last executing test programs:

4.70311152s ago: executing program 1 (id=6823):
r0 = add_key$keyring(&(0x7f0000000380), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000b00)="1081d9", 0x3, r0)

4.39312256s ago: executing program 1 (id=6827):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x38, 0x0, &(0x7f00000001c0))

4.167088133s ago: executing program 1 (id=6831):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$inet_int(r0, 0x0, 0x31, &(0x7f0000000ec0)=0x1, 0x4)

3.907740844s ago: executing program 1 (id=6835):
r0 = syz_open_dev$media(&(0x7f00000001c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.640672395s ago: executing program 1 (id=6838):
syz_mount_image$jfs(&(0x7f0000000180), &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x3200012, &(0x7f0000000280)=ANY=[], 0xff, 0x61b5, &(0x7f000000c780)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)

2.509217735s ago: executing program 4 (id=6853):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x1c, 0x40, 0x119, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

2.254330601s ago: executing program 0 (id=6855):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ec00df2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20004000)

2.183873234s ago: executing program 4 (id=6858):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

1.868457036s ago: executing program 0 (id=6860):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0xc, "aa"}, {0x18, 0x110, 0x1, '\x00'}], 0x30}, 0x0)

1.816578368s ago: executing program 4 (id=6861):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, 0x0, 0x0)

1.812159522s ago: executing program 1 (id=6863):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

1.684268691s ago: executing program 0 (id=6865):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x60200, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x1000, 0x280, 0x1000, 0x6, 0x1, 0x0, {0x0, 0x9, 0x1}, {0x4000350, 0x20002, 0xfffffffd}, {0xf4ef}, {0x4000005, 0x400, 0x1}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x4})

1.560522881s ago: executing program 2 (id=6867):
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x800000, &(0x7f0000000040)=ANY=[], 0xa, 0x238, &(0x7f0000000100)="$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")
symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00')

1.491939372s ago: executing program 4 (id=6868):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="0500000004000000080000000500000008"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x9, r0}, 0x38)

1.477928465s ago: executing program 3 (id=6869):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@setlink={0x1a, 0x13, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x25a00, 0x8468}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}, @IFLA_NET_NS_PID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x10)

1.354407709s ago: executing program 5 (id=6870):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)="d8000000210081044e81f782db44b904020000000080000000001500100014000000000009000d2000000401a8000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb7916c3a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701002c5ceafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92954b43370e9701002203", 0xd8}], 0x1}, 0x0)

1.230934573s ago: executing program 4 (id=6871):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40)

1.223225221s ago: executing program 2 (id=6872):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff01c}, {0x6, 0x80}]}, 0x10)

1.108511211s ago: executing program 3 (id=6873):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xec}}, 0x0)

1.071026601s ago: executing program 5 (id=6874):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001ec0), 0x2003, 0x0)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000180))

944.814316ms ago: executing program 4 (id=6875):
r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f000000ac40)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR")
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000002280)={0x0, 0x0, "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", "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"})

918.055288ms ago: executing program 5 (id=6876):
r0 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\''], 0x28}}, 0x0)

911.685449ms ago: executing program 2 (id=6877):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)

906.688042ms ago: executing program 0 (id=6878):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f00000000c0)=0x7fff, 0x4)

866.341512ms ago: executing program 3 (id=6879):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x300)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000001000)=""/91)

705.389329ms ago: executing program 3 (id=6880):
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x47, 0x0, &(0x7f00000000c0))

655.800153ms ago: executing program 5 (id=6881):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0)

634.481249ms ago: executing program 0 (id=6882):
r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x8000)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0)

623.959148ms ago: executing program 2 (id=6883):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000400)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x15, 0x3, 'rr\x00', 0x1, 0x3, 0x72}, 0x2c)

408.548479ms ago: executing program 5 (id=6884):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000001, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x980912})

370.085218ms ago: executing program 0 (id=6885):
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xa, {"a2e39b214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324d078b089b3b0838681a0890e0878f0e1ac6e7049b3d6d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b343b0d076c0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c30900004288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5676b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214020005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa3a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef7becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c3202000000000000009c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe505003d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6ae4effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd705d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664cc23cc37e719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d7475046a90381eb67a0f6eb6d279f2ae455925d71eba281f2a654fb395dff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399561488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b523900000000000000f165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d471c8ac32a4b8e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953c64d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949d9a92587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15aa82000000000000a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162fadcbf71a01484d2f9c55f4901203a9a8a2c2e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000970000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000", 0x4e}}, 0x69)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

359.835794ms ago: executing program 3 (id=6886):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x140d, 0x201, 0x70bd2a, 0x25dfd9fb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

358.381304ms ago: executing program 2 (id=6887):
syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdb1dd9467f5cd2d6c4e8b9d4f50d338ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESHEX=0x0], 0x11, 0x314, &(0x7f0000000b80)="$eJzs3U1rE08cB/Dv7KZN+m/pf7UVwYNINWAvovUiXiIlL8KTqE0KxSWitviAYBVPIvbu3aNXX4N4UQTP9eRJPHiqBxmZh2SfN6lmd1P9fsCy2dmZ/e3OzlPALIjon7Xa3n11/ov6JwAXLvDsIuAAaAA1AEdwtLHV29zY9LudvIJcHK+bXAImp0gcs9brpmVtwOawPPWphrnwPiqGlPLS56qDoMrp1i/d6M4Tuieo29apExsVxZfl8f6zfJsBsF1EMBMlv6bEHvZwD/OlhUNERBNJmPHdseP8nJ2/Ow7QtIOJSpu48f937VUdQOFkbmpo/NerLClUvf+vk4L1nl7CqXSnv0pMK+t17PNU7PM0zNMTmV2KYatKHYszs77hd8+s3fQ7Dp6gZYUOW9R/O/bxtCLR1hNFL6WsTXMMSpvJPESkzyhn9TVMqWtYMfHfBRCJfyH3jAUQ78QHcUV4eInOYP5Xk0JVk64pL1ZTJv6z2SXqq/TUUbDdRqvVciKHHNInOWbPYA25ygbcrDNO2zIjXxB4w+LUuQ7HcpmrOzck10JqrhW9vQwnI9diJJe6mvUN/232qUohXojLYglf8Qbt0PzfUfE1kWyZoYc+aDWiaYYCfcdV64zWbEitaXsiPXJsfdp9aPYnm8vgLiYbrPUjv0+jfXiO67iA+Tv3H9xwfb97W21c89XjqjcGe27N2Q2/O/UUCCdNyga2gz11SC1xcH9QKjOw5bEWqPqPlCTVsHrf+3tUKxtW4KM/jUf1A4XeutkRrmJ/G/2uazwFtt+P50HqTxsiST+llCU2oh17Z+JJ1XRLVK6g0kc7PmWqQwebqlJh1n/BeqVmJnvqj5c6Tx/xiwBbolRz7MEKLsgrzYwcwH85K7i0YjNXcMk1V2LNqNdcJ08Dp0Y/o2fj/EuINj7iKr//JyIiIiIiIiIiIiIiIiIiIiIiIiI6aMr4zzBVXyMRERERERERERERERERERERERERERER0UG32oD53Wv03/+L0d7/G38Vi2t+Enws7//d6YHv/yUq3q8AAAD///B/c8c=")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)

239.133546ms ago: executing program 5 (id=6888):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x8, 0x8})

88.12879ms ago: executing program 3 (id=6889):
r0 = socket(0x28, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}})

0s ago: executing program 2 (id=6890):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file1\x00', 0x14040, &(0x7f0000000040)=ANY=[], 0xff, 0x5ec9, &(0x7f00000097c0)="$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")
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='./bus\x00')

kernel console output (not intermixed with test programs):

 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  540.118445][T18385] RSP: 002b:00007fc3c1902028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  540.118481][T18385] RAX: ffffffffffffffda RBX: 00007fc3c0c15fa0 RCX: 00007fc3c099ce59
[  540.118508][T18385] RDX: ffffffffff60014a RSI: 0000000000006f2d RDI: 0000000000000003
[  540.118533][T18385] RBP: 00007fc3c0a32d6f R08: 0000000000000000 R09: 0000000000000000
[  540.118558][T18385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  540.118582][T18385] R13: 00007fc3c0c16038 R14: 00007fc3c0c15fa0 R15: 00007ffe83451338
[  540.118623][T18385]  ? __UNIQUE_ID_modinfo_717+0x63e5a3c8/0xffffffffffeca27e
[  540.118678][T18385]  </TASK>
[  540.509910][T18385] Mem-Info:
[  540.526893][T18385] active_anon:13036 inactive_anon:7 isolated_anon:0
[  540.526893][T18385]  active_file:14192 inactive_file:4451 isolated_file:0
[  540.526893][T18385]  unevictable:768 dirty:608 writeback:0
[  540.526893][T18385]  slab_reclaimable:11433 slab_unreclaimable:103169
[  540.526893][T18385]  mapped:37247 shmem:6473 pagetables:1439
[  540.526893][T18385]  sec_pagetables:0 bounce:0
[  540.526893][T18385]  kernel_misc_reclaimable:0
[  540.526893][T18385]  free:1318653 free_pcp:10946 free_cma:0
[  540.633851][T18385] Node 0 active_anon:53056kB inactive_anon:28kB active_file:56768kB inactive_file:17632kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:149872kB dirty:2232kB writeback:0kB shmem:25304kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12608kB pagetables:5624kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  540.648038][ T5634] usb 4-1: USB disconnect, device number 21
[  540.670215][T18385] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  540.707935][T18385] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  540.738149][T18385] lowmem_reserve[]: 0 2477 2478 2478 2478
[  540.744107][T18385] Node 0 DMA32 free:1326352kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53856kB inactive_anon:28kB active_file:56768kB inactive_file:17632kB unevictable:1536kB writepending:2232kB zspages:0kB present:3129332kB managed:2537180kB mlocked:0kB bounce:0kB free_pcp:27964kB local_pcp:11088kB free_cma:0kB
[  540.778404][T18385] lowmem_reserve[]: 0 0 1 1 1
[  540.783493][T18385] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1096kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  540.818851][T18385] lowmem_reserve[]: 0 0 0 0 0
[  540.823723][T18385] Node 1 Normal free:3932888kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:14344kB local_pcp:6144kB free_cma:0kB
[  540.862231][T18385] lowmem_reserve[]: 0 0 0 0 0
[  540.867058][T18385] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  540.880229][T18385] Node 0 DMA32: 4018*4kB (UE) 3171*8kB (UM) 1741*16kB (UM) 585*32kB (UM) 341*64kB (UM) 598*128kB (UME) 389*256kB (UM) 264*512kB (UME) 134*1024kB (UME) 47*2048kB (UM) 164*4096kB (UM) = 1326352kB
[  540.899671][T18385] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  540.912542][T18385] Node 1 Normal: 6*4kB (UM) 10*8kB (UM) 13*16kB (UM) 9*32kB (UM) 12*64kB (UM) 9*128kB (UM) 5*256kB (UM) 4*512kB (UM) 1*1024kB (M) 3*2048kB (UM) 957*4096kB (UM) = 3932888kB
[  540.930189][T18385] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  540.939867][T18385] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  540.949208][T18385] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  540.958948][T18385] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  540.968647][T18385] 26080 total pagecache pages
[  540.973443][T18385] 0 pages in swap cache
[  540.977607][T18385] Free swap  = 124996kB
[  540.981820][T18385] Total swap = 124996kB
[  540.986016][T18385] 2097051 pages RAM
[  540.990033][T18385] 0 pages HighMem/MovableOnly
[  540.994749][T18385] 430867 pages reserved
[  540.998939][T18385] 0 pages cma reserved
[  541.085202][T18363] loop0: detected capacity change from 0 to 32768
[  541.177596][T18363] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  541.220437][T18407] ubi: mtd0 is already attached to ubi31
[  541.274935][T18406] loop2: detected capacity change from 0 to 4096
[  541.349310][T18363] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  541.434423][T18363] XFS (loop0): Starting recovery (logdev: internal)
[  541.497810][T18412] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  541.551559][T18363] XFS (loop0): Ending recovery (logdev: internal)
[  541.643968][T18363] XFS (loop0): Metadata corruption detected at xfs_inobt_verify+0xa1/0x230, xfs_finobt block 0x8 
[  541.674692][T18363] XFS (loop0): Unmount and run xfs_repair
[  541.689261][T18363] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  541.726995][T18363] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  541.767984][T18363] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  541.801014][T18363] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  541.841589][T18363] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02  ......1....N....
[  541.900151][T18363] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  541.919566][T18363] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  541.920038][T18423] netlink: 'syz.4.5416': attribute type 1 has an invalid length.
[  541.938116][T18363] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  541.964877][T18363] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  541.994809][T18363] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x24e/0x520" at daddr 0x8 len 8 error 117
[  542.135574][ T5631] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  542.184503][ T5631] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair.
[  542.202026][T18430] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  542.596497][T18440] loop4: detected capacity change from 0 to 2048
[  542.678657][T18440] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  542.854050][T18444] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5430'.
[  543.477478][T18432] loop1: detected capacity change from 0 to 32768
[  543.526088][T18432] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  543.565956][T18432] JBD2: Ignoring recovery information on journal
[  543.779027][T18432] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  544.107777][T18486] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5447'.
[  544.411770][ T5630] ocfs2: Unmounting device (7,1) on (node local)
[  544.455927][T18498] loop5: detected capacity change from 0 to 16
[  545.388778][T18531] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  545.452544][T18529] netlink: set zone limit has 4 unknown bytes
[  546.005177][T18549] loop2: detected capacity change from 0 to 64
[  546.715386][T18574] loop1: detected capacity change from 0 to 1764
[  546.844957][T18579] loop3: detected capacity change from 0 to 1764
[  547.151806][T18587] loop0: detected capacity change from 0 to 4096
[  547.152660][T18585] loop2: detected capacity change from 0 to 4096
[  547.216661][T18594] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  547.239235][T18593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5501'.
[  547.323462][T18585] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  547.335188][T18591] loop4: detected capacity change from 0 to 4096
[  547.375779][T18591] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  547.380323][ T5850] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  547.418451][T18591] ntfs3(loop4): ino=3, mi_enum_attr
[  547.452534][T18585] ntfs3(loop2): Failed to load $Extend (-22).
[  547.484376][T18585] ntfs3(loop2): Failed to initialize $Extend.
[  547.569206][T18591] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[  547.609925][ T5850] usb 2-1: Using ep0 maxpacket: 8
[  547.651386][ T5850] usb 2-1: config 0 has an invalid interface number: 137 but max is 0
[  547.687893][ T5850] usb 2-1: config 0 has no interface number 0
[  547.687934][T18591] ntfs3(loop4): ino=1e, mi_enum_attr
[  547.717177][ T5850] usb 2-1: config 0 interface 137 altsetting 1 has an endpoint descriptor with address 0x11, changing to 0x1
[  547.786524][ T5850] usb 2-1: config 0 interface 137 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  547.845599][ T5850] usb 2-1: config 0 interface 137 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  547.893649][ T5850] usb 2-1: config 0 interface 137 has no altsetting 0
[  547.927659][ T5850] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=32.10
[  547.928382][T18606] netlink: zone id is out of range
[  547.960449][T18606] netlink: del zone limit has 4 unknown bytes
[  547.967123][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  547.999169][ T5850] usb 2-1: Product: syz
[  548.005595][ T5850] usb 2-1: Manufacturer: syz
[  548.022480][ T5850] usb 2-1: SerialNumber: syz
[  548.033587][T18608] loop0: detected capacity change from 0 to 64
[  548.047696][ T5850] usb 2-1: config 0 descriptor??
[  548.086475][ T5850] xbox_remote_probe: Unexpected endpoint_in
[  548.090804][ T5634] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  548.293175][ T5634] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  548.329323][ T5634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  548.376010][ T5634] usb 4-1: config 0 descriptor??
[  548.413318][ T5634] cp210x 4-1:0.0: cp210x converter detected
[  548.423868][ T5850] usb 2-1: USB disconnect, device number 32
[  548.830611][ T5634] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -71
[  548.844650][ T5634] cp210x 4-1:0.0: GPIO initialisation failed: -71
[  548.879685][ T5634] usb 4-1: cp210x converter now attached to ttyUSB0
[  548.927771][ T5634] usb 4-1: USB disconnect, device number 22
[  548.949736][ T5634] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  548.985223][ T5634] cp210x 4-1:0.0: device disconnected
[  549.105722][T18638] x_tables: ip_tables: icmp.0 match: invalid size 8 (kernel) != (user) 56
[  549.373564][T18644] loop1: detected capacity change from 0 to 256
[  549.396070][T18644] exfat: Deprecated parameter 'namecase'
[  549.450310][T18644] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  549.843539][T18655] loop5: detected capacity change from 0 to 64
[  549.922967][T18659] netlink: 'syz.0.5532': attribute type 1 has an invalid length.
[  549.962048][T18659] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5532'.
[  550.012810][T18665] ieee802154 phy0 wpan0: encryption failed: -22
[  550.254827][T18668] loop4: detected capacity change from 0 to 64
[  550.809007][T18688] loop5: detected capacity change from 0 to 8
[  550.902142][T18688] SQUASHFS error: Unable to read directory block [2c0:35]
[  550.934181][T18688] SQUASHFS error: Unable to read directory block [2c0:35]
[  551.120976][ T5850] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  551.269164][T18704] netlink: 'syz.4.5555': attribute type 3 has an invalid length.
[  551.285316][T18704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5555'.
[  551.307628][T18707] netlink: 'syz.2.5556': attribute type 21 has an invalid length.
[  551.324051][T18707] IPv6: NLM_F_CREATE should be specified when creating new route
[  551.324201][ T5850] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  551.360001][ T5850] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3
[  551.379309][ T5850] usb 2-1: config 220 interface 0 has no altsetting 0
[  551.399639][ T5850] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  551.411611][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  551.441483][ T5850] usb 2-1: Product: syz
[  551.454211][ T5850] usb 2-1: Manufacturer: syz
[  551.477757][ T5850] usb 2-1: SerialNumber: syz
[  551.520005][T18713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5559'.
[  551.532473][ T5634] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  551.710045][ T5634] usb 6-1: Using ep0 maxpacket: 16
[  551.717308][   T30] audit: type=1326 audit(1779055845.387:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18718 comm="syz.4.5563" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676bf9ce59 code=0x7ffc0000
[  551.733936][ T5634] usb 6-1: unable to get BOS descriptor or descriptor too short
[  551.784894][ T5850] uvcvideo 2-1:220.0: probe with driver uvcvideo failed with error -22
[  551.788523][ T5634] usb 6-1: config 1 has an invalid interface number: 151 but max is 0
[  551.813909][ T5850] usb 2-1: USB disconnect, device number 33
[  551.833055][   T30] audit: type=1326 audit(1779055845.387:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18718 comm="syz.4.5563" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676bf9ce59 code=0x7ffc0000
[  551.851722][ T5634] usb 6-1: config 1 has no interface number 0
[  551.911294][   T30] audit: type=1326 audit(1779055845.387:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18718 comm="syz.4.5563" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f676bf9ce59 code=0x7ffc0000
[  551.913290][ T5634] usb 6-1: config 1 interface 151 has no altsetting 0
[  552.016749][   T30] audit: type=1326 audit(1779055845.387:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18718 comm="syz.4.5563" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676bf9ce59 code=0x7ffc0000
[  552.062163][ T5634] usb 6-1: string descriptor 0 read error: -22
[  552.068699][ T5634] usb 6-1: New USB device found, idVendor=093a, idProduct=260e, bcdDevice=18.85
[  552.076554][   T30] audit: type=1326 audit(1779055845.387:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18718 comm="syz.4.5563" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f676bf9ce59 code=0x7ffc0000
[  552.111244][ T5634] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.167923][ T5634] gspca_main: pac7311-2.14.0 probing 093a:260e
[  552.491580][ T5850] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  552.591698][ T5634] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71
[  552.606244][ T5634] pac7311 6-1:1.151: probe with driver pac7311 failed with error -71
[  552.648159][ T5634] usb 6-1: USB disconnect, device number 25
[  552.675514][ T5850] usb 4-1: config 2 has an invalid interface number: 97 but max is 0
[  552.684579][ T5850] usb 4-1: config 2 has no interface number 0
[  552.691743][ T5850] usb 4-1: config 2 interface 97 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64
[  552.702502][ T5850] usb 4-1: config 2 interface 97 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 64
[  552.725518][ T5850] usb 4-1: config 2 interface 97 has no altsetting 0
[  552.768095][ T5850] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  552.792333][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.818256][ T5850] usb 4-1: Product: syz
[  552.828441][ T5850] usb 4-1: Manufacturer: syz
[  552.834236][ T5850] usb 4-1: SerialNumber: syz
[  552.878966][T18735] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  552.912606][T18735] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  552.957240][T18753] ieee802154 phy0 wpan0: encryption failed: -22
[  553.178348][ T5850] usb-storage 4-1:2.97: USB Mass Storage device detected
[  553.225681][ T5850] usb-storage 4-1:2.97: Quirks match for vid 04e6 pid 000b: 4
[  553.267360][ T5850] scsi host1: usb-storage 4-1:2.97
[  553.386909][ T5850] usb 4-1: USB disconnect, device number 23
[  553.561697][ T5807] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  553.603492][T18773] loop1: detected capacity change from 0 to 64
[  553.687648][T18777] xt_NFQUEUE: number of total queues is 0
[  553.751943][ T5807] usb 1-1: Using ep0 maxpacket: 16
[  553.797187][ T5807] usb 1-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01
[  553.837138][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.868781][ T5807] usb 1-1: Product: syz
[  553.883089][ T5807] usb 1-1: Manufacturer: syz
[  553.901539][ T5807] usb 1-1: SerialNumber: syz
[  553.922415][ T5807] usb 1-1: config 0 descriptor??
[  553.957181][ T5807] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected.
[  554.170792][ T5807] pwc: Warning: more than 1 configuration available.
[  554.203920][ T5807] pwc: Failed to set LED on/off time (-71)
[  554.231613][ T5807] pwc: send_video_command error -71
[  554.253397][ T5807] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  554.288402][ T5807] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71
[  554.344432][ T5807] usb 1-1: USB disconnect, device number 32
[  554.351641][T18792] loop1: detected capacity change from 0 to 4096
[  554.388437][T18792] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  554.428259][T18792] ntfs3(loop1): ino=3, mi_enum_attr
[  554.480750][T18792] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  554.606101][T18792] ntfs3(loop1): ino=1e, mi_enum_attr
[  554.680484][T18810] loop2: detected capacity change from 0 to 64
[  554.728308][T18810] minix: block size(59136) > page size(4096) not supported by filesystem
[  554.787132][T18808] loop4: detected capacity change from 0 to 2048
[  554.842709][T18810] Trying to free block not in datazone
[  554.891872][T18810] Trying to free block not in datazone
[  554.897433][T18808] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  554.924847][T18810] Trying to free block not in datazone
[  554.952135][T18810] Trying to free block not in datazone
[  555.068157][T18817] loop0: detected capacity change from 0 to 64
[  555.491635][T18826] loop4: detected capacity change from 0 to 2048
[  555.578236][T18826] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  555.720953][   T30] audit: type=1800 audit(1779055849.397:124): pid=18826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5604" name="file1" dev="loop4" ino=1367 res=0 errno=0
[  555.794864][T18836] loop2: detected capacity change from 0 to 1024
[  556.158226][T18848] new mount options do not match the existing superblock, will be ignored
[  556.178259][T18845] loop5: detected capacity change from 0 to 2048
[  556.229170][T18845] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  557.168709][T18879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5626'.
[  557.172427][T18878] loop1: detected capacity change from 0 to 256
[  557.519112][T18890] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5631'.
[  557.664996][ T5807] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  557.833266][T18894] loop1: detected capacity change from 0 to 4096
[  557.837378][ T5807] usb 6-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd
[  557.887103][T18894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  557.905254][ T5807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.957397][ T5807] usb 6-1: Product: syz
[  557.964332][T18894] Quota error (device loop1): do_check_range: Getting block 1024 out of range 0-5
[  557.993925][ T5807] usb 6-1: Manufacturer: syz
[  558.028814][ T5807] usb 6-1: SerialNumber: syz
[  558.042788][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  558.093316][ T5807] usb 6-1: config 0 descriptor??
[  558.118937][ T5634] Process accounting resumed
[  558.224699][ T5638] Bluetooth: hci6: urb ffff88805087a800 submission failed (2)
[  558.416863][ T5807] usb 6-1: USB disconnect, device number 26
[  558.622080][T18922] loop0: detected capacity change from 0 to 1024
[  558.791969][T18922] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[  558.820594][T18922] hfsplus: xattr search failed
[  558.870131][T15766] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  559.042561][T15766] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  559.094624][T15766] usb 2-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50
[  559.137161][T15766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.182411][T15766] usb 2-1: Product: syz
[  559.198060][T15766] usb 2-1: Manufacturer: syz
[  559.212666][T15766] usb 2-1: SerialNumber: syz
[  559.261105][T18937] AppArmor: change_hat: Invalid input '0'
[  559.475766][T15766] gspca_main: jl2005bcd-2.14.0 probing 0979:0227
[  559.531654][T15766] command write [95] error -22
[  559.564608][T18921] loop2: detected capacity change from 0 to 32768
[  559.582898][T18921] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5646 (18921)
[  559.643542][T18921] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  559.653010][T15766] usb 2-1: USB disconnect, device number 34
[  559.695164][T18921] BTRFS info (device loop2): using sha256 checksum algorithm
[  559.866349][T18921] BTRFS info (device loop2): enabling ssd optimizations
[  559.901343][T18921] BTRFS info (device loop2): turning on async discard
[  559.944935][T18921] BTRFS info (device loop2): enabling free space tree
[  560.297731][ T5629] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  561.101949][T19005] loop1: detected capacity change from 0 to 64
[  561.325907][T19009] loop5: detected capacity change from 0 to 8
[  561.351168][T19009] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  561.389770][T19007] loop2: detected capacity change from 0 to 1024
[  561.446509][T19009] cramfs: Error -3 while decompressing!
[  561.453716][T11318] udevd[11318]: incorrect cramfs checksum on /dev/loop5
[  561.476150][T19007] hfsplus: failed to extend attributes file
[  561.497203][T19009] cramfs: ffffffff9b27d8a8(26)->ffff88806b8fc000(4096)
[  561.525387][T19009] cramfs: Error -5 while decompressing!
[  561.551507][T19009] cramfs: ffffffff9b27d8c2(26)->ffff8880817c4000(4096)
[  561.561278][T19009] cramfs: Error 2 while decompressing!
[  561.597513][T19009] cramfs: ffffffff9b27d8dc(16)->ffff88806dbb4000(4096)
[  561.618580][T11318] udevd[11318]: incorrect cramfs checksum on /dev/loop5
[  561.648721][T19009] cramfs: Error -3 while decompressing!
[  561.690443][T19009] cramfs: ffffffff9b27d8a8(26)->ffff88806b8fc000(4096)
[  561.735050][   T30] audit: type=1800 audit(1779055855.407:125): pid=19009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5682" name="file2" dev="loop5" ino=348 res=0 errno=0
[  561.845718][T19019] bridge_slave_1: left allmulticast mode
[  561.877935][T19019] bridge_slave_1: left promiscuous mode
[  561.901374][T19019] bridge0: port 2(bridge_slave_1) entered disabled state
[  561.956863][T19019] bridge_slave_0: left allmulticast mode
[  561.966138][T19022] loop2: detected capacity change from 0 to 2048
[  561.971616][T19019] bridge_slave_0: left promiscuous mode
[  561.996993][T19019] bridge0: port 1(bridge_slave_0) entered disabled state
[  562.026029][T19022] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  562.043841][T19022] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  562.200370][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  562.208411][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  562.602737][T19039] syz_tun: entered allmulticast mode
[  562.761561][T15766] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  562.950145][T15766] usb 3-1: Using ep0 maxpacket: 8
[  562.963545][T15766] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[  562.979908][T15766] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  563.009651][T15766] usb 3-1: config 0 has no interface number 0
[  563.035958][T15766] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  563.081613][T15766] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  563.117102][T15766] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  563.170673][T19058] ip6t_srh: unknown srh match flags  5F28
[  563.176744][T15766] usb 3-1: config 0 interface 52 has no altsetting 0
[  563.203835][T15766] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00
[  563.237600][T15766] usb 3-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34
[  563.266940][T15766] usb 3-1: Product: syz
[  563.285911][T15766] usb 3-1: SerialNumber: syz
[  563.313485][T15766] usb 3-1: config 0 descriptor??
[  563.501327][T19066] overlay: Unknown parameter '/'
[  563.580924][T15766] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  563.616324][T15766] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -5
[  563.890688][T15766] usb 3-1: USB disconnect, device number 22
[  564.338051][T19063] loop4: detected capacity change from 0 to 32768
[  564.375082][T19063] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5707 (19063)
[  564.444839][T19063] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  564.477948][T19063] BTRFS info (device loop4): using sha256 checksum algorithm
[  564.685157][T19063] BTRFS info (device loop4): enabling ssd optimizations
[  564.695298][T19063] BTRFS info (device loop4): turning on async discard
[  564.705420][T19063] BTRFS info (device loop4): enabling free space tree
[  564.900656][T19113] xt_l2tp: v2 doesn't support IP mode
[  564.979615][ T5632] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  565.076546][T19119] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  565.113467][T19119] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  565.144142][T19119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5728'.
[  565.255904][T19124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5729'.
[  565.263520][T19125] netlink: 'syz.3.5732': attribute type 2 has an invalid length.
[  565.329624][T19124] openvswitch: netlink: Missing key (keys=40, expected=80)
[  565.416544][T19127] loop5: detected capacity change from 0 to 764
[  565.500932][T19127] Symlink component flag not implemented
[  565.542890][T19127] Symlink component flag not implemented (122)
[  565.770207][   T29] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[  565.949384][T19141] veth2: entered allmulticast mode
[  565.961835][   T29] usb 2-1: not running at top speed; connect to a high speed hub
[  566.017582][   T29] usb 2-1: config 65 has an invalid descriptor of length 0, skipping remainder of the config
[  566.045559][   T29] usb 2-1: config 65 has 2 interfaces, different from the descriptor's value: 3
[  566.093820][   T29] usb 2-1: too many endpoints for config 65 interface 1 altsetting 255: 255, using maximum allowed: 30
[  566.141224][   T29] usb 2-1: config 65 interface 1 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  566.198014][   T29] usb 2-1: config 65 interface 1 has no altsetting 0
[  566.214895][T19143] loop0: detected capacity change from 0 to 1764
[  566.220595][T19147] netlink: 'syz.3.5742': attribute type 11 has an invalid length.
[  566.238641][   T29] usb 2-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40
[  566.259631][   T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.298679][   T29] usb 2-1: Product: syz
[  566.319320][   T29] usb 2-1: Manufacturer: syz
[  566.341286][   T29] usb 2-1: SerialNumber: syz
[  566.425418][T19143] iso9660: Corrupted directory entry in block 14 of inode 1920
[  566.440979][   T29] usb 2-1: 0:2 : does not exist
[  566.453486][   T29] usb 2-1: unit 130 not found!
[  566.751536][T19162] netlink: 'syz.4.5749': attribute type 1 has an invalid length.
[  566.768739][T19162] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  566.847603][   T29] usb 2-1: USB disconnect, device number 35
[  567.014755][T19169] openvswitch: netlink: EtherType 50a is less than min 600
[  567.142353][T11318] udevd[11318]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:65.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  567.204566][T19173] loop0: detected capacity change from 0 to 16
[  567.313440][T19176] loop5: detected capacity change from 0 to 256
[  567.326787][T19173] erofs (device loop0): mounted with root inode @ nid 36.
[  567.334531][T19177] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  567.368289][T19176] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  567.464344][T19176] exFAT-fs (loop5): valid_size(150994954) is greater than size(10)
[  567.620146][T19173] erofs (device loop0): inline data across blocks @ nid 86
[  567.662473][T19185] netlink: 'syz.3.5759': attribute type 10 has an invalid length.
[  567.742807][T19173] erofs (device loop0): inline data across blocks @ nid 86
[  567.797125][T19185] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  567.838225][T19185] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  567.872408][T19188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5760'.
[  568.061653][T19196] netlink: 'syz.5.5765': attribute type 1 has an invalid length.
[  568.083762][T19196] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  568.450365][   T29] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[  568.623439][   T29] usb 3-1: config 0 has an invalid interface number: 175 but max is 0
[  568.655477][   T29] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  568.697930][   T29] usb 3-1: config 0 has no interface number 0
[  568.720144][   T29] usb 3-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C
[  568.757436][   T29] usb 3-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10
[  568.797147][   T29] usb 3-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  568.834790][   T29] usb 3-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16
[  568.897586][   T29] usb 3-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b
[  568.925496][   T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.963567][   T29] usb 3-1: Product: syz
[  568.978086][   T29] usb 3-1: Manufacturer: syz
[  568.996139][   T29] usb 3-1: SerialNumber: syz
[  569.017741][   T29] usb 3-1: config 0 descriptor??
[  569.045612][   T29] symbolserial 3-1:0.175: symbol converter detected
[  569.083534][   T29] usb 3-1: symbol converter now attached to ttyUSB0
[  569.290935][T19227] loop5: detected capacity change from 0 to 1024
[  569.339388][T19205] loop1: detected capacity change from 0 to 32768
[  569.359509][T19226] ip6gre1: entered promiscuous mode
[  569.374089][T19205] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.5769 (19205)
[  569.397918][T19226] ip6gre1: entered allmulticast mode
[  569.430950][   T29] usb 3-1: USB disconnect, device number 23
[  569.457335][T19205] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  569.487269][   T29] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0
[  569.511654][T19205] BTRFS info (device loop1): using sha256 checksum algorithm
[  569.533275][   T29] symbolserial 3-1:0.175: device disconnected
[  569.833614][T19205] BTRFS info (device loop1): enabling ssd optimizations
[  569.862910][T19205] BTRFS info (device loop1): turning on async discard
[  569.898188][T19205] BTRFS info (device loop1): enabling free space tree
[  570.037117][ T5630] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  570.048211][T15766] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  570.237757][T19261] x_tables: unsorted underflow at hook 3
[  570.243792][T15766] usb 4-1: Using ep0 maxpacket: 16
[  570.267928][T15766] usb 4-1: unable to get BOS descriptor or descriptor too short
[  570.294702][T15766] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 188, changing to 7
[  570.347832][T15766] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 72, changing to 7
[  570.401615][T15766] usb 4-1: string descriptor 0 read error: -22
[  570.416138][T15766] usb 4-1: New USB device found, idVendor=047f, idProduct=c010, bcdDevice= 0.40
[  570.452557][T15766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  570.741166][T15766] usb 4-1: BAAD HEADPHONE p_chmask mismatch
[  570.894465][T19274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5795'.
[  571.002731][T15766] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  571.105072][T15766] usb 4-1: USB disconnect, device number 24
[  572.033543][T19309] loop5: detected capacity change from 0 to 16
[  572.090747][T19309] erofs (device loop5): mounted with root inode @ nid 36.
[  572.616663][T19330] loop4: detected capacity change from 0 to 16
[  572.647625][T19330] erofs (device loop4): dirblkbits 7 isn't supported
[  572.857317][T19335] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  573.047631][T19341] loop4: detected capacity change from 0 to 764
[  573.164809][T19341] Symlink component flag not implemented
[  573.199491][T19341] Symlink component flag not implemented
[  573.296136][T19351] netlink: 'syz.5.5834': attribute type 1 has an invalid length.
[  573.867760][T19365] loop2: detected capacity change from 0 to 256
[  573.942989][T19365] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x614dc512, utbl_chksum : 0xe619d30d)
[  574.093808][T19365] exFAT-fs (loop2): valid_size(9000) is greater than size(0)
[  574.261365][T15766] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  574.442921][T15766] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  574.461975][T19382] openvswitch: netlink: Key type 51 is out of range max 32
[  574.482755][T15766] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  574.510477][T15766] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  574.548260][T15766] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  574.574637][T15766] usb 4-1: config 1 has no interface number 0
[  574.602536][T15766] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  574.631066][T15766] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  574.676188][T15766] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  574.888542][T15766] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values
[  574.906640][T19396] netlink: 'syz.5.5856': attribute type 10 has an invalid length.
[  574.919588][T15766] snd_usb_pod 4-1:1.1: invalid control EP
[  574.937353][T15766] snd_usb_pod 4-1:1.1: cannot start listening: -22
[  574.952422][T19396] team0: Device veth0_vlan failed to register rx_handler
[  574.953464][T15766] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  574.973211][   T29] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  574.986866][T15766] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22
[  575.150194][   T29] usb 2-1: Using ep0 maxpacket: 16
[  575.158800][T15766] usb 4-1: USB disconnect, device number 25
[  575.167199][   T29] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  575.191091][   T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  575.220535][   T29] usb 2-1: config 0 has no interface number 0
[  575.234356][   T29] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  575.251726][   T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  575.269090][   T29] usb 2-1: Product: syz
[  575.274255][T19407] netlink: 'syz.5.5862': attribute type 1 has an invalid length.
[  575.290173][   T29] usb 2-1: Manufacturer: syz
[  575.302453][T19407] netlink: 248 bytes leftover after parsing attributes in process `syz.5.5862'.
[  575.313249][   T29] usb 2-1: SerialNumber: syz
[  575.338991][   T29] usb 2-1: config 0 descriptor??
[  575.344653][   T24] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  575.496604][T19413] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  575.510294][   T24] usb 1-1: Using ep0 maxpacket: 16
[  575.524455][   T24] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  575.548184][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  575.580811][   T29] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08d3)
[  575.590187][   T24] usb 1-1: Product: syz
[  575.599177][   T24] usb 1-1: Manufacturer: syz
[  575.604471][   T29] uvcvideo 2-1:0.105: No valid video chain found.
[  575.613350][   T24] usb 1-1: SerialNumber: syz
[  575.633071][   T24] usb 1-1: config 0 descriptor??
[  575.652238][   T24] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  575.864873][   T29] usb 2-1: USB disconnect, device number 36
[  575.972493][T19427] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5872'.
[  576.094324][   T24] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71
[  576.133608][   T24] usb 1-1: USB disconnect, device number 33
[  576.183381][T19433] netlink: 'syz.4.5875': attribute type 10 has an invalid length.
[  576.224705][T19433] veth0_vlan: left promiscuous mode
[  576.244331][T19433] veth0_vlan: entered promiscuous mode
[  576.264797][T19433] team0: Device veth0_vlan failed to register rx_handler
[  576.481342][T19443] netlink: 248 bytes leftover after parsing attributes in process `syz.5.5880'.
[  576.490793][T19445] loop2: detected capacity change from 0 to 64
[  576.887586][T19457] loop2: detected capacity change from 0 to 256
[  576.900523][T19461] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5889'.
[  576.929987][T19461] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5889'.
[  576.991026][T19457] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  577.028259][T19457] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  577.057724][T19457] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  577.102885][   T30] audit: type=1800 audit(1779055870.767:126): pid=19457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5886" name="file1" dev="loop2" ino=1048687 res=0 errno=0
[  577.325866][T19465] loop0: detected capacity change from 0 to 4096
[  577.513542][T19465] ntfs3(loop0): ino=5, "/" indx_read_ra
[  577.519344][T19479] netlink: 'syz.1.5896': attribute type 10 has an invalid length.
[  577.542485][T19465] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  577.564517][T19479] veth0_vlan: left promiscuous mode
[  577.603479][T19479] veth0_vlan: entered promiscuous mode
[  577.630546][T19479] team0: Device veth0_vlan failed to register rx_handler
[  577.991756][T19493] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  578.040028][T19497] usb usb1: usbfs: process 19497 (syz.5.5906) did not claim interface 0 before use
[  578.598939][T19516] openvswitch: netlink: Duplicate key (type 21).
[  578.769032][T19520] netlink: 'syz.3.5917': attribute type 10 has an invalid length.
[  579.053110][T19520] veth0_vlan: left promiscuous mode
[  579.064643][T19520] veth0_vlan: entered promiscuous mode
[  579.163524][T19520] team0: Device veth0_vlan failed to register rx_handler
[  579.284552][T19534] loop0: detected capacity change from 0 to 256
[  579.315414][T19534] exfat: Deprecated parameter 'namecase'
[  579.375826][T19534] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  579.557968][T19508] loop1: detected capacity change from 0 to 32768
[  579.616197][T19508] JBD2: Ignoring recovery information on journal
[  579.830550][T19508] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  579.983675][T19508] (syz.1.5911,19508,0):ocfs2_check_dir_entry:334 ERROR: bad entry in directory #65: directory entry overrun - offset=32, inode=17057, rec_len=280, name_len=10
[  580.048222][T19508] (syz.1.5911,19508,0):ocfs2_prepare_dir_for_insert:4342 ERROR: status = -2
[  580.068855][T19508] (syz.1.5911,19508,0):ocfs2_mknod:302 ERROR: status = -2
[  580.084920][T19508] (syz.1.5911,19508,0):ocfs2_mknod:506 ERROR: status = -2
[  580.157559][T19560] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5937'.
[  580.230088][T19562] netlink: 'syz.2.5938': attribute type 1 has an invalid length.
[  580.271318][T19562] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5938'.
[  580.421273][ T5630] ocfs2: Unmounting device (7,1) on (node local)
[  580.910731][ T5850] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  581.090250][ T5850] usb 4-1: Using ep0 maxpacket: 8
[  581.096017][ T5850] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  581.096079][ T5850] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0
[  581.096115][ T5850] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  581.096157][ T5850] usb 4-1: config 0 interface 0 has no altsetting 0
[  581.105492][ T5850] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  581.105534][ T5850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  581.105567][ T5850] usb 4-1: Product: syz
[  581.105593][ T5850] usb 4-1: Manufacturer: syz
[  581.105619][ T5850] usb 4-1: SerialNumber: syz
[  581.154742][ T5850] usb 4-1: config 0 descriptor??
[  581.170123][ T5850] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found
[  581.403641][ T5850] snd_usb_toneport 4-1:0.0: cannot get proper max packet size
[  581.403873][ T5850] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected
[  581.406338][ T5850] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  581.537789][T19606] comedi comedi1: dt2801: I/O base address or length out of range
[  581.691384][ T5850] usb 4-1: USB disconnect, device number 26
[  581.721524][T19612] loop1: detected capacity change from 0 to 256
[  581.739267][T19612] exfat: Deprecated parameter 'namecase'
[  581.787841][T19612] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001ff53, chksum : 0xa3a8d5f0, utbl_chksum : 0xe619d30d)
[  581.866465][T19618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5966'.
[  581.890264][T19618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5966'.
[  582.155729][T19624] xt_nfacct: accounting object `syz0' does not exist
[  582.188567][T19626] netlink: 'syz.0.5970': attribute type 26 has an invalid length.
[  582.458008][T19630] loop1: detected capacity change from 0 to 256
[  582.650281][T19630] FAT-fs (loop1): Directory bread(block 64) failed
[  582.690072][T19630] FAT-fs (loop1): Directory bread(block 65) failed
[  582.727903][T19630] FAT-fs (loop1): Directory bread(block 66) failed
[  582.760107][T19630] FAT-fs (loop1): Directory bread(block 67) failed
[  582.776295][T19630] FAT-fs (loop1): Directory bread(block 68) failed
[  582.801326][T19630] FAT-fs (loop1): Directory bread(block 69) failed
[  582.828730][T19630] FAT-fs (loop1): Directory bread(block 70) failed
[  582.847716][T19642] loop4: detected capacity change from 0 to 256
[  582.860004][T19630] FAT-fs (loop1): Directory bread(block 71) failed
[  582.891786][T19630] FAT-fs (loop1): Directory bread(block 72) failed
[  582.910681][T19630] FAT-fs (loop1): Directory bread(block 73) failed
[  582.954798][T19605] loop2: detected capacity change from 0 to 40427
[  583.005877][T19605] F2FS-fs (loop2): invalid crc value
[  583.024659][T19642] FAT-fs (loop4): Directory bread(block 64) failed
[  583.056120][T19642] FAT-fs (loop4): Directory bread(block 65) failed
[  583.094555][T19642] FAT-fs (loop4): Directory bread(block 66) failed
[  583.138156][T19642] FAT-fs (loop4): Directory bread(block 67) failed
[  583.178120][T19642] FAT-fs (loop4): Directory bread(block 68) failed
[  583.210405][T19642] FAT-fs (loop4): Directory bread(block 69) failed
[  583.227567][T19642] FAT-fs (loop4): Directory bread(block 70) failed
[  583.255535][T19620] loop5: detected capacity change from 0 to 32768
[  583.256265][T19642] FAT-fs (loop4): Directory bread(block 71) failed
[  583.293110][T19620] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5967 (19620)
[  583.303536][T19642] FAT-fs (loop4): Directory bread(block 72) failed
[  583.335785][T19642] FAT-fs (loop4): Directory bread(block 73) failed
[  583.383519][T19620] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  583.420205][T19620] BTRFS info (device loop5): using sha256 checksum algorithm
[  583.506250][T19605] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  583.618307][T19620] BTRFS info (device loop5): enabling ssd optimizations
[  583.632346][T19620] BTRFS info (device loop5): turning on async discard
[  583.654277][T19620] BTRFS info (device loop5): enabling free space tree
[  583.668863][T19605] F2FS-fs (loop2): Start checkpoint disabled!
[  583.854000][T19605] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  583.883083][T19605] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  584.188058][ T5628] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  584.466204][ T6553] kworker/u8:12: attempt to access beyond end of device
[  584.466204][ T6553] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  584.564659][ T6553] CPU: 0 UID: 0 PID: 6553 Comm: kworker/u8:12 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  584.564720][ T6553] Tainted: [L]=SOFTLOCKUP
[  584.564734][ T6553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  584.564760][ T6553] Workqueue: writeback wb_workfn (flush-7:2)
[  584.564833][ T6553] Call Trace:
[  584.564845][ T6553]  <TASK>
[  584.564859][ T6553]  dump_stack_lvl+0x100/0x190
[  584.564903][ T6553]  f2fs_stop_checkpoint+0x600/0x9b0
[  584.564967][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  584.565013][ T6553]  ? errseq_set+0xe3/0x150
[  584.565053][ T6553]  ? errseq_set+0xe3/0x150
[  584.565102][ T6553]  f2fs_write_end_io+0xf59/0x1340
[  584.565147][ T6553]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  584.565193][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  584.565249][ T6553]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  584.565288][ T6553]  bio_endio+0x78f/0x8f0
[  584.565345][ T6553]  submit_bio_noacct+0x64c/0x2000
[  584.565401][ T6553]  f2fs_submit_write_bio+0x135/0x340
[  584.565466][ T6553]  __submit_merged_bio+0x331/0x780
[  584.565518][ T6553]  __submit_merged_write_cond+0x3fe/0x510
[  584.565570][ T6553]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  584.565623][ T6553]  ? __pfx___might_resched+0x10/0x10
[  584.565678][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  584.565734][ T6553]  f2fs_write_cache_pages+0x20e9/0x2630
[  584.565808][ T6553]  ? __pfx_f2fs_write_cache_pages+0x10/0x10
[  584.565867][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  584.565914][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  584.565968][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  584.566015][ T6553]  ? __lock_acquire+0x4a5/0x2630
[  584.566106][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  584.566152][ T6553]  ? do_raw_spin_unlock+0x145/0x1e0
[  584.566250][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  584.566296][ T6553]  ? find_held_lock+0x2b/0x80
[  584.566356][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  584.566402][ T6553]  ? rcu_is_watching+0x12/0xc0
[  584.566466][ T6553]  f2fs_write_data_pages+0x799/0x16d0
[  584.566514][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  584.566560][ T6553]  ? trace_f2fs_writepages.constprop.0+0x75/0x230
[  584.566630][ T6553]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  584.566691][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  584.566743][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  584.566791][ T6553]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  584.566844][ T6553]  do_writepages+0x278/0x600
[  584.566912][ T6553]  ? __pfx_do_writepages+0x10/0x10
[  584.566977][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  584.567034][ T6553]  __writeback_single_inode+0x164/0x1350
[  584.567101][ T6553]  ? find_held_lock+0x2b/0x80
[  584.567164][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  584.567213][ T6553]  ? __pfx___writeback_single_inode+0x10/0x10
[  584.567274][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  584.567320][ T6553]  ? do_raw_spin_unlock+0x145/0x1e0
[  584.567375][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  584.567429][ T6553]  writeback_sb_inodes+0x766/0x1c60
[  584.567513][ T6553]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  584.567636][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  584.567681][ T6553]  ? rcu_is_watching+0x12/0xc0
[  584.567732][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  584.567776][ T6553]  ? queue_io+0x287/0x540
[  584.567829][ T6553]  wb_writeback+0x1bf/0xb90
[  584.567900][ T6553]  ? __pfx_wb_writeback+0x10/0x10
[  584.567970][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  584.568017][ T6553]  ? mark_held_locks+0x40/0x70
[  584.568067][ T6553]  ? _raw_spin_unlock_irq+0x23/0x50
[  584.568127][ T6553]  wb_workfn+0x14f/0xc00
[  584.568191][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  584.568237][ T6553]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  584.568299][ T6553]  ? __pfx_wb_workfn+0x10/0x10
[  584.568364][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  584.568410][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  584.568454][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  584.568495][ T6553]  ? rcu_is_watching+0x12/0xc0
[  584.568549][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  584.568605][ T6553]  process_one_work+0xa0e/0x1980
[  584.568675][ T6553]  ? __pfx_process_one_work+0x10/0x10
[  584.568719][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  584.568781][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  584.568836][ T6553]  worker_thread+0x5ef/0xe50
[  584.568902][ T6553]  ? kthread+0x13a/0x450
[  584.568944][ T6553]  ? __pfx_worker_thread+0x10/0x10
[  584.568989][ T6553]  kthread+0x370/0x450
[  584.569030][ T6553]  ? __pfx_kthread+0x10/0x10
[  584.569083][ T6553]  ret_from_fork+0x72b/0xd50
[  584.569133][ T6553]  ? __pfx_ret_from_fork+0x10/0x10
[  584.569178][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  584.569220][ T6553]  ? rcu_is_watching+0x12/0xc0
[  584.569269][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  584.569315][ T6553]  ? __switch_to+0x800/0x1100
[  584.569370][ T6553]  ? __switch_to_asm+0x39/0x70
[  584.569422][ T6553]  ? __pfx_kthread+0x10/0x10
[  584.569468][ T6553]  ret_from_fork_asm+0x1a/0x30
[  584.569543][ T6553]  </TASK>
[  585.149942][ T6553] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  585.445855][T19699] loop4: detected capacity change from 0 to 512
[  585.607447][T19699] EXT4-fs error (device loop4): ext4_free_branches:1020: inode #11: comm syz.4.5999: invalid indirect mapped block 256 (level 2)
[  585.691197][T19699] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  585.692312][T19699] EXT4-fs (loop4): 2 truncates cleaned up
[  585.701578][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  585.701612][    C1] EXT4-fs (loop4): initial error at time 1779055879: ext4_free_branches:1020: inode 11
[  585.701666][    C1] EXT4-fs (loop4): last error at time 1779055879: ext4_free_branches:1020: inode 11
[  585.795132][T19699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  585.836370][T19715] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  586.016383][T19708] EXT4-fs error (device loop4): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  586.129740][ T5632] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  586.908336][T19742] loop1: detected capacity change from 0 to 128
[  587.001663][T19742] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  587.027993][T19742] ext4 filesystem being mounted at /927/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  587.072777][T19752] No control pipe specified
[  587.111718][T19754] netlink: 'syz.5.6023': attribute type 10 has an invalid length.
[  587.145268][T19754] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6023'.
[  587.309582][ T5630] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  587.475620][T19762] loop2: detected capacity change from 0 to 512
[  587.569708][T19762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  587.628388][T19762] ext4 filesystem being mounted at /1027/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  587.672009][T19762] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  587.686280][T19762] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  587.696878][T19762] EXT4-fs error (device loop2): ext4_acquire_dquot:7032: comm syz.2.6026: Failed to acquire dquot type 0
[  587.819371][T19777] loop1: detected capacity change from 0 to 24
[  587.916845][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  588.064457][T19782] netlink: 'syz.3.6035': attribute type 10 has an invalid length.
[  588.104715][T19782] netlink: 228 bytes leftover after parsing attributes in process `syz.3.6035'.
[  588.225782][T19784] bond2: entered allmulticast mode
[  588.298341][T19784] 8021q: adding VLAN 0 to HW filter on device bond2
[  589.221455][T19817] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6051'.
[  589.309485][T19824] loop2: detected capacity change from 0 to 4096
[  589.382835][T19824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  589.458205][T19824] Quota error (device loop2): v2_read_file_info: Block with free entry 5 out of range (1, 0).
[  589.548966][T19824] EXT4-fs warning (device loop2): ext4_enable_quotas:7265: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  589.575158][T19836] netlink: 'syz.0.6057': attribute type 10 has an invalid length.
[  589.577469][T19838] netlink: 'syz.3.6058': attribute type 4 has an invalid length.
[  589.713581][T19836] veth0_vlan: left promiscuous mode
[  589.745209][T19836] veth0_vlan: entered promiscuous mode
[  589.767951][T19836] team0: Device veth0_vlan failed to register rx_handler
[  589.846083][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  590.066031][T19853] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  590.094047][   T30] audit: type=1326 audit(1779055883.757:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19855 comm="syz.3.6066" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994c19ce59 code=0x7ffc0000
[  590.220198][   T30] audit: type=1326 audit(1779055883.757:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19855 comm="syz.3.6066" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994c19ce59 code=0x7ffc0000
[  590.338147][   T30] audit: type=1326 audit(1779055883.767:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19855 comm="syz.3.6066" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994c19ce59 code=0x7ffc0000
[  590.410938][   T30] audit: type=1326 audit(1779055883.767:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19855 comm="syz.3.6066" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994c19ce59 code=0x7ffc0000
[  590.539071][   T30] audit: type=1326 audit(1779055883.767:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19855 comm="syz.3.6066" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f994c19ce59 code=0x7ffc0000
[  590.660985][   T30] audit: type=1326 audit(1779055883.767:132): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=19855 comm="syz.3.6066" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994c19ce59 code=0x7ffc0000
[  590.788929][   T30] audit: type=1326 audit(1779055883.767:133): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=19855 comm="syz.3.6066" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f994c19ce59 code=0x7ffc0000
[  591.074468][T19891] netlink: 'syz.2.6080': attribute type 10 has an invalid length.
[  591.111747][T19891] veth0_vlan: left promiscuous mode
[  591.141143][T19891] veth0_vlan: entered promiscuous mode
[  591.182250][T19891] team0: Device veth0_vlan failed to register rx_handler
[  591.535275][T19908] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6087'.
[  591.606817][T19915] loop1: detected capacity change from 0 to 2048
[  591.628262][T19914] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6088'.
[  591.680442][T19915] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  591.721236][T19907] 8021q: adding VLAN 0 to HW filter on device bond0
[  591.801429][T19913] vti0: entered promiscuous mode
[  591.846828][T19915] UDF-fs: unknown compression code (0)
[  592.202158][T19932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6096'.
[  592.526830][T19944] loop2: detected capacity change from 0 to 256
[  592.617682][T19944] FAT-fs (loop2): Directory bread(block 64) failed
[  592.636638][T19944] FAT-fs (loop2): Directory bread(block 65) failed
[  592.660883][T19944] FAT-fs (loop2): Directory bread(block 66) failed
[  592.670698][T19944] FAT-fs (loop2): Directory bread(block 67) failed
[  592.686831][T19944] FAT-fs (loop2): Directory bread(block 68) failed
[  592.708647][T19944] FAT-fs (loop2): Directory bread(block 69) failed
[  592.716391][T15766] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  592.756339][T19944] FAT-fs (loop2): Directory bread(block 70) failed
[  592.774436][T19944] FAT-fs (loop2): Directory bread(block 71) failed
[  592.791747][T19944] FAT-fs (loop2): Directory bread(block 72) failed
[  592.825120][T19944] FAT-fs (loop2): Directory bread(block 73) failed
[  592.900233][T15766] usb 6-1: Using ep0 maxpacket: 32
[  592.927123][T15766] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  592.934575][T19958] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6107'.
[  592.943521][T19944] syz.2.6101: attempt to access beyond end of device
[  592.943521][T19944] loop2: rw=524288, sector=1160, nr_sectors = 4 limit=256
[  592.961647][T19944] syz.2.6101: attempt to access beyond end of device
[  592.961647][T19944] loop2: rw=0, sector=1160, nr_sectors = 4 limit=256
[  592.982806][T15766] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  592.996831][T19958] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6107'.
[  593.038424][T15766] usb 6-1: config 0 descriptor??
[  593.076752][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  593.076777][   T30] audit: type=1800 audit(1779055886.747:136): pid=19944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6101" name="file0" dev="loop2" ino=1048691 res=0 errno=0
[  593.151512][T15766] gspca_main: nw80x-2.14.0 probing 055f:d001
[  593.260998][T19958] bond2: Removing last arp target with arp_interval on
[  593.294824][T19958] bond2: entered allmulticast mode
[  593.326449][T19958] 8021q: adding VLAN 0 to HW filter on device bond2
[  593.517586][T15766] gspca_nw80x: reg_r err -71
[  593.536416][T15766] nw80x 6-1:0.0: probe with driver nw80x failed with error -71
[  593.584442][T15766] usb 6-1: USB disconnect, device number 27
[  593.787969][T19980] loop2: detected capacity change from 0 to 16
[  593.881015][T19980] erofs (device loop2): mounted with root inode @ nid 36.
[  593.926963][T19980] syz.2.6117: attempt to access beyond end of device
[  593.926963][T19980] loop2: rw=524288, sector=8, nr_sectors = 24 limit=16
[  593.987622][T19980] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096
[  594.018786][T19966] loop1: detected capacity change from 0 to 32768
[  594.043832][T19980] erofs (device loop2): read error -117 @ 0 of nid 89
[  594.072702][   T30] audit: type=1800 audit(1779055887.747:137): pid=19980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6117" name="file2" dev="loop2" ino=89 res=0 errno=0
[  594.131187][T19966] jfs_strtoUCS: char2uni returned -22.
[  594.160079][T19966] charset = cp1255, char = 0xfc
[  594.762751][T20008] loop5: detected capacity change from 0 to 2048
[  594.801199][T20008] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  595.350132][T15677] usb 2-1: new full-speed USB device number 37 using dummy_hcd
[  595.563621][T15677] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  595.595968][T15677] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  595.615900][T15677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  595.642408][T15677] usb 2-1: Product: syz
[  595.656844][T15677] usb 2-1: Manufacturer: syz
[  595.678641][T15677] usb 2-1: SerialNumber: syz
[  595.717120][T15677] usb 2-1: config 0 descriptor??
[  595.757189][T15677] streamzap 2-1:0.0: streamzap_probe: endpoint doesn't match input device 0203
[  595.952926][ T5807] usb 2-1: USB disconnect, device number 37
[  596.032154][T15766] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  596.172441][T20060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6157'.
[  596.200297][T20060] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6157'.
[  596.223107][T20060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  596.263264][T15766] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  596.281780][T15766] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  596.294446][T15766] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  596.299641][T20064] loop5: detected capacity change from 0 to 1024
[  596.308533][T15766] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  596.325056][T15766] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  596.390964][T20064] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5
[  596.407102][T20064] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  596.411756][T15766] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  596.421480][T20064] EXT4-fs error (device loop5): ext4_acquire_dquot:7032: comm syz.5.6158: Failed to acquire dquot type 0
[  596.442763][T20064] loop5: lost filesystem error report for type 5 error -117
[  596.445029][T20064] EXT4-fs error (device loop5): mb_free_blocks:2046: group 0, 
[  596.452902][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  596.452939][    C1] EXT4-fs (loop5): initial error at time 1779055890: ext4_acquire_dquot:7032
[  596.452982][    C1] EXT4-fs (loop5): last error at time 1779055890: ext4_acquire_dquot:7032
[  596.486965][T20064] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  596.503812][T20064] EXT4-fs (loop5): 1 truncate cleaned up
[  596.508140][T15766] usb 3-1: invalid MIDI out EP 0
[  596.544204][T20064] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  596.725399][T20064] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5
[  596.778549][T20064] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  596.822380][T20064] EXT4-fs error (device loop5): ext4_acquire_dquot:7032: comm syz.5.6158: Failed to acquire dquot type 0
[  597.068515][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  597.146468][ T5628] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  597.426938][T15766] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22
[  597.441120][T15677] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  597.492367][T15766] usb 3-1: USB disconnect, device number 24
[  597.620874][T15677] usb 5-1: Using ep0 maxpacket: 8
[  597.641529][T15677] usb 5-1: unable to get BOS descriptor or descriptor too short
[  597.666883][T15677] usb 5-1: config 127 has an invalid interface number: 1 but max is 0
[  597.702839][T15677] usb 5-1: config 127 has no interface number 0
[  597.734371][T15677] usb 5-1: config 127 interface 1 altsetting 2 bulk endpoint 0xC has invalid maxpacket 16
[  597.773484][T15677] usb 5-1: config 127 interface 1 has no altsetting 0
[  597.802763][T15677] usb 5-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=df.89
[  597.817796][T15677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.832199][T20096] loop3: detected capacity change from 0 to 4096
[  597.841027][T15677] usb 5-1: Product: syz
[  597.853324][T20096] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  597.862497][T15677] usb 5-1: Manufacturer: syz
[  597.875527][T15677] usb 5-1: SerialNumber: syz
[  597.896715][T20086] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  597.953227][T20096] ntfs3(loop3): ino=19, mi_enum_attr
[  597.977628][T20096] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  598.133150][T20108] loop5: detected capacity change from 0 to 16
[  598.182247][T15677] redrat3 5-1:127.1: Couldn't find all endpoints
[  598.182508][T20108] erofs (device loop5): mounted with root inode @ nid 36.
[  598.227711][T15677] usb 5-1: USB disconnect, device number 24
[  598.260266][T15766] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  598.288471][ T5638] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  598.317534][T20108] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  598.374654][T20108] erofs (device loop5): read error -117 @ 2 of nid 89
[  598.382526][   T30] audit: type=1800 audit(1779055892.057:138): pid=20108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6180" name="file2" dev="loop5" ino=89 res=0 errno=0
[  598.426718][T20078] loop0: detected capacity change from 0 to 40427
[  598.441300][T15766] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  598.457470][T20078] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  598.476655][T15766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.498403][T20078] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  598.517617][T15766] usb 2-1: Product: syz
[  598.523753][T20078] F2FS-fs (loop0): invalid crc_offset: 33558524
[  598.530982][T15766] usb 2-1: Manufacturer: syz
[  598.536919][T15766] usb 2-1: SerialNumber: syz
[  598.851482][T20078] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  598.941494][T20078] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  598.942225][T15766] rtl8150 2-1:1.0: couldn't reset the device
[  598.981987][T20078] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  598.988630][T15766] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5
[  599.016080][T20130] loop5: detected capacity change from 0 to 512
[  599.101130][T15766] usb 2-1: USB disconnect, device number 38
[  599.166241][T20130] tmpfs: Bad value for 'mpol'
[  599.224197][T20134] loop2: detected capacity change from 0 to 1024
[  599.524280][T20140] netlink: 'syz.5.6194': attribute type 2 has an invalid length.
[  600.068854][T20157] Sensor A: =================  START STATUS  =================
[  600.084835][T20159] tmpfs: Bad value for 'grpquota_block_hardlimit'
[  600.095625][T20157] Sensor A: Test Pattern: 75% Colorbar
[  600.121382][T15677] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  600.137781][T20157] Sensor A: Show Information: All
[  600.162535][T20157] Sensor A: Vertical Flip: false
[  600.189093][T20157] Sensor A: Horizontal Flip: true
[  600.210218][T20157] Sensor A: Brightness: 128
[  600.219296][T20157] Sensor A: Contrast: 128
[  600.230646][T20157] Sensor A: Hue: 0
[  600.244490][T20157] Sensor A: Saturation: 128
[  600.259895][T20157] Sensor A: Pixel Rate: 160000000
[  600.293804][T15677] usb 3-1: unable to get BOS descriptor or descriptor too short
[  600.311320][T20157] Sensor A: Horizontal Blanking: 800
[  600.323009][T15677] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  600.342752][T20157] Sensor A: Vertical Blanking: 3223
[  600.348022][T15677] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  600.366356][T20157] Sensor A: ==================  END STATUS  ==================
[  600.380860][T15677] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  600.398301][T15677] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.414882][T20165] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6207'.
[  600.429779][T15677] usb 3-1: Product: syz
[  600.438368][T15677] usb 3-1: Manufacturer: syz
[  600.452634][T15677] usb 3-1: SerialNumber: syz
[  600.504559][T15677] usb 3-1: selecting invalid altsetting 1
[  600.527134][T15677] usb 3-1: unit 6 not found!
[  600.547065][T20167] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.6208'.
[  600.591077][T20167] openvswitch: netlink: Missing key (keys=40, expected=80)
[  600.756537][T20155] loop5: detected capacity change from 0 to 32768
[  600.778325][T20155] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6200 (20155)
[  600.835336][T20155] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  600.866935][T20155] BTRFS info (device loop5): using sha256 checksum algorithm
[  600.909480][T15677] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2)
[  600.940810][ T1225] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  601.034078][T20155] BTRFS info (device loop5): enabling ssd optimizations
[  601.085960][T20155] BTRFS info (device loop5): turning on async discard
[  601.135166][T20155] BTRFS info (device loop5): enabling free space tree
[  601.155157][ T1225] usb 4-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e
[  601.201520][ T1225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.242913][ T1225] usb 4-1: Product: syz
[  601.266693][ T1225] usb 4-1: Manufacturer: syz
[  601.279479][T15677] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  601.301964][ T1225] usb 4-1: SerialNumber: syz
[  601.329669][T15677] usb 3-1: USB disconnect, device number 25
[  601.340787][ T1225] usb 4-1: config 0 descriptor??
[  601.368271][ T1225] hub 4-1:0.0: bad descriptor, ignoring hub
[  601.381187][ T5628] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  601.393955][ T1225] hub 4-1:0.0: probe with driver hub failed with error -5
[  601.410970][ T1225] usbsevseg 4-1:0.0: USB 7 Segment device now attached
[  601.411268][T20205] loop0: detected capacity change from 0 to 8
[  601.425375][T15766] usb 5-1: new full-speed USB device number 25 using dummy_hcd
[  601.587557][ T5971] udevd[5971]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  601.629684][T15766] usb 5-1: unable to get BOS descriptor or descriptor too short
[  601.668373][T15766] usb 5-1: not running at top speed; connect to a high speed hub
[  601.697644][T15766] usb 5-1: config 197 has an invalid interface number: 211 but max is 0
[  601.711693][T15766] usb 5-1: config 197 has no interface number 0
[  601.716496][T15677] usb 4-1: USB disconnect, device number 27
[  601.747826][T15766] usb 5-1: config 197 interface 211 has no altsetting 0
[  601.758841][T15677] usbsevseg 4-1:0.0: USB 7 Segment now disconnected
[  601.796503][T15766] usb 5-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=3f.c6
[  601.842444][T15766] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.897833][T15766] usb 5-1: Product: syz
[  601.930055][T15766] usb 5-1: Manufacturer: syz
[  601.965812][T15766] usb 5-1: SerialNumber: syz
[  602.321242][T15766] upd78f0730 5-1:197.211: upd78f0730 converter detected
[  602.420688][T15766] usb 5-1: upd78f0730 converter now attached to ttyUSB0
[  602.484069][T15766] usb 5-1: USB disconnect, device number 25
[  602.532487][T15766] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0
[  602.579472][T15766] upd78f0730 5-1:197.211: device disconnected
[  602.660275][T20229] loop0: detected capacity change from 0 to 1024
[  602.692310][T20229] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  603.087902][T20239] loop1: detected capacity change from 0 to 512
[  603.143535][T20239] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.6235: bad orphan inode 13
[  603.160381][T20239] loop1: lost filesystem error report for type 5 error -117
[  603.169835][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  603.183624][    C1] EXT4-fs (loop1): initial error at time 1779055896: ext4_orphan_get:1423
[  603.192257][    C1] EXT4-fs (loop1): last error at time 1779055896: ext4_orphan_get:1423
[  603.203156][T20239] ext4_test_bit(bit=12, block=4) = 1
[  603.210968][T20239] is_bad_inode(inode)=0
[  603.215875][T20239] NEXT_ORPHAN(inode)=0
[  603.220411][T20239] max_ino=32
[  603.224191][T20239] i_nlink=1
[  603.229574][T20239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  603.263431][T20211] loop2: detected capacity change from 0 to 32768
[  603.271088][T20239] EXT4-fs warning (device loop1): dx_probe:812: inode #2: comm syz.1.6235: Hash code is SIPHASH, but hash not in dirent
[  603.283949][T20239] EXT4-fs warning (device loop1): dx_probe:933: inode #2: comm syz.1.6235: Corrupt directory, running e2fsck is recommended
[  603.297708][T20239] EXT4-fs warning (device loop1): dx_probe:812: inode #2: comm syz.1.6235: Hash code is SIPHASH, but hash not in dirent
[  603.311431][T20239] EXT4-fs warning (device loop1): dx_probe:933: inode #2: comm syz.1.6235: Corrupt directory, running e2fsck is recommended
[  603.312495][T20211] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6222 (20211)
[  603.324994][T20239] EXT4-fs error (device loop1): ext4_find_dest_de:2049: inode #2: block 13: comm syz.1.6235: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=131076, size=1024 fake=0
[  603.380346][T20242] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  603.482767][T20211] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  603.536631][T20211] BTRFS info (device loop2): using sha256 checksum algorithm
[  603.588272][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  603.695628][T20211] BTRFS info (device loop2): enabling ssd optimizations
[  603.749635][T20211] BTRFS info (device loop2): turning on async discard
[  603.801465][T20211] BTRFS info (device loop2): enabling free space tree
[  604.001102][T20273] loop4: detected capacity change from 0 to 64
[  604.058126][T20275] loop5: detected capacity change from 0 to 64
[  604.082661][ T5629] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  604.251554][ T5632] hfs: node 4:3 still has 1 user(s)!
[  604.825112][T20290] SET target dimension over the limit!
[  604.868969][T20248] loop0: detected capacity change from 0 to 32768
[  604.926297][T20248] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  604.965531][T20248] JBD2: Ignoring recovery information on journal
[  605.050843][T15677] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  605.138687][T20248] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  605.201893][T15677] usb 4-1: Using ep0 maxpacket: 32
[  605.224191][T15677] usb 4-1: unable to get BOS descriptor or descriptor too short
[  605.252636][T15677] usb 4-1: config 7 has an invalid interface number: 187 but max is 0
[  605.281041][T15677] usb 4-1: config 7 has no interface number 0
[  605.295328][T15677] usb 4-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0
[  605.323323][T15677] usb 4-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0
[  605.364975][T15677] usb 4-1: config 7 interface 187 has no altsetting 0
[  605.402399][T15677] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  605.436300][T15677] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.462551][T15677] usb 4-1: Product: syz
[  605.494965][T15677] usb 4-1: Manufacturer: syz
[  605.508829][T15677] usb 4-1: SerialNumber: syz
[  605.531356][ T5631] ocfs2: Unmounting device (7,0) on (node local)
[  605.835853][T15677] usb 4-1: Unknown endpoint type found, address 0x07
[  605.865492][T15677] usb 4-1: Not enough endpoints found in device, aborting!
[  606.073280][T15766] usb 4-1: USB disconnect, device number 28
[  606.144553][T20325] loop2: detected capacity change from 0 to 128
[  606.196301][T20323] loop1: detected capacity change from 0 to 4096
[  606.208863][T20325] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  606.237698][T20325] hpfs: filesystem error: improperly stopped
[  606.258290][T20325] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  606.299917][T20325] hpfs: You really don't want any checks? You are crazy...
[  606.328508][T20325] hpfs: hpfs_map_sector(): read error
[  606.359416][T20325] hpfs: code page support is disabled
[  606.370046][T20325] hpfs: hpfs_map_4sectors(): unaligned read
[  606.402132][T20325] hpfs: hpfs_map_4sectors(): unaligned read
[  606.438375][T20325] hpfs: filesystem error: unable to find root dir
[  606.699232][T20338] loop5: detected capacity change from 0 to 256
[  606.770592][T20338] exfat: Deprecated parameter 'utf8'
[  606.799922][T20338] exfat: Deprecated parameter 'utf8'
[  606.824333][T20338] exfat: Deprecated parameter 'utf8'
[  606.951274][T20338] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  607.138429][T20349] loop2: detected capacity change from 0 to 2048
[  607.176120][T20349] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  607.291086][T20355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6283'.
[  607.305263][   T30] audit: type=1800 audit(1779055900.977:139): pid=20349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6280" name="file1" dev="loop2" ino=1367 res=0 errno=0
[  607.345793][T20355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6283'.
[  607.611272][T20329] loop4: detected capacity change from 0 to 32768
[  607.677019][T20329] find_entry called with index >= next_index
[  607.693780][T20367] exfat: Deprecated parameter 'namecase'
[  607.720164][T20329] find_entry called with index >= next_index
[  607.738579][T20329] find_entry called with index >= next_index
[  607.746524][T20367] exfat: Deprecated parameter 'namecase'
[  607.781521][T20367] exfat: Deprecated parameter 'utf8'
[  607.874989][T20367] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  608.088564][T20377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6294'.
[  608.191577][T20383] qrtr: Invalid version 0
[  608.384855][T20387] tmpfs: Bad value for 'mpol'
[  609.148082][T20417] set_capacity_and_notify: 1 callbacks suppressed
[  609.148107][T20417] loop2: detected capacity change from 0 to 512
[  609.233315][T20417] EXT4-fs: Ignoring removed nomblk_io_submit option
[  609.286365][T20423] geneve1: entered promiscuous mode
[  609.298756][T20417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  609.362916][T20417] ext4 filesystem being mounted at /1069/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  609.461527][   T24] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  609.515844][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  609.661732][   T24] usb 1-1: config 0 has an invalid interface number: 99 but max is 0
[  609.690323][   T24] usb 1-1: config 0 has no interface number 0
[  609.716110][T20440] sg_write: data in/out 196864/4 bytes for SCSI command 0x2-- guessing data in;
[  609.716110][T20440]    program syz.1.6324 not setting count and/or reply_len properly
[  609.743474][   T24] usb 1-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd
[  609.766602][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  609.793522][   T24] usb 1-1: Product: syz
[  609.817798][   T24] usb 1-1: Manufacturer: syz
[  609.839631][   T24] usb 1-1: SerialNumber: syz
[  609.861675][   T24] usb 1-1: config 0 descriptor??
[  609.960518][T20445] hmac(sha224): entered promiscuous mode
[  610.086677][T15766] usb 1-1: USB disconnect, device number 34
[  610.730942][T20476] loop3: detected capacity change from 0 to 1024
[  610.824896][T20476] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5
[  610.886082][T20484] netlink: 'syz.5.6344': attribute type 21 has an invalid length.
[  610.906413][T20476] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  610.930071][T20476] EXT4-fs error (device loop3): ext4_acquire_dquot:7032: comm syz.3.6340: Failed to acquire dquot type 0
[  610.960322][T20476] loop3: lost filesystem error report for type 5 error -117
[  610.967497][T20476] EXT4-fs error (device loop3): mb_free_blocks:2046: group 0, 
[  610.974928][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  610.974965][    C0] EXT4-fs (loop3): initial error at time 1779055904: ext4_acquire_dquot:7032
[  610.975008][    C0] EXT4-fs (loop3): last error at time 1779055904: ext4_acquire_dquot:7032
[  611.006541][T20476] inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt.
[  611.058100][T20476] EXT4-fs (loop3): 1 truncate cleaned up
[  611.119523][T20476] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  611.213850][T20476] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5
[  611.261570][T20476] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  611.322822][T20476] EXT4-fs error (device loop3): ext4_acquire_dquot:7032: comm syz.3.6340: Failed to acquire dquot type 0
[  611.335241][T20459] loop2: detected capacity change from 0 to 32768
[  611.406508][T20497] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  611.529600][ T5633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  611.782427][T20509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6352'.
[  612.106529][T20517] loop3: detected capacity change from 0 to 256
[  612.150733][T20517] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  612.508742][T20522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6362'.
[  612.573049][T20494] loop1: detected capacity change from 0 to 32768
[  613.111347][T20539] hmac(sha224): entered promiscuous mode
[  613.130903][T20507] loop2: detected capacity change from 0 to 32768
[  613.364771][T20507] ea_get: invalid extended attribute
[  613.409989][T20507] ffff8880792bf678: 04 00 00 00                                      ....
[  613.664861][T20549] loop3: detected capacity change from 0 to 4096
[  613.741412][T20558] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  614.089955][T15766] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  614.127502][T20566] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6386'.
[  614.166624][T20568] netlink: 'syz.3.6385': attribute type 1 has an invalid length.
[  614.197070][T20568] netlink: 220 bytes leftover after parsing attributes in process `syz.3.6385'.
[  614.270265][T15766] usb 5-1: Using ep0 maxpacket: 32
[  614.310898][T15766] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  614.356236][T15766] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.431766][T15766] gspca_main: nw80x-2.14.0 probing 055f:d001
[  614.467604][T15677] hid (null): invalid report_size 58537
[  614.489731][T15677] hid (null): unknown global tag 0xd
[  614.512520][T15677] hid (null): unknown global tag 0xc
[  614.549430][T15677] hid (null): unknown global tag 0xe4
[  614.557086][T15677] hid (null): unknown global tag 0x52
[  614.569631][T15677] hid (null): global environment stack underflow
[  614.585467][T15677] hid (null): invalid report_size 222345300
[  614.604672][T15677] hid (null): unknown global tag 0xf4
[  614.624456][T15677] hid (null): invalid report_size 34522
[  614.624820][T15766] gspca_nw80x: reg_w err -71
[  614.630685][   T24] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  614.643160][T15677] hid (null): report_id 1483988276 is invalid
[  614.665658][T15766] nw80x 5-1:3.0: probe with driver nw80x failed with error -71
[  614.674720][T15677] hid (null): global environment stack underflow
[  614.698041][T15766] usb 5-1: USB disconnect, device number 26
[  614.701313][T15677] hid (null): unknown global tag 0x56
[  614.717237][T15677] hid (null): unknown global tag 0xe
[  614.728804][T15677] hid (null): report_id 2864353419 is invalid
[  614.750174][T15677] hid (null): global environment stack underflow
[  614.768333][T15677] hid (null): invalid report_count 703512408
[  614.788257][T20588] loop2: detected capacity change from 0 to 256
[  614.798819][T20588] exfat: Deprecated parameter 'namecase'
[  614.810700][   T24] usb 1-1: too many configurations: 72, using maximum allowed: 8
[  614.826213][T20588] exfat: Deprecated parameter 'namecase'
[  614.845444][T20588] exfat: Deprecated parameter 'utf8'
[  614.845589][   T24] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  614.850880][ T5760] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  614.879916][T15677] hid-generic BD41:B7F614B1:9D708363.0001: unknown main item tag 0x0
[  614.900675][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.909524][T15677] hid-generic BD41:B7F614B1:9D708363.0001: unknown main item tag 0x2
[  614.928218][   T24] usb 1-1: config 0 descriptor??
[  614.935331][T15677] hid-generic BD41:B7F614B1:9D708363.0001: unknown main item tag 0x4
[  614.939737][T20588] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  614.951369][   T24] rndis_host 1-1:0.0: rndis: master #0/ffff888037f11000 slave #1/0000000000000000
[  614.972277][T15677] hid-generic BD41:B7F614B1:9D708363.0001: unexpected long global item
[  614.990573][T15677] hid-generic BD41:B7F614B1:9D708363.0001: probe with driver hid-generic failed with error -22
[  615.042027][ T5760] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  615.073306][ T5760] usb 6-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[  615.101931][ T5760] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  615.139053][ T5760] usb 6-1: config 0 descriptor??
[  615.168644][ T5760] rndis_host 6-1:0.0: ACM capabilities 81, not really RNDIS?
[  615.265153][T15677] usb 1-1: USB disconnect, device number 35
[  615.299517][T20594] loop3: detected capacity change from 0 to 512
[  615.319502][T20594] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  615.365885][T20594] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  615.411728][T20594] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  615.432411][T20594] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  615.461348][T20594] System zones: 0-2, 18-18, 34-35
[  615.484132][ T5760] usb 6-1: USB disconnect, device number 28
[  615.601647][T20594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  615.708510][T20594] fscrypt (loop3, inode 12): Error -61 getting encryption context
[  615.971044][ T5633] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  616.017567][T20617] loop2: detected capacity change from 0 to 128
[  616.072465][T20617] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  616.119732][T20617] ext4 filesystem being mounted at /1081/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  616.362652][ T5629] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  617.307769][T20657] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  617.416706][T20661] netlink: 412 bytes leftover after parsing attributes in process `syz.5.6430'.
[  617.700272][T20669] loop5: detected capacity change from 0 to 1024
[  618.147159][T20667] loop2: detected capacity change from 0 to 32768
[  618.187395][T20667] dmapctl: invalid leafidx 1365 (expected 341)
[  618.203206][T20667] ERROR: (device loop2): dbAllocAG: Corrupt dmapctl page
[  618.203206][T20667] 
[  618.225371][T20667] ERROR: (device loop2): remounting filesystem as read-only
[  618.242585][T20667] jfs_mkdir: dtInsert returned -EIO
[  618.255589][T20667] ERROR: (device loop2): txAbort: 
[  618.255589][T20667] 
[  618.968081][T20693] netlink: 'syz.2.6445': attribute type 3 has an invalid length.
[  619.579934][ T5760] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  619.750234][ T5760] usb 3-1: Using ep0 maxpacket: 16
[  619.758718][ T5760] usb 3-1: unable to get BOS descriptor or descriptor too short
[  619.768854][ T5760] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  619.780789][ T5760] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  619.796112][ T5760] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  619.805818][ T5760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.814206][ T5760] usb 3-1: Product: syz
[  619.818590][ T5760] usb 3-1: Manufacturer: syz
[  619.823830][ T5760] usb 3-1: SerialNumber: syz
[  620.059567][ T5760] usb 3-1: Audio class v2/v3 interfaces need an interface association
[  620.071280][ T5760] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  620.086696][ T5760] usb 3-1: 2:1 : no cluster descriptor
[  620.141281][ T5760] usb 3-1: USB disconnect, device number 26
[  620.214885][T11318] udevd[11318]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  621.636263][T20731] dlm: no locking on control device
[  622.178694][T20755] SET target dimension over the limit!
[  622.651718][T20773] netlink: 'syz.3.6486': attribute type 12 has an invalid length.
[  623.282578][T20786] bond6: down delay (32768) is not a multiple of miimon (100), value rounded to 32700 ms
[  623.332239][T20786] bond6: entered promiscuous mode
[  623.355242][T20786] 8021q: adding VLAN 0 to HW filter on device bond6
[  623.392556][   T24] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  623.559927][   T24] usb 6-1: Using ep0 maxpacket: 32
[  623.574286][T20806] loop0: detected capacity change from 0 to 256
[  623.581110][T15677] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[  623.585727][T20806] exfat: Deprecated parameter 'utf8'
[  623.603621][   T24] usb 6-1: unable to get BOS descriptor or descriptor too short
[  623.620988][   T24] usb 6-1: config 7 has an invalid interface number: 187 but max is 0
[  623.632343][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  623.640360][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  623.651046][   T24] usb 6-1: config 7 has no interface number 0
[  623.666581][   T24] usb 6-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0
[  623.699606][   T24] usb 6-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0
[  623.704336][T20806] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[  623.733645][   T24] usb 6-1: config 7 interface 187 has no altsetting 0
[  623.770759][   T24] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  623.788332][T15677] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  623.810018][T15677] usb 4-1: config 0 has no interface number 0
[  623.818144][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.837107][T15677] usb 4-1: config 0 interface 41 has no altsetting 0
[  623.844185][   T24] usb 6-1: Product: syz
[  623.853161][   T24] usb 6-1: Manufacturer: syz
[  623.863638][T15677] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  623.879846][   T24] usb 6-1: SerialNumber: syz
[  623.884677][T15677] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.904964][T15677] usb 4-1: Product: syz
[  623.915096][T15677] usb 4-1: Manufacturer: syz
[  623.927203][T15677] usb 4-1: SerialNumber: syz
[  623.956226][T15677] usb 4-1: config 0 descriptor??
[  623.985364][T20810] loop2: detected capacity change from 0 to 4096
[  624.012018][T20810] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  624.064436][T20816] openvswitch: netlink: Duplicate or invalid key (type 0).
[  624.088779][T20816] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  624.114217][ T5760] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  624.125981][   T24] usb 6-1: Unknown endpoint type found, address 0x07
[  624.140629][T20810] ntfs3(loop2): ino=19, mi_enum_attr
[  624.140956][   T24] usb 6-1: Not enough endpoints found in device, aborting!
[  624.161469][T20810] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  624.300930][ T5760] usb 5-1: Using ep0 maxpacket: 8
[  624.316720][ T5760] usb 5-1: config 162 has an invalid interface number: 218 but max is 1
[  624.351190][ T5760] usb 5-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config
[  624.410357][ T5760] usb 5-1: config 162 has 1 interface, different from the descriptor's value: 2
[  624.425003][T15677] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71
[  624.438673][T15766] usb 6-1: USB disconnect, device number 29
[  624.456291][ T5760] usb 5-1: config 162 has no interface number 0
[  624.458717][T15677] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71
[  624.486388][ T5760] usb 5-1: config 162 interface 218 has no altsetting 0
[  624.514006][ T5760] usb 5-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7
[  624.540946][ T5760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  624.545536][T15677] usb 4-1: USB disconnect, device number 29
[  624.567054][   T30] audit: type=1400 audit(1779055918.237:140): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=20821 comm="syz.0.6510"
[  624.570575][ T5760] usb 5-1: Product: syz
[  624.606572][T20824] netlink: 'syz.2.6511': attribute type 21 has an invalid length.
[  624.630878][ T5760] usb 5-1: Manufacturer: syz
[  624.636214][T20824] IPv6: NLM_F_CREATE should be specified when creating new route
[  624.666897][ T5760] usb 5-1: SerialNumber: syz
[  625.071506][ T5760] usb 5-1: USB disconnect, device number 27
[  625.642225][T20856] loop2: detected capacity change from 0 to 164
[  625.834588][T20863] loop1: detected capacity change from 0 to 256
[  625.906186][T20863] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d)
[  626.025072][T20871] loop0: detected capacity change from 0 to 256
[  626.107562][T20871] FAT-fs (loop0): Directory bread(block 64) failed
[  626.126351][T20871] FAT-fs (loop0): Directory bread(block 65) failed
[  626.139568][T20874] sctp: [Deprecated]: syz.4.6536 (pid 20874) Use of struct sctp_assoc_value in delayed_ack socket option.
[  626.139568][T20874] Use struct sctp_sack_info instead
[  626.149375][T20871] FAT-fs (loop0): Directory bread(block 66) failed
[  626.220648][T20871] FAT-fs (loop0): Directory bread(block 67) failed
[  626.268579][T20871] FAT-fs (loop0): Directory bread(block 68) failed
[  626.337839][T20871] FAT-fs (loop0): Directory bread(block 69) failed
[  626.391384][T20871] FAT-fs (loop0): Directory bread(block 70) failed
[  626.433272][T20871] FAT-fs (loop0): Directory bread(block 71) failed
[  626.458553][T20871] FAT-fs (loop0): Directory bread(block 72) failed
[  626.482810][T20871] FAT-fs (loop0): Directory bread(block 73) failed
[  626.874148][T20894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6546'.
[  627.327639][T20910] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6554'.
[  627.382437][T20913] loop4: detected capacity change from 0 to 128
[  627.431812][T20913] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  627.453207][T20913] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  628.040391][   T30] audit: type=1800 audit(1779055921.707:141): pid=20924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.5.6560" name="/newroot/1132/file0" dev="tmpfs" ino=5799 res=0 errno=0
[  628.783598][T20966] xt_cluster: node mask cannot exceed total number of nodes
[  628.923490][T20970] openvswitch: netlink: Tunnel attr 148 out of range max 16
[  629.259945][T20987] misc userio: Invalid payload size
[  629.409932][T20979] loop4: detected capacity change from 0 to 4096
[  629.445351][T20979] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  629.532921][T20979] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  629.583624][T20997] ceph: No source
[  629.628345][T20979] ntfs3(loop4): Failed to load $Extend (-2).
[  629.660835][T20979] ntfs3(loop4): Failed to initialize $Extend.
[  629.769149][T20979] ntfs3: Cannot use different iocharset when remounting!
[  629.927048][T21001] loop0: detected capacity change from 0 to 4096
[  630.039905][ T5760] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  630.230084][ T5760] usb 4-1: Using ep0 maxpacket: 32
[  630.252643][ T5760] usb 4-1: config 0 has an invalid interface number: 146 but max is 0
[  630.292630][ T5760] usb 4-1: config 0 has no interface number 0
[  630.321305][ T5760] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  630.370104][ T5760] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  630.425095][ T5760] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  630.475733][ T5760] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  630.512355][T21022] loop4: detected capacity change from 0 to 2048
[  630.522849][ T5760] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[  630.563079][T21022] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  630.579933][ T5760] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  630.609610][ T5760] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  630.657462][ T5760] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  630.682333][ T5760] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  630.694966][T21029] lo: entered allmulticast mode
[  630.704290][ T5760] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  630.724000][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  630.741539][ T5760] usb 4-1: Product: syz
[  630.750327][ T5760] usb 4-1: Manufacturer: syz
[  630.760248][ T5760] usb 4-1: SerialNumber: syz
[  630.813542][ T5760] usb 4-1: config 0 descriptor??
[  630.828616][T21006] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  630.873032][ T5760] usb 4-1: can only deal with bulk endpoints; endpoint 1 is not bulk.
[  630.911717][ T5760] usb 4-1: couldn't find an output bulk endpoint. Bailing out.
[  631.042588][T21041] program syz.0.6615 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  631.110919][T21042] loop5: detected capacity change from 0 to 256
[  631.176759][T21042] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d)
[  631.211586][ T5760] usb 4-1: USB disconnect, device number 30
[  631.255393][T21046] loop1: detected capacity change from 0 to 512
[  631.284520][T21045] loop2: detected capacity change from 0 to 2048
[  631.302499][T21046] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  631.318515][T21045] EXT4-fs: Ignoring removed oldalloc option
[  631.336261][T21046] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.6618: bad orphan inode 131083
[  631.357413][T21046] loop1: lost filesystem error report for type 5 error -117
[  631.367723][T21045] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002]
[  631.408118][T21046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  631.416793][T21045] System zones: 
[  631.437177][T21046] EXT4-fs error (device loop1): ext4_find_dest_de:2049: inode #2: block 13: comm syz.1.6618: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1
[  631.443812][T21045] 0-7
[  631.510635][T21054] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  631.565623][T21045] 
[  631.575751][T21045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  631.626599][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  631.888355][ T5629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  631.946147][T21063] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6624'.
[  632.214549][T21073] loop1: detected capacity change from 0 to 1024
[  632.267554][T21077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  632.388354][T21083] loop4: detected capacity change from 0 to 256
[  632.438082][T21083] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  633.107828][T21107] openvswitch: netlink: IP tunnel dst address not specified
[  633.130702][ T5760] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  633.300205][ T5760] usb 1-1: Using ep0 maxpacket: 16
[  633.331067][ T5760] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  633.367474][ T5760] usb 1-1: config 0 has no interface number 0
[  633.386738][ T5760] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  633.416489][ T5760] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  633.458553][ T5760] usb 1-1: config 0 interface 41 has no altsetting 0
[  633.485461][ T5760] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  633.511822][T21119] loop3: detected capacity change from 0 to 128
[  633.518097][ T5760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.518139][ T5760] usb 1-1: Product: syz
[  633.548910][ T5760] usb 1-1: Manufacturer: syz
[  633.562697][T15677] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  633.567311][ T5760] usb 1-1: SerialNumber: syz
[  633.574254][T21119] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  633.593265][T21122] xt_hashlimit: invalid rate
[  633.610122][ T5760] usb 1-1: config 0 descriptor??
[  633.615767][T21119] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  633.631462][T21101] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  633.664690][T21101] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  633.752215][T15677] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  633.783568][T15677] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  633.817901][T15677] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  633.865638][T15677] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  633.909348][T15677] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  633.912692][T21101] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  633.965943][T15677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  633.985826][T21101] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  634.025244][T15677] usb 3-1: config 0 descriptor??
[  634.205914][ T5760] sr9700 1-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[  634.263827][ T5760] usb 1-1: USB disconnect, device number 36
[  634.295551][T15677] hdpvr 3-1:0.0: firmware version 0x1e dated ���&S�1;���O�X^��	w��g/��n#��
[  634.508053][T15677] hdpvr 3-1:0.0: device init failed
[  634.519956][T15677] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12
[  634.544433][T15677] usb 3-1: USB disconnect, device number 27
[  635.086825][T21155] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6669'.
[  635.110598][T21156] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  635.313273][T21158] loop4: detected capacity change from 0 to 4096
[  635.324565][T21162] loop5: detected capacity change from 0 to 128
[  635.387596][T21162] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  635.413429][T21158] kAFS: unable to lookup cell '}1&fo3�����b�&1��ML��9ěŜ�-b.�V1�x��G�]�+��w�Ăb!��XD,*���%ĻĒ��b)��XF,+�ˋĊb%��XE�*V����5Ěb-��XG�+��Ćb#�^���Dl*�'6���-Ėb+���Fl+�ۋĎb'���E�*v��=Ğ�b/���G�+���ććŁ�#� q�8D*����#đ�(q�8F|\+>!�Njĉ�$q�8E|R�*N��O�3ħř�,q�8G�+>#���ωą�"q��D|^\*� ._��/�+ĕ�*�e��Uq����F|]\+�!��׋ķč���&�q��E|W|O�*�/n?��;ĝ�.q��G�+�?��ă�!�xD<*~$?����'�O����œ��)�K���xF�Z<+~#~+~'~/� �ϋ�ŋ�O���/�%�H$Fb%N�%A%I�%ER%M�%C2%K�%Gr%O򥘔A�A�(e�2K7JY����R6)A�.�n�rJ�H��[���mR�v)��O�/�!�
[  635.413429][T21158] J���R��TL�S*.���JJwK���R��TN*/U�*J���R��TM�.�#ՐjJ���R��TO�/5�J��{��R��t��L�_j.��ZJ���R���Nj/u�'
[  635.518772][T21162] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  635.552255][T15677] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  635.717843][T15677] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  635.743440][T15677] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  635.752769][T21172] overlay: ./file0 is not a directory
[  635.767581][T15677] usb 3-1: Product: syz
[  635.787840][T15677] usb 3-1: Manufacturer: syz
[  635.821529][T15677] usb 3-1: SerialNumber: syz
[  635.859703][T15677] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  635.919943][ T5634] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  636.447250][ T5760] usb 3-1: USB disconnect, device number 28
[  636.691578][T21193] loop0: detected capacity change from 0 to 2048
[  636.734025][T21193] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=301129, location=301129
[  636.783210][T21193] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  637.070026][ T5634] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  637.108055][ T5634] ath9k_htc: Failed to initialize the device
[  637.138781][ T5760] usb 3-1: ath9k_htc: USB layer deinitialized
[  637.499288][T21216] loop1: detected capacity change from 0 to 2048
[  637.588645][T21216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  637.660035][T21216] ext4 filesystem being mounted at /1062/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  637.682953][T21216] Quota error (device loop1): do_check_range: Getting block 196612 out of range 1-5
[  637.697748][T21216] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  637.707822][T21216] EXT4-fs error (device loop1): ext4_acquire_dquot:7032: comm syz.1.6700: Failed to acquire dquot type 0
[  637.902927][ T5630] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  637.932663][T21232] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6705'.
[  638.180426][T21240] loop1: detected capacity change from 0 to 64
[  638.236841][T21240] hfs: request for non-existent node 327680 in B*Tree
[  638.290662][T21240] hfs: request for non-existent node 327680 in B*Tree
[  638.621790][   T30] audit: type=1326 audit(1779055932.297:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21250 comm="syz.1.6716" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db039ce59 code=0x7ffc0000
[  638.747666][   T30] audit: type=1326 audit(1779055932.327:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21250 comm="syz.1.6716" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db039ce59 code=0x7ffc0000
[  638.869931][   T30] audit: type=1326 audit(1779055932.337:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21250 comm="syz.1.6716" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f6db039ce59 code=0x7ffc0000
[  638.964159][   T30] audit: type=1326 audit(1779055932.337:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21250 comm="syz.1.6716" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6db039ce59 code=0x7ffc0000
[  639.152154][T21264] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6720'.
[  639.221411][T21264] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6720'.
[  639.608670][T21280] loop0: detected capacity change from 0 to 512
[  639.684187][T21280] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  639.767513][T21286] bpf: Bad value for 'mode'
[  639.829073][T21287] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  640.030061][ T5634] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  640.172563][ T5631] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  640.209905][ T5634] usb 3-1: Using ep0 maxpacket: 16
[  640.244832][ T5634] usb 3-1: config index 0 descriptor too short (expected 65, got 36)
[  640.289917][ T5634] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  640.332288][ T5634] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  640.360681][ T5634] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  640.403500][ T5634] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  640.451334][ T5634] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  640.491047][ T5634] usb 3-1: config 0 descriptor??
[  640.742195][T21309] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6743'.
[  640.793987][ T5634] usb 3-1: string descriptor 0 read error: -71
[  640.829087][ T5634] pxrc 3-1:0.0: Could not find endpoint
[  640.872236][ T5634] usb 3-1: USB disconnect, device number 29
[  641.235963][T21323] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  641.349886][ T5760] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  641.530020][ T5760] usb 5-1: Using ep0 maxpacket: 16
[  641.559338][ T5760] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  641.579304][ T5760] usb 5-1: config 0 has no interface number 0
[  641.596144][ T5760] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  641.642250][ T5760] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  641.665339][ T5760] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  641.691430][ T5760] usb 5-1: Product: syz
[  641.703476][ T5760] usb 5-1: SerialNumber: syz
[  641.719982][ T5850] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  641.749920][ T5760] usb 5-1: config 0 descriptor??
[  641.780236][ T5760] cm109 5-1:0.8: invalid payload size 208, expected 4
[  641.805555][ T5760] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input40
[  641.906603][ T5850] usb 2-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62
[  641.940022][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3
[  641.958483][ T5850] usb 2-1: Product: syz
[  641.968600][ T5850] usb 2-1: Manufacturer: syz
[  641.994581][ T5850] usb 2-1: SerialNumber: syz
[  642.077163][ T5850] usb 2-1: config 0 descriptor??
[  642.136175][T21341] Invalid source name
[  642.196344][ T5850] usb 2-1: selecting invalid altsetting 1
[  642.226277][ T5850] comedi comedi4: could not switch to alternate setting 1
[  642.256243][ T5850] usbduxfast 2-1:0.0: driver 'usbduxfast' failed to auto-configure device.
[  642.326625][    C0] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71
[  642.326929][ T5634] usb 5-1: USB disconnect, device number 28
[  642.333639][    C0] cm109 5-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19
[  642.373604][ T5850] usb 2-1: USB disconnect, device number 39
[  642.432127][ T5634] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  642.902805][ T5760] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  643.090289][ T5760] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  643.133317][ T5760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  643.166465][ T5760] usb 1-1: Product: syz
[  643.179472][ T5760] usb 1-1: Manufacturer: syz
[  643.195892][ T5760] usb 1-1: SerialNumber: syz
[  643.465600][ T5760] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  643.526774][ T5760] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  643.543369][ T5760] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  643.581778][ T5760] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  643.625581][ T5760] usb 1-1: USB disconnect, device number 37
[  643.938747][T21385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6782'.
[  644.409435][T21395] loop0: detected capacity change from 0 to 2048
[  644.439918][ T5760] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  644.480213][T21395] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  644.653410][ T5760] usb 4-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62
[  644.694996][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3
[  644.728788][ T5760] usb 4-1: Product: syz
[  644.749023][ T5760] usb 4-1: Manufacturer: syz
[  644.760428][ T5760] usb 4-1: SerialNumber: syz
[  644.782891][T21401] loop4: detected capacity change from 0 to 16
[  644.799623][ T5760] usb 4-1: config 0 descriptor??
[  644.844945][T21401] erofs (device loop4): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  644.890297][ T5760] usb 4-1: selecting invalid altsetting 1
[  644.908227][T21401] erofs (device loop4): mounted with root inode @ nid 36.
[  644.921271][ T5760] comedi comedi4: could not switch to alternate setting 1
[  644.951297][ T5760] usbduxfast 4-1:0.0: driver 'usbduxfast' failed to auto-configure device.
[  644.971986][T21403] netlink: 'syz.0.6789': attribute type 4 has an invalid length.
[  645.005301][T21403] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6789'.
[  645.047557][T21403] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  645.066001][T21383] loop1: detected capacity change from 0 to 32768
[  645.140963][T21401] erofs (device loop4): corrupted dir block 1 @ nid 36
[  645.273328][T21405] loop5: detected capacity change from 0 to 512
[  645.273627][ T5634] usb 4-1: USB disconnect, device number 31
[  645.878309][T21418] loop2: detected capacity change from 0 to 256
[  645.939621][T21418] exfat: Deprecated parameter 'utf8'
[  645.997839][T21418] exfat: Deprecated parameter 'utf8'
[  646.095419][T21418] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dfeff5, utbl_chksum : 0xe619d30d)
[  646.110265][T15677] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  646.287040][T21418] overlay: filesystem on ./file0 not supported
[  646.301870][T15677] usb 1-1: Using ep0 maxpacket: 8
[  646.338934][T15677] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  646.347463][T21431] loop4: detected capacity change from 0 to 64
[  646.401760][T15677] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  646.425674][T21431] hfs: request for non-existent node 327680 in B*Tree
[  646.445338][T15677] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  646.466011][T21431] hfs: request for non-existent node 327680 in B*Tree
[  646.493983][T15677] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  646.548055][T15677] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  646.589521][T15677] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  646.628963][T15677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  646.686283][T15677] usb 1-1: config 0 descriptor??
[  646.707424][T21419] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  646.730219][T21432] ALSA: mixer_oss: invalid OSS volume ''
[  647.053941][T21442] loop2: detected capacity change from 0 to 8
[  647.223570][T21446] Unsupported ieee802154 address type: 0
[  647.234167][T21442] SQUASHFS error: Failed to read block 0x6de: -5
[  647.274834][T21442] SQUASHFS error: Unable to read metadata cache entry [6dc]
[  647.310420][T15677] usb 1-1: USB disconnect, device number 38
[  647.321860][ T5638] Bluetooth: hci6: Opcode 0x0c03 failed: -19
[  647.347072][T21442] SQUASHFS error: Unable to read directory block [26067d:ffff]
[  647.963762][T21462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6819'.
[  648.041144][T21462] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6819'.
[  648.109910][T21462] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6819'.
[  648.578789][T21470] loop3: detected capacity change from 0 to 4096
[  648.661464][T21470] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  648.938437][T21470] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  648.996593][T21495] ieee802154 phy0 wpan0: encryption failed: -22
[  649.020605][T21470] ntfs3(loop3): ino=19, mi_enum_attr
[  649.569415][T21507] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6839'.
[  649.635176][T21507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6839'.
[  650.216077][T21523] loop2: detected capacity change from 0 to 64
[  650.355150][T21530] openvswitch: netlink: Flow actions attr not present in new flow.
[  650.372343][T21499] loop1: detected capacity change from 0 to 32768
[  650.455030][T21499] ERROR: (device loop1): dtSearch: stack overrun!
[  650.455030][T21499] 
[  650.539361][T21499] ERROR: (device loop1): remounting filesystem as read-only
[  650.566916][T21499] btstack dump:
[  650.590962][T21499] bn = 0, index = 4
[  650.605349][T21499] bn = 0, index = 4
[  650.625852][T21499] bn = 0, index = 4
[  650.645857][T21499] bn = 0, index = 4
[  650.665447][T21499] bn = 0, index = 4
[  650.694764][T21499] bn = 0, index = 4
[  650.708912][T21539] netlink: 'syz.3.6857': attribute type 1 has an invalid length.
[  650.724053][T21499] bn = 0, index = 4
[  650.743560][T21499] bn = 0, index = 0
[  650.746744][T21539] netlink: 1008 bytes leftover after parsing attributes in process `syz.3.6857'.
[  650.764267][T21499] jfs_lookup: dtSearch returned -5
[  650.875169][T21543] netlink: 'syz.5.6859': attribute type 1 has an invalid length.
[  650.913598][T21543] netlink: 936 bytes leftover after parsing attributes in process `syz.5.6859'.
[  651.313891][T21558] loop2: detected capacity change from 0 to 64
[  651.354743][T21558] syz.2.6867: attempt to access beyond end of device
[  651.354743][T21558] loop2: rw=0, sector=1024, nr_sectors = 2 limit=64
[  651.354814][T21558] Buffer I/O error on dev loop2, logical block 512, async page read
[  651.355045][T21558] syz.2.6867: attempt to access beyond end of device
[  651.355045][T21558] loop2: rw=0, sector=113152, nr_sectors = 2 limit=64
[  651.355089][T21558] Buffer I/O error on dev loop2, logical block 56576, async page read
[  651.533016][T21564] netlink: 'syz.5.6870': attribute type 10 has an invalid length.
[  651.533050][T21564] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6870'.
[  651.920495][T15677] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  652.099936][T15677] usb 2-1: Using ep0 maxpacket: 16
[  652.124366][T15677] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  652.158840][T15677] usb 2-1: config 0 has no interface number 0
[  652.182079][T15677] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  652.220082][T15677] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  652.233660][T15677] usb 2-1: config 0 interface 41 has no altsetting 0
[  652.235942][ T5760] IPVS: starting estimator thread 0...
[  652.244810][T15677] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  652.276618][T15677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.308850][T15677] usb 2-1: Product: syz
[  652.326032][T15677] usb 2-1: Manufacturer: syz
[  652.339937][T15677] usb 2-1: SerialNumber: syz
[  652.363369][T21593] IPVS: using max 23 ests per chain, 55200 per kthread
[  652.368431][T15677] usb 2-1: config 0 descriptor??
[  652.404659][T21570] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  652.440265][T21570] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  652.484734][T21599] loop2: detected capacity change from 0 to 64
[  652.518936][T21599] hfs: unable to locate alternate MDB
[  652.537934][T21599] hfs: continuing without an alternate MDB
[  652.576964][   T30] audit: type=1800 audit(1779055946.247:146): pid=21599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6887" name="file1" dev="loop2" ino=22 res=0 errno=0
[  652.691387][T21570] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  652.720648][ T6553] 
[  652.723010][ T6553] ======================================================
[  652.730027][ T6553] WARNING: possible circular locking dependency detected
[  652.731091][T21570] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  652.737050][ T6553] syzkaller #0 Tainted: G             L     
[  652.750094][ T6553] ------------------------------------------------------
[  652.757546][ T6553] kworker/u8:12/6553 is trying to acquire lock:
[  652.763791][ T6553] ffff88807d872670 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xa6/0xcf0
[  652.774573][ T6553] 
[  652.774573][ T6553] but task is already holding lock:
[  652.781938][ T6553] ffff888060ac60a8 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330
[  652.791521][ T6553] 
[  652.791521][ T6553] which lock already depends on the new lock.
[  652.791521][ T6553] 
[  652.801929][ T6553] 
[  652.801929][ T6553] the existing dependency chain (in reverse order) is:
[  652.810993][ T6553] 
[  652.810993][ T6553] -> #1 (&tree->tree_lock#2/1){+.+.}-{4:4}:
[  652.819139][ T6553]        __mutex_lock+0x1a4/0x1b10
[  652.824271][ T6553]        hfs_find_init+0x273/0x330
[  652.829424][ T6553]        hfs_ext_read_extent+0x19d/0x9d0
[  652.835110][ T6553]        hfs_extend_file+0x4ff/0xcf0
[  652.840420][ T6553]        hfs_bmap_reserve+0x2ab/0x3a0
[  652.845810][ T6553]        hfs_cat_create+0x348/0x980
[  652.851025][ T6553]        hfs_create+0x7e/0x110
[  652.855807][ T6553]        lookup_open.isra.0+0xc47/0x11b0
[  652.861460][ T6553]        path_openat+0x2291/0x31a0
[  652.866575][ T6553]        do_file_open+0x20e/0x430
[  652.871603][ T6553]        do_sys_openat2+0x10d/0x1e0
[  652.876810][ T6553]        __x64_sys_open+0xfe/0x1d0
[  652.881930][ T6553]        do_syscall_64+0x10b/0xf80
[  652.887068][ T6553]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  652.893487][ T6553] 
[  652.893487][ T6553] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}:
[  652.902717][ T6553]        __lock_acquire+0x14b8/0x2630
[  652.908098][ T6553]        lock_acquire+0x1b1/0x370
[  652.913133][ T6553]        __mutex_lock+0x1a4/0x1b10
[  652.918245][ T6553]        hfs_extend_file+0xa6/0xcf0
[  652.923468][ T6553]        hfs_bmap_reserve+0x2ab/0x3a0
[  652.928859][ T6553]        __hfs_ext_write_extent+0x3c4/0x510
[  652.934770][ T6553]        hfs_ext_write_extent+0x1b7/0x200
[  652.940512][ T6553]        hfs_write_inode+0xce/0xab0
[  652.945716][ T6553]        __writeback_single_inode+0xcd4/0x1350
[  652.951893][ T6553]        writeback_sb_inodes+0x766/0x1c60
[  652.957631][ T6553]        wb_writeback+0x1bf/0xb90
[  652.962684][ T6553]        wb_workfn+0x14f/0xc00
[  652.967468][ T6553]        process_one_work+0xa0e/0x1980
[  652.972935][ T6553]        worker_thread+0x5ef/0xe50
[  652.978057][ T6553]        kthread+0x370/0x450
[  652.982657][ T6553]        ret_from_fork+0x72b/0xd50
[  652.987782][ T6553]        ret_from_fork_asm+0x1a/0x30
[  652.993082][ T6553] 
[  652.993082][ T6553] other info that might help us debug this:
[  652.993082][ T6553] 
[  653.003302][ T6553]  Possible unsafe locking scenario:
[  653.003302][ T6553] 
[  653.010742][ T6553]        CPU0                    CPU1
[  653.016094][ T6553]        ----                    ----
[  653.021446][ T6553]   lock(&tree->tree_lock#2/1);
[  653.026328][ T6553]                                lock(&HFS_I(tree->inode)->extents_lock);
[  653.034837][ T6553]                                lock(&tree->tree_lock#2/1);
[  653.042235][ T6553]   lock(&HFS_I(tree->inode)->extents_lock);
[  653.048220][ T6553] 
[  653.048220][ T6553]  *** DEADLOCK ***
[  653.048220][ T6553] 
[  653.056349][ T6553] 3 locks held by kworker/u8:12/6553:
[  653.061712][ T6553]  #0: ffff8880206f8140 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980
[  653.072469][ T6553]  #1: ffffc900035cfd08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980
[  653.084354][ T6553]  #2: ffff888060ac60a8 (&tree->tree_lock#2/1){+.+.}-{4:4}, at: hfs_find_init+0x273/0x330
[  653.094347][ T6553] 
[  653.094347][ T6553] stack backtrace:
[  653.100237][ T6553] CPU: 1 UID: 0 PID: 6553 Comm: kworker/u8:12 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  653.100286][ T6553] Tainted: [L]=SOFTLOCKUP
[  653.100299][ T6553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  653.100323][ T6553] Workqueue: writeback wb_workfn (flush-7:2)
[  653.100385][ T6553] Call Trace:
[  653.100398][ T6553]  <TASK>
[  653.100412][ T6553]  dump_stack_lvl+0x100/0x190
[  653.100449][ T6553]  print_circular_bug.cold+0x178/0x1c7
[  653.100507][ T6553]  check_noncircular+0x146/0x160
[  653.100543][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.100592][ T6553]  __lock_acquire+0x14b8/0x2630
[  653.100637][ T6553]  ? __pfx_stack_trace_save+0x10/0x10
[  653.100673][ T6553]  lock_acquire+0x1b1/0x370
[  653.100712][ T6553]  ? hfs_extend_file+0xa6/0xcf0
[  653.100767][ T6553]  ? __pfx___might_resched+0x10/0x10
[  653.100813][ T6553]  ? irqentry_exit+0x24d/0x7e0
[  653.100867][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.100907][ T6553]  ? lockdep_hardirqs_on+0x78/0x100
[  653.100963][ T6553]  __mutex_lock+0x1a4/0x1b10
[  653.100994][ T6553]  ? hfs_extend_file+0xa6/0xcf0
[  653.101045][ T6553]  ? hfs_extend_file+0xa6/0xcf0
[  653.101107][ T6553]  ? __pfx___mutex_lock+0x10/0x10
[  653.101140][ T6553]  ? lock_acquire+0x5e/0x370
[  653.101184][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.101224][ T6553]  ? trace_contention_end+0x122/0x170
[  653.101270][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.101314][ T6553]  ? hfs_extend_file+0xa6/0xcf0
[  653.101365][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.101405][ T6553]  hfs_extend_file+0xa6/0xcf0
[  653.101459][ T6553]  ? __pfx_hfs_extend_file+0x10/0x10
[  653.101512][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.101560][ T6553]  hfs_bmap_reserve+0x2ab/0x3a0
[  653.101614][ T6553]  __hfs_ext_write_extent+0x3c4/0x510
[  653.101665][ T6553]  ? hfs_find_init+0x273/0x330
[  653.101704][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.101748][ T6553]  hfs_ext_write_extent+0x1b7/0x200
[  653.101801][ T6553]  ? __pfx_hfs_ext_write_extent+0x10/0x10
[  653.101859][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.101899][ T6553]  ? __mpage_writepages+0x1a8/0x210
[  653.101934][ T6553]  ? __pfx___mpage_writepages+0x10/0x10
[  653.101969][ T6553]  hfs_write_inode+0xce/0xab0
[  653.102002][ T6553]  ? __pfx_hfs_write_inode+0x10/0x10
[  653.102034][ T6553]  ? __lock_acquire+0x4a5/0x2630
[  653.102091][ T6553]  ? __writeback_single_inode+0x454/0x1350
[  653.102144][ T6553]  ? __writeback_single_inode+0x454/0x1350
[  653.102197][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.102243][ T6553]  __writeback_single_inode+0xcd4/0x1350
[  653.102302][ T6553]  ? __pfx___writeback_single_inode+0x10/0x10
[  653.102355][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.102395][ T6553]  ? do_raw_spin_unlock+0x145/0x1e0
[  653.102443][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.102488][ T6553]  writeback_sb_inodes+0x766/0x1c60
[  653.102551][ T6553]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  653.102605][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.102675][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.102715][ T6553]  ? rcu_is_watching+0x12/0xc0
[  653.102764][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.102805][ T6553]  ? queue_io+0x287/0x540
[  653.102851][ T6553]  wb_writeback+0x1bf/0xb90
[  653.102909][ T6553]  ? __pfx_wb_writeback+0x10/0x10
[  653.102966][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.103007][ T6553]  ? mark_held_locks+0x40/0x70
[  653.103046][ T6553]  ? _raw_spin_unlock_irq+0x23/0x50
[  653.103101][ T6553]  wb_workfn+0x14f/0xc00
[  653.103156][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.103196][ T6553]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  653.103248][ T6553]  ? __pfx_wb_workfn+0x10/0x10
[  653.103302][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.103346][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.103388][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.103429][ T6553]  ? rcu_is_watching+0x12/0xc0
[  653.103477][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.103522][ T6553]  process_one_work+0xa0e/0x1980
[  653.103574][ T6553]  ? __pfx_process_one_work+0x10/0x10
[  653.103614][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.103663][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.103707][ T6553]  worker_thread+0x5ef/0xe50
[  653.103756][ T6553]  ? kthread+0x13a/0x450
[  653.103791][ T6553]  ? __pfx_worker_thread+0x10/0x10
[  653.103831][ T6553]  kthread+0x370/0x450
[  653.103866][ T6553]  ? __pfx_kthread+0x10/0x10
[  653.103904][ T6553]  ret_from_fork+0x72b/0xd50
[  653.103945][ T6553]  ? __pfx_ret_from_fork+0x10/0x10
[  653.103984][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.104024][ T6553]  ? rcu_is_watching+0x12/0xc0
[  653.104076][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.104116][ T6553]  ? __switch_to+0x800/0x1100
[  653.104164][ T6553]  ? __switch_to_asm+0x39/0x70
[  653.104210][ T6553]  ? __pfx_kthread+0x10/0x10
[  653.104248][ T6553]  ret_from_fork_asm+0x1a/0x30
[  653.104305][ T6553]  </TASK>
[  653.157490][T21581] loop4: detected capacity change from 0 to 32768
[  653.228415][ T6553] hfs: new node 0 already hashed?
[  653.337407][T21581] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6875 (21581)
[  653.342455][ T6553] ------------[ cut here ]------------
[  653.615022][ T6553] 1
[  653.615039][ T6553] WARNING: fs/hfs/bnode.c:520 at hfs_bnode_create.cold+0x41/0x49, CPU#1: kworker/u8:12/6553
[  653.627640][ T6553] Modules linked in:
[  653.631602][ T6553] CPU: 1 UID: 0 PID: 6553 Comm: kworker/u8:12 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  653.642770][ T6553] Tainted: [L]=SOFTLOCKUP
[  653.647095][ T6553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  653.657192][ T6553] Workqueue: writeback wb_workfn (flush-7:2)
[  653.663268][ T6553] RIP: 0010:hfs_bnode_create.cold+0x41/0x49
[  653.669181][ T6553] Code: 25 11 65 0a e9 c7 35 d1 01 e8 2b 1f e1 00 4c 89 f7 e8 13 11 65 0a e8 1e 1f e1 00 89 ee 48 c7 c7 40 e3 d1 8b e8 50 df fa ff 90 <0f> 0b 90 e9 c9 38 d1 01 e8 02 1f e1 00 e8 bd 5b 4d 00 e9 25 3b d1
[  653.688841][ T6553] RSP: 0018:ffffc900035cf020 EFLAGS: 00010282
[  653.694960][ T6553] RAX: 000000000000001f RBX: ffff88807ef49600 RCX: 0000000000000000
[  653.702970][ T6553] RDX: 000000000000001f RSI: ffffffff81e72d69 RDI: fffff520006b9df5
[  653.711104][ T6553] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[  653.719092][ T6553] R10: 0000000080000000 R11: 6972775f5f203f20 R12: dffffc0000000000
[  653.727101][ T6553] R13: ffff888060ac6000 R14: ffff888060ac60d8 R15: 0000000000000000
[  653.735164][ T6553] FS:  0000000000000000(0000) GS:ffff88812446e000(0000) knlGS:0000000000000000
[  653.744157][ T6553] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  653.750983][ T6553] CR2: 00007f308e607a58 CR3: 000000002a973000 CR4: 0000000000350ef0
[  653.758982][ T6553] Call Trace:
[  653.762304][ T6553]  <TASK>
[  653.765237][ T6553]  ? _raw_spin_unlock+0x28/0x50
[  653.770175][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.775841][ T6553]  ? hfs_bnode_put+0x208/0x480
[  653.780666][ T6553]  hfs_bmap_alloc+0x5a7/0x6b0
[  653.785383][ T6553]  ? __pfx_hfs_bmap_alloc+0x10/0x10
[  653.790778][ T6553]  ? __asan_memcpy+0x3c/0x60
[  653.795396][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.801071][ T6553]  ? hfs_bnode_read.part.0+0x298/0x330
[  653.806566][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.812248][ T6553]  ? folio_mark_accessed+0xf3/0x1040
[  653.817570][ T6553]  hfs_btree_inc_height.isra.0+0xff/0x820
[  653.823341][ T6553]  ? rcu_is_watching+0x12/0xc0
[  653.828144][ T6553]  ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10
[  653.834526][ T6553]  ? do_raw_spin_unlock+0x145/0x1e0
[  653.839773][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.845500][ T6553]  ? _raw_spin_unlock+0x28/0x50
[  653.850419][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.856081][ T6553]  ? hfs_bnode_put+0x208/0x480
[  653.860916][ T6553]  hfs_brec_insert+0x8ba/0xc20
[  653.865722][ T6553]  ? __pfx_hfs_brec_insert+0x10/0x10
[  653.871094][ T6553]  ? hfs_bmap_reserve+0x2c5/0x3a0
[  653.876175][ T6553]  __hfs_ext_write_extent+0x3ef/0x510
[  653.881620][ T6553]  ? hfs_find_init+0x273/0x330
[  653.886417][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.892126][ T6553]  hfs_ext_write_extent+0x1b7/0x200
[  653.897365][ T6553]  ? __pfx_hfs_ext_write_extent+0x10/0x10
[  653.903145][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.908807][ T6553]  ? __mpage_writepages+0x1a8/0x210
[  653.914046][ T6553]  ? __pfx___mpage_writepages+0x10/0x10
[  653.919653][ T6553]  hfs_write_inode+0xce/0xab0
[  653.924369][ T6553]  ? __pfx_hfs_write_inode+0x10/0x10
[  653.929677][ T6553]  ? __lock_acquire+0x4a5/0x2630
[  653.934704][ T6553]  ? __writeback_single_inode+0x454/0x1350
[  653.940572][ T6553]  ? __writeback_single_inode+0x454/0x1350
[  653.946399][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.952141][ T6553]  __writeback_single_inode+0xcd4/0x1350
[  653.957820][ T6553]  ? __pfx___writeback_single_inode+0x10/0x10
[  653.963937][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.969599][ T6553]  ? do_raw_spin_unlock+0x145/0x1e0
[  653.974861][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.980546][ T6553]  writeback_sb_inodes+0x766/0x1c60
[  653.985788][ T6553]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  653.991523][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  653.997237][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.002933][ T6553]  ? rcu_is_watching+0x12/0xc0
[  654.007744][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.013475][ T6553]  ? queue_io+0x287/0x540
[  654.017850][ T6553]  wb_writeback+0x1bf/0xb90
[  654.022513][ T6553]  ? __pfx_wb_writeback+0x10/0x10
[  654.027605][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.033304][ T6553]  ? mark_held_locks+0x40/0x70
[  654.038102][ T6553]  ? _raw_spin_unlock_irq+0x23/0x50
[  654.043387][ T6553]  wb_workfn+0x14f/0xc00
[  654.047676][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.053359][ T6553]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  654.059207][ T6553]  ? __pfx_wb_workfn+0x10/0x10
[  654.064035][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.069698][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.075393][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.081074][ T6553]  ? rcu_is_watching+0x12/0xc0
[  654.085857][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.091546][ T6553]  process_one_work+0xa0e/0x1980
[  654.096527][ T6553]  ? __pfx_process_one_work+0x10/0x10
[  654.101945][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.107612][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.113321][ T6553]  worker_thread+0x5ef/0xe50
[  654.117948][ T6553]  ? kthread+0x13a/0x450
[  654.122249][ T6553]  ? __pfx_worker_thread+0x10/0x10
[  654.127398][ T6553]  kthread+0x370/0x450
[  654.131527][ T6553]  ? __pfx_kthread+0x10/0x10
[  654.136152][ T6553]  ret_from_fork+0x72b/0xd50
[  654.140807][ T6553]  ? __pfx_ret_from_fork+0x10/0x10
[  654.145971][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.151665][ T6553]  ? rcu_is_watching+0x12/0xc0
[  654.156468][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.162153][ T6553]  ? __switch_to+0x800/0x1100
[  654.166863][ T6553]  ? __switch_to_asm+0x39/0x70
[  654.171679][ T6553]  ? __pfx_kthread+0x10/0x10
[  654.176296][ T6553]  ret_from_fork_asm+0x1a/0x30
[  654.181122][ T6553]  </TASK>
[  654.184147][ T6553] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  654.191426][ T6553] CPU: 1 UID: 0 PID: 6553 Comm: kworker/u8:12 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  654.202540][ T6553] Tainted: [L]=SOFTLOCKUP
[  654.206855][ T6553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  654.217165][ T6553] Workqueue: writeback wb_workfn (flush-7:2)
[  654.223179][ T6553] Call Trace:
[  654.226450][ T6553]  <TASK>
[  654.229378][ T6553]  dump_stack_lvl+0x100/0x190
[  654.234077][ T6553]  vpanic+0x552/0x970
[  654.238061][ T6553]  ? __pfx_vpanic+0x10/0x10
[  654.242604][ T6553]  ? lock_release+0x245/0x310
[  654.247293][ T6553]  panic+0xd1/0xe0
[  654.251016][ T6553]  ? __pfx_panic+0x10/0x10
[  654.255452][ T6553]  ? check_panic_on_warn+0x1f/0x90
[  654.260584][ T6553]  check_panic_on_warn.cold+0x19/0x34
[  654.265973][ T6553]  ? hfs_bnode_create.cold+0x41/0x49
[  654.271275][ T6553]  __warn.cold+0x191/0x328
[  654.275706][ T6553]  __report_bug+0x296/0x3d0
[  654.280236][ T6553]  ? hfs_bnode_create.cold+0x41/0x49
[  654.285545][ T6553]  ? __pfx___report_bug+0x10/0x10
[  654.290599][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.296286][ T6553]  ? irq_work_queue+0xce/0x100
[  654.301070][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.306718][ T6553]  ? __wake_up_klogd+0xe2/0x140
[  654.311586][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.317234][ T6553]  ? vprintk_emit+0x1c9/0x6b0
[  654.321940][ T6553]  ? __pfx_vprintk_emit+0x10/0x10
[  654.326995][ T6553]  ? hfs_bnode_create.cold+0x41/0x49
[  654.332298][ T6553]  report_bug+0xb2/0x220
[  654.336573][ T6553]  ? hfs_bnode_create.cold+0x41/0x49
[  654.341873][ T6553]  handle_bug+0x16a/0x2a0
[  654.346215][ T6553]  exc_invalid_op+0x17/0x50
[  654.350729][ T6553]  asm_exc_invalid_op+0x1a/0x20
[  654.355587][ T6553] RIP: 0010:hfs_bnode_create.cold+0x41/0x49
[  654.361497][ T6553] Code: 25 11 65 0a e9 c7 35 d1 01 e8 2b 1f e1 00 4c 89 f7 e8 13 11 65 0a e8 1e 1f e1 00 89 ee 48 c7 c7 40 e3 d1 8b e8 50 df fa ff 90 <0f> 0b 90 e9 c9 38 d1 01 e8 02 1f e1 00 e8 bd 5b 4d 00 e9 25 3b d1
[  654.381119][ T6553] RSP: 0018:ffffc900035cf020 EFLAGS: 00010282
[  654.387200][ T6553] RAX: 000000000000001f RBX: ffff88807ef49600 RCX: 0000000000000000
[  654.395171][ T6553] RDX: 000000000000001f RSI: ffffffff81e72d69 RDI: fffff520006b9df5
[  654.403143][ T6553] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000
[  654.411115][ T6553] R10: 0000000080000000 R11: 6972775f5f203f20 R12: dffffc0000000000
[  654.419089][ T6553] R13: ffff888060ac6000 R14: ffff888060ac60d8 R15: 0000000000000000
[  654.427076][ T6553]  ? vprintk_emit+0x1c9/0x6b0
[  654.431807][ T6553]  ? _raw_spin_unlock+0x28/0x50
[  654.436699][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.442358][ T6553]  ? hfs_bnode_put+0x208/0x480
[  654.447163][ T6553]  hfs_bmap_alloc+0x5a7/0x6b0
[  654.451874][ T6553]  ? __pfx_hfs_bmap_alloc+0x10/0x10
[  654.457099][ T6553]  ? __asan_memcpy+0x3c/0x60
[  654.461708][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.467359][ T6553]  ? hfs_bnode_read.part.0+0x298/0x330
[  654.472836][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.478483][ T6553]  ? folio_mark_accessed+0xf3/0x1040
[  654.483794][ T6553]  hfs_btree_inc_height.isra.0+0xff/0x820
[  654.489539][ T6553]  ? rcu_is_watching+0x12/0xc0
[  654.494329][ T6553]  ? __pfx_hfs_btree_inc_height.isra.0+0x10/0x10
[  654.500686][ T6553]  ? do_raw_spin_unlock+0x145/0x1e0
[  654.505912][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.511652][ T6553]  ? _raw_spin_unlock+0x28/0x50
[  654.516525][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.522174][ T6553]  ? hfs_bnode_put+0x208/0x480
[  654.526970][ T6553]  hfs_brec_insert+0x8ba/0xc20
[  654.531766][ T6553]  ? __pfx_hfs_brec_insert+0x10/0x10
[  654.537072][ T6553]  ? hfs_bmap_reserve+0x2c5/0x3a0
[  654.542128][ T6553]  __hfs_ext_write_extent+0x3ef/0x510
[  654.547530][ T6553]  ? hfs_find_init+0x273/0x330
[  654.552305][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.557963][ T6553]  hfs_ext_write_extent+0x1b7/0x200
[  654.563198][ T6553]  ? __pfx_hfs_ext_write_extent+0x10/0x10
[  654.568948][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.574594][ T6553]  ? __mpage_writepages+0x1a8/0x210
[  654.579804][ T6553]  ? __pfx___mpage_writepages+0x10/0x10
[  654.585364][ T6553]  hfs_write_inode+0xce/0xab0
[  654.590050][ T6553]  ? __pfx_hfs_write_inode+0x10/0x10
[  654.595408][ T6553]  ? __lock_acquire+0x4a5/0x2630
[  654.600379][ T6553]  ? __writeback_single_inode+0x454/0x1350
[  654.606218][ T6553]  ? __writeback_single_inode+0x454/0x1350
[  654.612048][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.617711][ T6553]  __writeback_single_inode+0xcd4/0x1350
[  654.623385][ T6553]  ? __pfx___writeback_single_inode+0x10/0x10
[  654.629494][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.635143][ T6553]  ? do_raw_spin_unlock+0x145/0x1e0
[  654.640370][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.646028][ T6553]  writeback_sb_inodes+0x766/0x1c60
[  654.651270][ T6553]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  654.656932][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.662612][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.668260][ T6553]  ? rcu_is_watching+0x12/0xc0
[  654.673046][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.678701][ T6553]  ? queue_io+0x287/0x540
[  654.683059][ T6553]  wb_writeback+0x1bf/0xb90
[  654.687600][ T6553]  ? __pfx_wb_writeback+0x10/0x10
[  654.692657][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.698307][ T6553]  ? mark_held_locks+0x40/0x70
[  654.703088][ T6553]  ? _raw_spin_unlock_irq+0x23/0x50
[  654.708319][ T6553]  wb_workfn+0x14f/0xc00
[  654.712596][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.718245][ T6553]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  654.724079][ T6553]  ? __pfx_wb_workfn+0x10/0x10
[  654.728875][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.734524][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.740172][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.745823][ T6553]  ? rcu_is_watching+0x12/0xc0
[  654.750609][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.756264][ T6553]  process_one_work+0xa0e/0x1980
[  654.761234][ T6553]  ? __pfx_process_one_work+0x10/0x10
[  654.766625][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.772280][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.777938][ T6553]  worker_thread+0x5ef/0xe50
[  654.782555][ T6553]  ? kthread+0x13a/0x450
[  654.786806][ T6553]  ? __pfx_worker_thread+0x10/0x10
[  654.791931][ T6553]  kthread+0x370/0x450
[  654.796013][ T6553]  ? __pfx_kthread+0x10/0x10
[  654.800616][ T6553]  ret_from_fork+0x72b/0xd50
[  654.805225][ T6553]  ? __pfx_ret_from_fork+0x10/0x10
[  654.810348][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.815995][ T6553]  ? rcu_is_watching+0x12/0xc0
[  654.820781][ T6553]  ? srso_alias_return_thunk+0x5/0xfbef5
[  654.826514][ T6553]  ? __switch_to+0x800/0x1100
[  654.831211][ T6553]  ? __switch_to_asm+0x39/0x70
[  654.836011][ T6553]  ? __pfx_kthread+0x10/0x10
[  654.840633][ T6553]  ret_from_fork_asm+0x1a/0x30
[  654.845433][ T6553]  </TASK>
[  654.848540][ T6553] Kernel Offset: disabled
[  654.852854][ T6553] Rebooting in 86400 seconds..