last executing test programs:

2m10.046244126s ago: executing program 1 (id=1169):
r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000640)={[{@prjquota}, {@delalloc}]}, 0x0, 0x47c, &(0x7f00000001c0)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000680)={{}, {0x1, 0x2}, [{0x2, 0x0, 0xee01}, {0x2, 0x3}, {0x2, 0x6}, {0x2, 0x6}, {0x2, 0x1}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x4}], {0x10, 0x5}, {0x20, 0x1}}, 0x5c, 0x3)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x7, 0xb5, 0x5, 0xf, 0x10001})

2m9.635263274s ago: executing program 1 (id=1160):
r0 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
wait4(r0, 0x0, 0x20000002, 0x0)
ptrace$cont(0x20, r0, 0xffffffffffff7acb, 0x1000000000005)

2m9.381385719s ago: executing program 1 (id=1163):
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00')
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r1=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000080)={r1, @in6={{0xa, 0x4e22, 0x5, @empty, 0xfc}}, 0x6, 0x400}, &(0x7f0000000480)=0x90)

2m9.002916247s ago: executing program 1 (id=1170):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'tunl0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000080)=@bridge_setlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x8, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0x40}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x44}}, 0x0)

2m8.832697431s ago: executing program 1 (id=1172):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050)

2m8.748597812s ago: executing program 1 (id=1173):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000880)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@block_validity}, {@inlinecrypt}, {@noblock_validity}, {@usrjquota}]}, 0x9, 0x454, &(0x7f0000000400)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
sync()
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)

1m53.295164424s ago: executing program 32 (id=1173):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000880)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@block_validity}, {@inlinecrypt}, {@noblock_validity}, {@usrjquota}]}, 0x9, 0x454, &(0x7f0000000400)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
sync()
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)

2.314319133s ago: executing program 0 (id=2464):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000040)={[{@nobarrier}, {@nobarrier}, {@barrier}, {@nls={'nls', 0x3d, 'macromanian'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6be, &(0x7f0000001640)="$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")
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8f74c177cb5e687b, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES16], 0x0, 0x0, &(0x7f0000000c40))
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

2.285591484s ago: executing program 2 (id=2465):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000c80)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x640100fd, 0x1}, @phonet={0x23, 0x1, 0x8, 0x2}, @generic={0x2a, "85424c9251b9f4e60a7f4f9739ca"}, 0x800, 0x0, 0x0, 0x0, 0xff80, 0x0, 0x0, 0x80000000, 0x9})

2.126508097s ago: executing program 2 (id=2467):
r0 = io_uring_setup(0x2e34, &(0x7f0000000180))
close_range(r0, 0xffffffffffffffff, 0x0)
semget$private(0x0, 0x6, 0x583)
semop(0x0, &(0x7f0000000240)=[{0x0, 0x8001}], 0x1)

2.056119598s ago: executing program 0 (id=2468):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002", 0x17}], 0x1}, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1})
r0 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl(r0, 0x8b32, &(0x7f0000000040))

1.95025634s ago: executing program 2 (id=2471):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, r1, 0x1, 0x4, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x6, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7, 0x5, 0x8, 0x8, 0x1, 0x8, 0x5]}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x10)

1.894151911s ago: executing program 0 (id=2472):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0xfffffffe}, 0x1c)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4)
syz_emit_ethernet(0x2b, &(0x7f0000000040)={@random="c3ad7f0ceb48", @random="f8794fda5bd6", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9, 0x0, @opaque='\"'}}}}}, 0x0)

1.884446262s ago: executing program 5 (id=2473):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
close(r0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x20)

1.778419274s ago: executing program 2 (id=2474):
syz_mount_image$jfs(&(0x7f0000000380), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2208088, &(0x7f0000000b80)=ANY=[@ANYBLOB="009c1b06223d15055c6d39aecad6836294e3e1fc38b80cd5eb20b39dc7dceb316fa1203f802b4368850fdef916202a989ea54a4e800c324c19bad386d9a72fc1de2fa7f100eae8a434158d0ed0d6a9061d60971bcf895342571bae0ea58240ebdd0f6f3dd42fa0f9754224a9c2045d2e098e01000000943549e2c2e191b7da91b8645dfdf7020d432eb2b11293b324ceaf445cdc974884e2d5ac6dbf8b92da3a8a65176db66ca798dce71880c5e6837b5a99b6696d5003a06f62bbfb0b9ba0a6ffbfc2dd37662e077430379386d8e3abf802401b0e8382824a68cf51cde62ac99470edf8c757396564c8079d89017df3182005ec9fe433b122f1c02ca72eb68e41fc7ff69975649149ff4be64bd665e56a5fe9ef4d6ee02ff30ad838a9744100d520765c83c0178534e09d2f578bd10d3bfc68d1e75d6965613448d1045b6a0298d0804f82bc984e271c346d1e30886f81feb02b8320d47dc752b2dd23b4d8e20f2bda7ff84c57d63da96f04", @ANYRES8, @ANYRES32, @ANYRESOCT=0x0, @ANYRES16=0x0, @ANYRES64], 0x41, 0x5e97, &(0x7f0000005e00)="$eJzs3UuPFNfZB/CnL9Nz4TWMLL2WhbIYY+dCMDBcDLnb3iRSVpEiNlmBxmMLBScRkCi2UBhrFvkGUbJIlOyzyifIHj6EF1kGCZKNV6moZs6BmkoPzQDT1TPn95OaqqdOVfcp/n2druoTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED88Ps/PteLiKu/SguWI/4vBhH9iMW6XomIxZXlvP4wIl6PreZ4rV59PqLefuufYxEXI+L+0YiHj+6s1YvPP2M//n3k/4/9868/OP37v/3u3sk/nnq73f6n9X/c+8nddFsAAADAnlRVVfXSx/zj6fN9v+tOAQBTkV//qyQvV6vVarVaffjqpmq8u80iIjaa29TvGe6OuzIAYHZtxBddd4EOyb9ow4g40nUngJnmuPvD6eGjO2u9lG+v+Xqwst2ejwXZkf9G7/H5HbtNJ2kfYzKt+9dmDOLVXfqzOKU+zJKcf7+d/9Xt9lFab7/zn5bd8h9tn/pUnJz/oJ1/y+HJvz82/1Ll/Id7yn8gfwAAAAAAmGH57//LU/v+t7fjerP5l7M7Ez3t+9+VKfUBAAAAAAAAAF62Fx3/7zHj/wEAAMDMqj+r1/589Mmy3T5j18uv9CJeaa0PFCadLLPUdT8AAAAAAAAAAAAAoCTD7WN4r/Qi5iLilaWlqqrqS1O73qsX3f6gK33/oWRdP8kDAMC2+0db5/L3IhYi4kr6rb+5paWlqlpYXKqWqsX5/H52NL9QLTY+1+ZpvWx+9AxviIejqr6yhcZ2TZM+L09qb19ffVujavAMHZuODgMHgIjYfjV66BXpkKmqY9H1uxwOBo//w8fjn2fR9f0UAAAA2H9VVVW99HPex9N3/v2uOwUATEV+/W9/L6BWq9Vqtfrw1U3VeHebRURsNLep3zPcHXdlAMDs2ogvuu4CHZJ/0YYR8XrXnQBmWq/rDrAvHj66s9ZL+faarwdpfPd8LMiO/Dd6W9vl7cdNJ2kfYzKt+9dmDOLVXfrz2pT6MEty/v12/le320dpvf3Of1p2y7/ez+UO+tO1nP+gnX/L4cm/Pzb/UuX8h3vKfyB/AAAAAACYYfnv/8u+/827DAAAAAAAAAAHzsNHd9byea/5+/8vjVnP+Z+HU86/J/8i5fz7rfy/1lpv0Jh/8P6T/P/16M7aj/7w+fE8fdb85/NML92zeuke0Uu31Bum6XPv2vy4hZtzg1F9S3O9/mCYjvmp5j6M63Ej1mN1x7r99P/xpP3cjva6p3Pprrzdfn5H+3C7vbH9hR3tc+l3B6rF3H4m1uLncSM+2Gqv2+Yn7P/ChPZqQnvOf+DxX6Sc/7BxqfNfSu291rT24LP+/zzum9Nxt/Peb+/dX93/3ZloMwaP962p3r8THfRn6//kyCh+eWv95plfX7t9++a5SJMdS89HmrxkOf+5dHn8/P/mdnt+3m8+Xh98Ntpz/rNiM4a75v9mY77e35NT7lsXcv6jdMn5f5Daxz/+D3L+uz/+T3XQHwAAAAAAAAAAAAAAAHiaqqq2ThF9LyIupfN/ujo3EwCYrvz6XyV5uVqtVqvV6sNXN1XjvdssIuLvzW3q9wy/GXdlAMAs+09EfN51J+iM/AuWf++vnr7VdWeAqbr1yac/vXbjxvrNW133BAAAAAAAAAB4Xnn8z5XG+M9vRcRya70d47++HysvOv7nMM88HmD0+Qf63ovN/mjQbww3/kY8ffzvE/H08b+HE25vbkL7aEL72EHMGxYmtI890aMh5/9GY7zzOv/jreHXSxj/tT3mfQly/ica9+c6/6+21mvmX/3lIOff35H/2dsf/+LsrU8+PX3942sfrX+0/rOLq6uXLlx+Z/Xy6tkPr99YT/922OP9lfPPY187DrQsOf+cufzLkvP/cqrlX5ac/1dSLf+y5Pzz+z35lyXnnz/7yL8sOf+TqZZ/WXL+X0+1/MuS8z+VavmXJef/dqrlX5ac/+lUy78sOf8zqZZ/WXL+Z1Mt/7Lk/PM3XPIvS84/H9kg/7Lk/M+nWv5lyflfSLX8y5Lzv5hq+Zcl5/9OquVflpz/pVTLvyw5/8upln9Zcv7fSLX8y5Lz/2aq5V+WnP+3Ui3/suT8v51q+Zcl5/+dVMu/LDn/76Za/mXJ+X8v1fIvS87/3VTLvyxPfv/fjBkzZvJM189MAAAAAAAAAAAAAEDbNA4n7nofAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+C87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLevcbIdZZ3AD97c9YOly2E4IYAG8cEkyzZ9T2mNZhbSRPSUiC0pRfj2mtj8K1em1sjxSi0RGrURiof4EO5Fal8qYgAVVSlyJVagQQS+UQrtQ2pAlVEoTW0H6AibDUz7/PuzHivZzb2zDm/nxQ/9uyZmXfOvDO7/3X+awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoN1Nr5398FBRFI3/mr9MFMUzGr/fODnR+OPWV1ztFQIAAAC9eqr566Vn5wsOrOJKbcd89UXf/OL8/Px88dh3X/b8j8zP5w9MFsXENUXR/Fh48p6/3dp+TPJAMT403Pbn4RXufmSFj4+u8PGxFT6+YYWPX7PCx8dX+PhlJ+AyG1vfj2ne2Nbmbydap7S4rhhrfmzrItd6YOia4eH4Xk7TUPM682NHi+PFiWK2mOk4vnXsUPP4L9/UuK87i7iv4bb7urGxQ3543+FYw1A6x1s77mvhNsMPXl1M/uiH9x1+08cev2GxueJp6Li91jq3bWms80PpktZah4pr8jmJdQ63rfPGRZ6TkY51DjWv1/h99zovrXKdIwvLvKK6n/PxYrj5+0eb52m0/dt6+TzdmC778c1FUVxYWHb3MZfdVzFcbOq4ZHjh+Rlv7cjGbTS20nOK0TXt05tWsU8b88jWzn3a/ZqI5/+mdL3RJdbQ/jT94IMbLnve17pPQ+NRL/Va6d6D6/1a6Zc9GPvi0eaDfnDRPbg1Pf77bll6Dy66dxbZg/lxt+3BLSvtweENI8015ydhqHmdhT24veP4keY9DTXnk7csvwenz508Mz33/g+8/PjJQ8dmj82e2jUzs2fn3t0ze2emjx4/MZt+LXm2+9+mYji/BrakcxevgZd2Hdu+Vec/tX6vw/FlXocTXceu9+twtPvBDV2ZF+Tle7r12nhr46SPPzRcLPEaaz4/t/b+OsyPu+11ONr2Olz0c8oir8PRVbwOG8ecuXV1X7OMtv232Bqers8FE217sPvrke49uN5fj/TLHhxP++Jfb136c8GNab0PTq3165GRy/ZgfrjpvadxSf56f/yO5lhsX97Q+MC1G4rzc7Nnb3/foXPnzm4v0rgintu2V7r366a2x1Rctl+H17xfD3z469+4YZHLJ9K5Gn9545fxJZ+rxjG7bl/+uWp+dlv8fHZcuqNIY51d6fO52GfzxvnMWXKZ89k45kPTvX8tnnNp2/vv2BLvv5H7f9a8n635ph4YGRttvX5H8tkZ63g/7nyqRpvvXUPN+740vbr347H035V+P75umffjzV3Hrvf78Vj3g4v346GVvtvRm+7nczztkxMzy78fN47ZvGOte3J02ffjm9McSuf/ZSkp5FzUtneW2rf5vkZHx9LjGo176NynOzuOH0vZrHFfn91Rbp9uu7l1WyP50S24Uvt0suvY9d6n+f1qqX06tNJ338rpfj7H0764bufy+7RxzMVdvb93bozftr13blhpD46NbGiseSxvwtb7/fzG2IO3F4eL08WJ4kjzoxua+2moeV9Tu1e3Bzek/670e+XmZfbgtq5j13sP5s9jS+29odHLH/w66H4+x9O++Oju5fdg45jX7V3fr123pUvyMW1fu3Z/f22p73nd0HWans7veTXW+Q97l//ebOOYE3esNWcuf55uS5dcu8h56n79LvWaOlJcmfO0Oa3z+3csfZ4a62kc85F9q9xPB4qi+MLdB5rf701/v/L589/6YsffuxxofexL+xZu67KvOhb7e58v3H3g4j/f9ZO1PEYA+tvPmr9u3dT6XNf2N1Or+ft/AAAAYCBE7h9OM5P/AQAAoDIi98f/FZ7J/wAAAFAZkftH08xqkv8f/Lfnvfun9xe5mT+fxMfjNJx5onVcdFw/mf48Ob+gcflrPvOPX3/7/au77+GiKH56178sevyDT8S6Wh5O65z8dufll9n87VXd/zvuXTiuvQM4kW4/Hk/3Nvjyfz/RvN7kvta8eNfF5nzzhQcfaHz80r7Wn6M7+eT/tI7781TmPXD07zuuv+2x1v1tfWz5xxXX+9wbN979grct3F9cb2jLs5oP46OvbN1u/Nybh1/bOv5SOm6p9f/dH3/2c43j3/eSxdd///Di638y3e530vzJU63L289p489xvT9M64/7i+vd/umvLLr+R97QOv6R9Lx8Ms3u9b/6T1/4VPv5ivXH/Rx4vHW9uP+Zv/6P5vXi9uL2u9c//qonOs5H9+1f/Hzrdva/539H2o+Py+N+8r57vPN5btxO+34Ln/2jix3nufj31vX+pmv9cXtnHl98/bd1rfPM9k3N6y9VGf/47HcWfbyxngN/9WjH43nke+n8veae5u2O/zjtx/Tx/3u4dXvdPy3h0e91vp/E8Z+caL0u4/amu9b/cNf6L7y4ce5WXv+dP2qt/5FXfbXz+fjP1joO/KA1V1r/sU98s+P6n/pW6/k4+96pU6fnzh+PDvVE+tk/Z77bur1rxjduuvYZz3zWs9N7ZfefD54+987Zs5MzkzNFMTmAPxLv6V7/p9P8r9a4sN63f19RFO9t+7x26+tb+6940aU/efGdn3lnHPdPr2td/tDdrc9bL03HPZwuv5Ce77idj3+s9fmw1/XH/Sw183pX6fzXPrxnVQemx//Rm65vvsqGLrYu7n6/Kite548/r/N1/9hbW/NL6bzOp5/MvOX6rzWP677/+NkID72l9fqOr+Ti+r2u/y/T833Pd1q3H7eb15u+jvnK5s73x3h+vnR/108amGj9FI8L6f2juND6eBwVX1M9dOn6tSxzSXPvn5s+cfzU+fdNn5udOzc99/4PHDx5+vypcwebP5vz4LtWuv7C63tT8/V9ZHbPrqL5aj/dGk+zq73+M/cePrJ35pYjs0cPnT967t4zs2ePHZ6bOzx7ZO6WQ0ePzr53pesfP7J/+459O/fumDp2/Mj+O/bt27lv6vip041ltBa1gj0z7546dfZg8ypz+3ft2757966ZqZOnj8zu3zszM3V+pes3PzdNNa79nqmzsycOnTt+cnZq7vgHZvdv37dnz44Vf7rfyTNH5yanz54/NX1+bvbsdOuxTJ5rXtz43LfS9aFh7hMbF/08NZS+et9+257881kbPvPBJW+qdUjXDxD9fvpZNN/4iz/bvZo/R+4fSzOrSf4HAACAOojcvyHNTP4HAACAyojcf02amfwPAAAAlRG5fzzNrCb5X/9f/1//X/8/6P/r/5eh/6//X4b+v/7/IKxf/1//n971W/8/cv/Goqhl/gcAAIA6iNy/Kc1M/gcAAIDKiNx/bZqZ/A8AAACVEbn/GWlmNcn/+v/6//r/+v9B/1//vwz9f/3/MvT/9f8HYf36//r/9K7f+v+R+5+ZZlaT/A8AAAB1ELn/WWlm8j8AAABURuT+Z6eZyf8AAABQGZH7J9LMapL/9f/1//X/9f+D/r/+fxn6//r/Zej/6/8Pwvr1//X/6V2/9f8j9/9cmllN8j8AAADUQeT+56SZyf8AAABQGZH7n5tmJv8DAABAZUTuvy7NrCb5X/9f/79/+v8LtVj9f/1//f/Bof+v/1+G/r/+/yCsX/9f/5/e9Vv/P3L/89LMapL/AQAAoA4i91+fZib/AwAAQGVE7n9+mpn8DwAAAJURuX9zmllN8r/+v/5///T//fv/Qf9f/3+Q6P/r/5eh/6//Pwjr1//X/6d3/db/j9z/82lmNcn/AAAAUAeR+29IM5P/AQAAoDIi978gzUz+BwAAgMqI3H9jmllN8r/+v/6//r/+f9D/1/8vQ/9f/78M/X/9/0FYv/6//j+967f+f+T+F6aZ1ST/AwAAQB1E7n9Rmpn8DwAAAJURuf/FaWbyPwAAAFRG5P7JNLOa5H/9f/1//X/9/6D/r/9fhv6//n8Z+v/6/4Owfv1//X9612/9/8j9N6WZ1ST/AwAAQB1E7t+SZib/AwAAQGVE7r85zUz+BwAAgMqI3L81zawm+V//X/9f/1//P+j/6/+Xof+v/1+G/r/+/yCsX/9f/5/e9Vv/P3L/S9LMapL/AQAAoA4i99+SZib/AwAAQGVE7n9pmpn8DwAAAJURuX9bmllN8r/+v/6//r/+f9D/1/8vQ/9f/78M/X/9/0FYv/6//j+967f+f+T+l6WZ1ST/AwAAQB1E7r81zUz+BwAAgMqI3H9bmpn8DwAAAJURuX8qzawm+V//X/9f/1//P+j/6/+Xof+v/1+G/r/+/yCsX/9f/5/e9Vv/P3L/y9PMapL/AQAAoA4i99+eZib/AwAAQGVE7p9OM5P/AQAAoDIi98+kmdUk/+v/6//r/+v/B/1//f8y9P/1/8vQ/9f/H4T16//r/9O7fuv/R+7fnmZWk/wPAAAAdRC5f0eamfwPAAAAlRG5f2eamfwPAAAAlRG5f1eaWU3yv/6//r/+v/5/0P/X/y9D/1//vwz9f/3/QVi//r/+P73rt/5/5P7daWY1yf8AAABQB5H796SZyf8AAABQGZH796aZyf8AAABQGZH770gzq0n+1//X/9f/1/8P+v/6/2Xo/+v/l6H/r/8/COu/Iv3/B5b+MQD6/1RBv/X/I/fvSzOrSf4HAACAOojc/4o0M/kfAAAAKiNy/y+kmcn/AAAAUBmR+38xzawm+V//X/9f/1//P+j/6/+Xof+v/1+G/r/+/yCs37//r/9P7/qt/x+5f3+aWU3yPwAAANRB5P5XppnJ/wAAAFAZkftflWYm/wMAAEBlRO4/kGZWk/yv/6//r/+v/x/0/wek//8HqzjmCtL/1/8vQ/9f/38Q1q//r/9P7/qt/x+5/9VpZjXJ/wAAAFAHkftfk2Ym/wMAAEBlRO5/bZqZ/A8AAACVEbn/dWlmNcn/+v/6//r/+v9B/39A+v99Rv9f/78M/X/9/0FYv/6//j+967f+f+T+16eZ1ST/AwAAQB1E7v+lNDP5HwAAACojcv8b0szkfwAAAKiMyP13ppnVJP/r/+v/P139/w3pNvT/2/ad/n+T/r/+/1ro/+v/F2vp/w+lV7D+f9PV7s8P+vr1//X/6V2/9f8j9/9ymllN8j8AAADUQeT+u9LM5H8AAACojMj9d6eZyf8AAABQGZH735hmVpP83/f9/3SH+v9L9v+f2Zj92P8P+v9t+07/v0n/X/9/LfT/9f8L//5/aVe7Pz/o69f/1/+nd/3W/4/cf0+aWU3yPwAAANRB5P5fSTNrz/9L/WUZAAAAMBAi9/9qmpm//wcAAIDKiNz/pjSzmuT/vu//J/r/g/fv/wf9/7Z9p//fpP+v/78W+v/6/4X+f2lXuz8/6OvX/9f/p3f91v+P3P9raWY1yf8AAABQB5H735xmJv8DAABAZUTuf0uamfwPAAAAlRG5/61pZjXJ//r/+v/6//r/Qf9f/78M/X/9/zL0//X/B2H9+v/6//Su3/r/kfvvTTOrSf4HAACAOojc/7Y0M/kfAAAAKiNy/6+nmcn/AAAAUBmR+38jzawm+V//X/9f/1//P+j/6/+Xof+v/1+G/r/+/yCsX/9f/5/e9Vv/P3L/b6aZ1ST/AwAAQB1E7n97mpn8DwAAAJURuf+30szkfwAAAKiMyP2/nWZWk/yv/6//r/+v/x/0//X/y9D/1/8vQ/9f/38Q1q//r/9P7/qt/x+5/3fSzGqS/wEAAKAOIvf/bpqZ/A8AAACVEbn/YJqZ/A8AAACVEbn/HWlmNcn/+v/6//r/+v9B/1//vwz9f/3/MvT/9f8HYf36//r/9K7f+v+R+w+lmdUk/wMAAEAdRO7/vTQz+R8AAAAqI3L/4TQz+R8AAAAqI3L/kTSzmuR//X/9f/1//f+g/6//X4b+v/5/Gfr/+v9huSfkaq9/vfr/I4X+P/XVb/3/yP2zaWY1yf8AAABQB5H7j6aZyf8AAABQGZH7j6WZyf8AAABQGZH735lmVpP8r/+v/6//r/8f9P/1/8vQ/9f/L0P/X/9/ENbv3//X/6d3/db/j9x/PM2sJvkfAAAA6iBy/7vSzOR/AAAAqIzI/e9OM5P/AQAAoDIi959IM6tJ/tf/1//X/9f/D/r/+v9l6P/r/5eh/6//Pwjr1//X/6d3/db/j9x/Ms2sJvkfAAAA6iBy/6k0M/kfAAAAKiNy/+k0M/kfAAAAKiNy/5k0s5rkf/1//X/9f/3/oP+v/1+G/r/+fxn6//r/g7B+/X/9f3rXb/3/yP2/n2ZWk/wPAAAAdRC5/2yamfwPAAAAlRG5fy7NTP4HAACAyojcfy7NrCb5X/9f/1//X/8/6P/r/5eh////7N3Vi2DZEcfxJiTQT/lv4+7u7u6+cXd3d3d3z0NIuqpCspuEPXdm99yqz+eloBeWw9AP82P4cvX/K/T/+v8zvF//r//nuN36/9z9d4hbhux/AAAAmCB3/x3jFvsfAAAA2sjdf6e4xf4HAACANnL33zluGbL/9f/6f/2//j/p//X/K/T/+v8V+n/9/xner//X/3Pcbv1/7v67xC1D9j8AAABMkLv/rnGL/Q8AAABt5O6/W9xi/wMAAEAbufvvHrcM2f/6f/2//l//n/T/+v8V+n/9/wr9v/7/DO/X/+v/OW63/j93/z3iliH7HwAAACbI3X/PuMX+BwAAgDZy998rbrH/AQAAoI3c/feOW4bsf/2//l//r/9P+n/9/wr9v/5/hf5f/3+G9+v/9f8ct1v/n7v/PnHLkP0PAAAAE+Tuv2/cYv8DAABAG7n77xe32P8AAADQRu7++8ctQ/a//l//r//X/yf9v/5/hf5f/79C/6//P8P79f/6f47brf/P3f+AuGXI/gcAAIAJcvc/MG6x/wEAAKCN3P0PilvsfwAAAGgjd/+D45Yh+1//r//X/+v/k/5f/79C/6//X6H/1/+f4f36f/0/x+3W/+fuf0jcMmT/AwAAwAS5+x8at9j/AAAA0Ebu/ofFLfY/AAAAtJG7/+Fxy5D9r//X/+v/9f9J/6//X6H/1/+v0P/r/8/wfv2//p/jduv/c/c/Im4Zsv8BAABggtz9j4xb7H8AAABoI3f/o+KW/9z/l7fkqwAAAIBrKXf/o+OWIf/+r//X/+v/9f9J/6//X6H/1/+v0P/r/8/wfv2//p/jduv/c/c/Jm4Zsv8BAABggtz9j41b7H8AAABoI3f/4+IW+x8AAADayN3/+LhlyP7X/+v/9f/6/6T/1/+v0P/r/1fo//X/Z3i//l//z3G79f+5+58QtwzZ/wAAADBB7v4nxi32PwAAALSRu/9JcYv9DwAAAG3k7n9y3DJk/+v/9f/6f/1/0v/r/1fo//X/K/T/+v8zvF//r//nuN36/9z9T4lbhux/AAAAmCB3/1PjFvsfAAAA2sjd/7S4xf4HAACANnL3Pz1uGbL/9f/6f/2//j/p//X/K/T/+v8V+n/9/xner//X/3Pcbv1/7v5nxC1D9j8AAABMkLv/mXGL/Q8AAABt5O5/Vtxi/wMAAEAbufufHbcM2f/6f/2//l//n/T/+v8VDfv/q18B/b/+X/+v/9f/6/85bLf+P3f/c+KWIfsfAAAAJsjd/9y4xf4HAACANnL3Py9usf8BAACgjdz9z49bhux//b/+X/+v/0/6f/3/iob9v+//X1zr/v/yRj/R/+v/z/B+/b/+n+N26/9z978gbhmy/wEAAGCC3P0vjFvsfwAAAGgjd/+L4hb7HwAAANrI3f/iuGXI/tf/6//1//r/pP/X/6/Q/zft/29z4fv/+n/9v/5f/89hu/X/uftfErcM2f8AAAAwQe7+l8Yt9j8AAAC0kbv/ZXGL/Q8AAABt5O5/edwyZP/r//X/+n/9f9L/6/9X6P+b9v/X9Pv/N6b/1/+f4f36f/0/x+3W/+fuf0XcMmT/AwAAwGndjO2eu/+VcVf+HwAAAMDecve/Km6x/wEAAKCN3P2vjluG7H/9v/5/j/7/houber/+X/9/of/fnv5f/79C/6//P8P7r1P/n7+m+n9G2K3/z93/mrhlyP4HAACACXL33xC32P8AAADQRu7+18Yt9j8AAAC0kbv/dXHLkP2v/9f/79H/z/z+/6X+/9/+PPX/+v+bov/X/1/o/5fd2v382d/v+//6f47brf/P3f/6uGXI/gcAAIAJcve/IW6x/wEAAKCN3P1vjFvsfwAAAGgjd/+b4pYh+1//r//X//v+f9L/6/9X6P/1/yv0//r/M7xf/6//57jd+v/c/W+OW4bsfwAAAJggd/9b4hb7HwAAANrI3f/WuMX+BwAAgDZy978tbhmy//X/+n/9v/4/6f/1/yv0//r/Ffp//f8Z3q//1/9z3G79f+7+t8ctQ/Y/AAAATJC7/x1xi/0PAAAAbeTuf2fcYv8DAABAG7n73xW3DNn/+n/9v/5f/5/0//r/Ffp//f8K/b/+/wzv1//r/zlut/4/d/+745Yh+x8AAAAmyN3/nrjF/gcAAIA2cve/N26x/wEAAKCN3P3vi1uG7H/9v/5f/6//T/p//f8K/b/+f4X+X/9/hvfr//X/HLdb/5+7//1xy5D9DwAAABPk7v9A3GL/AwAAQBu5+z8Yt9j/AAAA0Ebu/g/FLUP2v/5f/6//1/8n/b/+f4X+X/+/Qv+v/z/D+/X/+n+O263/z93/4bhlyP4HAACACXL3fyRusf8BAACgjdz9H41b7H8AAABoI3f/x+KWIftf/6//1//r/5P+X/+/Qv+v/1+h/9f/n+H9+n/9P8ft1v/n7v943DJk/wMAAMAEufs/EbfY/wAAANBG7v5Pxi32PwAAALSRu/9T/7y3/dd/GLL/9f/6f/2//j/p//X/K/T/+v8V+n/9/xner//X/3Pcbv3/1e6/vPh03DJk/wMAAMAEufs/E7fY/wAAANBG7v7Pxi32PwAAALSRu/9zccuQ/a//1//r//X/Sf+v/1+h/9f/r9D/6//P8H79v/6f43br/3P3fz5uGbL/AQAAYILc/V+IW+x/AAAAaCN3/xfjFvsfAAAA2sjd/6W4Zcj+1//r/3v1/1cpnv7/iv7/iv7/+tL/6/9X6P/1/2d4v/5f/89xu/X/ufu/HLcM2f8AAAAwQe7+r8Qt9j8AAAC0kbv/q3GL/Q8AAABt5O7/WtwyZP/r//X/vfr/K/r/K/r/K/r/60v/r/9fof/X/5/h/fp//T/H7db/5+7/etwyZP8DAADABLn7vxG32P8AAADQRu7+b8Yt9j8AAAC0kbv/W3HLkP2v/9f/6//1/0n/r/9fof/X/6/Q/+v//5vbb/R+/b/+n+N26/9z9387bhmy/wEAAGCC3P3fiVvsfwAAAGgjd/934xb7HwAAANrI3f+9uGXI/tf/6//1//r/pP/X/6/Q/+v/V+j/9f9neL/+X//Pcbv1/7n7vx+3DNn/AAAAMEHu/h/ELfY/AAAAtJG7/4dxi/0PAAAAbeTu/1HcMmT/6//1//p//X/S/+v/V+j/9f8r9P/6/zO8X/+v/+e43fr/3P0/jluG7H8AAACYIHf/T+IW+x8AAADayN3/07jF/gcAAIA2cvf/LG4Zsv/1//p//b/+P+n/9f8r9P/6/xX6f/3/Gd6v/9f/c9z/6v/j7/y3aP+fu//nccuQ/Q8AAAAT5O7/Rdxi/wMAAEAbuft/GbfY/wAAANBG7v5fxS1D9r/+X/+v/9f/J/2//n+F/l//v0L/r/8/w/v1//p/jtvt+/+5+38dtwzZ/wAAADBB7v7fxC32PwAAALSRu/+3cYv9DwAAAG3k7v9d3DJk//+//v92cW/F/j+foP/X/+v/9f/6/w3p//X/K/T/+v8zvF//r//nuN36/9z9v49bhux/AAAAmCB3/x/iFvsfAAAA2sjd/8e4xf4HAACANnL3/yluGbL/ff9f/6//1/8n/b/+f4X+X/+/Ynz//48f6/+3f7/+X//Pcbv1/7n7/xy3DNn/AAAAMEHu/r/ELfY/AAAAtJG7/69xi/0PAAAAbeTu/1vcMmT/6//1//p//X/S/+v/V+j/9f8rxvf/vv9/ivfr//X/HLdb/5+7/+8BAAD//xKBZe0=")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000080)=""/43, 0x2b)
getdents(r0, 0x0, 0xbb)

1.770632384s ago: executing program 0 (id=2475):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000100)=0x6)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)

1.740770015s ago: executing program 5 (id=2476):
sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="010000000000000000000c000000280005801400f4800400020000000000080001000000000008"], 0x3c}}, 0x4c0c0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

1.613415887s ago: executing program 5 (id=2478):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00')
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4112, 0x1010}], 0x1, 0x800, 0x0)

1.46238992s ago: executing program 5 (id=2480):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x6, 0x23, 0x9, 0xdedb, 0x5, "00000000c89cefe0"})
ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)

1.167574856s ago: executing program 5 (id=2483):
r0 = socket(0x2c, 0x3, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000280)=0x493, 0x4)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100))

1.025859219s ago: executing program 5 (id=2485):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f00000004c0)="ce2cbfb69af7f1d23128c0cb2b62", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

930.108241ms ago: executing program 2 (id=2488):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000f40)=ANY=[], 0x1, 0xeb3, &(0x7f0000000f80)="$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")
r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)

810.218113ms ago: executing program 4 (id=2491):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00'}}}], 0x28}, 0x40c0)

810.000233ms ago: executing program 0 (id=2492):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x20000023896)

737.069075ms ago: executing program 3 (id=2493):
r0 = getpid()
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000})
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)

703.967885ms ago: executing program 4 (id=2494):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f80000001600010000000000000000006401010000000000000000000000000000000000000000000000ffff000000000000000000000000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000003200000000033000000000000000000000000000000000000000000000000000000000000000200"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)

626.476107ms ago: executing program 3 (id=2495):
r0 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x0)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f00000001c0)=0x2)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000004180)={"3370491d", 0x8, 0x5, 0x2, 0x0, 0xdf, "001a0000008400", "00010b00", "8000", '\x00', ["0600", "3549fff7ff0000001e0200", "006a9cc1f000"]})
ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000000)={0x5, 0xb, 0x1, 0xc, 0x4, 0x1004, "ba3a080026fd291cd89590593dd30a26", 0x8c, 0x0, 0x7, 0x81, 0x2, 0x2, 0x6})

567.464499ms ago: executing program 4 (id=2496):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000001380)=ANY=[@ANYRES32=r1])

536.195039ms ago: executing program 3 (id=2497):
syz_mount_image$exfat(&(0x7f0000000240), &(0x7f0000000040)='./file2\x00', 0x3000cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x150f, &(0x7f0000000e80)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ftruncate(r0, 0x41f)

334.441613ms ago: executing program 4 (id=2498):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x12, [{0x0, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xb48}, {0x5}, {0x7, 0x0, 0x1}, {0x1ff}, {0x1}, {0x1, 0x0, 0x1}, {0x80}, {0xff836, 0x0, 0x1}, {0x7fff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x8000, 0x0, 0x1}, {0x76c2}, {0x3, 0x0, 0x1}, {0x400, 0x0, 0x1}, {0xa67b, 0x0, 0x1}, {0x6}, {0x4}, {0x2, 0x0, 0x1}, {0x83, 0x0, 0x1}, {0x19, 0x0, 0x1}, {0x6}, {0x5}, {0x100, 0x0, 0x1}, {0x400, 0x0, 0x1}, {0xfff, 0x0, 0x1}, {0x100, 0x0, 0x1}, {0xf14d, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7, 0x0, 0x1}]}]}, 0xa0}}, 0x0)

334.063803ms ago: executing program 3 (id=2499):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000de01000040"])

333.812913ms ago: executing program 0 (id=2500):
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = epoll_create(0x80)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x40000000})

222.031145ms ago: executing program 4 (id=2501):
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f00000003c0)={[{}, {@dir_umask={'dir_umask', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@codepage={'codepage', 0x3d, 'koi8-ru'}}, {}, {@uid}, {@file_umask={'file_umask', 0x3d, 0x2b4}}, {@creator={'creator', 0x3d, "8c10b081"}}]}, 0x2, 0x36b, &(0x7f0000000d80)="$eJzs3c1O1EAAB/D/tPspBCtgMN5ETTyRBQ8aY6Ix3HwBD4aIUBJCxQQwUaIBPXgyxpuJiUdvno2+gl6ML6AnDsSTXggx1Mx0uu2Wme4uHwXC/5ewdNv5nnY6g+4WRHRs3Rr/+eHymvwRZQAugGuAA6AGlACcxlDt0fzS7FLgT+cl5KoY8kcgiim2hZma901RZTwVQ/PkuxJ60/tof4RhGP5qG+pPIWWhgyOia38bB6jqq1MdrxVesh1Z7SBAtZiiHCKpHhYb2DD3OBERHSf6/u/ou0Svnr87DnBRz8OP0v0/ll5BtNztNoCnJ4svz6Gh7v+Pk94MhWwf1SIiWe+pJZxsQydeJZrSUqmUMzvDpLkriM6slg4QhlVly4xMlcWpz8wG/siqSuAFbmipYIPqdTo6dWO20laiX8OGtWmOvLrn61F1KMs6lC3lH+g6xy/reGvObuJbpX2ZxFfxXUwID+8wjT69sxQK2TgqugfU9e64TWcDv2FPUdXSU7VstNQyufpOqUzOxj3w+WNSy7qtXWtwZVlMZCoiO3/XJQDeWFpB7e5vHRR074zaa6diDRhjjTXfbxpjDWZj1WfKgT8y9TCITvpwxZ7tXjDO78VrcUcM4zc+YbzZ/7KrXTnUW67M7MgvVMioFRrN+piUVEhLP7ZQJ9uDrq5Mwua/MKLfZ8dhMw+vcB9X0bf4ZHluMgj8hcI25GhhPBRfKgWXx7YRnYj6dJR75O9UGNTkhmzuPct0KwxD46GSucXiDaejLCpxUW1ljk6dK++bVVbDrP5Tyu4qiNWoDVOHbtoDJ8OmqrvWZaYq+kozlrxbdBP9b5S77HdjGJGUcKGyvydknNVkEJxpdpyLakdXSn0Hmd5+NjcZ7HhEoiNk8eU5PeZg6O769YMuDhVPzrtEtP5LrVcaatSRL17OaiRsl3gqxVHLCqhfvZ5IVhtC//0+Z83VY1/B9cQbgT+Wt+Y6fwm4kNopc3MQ5/g8m6yHeLJ+CP9VsmoqVj27Yzm1LcbxA/dS838iIiIiIiIiIiIiIiIiIiIiIiIiIjoSkv/07+3y4wRb+nNI5k9iJNaO4RdvEBERERERERERERERERERERERERERERHtTur5v4CrnhhT2fPn/8Zf7N3p83/dDp7/K9o+4pOI2vgfAAD//xhyY3Q=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

116.436737ms ago: executing program 3 (id=2502):
syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x1, 0x14fe, &(0x7f0000002180)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000))
rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00')

66.203758ms ago: executing program 2 (id=2503):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040)
close(0x3)
write$cgroup_subtree(r0, 0x0, 0x0)

1.02137ms ago: executing program 4 (id=2504):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x50, &(0x7f0000000140)={[{@usrquota}, {}, {@discard}, {@grpjquota}, {@dioread_nolock}]}, 0x1, 0x3eb, &(0x7f0000000880)="$eJzs3M1uG0UcAPD/br5I+uEgcUCFQwQIgoCkDgQoQqJw5eMCPICVpKXCbarGSLTkUBAnThwQNw59AQ48QFUhJCRegRdAlSqU5gC3oLV3HTe2Qyw7der8ftLIM+txZv7ezWpmvTsBHFtzEXE+IsYiYikiSvn2NE9xs5Gyeve3Nle2tzZXktjZ+fjvJJJ8W/G3kvz1RF6YTyPSbyOeutne7sb1G59XqtW1a3l5sXb56uLG9RuvXLpcubh2ce1K+Y1z5fLy0pvl1wYW64/PvXhu7L3zZ376s3RneXJyOuvvyfy91jgGZS7mmt/JXsuDbmzIJofdAQAADiTNx/7j9fF/KcbquYZSLG4OtXMAAADAQOy8k78CAAAAIywx9wcAAIARV9wHcH9rc6VIB7pxoHRotyQ8VPfejYjZ3Webt5vxj8djeZ2JQ3y+dS4irj6flLIUh/QcMgBAqzvZ+Odsp/FfGk+21JuKqI+Hpgfc/tyecvv4J7074CYfkI3/3o6I7bbxX1pUmR3LS6fqQ8WJ5MKl6trZiDgdEfMxMZWVy/u08f4/P3/U7b0s/t+SU6eLlLWfve7WSO+OTz34mdVKrdJPzK3ufR1xZrxT/Elz/JtExEwfbYx9deutbu/9f/yHa+dWxAsd9//uyj3J/usTLdaPh8XiqGj37ze/fNit/WHHn+3/mf3jn01a12va6L2N25/98XQ90yGq1vlPL8f/ZPJJPV/My76s1GrXyhGTyQft25d2P1uUi/pZ/PPPdv7/L85/Sb6m1cn8HNCr777/9eX9azTiz1LWfjEXfBiy+Fd72v+9Z16//fun3dpv3f+d48/2f2MNsPl8y0HOfwftYD/fHQAAADwq0vp1jSRdaObTdGGhcb3jiZhJq+sbtZcurH9xZbVx/WM2JtLiSlep5XpoufEzerO8tKf8akQ8HhE/lKbr5YWV9erqsIMHAACAY+JEl/l/5q8RuccfAAAAyH+oBwAAAEab+T8AAACMtH7W9Tu+meybOwLdOPKZZ45GN4aQmYgj0Y0+MsM+MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADza/gsAAP//Bdqy/A==")
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
write$cgroup_type(r0, &(0x7f0000000200), 0x175d9003)

0s ago: executing program 3 (id=2505):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000002c0)={0x15, 0x110, 0xfa00, {r1, 0x5, 0x0, 0x30, 0x0, @ib={0x1b, 0xfffe, 0x80000000, {"873acbeadebf54b9903dde0b1108d56c"}, 0x5, 0x8, 0x9}, @ib={0x1b, 0xffbf, 0x0, {"00000000000000000200"}, 0x0, 0x1, 0x6}}}, 0x118)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000bc0), r1}}, 0x18)

kernel console output (not intermixed with test programs):

rio class 0
[  196.663117][ T7701] ldm_validate_partition_table(): Disk read failed.
[  196.680616][ T2858] Unregistered device PCTV Systems picoStick (74e)
[  196.688589][ T7701] Dev nbd0: unable to read RDB block 0
[  196.689093][ T2858] as10x_usb: device has been disconnected
[  196.709604][ T7701]  nbd0: unable to read partition table
[  196.715254][ T7701] nbd0: partition table beyond EOD, truncated
[  196.724739][ T7710] loop3: detected capacity change from 0 to 128
[  196.737386][ T7701] attempt to access beyond end of device
[  196.737386][ T7701] nbd0: rw=4096, want=136, limit=7
[  196.768777][ T7701] gfs2: error 10 reading superblock
[  196.836204][ T7710] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  196.879239][ T7710] hpfs: filesystem error: improperly stopped
[  196.887395][ T7710] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  196.915097][ T7710] hpfs: You really don't want any checks? You are crazy...
[  196.942437][ T7710] hpfs: hpfs_map_sector(): read error
[  196.992040][ T7710] hpfs: code page support is disabled
[  196.997207][ T4820] Bluetooth: hci5: command 0x040f tx timeout
[  197.027743][ T7710] hpfs: hpfs_map_4sectors(): unaligned read
[  197.033978][ T7710] hpfs: hpfs_map_4sectors(): unaligned read
[  197.083575][   T26] audit: type=1804 audit(1757470657.503:38): pid=7713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1202" name="/newroot/0/bus/bus" dev="loop5" ino=1048627 res=1 errno=0
[  197.135655][ T7710] hpfs: filesystem error: unable to find root dir
[  197.269969][ T7710] hpfs: hpfs_map_4sectors(): unaligned read
[  197.594435][ T7727] netlink: 'syz.5.1290': attribute type 3 has an invalid length.
[  197.653682][ T7727] netlink: 'syz.5.1290': attribute type 1 has an invalid length.
[  197.693312][ T7727] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.1290'.
[  197.868442][ T4820] hid-generic 0005:16C0:05DF.000D: unknown main item tag 0x0
[  197.881943][ T4820] hid-generic 0005:16C0:05DF.000D: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[  197.920917][ T7737] loop5: detected capacity change from 0 to 256
[  197.947473][ T7729] loop2: detected capacity change from 0 to 8192
[  198.003540][ T7715] loop0: detected capacity change from 0 to 32768
[  198.031248][ T7737] exfat: Deprecated parameter 'utf8'
[  198.119363][ T7737] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  198.177969][ T7715] XFS (loop0): Mounting V5 Filesystem
[  198.297377][ T7715] XFS (loop0): Ending clean mount
[  198.557875][ T7756] loop5: detected capacity change from 0 to 256
[  198.564815][ T7725] loop4: detected capacity change from 0 to 32768
[  198.594247][ T7756] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  198.663606][ T4183] XFS (loop0): Unmounting Filesystem
[  198.966425][ T4820] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  199.076827][ T1107] Bluetooth: hci5: command 0x0419 tx timeout
[  199.226636][ T4820] usb 4-1: Using ep0 maxpacket: 32
[  199.346796][ T4820] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  199.368875][ T4820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.388157][ T4820] usb 4-1: config 0 descriptor??
[  199.448794][ T4820] gspca_main: sunplus-2.14.0 probing 041e:400b
[  199.556614][ T7466] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  199.766661][ T4500] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  199.807379][ T7466] usb 5-1: Using ep0 maxpacket: 8
[  199.847166][ T7806] loop2: detected capacity change from 0 to 128
[  199.926740][ T7466] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  199.935072][ T7466] usb 5-1: config 179 has no interface number 0
[  199.941820][ T7466] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  199.953236][ T7466] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  199.965214][ T7466] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  199.984310][ T7466] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  199.996254][ T7466] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  200.015644][ T7466] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  200.035473][ T7466] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.046766][ T4500] usb 1-1: Using ep0 maxpacket: 32
[  200.076717][ T7776] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  200.176659][ T4500] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  200.207150][ T4500] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  200.226442][ T4500] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  200.270742][ T4500] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  200.296784][ T4500] usb 1-1: config 0 interface 0 has no altsetting 0
[  200.327830][ T4820] gspca_sunplus: reg_w_riv err -71
[  200.335568][ T4820] sunplus: probe of 4-1:0.0 failed with error -71
[  200.374416][ T4820] usb 4-1: USB disconnect, device number 13
[  200.440894][ T1107] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input15
[  200.476798][ T4500] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  200.492528][ T4500] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  200.535721][ T4500] usb 1-1: Product: syz
[  200.546966][ T4500] usb 1-1: Manufacturer: syz
[  200.551589][ T7823] loop2: detected capacity change from 0 to 2048
[  200.551604][ T4500] usb 1-1: SerialNumber: syz
[  200.584133][ T4505] usb 5-1: USB disconnect, device number 15
[  200.596468][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  200.601971][ T4500] usb 1-1: config 0 descriptor??
[  200.605340][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  200.619131][ T4505] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  200.688497][ T4500] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  200.698808][ T7823] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  200.738913][ T4500] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  200.943792][ T7832] loop5: detected capacity change from 0 to 16
[  200.954078][ T7828] netlink: 'syz.3.1333': attribute type 3 has an invalid length.
[  200.984987][ T4505] usb 1-1: USB disconnect, device number 9
[  200.990974][ T7828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1333'.
[  200.991327][    C1] ldusb 1-1:0.0: usb_submit_urb failed (-19)
[  201.015335][ T4505] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  201.080545][ T7832] erofs: (device loop5): mounted with root inode @ nid 36.
[  201.143501][ T7832] VFS: Lookup of '$' in erofs loop5 would have caused loop
[  201.632112][ T7844] loop4: detected capacity change from 0 to 32768
[  202.245111][ T7856] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1347'.
[  202.272906][ T7856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'.
[  202.394835][ T7850] loop0: detected capacity change from 0 to 40427
[  202.415691][ T7850] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff
[  202.494177][ T7850] F2FS-fs (loop0): invalid crc value
[  202.524233][ T7850] F2FS-fs (loop0): Found nat_bits in checkpoint
[  202.626458][ T2858] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  202.738991][ T7850] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  202.751846][ T7876] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1354'.
[  202.941623][ T4183] attempt to access beyond end of device
[  202.941623][ T4183] loop0: rw=2049, want=45104, limit=40427
[  202.991785][ T7885] loop4: detected capacity change from 0 to 1024
[  203.027118][ T2858] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  203.035786][ T2858] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  203.037091][ T7887] loop5: detected capacity change from 0 to 128
[  203.076589][ T2858] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  203.102113][ T7887] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  203.136016][ T7887] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  203.165089][ T2858] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  203.184610][ T7885] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  203.256572][ T2858] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  203.256719][ T7885] EXT4-fs (loop4): shut down requested (2)
[  203.476905][ T2858] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  203.506903][ T2858] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  203.530773][ T2858] usb 4-1: Product: syz
[  203.536565][ T2858] usb 4-1: Manufacturer: syz
[  203.617555][ T2858] cdc_wdm 4-1:1.0: skipping garbage
[  203.624152][ T2858] cdc_wdm 4-1:1.0: skipping garbage
[  203.673756][ T2858] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  203.688716][ T2858] cdc_wdm 4-1:1.0: Unknown control protocol
[  203.790752][ T1107] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  204.137234][ T7922] loop0: detected capacity change from 0 to 4096
[  204.158235][ T7927] program syz.4.1378 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  204.166622][ T1107] usb 3-1: unable to get BOS descriptor or descriptor too short
[  204.209753][ T7922] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  204.236530][ T1107] usb 3-1: no configurations
[  204.241203][ T1107] usb 3-1: can't read configurations, error -22
[  204.476999][ T2858] usb 4-1: USB disconnect, device number 14
[  205.460642][ T7933] loop5: detected capacity change from 0 to 32768
[  205.476582][ T2858] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  205.636881][  T263] block nbd1: Possible stuck request ffff888020418000: control (read@0,1024B). Runtime 60 seconds
[  205.644479][ T7948] loop2: detected capacity change from 0 to 32768
[  205.647583][  T263] block nbd1: Possible stuck request ffff888020418200: control (read@1024,1024B). Runtime 60 seconds
[  205.665061][  T263] block nbd1: Possible stuck request ffff888020418400: control (read@2048,1024B). Runtime 60 seconds
[  205.676042][  T263] block nbd1: Possible stuck request ffff888020418600: control (read@3072,512B). Runtime 60 seconds
[  205.756934][ T2858] usb 1-1: Using ep0 maxpacket: 32
[  205.906925][ T2858] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  205.931862][ T7970] loop3: detected capacity change from 0 to 2048
[  205.948704][ T2858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.982248][ T2858] usb 1-1: config 0 descriptor??
[  206.069600][ T2858] gspca_main: nw80x-2.14.0 probing 055f:d001
[  206.083978][ T7979] loop5: detected capacity change from 0 to 64
[  206.108298][ T7970] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  206.251899][ T7985] syz.3.1404 uses obsolete (PF_INET,SOCK_PACKET)
[  206.480550][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1408'.
[  206.506614][ T2858] gspca_nw80x: reg_r err -71
[  206.511452][ T2858] nw80x: probe of 1-1:0.0 failed with error -71
[  206.528437][ T2858] usb 1-1: USB disconnect, device number 10
[  206.941957][ T8000] loop2: detected capacity change from 0 to 128
[  207.083817][ T8000] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  207.126732][ T8000] hpfs: filesystem error: improperly stopped
[  207.132778][ T8000] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  207.170663][ T7986] loop4: detected capacity change from 0 to 40427
[  207.216495][ T8000] hpfs: You really don't want any checks? You are crazy...
[  207.230452][ T8004] loop0: detected capacity change from 0 to 64
[  207.231350][ T8000] hpfs: hpfs_map_sector(): read error
[  207.252932][ T8000] hpfs: code page support is disabled
[  207.274576][ T8000] hpfs: hpfs_map_4sectors(): unaligned read
[  207.282355][ T8000] hpfs: hpfs_map_4sectors(): unaligned read
[  207.291227][ T8000] hpfs: filesystem error: unable to find root dir
[  207.300322][ T7986] F2FS-fs (loop4): Found nat_bits in checkpoint
[  207.309199][ T7992] loop5: detected capacity change from 0 to 32768
[  207.536461][ T7986] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  207.686558][ T8014] program syz.2.1416 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  207.718720][ T7986] attempt to access beyond end of device
[  207.718720][ T7986] loop4: rw=2049, want=45104, limit=40427
[  207.954413][ T4187] attempt to access beyond end of device
[  207.954413][ T4187] loop4: rw=2049, want=45112, limit=40427
[  208.427941][ T8034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1424'.
[  208.575764][ T8033] loop5: detected capacity change from 0 to 4096
[  208.676549][ T7982] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap
[  208.713469][ T8033] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  208.866544][ T4821] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  208.962369][ T4330] ntfs3: loop5: ntfs3_write_inode r=9 failed, -22.
[  209.022454][ T7527] ntfs3: loop5: ntfs_sync_fs r=9 failed, -22.
[  209.031448][ T7527] ntfs3: loop5: ntfs_evict_inode r=9 failed, -22.
[  209.116674][ T4821] usb 4-1: Using ep0 maxpacket: 32
[  209.212731][ T8047] loop4: detected capacity change from 0 to 8192
[  209.239282][ T4821] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  209.266656][ T4821] usb 4-1: config 0 has no interface number 0
[  209.315145][ T8047] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  209.336582][ T8047] REISERFS (device loop4): using ordered data mode
[  209.343131][ T8047] reiserfs: using flush barriers
[  209.404774][ T8047] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  209.459115][ T4821] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  209.469902][ T8047] REISERFS (device loop4): checking transaction log (loop4)
[  209.480860][ T4821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.499400][ T4821] usb 4-1: Product: syz
[  209.504380][ T4821] usb 4-1: Manufacturer: syz
[  209.515581][ T4821] usb 4-1: SerialNumber: syz
[  209.533012][ T4821] usb 4-1: config 0 descriptor??
[  209.588062][ T4821] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  209.798403][ T4821] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  209.831778][ T4821] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  209.866267][ T8047] REISERFS (device loop4): Using tea hash to sort names
[  209.899995][ T8047] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  210.086424][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short
[  210.287966][ T4500] usb 4-1: USB disconnect, device number 15
[  210.296433][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -108
[  210.334149][ T4500] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  210.394734][ T4500] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  210.435422][ T4500] quatech2 4-1:0.51: device disconnected
[  210.569212][ T8059] loop2: detected capacity change from 0 to 40427
[  210.591989][ T8059] F2FS-fs (loop2): Invalid log sectors per block(0) log sectorsize(9)
[  210.618098][ T8059] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  210.651175][ T8059] F2FS-fs (loop2): invalid crc value
[  210.703061][ T8059] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  210.865709][ T8059] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1
[  210.912904][ T8059] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  210.922420][ T8059] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  210.947759][ T8066] loop5: detected capacity change from 0 to 32768
[  211.151109][ T8069] attempt to access beyond end of device
[  211.151109][ T8069] loop2: rw=2049, want=45104, limit=40427
[  211.168569][ T8077] loop5: detected capacity change from 0 to 512
[  211.345346][ T8077] EXT4-fs (loop5): 1 truncate cleaned up
[  211.376509][ T8077] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,grpquota,debug_want_extra_isize=0x000000000000005c,noauto_da_alloc,noauto_da_alloc,discard,grpjquota=,errors=remount-ro,nobarrier,. Quota mode: writeback.
[  211.561947][ T8077] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1441: invalid indirect mapped block 234881024 (level 0)
[  211.591834][ T8077] EXT4-fs (loop5): Remounting filesystem read-only
[  211.842297][ T8085] ALSA: mixer_oss: invalid OSS volume '��a'
[  211.897382][ T8087] loop5: detected capacity change from 0 to 136
[  211.994319][ T8087] rock: directory entry would overflow storage
[  212.013481][ T8087] rock: sig=0x4f50, size=4, remaining=3
[  212.054690][ T8087] iso9660: Corrupted directory entry in block 2 of inode 1472
[  212.446652][ T8098] loop4: detected capacity change from 0 to 512
[  212.486856][ T8098] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  212.587914][ T8098] EXT4-fs (loop4): orphan cleanup on readonly fs
[  212.595263][ T8098] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.1450: Block bitmap for bg 0 marked uninitialized
[  212.618418][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1453'.
[  212.685477][ T8012] ODEBUG: Out of memory. ODEBUG disabled
[  212.726915][ T8098] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6178: Corrupt filesystem
[  212.802253][ T8012] Set syz1 is full, maxelem 65536 reached
[  212.808801][ T8098] EXT4-fs (loop4): 1 orphan inode deleted
[  212.814667][ T8098] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  212.897262][ T8098] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  212.944473][ T8114] netlink: 'syz.0.1456': attribute type 2 has an invalid length.
[  212.976234][ T8098] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: none.
[  213.277829][ T8091] loop2: detected capacity change from 0 to 32768
[  213.388517][ T8091] JBD2: Ignoring recovery information on journal
[  213.502126][ T8141] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1466'.
[  213.515482][ T8091] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  213.537539][ T8145] program syz.5.1470 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  213.897783][ T4191] ocfs2: Unmounting device (7,2) on (node local)
[  213.923245][ T8152] loop5: detected capacity change from 0 to 4096
[  214.036099][ T8152] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  214.131087][ T8152] ntfs3: loop5: Failed to load $Extend.
[  214.300966][ T8177] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1484'.
[  214.424238][ T8182] loop2: detected capacity change from 0 to 256
[  214.540808][ T8189] loop5: detected capacity change from 0 to 512
[  214.587810][ T8182] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  214.622903][ T8193] netlink: 'syz.4.1491': attribute type 3 has an invalid length.
[  214.631170][ T8182] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  214.671700][ T8189] EXT4-fs (loop5): Ignoring removed orlov option
[  214.696512][ T8189] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  214.727773][ T8189] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  214.785437][ T8189] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2228: inode #15: comm syz.5.1485: corrupted in-inode xattr
[  214.872604][ T8189] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1485: couldn't read orphan inode 15 (err -117)
[  214.896624][ T8189] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,debug,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,inode_readahead_blks=0x0000000000008000,,errors=continue. Quota mode: none.
[  215.319081][ T8218] loop4: detected capacity change from 0 to 128
[  215.352768][ T8220] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1503'.
[  215.575185][ T8235] loop0: detected capacity change from 0 to 1024
[  215.686603][ T8235] EXT4-fs (loop0): Ignoring removed orlov option
[  215.693016][ T8235] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  216.406628][ T8233] loop2: detected capacity change from 0 to 32768
[  216.515020][ T8235] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  216.692976][ T8247] loop4: detected capacity change from 0 to 131072
[  216.730477][ T8247] F2FS-fs (loop4): invalid crc value
[  216.750112][ T8233] XFS (loop2): Mounting V5 Filesystem
[  216.781997][ T8247] F2FS-fs (loop4): Found nat_bits in checkpoint
[  216.827188][ T8247] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[  216.852026][ T8247] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  216.886457][ T4821] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  216.905776][ T8233] XFS (loop2): Ending clean mount
[  216.930949][ T8233] XFS (loop2): Quotacheck needed: Please wait.
[  217.073848][ T8233] XFS (loop2): Quotacheck: Done.
[  217.246814][ T4821] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  217.276548][ T1107] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  217.291887][ T4821] usb 6-1: config 0 has no interfaces?
[  217.298866][ T4821] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  217.317130][ T4821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.317269][ T4191] XFS (loop2): Unmounting Filesystem
[  217.327584][ T4821] usb 6-1: config 0 descriptor??
[  217.536408][ T1107] usb 1-1: Using ep0 maxpacket: 16
[  217.602592][ T4821] usb 6-1: USB disconnect, device number 2
[  217.685658][ T1107] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  217.702688][ T1107] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  217.866722][ T1107] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  217.886017][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.907233][ T1107] usb 1-1: Product: syz
[  217.911450][ T1107] usb 1-1: Manufacturer: syz
[  217.916066][ T1107] usb 1-1: SerialNumber: syz
[  218.038149][ T8278] loop2: detected capacity change from 0 to 2048
[  218.068336][ T8278] EXT4-fs (loop2): Ignoring removed bh option
[  218.121115][ T8278] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,bh,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  218.151410][ T8278] EXT4-fs (loop2): shut down requested (2)
[  218.336502][ T8292] netlink: 'syz.2.1526': attribute type 2 has an invalid length.
[  218.378582][ T8291] netlink: 'syz.3.1529': attribute type 21 has an invalid length.
[  218.426672][ T1107] usb 1-1: 0:2 : does not exist
[  218.893807][ T1107] usb 1-1: USB disconnect, device number 11
[  219.137580][ T4652] udevd[4652]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  219.633313][ T8351] tipc: Started in network mode
[  219.652910][ T8351] tipc: Node identity ff, cluster identity 4711
[  219.686466][ T8351] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  219.771700][ T8357] loop4: detected capacity change from 0 to 128
[  219.806524][ T4500] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  219.829502][ T1107] kernel write not supported for file /vcsa1 (pid: 1107 comm: kworker/0:2)
[  220.572471][ T8379] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  220.581808][ T8379] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  220.590609][ T8379] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  220.599367][ T8379] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  220.785360][ T8383] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1573'.
[  220.942684][ T8367] loop5: detected capacity change from 0 to 131072
[  220.949566][   T26] audit: type=1326 audit(1757470681.373:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8384 comm="syz.3.1574" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f61cada1ba9 code=0x0
[  220.976491][ T4500] usb 3-1: Using ep0 maxpacket: 8
[  221.004106][ T8367] F2FS-fs (loop5): Wrong CP boundary, start(512) end(198144) blocks(1024)
[  221.012797][ T8367] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  221.024684][ T8367] F2FS-fs (loop5): invalid crc value
[  221.074681][ T8367] F2FS-fs (loop5): Found nat_bits in checkpoint
[  221.109899][ T4505] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  221.131923][ T8367] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  221.139231][ T8367] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  221.156616][ T4500] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  221.165441][ T4500] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  221.176757][ T4500] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  221.187433][ T4500] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  221.197849][ T4500] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  221.211702][ T4500] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  221.221130][ T4500] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.237383][ T8367] fscrypt (loop5, inode 8): Error -61 getting encryption context
[  221.393715][ T8397] loop4: detected capacity change from 0 to 2048
[  221.513821][ T4500] usb 3-1: GET_CAPABILITIES returned 0
[  221.520426][ T4500] usbtmc 3-1:16.0: can't read capabilities
[  221.566723][ T4505] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  221.579136][ T8397] EXT4-fs (loop4): mounted filesystem without journal. Opts: sysvgroups,,errors=continue. Quota mode: none.
[  221.591142][ T4505] usb 1-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00
[  221.601371][ T4505] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.611537][ T4505] usb 1-1: config 0 descriptor??
[  221.745042][ T4821] usb 3-1: USB disconnect, device number 8
[  222.109012][ T4505] hid-alps 0003:044E:121E.000E: unknown main item tag 0x0
[  222.138656][ T4505] hid-alps 0003:044E:121E.000E: unknown main item tag 0x0
[  222.146281][ T4505] hid-alps 0003:044E:121E.000E: unknown main item tag 0x0
[  222.166462][ T4505] hid-alps 0003:044E:121E.000E: unknown main item tag 0x0
[  222.205272][ T4505] hid-alps 0003:044E:121E.000E: unknown main item tag 0x0
[  222.233052][ T4505] hid-alps 0003:044E:121E.000E: unknown main item tag 0x0
[  222.252046][ T4505] hid-alps 0003:044E:121E.000E: unknown main item tag 0x0
[  222.279008][ T4505] hid-alps 0003:044E:121E.000E: hidraw0: USB HID v0.05 Device [HID 044e:121e] on usb-dummy_hcd.0-1/input0
[  222.376568][ T4505] usb 1-1: USB disconnect, device number 12
[  222.548523][ T8403] loop5: detected capacity change from 0 to 40427
[  222.622238][ T8403] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x1ffff
[  222.653318][ T8429] fido_id[8429]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  222.656601][ T8403] F2FS-fs (loop5): invalid crc value
[  222.709703][ T8437] loop4: detected capacity change from 0 to 1024
[  222.743857][ T8403] F2FS-fs (loop5): Found nat_bits in checkpoint
[  222.787746][ T8437] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  222.859506][ T8443] tap0: tun_chr_ioctl cmd 2147767511
[  222.876723][ T8437] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,resgid=0x0000000000000000,. Quota mode: writeback.
[  223.015808][ T8403] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  223.054049][ T8437] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 48: comm syz.4.1593: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=16, rec_len=5, size=1024 fake=0
[  224.665008][ T8458] loop0: detected capacity change from 0 to 32768
[  224.906456][ T1107] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  224.947837][ T8458] XFS (loop0): Mounting V5 Filesystem
[  225.134670][ T8489] loop2: detected capacity change from 0 to 1024
[  225.161953][ T8458] XFS (loop0): Ending clean mount
[  225.238462][ T8458] XFS (loop0): Quotacheck needed: Please wait.
[  225.276809][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  225.306464][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  225.316252][ T1107] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  225.396458][ T1107] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  225.423578][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.476611][  T263] block nbd2: Possible stuck request ffff888020490000: control (read@0,4096B). Runtime 60 seconds
[  225.505459][ T1107] usb 5-1: config 0 descriptor??
[  225.556907][ T8458] XFS (loop0): Quotacheck: Done.
[  225.804027][ T8511] loop5: detected capacity change from 0 to 64
[  225.823093][ T4183] XFS (loop0): Unmounting Filesystem
[  225.943813][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1624'.
[  225.988534][ T1107] plantronics 0003:047F:FFFF.000F: unbalanced delimiter at end of report description
[  225.989905][ T8515] loop2: detected capacity change from 0 to 128
[  226.000974][ T1107] plantronics 0003:047F:FFFF.000F: parse failed
[  226.023286][ T1107] plantronics: probe of 0003:047F:FFFF.000F failed with error -22
[  226.081009][ T8515] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  226.135505][ T8515] hpfs: filesystem error: improperly stopped
[  226.143984][ T8515] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  226.165881][ T8515] hpfs: You really don't want any checks? You are crazy...
[  226.225551][ T8515] hpfs: hpfs_map_sector(): read error
[  226.245110][ T8515] hpfs: code page support is disabled
[  226.245319][ T4500] usb 5-1: USB disconnect, device number 16
[  226.251062][ T8515] hpfs: hpfs_map_4sectors(): unaligned read
[  226.275445][ T8515] hpfs: hpfs_map_4sectors(): unaligned read
[  226.299033][ T8515] hpfs: filesystem error: unable to find root dir
[  226.398011][ T8515] hpfs: hpfs_map_4sectors(): unaligned read
[  226.978038][ T8523] loop2: detected capacity change from 0 to 4096
[  227.001795][ T8523] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  227.344189][ T8534] loop0: detected capacity change from 0 to 64
[  227.683913][ T8540] loop0: detected capacity change from 0 to 512
[  227.796572][ T8525] loop4: detected capacity change from 0 to 32768
[  227.827370][ T8540] EXT4-fs (loop0): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback.
[  227.898744][ T8540] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  228.705936][ T8538] loop2: detected capacity change from 0 to 32768
[  228.898606][ T8579] netlink: 'syz.4.1653': attribute type 3 has an invalid length.
[  228.910331][ T8579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1653'.
[  228.937371][ T8538] XFS (loop2): Mounting V5 Filesystem
[  229.037374][ T8538] XFS (loop2): Ending clean mount
[  229.044859][ T8538] XFS (loop2): Quotacheck needed: Please wait.
[  229.183210][ T8591] loop4: detected capacity change from 0 to 4096
[  229.249790][ T8538] XFS (loop2): Quotacheck: Done.
[  229.366555][ T8594] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1658'.
[  229.506139][ T8557] loop5: detected capacity change from 0 to 32768
[  229.587306][ T4191] XFS (loop2): Unmounting Filesystem
[  229.628571][ T4505] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  229.663250][ T8602] netlink: 'syz.4.1662': attribute type 6 has an invalid length.
[  229.689907][ T8604] loop0: detected capacity change from 0 to 512
[  229.845234][ T8604] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,bsddf,noblock_validity,,errors=continue. Quota mode: none.
[  229.907787][ T8604] EXT4-fs warning (device loop0): dx_probe:869: inode #2: comm syz.0.1661: Unimplemented hash flags: 0x0001
[  229.926751][ T4505] usb 4-1: Using ep0 maxpacket: 32
[  229.988209][ T8604] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1661: Corrupt directory, running e2fsck is recommended
[  230.002242][ T8604] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.1661: path /329/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0
[  230.083166][ T4505] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  230.098294][ T4505] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  230.109856][ T4505] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  230.121366][ T4505] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  230.136179][ T4505] usb 4-1: config 0 interface 0 has no altsetting 0
[  230.316601][ T4505] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  230.330249][ T4505] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  230.342996][ T4505] usb 4-1: Product: syz
[  230.354470][ T4505] usb 4-1: Manufacturer: syz
[  230.373243][ T4505] usb 4-1: SerialNumber: syz
[  230.389031][ T4505] usb 4-1: config 0 descriptor??
[  230.428061][ T4505] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  230.452013][ T4505] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  230.663596][ T2858] usb 4-1: USB disconnect, device number 16
[  230.687573][ T2858] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  230.994345][ T8624] loop4: detected capacity change from 0 to 2048
[  231.093435][ T8630] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1672'.
[  231.151205][ T8624] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,min_batch_time=0x0000000000000000,barrier=0x0000000000000040,nodelalloc,,errors=continue. Quota mode: none.
[  231.257951][ T8639] loop0: detected capacity change from 0 to 1024
[  231.388211][ T8639] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,,errors=continue. Quota mode: none.
[  231.425543][ T8639] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  231.733469][ T8656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1680'.
[  231.831243][ T8658] xt_TPROXY: Can be used only with -p tcp or -p udp
[  231.936406][ T7466] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  232.213613][ T7466] usb 6-1: Using ep0 maxpacket: 32
[  232.336665][ T7466] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  232.363939][ T7466] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.439599][ T7466] usb 6-1: config 0 descriptor??
[  232.498885][ T7466] gspca_main: sunplus-2.14.0 probing 041e:400b
[  232.958493][ T8699] loop4: detected capacity change from 0 to 8192
[  233.157654][   T26] audit: type=1804 audit(1757470693.573:40): pid=8706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1699" name="/newroot/318/bus/bus" dev="loop4" ino=1048636 res=1 errno=0
[  233.179615][    C0] vkms_vblank_simulate: vblank timer overrun
[  233.376546][ T7466] gspca_sunplus: reg_w_riv err -71
[  233.381865][ T7466] sunplus: probe of 6-1:0.0 failed with error -71
[  233.406976][ T7466] usb 6-1: USB disconnect, device number 3
[  233.514449][ T8710] loop4: detected capacity change from 0 to 4096
[  233.533966][ T8710] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  233.806810][ T8708] loop0: detected capacity change from 0 to 32768
[  233.959287][ T8708] XFS (loop0): Mounting V5 Filesystem
[  234.143819][ T8708] XFS (loop0): Ending clean mount
[  234.220861][ T8716] loop2: detected capacity change from 0 to 32768
[  234.261047][ T4183] XFS (loop0): Unmounting Filesystem
[  234.276600][ T8716] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1720 (8716)
[  234.340119][ T8716] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  234.416604][ T8716] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  234.437887][ T8716] BTRFS info (device loop2): trying to use backup root at mount time
[  234.456430][ T8716] BTRFS info (device loop2): setting nodatasum
[  234.466650][ T8716] BTRFS info (device loop2): force clearing of disk cache
[  234.496588][ T8716] BTRFS info (device loop2): turning on flush-on-commit
[  234.503737][ T8716] BTRFS info (device loop2): enabling disk space caching
[  234.524778][ T8716] BTRFS info (device loop2): disk space caching is enabled
[  234.618126][ T8716] BTRFS info (device loop2): has skinny extents
[  234.665799][ T8714] loop4: detected capacity change from 0 to 32768
[  234.853516][ T8714] XFS (loop4): Mounting V5 Filesystem
[  235.145857][ T8716] BTRFS info (device loop2): enabling ssd optimizations
[  235.208727][ T8716] BTRFS info (device loop2): clearing free space tree
[  235.218065][ T8716] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  235.229681][ T8716] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  235.466431][   T26] audit: type=1800 audit(1757470695.873:41): pid=8716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1720" name="file1" dev="loop2" ino=260 res=0 errno=0
[  235.570302][ T8714] XFS (loop4): Ending clean mount
[  235.593155][ T8714] XFS (loop4): Quotacheck needed: Please wait.
[  235.716758][  T263] block nbd1: Possible stuck request ffff888020418000: control (read@0,1024B). Runtime 90 seconds
[  235.727559][  T263] block nbd1: Possible stuck request ffff888020418200: control (read@1024,1024B). Runtime 90 seconds
[  235.746788][  T263] block nbd1: Possible stuck request ffff888020418400: control (read@2048,1024B). Runtime 90 seconds
[  235.757783][  T263] block nbd1: Possible stuck request ffff888020418600: control (read@3072,512B). Runtime 90 seconds
[  236.250465][ T8714] XFS (loop4): Quotacheck: Done.
[  236.391588][ T4187] XFS (loop4): Unmounting Filesystem
[  236.579657][ T8794] loop2: detected capacity change from 0 to 8192
[  236.630784][ T8781] loop5: detected capacity change from 0 to 32768
[  236.991928][ T8806] loop4: detected capacity change from 0 to 64
[  237.135345][   T26] audit: type=1804 audit(1757470697.553:42): pid=8798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1730" name="/newroot/376/bus/bus" dev="loop2" ino=1048637 res=1 errno=0
[  238.176411][ T7467] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  238.568447][ T7467] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  238.606850][ T7467] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  238.697917][ T7467] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  238.807836][ T7467] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  238.878097][ T7467] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.918402][ T7467] usb 6-1: config 0 descriptor??
[  239.388700][ T7467] plantronics 0003:047F:FFFF.0010: unbalanced delimiter at end of report description
[  239.399218][ T7467] plantronics 0003:047F:FFFF.0010: parse failed
[  239.405499][ T7467] plantronics: probe of 0003:047F:FFFF.0010 failed with error -22
[  239.598593][ T7467] usb 6-1: USB disconnect, device number 4
[  240.270948][ T8846] loop2: detected capacity change from 0 to 8192
[  240.406599][ T4821] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  240.525763][   T26] audit: type=1804 audit(1757470700.943:43): pid=8854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1748" name="/newroot/382/bus/bus" dev="loop2" ino=1048638 res=1 errno=0
[  240.666408][ T4821] usb 1-1: Using ep0 maxpacket: 8
[  240.702687][ T8848] loop5: detected capacity change from 0 to 32768
[  240.786675][ T4821] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  240.794968][ T4821] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  240.826409][ T4821] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  240.843774][ T8848] XFS (loop5): Mounting V5 Filesystem
[  240.846442][ T4821] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  240.876522][ T4821] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  240.890303][ T8863] loop4: detected capacity change from 0 to 4096
[  240.897458][ T4821] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  240.908079][ T4821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.951562][ T8863] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  241.014303][ T8848] XFS (loop5): Ending clean mount
[  241.069013][ T8848] XFS (loop5): Quotacheck needed: Please wait.
[  241.186508][ T4821] usb 1-1: GET_CAPABILITIES returned 0
[  241.192058][ T4821] usbtmc 1-1:16.0: can't read capabilities
[  241.236670][ T8848] XFS (loop5): Quotacheck: Done.
[  241.413925][   T21] usb 1-1: USB disconnect, device number 13
[  241.467575][ T7527] XFS (loop5): Unmounting Filesystem
[  241.770368][ T8878] loop2: detected capacity change from 0 to 32768
[  241.897673][ T8878] XFS (loop2): Mounting V5 Filesystem
[  242.055223][ T8878] XFS (loop2): Ending clean mount
[  242.264456][ T4191] XFS (loop2): Unmounting Filesystem
[  242.274976][ T8898] loop5: detected capacity change from 0 to 8
[  242.361009][ T8898] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  243.250624][ T8928] loop4: detected capacity change from 0 to 1764
[  243.355689][ T8927] loop5: detected capacity change from 0 to 2048
[  243.466847][ T4652]  loop5: p3 p4 < >
[  243.470874][ T4652] loop5: p3 start 4284160 is beyond EOD, truncated
[  243.503072][ T8927]  loop5: p3 p4 < >
[  243.514157][ T8927] loop5: p3 start 4284160 is beyond EOD, truncated
[  243.662130][ T4652] udevd[4652]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  243.735204][ T8931] loop2: detected capacity change from 0 to 8192
[  243.749258][ T4652] udevd[4652]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  244.158217][   T26] audit: type=1804 audit(1757470704.583:44): pid=8945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1766" name="/newroot/385/bus/bus" dev="loop2" ino=1048639 res=1 errno=0
[  244.503137][ T2858] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  244.651702][ T8943] loop4: detected capacity change from 0 to 32768
[  244.708553][ T8953] loop2: detected capacity change from 0 to 8192
[  244.748891][ T8953] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  244.756455][ T2858] usb 6-1: Using ep0 maxpacket: 16
[  244.834427][ T8953] REISERFS (device loop2): using ordered data mode
[  244.841468][ T8953] reiserfs: using flush barriers
[  244.852303][ T8953] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  244.870143][ T8953] REISERFS (device loop2): checking transaction log (loop2)
[  244.896643][ T2858] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30
[  244.920374][ T2858] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  244.958579][ T2858] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  245.007807][ T2858] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 254
[  245.094257][ T8953] REISERFS (device loop2): Using tea hash to sort names
[  245.116803][ T8953] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  245.135318][ T8956] loop0: detected capacity change from 0 to 8192
[  245.154475][ T2858] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  245.182536][ T2858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  245.242657][ T2858] usb 6-1: SerialNumber: syz
[  245.556303][   T26] audit: type=1804 audit(1757470705.963:45): pid=8965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1796" name="/newroot/354/bus/bus" dev="loop0" ino=1048640 res=1 errno=0
[  245.596498][ T2858] usb 6-1: USB disconnect, device number 5
[  245.704989][ T8973] loop2: detected capacity change from 0 to 8
[  245.736456][ T7467] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  245.787153][ T8973] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  245.996546][ T7467] usb 5-1: Using ep0 maxpacket: 32
[  246.116638][ T7467] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  246.129631][ T7467] usb 5-1: config 0 has no interface number 0
[  246.146051][ T8987] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  246.155822][ T8987] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  246.165015][ T8987] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  246.173795][ T8987] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  246.350974][ T7467] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  246.364253][ T7467] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.382733][ T7467] usb 5-1: Product: syz
[  246.394292][ T7467] usb 5-1: Manufacturer: syz
[  246.406381][ T7467] usb 5-1: SerialNumber: syz
[  246.441522][ T7467] usb 5-1: config 0 descriptor??
[  246.481131][ T8996] block device autoloading is deprecated and will be removed.
[  246.508008][ T7467] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  246.667987][ T8998] loop0: detected capacity change from 0 to 1024
[  246.721714][ T8998] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  246.728972][ T7467] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  246.776144][ T7467] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  246.986400][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short
[  247.053947][ T8989] loop5: detected capacity change from 0 to 40427
[  247.128334][ T8989] F2FS-fs (loop5): Invalid log sectors per block(0) log sectorsize(9)
[  247.140856][ T9012] loop0: detected capacity change from 0 to 8
[  247.158211][ T8989] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  247.164055][ T9012] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  247.181119][ T4505] usb 5-1: USB disconnect, device number 17
[  247.186459][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  247.206648][ T4505] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  247.224694][ T9008] loop2: detected capacity change from 0 to 8192
[  247.236250][ T8989] F2FS-fs (loop5): invalid crc value
[  247.276889][ T4505] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  247.340856][ T4505] quatech2 5-1:0.51: device disconnected
[  247.351346][ T8989] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  247.530127][ T9024] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1813'.
[  247.558190][ T8989] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1
[  247.587573][ T8989] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  247.597217][   T26] audit: type=1804 audit(1757470708.023:46): pid=9022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1806" name="/newroot/394/bus/bus" dev="loop2" ino=1048641 res=1 errno=0
[  247.608065][ T8989] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  247.757126][ T9015] attempt to access beyond end of device
[  247.757126][ T9015] loop5: rw=2049, want=45104, limit=40427
[  248.473601][ T4505] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  248.662456][ T9054] loop4: detected capacity change from 0 to 4096
[  248.691198][ T9054] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  248.885690][ T4505] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  248.894735][ T4505] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  248.904397][ T9054] ntfs3: Cannot use different iocharset when remounting!
[  248.930240][ T4505] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  248.946374][ T4505] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  248.948338][ T9054] ntfs3: loop4: failed to convert "076c" to cp932
[  248.965919][ T4505] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  249.116626][ T4505] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  249.139769][ T4505] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  249.171740][ T4505] usb 3-1: Product: syz
[  249.176042][ T4505] usb 3-1: Manufacturer: syz
[  249.257600][ T4505] cdc_wdm 3-1:1.0: skipping garbage
[  249.262986][ T4505] cdc_wdm 3-1:1.0: skipping garbage
[  249.295257][ T4505] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  249.323301][ T4505] cdc_wdm 3-1:1.0: Unknown control protocol
[  249.456975][ T9076] loop0: detected capacity change from 0 to 8
[  249.565465][ T9078] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1838'.
[  249.580839][ T9076] SQUASHFS error: zstd decompression error: 2
[  249.596738][ T9076] SQUASHFS error: zstd decompression failed, data probably corrupt
[  249.616551][ T9076] SQUASHFS error: Failed to read block 0x62b: -5
[  249.651014][ T9076] SQUASHFS error: Unable to read metadata cache entry [629]
[  249.682762][ T9076] SQUASHFS error: Unable to read directory block [629:ff26]
[  250.114341][ T4505] usb 3-1: USB disconnect, device number 9
[  250.217253][ T9097] loop4: detected capacity change from 0 to 64
[  251.011280][ T9113] loop0: detected capacity change from 0 to 4096
[  251.091150][ T9117] loop2: detected capacity change from 0 to 4096
[  251.283199][ T4183] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  251.290078][ T4821] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  251.312100][ T4183] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  251.482965][ T9123] loop2: detected capacity change from 0 to 1024
[  251.552171][ T9123] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  251.676700][ T4821] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  251.713484][ T4821] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  251.756498][ T4821] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  251.774909][ T4821] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  251.813053][ T4821] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  251.823384][ T9132] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1862'.
[  251.954793][ T9134] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  251.962614][ T4821] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  251.990588][ T4821] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  252.015639][ T9134] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  252.026479][ T4821] usb 5-1: Product: syz
[  252.030712][ T4821] usb 5-1: Manufacturer: syz
[  252.083813][ T9134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  252.097396][ T4821] cdc_wdm 5-1:1.0: skipping garbage
[  252.116563][ T4821] cdc_wdm 5-1:1.0: skipping garbage
[  252.143510][ T4821] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  252.153825][ T9134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  252.166868][ T4821] cdc_wdm 5-1:1.0: Unknown control protocol
[  252.214920][ T9134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  252.223534][ T9134] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  252.248531][ T9142] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1877'.
[  252.856024][ T4226] usb 5-1: USB disconnect, device number 18
[  252.956438][ T7467] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  253.132313][ T9046] Set syz1 is full, maxelem 65536 reached
[  253.226394][ T7467] usb 1-1: Using ep0 maxpacket: 32
[  253.334969][ T9159] loop2: detected capacity change from 0 to 32768
[  253.346616][ T7467] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  253.364974][ T7467] usb 1-1: config 0 has no interface number 0
[  253.411876][ T9159] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1874 (9159)
[  253.490765][ T9159] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  253.507385][ T9159] BTRFS info (device loop2): enabling auto defrag
[  253.514600][ T9159] BTRFS info (device loop2): doing ref verification
[  253.526007][ T9159] BTRFS info (device loop2): use no compression
[  253.547639][ T7467] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  253.572059][ T9159] BTRFS info (device loop2): force clearing of disk cache
[  253.581802][ T7467] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.582215][ T9159] BTRFS info (device loop2): turning on async discard
[  253.602096][ T7467] usb 1-1: Product: syz
[  253.612232][ T7467] usb 1-1: Manufacturer: syz
[  253.625024][ T9169] kernel profiling enabled (shift: 63)
[  253.633819][ T9169] profiling shift: 63 too large
[  253.639163][ T9159] BTRFS info (device loop2): max_inline at 4096
[  253.646372][ T7467] usb 1-1: SerialNumber: syz
[  253.666034][ T9159] BTRFS info (device loop2): disabling free space tree
[  253.680622][ T9159] BTRFS info (device loop2): has skinny extents
[  253.688102][ T7467] usb 1-1: config 0 descriptor??
[  253.748112][ T7467] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  253.971121][ T7467] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  253.988124][ T9159] BTRFS info (device loop2): enabling ssd optimizations
[  254.048844][ T7467] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  254.065451][ T9159] BTRFS info (device loop2): clearing free space tree
[  254.094959][ T9159] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  254.166452][ T9159] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  254.246466][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short
[  254.439247][ T7467] usb 1-1: USB disconnect, device number 14
[  254.446473][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -108
[  254.468737][ T7467] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  254.532462][ T7467] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  254.579039][ T7467] quatech2 1-1:0.51: device disconnected
[  255.070168][ T9204] loop5: detected capacity change from 0 to 32768
[  255.170521][ T9208] loop4: detected capacity change from 0 to 32768
[  255.233306][ T9208] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1888 (9208)
[  255.365713][ T9208] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  255.426460][ T9208] BTRFS info (device loop4): enabling disk space caching
[  255.433549][ T9208] BTRFS info (device loop4): enabling auto defrag
[  255.483687][ T9208] BTRFS info (device loop4): doing ref verification
[  255.506453][ T9208] BTRFS info (device loop4): use no compression
[  255.512760][ T9208] BTRFS info (device loop4): force clearing of disk cache
[  255.558690][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  255.563255][  T263] block nbd2: Possible stuck request ffff888020490000: control (read@0,4096B). Runtime 90 seconds
[  255.565164][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  255.583069][ T9208] BTRFS info (device loop4): turning on sync discard
[  255.596291][ T9208] BTRFS info (device loop4): disabling disk space caching
[  255.613638][ T9208] BTRFS info (device loop4): has skinny extents
[  255.668706][ T9239] loop0: detected capacity change from 0 to 128
[  255.812311][ T9248] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  255.883257][ T9248] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  255.935794][ T9208] BTRFS info (device loop4): enabling ssd optimizations
[  255.946065][ T9248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  255.954300][ T9248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  255.962478][ T9248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  255.970600][ T9248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  255.977323][ T9208] BTRFS info (device loop4): clearing free space tree
[  256.014915][ T9244] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1901'.
[  256.054726][ T9208] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  256.092689][ T9264] loop2: detected capacity change from 0 to 4096
[  256.100549][ T9208] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  256.162902][ T9264] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  256.265513][ T9264] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  256.479842][   T26] audit: type=1804 audit(1757470716.903:47): pid=9264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1904" name="/newroot/407/file0/file0" dev="loop2" ino=0 res=1 errno=0
[  257.347994][ T4505] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  257.524599][ T9312] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1924'.
[  257.736709][ T4505] usb 6-1: config 0 has an invalid interface number: 3 but max is 0
[  257.755082][ T4505] usb 6-1: config 0 has no interface number 0
[  257.956731][ T4505] usb 6-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84
[  257.971467][ T4505] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.991303][ T4505] usb 6-1: Product: syz
[  258.001812][ T4505] usb 6-1: Manufacturer: syz
[  258.012078][ T4505] usb 6-1: SerialNumber: syz
[  258.024424][ T4505] usb 6-1: config 0 descriptor??
[  258.074602][ T9328] loop0: detected capacity change from 0 to 1024
[  258.175051][ T9318] loop2: detected capacity change from 0 to 32768
[  258.193629][ T9328] EXT4-fs (loop0): Ignoring removed oldalloc option
[  258.219480][ T9328] EXT4-fs (loop0): Ignoring removed bh option
[  258.243258][ T9318] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1925 (9318)
[  258.246555][ T9328] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  258.279675][ T9318] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  258.298142][ T9318] BTRFS info (device loop2): enabling disk space caching
[  258.308154][ T4505] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in warm state.
[  258.321920][ T9318] BTRFS info (device loop2): enabling auto defrag
[  258.332093][ T4505] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  258.343751][ T9318] BTRFS info (device loop2): doing ref verification
[  258.376796][ T4505] dvbdev: DVB: registering new adapter (Medion CTX1921 DVB-T USB)
[  258.385002][ T9328] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,data_err=abort,barrier=0x0000000000000002,nombcache,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  258.411053][ T4505] usb 6-1: media controller created
[  258.428225][ T4505] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  258.439192][ T9318] BTRFS info (device loop2): use no compression
[  258.445965][ T9318] BTRFS info (device loop2): force clearing of disk cache
[  258.456576][ T9318] BTRFS info (device loop2): turning on sync discard
[  258.495273][ T9318] BTRFS info (device loop2): disabling disk space caching
[  258.499630][ T4505] DVB: Unable to find symbol dib7000p_attach()
[  258.509545][ T4505] dvb-usb: no frontend was attached by 'Medion CTX1921 DVB-T USB'
[  258.517980][ T9318] BTRFS info (device loop2): has skinny extents
[  258.626506][ T4505] rc_core: IR keymap rc-dib0700-rc5 not found
[  258.632980][ T4505] Registered IR keymap rc-empty
[  258.644431][ T4505] dvb-usb: could not initialize remote control.
[  258.651753][ T4505] dvb-usb: Medion CTX1921 DVB-T USB successfully initialized and connected.
[  258.745192][ T9318] BTRFS info (device loop2): enabling ssd optimizations
[  258.816217][ T9318] BTRFS info (device loop2): clearing free space tree
[  258.826739][ T9318] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  258.867046][ T9318] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  258.910810][ T9358] loop0: detected capacity change from 0 to 1024
[  259.007353][ T4505] usb 6-1: USB disconnect, device number 6
[  259.049151][ T4505] dvb-usb: Medion CTX1921 DVB-T USB successfully deinitialized and disconnected.
[  259.476414][ T4308] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  259.716521][ T4308] usb 1-1: Using ep0 maxpacket: 8
[  259.858620][ T4308] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  259.896838][ T4308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.979573][ T4308] pvrusb2: Hardware description: Terratec Grabster AV400
[  259.996487][ T4308] pvrusb2: **********
[  260.000597][ T4308] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  260.018704][ T4308] pvrusb2: Important functionality might not be entirely working.
[  260.036047][ T4308] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  260.056567][ T4308] pvrusb2: **********
[  260.142680][ T9388] netlink: 340 bytes leftover after parsing attributes in process `syz.4.1948'.
[  260.198052][ T2426] pvrusb2: Invalid write control endpoint
[  260.285564][ T2426] pvrusb2: Invalid write control endpoint
[  260.294116][ T2426] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  260.314068][ T2426] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  260.322370][ T2426] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  260.323197][ T9368] loop5: detected capacity change from 0 to 32768
[  260.332962][ T2426] pvrusb2: Device being rendered inoperable
[  260.346463][ T2426] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  260.353984][ T2426] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  260.365008][ T2426] pvrusb2: Attached sub-driver cx25840
[  260.378480][ T2426] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  260.401012][ T9368] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1939 (9368)
[  260.417169][ T4308] usb 1-1: USB disconnect, device number 15
[  260.423239][ T2426] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  260.469648][ T9368] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  260.493529][ T9368] BTRFS info (device loop5): enabling auto defrag
[  260.515120][ T9368] BTRFS info (device loop5): doing ref verification
[  260.531603][ T9368] BTRFS info (device loop5): use no compression
[  260.551920][ T9368] BTRFS info (device loop5): force clearing of disk cache
[  260.583637][ T9368] BTRFS info (device loop5): turning on async discard
[  260.592430][ T9368] BTRFS info (device loop5): max_inline at 4096
[  260.614765][ T9368] BTRFS info (device loop5): disabling free space tree
[  260.639889][ T9368] BTRFS info (device loop5): has skinny extents
[  260.651124][ T9405] loop2: detected capacity change from 0 to 128
[  260.822800][ T9421] vivid-008: disconnect
[  260.908825][ T9368] BTRFS info (device loop5): enabling ssd optimizations
[  260.918432][ T9368] BTRFS info (device loop5): clearing free space tree
[  260.933504][ T9368] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  260.943839][ T9368] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  261.452984][ T9451] loop0: detected capacity change from 0 to 128
[  261.611247][ T9413] vivid-008: reconnect
[  262.258215][ T9474] loop4: detected capacity change from 0 to 512
[  262.353414][ T9474] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1977: iget: bad extended attribute block 1
[  262.403867][ T9474] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1977: couldn't read orphan inode 15 (err -117)
[  262.430714][ T9474] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none.
[  262.584461][ T9474] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  262.730093][ T9478] loop5: detected capacity change from 0 to 32768
[  262.853753][ T9478] XFS (loop5): Mounting V5 Filesystem
[  262.863459][ T9490] vivid-004: disconnect
[  262.925516][ T9478] XFS (loop5): Ending clean mount
[  263.032737][ T7527] XFS (loop5): Unmounting Filesystem
[  263.289516][ T9483] loop4: detected capacity change from 0 to 32768
[  263.401284][ T9483] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  263.478556][ T9483] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  263.587322][ T9504] loop5: detected capacity change from 0 to 4096
[  263.620391][ T9482] vivid-004: reconnect
[  263.621511][ T9505] (syz.4.1981,9505,0):ocfs2_double_lock:1188 ERROR: status = -2
[  263.636503][ T9505] (syz.4.1981,9505,1):ocfs2_rename:1297 ERROR: status = -2
[  263.643763][ T9505] (syz.4.1981,9505,1):ocfs2_rename:1687 ERROR: status = -2
[  263.838880][ T9509] loop2: detected capacity change from 0 to 1024
[  263.923768][ T9507] loop0: detected capacity change from 0 to 32768
[  263.940243][ T9509] EXT4-fs (loop2): Ignoring removed oldalloc option
[  264.002037][ T4187] ocfs2: Unmounting device (7,4) on (node local)
[  264.026622][ T9509] EXT4-fs (loop2): Ignoring removed bh option
[  264.032770][ T9509] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  264.204490][ T9507] XFS (loop0): Mounting V5 Filesystem
[  264.223129][ T9509] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,data_err=abort,barrier=0x0000000000000002,nombcache,data_err=ignore,mb_optimize_scan=0x0000000000000001,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  264.249111][    C0] vkms_vblank_simulate: vblank timer overrun
[  264.361671][ T9530] loop4: detected capacity change from 0 to 128
[  264.428045][ T9507] XFS (loop0): Ending clean mount
[  264.433230][ T9507] XFS (loop0): Quotacheck needed: Please wait.
[  264.438619][ T9530] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  264.438667][ T9530] hpfs: filesystem error: improperly stopped
[  264.438683][ T9530] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  264.438700][ T9530] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[  264.438711][ T9530] hpfs: You really don't want any checks? You are crazy...
[  264.438969][ T9530] hpfs: hpfs_map_sector(): read error
[  264.438981][ T9530] hpfs: code page support is disabled
[  264.439031][ T9530] hpfs: hpfs_map_4sectors(): unaligned read
[  264.439067][ T9530] hpfs: hpfs_map_4sectors(): unaligned read
[  264.439077][ T9530] hpfs: filesystem error: unable to find root dir
[  264.504722][ T9507] XFS (loop0): Quotacheck: Done.
[  264.739730][ T4183] XFS (loop0): Unmounting Filesystem
[  264.876738][ T4245] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  265.052820][ T9526] loop5: detected capacity change from 0 to 32768
[  265.131314][ T9526] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1993 (9526)
[  265.165836][ T9544] vivid-006: disconnect
[  265.224604][ T9526] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  265.251540][ T9526] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  265.266690][ T9526] BTRFS info (device loop5): use lzo compression, level 0
[  265.279317][ T9526] BTRFS info (device loop5): using free space tree
[  265.286708][ T4245] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  265.307408][ T9526] BTRFS info (device loop5): has skinny extents
[  265.314626][ T4245] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  265.516640][ T4245] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  265.535991][ T4245] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.574980][ T9526] BTRFS info (device loop5): enabling ssd optimizations
[  265.604936][ T4245] usb 5-1: Product: syz
[  265.611169][ T9572] loop0: detected capacity change from 0 to 4096
[  265.622556][ T4245] usb 5-1: Manufacturer: syz
[  265.645836][ T4245] usb 5-1: SerialNumber: syz
[  265.715675][ T9572] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  265.733952][   T26] audit: type=1800 audit(1757470726.153:48): pid=9526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1993" name="file1" dev="loop5" ino=260 res=0 errno=0
[  265.797123][  T263] block nbd1: Possible stuck request ffff888020418000: control (read@0,1024B). Runtime 120 seconds
[  265.808109][  T263] block nbd1: Possible stuck request ffff888020418200: control (read@1024,1024B). Runtime 120 seconds
[  265.827109][  T263] block nbd1: Possible stuck request ffff888020418400: control (read@2048,1024B). Runtime 120 seconds
[  265.838528][  T263] block nbd1: Possible stuck request ffff888020418600: control (read@3072,512B). Runtime 120 seconds
[  265.934116][ T9543] vivid-006: reconnect
[  266.066683][ T4245] usb 5-1: 0:2 : does not exist
[  266.175310][ T4245] usb 5-1: USB disconnect, device number 19
[  266.509011][ T4544] udevd[4544]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  266.820719][ T9588] loop2: detected capacity change from 0 to 32768
[  266.876781][ T9608] loop0: detected capacity change from 0 to 256
[  266.939371][ T9612] loop5: detected capacity change from 0 to 64
[  266.961609][ T9606] loop4: detected capacity change from 0 to 4096
[  267.021078][ T9612] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing
[  267.033630][ T9588] XFS (loop2): Mounting V5 Filesystem
[  267.148957][ T9606] ntfs: volume version 3.1.
[  267.257302][ T9588] XFS (loop2): Ending clean mount
[  267.301696][ T9624] vivid-000: disconnect
[  267.409962][ T4191] XFS (loop2): Unmounting Filesystem
[  267.777678][ T9635] loop5: detected capacity change from 0 to 4096
[  267.897908][ T9635] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  268.045593][ T9623] vivid-000: reconnect
[  268.204112][ T9635] ntfs3: Cannot load iocharset cp94./file1
[  268.263975][ T9651] loop4: detected capacity change from 0 to 256
[  268.920271][ T9683] loop5: detected capacity change from 0 to 2048
[  268.956653][ T9366] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  268.993059][ T9683] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  269.356707][ T9366] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  269.393040][ T9366] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  269.413060][ T9366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.424449][ T9678] loop0: detected capacity change from 0 to 32768
[  269.452837][ T9366] usb 5-1: config 0 descriptor??
[  269.484594][ T9697] loop5: detected capacity change from 0 to 4096
[  269.600092][ T9697] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  269.605876][ T9678] XFS (loop0): Mounting V5 Filesystem
[  269.614874][ T9702] loop2: detected capacity change from 0 to 4096
[  269.655970][ T9702] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  269.694260][ T9678] XFS (loop0): Ending clean mount
[  269.830601][ T4183] XFS (loop0): Unmounting Filesystem
[  269.927954][ T9366] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor
[  269.954249][ T9366] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0011/input/input17
[  269.989209][ T9702] ntfs3: Cannot load iocharset cp94./file1
[  270.069309][ T9721] loop5: detected capacity change from 0 to 256
[  270.140732][ T9721] exfat: Deprecated parameter 'utf8'
[  270.166848][ T9721] exfat: Deprecated parameter 'utf8'
[  270.172211][ T9721] exfat: Deprecated parameter 'utf8'
[  270.204268][ T9366] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  270.294465][ T9721] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d)
[  270.408114][ T9727] loop2: detected capacity change from 0 to 2048
[  270.464564][ T9727] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  270.698489][ T9366] usb 5-1: USB disconnect, device number 20
[  270.756661][ T4818] Bluetooth: hci5: command 0x0405 tx timeout
[  270.854971][ T9738] loop0: detected capacity change from 0 to 4096
[  271.176634][ T4183] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  271.192087][ T4183] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  271.390835][ T9772] ieee802154 phy0 wpan0: encryption failed: -22
[  271.469929][ T9775] netlink: 'syz.4.2089': attribute type 3 has an invalid length.
[  271.503488][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2089'.
[  271.532497][ T9777] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2088'.
[  271.705101][ T9787] loop5: detected capacity change from 0 to 128
[  271.742849][ T9787] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  271.858551][ T4305] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  271.967336][ T9793] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  271.978234][ T9797] loop0: detected capacity change from 0 to 2048
[  271.985544][    C0] vkms_vblank_simulate: vblank timer overrun
[  272.018567][ T9799] device veth1_vlan left promiscuous mode
[  272.073764][ T9799] netlink: 'syz.3.2100': attribute type 1 has an invalid length.
[  272.075940][ T9797] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  272.123368][ T9799] netlink: 'syz.3.2100': attribute type 2 has an invalid length.
[  272.265321][ T9780] loop2: detected capacity change from 0 to 32768
[  272.359754][ T9780] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.2090 (9780)
[  272.462631][ T9809] syz.0.2114 (9809) used greatest stack depth: 20648 bytes left
[  272.473021][ T9780] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  272.547901][ T9780] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  272.598207][ T9780] BTRFS info (device loop2): use lzo compression, level 0
[  272.605412][ T9780] BTRFS info (device loop2): using free space tree
[  272.636481][ T9780] BTRFS info (device loop2): has skinny extents
[  272.933816][ T9780] BTRFS info (device loop2): enabling ssd optimizations
[  272.993648][   T26] audit: type=1800 audit(1757470733.413:49): pid=9780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2090" name="file1" dev="loop2" ino=260 res=0 errno=0
[  273.314795][ T9811] loop5: detected capacity change from 0 to 32768
[  273.450440][ T9811] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  273.462197][ T9811] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  273.536757][ T7467] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  273.595427][ T9811] gfs2: fsid=syz:syz.s: journal 0 mapped with 9 extents in 0ms
[  273.668110][ T9859] loop2: detected capacity change from 0 to 65
[  273.680023][ T9811] attempt to access beyond end of device
[  273.680023][ T9811] loop5: rw=0, want=4398046516160, limit=32768
[  273.719739][ T9859] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway
[  273.742172][ T9811] gfs2: fsid=syz:syz.s: Error parsing journal for spectator mount.
[  273.780884][ T7467] usb 1-1: Using ep0 maxpacket: 32
[  273.951958][ T7467] usb 1-1: unable to get BOS descriptor or descriptor too short
[  274.046863][ T7467] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  274.072664][ T7467] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  274.103458][ T7467] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  274.516702][ T7467] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  274.537774][ T7467] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.557503][ T9874] loop2: detected capacity change from 0 to 32768
[  274.561306][ T7467] usb 1-1: Manufacturer: 녋ꙝ揫툨ჿ篼秷鱤靼㔜塅떀䕤짤풦틡㇙퀵犖꾢弍፾鍎鳾䞜뼐⣕⦓ﵱ翚볺䜳≧
[  274.588577][ T7467] usb 1-1: SerialNumber: syz
[  274.589096][ T9871] loop4: detected capacity change from 0 to 40427
[  274.640908][ T9871] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  274.648936][ T9871] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  274.675572][ T9871] F2FS-fs (loop4): invalid crc value
[  274.691028][ T9871] F2FS-fs (loop4): Found nat_bits in checkpoint
[  274.731100][ T9874] XFS (loop2): Mounting V5 Filesystem
[  274.860052][ T9874] XFS (loop2): Ending clean mount
[  274.876662][ T9871] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  274.883837][ T9871] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  274.946586][ T7467] usb 1-1: 0:2 : does not exist
[  274.962240][ T7467] usb 1-1: USB disconnect, device number 16
[  275.007695][   T26] audit: type=1800 audit(1757470735.433:50): pid=9871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2125" name="file1" dev="loop4" ino=10 res=0 errno=0
[  275.097173][ T4191] XFS (loop2): Unmounting Filesystem
[  275.260571][ T4544] udevd[4544]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  275.663058][ T9902] loop0: detected capacity change from 0 to 4096
[  276.645563][ T9950] loop4: detected capacity change from 0 to 2048
[  276.661834][ T9953] netlink: 'syz.0.2157': attribute type 4 has an invalid length.
[  276.816433][ T9950] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  276.913108][ T9966] loop2: detected capacity change from 0 to 2048
[  277.011311][ T9950] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  277.058855][ T9966] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  277.085069][ T9977] loop0: detected capacity change from 0 to 512
[  277.119928][ T9950] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  277.137125][ T9950] EXT4-fs (loop4): This should not happen!! Data will be lost
[  277.137125][ T9950] 
[  277.147066][ T9950] EXT4-fs (loop4): Total free blocks count 0
[  277.153242][ T9950] EXT4-fs (loop4): Free/Dirty block details
[  277.159473][ T9950] EXT4-fs (loop4): free_blocks=2415919104
[  277.165361][ T9950] EXT4-fs (loop4): dirty_blocks=32
[  277.170909][ T9950] EXT4-fs (loop4): Block reservation details
[  277.177083][ T9950] EXT4-fs (loop4): i_reserved_data_blocks=2
[  277.207463][   T26] audit: type=1800 audit(1757470737.633:51): pid=9966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2162" name="file1" dev="loop2" ino=15 res=0 errno=0
[  277.278974][ T9977] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2166: bg 0: block 127: padding at end of block bitmap is not set
[  277.294619][  T144] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28
[  277.310841][  T144] EXT4-fs (loop4): This should not happen!! Data will be lost
[  277.310841][  T144] 
[  277.393846][ T9977] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6178: Corrupt filesystem
[  277.479726][ T9977] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.2166: attempt to clear invalid blocks 983260 len 1
[  277.532352][ T9977] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.2166: invalid indirect mapped block 2683928664 (level 0)
[  277.593006][ T9977] EXT4-fs error (device loop0): __ext4_get_inode_loc:4321: comm syz.0.2166: Invalid inode table block 0 in block_group 0
[  277.656384][ T9977] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5836: Corrupt filesystem
[  277.699439][ T9977] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  277.732366][ T9977] EXT4-fs error (device loop0): __ext4_get_inode_loc:4321: comm syz.0.2166: Invalid inode table block 0 in block_group 0
[  277.773949][ T9969] loop5: detected capacity change from 0 to 32768
[  277.796572][ T9977] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5836: Corrupt filesystem
[  277.831495][ T9977] EXT4-fs error (device loop0): ext4_truncate:4273: inode #13: comm syz.0.2166: mark_inode_dirty error
[  277.876837][ T9977] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  277.897819][ T9977] EXT4-fs (loop0): 1 truncate cleaned up
[  277.903525][ T9977] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,resuid=0x000000000000ee00,,errors=continue. Quota mode: none.
[  278.242073][T10001] loop5: detected capacity change from 0 to 512
[  278.329190][ T9990] loop4: detected capacity change from 0 to 32768
[  278.329903][T10001] EXT4-fs (loop5): Test dummy encryption mode enabled
[  278.356515][ T4818] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  278.380425][T10001] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  278.420052][ T9990] XFS (loop4): Mounting V5 Filesystem
[  278.427386][T10001] EXT4-fs (loop5): 1 truncate cleaned up
[  278.461865][T10001] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,resgid=0x0000000000000000,,errors=continue. Quota mode: none.
[  278.606633][ T4818] usb 3-1: Using ep0 maxpacket: 16
[  278.634368][ T9990] XFS (loop4): Ending clean mount
[  278.650793][ T9990] XFS (loop4): Quotacheck needed: Please wait.
[  278.691667][T10018] netlink: 71 bytes leftover after parsing attributes in process `syz.3.2178'.
[  278.727287][ T4818] usb 3-1: config 0 has an invalid interface number: 64 but max is 0
[  278.745782][ T4818] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  278.758277][ T4818] usb 3-1: config 0 has no interface number 0
[  278.764642][ T4818] usb 3-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b
[  278.794899][ T4818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.832490][ T4818] usb 3-1: config 0 descriptor??
[  278.888771][ T4818] usb 3-1: Found UVC 0.00 device <unnamed> (0bd3:0555)
[  278.902079][ T4818] usb 3-1: No valid video chain found.
[  278.919477][ T9990] XFS (loop4): Quotacheck: Done.
[  278.984346][T10001] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  279.002254][ T7467] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  279.073108][ T4187] XFS (loop4): Unmounting Filesystem
[  279.112872][ T4502] usb 3-1: USB disconnect, device number 10
[  279.270352][ T7467] usb 1-1: Using ep0 maxpacket: 16
[  279.386664][ T7467] usb 1-1: config 9 has an invalid interface number: 196 but max is 2
[  279.403107][ T7467] usb 1-1: config 9 has an invalid interface number: 15 but max is 2
[  279.414173][ T7467] usb 1-1: config 9 has an invalid interface number: 223 but max is 2
[  279.447812][ T7467] usb 1-1: config 9 has no interface number 0
[  279.453953][ T7467] usb 1-1: config 9 has no interface number 1
[  279.460922][ T7467] usb 1-1: config 9 has no interface number 2
[  279.461395][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2194'.
[  279.467366][ T7467] usb 1-1: config 9 interface 196 has no altsetting 0
[  279.483984][ T7467] usb 1-1: config 9 interface 223 has no altsetting 0
[  279.666652][ T7467] usb 1-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=7b.09
[  279.675963][ T7467] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.690522][ T7467] usb 1-1: Product: syz
[  279.694744][ T7467] usb 1-1: Manufacturer: syz
[  279.700215][ T7467] usb 1-1: SerialNumber: syz
[  279.732488][T10066] loop2: detected capacity change from 0 to 1024
[  279.795421][T10066] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  279.829965][   T26] audit: type=1326 audit(1757470740.253:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10071 comm="syz.5.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9847279ba9 code=0x7ffc0000
[  279.871286][   T26] audit: type=1326 audit(1757470740.253:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10071 comm="syz.5.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9847279ba9 code=0x7ffc0000
[  279.896552][   T26] audit: type=1326 audit(1757470740.283:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10071 comm="syz.5.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9847279ba9 code=0x7ffc0000
[  279.920254][   T26] audit: type=1326 audit(1757470740.293:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10071 comm="syz.5.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9847279ba9 code=0x7ffc0000
[  279.953559][   T26] audit: type=1326 audit(1757470740.373:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10071 comm="syz.5.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9847279ba9 code=0x7ffc0000
[  279.978024][   T26] audit: type=1326 audit(1757470740.373:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10071 comm="syz.5.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9847279ba9 code=0x7ffc0000
[  280.010830][   T26] audit: type=1326 audit(1757470740.423:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10071 comm="syz.5.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f9847279ba9 code=0x7ffc0000
[  280.033652][ T7467] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner
[  280.033850][   T26] audit: type=1326 audit(1757470740.423:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10071 comm="syz.5.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9847279ba9 code=0x7ffc0000
[  280.068996][ T7467] usb 1-1: selecting invalid altsetting 0
[  280.085327][ T2426] pvrusb2: Invalid write control endpoint
[  280.138398][ T7467] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner
[  280.176873][   T26] audit: type=1326 audit(1757470740.423:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10071 comm="syz.5.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9847279ba9 code=0x7ffc0000
[  280.228510][ T7467] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner
[  280.248492][ T2426] pvrusb2: Invalid write control endpoint
[  280.255486][ T7467] usb 1-1: selecting invalid altsetting 0
[  280.261780][ T2426] pvrusb2: Invalid write control endpoint
[  280.271536][ T7467] usb 1-1: USB disconnect, device number 17
[  280.278764][ T2426] pvrusb2: Invalid write control endpoint
[  280.313679][ T2426] pvrusb2: Invalid write control endpoint
[  280.319987][ T2426] pvrusb2: Invalid write control endpoint
[  280.336131][ T2426] pvrusb2: Invalid write control endpoint
[  280.342796][ T2426] pvrusb2: Invalid write control endpoint
[  280.386697][ T2426] pvrusb2: Invalid write control endpoint
[  280.416582][T10079] loop5: detected capacity change from 0 to 8192
[  280.423089][ T2426] pvrusb2: Invalid write control endpoint
[  280.429678][ T2426] pvrusb2: Invalid write control endpoint
[  280.438460][ T2426] pvrusb2: Invalid write control endpoint
[  280.444312][ T2426] pvrusb2: Invalid write control endpoint
[  280.468670][ T2426] pvrusb2: Invalid write control endpoint
[  280.474457][ T2426] pvrusb2: Invalid write control endpoint
[  280.502403][T10079] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  280.517079][ T2426] pvrusb2: Invalid write control endpoint
[  280.522862][ T2426] pvrusb2: Invalid write control endpoint
[  280.536706][T10079] REISERFS (device loop5): using ordered data mode
[  280.556480][T10079] reiserfs: using flush barriers
[  280.565191][ T2426] pvrusb2: Invalid write control endpoint
[  280.571369][T10079] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  280.584463][T10093] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2209'.
[  280.588229][T10079] REISERFS (device loop5): checking transaction log (loop5)
[  280.597673][ T2426] pvrusb2: Invalid write control endpoint
[  280.636526][T10093] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2209'.
[  280.641305][T10079] REISERFS (device loop5): Using r5 hash to sort names
[  280.676264][T10079] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  280.696777][T10090] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2209'.
[  280.706492][ T2426] pvrusb2: Invalid write control endpoint
[  280.718983][ T2426] pvrusb2: Invalid write control endpoint
[  280.741340][T10090] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2209'.
[  280.757745][ T2426] pvrusb2: Invalid write control endpoint
[  280.763573][ T2426] pvrusb2: Invalid write control endpoint
[  280.810720][ T2426] pvrusb2: Invalid write control endpoint
[  280.818959][ T2426] pvrusb2: Invalid write control endpoint
[  280.824914][ T2426] pvrusb2: Invalid write control endpoint
[  280.856412][ T2426] pvrusb2: Invalid write control endpoint
[  280.879879][ T2426] pvrusb2: Invalid write control endpoint
[  280.898592][ T2426] pvrusb2: Invalid write control endpoint
[  280.904486][ T2426] pvrusb2: Invalid write control endpoint
[  280.943189][ T2426] pvrusb2: Invalid write control endpoint
[  280.958340][ T2426] pvrusb2: Invalid write control endpoint
[  280.996418][ T2426] pvrusb2: Invalid write control endpoint
[  281.017568][ T2426] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  281.062152][T10111] loop2: detected capacity change from 0 to 1024
[  281.122304][T10112] loop4: detected capacity change from 0 to 2048
[  281.146733][ T2426] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a)
[  281.161930][T10108] loop0: detected capacity change from 0 to 4096
[  281.169634][ T2426] pvrusb2: Invalid write control endpoint
[  281.175887][ T2426] pvrusb2: Invalid write control endpoint
[  281.178329][T10111] EXT4-fs (loop2): Ignoring removed oldalloc option
[  281.192560][ T2426] pvrusb2: Invalid write control endpoint
[  281.195728][T10111] EXT4-fs (loop2): Ignoring removed bh option
[  281.199160][ T2426] pvrusb2: Invalid write control endpoint
[  281.220878][T10111] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  281.243878][T10112] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  281.257010][T10108] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  281.283672][ T2426] pvrusb2: Invalid write control endpoint
[  281.302540][ T2426] pvrusb2: Invalid write control endpoint
[  281.326698][T10118] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  281.341861][T10111] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  281.381090][ T2426] pvrusb2: Invalid write control endpoint
[  281.398397][ T2426] pvrusb2: Invalid write control endpoint
[  281.409863][ T2426] pvrusb2: Invalid write control endpoint
[  281.447699][ T2426] pvrusb2: Invalid write control endpoint
[  281.460717][ T2426] pvrusb2: Invalid write control endpoint
[  281.484073][ T2426] pvrusb2: Invalid write control endpoint
[  281.539903][ T2426] pvrusb2: Invalid write control endpoint
[  281.545688][ T2426] pvrusb2: Invalid write control endpoint
[  281.604239][ T2426] pvrusb2: Invalid write control endpoint
[  281.618381][ T2426] pvrusb2: Invalid write control endpoint
[  281.634445][ T2426] pvrusb2: Invalid write control endpoint
[  281.709050][ T2426] pvrusb2: Invalid write control endpoint
[  281.759658][ T2426] pvrusb2: Invalid write control endpoint
[  281.765444][ T2426] pvrusb2: Invalid write control endpoint
[  281.777829][T10128] loop5: detected capacity change from 0 to 32768
[  281.791865][T10128] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.2224 (10128)
[  281.869801][T10128] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  281.878779][T10128] BTRFS info (device loop5): enabling disk space caching
[  281.885921][T10128] BTRFS info (device loop5): setting nodatasum
[  281.893125][T10128] BTRFS info (device loop5): turning off barriers
[  281.899732][T10128] BTRFS info (device loop5): turning on flush-on-commit
[  281.906767][T10128] BTRFS info (device loop5): doing ref verification
[  281.913488][T10128] BTRFS info (device loop5): force clearing of disk cache
[  281.920774][T10128] BTRFS info (device loop5): enabling ssd optimizations
[  281.927796][T10128] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  281.937075][T10128] BTRFS info (device loop5): use lzo compression, level 0
[  281.944236][T10128] BTRFS info (device loop5): disk space caching is enabled
[  281.951587][T10128] BTRFS info (device loop5): has skinny extents
[  281.961837][ T2426] pvrusb2: Invalid write control endpoint
[  281.971616][ T2426] pvrusb2: Attached sub-driver cs53l32a
[  282.005101][ T2426] pvrusb2: Invalid write control endpoint
[  282.026148][T10134] loop4: detected capacity change from 0 to 16
[  282.027745][ T2426] pvrusb2: Invalid write control endpoint
[  282.039121][ T2426] pvrusb2: Invalid write control endpoint
[  282.044898][ T2426] pvrusb2: Invalid write control endpoint
[  282.051166][ T2426] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  282.083920][ T2426] pvrusb2: Device being rendered inoperable
[  282.094065][ T2426] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  282.161002][ T2426] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  282.203706][ T7467] pvrusb2: Device being rendered inoperable
[  282.220929][ T2426] pvrusb2: Invalid write control endpoint
[  282.224144][T10151] loop2: detected capacity change from 0 to 512
[  282.244109][T10134] erofs: (device loop4): mounted with root inode @ nid 36.
[  282.279302][ T2426] pvrusb2: Invalid write control endpoint
[  282.296370][ T2426] pvrusb2: Invalid write control endpoint
[  282.313280][ T2426] pvrusb2: Invalid write control endpoint
[  282.333320][T10134] attempt to access beyond end of device
[  282.333320][T10134] loop4: rw=0, want=24, limit=16
[  282.335423][ T2426] pvrusb2: Invalid write control endpoint
[  282.373745][T10128] BTRFS info (device loop5): clearing free space tree
[  282.380716][T10128] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  282.390462][T10128] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  282.415242][T10151] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  282.441875][T10166] loop0: detected capacity change from 0 to 1024
[  282.484894][ T2426] pvrusb2: Invalid write control endpoint
[  282.491071][ T2426] pvrusb2: Invalid write control endpoint
[  282.497192][ T2426] pvrusb2: Invalid write control endpoint
[  282.503689][ T2426] pvrusb2: Invalid write control endpoint
[  282.505836][T10134] attempt to access beyond end of device
[  282.505836][T10134] loop4: rw=524288, want=32, limit=16
[  282.511187][ T2426] pvrusb2: Invalid write control endpoint
[  282.530562][ T2426] pvrusb2: Invalid write control endpoint
[  282.536592][ T2426] pvrusb2: Invalid write control endpoint
[  282.542502][ T2426] pvrusb2: Invalid write control endpoint
[  282.548664][ T2426] pvrusb2: Invalid write control endpoint
[  282.554595][ T2426] pvrusb2: Invalid write control endpoint
[  282.564057][ T2426] pvrusb2: Invalid write control endpoint
[  282.580334][ T2426] pvrusb2: Invalid write control endpoint
[  282.586148][ T2426] pvrusb2: Invalid write control endpoint
[  282.596573][T10134] attempt to access beyond end of device
[  282.596573][T10134] loop4: rw=524288, want=24, limit=16
[  282.655090][ T2426] pvrusb2: Invalid write control endpoint
[  282.687051][ T2426] pvrusb2: Invalid write control endpoint
[  282.747956][ T2426] pvrusb2: Invalid write control endpoint
[  282.753761][ T2426] pvrusb2: Invalid write control endpoint
[  282.833042][ T2426] pvrusb2: Invalid write control endpoint
[  282.866790][ T2426] pvrusb2: Invalid write control endpoint
[  282.873409][ T2426] pvrusb2: Invalid write control endpoint
[  282.922983][ T2426] pvrusb2: Invalid write control endpoint
[  282.957541][ T2426] pvrusb2: Invalid write control endpoint
[  282.963437][ T2426] pvrusb2: Invalid write control endpoint
[  283.006742][ T2426] pvrusb2: Invalid write control endpoint
[  283.012521][ T2426] pvrusb2: Invalid write control endpoint
[  283.058551][ T2426] pvrusb2: Invalid write control endpoint
[  283.066941][ T2426] pvrusb2: Invalid write control endpoint
[  283.072722][ T2426] pvrusb2: Invalid write control endpoint
[  283.177409][ T2426] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  283.403268][ T2426] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_c)
[  283.410658][ T2426] pvrusb2: Invalid write control endpoint
[  283.427190][ T2426] pvrusb2: Invalid write control endpoint
[  283.471580][ T2426] pvrusb2: Invalid write control endpoint
[  283.509945][ T2426] pvrusb2: Invalid write control endpoint
[  283.515922][ T2426] pvrusb2: Invalid write control endpoint
[  283.522365][ T4225] Bluetooth: hci4: command 0x0406 tx timeout
[  283.539925][ T2426] pvrusb2: Invalid write control endpoint
[  283.554970][ T2426] pvrusb2: Invalid write control endpoint
[  283.565407][ T2426] pvrusb2: Invalid write control endpoint
[  283.574017][ T2426] pvrusb2: Invalid write control endpoint
[  283.580700][ T2426] pvrusb2: Invalid write control endpoint
[  283.595761][ T2426] pvrusb2: Invalid write control endpoint
[  283.610277][ T2426] pvrusb2: Invalid write control endpoint
[  283.630175][ T2426] pvrusb2: Invalid write control endpoint
[  283.657080][ T2426] pvrusb2: Invalid write control endpoint
[  283.672165][ T2426] pvrusb2: Invalid write control endpoint
[  283.746374][ T2426] pvrusb2: Invalid write control endpoint
[  283.752163][ T2426] pvrusb2: Invalid write control endpoint
[  283.797006][ T2426] pvrusb2: Invalid write control endpoint
[  283.802799][ T2426] pvrusb2: Invalid write control endpoint
[  283.813690][T10203] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  283.871376][ T2426] pvrusb2: Invalid write control endpoint
[  283.892711][ T2426] pvrusb2: Invalid write control endpoint
[  283.924875][ T2426] pvrusb2: Attached sub-driver cs53l32a
[  284.015924][ T2426] pvrusb2: Invalid write control endpoint
[  284.057518][ T2426] pvrusb2: Invalid write control endpoint
[  284.069275][ T2426] pvrusb2: Invalid write control endpoint
[  284.087231][ T2426] pvrusb2: Invalid write control endpoint
[  284.101666][T10219] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2253'.
[  284.114125][ T2426] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[  284.200755][ T2426] pvrusb2: Device being rendered inoperable
[  284.207055][ T4820] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  284.223856][ T2426] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[  284.310964][ T2426] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[  284.566691][ T4820] usb 4-1: unable to get BOS descriptor or descriptor too short
[  284.659032][ T4820] usb 4-1: unable to read config index 0 descriptor/start: -71
[  284.669119][ T4820] usb 4-1: can't read configurations, error -71
[  284.942198][T10250] loop5: detected capacity change from 0 to 256
[  285.042034][T10250] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  285.096509][T10250] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  285.144815][T10250] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  285.261331][T10232] loop4: detected capacity change from 0 to 32768
[  285.304975][T10232] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.2260 (10232)
[  285.436661][T10232] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  285.462667][T10232] BTRFS info (device loop4): using free space tree
[  285.478774][T10232] BTRFS info (device loop4): has skinny extents
[  285.636526][  T263] block nbd2: Possible stuck request ffff888020490000: control (read@0,4096B). Runtime 120 seconds
[  285.827216][T10232] BTRFS info (device loop4): enabling ssd optimizations
[  285.867655][   T26] audit: type=1800 audit(1757470746.293:61): pid=10232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2260" name="file2" dev="loop4" ino=261 res=0 errno=0
[  285.949020][T10240] loop2: detected capacity change from 0 to 40427
[  285.981172][T10240] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  286.002135][T10240] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  286.018872][T10240] F2FS-fs (loop2): Found nat_bits in checkpoint
[  286.103293][T10240] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  286.122721][T10240] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  287.375656][T10306] loop5: detected capacity change from 0 to 40427
[  287.411837][T10306] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  287.434705][T10330] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2293'.
[  287.446718][T10306] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  287.462847][T10306] F2FS-fs (loop5): invalid crc_offset: 33558524
[  287.519842][T10306] F2FS-fs (loop5): Found nat_bits in checkpoint
[  287.583510][ T4815] hid-generic 0005:0B57:0006.0012: collection stack underflow
[  287.616464][ T4815] hid-generic 0005:0B57:0006.0012: item 0 2 0 12 parsing failed
[  287.627157][T10306] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  287.656441][T10306] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  287.669853][ T4815] hid-generic: probe of 0005:0B57:0006.0012 failed with error -22
[  287.730799][T10343] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2298'.
[  287.828460][T10347] loop0: detected capacity change from 0 to 256
[  287.912538][T10352] loop4: detected capacity change from 0 to 1024
[  287.942050][T10347] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  287.975736][T10347] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  288.081865][T10347] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  288.198558][T10352] hfsplus: bad catalog entry type
[  288.366643][ T4305] hfsplus: b-tree write err: -5, ino 4
[  288.593653][T10367] program syz.4.2309 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  288.631884][T10363] loop5: detected capacity change from 0 to 4096
[  289.066317][    C0] sched: RT throttling activated
[  289.286565][T10380] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  289.498401][T10363] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  289.613239][T10383] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  289.693918][T10363] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=12)
[  289.798279][T10383] overlayfs: missing 'lowerdir'
[  289.921473][T10359] loop2: detected capacity change from 0 to 262144
[  289.927467][T10363] Remounting filesystem read-only
[  289.946572][T10363] NILFS (loop5): error -5 truncating bmap (ino=12)
[  290.000370][ T7527] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer
[  290.025828][T10359] F2FS-fs (loop2): invalid crc value
[  290.068876][T10359] F2FS-fs (loop2): Found nat_bits in checkpoint
[  290.134871][T10359] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  290.532513][T10413] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  290.605318][T10419] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  290.654990][T10413] loop4: detected capacity change from 0 to 256
[  290.734199][T10422] netlink: 'syz.2.2331': attribute type 2 has an invalid length.
[  290.760686][T10415] loop5: detected capacity change from 0 to 4096
[  290.801594][T10413] FAT-fs (loop4): Directory bread(block 64) failed
[  290.836648][T10413] FAT-fs (loop4): Directory bread(block 65) failed
[  290.871162][T10413] FAT-fs (loop4): Directory bread(block 66) failed
[  290.896116][T10413] FAT-fs (loop4): Directory bread(block 67) failed
[  290.906378][T10415] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00
[  290.944088][T10415] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00
[  290.952607][T10413] FAT-fs (loop4): Directory bread(block 68) failed
[  291.004931][T10413] FAT-fs (loop4): Directory bread(block 69) failed
[  291.012022][T10415] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00
[  291.036580][T10413] FAT-fs (loop4): Directory bread(block 70) failed
[  291.043196][T10413] FAT-fs (loop4): Directory bread(block 71) failed
[  291.056674][T10415] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00
[  291.070322][T10415] ntfs3: loop5: try to read out of volume at offset 0x3fffffc1c00
[  291.080778][T10431] loop2: detected capacity change from 0 to 64
[  291.087523][T10413] FAT-fs (loop4): Directory bread(block 72) failed
[  291.094094][T10413] FAT-fs (loop4): Directory bread(block 73) failed
[  291.115365][T10415] ntfs3: loop5: try to read out of volume at offset 0x3fffffc2c00
[  291.145054][T10415] ntfs3: loop5: try to read out of volume at offset 0x3fffffc4c00
[  291.184022][T10431] hfs: unable to locate alternate MDB
[  291.184061][T10415] ntfs3: loop5: try to read out of volume at offset 0x3fffffc8c00
[  291.210027][T10415] ntfs3: loop5: try to read out of volume at offset 0x3fffffd0c00
[  291.226858][T10415] ntfs3: loop5: try to read out of volume at offset 0x3fffffe0c00
[  291.259001][T10431] hfs: continuing without an alternate MDB
[  291.698878][T10448] loop5: detected capacity change from 0 to 256
[  291.719022][T10446] loop2: detected capacity change from 0 to 128
[  291.795389][T10448] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  291.832627][T10446] FAT-fs (loop2): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1)
[  291.854531][T10448] exFAT-fs (loop5): hint_cluster is invalid (17)
[  291.902862][   T26] audit: type=1800 audit(1757470752.323:62): pid=10448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2341" name="file1" dev="loop5" ino=1048649 res=0 errno=0
[  291.954324][T10424] loop0: detected capacity change from 0 to 32768
[  292.034027][  T154] FAT-fs (loop2): Invalid FSINFO signature: 0x41000000, 0x61417272 (sector = 1)
[  292.308031][T10424] XFS (loop0): Mounting V5 Filesystem
[  292.477791][T10480] team0: Device gtp0 is of different type
[  292.494887][T10424] XFS (loop0): Ending clean mount
[  292.586987][ T4820] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  292.615882][ T4183] XFS (loop0): Unmounting Filesystem
[  292.866644][ T4820] usb 6-1: Using ep0 maxpacket: 32
[  292.944588][T10488] loop2: detected capacity change from 0 to 4096
[  293.016765][ T4820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  293.046684][ T4820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  293.081860][ T4820] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  293.123258][ T4820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.166016][T10488] overlayfs: upper fs does not support tmpfile.
[  293.186220][ T4820] usb 6-1: config 0 descriptor??
[  293.214547][T10488] overlayfs: workdir/#5 already exists
[  293.254011][ T4820] hub 6-1:0.0: USB hub found
[  293.265397][T10496] loop4: detected capacity change from 0 to 512
[  293.344980][T10496] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  293.356536][T10496] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  293.399847][T10496] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002]
[  293.456633][T10496] System zones: 1-12
[  293.467578][ T4820] hub 6-1:0.0: 1 port detected
[  293.473395][T10496] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2228: inode #15: comm syz.4.2360: corrupted in-inode xattr
[  293.497134][T10496] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.2360: couldn't read orphan inode 15 (err -117)
[  293.539693][T10496] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x000000000000faca,nolazytime,debug,noload,mblk_io_submit,commit=0x0000000000000005,lazytime,acl,,errors=continue. Quota mode: none.
[  293.611970][T10506] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2362'.
[  293.914972][ T4820] usb 6-1: USB disconnect, device number 7
[  293.995516][T10523] loop4: detected capacity change from 0 to 1024
[  294.033762][T10523] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  294.074943][T10523] EXT4-fs error (device loop4): ext4_get_journal_inode:5160: inode #32: comm syz.4.2369: iget: special inode unallocated
[  294.094427][T10523] EXT4-fs (loop4): no journal found
[  294.106380][T10523] EXT4-fs (loop4): can't get journal size
[  294.123065][T10523] EXT4-fs (loop4): filesystem is read-only
[  294.136438][T10523] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noload,noblock_validity,bsdgroups,nobarrier,. Quota mode: none.
[  294.192089][T10523] EXT4-fs (loop4): shut down requested (2)
[  294.366539][T10510] loop0: detected capacity change from 0 to 40427
[  294.394156][T10510] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1ffff
[  294.436970][T10510] F2FS-fs (loop0): invalid crc value
[  294.479031][T10510] F2FS-fs (loop0): Found nat_bits in checkpoint
[  294.566030][T10510] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  294.673824][ T4183] attempt to access beyond end of device
[  294.673824][ T4183] loop0: rw=2049, want=45112, limit=40427
[  294.767773][ T4820] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  294.786531][ T4287] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  295.056700][ T4820] usb 5-1: Using ep0 maxpacket: 32
[  295.156676][ T4287] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  295.178051][ T4287] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  295.197591][ T4287] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.221087][ T4287] usb 6-1: config 0 descriptor??
[  295.376611][ T4820] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  295.376978][T10554] device macvlan1 entered promiscuous mode
[  295.385701][ T4820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.430401][ T4820] usb 5-1: Product: syz
[  295.437754][T10536] loop2: detected capacity change from 0 to 32768
[  295.444417][T10557] device veth1_vlan entered promiscuous mode
[  295.450626][ T4820] usb 5-1: Manufacturer: syz
[  295.455257][ T4820] usb 5-1: SerialNumber: syz
[  295.466092][ T4820] usb 5-1: config 0 descriptor??
[  295.508999][ T4820] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  295.584947][T10536] XFS (loop2): Mounting V5 Filesystem
[  295.699674][ T4287] keytouch 0003:0926:3333.0013: fixing up Keytouch IEC report descriptor
[  295.711275][ T4287] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0013/input/input18
[  295.734329][T10536] XFS (loop2): Ending clean mount
[  295.821628][ T4287] keytouch 0003:0926:3333.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0
[  295.847873][ T4191] XFS (loop2): Unmounting Filesystem
[  295.886588][  T263] block nbd1: Possible stuck request ffff888020418000: control (read@0,1024B). Runtime 150 seconds
[  295.900496][  T263] block nbd1: Possible stuck request ffff888020418200: control (read@1024,1024B). Runtime 150 seconds
[  295.911632][  T263] block nbd1: Possible stuck request ffff888020418400: control (read@2048,1024B). Runtime 150 seconds
[  295.923720][  T263] block nbd1: Possible stuck request ffff888020418600: control (read@3072,512B). Runtime 150 seconds
[  296.387622][T10595] sch_fq: defrate 0 ignored.
[  296.397759][ T4820] gspca_stk1135: reg_w 0x5 err -71
[  296.403964][ T4820] gspca_stk1135: serial bus timeout: status=0x00
[  296.414334][ T7467] usb 6-1: USB disconnect, device number 8
[  296.433812][ T4820] gspca_stk1135: Sensor write failed
[  296.439710][ T4820] gspca_stk1135: serial bus timeout: status=0x00
[  296.446097][ T4820] gspca_stk1135: Sensor write failed
[  296.451824][ T4820] gspca_stk1135: serial bus timeout: status=0x00
[  296.458693][ T4820] gspca_stk1135: Sensor read failed
[  296.463947][ T4820] gspca_stk1135: serial bus timeout: status=0x00
[  296.470694][ T4820] gspca_stk1135: Sensor read failed
[  296.475941][ T4820] gspca_stk1135: Detected sensor type unknown (0x0)
[  296.483169][ T4820] gspca_stk1135: serial bus timeout: status=0x00
[  296.498044][ T4820] gspca_stk1135: Sensor read failed
[  296.503297][ T4820] gspca_stk1135: serial bus timeout: status=0x00
[  296.510592][ T4820] gspca_stk1135: Sensor read failed
[  296.520449][ T4820] gspca_stk1135: serial bus timeout: status=0x00
[  296.540216][ T4820] gspca_stk1135: Sensor write failed
[  296.545643][ T4820] gspca_stk1135: serial bus timeout: status=0x00
[  296.555244][ T4820] gspca_stk1135: Sensor write failed
[  296.561128][ T4820] stk1135: probe of 5-1:0.0 failed with error -71
[  296.595575][ T4820] usb 5-1: USB disconnect, device number 21
[  296.888078][T10609] loop0: detected capacity change from 0 to 32768
[  297.037164][T10609] XFS (loop0): Mounting V5 Filesystem
[  297.085940][T10609] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  297.100791][T10609] XFS (loop0): Tail block (0x29) overwrite detected. Updated to 0x30
[  297.131869][T10626] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2407'.
[  297.204527][T10609] XFS (loop0): Ending clean mount
[  297.279944][T10631] loop4: detected capacity change from 0 to 2048
[  297.313086][ T4183] XFS (loop0): Unmounting Filesystem
[  297.444240][T10631] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  297.635808][T10631] EXT4-fs (loop4): Cannot specify journal on remount
[  297.951167][T10646] loop4: detected capacity change from 0 to 128
[  297.992452][T10635] loop5: detected capacity change from 0 to 32768
[  298.003795][T10646] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  298.073966][T10646] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  298.547817][T10668] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.664500][ T4596] kernel read not supported for file /swradio1 (pid: 4596 comm: kworker/1:18)
[  298.726387][ T4287] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  298.916956][T10687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  299.004776][T10693] loop4: detected capacity change from 0 to 128
[  299.056413][T10693] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback.
[  299.068246][T10693] ext4 filesystem being mounted at /444/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  299.086765][ T4287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  299.113922][ T4287] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  299.138201][ T4287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.167429][ T4287] usb 4-1: config 0 descriptor??
[  299.306547][ T4596] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  299.436411][ T4496] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  299.488647][T10700] loop4: detected capacity change from 0 to 32768
[  299.547901][ T4596] usb 1-1: Using ep0 maxpacket: 8
[  299.572525][T10700] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  299.647879][ T4287] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor
[  299.666538][ T4596] usb 1-1: config 0 interface 0 has no altsetting 0
[  299.673214][ T4596] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  299.692618][ T4187] ocfs2: Unmounting device (7,4) on (node local)
[  299.710694][ T4287] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0014/input/input19
[  299.731863][ T4596] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.761935][ T4596] usb 1-1: config 0 descriptor??
[  299.802829][ T4496] usb 6-1: config 0 has an invalid interface number: 3 but max is 0
[  299.832811][ T4496] usb 6-1: config 0 has no interface number 0
[  299.840485][ T4496] usb 6-1: config 0 interface 3 altsetting 0 endpoint 0xD has an invalid bInterval 104, changing to 10
[  299.860369][ T4496] usb 6-1: config 0 interface 3 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  299.900804][ T4287] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  300.028255][ T4496] usb 6-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84
[  300.055464][ T4496] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.073086][ T4496] usb 6-1: Product: syz
[  300.083607][ T4496] usb 6-1: Manufacturer: syz
[  300.094888][ T4496] usb 6-1: SerialNumber: syz
[  300.104312][ T4496] usb 6-1: config 0 descriptor??
[  300.249447][ T4596] mcp2221 0003:04D8:00DD.0015: unbalanced collection at end of report description
[  300.250905][T10726] loop2: detected capacity change from 0 to 1024
[  300.273758][ T4596] mcp2221 0003:04D8:00DD.0015: can't parse reports
[  300.281666][ T4596] mcp2221: probe of 0003:04D8:00DD.0015 failed with error -22
[  300.286762][ T4815] usb 4-1: USB disconnect, device number 19
[  300.366627][ T4496] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in warm state.
[  300.374751][  T144] hfsplus: b-tree write err: -5, ino 4
[  300.385044][ T4496] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  300.436784][ T4496] dvbdev: DVB: registering new adapter (Medion CTX1921 DVB-T USB)
[  300.444863][ T4496] usb 6-1: media controller created
[  300.471469][ T4496] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  300.552392][ T4287] usb 1-1: USB disconnect, device number 18
[  300.626562][ T4496] DVB: Unable to find symbol dib7000p_attach()
[  300.633329][ T4496] dvb-usb: no frontend was attached by 'Medion CTX1921 DVB-T USB'
[  300.721850][ T4496] rc_core: IR keymap rc-dib0700-rc5 not found
[  300.731342][ T4496] Registered IR keymap rc-empty
[  300.747991][ T4496] dvb-usb: could not initialize remote control.
[  300.750157][T10738] loop2: detected capacity change from 0 to 128
[  300.754273][ T4496] dvb-usb: Medion CTX1921 DVB-T USB successfully initialized and connected.
[  300.826588][ T4496] dib0700: There's no endpoint for remote controller
[  300.834575][T10738] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue. Quota mode: writeback.
[  300.857600][T10738] ext4 filesystem being mounted at /516/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  301.027653][ T4815] usb 6-1: USB disconnect, device number 9
[  301.090400][ T4195] Bluetooth: hci5: link tx timeout
[  301.096953][ T4195] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  301.108305][ T4195] Bluetooth: hci5: link tx timeout
[  301.113450][ T4195] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  301.155293][ T4815] dvb-usb: Medion CTX1921 DVB-T USB successfully deinitialized and disconnected.
[  301.315064][T10754] xt_CT: No such helper "snmp"
[  301.318918][T10764] loop0: detected capacity change from 0 to 1024
[  301.402377][T10768] loop4: detected capacity change from 0 to 1764
[  301.515935][ T1459] hfsplus: b-tree write err: -5, ino 4
[  301.888199][T10788] netlink: 27 bytes leftover after parsing attributes in process `syz.5.2476'.
[  302.211688][T10797] mkiss: ax0: crc mode is auto.
[  302.314271][T10801] program syz.4.2482 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  302.539088][T10784] loop2: detected capacity change from 0 to 32768
[  302.636583][T10811] netlink: 'syz.4.2486': attribute type 2 has an invalid length.
[  302.933792][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2494'.
[  303.101687][T10828] loop2: detected capacity change from 0 to 4096
[  303.157181][ T7466] Bluetooth: hci5: command 0x0406 tx timeout
[  303.176946][T10828] NILFS (loop2): invalid segment: Inconsistency found
[  303.222310][T10828] NILFS (loop2): trying rollback from an earlier position
[  303.286548][T10828] NILFS (loop2): recovery complete
[  303.320291][T10842] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  303.436148][T10846] loop4: detected capacity change from 0 to 64
[  303.562715][   T23] usb 1-1: new low-speed USB device number 19 using dummy_hcd
[  303.566744][   T27] INFO: task udevd:5765 blocked for more than 143 seconds.
[  303.629471][   T27]       Not tainted syzkaller #0
[  303.639194][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  303.674230][   T27] task:udevd           state:D stack:25056 pid: 5765 ppid:  3562 flags:0x00004002
[  303.702951][   T27] Call Trace:
[  303.715030][   T27]  <TASK>
[  303.723980][   T27]  __schedule+0x11bb/0x4390
[  303.735439][   T27]  ? release_firmware_map_entry+0x190/0x190
[  303.754677][   T27]  ? preempt_schedule+0xa7/0xb0
[  303.767536][   T27]  ? release_firmware_map_entry+0x190/0x190
[  303.774956][   T27]  ? preempt_schedule+0xa7/0xb0
[  303.780438][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  303.786584][   T27]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  303.792702][   T27]  ? lock_chain_count+0x20/0x20
[  303.798116][   T27]  schedule+0x11b/0x1e0
[  303.802422][   T27]  io_schedule+0x7c/0xd0
[  303.807253][   T27]  wait_on_page_bit_common+0x815/0xe00
[  303.812852][   T27]  ? wait_on_page_bit+0x50/0x50
[  303.817855][   T27]  ? blkdev_fallocate+0x4d0/0x4d0
[  303.822997][   T27]  ? rcu_lock_release+0x20/0x20
[  303.828115][   T27]  ? add_to_page_cache_lru+0x2a8/0x4a0
[  303.833675][   T27]  do_read_cache_page+0xb05/0x1030
[  303.838929][   T27]  read_part_sector+0xd4/0x4f0
[  303.843789][   T27]  ? string+0x26d/0x2b0
[  303.848399][   T27]  adfspart_check_ICS+0xbf/0xe00
[  303.853454][   T27]  ? vsnprintf+0x1905/0x1a00
[  303.858203][   T27]  ? adfspart_check_ADFS+0x830/0x830
[  303.863584][   T27]  ? snprintf+0xd7/0x120
[  303.868363][   T27]  ? vscnprintf+0x80/0x80
[  303.872791][   T27]  bdev_disk_changed+0x917/0x16b0
[  303.878016][   T27]  ? blkdev_get_by_dev+0x157/0xa60
[  303.883279][   T27]  ? blk_drop_partitions+0x1a0/0x1a0
[  303.888920][   T27]  ? _atomic_dec_and_lock+0x8f/0x110
[  303.894327][   T27]  blkdev_get_whole+0x2f9/0x390
[  303.899340][   T27]  blkdev_get_by_dev+0x2d0/0xa60
[  303.904385][   T27]  blkdev_open+0x12d/0x2c0
[  303.909664][   T27]  ? block_ioctl+0xf0/0xf0
[  303.914482][   T27]  do_dentry_open+0x7ff/0xf80
[  303.919369][   T27]  path_openat+0x2682/0x2f30
[  303.924104][   T27]  ? __kasan_slab_alloc+0xb3/0xd0
[  303.929506][   T27]  ? __kasan_slab_alloc+0x9c/0xd0
[  303.934634][   T27]  ? slab_post_alloc_hook+0x4c/0x380
[  303.940061][   T27]  ? verify_lock_unused+0x140/0x140
[  303.945349][   T27]  ? __x64_sys_openat+0x135/0x160
[  303.950723][   T23] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  303.958967][   T27]  ? do_filp_open+0x3e0/0x3e0
[  303.963762][   T23] usb 1-1: config 0 has no interface number 0
[  303.970016][   T27]  do_filp_open+0x1b3/0x3e0
[  303.974632][   T23] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  303.985720][   T27]  ? vfs_tmpfile+0x300/0x300
[  303.990451][   T27]  ? _raw_spin_unlock+0x24/0x40
[  303.995381][   T27]  ? alloc_fd+0x598/0x630
[  303.999840][   T23] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  304.011128][   T27]  do_sys_openat2+0x142/0x4a0
[  304.015917][   T27]  ? __lock_acquire+0x7c60/0x7c60
[  304.021121][   T23] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  304.030259][   T27]  ? do_sys_open+0xe0/0xe0
[  304.034746][   T27]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  304.040903][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.049099][   T27]  ? lock_chain_count+0x20/0x20
[  304.055657][   T27]  ? vtime_user_exit+0x2dc/0x400
[  304.062191][   T23] usb 1-1: config 0 descriptor??
[  304.067306][   T27]  __x64_sys_openat+0x135/0x160
[  304.072358][   T27]  do_syscall_64+0x4c/0xa0
[  304.076940][   T27]  ? clear_bhb_loop+0x30/0x80
[  304.081843][   T27]  ? clear_bhb_loop+0x30/0x80
[  304.086951][T10840] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  304.094016][   T27]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  304.100187][   T27] RIP: 0033:0x7f36c2276407
[  304.104690][   T27] RSP: 002b:00007ffed3ec5aa0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  304.118127][   T23] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  304.128805][   T27] RAX: ffffffffffffffda RBX: 00007f36c2188880 RCX: 00007f36c2276407
[  304.139007][   T27] RDX: 00000000000a0800 RSI: 000056371750f520 RDI: ffffffffffffff9c
[  304.147173][   T27] RBP: 00005637174f8910 R08: 0000000000000000 R09: 0000000000000000
[  304.155436][   T27] R10: 0000000000000000 R11: 0000000000000202 R12: 0000563717510e00
[  304.163600][   T27] R13: 0000563717510410 R14: 0000000000000000 R15: 0000563717510e00
[  304.171778][   T27]  </TASK>
[  304.175039][   T27] 
[  304.175039][   T27] Showing all locks held in the system:
[  304.182919][   T27] 1 lock held by khungtaskd/27:
[  304.187969][   T27]  #0: ffffffff8c11c460 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
[  304.197998][   T27] 2 locks held by getty/3951:
[  304.202798][   T27]  #0: ffff88814d1d3098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  304.212844][   T27]  #1: ffffc900025e62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30
[  304.223554][   T27] 2 locks held by syz-executor/4187:
[  304.229006][   T27]  #0: ffff88801fa87d18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0
[  304.238508][   T27]  #1: ffff88801fa33468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90
[  304.247975][   T27] 1 lock held by udevd/4288:
[  304.252658][   T27]  #0: ffff88801ff70518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x157/0xa60
[  304.262826][   T27] 1 lock held by udevd/5765:
[  304.267576][   T27]  #0: ffff88801fb48518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x157/0xa60
[  304.277784][   T27] 1 lock held by syz.1.1173/7385:
[  304.282917][   T27]  #0: ffff88801ff70518 (&disk->open_mutex){+.+.}-{3:3}, at: sync_bdevs+0x1ab/0x320
[  304.292548][   T27] 
[  304.295058][   T27] =============================================
[  304.295058][   T27] 
[  304.338981][   T27] NMI backtrace for cpu 1
[  304.343365][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  304.350583][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  304.360669][   T27] Call Trace:
[  304.363471][T10854] loop4: detected capacity change from 0 to 512
[  304.363967][   T27]  <TASK>
[  304.363979][   T27]  dump_stack_lvl+0x168/0x230
[  304.377845][   T27]  ? show_regs_print_info+0x20/0x20
[  304.383082][   T27]  ? load_image+0x3b0/0x3b0
[  304.387617][   T27]  ? tick_nohz_tick_stopped+0x7b/0xb0
[  304.393022][   T27]  ? nmi_cpu_backtrace+0x1b6/0x3d0
[  304.398165][   T27]  nmi_cpu_backtrace+0x397/0x3d0
[  304.403123][   T27]  ? nmi_trigger_cpumask_backtrace+0x280/0x280
[  304.409408][   T27]  ? _printk+0xcc/0x110
[  304.413576][   T27]  ? load_image+0x3b0/0x3b0
[  304.418100][   T27]  ? load_image+0x3b0/0x3b0
[  304.422708][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  304.428880][   T27]  nmi_trigger_cpumask_backtrace+0x163/0x280
[  304.434989][   T27]  watchdog+0xe0f/0xe50
[  304.439169][   T27]  kthread+0x436/0x520
[  304.443335][   T27]  ? hungtask_pm_notify+0x40/0x40
[  304.448371][   T27]  ? kthread_blkcg+0xd0/0xd0
[  304.452970][   T27]  ret_from_fork+0x1f/0x30
[  304.457408][   T27]  </TASK>
[  304.461114][   T27] Sending NMI from CPU 1 to CPUs 0:
[  304.466626][    C0] NMI backtrace for cpu 0
[  304.466638][    C0] CPU: 0 PID: 1459 Comm: kworker/u4:4 Not tainted syzkaller #0
[  304.466655][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  304.466665][    C0] Workqueue: phy3 ieee80211_iface_work
[  304.466687][    C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x32/0x80
[  304.466707][    C0] Code: 74 a1 8a 7e 65 8b 15 75 a1 8a 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 5b 83 b9 34 16 00 00 00 74 52 8b 91 10 16 00 00 <83> fa 03 75 47 48 8b 91 18 16 00 00 44 8b 89 14 16 00 00 49 c1 e1
[  304.466721][    C0] RSP: 0018:ffffc900054678f0 EFLAGS: 00000246
[  304.466734][    C0] RAX: ffffffff893f6fa8 RBX: 0000000000000008 RCX: ffff888022d28000
[  304.466746][    C0] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 00000000ffffffff
[  304.466756][    C0] RBP: ffff8880278e5eb0 R08: dffffc0000000000 R09: fffffbfff1ad31e6
[  304.466768][    C0] R10: fffffbfff1ad31e6 R11: 1ffffffff1ad31e5 R12: 000000000000000b
[  304.466780][    C0] R13: 000000000000021c R14: 00000000ffffffff R15: ffff8880278e3350
[  304.466791][    C0] FS:  0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  304.466804][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  304.466815][    C0] CR2: 00007fb802531c60 CR3: 000000006470a000 CR4: 00000000003506f0
[  304.466829][    C0] Call Trace:
[  304.466833][    C0]  <TASK>
[  304.466838][    C0]  ieee80211_sta_get_rates+0x378/0x6b0
[  304.466865][    C0]  ieee80211_ibss_rx_queued_mgmt+0xf47/0x29c0
[  304.466895][    C0]  ? ieee80211_ibss_rx_no_sta+0x730/0x730
[  304.466911][    C0]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  304.466932][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  304.466950][    C0]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  304.466969][    C0]  ? _raw_spin_unlock+0x40/0x40
[  304.466986][    C0]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  304.467011][    C0]  ? kcov_remote_start+0xea/0x4a0
[  304.467029][    C0]  ieee80211_iface_work+0x70e/0xc60
[  304.467050][    C0]  process_one_work+0x863/0x1000
[  304.467076][    C0]  ? worker_detach_from_pool+0x240/0x240
[  304.467092][    C0]  ? lockdep_hardirqs_off+0x70/0x100
[  304.467111][    C0]  ? _raw_spin_lock_irq+0xab/0xe0
[  304.467128][    C0]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  304.467149][    C0]  ? wq_worker_running+0x97/0x170
[  304.467173][    C0]  worker_thread+0xaa8/0x12a0
[  304.467205][    C0]  kthread+0x436/0x520
[  304.467224][    C0]  ? rcu_lock_release+0x20/0x20
[  304.467239][    C0]  ? kthread_blkcg+0xd0/0xd0
[  304.467255][    C0]  ret_from_fork+0x1f/0x30
[  304.467282][    C0]  </TASK>
[  304.490231][T10854] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,bsddf,discard,grpjquota=,dioread_nolock,,errors=continue. Quota mode: writeback.
[  304.516472][ T7466] usb 1-1: USB disconnect, device number 19
[  304.528400][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  304.754879][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0
[  304.762086][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  304.772235][   T27] Call Trace:
[  304.775518][   T27]  <TASK>
[  304.778450][   T27]  dump_stack_lvl+0x168/0x230
[  304.783143][   T27]  ? show_regs_print_info+0x20/0x20
[  304.788346][   T27]  ? load_image+0x3b0/0x3b0
[  304.792866][   T27]  panic+0x2c9/0x7f0
[  304.796763][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  304.802559][   T27]  ? bpf_jit_dump+0xd0/0xd0
[  304.807083][   T27]  ? __irq_work_queue_local+0x12c/0x190
[  304.812730][   T27]  ? nmi_trigger_cpumask_backtrace+0x260/0x280
[  304.818897][   T27]  watchdog+0xe4e/0xe50
[  304.823078][   T27]  kthread+0x436/0x520
[  304.827174][   T27]  ? hungtask_pm_notify+0x40/0x40
[  304.832217][   T27]  ? kthread_blkcg+0xd0/0xd0
[  304.836822][   T27]  ret_from_fork+0x1f/0x30
[  304.841315][   T27]  </TASK>
[  304.844552][   T27] Kernel Offset: disabled
[  304.848893][   T27] Rebooting in 86400 seconds..