last executing test programs:

13m11.677128s ago: executing program 32 (id=169):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x2a)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0xf4fb, 0xfff, 0x9})

10m59.439569004s ago: executing program 33 (id=1456):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

8m14.429410151s ago: executing program 34 (id=3214):
r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x14, 0x4})
ioctl$DVB_DEMUX_DMX_START(r0, 0x6f29)

8m1.437674093s ago: executing program 6 (id=3290):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})

8m0.913674536s ago: executing program 6 (id=3292):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1e4062, &(0x7f00000000c0)=ANY=[@ANYBLOB='mode=0'])

8m0.188561584s ago: executing program 6 (id=3297):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x800000000000001, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, {0xa, 0x4e24, 0x0, @mcast1, 0x2}, r1, 0x5}}, 0x48)

7m59.611783109s ago: executing program 35 (id=3297):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x800000000000001, &(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x2, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, {0xa, 0x4e24, 0x0, @mcast1, 0x2}, r1, 0x5}}, 0x48)

6m43.088611298s ago: executing program 36 (id=4009):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, &(0x7f0000002640))

6m37.600137525s ago: executing program 4 (id=4055):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7, 0x0, 0x60}}, 0x14}}, 0x0)

6m35.637230394s ago: executing program 4 (id=4062):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400d06"], 0x0, 0x0, 0x0, 0x0})

6m32.496153731s ago: executing program 4 (id=4075):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x40, 0x0, 0x9}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x3, 0x2000, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}}}}}}, 0x0)

6m31.770235339s ago: executing program 4 (id=4078):
syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xaed, &(0x7f0000000340)="$eJzs3V2IXFcBAOBzZ3c2u0lrJjW1axrbpNW2/nTTbNb4EzQpyYuhKeJLofgS0rQGYwQrqKXQJE++2VJS8MkffOpLqSJYEAl98qVgA0XoUxX0oSFiwYcaTbZk55yZOyczmZn9mZ/d74O7Z+49595z7t07d+7fOScAG1Zl6e/CwmwRwoU3Xj7y/gP/nLkx5WAjRW3p72RprBpCKOL4ZLa89ybq4bUPnj/RLizC/NLfNB4ev9KYd0sI4WzYFS6GWthx4dJLb80/duzc0fO73371wOW1WXsAANhYvnnxwMKdf/vL3duuvnbPobCpMT2dn9fShOn6ef+heOKfzv8roXW8KA1lU1m6yThUZlrTTbRJV86nmqWb7JD/VJZ/tUO6TeHW+U+UprVbbxhnaT+uhaIyF0LY3BivVObm6tfkYem6fqqYO3Pq9NPPDqmgwKr7z70hhF2l4fD51vFRGw6OQBmWOSyOQBnGcjg0uLyuLtYNfZ0HNCxuHfYRCKAuf154k7P5nYWVaSxtsrf8rzxaaT8/rIJB7/995T815PyD/H9zzhGH1bNe96a0Xul7dFscz58j5O8vvfLH1vma8icdrVPz5xHVHsvZ6TnCuDxf6FTOiQGXY7k6lT/fL9arr8UwbYevt8Te2/L9yf+n4/I/Btr7ML//bzAYRnsILePVlSxrccjHH2B05e/NLabno1H+Xl8ev6lL/HSX+Jku8Zu7xG/pEg8b2e9++LPwYtG835Vf0/d7PzzdZ7s9hh/rszz5/ch+88/f++3XSvPP3yeGUfaH40+c/PJTT16qv/9fNPb/63F/T5cbtfjduhgTpPuF+X31xrv/tdZ8Kh3S3ZGV5/Y26Zc+b29NV2xvLieUjjM3lWO2db6tndLtbE1Xy9LNxGE6K29+frI5my+df6Tjatpek9n6VrP1mMrKkY4r22KYlwOWI+2P6f3/Zn2A+vv/af+cDdXi6VOnTz4Sx9N++ueJ6qYb0/cOuNzA6un0/U+/X7Ohtf7PbY3p1Ur5uLC1Ob2oHxdej8trnT7fyKc0vfSjln7nvjMxs5R+7sT3Tz+1BusNG9mzP3nuu8dPnz75Ax+W+SFdAYxKeXr6kAo9KuXxod8Pu9Y6iyEelICB2PNC/STg4VPfO/7MyWdOntm3f/+++fn9X9m3sGfpvH5P+ey+7OwQSguspuaP/rBLAgAAAAAAAAAAAPTqR0ePXHrnzS+9W6//36z/l+r/pzd/U/3/n2b1//N68qkefKoHuK1N/FKarIHVqSxdNQ4fz8qbmgEoXqiHd2bzfSKGjX78Yv3/lF3ermsqz13Z9GqH0aw5gZvaS5nK2iDJ+wu8L4bnY/jrAENUzLSfHMNbtG9dfFja11P7FKUqvIvaBx4f6f+Wt1+U6n+3bdepTX1txssgaiwOex2B9v61odr//ndzxYdelmUOkyNQhjUfJgeb38/HfJ9YwbDY8Sy91x5sAFbHsPv//Eeo55vuf5750zembwwp2ZVHW4+Xeful0I+/vtM6Pur9T651/nm/fYPOf9jrP+j+Pxv938XjXzrudT7+ZT3m1ZaX739/cfndUrZhR6/55+uf2oHe3l/+V2P+aW0eDL3lv/irLP/8gVCP/pflv7nH/G9a/53Ly///Mf+02R66v9f86yUuKq3lmMnWIz3/y+8bJ9ey9U9te94i/2891279l9lR4/WYP2xk49LPbL+y84jGSXu3/n/7/f1faf+/jcJmh7X8PYwvxvF4IJ5I7znk/Z30W/70fkX6HUjvU6TlF11+3/T/O96+GsNu34fU/2/aH2vxJ780vrQt03i1zbZdr8caGFfvbajnf4MaLtcvg5Y3//Qql6f5ls7Qt8tYDZUet9vixDKWv2lE/ieLizf3eTdIw8yb4W//YT99HvZ1yn1Dzr+bvP/f/Bw+7/83j8/7/83j8/5/8/iZ+B96v0N83v9vvj/n/f/m8Xdly837B57tEv/JNvFFaMbvaD9/47L97i7L39kl/lNd4nc34g+2pEjx99xy/ma6Tsu/o0v8/V3iP90l/jNd4h/oEv9QKb7cB3SK/2w2f5HFr3fp+NNp+wHrV14/z/cfNo70/KfT9397M36qnGSwpQTWwiuv7T385G+/XavX/59q3A9Jz/EOxfFqvDb6cRzPn3uH0viNuDfj+N+z+GHfbwKa8vYz8t//B7vEA+Mrvefl+w0bUDHdfnIMu7Vb1ek8n/HyuRh+PoZfiOHDMZyL4Z4Y7o3h/IDKx9o4/PrvD7xYNK/3t2bxvb5PntcHamknKoSwr8fy5PcH+n2fPW/Hr18rzX+Z1cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACGprL0d2FhtgjhwhsvH3ni2Kk9N6YcbKSoLf2dLI1VG/OF8EgMJ2L4y/jh2gfPnyiH12NYhPlQhKIxPTx+pZHTlhDC2bArXAy1sOPCpZfemn/s2Lmj53e//eqBy2u3BQAAAGD9+ygAAP//Tm4CbA==")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080))
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

6m30.761917624s ago: executing program 4 (id=4087):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0)
recvmsg$kcm(r0, 0x0, 0x2000)

6m29.440232347s ago: executing program 4 (id=4102):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0xfa, 0x6af, &(0x7f0000001680)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

6m28.878254201s ago: executing program 37 (id=4102):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0xfa, 0x6af, &(0x7f0000001680)="$eJzs3c9v2+Ydx/EP5V+yO6TDNhRBkB9PkhVwsEyR5MaBkQEtR1E2N0kUSHmwgQFF1thFEDndkg5YfOl82Q+gA3berZcddts/MKDn/he7bUCx3TZsBw4kRVmyRMlOHDdZ3i8iEfXwy+f5klT4hLb4UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJZTK5crlhpea3PL5HNqgd+csDytbU430pkbU9uVrPiPikWdT4vOf+tw8VvxX9d0MX13UcX4paj9N976+t1vzhay9Sck9Cx00gqfPN1/eK/b3Xl8jNgZnbj6r5IKxwhad1te6HtNe901XuibtdXV8q2NemjqXsMNt8OO2zRO4BY6fmCWnRumsra2YtzStr/ZWq/ZDTcrvPPdarm8an6wkB5oSaXQ2fAaDa+1nsTEi+OYO+bTH6cBrt00ZvdBd2dlWpJxUCVvYWEgqDqtpmq5Wq1UqtXK6u2123fK5dmRgnLMKvdpJOLUP7R4xZzeyRt4ToW4//+rJTVUVEub2pKJp7kswPQmRzUF8tXslwxPPVn///Ytd2K7g/1/1sufl97tLb6gpP+/nL67nNf/5+RiZIqDuQ9OVk75tCl6c/DdXJKR0RM91b4e6p666mpHj5+p7pHpyqnUcgbTuly15CmUL09N2UmJ6ZUYrWlVqyrrfW2orlBGdXlqyFWobYXqyE0+UY4CubLVka9ARstydENGFa1pTSsyclXStnxtqqV11WTrX1EU7epBst9XJuSoLKiSE7AwGFSdUFNe//+TT9LPaa//L9P/v67Sz8FC+vLFpBjgJRD1rv9P6MqLyQYAAAAAALwIVvLTdyv53f0lSZHqXsMt568wf5bZAQAAAACA02ApWtBFWfH1v6RLsqZc/wMAAAAAgFeOldxjZ0laSr7Ubx3eCXWcHwLMnEGKAAAAAADgOSV3/l+el6Jk0Iorsk50/Q8AAAAAAF4BvxkYY382G2M3yn6tX5AUthesv/xjQcGcddDe+ra1Z8dL7L2ZQhIy8g2ATv2CFf4+Hag3Ga93XlLyznEvWr3WeoNg9scd/HJ32lj/VnAkgfmZwQqOJHCut7YVt7w623unT3X13aHY+/sFxUveTFtZqnsNt+T4jbsV2fa5Qsfd6vz80YNfSEF/O3cfdHdKH3zUvZ/kchAXHezFeXySpfPn+d6uG8xlMU2in8t/o5R0aewWL6qeNfnbVnPJStotZ9s/I3uvcHiMcrd/uE39StfSY3ZtKY1d2u+PuB9vfzHe/kopOWRDWx/MWYdZVI5u+bgDkZNFMcniehpzffl6+pLlF9dTsIrfmZGqpdFjMJRFdTCL6fvC+ufIvpiURW9frMRZfB5XlJPFyvGz+Hc05ogAwFdlNxn1J7nzLxnEfKTfzbqH7KT2TP3O9N79veHe/eM/xD1j+t+L2d7vJia2UlR8Rl+2kn5oXsmJdfbCyBk92xr7XFE5Z/Tyc/RucVt/OnwGUi/tkSz+E0XR3UrS7u+O9KqfxSt8lttu2Eh3+62P936aDIAf+3Dnw51H1erKavmdcvl2VXPJZvReZpSbKQDg9TX9GTtTI6x3dDWNuHr/72+nc0M93jf6Xyko6QN9pK7uay57hMCV8bUuDXwN4WZ61aqBq1YTX1FLR2Mrupl7VZf0pQOx1X5s9qyjo1eAh7ErL/goAABwtq5N6YfH9//Fof7/ppbTiOULY6+7h/vy3tVx/5I+L7YyPfn3TntvAADwenCDL62lzq+tIPDa71fW1ip2Z8M1ge/80ARebd01XqvjBs6G3Vp3TTvwO77jN0w70IJXc0MTbrbbftAxdT8wbT/0tpInv5veo99Dt2m3Op4TthuuHbrG8Vsd2+mYmhc6pr35/YYXbrhBsnLYdh2v7jl2x/NbJvQ3A8ctGRO67kCgV3NbHa/uxbMt0w68ph1smx/5jc2ma2pu6AReu+OnFWZtea26HzSTakuKTvygQwAA/h89ebr/8F63u/P46MxifGmelhwoJ2Z0Zn5MhYwRBADAS+awuz7BSsX+3OfRC8kKAAAAAAAAAAAAAAAAAAAAAAAMmn5L3wln5sbdLCj1S352rleiX+rwFsOReiyddmInmSmcdK3sloj9h19MCF7sl2S7fzDm4Mw28G9fk95ISpSWzI4LLubXY01va3HCwT3mzEy8g44b/L3ddI/mxsQLxy5a6B+L2dP/5xDPPPpjzqIoiqLJqy8M78P5SRs4PDMr6fH8cxyCsz8XAThb/wsAAP//qmg/RQ==")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x20)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

6m25.374911938s ago: executing program 8 (id=4137):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0))

6m25.201471752s ago: executing program 9 (id=4139):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=@delchain={0x24, 0x65, 0x800, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000100000d0a0000000001000000000000000000000900000d"], &(0x7f0000000f40)=""/4080, 0x82, 0xff0, 0x1}, 0x28)

6m25.079133495s ago: executing program 8 (id=4149):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fa0a050023080000440012800b000100697036746e6c00003400028014000300fec0ffffffffffff000000000000000114000200fe880000000000000000000000000101080001"], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000800)

6m24.89270102s ago: executing program 9 (id=4141):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

6m24.752335883s ago: executing program 8 (id=4143):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)

6m24.502017819s ago: executing program 9 (id=4145):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24)
write(r0, &(0x7f0000000100)="240000001a007f0214f9f4070009040f03000040000000000002000008000f40fe00000e", 0x24)

6m24.412044672s ago: executing program 8 (id=4146):
syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file3\x00', 0x0, &(0x7f0000001040)=ANY=[], 0x1, 0xaed, &(0x7f0000000340)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080))
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

6m24.156365608s ago: executing program 9 (id=4148):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
umount2(&(0x7f0000000340)='./file0\x00', 0x8)

6m23.970051703s ago: executing program 9 (id=4151):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r1, 0x0, 0x0}, 0x10)

6m23.840872706s ago: executing program 8 (id=4152):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x34, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x40, 0x4c, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x840)

6m20.017093101s ago: executing program 9 (id=4169):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000006c0)={0x20, r0}, 0x0)

6m19.919496473s ago: executing program 8 (id=4171):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000800)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40040)

6m19.603550651s ago: executing program 38 (id=4169):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f00000006c0)={0x20, r0}, 0x0)

6m19.451266345s ago: executing program 39 (id=4171):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000800)={0x3c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40040)

4m40.132555604s ago: executing program 3 (id=5084):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x15, 0x2, [@TCA_PIE_ECN={0x8}, @TCA_PIE_ECN={0x0, 0x6, 0x1}]}}]}, 0x40}}, 0x0)

4m39.779310483s ago: executing program 3 (id=5088):
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080))
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x7ffffffffffffffe, 0x6, 0xb4, @scatter={0x0, 0x100000, 0x0}, &(0x7f0000000280)="5d04012000b7", 0x0, 0x5, 0x10023, 0xfffffffd, 0x0})

4m39.52273702s ago: executing program 3 (id=5090):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x204101, 0x0)
read(r0, 0x0, 0x0)

4m39.264781296s ago: executing program 3 (id=5092):
syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000340)={[{@gid}, {@mode={'mode', 0x3d, 0x4}}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x191a461, &(0x7f0000000440)={[{@gid}]})

4m38.500923505s ago: executing program 3 (id=5099):
r0 = socket$inet6(0xa, 0x6, 0x0)
listen(r0, 0x90101)
shutdown(r0, 0x0)

4m37.799324853s ago: executing program 3 (id=5105):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000e80)={<r1=>0xffffffffffffffff}, 0x13f, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000080)={0x13, 0x10, 0x8, {0x0, r1, 0x2}}, 0x18)

4m37.278933335s ago: executing program 40 (id=5105):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000e80)={<r1=>0xffffffffffffffff}, 0x13f, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000080)={0x13, 0x10, 0x8, {0x0, r1, 0x2}}, 0x18)

4m16.104195921s ago: executing program 6 (id=5106):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000fc0)={'ipvlan0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x2000, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r1, {0xfffd, 0x10}, {0x1, 0x2}, {0x2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x34004804}, 0x840)

4m15.820383128s ago: executing program 6 (id=5288):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
statx(r0, &(0x7f0000000100)='.\x00', 0x800, 0x200, &(0x7f0000000440))

4m15.548203755s ago: executing program 6 (id=5291):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56e, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x82, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x3, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x4, 0x28, {0x28, 0x4, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479c37f525cde38bf7914077366b48"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

4m0.426916501s ago: executing program 41 (id=5291):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56e, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x82, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x3, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x4, 0x28, {0x28, 0x4, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479c37f525cde38bf7914077366b48"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

6.177832786s ago: executing program 0 (id=7799):
r0 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
getsockopt$inet_int(r0, 0x0, 0xe, 0x0, &(0x7f00000005c0))

5.121350493s ago: executing program 0 (id=7805):
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0})
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x10000, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0xfd})
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})

5.028374215s ago: executing program 7 (id=7806):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x0, 0x0)

4.864760189s ago: executing program 0 (id=7808):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x70bd29, 0x25dfdbfd, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9f}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4060040}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0x8b2c, &(0x7f0000000040))

4.82762977s ago: executing program 7 (id=7809):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0)
write(r0, &(0x7f0000000040)='1', 0x1)

4.664257114s ago: executing program 5 (id=7810):
r0 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x40, 0x8, @loopback, 0x7ffc}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000440)=0x10, 0x4)

4.604732135s ago: executing program 0 (id=7812):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)

4.525368858s ago: executing program 7 (id=7814):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x3, 0x3, 0x301, 0x0, 0x0, {0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008015}, 0x4040)

4.224210725s ago: executing program 7 (id=7817):
r0 = io_uring_setup(0x6001, &(0x7f0000000000)={0x0, 0xeec2, 0x80, 0x2, 0x24d})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r1, 0x545c, 0x0)
close_range(r0, r0, 0x0)

3.837694024s ago: executing program 5 (id=7821):
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000001140)=ANY=[@ANYRES16=r0, @ANYRES8=r0], 0x18)

3.62001334s ago: executing program 5 (id=7822):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0x2a0, r0, 0x8de13c6b70ae92c3, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x284, 0x11d, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8}]}, {0xfffffffffffffcd3, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc9}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc2}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1d0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x4, 0x784, 0x5, 0x0, 0xe, 0x6, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1045, 0x1, 0x1, 0x800, 0xdd06, 0x1000, 0x7fff]}}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x1b, 0x9, 0x30, 0x6, 0x5, 0x60, 0x2, 0x5, 0x18, 0xb]}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x1}, {0x7, 0x3}, {0x2, 0x8}, {0x5, 0x3}, {0x2, 0x6}, {0x4, 0x1}, {0x6, 0x2}, {0x4, 0x4}, {0x5, 0x7}, {0x6, 0x4}, {0x1, 0x9}, {0x1, 0x5}, {0x2, 0x1}, {0x7, 0x2}, {0x3, 0x4}, {0x2}, {0x2, 0x5}, {}, {0x2, 0xa}, {0x3, 0x4}, {0x5, 0x8}, {0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x0, 0x8}, {0x7, 0x4}, {0x4, 0x2}, {0x1, 0x6}, {0x3, 0x2}, {0x7, 0x1f}, {0x4, 0x2}, {0x7, 0x9}, {0x3, 0x1}, {0x1, 0x1}, {0x7}, {0x2, 0x4}, {0x4, 0x4}, {0x5, 0x3}, {0x7, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1afb78584d6c04f, 0x1b, 0x30, 0x12, 0x6, 0x1b, 0x18, 0x9, 0x12, 0x18, 0x48, 0x30, 0x60, 0x4, 0xc, 0x1, 0x9, 0x6, 0xb, 0x60, 0x48, 0x1b, 0x6, 0x2, 0x9, 0x1, 0x60]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x9}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6c, 0x12, 0x16, 0x60, 0x60, 0x1, 0x60]}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x7, 0x8}, {0x2, 0x8}, {0x6, 0x5}, {0x6}, {0x2, 0x1}, {0x4, 0x5}, {0x4}, {0x7, 0xa}, {0x6, 0x2}, {0x0, 0x6}, {0x0, 0x4}, {0x0, 0x1}, {0x7, 0x7}, {0x0, 0x4}, {0x2, 0x4}, {0x0, 0x5}, {0x3, 0x9}, {0x5, 0x8}, {0x4, 0x7}, {0x7, 0x5}, {0x1, 0x4}, {0x6, 0x8}, {0x1, 0x2}, {0x2, 0x3}, {0x7, 0x4}, {0x1, 0x4}, {0x5, 0x5}, {0x2, 0x3}, {0x6, 0x5}, {0x6, 0x5}, {0x2, 0x8}, {0x3, 0x8}, {0x2, 0x9}, {0x7, 0x4}, {0x5, 0x5}, {0x1, 0x1}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x9, 0xc, 0x4, 0x24, 0x4c, 0x48, 0x48, 0x1b, 0x6, 0x12, 0xb, 0x30, 0x6, 0x60, 0x24, 0x36, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0x7, 0x4a, 0x3, 0x9, 0xfff7, 0x7]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x24, 0xc, 0x5, 0x6, 0x36, 0x4, 0x4, 0xb, 0x36, 0x1, 0x9, 0x36, 0x49, 0x12, 0x18, 0xb, 0x36, 0xb, 0x2, 0x30, 0x48, 0x0, 0xc, 0x18, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x400, 0x8, 0x7, 0x3ff, 0xeb, 0xfff]}}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x2, 0x3}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x5}, {0x5, 0x1}, {0x3, 0x2}, {0x6, 0x6}, {0x4, 0x6}, {0x3, 0x8}, {0x3, 0xa}, {0x2, 0x1}, {0x5, 0xa}, {0x5, 0x7}, {0x1, 0x6}, {0x6, 0x6}, {0x7, 0x4}, {0x6, 0x8}, {0x7, 0x1}, {0x2, 0x8}, {0x4, 0x2}, {}, {0x6, 0x8}, {0x7, 0x1}, {0x7, 0x6}, {0x1, 0x1}, {0x0, 0x5}, {0x6, 0x4}, {0x6, 0x8}, {0x6, 0x1}, {0x7, 0x6}, {}, {0x2, 0x4}, {}, {0x3, 0x9}, {0x3, 0x3}, {0x6, 0x4}, {0x1, 0xa}, {0x1, 0x7}, {0x3, 0x5}, {0x5, 0x6}, {0x6, 0x5}, {0x2, 0x5}, {0x4, 0x4}, {0x7, 0x3}, {0x1, 0x9}, {0x5, 0xa}, {0x3, 0x4}, {0x1, 0x5}, {0x0, 0x1}, {0x4, 0x3}, {0x4, 0x7}, {0x1, 0x1}, {}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x240088d8}, 0x0)

3.542413992s ago: executing program 1 (id=7824):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4000000000008, 0x8, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x4f, 0x0, 0x0)

3.392336176s ago: executing program 5 (id=7825):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
flistxattr(0xffffffffffffffff, 0x0, 0x0)

3.164919961s ago: executing program 7 (id=7827):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000001500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc0145b0e, 0x0)

3.075285483s ago: executing program 2 (id=7828):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x74, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x30, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}, @NFTA_QUOTA_CONSUMED={0xc}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}, 0x1, 0x0, 0x0, 0x4044050}, 0x40)

2.898911558s ago: executing program 2 (id=7829):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xa1, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="d5efd4"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008)

2.479086698s ago: executing program 2 (id=7830):
openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000000))
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8)

2.395844671s ago: executing program 5 (id=7831):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/failslab/times\x00', 0x22480, 0x28)
read$FUSE(r0, 0x0, 0x0)

2.343227522s ago: executing program 1 (id=7832):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f00000060c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0xa}, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e23, 0x5, @private2, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="87", 0x1}], 0x1}}], 0x2, 0x48081)
shutdown(r0, 0x1)
getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000002300)=""/4113, &(0x7f00000000c0)=0x1011)

2.274510523s ago: executing program 2 (id=7833):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000180)={@id={0x2, 0x0, @a}})

2.200313685s ago: executing program 5 (id=7834):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b16, 0x0)

2.130973887s ago: executing program 1 (id=7835):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x503, 0x70bd2a, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x48}}, 0x800)

1.974329801s ago: executing program 1 (id=7836):
mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)='0123:abcd:,,', 0xc)

1.808307095s ago: executing program 2 (id=7837):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1.808032555s ago: executing program 1 (id=7838):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000005c0)={0x1, 0x0, [{0xe1, 0x0, 0x39}]})

1.60576557s ago: executing program 2 (id=7839):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000100)='./file1\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4435, &(0x7f000000cd80)="$eJzs3c9PVNcCB/BzL6jgUx/4XPiSl7xJnsl7eW0IuGqLSRFRBKU2tpqmm3GAUWkHxsDQdOGC7ky6atJF04Vpk+5YGRbd2j+hmy7t2qRddNOkiSnNzNwB7mUmjJSBaj6fRC73/Lpn+M69c+5ivHGicnduKTe3lCss5Mozt5fO5j4ql5bniyHeJwd9fNrTLKfDoW4vx5T9/rh24dI7N8+G8N3sD0/X19fXa0F2h6aGtvz+6y/3Z7ZuG+JMn+q4zUfbK++HEE5tm1dVVwjhvW9DiEII55Oy0WTbG0I4Eep1N+9/eivX4jU/r0dPiufyz6YerA2fmVx9uNb6tUchfFn656t35n/6T9fwj//fm6MDAAAAAAAAAAAAAAAAAPCiG79+7cbbg0PhcRS6V6Pt39cdT7a5Fv3X98y/O/9iAQAAAAAAAAAAAAAAAAAA4C9q8/v/uehkk+//jyXbkRb919/s/BzpnIm3ro1dHBxKnv8ebat/LSn6+XxX6G/y3Pfs89/PZ/o3f/779uPsVmN+jeP2hSgeSO3H8cBACF8nD34/HR2NS+Wlyiu3y8sLs3s2jRdWOv/60/tT6SQP9G83/9HM+J1//v8/tr2bqvu39u4t9lJL59/Vst03n0Rt5X8h028/8mf30vl318p6tzYYqV8Aqvl/1r1z/mOZ8TuV/4kQQi6qzjWXugJU1zDV8lbrFdLS+R+qlaUunckfstX5/1sm/4uZ8Q/q+r+S/SCiqXT+h2tlPakWm+d/f7zz+X8pM/5B5F+d/4rP/7ak8z9SL+xONan9Jdu9/o9nxu9U/jfiZJ4notQ7YDWql7f6/+pIS+ffs61+8/4vbmv9dznTf7/u/xrHbdz/NS7//4vq9380l86/t2W7ds//iUy/Tl//R2rrP3Yrnf/RWll67dxX+9lu/pOZ8f9U/odaV9VWJT2N/DevJ78fqZd/Zf3XlnT+f6sXxltbrNR+1tZ/0c7r/yuZ8Q9i/Ved/0rc2aO+LNL5H2vZrpr/9218/l/N9Ot8/iEMWuvvWjr/4y3b1c7/np3zn8r063T+/+3k4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvgNFk2xeieCC1H8cDAyFcSPZPh6PRdGE2P10qz3y4FMJYUp4LJ6M7pfJ0oZSfWyjPFvOFUqk8E8LFpP5U6ImWSuVKfr5w79LGWL3R3WJhsTJdLFRCCONJ+b/C8cZY03OV+cK9EMLljbq/x+XFe3cLC/nZucU3BgcHB8PExhz6o+LHleJCpX70em0Ikxt9+6Itk6tVX9mYy7Hog/Ly4kKhVCu/uqVPqTxTKG3pM5XUfR76o8ri8sJMoVLMl8p3Gsc7SCPJdmzi+rvXrw5tq78V1bej+zstAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ7T4+HXvwghdNf34hBCLkp+iZJ/KY+eFM/ln009WBs+M7n6cO1pszYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzBDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbp2KZhIAoD8LujgJIxqCy7ozUCISgwQmICGINhYBSWYAeKFGlTJFFiW7IsR3GTVN/XPMm/fPek+wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5nt8a95fyyoixdX6MuL38+9/mD938/tu+v+LM+zI6Ty9NPcPZdW9e9p92gzz29TORZ336Wr59RETs/cz6sm4T610dK9DfRvr9+vvvY6Ui4iou/wm5VwU884CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANiyAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRd8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArwAAAP//xu4fEQ==")
r0 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6)
fallocate(r0, 0x0, 0x0, 0x1001f0)
open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6)

1.586016001s ago: executing program 1 (id=7840):
syz_mount_image$xfs(&(0x7f0000000080), &(0x7f00000096c0)='./file0\x00', 0x2000800, &(0x7f00000000c0)={[{@logbsize={'logbsize', 0x3d, [0x38, 0x67]}}, {@quota}, {@noalign}, {@swalloc}]}, 0x1, 0x965c, &(0x7f0000012dc0)="$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")
mount$9p_virtio(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x4, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020)

1.352277326s ago: executing program 0 (id=7841):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000100000027bf00000005"], 0x48)
mmap(&(0x7f0000bdd000/0x1000)=nil, 0x1000, 0x2000002, 0x13, r0, 0x0)
syz_clone3(&(0x7f0000000500)={0x8000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[0x0], 0x1}, 0x58)

1.184464361s ago: executing program 0 (id=7842):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4000000000008, 0x8, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x4f, 0x0, 0x0)

0s ago: executing program 7 (id=7843):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x100d, 0xde8bef52389a5434)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000280)={r0, 0x0, {0x0, 0x0, 0x0, 0x2000000000, 0x4, 0x0, 0x0, 0x12, 0x14, "996a78edc5cac93c3e473f65d9eb5297f0ca82d56dcddb164e29606b4f2cf0b60d9b92b3cf1597f6b7ff9c4fbf4326f66eccdbf05411d4a42e798491e44e3e6f", "3c54d63cef61aa187f941933694c882f4835e79819ddc15edb9ca42b19129e446327fbe58f617cc4617f5347a395cacecf34365db4d55dace1d4e9d56e6fa42e", "fd4131e7744b74aaa2317f2b2cb2fea7e7d63f26e8cfd1d6c6eaab2b99d845fb", [0x61, 0x4]}})
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x10002, 0x3, 0x15, 0xc, "e1c5be584875f9a3a8c3d21d4aed0888fd5bbc6482d20f77cd7c69344687c22d97bae414bddadaa37277c798331a9beae5f95599c89e8c9e4abd843f22651d53", "1de095496130c0f2d7e3adec074fcc6ef189d2e859a4a31a9afd00", [0x4, 0x3]})

kernel console output (not intermixed with test programs):

er overrun
[  741.193645][ T4664] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  741.376022][ T4555] logitech-hidpp-device 0005:046D:B012.0041: Device not connected
[  741.402687][ T4664] usb 3-1: Using ep0 maxpacket: 16
[  741.423536][ T4664] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  741.478248][ T4664] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  741.520368][ T4664] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  741.555870][ T4664] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  741.624077][ T4664] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  741.636392][T22876] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  741.645323][ T4664] usb 3-1: config 0 descriptor??
[  742.080126][T22900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6347'.
[  742.089409][T22900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6347'.
[  742.091277][ T4664] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0042/input/input45
[  742.204863][ T4664] microsoft 0003:045E:07DA.0042: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  742.396819][ T4669] usb 3-1: USB disconnect, device number 40
[  742.557272][ T4664] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  742.625610][T22908] fido_id[22908]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  742.742439][ T4664] usb 6-1: Using ep0 maxpacket: 16
[  742.762254][ T4664] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  742.765480][T22918] Bluetooth: ISO socket layer initialized
[  742.784297][T22917] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6354'.
[  742.822799][ T4664] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  742.847727][ T4664] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  742.892681][ T4664] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00
[  742.901828][ T4664] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  742.949279][ T4664] usb 6-1: config 0 descriptor??
[  743.101074][T22902] loop0: detected capacity change from 0 to 32768
[  743.403766][ T4664] corsair-psu 0003:1B1C:1C03.0043: hidraw0: USB HID v0.00 Device [HID 1b1c:1c03] on usb-dummy_hcd.5-1/input0
[  743.532672][ T4664] corsair-psu 0003:1B1C:1C03.0043: unable to initialize device (-38)
[  743.579446][ T4664] corsair-psu: probe of 0003:1B1C:1C03.0043 failed with error -38
[  743.634605][ T4664] usb 6-1: USB disconnect, device number 28
[  743.919222][T22960] program syz.1.6370 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  744.023786][T22953] fido_id[22953]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  744.077212][T22961] loop2: detected capacity change from 0 to 4096
[  744.274269][T22969] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  744.296204][T22961] NILFS (loop2): cannot delete checkpoints: invalid range [0, 0)
[  744.332204][T22961] NILFS (loop2): error -22 preparing GC: cannot delete checkpoints
[  745.223467][T22956] loop7: detected capacity change from 0 to 40427
[  745.269333][T22956] F2FS-fs (loop7): Found nat_bits in checkpoint
[  745.441318][T22956] F2FS-fs (loop7): Cannot turn on quotas: -2 on 0
[  745.471982][T22956] F2FS-fs (loop7): Cannot turn on quotas: -2 on 1
[  745.530114][T22956] F2FS-fs (loop7): Start checkpoint disabled!
[  745.638079][T22956] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  745.661260][T22981] loop0: detected capacity change from 0 to 32768
[  745.712942][T22956] F2FS-fs (loop7): user quota file already specified
[  745.837517][T22981] XFS (loop0): Mounting V5 Filesystem
[  745.967375][T22981] XFS (loop0): Ending clean mount
[  746.145517][T22990] loop2: detected capacity change from 0 to 40427
[  746.238729][T22990] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  746.267630][T22990] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  746.293440][T16302] XFS (loop0): Unmounting Filesystem
[  746.386325][T22990] F2FS-fs (loop2): invalid crc value
[  746.436908][T22990] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  746.555995][T23043] loop5: detected capacity change from 0 to 256
[  746.683156][    C0] vkms_vblank_simulate: vblank timer overrun
[  746.745073][T22990] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  746.798216][T22990] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  746.883006][    C0] vkms_vblank_simulate: vblank timer overrun
[  746.897562][T23049] loop1: detected capacity change from 0 to 16
[  746.949071][T23049] erofs: (device loop1): mounted with root inode @ nid 36.
[  746.982625][   T26] audit: type=1800 audit(1786562545.209:285): pid=22990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6380" name="file1" dev="loop2" ino=10 res=0 errno=0
[  747.007839][T23051] loop5: detected capacity change from 0 to 256
[  747.024232][T23049] syz.1.6397: attempt to access beyond end of device
[  747.024232][T23049] loop1: rw=524288, sector=1342177272, nr_sectors = 32 limit=16
[  747.065470][T23031] loop7: detected capacity change from 0 to 32768
[  747.112181][ T4271] syz-executor: attempt to access beyond end of device
[  747.112181][ T4271] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  747.136664][T23049] syz.1.6397: attempt to access beyond end of device
[  747.136664][T23049] loop1: rw=0, sector=1342177272, nr_sectors = 8 limit=16
[  747.218524][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  747.253241][T23031] XFS (loop7): Mounting V5 Filesystem
[  747.279835][   T26] audit: type=1800 audit(1786562545.509:286): pid=23049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6397" name="file1" dev="loop1" ino=86 res=0 errno=0
[  747.299636][    C0] vkms_vblank_simulate: vblank timer overrun
[  747.428208][T23031] XFS (loop7): Ending clean mount
[  747.586371][T23068] loop1: detected capacity change from 0 to 256
[  747.650562][T23068] exfat: Deprecated parameter 'namecase'
[  747.666076][T20181] XFS (loop7): Unmounting Filesystem
[  747.696609][T23068] exfat: Deprecated parameter 'namecase'
[  747.750289][    C0] vkms_vblank_simulate: vblank timer overrun
[  747.778549][T23068] exfat: Deprecated parameter 'utf8'
[  747.796079][T23068] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[  748.134091][    C0] vkms_vblank_simulate: vblank timer overrun
[  748.239334][T23084] loop0: detected capacity change from 0 to 2048
[  748.282626][ T4669] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  748.304417][T23087] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  748.322642][T23086] loop1: detected capacity change from 0 to 256
[  748.409931][T23086] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d)
[  748.492825][ T4669] usb 3-1: Using ep0 maxpacket: 32
[  748.500594][ T4669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  748.541152][ T4669] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  748.581828][ T4669] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  748.611741][ T4669] usb 3-1: config 0 descriptor??
[  748.631634][ T4669] hub 3-1:0.0: bad descriptor, ignoring hub
[  748.700729][ T4669] hub: probe of 3-1:0.0 failed with error -5
[  748.727238][T23093] netlink: 104 bytes leftover after parsing attributes in process `syz.7.6402'.
[  748.727525][ T4669] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  748.880594][T23069] loop5: detected capacity change from 0 to 32768
[  748.990658][T23069] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  749.028803][T23069] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  749.055767][ T4664] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  749.127403][T23105] netlink: 'syz.1.6411': attribute type 1 has an invalid length.
[  749.262563][ T4664] usb 1-1: Using ep0 maxpacket: 8
[  749.277246][ T4669] usb 3-1: reset high-speed USB device number 41 using dummy_hcd
[  749.287256][ T4664] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  749.309568][T23069] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  749.323108][ T4664] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  749.358800][ T4664] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  749.371219][T23114] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32)
[  749.394588][ T4664] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 200
[  749.437638][ T4664] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  749.462065][ T4664] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  749.477242][T23069] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  749.497463][ T4664] usb 1-1: config 0 descriptor??
[  749.527381][T23097] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  749.652171][T23122] loop9: detected capacity change from 0 to 524287935
[  749.753807][ T4274] Bluetooth: hci5: Received unexpected HCI Event 0x00
[  749.894698][   T41] usb 3-1: USB disconnect, device number 41
[  749.976053][ T4290] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  749.987646][ T4669] usb 1-1: USB disconnect, device number 20
[  750.763075][T23161] loop2: detected capacity change from 0 to 2048
[  750.803682][T23161]  loop2: p1 p2 p3
[  750.803682][T23161]  p1: <netbsd: p5bad subpartition - ignored
[  750.803682][T23161]  (ignored 752 more) >
[  750.822666][   T41] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  750.823565][T23161] loop2: p2 size 458752 extends beyond EOD, truncated
[  750.845816][T23161] loop2: p3 start 65280 is beyond EOD, truncated
[  751.017927][   T41] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  751.023775][ T4371] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  751.034705][   T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  751.072042][   T41] usb 6-1: Product: syz
[  751.083217][   T41] usb 6-1: Manufacturer: syz
[  751.092603][   T41] usb 6-1: SerialNumber: syz
[  751.109249][   T41] usb 6-1: config 0 descriptor??
[  751.115761][   T41] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  751.119710][   T41] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  751.121787][   T41] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  751.121831][   T41] usb 6-1: media controller created
[  751.153452][   T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  751.157189][ T5292] udevd[5292]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  751.212234][ T4371] udevd[4371]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  751.313617][   T41] DVB: Unable to find symbol mt352_attach()
[  751.321588][T23152] dvb-usb: bulk message failed: -22 (7/0)
[  751.459519][   T41] DVB: Unable to find symbol nxt6000_attach()
[  751.466880][   T41] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  751.513600][   T41] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input46
[  751.567596][   T41] dvb-usb: schedule remote query interval to 1000 msecs.
[  751.592504][   T41] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  751.635975][   T41] dvb-usb: bulk message failed: -22 (7/0)
[  751.662399][   T41] dvb-usb: bulk message failed: -22 (7/0)
[  751.706392][   T41] usb 6-1: USB disconnect, device number 29
[  751.802997][   T41] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  752.257105][T23205] device sit1 entered promiscuous mode
[  752.316776][T23205] team0: Device sit1 is of different type
[  752.748397][T23221] loop0: detected capacity change from 0 to 512
[  752.879653][T23221] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  752.908426][T23221] ext4 filesystem being mounted at /469/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  753.229792][T16302] EXT4-fs (loop0): unmounting filesystem.
[  753.507588][T23249] loop2: detected capacity change from 0 to 4096
[  754.554993][T23255] loop0: detected capacity change from 0 to 32768
[  754.743302][T23255] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  754.854330][T23311] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6484'.
[  754.892703][T16302] ocfs2: Unmounting device (7,0) on (node local)
[  754.908715][T23311] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6484'.
[  754.951097][T23314] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6484'.
[  755.152757][   T22] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  755.349595][T23317] loop0: detected capacity change from 0 to 8192
[  755.372759][   T22] usb 6-1: Using ep0 maxpacket: 32
[  755.379490][T23317] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  755.384115][   T22] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  755.415622][T23317] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  755.430187][T23317] REISERFS (device loop0): using journaled data mode
[  755.437224][T23317] reiserfs: using flush barriers
[  755.460624][T23317] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  755.514874][   T22] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  755.522444][T23317] REISERFS (device loop0): checking transaction log (loop0)
[  755.534905][T23317] REISERFS (device loop0): Using r5 hash to sort names
[  755.542287][T23317] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  755.556748][T23317] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  755.616676][   T22] usb 6-1: config 0 interface 0 has no altsetting 0
[  755.657434][   T22] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  755.676786][   T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  755.727632][   T22] usb 6-1: Product: syz
[  755.731862][   T22] usb 6-1: Manufacturer: syz
[  755.762520][   T22] usb 6-1: SerialNumber: syz
[  755.779212][   T22] usb 6-1: config 0 descriptor??
[  755.918705][T23344] loop2: detected capacity change from 0 to 256
[  756.237623][   T22] gs_usb 6-1:0.0: Configuring for 1 interfaces
[  756.439255][   T22] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO)
[  756.463390][   T22] gs_usb: probe of 6-1:0.0 failed with error -71
[  756.508190][   T22] usb 6-1: USB disconnect, device number 30
[  756.645482][T23371] netlink: 277 bytes leftover after parsing attributes in process `syz.2.6507'.
[  756.663085][T23373] loop0: detected capacity change from 0 to 512
[  756.683760][T23373] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  756.884310][T23380] loop2: detected capacity change from 0 to 64
[  757.165751][T23393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  758.590639][T23443] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.1.6534:23443
[  758.641573][T23446] loop5: detected capacity change from 0 to 1024
[  758.865481][T23454] loop1: detected capacity change from 0 to 256
[  759.253611][T23426] loop2: detected capacity change from 0 to 32768
[  759.275035][T23473] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6545'.
[  759.302815][T23426] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.6527 (23426)
[  759.437451][T23426] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  759.461808][T23479] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  759.506405][T23426] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  759.530165][T23478] loop7: detected capacity change from 0 to 2048
[  759.537233][T23426] BTRFS info (device loop2): enabling ssd optimizations
[  759.562389][T23426] BTRFS info (device loop2): not using ssd optimizations
[  759.594299][T23426] BTRFS info (device loop2): turning off barriers
[  759.637195][T23426] BTRFS info (device loop2): use no compression
[  759.663288][T23426] BTRFS info (device loop2): using free space tree
[  759.683503][T23478]  loop7: p3 p4 < >
[  759.689817][T23478] loop7: p3 start 4284289 is beyond EOD, truncated
[  759.835058][T23495] loop0: detected capacity change from 0 to 128
[  760.257912][ T4438] udevd[4438]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory
[  760.282702][T23520] xt_policy: too many policy elements
[  760.403105][ T4271] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  760.662542][T23533] loop7: detected capacity change from 0 to 64
[  760.959414][T23540] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6566'.
[  761.521454][T23559] loop2: detected capacity change from 0 to 164
[  761.666587][T23559] binfmt_misc: register: failed to install interpreter file ./file0
[  761.823637][T23572] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6573'.
[  762.142972][T23583] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000)
[  762.305834][T23550] loop0: detected capacity change from 0 to 32768
[  762.338715][T23587] loop7: detected capacity change from 0 to 4096
[  762.415676][T23587] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512)
[  762.489660][T23550] XFS (loop0): Mounting V5 Filesystem
[  762.673079][T23550] XFS (loop0): Ending clean mount
[  762.871667][T16302] XFS (loop0): Unmounting Filesystem
[  763.154572][T23617] loop1: detected capacity change from 0 to 64
[  763.266463][T23575] read_mapping_page failed!
[  763.330042][T23575] diRead: read_metapage failed
[  763.981431][T23640] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6598'.
[  764.062192][T23631] set_capacity_and_notify: 1 callbacks suppressed
[  764.062208][T23631] loop7: detected capacity change from 0 to 8192
[  764.682589][ T5296] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  764.883507][ T5296] usb 2-1: Using ep0 maxpacket: 32
[  764.890428][ T5296] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  764.935050][ T5296] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  764.963332][ T5296] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  764.998020][ T5296] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  765.024833][ T5296] usb 2-1: Product: syz
[  765.051750][ T5296] usb 2-1: Manufacturer: syz
[  765.092467][ T5296] hub 2-1:4.0: USB hub found
[  765.299382][ T5296] hub 2-1:4.0: 5 ports detected
[  765.306848][ T5296] hub 2-1:4.0: insufficient power available to use all downstream ports
[  765.505351][ T5296] hub 2-1:4.0: hub_hub_status failed (err = -71)
[  765.524554][ T5296] hub 2-1:4.0: config failed, can't get hub status (err -71)
[  765.542718][ T4669] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  765.603174][ T5296] usb 2-1: USB disconnect, device number 19
[  765.742451][ T4669] usb 6-1: Using ep0 maxpacket: 32
[  765.749455][ T4669] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  765.811931][ T4669] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  765.823507][T23699] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6619'.
[  765.833356][T23699] nbd: illegal input index -28
[  765.856817][ T4669] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  765.908093][ T4669] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  765.957842][ T4669] usb 6-1: config 0 descriptor??
[  765.982864][ T4669] hub 6-1:0.0: USB hub found
[  765.990431][T23693] loop2: detected capacity change from 0 to 32768
[  766.106762][T23709] loop0: detected capacity change from 0 to 64
[  766.108691][T23693] JBD2: Ignoring recovery information on journal
[  766.181880][ T4669] hub 6-1:0.0: 1 port detected
[  766.200863][T23693] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  766.393815][ T4669] hub 6-1:0.0: hub_hub_status failed (err = -71)
[  766.442316][ T4669] hub 6-1:0.0: config failed, can't get hub status (err -71)
[  766.473788][ T4669] usbhid 6-1:0.0: can't add hid device: -71
[  766.498667][T23721] loop0: detected capacity change from 0 to 512
[  766.505488][ T4669] usbhid: probe of 6-1:0.0 failed with error -71
[  766.573540][ T4669] usb 6-1: USB disconnect, device number 31
[  766.585477][ T4271] ocfs2: Unmounting device (7,2) on (node local)
[  766.592129][T23721] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  766.699342][T23721] EXT4-fs (loop0): 1 truncate cleaned up
[  766.712667][T23721] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  767.062440][T23735] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  767.093666][T23736] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  767.101539][T23736] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock
[  767.173041][T16302] EXT4-fs (loop0): unmounting filesystem.
[  767.176683][T23736] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  767.207235][T23736] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock
[  767.366920][T23748] netlink: 79 bytes leftover after parsing attributes in process `syz.0.6634'.
[  767.622473][   T41] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  767.674196][T23759] loop7: detected capacity change from 0 to 512
[  767.714969][T23759] EXT4-fs (loop7): 1 truncate cleaned up
[  767.726507][T23759] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  767.812625][   T41] usb 3-1: Using ep0 maxpacket: 8
[  767.822907][   T41] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  767.866272][T23757] loop0: detected capacity change from 0 to 4096
[  767.878560][   T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  767.910973][T20181] EXT4-fs (loop7): unmounting filesystem.
[  767.917753][   T41] usb 3-1: Product: syz
[  767.938068][   T41] usb 3-1: Manufacturer: syz
[  767.954797][T23757] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  767.956205][   T41] usb 3-1: SerialNumber: syz
[  768.069300][T23757] ntfs: volume version 3.1.
[  768.307614][T23772] loop7: detected capacity change from 0 to 32768
[  768.331439][   T41] usb 3-1: config 0 descriptor??
[  768.342084][   T41] gspca_main: se401-2.14.0 probing 047d:5003
[  768.354125][T23772]  loop7: p1 < > p3 < p5 p6 > p4
[  768.359489][T23772] loop7: partition table partially beyond EOD, truncated
[  768.384031][T23772] loop7: p4 start 4294967295 is beyond EOD, truncated
[  768.392208][T23772] loop7: p6 start 2164271104 is beyond EOD, truncated
[  768.754165][   T41] gspca_se401: ExtraFeatures: 255
[  768.956971][   T41] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input47
[  769.028451][T23796] loop1: detected capacity change from 0 to 1024
[  769.084308][   T41] usb 3-1: USB disconnect, device number 42
[  769.295742][ T6400] udevd[6400]: inotify_add_watch(7, /dev/loop7p5, 10) failed: No such file or directory
[  769.295883][ T6399] udevd[6399]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory
[  769.315325][ T5292] udevd[5292]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  769.611360][T23815] loop1: detected capacity change from 0 to 1024
[  769.730810][T23822] loop0: detected capacity change from 0 to 256
[  769.809703][   T47] hfsplus: b-tree write err: -5, ino 4
[  769.823919][   T47] hfsplus: b-tree write err: -5, ino 2
[  770.364395][T23847] netlink: 165 bytes leftover after parsing attributes in process `syz.0.6675'.
[  770.464469][T23853] loop2: detected capacity change from 0 to 64
[  770.853018][ T4271] hfs: node 4:3 still has 1 user(s)!
[  770.954688][T23872] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6687'.
[  771.351596][T23886] loop7: detected capacity change from 0 to 2048
[  771.398847][T23886] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  771.398922][T23889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6693'.
[  772.135440][T23909] loop0: detected capacity change from 0 to 1024
[  772.160833][T23883] loop2: detected capacity change from 0 to 32768
[  772.198911][T23880] loop1: detected capacity change from 0 to 32768
[  772.333699][T23883] XFS (loop2): Mounting V5 Filesystem
[  772.422141][T23880] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  772.456259][T23880] XFS (loop1): Mounting V5 Filesystem
[  772.523676][T23883] XFS (loop2): Ending clean mount
[  772.603355][T23883] XFS (loop2): syz.2.6691 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported
[  772.700190][T23880] XFS (loop1): Ending clean mount
[  772.710209][ T4271] XFS (loop2): Unmounting Filesystem
[  772.863281][T16119] XFS (loop1): Unmounting Filesystem
[  773.216572][T23905] loop5: detected capacity change from 0 to 32768
[  773.231296][T23947] netlink: 'syz.7.6709': attribute type 46 has an invalid length.
[  773.768511][T23964] loop2: detected capacity change from 0 to 256
[  773.834936][T23964] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d)
[  773.991146][T23964] exFAT-fs (loop2): hint_cluster is invalid (17)
[  774.026879][T23969] netlink: 'syz.7.6715': attribute type 1 has an invalid length.
[  774.317076][T23978] IPVS: stopping backup sync thread 22588 ...
[  774.961064][T24000] ip_tables: iptables: counters copy to user failed while replacing table
[  775.290368][T24017] loop5: detected capacity change from 0 to 256
[  775.330704][T24017] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xa7bc3a1f, utbl_chksum : 0xe619d30d)
[  775.361988][T24020] loop2: detected capacity change from 0 to 2048
[  775.379024][T24017] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 2199023255554)
[  775.430278][T24020] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  775.442691][ T5296] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  775.507359][T24020] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  775.571493][   T26] audit: type=1800 audit(1786562573.799:287): pid=24020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6733" name="file1" dev="loop2" ino=1346 res=0 errno=0
[  775.642723][ T5296] usb 2-1: Using ep0 maxpacket: 32
[  775.654860][ T5296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  775.673371][T24031] loop7: detected capacity change from 0 to 1024
[  775.710409][ T5296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  775.744104][ T5296] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  775.790231][ T5296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  775.838386][ T5296] usb 2-1: config 0 descriptor??
[  775.878958][ T5296] hub 2-1:0.0: USB hub found
[  776.054828][T24038] netlink: set zone limit has 4 unknown bytes
[  776.085107][ T5296] hub 2-1:0.0: config failed, can't read hub descriptor (err -90)
[  776.287144][ T5296] usbhid 2-1:0.0: can't add hid device: -71
[  776.296799][ T5296] usbhid: probe of 2-1:0.0 failed with error -71
[  776.373336][ T5296] usb 2-1: USB disconnect, device number 20
[  776.614268][T24054] loop5: detected capacity change from 0 to 64
[  776.640355][T24029] loop0: detected capacity change from 0 to 32768
[  776.673960][T24029] XFS (loop0): Invalid device [./file1], error=-15
[  776.702312][T24057] trusted_key: encrypted_key: insufficient parameters specified
[  776.839759][T16313] hfs: node 4:3 still has 1 user(s)!
[  777.297594][T24076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6756'.
[  777.340321][T24076] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6756'.
[  777.384492][T24076] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22)
[  777.585626][T24091] loop0: detected capacity change from 0 to 1024
[  777.612156][T24093] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6763'.
[  777.893770][T24104] loop0: detected capacity change from 0 to 64
[  778.053628][T24108] loop1: detected capacity change from 0 to 512
[  778.080434][T24108] EXT4-fs: Ignoring removed bh option
[  778.143545][T24108] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.6768: corrupted in-inode xattr
[  778.213131][T24108] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.6768: couldn't read orphan inode 15 (err -117)
[  778.316758][T24108] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  778.451693][T16119] EXT4-fs (loop1): unmounting filesystem.
[  778.571217][T24120] loop5: detected capacity change from 0 to 1024
[  778.664762][T24120] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  778.827994][T24095] loop2: detected capacity change from 0 to 40427
[  778.908640][T24095] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288)
[  778.930170][T24095] F2FS-fs (loop2): invalid crc value
[  778.972813][T24095] F2FS-fs (loop2): Found nat_bits in checkpoint
[  779.158937][T24095] F2FS-fs (loop2): recover fsync data on readonly fs
[  779.198032][T24095] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1
[  779.258066][T24095] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[  779.339657][T24095] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  780.114533][T24167] syz.1.6789: attempt to access beyond end of device
[  780.114533][T24167] loop1: rw=0, sector=1024, nr_sectors = 2 limit=64
[  780.166051][T24167] Buffer I/O error on dev loop1, logical block 512, async page read
[  780.225225][T24167] syz.1.6789: attempt to access beyond end of device
[  780.225225][T24167] loop1: rw=0, sector=113152, nr_sectors = 2 limit=64
[  780.284517][T24167] Buffer I/O error on dev loop1, logical block 56576, async page read
[  780.377957][T24172] set_capacity_and_notify: 2 callbacks suppressed
[  780.377974][T24172] loop2: detected capacity change from 0 to 4096
[  780.419277][T24172] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  780.426979][   T26] audit: type=1326 audit(1786562578.659:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24175 comm="syz.5.6791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0fb9e0d9 code=0x7ff00000
[  780.548727][   T26] audit: type=1326 audit(1786562578.659:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24175 comm="syz.5.6791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0fb9e0d9 code=0x7ff00000
[  780.644346][   T26] audit: type=1326 audit(1786562578.659:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24175 comm="syz.5.6791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0fb9e0d9 code=0x7ff00000
[  780.705607][   T26] audit: type=1326 audit(1786562578.659:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24175 comm="syz.5.6791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0fb9e0d9 code=0x7ff00000
[  780.803740][   T26] audit: type=1326 audit(1786562578.659:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24175 comm="syz.5.6791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0fb9e0d9 code=0x7ff00000
[  780.875939][   T26] audit: type=1326 audit(1786562578.659:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24175 comm="syz.5.6791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0fb9e0d9 code=0x7ff00000
[  780.939119][   T26] audit: type=1326 audit(1786562578.659:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24175 comm="syz.5.6791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0fb9e0d9 code=0x7ff00000
[  780.986752][   T26] audit: type=1326 audit(1786562578.659:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24175 comm="syz.5.6791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0fb9e0d9 code=0x7ff00000
[  781.059444][   T26] audit: type=1326 audit(1786562578.659:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24175 comm="syz.5.6791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0fb9e0d9 code=0x7ff00000
[  781.151547][T24194] loop2: detected capacity change from 0 to 512
[  781.153805][   T26] audit: type=1326 audit(1786562578.659:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24175 comm="syz.5.6791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0fb9e0d9 code=0x7ff00000
[  781.186501][T24194] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  781.208811][   T26] audit: type=1326 audit(1786562578.659:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24175 comm="syz.5.6791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0fb9e0d9 code=0x7ff00000
[  781.238677][   T26] audit: type=1326 audit(1786562578.659:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24175 comm="syz.5.6791" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0fb9e0d9 code=0x7ff00000
[  781.312740][T24194] EXT4-fs (loop2): 1 truncate cleaned up
[  781.345991][T24194] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  781.374224][T16427] rpcbind: server 127.0.0.1 not responding, timed out
[  781.728348][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  782.313995][T24231] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6809'.
[  782.409370][T24209] loop5: detected capacity change from 0 to 32768
[  782.487193][T24235] loop0: detected capacity change from 0 to 256
[  782.521141][T24209] read_mapping_page failed!
[  782.563349][T24235] exfat: Deprecated parameter 'utf8'
[  782.575569][T24209] ERROR: (device loop5): txCommit: 
[  782.575569][T24209] 
[  782.585474][T24235] exfat: Deprecated parameter 'namecase'
[  782.612124][T24235] exfat: Deprecated parameter 'namecase'
[  782.630736][T24209] ERROR: (device loop5): remounting filesystem as read-only
[  782.690187][T24235] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d)
[  782.844083][  T109] ERROR: (device loop5): diUpdatePMap: the inode is not allocated in the working map
[  782.844083][  T109] 
[  783.526723][T24273] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready
[  783.572071][T24273] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready
[  783.621798][T24273] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready
[  783.634550][T24273] IPv6: ADDRCONF(NETDEV_CHANGE): nr1: link becomes ready
[  783.675064][T24273] IPv6: ADDRCONF(NETDEV_CHANGE): nr2: link becomes ready
[  783.692625][T24273] IPv6: ADDRCONF(NETDEV_CHANGE): nr3: link becomes ready
[  783.739796][T24273] IPv6: ADDRCONF(NETDEV_CHANGE): nr4: link becomes ready
[  783.792271][T24273] IPv6: ADDRCONF(NETDEV_CHANGE): nr5: link becomes ready
[  783.817052][T24273] IPv6: ADDRCONF(NETDEV_CHANGE): nr6: link becomes ready
[  783.827160][T24273] IPv6: ADDRCONF(NETDEV_CHANGE): nr7: link becomes ready
[  783.850936][T24273] IPv6: ADDRCONF(NETDEV_CHANGE): nr8: link becomes ready
[  783.868870][T24273] IPv6: ADDRCONF(NETDEV_CHANGE): nr9: link becomes ready
[  783.908194][T24279] loop0: detected capacity change from 0 to 8192
[  783.910049][T24273] IPv6: ADDRCONF(NETDEV_CHANGE): lapb0: link becomes ready
[  783.974344][T24273] IPv6: ADDRCONF(NETDEV_CHANGE): lapb1: link becomes ready
[  784.014527][T24273] IPv6: ADDRCONF(NETDEV_CHANGE): lapb2: link becomes ready
[  784.053401][T24273] IPv6: ADDRCONF(NETDEV_CHANGE): lapb3: link becomes ready
[  784.061019][T24273] IPv6: ADDRCONF(NETDEV_CHANGE): lapb4: link becomes ready
[  784.079204][T24273] IPv6: ADDRCONF(NETDEV_CHANGE): lapb5: link becomes ready
[  784.412512][ T4664] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  784.456360][T24300] loop5: detected capacity change from 0 to 2048
[  784.495532][T24300] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  784.615363][ T4664] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  784.652396][ T4664] usb 2-1: config 0 has no interface number 0
[  784.674880][ T4664] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  784.706110][ T4664] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  784.732424][ T4664] usb 2-1: Product: syz
[  784.746868][ T4664] usb 2-1: Manufacturer: syz
[  784.751527][ T4664] usb 2-1: SerialNumber: syz
[  784.786432][ T4664] usb 2-1: config 0 descriptor??
[  784.819660][ T4664] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  785.142512][ T4290] Bluetooth: hci4: command 0x0406 tx timeout
[  785.373891][T24336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6846'.
[  785.378558][T24334] loop0: detected capacity change from 0 to 1024
[  785.428914][ T4664] gspca_spca1528: reg_w err -71
[  785.462627][ T4664] spca1528: probe of 2-1:0.1 failed with error -71
[  785.486433][ T4664] usb 2-1: USB disconnect, device number 21
[  786.024391][T24357] loop7: detected capacity change from 0 to 2048
[  786.079580][T24357] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  786.231933][T24366] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  786.554773][T24379] loop0: detected capacity change from 0 to 1024
[  786.612434][ T4664] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  786.722982][T24346] loop2: detected capacity change from 0 to 32768
[  786.833016][ T4664] usb 2-1: Using ep0 maxpacket: 32
[  786.874236][ T4664] usb 2-1: config 0 has an invalid interface number: 188 but max is 0
[  786.945262][ T4664] usb 2-1: config 0 has no interface number 0
[  786.988862][ T4664] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  787.091114][T24346] XFS (loop2): Mounting V5 Filesystem
[  787.099021][ T4664] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  787.130912][T24401] loop5: detected capacity change from 0 to 1024
[  787.132551][ T4664] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  787.170033][ T4664] usb 2-1: Product: syz
[  787.183120][ T4664] usb 2-1: Manufacturer: syz
[  787.187094][T24346] XFS (loop2): Ending clean mount
[  787.187751][ T4664] usb 2-1: SerialNumber: syz
[  787.220972][ T4664] usb 2-1: config 0 descriptor??
[  787.230449][T24372] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  787.287923][T24412] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  787.448425][T24372] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  787.507535][ T4271] XFS (loop2): Unmounting Filesystem
[  787.728335][T24419] loop0: detected capacity change from 0 to 2048
[  787.863079][   T14] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  787.872634][ T4664] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  787.885997][T24419] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  787.903124][T24419] ext4 filesystem being mounted at /556/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  787.914578][ T4664] asix: probe of 2-1:0.188 failed with error -71
[  787.924512][ T4664] usb 2-1: USB disconnect, device number 22
[  787.965742][T24427] loop7: detected capacity change from 0 to 2048
[  787.994504][T16302] EXT4-fs (loop0): unmounting filesystem.
[  788.071818][T24428] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  788.106546][   T14] usb 6-1: Using ep0 maxpacket: 32
[  788.113726][   T14] usb 6-1: config index 0 descriptor too short (expected 35577, got 27)
[  788.132399][   T14] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  788.152255][   T14] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92
[  788.202258][   T14] usb 6-1: config 1 has no interface number 0
[  788.213023][   T14] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  788.236027][   T14] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  788.282861][   T14] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  788.312419][   T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  788.351108][T24435] loop0: detected capacity change from 0 to 2048
[  788.370246][   T14] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found
[  788.460509][T24436] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  788.681967][T24436] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  788.686766][T24444] 0x000000000010-0x000000000020 : ""
[  788.747359][T24444] ftl_cs: FTL header corrupt!
[  788.752180][T24436] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4)
[  788.795013][T24436] Remounting filesystem read-only
[  788.820123][T16302] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[  788.941635][   T14] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached
[  789.039161][T24442] loop1: detected capacity change from 0 to 8192
[  789.113359][T24442]  loop1: p1 < > p3 < p5 > p4
[  789.118240][T24442] loop1: partition table partially beyond EOD, truncated
[  789.126666][T24456] loop0: detected capacity change from 0 to 512
[  789.137338][T24442] loop1: p1 start 4294967040 is beyond EOD, truncated
[  789.171414][   T14] usb 6-1: USB disconnect, device number 32
[  789.207089][   T14] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected
[  789.218365][T24456] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  789.282227][T24456] ext4 filesystem being mounted at /559/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  789.464978][T16302] EXT4-fs (loop0): unmounting filesystem.
[  789.745099][ T5292] udevd[5292]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  789.757190][ T4387] udevd[4387]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[  789.773285][ T4438] udevd[4438]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  789.900628][   T26] kauditd_printk_skb: 55 callbacks suppressed
[  789.900643][   T26] audit: type=1326 audit(1786562588.129:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24477 comm="syz.1.6893" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df99e0d9 code=0x7ffc0000
[  789.923852][   T41] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  789.957201][T24481] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6895'.
[  790.057181][   T26] audit: type=1326 audit(1786562588.129:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24477 comm="syz.1.6893" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df99e0d9 code=0x7ffc0000
[  790.101882][T24485] loop1: detected capacity change from 0 to 64
[  790.124149][   T26] audit: type=1326 audit(1786562588.129:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24477 comm="syz.1.6893" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df99e0d9 code=0x7ffc0000
[  790.172711][T24487] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  790.174318][   T41] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  790.252507][   T41] usb 3-1: config 0 has no interface number 0
[  790.272471][   T41] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  790.274678][T24490] EXT4-fs: Ignoring removed mblk_io_submit option
[  790.291534][   T26] audit: type=1326 audit(1786562588.129:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24477 comm="syz.1.6893" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df99e0d9 code=0x7ffc0000
[  790.327178][   T41] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  790.372048][   T41] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  790.383233][   T26] audit: type=1326 audit(1786562588.129:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24477 comm="syz.1.6893" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f04df99e0d9 code=0x7ffc0000
[  790.430351][T24490] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  790.447667][T24490] ext4 filesystem being mounted at /570/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  790.472588][   T26] audit: type=1326 audit(1786562588.129:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24477 comm="syz.1.6893" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df99e0d9 code=0x7ffc0000
[  790.486968][   T41] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  790.560420][T16313] EXT4-fs (loop5): unmounting filesystem.
[  790.619708][   T26] audit: type=1326 audit(1786562588.129:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24477 comm="syz.1.6893" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df99e0d9 code=0x7ffc0000
[  790.653151][   T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  790.680484][   T41] usb 3-1: config 0 descriptor??
[  790.755019][   T26] audit: type=1326 audit(1786562588.129:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24477 comm="syz.1.6893" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f04df99e0d9 code=0x7ffc0000
[  790.768393][T24499] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6903'.
[  790.884269][   T26] audit: type=1326 audit(1786562588.129:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24477 comm="syz.1.6893" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f04df99e0d9 code=0x7ffc0000
[  791.284845][T24483] set_capacity_and_notify: 2 callbacks suppressed
[  791.284895][T24483] loop0: detected capacity change from 0 to 32768
[  791.330341][   T41] uclogic 0003:28BD:0042.0044: failed retrieving string descriptor #100: -71
[  791.343006][T24483] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.6896 (24483)
[  791.350068][   T41] uclogic 0003:28BD:0042.0044: failed retrieving pen parameters: -71
[  791.402251][   T41] uclogic 0003:28BD:0042.0044: pen probing failed: -71
[  791.408513][T24483] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  791.432590][   T41] uclogic 0003:28BD:0042.0044: failed probing parameters: -71
[  791.439674][T24483] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  791.461184][   T41] uclogic: probe of 0003:28BD:0042.0044 failed with error -71
[  791.495641][T24483] BTRFS info (device loop0): enabling auto defrag
[  791.519936][   T41] usb 3-1: USB disconnect, device number 43
[  791.530863][T24483] BTRFS info (device loop0): max_inline at 4096
[  791.555183][T24483] BTRFS info (device loop0): using free space tree
[  791.579286][T24527] netlink: 'syz.1.6911': attribute type 10 has an invalid length.
[  791.620678][T24527] 8021q: adding VLAN 0 to HW filter on device batadv0
[  791.638244][T24527] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  791.647615][T24529] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6912'.
[  791.700795][T24535] netlink: 'syz.1.6911': attribute type 10 has an invalid length.
[  791.709301][T24535] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6911'.
[  791.719217][T24535] device batadv0 entered promiscuous mode
[  791.727929][T24535] bond0: (slave batadv0): Releasing backup interface
[  791.745935][T24535] bridge0: port 3(batadv0) entered blocking state
[  791.770102][T24535] bridge0: port 3(batadv0) entered disabled state
[  791.780710][T24483] BTRFS info (device loop0): enabling ssd optimizations
[  791.838395][   T26] audit: type=1800 audit(1786562590.069:364): pid=24483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6896" name="file1" dev="loop0" ino=260 res=0 errno=0
[  791.965822][T16302] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  792.143974][ T4305] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  792.154797][ T4305] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  792.737244][ T4290] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  792.748754][ T4290] Bluetooth: hci3: Injecting HCI hardware error event
[  792.764561][ T4274] Bluetooth: hci3: hardware error 0x00
[  793.099666][T24577] loop7: detected capacity change from 0 to 4096
[  793.181933][T24577] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512)
[  793.240761][T24585] loop2: detected capacity change from 0 to 64
[  793.334306][T24580] loop0: detected capacity change from 0 to 32768
[  793.351100][T24577] ntfs3: loop7: Mark volume as dirty due to NTFS errors
[  793.433903][T24580] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  793.483117][T24580] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  793.511963][T24580] BTRFS info (device loop0): setting nodatasum
[  793.535956][T24580] BTRFS info (device loop0): force zlib compression, level 3
[  793.586140][T24580] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[  793.642383][T24580] BTRFS info (device loop0): use lzo compression, level 0
[  793.651624][T24577] overlayfs: upper fs does not support tmpfile.
[  793.684945][T24580] BTRFS info (device loop0): turning on flush-on-commit
[  793.723115][T24580] BTRFS info (device loop0): enabling auto defrag
[  793.731596][T24592] loop2: detected capacity change from 0 to 2048
[  793.739066][T24577] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  793.754521][T24580] BTRFS info (device loop0): max_inline at 4096
[  793.760847][T24580] BTRFS info (device loop0): using free space tree
[  793.784353][T24592] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  793.842455][T24600] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  793.847724][T24577] ntfs3: loop7: ino=1b, "file0" attr_set_size
[  793.861314][T24577] overlayfs: failed to verify origin (/, ino=5, err=-2)
[  793.942931][T24577] overlayfs: failed to verify upper root origin
[  793.973148][T24580] BTRFS info (device loop0): enabling ssd optimizations
[  793.980981][T24568] loop1: detected capacity change from 0 to 32768
[  794.115632][T24568] JBD2: Ignoring recovery information on journal
[  794.168218][T20181] ntfs3: loop7: ntfs_sync_fs r=1a failed, -22.
[  794.187227][T20181] ntfs3: loop7: ntfs_evict_inode r=1a failed, -22.
[  794.352541][T24568] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  794.400470][T16302] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  794.769886][T24636] block nbd5: shutting down sockets
[  795.135005][ T4274] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  795.185441][T16119] ocfs2: Unmounting device (7,1) on (node local)
[  795.232536][ T4553] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  795.371362][T24651] loop7: detected capacity change from 0 to 128
[  795.424232][T24651] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  795.432466][ T4553] usb 3-1: Using ep0 maxpacket: 32
[  795.444438][ T4553] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  795.488790][ T4553] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  795.552574][ T4553] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  795.592439][ T4553] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  795.637417][T24660] x_tables: ip6_tables: CLASSIFY.0 target: invalid size 8 (kernel) != (user) 0
[  795.652775][ T4553] usb 3-1: config 0 interface 0 has no altsetting 0
[  795.675600][ T4553] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  795.705219][ T4553] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  795.746689][ T4553] usb 3-1: config 0 descriptor??
[  795.863957][T24669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6949'.
[  795.928153][T24669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6949'.
[  795.961290][T24669] netlink: 'syz.0.6949': attribute type 12 has an invalid length.
[  796.165902][ T4553] corsair-cpro 0003:1B1C:0C10.0045: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0
[  796.277222][ T4553] corsair-cpro: probe of 0003:1B1C:0C10.0045 failed with error -38
[  796.301151][T24685] loop0: detected capacity change from 0 to 8
[  796.365640][ T4553] usb 3-1: USB disconnect, device number 44
[  796.422908][T24685] SQUASHFS error: Unable to read directory block [1d0:32]
[  796.514910][T24692] netlink: 172 bytes leftover after parsing attributes in process `syz.7.6957'.
[  796.706439][T24690] fido_id[24690]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  797.273257][T24715] netem: change failed
[  797.425366][T24718] loop0: detected capacity change from 0 to 256
[  797.473751][T24718] exfat: Deprecated parameter 'namecase'
[  797.515477][T24718] exfat: Deprecated parameter 'namecase'
[  797.579469][T24718] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x53f1f8b9, utbl_chksum : 0xe619d300)
[  797.694794][T24729] loop2: detected capacity change from 0 to 512
[  797.761872][T24729] EXT4-fs: Ignoring removed nomblk_io_submit option
[  797.795847][T24729] EXT4-fs: Ignoring removed i_version option
[  797.865433][T24729] EXT4-fs (loop2): 1 orphan inode deleted
[  797.871274][T24729] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  797.972679][ T5459] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  797.988280][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  798.078187][T24744] loop7: detected capacity change from 0 to 64
[  798.184600][ T5459] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1056, setting to 1024
[  798.208097][T24750] Bluetooth: MGMT ver 1.22
[  798.217680][ T5459] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  798.287936][ T5459] usb 2-1: config 0 interface 0 has no altsetting 0
[  798.318330][ T5459] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[  798.360480][ T5459] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  798.407781][ T5459] usb 2-1: config 0 descriptor??
[  798.458465][T24731] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  798.682657][T24764] can0: slcan on ttyS3.
[  798.732840][T24760] can0 (unregistered): slcan off ttyS3.
[  798.880732][ T5459] konepure 0003:1E7D:2DBE.0046: unknown main item tag 0x2
[  798.891266][T24742] loop5: detected capacity change from 0 to 32768
[  798.905707][ T5459] konepure 0003:1E7D:2DBE.0046: unbalanced delimiter at end of report description
[  798.926550][T24770] device macsec1 entered promiscuous mode
[  798.934495][ T5459] konepure 0003:1E7D:2DBE.0046: parse failed
[  798.960851][ T5459] konepure: probe of 0003:1E7D:2DBE.0046 failed with error -22
[  799.029529][T24772] loop7: detected capacity change from 0 to 1764
[  799.082749][ T5459] usb 2-1: USB disconnect, device number 23
[  799.168708][T24772] iso9660: Corrupted directory entry in block 2 of inode 1920
[  799.182909][T24777] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8
[  799.398779][T24783] loop7: detected capacity change from 0 to 64
[  799.834137][T24796] netem: change failed
[  799.955502][T24801] loop7: detected capacity change from 0 to 1164
[  799.975477][T24801] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet.
[  800.030845][T24803] loop2: detected capacity change from 0 to 128
[  800.122223][T24805] loop1: detected capacity change from 0 to 256
[  800.143902][T24803] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  800.202961][T24803] ext4 filesystem being mounted at /1452/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  800.611440][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  800.813724][T24779] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  801.107143][T16313] ocfs2: Unmounting device (7,5) on (node local)
[  801.306074][T24837] REISERFS warning (device loop2): super-6504 reiserfs_getopt: the option "nolargeio" requires an argument
[  801.306074][T24837] 
[  801.345978][T24851] Cannot find set identified by id 0 to match
[  801.373109][T24846] set_capacity_and_notify: 3 callbacks suppressed
[  801.373126][T24846] loop0: detected capacity change from 0 to 2048
[  801.536578][T24846] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  801.610441][T24859] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  801.841126][T24863] device macvtap1 entered promiscuous mode
[  802.307911][T24878] loop7: detected capacity change from 0 to 512
[  802.331649][T24878] EXT4-fs: Ignoring removed nomblk_io_submit option
[  802.356030][T24878] EXT4-fs: Ignoring removed mblk_io_submit option
[  802.409837][T24878] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  802.424240][T24878] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2
[  802.431902][T24850] loop5: detected capacity change from 0 to 32768
[  802.452896][T24878] EXT4-fs (loop7): 1 truncate cleaned up
[  802.458836][T24878] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  802.486020][T24878] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  802.498679][T24878] EXT4-fs: group quota file already specified
[  802.601191][T20181] EXT4-fs (loop7): unmounting filesystem.
[  802.707666][T24850] JBD2: Ignoring recovery information on journal
[  802.901092][T24850] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  803.145211][T24892] loop2: detected capacity change from 0 to 8192
[  803.168243][T16313] ocfs2: Unmounting device (7,5) on (node local)
[  803.291240][T24892] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  803.367240][T24892] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  803.369730][T24913] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7042'.
[  803.377847][T24892] REISERFS (device loop2): using ordered data mode
[  803.407629][T24892] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  803.502212][T24892] REISERFS (device loop2): checking transaction log (loop2)
[  803.543795][T24892] REISERFS (device loop2): Using r5 hash to sort names
[  803.596131][T24892] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  803.721090][T24892] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  804.443527][T24950] smc: net device wlan0 applied user defined pnetid SYZ1
[  804.572498][ T5296] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  804.772431][ T5296] usb 6-1: Using ep0 maxpacket: 32
[  804.779438][ T5296] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  804.827695][ T5296] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  804.828479][T24959] loop7: detected capacity change from 0 to 8192
[  804.867116][ T5296] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  804.895589][ T5296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  804.930066][ T5296] usb 6-1: config 0 descriptor??
[  805.111443][T24976] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7060'.
[  805.118957][T24978] loop2: detected capacity change from 0 to 128
[  805.181129][T24978] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  805.193559][T24978] ext4 filesystem being mounted at /1461/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  805.355543][ T5296] ft260 0003:0403:6030.0047: item fetching failed at offset 0/2
[  805.377739][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  805.393276][ T5296] ft260 0003:0403:6030.0047: failed to parse HID
[  805.415611][ T5296] ft260: probe of 0003:0403:6030.0047 failed with error -22
[  805.588997][ T4324] usb 6-1: USB disconnect, device number 33
[  806.010674][T25006] loop2: detected capacity change from 0 to 512
[  806.034284][T25006] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  806.069106][T25006] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.7070: invalid indirect mapped block 4294967295 (level 1)
[  806.122830][T25006] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.7070: invalid indirect mapped block 4294967295 (level 1)
[  806.238073][T25006] EXT4-fs (loop2): 2 truncates cleaned up
[  806.245664][T25006] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  806.433341][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  806.558517][T25017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7074'.
[  806.585800][T25017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7074'.
[  806.633109][T25017] netlink: 'syz.1.7074': attribute type 19 has an invalid length.
[  806.667119][T25017] netlink: 'syz.1.7074': attribute type 20 has an invalid length.
[  806.696054][T25019] netlink: 822 bytes leftover after parsing attributes in process `syz.2.7073'.
[  806.734045][T25026] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  806.890780][T25030] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7080'.
[  807.407084][T25053] netlink: 'syz.2.7086': attribute type 4 has an invalid length.
[  807.448988][T25053] netlink: 'syz.2.7086': attribute type 1 has an invalid length.
[  807.497756][T25053] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.7086'.
[  808.667632][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  808.676812][T25065] loop2: detected capacity change from 0 to 32768
[  809.157042][T25104] loop0: detected capacity change from 0 to 2048
[  809.238146][T25104] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  809.238814][T25077] loop7: detected capacity change from 0 to 32768
[  809.367764][T25111] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  809.415718][T25077] JBD2: Ignoring recovery information on journal
[  809.599618][T25077] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  809.894929][T20181] ocfs2: Unmounting device (7,7) on (node local)
[  810.704192][T25119] loop1: detected capacity change from 0 to 32768
[  810.865108][T25119] XFS (loop1): Mounting V5 Filesystem
[  811.023623][T25119] XFS (loop1): Ending clean mount
[  811.132523][ T4274] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  811.142105][ T4274] Bluetooth: hci4: Injecting HCI hardware error event
[  811.157181][ T4290] Bluetooth: hci4: hardware error 0x00
[  811.245005][T16119] XFS (loop1): Unmounting Filesystem
[  811.300157][    C1] vkms_vblank_simulate: vblank timer overrun
[  811.626954][T25193] loop2: detected capacity change from 0 to 512
[  811.678875][T25193] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  811.730626][T25193] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  811.772082][T25193] EXT4-fs (loop2): orphan cleanup on readonly fs
[  811.826997][T25193] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  811.847682][T25178] loop5: detected capacity change from 0 to 40427
[  811.879385][T25193] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  811.896966][T25193] EXT4-fs (loop2): 1 orphan inode deleted
[  811.907909][T25178] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  811.938722][T25193] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  811.943107][T25178] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  812.010929][T25178] F2FS-fs (loop5): invalid crc value
[  812.067062][T25178] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  812.158514][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  812.312099][T25178] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  812.326749][T25178] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  812.439599][T25215] loop1: detected capacity change from 0 to 512
[  812.460746][T25215] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  812.517721][T25215] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  812.672068][T25215] ext4 filesystem being mounted at /681/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  812.756857][T25222] loop2: detected capacity change from 0 to 2048
[  812.858453][T25225] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  812.914125][T16119] EXT4-fs (loop1): unmounting filesystem.
[  813.246070][T25209] loop0: detected capacity change from 0 to 32768
[  813.293063][ T4290] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  814.362969][T25274] loop2: detected capacity change from 0 to 2048
[  814.479431][T25274] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  814.538226][T25248] loop1: detected capacity change from 0 to 32768
[  814.625380][T25248] XFS (loop1): Mounting V5 Filesystem
[  814.767720][T25264] loop7: detected capacity change from 0 to 40427
[  814.781491][T25264] F2FS-fs (loop7): build fault injection attr: rate: 771, type: 0x3ffff
[  814.800891][T25248] XFS (loop1): Ending clean mount
[  814.811105][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  814.864021][T25264] F2FS-fs (loop7): invalid crc value
[  814.892582][ T5296] usb 6-1: new full-speed USB device number 34 using dummy_hcd
[  814.942907][T25264] F2FS-fs (loop7): Found nat_bits in checkpoint
[  815.084628][T16119] XFS (loop1): Unmounting Filesystem
[  815.108081][ T5296] usb 6-1: not running at top speed; connect to a high speed hub
[  815.135083][ T5296] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00
[  815.174486][T25264] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  815.183969][ T5296] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  815.232918][ T5296] usb 6-1: Product: syz
[  815.237176][ T5296] usb 6-1: Manufacturer: syz
[  815.241813][ T5296] usb 6-1: SerialNumber: syz
[  815.348933][ T5296] keyspan 6-1:1.0: Keyspan 4 port adapter converter detected
[  815.391892][T20181] syz-executor: attempt to access beyond end of device
[  815.391892][T20181] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  815.420731][ T5296] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  815.496469][ T5296] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  815.540485][ T5296] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  815.575428][T25282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  815.592012][ T5296] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  815.612320][T25282] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  815.632971][    C1] usb 6-1: malformed indat packet
[  815.638310][    C1] usb 6-1: malformed indat packet
[  815.645295][    C1] usb 6-1: malformed indat packet
[  815.650612][    C1] usb 6-1: malformed indat packet
[  815.666342][    C1] usb 6-1: malformed indat packet
[  815.671673][    C1] usb 6-1: malformed indat packet
[  815.689169][    C1] usb 6-1: malformed indat packet
[  815.943317][ T5296] usb 6-1: USB disconnect, device number 34
[  815.990847][ T5296] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  816.059887][T25316] loop0: detected capacity change from 0 to 256
[  816.100330][ T5296] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  816.155506][ T5296] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  816.228445][ T5296] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  816.297005][ T5296] keyspan 6-1:1.0: device disconnected
[  816.414377][T25328] loop0: detected capacity change from 0 to 512
[  816.460541][T25328] EXT4-fs (loop0): Test dummy encryption mode enabled
[  816.476980][T25332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7179'.
[  816.502898][T25328] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  816.564885][T25332] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7179'.
[  816.579743][T25328] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.7177: bad orphan inode 131083
[  816.597296][T25332] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22)
[  816.609934][T25336] netlink: 'syz.5.7181': attribute type 4 has an invalid length.
[  816.650046][T25332] iwpm_hello_cb: Unable to parse nlmsg
[  816.702412][T25328] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  817.111840][T25328] EXT4-fs (loop0): re-mounted. Quota mode: none.
[  817.192799][T25355] loop7: detected capacity change from 0 to 128
[  817.221881][T25354] loop5: detected capacity change from 0 to 1024
[  817.262113][T25355] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  817.278683][T16302] EXT4-fs (loop0): unmounting filesystem.
[  817.283353][T25355] ext4 filesystem being mounted at /333/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  817.358370][T25354] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  817.496598][T20181] EXT4-fs (loop7): unmounting filesystem.
[  817.536672][T16313] EXT4-fs (loop5): unmounting filesystem.
[  817.770465][T25366] netlink: 'syz.0.7193': attribute type 1 has an invalid length.
[  817.862035][T25343] loop1: detected capacity change from 0 to 32768
[  817.868568][T25372] loop2: detected capacity change from 0 to 64
[  818.397859][T25389] loop7: detected capacity change from 0 to 1024
[  819.729767][T25396] loop1: detected capacity change from 0 to 40427
[  819.763164][T25396] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[  819.804254][T25396] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  819.813038][ T5296] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  819.895096][T25396] F2FS-fs (loop1): Found nat_bits in checkpoint
[  820.003130][ T5296] usb 6-1: Using ep0 maxpacket: 16
[  820.010562][ T5296] usb 6-1: config 0 interface 0 has no altsetting 0
[  820.039428][ T5296] usb 6-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00
[  820.068693][T25443] loop2: detected capacity change from 0 to 256
[  820.069505][ T5296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  820.075975][T25396] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  820.131145][ T5296] usb 6-1: config 0 descriptor??
[  820.132525][T25396] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  820.475448][T16119] syz-executor: attempt to access beyond end of device
[  820.475448][T16119] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  820.530226][T25451] netlink: 'syz.2.7224': attribute type 6 has an invalid length.
[  820.560849][ T5296] wacom 0003:056A:00B1.0048: unknown main item tag 0x6
[  820.579403][ T5296] wacom 0003:056A:00B1.0048: ignoring exceeding usage max
[  820.595937][ T5296] wacom 0003:056A:00B1.0048: Unknown device_type for 'HID 056a:00b1'. Assuming pen.
[  820.608460][ T5296] wacom 0003:056A:00B1.0048: hidraw0: USB HID v0.08 Device [HID 056a:00b1] on usb-dummy_hcd.5-1/input0
[  820.622171][ T5296] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:00B1.0048/input/input49
[  821.018243][   T41] usb 6-1: USB disconnect, device number 35
[  821.104784][T25455] fido_id[25455]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  821.882268][T25492] loop1: detected capacity change from 0 to 512
[  822.007231][T25492] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  822.040271][T25492] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.7238: corrupted in-inode xattr
[  822.108046][T25492] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.7238: couldn't read orphan inode 15 (err -117)
[  822.172733][T25492] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  822.259292][T25492] EXT4-fs (loop1): Quota file not on filesystem root. Journaled quota will not work
[  822.310445][ T4326] usb 3-1: new full-speed USB device number 45 using dummy_hcd
[  822.415668][T16119] EXT4-fs (loop1): unmounting filesystem.
[  822.513438][ T4326] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  822.549045][ T4326] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  822.586224][ T4326] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  822.637401][ T4326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  822.678793][ T4326] usb 3-1: config 0 descriptor??
[  822.746643][ T4326] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  822.767257][ T4326] dvb-usb: bulk message failed: -22 (3/0)
[  822.780352][T25487] loop7: detected capacity change from 0 to 32768
[  822.788746][ T4326] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  822.819638][ T4326] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  822.852196][ T4326] usb 3-1: media controller created
[  822.918198][T25498] dvb-usb: bulk message failed: -22 (2/0)
[  822.924382][T25487] XFS (loop7): Mounting V5 Filesystem
[  822.934786][ T4326] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  822.951318][ T4326] dvb-usb: bulk message failed: -22 (6/0)
[  822.959240][ T4326] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  822.979597][ T4326] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input52
[  823.051537][ T4326] dvb-usb: schedule remote query interval to 150 msecs.
[  823.107048][T25537] loop1: detected capacity change from 0 to 512
[  823.119114][ T4326] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  823.153610][ T4326] usb 3-1: USB disconnect, device number 45
[  823.186362][T25537] EXT4-fs (loop1): Test dummy encryption mode enabled
[  823.200381][T25487] XFS (loop7): Ending clean mount
[  823.247003][T25537] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  823.306161][ T4326] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  823.351080][T25537] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.7251: bad orphan inode 131083
[  823.404607][T25542] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7253'.
[  823.404831][T20181] XFS (loop7): Unmounting Filesystem
[  823.423869][T25537] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  823.771858][T25537] EXT4-fs (loop1): re-mounted. Quota mode: none.
[  823.915074][T16119] EXT4-fs (loop1): unmounting filesystem.
[  824.336281][T25563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7264'.
[  824.405756][T25566] loop0: detected capacity change from 0 to 64
[  825.367395][T25593] loop0: detected capacity change from 0 to 4096
[  825.417242][T25593] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  825.547883][T25605] loop1: detected capacity change from 0 to 1024
[  825.622857][T25605] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  825.939182][T25620] device ipvlan1 entered promiscuous mode
[  825.971187][T25616] device ipvlan1 left promiscuous mode
[  826.104218][T25625] loop0: detected capacity change from 0 to 256
[  826.305357][   T26] audit: type=1326 audit(1786562624.529:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25630 comm="syz.2.7291" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450699e0d9 code=0x7ffc0000
[  826.444214][   T26] audit: type=1326 audit(1786562624.539:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25630 comm="syz.2.7291" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450699e0d9 code=0x7ffc0000
[  826.499465][T25639] loop0: detected capacity change from 0 to 256
[  826.514096][   T26] audit: type=1326 audit(1786562624.539:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25630 comm="syz.2.7291" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450699e0d9 code=0x7ffc0000
[  826.628275][   T26] audit: type=1326 audit(1786562624.539:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25630 comm="syz.2.7291" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f450699e0d9 code=0x7ffc0000
[  826.740826][   T26] audit: type=1326 audit(1786562624.539:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25630 comm="syz.2.7291" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450699e0d9 code=0x7ffc0000
[  826.797489][T25644] loop0: detected capacity change from 0 to 1024
[  826.847083][   T26] audit: type=1326 audit(1786562624.539:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25630 comm="syz.2.7291" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450699e0d9 code=0x7ffc0000
[  827.014203][   T26] audit: type=1326 audit(1786562624.539:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25630 comm="syz.2.7291" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450699e0d9 code=0x7ffc0000
[  827.115200][   T26] audit: type=1326 audit(1786562624.539:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25630 comm="syz.2.7291" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450699e0d9 code=0x7ffc0000
[  827.262020][   T26] audit: type=1326 audit(1786562624.539:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25630 comm="syz.2.7291" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f450699e0d9 code=0x7ffc0000
[  827.317189][T25657] loop5: detected capacity change from 0 to 256
[  827.365809][ T5473] kernel write not supported for file /snd/seq (pid: 5473 comm: kworker/1:18)
[  827.415998][   T26] audit: type=1326 audit(1786562624.539:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25630 comm="syz.2.7291" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450699e0d9 code=0x7ffc0000
[  827.649788][T25669] loop1: detected capacity change from 0 to 16
[  827.680742][T25669] erofs: (device loop1): mounted with root inode @ nid 36.
[  827.774324][T25669] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  827.833408][T25669] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851]
[  827.866268][T25669] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117]
[  828.146230][T25690] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7316'.
[  828.562059][T25705] loop1: detected capacity change from 0 to 2048
[  828.655862][T25709] mkiss: ax0: crc mode is auto.
[  828.666269][T25705] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  828.684287][T25705] ext4 filesystem being mounted at /711/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  828.716230][    C0] vkms_vblank_simulate: vblank timer overrun
[  828.790313][T16119] EXT4-fs (loop1): unmounting filesystem.
[  829.047660][T25722] usb usb1: usbfs: process 25722 (syz.2.7327) did not claim interface 0 before use
[  829.322704][T25729] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7330'.
[  829.376564][T25706] loop0: detected capacity change from 0 to 32768
[  829.501348][T25706] XFS (loop0): Mounting V5 Filesystem
[  829.550613][T25706] XFS (loop0): Ending clean mount
[  829.568765][T25746] loop1: detected capacity change from 0 to 1024
[  829.608730][T25746] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  829.620410][T16302] XFS (loop0): Unmounting Filesystem
[  830.514341][T25733] loop5: detected capacity change from 0 to 40427
[  830.540228][T25733] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  830.558827][T25733] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  830.564100][T25765] loop0: detected capacity change from 0 to 512
[  830.583697][T25733] F2FS-fs (loop5): invalid crc value
[  830.617993][T25765] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  830.662945][T25733] F2FS-fs (loop5): Found nat_bits in checkpoint
[  830.679436][T25765] EXT4-fs (loop0): Test dummy encryption mode enabled
[  830.757554][T25765] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  830.820994][T25733] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  830.821021][T25733] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  831.062691][T25765] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  831.086533][T25765] EXT4-fs: Can't set or change test_dummy_encryption on remount
[  831.275072][T16302] EXT4-fs (loop0): unmounting filesystem.
[  832.443425][T25817] loop1: detected capacity change from 0 to 1024
[  832.876272][T25828] loop5: detected capacity change from 0 to 1024
[  833.000646][T25832] rdma_op ffff888074f261f0 conn xmit_rdma 0000000000000000
[  833.359659][T25842] loop1: detected capacity change from 0 to 1024
[  833.475798][T25842] hfsplus: can't free extent
[  833.753013][ T5473] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  833.905423][T25838] loop7: detected capacity change from 0 to 32768
[  833.945156][ T5473] usb 3-1: Using ep0 maxpacket: 8
[  833.963743][ T5473] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  834.010766][ T5473] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  834.056345][ T5473] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  834.099840][ T5473] usb 3-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00
[  834.140007][ T5473] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  834.163495][ T5473] usb 3-1: config 0 descriptor??
[  834.168911][T25838] XFS (loop7): Mounting V5 Filesystem
[  834.210013][T25838] XFS (loop7): Ending clean mount
[  834.331539][T20181] XFS (loop7): Unmounting Filesystem
[  834.588796][ T5473] input: HID 046d:c20a as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:046D:C20A.0049/input/input55
[  834.707511][ T5473] logitech 0003:046D:C20A.0049: input,hidraw0: USB HID v0.00 Joystick [HID 046d:c20a] on usb-dummy_hcd.2-1/input0
[  834.772100][T25879] loop5: detected capacity change from 0 to 32768
[  834.783343][ T5473] logitech 0003:046D:C20A.0049: missing HID_OUTPUT_REPORT 0
[  834.829948][T25879] 
[  834.829948][T25879]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  834.829948][T25879] 
[  834.901556][T25879] ERROR: (device loop5): diWrite: ixpxd invalid
[  834.901556][T25879] 
[  834.978511][T25879] ERROR: (device loop5): txCommit: 
[  834.978511][T25879] 
[  834.991596][ T5473] usb 3-1: USB disconnect, device number 46
[  835.012154][T25892] ERROR: (device loop5): diWrite: ixpxd invalid
[  835.012154][T25892] 
[  835.073616][T25892] ERROR: (device loop5): txCommit: 
[  835.073616][T25892] 
[  835.217205][T16313] 
[  835.217205][T16313]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  835.217205][T16313] 
[  835.277249][T16313] 
[  835.277249][T16313]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  835.277249][T16313] 
[  835.351815][T25893] fido_id[25893]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  835.588197][T25910] loop2: detected capacity change from 0 to 128
[  835.674351][T25910] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  835.804637][T25910] hpfs: filesystem error: improperly stopped
[  835.810687][T25910] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  835.869348][T25910] hpfs: You really don't want any checks? You are crazy...
[  835.905619][T25910] hpfs: Code page index out of array
[  835.920216][T25910] hpfs: code page support is disabled
[  835.946212][T25910] hpfs: hpfs_map_4sectors(): unaligned read
[  835.985740][T25910] hpfs: hpfs_map_4sectors(): unaligned read
[  835.991702][T25910] hpfs: filesystem error: unable to find root dir
[  836.188650][T25910] hpfs: hpfs_map_4sectors(): unaligned read
[  836.848224][   T26] kauditd_printk_skb: 3 callbacks suppressed
[  836.848239][   T26] audit: type=1326 audit(1786562635.079:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25949 comm="syz.1.7400" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df99e0d9 code=0x7ffc0000
[  836.996678][   T26] audit: type=1326 audit(1786562635.089:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25949 comm="syz.1.7400" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df99e0d9 code=0x7ffc0000
[  837.020809][    C1] vkms_vblank_simulate: vblank timer overrun
[  837.135062][T25965] loop5: detected capacity change from 0 to 128
[  837.179067][   T26] audit: type=1326 audit(1786562635.089:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25949 comm="syz.1.7400" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df99e0d9 code=0x7ffc0000
[  837.203208][    C1] vkms_vblank_simulate: vblank timer overrun
[  837.267751][T25965] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  837.296701][T25965] ext4 filesystem being mounted at /663/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  837.330920][   T26] audit: type=1326 audit(1786562635.129:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25949 comm="syz.1.7400" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df99e0d9 code=0x7ffc0000
[  837.355237][    C1] vkms_vblank_simulate: vblank timer overrun
[  837.472501][   T26] audit: type=1326 audit(1786562635.129:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25949 comm="syz.1.7400" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f04df99e0d9 code=0x7ffc0000
[  837.560687][T25982] devtmpfs: Too few inodes for current use
[  837.672872][   T26] audit: type=1326 audit(1786562635.129:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25949 comm="syz.1.7400" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df99e0d9 code=0x7ffc0000
[  837.719122][T16313] EXT4-fs (loop5): unmounting filesystem.
[  837.816404][   T26] audit: type=1326 audit(1786562635.129:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25949 comm="syz.1.7400" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df99e0d9 code=0x7ffc0000
[  837.840491][    C1] vkms_vblank_simulate: vblank timer overrun
[  837.998325][   T26] audit: type=1326 audit(1786562635.129:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25949 comm="syz.1.7400" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df99e0d9 code=0x7ffc0000
[  838.022440][    C1] vkms_vblank_simulate: vblank timer overrun
[  838.159172][   T26] audit: type=1326 audit(1786562635.129:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25949 comm="syz.1.7400" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04df99e0d9 code=0x7ffc0000
[  838.184674][    C1] vkms_vblank_simulate: vblank timer overrun
[  838.303271][   T26] audit: type=1326 audit(1786562635.139:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25949 comm="syz.1.7400" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f04df99e0d9 code=0x7ffc0000
[  838.343020][T10413] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  838.532932][T10413] usb 3-1: Using ep0 maxpacket: 16
[  838.545863][T10413] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 70, changing to 10
[  838.577930][T10413] usb 3-1: config 0 interface 0 has no altsetting 0
[  838.603105][T10413] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  838.632969][T10413] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  838.670412][T10413] usb 3-1: config 0 descriptor??
[  838.728283][T26012] loop7: detected capacity change from 0 to 8192
[  838.831648][T25989] loop1: detected capacity change from 0 to 32768
[  838.920508][T25989] JBD2: Ignoring recovery information on journal
[  839.074168][T25989] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  839.099418][T26003] loop5: detected capacity change from 0 to 32768
[  839.113865][T10413] gt683r_led 0003:1770:FF00.004A: hidraw0: USB HID v0.81 Device [HID 1770:ff00] on usb-dummy_hcd.2-1/input0
[  839.243128][T16119] ocfs2: Unmounting device (7,1) on (node local)
[  839.361115][ T4276] usb 3-1: USB disconnect, device number 47
[  839.392298][   T41] gt683r_led 0003:1770:FF00.004A: failed to send set report request: -19
[  839.465022][T26020] fido_id[26020]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  839.821428][T26036] loop1: detected capacity change from 0 to 256
[  839.860361][T26036] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  839.899397][T26036] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  839.939563][T26036] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  839.963481][T26041] loop7: detected capacity change from 0 to 512
[  839.970895][T26041] FAT-fs (loop7): Unrecognized mount option "gid=" or missing value
[  840.094547][T26044] loop2: detected capacity change from 0 to 8
[  840.220284][T26044] SQUASHFS error: Failed to read block 0x2: -5
[  840.259308][T26044] SQUASHFS error: Unable to read metadata cache entry [0]
[  840.274453][T26049] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  840.286894][T26044] SQUASHFS error: Unable to read inode 0x127
[  840.595997][T26056] loop2: detected capacity change from 0 to 4096
[  840.606596][T26062] loop7: detected capacity change from 0 to 136
[  840.627934][T26062] Attempt to read inode for relocated directory
[  840.704535][T26063] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  840.812838][ T4669] usb 6-1: new full-speed USB device number 36 using dummy_hcd
[  841.030468][ T4669] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  841.057990][T26051] loop1: detected capacity change from 0 to 32768
[  841.068495][ T4669] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0a31, bcdDevice= 0.00
[  841.106426][T26051] (syz.1.7435,26051,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  841.136697][ T4669] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  841.150170][T26051] (syz.1.7435,26051,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  841.194211][ T4669] usb 6-1: config 0 descriptor??
[  841.220255][T26060] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  841.250234][T26051] JBD2: Ignoring recovery information on journal
[  841.404215][T26051] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  841.654610][ T4669] hid (null): usage index exceeded
[  841.664935][ T4669] hid-generic 0003:1B1C:0A31.004B: unknown main item tag 0x3
[  841.676367][T16119] ocfs2: Unmounting device (7,1) on (node local)
[  841.696106][ T4669] hid-generic 0003:1B1C:0A31.004B: unknown main item tag 0x4
[  841.747086][ T4669] hid-generic 0003:1B1C:0A31.004B: unknown main item tag 0xd
[  841.794116][ T4669] hid-generic 0003:1B1C:0A31.004B: ignoring exceeding usage max
[  841.842232][ T4669] hid-generic 0003:1B1C:0A31.004B: ignoring exceeding usage max
[  841.880184][T26082] loop7: detected capacity change from 0 to 4096
[  841.889512][ T4669] hid-generic 0003:1B1C:0A31.004B: usage index exceeded
[  841.917159][ T4669] hid-generic 0003:1B1C:0A31.004B: item 0 2 2 2 parsing failed
[  841.927465][T26082] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512)
[  841.970679][ T4669] hid-generic: probe of 0003:1B1C:0A31.004B failed with error -22
[  842.031539][ T4669] usb 6-1: USB disconnect, device number 36
[  842.189108][T26082] ntfs3: loop7: Mark volume as dirty due to NTFS errors
[  842.930576][T26088] loop1: detected capacity change from 0 to 32768
[  843.055103][T26088] XFS (loop1): Mounting V5 Filesystem
[  843.161298][T26084] loop0: detected capacity change from 0 to 40427
[  843.194393][T26088] XFS (loop1): Ending clean mount
[  843.256444][T16119] XFS (loop1): Unmounting Filesystem
[  843.279595][T26084] F2FS-fs (loop0): Wrong segment_count / block_count (64 > 16384)
[  843.336202][T26084] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  843.432907][T26084] F2FS-fs (loop0): Found nat_bits in checkpoint
[  843.676773][T26084] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  843.732672][T26084] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  843.899938][T26099] loop7: detected capacity change from 0 to 40427
[  844.005419][T26099] F2FS-fs (loop7): build fault injection attr: rate: 14, type: 0x3ffff
[  844.083879][T26099] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0xe4
[  844.149432][T26099] F2FS-fs (loop7): invalid crc value
[  844.219352][T26099] F2FS-fs (loop7): Found nat_bits in checkpoint
[  844.350559][T26099] F2FS-fs (loop7) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x42b/0xa00
[  844.492257][T26099] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  844.554697][T26099] F2FS-fs (loop7) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x178/0x910
[  844.775491][T26152] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7464'.
[  845.028550][T26157] program syz.0.7467 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  845.623881][T26137] loop5: detected capacity change from 0 to 32768
[  845.804225][T26137] UFO tlock:0xffffc900028ba360
[  846.278390][T26147] loop1: detected capacity change from 0 to 32768
[  846.468803][T26172] ucsi-stm32g0-i2c 0-0003: i2c read 03, 00 error: 0
[  846.489923][T26147] XFS (loop1): Mounting V5 Filesystem
[  846.584478][T26172] ucsi-stm32g0-i2c: probe of 0-0003 failed with error -5
[  846.642230][T26147] XFS (loop1): Ending clean mount
[  846.651120][T26172] i2c i2c-0: new_device: Instantiated device stm32g0-typec at 0x03
[  846.690624][T26147] XFS (loop1): Quotacheck needed: Please wait.
[  846.979780][T26162] loop2: detected capacity change from 0 to 262144
[  847.004033][T26147] XFS (loop1): Quotacheck: Done.
[  847.013269][T26162] F2FS-fs (loop2): invalid crc value
[  847.065236][T26162] F2FS-fs (loop2): Found nat_bits in checkpoint
[  847.114908][T26162] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  847.190795][T16119] XFS (loop1): Unmounting Filesystem
[  847.232014][T26193] netlink: 'syz.7.7475': attribute type 1 has an invalid length.
[  847.719158][T26201] loop5: detected capacity change from 0 to 4096
[  847.848641][T26201] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  847.906623][T26201] ntfs3: loop5: failed to convert "0000" to iso8859-2
[  847.944452][T26201] ntfs3: loop5: failed to convert name for inode 1e.
[  848.302203][T26223] loop1: detected capacity change from 0 to 256
[  848.337450][T26223] exfat: Deprecated parameter 'utf8'
[  848.379816][T26223] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  848.433643][T26223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7474'.
[  848.908858][T26242] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7488'.
[  849.013367][T26242] bridge0: port 2(bridge_slave_1) entered disabled state
[  849.024544][T26242] bridge0: port 1(bridge_slave_0) entered disabled state
[  849.330402][T26255] loop5: detected capacity change from 0 to 256
[  850.489667][T26296] netlink: 'syz.7.7509': attribute type 8 has an invalid length.
[  850.527460][T26296] sch_fq: defrate 0 ignored.
[  850.732998][ T5473] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  850.922942][ T5473] usb 6-1: Using ep0 maxpacket: 8
[  850.930402][ T5473] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  850.983108][ T5473] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  851.022931][ T5473] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  851.052886][ T5473] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  851.083245][ T5473] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  851.127341][ T5473] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  851.157708][ T5473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  851.234099][T26314] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7516'.
[  851.419041][ T5473] usb 6-1: GET_CAPABILITIES returned 0
[  851.433732][ T5473] usbtmc 6-1:16.0: can't read capabilities
[  851.626430][ T5473] usb 6-1: USB disconnect, device number 37
[  852.332703][ T4669] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  852.373044][T26375] i2c i2c-0: Failed to register i2c client stm32g0-typec at 0x03 (-16)
[  852.532513][ T4669] usb 2-1: Using ep0 maxpacket: 8
[  852.543980][ T4669] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  852.582623][ T4669] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  852.634957][ T4669] pvrusb2: Hardware description: Terratec Grabster AV400
[  852.648671][T26383] loop2: detected capacity change from 0 to 1024
[  852.666067][ T4669] pvrusb2: **********
[  852.670201][ T4669] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  852.727123][ T4669] pvrusb2: Important functionality might not be entirely working.
[  852.773440][ T4669] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  852.815758][ T4669] pvrusb2: **********
[  852.883819][ T2312] pvrusb2: Invalid write control endpoint
[  853.103356][T26364] pvrusb2: Killing an I2C write to 4 that is too large (desired=62 limit=61)
[  853.161529][ T4669] usb 2-1: USB disconnect, device number 24
[  853.325242][ T2312] pvrusb2: Invalid write control endpoint
[  853.331968][ T2312] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  853.373787][ T2312] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  853.388526][ T2312] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  853.422214][ T2312] pvrusb2: Device being rendered inoperable
[  853.462995][ T2312] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  853.484439][ T2312] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  853.524545][ T2312] pvrusb2: Attached sub-driver cx25840
[  853.531003][ T2312] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  853.562878][ T2312] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  853.865952][T26422] i2c i2c-0: Failed to register i2c client stm32g0-typec at 0x03 (-16)
[  853.875345][T26423] loop1: detected capacity change from 0 to 512
[  854.589219][T26449] loop2: detected capacity change from 0 to 64
[  854.643876][T26453] loop0: detected capacity change from 0 to 256
[  854.651172][T26453] exfat: Deprecated parameter 'utf8'
[  854.657775][T26453] exfat: Deprecated parameter 'utf8'
[  854.664038][T26453] exfat: Deprecated parameter 'namecase'
[  854.699601][T26453] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d)
[  854.937416][T26461] loop1: detected capacity change from 0 to 1024
[  855.019440][T26461] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.7561: lblock 2 mapped to illegal pblock 2 (length 1)
[  855.034711][T26461] __quota_error: 5 callbacks suppressed
[  855.034725][T26461] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  855.048918][T26461] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 48: comm syz.1.7561: lblock 0 mapped to illegal pblock 48 (length 1)
[  855.073660][T26461] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  855.087554][T26461] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.7561: Failed to acquire dquot type 0
[  855.099876][T26461] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  855.111824][T26461] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.7561: mark_inode_dirty error
[  855.126336][T26461] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  855.137391][T26461] EXT4-fs (loop1): 1 orphan inode deleted
[  855.143571][T26461] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  855.161927][T26461] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm syz.1.7561: lblock 1 mapped to illegal pblock 1 (length 1)
[  855.184972][T26461] Quota error (device loop1): find_tree_dqentry: Can't read quota tree block 1
[  855.197854][T26461] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 60928
[  855.216240][T26461] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.7561: Failed to acquire dquot type 0
[  855.362848][T16119] EXT4-fs (loop1): unmounting filesystem.
[  855.373303][ T4304] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  855.415543][ T4304] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  855.461575][ T4304] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:6: Failed to release dquot type 0
[  855.491677][T16119] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0
[  855.520380][T16119] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  855.546987][T16119] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error
[  855.911659][T26463] loop0: detected capacity change from 0 to 32768
[  856.478029][T26515] loop7: detected capacity change from 0 to 256
[  857.447068][T26504] loop1: detected capacity change from 0 to 32768
[  857.497858][T26504] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.7578 (26504)
[  857.587857][T26504] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  857.653337][T26504] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  857.729899][T26504] BTRFS info (device loop1): setting nodatacow, compression disabled
[  857.753716][T26545] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7589'.
[  857.774600][T26504] BTRFS info (device loop1): turning on flush-on-commit
[  857.817831][T26504] BTRFS info (device loop1): using free space tree
[  858.210795][T26504] BTRFS info (device loop1): enabling ssd optimizations
[  858.545830][T16119] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  859.171024][T26564] loop7: detected capacity change from 0 to 32768
[  859.273126][T26546] syz.2.7590 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  859.621475][T26564] XFS (loop7): Mounting V5 Filesystem
[  859.748135][T26585] loop0: detected capacity change from 0 to 32768
[  859.748381][T26564] XFS (loop7): Ending clean mount
[  859.899566][T26585] XFS (loop0): Mounting V5 Filesystem
[  859.988094][T26585] XFS (loop0): Ending clean mount
[  860.051371][T26586] loop5: detected capacity change from 0 to 32768
[  860.100412][T20181] XFS (loop7): Unmounting Filesystem
[  860.302089][T26586] XFS (loop5): Mounting V5 Filesystem
[  860.310553][T26585] XFS (loop0): User initiated shutdown received.
[  860.397007][T26645] loop1: detected capacity change from 0 to 64
[  860.421552][T26585] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:489).  Shutting down filesystem.
[  860.451638][T26586] XFS (loop5): Ending clean mount
[  860.491016][T26647] netlink: 1060 bytes leftover after parsing attributes in process `syz.2.7605'.
[  860.523040][T26647] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  860.570860][T26585] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  860.659190][T16313] XFS (loop5): Unmounting Filesystem
[  860.757880][T16302] XFS (loop0): Unmounting Filesystem
[  861.171569][   T26] audit: type=1807 audit(1786562659.399:393): action=measure func=F res=0
[  861.190315][T26658] ima: policy update failed
[  861.191672][   T26] audit: type=1802 audit(1786562659.419:394): pid=26659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.7612" res=0 errno=0
[  861.343540][   T26] audit: type=1802 audit(1786562659.429:395): pid=26658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.7612" res=0 errno=0
[  862.042160][T26685] loop5: detected capacity change from 0 to 256
[  862.059495][T26687] loop9: detected capacity change from 0 to 7
[  862.107247][ T4438] Dev loop9: unable to read RDB block 7
[  862.124438][ T4438]  loop9: unable to read partition table
[  862.162962][ T4438] loop9: partition table beyond EOD, truncated
[  862.200706][T26690] Dev loop9: unable to read RDB block 7
[  862.228429][T26690]  loop9: unable to read partition table
[  862.238653][T26690] loop9: partition table beyond EOD, truncated
[  862.251247][T26690] loop_reread_partitions: partition scan of loop9 (þè"«xü—ŸÑ) failed (rc=-5)
[  862.251808][T26687] Dev loop9: unable to read RDB block 7
[  862.296431][T26687]  loop9: unable to read partition table
[  862.316948][T26687] loop9: partition table beyond EOD, truncated
[  862.365889][T26687] loop_reread_partitions: partition scan of loop9 (þè"«xü—ŸÑ) failed (rc=-5)
[  863.602852][T26703] loop0: detected capacity change from 0 to 32768
[  863.673258][T26703] 
[  863.673258][T26703]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  863.673258][T26703] 
[  863.828257][T16302] 
[  863.828257][T16302]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  863.828257][T16302] 
[  863.869502][T16302] 
[  863.869502][T16302]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  863.869502][T16302] 
[  864.015423][T26744] vxcan1: tx address claim with dest, not broadcast
[  864.056278][T26747] netlink: 'syz.5.7642': attribute type 3 has an invalid length.
[  864.073907][T26747] netlink: 812 bytes leftover after parsing attributes in process `syz.5.7642'.
[  864.363238][T26758] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  864.513799][T26762] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7648'.
[  864.568177][T26762] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7648'.
[  864.618172][T26762] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22)
[  864.742717][T26773] program syz.2.7652 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  864.873059][ T4555] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  865.067662][ T4555] usb 6-1: Using ep0 maxpacket: 32
[  865.076335][ T4555] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  865.122921][ T4555] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  865.131958][ T4555] usb 6-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30
[  865.182941][ T4555] usb 6-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  865.215347][ T4555] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  865.257938][ T4555] usb 6-1: config 1 interface 1 has no altsetting 0
[  865.265220][T26789] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7658'.
[  865.280462][ T4555] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  865.304861][ T4555] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  865.344171][ T4555] usb 6-1: Product: syz
[  865.348408][ T4555] usb 6-1: Manufacturer: syz
[  865.377764][ T4555] usb 6-1: SerialNumber: syz
[  865.422924][ T4376] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  865.617671][ T4555] usb 6-1: selecting invalid altsetting 0
[  865.640091][ T4376] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  865.678426][ T4376] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[  865.698800][ T4376] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  865.739839][ T4376] usb 2-1: config 0 descriptor??
[  866.016192][ T4555] usb 6-1: 1:1: cannot set freq 44100 (v2/v3): err -71
[  866.069303][ T4555] usb 6-1: USB disconnect, device number 38
[  866.175623][ T4376] uclogic 0003:5543:0064.004C: unknown main item tag 0x0
[  866.216609][ T4376] uclogic 0003:5543:0064.004C: unknown main item tag 0x0
[  866.247516][ T4376] uclogic 0003:5543:0064.004C: unknown main item tag 0x0
[  866.257573][ T4376] uclogic 0003:5543:0064.004C: unknown main item tag 0x0
[  866.271326][ T4376] uclogic 0003:5543:0064.004C: unknown main item tag 0x0
[  866.279883][ T4376] uclogic 0003:5543:0064.004C: unknown main item tag 0x0
[  866.287786][T26813] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7665'.
[  866.303050][ T4376] uclogic 0003:5543:0064.004C: unknown main item tag 0x0
[  866.310438][ T4376] uclogic 0003:5543:0064.004C: unknown main item tag 0x0
[  866.356857][ T4376] uclogic 0003:5543:0064.004C: item fetching failed at offset 38/40
[  866.384133][ T4376] uclogic 0003:5543:0064.004C: parse failed
[  866.390108][ T4376] uclogic: probe of 0003:5543:0064.004C failed with error -22
[  866.419491][ T4376] usb 2-1: USB disconnect, device number 25
[  866.539143][T26823] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  866.853825][T26831] netlink: 68 bytes leftover after parsing attributes in process `syz.5.7670'.
[  867.047119][T26838] ima: Unable to open file: /e (-2)
[  867.048591][T26837] ima: policy update failed
[  867.078605][   T26] audit: type=1802 audit(1786562665.309:396): pid=26837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.7674" res=0 errno=0
[  867.167839][T26843] loop5: detected capacity change from 0 to 512
[  867.236349][T26843] EXT4-fs: Ignoring removed i_version option
[  867.291888][T26843] EXT4-fs: Ignoring removed oldalloc option
[  867.348740][T26843] EXT4-fs (loop5): Test dummy encryption mode enabled
[  867.425807][T26843] EXT4-fs (loop5): 1 truncate cleaned up
[  867.431517][T26843] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  867.677165][T16313] EXT4-fs (loop5): unmounting filesystem.
[  868.405630][T26898] loop1: detected capacity change from 0 to 4096
[  868.423228][T26899] netlink: 7 bytes leftover after parsing attributes in process `syz.5.7694'.
[  868.461938][T26898] NILFS (loop1): invalid segment: Checksum error in segment payload
[  868.488026][T26898] NILFS (loop1): trying rollback from an earlier position
[  868.557426][T26898] NILFS (loop1): recovery complete
[  868.590686][T26904] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  869.339424][T26905] loop5: detected capacity change from 0 to 32768
[  869.354147][T26905] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.7697 (26905)
[  869.395002][T26905] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  869.424785][T26905] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  869.479991][T26905] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  869.519162][T26905] BTRFS info (device loop5): use zstd compression, level 3
[  869.537165][T26905] BTRFS info (device loop5): use no compression
[  869.569026][T26905] BTRFS info (device loop5): using free space tree
[  869.810970][T26905] BTRFS info (device loop5): enabling ssd optimizations
[  870.077296][T16313] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  870.107453][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  870.112046][T26930] loop7: detected capacity change from 0 to 40427
[  870.139734][T26930] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64)
[  870.188069][T26930] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  870.232921][T26930] F2FS-fs (loop7): invalid crc value
[  870.323488][T26930] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  870.661588][T26930] F2FS-fs (loop7): Start checkpoint disabled!
[  870.814762][T26930] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  870.850651][T26930] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  871.277769][   T11] kworker/u4:1: attempt to access beyond end of device
[  871.277769][   T11] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  871.777518][ T6261] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  871.992912][ T6261] usb 3-1: Using ep0 maxpacket: 32
[  872.006548][ T6261] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[  872.051638][ T6261] usb 3-1: config 0 has no interface number 0
[  872.086395][ T6261] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  872.137564][ T6261] usb 3-1: config 0 interface 196 has no altsetting 0
[  872.187582][ T6261] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  872.239915][ T6261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  872.268586][ T6261] usb 3-1: Product: syz
[  872.278704][ T6261] usb 3-1: Manufacturer: syz
[  872.308169][ T6261] usb 3-1: SerialNumber: syz
[  872.326200][ T6261] usb 3-1: config 0 descriptor??
[  872.336180][T26990] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  872.409545][T27023] loop1: detected capacity change from 0 to 1024
[  872.491248][T27026] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  872.596273][T27031] CIFS: Attempting to mount \\127.0.0.1\share
[  872.748804][T27031] CIFS: VFS: Error connecting to socket. Aborting operation.
[  872.788585][T27031] CIFS: VFS: cifs_mount failed w/return code = -111
[  872.801623][ T6261] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached
[  872.806033][T27034] loop5: detected capacity change from 0 to 512
[  872.903216][T27034] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  873.390081][T27051] hsr0: VLAN not yet supported
[  873.501162][T27055] program syz.7.7741 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  873.929369][T27072] loop1: detected capacity change from 0 to 64
[  873.983154][T27072] hfs: inconsistency in B*Tree (1,0,1,0,3)
[  874.345649][T27084] mkiss: ax0: crc mode is auto.
[  874.564605][ T4555] usb 3-1: USB disconnect, device number 48
[  874.694011][ T4555] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected
[  874.871221][ T5459] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  875.078358][ T5459] usb 6-1: Using ep0 maxpacket: 32
[  875.089430][ T5459] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  875.109934][ T5459] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  875.128262][ T5459] usb 6-1: config 0 descriptor??
[  875.252984][ T6261] smpboot: CPU 1 is now offline
[  875.347155][ T5459] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  875.369396][ T5459] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  875.442310][ T5459] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  875.505061][ T5459] usb 6-1: media controller created
[  875.604082][ T5459] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  875.696110][ T5459] az6027: usb out operation failed. (-71)
[  875.726294][ T5459] az6027: usb out operation failed. (-71)
[  875.732048][ T5459] stb0899_attach: Driver disabled by Kconfig
[  875.790552][ T5459] az6027: no front-end attached
[  875.790552][ T5459] 
[  875.855339][ T5459] az6027: usb out operation failed. (-71)
[  875.900437][ T5459] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  875.942744][ T5459] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input56
[  876.043814][ T5459] dvb-usb: schedule remote query interval to 400 msecs.
[  876.112061][ T5459] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  876.221522][ T5459] usb 6-1: USB disconnect, device number 39
[  876.386543][ T5459] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  876.994121][ T6261] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  877.193860][ T6261] usb 3-1: Using ep0 maxpacket: 32
[  877.206780][ T6261] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  877.264579][ T6261] usb 3-1: config 0 has no interface number 0
[  877.288296][ T6261] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  877.325615][ T6261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  877.354754][ T6261] usb 3-1: Product: syz
[  877.370202][ T6261] usb 3-1: Manufacturer: syz
[  877.391678][ T6261] usb 3-1: SerialNumber: syz
[  877.419915][ T6261] usb 3-1: config 0 descriptor??
[  877.449102][ T6261] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  877.647807][ T6261] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  877.728717][ T6261] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  877.820076][T27171] comedi comedi3: bad chanlist[0]=0x00000004 chan=4 range length=1
[  878.065353][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  878.078300][ T6261] usb 3-1: USB disconnect, device number 49
[  878.116407][ T6261] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  878.181214][T27165] loop1: detected capacity change from 0 to 32768
[  878.206761][ T6261] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  878.269346][ T6261] quatech2 3-1:0.51: device disconnected
[  878.326828][T27165] XFS (loop1): Mounting V5 Filesystem
[  878.380773][T27165] XFS (loop1): Ending clean mount
[  878.536818][T16119] XFS (loop1): Unmounting Filesystem
[  878.917049][T27209] loop5: detected capacity change from 0 to 16
[  878.983828][T27209] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  879.397457][T27217] loop0: detected capacity change from 0 to 4096
[  879.589378][T27223] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  880.266420][   T14] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  880.332258][   T14] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=12)
[  880.510669][   T14] Remounting filesystem read-only
[  880.537342][   T14] NILFS (loop0): error -5 truncating bmap (ino=12)
[  880.782738][   T14] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  881.023911][   T14] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  881.075355][   T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  881.148934][   T14] usb 6-1: config 0 descriptor??
[  881.211939][   T14] cp210x 6-1:0.0: cp210x converter detected
[  881.567956][T27260] loop1: detected capacity change from 0 to 256
[  881.606269][   T14] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32
[  881.681535][T27260] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d)
[  881.736102][   T14] usb 6-1: cp210x converter now attached to ttyUSB0
[  881.877745][   T14] usb 6-1: USB disconnect, device number 40
[  881.924878][   T14] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  882.087663][   T14] cp210x 6-1:0.0: device disconnected
[  883.307419][T27308] loop2: detected capacity change from 0 to 256
[  883.460082][T27312] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring
[  883.930632][T27327] mkiss: ax0: crc mode is auto.
[  885.028401][T27351] loop2: detected capacity change from 0 to 128
[  885.101430][T27351] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  885.151232][T27351] ext4 filesystem being mounted at /1624/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  885.352785][ T6261] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  885.361743][ T4271] EXT4-fs (loop2): unmounting filesystem.
[  885.586027][ T6261] usb 6-1: Using ep0 maxpacket: 8
[  885.634382][ T6261] usb 6-1: config index 0 descriptor too short (expected 74, got 45)
[  885.685929][ T6261] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  885.757291][ T6261] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  885.855658][ T6261] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  885.910870][ T6261] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  886.025742][ T6261] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  886.076303][ T6261] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  886.341575][ T6261] usb 6-1: GET_CAPABILITIES returned 0
[  886.366260][ T6261] usbtmc 6-1:16.0: can't read capabilities
[  886.510289][T27375] loop2: detected capacity change from 0 to 32768
[  886.579635][T27353] usbtmc 6-1:16.0: usbtmc488_ioctl_trigger returned -71
[  886.612153][T27373] loop1: detected capacity change from 0 to 32768
[  886.619425][T27375] JBD2: Ignoring recovery information on journal
[  886.651898][ T6261] usb 6-1: USB disconnect, device number 41
[  886.770621][T27373] XFS (loop1): Mounting V5 Filesystem
[  886.795389][T27375] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  886.894462][T27373] XFS (loop1): Ending clean mount
[  886.949930][T27373] XFS (loop1): Quotacheck needed: Please wait.
[  887.300338][T27400] 
[  887.302698][T27400] ======================================================
[  887.309788][T27400] WARNING: possible circular locking dependency detected
[  887.316805][T27400] syzkaller #0 Not tainted
[  887.321214][T27400] ------------------------------------------------------
[  887.328267][T27400] syz.2.7839/27400 is trying to acquire lock:
[  887.334311][T27400] ffff888025354da0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb3/0x360
[  887.345949][T27400] 
[  887.345949][T27400] but task is already holding lock:
[  887.353297][T27400] ffff888025354e38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x360
[  887.363985][T27400] 
[  887.363985][T27400] which lock already depends on the new lock.
[  887.363985][T27400] 
[  887.374376][T27400] 
[  887.374376][T27400] the existing dependency chain (in reverse order) is:
[  887.383388][T27400] 
[  887.383388][T27400] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}:
[  887.391207][T27400]        down_read+0x42/0x2d0
[  887.395868][T27400]        ocfs2_init_acl+0x307/0x770
[  887.401174][T27400]        ocfs2_mknod+0x18e0/0x2580
[  887.406286][T27400]        ocfs2_mkdir+0x1b6/0x4b0
[  887.411227][T27400]        vfs_mkdir+0x386/0x570
[  887.416013][T27400]        do_mkdirat+0x1d8/0x440
[  887.420867][T27400]        __x64_sys_mkdirat+0x85/0x90
[  887.426144][T27400]        do_syscall_64+0x4c/0xa0
[  887.431070][T27400]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  887.437477][T27400] 
[  887.437477][T27400] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  887.445972][T27400]        down_read+0x42/0x2d0
[  887.450651][T27400]        ocfs2_start_trans+0x3a4/0x6f0
[  887.456186][T27400]        ocfs2_mknod+0x1273/0x2580
[  887.461556][T27400]        ocfs2_create+0x1b6/0x4b0
[  887.466579][T27400]        path_openat+0x11b9/0x2f10
[  887.471678][T27400]        do_filp_open+0x1ee/0x420
[  887.476684][T27400]        do_sys_openat2+0x14b/0x4f0
[  887.481868][T27400]        __x64_sys_openat+0x135/0x160
[  887.487222][T27400]        do_syscall_64+0x4c/0xa0
[  887.492146][T27400]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  887.498546][T27400] 
[  887.498546][T27400] -> #1 (sb_internal#3){.+.+}-{0:0}:
[  887.506085][T27400]        ocfs2_start_trans+0x2a5/0x6f0
[  887.511534][T27400]        ocfs2_extend_dir+0x11bd/0x4c40
[  887.517133][T27400]        ocfs2_prepare_dir_for_insert+0x3217/0x5600
[  887.523706][T27400]        ocfs2_rename+0x1942/0x3930
[  887.528897][T27400]        vfs_rename+0xd57/0x10f0
[  887.533820][T27400]        do_renameat2+0x8ac/0xc80
[  887.538823][T27400]        __x64_sys_renameat2+0xce/0xe0
[  887.544261][T27400]        do_syscall_64+0x4c/0xa0
[  887.549182][T27400]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  887.555580][T27400] 
[  887.555580][T27400] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}:
[  887.564328][T27400]        __lock_acquire+0x2d18/0x7c40
[  887.569684][T27400]        lock_acquire+0x1bb/0x4a0
[  887.574696][T27400]        down_write+0x36/0x60
[  887.579351][T27400]        ocfs2_try_remove_refcount_tree+0xb3/0x360
[  887.585853][T27400]        ocfs2_truncate_file+0xef5/0x1660
[  887.591571][T27400]        ocfs2_setattr+0x16f8/0x1d90
[  887.596835][T27400]        notify_change+0xca0/0xf90
[  887.601940][T27400]        do_truncate+0x1ac/0x240
[  887.606859][T27400]        path_openat+0x2897/0x2f10
[  887.611952][T27400]        do_filp_open+0x1ee/0x420
[  887.616955][T27400]        do_sys_openat2+0x14b/0x4f0
[  887.622137][T27400]        __x64_sys_open+0x11b/0x140
[  887.627326][T27400]        do_syscall_64+0x4c/0xa0
[  887.632256][T27400]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  887.638656][T27400] 
[  887.638656][T27400] other info that might help us debug this:
[  887.638656][T27400] 
[  887.648955][T27400] Chain exists of:
[  887.648955][T27400]   &ocfs2_file_ip_alloc_sem_key --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  887.648955][T27400] 
[  887.664136][T27400]  Possible unsafe locking scenario:
[  887.664136][T27400] 
[  887.671564][T27400]        CPU0                    CPU1
[  887.676928][T27400]        ----                    ----
[  887.682286][T27400]   lock(&oi->ip_xattr_sem);
[  887.686960][T27400]                                lock(&journal->j_trans_barrier);
[  887.695108][T27400]                                lock(&oi->ip_xattr_sem);
[  887.702197][T27400]   lock(&ocfs2_file_ip_alloc_sem_key);
[  887.707934][T27400] 
[  887.707934][T27400]  *** DEADLOCK ***
[  887.707934][T27400] 
[  887.716185][T27400] 3 locks held by syz.2.7839/27400:
[  887.721473][T27400]  #0: ffff888024e98460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  887.730697][T27400]  #1: ffff888025355108 (&sb->s_type->i_mutex_key#21){+.+.}-{3:3}, at: do_truncate+0x198/0x240
[  887.741039][T27400]  #2: ffff888025354e38 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x360
[  887.752073][T27400] 
[  887.752073][T27400] stack backtrace:
[  887.757943][T27400] CPU: 0 PID: 27400 Comm: syz.2.7839 Not tainted syzkaller #0
[  887.765379][T27400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  887.775417][T27400] Call Trace:
[  887.778679][T27400]  <TASK>
[  887.781597][T27400]  dump_stack_lvl+0x188/0x24e
[  887.786271][T27400]  ? load_image+0x410/0x410
[  887.790764][T27400]  ? show_regs_print_info+0x12/0x12
[  887.795967][T27400]  ? print_circular_bug+0x12b/0x1a0
[  887.801153][T27400]  check_noncircular+0x296/0x330
[  887.806092][T27400]  ? add_chain_block+0x9b0/0x9b0
[  887.811039][T27400]  ? lockdep_lock+0xf1/0x1f0
[  887.815623][T27400]  ? lockdep_unlock+0x142/0x2e0
[  887.820458][T27400]  ? _find_first_zero_bit+0xd2/0x100
[  887.825830][T27400]  __lock_acquire+0x2d18/0x7c40
[  887.830675][T27400]  ? ocfs2_commit_truncate+0x1822/0x1e00
[  887.836290][T27400]  ? verify_lock_unused+0x140/0x140
[  887.841563][T27400]  lock_acquire+0x1bb/0x4a0
[  887.846054][T27400]  ? ocfs2_try_remove_refcount_tree+0xb3/0x360
[  887.852189][T27400]  ? __might_sleep+0xd0/0xd0
[  887.856824][T27400]  ? read_lock_is_recursive+0x10/0x10
[  887.862265][T27400]  ? rwsem_write_trylock+0x135/0x1c0
[  887.867535][T27400]  ? clear_nonspinnable+0x60/0x60
[  887.872561][T27400]  ? ocfs2_truncate_file+0xe14/0x1660
[  887.877922][T27400]  down_write+0x36/0x60
[  887.882077][T27400]  ? ocfs2_try_remove_refcount_tree+0xb3/0x360
[  887.888215][T27400]  ocfs2_try_remove_refcount_tree+0xb3/0x360
[  887.894195][T27400]  ? ocfs2_remove_refcount_tree+0xe40/0xe40
[  887.900072][T27400]  ? up_write+0x1b6/0x410
[  887.904393][T27400]  ocfs2_truncate_file+0xef5/0x1660
[  887.909580][T27400]  ? __lock_acquire+0x7c40/0x7c40
[  887.914596][T27400]  ? ocfs2_simple_size_update+0x4a0/0x4a0
[  887.920298][T27400]  ? do_raw_spin_unlock+0x11d/0x230
[  887.925476][T27400]  ? _raw_spin_unlock+0x24/0x40
[  887.930308][T27400]  ? ocfs2_inode_lock_tracker+0x433/0x700
[  887.936017][T27400]  ? ocfs2_inode_lock_atime+0x530/0x530
[  887.941557][T27400]  ? ocfs2_rw_lock+0x134/0x250
[  887.946416][T27400]  ? dquot_initialize+0x20/0x20
[  887.951334][T27400]  ? ocfs2_create_new_inode_locks+0x690/0x690
[  887.957384][T27400]  ? jbd2_journal_begin_ordered_truncate+0xb7/0x150
[  887.963997][T27400]  ocfs2_setattr+0x16f8/0x1d90
[  887.968774][T27400]  ? ocfs2_extend_allocation+0x1940/0x1940
[  887.974579][T27400]  ? ktime_get_coarse_real_ts64+0x2b/0x120
[  887.980432][T27400]  ? seqcount_lockdep_reader_access+0x18d/0x1d0
[  887.986689][T27400]  ? ocfs2_xattr_get+0x147/0x260
[  887.991639][T27400]  ? tomoyo_path_perm+0x48c/0x610
[  887.996646][T27400]  ? ktime_get_coarse_real_ts64+0x106/0x120
[  888.002549][T27400]  ? current_time+0x19b/0x2c0
[  888.007217][T27400]  ? atime_needs_update+0x770/0x770
[  888.012419][T27400]  ? security_inode_setattr+0xd8/0x140
[  888.017894][T27400]  ? try_break_deleg+0x79/0x120
[  888.022771][T27400]  ? ocfs2_extend_allocation+0x1940/0x1940
[  888.028623][T27400]  notify_change+0xca0/0xf90
[  888.033273][T27400]  do_truncate+0x1ac/0x240
[  888.037717][T27400]  ? put_page_bootmem+0x2b0/0x2b0
[  888.042735][T27400]  ? ima_bprm_check+0x200/0x200
[  888.047661][T27400]  ? bpf_lsm_path_truncate+0x5/0x10
[  888.052922][T27400]  path_openat+0x2897/0x2f10
[  888.057498][T27400]  ? verify_lock_unused+0x140/0x140
[  888.062717][T27400]  ? do_filp_open+0x420/0x420
[  888.067378][T27400]  do_filp_open+0x1ee/0x420
[  888.071862][T27400]  ? vfs_tmpfile+0x470/0x470
[  888.076454][T27400]  ? _raw_spin_unlock+0x24/0x40
[  888.081287][T27400]  ? alloc_fd+0x590/0x640
[  888.085605][T27400]  do_sys_openat2+0x14b/0x4f0
[  888.090292][T27400]  ? do_sys_open+0xe0/0xe0
[  888.094717][T27400]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  888.100698][T27400]  ? lock_chain_count+0x20/0x20
[  888.105652][T27400]  __x64_sys_open+0x11b/0x140
[  888.110364][T27400]  do_syscall_64+0x4c/0xa0
[  888.114790][T27400]  ? clear_bhb_loop+0x60/0xb0
[  888.119480][T27400]  ? clear_bhb_loop+0x60/0xb0
[  888.124157][T27400]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  888.130040][T27400] RIP: 0033:0x7f450699e0d9
[  888.134436][T27400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  888.154128][T27400] RSP: 002b:00007f450790b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  888.162535][T27400] RAX: ffffffffffffffda RBX: 00007f4506c26090 RCX: 00007f450699e0d9
[  888.170497][T27400] RDX: 0000000000000006 RSI: 000000000014927e RDI: 00002000000000c0
[  888.178470][T27400] RBP: 00007f4506a35024 R08: 0000000000000000 R09: 0000000000000000
[  888.186440][T27400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  888.194416][T27400] R13: 00007f4506c26128 R14: 00007f4506c26090 R15: 00007ffe0c9e7d48
[  888.202380][T27400]  </TASK>
[  888.205463][    C0] vkms_vblank_simulate: vblank timer overrun
[  888.253541][T27404] loop9: detected capacity change from 0 to 524287871
[  888.264433][T27373] XFS (loop1): Quotacheck: Done.
[  888.324117][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  888.333312][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  888.395664][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  888.404856][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  888.473798][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  888.483003][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  888.509627][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  888.518874][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  888.547311][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  888.556525][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  888.569100][T16119] XFS (loop1): Unmounting Filesystem
[  888.594471][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  888.603978][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  888.637441][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  888.646761][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  888.676388][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  888.685763][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  888.699806][T27404] ldm_validate_partition_table(): Disk read failed.
[  888.727218][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  888.736407][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  888.766691][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  888.775881][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  888.813227][T27404] Dev loop9: unable to read RDB block 0
[  888.861356][T27404]  loop9: unable to read partition table
[  888.878097][T27404] loop_reread_partitions: partition scan of loop9 (ážXHuù£¨ÃÒJíˆý[¼d‚ÒwÍ|i4F‡Â-—ºä½ÚÚ£rwǘ3›êåùU™ÈžŒžJ½„?"e) failed (rc=-5)
[  889.374290][T16427] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature 
[  889.404950][T16427] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  889.427328][T16427] OCFS2: File system is now read-only.
[  889.441299][T16427] (kworker/u4:9,16427,0):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30
[  889.461281][T16427] (kworker/u4:9,16427,0):_ocfs2_free_clusters:2605 ERROR: status = -30
[  889.481868][T16427] (kworker/u4:9,16427,0):ocfs2_replay_truncate_records:5976 ERROR: status = -30
[  889.506872][T16427] (kworker/u4:9,16427,0):__ocfs2_flush_truncate_log:6057 ERROR: status = -30
[  889.527049][T16427] (kworker/u4:9,16427,0):ocfs2_truncate_log_worker:6091 ERROR: status = -30
[  889.929612][ T4271] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature 
[  889.965865][ T4271] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  889.987888][ T4271] (syz-executor,4271,0):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30
[  890.010940][ T4271] (syz-executor,4271,0):_ocfs2_free_clusters:2605 ERROR: status = -30
[  890.032782][ T4271] (syz-executor,4271,0):ocfs2_sync_local_to_main:1001 ERROR: status = -30
[  890.050572][ T4271] (syz-executor,4271,0):ocfs2_sync_local_to_main:1013 ERROR: status = -30
[  890.069059][ T4271] (syz-executor,4271,0):ocfs2_shutdown_local_alloc:449 ERROR: status = -30
[  890.089668][ T4271] ocfs2: Unmounting device (7,2) on (node local)