last executing test programs:

12.79216195s ago: executing program 1 (id=506):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

11.82204538s ago: executing program 1 (id=510):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000040)={[{@block={'block', 0x3d, 0x600}}, {@iocharset={'iocharset', 0x3d, 'cp874'}}]}, 0x1, 0xa15, &(0x7f0000000300)="$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")

11.290899811s ago: executing program 1 (id=512):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004810}, 0x48d4)

11.201108996s ago: executing program 1 (id=514):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file2\x00', 0x4080, &(0x7f0000000440)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESHEX], 0x2, 0xc36, &(0x7f0000002540)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
sendfile(r1, r0, 0x0, 0x80000000)

10.980296315s ago: executing program 1 (id=516):
r0 = socket$nl_route(0x10, 0x3, 0x0)
link(0x0, &(0x7f00000001c0)='./file0\x00')
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000140012800c0001006d6163766c616e0095e5028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n'], 0x44}}, 0x0)

10.441529411s ago: executing program 1 (id=526):
openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)

10.243828444s ago: executing program 32 (id=526):
openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)

1.357769214s ago: executing program 2 (id=597):
unshare(0x2a020400)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r0, &(0x7f00000004c0)="8194a713fb8c07ebb9423607c5f31bac76782fda07131ee74eea61f546fbc38871007784afee543ea273048d1cdc567c0d8a0804cac96f9fe04e4f2feaa50984316b96a25c8863673ab7fd740cfd1ef4d91b7535e45ec09c7ff35914ff90aa735479203992035126d1c3699e499da41ce16fd6ff9a6dbd748d744ceb4fa44e0a76585af65f15", 0x2e, 0x4004000, &(0x7f0000000100)={0xa, 0x3, 0x5ff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x81}, 0xffffffffffffffcb)

1.349885823s ago: executing program 2 (id=598):
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)="390000fa461ad7e48489bffa56020013f811186809", 0x15}], 0x1)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
setreuid(0x0, 0xee00)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0])

1.251179879s ago: executing program 2 (id=599):
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)

1.198761239s ago: executing program 2 (id=600):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x52, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(0xffffffffffffffff, 0x0, 0x0)
fchdir(r3)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101242, 0x0)
io_submit(r4, 0x1, &(0x7f0000000200)=[&(0x7f0000000280)={0xffffff7f00000000, 0x0, 0x0, 0x1, 0xfffd, r5, 0x0, 0x300, 0x4400a03}])
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
socket(0x200000000000011, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)={0x38, r8, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0xc000)
sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x20, r8, 0x1, 0x70bd21, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2805}, 0x80)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

836.363791ms ago: executing program 3 (id=601):
r0 = socket$inet6(0xa, 0x3, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x16}, {0x0, 0x0, 0x0, 0x0, 0x8001, 0x3}, {0x4fc, 0x2000, 0x401}, 0x0, 0x1, 0x1, 0x1}, {{@in=@empty, 0x4d6, 0x3c}, 0x2, @in6=@private2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x1}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

745.27983ms ago: executing program 0 (id=602):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
write$nbd(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="01"], 0x40)

588.850445ms ago: executing program 0 (id=603):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x1c)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
preadv2(r1, 0x0, 0x0, 0x10001, 0x1000001, 0x5)

478.366656ms ago: executing program 0 (id=604):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48)

475.392845ms ago: executing program 0 (id=605):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x400, 0x0)

388.510298ms ago: executing program 0 (id=606):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xd}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0)

320.957359ms ago: executing program 3 (id=607):
r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
readv(r0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/45, 0x2d}], 0x1)

320.721773ms ago: executing program 0 (id=608):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x1, 0x4)
sendmmsg$inet_sctp(r0, &(0x7f0000003780)=[{&(0x7f0000000bc0)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000c00)="9f", 0x1}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0xc044)
recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000000)

250.909406ms ago: executing program 3 (id=609):
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0)
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r1, r0, 0x0, 0x3a)

250.638035ms ago: executing program 2 (id=610):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000640)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0xdc2, 0x4, 0x0, 0x10}, {0xffffffff, 0x0, 0xee, 0x0, 0x0, 0x200}]})

159.611126ms ago: executing program 3 (id=611):
mkdir(&(0x7f00000000c0)='./file0\x00', 0x88)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x48088, 0x0)

79.710555ms ago: executing program 2 (id=612):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000004480)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3+5159pnD8MSJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAud/2MBAAAAAAAAAAAAAAAAAADgb2rz/f9cdKLJ+/9jyXGkRf31tzo/Rjpn4u2rYxcGh5L936Nt+a8nSb+c6wr9TfZ9z+7/fi5Tv/n+79v72a3G+Br99oUoHkidx/HAQAjfJBu/n4qOxKXyUuXVW+Xlhdk9G8YzKx3/+u79qegkG/q3G//RTPud3///v9uupur5zb27xJ5r6fh3tSz37adRW/E/n6m3H/Fn99Lx766l9W4tMFKfAKrx/7x75/iPZdrvVPyPhxByUXWsudQMUF3DVNNbrVdIS8f/UC0tNXUmH2Sr+//3TPwvZNo/qPl/JftFRFPp+P+rltaTKrF5//fHO9//FzPtH0T8q+Nf8f3flnT8D9cTu1NFap9ku/P/eKb9TsX/epyM83iUugJWo3p6q/9XR1o6/j3b8jef/+K21n+XMvX36/mv0W/j+a8x/b8c1Z//aC4d/96W5dq9/ycy9To9/4/U1n/sVjr+R2pp6bVzX+1nu/GfzLTfqfjXViU9jfhvzid/HK6nf23915Z0/P9dT4y3llip/ayt/6Kd1/+XM+0fxPqvOv6VuLO9Pi/S8T/aslw1/j+08f1/JVOv8/EPYdBaf9fS8T/Wslzt/u/ZOf5TmXqdjv9LnWwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Bkwmhz7QhQPpM7jeGAghPPJ+alwJJouzOanS+WZj5ZCGEvSc+FEdLtUni6U8nML5dlivlAqlWdCuJDknww90VKpXMnPF+5e3GirN7pTLCxWpouFSghhPEn/fzjWaGt6rjJfuBtCuLSR95+4vHj3TmEhPzu3+Obg4OBgmNgYQ39U/KRSXKjUe6/nhjC5Ubcv2jK4WvbljbEcjT4sLy8uFEq19Ctb6pTKM4XSljpTSd4XoT+qLC4vzBQqxXypfLvR30EaSY5jE9feu3ZlaFv+zah+HN3fYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFz0afuPLEEJ3/SwOIYw0fomalX/4uHg2/3Tq/trw6cnVB2tPWpUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JMdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NIxSgNBFAbgN2Ohdh7DatntbFcU0cIVwRPoMTyMHsVLeIcUKdKmCIFkFsJmF7ZJqu9rHszPzHswDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHme3ruPt7qJSHG1uYz4+/pfHOYvpf7cj9+/OMOMnM7za/fwWDfl39NRfleOlm3epevV92eM1N7vYE+G+7TX97menGtq36bm6/veRMpVRLQlv005V9W8twAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgyw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRR9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD///4CHxA=")
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20)
pwritev2(r0, &(0x7f0000000cc0)=[{&(0x7f0000000240)='_', 0x1}], 0x1, 0xfff, 0xc, 0x4)
copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xa00, 0xa00, 0x0)

79.396596ms ago: executing program 3 (id=613):
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
socket$nl_route(0x10, 0x3, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/65, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
r3 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000580)=0x1)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)

0s ago: executing program 3 (id=614):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x6)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
socket(0x2b, 0x1, 0x1)
listen(r1, 0x5)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:46715' (ED25519) to the list of known hosts.
syzkaller login: [   56.443815][ T5830] cgroup: Unknown subsys name 'net'
[   56.590008][ T5830] cgroup: Unknown subsys name 'cpuset'
[   56.594114][ T5830] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.545245][ T5830] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   63.696276][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   63.701646][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   63.704780][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   63.725892][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   63.728864][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   63.733727][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   63.736736][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   63.736913][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   63.740776][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   63.745642][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   63.745718][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   63.751834][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   63.754451][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   63.759862][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   63.762732][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   64.065849][ T5851] chnl_net:caif_netlink_parms(): no params data found
[   64.074203][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   64.182519][ T5855] chnl_net:caif_netlink_parms(): no params data found
[   64.266047][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.269940][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.272285][ T5851] bridge_slave_0: entered allmulticast mode
[   64.275438][ T5851] bridge_slave_0: entered promiscuous mode
[   64.284346][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.287029][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.290422][ T5847] bridge_slave_0: entered allmulticast mode
[   64.293636][ T5847] bridge_slave_0: entered promiscuous mode
[   64.298538][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.301303][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.304196][ T5851] bridge_slave_1: entered allmulticast mode
[   64.308602][ T5851] bridge_slave_1: entered promiscuous mode
[   64.321336][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.324157][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.326877][ T5847] bridge_slave_1: entered allmulticast mode
[   64.330680][ T5847] bridge_slave_1: entered promiscuous mode
[   64.376662][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.381722][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.394077][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.396342][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.402191][ T5855] bridge_slave_0: entered allmulticast mode
[   64.406057][ T5855] bridge_slave_0: entered promiscuous mode
[   64.411143][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.414076][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.417017][ T5855] bridge_slave_1: entered allmulticast mode
[   64.420990][ T5855] bridge_slave_1: entered promiscuous mode
[   64.465740][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.471204][ T5851] team0: Port device team_slave_0 added
[   64.476047][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.494915][ T5851] team0: Port device team_slave_1 added
[   64.538527][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.556495][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.562278][ T5847] team0: Port device team_slave_0 added
[   64.565715][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.568788][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.579063][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.611905][ T5847] team0: Port device team_slave_1 added
[   64.616253][ T5855] team0: Port device team_slave_0 added
[   64.619812][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.622529][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.634555][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.662230][ T5855] team0: Port device team_slave_1 added
[   64.669609][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.672354][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.683271][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.716745][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.719753][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.730403][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.742585][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.745142][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.754772][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.784314][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.787277][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.797734][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.808724][ T5851] hsr_slave_0: entered promiscuous mode
[   64.811831][ T5851] hsr_slave_1: entered promiscuous mode
[   64.903735][ T5847] hsr_slave_0: entered promiscuous mode
[   64.906903][ T5847] hsr_slave_1: entered promiscuous mode
[   64.910704][ T5847] debugfs: 'hsr0' already exists in 'hsr'
[   64.913147][ T5847] Cannot create hsr debugfs directory
[   64.942074][ T5855] hsr_slave_0: entered promiscuous mode
[   64.945106][ T5855] hsr_slave_1: entered promiscuous mode
[   64.949077][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   64.951356][ T5855] Cannot create hsr debugfs directory
[   65.287028][ T5851] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   65.298609][ T5851] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   65.305260][ T5851] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   65.318974][ T5851] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   65.352754][ T5847] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.370829][ T5847] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.379120][ T5847] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.385186][ T5847] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.427497][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.433270][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.448302][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.453812][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.552159][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.572756][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.593953][ T5851] 8021q: adding VLAN 0 to HW filter on device team0
[   65.610481][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   65.617376][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.619807][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.630819][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.633164][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.645153][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.647538][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.656756][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.659606][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.696671][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.743058][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   65.761496][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.764274][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.771847][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.774809][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.819564][ T5854] Bluetooth: hci1: command tx timeout
[   65.830536][ T5854] Bluetooth: hci2: command tx timeout
[   65.832920][ T5854] Bluetooth: hci0: command tx timeout
[   65.964695][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.021390][ T5851] veth0_vlan: entered promiscuous mode
[   66.042950][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.064081][ T5851] veth1_vlan: entered promiscuous mode
[   66.082672][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.103040][ T5847] veth0_vlan: entered promiscuous mode
[   66.112271][ T5847] veth1_vlan: entered promiscuous mode
[   66.151137][ T5851] veth0_macvtap: entered promiscuous mode
[   66.163405][ T5851] veth1_macvtap: entered promiscuous mode
[   66.178658][ T5847] veth0_macvtap: entered promiscuous mode
[   66.192849][ T5847] veth1_macvtap: entered promiscuous mode
[   66.214986][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.228945][ T5855] veth0_vlan: entered promiscuous mode
[   66.235676][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.249397][ T5855] veth1_vlan: entered promiscuous mode
[   66.254369][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.264189][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.276804][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.283524][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.292001][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.302245][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.318811][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.332016][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.351548][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.355101][ T5855] veth0_macvtap: entered promiscuous mode
[   66.364355][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.375556][ T5855] veth1_macvtap: entered promiscuous mode
[   66.429450][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.463476][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.488880][  T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.491999][  T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.535026][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.540150][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.542939][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.552695][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.573647][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.593048][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.600833][  T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.603893][  T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.644896][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.659804][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.688385][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.704911][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.714880][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   66.768436][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.772460][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.814816][ T5919] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   67.409055][ T5937] loop1: detected capacity change from 0 to 1764
[   67.897369][ T5858] Bluetooth: hci0: command tx timeout
[   67.897493][ T5854] Bluetooth: hci2: command tx timeout
[   67.900181][ T5858] Bluetooth: hci1: command tx timeout
[   68.217284][ T5946] loop0: detected capacity change from 0 to 1024
[   68.222738][ T5946] =======================================================
[   68.222738][ T5946] WARNING: The mand mount option has been deprecated and
[   68.222738][ T5946]          and is ignored by this kernel. Remove the mand
[   68.222738][ T5946]          option from the mount to silence this warning.
[   68.222738][ T5946] =======================================================
[   68.370383][ T1209] hfsplus: b-tree write err: -5, ino 4
[   68.510628][ T5943] loop2: detected capacity change from 0 to 32768
[   68.603420][ T5943] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   68.758757][ T5855] ocfs2: Unmounting device (7,2) on (node local)
[   68.888812][ T5958] capability: warning: `syz.2.16' uses 32-bit capabilities (legacy support in use)
[   69.406364][ T5981] loop2: detected capacity change from 0 to 512
[   69.462506][ T5985] netlink: 'syz.0.28': attribute type 10 has an invalid length.
[   69.472377][ T5981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.476330][ T5988] binder_alloc: 5986: binder_alloc_buf, no vma
[   69.489199][ T5985] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   69.492792][ T5981] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   69.536485][ T5981] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 7: comm syz.2.29: lblock 12 mapped to illegal pblock 7 (length 22)
[   69.565862][ T5981] EXT4-fs (loop2): Remounting filesystem read-only
[   69.606853][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.611100][ T5992] loop0: detected capacity change from 0 to 512
[   69.614285][ T5992] EXT4-fs: Ignoring removed orlov option
[   69.632839][ T5992] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   69.676230][ T5992] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[   69.681655][ T5992] EXT4-fs (loop0): orphan cleanup on readonly fs
[   69.690855][ T5992] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.32: Invalid inode bitmap blk 0 in block_group 0
[   69.712161][ T5992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   69.743264][ T6001] loop2: detected capacity change from 0 to 2048
[   69.751250][ T6001] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   69.865280][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.115277][   T55] Bluetooth: hci1: command tx timeout
[   70.118478][   T55] Bluetooth: hci2: command tx timeout
[   70.121299][   T55] Bluetooth: hci0: command tx timeout
[   70.350556][ T6011] loop0: detected capacity change from 0 to 4096
[   70.840117][ T6026] loop1: detected capacity change from 0 to 8192
[   70.876780][ T6033] loop0: detected capacity change from 0 to 512
[   70.912631][ T6033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.929173][ T6033] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   71.011420][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.030956][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.033589][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.459078][ T6057] loop2: detected capacity change from 0 to 1764
[   71.466626][ T6057] iso9660: Unknown parameter 'check'
[   71.532871][ T6047] loop1: detected capacity change from 0 to 32768
[   71.537992][ T6047] XFS: attr2 mount option is deprecated.
[   71.623412][ T6047] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   71.653517][ T6047] XFS (loop1): Ending clean mount
[   71.664252][ T6047] XFS (loop1): Quotacheck needed: Please wait.
[   71.707902][ T6047] XFS (loop1): Quotacheck: Done.
[   72.030423][ T5851] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   72.047629][   T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   72.148966][ T5858] Bluetooth: hci0: command tx timeout
[   72.149022][   T55] Bluetooth: hci2: command tx timeout
[   72.151322][ T5858] Bluetooth: hci1: command tx timeout
[   72.225297][   T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   72.228380][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.234292][   T10] usb 3-1: config 0 descriptor??
[   72.248078][   T10] cp210x 3-1:0.0: cp210x converter detected
[   72.531090][ T6085] loop1: detected capacity change from 0 to 1024
[   72.568516][ T6085] hfsplus: bad catalog entry type
[   72.589345][ T6089] netlink: 'syz.0.65': attribute type 11 has an invalid length.
[   72.593184][ T6089] netlink: 224 bytes leftover after parsing attributes in process `syz.0.65'.
[   72.604247][   T36] hfsplus: b-tree write err: -5, ino 4
[   72.659146][   T10] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32
[   72.702472][   T10] usb 3-1: cp210x converter now attached to ttyUSB0
[   72.829075][ T6100] loop0: detected capacity change from 0 to 8
[   72.867016][ T6100] SQUASHFS error: Failed to read block 0x2fc: -5
[   72.872400][ T6100] SQUASHFS error: Unable to read metadata cache entry [2fa]
[   72.875916][ T6100] SQUASHFS error: Unable to read inode 0x11f
[   72.894557][   T24] usb 3-1: USB disconnect, device number 2
[   72.909883][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   72.927656][   T24] cp210x 3-1:0.0: device disconnected
[   73.339264][ T6113] loop1: detected capacity change from 0 to 32768
[   73.376883][ T6113] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[   73.393291][ T6113] (syz.1.73,6113,0):ocfs2_read_journal_inode:1659 ERROR: status = -13
[   73.399075][ T6113] (syz.1.73,6113,0):ocfs2_mark_dead_nodes:1942 ERROR: status = -13
[   73.402174][ T6113] (syz.1.73,6113,0):ocfs2_check_volume:2420 ERROR: status = -13
[   73.406182][ T6113] (syz.1.73,6113,0):ocfs2_check_volume:2432 ERROR: status = -13
[   73.422902][ T6113] (syz.1.73,6113,0):ocfs2_mount_volume:1764 ERROR: status = -13
[   73.468777][ T6135] capability: warning: `syz.2.79' uses deprecated v2 capabilities in a way that may be insecure
[   73.492465][ T6113] (syz.1.73,6113,0):ocfs2_fill_super:1177 ERROR: status = -13
[   73.628896][ T6140] loop2: detected capacity change from 0 to 4096
[   73.670205][ T6144] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   73.838171][   T47] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   73.989710][   T47] usb 1-1: config 7 has an invalid interface number: 34 but max is 0
[   73.992989][   T47] usb 1-1: config 7 has no interface number 0
[   73.999741][   T47] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db51, bcdDevice=5e.35
[   74.003315][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.006939][   T47] usb 1-1: Product: syz
[   74.009086][   T47] usb 1-1: Manufacturer: syz
[   74.010926][   T47] usb 1-1: SerialNumber: syz
[   74.027288][ T5315] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   74.113451][ T6157] loop1: detected capacity change from 0 to 32768
[   74.136049][ T6157] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   74.155319][ T6157] XFS (loop1): Ending clean mount
[   74.160234][ T6157] XFS (loop1): Quotacheck needed: Please wait.
[   74.179272][ T6157] XFS (loop1): Quotacheck: Done.
[   74.197227][ T5315] usb 3-1: Using ep0 maxpacket: 8
[   74.211268][ T5851] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   74.211581][ T5315] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[   74.218670][ T5315] usb 3-1: config 0 has no interface number 0
[   74.230664][ T5315] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   74.236005][ T5315] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[   74.245224][   T47] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual USB' in warm state.
[   74.248994][ T5315] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   74.255098][ T5315] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   74.260472][   T47] dvb-usb: bulk message failed: -22 (2/0)
[   74.265918][ T5315] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[   74.270452][   T47] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[   74.274136][ T5315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.283335][   T47] dvb-usb: DViCO FusionHDTV DVB-T Dual USB error while loading driver (-19)
[   74.288439][ T5315] usb 3-1: config 0 descriptor??
[   74.301634][   T47] dvb_usb_cxusb 1-1:7.34: probe with driver dvb_usb_cxusb failed with error -22
[   74.313704][ T5315] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[   74.320712][   T47] usb 1-1: USB disconnect, device number 2
[   74.717319][ T5315] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   74.834130][   T24] usb 3-1: USB disconnect, device number 3
[   74.851009][   T24] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[   74.867522][ T5315] usb 2-1: Using ep0 maxpacket: 8
[   74.872694][ T5315] usb 2-1: config 11 has an invalid interface number: 95 but max is 0
[   74.875511][ T5315] usb 2-1: config 11 has no interface number 0
[   74.878931][ T5315] usb 2-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0
[   74.883129][ T5315] usb 2-1: config 11 interface 95 has no altsetting 0
[   74.889102][ T5315] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d
[   74.891901][ T5315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.903213][ T5315] usb 2-1: Product: syz
[   74.904565][ T5315] usb 2-1: Manufacturer: syz
[   74.906279][ T5315] usb 2-1: SerialNumber: syz
[   75.123690][ T5315] usbtouchscreen 2-1:11.95: probe with driver usbtouchscreen failed with error -8
[   75.138888][ T5315] usb 2-1: USB disconnect, device number 2
[   76.032703][ T6201] loop2: detected capacity change from 0 to 32768
[   76.255702][ T6210] loop1: detected capacity change from 0 to 512
[   76.259172][ T6210] EXT4-fs: Ignoring removed orlov option
[   76.262547][ T6210] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   76.271613][ T6210] EXT4-fs (loop1): orphan cleanup on readonly fs
[   76.281165][ T6210] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.99: bg 0: block 248: padding at end of block bitmap is not set
[   76.309565][ T6210] Quota error (device loop1): write_blk: dquota write failed
[   76.339689][ T6210] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[   76.370704][ T6210] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.99: Failed to acquire dquot type 1
[   76.413271][ T6210] EXT4-fs (loop1): 1 truncate cleaned up
[   76.428082][ T6210] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   76.447690][ T6210] EXT4-fs: Ignoring removed orlov option
[   76.451329][ T6210] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   76.455853][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.100'.
[   76.463631][ T6210] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[   76.487317][ T6210] EXT4-fs error (device loop1): __ext4_remount:6740: comm syz.1.99: Abort forced by user
[   76.492852][ T6210] EXT4-fs (loop1): Remounting filesystem read-only
[   76.495718][ T6210] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   76.499645][ T6210] ext4 filesystem being remounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   76.547168][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.966591][ T6224] loop0: detected capacity change from 0 to 1024
[   76.987334][   T47] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   76.994712][ T6224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   77.000792][ T6224] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.017837][ T6224] syz.0.104 (6224) used greatest stack depth: 19448 bytes left
[   77.035554][   T40] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm kworker/u10:2: lblock 0 mapped to illegal pblock 0 (length 1)
[   77.042906][   T40] EXT4-fs (loop0): Remounting filesystem read-only
[   77.047947][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   77.147167][   T47] usb 2-1: Using ep0 maxpacket: 8
[   77.151487][   T47] usb 2-1: too many endpoints for config 0 interface 0 altsetting 2: 129, using maximum allowed: 30
[   77.155771][   T47] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 136, changing to 11
[   77.160237][   T47] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[   77.165395][   T47] usb 2-1: config 0 interface 0 has no altsetting 0
[   77.168239][   T47] usb 2-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00
[   77.171841][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.178450][   T47] usb 2-1: config 0 descriptor??
[   77.337832][   T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   77.393895][   T47] usbhid 2-1:0.0: can't add hid device: -71
[   77.396475][   T47] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   77.402524][   T47] usb 2-1: USB disconnect, device number 3
[   77.509567][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[   77.513749][   T10] usb 1-1: not running at top speed; connect to a high speed hub
[   77.519235][   T10] usb 1-1: config 6 has an invalid interface number: 7 but max is 0
[   77.522212][   T10] usb 1-1: config 6 has no interface number 0
[   77.524771][   T10] usb 1-1: config 6 interface 7 altsetting 5 endpoint 0xB has invalid maxpacket 43400, setting to 64
[   77.535144][   T10] usb 1-1: config 6 interface 7 has no altsetting 0
[   77.541619][   T10] usb 1-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=c9.92
[   77.546822][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.551479][   T10] usb 1-1: Product: syz
[   77.564514][   T10] usb 1-1: Manufacturer: syz
[   77.566612][   T10] usb 1-1: SerialNumber: syz
[   77.589294][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.106'.
[   77.787919][   T10] usb 1-1: Error in usbnet_get_endpoints (-22)
[   77.798085][   T10] usb 1-1: USB disconnect, device number 3
[   77.917281][   T24] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   78.091403][   T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[   78.099771][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.102440][   T24] usb 3-1: Product: syz
[   78.103699][   T24] usb 3-1: Manufacturer: syz
[   78.116843][   T24] usb 3-1: SerialNumber: syz
[   78.122007][   T24] usb 3-1: config 0 descriptor??
[   78.155183][ T6245] loop1: detected capacity change from 0 to 4096
[   78.163046][ T6245] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   78.183331][ T6245] ntfs3(loop1): ino=1a, mi_enum_attr
[   78.185537][ T6245] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   78.191683][ T6245] ntfs3(loop1): ino=1a, mi_enum_attr
[   78.193895][ T6245] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[   78.272629][ T6247] net veth1_virt_wifi : renamed from virt_wifi0
[   78.345366][   T24] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[   79.193974][   T33] audit: type=1800 audit(1757605108.739:2): pid=6253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.115" name="/" dev="fuse" ino=1 res=0 errno=0
[   79.779512][   T24] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[   79.789927][   T24] usb 3-1: USB disconnect, device number 4
[   80.482361][ T6282] loop0: detected capacity change from 0 to 8
[   80.495391][ T6282] SQUASHFS error: Unable to read inode 0x127
[   80.886058][ T6287] netlink: 'syz.1.128': attribute type 10 has an invalid length.
[   80.905333][ T6287] bond0: (slave bond_slave_0): Releasing backup interface
[   81.001600][ T6295] loop1: detected capacity change from 0 to 1024
[   81.637551][   T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   81.859209][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.862440][   T10] usb 1-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00
[   81.865349][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.878171][   T10] usb 1-1: config 0 descriptor??
[   81.995318][ T6314] loop2: detected capacity change from 0 to 47
[   82.004721][ T6316] binder: 6315:6316 ioctl c018620c 2000000000c0 returned -22
[   82.055089][ T6314] overlayfs: upper fs needs to support d_type.
[   82.073026][ T6314] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   82.075934][ T6314] overlayfs: failed to set xattr on upper
[   82.080010][ T6314] overlayfs: ...falling back to redirect_dir=nofollow.
[   82.082816][ T6314] overlayfs: ...falling back to index=off.
[   82.084979][ T6314] overlayfs: ...falling back to uuid=null.
[   82.323352][   T10] input: HID 28bd:0933 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0933.0001/input/input5
[   82.363197][   T10] uclogic 0003:28BD:0933.0001: input,hidraw0: USB HID v0.01 Mouse [HID 28bd:0933] on usb-dummy_hcd.0-1/input0
[   82.512450][   T10] usb 1-1: USB disconnect, device number 4
[   82.670367][ T6334] loop1: detected capacity change from 0 to 24
[   82.679503][ T6334] MTD: Attempt to mount non-MTD device "/dev/loop1"
[   82.698957][ T6334] romfs: Mounting image 'rom 637cf1fa' through the block layer
[   83.057220][   T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   83.180515][   T55] Bluetooth: hci2: command 0x0405 tx timeout
[   83.186981][ T6342] loop0: detected capacity change from 0 to 4096
[   83.200975][ T6342] EXT4-fs (loop0): Test dummy encryption mode enabled
[   83.204781][ T6342] EXT4-fs (loop0): unsupported descriptor size 255
[   83.222232][   T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   83.233984][   T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   83.336212][ T6344] loop1: detected capacity change from 0 to 256
[   83.343669][ T6344] exfat: Deprecated parameter 'utf8'
[   83.347183][ T6344] exfat: Deprecated parameter 'utf8'
[   83.348954][ T6344] exfat: Deprecated parameter 'utf8'
[   83.363548][ T6344] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[   83.384359][   T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   83.388980][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.395405][ T6330] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   83.405517][   T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[   83.750140][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'.
[   83.755039][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.153'.
[   83.771497][   T24] usb 3-1: USB disconnect, device number 5
[   84.227323][ T5315] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   84.387468][ T5315] usb 2-1: Using ep0 maxpacket: 8
[   84.393903][ T5315] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[   84.403073][ T5315] usb 2-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[   84.411779][ T5315] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   84.415567][ T5315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.608473][ T6378] loop2: detected capacity change from 0 to 2048
[   84.623625][ T6378] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   84.650714][   T24] usb 2-1: USB disconnect, device number 4
[   85.187548][ T6386] loop1: detected capacity change from 0 to 8
[   85.387332][   T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   85.537220][ T5315] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   85.552753][   T10] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[   85.556562][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.563541][   T10] usb 1-1: Product: syz
[   85.565196][   T10] usb 1-1: Manufacturer: syz
[   85.567011][   T10] usb 1-1: SerialNumber: syz
[   85.571507][   T10] usb 1-1: config 0 descriptor??
[   85.580875][   T10] gspca_main: sunplus-2.14.0 probing 055f:c230
[   85.690598][ T5315] usb 2-1: Using ep0 maxpacket: 16
[   85.698350][ T5315] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2
[   85.701411][ T5315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.709843][ T5315] usb 2-1: Product: syz
[   85.711472][ T5315] usb 2-1: Manufacturer: syz
[   85.713132][ T5315] usb 2-1: SerialNumber: syz
[   85.722258][ T5315] usb 2-1: config 0 descriptor??
[   85.727918][ T5315] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[   85.746750][ T5315] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2
[   85.784063][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   85.813801][ T6406] netlink: 160 bytes leftover after parsing attributes in process `syz.2.178'.
[   85.828109][ T6406] netlink: 68 bytes leftover after parsing attributes in process `syz.2.178'.
[   85.934770][ T5315] usb 2-1: USB disconnect, device number 5
[   85.992904][   T47] usb 1-1: USB disconnect, device number 5
[   86.151228][ T6414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.181'.
[   86.292237][ T6420] input: syz0 as /devices/virtual/input/input6
[   86.381797][  T792] cfg80211: failed to load regulatory.db
[   86.563906][ T6432] loop0: detected capacity change from 0 to 2048
[   86.601362][ T6434] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   86.639254][ T6434] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[   86.643578][ T6434] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4)
[   86.653083][ T6434] Remounting filesystem read-only
[   86.655672][ T5847] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[   86.679644][   T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   86.720650][ T6438] nbd: couldn't find device at index 255
[   86.858390][ T5916] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0
[   86.861297][ T5916] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0
[   86.864834][ T5916] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0
[   86.869689][   T10] usb 3-1: Using ep0 maxpacket: 8
[   86.874489][   T10] usb 3-1: config 6 has an invalid interface number: 51 but max is 1
[   86.880639][   T10] usb 3-1: config 6 has no interface number 1
[   86.884522][ T5916] hid-generic 0000:0004:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   86.887994][   T10] usb 3-1: config 6 interface 0 has no altsetting 0
[   86.890062][   T10] usb 3-1: config 6 interface 51 has no altsetting 0
[   86.899125][   T10] usb 3-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad
[   86.902203][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.904633][   T10] usb 3-1: Product: syz
[   86.906051][   T10] usb 3-1: Manufacturer: syz
[   86.909088][   T10] usb 3-1: SerialNumber: syz
[   87.027491][  T973] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   87.131003][   T10] xr_serial 3-1:6.51: xr_serial converter detected
[   87.135095][   T10] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[   87.137652][   T10] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[   87.144729][   T10] usb 3-1: USB disconnect, device number 6
[   87.154593][   T10] xr_serial 3-1:6.0: device disconnected
[   87.200267][  T973] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   87.203534][  T973] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   87.208527][  T973] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   87.211381][  T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   87.214560][  T973] usb 2-1: SerialNumber: syz
[   87.230062][ T6451] loop0: detected capacity change from 0 to 32768
[   87.234202][ T6451] (syz.0.198,6451,1):ocfs2_verify_volume:2303 ERROR: found superblock with bad version: found 9.0, should be 0.90
[   87.239091][ T6451] (syz.0.198,6451,1):ocfs2_verify_volume:2331 ERROR: status = -22
[   87.242096][ T6451] (syz.0.198,6451,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[   87.245530][ T6451] (syz.0.198,6451,1):ocfs2_fill_super:1177 ERROR: status = -22
[   87.401959][ T6455] loop0: detected capacity change from 0 to 2048
[   87.404815][ T6455] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=3932051, location=3932051
[   87.413955][ T6455] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   87.440740][  T973] usb 2-1: 0:2 : does not exist
[   87.463124][  T973] usb 2-1: USB disconnect, device number 6
[   87.733631][ T6463] netlink: 'syz.2.204': attribute type 3 has an invalid length.
[   87.736615][ T6463] netlink: 'syz.2.204': attribute type 16 has an invalid length.
[   87.741751][ T6463] netlink: 132 bytes leftover after parsing attributes in process `syz.2.204'.
[   88.251457][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'.
[   88.255019][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'.
[   88.260218][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'.
[   88.602495][ T6485] batadv_slave_1: entered promiscuous mode
[   88.606284][ T6484] batadv_slave_1: left promiscuous mode
[   88.690914][ T6490] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   88.725775][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'.
[   88.759591][ T6496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.219'.
[   88.815581][ T6496] netlink: 'syz.2.219': attribute type 10 has an invalid length.
[   88.950150][ T6496] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[   89.184306][ T3588] Bluetooth: (null): Invalid header checksum
[   89.187354][   T36] Bluetooth: (null): Invalid header checksum
[   89.203794][ T6506] loop0: detected capacity change from 0 to 32768
[   89.275608][ T6506] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   89.302022][ T6506] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[   89.318067][ T6506] XFS (loop0): Starting recovery (logdev: internal)
[   89.328372][ T6506] XFS (loop0): Ending recovery (logdev: internal)
[   89.358989][ T5847] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   89.480689][ T6524] loop2: detected capacity change from 0 to 32768
[   89.484895][ T6524] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section members_v2: device 0: bucket size 212 smaller than btree node size 256
[   89.484895][ T6524] members_v2 (size 152):
[   89.484895][ T6524] Device:                        0
[   89.484895][ T6524]   Label:                       (none)
[   89.484895][ T6524]   UUID:                        7af6772b-00de-4159-84cd-1faead05aceb
[   89.484895][ T6524]   Size:                        13893632
[   89.484895][ T6524]   read errors:                 0
[   89.484895][ T6524]   write errors:                0
[   89.484895][ T6524]   checksum errors:             0
[   89.484895][ T6524]   seqread iops:                0
[   89.484895][ T6524]   seqwrite iops:               0
[   89.484895][ T6524]   randread iops:               0
[   89.484895][ T6524]   randwrite iops:              0
[   89.484895][ T6524]   Bucket size:                 108544
[   89.484895][ T6524]   First bucket:                0
[   89.484895][ T6524]   Buckets:                     128
[   89.484895][ T6524]   Last mount:                  1714681267
[   89.484895][ T6524]   Last superblock write:       42
[   89.484895][ T6524]   State:                       rw
[   89.484895][ T6524]   Data allowed:                journal,btree,user
[   89.484895][ T6524]   Has data:                    (none)
[   89.484895][ T6524]   Btree allocated bitmap blocksize:1
[   89.484895][ T6524]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[   89.484895][ T6524]  
[   89.484994][ T6524] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[   89.542339][   T47] IPVS: starting estimator thread 0...
[   89.637347][ T6537] IPVS: using max 61 ests per chain, 146400 per kthread
[   89.785789][ T6551] ieee802154 phy0 wpan0: encryption failed: -22
[   90.173217][   T33] audit: type=1326 audit(1757605119.719:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.1.248" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284dd8eba9 code=0x7ffc0000
[   90.181504][   T33] audit: type=1326 audit(1757605119.719:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.1.248" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284dd8eba9 code=0x7ffc0000
[   90.192900][   T33] audit: type=1326 audit(1757605119.729:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.1.248" exe="/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f284dd8eba9 code=0x7ffc0000
[   90.202257][   T33] audit: type=1326 audit(1757605119.729:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.1.248" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284dd8eba9 code=0x7ffc0000
[   90.211042][   T33] audit: type=1326 audit(1757605119.729:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6572 comm="syz.1.248" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f284dd8eba9 code=0x7ffc0000
[   90.603354][ T6589] loop0: detected capacity change from 0 to 2048
[   90.615810][ T6589] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   90.647202][  T973] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   90.802703][ T6599] loop2: detected capacity change from 0 to 512
[   90.805326][ T6599] EXT4-fs: Ignoring removed oldalloc option
[   90.809457][ T6599] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   90.814673][ T6599] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   90.818943][  T973] usb 2-1: Using ep0 maxpacket: 8
[   90.826123][  T973] usb 2-1: unable to get BOS descriptor or descriptor too short
[   90.833188][ T6599] EXT4-fs (loop2): 1 truncate cleaned up
[   90.836878][  T973] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.842885][ T6599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.847940][  T973] usb 2-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   90.854463][  T973] usb 2-1: config 1 interface 0 has no altsetting 0
[   90.861412][  T973] usb 2-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.40
[   90.865191][  T973] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.870168][  T973] usb 2-1: Product: syz
[   90.871875][  T973] usb 2-1: Manufacturer: syz
[   90.873770][  T973] usb 2-1: SerialNumber: syz
[   90.884289][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.027298][   T47] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   91.156512][ T6609] loop2: detected capacity change from 0 to 4096
[   91.160560][ T6609] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[   91.177283][   T47] usb 1-1: Using ep0 maxpacket: 32
[   91.182993][   T47] usb 1-1: config 0 has an invalid interface number: 229 but max is 0
[   91.191504][   T47] usb 1-1: config 0 has no interface number 0
[   91.209009][   T47] usb 1-1: New USB device found, idVendor=3b53, idProduct=a0d3, bcdDevice=e3.d4
[   91.212459][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.215472][   T47] usb 1-1: Product: syz
[   91.223761][   T47] usb 1-1: Manufacturer: syz
[   91.225605][   T47] usb 1-1: SerialNumber: syz
[   91.242431][   T47] usb 1-1: config 0 descriptor??
[   91.251906][   T47] usb-storage 1-1:0.229: USB Mass Storage device detected
[   91.459931][   T10] usb 1-1: USB disconnect, device number 6
[   91.648114][ T6617] atomic_op ffff88801fcfd198 conn xmit_atomic 0000000000000000
[   91.963755][  T973] hid (null): invalid report_count 58840
[   91.971176][  T973] uclogic 0003:28BD:0078.0003: interface is invalid, ignoring
[   92.173546][   T47] usb 2-1: USB disconnect, device number 7
[   92.364345][ T6622] loop2: detected capacity change from 0 to 512
[   92.398024][ T6622] EXT4-fs (loop2): Test dummy encryption mode enabled
[   92.402532][ T6622] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   92.403878][ T6624] loop0: detected capacity change from 0 to 256
[   92.410237][ T6622] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002]
[   92.413987][ T6622] System zones: 1-12
[   92.416412][ T6622] EXT4-fs (loop2): 1 truncate cleaned up
[   92.423115][ T6622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.469814][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.501019][ T6624] syz.0.269: attempt to access beyond end of device
[   92.501019][ T6624] loop0: rw=2049, sector=256, nr_sectors = 100 limit=256
[   92.791388][ T6633] loop2: detected capacity change from 0 to 32768
[   92.807515][ T6633] (syz.2.273,6633,1):ocfs2_journal_addressable:1935 ERROR: The journal cannot address the entire volume. Enable the 'block64' journal option with tunefs.ocfs2
[   92.807535][ T6633] (syz.2.273,6633,1):ocfs2_check_volume:2432 ERROR: status = -27
[   92.830074][ T6633] (syz.2.273,6633,1):ocfs2_mount_volume:1764 ERROR: status = -27
[   92.839467][ T6633] (syz.2.273,6633,1):ocfs2_fill_super:1177 ERROR: status = -27
[   93.170043][ T6644] loop1: detected capacity change from 0 to 1024
[   93.406830][ T6650] loop2: detected capacity change from 0 to 128
[   93.542829][ T6650] syz.2.281: attempt to access beyond end of device
[   93.542829][ T6650] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128
[   93.548551][ T6650] syz.2.281: attempt to access beyond end of device
[   93.548551][ T6650] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128
[   93.554202][ T6650] syz.2.281: attempt to access beyond end of device
[   93.554202][ T6650] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128
[   93.562544][ T6650] syz.2.281: attempt to access beyond end of device
[   93.562544][ T6650] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128
[   93.570679][ T6650] syz.2.281: attempt to access beyond end of device
[   93.570679][ T6650] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128
[   93.576205][ T6650] syz.2.281: attempt to access beyond end of device
[   93.576205][ T6650] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128
[   93.593033][ T6650] syz.2.281: attempt to access beyond end of device
[   93.593033][ T6650] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128
[   93.618543][ T6650] syz.2.281: attempt to access beyond end of device
[   93.618543][ T6650] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128
[   93.632016][ T6650] syz.2.281: attempt to access beyond end of device
[   93.632016][ T6650] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128
[   93.644506][ T1375] hfsplus: b-tree write err: -5, ino 4
[   93.761571][ T6654] loop0: detected capacity change from 0 to 8192
[   93.771519][ T6654] FAT-fs (loop0): bogus logical sector size 155
[   93.774355][ T6654] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   93.789418][ T6654] FAT-fs (loop0): Can't find a valid FAT filesystem
[   95.742913][ T6686] loop2: detected capacity change from 0 to 32768
[   95.764141][ T6686] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.292 (6686)
[   95.825319][ T6686] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   95.835169][ T6694] loop1: detected capacity change from 0 to 4096
[   95.839177][ T6686] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   95.942709][ T6686] BTRFS info (device loop2): rebuilding free space tree
[   96.028488][ T6686] BTRFS info (device loop2): allowing degraded mounts
[   96.031132][ T6686] BTRFS info (device loop2): enabling ssd optimizations
[   96.033913][ T6686] BTRFS info (device loop2): enabling free space tree
[   96.036646][ T6686] BTRFS info (device loop2): force clearing of disk cache
[   96.057645][ T6686] BTRFS info (device loop2): use zstd compression, level 3
[   96.060218][ T6686] BTRFS info (device loop2): max_inline set to 0
[   96.115246][ T6686] BTRFS info (device loop2 state M): max_inline set to 0
[   96.153997][ T5855] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   96.481075][ T6728] loop1: detected capacity change from 0 to 128
[   96.514512][ T6728] FAT-fs (loop1): FAT read failed (blocknr 33568)
[   96.651153][ T6733] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   96.729692][ T6735] loop1: detected capacity change from 0 to 256
[   96.741516][ T6735] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   96.751807][ T6735] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[   96.759077][ T6735] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   96.842647][ T6741] IPv6: addrconf: prefix option has invalid lifetime
[   96.928598][ T6750] loop0: detected capacity change from 0 to 256
[   96.934291][ T6750] exfat: Deprecated parameter 'utf8'
[   96.940380][ T6750] exfat: Deprecated parameter 'utf8'
[   96.959028][ T6750] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[   96.981561][ T6750] cifs: Unknown parameter 'IT&:"1:ӭ'4,Zz-#F<]%gC
[   96.981561][ T6750] SȘȞZ6'
[   97.079852][ T6762] loop1: detected capacity change from 0 to 64
[   97.293371][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.315'.
[   97.373222][ T6775] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[   97.385352][ T6775] cramfs: wrong magic
[   97.866178][ T6788] loop2: detected capacity change from 0 to 2048
[   97.888751][ T6788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.894275][ T6788] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.940571][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.139493][ T6789] loop1: detected capacity change from 0 to 40427
[   98.146967][ T6799] loop2: detected capacity change from 0 to 64
[   98.160762][ T6789] F2FS-fs (loop1): invalid crc value
[   98.198847][ T6799] syz.2.325: attempt to access beyond end of device
[   98.198847][ T6799] loop2: rw=0, sector=1024, nr_sectors = 2 limit=64
[   98.204478][ T6799] Buffer I/O error on dev loop2, logical block 512, async page read
[   98.211723][ T6799] syz.2.325: attempt to access beyond end of device
[   98.211723][ T6799] loop2: rw=0, sector=113152, nr_sectors = 2 limit=64
[   98.216919][ T6799] Buffer I/O error on dev loop2, logical block 56576, async page read
[   98.261075][ T6789] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   98.277855][ T6789] F2FS-fs (loop1): Start checkpoint disabled!
[   98.297344][ T6789] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   98.412540][ T6811] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   98.427214][ T1098] kworker/u9:9: attempt to access beyond end of device
[   98.427214][ T1098] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   98.432863][ T1098] CPU: 0 UID: 0 PID: 1098 Comm: kworker/u9:9 Not tainted syzkaller #0 PREEMPT(full) 
[   98.432875][ T1098] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   98.432881][ T1098] Workqueue: writeback wb_workfn (flush-7:1)
[   98.432896][ T1098] Call Trace:
[   98.432901][ T1098]  <TASK>
[   98.432906][ T1098]  dump_stack_lvl+0x189/0x250
[   98.432920][ T1098]  ? __pfx_dump_stack_lvl+0x10/0x10
[   98.432929][ T1098]  ? __pfx_queue_work_on+0x10/0x10
[   98.432937][ T1098]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   98.432950][ T1098]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   98.432967][ T1098]  f2fs_handle_critical_error+0x37c/0x540
[   98.432983][ T1098]  f2fs_write_end_io+0x886/0xb60
[   98.433001][ T1098]  __submit_merged_bio+0x27a/0x6a0
[   98.433021][ T1098]  __submit_merged_write_cond+0x255/0x530
[   98.433036][ T1098]  f2fs_write_data_pages+0x261d/0x3000
[   98.433061][ T1098]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   98.433076][ T1098]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   98.433103][ T1098]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   98.433121][ T1098]  ? trace_f2fs_writepages+0x7f/0x200
[   98.433132][ T1098]  ? f2fs_write_node_pages+0x478/0x6e0
[   98.433145][ T1098]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   98.433188][ T1098]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   98.433198][ T1098]  do_writepages+0x32e/0x550
[   98.433213][ T1098]  ? reacquire_held_locks+0x127/0x1d0
[   98.433221][ T1098]  ? writeback_sb_inodes+0x384/0x1010
[   98.433236][ T1098]  __writeback_single_inode+0x145/0xff0
[   98.433246][ T1098]  ? do_raw_spin_unlock+0x4d/0x240
[   98.433259][ T1098]  writeback_sb_inodes+0x6c7/0x1010
[   98.433284][ T1098]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   98.433316][ T1098]  ? rcu_is_watching+0x15/0xb0
[   98.433330][ T1098]  wb_writeback+0x43b/0xaf0
[   98.433344][ T1098]  ? queue_io+0x341/0x590
[   98.433355][ T1098]  ? __pfx_wb_writeback+0x10/0x10
[   98.433370][ T1098]  ? _raw_spin_unlock_irq+0x23/0x50
[   98.433383][ T1098]  wb_workfn+0x409/0xef0
[   98.433400][ T1098]  ? __pfx_wb_workfn+0x10/0x10
[   98.433425][ T1098]  ? __lock_acquire+0xab9/0xd20
[   98.433444][ T1098]  ? process_scheduled_works+0x9ef/0x17b0
[   98.433455][ T1098]  ? _raw_spin_unlock_irq+0x23/0x50
[   98.433465][ T1098]  ? process_scheduled_works+0x9ef/0x17b0
[   98.433472][ T1098]  ? process_scheduled_works+0x9ef/0x17b0
[   98.433481][ T1098]  process_scheduled_works+0xae1/0x17b0
[   98.433504][ T1098]  ? __pfx_process_scheduled_works+0x10/0x10
[   98.433521][ T1098]  worker_thread+0x8a0/0xda0
[   98.433531][ T1098]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   98.433546][ T1098]  ? __kthread_parkme+0x7b/0x200
[   98.433560][ T1098]  kthread+0x711/0x8a0
[   98.433572][ T1098]  ? __pfx_worker_thread+0x10/0x10
[   98.433579][ T1098]  ? __pfx_kthread+0x10/0x10
[   98.433590][ T1098]  ? _raw_spin_unlock_irq+0x23/0x50
[   98.433600][ T1098]  ? lockdep_hardirqs_on+0x9c/0x150
[   98.433607][ T1098]  ? __pfx_kthread+0x10/0x10
[   98.433617][ T1098]  ret_from_fork+0x3fc/0x770
[   98.433628][ T1098]  ? __pfx_ret_from_fork+0x10/0x10
[   98.433639][ T1098]  ? __switch_to_asm+0x39/0x70
[   98.433648][ T1098]  ? __switch_to_asm+0x33/0x70
[   98.433657][ T1098]  ? __pfx_kthread+0x10/0x10
[   98.433667][ T1098]  ret_from_fork_asm+0x1a/0x30
[   98.433685][ T1098]  </TASK>
[   98.547235][ T1098] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   98.571605][ T6813] CUSE: info not properly terminated
[   98.729200][ T6819] loop0: detected capacity change from 0 to 64
[   98.741954][ T6821] loop1: detected capacity change from 0 to 256
[   98.832290][ T6825] loop1: detected capacity change from 0 to 164
[   98.841840][ T6825] rock: directory entry would overflow storage
[   98.845848][ T6825] rock: sig=0x66, size=4, remaining=3
[   98.864912][ T6825] rock: directory entry would overflow storage
[   98.871242][ T6825] rock: sig=0x66, size=4, remaining=3
[   99.001685][ T6831] loop1: detected capacity change from 0 to 512
[   99.042857][ T6831] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   99.062748][ T6831] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128
[   99.071382][ T6831] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128
[   99.559105][ T6841] loop2: detected capacity change from 0 to 64
[  100.127801][ T6850] netlink: 'syz.0.347': attribute type 10 has an invalid length.
[  100.132781][ T6850] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.136772][ T6850] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.201007][ T6851] Zero length message leads to an empty skb
[  100.209607][ T6850] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.212552][ T6850] bridge0: port 2(bridge_slave_1) entered forwarding state
[  100.216612][ T6850] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.219403][ T6850] bridge0: port 1(bridge_slave_0) entered forwarding state
[  100.223088][ T6853] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  100.225517][ T6853] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  100.234971][ T6853] vhci_hcd vhci_hcd.0: Device attached
[  100.236648][ T6850] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  100.417015][ T6857] loop0: detected capacity change from 0 to 512
[  100.421525][ T5916] vhci_hcd: vhci_device speed not set
[  100.457668][ T6857] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  100.479638][ T6857] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002]
[  100.489418][ T5916] usb 37-1: new full-speed USB device number 2 using vhci_hcd
[  100.498527][ T6857] System zones: 1-12
[  100.502896][ T6857] EXT4-fs (loop0): orphan cleanup on readonly fs
[  100.507346][   T10] usb 3-1: new low-speed USB device number 7 using dummy_hcd
[  100.508222][ T6857] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.349: invalid indirect mapped block 12 (level 1)
[  100.521863][ T6857] EXT4-fs (loop0): Remounting filesystem read-only
[  100.525167][ T6857] EXT4-fs (loop0): 1 truncate cleaned up
[  100.531011][ T6857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  100.560705][ T6857] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.349: error -117 reading directory block
[  100.565596][ T6857] EXT4-fs warning (device loop0): dx_probe:791: inode #2: lblock 0: comm syz.0.349: error -117 reading directory block
[  100.610428][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  100.671288][   T10] usb 3-1: config 0 has no interfaces?
[  100.673518][   T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  100.679026][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.713635][ T6861] warning: `syz.0.350' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  100.716763][   T10] usb 3-1: config 0 descriptor??
[  100.942963][ T6854] vhci_hcd: unknown pdu 1
[  100.951484][  T973] usb 3-1: USB disconnect, device number 7
[  100.958375][   T13] vhci_hcd: stop threads
[  100.964371][   T13] vhci_hcd: release socket
[  101.016931][ T6866] loop1: detected capacity change from 0 to 4096
[  101.029478][   T13] vhci_hcd: disconnect device
[  101.120142][ T5916] vhci_hcd: vhci_device speed not set
[  101.152191][ T6866] ntfs3(loop1): Failed to load $MFT (-22).
[  101.338580][ T6868] loop0: detected capacity change from 0 to 47
[  101.919213][ T6880] loop2: detected capacity change from 0 to 1024
[  101.921872][ T6880] hfsplus: Unknown parameter 'dns_resolver'
[  102.009512][   T10] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  102.013423][ T6886] loop2: detected capacity change from 0 to 256
[  102.016113][ T6886] exfat: Deprecated parameter 'namecase'
[  102.019481][ T6886] exfat: Deprecated parameter 'namecase'
[  102.025033][ T6886] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  102.180387][   T10] usb 2-1: config 4 has an invalid interface number: 156 but max is 0
[  102.191223][   T10] usb 2-1: config 4 has no interface number 0
[  102.201030][   T10] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e
[  102.204601][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.211414][   T10] usb 2-1: Product: syz
[  102.213159][   T10] usb 2-1: Manufacturer: syz
[  102.215099][   T10] usb 2-1: SerialNumber: syz
[  102.232981][   T10] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state.
[  102.238105][   T10] usb 2-1: setting power ON
[  102.239997][   T10] dvb-usb: bulk message failed: -22 (2/0)
[  102.245818][   T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  102.252605][   T10] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19)
[  102.256830][   T10] dvb_usb_cxusb 2-1:4.156: probe with driver dvb_usb_cxusb failed with error -22
[  102.433511][  T973] usb 2-1: USB disconnect, device number 8
[  102.468266][   T47] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  102.617110][   T47] usb 1-1: Using ep0 maxpacket: 8
[  102.623507][   T47] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  102.626926][   T47] usb 1-1: config 179 has no interface number 0
[  102.629563][   T47] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  102.634257][   T47] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  102.638902][   T47] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  102.643287][   T47] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  102.648033][   T47] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  102.652969][   T47] usb 1-1: config 179 interface 65 has no altsetting 0
[  102.655531][   T47] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  102.658651][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.669959][   T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  102.677485][   T47] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input7
[  102.718091][ T5282] input input7: unable to receive magic message: -110
[  102.724806][ T5282] input input7: unable to receive magic message: -32
[  102.733298][ T5282] input input7: unable to receive magic message: -32
[  102.742532][ T5282] input input7: unable to receive magic message: -32
[  102.751265][ T5282] input input7: unable to receive magic message: -32
[  102.768911][ T5282] input input7: unable to receive magic message: -32
[  102.773666][ T5282] input input7: unable to receive magic message: -32
[  102.830493][   T10] usb 3-1: config index 0 descriptor too short (expected 39, got 27)
[  102.833964][   T10] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  102.840116][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[  102.845164][   T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  102.850214][   T10] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  102.853526][   T10] usb 3-1: Product: syz
[  102.855223][   T10] usb 3-1: Manufacturer: syz
[  102.857530][   T10] usb 3-1: SerialNumber: syz
[  102.861968][   T10] usb 3-1: config 0 descriptor??
[  102.869978][   T10] hub 3-1:0.0: bad descriptor, ignoring hub
[  102.872405][   T10] hub 3-1:0.0: probe with driver hub failed with error -5
[  102.878576][   T10] usb 3-1: selecting invalid altsetting 0
[  103.098827][   T10] usb 1-1: USB disconnect, device number 7
[  103.099011][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  103.194783][ T5916] usb 3-1: USB disconnect, device number 8
[  103.761065][ T6920] loop0: detected capacity change from 0 to 256
[  103.764554][ T6920] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  103.768906][ T6920] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  103.775585][ T6920] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  104.376088][ T6935] loop1: detected capacity change from 0 to 512
[  104.386372][ T6935] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  104.419884][ T6935] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  104.431281][ T6935] EXT4-fs (loop1): 1 truncate cleaned up
[  104.435003][ T6935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.445226][ T6935] syz.1.377 (pid 6935) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  104.472649][ T5851] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.521542][ T6943] syz.0.381 uses obsolete (PF_INET,SOCK_PACKET)
[  104.778433][ T6947] loop1: detected capacity change from 0 to 1764
[  105.024158][ T6954] loop1: detected capacity change from 0 to 256
[  105.097941][   T47] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  105.272370][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.276811][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.280317][   T47] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  105.283261][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.288293][   T47] usb 1-1: config 0 descriptor??
[  105.458585][ T5916] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  105.618823][ T5916] usb 2-1: config 4 has an invalid interface number: 88 but max is 1
[  105.622046][ T5916] usb 2-1: config 4 has an invalid interface number: 29 but max is 1
[  105.625279][ T5916] usb 2-1: config 4 has no interface number 0
[  105.639815][ T5916] usb 2-1: config 4 has no interface number 1
[  105.642255][ T5916] usb 2-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping
[  105.646520][ T5916] usb 2-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85
[  105.652814][ T5916] usb 2-1: config 4 interface 88 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 64
[  105.659049][ T5916] usb 2-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  105.665187][ T5916] usb 2-1: config 4 interface 29 altsetting 9 has an endpoint descriptor with address 0xA6, changing to 0x86
[  105.677532][ T5916] usb 2-1: config 4 interface 29 altsetting 9 endpoint 0x86 has invalid maxpacket 1023, setting to 64
[  105.681930][ T5916] usb 2-1: config 4 interface 88 has no altsetting 0
[  105.684641][ T5916] usb 2-1: config 4 interface 29 has no altsetting 0
[  105.703156][   T47] arvo 0003:1E7D:30D4.0004: unbalanced collection at end of report description
[  105.707872][ T5916] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7
[  105.711380][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.713080][   T47] arvo 0003:1E7D:30D4.0004: parse failed
[  105.716341][   T47] arvo 0003:1E7D:30D4.0004: probe with driver arvo failed with error -22
[  105.717345][ T5916] usb 2-1: Product: syz
[  105.722713][ T5916] usb 2-1: Manufacturer: syz
[  105.724933][ T5916] usb 2-1: SerialNumber: syz
[  105.733847][ T6964] loop2: detected capacity change from 0 to 1024
[  105.741620][ T6958] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  105.904606][  T973] usb 1-1: USB disconnect, device number 8
[  105.968194][ T5916] chaoskey 2-1:4.29: Unable to register with hwrng
[  105.977786][ T5916] usb 2-1: USB disconnect, device number 9
[  106.123335][ T6970] loop2: detected capacity change from 0 to 128
[  106.135946][ T6970] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  106.144855][ T6970] hpfs: filesystem error: improperly stopped
[  106.147752][ T6970] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  106.150810][ T6970] hpfs: You really don't want any checks? You are crazy...
[  106.154256][ T6970] hpfs: hpfs_map_sector(): read error
[  106.156472][ T6970] hpfs: code page support is disabled
[  106.159668][ T6970] hpfs: hpfs_map_4sectors(): unaligned read
[  106.162155][ T6970] hpfs: hpfs_map_4sectors(): unaligned read
[  106.164645][ T6970] hpfs: filesystem error: unable to find root dir
[  106.174253][ T6970] hpfs: hpfs_map_4sectors(): unaligned read
[  106.457194][   T47] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  106.498062][ T6974] loop0: detected capacity change from 0 to 4096
[  106.607304][   T47] usb 3-1: Using ep0 maxpacket: 16
[  106.617355][   T47] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  106.623119][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.632796][   T47] usb 3-1: Product: syz
[  106.634501][   T47] usb 3-1: Manufacturer: syz
[  106.636441][   T47] usb 3-1: SerialNumber: syz
[  106.651982][   T47] usb 3-1: config 0 descriptor??
[  106.664014][   T47] visor 3-1:0.0: Sony Clie 3.5 converter detected
[  106.777175][ T5315] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  106.898135][  T973] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  106.937286][ T5315] usb 2-1: Using ep0 maxpacket: 16
[  106.942838][ T5315] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.947442][ T5315] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.952435][ T5315] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  106.957858][ T5315] usb 2-1: config 0 interface 0 has no altsetting 0
[  106.960678][ T5315] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  106.964162][ T5315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.970785][ T5315] usb 2-1: config 0 descriptor??
[  107.049492][  T973] usb 1-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  107.054425][  T973] usb 1-1: config 1 interface 0 has no altsetting 0
[  107.060192][  T973] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.40
[  107.062050][   T47] usb 3-1: clie_3_5_startup: get interface number bad return length: 0
[  107.063924][  T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.069108][   T47] visor 3-1:0.0: probe with driver visor failed with error -5
[  107.070474][  T973] usb 1-1: Product: syz
[  107.074885][  T973] usb 1-1: Manufacturer: syz
[  107.077365][  T973] usb 1-1: SerialNumber: syz
[  107.274907][   T47] usb 3-1: USB disconnect, device number 9
[  107.296448][ T6980] netlink: 'syz.0.397': attribute type 10 has an invalid length.
[  107.299959][ T6980] openvswitch: netlink: Flow actions attr not present in new flow.
[  107.313932][  T973] usbhid 1-1:1.0: can't add hid device: -71
[  107.316576][  T973] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  107.322416][  T973] usb 1-1: USB disconnect, device number 9
[  107.385323][ T5315] hid (null): unknown global tag 0xc
[  107.387256][ T5315] hid (null): bogus close delimiter
[  107.388913][ T5315] hid (null): invalid report_size 12466
[  107.390719][ T5315] hid (null): invalid report_count 51528
[  107.395276][ T5315] hid (null): unknown global tag 0xe
[  107.588993][   T47] usb 2-1: USB disconnect, device number 10
[  107.861903][ T6984] netlink: 'syz.0.399': attribute type 10 has an invalid length.
[  107.865281][ T6984] netlink: 40 bytes leftover after parsing attributes in process `syz.0.399'.
[  107.872044][ T6984] dummy0: entered promiscuous mode
[  107.878039][ T6984] bridge0: port 3(dummy0) entered blocking state
[  107.880902][ T6984] bridge0: port 3(dummy0) entered disabled state
[  107.883755][ T6984] dummy0: entered allmulticast mode
[  107.889553][ T6984] bridge0: port 3(dummy0) entered blocking state
[  107.892301][ T6984] bridge0: port 3(dummy0) entered forwarding state
[  108.616850][ T7007] loop0: detected capacity change from 0 to 512
[  108.622326][ T7007] EXT4-fs: Ignoring removed nomblk_io_submit option
[  108.688796][ T7007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.696795][ T7007] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  108.725281][ T7007] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.408: corrupted inode contents
[  108.742927][ T7007] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.408: mark_inode_dirty error
[  108.747390][ T7007] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.408: corrupted inode contents
[  108.751389][ T7007] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.408: mark_inode_dirty error
[  108.794423][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.129545][ T7025] Can't find a SQUASHFS superblock on nullb0
[  109.467214][  T792] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  109.480440][ T7022] loop2: detected capacity change from 0 to 131072
[  109.485949][ T7022] F2FS-fs (loop2): Test dummy encryption mode enabled
[  109.494259][ T7022] F2FS-fs (loop2): invalid crc value
[  109.533070][ T7022] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  109.538689][ T7022] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  109.617473][  T792] usb 2-1: Using ep0 maxpacket: 32
[  109.617484][  T973] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  109.622591][  T792] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  109.626254][  T792] usb 2-1: config 0 has no interface number 0
[  109.629480][  T792] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  109.633442][  T792] usb 2-1: config 0 interface 85 has no altsetting 0
[  109.638731][  T792] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  109.642299][  T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.645012][  T792] usb 2-1: Product: syz
[  109.646462][  T792] usb 2-1: Manufacturer: syz
[  109.648188][  T792] usb 2-1: SerialNumber: syz
[  109.655610][  T792] usb 2-1: config 0 descriptor??
[  109.767201][  T973] usb 1-1: Using ep0 maxpacket: 16
[  109.773221][  T973] usb 1-1: New USB device found, idVendor=1943, idProduct=2257, bcdDevice=91.ed
[  109.776634][  T973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.780317][  T973] usb 1-1: Product: syz
[  109.782028][  T973] usb 1-1: Manufacturer: syz
[  109.783896][  T973] usb 1-1: SerialNumber: syz
[  109.788569][  T973] usb 1-1: config 0 descriptor??
[  109.794573][  T973] s2255 1-1:0.0: Could not find bulk-in endpoint
[  109.797452][  T973] Sensoray 2255 driver load failed: 0xfffffff4
[  109.801272][  T973] s2255 1-1:0.0: probe with driver s2255 failed with error -12
[  109.999994][  T973] usb 1-1: USB disconnect, device number 10
[  110.420699][  T792] appletouch 2-1:0.85: Geyser mode initialized.
[  110.425566][  T792] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input8
[  110.434589][    C0] appletouch 2-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64
[  110.637963][ T5315] usb 2-1: USB disconnect, device number 11
[  110.649147][ T5315] appletouch 2-1:0.85: input: appletouch disconnected
[  111.276986][ T7054] loop2: detected capacity change from 0 to 1024
[  111.334321][ T1098] hfsplus: b-tree write err: -5, ino 4
[  111.372765][ T7057] loop2: detected capacity change from 0 to 1024
[  111.381729][ T7057] EXT4-fs: Ignoring removed nobh option
[  111.391416][ T7057] EXT4-fs (loop2): Invalid log cluster size: 63
[  111.401509][ T7057] overlayfs: failed to resolve '/'ȇ'_?/~<ıL<6XW"fWrv>;ز*YF#1H|RDԀJ?TslRG%t<}Ƶػ': -2
[  111.927263][ T5315] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  112.078864][ T5315] usb 3-1: config 0 has an invalid interface number: 200 but max is 0
[  112.081914][ T5315] usb 3-1: config 0 has no interface number 0
[  112.083796][ T5315] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0
[  112.088499][ T5315] usb 3-1: config 0 interface 200 has no altsetting 0
[  112.094377][ T5315] usb 3-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39
[  112.097775][ T5315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.100110][ T5315] usb 3-1: Product: syz
[  112.101306][ T5315] usb 3-1: Manufacturer: syz
[  112.102824][ T5315] usb 3-1: SerialNumber: syz
[  112.106009][ T5315] usb 3-1: config 0 descriptor??
[  112.388952][ T5315] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input9
[  112.445328][ T5315] usb 3-1: USB disconnect, device number 10
[  112.775812][ T7080] Bluetooth: MGMT ver 1.23
[  113.380410][ T5315] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  113.476675][ T7098] loop1: detected capacity change from 0 to 8
[  113.480876][ T7098] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  113.486176][ T7096] loop0: detected capacity change from 0 to 4096
[  113.569040][ T5315] usb 3-1: config 0 has an invalid interface number: 194 but max is 0
[  113.572922][ T5315] usb 3-1: config 0 has no interface number 0
[  113.591146][ T5315] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.d2
[  113.593968][ T5315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.605715][ T5315] usb 3-1: Product: syz
[  113.608976][ T5315] usb 3-1: Manufacturer: syz
[  113.610478][ T5315] usb 3-1: SerialNumber: syz
[  113.613528][ T5315] usb 3-1: config 0 descriptor??
[  114.270568][ T5315] usb 3-1: USB disconnect, device number 11
[  114.276254][ T5315] f81534a_ctrl 3-1:0.194: failed to set register 0x116: -19
[  114.280001][ T5315] f81534a_ctrl 3-1:0.194: failed to enable ports: -19
[  114.488390][ T7110] loop0: detected capacity change from 0 to 128
[  114.516325][ T7110] FAT-fs (loop0): Directory bread(block 32) failed
[  114.520167][ T7110] FAT-fs (loop0): Directory bread(block 33) failed
[  114.527391][ T7110] FAT-fs (loop0): Directory bread(block 34) failed
[  114.529646][ T7110] FAT-fs (loop0): Directory bread(block 35) failed
[  114.532293][ T7110] FAT-fs (loop0): Directory bread(block 36) failed
[  114.534274][ T7110] FAT-fs (loop0): Directory bread(block 37) failed
[  114.536802][ T7110] FAT-fs (loop0): Directory bread(block 38) failed
[  114.548376][ T7110] FAT-fs (loop0): Directory bread(block 39) failed
[  114.551071][ T7110] FAT-fs (loop0): Directory bread(block 40) failed
[  114.553719][ T7110] FAT-fs (loop0): Directory bread(block 41) failed
[  116.006226][ T7154] evm: overlay not supported
[  116.107395][ T5315] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  116.268375][ T5315] usb 2-1: Using ep0 maxpacket: 16
[  116.278008][ T5315] usb 2-1: config 0 has an invalid interface number: 64 but max is 0
[  116.282552][ T5315] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.286718][ T5315] usb 2-1: config 0 has no interface number 0
[  116.290658][ T5315] usb 2-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b
[  116.294451][ T5315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.314283][ T5315] usb 2-1: config 0 descriptor??
[  116.328229][ T5315] uvcvideo 2-1:0.64: probe with driver uvcvideo failed with error -22
[  116.525686][   T10] usb 2-1: USB disconnect, device number 12
[  117.536459][ T7171] netlink: 28 bytes leftover after parsing attributes in process `syz.1.474'.
[  117.923510][ T7169] loop0: detected capacity change from 0 to 32768
[  118.066437][ T7169] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  118.066460][ T7169]   allowing incompatible features above 0.0: (unknown version)
[  118.066469][ T7169]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  118.092424][ T7169] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  118.093005][   T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  118.096547][ T7169] bcachefs (loop0): initializing new filesystem
[  118.110661][ T7169] bcachefs (loop0): going read-write
[  118.136402][ T7169] bcachefs (loop0): marking superblocks
[  118.168542][ T7169] bcachefs (loop0): initializing freespace
[  118.182963][ T7169] bcachefs (loop0): done initializing freespace
[  118.192846][ T7169] bcachefs (loop0): reading snapshots table
[  118.195529][ T7169] bcachefs (loop0): reading snapshots done
[  118.242942][ T7169] bcachefs (loop0): done starting filesystem
[  118.267190][   T10] usb 3-1: Using ep0 maxpacket: 8
[  118.271152][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  118.275222][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  118.280214][   T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  118.284651][   T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  118.290288][   T10] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  118.293796][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.311606][   T10] hub 3-1:1.0: bad descriptor, ignoring hub
[  118.313889][   T10] hub 3-1:1.0: probe with driver hub failed with error -5
[  118.327934][   T10] cdc_wdm 3-1:1.0: skipping garbage
[  118.330029][   T10] cdc_wdm 3-1:1.0: skipping garbage
[  118.354294][   T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  118.356729][   T10] cdc_wdm 3-1:1.0: Unknown control protocol
[  118.387958][ T7169] syz.0.473 (7169) used greatest stack depth: 15160 bytes left
[  118.420505][ T5847] bcachefs (loop0): shutting down
[  118.422137][ T5847] bcachefs (loop0): going read-only
[  118.424673][ T5847] bcachefs (loop0): finished waiting for writes to stop
[  118.432684][ T5847] bcachefs (loop0): flushing journal and stopping allocators, journal seq 4
[  118.477677][ T5847] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 5
[  118.484343][ T5847] bcachefs (loop0): clean shutdown complete, journal seq 6
[  118.489371][ T5847] bcachefs (loop0): marking filesystem clean
[  118.531004][ T5847] bcachefs (loop0): shutdown complete
[  118.700380][   T47] usb 3-1: USB disconnect, device number 12
[  119.198038][   T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  119.369070][   T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  119.377124][   T10] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  119.379900][   T10] usb 2-1: config 220 has an invalid descriptor of length 184, skipping remainder of the config
[  119.383162][   T10] usb 2-1: config 220 has no interface number 2
[  119.385375][   T10] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  119.395259][   T10] usb 2-1: config 220 interface 0 has no altsetting 0
[  119.398849][   T10] usb 2-1: config 220 interface 76 has no altsetting 0
[  119.401181][   T10] usb 2-1: config 220 interface 1 has no altsetting 0
[  119.405086][   T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  119.408910][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.411390][   T10] usb 2-1: Product: syz
[  119.422889][   T10] usb 2-1: Manufacturer: syz
[  119.424689][   T10] usb 2-1: SerialNumber: syz
[  119.566659][ T7209] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  119.654524][   T10] usb 2-1: selecting invalid altsetting 0
[  119.656763][   T10] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  119.670445][   T10] usb 2-1: No valid video chain found.
[  119.683970][   T10] usb 2-1: selecting invalid altsetting 0
[  119.697468][   T10] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  119.701771][   T10] usb 2-1: USB disconnect, device number 13
[  119.880807][ T7226] program syz.0.494 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  119.893212][ T7227] loop2: detected capacity change from 0 to 256
[  119.919407][ T7227] FAT-fs (loop2): Directory bread(block 64) failed
[  119.921909][ T7227] FAT-fs (loop2): Directory bread(block 65) failed
[  119.924499][ T7227] FAT-fs (loop2): Directory bread(block 66) failed
[  119.935347][ T7227] FAT-fs (loop2): Directory bread(block 67) failed
[  119.946407][ T7227] FAT-fs (loop2): Directory bread(block 68) failed
[  119.951784][ T7227] FAT-fs (loop2): Directory bread(block 69) failed
[  119.954444][ T7227] FAT-fs (loop2): Directory bread(block 70) failed
[  119.963261][ T7227] FAT-fs (loop2): Directory bread(block 71) failed
[  119.967988][ T7227] FAT-fs (loop2): Directory bread(block 72) failed
[  119.971067][ T7227] FAT-fs (loop2): Directory bread(block 73) failed
[  120.064546][ T7231] loop0: detected capacity change from 0 to 1024
[  120.068812][ T7231] EXT4-fs: Ignoring removed bh option
[  120.125802][ T7231] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.296821][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.428332][ T7239] netlink: 20 bytes leftover after parsing attributes in process `syz.0.499'.
[  120.540872][   T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  120.594641][ T7241] loop0: detected capacity change from 0 to 256
[  120.648226][ T7241] FAT-fs (loop0): Directory bread(block 64) failed
[  120.651212][ T7241] FAT-fs (loop0): Directory bread(block 65) failed
[  120.659949][ T7241] FAT-fs (loop0): Directory bread(block 66) failed
[  120.663238][ T7241] FAT-fs (loop0): Directory bread(block 67) failed
[  120.666340][ T7241] FAT-fs (loop0): Directory bread(block 68) failed
[  120.674674][ T7241] FAT-fs (loop0): Directory bread(block 69) failed
[  120.678438][ T7241] FAT-fs (loop0): Directory bread(block 70) failed
[  120.681445][ T7241] FAT-fs (loop0): Directory bread(block 71) failed
[  120.684826][ T7241] FAT-fs (loop0): Directory bread(block 72) failed
[  120.689308][ T7241] FAT-fs (loop0): Directory bread(block 73) failed
[  120.717407][   T10] usb 2-1: Using ep0 maxpacket: 16
[  120.732363][   T10] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  120.747504][   T10] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 42, changing to 9
[  120.751840][   T10] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 50169, setting to 1024
[  120.764865][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  120.773664][   T10] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  120.783486][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.786724][   T10] usb 2-1: Product: syz
[  120.790095][   T10] usb 2-1: Manufacturer: syz
[  120.792043][   T10] usb 2-1: SerialNumber: syz
[  120.800586][   T10] usb 2-1: config 0 descriptor??
[  121.051687][   T10] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10
[  121.281986][   T10] usb 2-1: USB disconnect, device number 14
[  121.284232][    C0] synaptics_usb 2-1:0.0: synusb_irq - usb_submit_urb failed with result: -19
[  121.318066][ T5282] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -19
[  121.861019][ T7253] loop1: detected capacity change from 0 to 128
[  121.884943][   T33] audit: type=1800 audit(1757605151.429:8): pid=7253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.504" name="file2" dev="loop1" ino=1048605 res=0 errno=0
[  121.913551][ T7253] syz.1.504: attempt to access beyond end of device
[  121.913551][ T7253] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128
[  122.641561][ T7269] Driver unsupported XDP return value 0 on prog  (id 49) dev N/A, expect packet loss!
[  123.122812][ T7281] loop1: detected capacity change from 0 to 1764
[  123.768759][ T7289] loop1: detected capacity change from 0 to 2048
[  123.779980][ T7289] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  123.789332][   T33] audit: type=1800 audit(1757605666.332:9): pid=7289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.514" name="bus" dev="loop1" ino=1367 res=0 errno=0
[  123.879078][ T7289] loop1: detected capacity change from 2048 to 0
[  123.949894][    C0] I/O error, dev loop1, sector 1408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  123.959094][    C0] I/O error, dev loop1, sector 1408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  124.088795][    C0] I/O error, dev loop1, sector 128 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[  124.092553][    C0] Buffer I/O error on dev loop1, logical block 128, lost sync page write
[  124.231368][ T7301] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20004
[  124.324325][ T7303] loop0: detected capacity change from 0 to 1024
[  124.328306][ T7303] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  124.344120][ T7303] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869)
[  124.352394][ T7303] EXT4-fs (loop0): journal inode is deleted
[  124.515187][ T5881] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.609608][ T5881] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.670918][ T5881] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.736438][ T5881] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.743045][ T7315] loop2: detected capacity change from 0 to 2048
[  124.754916][ T7315] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  124.778200][   T10] TC_ACT_REPEAT abuse ?
[  124.800440][ T7315] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.808946][ T7315] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.869385][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.982272][ T5881] bridge_slave_1: left allmulticast mode
[  124.984512][ T5881] bridge_slave_1: left promiscuous mode
[  124.986699][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  124.992964][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.997723][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  125.002072][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  125.009286][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  125.009542][ T5881] bridge_slave_0: left allmulticast mode
[  125.011967][ T5881] bridge_slave_0: left promiscuous mode
[  125.012117][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.021541][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  126.008651][ T5881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  126.013939][ T5881] bond0 (unregistering): Released all slaves
[  126.207254][  T792] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  126.383720][ T7321] chnl_net:caif_netlink_parms(): no params data found
[  126.392215][  T792] usb 1-1: unable to get BOS descriptor or descriptor too short
[  126.398138][  T792] usb 1-1: config 0 has an invalid interface number: 238 but max is 0
[  126.400736][  T792] usb 1-1: config 0 has no interface number 0
[  126.402616][  T792] usb 1-1: config 0 interface 238 has no altsetting 0
[  126.423785][  T792] usb 1-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=f1.0d
[  126.427008][  T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.431649][  T792] usb 1-1: Product: syz
[  126.433061][  T792] usb 1-1: Manufacturer: syz
[  126.434838][  T792] usb 1-1: SerialNumber: syz
[  126.442891][  T792] usb 1-1: config 0 descriptor??
[  126.459048][ T5881] hsr_slave_0: left promiscuous mode
[  126.462152][ T5881] hsr_slave_1: left promiscuous mode
[  126.465050][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  126.480866][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_0
[  126.485743][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  126.492729][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_1
[  126.493428][ T7362] loop2: detected capacity change from 0 to 256
[  126.555522][ T5881] veth1_macvtap: left promiscuous mode
[  126.569067][ T5881] veth0_macvtap: left promiscuous mode
[  126.571621][ T5881] veth1_vlan: left promiscuous mode
[  126.574060][ T5881] veth0_vlan: left promiscuous mode
[  126.664981][  T792] gspca_main: spca501-2.14.0 probing 1776:501c
[  126.671310][  T792] gspca_spca501: reg write: error -71
[  126.673652][  T792] spca501 1-1:0.238: Reg write failed for 0x02,0x07,0x05
[  126.677241][  T792] spca501 1-1:0.238: probe with driver spca501 failed with error -22
[  126.682562][  T792] usb 1-1: USB disconnect, device number 11
[  127.046675][ T5881] team0 (unregistering): Port device team_slave_1 removed
[  127.074474][ T5881] team0 (unregistering): Port device team_slave_0 removed
[  127.113915][ T5854] Bluetooth: hci1: command tx timeout
[  127.338787][ T7373] input: syz1 as /devices/virtual/input/input11
[  127.349893][ T1098] TC_ACT_REPEAT abuse ?
[  127.476684][ T7377] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.550' sets config #1
[  127.647798][ T7367] netlink: 'syz.2.545': attribute type 1 has an invalid length.
[  127.949844][ T7321] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.952697][ T7321] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.972587][ T7321] bridge_slave_0: entered allmulticast mode
[  127.976454][ T7321] bridge_slave_0: entered promiscuous mode
[  127.987661][ T5315] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  127.990010][ T7321] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.996955][ T7321] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.003930][ T7321] bridge_slave_1: entered allmulticast mode
[  128.015475][ T7321] bridge_slave_1: entered promiscuous mode
[  128.140607][ T5315] usb 3-1: config index 0 descriptor too short (expected 63186, got 210)
[  128.147936][ T5315] usb 3-1: config 0 has an invalid interface number: 106 but max is 0
[  128.151162][ T5315] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  128.155094][ T5315] usb 3-1: config 0 has no interface number 0
[  128.160185][ T5315] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  128.169953][ T5315] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  128.173848][ T5315] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  128.178033][ T7321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  128.198849][ T5315] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  128.202581][ T5315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.204384][ T7321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  128.227402][ T5315] usb 3-1: config 0 descriptor??
[  128.250954][ T5315] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  128.270091][ T7321] team0: Port device team_slave_0 added
[  128.280156][ T7321] team0: Port device team_slave_1 added
[  128.448993][ T5315] usb 3-1: USB disconnect, device number 13
[  128.452217][   T13] usb 3-1: Failed to submit usb control message: -71
[  128.464463][   T13] usb 3-1: unable to send the bmi data to the device: -71
[  128.473279][   T13] usb 3-1: unable to get target info from device
[  128.475557][   T13] usb 3-1: could not get target info (-71)
[  128.477017][ T5881] IPVS: stop unused estimator thread 0...
[  128.479669][   T13] usb 3-1: could not probe fw (-71)
[  128.519307][ T7321] batman_adv: batadv0: Adding interface: batadv_slave_0
[  128.521888][ T7321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.850044][ T7321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  128.855275][ T7321] batman_adv: batadv0: Adding interface: batadv_slave_1
[  128.858088][ T7321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.867983][ T7321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.928089][ T7321] hsr_slave_0: entered promiscuous mode
[  128.931304][ T7321] hsr_slave_1: entered promiscuous mode
[  129.177242][ T5854] Bluetooth: hci1: command tx timeout
[  129.216235][ T7415] loop2: detected capacity change from 0 to 512
[  129.237007][ T7321] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  129.246646][ T7321] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  129.254092][ T7321] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  129.258021][    C1] TC_ACT_REPEAT abuse ?
[  129.269125][ T7321] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  129.321721][ T7415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.348403][ T7415] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  129.412460][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.435431][ T7321] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.521051][ T7321] 8021q: adding VLAN 0 to HW filter on device team0
[  129.541430][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.544334][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.553315][ T7434] loop0: detected capacity change from 0 to 1024
[  129.564629][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.567635][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.591225][ T7434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.652061][ T7434] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  129.681572][ T7434] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  129.686572][ T7434] EXT4-fs (loop0): This should not happen!! Data will be lost
[  129.686572][ T7434] 
[  129.705394][ T7434] EXT4-fs (loop0): Total free blocks count 0
[  129.709784][ T7434] EXT4-fs (loop0): Free/Dirty block details
[  129.712617][ T7434] EXT4-fs (loop0): free_blocks=20480
[  129.715937][ T7434] EXT4-fs (loop0): dirty_blocks=16
[  129.719197][ T7434] EXT4-fs (loop0): Block reservation details
[  129.721561][ T7434] EXT4-fs (loop0): i_reserved_data_blocks=1
[  129.734082][ T7434] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 2 with error 28
[  130.745126][ T7321] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.880522][ T7321] veth0_vlan: entered promiscuous mode
[  130.889284][ T7321] veth1_vlan: entered promiscuous mode
[  130.911935][ T7321] veth0_macvtap: entered promiscuous mode
[  130.918283][ T7321] veth1_macvtap: entered promiscuous mode
[  130.936202][ T7321] batman_adv: batadv0: Interface activated: batadv_slave_0
[  130.999928][ T7321] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.029970][ T5881] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.055763][ T5881] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.092495][ T5881] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.096028][ T5881] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.264189][ T5854] Bluetooth: hci1: command tx timeout
[  131.285251][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.291793][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.370753][ T1209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.376387][ T1209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.637185][   T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  131.787229][   T24] usb 3-1: Using ep0 maxpacket: 8
[  131.791231][   T24] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.795586][   T24] usb 3-1: config 0 interface 0 has no altsetting 0
[  131.806166][   T24] usb 3-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00
[  131.814078][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.823468][   T24] usb 3-1: config 0 descriptor??
[  131.923646][ T7493] loop0: detected capacity change from 0 to 1024
[  131.946345][ T7493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.978150][ T5916] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  131.997517][ T5847] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.149850][ T5916] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  132.154075][ T5916] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  132.162017][ T5916] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  132.165531][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  132.169962][ T5916] usb 4-1: SerialNumber: syz
[  132.257384][   T24] uclogic 0003:28BD:0078.0006: interface is invalid, ignoring
[  132.389146][ T5916] usb 4-1: unknown interface protocol 0x31, assuming v1
[  132.391260][ T5916] usb 4-1: cannot find UAC_HEADER
[  132.415384][ T5916] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  132.422238][ T5916] usb 4-1: USB disconnect, device number 2
[  132.446956][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  132.461067][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.463728][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.469767][    T9] usb 3-1: USB disconnect, device number 14
[  132.489187][ T7500] loop0: detected capacity change from 0 to 32768
[  132.512419][ T7500] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  132.549610][ T7500] XFS (loop0): Ending clean mount
[  132.560371][ T7500] XFS (loop0): Quotacheck needed: Please wait.
[  132.591913][ T7500] XFS (loop0): Quotacheck: Done.
[  132.622243][ T5847] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  132.985404][ T7519] loop3: detected capacity change from 0 to 512
[  132.997804][ T7519] EXT4-fs error (device loop3): ext4_get_journal_inode:5800: comm syz.3.585: inode #16777216: comm syz.3.585: iget: illegal inode #
[  133.009982][ T7519] EXT4-fs (loop3): Remounting filesystem read-only
[  133.018130][ T7519] EXT4-fs (loop3): no journal found
[  133.024837][ T7519] EXT4-fs (loop3): can't get journal size
[  133.031481][ T7519] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  133.038228][ T7519] EXT4-fs (loop3): failed to initialize system zone (-22)
[  133.041097][ T7519] EXT4-fs (loop3): mount failed
[  133.108149][ T1090] TC_ACT_REPEAT abuse ?
[  133.157996][ T7528] loop3: detected capacity change from 0 to 2048
[  133.198282][    T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  133.201474][ T7530] loop2: detected capacity change from 0 to 1024
[  133.204100][ T7528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.255767][ T7004] hfsplus: b-tree write err: -5, ino 8
[  133.256086][ T7321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.291658][ T7535] sctp: [Deprecated]: syz.2.591 (pid 7535) Use of int in max_burst socket option.
[  133.291658][ T7535] Use struct sctp_assoc_value instead
[  133.339188][ T5854] Bluetooth: hci1: command tx timeout
[  133.360690][    T9] usb 1-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[  133.363684][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.374180][    T9] usb 1-1: config 0 descriptor??
[  133.381932][    T9] usb 1-1: selecting invalid altsetting 1
[  133.418699][    T9] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22
[  133.464417][ T7543] loop2: detected capacity change from 0 to 256
[  133.478041][ T7543] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  133.604812][    T9] usb 1-1: USB disconnect, device number 12
[  133.620636][ T7549] program syz.2.598 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  133.846315][ T7555] tipc: Started in network mode
[  133.848884][ T7555] tipc: Node identity 8, cluster identity 4711
[  133.851347][ T7555] tipc: Node number set to 8
[  133.854441][ T7545] loop3: detected capacity change from 0 to 32768
[  133.940384][ T7545] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  133.981403][ T7545] XFS (loop3): Ending clean mount
[  133.985263][ T7545] XFS (loop3): Quotacheck needed: Please wait.
[  134.009445][ T7545] XFS (loop3): Quotacheck: Done.
[  134.068328][ T7321] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  134.242077][ T7565] dlm: plock device version mismatch: kernel (1.2.0), user (1.4.8)
[  134.704388][ T7583] loop2: detected capacity change from 0 to 512
[  134.723890][ T7583] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.610: iget: bad extended attribute block 1
[  134.740324][ T7583] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.610: couldn't read orphan inode 15 (err -117)
[  134.749237][ T7583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.771514][ T7583] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  134.817356][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.127325][ T7591] loop2: detected capacity change from 0 to 32768
[  135.153155][ T7591] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  135.172934][ T7591] 
[  135.173912][ T7591] ======================================================
[  135.176649][ T7591] WARNING: possible circular locking dependency detected
[  135.179409][ T7591] syzkaller #0 Not tainted
[  135.181410][ T7591] ------------------------------------------------------
[  135.184911][ T7591] syz.2.612/7591 is trying to acquire lock:
[  135.187184][ T7591] ffff8881107360c0 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  135.192464][ T7591] 
[  135.192464][ T7591] but task is already holding lock:
[  135.195384][ T7591] ffff8881107314e0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_write_begin+0x198/0x310
[  135.199446][ T7591] 
[  135.199446][ T7591] which lock already depends on the new lock.
[  135.199446][ T7591] 
[  135.203252][ T7591] 
[  135.203252][ T7591] the existing dependency chain (in reverse order) is:
[  135.206774][ T7591] 
[  135.206774][ T7591] -> #5 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  135.210273][ T7591]        lock_acquire+0x120/0x360
[  135.212368][ T7591]        down_write+0x96/0x1f0
[  135.214447][ T7591]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[  135.217012][ T7591]        ocfs2_xattr_set+0x595/0x11f0
[  135.219166][ T7591]        ocfs2_set_acl+0x701/0x7b0
[  135.221906][ T7591]        ocfs2_iop_set_acl+0x1aa/0x2a0
[  135.224853][ T7591]        vfs_set_acl+0x887/0xb00
[  135.226564][ T7591]        filename_setxattr+0x2e0/0x600
[  135.228782][ T7591]        path_setxattrat+0x364/0x3a0
[  135.230887][ T7591]        __x64_sys_setxattr+0xbc/0xe0
[  135.233027][ T7591]        do_syscall_64+0xfa/0x3b0
[  135.235016][ T7591]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.237474][ T7591] 
[  135.237474][ T7591] -> #4 (&oi->ip_xattr_sem){++++}-{4:4}:
[  135.239795][ T7591]        lock_acquire+0x120/0x360
[  135.241229][ T7591]        down_read+0x46/0x2e0
[  135.243002][ T7591]        ocfs2_init_acl+0x2f9/0x720
[  135.244715][ T7591]        ocfs2_mknod+0x1321/0x2050
[  135.246445][ T7591]        ocfs2_create+0x1a5/0x440
[  135.248491][ T7591]        path_openat+0x14f4/0x3830
[  135.250370][ T7591]        do_filp_open+0x1fa/0x410
[  135.252041][ T7591]        do_sys_openat2+0x121/0x1c0
[  135.253875][ T7591]        __x64_sys_open+0x11e/0x150
[  135.255547][ T7591]        do_syscall_64+0xfa/0x3b0
[  135.257545][ T7591]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.259581][ T7591] 
[  135.259581][ T7591] -> #3 (jbd2_handle){++++}-{0:0}:
[  135.262240][ T7591]        lock_acquire+0x120/0x360
[  135.263911][ T7591]        start_this_handle+0x1fa7/0x21c0
[  135.265741][ T7591]        jbd2__journal_start+0x2c1/0x5b0
[  135.267905][ T7591]        jbd2_journal_start+0x2a/0x40
[  135.269764][ T7591]        ocfs2_start_trans+0x376/0x6d0
[  135.271485][ T7591]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  135.273565][ T7591]        ocfs2_dismount_volume+0x201/0x8d0
[  135.275442][ T7591]        generic_shutdown_super+0x135/0x2c0
[  135.277529][ T7591]        kill_block_super+0x44/0x90
[  135.279419][ T7591]        deactivate_locked_super+0xbc/0x130
[  135.281698][ T7591]        cleanup_mnt+0x425/0x4c0
[  135.283439][ T7591]        task_work_run+0x1d4/0x260
[  135.285047][ T7591]        exit_to_user_mode_loop+0xec/0x110
[  135.286978][ T7591]        do_syscall_64+0x2bd/0x3b0
[  135.289036][ T7591]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.291382][ T7591] 
[  135.291382][ T7591] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  135.294036][ T7591]        lock_acquire+0x120/0x360
[  135.295633][ T7591]        down_read+0x46/0x2e0
[  135.297146][ T7591]        ocfs2_start_trans+0x36a/0x6d0
[  135.299120][ T7591]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  135.301270][ T7591]        ocfs2_dismount_volume+0x201/0x8d0
[  135.303094][ T7591]        generic_shutdown_super+0x135/0x2c0
[  135.305270][ T7591]        kill_block_super+0x44/0x90
[  135.307346][ T7591]        deactivate_locked_super+0xbc/0x130
[  135.309358][ T7591]        cleanup_mnt+0x425/0x4c0
[  135.310946][ T7591]        task_work_run+0x1d4/0x260
[  135.312775][ T7591]        exit_to_user_mode_loop+0xec/0x110
[  135.315152][ T7591]        do_syscall_64+0x2bd/0x3b0
[  135.317090][ T7591]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.319528][ T7591] 
[  135.319528][ T7591] -> #1 (sb_internal#2){.+.+}-{0:0}:
[  135.322161][ T7591]        lock_acquire+0x120/0x360
[  135.324059][ T7591]        ocfs2_start_trans+0x26b/0x6d0
[  135.326260][ T7591]        ocfs2_mknod+0xe93/0x2050
[  135.327967][ T7591]        ocfs2_create+0x1a5/0x440
[  135.329544][ T7591]        path_openat+0x14f4/0x3830
[  135.331172][ T7591]        do_filp_open+0x1fa/0x410
[  135.333072][ T7591]        do_sys_openat2+0x121/0x1c0
[  135.334835][ T7591]        __x64_sys_open+0x11e/0x150
[  135.336763][ T7591]        do_syscall_64+0xfa/0x3b0
[  135.338619][ T7591]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.341326][ T7591] 
[  135.341326][ T7591] -> #0 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  135.345019][ T7591]        validate_chain+0xb9b/0x2140
[  135.346681][ T7591]        __lock_acquire+0xab9/0xd20
[  135.348727][ T7591]        lock_acquire+0x120/0x360
[  135.350606][ T7591]        down_write+0x96/0x1f0
[  135.352121][ T7591]        ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  135.354458][ T7591]        ocfs2_reserve_clusters_with_limit+0x1be/0xba0
[  135.357084][ T7591]        ocfs2_lock_allocators+0x2fa/0x5c0
[  135.359415][ T7591]        ocfs2_write_begin_nolock+0x2279/0x4340
[  135.361942][ T7591]        ocfs2_write_begin+0x1bb/0x310
[  135.364144][ T7591]        generic_perform_write+0x2c5/0x900
[  135.366523][ T7591]        ocfs2_file_write_iter+0x157a/0x1d10
[  135.368981][ T7591]        do_iter_readv_writev+0x61c/0x8b0
[  135.371330][ T7591]        vfs_writev+0x31a/0x960
[  135.373269][ T7591]        __se_sys_pwritev2+0x179/0x290
[  135.375539][ T7591]        do_syscall_64+0xfa/0x3b0
[  135.377397][ T7591]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.379788][ T7591] 
[  135.379788][ T7591] other info that might help us debug this:
[  135.379788][ T7591] 
[  135.383865][ T7591] Chain exists of:
[  135.383865][ T7591]   &ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE] --> &oi->ip_xattr_sem --> &ocfs2_file_ip_alloc_sem_key
[  135.383865][ T7591] 
[  135.390288][ T7591]  Possible unsafe locking scenario:
[  135.390288][ T7591] 
[  135.393310][ T7591]        CPU0                    CPU1
[  135.395446][ T7591]        ----                    ----
[  135.397615][ T7591]   lock(&ocfs2_file_ip_alloc_sem_key);
[  135.399840][ T7591]                                lock(&oi->ip_xattr_sem);
[  135.402546][ T7591]                                lock(&ocfs2_file_ip_alloc_sem_key);
[  135.405640][ T7591]   lock(&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]);
[  135.408529][ T7591] 
[  135.408529][ T7591]  *** DEADLOCK ***
[  135.408529][ T7591] 
[  135.411467][ T7591] 3 locks held by syz.2.612/7591:
[  135.413497][ T7591]  #0: ffff88811109a428 (sb_writers#12){.+.+}-{0:0}, at: vfs_writev+0x288/0x960
[  135.416977][ T7591]  #1: ffff888110731840 (&sb->s_type->i_mutex_key#38){+.+.}-{4:4}, at: ocfs2_file_write_iter+0x429/0x1d10
[  135.421270][ T7591]  #2: ffff8881107314e0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_write_begin+0x198/0x310
[  135.425355][ T7591] 
[  135.425355][ T7591] stack backtrace:
[  135.427559][ T7591] CPU: 1 UID: 0 PID: 7591 Comm: syz.2.612 Not tainted syzkaller #0 PREEMPT(full) 
[  135.427600][ T7591] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  135.427610][ T7591] Call Trace:
[  135.427617][ T7591]  <TASK>
[  135.427624][ T7591]  dump_stack_lvl+0x189/0x250
[  135.427647][ T7591]  ? __pfx_dump_stack_lvl+0x10/0x10
[  135.427663][ T7591]  ? __pfx__printk+0x10/0x10
[  135.427683][ T7591]  ? print_lock_name+0xde/0x100
[  135.427702][ T7591]  print_circular_bug+0x2ee/0x310
[  135.427720][ T7591]  check_noncircular+0x134/0x160
[  135.427737][ T7591]  validate_chain+0xb9b/0x2140
[  135.427758][ T7591]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  135.427777][ T7591]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  135.427796][ T7591]  __lock_acquire+0xab9/0xd20
[  135.427818][ T7591]  ? ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  135.427832][ T7591]  lock_acquire+0x120/0x360
[  135.427852][ T7591]  ? ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  135.427866][ T7591]  ? is_bpf_text_address+0x26/0x2b0
[  135.427887][ T7591]  ? kernel_text_address+0xa5/0xe0
[  135.427909][ T7591]  down_write+0x96/0x1f0
[  135.427925][ T7591]  ? ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  135.427939][ T7591]  ? __pfx_down_write+0x10/0x10
[  135.427958][ T7591]  ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  135.427976][ T7591]  ? check_noncircular+0xe0/0x160
[  135.427992][ T7591]  ? lockdep_unlock+0x89/0x120
[  135.428010][ T7591]  ? validate_chain+0x897/0x2140
[  135.428024][ T7591]  ? __pfx_ocfs2_reserve_local_alloc_bits+0x10/0x10
[  135.428037][ T7591]  ? __se_sys_pwritev2+0x179/0x290
[  135.428063][ T7591]  ? __lock_acquire+0xab9/0xd20
[  135.428089][ T7591]  ? do_raw_spin_unlock+0x4d/0x240
[  135.428105][ T7591]  ? _raw_spin_unlock+0x28/0x50
[  135.428125][ T7591]  ? ocfs2_alloc_should_use_local+0x152/0x310
[  135.428145][ T7591]  ? ocfs2_reserve_clusters_with_limit+0x16b/0xba0
[  135.428162][ T7591]  ocfs2_reserve_clusters_with_limit+0x1be/0xba0
[  135.428182][ T7591]  ? __pfx_ocfs2_reserve_clusters_with_limit+0x10/0x10
[  135.428200][ T7591]  ? rcu_is_watching+0x15/0xb0
[  135.428214][ T7591]  ? ocfs2_num_free_extents+0x347/0x620
[  135.428230][ T7591]  ? __pfx_ocfs2_num_free_extents+0x10/0x10
[  135.428245][ T7591]  ? __brelse+0x59/0xa0
[  135.428258][ T7591]  ? ocfs2_get_clusters+0x2b3/0xa70
[  135.428280][ T7591]  ocfs2_lock_allocators+0x2fa/0x5c0
[  135.428299][ T7591]  ? __pfx_ocfs2_lock_allocators+0x10/0x10
[  135.428317][ T7591]  ? ocfs2_write_begin_nolock+0xeb9/0x4340
[  135.428332][ T7591]  ? rcu_is_watching+0x15/0xb0
[  135.428345][ T7591]  ? ocfs2_write_begin_nolock+0xeb9/0x4340
[  135.428359][ T7591]  ? kfree+0x4d/0x440
[  135.428377][ T7591]  ocfs2_write_begin_nolock+0x2279/0x4340
[  135.428408][ T7591]  ? __pfx_ocfs2_write_begin_nolock+0x10/0x10
[  135.428422][ T7591]  ? __bfs+0x154/0x2a0
[  135.428435][ T7591]  ? check_path+0x21/0x40
[  135.428448][ T7591]  ? check_noncircular+0xe0/0x160
[  135.428464][ T7591]  ? lockdep_unlock+0x89/0x120
[  135.428482][ T7591]  ? validate_chain+0x897/0x2140
[  135.428500][ T7591]  ? __pfx_ocfs2_journal_access_di+0x10/0x10
[  135.428518][ T7591]  ? __lock_acquire+0xab9/0xd20
[  135.428540][ T7591]  ? ocfs2_write_begin+0x198/0x310
[  135.428560][ T7591]  ? down_write+0x162/0x1f0
[  135.428606][ T7591]  ? __pfx_down_write+0x10/0x10
[  135.428627][ T7591]  ocfs2_write_begin+0x1bb/0x310
[  135.428644][ T7591]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  135.428663][ T7591]  ? __pfx_ocfs2_write_begin+0x10/0x10
[  135.428683][ T7591]  generic_perform_write+0x2c5/0x900
[  135.428705][ T7591]  ? __pfx_generic_perform_write+0x10/0x10
[  135.428721][ T7591]  ? file_update_time+0x2da/0x490
[  135.428738][ T7591]  ? __generic_file_write_iter+0xf9/0x230
[  135.428759][ T7591]  ? ocfs2_file_write_iter+0x1551/0x1d10
[  135.428774][ T7591]  ocfs2_file_write_iter+0x157a/0x1d10
[  135.428787][ T7591]  ? __lock_acquire+0xab9/0xd20
[  135.428813][ T7591]  ? __pfx_ocfs2_file_write_iter+0x10/0x10
[  135.428826][ T7591]  ? aa_file_perm+0x13a/0x1550
[  135.428842][ T7591]  ? aa_file_perm+0x44d/0x1550
[  135.428857][ T7591]  ? futex_unqueue+0x22/0x240
[  135.428873][ T7591]  ? futex_unqueue+0x211/0x240
[  135.428945][ T7591]  ? __futex_wait+0x34f/0x3e0
[  135.428967][ T7591]  ? __pfx_aa_file_perm+0x10/0x10
[  135.428985][ T7591]  do_iter_readv_writev+0x61c/0x8b0
[  135.429007][ T7591]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  135.429025][ T7591]  ? rcu_read_lock_any_held+0xb3/0x120
[  135.429046][ T7591]  vfs_writev+0x31a/0x960
[  135.429060][ T7591]  ? __lock_acquire+0xab9/0xd20
[  135.429081][ T7591]  ? __pfx_vfs_writev+0x10/0x10
[  135.429099][ T7591]  ? __fget_files+0x2a/0x420
[  135.429113][ T7591]  ? __fget_files+0x3a0/0x420
[  135.429124][ T7591]  ? __fget_files+0x2a/0x420
[  135.429138][ T7591]  __se_sys_pwritev2+0x179/0x290
[  135.429159][ T7591]  ? __pfx___se_sys_pwritev2+0x10/0x10
[  135.429179][ T7591]  ? rcu_is_watching+0x15/0xb0
[  135.429194][ T7591]  ? do_syscall_64+0xbe/0x3b0
[  135.429208][ T7591]  ? __x64_sys_pwritev2+0x20/0xc0
[  135.429228][ T7591]  do_syscall_64+0xfa/0x3b0
[  135.429242][ T7591]  ? lockdep_hardirqs_on+0x9c/0x150
[  135.429254][ T7591]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.429268][ T7591]  ? exc_page_fault+0x9f/0xf0
[  135.429281][ T7591]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.429295][ T7591] RIP: 0033:0x7f0c7e98eba9
[  135.429309][ T7591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.429322][ T7591] RSP: 002b:00007f0c7f850038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148
[  135.429337][ T7591] RAX: ffffffffffffffda RBX: 00007f0c7ebd5fa0 RCX: 00007f0c7e98eba9
[  135.429348][ T7591] RDX: 0000000000000001 RSI: 0000200000000cc0 RDI: 0000000000000004
[  135.429357][ T7591] RBP: 00007f0c7ea11e19 R08: 000000000000000c R09: 0000000000000004
[  135.429366][ T7591] R10: 0000000000000fff R11: 0000000000000246 R12: 0000000000000000
[  135.429375][ T7591] R13: 00007f0c7ebd6038 R14: 00007f0c7ebd5fa0 R15: 00007ffe8b108478
[  135.429390][ T7591]  </TASK>
[  135.754193][ T5855] ocfs2: Unmounting device (7,2) on (node local)
[  138.858641][   T26] TC_ACT_REPEAT abuse ?
[  144.617998][ T1098] TC_ACT_REPEAT abuse ?

VM DIAGNOSIS:
15:39:24  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff82338267 RBX=ffff888107542f58 RCX=ffff888107541cc0 RDX=0000000000000000
RSI=ffffffff8e280930 RDI=0000000000000000 RBP=ffffc9000344fe10 RSP=ffffc9000344fca0
R8 =ffff888107541cc0 R9 =0000000000000004 R10=0000000000000006 R11=0000000000000000
R12=ffff888107541cc0 R13=0000000000004000 R14=1ffff92000689fa0 R15=dffffc0000000000
RIP=ffffffff82338288 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb683fc4c80 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000020000 CR3=00000001119f8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=43204d5349206469 6152206c65746e49 XMM01=0000000000000000 0000000000000000
XMM02=ffffff0000000000 ffffffffffffff00 XMM03=00000000000000ff ffffffffff000000
XMM04=0000000000000000 0000000000000000 XMM05=622d383864342d63 6666352d63333536
XMM06=656431626632785c 646975752d796266 XMM07=32785c6b73696466 32785c2f736b6e69
XMM08=00ffff00ffffffff ffffffffffffffff XMM09=3300003300000000 323a37622f396533
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001238 RDI=0000000000001239 RBP=00000000000003f8 RSP=ffffc900046adfb0
R8 =ffff888106dc0237 R9 =1ffff11020db8046 R10=dffffc0000000000 R11=ffffffff854f7000
R12=dffffc0000000000 R13=ffffffff99b008ea R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f707c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0c7f8506c0 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0c7e9733a0 CR3=00000000263be000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffff0000000000 XMM01=0101010101010101 0101010000000000
XMM02=695f746e756f6d5f 7a79730032736667 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=1360034e5d53002c 74696d6d6f635f63 XMM05=5cf3945eb98408b4 4938eecd7e6e9eec
XMM06=0000000000000000 00b0be19cd0096ec XMM07=0000000000000000 0000000000000000
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f0c7ea12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
