif_netlink_parms(): no params data found
[  119.065292][ T7851] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.068482][ T7851] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.071012][ T7851] bridge_slave_0: entered allmulticast mode
[  119.075905][ T7851] bridge_slave_0: entered promiscuous mode
[  119.093549][ T7851] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.096502][ T7851] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.099392][ T7851] bridge_slave_1: entered allmulticast mode
[  119.113884][ T7851] bridge_slave_1: entered promiscuous mode
[  119.130147][ T7970] loop0: detected capacity change from 0 to 2048
[  119.140994][ T7970] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  119.226237][ T7851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  119.236368][ T7851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  119.298226][ T7851] team0: Port device team_slave_0 added
[  119.302325][ T7851] team0: Port device team_slave_1 added
[  119.340995][ T7851] batman_adv: batadv0: Adding interface: batadv_slave_0
[  119.344265][ T7851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.355009][ T7851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  119.366692][ T7851] batman_adv: batadv0: Adding interface: batadv_slave_1
[  119.369935][ T7851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  119.380595][ T7851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  119.428687][ T7851] hsr_slave_0: entered promiscuous mode
[  119.430934][ T7851] hsr_slave_1: entered promiscuous mode
[  119.434825][ T7851] debugfs: 'hsr0' already exists in 'hsr'
[  119.436697][ T7851] Cannot create hsr debugfs directory
[  119.597909][ T7986] usb usb7: usbfs: process 7986 (syz.1.762) did not claim interface 0 before use
[  119.601885][ T7986] usb usb7: usbfs: process 7986 (syz.1.762) did not claim interface 0 before use
[  120.197033][ T7851] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  120.206844][ T7851] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  120.213149][ T7851] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  120.219499][ T7851] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  120.284058][ T5854] Bluetooth: hci1: command tx timeout
[  120.300930][ T7851] 8021q: adding VLAN 0 to HW filter on device bond0
[  120.361646][ T7851] 8021q: adding VLAN 0 to HW filter on device team0
[  120.396379][ T8006] netlink: zone id is out of range
[  120.400657][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.403773][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  120.411782][ T8006] netlink: zone id is out of range
[  120.413620][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.416693][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  120.418439][ T8006] netlink: zone id is out of range
[  120.430647][ T8006] netlink: zone id is out of range
[  120.435645][ T8006] netlink: del zone limit has 4 unknown bytes
[  120.452795][  T792] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  120.619737][  T792] usb 1-1: Using ep0 maxpacket: 8
[  120.645855][  T792] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.650012][  T792] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  120.653738][  T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.664068][  T792] usb 1-1: config 0 descriptor??
[  120.677252][  T792] iowarrior 1-1:0.0: no interrupt-in endpoint found
[  120.707814][ T7851] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.778410][ T8011] loop1: detected capacity change from 0 to 32768
[  120.815190][ T8011] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  120.864965][ T8011] XFS (loop1): Ending clean mount
[  120.871476][  T792] usb 1-1: USB disconnect, device number 12
[  120.904738][ T7851] veth0_vlan: entered promiscuous mode
[  120.912093][ T7851] veth1_vlan: entered promiscuous mode
[  120.932073][ T5843] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  120.932450][ T7851] veth0_macvtap: entered promiscuous mode
[  120.940409][ T7851] veth1_macvtap: entered promiscuous mode
[  120.965807][ T7851] batman_adv: batadv0: Interface activated: batadv_slave_0
[  120.984765][ T7851] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.031209][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.040369][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.061436][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.069067][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.172324][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.187041][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.231223][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.235833][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.448382][ T8057] loop0: detected capacity change from 0 to 128
[  121.639572][ T8065] loop0: detected capacity change from 0 to 4096
[  121.645266][ T8065] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  121.648011][ T8065] UDF-fs: Scanning with blocksize 512 failed
[  121.653341][ T8065] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  121.660862][ T8065] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328)
[  121.915591][ T8086] netlink: 24 bytes leftover after parsing attributes in process `syz.1.782'.
[  122.222879][  T793] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  122.362806][ T5854] Bluetooth: hci1: command tx timeout
[  122.401327][ T8101] loop1: detected capacity change from 0 to 4096
[  122.404211][  T793] usb 5-1: Using ep0 maxpacket: 16
[  122.408694][  T793] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  122.411893][ T8101] ntfs3(loop1): Unsupported bytes per MFT record 8192.
[  122.415416][  T793] usb 5-1: config 0 has no interface number 0
[  122.420222][ T8101] ntfs3(loop1): try to read out of volume at offset 0x1ffe00
[  122.423010][  T793] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  122.431971][  T793] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d
[  122.440905][  T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.452099][  T793] usb 5-1: Product: syz
[  122.455840][  T793] usb 5-1: Manufacturer: syz
[  122.459206][  T793] usb 5-1: SerialNumber: syz
[  122.477108][  T793] usb 5-1: config 0 descriptor??
[  122.488747][  T793] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  122.525345][  T793] snd-usb-audio 5-1:0.1: probe with driver snd-usb-audio failed with error -2
[  122.568356][ T7406] udevd[7406]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  122.669467][ T8114] netlink: 132 bytes leftover after parsing attributes in process `syz.1.792'.
[  122.687744][  T792] usb 5-1: USB disconnect, device number 2
[  122.756376][ T8118] lo speed is unknown, defaulting to 1000
[  122.759690][ T8118] lo speed is unknown, defaulting to 1000
[  122.765793][ T8118] lo speed is unknown, defaulting to 1000
[  122.986020][  T792] lo speed is unknown, defaulting to 1000
[  122.990153][ T8118] infiniband sz1: set active
[  122.994273][ T8118] infiniband sz1: added lo
[  123.004457][ T8130] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  123.044381][ T8118] RDS/IB: sz1: added
[  123.046519][ T8118] smc: adding ib device sz1 with port count 1
[  123.049094][ T8118] smc:    ib device sz1 port 1 has pnetid 
[  123.055501][  T792] lo speed is unknown, defaulting to 1000
[  123.068749][ T8118] lo speed is unknown, defaulting to 1000
[  123.208375][ T8118] lo speed is unknown, defaulting to 1000
[  123.245168][ T8135] loop0: detected capacity change from 0 to 40427
[  123.248843][ T8135] F2FS-fs (loop0): build fault injection type: 0x7
[  123.261047][ T8135] F2FS-fs (loop0): invalid crc value
[  123.305047][ T8135] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  123.309481][ T8135] F2FS-fs (loop0): Start checkpoint disabled!
[  123.320408][ T8135] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  123.351806][   T90] bio_check_eod: 2 callbacks suppressed
[  123.351817][   T90] kworker/u9:3: attempt to access beyond end of device
[  123.351817][   T90] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  123.364038][   T90] CPU: 0 UID: 0 PID: 90 Comm: kworker/u9:3 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  123.364052][   T90] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  123.364057][   T90] Workqueue: writeback wb_workfn (flush-7:0)
[  123.364074][   T90] Call Trace:
[  123.364077][   T90]  <TASK>
[  123.364081][   T90]  dump_stack_lvl+0x189/0x250
[  123.364094][   T90]  ? __pfx_dump_stack_lvl+0x10/0x10
[  123.364103][   T90]  ? __pfx_queue_work_on+0x10/0x10
[  123.364111][   T90]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  123.364121][   T90]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  123.364161][   T90]  f2fs_handle_critical_error+0x37c/0x540
[  123.364182][   T90]  f2fs_write_end_io+0x886/0xb60
[  123.364196][   T90]  __submit_merged_bio+0x27a/0x6a0
[  123.364209][   T90]  __submit_merged_write_cond+0x255/0x530
[  123.364222][   T90]  f2fs_write_data_pages+0x261d/0x3000
[  123.364245][   T90]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  123.364261][   T90]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  123.364282][   T90]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  123.364292][   T90]  ? look_up_lock_class+0x74/0x170
[  123.364306][   T90]  ? trace_f2fs_writepages+0x7f/0x200
[  123.364316][   T90]  ? f2fs_write_node_pages+0x478/0x6e0
[  123.364328][   T90]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  123.364343][   T90]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  123.364354][   T90]  do_writepages+0x32e/0x550
[  123.364367][   T90]  ? reacquire_held_locks+0x127/0x1d0
[  123.364374][   T90]  ? writeback_sb_inodes+0x384/0x1010
[  123.364387][   T90]  __writeback_single_inode+0x145/0xff0
[  123.364396][   T90]  ? do_raw_spin_unlock+0x4d/0x240
[  123.364407][   T90]  writeback_sb_inodes+0x6c7/0x1010
[  123.364426][   T90]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  123.364450][   T90]  ? rcu_is_watching+0x15/0xb0
[  123.364461][   T90]  wb_writeback+0x43b/0xaf0
[  123.364474][   T90]  ? queue_io+0x321/0x590
[  123.364484][   T90]  ? __pfx_wb_writeback+0x10/0x10
[  123.364496][   T90]  ? _raw_spin_unlock_irq+0x23/0x50
[  123.364506][   T90]  wb_workfn+0x409/0xef0
[  123.364520][   T90]  ? __pfx_wb_workfn+0x10/0x10
[  123.364529][   T90]  ? __lock_acquire+0xab9/0xd20
[  123.364559][   T90]  ? process_scheduled_works+0x9ef/0x17b0
[  123.364571][   T90]  ? _raw_spin_unlock_irq+0x23/0x50
[  123.364579][   T90]  ? process_scheduled_works+0x9ef/0x17b0
[  123.364585][   T90]  ? process_scheduled_works+0x9ef/0x17b0
[  123.364594][   T90]  process_scheduled_works+0xae1/0x17b0
[  123.364612][   T90]  ? __pfx_process_scheduled_works+0x10/0x10
[  123.364626][   T90]  worker_thread+0x8a0/0xda0
[  123.364635][   T90]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  123.364647][   T90]  ? __kthread_parkme+0x7b/0x200
[  123.364659][   T90]  kthread+0x711/0x8a0
[  123.364669][   T90]  ? __pfx_worker_thread+0x10/0x10
[  123.364676][   T90]  ? __pfx_kthread+0x10/0x10
[  123.364685][   T90]  ? _raw_spin_unlock_irq+0x23/0x50
[  123.364693][   T90]  ? lockdep_hardirqs_on+0x9c/0x150
[  123.364702][   T90]  ? __pfx_kthread+0x10/0x10
[  123.364711][   T90]  ret_from_fork+0x3fc/0x770
[  123.364720][   T90]  ? __pfx_ret_from_fork+0x10/0x10
[  123.364730][   T90]  ? __switch_to_asm+0x39/0x70
[  123.364738][   T90]  ? __switch_to_asm+0x33/0x70
[  123.364747][   T90]  ? __pfx_kthread+0x10/0x10
[  123.364755][   T90]  ret_from_fork_asm+0x1a/0x30
[  123.364771][   T90]  </TASK>
[  123.364847][   T90] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  123.486635][ T8118] lo speed is unknown, defaulting to 1000
[  123.537338][ T8145] loop4: detected capacity change from 0 to 512
[  123.571997][ T8145] Quota error (device loop4): v2_read_file_info: Number of blocks too big for quota file size (268288 > 6144).
[  123.581111][ T8145] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  123.587338][ T8145] EXT4-fs (loop4): mount failed
[  123.871946][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.814'.
[  124.000764][   T33] audit: type=1326 audit(1755281387.838:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8182 comm="syz.4.821" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fedce58ebe9 code=0x0
[  124.288348][ T8188] loop1: detected capacity change from 0 to 736
[  124.426050][  T792] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  124.443073][ T5854] Bluetooth: hci1: command tx timeout
[  124.572643][  T792] usb 1-1: Using ep0 maxpacket: 16
[  124.576942][  T792] usb 1-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.581565][  T792] usb 1-1: config 0 interface 0 has no altsetting 0
[  124.586750][  T792] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00
[  124.590652][  T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.598692][  T792] usb 1-1: config 0 descriptor??
[  125.023204][  T792] corsair 0003:1B1C:1B34.0007: hidraw0: USB HID v0.05 Device [HID 1b1c:1b34] on usb-dummy_hcd.0-1/input0
[  125.497743][   T24] usb 1-1: USB disconnect, device number 13
[  125.848741][ T8211] loop4: detected capacity change from 0 to 4096
[  125.854048][ T8211] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00
[  125.857164][ T8211] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00
[  125.860137][ T8211] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00
[  125.864935][ T8211] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00
[  125.868197][ T8211] ntfs3(loop4): try to read out of volume at offset 0x3fffffc1c00
[  125.871163][ T8211] ntfs3(loop4): try to read out of volume at offset 0x3fffffc2c00
[  125.874357][ T8211] ntfs3(loop4): try to read out of volume at offset 0x3fffffc4c00
[  125.877504][ T8211] ntfs3(loop4): try to read out of volume at offset 0x3fffffc8c00
[  125.887030][ T8211] ntfs3(loop4): try to read out of volume at offset 0x3fffffd0c00
[  125.890826][ T8211] ntfs3(loop4): try to read out of volume at offset 0x3fffffe0c00
[  126.182673][ T5913] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  126.355687][ T8222] input: syz0 as /devices/virtual/input/input9
[  126.359236][ T5913] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 231, changing to 11
[  126.364773][ T5913] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 25303, setting to 1024
[  126.369677][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0
[  126.380325][ T5913] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  126.392789][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.399416][ T5913] usb 5-1: Product: syz
[  126.401079][ T5913] usb 5-1: Manufacturer: syz
[  126.403240][ T5913] usb 5-1: SerialNumber: syz
[  126.411042][ T5913] usb 5-1: config 0 descriptor??
[  126.422024][ T5913] usb 5-1: selecting invalid altsetting 0
[  126.501002][ T8227] loop0: detected capacity change from 0 to 512
[  126.507891][ T8227] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  126.511324][ T8227] System zones: 1-12
[  126.516476][ T8227] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.838: error while reading EA inode 32 err=-116
[  126.532661][   T24] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  126.536758][ T8227] EXT4-fs (loop0): Remounting filesystem read-only
[  126.539664][ T8227] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  126.546504][ T8227] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  126.550824][ T8227] EXT4-fs (loop0): 1 orphan inode deleted
[  126.554642][ T8227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.579801][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.650033][ T5913] usb 5-1: USB disconnect, device number 3
[  126.706820][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  126.710945][   T24] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  126.719011][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  126.728394][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  126.734392][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  126.743974][   T24] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  126.750183][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  126.753752][   T24] usb 2-1: Product: syz
[  126.758947][   T24] usb 2-1: Manufacturer: syz
[  126.761365][   T24] usb 2-1: SerialNumber: syz
[  126.774412][   T24] usb 2-1: config 0 descriptor??
[  126.949526][ T8239] loop0: detected capacity change from 0 to 32768
[  126.955071][ T8239] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section replicas_v0: invalid device 1 in entry (unknown data_type 206): 1/13 [0 0 0 0 0 0 0 0 0 0 1 6 108]
[  126.955071][ T8239] replicas_v0 (size 24):
[  126.955071][ T8239] btree: 1 [0] journal: 1 [0] user: 1 [0] (unknown data_type 206): 13 [0 0 0 0 0 108 1 0 0 6 0 0 0]
[  126.955071][ T8239] 
[  126.973371][ T8239] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  126.989237][   T24] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  126.991542][   T24] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  127.076954][ T8243] netlink: 168 bytes leftover after parsing attributes in process `syz.0.845'.
[  127.169802][ T8249] netlink: 180 bytes leftover after parsing attributes in process `syz.0.848'.
[  127.196595][   T24] radio-si470x 2-1:0.0: software version 0, hardware version 0
[  127.199166][   T24] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  127.212192][   T24] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  127.222391][ T8251] netlink: 'syz.0.850': attribute type 12 has an invalid length.
[  127.225687][ T8251] netlink: 120 bytes leftover after parsing attributes in process `syz.0.850'.
[  127.397529][   T24] radio-si470x 2-1:0.0: submitting int urb failed (-90)
[  127.505390][ T8270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.856'.
[  127.544955][ T8275] netlink: 28 bytes leftover after parsing attributes in process `syz.4.859'.
[  127.556973][ T8275] netlink: 28 bytes leftover after parsing attributes in process `syz.4.859'.
[  127.762039][ T5913] kernel write not supported for file /amidi2 (pid: 5913 comm: kworker/0:5)
[  128.433830][   T24] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71
[  128.439310][   T24] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71
[  128.447566][   T24] usb 2-1: USB disconnect, device number 15
[  128.610385][ T8305] loop4: detected capacity change from 0 to 256
[  128.633561][ T8305] overlayfs: failed to resolve './file0': -2
[  128.805481][ T8315] xt_socket: unknown flags 0xe4
[  129.813308][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.891'.
[  129.939470][ T8351] netlink: 324 bytes leftover after parsing attributes in process `syz.1.888'.
[  129.951308][ T8351] netlink: 36 bytes leftover after parsing attributes in process `syz.1.888'.
[  129.958080][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.888'.
[  130.360900][ T8377] batadv0: entered allmulticast mode
[  130.484805][   T33] audit: type=1326 audit(1755281394.318:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8384 comm="syz.1.906" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb845f8ebe9 code=0x7ffc0000
[  130.532212][   T33] audit: type=1326 audit(1755281394.318:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8384 comm="syz.1.906" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb845f8ebe9 code=0x7ffc0000
[  130.554721][   T33] audit: type=1326 audit(1755281394.328:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8384 comm="syz.1.906" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb845f8ebe9 code=0x7ffc0000
[  130.583491][   T33] audit: type=1326 audit(1755281394.328:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8384 comm="syz.1.906" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb845f8ebe9 code=0x7ffc0000
[  130.738861][ T8405] loop4: detected capacity change from 0 to 512
[  130.748378][ T8405] vfat: Unexpected value for 'rodir'
[  130.953448][ T8416] Bluetooth: hci3: Frame reassembly failed (-84)
[  131.184530][ T8426] loop4: detected capacity change from 0 to 1764
[  131.522644][ T5913] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  131.689252][ T5913] usb 5-1: config 8 has an invalid interface number: 223 but max is 0
[  131.703019][ T5913] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  131.707038][ T5913] usb 5-1: config 8 has no interface number 0
[  131.709501][ T5913] usb 5-1: config 8 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  131.726276][ T5913] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.45
[  131.729847][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.733761][ T5913] usb 5-1: Product: syz
[  131.735833][ T5913] usb 5-1: Manufacturer: syz
[  131.737597][ T5913] usb 5-1: SerialNumber: syz
[  131.960626][ T5913] usb 5-1: USB disconnect, device number 4
[  132.526873][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  132.529958][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  133.004707][ T5845] Bluetooth: hci3: command 0xfc11 tx timeout
[  133.007393][ T5854] Bluetooth: hci3: Entering manufacturer mode failed (-110)
[  133.071961][ T8470] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  133.111370][ T8457] loop4: detected capacity change from 0 to 32768
[  133.138288][ T8457] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  133.232432][ T8457] XFS (loop4): Ending clean mount
[  133.347082][ T7851] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  133.484619][ T8499] loop0: detected capacity change from 0 to 1024
[  133.504837][ T8499] EXT4-fs: Ignoring removed orlov option
[  133.507241][ T8499] EXT4-fs: Ignoring removed nomblk_io_submit option
[  133.554012][ T8499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.691016][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.759788][ T8493] loop1: detected capacity change from 0 to 32768
[  133.776989][ T8493] XFS (loop1): Invalid device [./bus], error=-2
[  134.328271][ T8543] loop0: detected capacity change from 0 to 4096
[  134.333658][ T8543] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  134.412686][   T51] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  134.493066][ T5851] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  134.577126][   T51] usb 5-1: config 5 has an invalid interface number: 123 but max is 0
[  134.582790][   T51] usb 5-1: config 5 has no interface number 0
[  134.585290][   T51] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  134.589704][   T51] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0x16, changing to 0x6
[  134.608744][   T51] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x6 has invalid maxpacket 157, setting to 64
[  134.614502][   T51] usb 5-1: config 5 interface 123 has no altsetting 0
[  134.619627][   T51] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  134.623452][   T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.626479][ T8556] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048)
[  134.626508][   T51] usb 5-1: Product: syz
[  134.634537][   T51] usb 5-1: Manufacturer: syz
[  134.636312][   T51] usb 5-1: SerialNumber: syz
[  134.644322][ T8536] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  134.654680][ T5851] usb 2-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  134.660107][ T5851] usb 2-1: config 1 interface 0 has no altsetting 0
[  134.674240][ T5851] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  134.678075][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  134.681325][ T5851] usb 2-1: SerialNumber: syz
[  134.868464][   T51] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'.
[  134.879355][   T51] usb 5-1: USB disconnect, device number 5
[  134.911271][ T5851] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71
[  134.922975][ T5891] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  134.923162][ T5851] usb 2-1: USB disconnect, device number 16
[  135.090097][ T5891] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  135.093714][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.097787][ T5891] usb 1-1: Product: syz
[  135.099485][ T5891] usb 1-1: Manufacturer: syz
[  135.101355][ T5891] usb 1-1: SerialNumber: syz
[  135.106064][ T5891] usb 1-1: config 0 descriptor??
[  135.113986][ T5891] usb 1-1: selecting invalid altsetting 3
[  135.116301][ T5891] comedi comedi5: could not set alternate setting 3 in high speed
[  135.119537][ T5891] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device.
[  135.127167][ T5891] usbdux 1-1:0.0: probe with driver usbdux failed with error -22
[  135.315054][ T5851] usb 1-1: USB disconnect, device number 14
[  135.435428][ T8561] loop4: detected capacity change from 0 to 4096
[  135.440131][ T8561] ntfs3(loop4): mft corrupted
[  135.442109][ T8561] ntfs3(loop4): Failed to load $MFT.
[  135.673625][ T8565] loop4: detected capacity change from 0 to 32768
[  135.679332][ T8565] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.964 (8565)
[  135.688891][ T8565] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  135.693082][ T8565] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  135.696139][ T8565] BTRFS info (device loop4): disk space caching is enabled
[  135.698450][ T8565] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  135.736784][ T8565] BTRFS info (device loop4): rebuilding free space tree
[  135.747265][ T8565] BTRFS info (device loop4): disabling free space tree
[  135.750669][ T8565] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  135.756575][ T8565] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  135.793662][ T7851] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  135.823325][ T5851] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  135.982774][ T5851] usb 2-1: Using ep0 maxpacket: 8
[  136.061566][ T5851] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  136.079174][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.098320][ T5851] usb 2-1: Product: syz
[  136.106498][ T5851] usb 2-1: Manufacturer: syz
[  136.118224][ T5851] usb 2-1: SerialNumber: syz
[  136.178862][ T5851] usb 2-1: config 0 descriptor??
[  136.192142][ T5851] gspca_main: sq930x-2.14.0 probing 2770:930c
[  136.325938][ T8604] loop4: detected capacity change from 0 to 8
[  136.335943][ T8604] SQUASHFS error: zlib decompression failed, data probably corrupt
[  136.339191][ T8604] SQUASHFS error: Failed to read block 0x9b: -5
[  136.342295][ T8604] SQUASHFS error: Unable to read metadata cache entry [99]
[  136.346442][ T8604] SQUASHFS error: Unable to read inode 0x127
[  136.608547][ T5851] gspca_sq930x: ucbus_write failed -71
[  136.834398][ T5851] gspca_sq930x: Sensor ov9630 not yet treated
[  136.836882][ T5851] sq930x 2-1:0.0: probe with driver sq930x failed with error -22
[  136.853026][ T5851] usb 2-1: USB disconnect, device number 17
[  137.019185][ T8617] loop0: detected capacity change from 0 to 32768
[  137.030718][ T8617] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  137.037606][ T8617] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  137.058537][   T33] audit: type=1800 audit(1755281400.898:42): pid=8617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.976" name="file1" dev="loop0" ino=17058 res=0 errno=0
[  137.176685][ T5296] udevd[5296]: worker [7406] terminated by signal 33 (Unknown signal 33)
[  137.180281][ T5296] udevd[5296]: worker [7406] failed while handling '/devices/virtual/block/loop1'
[  137.245849][ T5850] ocfs2: Unmounting device (7,0) on (node local)
[  137.548440][ T8641] loop4: detected capacity change from 0 to 256
[  137.579746][ T8641] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  137.585177][ T8641] FAT-fs (loop4): bogus number of directory entries (1)
[  137.587786][ T8641] FAT-fs (loop4): Can't find a valid FAT filesystem
[  137.756876][ T8633] loop0: detected capacity change from 0 to 40427
[  137.772728][ T8633] F2FS-fs: heap/no_heap options were deprecated
[  137.791002][ T8633] F2FS-fs (loop0): Mismatch start address, segment0(0) cp_blkaddr(512)
[  137.799869][ T8633] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  137.819902][ T8633] F2FS-fs (loop0): invalid crc value
[  137.833946][ T8651] __nla_validate_parse: 6 callbacks suppressed
[  137.833965][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.992'.
[  137.885365][ T8633] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  137.889921][ T8633] F2FS-fs (loop0): Start checkpoint disabled!
[  137.895022][ T8633] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  137.898001][ T8633] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  137.974828][ T1091] kworker/u10:6: attempt to access beyond end of device
[  137.974828][ T1091] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  137.980046][ T1091] CPU: 1 UID: 0 PID: 1091 Comm: kworker/u10:6 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  137.980059][ T1091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  137.980065][ T1091] Workqueue: writeback wb_workfn (flush-7:0)
[  137.980079][ T1091] Call Trace:
[  137.980083][ T1091]  <TASK>
[  137.980087][ T1091]  dump_stack_lvl+0x189/0x250
[  137.980099][ T1091]  ? __pfx_dump_stack_lvl+0x10/0x10
[  137.980107][ T1091]  ? __pfx_queue_work_on+0x10/0x10
[  137.980115][ T1091]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  137.980126][ T1091]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  137.980139][ T1091]  f2fs_handle_critical_error+0x37c/0x540
[  137.980153][ T1091]  f2fs_write_end_io+0x886/0xb60
[  137.980167][ T1091]  __submit_merged_bio+0x27a/0x6a0
[  137.980180][ T1091]  __submit_merged_write_cond+0x255/0x530
[  137.980192][ T1091]  f2fs_write_data_pages+0x261d/0x3000
[  137.980215][ T1091]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  137.980231][ T1091]  ? unwind_next_frame+0xa5/0x2390
[  137.980249][ T1091]  ? ret_from_fork_asm+0x1a/0x30
[  137.980261][ T1091]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  137.980288][ T1091]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  137.980299][ T1091]  do_writepages+0x32e/0x550
[  137.980311][ T1091]  ? reacquire_held_locks+0x127/0x1d0
[  137.980319][ T1091]  ? writeback_sb_inodes+0x384/0x1010
[  137.980332][ T1091]  __writeback_single_inode+0x145/0xff0
[  137.980341][ T1091]  ? do_raw_spin_unlock+0x4d/0x240
[  137.980352][ T1091]  writeback_sb_inodes+0x6c7/0x1010
[  137.980364][ T1091]  ? rcu_read_lock_sched_held+0x89/0x100
[  137.980378][ T1091]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  137.980403][ T1091]  ? rcu_is_watching+0x15/0xb0
[  137.980414][ T1091]  wb_writeback+0x43b/0xaf0
[  137.980426][ T1091]  ? queue_io+0x321/0x590
[  137.980436][ T1091]  ? __pfx_wb_writeback+0x10/0x10
[  137.980448][ T1091]  ? _raw_spin_unlock_irq+0x23/0x50
[  137.980459][ T1091]  wb_workfn+0x409/0xef0
[  137.980473][ T1091]  ? __pfx_wb_workfn+0x10/0x10
[  137.980483][ T1091]  ? __lock_acquire+0xab9/0xd20
[  137.980497][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  137.980507][ T1091]  ? _raw_spin_unlock_irq+0x23/0x50
[  137.980515][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  137.980521][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  137.980529][ T1091]  process_scheduled_works+0xae1/0x17b0
[  137.980547][ T1091]  ? __pfx_process_scheduled_works+0x10/0x10
[  137.980561][ T1091]  worker_thread+0x8a0/0xda0
[  137.980573][ T1091]  ? __kthread_parkme+0x7b/0x200
[  137.980585][ T1091]  kthread+0x711/0x8a0
[  137.980594][ T1091]  ? __pfx_worker_thread+0x10/0x10
[  137.980601][ T1091]  ? __pfx_kthread+0x10/0x10
[  137.980611][ T1091]  ? _raw_spin_unlock_irq+0x23/0x50
[  137.980619][ T1091]  ? lockdep_hardirqs_on+0x9c/0x150
[  137.980628][ T1091]  ? __pfx_kthread+0x10/0x10
[  137.980637][ T1091]  ret_from_fork+0x3fc/0x770
[  137.980647][ T1091]  ? __pfx_ret_from_fork+0x10/0x10
[  137.980656][ T1091]  ? __switch_to_asm+0x39/0x70
[  137.980665][ T1091]  ? __switch_to_asm+0x33/0x70
[  137.980673][ T1091]  ? __pfx_kthread+0x10/0x10
[  137.980682][ T1091]  ret_from_fork_asm+0x1a/0x30
[  137.980697][ T1091]  </TASK>
[  137.980701][ T1091] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  138.077294][ T8647] loop1: detected capacity change from 0 to 32768
[  138.144580][ T8647] XFS: attr2 mount option is deprecated.
[  138.152407][ T8647] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  138.198105][ T8647] XFS (loop1): Ending clean mount
[  138.205098][ T8647] XFS (loop1): Quotacheck needed: Please wait.
[  138.252755][ T8647] XFS (loop1): Quotacheck: Done.
[  138.339559][ T5843] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  138.379701][ T8678] netlink: 68 bytes leftover after parsing attributes in process `syz.0.995'.
[  138.607255][ T8691] capability: warning: `syz.0.1007' uses deprecated v2 capabilities in a way that may be insecure
[  138.658459][ T8696] loop0: detected capacity change from 0 to 1024
[  138.684656][ T8696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.697270][ T8696] EXT4-fs error (device loop0): ext4_generic_delete_entry:2668: inode #12: block 7: comm syz.0.1008: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0
[  138.708715][ T8696] EXT4-fs error (device loop0) in ext4_delete_inline_entry:1687: Corrupt filesystem
[  138.985303][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.216396][ T8718] pim6reg: entered allmulticast mode
[  139.222304][ T8718] pim6reg: left allmulticast mode
[  139.237995][ T8720] loop1: detected capacity change from 0 to 512
[  139.248908][ T8720] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  139.267921][ T8720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.296266][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.982655][ T5851] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  141.142160][ T5851] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  141.153634][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.157416][ T5851] usb 2-1: Product: syz
[  141.159003][ T8751] loop4: detected capacity change from 0 to 4096
[  141.159327][ T5851] usb 2-1: Manufacturer: syz
[  141.166915][ T5851] usb 2-1: SerialNumber: syz
[  141.175590][ T5851] usb 2-1: config 0 descriptor??
[  141.190252][ T5851] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  141.194093][ T5851] usb 2-1: setting power ON
[  141.196835][ T5851] dvb-usb: bulk message failed: -22 (2/0)
[  141.218193][ T5851] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  141.219475][ T8751] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[  141.225161][ T5851] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19)
[  141.225519][ T5851] dvb_usb_cxusb 2-1:0.0: probe with driver dvb_usb_cxusb failed with error -22
[  141.291577][ T8751] ntfs3: Cannot use different iocharset when remounting!
[  141.416401][   T24] usb 2-1: USB disconnect, device number 18
[  141.742706][ T5851] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  141.751126][ T8757] loop4: detected capacity change from 0 to 32768
[  141.892660][ T5851] usb 1-1: Using ep0 maxpacket: 16
[  141.896998][ T5851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.901991][ T5851] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  141.906503][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.912293][ T5851] usb 1-1: config 0 descriptor??
[  142.020066][ T8761] bridge_slave_0: left allmulticast mode
[  142.021989][ T8761] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.238965][ T8767] loop4: detected capacity change from 0 to 2048
[  142.286303][ T8765] loop1: detected capacity change from 0 to 40427
[  142.292177][ T8765] F2FS-fs (loop1): invalid crc value
[  142.302331][ T8767] Alternate GPT is invalid, using primary GPT.
[  142.311256][ T8767]  loop4: p2 p3 p7
[  142.336052][ T5851] hid-multitouch 0003:1FD2:6007.0008: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0
[  142.338128][ T8765] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  142.346906][ T8765] F2FS-fs (loop1): Start checkpoint disabled!
[  142.365513][ T8765] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  142.417424][ T1090] kworker/u10:5: attempt to access beyond end of device
[  142.417424][ T1090] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  142.422352][ T1090] CPU: 0 UID: 0 PID: 1090 Comm: kworker/u10:5 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  142.422364][ T1090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  142.422369][ T1090] Workqueue: writeback wb_workfn (flush-7:1)
[  142.422384][ T1090] Call Trace:
[  142.422387][ T1090]  <TASK>
[  142.422391][ T1090]  dump_stack_lvl+0x189/0x250
[  142.422404][ T1090]  ? __pfx_dump_stack_lvl+0x10/0x10
[  142.422413][ T1090]  ? __pfx_queue_work_on+0x10/0x10
[  142.422421][ T1090]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  142.422431][ T1090]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  142.422445][ T1090]  f2fs_handle_critical_error+0x37c/0x540
[  142.422459][ T1090]  f2fs_write_end_io+0x886/0xb60
[  142.422475][ T1090]  __submit_merged_bio+0x27a/0x6a0
[  142.422488][ T1090]  __submit_merged_write_cond+0x255/0x530
[  142.422501][ T1090]  f2fs_write_data_pages+0x261d/0x3000
[  142.422548][ T1090]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  142.422565][ T1090]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  142.422589][ T1090]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  142.422600][ T1090]  ? look_up_lock_class+0x74/0x170
[  142.422615][ T1090]  ? trace_f2fs_writepages+0x7f/0x200
[  142.422625][ T1090]  ? f2fs_write_node_pages+0x478/0x6e0
[  142.422637][ T1090]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  142.422654][ T1090]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  142.422665][ T1090]  do_writepages+0x32e/0x550
[  142.422678][ T1090]  ? reacquire_held_locks+0x127/0x1d0
[  142.422685][ T1090]  ? writeback_sb_inodes+0x384/0x1010
[  142.422699][ T1090]  __writeback_single_inode+0x145/0xff0
[  142.422709][ T1090]  ? do_raw_spin_unlock+0x4d/0x240
[  142.422720][ T1090]  writeback_sb_inodes+0x6c7/0x1010
[  142.422742][ T1090]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  142.422771][ T1090]  ? rcu_is_watching+0x15/0xb0
[  142.422784][ T1090]  wb_writeback+0x43b/0xaf0
[  142.422797][ T1090]  ? queue_io+0x321/0x590
[  142.422808][ T1090]  ? __pfx_wb_writeback+0x10/0x10
[  142.422821][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  142.422832][ T1090]  wb_workfn+0x409/0xef0
[  142.422848][ T1090]  ? __pfx_wb_workfn+0x10/0x10
[  142.422858][ T1090]  ? __lock_acquire+0xab9/0xd20
[  142.422874][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  142.422890][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  142.422898][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  142.422905][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[  142.422913][ T1090]  process_scheduled_works+0xae1/0x17b0
[  142.422957][ T1090]  ? __pfx_process_scheduled_works+0x10/0x10
[  142.422975][ T1090]  worker_thread+0x8a0/0xda0
[  142.422996][ T1090]  kthread+0x711/0x8a0
[  142.423007][ T1090]  ? __pfx_worker_thread+0x10/0x10
[  142.423014][ T1090]  ? __pfx_kthread+0x10/0x10
[  142.423024][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[  142.423033][ T1090]  ? lockdep_hardirqs_on+0x9c/0x150
[  142.423041][ T1090]  ? __pfx_kthread+0x10/0x10
[  142.423051][ T1090]  ret_from_fork+0x3fc/0x770
[  142.423061][ T1090]  ? __pfx_ret_from_fork+0x10/0x10
[  142.423071][ T1090]  ? __switch_to_asm+0x39/0x70
[  142.423080][ T1090]  ? __switch_to_asm+0x33/0x70
[  142.423088][ T1090]  ? __pfx_kthread+0x10/0x10
[  142.423098][ T1090]  ret_from_fork_asm+0x1a/0x30
[  142.423116][ T1090]  </TASK>
[  142.546446][ T5846] udevd[5846]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory
[  142.553265][ T5857] udevd[5857]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  142.560141][ T7405] udevd[7405]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  142.569084][   T24] usb 1-1: USB disconnect, device number 15
[  142.586386][ T1090] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  142.707104][ T8777] loop4: detected capacity change from 0 to 2048
[  142.734830][ T8777] Alternate GPT is invalid, using primary GPT.
[  142.737015][ T8777]  loop4: p1 p2 p3
[  142.738281][ T8777] loop4: partition table partially beyond EOD, truncated
[  142.803261][ T5846] udevd[5846]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  142.804187][ T7405] udevd[7405]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  142.809012][ T5856] udevd[5856]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  143.241485][ T8786] binfmt_misc: register: failed to install interpreter file ./bus/file0
[  143.476333][ T8794] loop1: detected capacity change from 0 to 16
[  143.508711][ T8794] erofs (device loop1): mounted with root inode @ nid 36.
[  143.648908][ T8796] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  143.806876][ T8798] loop0: detected capacity change from 0 to 1024
[  143.834036][ T8798] EXT4-fs (loop0): bad geometry: block count 4294901760 exceeds size of device (512 blocks)
[  144.164930][ T5851] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  144.322783][ T5851] usb 2-1: Using ep0 maxpacket: 32
[  144.329993][ T5851] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  144.336443][ T5851] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  144.342169][ T5854] Bluetooth: Unexpected start frame (len 16)
[  144.348561][ T5851] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  144.352157][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.377726][ T5851] usb 2-1: Product: syz
[  144.379364][ T5851] usb 2-1: Manufacturer: syz
[  144.381190][ T5851] usb 2-1: SerialNumber: syz
[  144.397020][ T5851] usb 2-1: config 0 descriptor??
[  144.464385][ T8820] loop4: detected capacity change from 0 to 1024
[  144.477581][ T8820] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  144.486786][ T8820] EXT4-fs (loop4): Test dummy encryption mode enabled
[  144.493461][ T8820] EXT4-fs (loop4): filesystem too large to mount safely on this system
[  144.701165][ T8835] loop0: detected capacity change from 0 to 2048
[  144.744453][ T7405]  loop0: p3 < > p4 < >
[  144.745824][ T7405] loop0: partition table partially beyond EOD, truncated
[  144.748400][ T7405] loop0: p3 start 4284289 is beyond EOD, truncated
[  144.757575][ T8835]  loop0: p3 < > p4 < >
[  144.759225][ T8835] loop0: partition table partially beyond EOD, truncated
[  144.761848][ T8835] loop0: p3 start 4284289 is beyond EOD, truncated
[  144.767478][ T5296]  loop0: p3 < > p4 < >
[  144.769673][ T5296] loop0: partition table partially beyond EOD, truncated
[  144.772132][ T5296] loop0: p3 start 4284289 is beyond EOD, truncated
[  144.793245][   T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  144.818210][ T5851] usb 2-1: USB disconnect, device number 19
[  144.942721][   T24] usb 5-1: Using ep0 maxpacket: 16
[  144.946754][   T24] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  144.950140][   T24] usb 5-1: config 0 has no interface number 0
[  144.955623][   T24] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  144.962892][   T24] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  144.972027][   T24] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  144.977881][   T24] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  144.981176][   T24] usb 5-1: Product: syz
[  144.985085][   T24] usb 5-1: SerialNumber: syz
[  144.992479][   T24] usb 5-1: config 0 descriptor??
[  144.997967][   T24] cm109 5-1:0.8: invalid payload size 0, expected 4
[  145.008339][   T24] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input10
[  145.203725][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  145.418217][ T5851] usb 5-1: USB disconnect, device number 6
[  145.443699][ T5851] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  145.446367][ T8848] pim6reg: entered allmulticast mode
[  145.457171][ T8848] netlink: 'syz.1.1072': attribute type 10 has an invalid length.
[  145.478270][ T8848] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[  145.484257][ T8848] team0: Failed to send options change via netlink (err -105)
[  145.488753][ T8848] team0: Port device netdevsim0 added
[  145.660118][ T8850] loop1: detected capacity change from 0 to 2048
[  145.698737][ T8850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.760922][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.292783][   T33] audit: type=1326 audit(1755281410.128:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8870 comm="syz.4.1082" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fedce58ebe9 code=0x0
[  146.584378][  T793] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  146.732672][  T793] usb 5-1: Using ep0 maxpacket: 16
[  146.737306][  T793] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  146.741288][  T793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.747419][  T793] usb 5-1: config 0 descriptor??
[  146.756031][  T793] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  146.856345][ T8902] loop1: detected capacity change from 0 to 32768
[  146.860565][ T8902] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1097 (8902)
[  146.871635][ T8902] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  146.875429][ T8902] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  146.878459][ T8902] BTRFS info (device loop1): using free-space-tree
[  146.966748][  T793] usb 5-1: Detected FT232B
[  146.993336][ T5843] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  147.168944][  T793] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  147.174531][  T793] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  147.181987][  T793] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  147.190740][  T793] usb 5-1: USB disconnect, device number 7
[  147.196830][  T793] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  147.204638][  T793] ftdi_sio 5-1:0.0: device disconnected
[  147.682693][  T793] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  147.760148][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1112'.
[  147.852802][  T793] usb 2-1: config 0 has an invalid interface number: 47 but max is 0
[  147.858554][  T793] usb 2-1: config 0 has no interface number 0
[  147.866122][  T793] usb 2-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04
[  147.872751][  T793] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.876199][  T793] usb 2-1: Product: syz
[  147.876968][ T8957] loop0: detected capacity change from 0 to 1764
[  147.878006][  T793] usb 2-1: Manufacturer: syz
[  147.887109][  T793] usb 2-1: SerialNumber: syz
[  147.891399][  T793] usb 2-1: config 0 descriptor??
[  148.086209][ T8963] batadv_slave_0: entered promiscuous mode
[  148.089806][ T8962] batadv_slave_0: left promiscuous mode
[  148.169452][  T793] go7007 2-1:0.47: probe with driver go7007 failed with error -12
[  148.178642][  T793] usb 2-1: USB disconnect, device number 20
[  148.777238][ T8981] loop1: detected capacity change from 0 to 4096
[  148.848304][ T8984] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  148.912765][   T33] audit: type=1800 audit(1755281412.698:44): pid=8981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1125" name="file1" dev="loop1" ino=15 res=0 errno=0
[  148.921302][   T33] audit: type=1800 audit(1755281412.718:45): pid=8981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1125" name="file1" dev="loop1" ino=15 res=0 errno=0
[  148.976373][ T8989] loop0: detected capacity change from 0 to 16
[  148.979738][ T8989] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  149.047438][ T8991] loop4: detected capacity change from 0 to 256
[  149.053917][ T8991] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  149.058585][ T8991] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  149.067818][ T8991] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  149.103701][   T33] audit: type=1800 audit(1755281412.938:46): pid=8991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1129" name="file1" dev="loop4" ino=1048656 res=0 errno=0
[  149.108329][ T8991] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff)
[  149.122789][ T8991] exFAT-fs (loop4): Filesystem has been set read-only
[  149.217089][ T8996] netlink: 146840 bytes leftover after parsing attributes in process `syz.4.1131'.
[  149.432689][ T5913] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  149.596369][ T5913] usb 1-1: config 8 has an invalid interface number: 223 but max is 0
[  149.599944][ T5913] usb 1-1: config 8 has no interface number 0
[  149.610077][ T5913] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  149.633814][ T5913] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  149.646283][ T5913] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  149.651360][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.657254][ T5913] usb 1-1: Product: syz
[  149.661605][ T5913] usb 1-1: Manufacturer: syz
[  149.664475][ T5913] usb 1-1: SerialNumber: syz
[  149.769400][ T9018] bond1: entered allmulticast mode
[  149.820077][ T9022] libceph: resolve 'c' (ret=-3): failed
[  149.896057][ T5913] usb 1-1: USB disconnect, device number 16
[  150.116707][ T9030] loop4: detected capacity change from 0 to 32768
[  150.119386][ T9030] btrfs: Deprecated parameter 'usebackuproot'
[  150.121431][ T9030] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  150.126034][ T9030] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1147 (9030)
[  150.132371][ T9030] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  150.136226][ T9030] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  150.139709][ T9030] BTRFS info (device loop4): using free-space-tree
[  150.191772][ T1094] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  150.200088][ T9030] BTRFS error (device loop4): failed to load root extent
[  150.212786][ T9030] BTRFS warning (device loop4): try to load backup roots slot 1
[  150.217565][  T186] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  150.222149][ T9030] BTRFS warning (device loop4): couldn't read tree root
[  150.224992][ T9030] BTRFS warning (device loop4): try to load backup roots slot 2
[  150.228166][  T186] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  150.232394][ T9030] BTRFS warning (device loop4): couldn't read tree root
[  150.235577][ T9030] BTRFS warning (device loop4): try to load backup roots slot 3
[  150.249220][ T9030] BTRFS info (device loop4): rebuilding free space tree
[  150.266331][ T9030] BTRFS info (device loop4): checking UUID tree
[  150.376697][ T7851] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  150.451296][ T9050] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  150.663939][ T9061] loop4: detected capacity change from 0 to 1764
[  150.682232][ T9061] iso9660: Corrupted directory entry in block 2 of inode 1920

syzkaller
syzkaller login: [  150.852099][ T9079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1160'.
[  150.975706][ T9088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1163'.
[  151.110473][ T9094] loop4: detected capacity change from 0 to 4096
[  151.114689][ T9094] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  151.200971][ T9096] netlink: 495 bytes leftover after parsing attributes in process `syz.4.1167'.
[  151.238806][ T9098] netlink: 'syz.4.1168': attribute type 10 has an invalid length.
[  151.247295][ T9098] team0: Device ipvlan1 failed to register rx_handler
[  151.302702][ T5891] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  151.389985][ T9104] loop4: detected capacity change from 0 to 2048
[  151.401682][ T9105] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  151.414267][ T9104] syz.4.1171: attempt to access beyond end of device
[  151.414267][ T9104] loop4: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048
[  151.420943][ T9104] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15)
[  151.425490][ T9104] syz.4.1171: attempt to access beyond end of device
[  151.425490][ T9104] loop4: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048
[  151.432221][ T9104] NILFS (loop4): I/O error reading b-tree node block (ino=16, blocknr=15)
[  151.435726][ T9104] NILFS (loop4): error -5 truncating bmap (ino=16)
[  151.484012][ T9055] Process accounting resumed
[  151.490573][ T5891] usb 1-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77
[  151.505358][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.510876][ T5891] usb 1-1: Product: syz
[  151.527509][ T5891] usb 1-1: Manufacturer: syz
[  151.529604][ T5891] usb 1-1: SerialNumber: syz
[  151.543277][ T5891] usb 1-1: config 0 descriptor??
[  151.548647][ T9111] netlink: 'syz.4.1174': attribute type 3 has an invalid length.
[  151.551858][ T9111] netlink: 'syz.4.1174': attribute type 27 has an invalid length.
[  151.657261][ T9114] loop1: detected capacity change from 0 to 4096
[  151.708797][ T9114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.755901][ T5891] usb 1-1: USB disconnect, device number 17
[  151.775606][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.823508][ T9117] loop4: detected capacity change from 0 to 32768
[  152.970279][ T9147] loop4: detected capacity change from 0 to 128
[  152.983973][ T9147] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  152.987298][ T9147] FAT-fs (loop4): Filesystem has been set read-only
[  153.217079][ T9158] loop4: detected capacity change from 0 to 4096
[  153.265467][ T9158] ntfs3(loop4): ino=19, mi_enum_attr
[  153.276430][ T9158] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  154.122674][ T5913] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  154.294508][ T5913] usb 5-1: Using ep0 maxpacket: 8
[  154.312999][ T5913] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  154.317886][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.323280][ T9183] loop1: detected capacity change from 0 to 512
[  154.326091][ T5913] usb 5-1: Product: syz
[  154.328035][ T5913] usb 5-1: Manufacturer: syz
[  154.330109][ T5913] usb 5-1: SerialNumber: syz
[  154.338396][ T9183] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1204: casefold flag without casefold feature
[  154.340450][ T5913] usb 5-1: config 0 descriptor??
[  154.345656][ T9183] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1204: couldn't read orphan inode 15 (err -117)
[  154.348946][ T5913] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  154.364052][ T9183] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.407691][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.582052][ T9193] program syz.0.1208 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  154.628445][ T9195] loop0: detected capacity change from 0 to 512
[  154.638255][ T9195] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1209: casefold flag without casefold feature
[  154.643575][ T9195] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1209: couldn't read orphan inode 15 (err -117)
[  154.649386][ T9195] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.682501][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.710206][ T9198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1210'.
[  154.714351][ T9198] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1210'.
[  155.081895][ T9215] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1213'.
[  155.140581][ T9219] loop0: detected capacity change from 0 to 1024
[  155.151705][ T9219] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  155.164566][ T9219] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  155.168685][ T9219] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  155.175342][ T9219] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: inode #32: comm syz.0.1215: iget: special inode unallocated
[  155.180676][ T9219] EXT4-fs (loop0): no journal found
[  155.184119][ T9219] EXT4-fs (loop0): can't get journal size
[  155.199421][ T9219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  155.235986][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.314760][ T9217] loop1: detected capacity change from 0 to 32768
[  155.320325][ T9217] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1214 (9217)
[  155.329117][ T9217] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  155.333355][ T9217] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  155.337132][ T9217] BTRFS info (device loop1): using free-space-tree
[  155.616746][ T9242] loop0: detected capacity change from 0 to 8192
[  155.633382][ T9242] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  155.641852][ T5913] gspca_sonixj: reg_w1 err -71
[  155.722753][ T5913] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[  155.773697][ T5913] usb 5-1: USB disconnect, device number 8
[  156.151434][ T5843] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  156.368734][ T9257] loop0: detected capacity change from 0 to 2048
[  156.377657][ T9257] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  156.389626][ T9257] NILFS (loop0): too large filesystem blocksize: 2 ^ 347668480 KiB
[  156.390034][ T5857] udevd[5857]: incorrect nilfs2 checksum on /dev/loop0
[  156.508578][ T9266] loop1: detected capacity change from 0 to 512
[  156.514717][ T9266] EXT4-fs (loop1): inodes count not valid: 2 vs 32
[  156.545523][  T186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.555008][  T186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.807555][ T9274] loop0: detected capacity change from 0 to 32768
[  156.822189][ T9274] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1233 (9274)
[  156.845890][ T9274] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  156.864393][ T9274] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  156.867887][ T9274] BTRFS info (device loop0): using free-space-tree
[  156.928186][ T9296] loop4: detected capacity change from 0 to 128
[  156.999085][ T9296] FAT-fs (loop4): error, corrupted directory (invalid i_start)
[  157.002136][ T9296] FAT-fs (loop4): Filesystem has been set read-only
[  157.085963][ T9307] netlink: 'syz.1.1241': attribute type 5 has an invalid length.
[  157.103074][ T5850] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  157.535355][ T9324] loop0: detected capacity change from 0 to 32768
[  157.538927][ T9324] (syz.0.1248,9324,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  157.544594][ T9324] (syz.0.1248,9324,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  157.569947][ T9324] JBD2: Ignoring recovery information on journal
[  157.625127][ T9324] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  157.672883][ T5891] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  157.720475][ T5850] ocfs2: Unmounting device (7,0) on (node local)
[  157.953992][ T5891] usb 2-1: not running at top speed; connect to a high speed hub
[  157.958287][ T5891] usb 2-1: config 2 has an invalid interface number: 178 but max is 0
[  157.961725][ T5891] usb 2-1: config 2 has no interface number 0
[  157.964853][ T5891] usb 2-1: config 2 interface 178 has no altsetting 0
[  157.969736][ T5891] usb 2-1: New USB device found, idVendor=0bdb, idProduct=7db7, bcdDevice=8a.0b
[  157.974195][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.978640][ T5891] usb 2-1: Product: syz
[  157.980463][ T5891] usb 2-1: Manufacturer: syz
[  157.982452][ T5891] usb 2-1: SerialNumber: syz
[  158.148640][   T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  158.372800][   T24] usb 5-1: Using ep0 maxpacket: 16
[  158.376810][   T24] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  158.381655][   T24] usb 5-1: config 222 has an invalid interface number: 127 but max is 0
[  158.384616][   T24] usb 5-1: config 222 has no interface number 0
[  158.389537][   T24] usb 5-1: config 222 has an invalid interface number: 127 but max is 0
[  158.398101][   T24] usb 5-1: config 222 has no interface number 0
[  158.405612][   T24] usb 5-1: config 222 has an invalid interface number: 127 but max is 0
[  158.413341][ T5891] cdc_mbim 2-1:2.178: probe with driver cdc_mbim failed with error -71
[  158.416716][   T24] usb 5-1: config 222 has no interface number 0
[  158.420924][   T24] usb 5-1: config 222 has an invalid interface number: 127 but max is 0
[  158.424664][   T24] usb 5-1: config 222 has no interface number 0
[  158.428195][   T24] usb 5-1: config 222 has an invalid interface number: 127 but max is 0
[  158.431079][ T5891] usb 2-1: USB disconnect, device number 21
[  158.434793][   T24] usb 5-1: config 222 has no interface number 0
[  158.443126][   T24] usb 5-1: config 222 has an invalid interface number: 127 but max is 0
[  158.446298][   T24] usb 5-1: config 222 has no interface number 0
[  158.450006][   T24] usb 5-1: config 222 has an invalid interface number: 127 but max is 0
[  158.454110][   T24] usb 5-1: config 222 has no interface number 0
[  158.457405][   T24] usb 5-1: config 222 has an invalid interface number: 127 but max is 0
[  158.460498][   T24] usb 5-1: config 222 has no interface number 0
[  158.465058][   T24] usb 5-1: New USB device found, idVendor=19d2, idProduct=1142, bcdDevice=1b.18
[  158.468197][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.471312][   T24] usb 5-1: Product: syz
[  158.473161][   T24] usb 5-1: Manufacturer: syz
[  158.475130][   T24] usb 5-1: SerialNumber: syz
[  158.712997][   T24] hub 5-1:222.127: Invalid hub with more than one config or interface
[  158.715788][   T24] hub 5-1:222.127: probe with driver hub failed with error -22
[  158.726191][   T24] option 5-1:222.127: GSM modem (1-port) converter detected
[  158.735887][   T24] usb 5-1: USB disconnect, device number 9
[  158.738897][   T24] option 5-1:222.127: device disconnected
[  158.750302][ T9350] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1259'.
[  158.849576][ T9354] loop0: detected capacity change from 0 to 2048
[  158.861387][ T9354] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  159.016019][ T9360] loop1: detected capacity change from 0 to 512
[  159.053574][ T9360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.059340][ T9360] ext4 filesystem being mounted at /391/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  159.347112][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.622380][ T9372] loop1: detected capacity change from 0 to 32768
[  159.629575][ T9372] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1266 (9372)
[  159.646814][ T9372] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  159.656038][ T9372] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  159.659570][ T9372] BTRFS info (device loop1): using free-space-tree
[  159.908121][ T5843] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  160.119658][ T9408] loop1: detected capacity change from 0 to 1024
[  160.132720][ T5891] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  160.282886][ T5891] usb 1-1: Using ep0 maxpacket: 32
[  160.295276][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.301789][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  160.306451][ T5891] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  160.313926][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.327799][ T5891] usb 1-1: config 0 descriptor??
[  160.335938][ T5891] hub 1-1:0.0: USB hub found
[  160.383440][ T9419] syz.4.1281 uses obsolete (PF_INET,SOCK_PACKET)
[  160.539848][ T5891] hub 1-1:0.0: 9 ports detected
[  160.542160][ T5891] hub 1-1:0.0: insufficient power available to use all downstream ports
[  160.744526][ T5891] hub 1-1:0.0: hub_hub_status failed (err = -71)
[  160.750023][ T5891] hub 1-1:0.0: config failed, can't get hub status (err -71)
[  160.757435][ T5891] usbhid 1-1:0.0: can't add hid device: -71
[  160.759879][ T5891] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  160.784200][ T5891] usb 1-1: USB disconnect, device number 18
[  161.236833][ T9434] loop1: detected capacity change from 0 to 1024
[  161.762770][ T5913] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  161.895491][ T9444] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  161.922634][ T5913] usb 1-1: Using ep0 maxpacket: 32
[  161.931139][ T5913] usb 1-1: config 0 has an invalid interface number: 84 but max is 1
[  161.939863][ T5913] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  161.944264][ T5913] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  161.947913][ T5913] usb 1-1: config 0 has no interface number 0
[  161.950515][ T5913] usb 1-1: config 0 interface 84 altsetting 127 endpoint 0x1 has invalid wMaxPacketSize 0
[  161.960625][ T5913] usb 1-1: config 0 interface 84 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 15
[  161.966655][ T5913] usb 1-1: config 0 interface 84 has no altsetting 0
[  161.973195][ T5913] usb 1-1: New USB device found, idVendor=05ac, idProduct=030b, bcdDevice=db.55
[  161.977415][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.980969][ T5913] usb 1-1: Product: syz
[  161.992630][ T5913] usb 1-1: Manufacturer: syz
[  161.995142][ T5913] usb 1-1: SerialNumber: syz
[  162.001576][ T5913] usb 1-1: config 0 descriptor??
[  162.059008][ T9450] netlink: 'syz.4.1294': attribute type 1 has an invalid length.
[  162.095957][ T9450] 8021q: adding VLAN 0 to HW filter on device bond2
[  162.126782][ T9450] bond2: (slave veth3): Enslaving as an active interface with a down link
[  162.146208][ T9450] bond2: (slave veth0_to_bond): making interface the new active one
[  162.150991][ T9450] veth0_to_bond: entered promiscuous mode
[  162.154231][ T9450] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  162.225270][ T5913] appletouch 1-1:0.84: Could not find int-in endpoint
[  162.227566][ T5913] appletouch 1-1:0.84: probe with driver appletouch failed with error -5
[  162.230692][ T5913] usbhid 1-1:0.84: couldn't find an input interrupt endpoint
[  162.238680][ T9453] loop4: detected capacity change from 0 to 512
[  162.241325][ T9453] EXT4-fs: Ignoring removed nobh option
[  162.266586][ T9453] EXT4-fs (loop4): Test dummy encryption mode enabled
[  162.278663][ T5913] usb 1-1: USB disconnect, device number 19
[  162.306212][ T9453] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1295: iget: bad i_size value: 38620345925642
[  162.320894][ T9453] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1295: couldn't read orphan inode 15 (err -117)
[  162.328607][ T9453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  162.375104][ T7851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.456366][ T9465] loop1: detected capacity change from 0 to 128
[  162.580248][ T9471] netlink: 'syz.4.1303': attribute type 11 has an invalid length.
[  162.583874][ T9471] netlink: 'syz.4.1303': attribute type 5 has an invalid length.
[  162.625070][ T9473] loop4: detected capacity change from 0 to 256
[  162.665635][ T9473] exfat: Deprecated parameter 'utf8'
[  162.674534][ T9473] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  162.768375][   T51] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  162.922699][   T51] usb 2-1: Using ep0 maxpacket: 16
[  162.934940][   T51] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  162.937951][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.941199][   T51] usb 2-1: Product: syz
[  162.944359][   T51] usb 2-1: Manufacturer: syz
[  162.946007][   T51] usb 2-1: SerialNumber: syz
[  162.956406][   T51] usb 2-1: config 0 descriptor??
[  162.961748][   T51] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  162.968561][   T51] usb 2-1: Detected FT232H
[  163.021679][ T9492] loop4: detected capacity change from 0 to 2048
[  163.051160][ T9497] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  163.069173][ T9492] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  163.080223][ T9492] Remounting filesystem read-only
[  163.082175][ T9492] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  163.089660][ T9492] NILFS error (device loop4): nilfs_readdir: bad page in #12
[  163.093357][ T9492] NILFS error (device loop4): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  163.169220][   T51] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  163.390155][ T9506] loop0: detected capacity change from 0 to 32768
[  163.412838][ T9506] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  163.582190][   T51] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  163.782184][   T51] usb 2-1: USB disconnect, device number 22
[  163.798302][   T51] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  163.815781][   T51] ftdi_sio 2-1:0.0: device disconnected
[  163.831258][ T5850] ocfs2: Unmounting device (7,0) on (node local)
[  164.020173][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1321'.
[  164.024079][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1321'.
[  164.210210][ T9518] loop4: detected capacity change from 0 to 512
[  164.215075][ T9510] loop0: detected capacity change from 0 to 32768
[  164.228587][ T9518] EXT4-fs: Ignoring removed mblk_io_submit option
[  164.240754][ T9518] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  164.254454][ T9518] EXT4-fs (loop4): 1 truncate cleaned up
[  164.257972][ T9518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.265723][ T9510] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  164.321549][ T9510] XFS (loop0): Ending clean mount
[  164.384225][ T7851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.630576][ T5850] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  164.781161][ T9534] evm: overlay not supported
[  165.128185][ T9536] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1327'.
[  165.305947][ T9540] loop0: detected capacity change from 0 to 32768
[  165.583233][ T9540] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  165.583247][ T9540]   allowing incompatible features above 0.0: (unknown version)
[  165.583251][ T9540]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  165.597555][ T9540] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  165.600330][ T9540] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[  165.603486][ T9540] bcachefs (loop0): Version upgrade required:
[  165.603486][ T9540] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  165.603486][ T9540] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  165.603486][ T9540]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  165.631900][ T9540] bcachefs (loop0): dropping and reconstructing all alloc info
[  165.644780][ T9540] bcachefs (loop0): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:4098:U32_MAX len 0 ver 0: (unpack error)
[  165.644809][ T9540]   invalid variable length fields, deleting
[  165.655276][ T9540] bcachefs (loop0): accounting_read... done
[  165.661449][ T9540] bcachefs (loop0): alloc_read... done
[  165.664938][ T9540] bcachefs (loop0): snapshots_read... done
[  165.667380][ T9540] bcachefs (loop0): check_allocations... done
[  165.682419][ T9540] bcachefs (loop0): going read-write
[  165.706106][   T24] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  165.723715][ T9540] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean
[  165.731748][ T9540] bcachefs (loop0): done starting filesystem
[  165.754226][ T1094] bcachefs (loop0): bucket incorrectly unset in freespace btree
[  165.754264][ T1094]   u64s 5 type deleted 0:25:0 len 0 ver 0, , continuing
[  165.806525][ T9540] bcachefs (loop0): dirent to missing inode:
[  165.806574][ T9540]   u64s 7 type dirent 4096:189491840996961599:U32_MAX len 0 ver 0: file0 -> 4098 type dir
[  165.806584][ T9540]   emergency read only at seq 11
[  165.816442][ T5913] bcachefs (loop0): going read-only
[  165.826951][ T5913] bcachefs (loop0): finished waiting for writes to stop
[  165.843249][ T5850] bcachefs (loop0): shutting down
[  165.857591][ T5913] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11
[  165.861477][ T5913] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 11
[  165.867317][ T5913] bcachefs (loop0): unclean shutdown complete, journal seq 11
[  165.875120][ T5913] bcachefs (loop0): done going read-only, filesystem not clean
[  165.903104][   T24] usb 2-1: Using ep0 maxpacket: 32
[  165.909481][ T5850] bcachefs (loop0): shutdown complete
[  165.913903][   T24] usb 2-1: config 8 has an invalid interface number: 203 but max is 0
[  165.916552][   T24] usb 2-1: config 8 has no interface number 0
[  165.918557][   T24] usb 2-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83
[  165.935007][   T24] usb 2-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024
[  165.949364][   T24] usb 2-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023
[  165.953295][   T24] usb 2-1: config 8 interface 203 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64
[  165.962627][   T24] usb 2-1: config 8 interface 203 has no altsetting 0
[  165.967231][   T24] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a
[  165.972797][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.976083][   T24] usb 2-1: Product: syz
[  165.977475][   T24] usb 2-1: Manufacturer: syz
[  165.979025][   T24] usb 2-1: SerialNumber: syz
[  165.982961][ T9548] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  165.988209][ T9548] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  166.238097][    C1] port100 2-1:8.203: NFC: Urb failure (status -71)
[  166.241168][    C1] port100 2-1:8.203: NFC: Urb failure (status -71)
[  166.245798][   T24] port100 2-1:8.203: NFC: Could not get supported command types
[  166.258208][   T24] usb 2-1: USB disconnect, device number 23
[  167.253950][   T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  167.719262][   T24] usb 2-1: Using ep0 maxpacket: 16
[  167.724091][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.728370][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  167.735337][   T24] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  167.738819][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.744021][   T24] usb 2-1: config 0 descriptor??
[  168.048191][ T9606] loop0: detected capacity change from 0 to 64
[  168.074942][ T9606] Unable to read inode block
[  168.077453][ T9606] MINIX-fs: get root inode failed
[  168.166844][   T24] HID 045e:07da: Invalid code 65791 type 1
[  168.171470][   T24] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0009/input/input11
[  168.193892][   T24] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  168.296254][ T9616] gtp0: entered promiscuous mode
[  168.298133][ T9616] gtp0: entered allmulticast mode
[  168.322842][ T5913] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  168.472751][ T5913] usb 5-1: Using ep0 maxpacket: 8
[  168.484146][ T5913] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  168.490484][ T5913] usb 5-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c
[  168.495429][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.498742][ T5913] usb 5-1: Product: syz
[  168.500479][ T5913] usb 5-1: Manufacturer: syz
[  168.502410][ T5913] usb 5-1: SerialNumber: syz
[  168.508261][ T5913] usb 5-1: config 0 descriptor??
[  168.516629][ T5913] cdc_ether 5-1:0.0: skipping garbage
[  168.518962][ T5913] usb 5-1: bad CDC descriptors
[  168.521957][ T5913] usb 5-1: unsupported MDLM descriptors
[  168.529083][ T5913] cdc_acm 5-1:0.0: skipping garbage
[  168.868284][ T5913] usb 5-1: USB disconnect, device number 10
[  169.263538][ T5913] usb 2-1: USB disconnect, device number 24
[  169.573377][ T9628] loop4: detected capacity change from 0 to 32768
[  169.593332][ T9628] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1364 (9628)
[  169.761744][ T9626] loop0: detected capacity change from 0 to 131072
[  169.764865][ T9626] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  169.767652][ T9626] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  169.780908][ T9626] F2FS-fs (loop0): invalid crc value
[  169.783969][ T9628] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  169.788878][ T9628] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  169.792343][ T9628] BTRFS info (device loop4): using free-space-tree
[  169.848788][ T9626] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  169.860075][ T9626] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  169.865264][ T9626] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  169.992502][ T9650] loop1: detected capacity change from 0 to 1024
[  170.057597][ T7851] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  170.068099][ T9650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.076535][ T9650] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.137555][ T9650] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  170.150557][ T9650] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28
[  170.157197][ T9650] EXT4-fs (loop1): This should not happen!! Data will be lost
[  170.157197][ T9650] 
[  170.161850][ T9650] EXT4-fs (loop1): Total free blocks count 0
[  170.167006][ T9650] EXT4-fs (loop1): Free/Dirty block details
[  170.169594][ T9650] EXT4-fs (loop1): free_blocks=4293918720
[  170.172039][ T9650] EXT4-fs (loop1): dirty_blocks=16
[  170.174450][ T9650] EXT4-fs (loop1): Block reservation details
[  170.177112][ T9650] EXT4-fs (loop1): i_reserved_data_blocks=1
[  170.188183][ T9650] EXT4-fs (loop1): stripe (248) is not aligned with cluster size (16), stripe is disabled
[  170.631933][ T9656] loop4: detected capacity change from 0 to 32768
[  170.645571][ T9656] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1367 (9656)
[  170.664850][ T9656] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  170.669054][ T9656] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  170.672258][ T9656] BTRFS info (device loop4): using free-space-tree
[  170.844570][ T9688] loop0: detected capacity change from 0 to 2048
[  170.849182][ T9688] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  170.950137][ T7851] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  171.133858][ T9699] input: syz0 as /devices/virtual/input/input12
[  171.929051][ T9717] vivid-000: disconnect
[  171.932857][ T9716] vivid-000: reconnect
[  172.274068][   T51] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  172.491195][   T51] usb 1-1: config 0 has no interfaces?
[  172.496298][   T51] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[  172.500649][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.520163][   T51] usb 1-1: config 0 descriptor??
[  172.708273][ T9719] loop4: detected capacity change from 0 to 131072
[  172.711753][ T9719] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[  172.714852][ T9719] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  172.723375][ T9719] F2FS-fs (loop4): invalid crc value
[  172.757642][ T9719] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  172.767314][ T9719] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  172.769880][ T9719] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  172.785298][   T51] usb 1-1: USB disconnect, device number 20
[  173.978087][ T9761] sp0: Synchronizing with TNC
[  174.052991][   T51] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  174.115808][ T5877] veth0_to_bond: left promiscuous mode
[  174.134309][ T9770] loop1: detected capacity change from 0 to 16
[  174.137618][ T9770] erofs (device loop1): mounted with root inode @ nid 36.
[  174.153784][ T9770] erofs (device loop1): bogus dirent @ nid 36
[  174.177362][ T9772] loop0: detected capacity change from 0 to 128
[  174.203569][   T51] usb 5-1: Using ep0 maxpacket: 8
[  174.214666][ T9772] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  174.218320][   T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  174.224710][   T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  174.227924][ T9772] ext4 filesystem being mounted at /525/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  174.228864][   T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  174.267338][ T5850] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  174.306056][   T51] usb 5-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f
[  174.309240][   T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.311912][   T51] usb 5-1: Product: syz
[  174.317999][   T51] usb 5-1: Manufacturer: syz
[  174.319609][   T51] usb 5-1: SerialNumber: syz
[  174.325804][   T51] usb 5-1: config 0 descriptor??
[  174.336918][   T51] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -8
[  174.567694][   T51] usb 5-1: USB disconnect, device number 11
[  174.933434][ T9790] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  175.858060][ T9813] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1428'.
[  176.174119][ T9832] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes
[  176.345348][ T9829] loop4: detected capacity change from 0 to 32768
[  176.360904][   T33] audit: type=1800 audit(1755281440.198:47): pid=9829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1435" name="file1" dev="loop4" ino=4 res=0 errno=0
[  177.215148][ T9855] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1445'.
[  177.300810][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1449'.
[  177.460721][ T9872] loop1: detected capacity change from 0 to 64
[  178.167735][ T9892] loop0: detected capacity change from 0 to 32768
[  178.171937][ T9892] BTRFS: device label  devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1462 (9892)
[  178.187376][ T9892] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  178.190879][ T9892] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  178.194227][ T9892] BTRFS error (device loop0): superblock checksum mismatch
[  178.196823][ T9892] BTRFS error (device loop0): open_ctree failed: -22
[  178.480517][ T9905] loop0: detected capacity change from 0 to 256
[  178.487450][ T9905] FAT-fs (loop0): bogus logical sector size 0
[  178.490074][ T9905] FAT-fs (loop0): Can't find a valid FAT filesystem
[  178.509315][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880283ee400: rx timeout, send abort
[  178.569287][ T9907] loop1: detected capacity change from 0 to 512
[  178.578697][ T9907] EXT4-fs: Ignoring removed nomblk_io_submit option
[  178.590436][ T9909] loop0: detected capacity change from 0 to 128
[  178.598527][ T9907] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  178.601996][ T9907] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  178.622447][ T9907] EXT4-fs (loop1): 1 truncate cleaned up
[  178.628600][ T9907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  178.666165][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.979835][ T9924] loop1: detected capacity change from 0 to 32768
[  178.989974][   T33] audit: type=1800 audit(1755281442.828:48): pid=9924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1474" name="file1" dev="loop1" ino=4 res=0 errno=0
[  179.002659][   T51] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  179.012949][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880283ee400: abort rx timeout. Force session deactivation
[  179.056582][ T9927] loop4: detected capacity change from 0 to 256
[  179.086590][ T9927] FAT-fs (loop4): Directory bread(block 64) failed
[  179.090065][ T9927] FAT-fs (loop4): Directory bread(block 65) failed
[  179.095336][ T9927] FAT-fs (loop4): Directory bread(block 66) failed
[  179.098165][ T9927] FAT-fs (loop4): Directory bread(block 67) failed
[  179.101027][ T9927] FAT-fs (loop4): Directory bread(block 68) failed
[  179.106683][ T9927] FAT-fs (loop4): Directory bread(block 69) failed
[  179.109577][ T9927] FAT-fs (loop4): Directory bread(block 70) failed
[  179.112389][ T9927] FAT-fs (loop4): Directory bread(block 71) failed
[  179.118940][ T9927] FAT-fs (loop4): Directory bread(block 72) failed
[  179.121735][ T9927] FAT-fs (loop4): Directory bread(block 73) failed
[  179.136333][ T9924] ERROR: (device loop1): dbAdjCtl: the maximum free buddy is not the old root
[  179.136333][ T9924] 
[  179.140737][ T9924] ERROR: (device loop1): remounting filesystem as read-only
[  179.154069][   T51] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  179.162802][   T51] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  179.174620][ T9929] loop4: detected capacity change from 0 to 256
[  179.177726][   T51] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  179.185047][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  179.186195][ T9929] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  179.191715][   T51] usb 1-1: SerialNumber: syz
[  179.311573][ T9933] overlayfs: missing 'lowerdir'
[  179.404251][ T9937] loop4: detected capacity change from 0 to 512
[  179.407188][ T9937] EXT4-fs: Ignoring removed i_version option
[  179.410707][ T9937] EXT4-fs: Ignoring removed mblk_io_submit option
[  179.415072][   T51] usb 1-1: 0:2 : does not exist
[  179.416218][ T9937] EXT4-fs error (device loop4): ext4_orphan_get:1392: comm syz.4.1481: inode #13: comm syz.4.1481: iget: illegal inode #
[  179.416850][   T51] usb 1-1: unit 9 not found!
[  179.421742][ T9937] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1481: couldn't read orphan inode 13 (err -117)
[  179.431609][   T51] usb 1-1: USB disconnect, device number 21
[  179.446155][ T9937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.460089][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  179.470454][ T9937] EXT4-fs error (device loop4): ext4_resize_begin:60: comm syz.4.1481: resize_inode disabled but reserved GDT blocks non-zero
[  179.497912][ T7851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.796424][ T9952] loop1: detected capacity change from 0 to 1024
[  179.803621][  T793] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  179.829144][ T1138] hfsplus: b-tree write err: -5, ino 4
[  180.056244][ T9958] loop1: detected capacity change from 0 to 32768
[  180.082982][  T793] usb 5-1: Using ep0 maxpacket: 8
[  180.095009][  T793] usb 5-1: config 6 has an invalid interface number: 213 but max is 1
[  180.098894][  T793] usb 5-1: config 6 has an invalid interface number: 211 but max is 1
[  180.103714][  T793] usb 5-1: config 6 has no interface number 0
[  180.106030][  T793] usb 5-1: config 6 has no interface number 1
[  180.108176][  T793] usb 5-1: config 6 interface 213 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  180.112289][  T793] usb 5-1: config 6 interface 213 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  180.117959][  T793] usb 5-1: config 6 interface 213 altsetting 0 endpoint 0x83 has an invalid bInterval 63, changing to 7
[  180.133515][  T793] usb 5-1: config 6 interface 213 altsetting 0 endpoint 0x83 has invalid maxpacket 57448, setting to 1024
[  180.137350][  T793] usb 5-1: config 6 interface 213 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  180.142026][  T793] usb 5-1: config 6 interface 211 has no altsetting 0
[  180.153858][ T9958] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  180.153870][ T9958]   allowing incompatible features above 0.0: (unknown version)
[  180.153876][ T9958]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  180.171864][ T9958] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  180.175378][ T9958] bcachefs (loop1): initializing new filesystem
[  180.184278][ T9958] bcachefs (loop1): going read-write
[  180.192818][ T9958] bcachefs (loop1): marking superblocks
[  180.202243][ T9958] bcachefs (loop1): initializing freespace
[  180.206704][ T9958] bcachefs (loop1): done initializing freespace
[  180.210942][ T9958] bcachefs (loop1): reading snapshots table
[  180.213275][ T9958] bcachefs (loop1): reading snapshots done
[  180.239255][ T9958] bcachefs (loop1): done starting filesystem
[  180.251710][  T793] usb 5-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=85.86
[  180.259872][  T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.276556][  T793] usb 5-1: Product: syz
[  180.278286][  T793] usb 5-1: Manufacturer: syz
[  180.280363][  T793] usb 5-1: SerialNumber: syz
[  180.445003][ T9958] syz.1.1490 (9958) used greatest stack depth: 17432 bytes left
[  180.515708][  T793] em28xx 5-1:6.213: New device syz syz @ 480 Mbps (eb1a:e357, interface 213, class 213)
[  180.519110][  T793] em28xx 5-1:6.213: Audio interface 213 found (Vendor Class)
[  180.544801][ T5843] bcachefs (loop1): shutting down
[  180.546851][ T5843] bcachefs (loop1): going read-only
[  180.548723][ T5843] bcachefs (loop1): finished waiting for writes to stop
[  180.556226][ T5843] bcachefs (loop1): flushing journal and stopping allocators, journal seq 4
[  180.586808][ T5843] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 5
[  180.594701][  T793] em28xx 5-1:6.213: unknown em28xx chip ID (0)
[  180.596489][ T5843] bcachefs (loop1): clean shutdown complete, journal seq 6
[  180.598205][  T793] em28xx 5-1:6.213: Config register raw data: 0xfffffffb
[  180.600782][ T5843] bcachefs (loop1): marking filesystem clean
[  180.605216][  T793] em28xx 5-1:6.213: AC97 chip type couldn't be determined
[  180.608440][  T793] em28xx 5-1:6.213: No AC97 audio processor
[  180.623892][  T793] usb 5-1: USB disconnect, device number 12
[  180.627488][  T793] em28xx 5-1:6.213: Disconnecting em28xx
[  180.650651][  T793] em28xx 5-1:6.213: Freeing device
[  180.652323][ T5843] bcachefs (loop1): shutdown complete
[  180.686122][ T5854] Bluetooth: hci2: command 0x0406 tx timeout
[  181.082742][   T51] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  181.182353][ T9995] netlink: 'syz.4.1502': attribute type 12 has an invalid length.
[  181.186075][ T9995] netlink: 'syz.4.1502': attribute type 29 has an invalid length.
[  181.189050][ T9995] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1502'.
[  181.192413][ T9995] netlink: 'syz.4.1502': attribute type 2 has an invalid length.
[  181.195417][ T9995] netlink: 'syz.4.1502': attribute type 3 has an invalid length.
[  181.198020][ T9995] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1502'.
[  181.235322][   T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  181.239869][   T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.254265][   T51] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  181.257915][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.275013][   T51] usb 1-1: config 0 descriptor??
[  181.503994][  T793] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  181.666922][  T793] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  181.670450][  T793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.679840][  T793] usb 5-1: config 0 descriptor??
[  181.687758][  T793] cp210x 5-1:0.0: cp210x converter detected
[  181.689410][   T51] savu 0003:1E7D:2D5A.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[  181.978806][ T5913] usb 1-1: USB disconnect, device number 22
[  182.100849][  T793] usb 5-1: cp210x converter now attached to ttyUSB0
[  182.300858][ T5913] usb 5-1: USB disconnect, device number 13
[  182.312209][ T5913] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  182.324021][ T5913] cp210x 5-1:0.0: device disconnected
[  182.660599][T10014] loop0: detected capacity change from 0 to 764
[  182.683352][T10014] Symlink component flag not implemented
[  182.687862][T10014] Symlink component flag not implemented
[  182.689862][T10014] Symlink component flag not implemented (128)
[  182.692024][T10014] Symlink component flag not implemented (122)
[  182.779748][T10022] loop1: detected capacity change from 0 to 2048
[  182.787743][T10022] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  182.808196][T10025] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  183.043125][T10047] dvmrp0: entered allmulticast mode
[  184.596860][T10088] loop4: detected capacity change from 0 to 8
[  184.735275][T10096] loop4: detected capacity change from 0 to 128
[  185.022664][  T792] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  185.174351][  T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  185.178985][  T792] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  185.183921][  T792] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  185.187796][  T792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.195201][  T792] usb 5-1: config 0 descriptor??
[  185.556104][T10109] loop0: detected capacity change from 0 to 256
[  185.570682][T10109] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  185.588186][   T33] audit: type=1800 audit(1755281449.428:49): pid=10109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1550" name="bus" dev="loop0" ino=1048667 res=0 errno=0
[  185.620012][  T792] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[  185.809890][  T792] cp2112 0003:10C4:EA90.000B: Part Number: 0x00 Device Version: 0x00
[  186.485579][T10125] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  186.492747][T10125] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  186.500249][T10125] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  186.510918][T10125] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  186.680236][   T51] usb 5-1: USB disconnect, device number 14
[  187.285805][T10147] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1568'.
[  187.320524][T10149] loop4: detected capacity change from 0 to 2048
[  187.341038][T10149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.346620][T10149] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.376717][T10149] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1569: bg 0: block 345: padding at end of block bitmap is not set
[  187.400729][ T3616] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 79 with max blocks 1 with error 28
[  187.410323][ T3616] EXT4-fs (loop4): This should not happen!! Data will be lost
[  187.410323][ T3616] 
[  187.414686][ T3616] EXT4-fs (loop4): Total free blocks count 0
[  187.417277][ T3616] EXT4-fs (loop4): Free/Dirty block details
[  187.419995][ T3616] EXT4-fs (loop4): free_blocks=0
[  187.422157][ T3616] EXT4-fs (loop4): dirty_blocks=16
[  187.425937][ T3616] EXT4-fs (loop4): Block reservation details
[  187.428613][ T3616] EXT4-fs (loop4): i_reserved_data_blocks=1
[  187.432692][ T5851] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  187.433784][ T7851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.532117][T10158] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  187.584219][ T5851] usb 1-1: Using ep0 maxpacket: 8
[  187.588569][ T5851] usb 1-1: config 0 has too many interfaces: 65, using maximum allowed: 32
[  187.591877][ T5851] usb 1-1: config 0 has an invalid interface number: 150 but max is 64
[  187.595809][ T5851] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  187.599161][ T5851] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 65
[  187.605091][ T5851] usb 1-1: config 0 has no interface number 0
[  187.607186][ T5851] usb 1-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  187.620948][ T5851] usb 1-1: config 0 interface 150 has no altsetting 0
[  187.624241][ T5851] usb 1-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75
[  187.628554][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.636781][ T5851] usb 1-1: config 0 descriptor??
[  187.868952][ T5851] usb 1-1: USB disconnect, device number 23
[  188.706422][T10187] loop1: detected capacity change from 0 to 4096
[  188.710241][T10187] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  188.739665][T10187] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  188.743996][T10187] ntfs3(loop1): ino=19, mi_enum_attr
[  188.761076][T10187] ntfs3(loop1): failed to convert "c46c" to default
[  188.766412][T10187] ntfs3(loop1): ino=20, mi_enum_attr
[  188.881729][T10191] loop4: detected capacity change from 0 to 32768
[  188.882781][  T793] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  188.885908][T10191] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1586 (10191)
[  188.899242][T10191] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  188.905756][T10191] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  188.908643][T10191] BTRFS info (device loop4): using free-space-tree
[  188.979597][ T7851] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  189.062646][  T793] usb 1-1: Using ep0 maxpacket: 8
[  189.078905][  T793] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  189.083021][  T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.093783][  T793] usb 1-1: Product: syz
[  189.104896][  T793] usb 1-1: Manufacturer: syz
[  189.106795][  T793] usb 1-1: SerialNumber: syz
[  189.111085][  T793] usb 1-1: config 0 descriptor??
[  189.125260][  T793] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  189.321135][  T793] gspca_sonixj: reg_w1 err -71
[  189.321888][T10227] netlink: 'syz.1.1595': attribute type 21 has an invalid length.
[  189.326356][  T793] sonixj 1-1:0.0: probe with driver sonixj failed with error -71
[  189.331734][  T793] usb 1-1: USB disconnect, device number 24
[  189.340483][T10229] loop4: detected capacity change from 0 to 512
[  189.347876][T10229] EXT4-fs: Ignoring removed i_version option
[  189.353337][T10229] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  189.368644][T10229] EXT4-fs (loop4): 1 truncate cleaned up
[  189.393769][T10229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.469273][ T7851] EXT4-fs warning (device loop4): ext4_xattr_inode_create:1469: refuse to create EA inode when umounting
[  189.469469][T10233] random: crng reseeded on system resumption
[  189.474191][ T7851] ------------[ cut here ]------------
[  189.478720][ T7851] WARNING: CPU: 1 PID: 7851 at fs/ext4/xattr.c:1470 ext4_xattr_inode_lookup_create+0xa80/0x1c20
[  189.483905][ T7851] Modules linked in:
[  189.486443][ T7851] CPU: 1 UID: 0 PID: 7851 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  189.491657][ T7851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  189.496030][ T7851] RIP: 0010:ext4_xattr_inode_lookup_create+0xa80/0x1c20
[  189.498854][ T7851] Code: 8b 74 24 10 e9 d4 03 00 00 e8 7c b1 3a ff 48 89 df 48 c7 c6 de c7 97 8d ba bd 05 00 00 48 c7 c1 c0 e3 9f 8b e8 21 28 fc ff 90 <0f> 0b 90 49 c7 c7 ea ff ff ff 4c 8b 74 24 10 e9 bb 03 00 00 48 8d
[  189.498868][ T7851] RSP: 0018:ffffc9000435f3e0 EFLAGS: 00010246
[  189.498882][ T7851] RAX: 6e8aaa2a435e5800 RBX: ffff8880333a6000 RCX: 6e8aaa2a435e5800
[  189.498888][ T7851] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  189.498894][ T7851] RBP: ffffc9000435f570 R08: ffffc9000435efc7 R09: 1ffff9200086bdf8
[  189.498899][ T7851] R10: dffffc0000000000 R11: fffff5200086bdf9 R12: 1ffff9200086be90
[  189.520965][ T7851] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88802bc0b290
[  189.524358][ T7851] FS:  0000555571ca1500(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  189.527400][ T7851] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  189.529569][ T7851] CR2: 00007fb846e4ad58 CR3: 000000010a0d2000 CR4: 00000000000006f0
[  189.533076][ T7851] Call Trace:
[  189.534480][ T7851]  <TASK>
[  189.535709][ T7851]  ? __pfx___might_resched+0x10/0x10
[  189.537877][ T7851]  ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10
[  189.540574][ T7851]  ? ext4_xattr_block_set+0xd6/0x2ac0
[  189.542465][ T7851]  ext4_xattr_block_set+0x223/0x2ac0
[  189.544453][ T7851]  ? __pfx___might_resched+0x10/0x10
[  189.546106][ T7851]  ? __pfx_check_xattrs+0x10/0x10
[  189.547909][ T7851]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  189.549731][ T7851]  ? ext4_xattr_block_find+0x2d4/0x350
[  189.551821][ T7851]  ext4_expand_extra_isize_ea+0x12d5/0x1ea0
[  189.554526][ T7851]  __ext4_expand_extra_isize+0x30d/0x400
[  189.556732][ T7851]  __ext4_mark_inode_dirty+0x46c/0x700
[  189.558548][ T7851]  ext4_dirty_inode+0xd0/0x110
[  189.560140][ T7851]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  189.561955][ T7851]  __mark_inode_dirty+0x2d1/0xdf0
[  189.563820][ T7851]  iput+0x1ee/0x9d0
[  189.565110][ T7851]  __dentry_kill+0x209/0x660
[  189.566683][ T7851]  ? shrink_kill+0x8d/0x2c0
[  189.568365][ T7851]  shrink_kill+0xa9/0x2c0
[  189.569927][ T7851]  shrink_dentry_list+0x2e0/0x5e0
[  189.571622][ T7851]  shrink_dcache_parent+0xa1/0x2c0
[  189.573479][ T7851]  ? __pfx_shrink_dcache_parent+0x10/0x10
[  189.575491][ T7851]  ? call_rcu+0x6ff/0x9c0
[  189.577167][ T7851]  do_one_tree+0x23/0xe0
[  189.578669][ T7851]  shrink_dcache_for_umount+0xa0/0x170
[  189.580601][ T7851]  generic_shutdown_super+0x67/0x2c0
[  189.582721][ T7851]  kill_block_super+0x44/0x90
[  189.584342][ T7851]  ext4_kill_sb+0x68/0xb0
[  189.585816][ T7851]  deactivate_locked_super+0xbc/0x130
[  189.587635][ T7851]  cleanup_mnt+0x425/0x4c0
[  189.589120][ T7851]  ? lockdep_hardirqs_on+0x9c/0x150
[  189.590841][ T7851]  task_work_run+0x1d4/0x260
[  189.592376][ T7851]  ? __pfx_task_work_run+0x10/0x10
[  189.594148][ T7851]  ? __x64_sys_umount+0x122/0x160
[  189.595880][ T7851]  ? exit_to_user_mode_loop+0x40/0x110
[  189.598012][ T7851]  exit_to_user_mode_loop+0xec/0x110
[  189.599944][ T7851]  do_syscall_64+0x2bd/0x3b0
[  189.601622][ T7851]  ? lockdep_hardirqs_on+0x9c/0x150
[  189.603635][ T7851]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.605719][ T7851]  ? exc_page_fault+0x9f/0xf0
[  189.607540][ T7851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.609514][ T7851] RIP: 0033:0x7fedce58ff17
[  189.611049][ T7851] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  189.617702][ T7851] RSP: 002b:00007fff9a950238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  189.621700][ T7851] RAX: 0000000000000000 RBX: 00007fedce611c05 RCX: 00007fedce58ff17
[  189.625453][ T7851] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff9a9502f0
[  189.628508][ T7851] RBP: 00007fff9a9502f0 R08: 0000000000000000 R09: 0000000000000000
[  189.631139][ T7851] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff9a951380
[  189.634315][ T7851] R13: 00007fedce611c05 R14: 000000000002e378 R15: 00007fff9a9513c0
[  189.637722][ T7851]  </TASK>
[  189.639064][ T7851] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  189.642062][ T7851] CPU: 1 UID: 0 PID: 7851 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  189.647314][ T7851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  189.651490][ T7851] Call Trace:
[  189.652908][ T7851]  <TASK>
[  189.654104][ T7851]  dump_stack_lvl+0x99/0x250
[  189.655982][ T7851]  ? __asan_memcpy+0x40/0x70
[  189.657898][ T7851]  ? __pfx_dump_stack_lvl+0x10/0x10
[  189.660001][ T7851]  ? __pfx__printk+0x10/0x10
[  189.661915][ T7851]  vpanic+0x281/0x750
[  189.663556][ T7851]  ? __pfx__printk+0x10/0x10
[  189.665453][ T7851]  ? __pfx_vpanic+0x10/0x10
[  189.667307][ T7851]  ? is_bpf_text_address+0x26/0x2b0
[  189.669381][ T7851]  panic+0xb9/0xc0
[  189.670976][ T7851]  ? __pfx_panic+0x10/0x10
[  189.672866][ T7851]  __warn+0x31b/0x4b0
[  189.674509][ T7851]  ? ext4_xattr_inode_lookup_create+0xa80/0x1c20
[  189.677195][ T7851]  ? ext4_xattr_inode_lookup_create+0xa80/0x1c20
[  189.679901][ T7851]  report_bug+0x2be/0x4f0
[  189.681769][ T7851]  ? ext4_xattr_inode_lookup_create+0xa80/0x1c20
[  189.684233][ T7851]  ? ext4_xattr_inode_lookup_create+0xa80/0x1c20
[  189.686860][ T7851]  ? ext4_xattr_inode_lookup_create+0xa82/0x1c20
[  189.689579][ T7851]  handle_bug+0x84/0x160
[  189.691309][ T7851]  exc_invalid_op+0x1a/0x50
[  189.693117][ T7851]  asm_exc_invalid_op+0x1a/0x20
[  189.695030][ T7851] RIP: 0010:ext4_xattr_inode_lookup_create+0xa80/0x1c20
[  189.697910][ T7851] Code: 8b 74 24 10 e9 d4 03 00 00 e8 7c b1 3a ff 48 89 df 48 c7 c6 de c7 97 8d ba bd 05 00 00 48 c7 c1 c0 e3 9f 8b e8 21 28 fc ff 90 <0f> 0b 90 49 c7 c7 ea ff ff ff 4c 8b 74 24 10 e9 bb 03 00 00 48 8d
[  189.706015][ T7851] RSP: 0018:ffffc9000435f3e0 EFLAGS: 00010246
[  189.708528][ T7851] RAX: 6e8aaa2a435e5800 RBX: ffff8880333a6000 RCX: 6e8aaa2a435e5800
[  189.711730][ T7851] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  189.715114][ T7851] RBP: ffffc9000435f570 R08: ffffc9000435efc7 R09: 1ffff9200086bdf8
[  189.718528][ T7851] R10: dffffc0000000000 R11: fffff5200086bdf9 R12: 1ffff9200086be90
[  189.721742][ T7851] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88802bc0b290
[  189.725044][ T7851]  ? __pfx___might_resched+0x10/0x10
[  189.727281][ T7851]  ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10
[  189.730142][ T7851]  ? ext4_xattr_block_set+0xd6/0x2ac0
[  189.732506][ T7851]  ext4_xattr_block_set+0x223/0x2ac0
[  189.734841][ T7851]  ? __pfx___might_resched+0x10/0x10
[  189.737101][ T7851]  ? __pfx_check_xattrs+0x10/0x10
[  189.739208][ T7851]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  189.741696][ T7851]  ? ext4_xattr_block_find+0x2d4/0x350
[  189.744055][ T7851]  ext4_expand_extra_isize_ea+0x12d5/0x1ea0
[  189.746650][ T7851]  __ext4_expand_extra_isize+0x30d/0x400
[  189.749078][ T7851]  __ext4_mark_inode_dirty+0x46c/0x700
[  189.751456][ T7851]  ext4_dirty_inode+0xd0/0x110
[  189.753536][ T7851]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  189.755843][ T7851]  __mark_inode_dirty+0x2d1/0xdf0
[  189.758038][ T7851]  iput+0x1ee/0x9d0
[  189.759719][ T7851]  __dentry_kill+0x209/0x660
[  189.761738][ T7851]  ? shrink_kill+0x8d/0x2c0
[  189.763697][ T7851]  shrink_kill+0xa9/0x2c0
[  189.765582][ T7851]  shrink_dentry_list+0x2e0/0x5e0
[  189.767774][ T7851]  shrink_dcache_parent+0xa1/0x2c0
[  189.769996][ T7851]  ? __pfx_shrink_dcache_parent+0x10/0x10
[  189.772450][ T7851]  ? call_rcu+0x6ff/0x9c0
[  189.774357][ T7851]  do_one_tree+0x23/0xe0
[  189.776223][ T7851]  shrink_dcache_for_umount+0xa0/0x170
[  189.778588][ T7851]  generic_shutdown_super+0x67/0x2c0
[  189.780874][ T7851]  kill_block_super+0x44/0x90
[  189.782924][ T7851]  ext4_kill_sb+0x68/0xb0
[  189.784673][ T7851]  deactivate_locked_super+0xbc/0x130
[  189.786909][ T7851]  cleanup_mnt+0x425/0x4c0
[  189.788865][ T7851]  ? lockdep_hardirqs_on+0x9c/0x150
[  189.791132][ T7851]  task_work_run+0x1d4/0x260
[  189.793166][ T7851]  ? __pfx_task_work_run+0x10/0x10
[  189.795405][ T7851]  ? __x64_sys_umount+0x122/0x160
[  189.797626][ T7851]  ? exit_to_user_mode_loop+0x40/0x110
[  189.799993][ T7851]  exit_to_user_mode_loop+0xec/0x110
[  189.802272][ T7851]  do_syscall_64+0x2bd/0x3b0
[  189.804279][ T7851]  ? lockdep_hardirqs_on+0x9c/0x150
[  189.806569][ T7851]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.809188][ T7851]  ? exc_page_fault+0x9f/0xf0
[  189.811248][ T7851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.813822][ T7851] RIP: 0033:0x7fedce58ff17
[  189.815786][ T7851] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  189.823941][ T7851] RSP: 002b:00007fff9a950238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  189.827236][ T7851] RAX: 0000000000000000 RBX: 00007fedce611c05 RCX: 00007fedce58ff17
[  189.829831][ T7851] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff9a9502f0
[  189.832458][ T7851] RBP: 00007fff9a9502f0 R08: 0000000000000000 R09: 0000000000000000
[  189.835039][ T7851] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff9a951380
[  189.837637][ T7851] R13: 00007fedce611c05 R14: 000000000002e378 R15: 00007fff9a9513c0
[  189.840219][ T7851]  </TASK>
[  189.841940][ T7851] Kernel Offset: disabled
[  189.843356][ T7851] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:10:53  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=0000000000000000 RCX=7cc3c8d4553f0d00 RDX=0000000000000000
RSI=ffffffff8dba607a RDI=ffffffff8be33400 RBP=ffffffff8172c195 RSP=ffffc900037c7398
R8 =0000000000000000 R9 =ffffffff8172c195 R10=ffffc900037c7558 R11=ffffffff81ac3870
R12=0000000000000002 R13=ffffffff8e139ee0 R14=0000000000000000 R15=0000000000000246
RIP=ffffffff819d5c14 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb846e49fc8 CR3=0000000027cd4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000003e93ea3 0000000000000000 XMM01=7a79730000000000 00000000106b1664
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=0200000000000000 00000000000002ff
XMM06=0200000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000435eb90
R8 =ffff888108248237 R9 =1ffff11021049046 R10=dffffc0000000000 R11=ffffffff854f0370
R12=dffffc0000000000 R13=ffffffff99af98d2 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f03ec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555571ca1500 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb846e4ad58 CR3=000000010a0d2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fb846187498 00007fb846187470 XMM03=00007fb8461874a8 00007fb8461874a0
XMM04=00007fb846ced100 00007fb846187460 XMM05=00007fb846187478 00007fb8461874c0
XMM06=00007fb8461874b8 00007fb8461874b0 XMM07=00007fb8461874a8 00007fb8461874a0
XMM08=0000000000000000 00007fb846012ee7 XMM09=0000000000000000 00007fb846012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
