last executing test programs:

4m36.595985056s ago: executing program 0 (id=117):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0)

4m36.379845576s ago: executing program 0 (id=118):
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x12004c0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xfd, 0x1e4, &(0x7f00000000c0)="$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")
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
open(&(0x7f0000000200)='./file0\x00', 0x40, 0x20)

4m36.379483402s ago: executing program 0 (id=119):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)

4m35.04960936s ago: executing program 0 (id=120):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@jqfmt_vfsv1}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@usrjquota}]}, 0xfe, 0x46c, &(0x7f0000000940)="$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")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3)

4m34.682509387s ago: executing program 0 (id=121):
syz_mount_image$iso9660(&(0x7f0000000680), &(0x7f0000000040)='./file0\x00', 0x1000808, &(0x7f0000000700), 0x1, 0x665, &(0x7f0000000dc0)="$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")

4m34.37654883s ago: executing program 0 (id=122):
syz_emit_ethernet(0x44, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @local}, "140088beffff"}}}}}, 0x0)

4m34.108564461s ago: executing program 32 (id=122):
syz_emit_ethernet(0x44, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @local}, "140088beffff"}}}}}, 0x0)

4m34.042013187s ago: executing program 1 (id=124):
syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x401)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x2, 0x40000333}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)

4m33.711066013s ago: executing program 1 (id=125):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
lremovexattr(&(0x7f00000005c0)='./file0\x00', 0x0)

4m33.51645803s ago: executing program 1 (id=127):
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x8341, 0x0)
write$nbd(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01"], 0x40)

4m33.415810527s ago: executing program 1 (id=128):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(0x0, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)

4m33.288288402s ago: executing program 1 (id=129):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'comedi_bond\x00', [0x3, 0x80008000, 0x9, 0x2, 0x2f, 0x0, 0x1, 0xf, 0xffe, 0x1, 0x7, 0x1, 0x1006, 0x4, 0xffff, 0xffff, 0xffffffa8, 0x40000009, 0xa00000, 0x3, 0x3ff, 0x10000, 0xb, 0xe2df, 0x2, 0x8, 0x5, 0x3, 0x7, 0x4, 0x8045]})

4m32.628476349s ago: executing program 1 (id=130):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0xffffffff, 0xfffffffd})
ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, 0x0)

4m32.46015863s ago: executing program 33 (id=130):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0xffffffff, 0xfffffffd})
ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, 0x0)

3m47.297369665s ago: executing program 2 (id=445):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0)
ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000140)=@t={0x81, 0x5, 0x4, 0xf1, @generic=0x1000})

3m47.137316657s ago: executing program 2 (id=446):
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x3, {0x4, @raw_data="791a41866f286777fc44d51105c95dcd9c5555a86752e69e9802186e21ad6f1044b0a55498b601e6ce09bdf58969f9e0061b5a28a7238380a5197213d6a4e822cbe13205548fb368afee9735c5b45117a87bf17e6bbbbc5f99cd8c366409c668f138a1befebc78aa78ff8f8e279dfc9d89f666f0d59bc7ba611a24f558b8459a85111a08422b7793ebc77f9e646d3f80cd9fdb57eaea166d1de5b95b3070524f117db25b3e26eeb9e443537a1a07ee7910e39905b7dd8a3ea2e815ac29aa40679ac0118a12f6b3c1"}, 0xfffffffd})

3m47.04412432s ago: executing program 2 (id=447):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014)

3m46.928289917s ago: executing program 2 (id=450):
capset(0x0, &(0x7f0000000100)={0xffff8001, 0x6, 0x2, 0x2087, 0xffffffff, 0xef})
unshare(0x28000600)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10000, &(0x7f00000002c0), 0x2, 0xbd1, &(0x7f0000001340)="$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")
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000004080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c000, &(0x7f00000004c0)=ANY=[], 0x2, 0x222, &(0x7f0000000800)="$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")
mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000000)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000200)='./file0/file0\x00')
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00')

3m46.738934033s ago: executing program 2 (id=453):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8000, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x27, 0x2, 0x3, "47091e00000000bf0b0008ae31b13e4d83e20f00000000000000000000000002", 0x34325842})

3m46.266258128s ago: executing program 2 (id=455):
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x6e)

3m45.977922422s ago: executing program 34 (id=455):
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000003000)=@abs={0x1}, 0x6e)

2m57.571743986s ago: executing program 5 (id=870):
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x13b, &(0x7f0000000a80)="$eJzs2r9K+1AUB/DT368g9BGcCglYhfzXOrgLgpNPYGiT9OKNtySCtFPxBRSH6+jo6ia6+QiZfQJ9iStp02pzFyet+P0s99Bz+fZmOdOxMpF6cW4RbU6uj17/ZSJtd4PdXuzFIc0cEFG7LAqlbmzSHC/6hZrY2gXjqTo7iTx8jBmPfD0DAAAAAAAAAAAAAAAAAAAAAODXU+ort4y3qmgNpLiLGY+8T918ND4JOY+yfP6LSdWODm3dir3yfrCU12kSmdP9HSb3L8q+u9Q350kbAyka9f9zztKhk4/GFkvDJEqiU98Puu626+74zjTLqSeaV9WbqFAPQ32fyLxf7BM1Xlx9n4has6O5zuTleT394/tR/LFC/V+JZ6BYzaI+P6i/FhjP5fywe4L3v3F+aBMN4Ie8BwAA///iqTmo")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x1ee)

2m57.482338744s ago: executing program 5 (id=874):
syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

2m57.414781712s ago: executing program 5 (id=875):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a0102"], 0x44}}, 0x0)

2m57.345888282s ago: executing program 5 (id=877):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x1, 0x6276, &(0x7f0000003680)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000200)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)

2m57.025371426s ago: executing program 5 (id=885):
set_mempolicy(0x3, &(0x7f0000000100)=0x3, 0x9)
syz_clone(0x0, 0x0, 0x24, 0x0, 0x0, 0x0)

2m56.763770645s ago: executing program 5 (id=892):
r0 = io_uring_setup(0x1694, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x0, 0x1}, 0x20)

2m56.64362056s ago: executing program 35 (id=892):
r0 = io_uring_setup(0x1694, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x0, 0x1}, 0x20)

5.434405073s ago: executing program 6 (id=2654):
syz_usb_connect(0x0, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000861a1820830447370200010203010902120001000000000904"], 0x0)

2.374332941s ago: executing program 6 (id=2685):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)='$', 0x1}], 0x1, &(0x7f0000001a80)=ANY=[@ANYBLOB="1000bf"], 0x10}}], 0x1, 0x4004804)

2.321615373s ago: executing program 6 (id=2688):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000180)=[{&(0x7f0000002940)="2e7be370f88e801dcbfd6fc9b169aadf2d788f31060000002c9c1ea0d17dc8387758e4428f3e298ab317415fd80b0cf47466f42c8884034bfe4e7ea097451bdc05d7b582537e4ab091cd008a8000000000000000368d5e9e19a9d33882be8e62fd0bbfcc94c842aa81c90fab7ab87fa321", 0x71}], 0x1}}], 0x2, 0x0)

2.24292516s ago: executing program 6 (id=2690):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='cmdline\x00')
lseek(r0, 0xfffffffffffffffd, 0x1)

2.179739378s ago: executing program 6 (id=2692):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3, 0x0, <r1=>0x0})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)

1.830686487s ago: executing program 6 (id=2694):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000640)={0x40, 0xb, 0xbc, "ecbb371c231e37650472ab81ceba773f58fa3cdee6d4a120f67dbad0ede954ad96e2fd95d14a5e1c687be9196595319dcb860b449b950ea5a9b0f10344fa71afb4b134af291cb2e7e70a725081d7e233cd41265818d64d2f65ffa3f41b32c3d202f9a2894dc2d4cccf00da881c3784639686f16d4b7871858554c1698a0015525639f83c7b7126ff39bd3d408cea00a61c3db32b4bce8f2f61311454574037ae0ffa6515bec6e32768d6e9363499148f173b4410f4f38cc2f6ed2a33"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
read$char_usb(r1, &(0x7f0000000880)=""/187, 0xbb)

683.242283ms ago: executing program 3 (id=2703):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810754, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@errors_continue}, {@usrquota}, {@prjquota}, {@usrquota}, {@resuid={'resuid', 0x3d, 0xee00}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xffffffff}}, {@nodiscard}, {@test_dummy_encryption}]}, 0xff, 0x46e, &(0x7f0000000e40)="$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")

553.190053ms ago: executing program 3 (id=2704):
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x18, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0xfffffffffffffffc, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
prctl$PR_SET_NAME(0x4, 0x0)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(r2, 0x0, 0x0, 0x0, 0x0, 0x2)
bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8)
bind$bt_sco(r1, &(0x7f00000001c0)={0x1f, @none}, 0x8)
sendmmsg$inet(r0, 0x0, 0x0, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000040))
r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r4, 0x8916, 0x0)

479.592639ms ago: executing program 3 (id=2706):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x8c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x54, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_BITWISE_XOR={0x1c, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "8faad8723e6e7fa481f44723334b061f44"}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x128}, 0x1, 0x0, 0x0, 0x80}, 0x0)

393.355572ms ago: executing program 3 (id=2708):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)='$', 0x1}], 0x1, &(0x7f0000001a80)=ANY=[], 0x10}}], 0x1, 0x4004804)

392.673185ms ago: executing program 3 (id=2710):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0)

313.30424ms ago: executing program 3 (id=2712):
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file0\x00', 0x1808410, &(0x7f0000000080)={[{@data_ordered}, {@err_ro}, {@heartbeat_none}, {@localflocks}, {@heartbeat_none}, {@data_writeback}, {@localalloc}, {@intr}]}, 0x8, 0x446c, &(0x7f0000004780)="$eJzs281vFOcdB/DfrN1iU6B+4x2kVXuo1VbWmlNbDqXgtkKqSu2+qOoBa/0CuF17LXtdcahUqt6RIuUQ5ZwLKPcITvwLOYRrjhxIDrlEySWOdnfW3pn1hhXy2sH5fCQYzzPzvMhfz+zz6LELqdq9lc3iymaxvFasLt7ZvFL8d7WytbochQNy2P3Tm37kJPvDc+vG7/78tysR9z8a+8H29vZ21I3Enqbbvv78s/8sth9bCrk69Xb3bm2//CMiJiJiKPLjGYiIv38QkUTEaFo2lh6HI+JENK/9//1Hc0P7NJqBF49nH83OPHzycvX58I3bxa43JhHvVs7//O7qJz8euPrxT/epewAA+Ea/n7v11z+VpuNZEqeeDnbO18+mx27z42168uv+RwkAAABd7a7/R5JC0rn+n0iPXbYEw8L2zXbzj7dmfluaTvd/k47rv0iLPv3NQGMPNb/vm9//Hc3V33v/t7Of19UaX6vfkUgKU5nzQmFqKmL6evP8XHK8UKlu1n52p7q1trRvw3hjZfNv7t5n0kk39HvNfyzXfv/3/8c7fprq58X9+xE70rL5D3S9773/JT3lP56rdxD58/qy+Q82yn7UfkOx+QKo5//W4Kvzn8i136/8T9Xf7Ul9rEOZN0B9DlMv7zZfISub//caZZlXZ/qN7Pb8f5nL/3Su/cN6/09e72+vR0U2/+83yrK/tLb7/I8WXv38n8m1fxj518c/6fO/J9n8jzULsy/Pxney1/f/2Vz7fcr/QbqtGnEqifG23zp9Otj8cGjtVzeWNPXL630YxRGQzb9zl393/Vfoaf53Llf/oNZ/rX5b67/WOmQyaa7/2Fs2/+Gu9/X6/J/P1ev7+z8ZSlcA2//taz9HVDb/483CPSaAveZ/Idd+v/JvvPGHWvnvDvirY83ykvlfT7L5p1FlPgYeNP5vzP+Szty/yOV/Mdd+W/75Pw3ZJ53zv/r4J/vU21GTzf9E1/vq+X/Yw+f/pVy9/s//I0rm+q8tm//Jrvc1nv+hV+d/OVev3/n/pJ+NAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8B4ylx5FIClOZ80JhaipiPD0/F8eThfLS/EKluvivzYiJtLwYY8ndSnWhXJlfWasuLc+XK5XqYsTp9PpEDCWblWptfrW8fmanreHk3nJ5o7awXK5FxNm0/FKcbLW1sFJbLa837m1d+2GhurF+r7w2v7Sy8atSqVSK8ztjGE2W79eW12rN3ptXIy7s1B1J2gbXuHxxZywnkn9WtzbWypVG+aW2OpXqYrnSVudyeu3tGE1qG1tri+Xa8nylerfV32G6lh5nbs79Ze4P0x3Xi0nzOHawwwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgW+bZ1V++ExGDzbNCRFxrfZGk/zIGXjyefTQ78/DJy9XnwzduF/e6BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADga3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS8cqDUNRGIDPvQoKLuroEziFZHNVFHExIvgEvkSHvmYfo0PHLqXQ3kBIGujS0uH7lkPyc+85cA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJfj87f9+6mbiBS3m5uI2eLxrp8/lVq/HT5/dYYZOZ2v7/b9o27Ku6dR/lJ+LV/zLl2v5v9R6nXvu9MM9mS4T3vjPkNT+zY1X9f3PlKuIuKh5M8p56o67i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALbszaEJgGAQx9E7wWSzuIZOYVQE9zA6nks4jybBYBC++l46OH78AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCfcZnWuR/iyKiuzNjPtnn/u+fYvvssm6/LcgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICbHTiQAQAAABDmb51H+wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIMCAAD//+N8zQE=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a)

183.78398ms ago: executing program 4 (id=2714):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)

113.560179ms ago: executing program 4 (id=2715):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0xb, 0xfff2}, {}, {0x5, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x6}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0x7, 0x6}}]}}]}, 0x44}}, 0x1f71a0b5d4ef86bf)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

61.205744ms ago: executing program 4 (id=2716):
syz_open_dev$sndctrl(&(0x7f0000000000), 0x1f, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3)

61.053165ms ago: executing program 4 (id=2717):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8)
sendto$inet6(r0, &(0x7f0000000080)="be", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x7ffffffd, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x4}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000002980)={0x0, 0x1, 0x565b}, 0x8)

404.011µs ago: executing program 4 (id=2718):
r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x2f, 0x2, 0x0, "d569e8e1dd2f1ae97ee8589301f453a0c04b1410b2eafa4496ba216b1e8ac11e"})

0s ago: executing program 4 (id=2719):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
close(r1)

kernel console output (not intermixed with test programs):

g dummy_hcd
[  242.096550][ T5916] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  242.099986][ T5916] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  242.103379][ T5916] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  242.111192][ T5916] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  242.115176][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  242.117786][ T5916] usb 4-1: Product: syz
[  242.119323][ T5916] usb 4-1: Manufacturer: syz
[  242.122225][ T5916] usb 4-1: SerialNumber: syz
[  242.133719][ T5236] Bluetooth: hci1: command 0x0406 tx timeout
[  242.263804][T10399] 9pnet_fd: Insufficient options for proto=fd
[  242.358493][ T5916] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  242.398941][T10406] loop6: detected capacity change from 0 to 256
[  242.445022][T10406] FAT-fs (loop6): Directory bread(block 64) failed
[  242.447779][T10406] FAT-fs (loop6): Directory bread(block 65) failed
[  242.450263][T10406] FAT-fs (loop6): Directory bread(block 66) failed
[  242.452927][T10406] FAT-fs (loop6): Directory bread(block 67) failed
[  242.461581][T10406] FAT-fs (loop6): Directory bread(block 68) failed
[  242.464099][T10406] FAT-fs (loop6): Directory bread(block 69) failed
[  242.467045][T10406] FAT-fs (loop6): Directory bread(block 70) failed
[  242.469671][T10406] FAT-fs (loop6): Directory bread(block 71) failed
[  242.472289][T10406] FAT-fs (loop6): Directory bread(block 72) failed
[  242.478426][T10406] FAT-fs (loop6): Directory bread(block 73) failed
[  242.598391][   T95] usb 4-1: USB disconnect, device number 32
[  242.633802][   T95] usblp0: removed
[  242.652063][T10412] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  242.670738][T10412] bridge0: port 2(bridge_slave_1) entered disabled state
[  242.678348][T10412] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.099628][T10438] loop6: detected capacity change from 0 to 164
[  243.119139][T10438] syz.6.1551: attempt to access beyond end of device
[  243.119139][T10438] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  243.127929][T10438] syz.6.1551: attempt to access beyond end of device
[  243.127929][T10438] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164
[  243.135387][   T33] audit: type=1800 audit(1755180191.699:63): pid=10438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1551" name="file0" dev="overlay" ino=1862 res=0 errno=0
[  243.187367][T10440] loop3: detected capacity change from 0 to 128
[  243.211957][T10440] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  243.223685][T10440] ext4 filesystem being mounted at /454/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  243.258008][T10440] fscrypt (loop3, inode 12): Direct key flag not allowed with different contents and filenames modes
[  243.334604][ T6289] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  243.424106][ T5916] kernel write not supported for file /snd/seq (pid: 5916 comm: kworker/1:5)
[  243.692267][T10460] loop6: detected capacity change from 0 to 128
[  243.699040][T10460] befs: (loop6): No write support. Marking filesystem read-only
[  243.706454][T10460] befs: (loop6): invalid magic header
[  243.734601][   T95] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  243.769094][T10462] loop6: detected capacity change from 0 to 16
[  243.772817][T10462] erofs (device loop6): mounted with root inode @ nid 36.
[  243.841192][T10464] loop6: detected capacity change from 0 to 256
[  243.867354][T10464] FAT-fs (loop6): Directory bread(block 64) failed
[  243.870221][T10464] FAT-fs (loop6): Directory bread(block 65) failed
[  243.873171][T10464] FAT-fs (loop6): Directory bread(block 66) failed
[  243.880238][T10464] FAT-fs (loop6): Directory bread(block 67) failed
[  243.883498][T10464] FAT-fs (loop6): Directory bread(block 68) failed
[  243.890729][T10464] FAT-fs (loop6): Directory bread(block 69) failed
[  243.896004][T10464] FAT-fs (loop6): Directory bread(block 70) failed
[  243.899001][T10464] FAT-fs (loop6): Directory bread(block 71) failed
[  243.901947][T10464] FAT-fs (loop6): Directory bread(block 72) failed
[  243.911988][   T95] usb 4-1: config 0 has no interfaces?
[  243.914772][T10464] FAT-fs (loop6): Directory bread(block 73) failed
[  243.920099][   T95] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  243.923867][   T95] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.932197][   T95] usb 4-1: Product: syz
[  243.934929][   T95] usb 4-1: Manufacturer: syz
[  243.939288][   T95] usb 4-1: SerialNumber: syz
[  243.951097][   T95] r8152-cfgselector 4-1: Unknown version 0x0000
[  243.953969][   T95] r8152-cfgselector 4-1: config 0 descriptor??
[  244.161547][   T95] r8152-cfgselector 4-1: USB disconnect, device number 33
[  244.316416][T10470] loop6: detected capacity change from 0 to 32768
[  244.346785][T10470] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  244.366981][T10470] XFS (loop6): Ending clean mount
[  244.369845][T10470] XFS (loop6): Quotacheck needed: Please wait.
[  244.400380][T10470] XFS (loop6): Quotacheck: Done.
[  244.839298][T10487] loop3: detected capacity change from 0 to 8
[  244.881525][T10487] SQUASHFS error: Failed to read block 0x738: -5
[  244.890639][T10487] SQUASHFS error: Unable to read metadata cache entry [736]
[  244.907557][T10487] SQUASHFS error: Unable to read metadata cache entry [736]
[  245.030574][T10489] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  245.541945][T10492] bpq0: entered allmulticast mode
[  245.637846][ T8769] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  246.403672][T10531] loop6: detected capacity change from 0 to 1764
[  247.742574][T10560] loop6: detected capacity change from 0 to 4096
[  247.977243][T10571] loop6: detected capacity change from 0 to 512
[  247.995390][T10571] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  248.023306][T10571] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  248.050614][T10571] EXT4-fs (loop6): 1 truncate cleaned up
[  248.054247][T10571] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.139900][ T8769] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.498849][T10592] loop3: detected capacity change from 0 to 1024
[  248.920856][T10612] loop3: detected capacity change from 0 to 4096
[  248.935983][T10612] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  248.972650][T10612] ntfs3(loop3): Failed to load $Bitmap (-22).
[  249.025749][T10621] loop6: detected capacity change from 0 to 4096
[  249.043059][T10621] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  249.114819][   T33] audit: type=1800 audit(1755180197.678:64): pid=10621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1627" name="file1" dev="loop6" ino=33 res=0 errno=0
[  249.388284][T10634] loop6: detected capacity change from 0 to 128
[  249.426543][T10634] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  249.466952][T10634] ext4 filesystem being mounted at /186/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  249.570303][ T8769] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  249.981981][T10644] loop6: detected capacity change from 0 to 1024
[  250.067717][T10644] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  250.118916][T10644] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.458261][ T8769] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.628847][T10657] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  250.773559][T10663] loop6: detected capacity change from 0 to 256
[  250.799562][T10663] FAT-fs (loop6): Directory bread(block 64) failed
[  250.805574][T10663] FAT-fs (loop6): Directory bread(block 65) failed
[  250.809931][T10663] FAT-fs (loop6): Directory bread(block 66) failed
[  250.819768][T10663] FAT-fs (loop6): Directory bread(block 67) failed
[  250.822462][T10663] FAT-fs (loop6): Directory bread(block 68) failed
[  250.824941][T10663] FAT-fs (loop6): Directory bread(block 69) failed
[  250.836187][T10663] FAT-fs (loop6): Directory bread(block 70) failed
[  250.841585][T10663] FAT-fs (loop6): Directory bread(block 71) failed
[  250.844366][T10663] FAT-fs (loop6): Directory bread(block 72) failed
[  250.849450][T10663] FAT-fs (loop6): Directory bread(block 73) failed
[  251.021268][T10671] overlayfs: failed to clone upperpath
[  251.030960][T10661] loop3: detected capacity change from 0 to 32768
[  251.119328][T10661] JBD2: Ignoring recovery information on journal
[  251.147647][T10661] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  251.179350][ T6289] ocfs2: Unmounting device (7,3) on (node local)
[  253.166651][T10709] loop3: detected capacity change from 0 to 8
[  253.191514][T10709] SQUASHFS error: Failed to read block 0xdfa: -5
[  253.201322][T10709] SQUASHFS error: Unable to read metadata cache entry [dfa]
[  253.204863][T10709] SQUASHFS error: Failed to read block 0x4e8: -5
[  253.214462][T10709] SQUASHFS error: Failed to read block 0x4de: -5
[  253.217544][T10709] SQUASHFS error: Failed to read block 0x4de: -5
[  253.220212][T10709] SQUASHFS error: Failed to read block 0x4de: -5
[  253.222805][T10709] SQUASHFS error: Failed to read block 0x4de: -5
[  253.229465][T10709] SQUASHFS error: Failed to read block 0x4de: -5
[  253.232027][T10709] SQUASHFS error: Failed to read block 0x4de: -5
[  253.234798][T10709] SQUASHFS error: Failed to read block 0x4de: -5
[  253.238804][T10709] SQUASHFS error: Failed to read block 0x4de: -5
[  253.241630][T10709] SQUASHFS error: Failed to read block 0x4e8: -5
[  253.245479][   T33] audit: type=1800 audit(1755180201.808:65): pid=10709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1663" name="file1" dev="loop3" ino=5 res=0 errno=0
[  253.372512][   T33] audit: type=1326 audit(1755180201.938:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10716 comm="syz.4.1668" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f98af98ebe9 code=0x0
[  253.388566][T10719] netlink: 'syz.3.1667': attribute type 1 has an invalid length.
[  253.391368][T10719] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1667'.
[  253.394203][T10719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1667'.
[  253.488278][T10723] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1669'.
[  253.493217][T10723] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1669'.
[  254.815882][ T5916] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  254.978050][ T5916] usb 4-1: Using ep0 maxpacket: 8
[  254.987477][ T5916] usb 4-1: config 4 has an invalid interface number: 244 but max is 0
[  254.990709][ T5916] usb 4-1: config 4 has no interface number 0
[  254.993107][ T5916] usb 4-1: config 4 interface 244 altsetting 1 endpoint 0x1 has an invalid bInterval 41, changing to 7
[  254.997736][ T5916] usb 4-1: config 4 interface 244 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0
[  255.001428][ T5916] usb 4-1: config 4 interface 244 has no altsetting 0
[  255.009165][ T5916] usb 4-1: New USB device found, idVendor=05ac, idProduct=fa33, bcdDevice=cb.aa
[  255.012773][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.018891][ T5916] usb 4-1: Product: syz
[  255.020576][ T5916] usb 4-1: Manufacturer: syz
[  255.022411][ T5916] usb 4-1: SerialNumber: syz
[  255.237180][ T5916] ipheth 4-1:4.244: Unable to find endpoints
[  255.251808][ T5916] usb 4-1: USB disconnect, device number 34
[  255.411954][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.414503][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  256.139418][T10773] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1692'.
[  257.318418][T10803] loop6: detected capacity change from 0 to 4096
[  257.389291][T10803] ntfs3(loop6): ino=1a, mi_enum_attr
[  257.404846][T10803] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  260.166082][T10829] loop6: detected capacity change from 0 to 262144
[  260.278343][T10829] F2FS-fs (loop6): invalid crc value
[  260.311559][T10829] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  260.314844][T10829] F2FS-fs (loop6): Start checkpoint disabled!
[  260.320707][T10829] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  260.403654][T10840] loop3: detected capacity change from 0 to 512
[  260.459514][T10840] EXT4-fs (loop3): Test dummy encryption mode enabled
[  260.461918][T10840] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  260.501954][T10840] EXT4-fs error (device loop3): xattr_find_entry:333: inode #15: comm syz.3.1720: corrupted xattr entries
[  260.521127][T10840] EXT4-fs (loop3): 1 orphan inode deleted
[  260.524603][T10840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  260.591415][ T6289] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.737892][ T5901] Process accounting resumed
[  260.917030][ T7589] usb 4-1: new full-speed USB device number 35 using dummy_hcd
[  261.088814][ T7589] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  261.113269][ T7589] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  261.119703][ T7589] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  261.124555][ T7589] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00
[  261.127568][ T7589] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.134073][ T7589] usb 4-1: config 0 descriptor??
[  261.140074][T10848] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  261.563737][ T7589] aureal 0003:0755:2626.000E: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor.
[  261.568307][ T7589] aureal 0003:0755:2626.000E: unknown main item tag 0x6
[  261.570698][ T7589] aureal 0003:0755:2626.000E: report_id 29495 is invalid
[  261.573223][ T7589] aureal 0003:0755:2626.000E: item 0 2 1 8 parsing failed
[  261.577538][ T7589] aureal 0003:0755:2626.000E: probe with driver aureal failed with error -22
[  261.774252][ T7589] usb 4-1: USB disconnect, device number 35
[  261.968097][T10875] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1733'.
[  262.453653][T10891] loop3: detected capacity change from 0 to 256
[  262.488978][T10891] MINIX-fs: mounting file system with errors, running fsck is recommended
[  262.777949][T10901] overlayfs: failed to clone upperpath
[  262.849902][T10903] loop3: detected capacity change from 0 to 1764
[  262.861412][T10903] iso9660: Corrupted directory entry in block 0 of inode 1792
[  263.208650][T10913] loop3: detected capacity change from 0 to 32768
[  263.423126][T10931] sctp: [Deprecated]: syz.4.1760 (pid 10931) Use of struct sctp_assoc_value in delayed_ack socket option.
[  263.423126][T10931] Use struct sctp_sack_info instead
[  263.599977][T10933] loop3: detected capacity change from 0 to 40427
[  263.604363][T10933] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  263.606639][T10933] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  263.617002][T10933] F2FS-fs (loop3): build fault injection rate: 17008
[  263.619196][T10933] F2FS-fs (loop3): build fault injection type: 0x1f8
[  263.623385][T10933] F2FS-fs (loop3): invalid crc value
[  263.665137][T10933] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  263.669879][T10933] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  263.671999][T10933] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  263.680360][T10933] syz.3.1758: attempt to access beyond end of device
[  263.680360][T10933] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  263.689080][T10933] CPU: 0 UID: 0 PID: 10933 Comm: syz.3.1758 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  263.689098][T10933] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  263.689105][T10933] Call Trace:
[  263.689109][T10933]  <TASK>
[  263.689115][T10933]  dump_stack_lvl+0x189/0x250
[  263.689134][T10933]  ? __pfx_dump_stack_lvl+0x10/0x10
[  263.689146][T10933]  ? __pfx_queue_work_on+0x10/0x10
[  263.689164][T10933]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  263.689179][T10933]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  263.689197][T10933]  f2fs_handle_critical_error+0x37c/0x540
[  263.689214][T10933]  f2fs_write_end_io+0x886/0xb60
[  263.689237][T10933]  __submit_merged_bio+0x27a/0x6a0
[  263.689254][T10933]  __submit_merged_write_cond+0x255/0x530
[  263.689270][T10933]  f2fs_write_data_pages+0x261d/0x3000
[  263.689327][T10933]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  263.689364][T10933]  ? __mod_zone_page_state+0xd7/0x140
[  263.689383][T10933]  ? folios_put_refs+0x560/0x640
[  263.689399][T10933]  ? __pfx_folios_put_refs+0x10/0x10
[  263.689408][T10933]  ? rcu_is_watching+0x15/0xb0
[  263.689421][T10933]  ? __lock_acquire+0xab9/0xd20
[  263.689443][T10933]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  263.689457][T10933]  do_writepages+0x32e/0x550
[  263.689475][T10933]  ? do_raw_spin_unlock+0x4d/0x240
[  263.689487][T10933]  filemap_fdatawrite+0x199/0x240
[  263.689499][T10933]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  263.689532][T10933]  ? do_raw_spin_unlock+0x4d/0x240
[  263.689543][T10933]  f2fs_sync_dirty_inodes+0x31f/0x830
[  263.689559][T10933]  f2fs_write_checkpoint+0x95a/0x1df0
[  263.689578][T10933]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  263.689605][T10933]  ? down_write+0x162/0x1f0
[  263.689612][T10933]  ? __pfx_down_write+0x10/0x10
[  263.689623][T10933]  ? __x64_sys_mknodat+0xa7/0xc0
[  263.689632][T10933]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.689645][T10933]  f2fs_issue_checkpoint+0x3ac/0x570
[  263.689656][T10933]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  263.689668][T10933]  ? do_raw_spin_lock+0x121/0x290
[  263.689682][T10933]  ? __pfx_wake_up_var+0x10/0x10
[  263.689697][T10933]  ? f2fs_sync_fs+0x200/0x3d0
[  263.689709][T10933]  f2fs_create+0x44b/0x5c0
[  263.689725][T10933]  vfs_create+0x24e/0x400
[  263.689738][T10933]  do_mknodat+0x3c6/0x4d0
[  263.689749][T10933]  ? __pfx_do_mknodat+0x10/0x10
[  263.689759][T10933]  ? getname_flags+0x1e5/0x540
[  263.689769][T10933]  __x64_sys_mknodat+0xa7/0xc0
[  263.689780][T10933]  do_syscall_64+0xfa/0x3b0
[  263.689793][T10933]  ? lockdep_hardirqs_on+0x9c/0x150
[  263.689803][T10933]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.689810][T10933]  ? exc_page_fault+0x9f/0xf0
[  263.689822][T10933]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  263.689829][T10933] RIP: 0033:0x7f8f1ed8ebe9
[  263.689838][T10933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  263.689846][T10933] RSP: 002b:00007f8f1fbe8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103
[  263.689857][T10933] RAX: ffffffffffffffda RBX: 00007f8f1efb5fa0 RCX: 00007f8f1ed8ebe9
[  263.689863][T10933] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005
[  263.689869][T10933] RBP: 00007f8f1ee11e19 R08: 0000000000000000 R09: 0000000000000000
[  263.689874][T10933] R10: 0000000000000706 R11: 0000000000000246 R12: 0000000000000000
[  263.689879][T10933] R13: 00007f8f1efb6038 R14: 00007f8f1efb5fa0 R15: 00007ffd3c8d02c8
[  263.689895][T10933]  </TASK>
[  263.689899][T10933] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  264.227008][ T7589] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  264.377001][ T7589] usb 4-1: Using ep0 maxpacket: 32
[  264.380773][ T7589] usb 4-1: config 0 has an invalid interface number: 75 but max is 0
[  264.383799][ T7589] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  264.388008][ T7589] usb 4-1: config 0 has no interface number 0
[  264.392138][ T7589] usb 4-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=7b.41
[  264.395378][ T7589] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.398673][ T7589] usb 4-1: Product: syz
[  264.400311][ T7589] usb 4-1: Manufacturer: syz
[  264.402378][ T7589] usb 4-1: SerialNumber: syz
[  264.412829][ T7589] usb 4-1: config 0 descriptor??
[  264.419789][ T7589] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[  264.422734][ T7589] gspca_stv06xx: st6422 sensor detected
[  264.442167][   T55] Bluetooth: hci1: unexpected event for opcode 0x0c03
[  264.444849][   T55] Bluetooth: hci1: unexpected event for opcode 0x0c03
[  264.777335][   T33] audit: type=1326 audit(1755180213.346:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10965 comm="syz.4.1774" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98af98ebe9 code=0x0
[  264.879671][ T7589] STV06xx 4-1:0.75: probe with driver STV06xx failed with error -71
[  264.885825][ T7589] usb 4-1: USB disconnect, device number 36
[  265.495367][T10981] orangefs_devreq_write_iter: total:0: must be at least:8240:
[  266.205967][T11014] autofs4:pid:11014:validate_dev_ioctl: path string terminator missing for cmd(0xc0189373)
[  266.237236][T11017] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1795'.
[  267.363154][T11036] loop3: detected capacity change from 0 to 512
[  267.544382][T11039] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  267.660499][T11036] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002]
[  267.666851][T11036] System zones: 1-12
[  267.669646][T11036] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.1803: Directory hole found for htree index block 0
[  267.682615][T11036] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117
[  267.686165][T11036] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.1803: Directory hole found for htree index block 0
[  267.693962][T11036] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  267.698971][T11036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.734318][ T6289] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.110663][ T5916] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  268.117507][T11051] netlink: 'syz.6.1808': attribute type 1 has an invalid length.
[  268.268414][ T5916] usb 4-1: Using ep0 maxpacket: 16
[  268.275792][ T5916] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  268.279391][ T5916] usb 4-1: config 0 has no interface number 0
[  268.281853][ T5916] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  268.286267][ T5916] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  268.295405][ T5916] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  268.299497][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  268.302878][ T5916] usb 4-1: Product: syz
[  268.304616][ T5916] usb 4-1: SerialNumber: syz
[  268.318617][ T5916] usb 4-1: config 0 descriptor??
[  268.331521][ T5916] cm109 4-1:0.8: invalid payload size 0, expected 4
[  268.338123][ T5916] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input18
[  268.551039][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  268.760088][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  268.767170][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  268.773790][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  268.776926][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  268.780030][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  268.783111][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  268.785619][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  268.787874][    C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  268.791266][    T9] usb 4-1: USB disconnect, device number 37
[  268.808536][    T9] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  269.034783][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1817'.
[  269.120371][   T33] audit: type=1326 audit(1755180217.686:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11073 comm="syz.4.1818" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98af98ebe9 code=0x0
[  269.897733][ T5901] usb 4-1: new full-speed USB device number 38 using dummy_hcd
[  270.053157][ T5901] usb 4-1: config 0 has an invalid interface number: 142 but max is 0
[  270.057003][ T5901] usb 4-1: config 0 has no interface number 0
[  270.060129][ T5901] usb 4-1: too many endpoints for config 0 interface 142 altsetting 187: 79, using maximum allowed: 30
[  270.063754][ T5901] usb 4-1: config 0 interface 142 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 79
[  270.073922][ T5901] usb 4-1: config 0 interface 142 has no altsetting 0
[  270.076607][ T5901] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  270.080951][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.086562][ T5901] usb 4-1: config 0 descriptor??
[  270.102666][ T5901] ums-realtek 4-1:0.142: USB Mass Storage device detected
[  270.124974][T11113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  270.303290][ T5901] usb 4-1: USB disconnect, device number 38
[  270.933581][T11123] loop6: detected capacity change from 0 to 40427
[  270.958481][T11123] F2FS-fs (loop6): invalid crc value
[  271.021190][T11123] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  271.025581][T11123] F2FS-fs (loop6): Start checkpoint disabled!
[  271.034055][T11123] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  271.137622][T11125] loop3: detected capacity change from 0 to 32768
[  271.165936][T11125] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  271.175420][T11123] F2FS-fs (loop6): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  271.214977][T11125] XFS (loop3): Ending clean mount
[  271.237477][T11125] XFS (loop3): Quotacheck needed: Please wait.
[  271.243558][   T26] kworker/u9:0: attempt to access beyond end of device
[  271.243558][   T26] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  271.276593][   T26] CPU: 0 UID: 0 PID: 26 Comm: kworker/u9:0 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  271.276623][   T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  271.276634][   T26] Workqueue: writeback wb_workfn (flush-7:6)
[  271.276661][   T26] Call Trace:
[  271.276688][   T26]  <TASK>
[  271.276696][   T26]  dump_stack_lvl+0x189/0x250
[  271.276744][   T26]  ? __pfx_dump_stack_lvl+0x10/0x10
[  271.276761][   T26]  ? __pfx_queue_work_on+0x10/0x10
[  271.276776][   T26]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  271.276795][   T26]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  271.276821][   T26]  f2fs_handle_critical_error+0x37c/0x540
[  271.276848][   T26]  f2fs_write_end_io+0x886/0xb60
[  271.276876][   T26]  __submit_merged_bio+0x27a/0x6a0
[  271.276902][   T26]  __submit_merged_write_cond+0x255/0x530
[  271.276926][   T26]  f2fs_write_data_pages+0x261d/0x3000
[  271.276973][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  271.277062][   T26]  ? f2fs_write_meta_pages+0x357/0x450
[  271.277092][   T26]  ? __lock_acquire+0xab9/0xd20
[  271.277115][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  271.277136][   T26]  do_writepages+0x32e/0x550
[  271.277160][   T26]  ? reacquire_held_locks+0x127/0x1d0
[  271.277171][   T26]  ? writeback_sb_inodes+0x384/0x1010
[  271.277195][   T26]  __writeback_single_inode+0x145/0xff0
[  271.277213][   T26]  ? do_raw_spin_unlock+0x4d/0x240
[  271.277233][   T26]  writeback_sb_inodes+0x6c7/0x1010
[  271.277272][   T26]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  271.277320][   T26]  ? rcu_is_watching+0x15/0xb0
[  271.277343][   T26]  wb_writeback+0x43b/0xaf0
[  271.277368][   T26]  ? queue_io+0x3c1/0x590
[  271.277386][   T26]  ? __pfx_wb_writeback+0x10/0x10
[  271.277408][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  271.277429][   T26]  wb_workfn+0x409/0xef0
[  271.277455][   T26]  ? __pfx_wb_workfn+0x10/0x10
[  271.277474][   T26]  ? __lock_acquire+0xab9/0xd20
[  271.277500][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  271.277520][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  271.277535][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  271.277548][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  271.277563][   T26]  process_scheduled_works+0xae1/0x17b0
[  271.277601][   T26]  ? __pfx_process_scheduled_works+0x10/0x10
[  271.277626][   T26]  worker_thread+0x8a0/0xda0
[  271.277663][   T26]  kthread+0x711/0x8a0
[  271.277683][   T26]  ? __pfx_worker_thread+0x10/0x10
[  271.277696][   T26]  ? __pfx_kthread+0x10/0x10
[  271.277735][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  271.277749][   T26]  ? lockdep_hardirqs_on+0x9c/0x150
[  271.277767][   T26]  ? __pfx_kthread+0x10/0x10
[  271.277785][   T26]  ret_from_fork+0x3fc/0x770
[  271.277801][   T26]  ? __pfx_ret_from_fork+0x10/0x10
[  271.277820][   T26]  ? __switch_to_asm+0x39/0x70
[  271.277837][   T26]  ? __switch_to_asm+0x33/0x70
[  271.277851][   T26]  ? __pfx_kthread+0x10/0x10
[  271.277868][   T26]  ret_from_fork_asm+0x1a/0x30
[  271.277898][   T26]  </TASK>
[  271.294498][T11125] XFS (loop3): Quotacheck: Done.
[  271.438939][   T26] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  271.444430][ T6289] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  271.735615][T11149] netlink: 'syz.3.1847': attribute type 39 has an invalid length.
[  272.162166][T11156] loop6: detected capacity change from 0 to 16
[  272.166064][T11156] erofs (device loop6): mounted with root inode @ nid 36.
[  272.174306][   T33] audit: type=1800 audit(1755180220.735:69): pid=11156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1849" name="file1" dev="loop6" ino=86 res=0 errno=0
[  272.579647][T11163] loop3: detected capacity change from 0 to 512
[  272.651355][T11163] EXT4-fs (loop3): Invalid default hash set in the superblock
[  272.792530][T11160] loop6: detected capacity change from 0 to 32768
[  272.801205][T11160] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1851 (11160)
[  272.815830][T11160] BTRFS info (device loop6 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  272.826275][T11160] BTRFS info (device loop6 state S): using crc32c (crc32c-lib) checksum algorithm
[  272.877010][ T8071] BTRFS warning (device loop6 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored
[  272.896332][   T40] BTRFS warning (device loop6 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored
[  272.904113][ T4133] BTRFS warning (device loop6 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored
[  272.911015][   T40] BTRFS warning (device loop6 state S): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x0bc7de37 level 0, ignored
[  272.923942][T11160] BTRFS error (device loop6 state S): logical 6881280 len 1638400 found bg but no related chunk
[  272.977783][ T8769] BTRFS info (device loop6 state S): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  273.278058][   T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  273.297892][   T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  273.303103][   T13] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  273.306586][   T13] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  273.724815][T11188] loop3: detected capacity change from 0 to 32768
[  273.821401][T11199] loop6: detected capacity change from 0 to 1024
[  273.828600][T11188] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  273.862216][T11199] hfsplus: request for non-existent node 3 in B*Tree
[  273.865133][T11199] hfsplus: request for non-existent node 3 in B*Tree
[  273.919031][T11188] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  274.078981][ T6289] ocfs2: Unmounting device (7,3) on (node local)
[  274.193100][T11202] loop6: detected capacity change from 0 to 4096
[  274.266051][T11202] ntfs3(loop6): ino=19, mi_enum_attr
[  274.277826][T11202] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  274.623204][T11217] netlink: 'syz.3.1868': attribute type 21 has an invalid length.
[  274.626541][T11217] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1868'.
[  274.632710][T11217] netlink: 'syz.3.1868': attribute type 5 has an invalid length.
[  274.637068][T11217] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1868'.
[  274.742368][   T55] Bluetooth: Unexpected start frame (len 16)
[  274.747004][   T55] Bluetooth: Frame is too long (len 16, expected len 4)
[  274.764930][T11225] loop3: detected capacity change from 0 to 4096
[  274.807957][T11225] ntfs3(loop3): ino=5, "/" mi_enum_attr
[  275.105882][T11236] loop3: detected capacity change from 0 to 512
[  275.116192][T11236] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  275.149924][T11236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.155580][T11236] ext4 filesystem being mounted at /537/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  275.169237][T11236] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:335: inode #15: comm syz.3.1877: verity file corrupted; can't find descriptor
[  275.177201][T11236] EXT4-fs (loop3): Remounting filesystem read-only
[  275.184134][T11236] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size
[  275.205765][ T6289] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.419941][T11252] loop3: detected capacity change from 0 to 128
[  275.423930][T11252] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  275.437298][   T33] audit: type=1800 audit(1755180223.995:70): pid=11252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1883" name="bus" dev="loop3" ino=1048683 res=0 errno=0
[  275.474543][  T351] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  275.512101][T11255] loop3: detected capacity change from 0 to 1024
[  275.522929][T11255] hfsplus: small file entry
[  275.660792][T11264] loop3: detected capacity change from 0 to 512
[  275.675065][T11264] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  275.683339][T11264] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  275.688701][T11264] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1889: Corrupt directory, running e2fsck is recommended
[  275.695376][T11264] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  275.698961][T11264] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.1889: corrupted in-inode xattr: invalid ea_ino
[  275.704917][T11264] EXT4-fs (loop3): Remounting filesystem read-only
[  275.712062][T11264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.724130][T11264] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  275.729326][T11264] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  275.732742][T11264] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1889: Corrupt directory, running e2fsck is recommended
[  275.751844][ T6289] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.860542][T11275] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1894'.
[  276.512014][T11297] loop3: detected capacity change from 0 to 256
[  276.515218][T11297] exfat: Deprecated parameter 'utf8'
[  276.517476][T11297] exfat: Deprecated parameter 'namecase'
[  276.520094][T11297] exfat: Deprecated parameter 'utf8'
[  276.521992][T11297] exfat: Deprecated parameter 'utf8'
[  276.540543][T11297] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e8072e, utbl_chksum : 0xe619d30d)
[  276.738616][T11305] netlink: 'syz.3.1909': attribute type 3 has an invalid length.
[  279.196417][T11349] loop3: detected capacity change from 0 to 164
[  280.929116][ T5901] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  281.082485][ T5901] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  281.085689][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.088587][ T5901] usb 4-1: Product: syz
[  281.090601][ T5901] usb 4-1: Manufacturer: syz
[  281.092512][ T5901] usb 4-1: SerialNumber: syz
[  281.105997][ T5901] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  281.196078][ T5901] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  281.431202][ T5916] usb 4-1: USB disconnect, device number 39
[  281.440924][    C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending?
[  282.298449][ T5901] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  282.308770][ T5901] ath9k_htc: Failed to initialize the device
[  282.312494][ T5916] usb 4-1: ath9k_htc: USB layer deinitialized
[  283.112045][T11449] loop3: detected capacity change from 0 to 128
[  283.119517][T11449] EXT4-fs (loop3): Test dummy encryption mode enabled
[  283.141416][T11449] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  283.147632][T11449] ext4 filesystem being mounted at /569/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  283.202123][ T6289] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  283.333260][T11463] syz_tun: entered allmulticast mode
[  283.339000][T11462] syz_tun: left allmulticast mode
[  283.509565][T11476] loop3: detected capacity change from 0 to 256
[  283.528123][T11476] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  283.592451][    C1] Unknown status report in ack skb
[  283.671828][T11482] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  283.676408][T11482] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  284.104983][T11502] loop3: detected capacity change from 0 to 8
[  284.115845][T11502] SQUASHFS error: Unable to read directory block [631:26]
[  284.457512][T11506] loop3: detected capacity change from 0 to 32768
[  284.545349][T11517] loop6: detected capacity change from 0 to 16
[  284.556058][T11517] erofs (device loop6): mounted with root inode @ nid 36.
[  284.601569][T11519] loop6: detected capacity change from 0 to 256
[  284.616739][T11519] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  284.727802][T11523] loop6: detected capacity change from 0 to 2048
[  284.747027][T11523] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  285.001424][T11531] loop6: detected capacity change from 0 to 4096
[  285.626999][T11561] loop3: detected capacity change from 0 to 2048
[  285.667777][T11561] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.684781][T11561] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  285.718975][ T6289] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.256885][ T5882] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  286.270403][ T5882] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.466017][ T5882] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  286.476192][ T5882] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.673199][ T5882] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  286.695152][ T5882] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.756814][T11581] loop3: detected capacity change from 0 to 32768
[  286.781807][T11581] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2030 (11581)
[  286.995306][T11581] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  287.026932][T11581] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  287.043646][T11581] BTRFS info (device loop3): using free-space-tree
[  287.094766][ T5882] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  287.102773][ T5882] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.351185][ T6289] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  287.540580][ T5882] bridge_slave_1: left allmulticast mode
[  287.546912][ T5882] bridge_slave_1: left promiscuous mode
[  287.549452][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.591413][ T5882] bridge_slave_0: left allmulticast mode
[  287.593863][ T5882] bridge_slave_0: left promiscuous mode
[  287.607619][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state
[  287.726957][T11608] loop6: detected capacity change from 0 to 40427
[  287.741825][T11608] F2FS-fs (loop6): Fix alignment : done, start(4096) end(16896) block(12288)
[  287.773585][T11608] F2FS-fs (loop6): invalid crc value
[  287.912068][T11608] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  287.933240][T11608] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  288.002322][ T8769] syz-executor: attempt to access beyond end of device
[  288.002322][ T8769] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  288.010989][ T8769] CPU: 0 UID: 0 PID: 8769 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  288.011006][ T8769] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  288.011012][ T8769] Call Trace:
[  288.011016][ T8769]  <TASK>
[  288.011020][ T8769]  dump_stack_lvl+0x189/0x250
[  288.011038][ T8769]  ? __pfx_dump_stack_lvl+0x10/0x10
[  288.011048][ T8769]  ? __pfx_queue_work_on+0x10/0x10
[  288.011058][ T8769]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  288.011075][ T8769]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  288.011099][ T8769]  f2fs_handle_critical_error+0x37c/0x540
[  288.011126][ T8769]  f2fs_write_end_io+0x886/0xb60
[  288.011154][ T8769]  __submit_merged_bio+0x27a/0x6a0
[  288.011169][ T8769]  __submit_merged_write_cond+0x255/0x530
[  288.011182][ T8769]  f2fs_write_data_pages+0x261d/0x3000
[  288.011208][ T8769]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  288.011238][ T8769]  ? __mod_zone_page_state+0xd7/0x140
[  288.011253][ T8769]  ? folios_put_refs+0x560/0x640
[  288.011267][ T8769]  ? __pfx_folios_put_refs+0x10/0x10
[  288.011274][ T8769]  ? rcu_is_watching+0x15/0xb0
[  288.011288][ T8769]  ? __lock_acquire+0xab9/0xd20
[  288.011313][ T8769]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  288.011325][ T8769]  do_writepages+0x32e/0x550
[  288.011341][ T8769]  ? do_raw_spin_unlock+0x4d/0x240
[  288.011353][ T8769]  filemap_fdatawrite+0x199/0x240
[  288.011364][ T8769]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  288.011395][ T8769]  ? do_raw_spin_unlock+0x4d/0x240
[  288.011406][ T8769]  f2fs_sync_dirty_inodes+0x31f/0x830
[  288.011421][ T8769]  f2fs_write_checkpoint+0x95a/0x1df0
[  288.011439][ T8769]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  288.011500][ T8769]  ? kill_f2fs_super+0x298/0x6c0
[  288.011513][ T8769]  kill_f2fs_super+0x2c3/0x6c0
[  288.011524][ T8769]  ? __pfx_kill_f2fs_super+0x10/0x10
[  288.011530][ T8769]  ? radix_tree_delete_item+0x2b6/0x400
[  288.011545][ T8769]  ? shrinker_free+0x2ce/0x3e0
[  288.011558][ T8769]  deactivate_locked_super+0xbc/0x130
[  288.011571][ T8769]  cleanup_mnt+0x425/0x4c0
[  288.011581][ T8769]  ? lockdep_hardirqs_on+0x9c/0x150
[  288.011593][ T8769]  task_work_run+0x1d4/0x260
[  288.011606][ T8769]  ? __pfx_task_work_run+0x10/0x10
[  288.011615][ T8769]  ? __x64_sys_umount+0x122/0x160
[  288.011628][ T8769]  ? exit_to_user_mode_loop+0x40/0x110
[  288.011641][ T8769]  exit_to_user_mode_loop+0xec/0x110
[  288.011652][ T8769]  do_syscall_64+0x2bd/0x3b0
[  288.011662][ T8769]  ? lockdep_hardirqs_on+0x9c/0x150
[  288.011671][ T8769]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.011679][ T8769]  ? exc_page_fault+0x9f/0xf0
[  288.011689][ T8769]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.011696][ T8769] RIP: 0033:0x7f4fdeb8ff17
[  288.011705][ T8769] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  288.011712][ T8769] RSP: 002b:00007ffd09574fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  288.011721][ T8769] RAX: 0000000000000000 RBX: 00007f4fdec11c05 RCX: 00007f4fdeb8ff17
[  288.011727][ T8769] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd095750a0
[  288.011732][ T8769] RBP: 00007ffd095750a0 R08: 0000000000000000 R09: 0000000000000000
[  288.011736][ T8769] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd09576130
[  288.011742][ T8769] R13: 00007f4fdec11c05 R14: 0000000000046452 R15: 00007ffd09576170
[  288.011755][ T8769]  </TASK>
[  288.011777][ T8769] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  288.450521][   T55] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  288.454446][   T55] Bluetooth: hci0: Injecting HCI hardware error event
[  288.460566][ T5236] Bluetooth: hci0: hardware error 0x00
[  288.625088][T11632] loop6: detected capacity change from 0 to 128
[  288.859042][ T5882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  288.866546][ T5882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  288.871772][ T5882] bond0 (unregistering): Released all slaves
[  288.981636][T11641] loop6: detected capacity change from 0 to 4096
[  288.984493][ T5882] tipc: Left network mode
[  289.009205][T11641] ntfs3(loop6): ino=3, Correct links count -> 2.
[  289.017217][ T5882] IPVS: stopping master sync thread 8022 ...
[  289.065049][T11641] ntfs3(loop6): ino=1a, mi_enum_attr
[  289.067506][T11641] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  289.135480][T11641] ntfs3(loop6): failed to convert "0080" to cp864
[  289.146278][T11641] ntfs3(loop6): failed to convert name for inode 1e.
[  289.156540][T11641] ntfs3(loop6): ino=1f, mi_enum_attr
[  289.161346][T11643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2048'.
[  289.193189][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[  289.195851][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.199191][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.202464][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.205644][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.208717][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.212065][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.215290][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.218600][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.222203][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.225506][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.228671][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.231970][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.235326][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.238638][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.241906][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.245242][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.248447][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.251918][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.255177][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.258331][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.261585][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.264888][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.268162][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.271561][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.274811][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.278084][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.281442][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.284858][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.288000][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.291495][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.295280][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.298561][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.301844][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.305107][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.308209][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.311599][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.314765][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.318053][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.321420][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.324675][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.327854][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.331249][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.334494][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.337692][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.340982][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.344187][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.347569][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.351161][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.354540][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.357977][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.361503][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.364930][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.368414][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.372028][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.375397][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.378840][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.382374][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.385846][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.389243][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.392951][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.396433][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.400208][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.403732][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.407172][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.410494][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.413739][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.416973][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.420307][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.423458][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.426660][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.429781][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.433136][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.436369][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.441852][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.444901][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.447946][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.451051][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.454097][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.457261][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.460556][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.463728][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.466951][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.470206][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.473450][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.476619][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.479835][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.483080][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.486091][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.489006][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.492315][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.495564][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.498779][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.502056][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.505301][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.508472][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.511838][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.515046][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.518277][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.521601][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.524932][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.528083][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.531529][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.534718][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.537986][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.541299][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.544595][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.547721][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.551072][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.554241][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.557511][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.560830][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.564082][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.567245][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.570616][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.573910][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.577191][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.580420][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.583616][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.586752][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.590064][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.593185][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.596307][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.599212][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.602509][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.605566][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.608666][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.611774][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.614838][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.617853][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.621044][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.624061][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.627154][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.630474][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.633733][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.636876][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.640185][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.643360][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.646505][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.649646][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.653026][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.656179][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.659423][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.662812][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.666098][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.669205][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.672581][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.675814][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.679085][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.682458][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.685707][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.688878][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.692254][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.695460][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.698671][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.701958][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.705203][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.708399][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.711771][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.714966][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.718256][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.721580][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.724779][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.727956][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.731235][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.734467][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.737707][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.740970][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.744168][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.747341][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.750675][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.753828][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.757062][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.760379][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.763645][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.766825][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.770173][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.773376][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.776620][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.779788][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.783143][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.786343][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.789551][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.792840][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.796119][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.799334][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.802683][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.805825][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.809046][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.812304][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.815534][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.818662][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.822056][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.825231][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.828488][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.831806][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.835075][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.838232][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  289.841599][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  289.844722][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  290.461492][ T5882] hsr_slave_0: left promiscuous mode
[  290.464073][ T5882] hsr_slave_1: left promiscuous mode
[  290.466067][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  290.468793][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_0
[  290.488192][T11670] loop3: detected capacity change from 0 to 256
[  290.499300][ T5882] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  290.502250][ T5882] batman_adv: batadv0: Removing interface: batadv_slave_1
[  290.515948][T11670] FAT-fs (loop3): Directory bread(block 64) failed
[  290.520190][T11670] FAT-fs (loop3): Directory bread(block 65) failed
[  290.531761][ T5236] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  290.540226][T11670] FAT-fs (loop3): Directory bread(block 66) failed
[  290.542826][T11670] FAT-fs (loop3): Directory bread(block 67) failed
[  290.545088][T11670] FAT-fs (loop3): Directory bread(block 68) failed
[  290.547331][T11670] FAT-fs (loop3): Directory bread(block 69) failed
[  290.549356][T11670] FAT-fs (loop3): Directory bread(block 70) failed
[  290.573047][T11670] FAT-fs (loop3): Directory bread(block 71) failed
[  290.578036][ T5882] veth1_macvtap: left promiscuous mode
[  290.585198][T11670] FAT-fs (loop3): Directory bread(block 72) failed
[  290.587856][T11670] FAT-fs (loop3): Directory bread(block 73) failed
[  290.592014][ T5882] veth0_macvtap: left promiscuous mode
[  290.594533][ T5882] veth1_vlan: left promiscuous mode
[  290.596756][ T5882] veth0_vlan: left promiscuous mode
[  290.883671][T11688] loop6: detected capacity change from 0 to 256
[  291.135758][T11684] loop3: detected capacity change from 0 to 32768
[  291.144269][T11696] netlink: 'syz.6.2068': attribute type 4 has an invalid length.
[  291.158620][T11684] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2062 (11684)
[  291.208603][T11698] netlink: 'syz.6.2068': attribute type 4 has an invalid length.
[  291.230307][T11684] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  291.233769][T11684] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  291.237267][T11684] BTRFS info (device loop3): using free-space-tree
[  291.544470][ T6289] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  291.914488][ T5882] team0 (unregistering): Port device team_slave_1 removed
[  292.160771][ T5882] team0 (unregistering): Port device team_slave_0 removed
[  292.191245][T11721] loop3: detected capacity change from 0 to 32768
[  292.195079][T11721] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  292.195079][T11721] clean (size 2912):
[  292.195079][T11721] flags:          0
[  292.195079][T11721] journal_seq:    8
[  292.195079][T11721] prio_ptrs: 
[  292.195079][T11721] usage: type=key_version v=0
[  292.195079][T11721] usage: type=reserved v=0
[  292.195079][T11721] usage: type=reserved v=0
[  292.195079][T11721] usage: type=reserved v=0
[  292.195079][T11721] usage: type=reserved v=0
[  292.195079][T11721] data_usage: btree: 1/1 [0]=2816
[  292.195079][T11721] data_usage: journal: 1/1 [0]=0
[  292.195079][T11721] data_usage: user: 1/1 [0]=32
[  292.195079][T11721] dev_usage: dev=0  
[  292.195079][T11721]   free: buckets=83 sectors=0 fragmented=0
[  292.195079][T11721]   sb: buckets=25 sectors=6152 fragmented=248
[  292.195079][T11721]   journal: buckets=8 sectors=2048 fragmented=0
[  292.195079][T11721]   btree: buckets=11 sectors=2816 fragmented=0
[  292.195079][T11721]   user: buckets=1 sectors=32 fragmented=224
[  292.195079][T11721]   cached: buckets=0 sectors=0 fragmented=0
[  292.195079][T11721]   parity: buckets=0 sectors=0 fragmented=0
[  292.195079][T11721]   stripe: buckets=0 sectors=0 fragmented=0
[  292.195079][T11721]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  292.195079][T11721]   need_discard: buckets=0 sectors=0 fragmented=0
[  292.195079][T11721] clock: read=0
[  292.195079][T11721] clock: write=1288
[  292.195079][T11721] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 249e7ae2af8ee3
[  292.195230][T11721] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  293.120550][ T5916] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  293.252432][T11746] overlayfs: failed to clone upperpath
[  293.294988][ T5916] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05
[  293.313150][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.320936][ T5916] usb 4-1: Product: syz
[  293.331209][ T5916] usb 4-1: Manufacturer: syz
[  293.333202][ T5916] usb 4-1: SerialNumber: syz
[  293.341679][ T5916] usb 4-1: config 0 descriptor??
[  293.369020][ T5916] go7007 4-1:0.0: probe with driver go7007 failed with error -12
[  293.568398][ T7589] usb 4-1: USB disconnect, device number 40
[  293.771556][T11744] loop6: detected capacity change from 0 to 32768
[  293.809389][T11744] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  293.838992][T11744] (syz.6.2080,11744,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1
[  293.903348][ T8769] ocfs2: Unmounting device (7,6) on (node local)
[  294.172230][T11775] loop6: detected capacity change from 0 to 512
[  294.179789][T11775] EXT4-fs: Ignoring removed nomblk_io_submit option
[  294.191633][T11775] EXT4-fs: Ignoring removed nomblk_io_submit option
[  294.206810][T11775] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  294.233138][T11775] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  294.257273][T11775] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[  294.283720][T11775] EXT4-fs (loop6): 1 truncate cleaned up
[  294.287412][T11775] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.309174][T11775] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  294.360321][T11790] loop3: detected capacity change from 0 to 256
[  294.364501][ T8769] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.434623][T11790] FAT-fs (loop3): Directory bread(block 64) failed
[  294.437401][T11790] FAT-fs (loop3): Directory bread(block 65) failed
[  294.440091][T11790] FAT-fs (loop3): Directory bread(block 66) failed
[  294.462938][T11790] FAT-fs (loop3): Directory bread(block 67) failed
[  294.466292][T11790] FAT-fs (loop3): Directory bread(block 68) failed
[  294.468930][T11790] FAT-fs (loop3): Directory bread(block 69) failed
[  294.477335][T11790] FAT-fs (loop3): Directory bread(block 70) failed
[  294.488595][T11790] FAT-fs (loop3): Directory bread(block 71) failed
[  294.499459][T11790] FAT-fs (loop3): Directory bread(block 72) failed
[  294.512519][T11790] FAT-fs (loop3): Directory bread(block 73) failed
[  294.812265][T11802] overlayfs: failed to resolve './file0': -2
[  295.179374][T11805] loop6: detected capacity change from 0 to 2048
[  295.304464][T11805] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  295.326327][T11805] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  295.505137][T11805] fs-verity (loop6, inode 13): Unknown hash algorithm number: 3
[  295.617041][ T8769] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.643740][   T36] kworker/u10:1: attempt to access beyond end of device
[  295.643740][   T36] loop3: rw=1, sector=1224, nr_sectors = 4 limit=256
[  295.854418][T11824] loop6: detected capacity change from 0 to 1024
[  296.059921][T11837] hfsplus: request for non-existent node 211 in B*Tree
[  296.089092][T11837] hfsplus: request for non-existent node 211 in B*Tree
[  296.859954][T11864] cifs: Bad value for 'port'
[  297.124015][   T33] audit: type=1326 audit(1755180245.682:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.4.2114" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98af98ebe9 code=0x7ffc0000
[  297.158367][   T33] audit: type=1326 audit(1755180245.682:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.4.2114" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98af98ebe9 code=0x7ffc0000
[  297.182220][   T33] audit: type=1326 audit(1755180245.682:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.4.2114" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f98af98ebe9 code=0x7ffc0000
[  297.211386][   T33] audit: type=1326 audit(1755180245.682:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.4.2114" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98af98ebe9 code=0x7ffc0000
[  297.220192][   T33] audit: type=1326 audit(1755180245.682:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.4.2114" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98af98ebe9 code=0x7ffc0000
[  297.275737][   T33] audit: type=1326 audit(1755180245.682:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.4.2114" exe="/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f98af98ebe9 code=0x7ffc0000
[  297.301134][   T33] audit: type=1326 audit(1755180245.682:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.4.2114" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98af98ebe9 code=0x7ffc0000
[  297.312313][   T33] audit: type=1326 audit(1755180245.682:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.4.2114" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98af98ebe9 code=0x7ffc0000
[  297.342865][   T33] audit: type=1326 audit(1755180245.682:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.4.2114" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f98af98ebe9 code=0x7ffc0000
[  297.372684][   T33] audit: type=1326 audit(1755180245.682:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11869 comm="syz.4.2114" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98af98ebe9 code=0x7ffc0000
[  298.983603][ T1939] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  299.155116][ T1939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  299.159032][ T1939] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  299.163070][ T1939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  299.168560][ T1939] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[  299.172453][ T1939] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[  299.175973][ T1939] usb 4-1: Manufacturer: syz
[  299.181708][ T1939] usb 4-1: config 0 descriptor??
[  299.190805][ T1939] smsusb:smsusb_probe: board id=9, interface number 0
[  299.194438][ T1939] smsusb:smsusb_probe: Device initialized with return code -19
[  299.396546][ T5917] usb 4-1: USB disconnect, device number 41
[  299.959100][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2137'.
[  299.963570][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2137'.
[  300.391622][ T5917] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  300.542117][ T5917] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  300.546710][ T5917] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  300.550493][ T5917] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  300.554978][ T5917] usb 4-1: config 0 interface 0 has no altsetting 0
[  300.559001][ T5917] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  300.562915][ T5917] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  300.567394][ T5917] usb 4-1: config 0 interface 0 has no altsetting 0
[  300.571625][ T5917] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  300.575226][ T5917] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  300.579660][ T5917] usb 4-1: config 0 interface 0 has no altsetting 0
[  300.584621][ T5917] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  300.588307][ T5917] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  300.592911][ T5917] usb 4-1: config 0 interface 0 has no altsetting 0
[  300.596860][ T5917] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  300.600522][ T5917] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  300.605794][ T5917] usb 4-1: config 0 interface 0 has no altsetting 0
[  300.609658][ T5917] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  300.613389][ T5917] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  300.617033][ T5917] usb 4-1: config 0 interface 0 has no altsetting 0
[  300.620862][ T5917] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  300.625344][ T5917] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  300.629398][ T5917] usb 4-1: config 0 interface 0 has no altsetting 0
[  300.633754][ T5917] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  300.637405][ T5917] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  300.643190][ T5917] usb 4-1: config 0 interface 0 has no altsetting 0
[  300.649442][ T5917] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  300.653118][ T5917] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  300.656316][ T5917] usb 4-1: Product: syz
[  300.658010][ T5917] usb 4-1: Manufacturer: syz
[  300.659882][ T5917] usb 4-1: SerialNumber: syz
[  300.664602][ T5917] usb 4-1: config 0 descriptor??
[  300.677645][ T5917] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[  300.883896][ T5917] usb 4-1: USB disconnect, device number 42
[  300.893716][ T5917] yurex 4-1:0.0: USB YUREX #0 now disconnected
[  301.663931][T11961] loop3: detected capacity change from 0 to 1024
[  301.667541][T11961] EXT4-fs: Ignoring removed bh option
[  301.684100][T11961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  301.735717][T11961] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.2146: inode #6: comm syz.3.2146: iget: illegal inode #
[  301.765585][T11961] EXT4-fs (loop3): Remounting filesystem read-only
[  301.768502][T11961] EXT4-fs warning (device loop3): ext4_xattr_block_set:2190: inode #19: comm syz.3.2146: dec ref error=-30
[  301.807737][ T6289] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  302.064312][ T5236] Bluetooth: hci2: unexpected event for opcode 0x0804
[  303.431012][T11996] loop3: detected capacity change from 0 to 32768
[  303.440119][T11996] jfs_mount: Failed to read FILESYSTEM_I
[  303.446513][T11996] Mount JFS Failure: -5
[  303.448471][T11996] jfs_mount failed w/return code = -5
[  303.721453][T11998] loop3: detected capacity change from 0 to 1024
[  303.756900][   T36] hfsplus: b-tree write err: -5, ino 4
[  303.792623][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  303.792640][   T33] audit: type=1800 audit(1755180252.322:82): pid=11998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2160" name="file1" dev="loop3" ino=20 res=0 errno=0
[  304.173964][T12006] syzkaller1: entered promiscuous mode
[  304.175771][T12006] syzkaller1: entered allmulticast mode
[  305.017355][T12028] loop3: detected capacity change from 0 to 32768
[  305.020919][T12028] btrfs: Deprecated parameter 'usebackuproot'
[  305.028196][T12028] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  305.034021][T12028] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2170 (12028)
[  305.041534][T12028] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  305.046000][T12028] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  305.049192][T12028] BTRFS info (device loop3): disk space caching is enabled
[  305.052677][T12028] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  305.152293][T12046] loop6: detected capacity change from 0 to 1024
[  305.178413][ T6289] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  305.346422][T12050] loop3: detected capacity change from 0 to 256
[  305.352440][T12050] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  305.362052][T12050] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  305.369049][T12050] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  305.481674][T12050] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff)
[  305.504413][T12050] exFAT-fs (loop3): Filesystem has been set read-only
[  305.516922][T12050] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff)
[  305.520729][T12050] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff)
[  305.725960][T12060] loop6: detected capacity change from 0 to 16
[  305.736464][T12060] erofs (device loop6): mounted with root inode @ nid 36.
[  305.821403][T12060] erofs (device loop6): bogus lookback distance 1388 @ lcn 42 of nid 36
[  305.848906][T12060] erofs (device loop6): read error -117 @ 43 of nid 36
[  306.236139][T12067] loop3: detected capacity change from 0 to 1024
[  306.370804][T12071] loop3: detected capacity change from 0 to 1024
[  306.494203][  T351] hfsplus: b-tree write err: -5, ino 4
[  306.655208][T12084] loop3: detected capacity change from 0 to 128
[  306.694113][T12084] qnx6: wrong signature (magic) in superblock #1.
[  306.851661][T12096] loop3: detected capacity change from 0 to 2048
[  307.029311][T12107] loop3: detected capacity change from 0 to 2048
[  307.707660][T12135] loop3: detected capacity change from 0 to 128
[  307.718882][T12135] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  307.726360][T12135] ext4 filesystem being mounted at /666/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  307.749120][T12135] EXT4-fs error (device loop3): dx_make_map:1296: inode #2: block 20: comm syz.3.2210: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  307.766369][T12135] EXT4-fs (loop3): Remounting filesystem read-only
[  307.801583][ T6289] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  308.060455][T12152] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  308.702988][ T5901] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  308.852463][ T5901] usb 4-1: Using ep0 maxpacket: 16
[  308.859745][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  308.872488][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  308.883432][ T5901] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  308.887229][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.890475][ T5901] usb 4-1: Product: syz
[  308.894850][ T5901] usb 4-1: Manufacturer: syz
[  308.897030][ T5901] usb 4-1: SerialNumber: syz
[  308.901682][ T5901] usb 4-1: config 0 descriptor??
[  308.920654][ T5901] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  308.932602][ T5901] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  309.627452][ T5901] em28xx 4-1:0.0: chip ID is em2750
[  310.090624][ T5901] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  310.099467][ T5901] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  310.106676][ T5901] em28xx 4-1:0.0: No AC97 audio processor
[  310.159540][ T5901] usb 4-1: USB disconnect, device number 43
[  310.180069][ T5901] em28xx 4-1:0.0: Disconnecting em28xx
[  310.217013][ T5901] em28xx 4-1:0.0: Freeing device
[  310.580783][T12229] loop6: detected capacity change from 0 to 64
[  311.119544][T12240] loop3: detected capacity change from 0 to 256
[  312.977661][T12284] loop3: detected capacity change from 0 to 32768
[  312.987330][T12284] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2247 (12284)
[  312.994884][T12284] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  312.998353][T12284] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  313.002984][T12284] BTRFS info (device loop3): using free-space-tree
[  313.350730][ T6289] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  313.500312][T12307] comedi comedi0: dt2817: I/O port conflict (0xee,5)
[  313.752168][T12317] loop3: detected capacity change from 0 to 512
[  313.771155][T12317] EXT4-fs: Ignoring removed orlov option
[  313.808013][T12317] EXT4-fs: Ignoring removed mblk_io_submit option
[  313.848930][T12317] EXT4-fs (loop3): orphan cleanup on readonly fs
[  313.851063][T12317] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  313.858067][T12317] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.2252: attempt to clear invalid blocks 2 len 1
[  313.876651][T12317] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  313.889791][T12317] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2252: invalid indirect mapped block 1819239214 (level 0)
[  313.908184][T12317] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.2252: invalid indirect mapped block 1819239214 (level 1)
[  313.927905][T12317] EXT4-fs (loop3): 1 truncate cleaned up
[  313.930918][T12317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  313.983318][ T6289] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  314.049157][T12313] loop6: detected capacity change from 0 to 32768
[  314.078155][   T33] audit: type=1800 audit(1755180262.630:83): pid=12313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2255" name="file1" dev="loop6" ino=4 res=0 errno=0
[  314.337560][T12313] ERROR: (device loop6): dbAdjCtl: the maximum free buddy is not the old root
[  314.337560][T12313] 
[  314.342434][T12313] ERROR: (device loop6): remounting filesystem as read-only
[  314.595291][   T33] audit: type=1326 audit(1755180263.160:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.3.2263" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ed8ebe9 code=0x7fc00000
[  315.040265][T12346] netlink: 'syz.4.2268': attribute type 1 has an invalid length.
[  315.043767][T12346] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  315.203902][   T33] audit: type=1326 audit(1755180263.770:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.3.2263" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8f1ed8ebe9 code=0x7fc00000
[  315.213020][   T33] audit: type=1326 audit(1755180263.770:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.3.2263" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ed8ebe9 code=0x7fc00000
[  315.221902][   T33] audit: type=1326 audit(1755180263.770:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.3.2263" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ed8ebe9 code=0x7fc00000
[  315.233314][   T33] audit: type=1326 audit(1755180263.770:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.3.2263" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ed8ebe9 code=0x7fc00000
[  315.242610][   T33] audit: type=1326 audit(1755180263.770:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.3.2263" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ed8ebe9 code=0x7fc00000
[  315.254374][   T33] audit: type=1326 audit(1755180263.770:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.3.2263" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ed8ebe9 code=0x7fc00000
[  315.265919][   T33] audit: type=1326 audit(1755180263.770:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.3.2263" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ed8ebe9 code=0x7fc00000
[  315.282153][   T33] audit: type=1326 audit(1755180263.770:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz.3.2263" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f1ed8ebe9 code=0x7fc00000
[  315.553762][T12354] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2271'.
[  316.210356][T12360] loop3: detected capacity change from 0 to 512
[  316.241506][T12360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  316.246811][T12360] ext4 filesystem being mounted at /688/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  316.267417][T12360] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2274: Failed to acquire dquot type 0
[  316.302199][ T6289] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.713450][ T5902] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  316.859049][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  316.862325][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  316.873509][ T5902] usb 4-1: Using ep0 maxpacket: 16
[  316.880628][ T5902] usb 4-1: config 1 interface 0 altsetting 36 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  316.887223][ T5902] usb 4-1: config 1 interface 0 has no altsetting 0
[  316.892238][ T5902] usb 4-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.40
[  316.897560][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.900765][ T5902] usb 4-1: Product: syz
[  316.902484][ T5902] usb 4-1: Manufacturer: syz
[  316.905573][ T5902] usb 4-1: SerialNumber: syz
[  317.130501][ T5902] usbhid 4-1:1.0: can't add hid device: -71
[  317.133053][ T5902] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  317.138850][ T5902] usb 4-1: USB disconnect, device number 44
[  318.842241][T12393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2287'.
[  319.070736][T12390] syz.6.2286 (12390): drop_caches: 2
[  319.913840][ T5902] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  320.020729][T12427] overlayfs: failed to clone lowerpath
[  320.065569][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  320.071192][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  320.075296][ T5902] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  320.078901][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.084628][ T5902] usb 4-1: config 0 descriptor??
[  320.509366][ T5902] steelseries 0003:1038:12B6.000F: item fetching failed at offset 5/7
[  320.528353][ T5902] steelseries 0003:1038:12B6.000F: probe with driver steelseries failed with error -22
[  320.556029][T12444] binder: 12443:12444 ioctl 541b 0 returned -22
[  320.666584][T12455] loop6: detected capacity change from 0 to 128
[  320.678064][   T33] kauditd_printk_skb: 61 callbacks suppressed
[  320.678077][   T33] audit: type=1800 audit(1755180269.240:152): pid=12455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2316" name="file2" dev="loop6" ino=1048699 res=0 errno=0
[  320.710798][T12457] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2317'.
[  320.716318][ T5901] usb 4-1: USB disconnect, device number 45
[  321.880646][T12489] 9pnet_fd: Insufficient options for proto=fd
[  321.892056][T12488] loop3: detected capacity change from 0 to 1024
[  321.941373][T12488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  322.018837][ T6289] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.179080][T12508] loop3: detected capacity change from 0 to 256
[  322.191240][T12508] FAT-fs (loop3): Directory bread(block 64) failed
[  322.193402][T12508] FAT-fs (loop3): Directory bread(block 65) failed
[  322.200168][T12508] FAT-fs (loop3): Directory bread(block 66) failed
[  322.202365][T12508] FAT-fs (loop3): Directory bread(block 67) failed
[  322.205691][T12508] FAT-fs (loop3): Directory bread(block 68) failed
[  322.207802][T12508] FAT-fs (loop3): Directory bread(block 69) failed
[  322.210245][T12508] FAT-fs (loop3): Directory bread(block 70) failed
[  322.212383][T12508] FAT-fs (loop3): Directory bread(block 71) failed
[  322.217127][T12508] FAT-fs (loop3): Directory bread(block 72) failed
[  322.220363][T12508] FAT-fs (loop3): Directory bread(block 73) failed
[  322.539399][ T5848] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  322.664776][T12525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2346'.
[  322.685418][ T5848] usb 4-1: Using ep0 maxpacket: 8
[  322.696506][ T5848] usb 4-1: config index 0 descriptor too short (expected 19222, got 18)
[  322.699864][ T5848] usb 4-1: config 28 has too many interfaces: 241, using maximum allowed: 32
[  322.703392][ T5848] usb 4-1: config 28 has 1 interface, different from the descriptor's value: 241
[  322.714343][ T5848] usb 4-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=62.0d
[  322.724308][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.727688][ T5848] usb 4-1: Product: syz
[  322.729411][ T5848] usb 4-1: Manufacturer: syz
[  322.731784][ T5848] usb 4-1: SerialNumber: syz
[  322.970541][ T5848] usb 4-1: USB disconnect, device number 46
[  323.133263][T12534] 9pnet_fd: Insufficient options for proto=fd
[  324.014218][ T5902] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  324.167126][ T5902] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  324.170799][ T5902] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00
[  324.173668][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.179107][ T5902] usb 4-1: config 0 descriptor??
[  324.597919][ T5902] playstation 0003:054C:0BA0.0010: unknown main item tag 0x0
[  324.603518][ T5902] playstation 0003:054C:0BA0.0010: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.3-1/input0
[  324.796486][ T5902] playstation 0003:054C:0BA0.0010: Invalid byte count transferred, expected 16 got 9
[  324.801870][ T5902] playstation 0003:054C:0BA0.0010: Failed to retrieve DualShock4 pairing info: -22
[  324.806622][ T5902] playstation 0003:054C:0BA0.0010: Failed to get MAC address from DualShock4
[  324.810302][ T5902] playstation 0003:054C:0BA0.0010: Failed to create dualshock4.
[  324.819057][ T5902] playstation 0003:054C:0BA0.0010: probe with driver playstation failed with error -22
[  325.010399][ T5902] usb 4-1: USB disconnect, device number 47
[  325.607798][T12573] loop6: detected capacity change from 0 to 32768
[  325.621489][T12573] (syz.6.2367,12573,0):ocfs2_load_local_alloc:339 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2!
[  325.621489][T12573] found = 2, set = 0, taken = 0, off = 0
[  325.629537][T12573] (syz.6.2367,12573,0):ocfs2_load_local_alloc:356 ERROR: status = -22
[  325.632768][T12573] (syz.6.2367,12573,0):ocfs2_check_volume:2404 ERROR: status = -22
[  325.635768][T12573] (syz.6.2367,12573,0):ocfs2_check_volume:2432 ERROR: status = -22
[  325.638932][T12573] (syz.6.2367,12573,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  325.646667][T12573] (syz.6.2367,12573,0):ocfs2_fill_super:1177 ERROR: status = -22
[  325.808021][T12581] loop3: detected capacity change from 0 to 256
[  326.109467][ T5901] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  326.534605][ T5901] usb 4-1: Using ep0 maxpacket: 8
[  326.539196][ T5901] usb 4-1: config 1 has an invalid descriptor of length 72, skipping remainder of the config
[  326.543179][ T5901] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 48, changing to 7
[  326.550384][ T5901] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9588, setting to 1024
[  326.555679][ T5901] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  326.562601][ T5901] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  326.567630][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.570516][ T5901] usb 4-1: Product: syz
[  326.572283][ T5901] usb 4-1: Manufacturer: syz
[  326.574038][ T5901] usb 4-1: SerialNumber: syz
[  326.587097][ T5901] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  326.591145][ T5901] usbtest 4-1:1.0: Linux user mode ISO test driver
[  326.593769][ T5901] usbtest 4-1:1.0: high-speed {control iso-in} tests (+alt)
[  326.789372][ T5901] usb 4-1: USB disconnect, device number 48
[  326.980298][T12605] tmpfs: Bad value for 'mpol'
[  327.376686][T12617] loop3: detected capacity change from 0 to 1024
[  327.389856][T12617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  327.416586][ T6289] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  327.459598][T12622] loop3: detected capacity change from 0 to 8
[  327.478281][T12622] SQUASHFS error: Failed to read block 0x1ec: -5
[  327.481198][T12622] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  328.142282][T12638] loop6: detected capacity change from 0 to 1024
[  328.155173][T12638] EXT4-fs: Ignoring removed orlov option
[  328.171995][T12638] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  328.186656][T12638] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  328.206750][T12638] EXT4-fs (loop6): invalid journal inode
[  328.211983][T12638] EXT4-fs (loop6): can't get journal size
[  328.220717][T12638] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  328.233540][T12641] futex_wake_op: syz.3.2392 tries to shift op by 32; fix this program
[  328.368791][T12648] netlink: 'syz.3.2395': attribute type 1 has an invalid length.
[  328.371693][T12648] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2395'.
[  329.021301][ T5916] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  329.026652][ T8769] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.116993][T12667] loop6: detected capacity change from 0 to 2048
[  329.151871][T12667] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  329.175218][ T5916] usb 4-1: Using ep0 maxpacket: 8
[  329.180129][ T5916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  329.191429][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  329.195285][ T8769] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.196522][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  329.215918][ T5916] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  329.220264][ T5916] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  329.228708][ T5916] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  329.244261][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.252512][ T5916] usb 4-1: config 0 descriptor??
[  329.470147][   T95] usb 4-1: USB disconnect, device number 49
[  330.128942][T12686] loop6: detected capacity change from 0 to 512
[  330.143897][T12686] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  330.156717][T12686] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  330.167520][T12686] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended
[  330.184314][T12686] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  330.187995][T12686] System zones: 0-2, 18-18, 34-34
[  330.191992][T12686] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.2409: iget: bad i_size value: 360287970189639680
[  330.205511][T12686] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2409: couldn't read orphan inode 15 (err -117)
[  330.221929][T12686] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  330.233587][T12686] EXT4-fs error (device loop6): ext4_lookup:1787: inode #15: comm syz.6.2409: iget: bad i_size value: 360287970189639680
[  330.282866][ T8769] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.390631][ T5916] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  330.555425][ T5916] usb 4-1: Using ep0 maxpacket: 32
[  330.590760][ T5916] usb 4-1: config 0 has an invalid interface number: 111 but max is 1
[  330.630113][ T5916] usb 4-1: config 0 has no interface number 1
[  330.647622][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  330.775077][ T5916] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[  330.786553][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.794326][ T5916] usb 4-1: Product: syz
[  330.800616][ T5916] usb 4-1: Manufacturer: syz
[  330.810600][ T5916] usb 4-1: SerialNumber: syz
[  330.820498][ T5916] usb 4-1: config 0 descriptor??
[  331.045249][ T5916] snd-usb-6fire 4-1:0.111: unable to receive device firmware state.
[  331.049746][ T5916] snd-usb-6fire 4-1:0.111: probe with driver snd-usb-6fire failed with error -71
[  331.065353][ T5916] usb 4-1: USB disconnect, device number 50
[  331.517539][T12705] netlink: 'syz.4.2415': attribute type 21 has an invalid length.
[  331.520761][T12705] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2415'.
[  331.569697][T12705] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  331.572981][T12705] overlayfs: failed to set xattr on upper
[  331.575739][T12705] overlayfs: ...falling back to redirect_dir=nofollow.
[  331.578639][T12705] overlayfs: ...falling back to index=off.
[  331.581296][T12705] overlayfs: ...falling back to uuid=null.
[  332.107277][T12710] loop6: detected capacity change from 0 to 32768
[  332.179432][T12710] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  332.218617][T12712] loop3: detected capacity change from 0 to 32768
[  332.222254][T12712] XFS: ikeep mount option is deprecated.
[  332.224597][T12712] XFS: ikeep mount option is deprecated.
[  332.237503][T12712] XFS: noikeep mount option is deprecated.
[  332.251048][T12710] XFS (loop6): Ending clean mount
[  332.287629][T12712] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  332.321654][ T8769] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  332.368200][T12712] XFS (loop3): Ending clean mount
[  332.449856][ T6289] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  332.542330][T12732] loop6: detected capacity change from 0 to 1024
[  332.562478][T12732] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  333.666705][ T1939] IPVS: starting estimator thread 0...
[  333.755308][T12772] IPVS: using max 45 ests per chain, 108000 per kthread
[  333.847921][T12780] loop3: detected capacity change from 0 to 128
[  333.873864][T12780] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  333.890004][T12780] ext4 filesystem being mounted at /742/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  333.925386][ T6289] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  334.141307][T12792] loop3: detected capacity change from 0 to 128
[  334.566847][ T5848] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  334.725499][ T5848] usb 4-1: Using ep0 maxpacket: 32
[  334.729718][ T5848] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  334.733088][ T5848] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  334.738113][ T5848] usb 4-1: config 0 has no interface number 0
[  334.743445][ T5848] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02
[  334.747424][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.750669][ T5848] usb 4-1: Product: syz
[  334.752422][ T5848] usb 4-1: Manufacturer: syz
[  334.754255][ T5848] usb 4-1: SerialNumber: syz
[  334.759635][ T5848] usb 4-1: config 0 descriptor??
[  334.768858][ T5848] gspca_main: xirlink-cit-2.14.0 probing 0545:8080
[  334.778446][ T5848] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20
[  334.980544][ T1939] usb 4-1: USB disconnect, device number 51
[  335.755570][ T5848] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  335.918885][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  335.923554][ T5848] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[  335.924275][T12830] loop6: detected capacity change from 0 to 2048
[  335.927634][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.934741][T12830] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=787, location=787
[  335.939798][T12830] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  335.941975][ T5848] usb 4-1: config 0 descriptor??
[  335.944707][T12830] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=1043, location=1043
[  335.949303][T12830] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=787, location=787
[  335.952753][T12830] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  335.964322][T12830] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=1043, location=1043
[  335.969100][T12830] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1)
[  336.047788][T12834] loop6: detected capacity change from 0 to 1024
[  336.086958][T12834] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  336.090778][T12834] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  336.109557][T12834] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  336.123409][T12834] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28
[  336.129516][T12834] EXT4-fs (loop6): This should not happen!! Data will be lost
[  336.129516][T12834] 
[  336.133879][T12834] EXT4-fs (loop6): Total free blocks count 0
[  336.140287][T12834] EXT4-fs (loop6): Free/Dirty block details
[  336.142701][T12834] EXT4-fs (loop6): free_blocks=4293918720
[  336.144982][T12834] EXT4-fs (loop6): dirty_blocks=16
[  336.148521][T12834] EXT4-fs (loop6): Block reservation details
[  336.155123][T12834] EXT4-fs (loop6): i_reserved_data_blocks=1
[  336.205179][T12834] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 1: comm syz.6.2467: lblock 1 mapped to illegal pblock 1 (length 15)
[  336.212049][T12834] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117
[  336.251867][T12848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2472'.
[  336.374906][ T5848] logitech 0003:046D:C50C.0011: unknown main item tag 0x0
[  336.378165][ T5848] logitech 0003:046D:C50C.0011: unknown main item tag 0x0
[  336.380945][ T5848] logitech 0003:046D:C50C.0011: unknown main item tag 0x0
[  336.383984][ T5848] logitech 0003:046D:C50C.0011: unknown main item tag 0x0
[  336.387970][ T5848] logitech 0003:046D:C50C.0011: unknown main item tag 0x0
[  336.390682][ T5848] logitech 0003:046D:C50C.0011: unknown main item tag 0x0
[  336.393671][ T5848] logitech 0003:046D:C50C.0011: unknown main item tag 0x0
[  336.400984][ T5848] logitech 0003:046D:C50C.0011: hidraw0: USB HID v0.00 Device [HID 046d:c50c] on usb-dummy_hcd.3-1/input0
[  336.779366][ T5848] usb 4-1: USB disconnect, device number 52
[  337.464056][T12866] loop3: detected capacity change from 0 to 1024
[  337.563391][ T8071] hfsplus: b-tree write err: -5, ino 4
[  337.639352][T12876] netlink: 'syz.3.2485': attribute type 21 has an invalid length.
[  337.642745][T12876] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2485'.
[  337.731112][T12884] loop6: detected capacity change from 0 to 164
[  337.806797][T12884] iso9660: Corrupted directory entry in block 4 of inode 1792
[  338.077990][ T5916] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  338.287204][ T5916] usb 4-1: Using ep0 maxpacket: 8
[  338.303609][ T5916] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  338.311927][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.324557][ T5916] usb 4-1: config 0 descriptor??
[  338.495441][T12896] loop6: detected capacity change from 0 to 32768
[  338.524983][T12896] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  338.545901][ T5916] usb 4-1: string descriptor 0 read error: -71
[  338.552145][ T5916] usb 4-1: Found UVC 0.00 device <unnamed> (2833:0201)
[  338.555082][ T5916] usb 4-1: No valid video chain found.
[  338.562100][T12896] XFS (loop6): Ending clean mount
[  338.570344][ T5916] usb 4-1: USB disconnect, device number 53
[  338.571058][T12896] XFS (loop6): Quotacheck needed: Please wait.
[  338.644246][T12896] XFS (loop6): Quotacheck: Done.
[  338.688493][ T8769] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  338.969199][T12909] netlink: 'syz.6.2496': attribute type 6 has an invalid length.
[  339.839770][T12915] loop3: detected capacity change from 0 to 4096
[  339.844809][T12915] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  340.611848][T12917] loop3: detected capacity change from 0 to 32768
[  340.622555][T12917] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section replicas_v0: no devices in entry sb: 1/0 []
[  340.622555][T12917] replicas_v0 (size 24):
[  340.622555][T12917] btree: 2 [0 2] sb: 0 [] user: 1 [0]
[  340.622555][T12917] 
[  340.655699][T12917] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  340.800832][T12929] loop6: detected capacity change from 0 to 512
[  340.810396][T12929] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  340.849019][T12929] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.2504: iget: bad extended attribute block 851968
[  340.854657][T12929] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2504: couldn't read orphan inode 15 (err -117)
[  340.868202][T12929] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  340.895687][ T8769] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.282865][T12944] loop3: detected capacity change from 0 to 4096
[  341.298242][T12944] ntfs3: Unknown parameter '0xffffffffffffffff18446744073709551615'
[  341.560260][T12954] loop6: detected capacity change from 0 to 1024
[  341.623931][T12954] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  341.828206][T12954] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  342.200259][ T8769] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.551987][T12968] loop3: detected capacity change from 0 to 128
[  343.000031][   T33] audit: type=1804 audit(1755180291.557:153): pid=12986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2528" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=27057 res=1 errno=0
[  343.020914][   T33] audit: type=1804 audit(1755180291.577:154): pid=12986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2528" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=27057 res=1 errno=0
[  343.801548][T13021] could not allocate digest TFM handle sm3
[  344.059530][T13034] loop6: detected capacity change from 0 to 4096
[  344.454657][T13053] loop3: detected capacity change from 0 to 1024
[  344.615516][T13043] loop6: detected capacity change from 0 to 32768
[  344.644204][T13043] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2554 (13043)
[  344.672563][T13043] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  344.681973][T13043] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  344.687482][T13059] loop3: detected capacity change from 0 to 8
[  344.692191][T13043] BTRFS error (device loop6): ignoredatacsums must be used with ro mount option
[  344.694229][T13059] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  344.695852][T13043] BTRFS info (device loop6): using free-space-tree
[  344.714089][T13043] BTRFS error (device loop6): open_ctree failed: -22
[  345.675662][T13064] loop6: detected capacity change from 0 to 32768
[  345.687539][T13064] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2562 (13064)
[  345.697597][T13064] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  345.701148][T13064] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  345.716646][T13064] BTRFS info (device loop6): using free-space-tree
[  345.812603][   T33] audit: type=1800 audit(1755180294.367:155): pid=13064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2562" name="file1" dev="loop6" ino=260 res=0 errno=0
[  345.860252][T13088] sctp: [Deprecated]: syz.3.2567 (pid 13088) Use of int in max_burst socket option deprecated.
[  345.860252][T13088] Use struct sctp_assoc_value instead
[  346.114495][ T8769] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  346.526320][T13115] binder: 13114:13115 ioctl c018620b 0 returned -14
[  346.795123][T13125] loop6: detected capacity change from 0 to 512
[  346.801104][T13124] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  347.155703][T13143] loop3: detected capacity change from 0 to 1764
[  347.239890][T13147] netlink: set zone limit has 4 unknown bytes
[  347.282746][T13151] loop9: detected capacity change from 0 to 3
[  347.328605][T13153] loop6: detected capacity change from 0 to 256
[  347.426891][ T5848] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  347.433678][T13157] netlink: 'syz.6.2598': attribute type 2 has an invalid length.
[  347.437050][T13157] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2598'.
[  347.585878][ T5848] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  347.590273][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.614612][ T5848] usb 4-1: config 0 descriptor??
[  347.620105][ T5848] cp210x 4-1:0.0: cp210x converter detected
[  347.778794][T13165] loop6: detected capacity change from 0 to 32768
[  347.784619][T13165] bcachefs (/dev/loop6): error validating superblock: Invalid option invalid compression opt 240
[  347.789386][T13165] bcachefs: bch2_fs_get_tree() error: invalid_sb_opt_compression
[  348.029033][ T5848] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  348.043311][ T5848] usb 4-1: cp210x converter now attached to ttyUSB0
[  348.234879][ T5848] usb 4-1: USB disconnect, device number 54
[  348.242381][ T5848] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  348.250652][ T5848] cp210x 4-1:0.0: device disconnected
[  349.092710][T13189] loop3: detected capacity change from 0 to 32768
[  349.096611][T13189] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2614 (13189)
[  349.236783][T13189] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  349.245687][T13189] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  349.253777][T13189] BTRFS info (device loop3): using free-space-tree
[  349.620819][T13189] BTRFS info (device loop3): rebuilding free space tree
[  349.754256][ T6289] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  349.911082][T13221] pimreg0: tun_chr_ioctl cmd 1074812117
[  350.565581][T13235] loop3: detected capacity change from 0 to 32768
[  350.606076][T13235] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt
[  350.606076][T13235] 
[  350.620495][T13235] xtLookup: xtSearch returned -5
[  350.630762][T13235] free_index: error reading directory table
[  350.641046][T13235] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt
[  350.641046][T13235] 
[  350.645657][T13235] xtLookup: xtSearch returned -5
[  350.648024][T13235] free_index: error reading directory table
[  350.650763][T13235] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt
[  350.650763][T13235] 
[  350.655012][T13235] xtLookup: xtSearch returned -5
[  350.657326][T13235] free_index: error reading directory table
[  350.661225][T13244] netlink: 'syz.4.2628': attribute type 1 has an invalid length.
[  351.067346][ T5902] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  351.104773][T13253] loop6: detected capacity change from 0 to 2048
[  351.112582][T13253] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  351.123912][ T5860] udevd[5860]: incorrect nilfs2 checksum on /dev/loop6
[  351.135669][ T5860] udevd[5860]: incorrect nilfs2 checksum on /dev/loop6
[  351.227501][ T5902] usb 4-1: Using ep0 maxpacket: 16
[  351.243031][ T5902] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  351.251646][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  351.255998][ T5902] usb 4-1: Product: syz
[  351.259177][ T5902] usb 4-1: Manufacturer: syz
[  351.261122][ T5902] usb 4-1: SerialNumber: syz
[  351.267048][ T5902] usb 4-1: config 0 descriptor??
[  351.376397][T13259] loop6: detected capacity change from 0 to 1024
[  351.383402][T13259] EXT4-fs: Ignoring removed nobh option
[  351.392329][T13259] EXT4-fs: Ignoring removed bh option
[  351.433210][T13259] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  351.487135][   T95] usb 4-1: USB disconnect, device number 55
[  352.125969][T13270] loop3: detected capacity change from 0 to 512
[  352.130186][T13270] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  352.137160][T13270] EXT4-fs (loop3): 1 truncate cleaned up
[  352.158436][T13270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  352.170089][T13270] EXT4-fs error (device loop3): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.3.2638: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  352.179273][T13270] EXT4-fs (loop3): Remounting filesystem read-only
[  352.182280][T13270] EXT4-fs warning (device loop3): ext4_rename_delete:3735: inode #2: comm syz.3.2638: Deleting old file: nlink 4, error=-117
[  352.217624][ T6289] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.295357][ T8769] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.296720][T13273] loop3: detected capacity change from 0 to 256
[  352.317045][T13273] FAT-fs (loop3): Directory bread(block 64) failed
[  352.320158][T13273] FAT-fs (loop3): Directory bread(block 65) failed
[  352.322852][T13273] FAT-fs (loop3): Directory bread(block 66) failed
[  352.325414][T13273] FAT-fs (loop3): Directory bread(block 67) failed
[  352.329050][T13273] FAT-fs (loop3): Directory bread(block 68) failed
[  352.347957][T13273] FAT-fs (loop3): Directory bread(block 69) failed
[  352.350668][T13273] FAT-fs (loop3): Directory bread(block 70) failed
[  352.353172][T13273] FAT-fs (loop3): Directory bread(block 71) failed
[  352.355830][T13273] FAT-fs (loop3): Directory bread(block 72) failed
[  352.371255][T13273] FAT-fs (loop3): Directory bread(block 73) failed
[  352.469333][T13277] loop6: detected capacity change from 0 to 2048
[  352.473982][T13277] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  352.479824][T13277] EXT4-fs (loop6): group descriptors corrupted!
[  352.598869][T13282] loop6: detected capacity change from 0 to 1024
[  352.627871][T13282] EXT4-fs (loop6): Can't support bigalloc feature without extents feature
[  352.627871][T13282] 
[  352.632117][T13282] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities
[  353.027673][   T95] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  353.184273][   T95] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  353.189337][   T95] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  353.194174][   T95] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  353.197936][   T95] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  353.201409][   T95] usb 4-1: SerialNumber: syz
[  353.424280][   T95] usb 4-1: 0:2 : does not exist
[  353.449041][   T95] usb 4-1: USB disconnect, device number 56
[  353.463469][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  354.508883][T13336] loop3: detected capacity change from 0 to 2048
[  354.521902][T13336] EXT4-fs (loop3): #clusters per group too big: 32768
[  357.355773][T13398] loop3: detected capacity change from 0 to 32768
[  357.368882][T13398] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section replicas: no devices in entry sb: 33/0 []
[  357.368882][T13398] replicas (size 24):
[  357.368882][T13398] btree: 0/1 [2] sb: 33/0 [] (unknown data_type 144): 56/184 [0 0 0 0 0 0 108 1 0 0 6 0 0 0 0 0 0 0 0 0 0 0 10 0 0 0 0 0 0 0 1 0 1 0 5 0 0 0 8 0 0 0 0 0 0 0 1 0 2 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 2 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 3 5 0 0 0 0 0 0 0 0 0 0 0 2 0 0 0 6 0 0 0 0 11 0 0 0 0 0 0 3 1 1 0 0 0 0 0 2 0 0 0 6 0 0 0 0 0 0 0 0 0 0 0 2 1 1 0 0 0 0 0 2 0 0 0 6 0 0 0 16 0]
[  357.368882][T13398] 
[  357.452969][T13398] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  357.571722][T13408] netlink: 'syz.3.2700': attribute type 1 has an invalid length.
[  357.574851][T13408] netlink: 'syz.3.2700': attribute type 1 has an invalid length.
[  357.580739][T13408] netlink: 'syz.3.2700': attribute type 1 has an invalid length.
[  357.583843][T13408] netlink: 'syz.3.2700': attribute type 1 has an invalid length.
[  357.587089][T13408] netlink: 'syz.3.2700': attribute type 1 has an invalid length.
[  357.591213][T13408] netlink: 'syz.3.2700': attribute type 1 has an invalid length.
[  357.594793][T13408] netlink: 'syz.3.2700': attribute type 1 has an invalid length.
[  357.597789][T13408] netlink: 'syz.3.2700': attribute type 1 has an invalid length.
[  357.602914][T13408] netlink: 'syz.3.2700': attribute type 1 has an invalid length.
[  357.605972][T13408] netlink: 'syz.3.2700': attribute type 1 has an invalid length.
[  357.778956][T13414] loop3: detected capacity change from 0 to 512
[  357.782566][T13414] EXT4-fs (loop3): Test dummy encryption mode enabled
[  357.787013][T13414] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  357.791448][T13414] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  357.794845][T13414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  357.841637][ T6289] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.327416][T13433] loop3: detected capacity change from 0 to 32768
[  358.382392][T13433] JBD2: Ignoring recovery information on journal
[  358.416903][T13433] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  358.451487][T13433] 
[  358.452350][T13433] ======================================================
[  358.455161][T13433] WARNING: possible circular locking dependency detected
[  358.457681][T13433] 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 Not tainted
[  358.460870][T13433] ------------------------------------------------------
[  358.464191][T13433] syz.3.2712/13433 is trying to acquire lock:
[  358.466554][T13433] ffff888035d6c0f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2f9/0x720
[  358.469676][T13433] 
[  358.469676][T13433] but task is already holding lock:
[  358.472133][T13433] ffff88802268c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  358.475419][T13433] 
[  358.475419][T13433] which lock already depends on the new lock.
[  358.475419][T13433] 
[  358.479486][T13433] 
[  358.479486][T13433] the existing dependency chain (in reverse order) is:
[  358.483018][T13433] 
[  358.483018][T13433] -> #4 (jbd2_handle){++++}-{0:0}:
[  358.486149][T13433]        lock_acquire+0x120/0x360
[  358.488219][T13433]        start_this_handle+0x1fa7/0x21c0
[  358.490456][T13433]        jbd2__journal_start+0x2c1/0x5b0
[  358.492647][T13433]        jbd2_journal_start+0x2a/0x40
[  358.494777][T13433]        ocfs2_start_trans+0x376/0x6d0
[  358.496943][T13433]        ocfs2_mknod+0xe93/0x2050
[  358.498957][T13433]        ocfs2_create+0x1a5/0x440
[  358.500959][T13433]        path_openat+0x14f4/0x3830
[  358.502993][T13433]        do_filp_open+0x1fa/0x410
[  358.505081][T13433]        do_sys_openat2+0x121/0x1c0
[  358.507228][T13433]        __x64_sys_open+0x11e/0x150
[  358.509159][T13433]        do_syscall_64+0xfa/0x3b0
[  358.510772][T13433]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.513071][T13433] 
[  358.513071][T13433] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  358.515896][T13433]        lock_acquire+0x120/0x360
[  358.517616][T13433]        down_read+0x46/0x2e0
[  358.519206][T13433]        ocfs2_start_trans+0x36a/0x6d0
[  358.520907][T13433]        ocfs2_mknod+0xe93/0x2050
[  358.522527][T13433]        ocfs2_create+0x1a5/0x440
[  358.524436][T13433]        path_openat+0x14f4/0x3830
[  358.526267][T13433]        do_filp_open+0x1fa/0x410
[  358.527877][T13433]        do_sys_openat2+0x121/0x1c0
[  358.529881][T13433]        __x64_sys_open+0x11e/0x150
[  358.531693][T13433]        do_syscall_64+0xfa/0x3b0
[  358.533264][T13433]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.535247][T13433] 
[  358.535247][T13433] -> #2 (sb_internal#2){.+.+}-{0:0}:
[  358.538210][T13433]        lock_acquire+0x120/0x360
[  358.540190][T13433]        ocfs2_start_trans+0x26b/0x6d0
[  358.542229][T13433]        ocfs2_setattr+0x103e/0x1b40
[  358.543892][T13433]        notify_change+0xb36/0xe40
[  358.545758][T13433]        chown_common+0x40c/0x5c0
[  358.547761][T13433]        do_fchownat+0x161/0x270
[  358.549762][T13433]        __x64_sys_lchown+0x85/0xa0
[  358.551829][T13433]        do_syscall_64+0xfa/0x3b0
[  358.553816][T13433]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.555857][T13433] 
[  358.555857][T13433] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  358.558560][T13433]        lock_acquire+0x120/0x360
[  358.560134][T13433]        down_write+0x96/0x1f0
[  358.561641][T13433]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[  358.563875][T13433]        ocfs2_xattr_set+0x595/0x11f0
[  358.565808][T13433]        ocfs2_set_acl+0x701/0x7b0
[  358.567830][T13433]        ocfs2_iop_set_acl+0x1aa/0x2a0
[  358.569786][T13433]        vfs_set_acl+0x887/0xb00
[  358.571230][T13433]        filename_setxattr+0x2e0/0x600
[  358.572939][T13433]        path_setxattrat+0x364/0x3a0
[  358.574607][T13433]        __x64_sys_setxattr+0xbc/0xe0
[  358.576290][T13433]        do_syscall_64+0xfa/0x3b0
[  358.577861][T13433]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.579868][T13433] 
[  358.579868][T13433] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}:
[  358.582508][T13433]        validate_chain+0xb9b/0x2140
[  358.584156][T13433]        __lock_acquire+0xab9/0xd20
[  358.586204][T13433]        lock_acquire+0x120/0x360
[  358.588204][T13433]        down_read+0x46/0x2e0
[  358.590080][T13433]        ocfs2_init_acl+0x2f9/0x720
[  358.591927][T13433]        ocfs2_mknod+0x1321/0x2050
[  358.593856][T13433]        ocfs2_create+0x1a5/0x440
[  358.595650][T13433]        path_openat+0x14f4/0x3830
[  358.597484][T13433]        do_filp_open+0x1fa/0x410
[  358.599396][T13433]        do_sys_openat2+0x121/0x1c0
[  358.601273][T13433]        __x64_sys_openat+0x138/0x170
[  358.603172][T13433]        do_syscall_64+0xfa/0x3b0
[  358.604999][T13433]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.607296][T13433] 
[  358.607296][T13433] other info that might help us debug this:
[  358.607296][T13433] 
[  358.611195][T13433] Chain exists of:
[  358.611195][T13433]   &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle
[  358.611195][T13433] 
[  358.616665][T13433]  Possible unsafe locking scenario:
[  358.616665][T13433] 
[  358.619181][T13433]        CPU0                    CPU1
[  358.620937][T13433]        ----                    ----
[  358.622879][T13433]   rlock(jbd2_handle);
[  358.624540][T13433]                                lock(&journal->j_trans_barrier);
[  358.627609][T13433]                                lock(jbd2_handle);
[  358.630254][T13433]   rlock(&oi->ip_xattr_sem);
[  358.632170][T13433] 
[  358.632170][T13433]  *** DEADLOCK ***
[  358.632170][T13433] 
[  358.635244][T13433] 8 locks held by syz.3.2712/13433:
[  358.637335][T13433]  #0: ffff888119868428 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  358.640897][T13433]  #1: ffff888035d6c3c0 (&type->i_mutex_dir_key#10){++++}-{4:4}, at: path_openat+0x8da/0x3830
[  358.644445][T13433]  #2: ffff88802bde3540 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  358.648788][T13433]  #3: ffff888035d689c0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  358.653569][T13433]  #4: ffff888035d6b540 (&ocfs2_sysfile_lock_key[GLOBAL_BITMAP_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  358.659130][T13433]  #5: ffff888119868618 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_mknod+0xe93/0x2050
[  358.662808][T13433]  #6: ffff88803d177ce8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x36a/0x6d0
[  358.667009][T13433]  #7: ffff88802268c950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  358.670533][T13433] 
[  358.670533][T13433] stack backtrace:
[  358.672805][T13433] CPU: 1 UID: 0 PID: 13433 Comm: syz.3.2712 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  358.672825][T13433] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  358.672837][T13433] Call Trace:
[  358.672844][T13433]  <TASK>
[  358.672854][T13433]  dump_stack_lvl+0x189/0x250
[  358.672878][T13433]  ? __pfx_dump_stack_lvl+0x10/0x10
[  358.672889][T13433]  ? __pfx__printk+0x10/0x10
[  358.672903][T13433]  ? stack_trace_save+0x9c/0xe0
[  358.672917][T13433]  print_circular_bug+0x2ee/0x310
[  358.672928][T13433]  check_noncircular+0x134/0x160
[  358.672937][T13433]  validate_chain+0xb9b/0x2140
[  358.672949][T13433]  __lock_acquire+0xab9/0xd20
[  358.672975][T13433]  ? ocfs2_init_acl+0x2f9/0x720
[  358.672990][T13433]  lock_acquire+0x120/0x360
[  358.673006][T13433]  ? ocfs2_init_acl+0x2f9/0x720
[  358.673021][T13433]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  358.673042][T13433]  down_read+0x46/0x2e0
[  358.673064][T13433]  ? ocfs2_init_acl+0x2f9/0x720
[  358.673080][T13433]  ocfs2_init_acl+0x2f9/0x720
[  358.673092][T13433]  ? ocfs2_mknod_locked+0x148/0x250
[  358.673129][T13433]  ? __pfx_ocfs2_init_acl+0x10/0x10
[  358.673147][T13433]  ? dquot_alloc_inode+0x216/0xa50
[  358.673163][T13433]  ? ocfs2_block_signals+0x94/0xe0
[  358.673189][T13433]  ? __pfx_ocfs2_block_signals+0x10/0x10
[  358.673208][T13433]  ? ocfs2_init_security_get+0x139/0x1a0
[  358.673223][T13433]  ocfs2_mknod+0x1321/0x2050
[  358.673238][T13433]  ? __pfx_ocfs2_mknod+0x10/0x10
[  358.673250][T13433]  ? __pfx_ocfs2_find_entry+0x10/0x10
[  358.673267][T13433]  ? __lock_acquire+0xab9/0xd20
[  358.673287][T13433]  ? look_up_lock_class+0x74/0x170
[  358.673302][T13433]  ? register_lock_class+0x51/0x320
[  358.673322][T13433]  ? __lock_acquire+0xab9/0xd20
[  358.673341][T13433]  ? __lock_acquire+0xab9/0xd20
[  358.673357][T13433]  ? do_raw_spin_lock+0x121/0x290
[  358.673372][T13433]  ? do_raw_spin_unlock+0x4d/0x240
[  358.673386][T13433]  ? rcu_is_watching+0x15/0xb0
[  358.673398][T13433]  ? ocfs2_lookup+0x5b9/0x9b0
[  358.673411][T13433]  ocfs2_create+0x1a5/0x440
[  358.673424][T13433]  ? __pfx_ocfs2_lookup+0x10/0x10
[  358.673435][T13433]  ? from_kgid+0x1b0/0x650
[  358.673452][T13433]  ? __pfx_ocfs2_create+0x10/0x10
[  358.673465][T13433]  ? HAS_UNMAPPED_ID+0x11a/0x180
[  358.673480][T13433]  ? inode_permission+0x149/0x470
[  358.673492][T13433]  ? __pfx_ocfs2_permission+0x10/0x10
[  358.673512][T13433]  ? bpf_lsm_inode_create+0x9/0x20
[  358.673529][T13433]  ? __pfx_ocfs2_create+0x10/0x10
[  358.673539][T13433]  path_openat+0x14f4/0x3830
[  358.673551][T13433]  ? arch_stack_walk+0xfc/0x150
[  358.673566][T13433]  ? __pfx_path_openat+0x10/0x10
[  358.673574][T13433]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.673586][T13433]  do_filp_open+0x1fa/0x410
[  358.673597][T13433]  ? __lock_acquire+0xab9/0xd20
[  358.673609][T13433]  ? __pfx_do_filp_open+0x10/0x10
[  358.673622][T13433]  ? _raw_spin_unlock+0x28/0x50
[  358.673632][T13433]  ? alloc_fd+0x64c/0x6c0
[  358.673647][T13433]  do_sys_openat2+0x121/0x1c0
[  358.673655][T13433]  ? __se_sys_futex+0x36f/0x400
[  358.673667][T13433]  ? __pfx_do_sys_openat2+0x10/0x10
[  358.673677][T13433]  ? rcu_is_watching+0x15/0xb0
[  358.673685][T13433]  __x64_sys_openat+0x138/0x170
[  358.673694][T13433]  do_syscall_64+0xfa/0x3b0
[  358.673704][T13433]  ? lockdep_hardirqs_on+0x9c/0x150
[  358.673714][T13433]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.673721][T13433]  ? exc_page_fault+0x9f/0xf0
[  358.673730][T13433]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.673738][T13433] RIP: 0033:0x7f8f1ed8ebe9
[  358.673749][T13433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  358.673759][T13433] RSP: 002b:00007f8f1fbe8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  358.673769][T13433] RAX: ffffffffffffffda RBX: 00007f8f1efb5fa0 RCX: 00007f8f1ed8ebe9
[  358.673775][T13433] RDX: 000000000000275a RSI: 00002000000002c0 RDI: ffffffffffffff9c
[  358.673782][T13433] RBP: 00007f8f1ee11e19 R08: 0000000000000000 R09: 0000000000000000
[  358.673787][T13433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  358.673792][T13433] R13: 00007f8f1efb6038 R14: 00007f8f1efb5fa0 R15: 00007ffd3c8d02c8
[  358.673802][T13433]  </TASK>
[  358.866619][ T6289] ocfs2: Unmounting device (7,3) on (node local)

VM DIAGNOSIS:
14:01:29  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b44d4b RBX=1ffff11026cc7f61 RCX=0000000000080000 RDX=ffffc90009d89000
RSI=00000000000654fb RDI=00000000000654fc RBP=ffffc90006a47720 RSP=ffffc90006a475a0
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b44d33 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f98adbf66c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555557708808 CR3=000000010f9ea000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f98afb87498 00007f98afb87470 XMM03=00007f98afb874a8 00007f98afb874a0
XMM04=00007f98b06ed100 00007f98afb87460 XMM05=00007f98afb87478 00007f98afb874c0
XMM06=00007f98afb874b8 00007f98afb874b0 XMM07=00007f98afb874a8 00007f98afb874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f98afa12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000292b RDI=000000000000292c RBP=00000000000003f8 RSP=ffffc90006a968f0
R8 =ffff888106bb0237 R9 =1ffff11020d76046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98e4 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8f1fbe86c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2ef23ffc CR3=000000010f160000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f98afb87498 00007f98afb87470 XMM03=00007f98afb874a8 00007f98afb874a0
XMM04=00007f98b06ed100 00007f98afb87460 XMM05=00007f98afb87478 00007f98afb874c0
XMM06=00007f98afb874b8 00007f98afb874b0 XMM07=00007f98afb874a8 00007f98afb874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f98afa12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
