last executing test programs:

3.078670865s ago: executing program 0 (id=5201):
r0 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)={0x0, 0x1, 0xc})

2.814921482s ago: executing program 0 (id=5206):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0x0, '\x00', @p_u16=0x0}})

2.707541894s ago: executing program 4 (id=5207):
r0 = syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c"], 0x1, 0xc41, &(0x7f0000001b80)="$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")
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)

2.669731405s ago: executing program 1 (id=5208):
r0 = shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil)
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x60, 0x5}, 0xeaa, 0x200746ba, 0xb59, 0x8})

2.545679938s ago: executing program 0 (id=5211):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000b80)={{0x12, 0x1, 0x201, 0x88, 0x29, 0xec, 0x10, 0x93a, 0x260e, 0x1885, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x9, 0xb0, 0x8, "", [{{0x9, 0x4, 0x97, 0x6, 0x0, 0x10, 0x11, 0x2c, 0xd2}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r0, 0x0, 0x0)

2.436287571s ago: executing program 2 (id=5212):
r0 = socket$inet6(0xa, 0x3, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0xfffd, 0x0, 0x6, 0x2, 0x0, 0x0, 0x87}, {0x40000, 0x200000004, 0x40000000007, 0x20000a0e0, 0x100000100000002, 0x4, 0x200000003, 0x9}, {0x7}, 0x2, 0x0, 0x2, 0x0, 0x7, 0x3}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in6=@private2, 0x3502, 0x3, 0x8, 0x0, 0x9075, 0x800}}, 0xe8)

2.426102611s ago: executing program 1 (id=5214):
r0 = socket(0xa, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x25, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0xfff9, 0x4}, 0x90)

2.384214832s ago: executing program 4 (id=5215):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000540)={0x1, {{0x2, 0x4e24, @multicast2}}, 0x1, 0x3}, 0x23c)

2.320476524s ago: executing program 2 (id=5216):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@ipv6_deladdrlabel={0x30, 0x49, 0x1, 0x70bd2b, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0xe}, [@IFAL_ADDRESS={0x14, 0x1, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0xc000)

2.231364106s ago: executing program 1 (id=5218):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, 0x0)

2.135739288s ago: executing program 4 (id=5219):
r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x41}, 0x18)
fsetxattr$system_posix_acl(r0, &(0x7f0000000340)='system.posix_acl_access\x00', &(0x7f0000000040)={{}, {}, [], {}, [], {0x8}, {0x8}}, 0x24, 0x0)

2.113125949s ago: executing program 2 (id=5220):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x3, 0x0, 0xd410, 0xf69aa1672a50ebb1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40881}, 0x10)

2.031260891s ago: executing program 1 (id=5222):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x80000000], 0x2, 0x0, &(0x7f0000000000)=[{}, {}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108)

2.007916631s ago: executing program 2 (id=5223):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x20003, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x300}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004885}, 0x20044014)

1.845283635s ago: executing program 4 (id=5224):
setresuid(0x0, 0xee00, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50)

1.828438056s ago: executing program 1 (id=5225):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
getpriority(0x2, 0x0)

1.796526236s ago: executing program 2 (id=5226):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h795j5Lrqw4Gf2dd4H97dBH4i5IfAQB3jgtdrOzzUpmKdpioKpaxLSlQhio29Dos32NhOwREgxwalKIKmJRL80SiOEKrzR1KLBAWaRHEjYRQ1D5SqEUmUiLROEFFoGkChEIlUs/ee2Tvn7jw23nW84fORvHNmvud55+E59945FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfjcc/9Jn/rZV/N7fXvToE5dOfPLQ5kuf/fxFZz8YwuTs45UsXBm4+vqJn9984S2H7th4w20nL357X14uj4fB2p+u/M4XY60nV4ZweyWEnjSwbigL9Ob3h2J9bxgK4awwF6iXmBrISqQNh+/3h3AkzAXqVX2vP4ShQuCSh+65+yu1xHX9IawOIVTTNh6vZm30p4Hz+rLAQBrY3ZMFfvVSph74blcWgFMW3wz1F/2xycYMo/OXa/L66120jr2y0uF1x8Ro83w/27zEnSroSx+YPKWnrVQdS6L09jju3bYM3m2l7Xytp634RSr/hvLSXKgaunZM7dx2xcz++EhXGBvrblbTEj3Pjzz/ue0LSS+b12HswOiivA6/+sDqm7vXfuD+29atfvroOw4/c6rd/FFhkxbTS60a8tfcsnkeowmfJ8vg7Vf6lrTKl64Qws5P/N4HW8VL8//R1vP/+HKOt10NuWOtLw5nc/P4yFBMPDeczc1b6VnoGAEAAGDxdRVSZ/5e091jd72nUHykmtRXmv+v6uz4f9wK+WQ+G+3xECZmE4dHQjhn9vEscFNs7uMjIbx5NjXZGNicBI6H8PrZxNp6VUmJFbHEqiTwk+E8MJEETsTAZBL4VgxcmwS+GAPHksD2GDieBC6MgTDdOI7fH87H0XGgPwa2ZhvxWDwL4RfDsbVkWz1WrwoAAGCR5LPD3sa7hXMdTjVDnF4e62+XIZ6B3TRDNakhncHWp1VNa+hpV0NXuxrq4z7Yevilmivtai6dhlFpzHD9L//mQ6GF0vx/vPX8vzpPRyql4/8hbJn9G3N35ZGZenzrZEMGAAAA4BQM/u+T32wVL83/Jzo7/z/uE+kuZA73xd0Qu0ZCGG8MZNX+YTmQHfUezAMAAACwHNSPx9ePhU/nt9kp2ul8upx/coH544H/iXnz9x2/c2ur/pbm/5Odnf8/0HibdeJE7MXXRkJYUQj8IPayFpi1KgZ+/N7GQD7+E3EDXBOryk9MqFd1TSyxNQbGk8CRZiV+WC9xTmMgf7LqjR+uj2M6L1EIAAAAwGkXdwfE4/Lx/P+3/GbjZ1qVK83/ty7s/P/ZeXDp9P6ZwRDW94TQnf4w4L6BbGHAGBiq5Im7BrK6utOqrhoI4YLawNKqnszX/+9J1xh8qD+rKgbOecvR58+rJb7ZH8L6YuDhj9z4zlpifxKoN/6X/SG8qTbatPHvrMga700b//qKEN5YCNSr+viKEGqN9aVV3VPNr2OQVvXP1RBeUwjUq3pXNYQDAYBlKv5XuqP44L4DV+7aNjMztXcJE3Effn/YOT0zNbZ998yOapM+7Uj63LCM0VXlMXV65ZvH8iWKPnzrlqFO0vXfCY4X28r345dOHMzvx+9CvbPj3NjbcHdTOuS3vbXcRGhY72n+IXct8ZAHipXMPYml+mP+vjAYVlyxb2rv2Ge37d+/d0P2t9PsG7O/8TBTtq02pNtqYL6+dfDyaLpaVuLlbqs1xUrW7798z/p9B65cN335tsumLpv61IZ3bRw/f3zT+LvPX18b1Xj2t81Q18xXdTLUl27scFyLONRzi8tkn45PDQkJieWW2D24puX/yaX5/57W8//4qRM/+fP1GZod/x+Nh/mzx+cO82+NgSOdHv8fbXY0v35iwKokcDAGDjrMDwAAwKtDnOTHvZlxr/RP137n6VblSvP/g539/n+R1v+vL11/cbNl/tfGEuPN1v9Pl/mvr/9/sNn6/+ky//X1/4+8Auv/X1EPJJvkF9b/BwAAXg1O3/r/bZf3Ty8QUMrQdnn/9AIBpQxtl/Hv9AIBC17///H//Kv/Di2U5v/Xdjb/t3A/AAAAnDm+8Gef+X+t4qX5/5HO5v+nf/2/0Oz8/1XNApPNFga0/h8AAADLVLP1/0avHvhYq3Kl+f+xzub/8bSLrobcsdYXh7M17UK6pt1zw/WfDAAAAMDy0BXGxno7zNuwMurml9/mI/lSoK3SRU/+ycmFnf9/vLP5f8PvMr76wOqbu9d+4P4Xb1u3+umj7zj8zNzxfwAAAGDpdLpfAgAAAAAAAAAAAAAAeOU9+R+HNrWKl37/H7bMPt7s9//xun/x9wWvbcgda22//l9+/5L333JgdsnC+4ZDeGsxsOvQrrNCfm3+NcXA3R9d+7pa4lBa4s4nLnyqlvhYGnjfurNfqCUuSAJb4yKJr08D8aqKL6xMAnF5xX9PA3F7HEsDfXngyyuzcVTSbfXToWxbVdJt9ehQCCOFQH1b3T6UtVFJB3hdEqgP8NNpIA7wz/NAV9qrWwazXsXAUCx6w2DWKwAAzljxW2Bv2Dk9MzUev8LH23N7Gm+jhiXLripXW+mw+cfypck+fOuWoU7S3el30blrjfeGam0IG0pfV4tZKrOjXJxa2my61zYZcrvV3rqalEstdNP1NR9Rfzaise27Z3b0th34pvZZNva0zbKhNNkpZuma3aQd1NJBXzoYUYfbpoMux/tdYWysO8n1BzE4Ghq0e0V0+nv94jp/zV4FxTyfOnn4V63qK83/Rzub/1eL43ohvxjAwXhlvb8bscw/AAAALK0vb/71N+K/D11978Ot8pbm/6s6m//HPVj5oeBsb8fxeP3/wyMhzF5afzQL3BSb+/hICG+eTU3GEtkF9S+OJcazwE1xh8naWGLrZGNVK2LgWBL4yXAeOJ4ETsRAvpfiaMh35fz9cAjvnE1taSyxJ5YYTQIfjIFVSWAsBsaTwMoYmEgCz67MA5NJ4N9iIEw3bqtbV+bbCgAAYCHyeVZv492QzvOO9bTLUGmXYaBdhq52GartMjQbRbz/7ZihNzl5pVLI1JvW2p/UUsoQL4a/4H6VMoQfNuZMC5aajucf1M83qDRmuOM9PdXQQmn+P97Z/H+g8TZr/USc/89d/y8L/CB272vx1PFVMfDj9zYG8h0DJ+Jk95p6VZN5iXzSfk0sMREDq5LAnhiYSAJbt+SBI69rDOQz7Xrjh+uNT+clCgEAAAA47eIOgribJs7/b9j3pcFW5Urz/4nO5v+xvcFiY1+MtZ5cGcLtlbne1APrhrJA3I8xFH8e/4ahEM4q7OCol5gayEr0JQ2H7/dnv1DvS6v6Xn/244N4/5KH7rn7K7XEdf0hrC7sfam38Xg1a6M/DZzXlwUG0sDuniwQ9/zUA9/tygJwyup7BeMLKj/VpW50/nJNXn+vlmuCpsMr7QOdJ998v7laKqUdrvk+1bqFPW0t99+yaEpvj+Pebcvx3Tbq3Vb8IpV/Q3lpLlQNXTumdm67YmZ/fKT4S9aSJXqei79S7SS9CK/Dgy+/t+1V0w6MJx8f4/OXm/91WInVffWB1Td3r/3A/betW/300XccfqbjbjQRfyh8z+f/dehHhc271Kohf80tu8+TSZ8ny+K/gYOFTs2dmV33u/m0bXn269e0ipfm/5Odzf97kttZv44bc99ICG8rbNz74ub/45Hsc7AQyD4lX1MOZIfc/2u46ScnAAAALLb6noX6/oLp/DY7ITydJ5fzTy4wf9xfMTFv/k77PfDXH13dKl6a/29tPf9fkXTT8X/H/1kijv/P60zfFb0ifeDgKe2KLlXHknD8f15n+rvN8f95Of7v+P98HP9vw/H/eZ3pT1vpW9IeX7pCCE//0V2PtoqX5v97Opv/W/9v/kX76uv/bW22/t+eZuv/HbT+HwAAsKSaLDSXzvNKq/eVMqSr95UytF0gsO0Sg9b/W/D6f0+d+/hvQgul+f/Bzub/8eUwWGx9uaz/t2pLk6qujYE9FgYEAADgTNRsBwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACvrDv+4X92tIrf+9uLHn3i0olPHtp86bOfv+jsB0OYnn28koUrA1dfP/Hzmy+85dAdG2+47eTFb6/m5Xrz2//fkDvW+uJwCEcKjwzFxHPDtTtzgUvef8uBnlrivuEQ3loM7Dq066xa4lvDIawpBu7+6NrX1RKH0hJ3PnHhU7XEx9LA+9ad/UItcUEeqKTd/ceVWXcraXe/sjKEkUKg3t1Prmysqt7Gn+aBrrSNfxrK2oiBoVj0G0NZGzEwE0tMrwhhfU8I3WlV91azqrrTqv6lmlXVnVb1hWoIF4QQetKqnujLqupJR/5gX1ZVDJzzlqPPn1dLHOkLYX0x8PBHbnxnLfHpJFBv/C/6QnhT7SWTNv7t3qzx3rTx63pDeGMIoS8t8cuerERfWuLJnhBeUwjUG/9ETwgHAq8K8cOn4RNt34Erd22bmZnau4SJvryt/rBzemZqbPvumR3VpE/NVArpl656+WN/7PnPba/dfvjWLUOdpHvycr2zXd7Y23B305ne+9ivgWIlc89Hqf6Yvy8MhhVX7JvaO/bZbfv3792Q/e00+8bsb3cezbbVhuWyrdYUK1m///I96/cduHLd9OXbLpu6bOpTG961cfz88U3j7z5/fW1U49nfxRjqjad/qOf2FCo5HR8AEhISyy3R1fDpNn6mf5CXvujPdbQ3VGc/oAvTir5SlsrsKBdj0JtP36BLU5LCiPoa+zbvdqlkX2/KWa5qzLKpNJmYq6U/yzL7va40OSw21jW7SeP9rjA21t1sO4w23i1u3p+dwuZ9JN90naYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6PHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5W4fRswEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//PTUiXg==")
link(&(0x7f00000318c0)='./file1\x00', &(0x7f0000031900)='./bus\x00')

1.64339296s ago: executing program 1 (id=5228):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x4492, &(0x7f0000002400)={[{@ssd}, {@nossd}, {@nodiscard}, {@noacl}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'no'}}]}, 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000002440)={{}, 0x0, 0x14, @unused=[0x8b, 0x403, 0x800, 0x50000000], @subvolid=0x8})

1.548288082s ago: executing program 4 (id=5229):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x18000000000002a0, 0x11, 0x0, &(0x7f0000000040)="960200d58d833f03daf14d57cf4451520a", 0x0, 0xd845, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.282228309s ago: executing program 3 (id=5231):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0)
ioctl$COMEDI_LOCK(r0, 0x6405)

1.102545523s ago: executing program 4 (id=5232):
getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

904.342768ms ago: executing program 3 (id=5233):
r0 = syz_open_dev$vbi(&(0x7f0000000280), 0x0, 0x2)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f03c, 0x4})

696.766473ms ago: executing program 0 (id=5234):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x3, 0x0, 0xd410, 0xf69aa1672a50ebb1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40881}, 0x10)

685.663593ms ago: executing program 3 (id=5235):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl(r0, 0x89e1, &(0x7f00000000c0)='lapb0')

436.200489ms ago: executing program 3 (id=5236):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd2c, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x8, 0xef, 0x0, 0x0, 0x1, 0x1000e}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000)

393.21388ms ago: executing program 0 (id=5237):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xdd860600, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0xb0, 0x2, 0x0, 0x1, {0x6, 0x1, 0x0, 0x1, [{0xc}, {0x8}, {0x1b}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x9, 0xd}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0)

339.161712ms ago: executing program 3 (id=5238):
r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0)
write$tcp_mem(r0, &(0x7f0000000240)={0x0, 0x2c, 0x0, 0x2c, 0x0, 0x2c}, 0x48)

241.868514ms ago: executing program 3 (id=5239):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0)

33.047499ms ago: executing program 0 (id=5240):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)={0x184, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0x116, 0x0, 0x1, [@nested={0x45, 0x91, 0x0, 0x1, [@nested={0x4, 0xf9}, @nested={0x4, 0xb0}, @generic="d736b9a745c07dabdf400e7a18190f2c7f85358f26d5d83f721c083ab4906b2437c0536f778c42a989834d79e1bae56dc9189ecebc24d9e182"]}]}]}, @nested={0x120, 0x6, 0x0, 0x1, [@nested={0x11c, 0x8b, 0x0, 0x1, [@nested={0x118, 0x13e, 0x0, 0x1, [@nested={0x114, 0xa0, 0x0, 0x1, [@nested={0x110, 0x61, 0x0, 0x1, [@nested={0x10c, 0x9d, 0x0, 0x1, [@nested={0x108, 0x63, 0x0, 0x1, [@typed={0x8, 0x60, 0x0, 0x0, @uid}, @typed={0x8, 0xa5, 0x0, 0x0, @uid}, @nested={0xf4, 0x90, 0x0, 0x1, [@nested={0x99, 0x44, 0x0, 0x1, [@typed={0x8, 0xb0, 0x0, 0x0, @fd}, @generic="a4f2bdc07e8cc0404f617143e4f7b263ba6fc1453ff8932426cb0b2024dd0f1b7350887762644cd52aa60500cdf7e959a84b3dad1bc88841ef786cbde7d6215a38138e3e97b00517bbc1841901c1583a335075ea5754b2eaa78293f03551b0562fb5a45f1f7cbb3d6e117248069b9fb39c95d130e184c9b4c03c06137216485441b97dd59aa0e33633390ce64b"]}, @nested={0x54, 0x84, 0x0, 0x1, [@typed={0x8, 0x3e, 0x0, 0x0, @fd=r0}, @nested={0x45, 0x13b, 0x0, 0x1, [@generic="213150e31fda88e5602ea51ab1fdf101815d34c069dba10347d18c06df7f2a6da8a2ba2bd87c57f9c9fcd9c297dcde5b57e266c89e9e63382bd7545021d07fcfdc"]}]}]}]}]}]}]}]}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0)

0s ago: executing program 2 (id=5241):
r0 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2)
ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000002c0)=@userptr={0x9, 0x9, 0x4, 0x1000, 0x4, {}, {0x5, 0xc, 0x40, 0x4, 0x56, 0x8, "66bb6af2"}, 0x6, 0x2, {&(0x7f00000001c0)}, 0x7})

kernel console output (not intermixed with test programs):

 Product: syz
[  285.335256][ T4364] usb 4-1: Manufacturer: syz
[  285.341018][ T4364] usb 4-1: SerialNumber: syz
[  285.355809][T11317] loop0: detected capacity change from 0 to 32768
[  285.361844][ T4364] usb 4-1: config 0 descriptor??
[  285.426588][  T955] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  285.453682][  T955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.468915][  T955] usb 5-1: Product: syz
[  285.473732][  T955] usb 5-1: Manufacturer: syz
[  285.478415][  T955] usb 5-1: SerialNumber: syz
[  285.486961][  T955] usb 5-1: config 0 descriptor??
[  285.518628][   T14] snd-usb-6fire 2-1:1.0: unknown device firmware state received from device:
[  285.533924][  T955] hub 5-1:0.0: bad descriptor, ignoring hub
[  285.547528][   T14] 00 00 00 00 00 00 00 00 
[  285.564480][  T955] hub: probe of 5-1:0.0 failed with error -5
[  285.571343][   T14] snd-usb-6fire: probe of 2-1:1.0 failed with error -5
[  285.598396][  T955] f81232 5-1:0.0: f81534a converter detected
[  285.723592][ T7331] usb 2-1: USB disconnect, device number 13
[  285.736341][  T955] usb 5-1: f81534a converter now attached to ttyUSB0
[  285.806896][ T4364] airspy 4-1:0.0: usb_control_msg() failed -71 request 0a
[  285.844868][ T4364] airspy 4-1:0.0: Could not detect board
[  285.859591][ T4364] airspy: probe of 4-1:0.0 failed with error -71
[  285.897448][ T4364] usb 4-1: USB disconnect, device number 7
[  286.069835][  T955] usb 5-1: USB disconnect, device number 15
[  286.095850][  T955] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0
[  286.113689][  T955] f81232 5-1:0.0: device disconnected
[  286.606597][T11367] netlink: 'syz.1.3158': attribute type 36 has an invalid length.
[  286.671696][T11367] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  286.703269][T11367] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  286.828787][T11377] netlink: 'syz.4.3163': attribute type 1 has an invalid length.
[  286.877795][T11377] netlink: 'syz.4.3163': attribute type 2 has an invalid length.
[  287.327169][T11405] loop2: detected capacity change from 0 to 64
[  288.284156][T11449] netlink: 'syz.2.3196': attribute type 1 has an invalid length.
[  288.284211][T11449] netlink: 'syz.2.3196': attribute type 2 has an invalid length.
[  288.931900][T11483] netlink: 'syz.3.3213': attribute type 29 has an invalid length.
[  288.949534][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3213'.
[  288.961685][   T26] audit: type=1326 audit(1792150821.418:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11484 comm="syz.1.3214" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454579e559 code=0x7ffc0000
[  289.002707][T11483] netlink: 'syz.3.3213': attribute type 29 has an invalid length.
[  289.019686][T11483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3213'.
[  289.098879][   T26] audit: type=1326 audit(1792150821.458:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11484 comm="syz.1.3214" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f454579e559 code=0x7ffc0000
[  289.186489][   T26] audit: type=1326 audit(1792150821.468:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11484 comm="syz.1.3214" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454579e559 code=0x7ffc0000
[  289.268308][   T26] audit: type=1326 audit(1792150821.468:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11484 comm="syz.1.3214" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454579e559 code=0x7ffc0000
[  289.606788][T11512] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3227'.
[  289.860573][T11520] netlink: 'syz.3.3231': attribute type 5 has an invalid length.
[  289.991006][T11489] loop4: detected capacity change from 0 to 32768
[  290.049383][ T4364] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  290.094832][T11526] loop2: detected capacity change from 0 to 8
[  290.168011][T11526] SQUASHFS error: zlib decompression failed, data probably corrupt
[  290.189713][T11526] SQUASHFS error: Failed to read block 0x9b: -5
[  290.206262][T11526] SQUASHFS error: Unable to read metadata cache entry [99]
[  290.229963][T11526] SQUASHFS error: Unable to read inode 0x127
[  290.263997][ T4364] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  290.289571][ T4364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.317125][ T4364] usb 2-1: Product: syz
[  290.334588][ T4364] usb 2-1: Manufacturer: syz
[  290.360272][ T4364] usb 2-1: SerialNumber: syz
[  290.421064][   T14] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  290.604219][   T26] audit: type=1326 audit(1792150823.058:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11543 comm="syz.0.3243" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac999e559 code=0x7ffc0000
[  290.710091][   T26] audit: type=1326 audit(1792150823.108:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11543 comm="syz.0.3243" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac999e559 code=0x7ffc0000
[  290.763198][T11547] x_tables: unsorted underflow at hook 3
[  290.789495][   T26] audit: type=1326 audit(1792150823.108:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11543 comm="syz.0.3243" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f8ac999e559 code=0x7ffc0000
[  290.861279][ T4364] usb 2-1: USB disconnect, device number 14
[  290.899282][   T26] audit: type=1326 audit(1792150823.108:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11543 comm="syz.0.3243" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac999e559 code=0x7ffc0000
[  290.964722][   T26] audit: type=1326 audit(1792150823.108:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11543 comm="syz.0.3243" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac999e559 code=0x7ffc0000
[  291.338064][T11569] tmpfs: Bad value for 'mpol'
[  291.372490][T11572] device wlan0 entered promiscuous mode
[  291.469666][   T14] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  291.480218][   T14] ath9k_htc: Failed to initialize the device
[  291.486895][ T4364] usb 2-1: ath9k_htc: USB layer deinitialized
[  291.542861][T11577] netlink: 'syz.1.3259': attribute type 21 has an invalid length.
[  292.010330][T11603] netlink: 2120 bytes leftover after parsing attributes in process `syz.4.3272'.
[  292.691875][ T4364] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  292.843089][ T7331] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  292.890618][ T4364] usb 1-1: not running at top speed; connect to a high speed hub
[  292.904957][ T4364] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  292.943948][ T4364] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad
[  292.960648][ T4364] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0
[  292.970927][ T4364] usb 1-1: Product: syz
[  292.975133][ T4364] usb 1-1: Manufacturer: syz
[  293.007843][ T4364] usb 1-1: Found UVC 1.00 device syz (225a:e1d4)
[  293.050025][ T7331] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00
[  293.059129][ T7331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.100886][ T7331] usb 4-1: Product: syz
[  293.105114][ T7331] usb 4-1: Manufacturer: syz
[  293.118985][ T7331] usb 4-1: SerialNumber: syz
[  293.147610][T11657] loop1: detected capacity change from 0 to 64
[  293.212677][ T4364] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround.
[  293.249333][ T4364] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26).
[  293.259618][T11659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  293.276628][ T4364] uvcvideo 1-1:1.1: Failed to initialize the device (-5).
[  293.284887][T11659] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  293.317107][T11659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  293.330307][ T4364] usb 1-1: USB disconnect, device number 10
[  293.360278][ T7331] kalmia 4-1:1.0 (unnamed net_device) (uninitialized): Did not send all of init packet. Bytes sent: 0
[  293.360646][T11659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  293.383079][ T7331] kalmia 4-1:1.0 (unnamed net_device) (uninitialized): Error receiving init result. Status -71
[  293.396734][T11659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  293.423248][ T7331] kalmia: probe of 4-1:1.0 failed with error -71
[  293.445657][T11659] infiniband syz0: set active
[  293.457588][   T14] wlan1 speed is unknown, defaulting to 1000
[  293.458585][ T7331] usb 4-1: USB disconnect, device number 8
[  293.948932][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3310'.
[  293.960142][T11675] loop2: detected capacity change from 0 to 8192
[  294.510861][ T4364] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  294.721306][ T4364] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  294.740039][T11703] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3322'.
[  294.744750][ T4364] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  294.769112][T11705] CacheFiles: Empty tag specified
[  294.780057][T11703] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3322'.
[  294.787023][ T4364] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64
[  294.819348][ T4364] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  294.859791][ T4364] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  294.900303][ T4364] usb 3-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00
[  294.929790][ T4364] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.968628][T11689] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  294.989661][T11689] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  294.996978][T11689] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  295.008211][T11686] loop4: detected capacity change from 0 to 32768
[  295.027525][ T4364] mos7720 3-1:1.0: Moschip 2 port adapter converter detected
[  295.049705][T11686] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3314 (11686)
[  295.119855][T11686] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  295.144873][T11686] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  295.177340][T11686] BTRFS info (device loop4): force clearing of disk cache
[  295.190403][T11686] BTRFS info (device loop4): use zlib compression, level 3
[  295.211787][T11686] BTRFS info (device loop4): enabling ssd optimizations
[  295.231153][T11686] BTRFS info (device loop4): using spread ssd allocation scheme
[  295.259540][T11715] netlink: 'syz.1.3328': attribute type 1 has an invalid length.
[  295.267341][T11715] netlink: 216 bytes leftover after parsing attributes in process `syz.1.3328'.
[  295.281882][T11686] BTRFS info (device loop4): using free space tree
[  295.479630][ T4364] usb 3-1: mos7720: usb_control_msg() failed: -71
[  295.512818][ T4364] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB0
[  295.554434][ T4364] usb 3-1: Moschip 2 port adapter converter now attached to ttyUSB1
[  295.620528][ T4364] usb 3-1: USB disconnect, device number 10
[  295.626631][    C0] usb 3-1: mos7720_interrupt_callback - Error -19 submitting control urb
[  295.632887][T11686] BTRFS info (device loop4): rebuilding free space tree
[  295.650284][ T4364] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0
[  295.662719][ T4364] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1
[  295.675013][ T4364] mos7720 3-1:1.0: device disconnected
[  295.821268][T11686] BTRFS info (device loop4): checking UUID tree
[  295.965991][T11745] loop3: detected capacity change from 0 to 4096
[  296.004786][T11745] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  296.052812][ T4288] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  296.081453][T11750] netlink: 'syz.0.3336': attribute type 3 has an invalid length.
[  296.123195][T11745] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  296.201732][T11750] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3336'.
[  296.571639][T11727] loop1: detected capacity change from 0 to 32768
[  296.608253][T11727] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.3331 (11727)
[  296.684677][T11727] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  296.738441][T11727] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  296.781184][T11727] BTRFS info (device loop1): enabling auto defrag
[  296.824655][T11727] BTRFS info (device loop1): force clearing of disk cache
[  296.839414][T11727] BTRFS info (device loop1): ignoring data csums
[  296.879345][T11727] BTRFS info (device loop1): turning on async discard
[  296.886252][T11727] BTRFS info (device loop1): setting nodatacow, compression disabled
[  296.938493][T11727] BTRFS info (device loop1): turning off async discard
[  296.969517][T11727] BTRFS info (device loop1): disabling free space tree
[  297.120354][T11777] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3345'.
[  297.174283][T11777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3345'.
[  297.448023][T11758] loop0: detected capacity change from 0 to 32768
[  297.579418][ T4273] BTRFS info (device loop1: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  298.034896][T10991] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by udevd (10991)
[  298.063090][T11813] delete_channel: no stack
[  298.203491][T11818] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3361'.
[  299.243084][T11859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3381'.
[  299.293628][T11859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3381'.
[  299.736928][T11844] loop1: detected capacity change from 0 to 32768
[  299.795381][T11844] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  299.841044][T11844] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  299.884084][T11844] BTRFS info (device loop1): turning off barriers
[  299.908520][T11844] BTRFS info (device loop1): enabling auto defrag
[  299.919701][T11878] nvme_fc: nvme_fc_parse_traddr: bad traddr string
[  299.956153][T11844] BTRFS info (device loop1): force zlib compression, level 3
[  299.971217][T11844] BTRFS info (device loop1): enabling ssd optimizations
[  299.994045][T11844] BTRFS info (device loop1): using spread ssd allocation scheme
[  300.044681][T11844] BTRFS info (device loop1): using free space tree
[  300.229842][T11905] bond0: option all_slaves_active: invalid value (155)
[  300.554900][ T4273] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  300.723258][T11926] loop3: detected capacity change from 0 to 512
[  300.828380][T11926] EXT4-fs (loop3): 1 truncate cleaned up
[  300.860354][T11926] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  300.907339][   T26] audit: type=1326 audit(1792150833.358:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11930 comm="syz.2.3407" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3319e559 code=0x7ffc0000
[  301.029343][   T26] audit: type=1326 audit(1792150833.428:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11930 comm="syz.2.3407" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f8a3319e559 code=0x7ffc0000
[  301.132948][ T4284] EXT4-fs (loop3): unmounting filesystem.
[  301.139957][   T26] audit: type=1326 audit(1792150833.428:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11930 comm="syz.2.3407" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3319e559 code=0x7ffc0000
[  301.188968][   T26] audit: type=1326 audit(1792150833.428:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11930 comm="syz.2.3407" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3319e559 code=0x7ffc0000
[  302.309329][ T4364] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  302.479418][ T9002] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  302.501883][ T4364] usb 3-1: unable to get BOS descriptor or descriptor too short
[  302.524972][ T4364] usb 3-1: not running at top speed; connect to a high speed hub
[  302.543573][ T4364] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  302.566602][ T4364] usb 3-1: config 2 has 1 interface, different from the descriptor's value: 2
[  302.600511][ T4364] usb 3-1: string descriptor 0 read error: -22
[  302.606903][ T4364] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86
[  302.637163][ T4364] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.670693][ T9002] usb 5-1: Using ep0 maxpacket: 8
[  302.687975][ T9002] usb 5-1: config 0 interface 0 has no altsetting 0
[  302.695748][T12002] loop1: detected capacity change from 0 to 64
[  302.707482][ T9002] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  302.737217][ T9002] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.757569][ T9002] usb 5-1: Product: syz
[  302.767716][ T9002] usb 5-1: Manufacturer: syz
[  302.772760][ T9002] usb 5-1: SerialNumber: syz
[  302.796097][ T9002] usb 5-1: config 0 descriptor??
[  302.808895][ T9002] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found
[  302.864048][ T4364] snd-usb-6fire 3-1:2.0: unknown device firmware state received from device:
[  302.873312][ T4364] eb 2e 87 4b 9a 05 e6 5e 
[  302.877866][ T4364] snd-usb-6fire: probe of 3-1:2.0 failed with error -5
[  302.987159][T12006] loop1: detected capacity change from 0 to 4096
[  303.030911][ T9002] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected
[  303.054392][ T9002] snd_usb_toneport: probe of 5-1:0.0 failed with error -22
[  303.080716][ T4364] usb 3-1: USB disconnect, device number 11
[  303.254472][T11811] usb 5-1: USB disconnect, device number 16
[  303.439475][ T9002] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  303.641220][ T9002] usb 2-1: config 0 has an invalid interface number: 176 but max is 2
[  303.657533][ T9002] usb 2-1: config 0 has no interface number 1
[  303.665173][ T9002] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  303.689327][ T9002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.711580][ T9002] usb 2-1: config 0 descriptor??
[  303.924864][ T9002] qcserial 2-1:0.2: Qualcomm USB modem converter detected
[  303.935919][T12040] netlink: 1392 bytes leftover after parsing attributes in process `syz.0.3456'.
[  304.091758][T12047] vivid-003: disconnect
[  304.109896][T12043] vivid-003: reconnect
[  304.149004][  T955] usb 2-1: USB disconnect, device number 15
[  304.165309][  T955] qcserial 2-1:0.2: device disconnected
[  304.428971][T12061] loop4: detected capacity change from 0 to 512
[  304.515817][T12061] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  304.559384][T12061] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.3467: corrupted in-inode xattr
[  304.579330][T12061] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.3467: couldn't read orphan inode 15 (err -117)
[  304.599512][T12061] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  304.637931][T12061] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  304.782868][ T4288] EXT4-fs (loop4): unmounting filesystem.
[  304.896793][T12081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3475'.
[  305.013642][T12081] netlink: set zone limit has 4 unknown bytes
[  305.453902][T11811] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  305.465372][T12107] VFS: could not find a valid V7 on nullb0.
[  305.526308][T12111] netlink: 'syz.1.3489': attribute type 10 has an invalid length.
[  305.582837][T12113] autofs4:pid:12113:autofs_fill_super: called with bogus options
[  305.671156][T11811] usb 3-1: config 0 has too many interfaces: 129, using maximum allowed: 32
[  305.708535][T11811] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 129
[  305.747177][T11811] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  305.775393][T11811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.794413][T11811] usb 3-1: Product: syz
[  305.798650][T11811] usb 3-1: Manufacturer: syz
[  305.806197][T11811] usb 3-1: SerialNumber: syz
[  305.815413][T11811] usb 3-1: config 0 descriptor??
[  306.042216][T11811] mos7840 3-1:0.0: required endpoints missing
[  306.253191][T11811] usb 3-1: USB disconnect, device number 12
[  306.394363][T12110] loop3: detected capacity change from 0 to 32768
[  306.447800][T12110] XFS (loop3): Mounting V5 Filesystem
[  306.605805][T12110] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  306.657917][T12110] XFS (loop3): Starting recovery (logdev: internal)
[  306.715040][T12110] XFS (loop3): Ending recovery (logdev: internal)
[  306.949776][ T4284] XFS (loop3): Unmounting Filesystem
[  307.179135][T12132] loop4: detected capacity change from 0 to 32768
[  307.179343][T11811] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  307.200778][T12132] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3500 (12132)
[  307.278885][T12132] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  307.339389][T12132] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  307.366873][T12132] BTRFS info (device loop4): using free space tree
[  307.389680][T11811] usb 3-1: Using ep0 maxpacket: 32
[  307.396846][T11811] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  307.438259][T11811] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  307.499295][T11811] usb 3-1: config 0 interface 0 has no altsetting 0
[  307.522512][T11811] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  307.542508][T11811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.569314][T11811] usb 3-1: Product: syz
[  307.581019][T11811] usb 3-1: Manufacturer: syz
[  307.592191][T11811] usb 3-1: SerialNumber: syz
[  307.614986][T12132] BTRFS info (device loop4): enabling ssd optimizations
[  307.615614][T11811] usb 3-1: config 0 descriptor??
[  307.831734][ T4288] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  308.098910][T11811] gs_usb 3-1:0.0: Couldn't get device config: (err=-71)
[  308.115982][T11811] gs_usb: probe of 3-1:0.0 failed with error -71
[  308.169666][T11811] usb 3-1: USB disconnect, device number 13
[  308.385141][T12199] netlink: 392 bytes leftover after parsing attributes in process `syz.1.3519'.
[  308.628767][T12207] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  308.729592][ T7925] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  308.754595][T12212] CIFS mount error: No usable UNC path provided in device string!
[  308.754595][T12212] 
[  308.782662][T12212] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  308.804507][T12215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3527'.
[  308.924352][ T7925] usb 5-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00
[  308.935984][ T7925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  308.960852][ T7925] usb 5-1: Product: syz
[  308.965206][ T7925] usb 5-1: Manufacturer: syz
[  309.095113][T12225] loop3: detected capacity change from 0 to 1024
[  309.234134][ T7925] scsi host1: uas
[  309.451651][    C0] usb 5-1: stat urb: status -71
[  309.451945][ T9002] usb 5-1: USB disconnect, device number 17
[  309.457525][    C0] usb 5-1: cmd cmplt err -71
[  309.486139][ T9002] scsi 1:0:0:0: tag#24 uas_zap_pending 0 uas-tag 1 inflight: CMD 
[  309.494616][ T9002] scsi 1:0:0:0: tag#24 CDB: Inquiry 12 00 00 00 24 00
[  309.910347][T12259] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3548'.
[  310.099346][ T9002] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  310.303598][ T9002] usb 1-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=c7.b3
[  310.316362][ T9002] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.335015][ T9002] usb 1-1: Product: syz
[  310.346368][ T9002] usb 1-1: Manufacturer: syz
[  310.365467][ T9002] usb 1-1: SerialNumber: syz
[  310.399505][ T9002] usb 1-1: config 0 descriptor??
[  310.412919][ T9002] cypress_cy7c63 1-1:0.0: Cypress CY7C63xxx device now attached
[  310.573382][T12283] loop4: detected capacity change from 0 to 512
[  310.617321][ T9002] usb 1-1: USB disconnect, device number 11
[  310.626020][ T9002] cypress_cy7c63 1-1:0.0: Cypress CY7C63xxx device now disconnected
[  310.706713][T12283] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  310.746500][T12283] ext4 filesystem being mounted at /713/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  310.798368][T12294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3564'.
[  310.852266][T12283] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  310.890345][T12283] Quota error (device loop4): write_blk: dquota write failed
[  310.905726][T12283] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota
[  310.929592][T12283] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.3560: Failed to acquire dquot type 1
[  311.044547][ T4288] EXT4-fs (loop4): unmounting filesystem.
[  311.281172][T12302] loop1: detected capacity change from 0 to 4096
[  311.630523][T12296] loop3: detected capacity change from 0 to 32768
[  311.681202][T12296] 
[  311.681202][T12296]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  311.681202][T12296] 
[  311.768613][T12296] ERROR: (device loop3): diWrite: ixpxd invalid
[  311.768613][T12296] 
[  311.830408][T12296] ERROR: (device loop3): txCommit: 
[  311.830408][T12296] 
[  312.008745][T12325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3580'.
[  312.036218][ T4284] 
[  312.036218][ T4284]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  312.036218][ T4284] 
[  312.051110][T12325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3580'.
[  312.060543][ T4284] 
[  312.060543][ T4284]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  312.060543][ T4284] 
[  312.399031][T12311] loop4: detected capacity change from 0 to 32768
[  312.500359][T12311] JBD2: Ignoring recovery information on journal
[  312.553563][T12341] loop3: detected capacity change from 0 to 1764
[  312.635963][T12311] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  312.825824][T12311] syz.4.3572 (12311) used greatest stack depth: 18624 bytes left
[  313.013354][ T4288] ocfs2: Unmounting device (7,4) on (node local)
[  313.529888][T12370] loop3: detected capacity change from 0 to 4096
[  313.753164][T12370] ntfs: (device loop3): parse_options(): NLS character set is­Ü
]9-5 not found. Using previous one cp866.
[  313.848219][T12385] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3608'.
[  313.857664][T12370] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  313.889434][T12370] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  313.920388][T12370] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  313.925385][T12389] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  313.952674][T12370] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  313.982941][T12370] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  314.030071][T12370] ntfs: volume version 3.1.
[  314.068686][T12370] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  314.090468][T12370] ntfs: (device loop3): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  314.359299][   T22] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  314.507221][T12383] loop0: detected capacity change from 0 to 32768
[  314.581181][   T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  314.600280][   T22] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  314.623983][T12383] XFS (loop0): Mounting V5 Filesystem
[  314.626747][   T22] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  314.682079][   T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.710086][   T22] usb 5-1: Product: syz
[  314.719526][   T22] usb 5-1: Manufacturer: syz
[  314.724186][   T22] usb 5-1: SerialNumber: syz
[  314.738142][T12383] XFS (loop0): Ending clean mount
[  314.788631][T12383] XFS (loop0): Quotacheck needed: Please wait.
[  314.856755][T12383] XFS (loop0): Quotacheck: Done.
[  315.031776][   T22] usb 5-1: USB disconnect, device number 18
[  315.052553][ T4274] XFS (loop0): Unmounting Filesystem
[  315.198670][T12425] loop1: detected capacity change from 0 to 256
[  315.787950][T12446] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3635'.
[  315.927269][T12451] loop4: detected capacity change from 0 to 512
[  316.036752][T12451] EXT4-fs error (device loop4): ext4_orphan_get:1409: inode #15: comm syz.4.3638: iget: bad i_size value: 38620345925642
[  316.069917][T12451] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.3638: couldn't read orphan inode 15 (err -117)
[  316.143531][T12451] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  316.334835][ T4288] EXT4-fs (loop4): unmounting filesystem.
[  316.511881][T12475] loop4: detected capacity change from 0 to 128
[  316.577909][T12475] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  316.627820][T12477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3650'.
[  316.628436][T12475] FAT-fs (loop4): Filesystem has been set read-only
[  316.658444][T12477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3650'.
[  316.686725][T12477] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3650'.
[  316.689240][T12475] syz.4.3648: attempt to access beyond end of device
[  316.689240][T12475] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  316.759613][T12475] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  316.788915][T12475] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100)
[  316.815216][T12475] syz.4.3648: attempt to access beyond end of device
[  316.815216][T12475] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128
[  316.842692][   T26] kauditd_printk_skb: 9 callbacks suppressed
[  316.842708][   T26] audit: type=1800 audit(1792150849.298:151): pid=12475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3648" name="file2" dev="loop4" ino=1048672 res=0 errno=0
[  317.132390][T12499] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3658'.
[  317.153386][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  317.159791][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  317.809971][T12519] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  317.839625][T12519] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  317.860828][T12519] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  317.909286][T12519] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  317.918381][T12519] device geneve2 entered promiscuous mode
[  317.933040][T12526] loop4: detected capacity change from 0 to 1764
[  317.984769][T12525] netlink: 'syz.3.3670': attribute type 1 has an invalid length.
[  318.023566][T12493] loop0: detected capacity change from 0 to 32768
[  318.029273][T12525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3670'.
[  318.182393][T12493] XFS (loop0): Mounting V5 Filesystem
[  318.302967][T12493] XFS (loop0): Ending clean mount
[  318.310224][T12540] loop1: detected capacity change from 0 to 4096
[  318.323132][T12540] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  318.482375][ T4274] XFS (loop0): Unmounting Filesystem
[  318.499857][T12547] CIFS mount error: No usable UNC path provided in device string!
[  318.499857][T12547] 
[  318.531934][T12547] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  318.590780][T12549] comedi comedi1: pcl724: I/O port conflict (0x2,4)
[  318.719152][T12553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3682'.
[  318.747566][T12553] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  319.061167][T12560] delete_channel: no stack
[  319.294772][T12571] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3690'.
[  319.665722][T12551] loop3: detected capacity change from 0 to 32768
[  319.891325][T12587] loop4: detected capacity change from 0 to 64
[  320.231543][T12597] ieee802154 phy0 wpan0: encryption failed: -90
[  320.441855][T12605] ip6t_srh: unknown srh match flags  4000
[  320.455207][T12604] loop4: detected capacity change from 0 to 1024
[  320.547766][T12604] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  320.575157][T12604] hfsplus: xattr searching failed
[  320.626206][T12607] vim2m vim2m.0: Fourcc format (0x42474752) invalid.
[  321.450494][T12641] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long
[  321.774329][T12651] loop2: detected capacity change from 0 to 256
[  321.815181][T12651] exfat: Deprecated parameter 'namecase'
[  321.869071][T12651] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d)
[  321.983225][T12621] loop0: detected capacity change from 0 to 32768
[  322.057398][T12621] 
[  322.057398][T12621]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  322.057398][T12621] 
[  322.167151][T12621] ERROR: (device loop0): diWrite: ixpxd invalid
[  322.167151][T12621] 
[  322.228297][T12621] ERROR: (device loop0): txCommit: 
[  322.228297][T12621] 
[  322.373325][ T4274] 
[  322.373325][ T4274]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  322.373325][ T4274] 
[  322.379904][T12667] libceph: resolve 'c' (ret=-3): failed
[  322.419322][ T4274] 
[  322.419322][ T4274]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  322.419322][ T4274] 
[  322.753600][T12679] loop4: detected capacity change from 0 to 512
[  322.810137][T12679] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  322.931532][T12679] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.3744: invalid indirect mapped block 32768 (level 2)
[  323.017895][T12689] ax25_connect(): syz.0.3749 uses autobind, please contact jreuter@yaina.de
[  323.039483][T12679] EXT4-fs (loop4): 1 orphan inode deleted
[  323.045277][T12679] EXT4-fs (loop4): 1 truncate cleaned up
[  323.089598][T12679] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  323.220491][ T4288] EXT4-fs (loop4): unmounting filesystem.
[  323.364041][T12705] loop2: detected capacity change from 0 to 136
[  323.709978][T12711] CIFS: VFS: bad security option: kr!qÌ
[  323.752604][T12713] rdma_rxe: rxe creation allowed on top of a real device only
[  324.247712][T12700] loop1: detected capacity change from 0 to 32768
[  324.306659][T12701] loop4: detected capacity change from 0 to 32768
[  324.334637][T12700] XFS (loop1): Mounting V5 Filesystem
[  324.424781][T12701] add_index: next_index = 0.  Resetting!
[  324.436349][T12701] find_entry called with index >= next_index
[  324.442567][T12701] find_entry called with index >= next_index
[  324.449430][T12701] find_entry called with index >= next_index
[  324.457795][T12701] find_entry called with index >= next_index
[  324.503199][T12700] XFS (loop1): Ending clean mount
[  324.730978][ T4273] XFS (loop1): Unmounting Filesystem
[  324.803774][T12717] loop2: detected capacity change from 0 to 32768
[  324.922793][T12717] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  325.309931][ T4276] ocfs2: Unmounting device (7,2) on (node local)
[  325.830108][T12771] loop0: detected capacity change from 0 to 512
[  325.839409][ T9002] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  325.878512][T12772] loop1: detected capacity change from 0 to 256
[  325.886646][T12772] FAT-fs (loop1): "posix" option is obsolete, not supported now
[  325.974981][T12771] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  326.019356][T12771] ext4 filesystem being mounted at /766/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  326.031050][ T9002] usb 4-1: Using ep0 maxpacket: 32
[  326.038480][ T9002] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  326.081270][ T9002] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  326.129469][ T9002] usb 4-1: config 0 has no interface number 0
[  326.135918][ T9002] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  326.199843][ T9002] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  326.222306][ T9002] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.239332][ T9002] usb 4-1: Product: syz
[  326.243566][ T9002] usb 4-1: Manufacturer: syz
[  326.271599][ T9002] usb 4-1: SerialNumber: syz
[  326.283230][ T9002] usb 4-1: config 0 descriptor??
[  326.306377][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  326.323484][ T9002] radio-si470x 4-1:0.35: could not find interrupt in endpoint
[  326.356493][ T9002] radio-si470x: probe of 4-1:0.35 failed with error -5
[  326.469108][T12794] ipt_REJECT: TCP_RESET invalid for non-tcp
[  326.507743][ T9002] radio-raremono 4-1:0.35: this is not Thanko's Raremono.
[  326.539933][ T9002] usbhid 4-1:0.35: couldn't find an input interrupt endpoint
[  326.553226][T12798] loop4: detected capacity change from 0 to 256
[  326.654398][T12798] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  326.712926][ T4364] usb 4-1: USB disconnect, device number 9
[  326.889454][ T7925] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  327.032079][T12813] loop0: detected capacity change from 0 to 2048
[  327.050253][T12813] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  327.068382][T12813] syz.0.3803: attempt to access beyond end of device
[  327.068382][T12813] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  327.084728][T12817] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  327.098200][ T7925] usb 3-1: unable to get BOS descriptor or descriptor too short
[  327.117184][T12813] syz.0.3803: attempt to access beyond end of device
[  327.117184][T12813] loop0: rw=0, sector=33554430, nr_sectors = 2 limit=2048
[  327.134605][ T7925] usb 3-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40
[  327.155926][ T7925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.159597][T12813] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=3)
[  327.168093][ T7925] usb 3-1: Product: syz
[  327.187240][T12813] NILFS (loop0): error -5 reading inode: ino=12
[  327.207573][ T7925] usb 3-1: Manufacturer: syz
[  327.213053][ T7925] usb 3-1: SerialNumber: syz
[  327.299510][T11811] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  327.483362][ T7925] usb 3-1: MIDIStreaming interface descriptor not found
[  327.499416][T11811] usb 5-1: Using ep0 maxpacket: 8
[  327.513719][T11811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  327.539247][T11811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  327.559229][T11811] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  327.579274][T11811] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  327.617284][T11811] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  327.627392][ T7925] usb 3-1: USB disconnect, device number 14
[  327.669335][T11811] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  327.689320][T11811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.728637][T11811] usb 5-1: config 0 descriptor??
[  327.743707][T12816] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  328.019433][   T14] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  328.095377][T12821] loop3: detected capacity change from 0 to 32768
[  328.176384][ T4278] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  328.189857][T11811] usb 5-1: USB disconnect, device number 19
[  328.231618][   T14] usb 1-1: Using ep0 maxpacket: 32
[  328.242001][   T14] usb 1-1: config 0 has an invalid interface number: 119 but max is 0
[  328.266394][T12821] JBD2: Ignoring recovery information on journal
[  328.288497][   T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  328.288528][   T14] usb 1-1: config 0 has no interface number 0
[  328.288565][   T14] usb 1-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  328.294623][   T14] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  328.294657][   T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.294678][   T14] usb 1-1: Product: syz
[  328.294694][   T14] usb 1-1: Manufacturer: syz
[  328.294709][   T14] usb 1-1: SerialNumber: syz
[  328.316355][   T14] usb 1-1: config 0 descriptor??
[  328.341443][   T14] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input7
[  328.393849][T12821] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  328.508654][T12821] OCFS2: ERROR (device loop3): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 71
[  328.508788][T12821] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  328.508801][T12821] OCFS2: File system is now read-only.
[  328.508812][T12821] (syz.3.3808,12821,0):ocfs2_reserve_suballoc_bits:872 ERROR: status = -30
[  328.508840][T12821] (syz.3.3808,12821,0):ocfs2_reserve_cluster_bitmap_bits:1155 ERROR: status = -30
[  328.508864][T12821] (syz.3.3808,12821,0):ocfs2_reserve_clusters_with_limit:1224 ERROR: status = -30
[  328.508903][T12821] (syz.3.3808,12821,0):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30
[  328.509007][T12821] (syz.3.3808,12821,0):ocfs2_block_group_alloc:697 ERROR: status = -30
[  328.509030][T12821] (syz.3.3808,12821,0):ocfs2_block_group_alloc:780 ERROR: status = -30
[  328.509053][T12821] (syz.3.3808,12821,0):ocfs2_reserve_suballoc_bits:855 ERROR: status = -30
[  328.509076][T12821] (syz.3.3808,12821,0):ocfs2_reserve_suballoc_bits:872 ERROR: status = -30
[  328.509099][T12821] (syz.3.3808,12821,0):ocfs2_reserve_new_metadata_blocks:1012 ERROR: status = -30
[  328.509134][T12821] (syz.3.3808,12821,0):ocfs2_reserve_new_metadata_blocks:1035 ERROR: status = -30
[  328.511890][T12821] (syz.3.3808,12821,0):ocfs2_expand_inline_dir:2840 ERROR: status = -30
[  328.511922][T12821] (syz.3.3808,12821,0):ocfs2_extend_dir:3204 ERROR: status = -30
[  328.511968][T12821] (syz.3.3808,12821,0):ocfs2_prepare_dir_for_insert:4325 ERROR: status = -30
[  328.511992][T12821] (syz.3.3808,12821,0):ocfs2_mknod:299 ERROR: status = -30
[  328.512017][T12821] (syz.3.3808,12821,0):ocfs2_mknod:504 ERROR: status = -30
[  328.512038][T12821] (syz.3.3808,12821,0):ocfs2_mkdir:661 ERROR: status = -30
[  328.562354][T11811] usb 1-1: USB disconnect, device number 12
[  328.638957][ T4284] ocfs2: Unmounting device (7,3) on (node local)
[  328.684836][T12846] loop2: detected capacity change from 0 to 16
[  328.699152][T12846] erofs: (device loop2): mounted with root inode @ nid 36.
[  328.706971][T12846] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  328.707841][T12846] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117]
[  329.439528][T12871] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3829'.
[  330.037598][T12898] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3845'.
[  330.049778][T12900] loop0: detected capacity change from 0 to 2048
[  330.097180][T12900] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=27743, location=27743
[  330.138392][T12900] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=27999, location=27999
[  330.177408][T12900] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  330.183587][T12902] loop4: detected capacity change from 0 to 1024
[  330.201316][T12900] UDF-fs: Scanning with blocksize 512 failed
[  330.236513][T12900] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=27743, location=27743
[  330.299129][T12900] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  330.299498][T12904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3847'.
[  330.339930][T12904] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  330.791534][T12914] netlink: 45 bytes leftover after parsing attributes in process `syz.2.3852'.
[  330.894776][T12916] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3853'.
[  330.907678][T12884] loop1: detected capacity change from 0 to 40427
[  330.926465][T12918] Invalid ELF header magic: != ELF
[  330.952436][T12884] F2FS-fs (loop1): Corrupted extension count (327717 + 1 > 64)
[  330.973125][T12884] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  331.000131][T12884] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3ffff
[  331.022292][T12884] F2FS-fs (loop1): invalid crc value
[  331.037274][T12884] F2FS-fs (loop1): Found nat_bits in checkpoint
[  331.180883][T12926] i2c i2c-0: DVB: adapter 0 frontend 0 symbol rate 6 out of range (1000000..45000000)
[  331.200009][T12884] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  331.212006][T12884] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  331.952275][T12961] tmpfs: Bad value for 'mpol'
[  332.531343][T12986] loop4: detected capacity change from 0 to 2048
[  332.567989][T12986] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  332.661668][T12993] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  332.675935][T12986] syz.4.3886: attempt to access beyond end of device
[  332.675935][T12986] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  332.787261][T12986] syz.4.3886: attempt to access beyond end of device
[  332.787261][T12986] loop4: rw=0, sector=33554430, nr_sectors = 2 limit=2048
[  332.857106][T12986] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=3)
[  332.896184][T12986] NILFS (loop4): error -5 reading inode: ino=12
[  333.433958][T13012] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3898'.
[  333.443703][T13010] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  333.469509][T13012] netlink: 'syz.4.3898': attribute type 1 has an invalid length.
[  333.937149][T13032] loop3: detected capacity change from 0 to 512
[  333.960962][T13032] EXT4-fs: Ignoring removed orlov option
[  333.997805][T13032] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  334.023869][T13036] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3910'.
[  334.070553][T13036] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3910'.
[  334.089317][T13036] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3910'.
[  334.127623][T13041] loop1: detected capacity change from 0 to 256
[  334.211732][T13041] FAT-fs (loop1): Directory bread(block 64) failed
[  334.229345][T13041] FAT-fs (loop1): Directory bread(block 65) failed
[  334.236078][T13041] FAT-fs (loop1): Directory bread(block 66) failed
[  334.244189][ T4284] EXT4-fs (loop3): unmounting filesystem.
[  334.336401][T13041] FAT-fs (loop1): Directory bread(block 67) failed
[  334.359776][T13041] FAT-fs (loop1): Directory bread(block 68) failed
[  334.381614][T13045] netlink: 'syz.0.3914': attribute type 1 has an invalid length.
[  334.398438][T13041] FAT-fs (loop1): Directory bread(block 69) failed
[  334.416687][T13041] FAT-fs (loop1): Directory bread(block 70) failed
[  334.427074][T13045] netlink: 'syz.0.3914': attribute type 1 has an invalid length.
[  334.451881][T13041] FAT-fs (loop1): Directory bread(block 71) failed
[  334.459655][T13045] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.3914'.
[  334.498991][T13041] FAT-fs (loop1): Directory bread(block 72) failed
[  334.509468][T13041] FAT-fs (loop1): Directory bread(block 73) failed
[  334.979010][   T26] audit: type=1326 audit(1792150867.428:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13069 comm="syz.0.3926" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ac999e559 code=0x0
[  335.002878][    C1] vkms_vblank_simulate: vblank timer overrun
[  335.047315][T13072] loop3: detected capacity change from 0 to 64
[  335.141091][T13072] syz.3.3927: attempt to access beyond end of device
[  335.141091][T13072] loop3: rw=2049, sector=16777216, nr_sectors = 2 limit=64
[  335.177305][T13072] Buffer I/O error on dev loop3, logical block 8388608, lost async page write
[  335.184199][T13080] device gre2 entered promiscuous mode
[  335.446751][T13088] loop4: detected capacity change from 0 to 2048
[  335.580842][T13088]  loop4: p1 < > p3 p4 < >
[  335.619363][T13088] loop4: p3 size 861184 extends beyond EOD, truncated
[  336.105730][T13114] loop1: detected capacity change from 0 to 256
[  336.156627][T13114] exfat: Deprecated parameter 'utf8'
[  336.184373][T13114] exfat: Deprecated parameter 'utf8'
[  336.231466][T13114] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  336.508426][T13124] netlink: 'syz.4.3951': attribute type 1 has an invalid length.
[  336.884320][T13139] loop1: detected capacity change from 0 to 256
[  337.320979][T13156] loop2: detected capacity change from 0 to 8
[  337.402933][T13156] SQUASHFS error: Failed to read block 0x4de: -5
[  337.427942][T13156] SQUASHFS error: Failed to read block 0x4de: -5
[  337.457189][T13156] SQUASHFS error: Failed to read block 0x4de: -5
[  337.469646][T13156] SQUASHFS error: Failed to read block 0x4de: -5
[  337.484579][T13156] SQUASHFS error: Failed to read block 0x4de: -5
[  337.492070][T13164] netlink: 'syz.0.3972': attribute type 8 has an invalid length.
[  337.802707][T13177] vim2m vim2m.0: Fourcc format (0x56595559) invalid.
[  338.064411][T13189] loop4: detected capacity change from 0 to 2048
[  338.137569][T13189]  loop4: p1 < > p2 p3 < > p4 < p5 >
[  338.149269][T13189] loop4: partition table partially beyond EOD, truncated
[  338.175742][T13189] loop4: p1 start 3405774849 is beyond EOD, truncated
[  338.207622][T13189] loop4: p3 start 4225 is beyond EOD, truncated
[  338.731527][T13211] x_tables: eb_tables: redirect target: used from hooks INPUT, but only usable from PREROUTING/BROUTING
[  338.880217][T13224] loop4: detected capacity change from 0 to 512
[  338.905088][   T22] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  338.950774][T13224] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  338.960310][T13224] ext4 filesystem being mounted at /792/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  339.037660][T13235] loop1: detected capacity change from 0 to 1024
[  339.130646][   T22] usb 1-1: Using ep0 maxpacket: 16
[  339.134276][T13224] Quota error (device loop4): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  339.140393][   T22] usb 1-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  339.155761][T13224] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  339.190826][T13235] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.4005: lblock 2 mapped to illegal pblock 2 (length 1)
[  339.221672][T13235] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  339.230268][T13224] EXT4-fs error (device loop4): ext4_acquire_dquot:6841: comm syz.4.4001: Failed to acquire dquot type 0
[  339.233458][   T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.243014][T13235] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 48: comm syz.1.4005: lblock 0 mapped to illegal pblock 48 (length 1)
[  339.321379][   T22] usb 1-1: Product: syz
[  339.325647][   T22] usb 1-1: Manufacturer: syz
[  339.328672][T13242] loop3: detected capacity change from 0 to 16
[  339.347260][T13235] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  339.359267][   T22] usb 1-1: SerialNumber: syz
[  339.370971][T13242] erofs: (device loop3): mounted with root inode @ nid 36.
[  339.388941][T13235] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.4005: Failed to acquire dquot type 0
[  339.390705][   T22] usb 1-1: config 0 descriptor??
[  339.431770][T13235] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  339.452089][   T22] gspca_main: spca508-2.14.0 probing 041e:4018
[  339.508560][T13235] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.4005: mark_inode_dirty error
[  339.528249][T13235] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117)
[  339.530101][ T4288] EXT4-fs (loop4): unmounting filesystem.
[  339.542141][T13235] EXT4-fs (loop1): 1 orphan inode deleted
[  339.560215][ T2925] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  339.589353][T13235] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  339.601833][ T2925] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  339.629724][ T2925] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:6: Failed to release dquot type 0
[  339.651182][   T26] audit: type=1326 audit(1792150872.108:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13245 comm="syz.2.4012" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3319e559 code=0x7ffc0000
[  339.725234][   T26] audit: type=1326 audit(1792150872.128:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13245 comm="syz.2.4012" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3319e559 code=0x7ffc0000
[  339.845758][   T26] audit: type=1326 audit(1792150872.128:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13245 comm="syz.2.4012" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a3319e559 code=0x7ffc0000
[  339.847712][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  339.874402][   T22] gspca_spca508: reg_read err -71
[  339.888262][ T2925] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  339.891802][   T22] gspca_spca508: reg_read err -71
[  339.923605][   T22] gspca_spca508: reg_read err -71
[  339.933359][   T22] gspca_spca508: reg_read err -71
[  339.938591][ T2925] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  339.952844][   T22] gspca_spca508: reg write: error -71
[  339.958849][ T2925] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:6: Failed to release dquot type 0
[  339.958968][   T22] spca508: probe of 1-1:0.0 failed with error -71
[  339.990962][ T4273] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0
[  340.038044][ T4273] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  340.048447][   T22] usb 1-1: USB disconnect, device number 13
[  340.094633][ T4273] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error
[  340.213580][T13258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4017'.
[  340.249405][T13258] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4017'.
[  340.753659][T13252] loop4: detected capacity change from 0 to 32768
[  340.787096][T13252] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.4010 (13252)
[  340.859065][T13252] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  340.890851][T13252] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  340.915175][T13252] BTRFS info (device loop4): enabling ssd optimizations
[  340.915208][T13282] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.4028'.
[  340.922259][T13252] BTRFS info (device loop4): not using ssd optimizations
[  340.922291][T13252] BTRFS info (device loop4): turning off barriers
[  340.922311][T13252] BTRFS info (device loop4): using free space tree
[  341.064791][T13282] openvswitch: netlink: Key 17 has unexpected len 48122 expected 4
[  341.429659][ T4288] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  341.609510][   T14] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  341.649749][T13328] loop3: detected capacity change from 0 to 16
[  341.713170][T13328] erofs: (device loop3): erofs_read_superblock: dirblkbits 1 isn't supported
[  341.835978][   T14] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.06
[  341.865915][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.931400][   T14] usb 2-1: config 0 descriptor??
[  341.955011][   T14] hub 2-1:0.0: bad descriptor, ignoring hub
[  341.978445][   T14] hub: probe of 2-1:0.0 failed with error -5
[  342.001783][   T14] cp210x 2-1:0.0: cp210x converter detected
[  342.078737][T13332] loop0: detected capacity change from 0 to 4096
[  342.132172][T13332] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  342.260461][T13332] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  342.296743][T13332] ntfs3: loop0: Inode r=b is not in use!
[  342.309350][T13332] ntfs3: loop0: Failed to load $Extend.
[  342.377322][   T14] usb 2-1: cp210x converter now attached to ttyUSB0
[  342.420093][   T14] usb 2-1: USB disconnect, device number 16
[  342.447827][   T14] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  342.480474][   T14] cp210x 2-1:0.0: device disconnected
[  342.518086][ T4364] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  342.770090][ T4364] usb 5-1: unable to get BOS descriptor or descriptor too short
[  342.797499][ T4364] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  342.828272][ T4364] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  342.870640][ T4364] usb 5-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40
[  342.874664][T13355] loop0: detected capacity change from 0 to 512
[  342.925588][ T4364] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.949277][ T4364] usb 5-1: Product: syz
[  342.953540][ T4364] usb 5-1: Manufacturer: syz
[  342.958167][ T4364] usb 5-1: SerialNumber: syz
[  342.990021][T13355] EXT4-fs (loop0): Invalid log cluster size: 514
[  343.061445][T13360] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4057'.
[  343.098091][T13360] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4057'.
[  343.260970][T13364] netlink: 755 bytes leftover after parsing attributes in process `syz.3.4059'.
[  343.261053][ T4364] usb 5-1: USB disconnect, device number 20
[  343.370700][T13369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4062'.
[  343.383874][T13369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4062'.
[  343.429831][T13369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4062'.
[  343.461964][T13374] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4064'.
[  343.521495][ T9620] udevd[9620]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  343.523442][T13374] device bond1 entered promiscuous mode
[  343.549718][T13374] 8021q: adding VLAN 0 to HW filter on device bond1
[  343.595284][T13378] tmpfs: Bad value for 'mpol'
[  343.981456][T13395] netlink: 'syz.4.4073': attribute type 21 has an invalid length.
[  344.136512][T13402] loop1: detected capacity change from 0 to 16
[  344.175739][T13402] erofs: (device loop1): mounted with root inode @ nid 36.
[  344.242903][T13402] erofs: (device loop1): z_erofs_readahead: readahead error at page 3 @ nid 89
[  344.293598][T13402] syz.1.4078: attempt to access beyond end of device
[  344.293598][T13402] loop1: rw=524288, sector=34359738360, nr_sectors = 8 limit=16
[  344.329325][   T26] kauditd_printk_skb: 5 callbacks suppressed
[  344.329341][   T26] audit: type=1326 audit(2000000004.640:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13405 comm="syz.0.4080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac999e559 code=0x7ffc0000
[  344.385160][T13402] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89
[  344.419388][T13402] syz.1.4078: attempt to access beyond end of device
[  344.419388][T13402] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16
[  344.460845][   T26] audit: type=1326 audit(2000000004.680:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13405 comm="syz.0.4080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac999e559 code=0x7ffc0000
[  344.466939][T13410] netlink: 'syz.4.4082': attribute type 41 has an invalid length.
[  344.486922][T13402] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192]
[  344.577747][   T26] audit: type=1326 audit(2000000004.700:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13405 comm="syz.0.4080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac999e559 code=0x7ffc0000
[  344.599436][T13410] netlink: 'syz.4.4082': attribute type 4 has an invalid length.
[  344.649281][   T26] audit: type=1326 audit(2000000004.700:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13405 comm="syz.0.4080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f8ac999e559 code=0x7ffc0000
[  344.684445][T13410] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  344.709441][   T26] audit: type=1326 audit(2000000004.700:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13405 comm="syz.0.4080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac999e559 code=0x7ffc0000
[  344.823284][   T26] audit: type=1326 audit(2000000004.700:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13405 comm="syz.0.4080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8ac999e559 code=0x7ffc0000
[  344.847901][    C0] vkms_vblank_simulate: vblank timer overrun
[  344.915105][   T26] audit: type=1326 audit(2000000004.700:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13405 comm="syz.0.4080" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8ac999e559 code=0x7ffc0000
[  345.007098][   T26] audit: type=1800 audit(2000000004.870:168): pid=13402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4078" name="file2" dev="loop1" ino=89 res=0 errno=0
[  345.026903][    C0] vkms_vblank_simulate: vblank timer overrun
[  345.039015][T13388] loop3: detected capacity change from 0 to 40427
[  345.057421][T13388] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[  345.076576][T13388] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  345.113268][T13388] F2FS-fs (loop3): invalid crc value
[  345.149408][T13388] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  345.354660][T13388] F2FS-fs (loop3): recover fsync data on readonly fs
[  345.383581][T13388] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1
[  345.414146][T13388] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30
[  345.459751][T13388] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  345.639400][ T4364] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  345.771108][ T7111] infiniband syz0: set down
[  345.776147][T11811] wlan1 speed is unknown, defaulting to 1000
[  345.799297][T11811] wlan1 speed is unknown, defaulting to 1000
[  345.844775][ T4364] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 97, changing to 4
[  345.866239][ T4364] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 24929, setting to 1023
[  345.914025][ T4364] usb 1-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb
[  345.954024][ T4364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.989369][ T4364] usb 1-1: Product: syz
[  345.993754][ T4364] usb 1-1: Manufacturer: syz
[  346.008779][ T4364] usb 1-1: SerialNumber: syz
[  346.030764][ T4364] usb 1-1: config 0 descriptor??
[  346.199425][T11811] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  346.242774][ T4364] usbtouchscreen: probe of 1-1:0.0 failed with error -71
[  346.269525][ T4364] usb 1-1: USB disconnect, device number 14
[  346.340121][T13466] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (13)
[  346.394549][T13468] loop2: detected capacity change from 0 to 512
[  346.402835][T11811] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  346.423977][T11811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.433960][T13468] EXT4-fs: Invalid gid value -1
[  346.472573][T11811] usb 2-1: config 0 descriptor??
[  346.494874][T11811] gspca_main: sunplus-2.14.0 probing 055f:c420
[  346.518558][T13472] overlayfs: failed to resolve './file0': -2
[  346.794733][T13481] __nla_validate_parse: 3 callbacks suppressed
[  346.794752][T13481] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4117'.
[  346.913886][T11811] gspca_sunplus: reg_w_riv err -71
[  346.929325][T11811] sunplus: probe of 2-1:0.0 failed with error -71
[  346.941474][T11811] usb 2-1: USB disconnect, device number 17
[  347.263027][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4126'.
[  347.276497][T13503] loop2: detected capacity change from 0 to 256
[  347.280066][T13499] loop4: detected capacity change from 0 to 4096
[  347.289894][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4126'.
[  347.304633][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4126'.
[  347.314278][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4126'.
[  347.323419][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4126'.
[  347.334890][T13499] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  347.358780][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4126'.
[  347.361347][T13499] ntfs3: loop4: mft corrupted
[  347.369657][ T7331] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  347.384629][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4126'.
[  347.396095][T13499] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  347.396889][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4126'.
[  347.427928][T13499] ntfs3: loop4: Failed to load $LogFile.
[  347.438643][T13502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4126'.
[  347.571124][ T7331] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 1024, setting to 64
[  347.628469][ T7331] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  347.660414][ T7331] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.688797][ T7331] usb 1-1: Product: syz
[  347.693147][ T7331] usb 1-1: Manufacturer: syz
[  347.709433][ T7331] usb 1-1: SerialNumber: syz
[  347.738903][T13494] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  347.917546][T13517] loop2: detected capacity change from 0 to 128
[  347.977709][ T7331] usb 1-1: MIDIStreaming interface descriptor not found
[  348.097362][ T7331] usb 1-1: USB disconnect, device number 15
[  348.241623][T13521] loop4: detected capacity change from 0 to 4096
[  348.272156][T13525] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.842100][T13546] loop0: detected capacity change from 0 to 256
[  349.493625][   T26] audit: type=1326 audit(2000000009.810:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.1.4162" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454579e559 code=0x7ff00000
[  349.576624][   T26] audit: type=1326 audit(2000000009.810:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.1.4162" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454579e559 code=0x7ff00000
[  349.633288][   T26] audit: type=1326 audit(2000000009.810:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.1.4162" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454579e559 code=0x7ff00000
[  349.690109][   T26] audit: type=1326 audit(2000000009.810:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.1.4162" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454579e559 code=0x7ff00000
[  349.743326][   T26] audit: type=1326 audit(2000000009.810:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.1.4162" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454579e559 code=0x7ff00000
[  349.814508][   T26] audit: type=1326 audit(2000000009.810:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.1.4162" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454579e559 code=0x7ff00000
[  349.845956][   T26] audit: type=1326 audit(2000000009.810:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.1.4162" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454579e559 code=0x7ff00000
[  349.902012][   T26] audit: type=1326 audit(2000000009.810:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.1.4162" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454579e559 code=0x7ff00000
[  349.968043][   T26] audit: type=1326 audit(2000000009.810:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.1.4162" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454579e559 code=0x7ff00000
[  350.037673][   T26] audit: type=1326 audit(2000000009.810:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13574 comm="syz.1.4162" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454579e559 code=0x7ff00000
[  350.078528][T13558] loop3: detected capacity change from 0 to 32768
[  350.131988][T13558] gfs2: can't find protocol lock_noloca=off
[  350.396384][T13600] netlink: 'syz.4.4174': attribute type 2 has an invalid length.
[  351.690406][T13616] loop2: detected capacity change from 0 to 32768
[  351.708498][T13655] loop4: detected capacity change from 0 to 1024
[  351.721588][T13616] XFS: ikeep mount option is deprecated.
[  351.899614][T13616] XFS (loop2): Mounting V5 Filesystem
[  352.150972][T13616] XFS (loop2): Ending clean mount
[  352.462217][ T4276] XFS (loop2): Unmounting Filesystem
[  352.692296][T13689] loop1: detected capacity change from 0 to 4096
[  352.795926][T13689] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  352.802912][T13695] netlink: 'syz.3.4219': attribute type 1 has an invalid length.
[  352.890849][T13689] ntfs3: loop1: Failed to load $Extend.
[  353.139048][T13679] loop4: detected capacity change from 0 to 32768
[  353.225795][T13701] bridge2: the hash_elasticity option has been deprecated and is always 16
[  353.240804][T13679] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt
[  353.240804][T13679] 
[  353.269352][T13701] device bridge2 entered promiscuous mode
[  353.275931][T13679] ERROR: (device loop4): remounting filesystem as read-only
[  353.301647][T13679] ERROR: (device loop4): jfs_unlink: 
[  353.301647][T13679] 
[  353.319025][T13707] cgroup: subsys name conflicts with all
[  353.459595][ T4288] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt
[  353.459595][ T4288] 
[  353.533919][T13712] loop1: detected capacity change from 0 to 512
[  353.702525][T13712] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.4227: Failed to acquire dquot type 1
[  353.758558][T13712] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.4227: Failed to acquire dquot type 1
[  353.782934][T13728] libceph: resolve '0' (ret=-3): failed
[  353.853405][T13712] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.4227: bg 0: block 248: padding at end of block bitmap is not set
[  353.929614][T13712] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  353.990643][T13712] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.4227: Failed to acquire dquot type 1
[  354.051211][T13712] EXT4-fs (loop1): 1 orphan inode deleted
[  354.069487][T13712] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  354.089729][T13712] ext4 filesystem being mounted at /799/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  354.241220][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  354.307003][T13734] syz.2.4236 (13734) used greatest stack depth: 18096 bytes left
[  354.382480][T13741] loop1: detected capacity change from 0 to 128
[  354.392023][T13744] ceph: No source
[  354.440042][T13741] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  354.863820][T13726] loop0: detected capacity change from 0 to 32768
[  354.885684][T13754] [U] 
[  355.122979][T13766] __nla_validate_parse: 73 callbacks suppressed
[  355.122998][T13766] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4252'.
[  355.324054][T13774] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  355.477586][T13780] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  355.566090][T13786] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4263'.
[  356.369678][T13812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4275'.
[  356.462571][T13788] loop3: detected capacity change from 0 to 32768
[  356.480842][T13788] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.4264 (13788)
[  356.581122][T13788] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  356.616703][T13788] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  356.656033][T13788] BTRFS info (device loop3): setting nodatasum
[  356.679515][T13788] BTRFS info (device loop3): enabling auto defrag
[  356.686026][T13788] BTRFS info (device loop3): disabling tree log
[  356.704099][T13824] rxe_eth0 speed is unknown, defaulting to 1000
[  356.728026][T13788] BTRFS info (device loop3): using free space tree
[  356.964729][T13788] BTRFS info (device loop3): enabling ssd optimizations
[  357.127139][   T26] kauditd_printk_skb: 105 callbacks suppressed
[  357.127156][   T26] audit: type=1400 audit(2000000017.440:278): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13855 comm="syz.0.4286"
[  357.171742][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4288'.
[  357.295807][ T4284] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  357.916320][T13880] loop0: detected capacity change from 0 to 512
[  357.940609][T13880] EXT4-fs: Ignoring removed nomblk_io_submit option
[  358.012420][T13887] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4289'.
[  358.040154][T13880] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  358.121190][T13880] EXT4-fs error (device loop0): ext4_iget_extra_inode:4763: inode #15: comm syz.0.4297: corrupted in-inode xattr
[  358.199862][T13880] EXT4-fs error (device loop0): ext4_orphan_get:1414: comm syz.0.4297: couldn't read orphan inode 15 (err -117)
[  358.270161][T13880] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  358.286360][T13899] overlayfs: conflicting options: userxattr,redirect_dir=off
[  358.430414][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  358.612805][T13915] IPv6: sit2: Disabled Multicast RS
[  358.943291][T13931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4320'.
[  359.042554][T13935] xt_TCPMSS: Only works on TCP SYN packets
[  359.144692][T13941] loop0: detected capacity change from 0 to 512
[  359.188875][T13941] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  359.343022][T13941] syz.0.4325: attempt to access beyond end of device
[  359.343022][T13941] loop0: rw=0, sector=17179852721, nr_sectors = 1 limit=512
[  359.410079][T13941] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00)
[  359.418168][T13941] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fffff00)
[  359.475261][T13953] loop4: detected capacity change from 0 to 16
[  359.532603][T13955] usb usb8: usbfs: process 13955 (syz.2.4332) did not claim interface 0 before use
[  359.555869][T13953] erofs: (device loop4): mounted with root inode @ nid 36.
[  359.943380][T13973] netlink: 'syz.2.4341': attribute type 30 has an invalid length.
[  359.989321][T13973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4341'.
[  360.059526][T13973] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  360.068815][T13973] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  360.112870][T13980] netlink: 'syz.0.4345': attribute type 2 has an invalid length.
[  360.301101][T13990] loop0: detected capacity change from 0 to 24
[  360.333920][T13990] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  360.389296][T13990] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  360.568282][T14004] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers
[  360.976563][T14019] loop2: detected capacity change from 0 to 256
[  361.085709][T14025] netlink: 'syz.1.4365': attribute type 10 has an invalid length.
[  361.101929][T14025] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4365'.
[  361.130375][T14025] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  361.495103][T14042] overlayfs: unrecognized mount option "\" or missing value
[  361.609426][ T9002] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  361.806535][ T9002] usb 2-1: config index 0 descriptor too short (expected 45, got 39)
[  361.825995][ T9002] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  361.857143][ T9002] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  361.901422][ T9002] usb 2-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice= 0.00
[  361.924153][ T9002] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.938152][ T9002] usb 2-1: Product: syz
[  361.945695][ T9002] usb 2-1: Manufacturer: syz
[  361.963202][ T9002] usb 2-1: SerialNumber: syz
[  361.996154][ T9002] qcserial 2-1:1.0: Qualcomm USB modem converter detected
[  362.020460][ T9002] usb 2-1: Qualcomm USB modem converter now attached to ttyUSB0
[  362.226030][ T7925] usb 2-1: USB disconnect, device number 18
[  362.250412][ T7925] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0
[  362.272074][ T7925] qcserial 2-1:1.0: device disconnected
[  362.379453][T14078] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4392'.
[  362.772720][T14099] loop3: detected capacity change from 0 to 16
[  362.860114][T14099] erofs: (device loop3): mounted with root inode @ nid 36.
[  362.886517][T14101] netlink: 'syz.2.4404': attribute type 3 has an invalid length.
[  363.028635][T14107] loop4: detected capacity change from 0 to 1024
[  363.088144][T14109] netlink: zone id is out of range
[  363.250540][T14111] loop0: detected capacity change from 0 to 4096
[  363.368122][T14121] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  363.391850][T14120] ERROR: device name not specified.
[  363.402333][T14111] syz.0.4409: attempt to access beyond end of device
[  363.402333][T14111] loop0: rw=524288, sector=9007199254741152, nr_sectors = 8 limit=4096
[  363.469988][T14111] syz.0.4409: attempt to access beyond end of device
[  363.469988][T14111] loop0: rw=0, sector=9007199254741152, nr_sectors = 8 limit=4096
[  363.504266][   T26] audit: type=1800 audit(2000000023.820:279): pid=14111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4409" name="file2" dev="loop0" ino=16 res=0 errno=0
[  363.786165][T14136] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  364.002832][T14148] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615)
[  364.029881][T14148] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647
[  364.946807][T14195] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  365.164760][T14204] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4288] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[14204]
[  365.849306][ T9002] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  366.039251][ T9002] usb 1-1: Using ep0 maxpacket: 16
[  366.046405][ T9002] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  366.080482][ T9002] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  366.119469][ T9002] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.131398][T14251] netlink: 'syz.2.4478': attribute type 2 has an invalid length.
[  366.152764][ T9002] usb 1-1: Product: syz
[  366.179312][ T9002] usb 1-1: Manufacturer: syz
[  366.189270][ T9002] usb 1-1: SerialNumber: syz
[  366.196576][ T9002] usb 1-1: config 0 descriptor??
[  366.217186][ T9002] asix: probe of 1-1:0.0 failed with error -22
[  366.341682][T14259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4483'.
[  366.362360][T14260] loop3: detected capacity change from 0 to 256
[  366.421310][ T9002] usb 1-1: USB disconnect, device number 16
[  366.816615][T14271] loop2: detected capacity change from 0 to 512
[  366.820332][T14273] loop1: detected capacity change from 0 to 128
[  366.843180][T14245] loop4: detected capacity change from 0 to 32768
[  366.867498][T14245] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.4474 (14245)
[  366.924411][T14245] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  366.949302][T14245] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  366.980843][T14271] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  366.995945][T14245] BTRFS info (device loop4): force zlib compression, level 3
[  367.006236][T14245] BTRFS info (device loop4): turning on flush-on-commit
[  367.013822][T14245] BTRFS info (device loop4): max_inline at 4096
[  367.021442][T14245] BTRFS info (device loop4): using free space tree
[  367.049975][T14271] ext4 filesystem being mounted at /930/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  367.275418][T14245] BTRFS info (device loop4): enabling ssd optimizations
[  367.313112][ T4276] EXT4-fs (loop2): unmounting filesystem.
[  367.520004][ T4288] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  367.616146][T14316] loop2: detected capacity change from 0 to 4096
[  367.774207][T14321] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  367.800117][T14316] syz.2.4497: attempt to access beyond end of device
[  367.800117][T14316] loop2: rw=524288, sector=9007199254741152, nr_sectors = 8 limit=4096
[  367.925423][T14316] syz.2.4497: attempt to access beyond end of device
[  367.925423][T14316] loop2: rw=0, sector=9007199254741152, nr_sectors = 8 limit=4096
[  368.019746][   T26] audit: type=1800 audit(2000000028.340:280): pid=14316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4497" name="file2" dev="loop2" ino=16 res=0 errno=0
[  368.696667][T14345] netlink: 'syz.1.4514': attribute type 10 has an invalid length.
[  368.726219][T14315] loop0: detected capacity change from 0 to 32768
[  368.757181][T14315] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.4499 (14315)
[  368.810144][T14350] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4516'.
[  368.839540][T14315] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  368.869077][T14350] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4516'.
[  368.887658][T14315] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  368.910570][T14315] BTRFS info (device loop0): setting nodatasum
[  368.919052][T14315] BTRFS info (device loop0): enabling auto defrag
[  368.937176][T14315] BTRFS info (device loop0): disabling tree log
[  368.965087][T14315] BTRFS info (device loop0): using free space tree
[  368.991440][T14356] netlink: 'syz.1.4517': attribute type 17 has an invalid length.
[  369.278324][T14315] BTRFS info (device loop0): enabling ssd optimizations
[  369.367792][T14381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4522'.
[  369.416840][T14381] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  369.549913][ T4274] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  369.582375][T14392] loop3: detected capacity change from 0 to 16
[  369.635669][T14392] erofs: (device loop3): mounted with root inode @ nid 36.
[  369.651215][   T26] audit: type=1326 audit(2000000029.970:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14395 comm="syz.1.4531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454579e559 code=0x7ffc0000
[  369.748691][   T26] audit: type=1326 audit(2000000030.020:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14395 comm="syz.1.4531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454579e559 code=0x7ffc0000
[  369.825372][   T26] audit: type=1326 audit(2000000030.020:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14395 comm="syz.1.4531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454579e559 code=0x7ffc0000
[  369.867498][   T26] audit: type=1326 audit(2000000030.020:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14395 comm="syz.1.4531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f454579e559 code=0x7ffc0000
[  369.884111][T14402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4533'.
[  369.891658][    C0] vkms_vblank_simulate: vblank timer overrun
[  369.907250][   T26] audit: type=1326 audit(2000000030.020:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14395 comm="syz.1.4531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454579e559 code=0x7ffc0000
[  369.989261][   T26] audit: type=1326 audit(2000000030.020:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14395 comm="syz.1.4531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454579e559 code=0x7ffc0000
[  370.013723][    C0] vkms_vblank_simulate: vblank timer overrun
[  370.162556][   T26] audit: type=1326 audit(2000000030.020:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14395 comm="syz.1.4531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f454579e559 code=0x7ffc0000
[  370.250053][   T26] audit: type=1326 audit(2000000030.020:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14395 comm="syz.1.4531" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f454579e559 code=0x7ffc0000
[  370.329282][   T26] audit: type=1326 audit(2000000030.440:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14406 comm="syz.1.4537" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454579e559 code=0x7ffc0000
[  370.415633][   T26] audit: type=1326 audit(2000000030.440:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14406 comm="syz.1.4537" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454579e559 code=0x7ffc0000
[  370.512742][T14423] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4542'.
[  370.539797][T14423] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4542'.
[  371.307496][T14466] loop0: detected capacity change from 0 to 16
[  371.335474][T14466] erofs: (device loop0): mounted with root inode @ nid 36.
[  371.376939][T14466] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  371.456082][T14466] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -50 in[61, 4035] out[1851]
[  371.489427][T14466] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[  371.630689][T14479] netlink: 200 bytes leftover after parsing attributes in process `syz.2.4570'.
[  371.774968][T14483] sctp: [Deprecated]: syz.1.4572 (pid 14483) Use of struct sctp_assoc_value in delayed_ack socket option.
[  371.774968][T14483] Use struct sctp_sack_info instead
[  372.804369][T14525] loop3: detected capacity change from 0 to 64
[  372.911563][T14529] x_tables: eb_tables: dnat target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT/BROUTING
[  373.199837][T14541] loop1: detected capacity change from 0 to 512
[  373.226158][T14541] EXT4-fs: Ignoring removed nomblk_io_submit option
[  373.261978][T14541] EXT4-fs: Ignoring removed nomblk_io_submit option
[  373.293881][T14541] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  373.357326][T14541] EXT4-fs (loop1): 1 truncate cleaned up
[  373.363858][T14541] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  373.429078][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  373.818918][T14569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready
[  373.969559][T14577] netlink: 'syz.2.4617': attribute type 10 has an invalid length.
[  374.103525][T14577] 8021q: adding VLAN 0 to HW filter on device batadv0
[  374.133093][T14577] team0: Port device batadv0 added
[  374.409547][T14598] netlink: 456 bytes leftover after parsing attributes in process `syz.1.4628'.
[  374.752846][T14617] device vti0 entered promiscuous mode
[  375.319392][T14641] netlink: 'syz.3.4649': attribute type 2 has an invalid length.
[  375.615409][T14614] loop4: detected capacity change from 0 to 32768
[  375.672290][   T26] kauditd_printk_skb: 21 callbacks suppressed
[  375.672308][   T26] audit: type=1800 audit(2000000035.990:312): pid=14614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4636" name="file1" dev="loop4" ino=4 res=0 errno=0
[  375.706547][T14647] loop0: detected capacity change from 0 to 8192
[  375.740632][T14655] hsr0: mtu greater than device maximum
[  375.884845][T14647] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000ff3f)
[  375.928159][T14647] FAT-fs (loop0): Filesystem has been set read-only
[  376.399226][ T7924] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  376.597510][ T7924] usb 3-1: not running at top speed; connect to a high speed hub
[  376.606931][T14683] loop1: detected capacity change from 0 to 1024
[  376.620979][ T7924] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  376.676713][ T7924] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  376.721841][ T7924] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  376.741277][ T7924] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00
[  376.774344][ T7924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.851280][ T7924] gspca_main: spca501-2.14.0 probing 0000:0000
[  377.033058][ T7924] gspca_spca501: reg write: error -71
[  377.045372][ T7924] spca501 3-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  377.064360][ T7924] spca501: probe of 3-1:1.0 failed with error -22
[  377.099564][ T7924] usb 3-1: USB disconnect, device number 15
[  377.261778][T14707] jffs2: Bad value for 'compr'
[  377.454126][T14715] netlink: 'syz.4.4686': attribute type 10 has an invalid length.
[  377.535776][T14715] 8021q: adding VLAN 0 to HW filter on device batadv0
[  377.548728][T14715] team0: Port device batadv0 added
[  377.568728][T14717] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4687'.
[  377.771870][T14727] loop2: detected capacity change from 0 to 512
[  377.876451][T14727] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  377.901886][T14736] nfs: Unknown parameter 'ntext'
[  377.905677][T14727] ext4 filesystem being mounted at /968/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  378.003417][T14727] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  378.055540][T14727] EXT4-fs (loop2): Remounting filesystem read-only
[  378.182287][ T4276] EXT4-fs (loop2): unmounting filesystem.
[  378.324539][T14752] loop3: detected capacity change from 0 to 256
[  378.452010][T14758] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  378.553666][T14760] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4707'.
[  378.594964][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  378.601993][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  378.610512][T14762] loop4: detected capacity change from 0 to 512
[  378.747752][T14762] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  378.759632][T14762] ext4 filesystem being mounted at /927/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  378.832992][T14762] Quota error (device loop4): do_check_range: Getting block 134217728 out of range 0-5
[  379.062136][ T4288] EXT4-fs (loop4): unmounting filesystem.
[  379.204823][   T26] audit: type=1400 audit(2000000039.520:313): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14779 comm="syz.4.4714"
[  379.408998][T14784] loop1: detected capacity change from 0 to 1024
[  379.440836][T14784] EXT4-fs: Ignoring removed bh option
[  379.469763][T14784] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  379.496078][T14784] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  379.559566][T14784] EXT4-fs error (device loop1): ext4_get_journal_inode:5762: inode #5: comm syz.1.4717: unexpected bad inode w/o EXT4_IGET_BAD
[  379.609809][T14784] EXT4-fs (loop1): no journal found
[  379.630819][T14784] EXT4-fs (loop1): can't get journal size
[  379.671557][T14784] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  379.764888][T14784] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #16: comm syz.1.4717: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1796(4), depth 0(0)
[  379.831586][T14772] loop3: detected capacity change from 0 to 32768
[  379.930732][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  379.945090][T14772] XFS (loop3): Mounting V5 Filesystem
[  380.015634][T14788] loop2: detected capacity change from 0 to 32768
[  380.263658][T14772] XFS (loop3): Ending clean mount
[  380.327033][T14772] XFS (loop3): Quotacheck needed: Please wait.
[  380.449861][T14772] XFS (loop3): Quotacheck: Done.
[  380.508104][T14813] xt_connbytes: Forcing CT accounting to be enabled
[  380.682889][ T4284] XFS (loop3): Unmounting Filesystem
[  380.756250][T14792] loop4: detected capacity change from 0 to 32768
[  380.887196][T14792] ERROR: (device loop4): dbAllocAG: Corrupt dmapctl page
[  380.887196][T14792] 
[  380.934575][T14792] ERROR: (device loop4): remounting filesystem as read-only
[  381.672821][T14821] loop0: detected capacity change from 0 to 32768
[  381.793292][T14821] XFS (loop0): Mounting V5 Filesystem
[  381.875240][T14821] XFS (loop0): Ending clean mount
[  381.892537][T14831] loop2: detected capacity change from 0 to 32768
[  381.970275][T14831] jfs_lookup: iget failed on inum 4
[  382.244554][ T4274] XFS (loop0): Unmounting Filesystem
[  382.635279][T14869] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4754'.
[  382.837815][T14873] netlink: 'syz.3.4755': attribute type 13 has an invalid length.
[  383.152826][T14885] netlink: 'syz.4.4760': attribute type 1 has an invalid length.
[  383.388624][T14900] loop0: detected capacity change from 0 to 1024
[  383.534826][T14900] hfsplus: invalid length 1280 has been corrected to 255
[  384.077452][T14929] loop1: detected capacity change from 0 to 8
[  384.342227][T14938] comedi: No check for data length of config insn id 4 is implemented
[  384.379373][T14938] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c
[  384.388905][T14938] comedi: Assuming n=15 is correct
[  384.814977][T14953] loop1: detected capacity change from 0 to 4096
[  384.857567][T14953] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  384.990252][T14953] ntfs3: loop1: ino=0, attr_set_size
[  385.399935][T14943] loop0: detected capacity change from 0 to 32768
[  385.467913][T14943] jfs_lookup: iget failed on inum 4
[  385.485411][T14977] loop1: detected capacity change from 0 to 512
[  385.622317][T14977] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  385.669437][T14977] ext4 filesystem being mounted at /926/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  385.671417][T14982] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.4807'.
[  385.831135][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  385.985691][T14992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4811'.
[  385.999803][T14994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4812'.
[  386.222924][T15000] IPv6: Can't replace route, no match found
[  386.447253][T15015] loop0: detected capacity change from 0 to 512
[  386.517754][T15015] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  386.548501][T15015] ext4 filesystem being mounted at /948/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  386.640234][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  386.999519][   T22] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  387.061945][T15042] block nbd4: NBD_DISCONNECT
[  387.182421][   T22] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  387.211994][   T22] usb 3-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00
[  387.258451][   T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.282785][   T22] usb 3-1: Product: syz
[  387.287054][   T22] usb 3-1: Manufacturer: syz
[  387.298929][   T22] usb 3-1: SerialNumber: syz
[  387.531888][T15049] Bluetooth: hci5: unexpected event for opcode 0x1002
[  387.600512][T15057] loop0: detected capacity change from 0 to 512
[  387.626391][T15057] EXT4-fs (loop0): 1 truncate cleaned up
[  387.639346][T15057] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  387.704437][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  387.737224][ T4278] Bluetooth: hci5: CSR: Local version failed (-71)
[  387.738767][ T4364] usb 3-1: USB disconnect, device number 16
[  387.901883][T15038] loop3: detected capacity change from 0 to 32768
[  387.968955][T15038] ERROR: (device loop3): dbAllocNext: Corrupt dmap page
[  387.968955][T15038] 
[  387.994687][T15038] ialloc: diAlloc returned -5!
[  388.023362][T15069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4847'.
[  388.446466][T15081] loop0: detected capacity change from 0 to 512
[  388.488411][T15081] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  388.509339][T15081] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e118, mo2=0002]
[  388.554716][T15081] EXT4-fs (loop0): orphan cleanup on readonly fs
[  388.561527][T15090] loop4: detected capacity change from 0 to 164
[  388.583974][T15081] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.4853: bg 0: block 15: invalid block bitmap
[  388.605902][T15081] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  388.615458][T15081] EXT4-fs (loop0): 1 truncate cleaned up
[  388.621523][T15081] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  388.663308][T15081] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.4853: bad symlink.
[  388.776045][T15090] iso9660: Corrupted directory entry in block 2 of inode 1920
[  388.797141][ T4274] EXT4-fs (loop0): unmounting filesystem.
[  389.012347][T15099] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  389.304139][T15115] netlink: 'syz.2.4868': attribute type 46 has an invalid length.
[  389.369331][T15115] netlink: 'syz.2.4868': attribute type 46 has an invalid length.
[  389.464064][T15123] loop0: detected capacity change from 0 to 256
[  389.502129][T15123] exfat: Deprecated parameter 'utf8'
[  389.508750][T15123] exfat: Deprecated parameter 'utf8'
[  389.561805][T15123] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  389.774494][T15133] loop3: detected capacity change from 0 to 16
[  389.879693][T15133] erofs: (device loop3): mounted with root inode @ nid 36.
[  389.937995][T15136] loop2: detected capacity change from 0 to 4096
[  389.986166][T15136] EXT4-fs: Ignoring removed bh option
[  390.018132][T15136] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  390.069047][T15136] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003]
[  390.090225][T15136] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  390.111393][T15136] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003]
[  390.125553][T15136] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[  390.191111][   T26] audit: type=1326 audit(2000000050.510:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15152 comm="syz.4.4886" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffe19e559 code=0x7ffc0000
[  390.215684][    C0] vkms_vblank_simulate: vblank timer overrun
[  390.227325][ T4276] EXT4-fs (loop2): unmounting filesystem.
[  390.245751][T15151] loop3: detected capacity change from 0 to 512
[  390.295821][T15151] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  390.366750][   T26] audit: type=1326 audit(2000000050.510:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15152 comm="syz.4.4886" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffe19e559 code=0x7ffc0000
[  390.394424][T15151] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.4884: inode has both inline data and extents flags
[  390.510852][T15151] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.4884: couldn't read orphan inode 15 (err -117)
[  390.549335][   T26] audit: type=1326 audit(2000000050.510:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15152 comm="syz.4.4886" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffe19e559 code=0x7ffc0000
[  390.582728][T15151] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  390.654453][   T26] audit: type=1326 audit(2000000050.510:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15152 comm="syz.4.4886" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f1ffe19e559 code=0x7ffc0000
[  390.678934][    C0] vkms_vblank_simulate: vblank timer overrun
[  390.756160][   T26] audit: type=1326 audit(2000000050.510:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15152 comm="syz.4.4886" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ffe19e559 code=0x7ffc0000
[  390.780809][    C0] vkms_vblank_simulate: vblank timer overrun
[  390.832449][   T26] audit: type=1326 audit(2000000050.510:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15152 comm="syz.4.4886" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1ffe19e559 code=0x7ffc0000
[  390.869439][   T22] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  390.923732][   T26] audit: type=1326 audit(2000000050.510:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15152 comm="syz.4.4886" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1ffe19e559 code=0x7ffc0000
[  390.948978][    C0] vkms_vblank_simulate: vblank timer overrun
[  391.022748][ T4284] EXT4-fs (loop3): unmounting filesystem.
[  391.069329][   T22] usb 2-1: Using ep0 maxpacket: 32
[  391.076434][   T22] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  391.089620][T15175] loop2: detected capacity change from 0 to 256
[  391.106680][   T22] usb 2-1: config 0 has no interface number 0
[  391.131370][   T22] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  391.151029][   T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.169245][   T22] usb 2-1: Product: syz
[  391.179228][   T22] usb 2-1: Manufacturer: syz
[  391.189796][   T22] usb 2-1: SerialNumber: syz
[  391.200848][   T22] usb 2-1: config 0 descriptor??
[  391.212870][   T22] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  391.259485][   T22] usb 2-1: selecting invalid altsetting 1
[  391.275581][   T22] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  391.369581][   T22] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  391.400929][   T22] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  391.419985][T15150] JBD2: Ignoring recovery information on journal
[  391.460085][T15182] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4900'.
[  391.490911][   T22] usb 2-1: media controller created
[  391.612598][   T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  391.622892][T15150] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  391.776580][T15150] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048
[  391.823212][T15150] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  391.841655][T15150] OCFS2: Returning error to the calling process.
[  391.858538][T15150] (syz.0.4887,15150,1):ocfs2_search_chain:1783 ERROR: status = -5
[  391.882768][T15150] (syz.0.4887,15150,1):ocfs2_search_chain:1893 ERROR: status = -5
[  391.902217][T15150] (syz.0.4887,15150,1):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5
[  391.926792][T15150] (syz.0.4887,15150,1):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5
[  391.944060][   T22] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  391.967439][T15150] (syz.0.4887,15150,1):ocfs2_claim_new_inode:2248 ERROR: status = -5
[  391.997936][T15150] (syz.0.4887,15150,1):ocfs2_claim_new_inode:2263 ERROR: status = -5
[  392.027778][T15150] (syz.0.4887,15150,1):ocfs2_mknod_locked:641 ERROR: status = -5
[  392.059279][   T22] usb 2-1: USB disconnect, device number 19
[  392.078863][T15150] (syz.0.4887,15150,1):ocfs2_mknod:385 ERROR: status = -5
[  392.108594][T15150] (syz.0.4887,15150,1):ocfs2_mknod:504 ERROR: status = -5
[  392.127621][T15150] (syz.0.4887,15150,1):ocfs2_mkdir:661 ERROR: status = -5
[  392.298530][ T4274] ocfs2: Unmounting device (7,0) on (node local)
[  393.282878][T15256] set_capacity_and_notify: 1 callbacks suppressed
[  393.282897][T15256] loop4: detected capacity change from 0 to 1024
[  393.284577][T15259] loop0: detected capacity change from 0 to 128
[  393.386011][T15259] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  393.439333][T15259] FAT-fs (loop0): Filesystem has been set read-only
[  393.560406][ T4278] Bluetooth: hci4: unexpected event for opcode 0x0c14
[  394.293664][T15297] binder: 15295:15297 ioctl c00c6211 9999999999999999 returned -14
[  395.028499][T15331] netlink: 'syz.3.4972': attribute type 10 has an invalid length.
[  395.083375][T15331] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  395.646019][T15344] loop3: detected capacity change from 0 to 4096
[  395.698952][T15344] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  395.724654][T15344] ntfs3: loop3: Failed to load $Extend.
[  395.918270][ T4284] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  396.159342][   T22] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  396.369578][   T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  396.404009][   T22] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[  396.434256][   T22] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 145, changing to 11
[  396.477969][   T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40
[  396.506388][   T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.545763][   T22] usb 1-1: Product: syz
[  396.555905][   T22] usb 1-1: Manufacturer: syz
[  396.569367][T15380] loop2: detected capacity change from 0 to 1024
[  396.576114][   T22] usb 1-1: SerialNumber: syz
[  396.659950][T15381] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  396.697302][T15380] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  396.719002][T15380] ext4 filesystem being mounted at /1029/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  396.743167][T15380] EXT4-fs error (device loop2): ext4_get_first_dir_block:3607: inode #12: comm syz.2.4995: directory missing '..'
[  396.761080][T15380] EXT4-fs (loop2): Remounting filesystem read-only
[  396.814551][   T22] cdc_ncm 1-1:1.0: bind() failure
[  396.821052][   T22] usbtest 1-1:1.0: Linux gadget zero
[  396.826535][   T22] usbtest 1-1:1.0: high-speed {control in/out int-in} tests (+alt)
[  396.845045][ T4276] EXT4-fs (loop2): unmounting filesystem.
[  396.890209][   T22] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  396.897129][   T22] cdc_ncm 1-1:1.1: bind() failure
[  396.912872][   T22] usbtest 1-1:1.1: couldn't get endpoints, -71
[  396.956768][   T22] usbtest: probe of 1-1:1.1 failed with error -71
[  397.009418][   T22] usb 1-1: USB disconnect, device number 17
[  397.430814][T15365] loop3: detected capacity change from 0 to 40427
[  397.436672][T15403] loop2: detected capacity change from 0 to 256
[  397.473113][T15365] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  397.533601][T15365] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  397.586859][T15365] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x3ffff
[  397.655396][T15365] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8
[  397.747756][T15365] F2FS-fs (loop3): invalid crc value
[  397.822307][T15365] F2FS-fs (loop3): Found nat_bits in checkpoint
Stopping sshd: [  398.045755][T15365] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  398.059109][T15365] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  398.097120][T15429] netlink: 'syz.0.5014': attribute type 1 has an invalid length.
[  398.149463][T15429] netlink: 'syz.0.5014': attribute type 2 has an invalid length.
stopped /usr/sbin/sshd (pid 4025)
OK
[  398.390390][T15431] loop4: detected capacity change from 0 to 4096
[  398.394106][ T4284] syz-executor: attempt to access beyond end of device
[  398.394106][ T4284] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  398.448596][T15431] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  398.578387][T15431] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  398.661176][T15431] ntfs3: loop4: ino=21, "bus" The size of extended attributes must not exceed 64KiB
Stopping crond: stopped /usr/sbin/crond (pid 4011)
OK
[  399.058428][   T26] audit: type=1326 audit(2000000059.370:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15448 comm="syz.0.5025" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac999e559 code=0x7ffc0000
[  399.144271][   T26] audit: type=1326 audit(2000000059.370:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15448 comm="syz.0.5025" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac999e559 code=0x7ffc0000
[  399.228815][   T26] audit: type=1326 audit(2000000059.370:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15448 comm="syz.0.5025" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac999e559 code=0x7ffc0000
[  399.228864][   T26] audit: type=1326 audit(2000000059.420:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15448 comm="syz.0.5025" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f8ac999e559 code=0x7ffc0000
[  399.228899][   T26] audit: type=1326 audit(2000000059.420:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15448 comm="syz.0.5025" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac999e559 code=0x7ffc0000
[  399.228942][   T26] audit: type=1326 audit(2000000059.420:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15448 comm="syz.0.5025" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ac999e559 code=0x7ffc0000
[  399.228977][   T26] audit: type=1326 audit(2000000059.420:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15448 comm="syz.0.5025" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8ac999e559 code=0x7ffc0000
[  399.229012][   T26] audit: type=1326 audit(2000000059.420:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15448 comm="syz.0.5025" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8ac999e559 code=0x7ffc0000
[  399.434742][    C0] vkms_vblank_simulate: vblank timer overrun
[  399.552810][T15470] loop3: detected capacity change from 0 to 764
Stopping dhcpcd...
[  399.836685][T15479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5036'.
[  400.094380][   T26] audit: type=1326 audit(2000000060.410:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15488 comm="syz.3.5041" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbd2b9e559 code=0x7ffc0000
[  400.119135][    C0] vkms_vblank_simulate: vblank timer overrun
stopped /sbin/dhcpcd (pid 3933)
[  400.195832][   T26] audit: type=1326 audit(2000000060.450:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15488 comm="syz.3.5041" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7ffbd2b9e559 code=0x7ffc0000
Stopping network: [  400.822611][T15520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5053'.
[  400.922098][T15523] loop3: detected capacity change from 0 to 64
[  401.015838][T15529] ieee802154 phy0 wpan0: encryption failed: -22
[  401.115526][T15532] loop2: detected capacity change from 0 to 16
[  401.155499][T15532] erofs: (device loop2): mounted with root inode @ nid 36.
[  401.242550][T15532] erofs: (device loop2): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86
[  401.274703][T15532] erofs: (device loop2): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 86
[  401.393385][T15539] rxe_eth0 speed is unknown, defaulting to 1000
[  401.438082][T15542] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5062'.
[  401.489908][T15542] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5062'.
[  401.539251][T15542] netlink: 'syz.4.5062': attribute type 6 has an invalid length.
[  401.628306][T15550] openvswitch: netlink: Message has 4 unknown bytes.
[  401.877002][T15558] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5069'.
[  401.919833][T15558] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5069'.
[  402.257614][T15561] loop0: detected capacity change from 0 to 8192
[  402.347275][T15561] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  402.394459][T15561] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  402.436480][T15561] REISERFS (device loop0): using journaled data mode
[  402.486131][T15561] reiserfs: using flush barriers
[  402.539287][T15561] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  402.614759][T15588] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5080'.
[  402.624437][T15561] REISERFS (device loop0): checking transaction log (loop0)
[  402.669638][T15561] REISERFS (device loop0): Using tea hash to sort names
[  402.689415][T15588] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5080'.
[  402.704353][T15561] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  402.770759][T15561] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
OK
[  403.189452][T15603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5088'.
[  403.198414][T15603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5088'.
Stopping iptables: [  403.453653][T15614] loop0: detected capacity change from 0 to 8
OK
Stopping system message bus: [  404.402953][T15654] program syz.2.5108 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  404.921511][T15673] loop0: detected capacity change from 0 to 512
[  404.992144][T15673] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000902)
[  405.034290][T15673] FAT-fs (loop0): Filesystem has been set read-only
[  405.041726][T15680] tmpfs: Bad value for 'mpol'
[  405.129664][ T9620] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
done
[  405.365995][T15692] device ip6gre2 entered promiscuous mode
[  405.545038][T15700] loop1: detected capacity change from 0 to 1024
[  405.613331][T15700] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  405.766237][T15700] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  405.850401][T15713] netlink: 'syz.4.5132': attribute type 1 has an invalid length.
[  405.983613][ T4273] EXT4-fs (loop1): unmounting filesystem.
[  406.622103][T15741] loop2: detected capacity change from 0 to 64
[  406.639229][ T7331] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  406.687116][T15743] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (129)
[  406.839418][ T7331] usb 5-1: Using ep0 maxpacket: 16
[  406.846807][ T7331] usb 5-1: config index 0 descriptor too short (expected 51443, got 18)
[  406.890644][ T7331] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  406.919355][ T7331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  406.943837][ T7331] usb 5-1: Product: syz
[  406.967576][ T7331] usb 5-1: Manufacturer: syz
[  406.972679][ T7331] usb 5-1: SerialNumber: syz
[  406.992155][ T7331] r8152-cfgselector 5-1: config 0 descriptor??
[  407.194280][T15728] loop3: detected capacity change from 0 to 32768
[  407.214259][T15728] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.5138 (15728)
killall: can't kill pid 9575: No such process
[  407.317710][T15728] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  407.360094][T15728] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  407.389925][T15728] BTRFS info (device loop3): setting nodatasum
[  407.396240][T15728] BTRFS info (device loop3): force zlib compression, level 3
[  407.444684][T15728] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  407.456204][ T7331] r8152-cfgselector 5-1: Unknown version 0x0000
[  407.470049][ T7331] r8152-cfgselector 5-1: USB disconnect, device number 21
[  407.487520][T15728] BTRFS info (device loop3): use lzo compression, level 0
[  407.518115][T15728] BTRFS info (device loop3): turning on flush-on-commit
[  407.546980][T15728] BTRFS info (device loop3): enabling auto defrag
[  407.567521][T15728] BTRFS info (device loop3): max_inline at 4096
[  407.585665][T15728] BTRFS info (device loop3): using free space tree
Stopping klogd: [  407.682315][T15737] loop1: detected capacity change from 0 to 40427
[  407.703961][T15737] F2FS-fs (loop1): invalid crc value
[  407.722531][T15777] loop0: detected capacity change from 0 to 64
[  407.752761][T15737] F2FS-fs (loop1): Found nat_bits in checkpoint
[  407.768657][T15777] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  mounting read-only.
[  407.786017][T15728] BTRFS info (device loop3): enabling ssd optimizations
[  407.897161][T15737] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
OK
[  408.048129][T15791] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5156'.
[  408.100670][ T4284] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  408.172520][T15793] xt_policy: neither incoming nor outgoing policy selected
Stopping acpid: [  408.536295][T15800] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  408.617881][T15803] netlink: 12296 bytes leftover after parsing attributes in process `syz.4.5164'.
[  408.655016][T15803] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5164'.
[  409.155029][T15818] loop0: detected capacity change from 0 to 2048
[  409.198297][T15818] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  409.569286][T15843] loop2: detected capacity change from 0 to 64
[  409.666595][T15849] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5184'.
OK
Stopping syslogd: stopped /sbin/syslogd (pid 3621)
OK
[  410.765730][T15897] loop4: detected capacity change from 0 to 2048
[  410.845725][T15897] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  411.139546][ T4364] usb 1-1: new high-speed USB device number 18 using dummy_hcd
umount: can't remount debugfs read-only
[  411.369430][ T4364] usb 1-1: Using ep0 maxpacket: 16
[  411.377262][ T4364] usb 1-1: unable to get BOS descriptor or descriptor too short
[  411.410593][ T4364] usb 1-1: config 1 has an invalid interface number: 151 but max is 0
[  411.448715][ T4364] usb 1-1: config 1 has no interface number 0
[  411.465195][ T4364] usb 1-1: config 1 interface 151 has no altsetting 0
[  411.502454][ T4364] usb 1-1: string descriptor 0 read error: -22
[  411.535603][ T4364] usb 1-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85
[  411.565547][ T4364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.599315][ T4364] gspca_main: pac7311-2.14.0 probing 093a:260e
[  412.010481][ T4364] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71
[  412.018417][ T4364] pac7311: probe of 1-1:1.151 failed with error -71
[  412.055807][ T4364] usb 1-1: USB disconnect, device number 18
[  412.498514][T15937] loop2: detected capacity change from 0 to 32768
[  412.539581][T15937] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.5226 (15937)
[  412.602385][T15937] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  412.650599][T15937] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  412.679689][T15937] BTRFS info (device loop2): setting nodatasum
[  412.685923][T15937] BTRFS info (device loop2): force zlib compression, level 3
[  412.719393][T15937] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  412.729352][T15937] BTRFS info (device loop2): use lzo compression, level 0
[  412.761159][T15937] BTRFS info (device loop2): turning on flush-on-commit
[  412.768183][T15937] BTRFS info (device loop2): enabling auto defrag
[  412.792536][T15942] loop1: detected capacity change from 0 to 32768
[  412.809283][T15937] BTRFS info (device loop2): max_inline at 4096
[  412.815997][T15937] BTRFS info (device loop2): using free space tree
[  412.824284][T15942] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.5228 (15942)
[  412.862125][T15942] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  412.901253][T15942] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  412.925000][T15942] BTRFS info (device loop1): enabling ssd optimizations
[  412.939487][T15942] BTRFS info (device loop1): not using ssd optimizations
[  412.979428][T15942] BTRFS info (device loop1): turning off barriers
[  412.985947][T15942] BTRFS info (device loop1): use no compression
[  413.067012][T15942] BTRFS info (device loop1): using free space tree
[  413.089300][T15937] BTRFS info (device loop2): enabling ssd optimizations
umount: sysfs busy - remounted read-only
umount: devtmpfs busy - remounted read-only
umount: can't remount /dev/root read-only
The system is going down NOW!
Sent SIGTERM to all processes
[  413.432157][ T4276] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
Connection to 10.128.0.57 closed by remote host.
[  413.843318][T15942] BTRFS error (device loop1): open_ctree failed: -22
Sent SIGKILL to all processes
Requesting system poweroff
[  415.903397][T16004] kvm: exiting hardware virtualization
[  415.926708][T16004] smc: removing ib device rxe0
[  415.941619][T16004] smc: removing ib device syz0
[  415.970839][T16004] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[  415.985841][T16004] ACPI: PM: Preparing to enter system sleep state S5
[  415.996441][T16004] reboot: Power down
serialport: VM disconnected.