last executing test programs:

2m14.331973048s ago: executing program 2 (id=25):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f00000001c0)={0x28, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0})

2m14.248632137s ago: executing program 2 (id=26):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c000180140003"], 0xe4}, 0x1, 0x0, 0x0, 0x2048014}, 0x0)

2m14.151226764s ago: executing program 2 (id=27):
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000000031401002dbd70000000000009001200"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)

2m14.088331417s ago: executing program 2 (id=29):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020)

2m13.866392142s ago: executing program 2 (id=32):
io_setup(0x2, &(0x7f0000000040)=<r0=>0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x0)
io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
sendto$inet6(r1, 0x0, 0x0, 0x2004c8a0, 0x0, 0x0)

2m12.5130199s ago: executing program 2 (id=53):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_setup(0x8f0, &(0x7f0000002400)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}])

2m12.349456483s ago: executing program 32 (id=53):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
io_setup(0x8f0, &(0x7f0000002400)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}])

1m41.037604781s ago: executing program 3 (id=295):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0)

1m40.94858825s ago: executing program 3 (id=297):
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r0, 0x200000000114, 0x8, 0x0, &(0x7f0000000040))

1m40.857368161s ago: executing program 3 (id=300):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000001b40))

1m40.759801674s ago: executing program 3 (id=301):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)='\x00!', 0x2}], 0x1, 0x73a, 0x1)

1m40.549968571s ago: executing program 3 (id=305):
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x800, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x1000}}, './file0\x00'})

1m40.311989209s ago: executing program 3 (id=307):
r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000240)={0x1, 0x1, 0x0, 0x1, 0x20004})

1m25.361536298s ago: executing program 33 (id=307):
r0 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000240)={0x1, 0x1, 0x0, 0x1, 0x20004})

52.469856182s ago: executing program 4 (id=748):
syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000240)='./file7\x00', 0x803, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="d77668d5c4ae49c8c2b70f72fa6c1c49c40754b9e0fd092738e81ffb6eb1eefeac3d858552e95c2dca86be4cf465f524a0c72afb6390bfd3eb2d650088ba981a85db0ca4", @ANYRES16=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES32], 0x2, 0x6035, &(0x7f00000151c0)="$eJzs3VtvHGf9B/DfHrw+9N/U6kWVf8QhTTm0lCaNkzYtp6ZC4gIEVKpyn8i4VUQKKAkVrSziKhL3SFyj8iK4BqHeIBWJl8AbiGT3hghEBo33eZzxeO21Sbyz9nw+kjP722fG+0y+Hs+u5/AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDf/97b5zsRcfX99MRixP9FL6IbMV/Wp+OvEXfu5/n7EXEyNpvjmYg4MRtRLr/5z1MRFyPi0xMR6xury+XTS/vsxytv3fvbD9/+0dpvv/iXv//7k9//qd7+1iff/cEf70QsnvzN7/5z5/GsOwAAALRFURRFZ/NjfsSp9Pm+23SnAICJyPv/IsnPq9WPUvdju6b7o1ar1eqditHuVIuIWKsuU75ncDgeAI6YtbjfdBdokPxbrR8RTzTdCWCqdZruAIdifWN1uZPy7VT3B6eH7flckG35r3W2ru/YbTpO/RyTSf183Y1ePL1Lf+Yn1IdpkvPv1vO/OmwfpPkOO/9J2S3/wfDSp9bJ+ffq+dccn/y7I/Nvq5x//0D59+QPAAAAAABTLP/9f7Hh47+zj74q+7LX8d/TE+oDAAAAAAAAADxu+xj/r3xwOc9fH/9vi/H/AAAAYGqVn9VLH594+Nxu92Irn7/SiXiyNj/QMulimYWm+wEAAAAAAAAAAAAAbdIfnsN7pRMxExFPLiwURVF+VdXrg3rU5Y+6tq8/tFnTv+QBAGDo0xO1a/k7EXMRcSXd629mYWGhKObmF4qFYn42v58dzM4V85XPtXlaPjc72Mcb4v6gKL/ZXGW5qnGfl8e1179f+VqDorePjk1Gg4EDQEQM90br9kjHTFE8FU2/y+FosP0fP7Z/9qPpn1MAAADg8BVFUXTS7bxPpWP+3aY7BQBMRN7/148LqNVqtVqtPn51VTHanWoREWvVZcr3DIbjB4AjZi3uN90FGiT/VutHxMmmOwFMtU7THeBQrG+sLndSvp3q/iCN757PBdmW/1pnc7m8/KjpOPVzTCb183U3evH0Lv15ZkJ9mCY5/249/6vD9kGa77Dzn5Td8i/Xc7GB/jQt59+r519zfPLvjsy/rXL+/QPl35M/AAAAAABMsfz3/0XHf/MqAwAAAAAAAMCRs76xupyve83H/z83Yj7Xfx5POf+O/Fsp59+t5187IadXeXzvzYf5f7axuvzx/1/6Qp5Off4zvUH52jOdbq8/POfnn/nWpivx8o75y3mKmXfietyIlTi/o31mW/vSmPYLO9oHZft8bj8by/HzuBE/2WqfHXNi1NyY9mJMe86/Z/tvpZx/v/JV5r+Q2ju1aeneR90d2311Oup1Lv/4waWdW9fk3Y3e1rpVlet3poH+bP6fPDGIX95auXn2V9du3755PtJk27NLkSaPWc5/Jn3l/J9/btief+9Xt9d7Hw0OnP+0uBv9XfN/rvK4XN8XJty3JuT8B+kr55/3QKO3/6Oc/+7b/4sN9AcAAAAAAAAAAAAAAAD2UhTF5iWilyPi1XT9T1PXZgIAk5X3/0W+GUaiVqvVarX6+NVVxWhvVIuI+HN1mfI9w69HfTMAYJo9iIh/NN0JGiP/Fsv3+yunX2q6M8BE3frgw59eu3Fj5eat/2Xpovf4ewQAAAAAAAAAHFQe//N0ZfznzfOAauNGbxv/9c04/dnG6vL7i//6/JEb/7M76G2OdZ5W6Nmojs+9c4TiM7H3+N/9Ma83M6Z9MKZ9dkz73Jj2kRd6VOT8n00Z5/xPpRXba/zXnH99OuYlG7XX+K/PN9CfpuX8z6SxnnP+X63NV82/+MNRHv+3uy3/c7ff+8W5Wx98+NL19669u/Luys8uXFx6/fzSpYuvvXzunes3VtK/Dfb4cOX8h2Nf95wH2jI5/5y5/Nsl5//lVMu/XXL+X0m1/Nsl55/f78m/XXL++bPPVv4Pmu0Xk5HzfyHVtv92yfl/LdXyb5ec/4upln+75Py/nmr5t0vO/6VUy79dcv5nUy3/dsn5n0u1/Nsl55+PcMm/XXL++cwG+bdLzn8p1fJvl5z/hVTLv11y/hdTLf92yfm/kmr5t0vO/9VUHyB/9/46BnL+l1Jt+2+XnP9rqZZ/u+T8X0+1/Nsl5/+NVMu/XXL+30y1/Nsl5/+tVMu/XXL+3061/Nsl5/+deHgxqfzbI+f/Rqpt/+3y8P7/HnjggQf5QdO/mQAAAAAAAAAAAACAukmcTtz0OgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkau8j4D+Nkve22IvUkcAsTA2hgwsHjXH/ijrYOBkFJoG0IC6Qepce21ceKvem0CCImNoCkSSOWCC1opKSBU5SJVUJuoQaIRlSq16U171d5UaaVGFYpC5US9KSpsdea87+uZ2dmZtXfXO3PO74fw3ztzZubdM2dm9xnrmQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAehvunvyjvizL8v9rf4xk2eX531dl+/Ivp3cu9woBAACAhfqg9ud31qYT9s3jQnXb/P21//S9mZmZmSz703WffDmfwWiWrVmZZcV5wfBPTzVsEzybDff1133d3+HmBzqcP9jh/KEO56/ocP7KDucPdzh/1g6YZVXxekztyjbV/jpS7NJsXTZUO29Ti0s927eyvz++llPTV7vMzNDh7Gh2LJvMJmZdpq/2X5a9vSG/rXuzeFv9dbe1Psuycz9/+mBcQ1/Yx5uyhhurqb/v3rszG/3Fz58++PjI+9e0mh13w6yVZtnmjfk6n8uy8y9XZX3ZyrRP4jr769a5vsU6BxrW2Ve7XP735nWem+c64/c9HNb5z23WuT6c9sT1WZZNZ3Nu0+zZrD9b3XSraX8PF0dEfh35XfmxbPCCjpMN8zhO8sv85PrG46T5mIz7f0PYJ4NzrKH+7njv6ytm7feLPU7y77objtX8uh/Ib3R4uP6l1YZjNd/m6RvmPgZa3nctjoF0LNcdAxs7HQP9KwZqx0D/+TVvbDgGts66TH/WV7utd29ofwyMnzl+anzqyaduO3r8wJHJI5Mntu/Ytmfrtl07dk+MHz56bDL8eWG7tIeszvrTMbgxPNfEY/Cmpm3rD8mZ14rHwatX7bq21byQNQwv0uNgIWvIwvHyxRvzBV3en81xjOfbPLd54Y+D9HO/7nEwWPc4aPmc2uJxMDiPx0G+zbnN8/uZOVj3f6s1tHouXIxjYKTuGFjIz8P6NVzMz8P8Nh+5ee7nwvVhXc/fcqE/DwdmHQPx2+oLj738lPT73vDusF9mHxdX52dctiI7OzV5essTB86cOb01C+OS+HjdfdV8vKyu+56yWcdL/wUfL/s+9+Guq1ucPhL21fCt7e+rfJsdY+3vq9qze+v92XDqtiyMRXap92ern2b5/kxZos3+zLd57raF/y6Ycknd899Qp+e/gaHB4vlvIO2NoYbnv9l3zUBtZVl27rb5Pf8Nhf8v9fPfui55/sv31SNb2h8D+TbPj1/oMTDY9vnv+jD7wnpuDolhuC73f1g7f7o4TOvuy47HzeDgUDhuBuMtNh4322ddJr+2/LY3T1zccbP5+sb7quH3lhIeN/m+enmi/XGTb/PO1oU/d6yKf6177ljR6RgYGliRr3coHQTF893MqngMbMkOZiezY9mhdJn8Xs5va2zb/I6BFeH/S/3ccWWXHAP5vnplW/tjIN/m77Yv7u9Om8MpaZu6352aX1+YK/NfPXj++pp322Jn/nydn9nR/rWhfJuf7bjQnNF+P90aTrmsxX5qfvzMdUwfyjrvp8U6pvN1Hru9/WtT+Tbrds7zeNqXZdlbL7xRvN5VvL77l2f/5XsNr/u2ek35rRfe+PxVP/rRhawfAICL92Htz+kVxe+adf9iPZ9//wcAAAB6Qsz9/WEm8j8AAACURsz9A2Em8j8AAACURsz9g2Em+zq9O145PNb3jZc/eCZL7wY4E8Tz48sgD6wstosd7+nw9ejMefnpd70xdP/3n5nfbfdnWfZ/932q5faPrYzrKpyK6xxoPH2WK6+b1+0/+tD57erfP+Fcf3H98fuZ78tAsav89r/fVbve0ZuL+c59WW0+OP38s7Xr31N8Hbd/9z+L7b4Z3rRk3+G+hstvDuvZFOZoeE+ZB1ad3w/5jJf77ttH/uHTD5+/vXi5vo1rat/mK1uK643vEfXSXxXbx+97rvX/zQvf/m6+/RM3tF7/M/2t1/9uuN6fhPm/7xWn1+/z79et/w/D+uPtxcttef2HLdf/5l8X278ZjotXw2xe/51/fM0Hre6veDv7BovLxduf+PN7apeL1xevv3n9w+N3NeyP5ut/5/XievY+/j8D9dvH0+PtRI8ONh7ffeH+beiRZ1n27W9kDfs5Gyou91bT+uP1nRpsvf5bm9Z56rXHapdv/n6ibz10d8vvN65n31+MNHw/L60J+69/1T/m1/vup8LxGM5/f7q4vub3Mn1zTePzTdz+1ZHicRuvb7xp/S81rX/6unzfdV7/vb8o1v/mHSsb1r9vbTiePlrMTus/8mdrGy7/2meL9Zz+2tiJk1Nnj8b3OBhpehyvHF61+rLLP7JmbXgubf56/8kzj02eHp0Ynciy0R58y8ClXv/rYf53MaYX/xYK/zpYHHcv3l/83LppqPj6pXD6o+H+jD8fv/UnQw3Ha/P9Pj1czIWu/5awjvlav+mnu+e14X/tePPlf3vwy82/F8Tv59Qnhmvf3ysbrqid1/dOcX7z81Un//GJxsf1j9cV8wdhv86Ed2beeEVxe83XH9+b5MUvFI/f+JtcvHzW9H4iIwON38dC1//j8HvMD69sfP6Lx8cPnml6N+eRrC9fwnR4fsimi/PjVnF/v3juipa3F9+HJ5u+6kKWOaepJ6fGjx09cfaJ8TOTU2fGp558av/xk2dPnNlfe+/S/V/pdPnzj+/Vtcf3ocmdO7Lao/1kMZbYcq//1EMHD+2auPHQ5OEDZw+feejU5OkjB6emDk4emrrxwOHDk1/rdPmjh/Zu3bZn+65tY0eOHtq7e8+e7XvGjp44mS+jWFQHOye+Onbi9P7aRab27tiz9fbbd0yMHT95aHLvromJsbOdLl/72TSWX/rxsdOTxw6cOXp8cmzq6FOTe7fu2blzW8d3fzx+6vDU6PjpsyfGz05Nnh4vvpfRM7WT8599nS5PNUytDc93TfrCb+f33LozvT9u7o2vz3lVxSYjjSf+LLwX1DeHt++ez9cx9w+Fmfj3fwAAACiNmPvD51Ocf91d/gcAAIDSCB/4Fz4z0r//AwAAQBnF3D8cZlKR/K//r/9/Ef3/VNfW/9f/z/T/9f870P/X/29H/1//v5fXr/+v/09n3db/j7l/VZZVMv8DAABAFcTcvzrMRP4HAACA0oi5/7IwE/kfAAAASiPm/svDTCqS//X/9f99/n/5+v99WTat/6//3y30//X/29H/1//v5fXr/+v/01m39f9j7v9ImElF8j8AAABUQcz9a8JM5H8AAAAojZj714aZyP8AAABQGjH3j4SZlCn/3zH3Wfr/Ve//D1Sx//9+PMDL2v/3+f8F/f/uoP+v/9+O/r/+fy+vX/9f/5/Ouq3/H3P/R8NMypT/AQAAoOJi7v9YmIn8DwAAAKURc//Hw0zkfwAAACiNmPvXhZlUJP/r/1e9/+/z/zP9/yXs/8ct9f/1//X/e73/vyqcrP/fSP9f/1//X/+f9rqt/x9z/yfCTCqS/wEAAKAKYu6/IsxE/gcAAIDSiLn/k2Em8j8AAACURsz9V4aZVCT/6//r/+v/6//7/H/9/6Wk/1+O/n88Wf+/kf6//r/+v/4/7XVb/z/m/qvCTCqS/wEAAKAKYu6/OsxE/gcAAIDSiLn/U2Em8j8AAACURsz968NMKpL/9f/1//X/9f/1//X/l5L+v/5/O/r/+v+9vH79f/1/Ouu2/n/M/deEmVQk/wMAAEAVxNx/bZiJ/A8AAAClEXP/dWEm8j8AAACURsz9o2EmFcn/+v/6//r/+v/6//r/S0n/X/+/Hf1//f9eXr/+v/4/nXVb/z/m/g1hJhXJ/wAAAFAFMfdvDDOR/wEAAKA0Yu6/PsxE/gcAAIDSiLl/U5hJRfK//r/+v/5/Wfv/A/r/5ez/N++urqf/36b/X3cw6v/r/2f6/z23fv1//X8667b+f8z9N4SZVCT/AwAAQBXE3H9jmIn8DwAAAKURc/9NYSbyPwAAAJRGzP2bw0wqkv/1//X/9f/L2v/3+f8l7f/3HP1/n//fjv6//n8vr1//X/+fzrqt/x9z/81hJhXJ/wAAAFAFMfffEmYi/wMAAEBpxNx/a5iJ/A8AAAClEXP/WJhJRfK//r/+v/6//r/+v/7/UtL/1/9vR/9f/7+X16//r/9PZ93W/4+5/7Ywk4rkfwAAAKiCmPu3hJnI/wAAAFAaMfePh5nI/wAAAFAaMfdPhJlUJP+XrP//pY9kmf6//r/+v/5/jf5/d9D/1/9vR/9f/7+X16//r/9PZ93W/4+5f2uYSUXyPwAAAPSoay5k45j7t4WZyP8AAABQGjH3bw8zkf8BAACgNGLu3xFmUpH837L/X99/DbNH+v8+/1//X/9f/1//v8vo/+v/t1Pf/88vqf9flf7/XD9pemX9Bf1//X8667b+f8z9t4eZVCT/AwAAQBXE3L8zzET+BwAAgNKIuX9XmMns/P+3l25VAAAAwGKKuX93mEnP//v//HpVJfv8//b9/wP3pr/q/xf0//X/M/1//f8lpv+v/9+Oz/+vav9/cSz3+vX/9f/prNv6/zH37wkz6fn8DwAAAEQx9/9SmIn8DwAAAKURc/8vh5nI/wAAAFAaMff/SphJRfJ/pfr/dfT/C/r/+v+Z/r/+/xLT/9f/b0f/X/+/l9ffvf3/76zOMv1/ukO39f9j7t8bZlKR/A8AAABVEHP/p8NM5s7/w0u/KgAAAGAxxdx/R5iJf/8HAACA0oi5f1+YSUXyv/6//r/+v/6//r/+/1LS/9f/b2dh/f9R/f8FWu7+fK+vv3v7/z7/n+6xXP3/vjnOj7n/zjCTiuR/AAAAqIKY++8KM5H/AQAAoDRi7r87zET+BwAAgNKIuf8zYSYVyf+XrP/folCs/6//n+n/6//r/+v/L5D+f5X7/z7/f6GWuz+/COvP73L9f/1/uthy9f/n+jrm/nvCTCqS/wEAAKAKYu7/bJiJ/A8AAAClEXP/r4aZyP8AAABQGjH33xtmUpH87/P/9f/1/0vd/68tRf+//fr1/5eW/v+l7v+3/8ml/9/4fej/93z/3+f/6//T5bqt/x9z/6+FmVQk/wMAAEAVxNx/X5iJ/A8AAAClEXP//WEm8j8AAACURsz9vx5mUpH8r/+v/6//X+r+v8//1/9fdvr/Pv+/Hf1//f9eXr/+v/4/nXVb/z/m/t8IM6lI/gcAAIBSmPv1g5qY+38zzET+BwAAgNKIuf9zYSbyPwAAAJRGzP0PhJlUJP/r/+v/6//r/+v/6/8vJf1//f929P/1/3t5/fr/+v901m39/5j7Px9mUpH8DwAAAFUQc/+DYSbyPwAAAJRGzP1fCDOR/wEAAKAHnJvXVjH3fzHMpCL5X/9f/1//X/9/Efv/KzL9/0T/f1XtT/1//f92eqn/3+oc/X/9f/1//X/a67b+f8z9D4WZVCT/AwAAQBXE3P9wmIn8DwAAAKURc/+XwkzkfwAAACiNmPt/K8ykIvlf/1//X/9f/9/n/+v/LyX9f/3/dnqp/9+K/r/+v/6//j/tdVv/P+b+3w4zqUj+BwAAgCqIuf93wkzkfwAAACiNmPt/N8xE/gcAAIDSiLn/kTCTiuT/ov//8EH9/4L+v/6//r/+f6T/vzj0//X/29H/1//v5fXr/+v/01m39f9j7v9ymElF8j8AAABUQcz9vxdmIv8DAABAacTcvz/MRP4HAACA0oi5/9Ewk4rkf5//r/+v/6//fyH9/1UtTtf/L+j/t6b/r//fjv5/mfv/KxZljcu3/rmesAbT3/T/9f/prNv6/zH3HwgzqUj+BwAAgCqIuf/3w0zkfwAAACiNmPsPhpnI/wAAAFAaMfcfCjOpSP7X/9f/1//X/++Rz/8fypai/z+t/7/UStL/f0f/v6D/30j/3+f/6//r/9Net/X/Y+6fDDOpSP4HAACAXjefdx2Nuf9wmIn8DwAAAKURc/+RMBP5HwAAAEoj5v7Hwkwqkv+7sf9/nf6//r/+f7oe/X+f/6//357P/9f/z/T/L9py9+d7ff36//r/dNZt/f+Y+4+GmVQk/wMAAEAVxNz/lTAT+R8AAABKI+b+r4aZyP8AAADQc1bOcXrM/cfCTCqS/7ux/5/p/+v/6/+n69H/1//X/29P/1//P9P/v2jL3Z/v9fUvav9/hf4/5dRt/f+Y+4+HmVQk/wMAAEAVxNx/IsxE/gcAAIDSiLn/ZJiJ/A8AAAClEXP/qTCTnsz/fXP2duei/6//3239//rmZan7/yv1//X/9f8Xg/6//n+m/3/Rav35D2dmZvT/l7//7/P/Kalu6//H3P8HYSY9mf8BAACAVmLuPx1mIv8DAAD/z9599thxV3Ecv7YSOxEQniNeCyDeB495AfSWmN5Cr6GFGnrvvYUOodfQe2+hhCIFafeck2xsz3gvvr4z//P5PDks2fVOsEn00+qrAYaRu/8BcYv9DwAAAMPI3f/AuGV6/5/c7VNdOvp//f/S+v+27/+/TP+f9P/6/+PQ/+v/N/r/re27n1/78+v/9f/MW1r/n7v/QXGLn/8DAADAMHL3Pzhusf8BAABgGLn7HxK32P8AAAAwjNz9D41bmuz/S9v/3/fIR/p//f9mq/7/dH3tUP2/9//f/vuq/9f/H0PX/j//Saj/P6T/386++/m1P7/+X//PvKX1/7n7Hxa3NNn/AAAA0EHu/ofHLfY/AAAADCN3/yPiFvsfAAAAhpG7/5FxS5P97/3/+v/19f+Dvv9f/1/0//r/4+ja/yf9/yH9/3b23c+v/fn1//p/5i2t/8/d/6i4pcn+BwAAgA5y918dt9j/AAAAMIzc/dfELfY/AAAADCN3/5m4pcn+H7f/Pz35vfX/h/T/+v+N/l//v2P6f/3/FP3/cvv/2/T/s99f/6//Z97S+v8z124Odv/ht+m3/wEAAKCD3P2PiVvsfwAAABhG7v7Hxi32PwAAAAwjd//j4pYm+3/c/n+a/v+Q/l//v9H/6/93TP+v/5+i/19u/+/9//r/ua/X/3Mhltb/5+5/fNzSZP8DAABAB7n7nxC32P8AAAAwjNz9T4xb7H8AAAAYRu7+J8UtTfa//l//r//X/+v/9f+7pP/X/09ZSf8fv8TZvz36/6H7//vfc+brz9v/n9jo//X/hKX1/7n7nxy3NNn/AAAA0EHu/qfELfY/AAAADCN3/1PjFvsfAAAAhpG7/9q4pcn+1//r//X/+n/9v/5/l/T/+v8pK+n/z0v/P3T/P/v9vf9f/8+8pfX/ufufFrccGX6nj/l3CQAAACxJ7v6nxy1Nfv4PAAAAHeTuf0bcYv8DAADAMHL3PzNuabL/9f/z/f/Vd5v/9fT/535+/b/+X/+v/9f/r6D/v+Ecn6j/vyD6/0b9/5Vnf73+X//PvKX1/7n7nxW3NNn/AAAA0EHu/mfHLfY/AAAADCN3/3PiFvsfAAAAhpG7/7lxy302mwvM2FdN/+/9//p//b/+X/+/S/r/FfT/56L/vyD6/0b9/zno//X/zFta/5+7/3lxi5//AwAAwDBy9z8/brH/AQAAYBi5+18Qt9j/AAAAMIzc/S+MW5rsf/3/evr/y/T/I/T/97jx+vvp/+Ov6//1/xeD/l//v9H/b23f/fzan1//r/9n3tL6/9z918UtTfY/AAAAdJC7/0Vxi/0PAAAAw8jd/+K4xf4HAACAYeTuf0nc0mT/6//X0/97//8Q/b/3/y+4/390/HlM+v+LY/D+/+bNZqP/32//f91V+v+t7buf39Pzn7xYz6//1/8zb2n9f+7+l8YtTfY/AAAAdJC7/2Vxi/0PAAAAw8jdf33cYv8DAADAMHL3vzxuabL/9f/6f/2//l//7/3/uzR4/+/9//vv/w/o/7fTtP+/aM+v/9f/M29p/X/u/lfELU32PwAAAHSQu/+VcYv9DwAAAMPI3f+quMX+BwAAgFW7YweWu//VcUuT/a//1//r/8/X/1+v/78T/b/+fxv6f/3/FP2//n/Nz6//1/8zb2n9f+7+18QtTfY/AAAAdJC7/4a4xf4HAACAYeTuf23cYv8DAADAMHL3vy5uabL/9f/6f/2/9//r/1fV/9925/+9lk7/r/+fov/X/6/5+fX/+n/mLa3/z93/+rilyf4HAACADnL3vyFusf8BAABgGLn73xi32P8AAAAwjNz9b4pbmux//b/+X/+v/9f/r6r/Xx39v/5/iv5f/7/m59f/6/+Zt7T+P3f/m+OWJvsfAAAAOsjd/5a4xf4HAACAYeTuf2vcYv8DAADAMHL3vy1uabL/9f/6f/2//l//r//fJf2//n+K/l//v+bn1//r/5m3tP4/d//b45Ym+x8AAAA6yN3/jrjF/gcAAIBh5O5/Z9xi/wMAAMAwcve/K25psv/1//p//b/+X/+v/98l/b/+f8r6+v/Lj3yk/9f/6//1/0xbWv+fu//dcUuT/Q8AAAAd5O5/T9xi/wMAAMAwcve/N26x/wEAAGAYufvfF7c02f/6/879/4kzm43+f6P/1//r/3dK/6//n7K+/v8o/b/+X/+v/2fa0vr/3P3vj1ua7H8AAADoIHf/B+IW+x8AAACGkbv/g3GL/Q8AAADDyN3/obilyf7fsv+/V36a/v/QOvt/7//X/x99Tv2//n8X9P/6/yn6f/3/mp9/yf3/Sf0/C7H3/j8/MT7O3f/huKXJ/gcAAIAOcvd/JG6x/wEAAGAYufs/GrfY/wAAADCM3P0fi1ua7H/v/9f/6//1/3fs/0+d+4/4Af2//n8b+n/9/xT9v/5/zc+/5P7f+/9Zir33/3f6OHf/x+OWJvsfAAAAOsjd/4m4xf4HAACAYeTu/2TcYv8DAADAMHL33xi3NNn/+n/9v/5f/+/9//r/XdL/6/+n6P9X1/9fdscP9P/6f/0/c5bW/+fu/1Tc0mT/AwAAwMpdeSGflLv/03GL/Q8AAADDyN3/mbjF/gcAAIBh5O7/bNzSZP9v0/+f1v+fRf9/7ufX/+v/9f/6/4X1/1ds+330/4f0/0c17P+P0P/r//X/zFla/5+7/3NxS5P9DwAAAB3k7v983GL/AwAAwDrcZf5Tcvd/IW6x/wEAAGAYufu/GLc02f/e/6//1/8fq/+/Rv+v/9f/H8/C+v+t6f8P7a7/v/emR/9/efwH/f8Iz6//1/8zb2n9f+7+L8UtTfY/AAAAdJC7/6a4xf4HAACAYeTu/3LcYv8DAADAMHL3fyVuabL/9f/6f/2/9//r//X/u6T/P27/f+pYzzVO/+/9/xv9/+qeX/+v/2fe0vr/3P1fjVua7H8AAADoIHf/1+IW+x8AAACGkbv/63GL/Q8AAADDyN3/jbilyf7X/+v/9f/6f/2//n+X9P/e/z9F/6//X/Pz6//1/8xbWv+fu/+bcUuT/Q8AAAAd5O7/Vtxi/wMAAMAwcvd/O26x/wEAAGAYufu/E7c02f/6f/2//l//r/9fSP9/4oz+fwv6f/3/Rv+/tX3382t/fv2//p95S+v/c/d/N25psv8BAACgg9z934tb7H8AAAAYRu7+m+MW+x8AAACGkbv/+3FLk/0/0/9XA6f/n6b/3xz8/0f/f/TX1//r/73/X/+v/5+m/9f/X8Tnz99+/b/+nwVZWv+fu/8Hccvtw+/U8f8uAQAAgCXJ3f/DuKXJz/8BAACgg9z9P4pb7H8AAAAYRu7+H8ctTfa/9//r/73/X/+v/9f/75L+X/8/Rf+v/1/z8+v/9f/MW1r/n7v/J3FLk/0PAAAAHeTu/2ncYv8DAADAMHL3/yxusf8BAABgGLn7fx63NNn/+v9R+/9b7nr4V/X/+n/9/9zz6/93S/+v/5+i/9f/r/n59f/6f+Ytrf/P3f+LuKXJ/gcAAID1Ozn7Gbn7fxm32P8AAAAwjNz9v4pb7H8AAAAYRu7+X8ctTfa//n/U/t/7//X/+n/9/zLo//X/U/T/+v81P7/+X//PvKX1/7n7fxO3NNn/AAAA0EHu/t/GLfY/AAAADCN3/+/iFvsfAAAAhpG7//dxS5P9r//fRf9/k/5f/39A/6//1/+vv/8/Ef/A0f8f0v8fpf/X/+v/9f9MW1r/n7v/D3FLk/0PAAAAHeTu/2PcYv8DAADAMHL3/ylusf8BAABgGLn7/xy3NNn/4/T/8aSL6P+9/1//f0j/r//X/6+//0/6/0P6/6P0//p//b/+n2lL6/9z9/8lbmmy/wEAAKCD3P1/jVvD3/4HAACAYeTuvyVusf8BAABgGLn7/xa3NNn/4/T/Qf+v/9f/6//jv19g/3/wqfr/i0v/r//f6P+3tu9+fu3Pr//X/zNvaf1/7v6/xy1N9j8AAAB0kLv/H3GL/Q8AAADDyN3/z7jF/gcAAIBh5O6/NW45a/+fuoRPdeno//X/u+v/b7v7ZqP/1//r/73/X/+v/z8//b/+f83Pr//X/zNvaf3/rQf/rr1i86+Dr/bzfwAAABhR7v5/xy32PwAAAAwjd/9/4hb7HwAAAIaRu/+/cUuT/a//1/97////1f9fNfXnQf+v/9f/6//1/9P0//r/NT+//l//z7yl9f+5+/8XAAD//2rDl08=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0xc0185879, 0xfffffffffffffffe)

51.786559944s ago: executing program 4 (id=752):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x23, 0x4, 0x9, 0x0, r0}, 0x48)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xff, r1, 0x28dd196b19db6b1d}, 0x38)

50.625933644s ago: executing program 4 (id=754):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f00000002c0))

50.533664368s ago: executing program 4 (id=755):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed000a, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@nolazytime}, {@debug}, {@noload}, {@auto_da_alloc}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@discard}, {@nodelalloc}]}, 0xfe, 0x473, &(0x7f00000004c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
lstat(&(0x7f00000000c0)='./file1\x00', 0x0)

50.298992803s ago: executing program 4 (id=758):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_emit_ethernet(0x76, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @remote, [@hopopts={0x3a, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0)
socket(0x10, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014})

49.836150564s ago: executing program 4 (id=760):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf253f00000008000300", @ANYRES32=r2, @ANYBLOB="04005e801c005e8008000700c5f133694bbd07cb55000000080003006e8f000030005e800800020003000000080002491acf00000c0001"], 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000)

49.642217387s ago: executing program 34 (id=760):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf253f00000008000300", @ANYRES32=r2, @ANYBLOB="04005e801c005e8008000700c5f133694bbd07cb55000000080003006e8f000030005e800800020003000000080002491acf00000c0001"], 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000)

1.011515406s ago: executing program 1 (id=1145):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48)

959.935716ms ago: executing program 1 (id=1146):
memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0)
userfaultfd(0x1)
socket$can_j1939(0x1d, 0x2, 0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x4, 0xfffefffe}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

877.728981ms ago: executing program 1 (id=1148):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x3, 0xff, 0x9, 0x3, 0x0, 0x0, 0x40}, 0xc)
recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x1)

810.678563ms ago: executing program 1 (id=1150):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)

687.530492ms ago: executing program 1 (id=1152):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000000c0)=@l={0x92, 0x7, 0xd0, 0xc, 0x4, 0x10, 0x1})

684.412718ms ago: executing program 1 (id=1154):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
write(r0, &(0x7f0000000100)="87", 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x28042, 0x102)
ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r1}, 0x0, 0x0, 0x100000})

520.250106ms ago: executing program 5 (id=1156):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a)

519.980149ms ago: executing program 0 (id=1157):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x90)
getdents64(r1, &(0x7f00000000c0)=""/55, 0x37)
getdents64(r1, &(0x7f0000001f80)=""/4096, 0x1000)

460.105857ms ago: executing program 5 (id=1158):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)

440.617654ms ago: executing program 5 (id=1159):
unshare(0x22020600)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2062, 0x0, 0x0)

358.258076ms ago: executing program 0 (id=1160):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)

358.015788ms ago: executing program 5 (id=1161):
syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000880)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14806, &(0x7f00000000c0)=ANY=[], 0x1, 0x70c, &(0x7f0000001500)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002)

261.006085ms ago: executing program 0 (id=1162):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40804)

181.455409ms ago: executing program 0 (id=1163):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000003880)={0x8, 0xffffffff, 0x6000}, 0xc)

124.557494ms ago: executing program 0 (id=1164):
r0 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000300)={0x0, 0x0, 0x5, &(0x7f0000000100)={0x0, "fd7b44512b7e1b0420ec2a3ba53b31dd77e7ffffff0300151200"}})

112.437062ms ago: executing program 5 (id=1165):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000006000000040000000000000700000000000000000000000b0100000000000000010000850000000000000000020000000000000000000000da"], 0x0, 0x4e}, 0x28)

279.891µs ago: executing program 0 (id=1166):
r0 = syz_open_dev$video4linux(&(0x7f0000000ac0), 0x2, 0x0)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000000c0)={0x0, 0x19, 0x1})

0s ago: executing program 5 (id=1167):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
readv(r0, &(0x7f0000000040)=[{&(0x7f0000001a80)=""/4112, 0x1010}], 0x1)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local})
read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020}, 0x2020)

kernel console output (not intermixed with test programs):

ink: 8 bytes leftover after parsing attributes in process `syz.3.200'.
[  105.407445][ T6502] loop3: detected capacity change from 0 to 1024
[  105.444814][ T6489] loop0: detected capacity change from 0 to 32768
[  105.568526][   T33] audit: type=1800 audit(1758170485.425:10): pid=6502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.201" name="file1" dev="loop3" ino=20 res=0 errno=0
[  105.781838][ T6510] loop1: detected capacity change from 0 to 128
[  105.892305][ T6512] loop3: detected capacity change from 0 to 4096
[  105.904312][ T6512] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  105.931172][ T6512] ntfs3(loop3): $AttrDef is corrupted.
[  106.372434][ T6530] netlink: 160 bytes leftover after parsing attributes in process `syz.3.215'.
[  109.162206][ T6560] netlink: 20 bytes leftover after parsing attributes in process `syz.0.225'.
[  109.218079][ T6562] loop3: detected capacity change from 0 to 256
[  109.392154][ T6573] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  109.415295][ T6573] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  109.603280][ T5955] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  109.764680][ T5955] usb 1-1: Using ep0 maxpacket: 32
[  109.782302][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.804529][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.822971][ T5955] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  109.833152][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.839060][ T5955] usb 1-1: config 0 descriptor??
[  109.849205][ T5955] hub 1-1:0.0: USB hub found
[  109.869086][ T6585] loop3: detected capacity change from 0 to 128
[  109.890346][ T6585] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  109.907417][ T6585] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  109.959797][ T6553] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  110.065896][ T5955] hub 1-1:0.0: 1 port detected
[  110.268232][ T6595] netlink: 'syz.1.239': attribute type 3 has an invalid length.
[  110.273876][ T6595] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.239'.
[  110.352273][ T6599] loop1: detected capacity change from 0 to 512
[  110.371243][ T6599] EXT4-fs (loop1): blocks per group (34) and clusters per group (32768) inconsistent
[  110.484999][ T6603] loop1: detected capacity change from 0 to 512
[  110.520502][ T6603] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  110.527722][ T6603] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.243: invalid indirect mapped block 2683928664 (level 1)
[  110.540516][ T6603] EXT4-fs (loop1): 1 truncate cleaned up
[  110.549873][ T6603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.580213][ T6603] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.243: Invalid block bitmap block 3 in block_group 0
[  110.602371][ T6603] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.243: Invalid block bitmap block 3 in block_group 0
[  110.610427][ T6603] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.243: Invalid block bitmap block 3 in block_group 0
[  110.646473][ T5892] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.677360][ T5955] hub 1-1:0.0: activate --> -90
[  110.780374][ T6612] loop1: detected capacity change from 0 to 4096
[  110.788214][ T6612] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  110.798276][ T6612] ntfs3(loop1): Failed to load $Bitmap (-22).
[  110.879692][ T5955] usb 1-1-port1: config error
[  111.098036][ T1273] usb 1-1: USB disconnect, device number 4
[  111.101702][ T5955] usb 1-1: Failed to suspend device, error -19
[  111.906706][ T6630] loop3: detected capacity change from 0 to 512
[  111.911495][ T6630] EXT4-fs: Ignoring removed oldalloc option
[  111.925159][ T6630] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.253: dx entry: limit 1024 != root limit 124
[  111.938973][ T6630] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.253: Corrupt directory, running e2fsck is recommended
[  111.948813][ T6630] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  111.952982][ T6630] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.253: corrupted in-inode xattr: invalid ea_ino
[  111.961470][ T6630] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.253: couldn't read orphan inode 15 (err -117)
[  111.970658][ T6630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.180828][ T6051] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.009831][ T6681] loop1: detected capacity change from 0 to 4096
[  113.052044][ T6684] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  113.203348][ T5926] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  113.363276][ T5926] usb 1-1: Using ep0 maxpacket: 16
[  113.376732][ T5926] usb 1-1: config 254 has an invalid interface number: 235 but max is 0
[  113.381023][ T5926] usb 1-1: config 254 has no interface number 0
[  113.388688][ T5926] usb 1-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32
[  113.396045][ T5926] usb 1-1: config 254 interface 235 altsetting 2 has an endpoint descriptor with address 0xA2, changing to 0x82
[  113.404894][ T5926] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  113.411611][ T5926] usb 1-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  113.419741][ T5926] usb 1-1: config 254 interface 235 has no altsetting 0
[  113.429895][ T5926] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[  113.438750][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.442804][ T5926] usb 1-1: Product: syz
[  113.447045][ T5926] usb 1-1: Manufacturer: syz
[  113.451624][ T5926] usb 1-1: SerialNumber: syz
[  113.468137][ T6679] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  113.683842][ T5926] usbtest 1-1:254.235: couldn't get endpoints, -71
[  113.694966][ T5926] usbtest 1-1:254.235: probe with driver usbtest failed with error -71
[  113.708490][ T5926] usb 1-1: USB disconnect, device number 5
[  114.084609][ T6702] loop1: detected capacity change from 0 to 256
[  114.575269][ T6708] loop1: detected capacity change from 0 to 32768
[  114.640925][ T6708] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  114.712365][ T6708] XFS (loop1): Ending clean mount
[  114.719434][ T6708] XFS (loop1): Quotacheck needed: Please wait.
[  114.732561][ T6712] syz.3.282 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  114.772175][ T6708] XFS (loop1): Quotacheck: Done.
[  114.818723][ T5892] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  114.981358][ T6744] block nbd0: Attempted send on invalid socket
[  115.004217][ T6744] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  115.021233][ T6744] (syz.0.292,6744,0):ocfs2_get_sector:1714 ERROR: status = -5
[  115.026573][ T6744] (syz.0.292,6744,0):ocfs2_sb_probe:753 ERROR: status = -5
[  115.029509][ T6744] (syz.0.292,6744,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  115.032954][ T6744] (syz.0.292,6744,0):ocfs2_fill_super:1177 ERROR: status = -5
[  115.069441][ T6747] netlink: 44 bytes leftover after parsing attributes in process `syz.3.293'.
[  115.070396][ T6749] netlink: 'syz.1.289': attribute type 1 has an invalid length.
[  115.201671][ T6753] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[  115.207301][ T6753] bond1: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  115.216492][ T6753] bond1: (slave vti0): making interface the new active one
[  115.226438][ T6753] bond1: (slave vti0): Enslaving as an active interface with an up link
[  115.250791][ T6761] loop0: detected capacity change from 0 to 64
[  115.322521][ T6766] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  116.162557][ T6785] netlink: 'syz.1.309': attribute type 12 has an invalid length.
[  117.036528][ T5941] kernel write not supported for file /vcsa (pid: 5941 comm: kworker/0:4)
[  117.341708][ T6823] delete_channel: no stack
[  117.355280][ T6822] delete_channel: no stack
[  118.113276][ T5941] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  118.286615][ T5941] usb 1-1: Using ep0 maxpacket: 16
[  118.362135][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.377321][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.393220][ T5941] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  118.400345][ T5941] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  118.406201][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.424492][ T5941] usb 1-1: config 0 descriptor??
[  118.661452][ T6840] loop1: detected capacity change from 0 to 256
[  118.844643][ T6844] warning: `syz.1.334' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  118.852709][ T5941] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  118.855778][ T5941] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  118.859632][ T5941] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0
[  118.884219][ T5941] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0002/input/input4
[  118.979416][ T5941] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  119.019386][ T6846] loop1: detected capacity change from 0 to 8192
[  119.048476][ T5941] usb 1-1: USB disconnect, device number 6
[  119.288426][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'.
[  119.474582][ T6860] loop1: detected capacity change from 0 to 1024
[  119.608925][   T33] audit: type=1326 audit(1758170499.465:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6863 comm="syz.0.344" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b0b8eba9 code=0x7ffc0000
[  119.643309][   T33] audit: type=1326 audit(1758170499.465:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6863 comm="syz.0.344" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b0b8eba9 code=0x7ffc0000
[  119.664277][   T33] audit: type=1326 audit(1758170499.465:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6863 comm="syz.0.344" exe="/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f53b0b8eba9 code=0x7ffc0000
[  119.696818][   T33] audit: type=1326 audit(1758170499.465:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6863 comm="syz.0.344" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b0b8eba9 code=0x7ffc0000
[  119.711891][   T33] audit: type=1326 audit(1758170499.475:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6863 comm="syz.0.344" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b0b8eba9 code=0x7ffc0000
[  119.904014][ T5926] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  119.993331][ T5941] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  120.056672][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.063876][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.070441][ T5926] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  120.081323][ T5926] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  120.086172][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.095994][ T5926] usb 2-1: config 0 descriptor??
[  120.146931][ T5941] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  120.151586][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  120.157408][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  120.161932][ T5941] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  120.167419][ T5941] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  120.171091][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.178801][ T5941] usb 1-1: config 0 descriptor??
[  120.526668][ T5926] plantronics 0003:047F:FFFF.0003: item 0 4 0 11 parsing failed
[  120.532306][ T5926] plantronics 0003:047F:FFFF.0003: parse failed
[  120.535182][ T5926] plantronics 0003:047F:FFFF.0003: probe with driver plantronics failed with error -22
[  120.591872][ T5941] plantronics 0003:047F:FFFF.0004: ignoring exceeding usage max
[  120.613202][ T5941] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  120.724746][ T1273] usb 2-1: USB disconnect, device number 3
[  121.860375][ T6893] loop1: detected capacity change from 0 to 16
[  121.887137][ T6893] erofs (device loop1): mounted with root inode @ nid 36.
[  121.965731][ T6895] loop1: detected capacity change from 0 to 64
[  122.215275][ T6898] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  122.497150][ T6900] loop0: detected capacity change from 0 to 1024
[  122.501640][ T6900] EXT4-fs: Ignoring removed nomblk_io_submit option
[  122.558011][ T6900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.577296][   T33] audit: type=1800 audit(1758170502.435:16): pid=6900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.360" name="bus" dev="loop0" ino=18 res=0 errno=0
[  122.705232][ T1273] usb 1-1: USB disconnect, device number 7
[  122.727420][ T5890] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.097734][ T6909] loop0: detected capacity change from 0 to 4096
[  123.118895][ T6909] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  123.135919][ T6909] ntfs3(loop0): ino=1e, "file1" attr_set_size
[  123.147663][ T6908] ntfs3(loop0): ino=1e, "file1" attr_set_size
[  123.164727][ T6911] loop1: detected capacity change from 0 to 512
[  123.168835][ T6911] EXT4-fs: Ignoring removed bh option
[  123.171921][ T6911] EXT4-fs: Ignoring removed mblk_io_submit option
[  123.189513][ T6911] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  123.205025][ T6911] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  123.228258][ T6911] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.364: Invalid inode table block 0 in block_group 0
[  123.236564][ T6911] EXT4-fs (loop1): Remounting filesystem read-only
[  123.239234][ T6911] EXT4-fs (loop1): get root inode failed
[  123.241913][ T6911] EXT4-fs (loop1): mount failed
[  123.576839][ T1273] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  123.747184][ T1273] usb 2-1: Using ep0 maxpacket: 32
[  123.762871][ T1273] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  123.769064][ T1273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.775978][ T1273] usb 2-1: config 0 descriptor??
[  123.992632][ T1273] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  124.012160][ T1273] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  124.025009][ T1273] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  124.031483][ T1273] usb 2-1: media controller created
[  124.070236][ T1273] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  124.228046][ T6935] IPVS: length: 246 != 8
[  124.258294][ T6935] loop0: detected capacity change from 0 to 1024
[  124.262836][ T6935] hfsplus: Bad value for 'gid'
[  124.711282][ T1273] az6027: usb out operation failed. (-71)
[  124.716580][ T1273] az6027: usb out operation failed. (-71)
[  124.720044][ T1273] stb0899_attach: Driver disabled by Kconfig
[  124.724173][ T1273] az6027: no front-end attached
[  124.724173][ T1273] 
[  124.736640][ T1273] az6027: usb out operation failed. (-71)
[  124.747870][ T1273] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  124.786279][ T1273] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5
[  124.800461][ T1273] dvb-usb: schedule remote query interval to 400 msecs.
[  124.806613][ T1273] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  124.866938][ T1273] usb 2-1: USB disconnect, device number 4
[  125.029729][ T1273] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  125.450763][ T6942] loop0: detected capacity change from 0 to 32768
[  126.869134][ T6966] loop0: detected capacity change from 0 to 40427
[  126.891573][ T6966] F2FS-fs (loop0): invalid crc value
[  127.000482][ T6966] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  127.018275][ T6966] F2FS-fs (loop0): Start checkpoint disabled!
[  127.021755][ T6976] loop1: detected capacity change from 0 to 2048
[  127.030259][ T6966] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  127.068932][ T6976] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  127.108239][  T696] kworker/u9:3: attempt to access beyond end of device
[  127.108239][  T696] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  127.118077][  T696] CPU: 0 UID: 0 PID: 696 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) 
[  127.118131][  T696] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  127.118141][  T696] Workqueue: writeback wb_workfn (flush-7:0)
[  127.118168][  T696] Call Trace:
[  127.118176][  T696]  <TASK>
[  127.118184][  T696]  dump_stack_lvl+0x189/0x250
[  127.118206][  T696]  ? __pfx_dump_stack_lvl+0x10/0x10
[  127.118222][  T696]  ? __pfx_queue_work_on+0x10/0x10
[  127.118235][  T696]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  127.118256][  T696]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  127.118285][  T696]  f2fs_handle_critical_error+0x37c/0x540
[  127.118320][  T696]  f2fs_write_end_io+0x886/0xb60
[  127.118347][  T696]  __submit_merged_bio+0x27a/0x6a0
[  127.118375][  T696]  __submit_merged_write_cond+0x255/0x530
[  127.118401][  T696]  f2fs_write_data_pages+0x261d/0x3000
[  127.118442][  T696]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  127.118468][  T696]  ? unwind_next_frame+0xa5/0x2390
[  127.118506][  T696]  ? ret_from_fork_asm+0x1a/0x30
[  127.118528][  T696]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  127.118561][  T696]  ? __lock_acquire+0xab9/0xd20
[  127.118588][  T696]  ? __update_page_owner_handle+0x5a/0x570
[  127.118621][  T696]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  127.118635][  T696]  do_writepages+0x32e/0x550
[  127.118658][  T696]  ? reacquire_held_locks+0x127/0x1d0
[  127.118670][  T696]  ? writeback_sb_inodes+0x384/0x1010
[  127.118696][  T696]  __writeback_single_inode+0x145/0xff0
[  127.118712][  T696]  ? do_raw_spin_unlock+0x4d/0x240
[  127.118732][  T696]  writeback_sb_inodes+0x6c7/0x1010
[  127.118750][  T696]  ? __lock_acquire+0xab9/0xd20
[  127.118788][  T696]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  127.118849][  T696]  ? rcu_is_watching+0x15/0xb0
[  127.118872][  T696]  wb_writeback+0x43b/0xaf0
[  127.118897][  T696]  ? queue_io+0x341/0x590
[  127.118916][  T696]  ? __pfx_wb_writeback+0x10/0x10
[  127.118940][  T696]  ? _raw_spin_unlock_irq+0x23/0x50
[  127.118964][  T696]  wb_workfn+0x409/0xef0
[  127.118993][  T696]  ? __pfx_wb_workfn+0x10/0x10
[  127.119012][  T696]  ? __lock_acquire+0xab9/0xd20
[  127.119033][  T696]  ? process_scheduled_works+0x9ef/0x17b0
[  127.119048][  T696]  ? _raw_spin_unlock_irq+0x23/0x50
[  127.119061][  T696]  ? process_scheduled_works+0x9ef/0x17b0
[  127.119073][  T696]  ? process_scheduled_works+0x9ef/0x17b0
[  127.119113][  T696]  process_scheduled_works+0xae1/0x17b0
[  127.119143][  T696]  ? __pfx_process_scheduled_works+0x10/0x10
[  127.119165][  T696]  worker_thread+0x8a0/0xda0
[  127.119179][  T696]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  127.119203][  T696]  ? __kthread_parkme+0x7b/0x200
[  127.119224][  T696]  kthread+0x711/0x8a0
[  127.119240][  T696]  ? __pfx_worker_thread+0x10/0x10
[  127.119251][  T696]  ? __pfx_kthread+0x10/0x10
[  127.119265][  T696]  ? _raw_spin_unlock_irq+0x23/0x50
[  127.119278][  T696]  ? lockdep_hardirqs_on+0x9c/0x150
[  127.119290][  T696]  ? __pfx_kthread+0x10/0x10
[  127.119306][  T696]  ret_from_fork+0x439/0x7d0
[  127.119320][  T696]  ? __pfx_ret_from_fork+0x10/0x10
[  127.119336][  T696]  ? __switch_to_asm+0x39/0x70
[  127.119350][  T696]  ? __switch_to_asm+0x33/0x70
[  127.119361][  T696]  ? __pfx_kthread+0x10/0x10
[  127.119376][  T696]  ret_from_fork_asm+0x1a/0x30
[  127.119402][  T696]  </TASK>
[  127.119409][  T696] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  128.678349][ T7008] loop0: detected capacity change from 0 to 128
[  128.909523][ T7012] 9pnet_fd: Insufficient options for proto=fd
[  128.923430][   T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  129.073325][   T10] usb 1-1: Using ep0 maxpacket: 16
[  129.086111][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  129.089034][   T10] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  129.092585][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.108999][   T10] usb 1-1: config 0 descriptor??
[  129.545129][   T10] hid (null): unknown global tag 0xe
[  129.547338][   T10] hid (null): unknown global tag 0xc
[  129.549540][   T10] hid (null): unknown global tag 0xc
[  129.551684][   T10] hid (null): report_id 2132627207 is invalid
[  129.557534][   T10] hid (null): invalid report_count -915061764
[  129.560054][   T10] hid (null): global environment stack underflow
[  129.592624][ T7022] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in;
[  129.592624][ T7022]    program syz.1.409 not setting count and/or reply_len properly
[  129.649691][ T7024] loop1: detected capacity change from 0 to 512
[  129.657268][ T7024] EXT4-fs: Ignoring removed nomblk_io_submit option
[  129.659949][ T7024] EXT4-fs: Ignoring removed nomblk_io_submit option
[  129.674137][ T7024] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  129.695159][ T7024] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  129.698470][ T7024] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  129.707208][ T7024] EXT4-fs (loop1): 1 truncate cleaned up
[  129.710886][ T7024] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.735281][ T7024] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  129.751332][   T10] usb 1-1: USB disconnect, device number 8
[  129.770928][ T5892] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.814759][ T7028] loop1: detected capacity change from 0 to 512
[  129.846581][ T7028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.852178][ T7028] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.868647][ T7028] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #12: comm syz.1.411: corrupted xattr block 6: invalid header
[  129.889557][ T5892] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.415345][ T7041] netlink: 'syz.0.415': attribute type 27 has an invalid length.
[  130.476298][ T7041] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.480550][ T7041] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.583328][ T7041] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.597807][ T7041] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.761366][ T7042] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.766316][ T7042] 8021q: adding VLAN 0 to HW filter on device team0
[  130.774893][ T7042] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  130.781038][ T5919] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.785103][ T5919] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.791131][ T5919] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  130.796910][ T5919] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  131.001579][ T7045] loop1: detected capacity change from 0 to 2048
[  131.031735][ T7045] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  131.232184][ T5898] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  131.238732][ T5898] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  131.245233][ T5898] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  131.249411][ T5898] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  131.256911][ T5898] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  131.417663][ T5927] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.420839][ T7059] loop1: detected capacity change from 0 to 512
[  131.428524][ T7059] EXT4-fs: Ignoring removed oldalloc option
[  131.431331][ T7059] EXT4-fs: Ignoring removed bh option
[  131.442427][ T7057] bridge: RTM_NEWNEIGH with invalid ether address
[  131.447211][ T7059] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.423: corrupted in-inode xattr: e_value size too large
[  131.456780][ T7059] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.423: couldn't read orphan inode 15 (err -117)
[  131.468814][ T7059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.567177][ T5927] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.585014][ T5892] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.655212][ T5927] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.661110][ T7067] loop1: detected capacity change from 0 to 256
[  131.675713][ T7048] chnl_net:caif_netlink_parms(): no params data found
[  131.682883][ T7069] loop0: detected capacity change from 0 to 512
[  131.720506][ T7069] EXT4-fs (loop0): orphan cleanup on readonly fs
[  131.725815][ T7067] FAT-fs (loop1): Directory bread(block 64) failed
[  131.728280][ T7067] FAT-fs (loop1): Directory bread(block 65) failed
[  131.730633][ T7067] FAT-fs (loop1): Directory bread(block 66) failed
[  131.744252][ T7069] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.426: bad orphan inode 13
[  131.748333][ T7069] ext4_test_bit(bit=12, block=18) = 1
[  131.750475][ T7069] is_bad_inode(inode)=0
[  131.751945][ T7069] NEXT_ORPHAN(inode)=2130706432
[  131.759768][ T7069] max_ino=32
[  131.760945][ T7069] i_nlink=1
[  131.762487][ T7067] FAT-fs (loop1): Directory bread(block 67) failed
[  131.777959][ T7067] FAT-fs (loop1): Directory bread(block 68) failed
[  131.780467][ T7067] FAT-fs (loop1): Directory bread(block 69) failed
[  131.784236][ T7069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  131.784263][ T7067] FAT-fs (loop1): Directory bread(block 70) failed
[  131.792981][ T7067] FAT-fs (loop1): Directory bread(block 71) failed
[  131.797158][ T5927] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.799028][ T7067] FAT-fs (loop1): Directory bread(block 72) failed
[  131.804579][ T7067] FAT-fs (loop1): Directory bread(block 73) failed
[  131.810256][ T7069] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[  131.826886][ T7069] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  131.880922][ T5890] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.938016][ T7048] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.945085][ T7048] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.948093][ T7048] bridge_slave_0: entered allmulticast mode
[  131.965796][ T7048] bridge_slave_0: entered promiscuous mode
[  131.992689][ T7048] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.014441][ T7048] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.017540][ T7048] bridge_slave_1: entered allmulticast mode
[  132.024450][ T7080] loop1: detected capacity change from 0 to 128
[  132.034032][ T7048] bridge_slave_1: entered promiscuous mode
[  132.070956][ T7080] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  132.094128][ T7080] hpfs: filesystem error: improperly stopped
[  132.096481][ T7080] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  132.099575][ T7080] hpfs: You really don't want any checks? You are crazy...
[  132.139467][ T7080] hpfs: hpfs_map_sector(): read error
[  132.141265][ T7080] hpfs: code page support is disabled
[  132.167332][ T7048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  132.171330][ T7080] hpfs: hpfs_map_4sectors(): unaligned read
[  132.184289][ T7080] hpfs: hpfs_map_4sectors(): unaligned read
[  132.186468][ T7080] hpfs: filesystem error: unable to find root dir
[  132.196946][ T7048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  132.218399][ T7080] hpfs: hpfs_map_4sectors(): unaligned read
[  132.222217][ T7080] hpfs: hpfs_map_sector(): read error
[  132.232621][ T7089] netlink: 'syz.0.430': attribute type 2 has an invalid length.
[  132.240136][ T7089] netlink: 244 bytes leftover after parsing attributes in process `syz.0.430'.
[  132.252093][ T5927] bridge_slave_1: left allmulticast mode
[  132.255968][ T5927] bridge_slave_1: left promiscuous mode
[  132.258947][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.303170][ T5927] bridge_slave_0: left allmulticast mode
[  132.305565][ T5927] bridge_slave_0: left promiscuous mode
[  132.314652][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.650277][ T7104] loop1: detected capacity change from 0 to 2048
[  132.667409][ T7104] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  132.672765][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.986587][ T5927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  133.008348][ T5927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  133.015730][ T5927] bond0 (unregistering): Released all slaves
[  133.142619][ T7118] program syz.1.441 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  133.172693][ T7048] team0: Port device team_slave_0 added
[  133.266568][ T7048] team0: Port device team_slave_1 added
[  133.304042][ T5898] Bluetooth: hci2: command tx timeout
[  133.502278][ T7048] batman_adv: batadv0: Adding interface: batadv_slave_0
[  133.506838][ T7048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.519753][ T7048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  133.527248][ T7129] loop1: detected capacity change from 0 to 2048
[  133.909703][ T7048] batman_adv: batadv0: Adding interface: batadv_slave_1
[  133.918723][ T7048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  133.929404][ T7132] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  133.933818][ T7129] NILFS (loop1): corrupt root inode
[  133.940296][ T7048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  134.011266][ T7135] loop1: detected capacity change from 0 to 16
[  134.020634][ T7135] erofs (device loop1): mounted with root inode @ nid 36.
[  134.136537][ T5927] hsr_slave_0: left promiscuous mode
[  134.142972][ T5927] hsr_slave_1: left promiscuous mode
[  134.149385][ T5927] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  134.155018][ T5927] batman_adv: batadv0: Removing interface: batadv_slave_0
[  134.161474][ T5927] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  134.167894][ T5927] batman_adv: batadv0: Removing interface: batadv_slave_1
[  134.236559][ T7139] netlink: 'syz.1.448': attribute type 1 has an invalid length.
[  134.239693][ T7139] netlink: 'syz.1.448': attribute type 1 has an invalid length.
[  134.242758][ T7139] netlink: 216 bytes leftover after parsing attributes in process `syz.1.448'.
[  134.323117][ T5927] veth1_macvtap: left promiscuous mode
[  134.327796][ T5927] veth0_macvtap: left promiscuous mode
[  134.330227][ T5927] veth1_vlan: left promiscuous mode
[  134.332521][ T5927] veth0_vlan: left promiscuous mode
[  134.431451][ T7146] loop1: detected capacity change from 0 to 1024
[  134.483883][ T7146] hfsplus: found bad thread record in catalog
[  134.486736][ T7146] hfsplus: catalog searching failed
[  134.519578][   T32] hfsplus: found bad thread record in catalog
[  134.522770][   T32] hfsplus: found bad thread record in catalog
[  134.712325][ T7144] loop0: detected capacity change from 0 to 32768
[  134.739115][ T7144] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.449 (7144)
[  134.789947][ T7144] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  134.796053][ T7144] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  134.952597][ T7144] BTRFS info (device loop0): enabling ssd optimizations
[  134.957841][ T7144] BTRFS info (device loop0): enabling free space tree
[  135.165179][   T12] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  135.384252][ T5890] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  135.384415][ T5898] Bluetooth: hci2: command tx timeout
[  135.475105][ T5955] usb 2-1: new low-speed USB device number 5 using dummy_hcd
[  135.654871][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  135.659466][ T5955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  135.666060][ T5955] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00
[  135.669738][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.701220][ T5955] usb 2-1: config 0 descriptor??
[  135.706570][ T5927] team0 (unregistering): Port device team_slave_1 removed
[  135.801983][ T5927] team0 (unregistering): Port device team_slave_0 removed
[  136.131006][ T5955] logitech-djreceiver 0003:046D:C52F.0006: ignoring exceeding usage max
[  136.168600][ T5955] logitech-djreceiver 0003:046D:C52F.0006: hidraw0: USB HID v0.00 Device [HID 046d:c52f] on usb-dummy_hcd.1-1/input0
[  136.349910][ T5955] usb 2-1: USB disconnect, device number 5
[  136.469972][ T7190] netlink: 64 bytes leftover after parsing attributes in process `syz.0.462'.
[  136.560702][ T7048] hsr_slave_0: entered promiscuous mode
[  136.564283][ T7048] hsr_slave_1: entered promiscuous mode
[  136.988753][ T5898] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  136.992240][ T5898] Bluetooth: hci1: Injecting HCI hardware error event
[  136.998053][ T5898] Bluetooth: hci1: hardware error 0x00
[  137.110668][ T7048] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  137.124712][ T7048] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  137.192263][ T7048] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  137.211732][ T7048] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  137.427332][ T7048] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.451417][ T7048] 8021q: adding VLAN 0 to HW filter on device team0
[  137.463348][ T5873] Bluetooth: hci2: command tx timeout
[  137.475510][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.478846][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.512492][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.515859][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.781594][ T7048] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.987626][ T7048] veth0_vlan: entered promiscuous mode
[  138.004675][ T7048] veth1_vlan: entered promiscuous mode
[  138.044516][ T7048] veth0_macvtap: entered promiscuous mode
[  138.049799][ T7048] veth1_macvtap: entered promiscuous mode
[  138.070710][ T7048] batman_adv: batadv0: Interface activated: batadv_slave_0
[  138.079430][ T7048] batman_adv: batadv0: Interface activated: batadv_slave_1
[  138.090075][ T5919] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.097935][ T5919] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.108488][ T5919] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.116440][ T5919] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.126642][ T7268] loop0: detected capacity change from 0 to 4096
[  138.132830][ T7268] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  138.171327][ T7268] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  138.229106][ T6553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.234951][ T6553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.243461][ T7270] loop1: detected capacity change from 0 to 2048
[  138.269690][ T7270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  138.282851][ T7273] loop0: detected capacity change from 0 to 512
[  138.285572][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.287953][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.309730][ T5892] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.341930][ T7273] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  138.477529][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.489'.
[  138.628222][ T7298] dvmrp0: entered allmulticast mode
[  138.860038][ T7313] JFS: charset not found
[  139.143577][ T5898] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  139.161822][ T7308] loop1: detected capacity change from 0 to 32768
[  139.165468][ T7308] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.499 (7308)
[  139.175462][ T7308] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  139.178688][ T7308] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  139.671435][ T7333] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  139.675627][ T5898] Bluetooth: hci2: command tx timeout
[  139.762172][ T7308] BTRFS info (device loop1): rebuilding free space tree
[  139.860987][ T7308] BTRFS info (device loop1): setting nodatasum
[  139.869701][ T7308] BTRFS info (device loop1): setting nodatacow
[  139.872246][ T7308] BTRFS info (device loop1): turning off barriers
[  139.876612][ T7308] BTRFS info (device loop1): enabling free space tree
[  139.879783][ T7308] BTRFS info (device loop1): force clearing of disk cache
[  140.172712][ T5892] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  140.304122][   T47] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  140.455897][   T47] usb 5-1: Using ep0 maxpacket: 32
[  140.472362][   T47] usb 5-1: config 0 has an invalid interface number: 247 but max is 0
[  140.477275][   T47] usb 5-1: config 0 has no interface number 0
[  140.494142][   T47] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.9b
[  140.497684][   T47] usb 5-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0
[  140.501884][   T47] usb 5-1: Manufacturer: syz
[  140.508362][   T47] usb 5-1: config 0 descriptor??
[  140.643415][ T5926] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  140.705823][ T7368] loop0: detected capacity change from 0 to 164
[  140.731388][   T47] usb 5-1: USB disconnect, device number 2
[  140.734303][ T7368] Unable to read rock-ridge attributes
[  140.754521][ T7368] Unable to read rock-ridge attributes
[  140.797937][ T5926] usb 2-1: config 32 has an invalid interface number: 47 but max is 0
[  140.801661][ T5926] usb 2-1: config 32 contains an unexpected descriptor of type 0x2, skipping
[  140.813211][ T5926] usb 2-1: config 32 descriptor has 1 excess byte, ignoring
[  140.824437][ T5926] usb 2-1: config 32 has no interface number 0
[  140.827265][ T5926] usb 2-1: config 32 interface 47 altsetting 167 endpoint 0x2 has invalid maxpacket 1289, setting to 1024
[  140.831887][ T5926] usb 2-1: config 32 interface 47 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  140.851641][ T5926] usb 2-1: config 32 interface 47 has no altsetting 0
[  140.868200][ T5926] usb 2-1: New USB device found, idVendor=10c4, idProduct=819f, bcdDevice=9b.ef
[  140.872244][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.877336][ T5926] usb 2-1: Product: syz
[  140.879129][ T5926] usb 2-1: Manufacturer: syz
[  140.881177][ T5926] usb 2-1: SerialNumber: syz
[  140.898703][ T7366] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  141.103161][ T7372] loop0: detected capacity change from 0 to 32768
[  141.121853][ T5926] cp210x 2-1:32.47: cp210x converter detected
[  141.130010][ T5926] cp210x 2-1:32.47: failed to get vendor val 0x370b size 1: -71
[  141.135357][ T5926] cp210x 2-1:32.47: querying part number failed
[  141.143941][ T7372] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  141.151105][ T5926] usb 2-1: cp210x converter now attached to ttyUSB0
[  141.160186][ T5926] usb 2-1: USB disconnect, device number 6
[  141.191669][ T5926] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  141.197612][ T7372] XFS (loop0): Ending clean mount
[  141.208951][ T5926] cp210x 2-1:32.47: device disconnected
[  141.212873][ T7372] XFS (loop0): Quotacheck needed: Please wait.
[  141.251438][ T7372] XFS (loop0): Quotacheck: Done.
[  141.352128][ T5890] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  142.631801][   T33] audit: type=1326 audit(1758170522.485:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7411 comm="syz.4.531" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f065098eba9 code=0x0
[  143.597921][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.542'.
[  143.962865][ T7460] netdevsim netdevsim4: Direct firmware load for @ failed with error -2
[  143.976307][ T7460] netdevsim netdevsim4: Falling back to sysfs fallback for: @
[  144.098150][ T7470] @: renamed from bond_slave_0
[  144.189857][ T7474] netlink: 'syz.0.555': attribute type 11 has an invalid length.
[  144.382530][ T7463] loop1: detected capacity change from 0 to 40427
[  144.403257][ T7463] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 117440513)
[  144.406529][ T7463] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  144.411778][ T7463] F2FS-fs (loop1): Project quota feature not enabled. Cannot enable project quota enforcement.
[  145.383363][   T47] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  145.426711][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.563'.
[  145.430971][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.563'.
[  145.448730][ T7494] macvlan2: entered promiscuous mode
[  145.533501][   T47] usb 2-1: Using ep0 maxpacket: 16
[  145.548448][   T47] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  145.552101][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.564592][   T47] usb 2-1: Product: syz
[  145.566430][   T47] usb 2-1: Manufacturer: syz
[  145.568372][   T47] usb 2-1: SerialNumber: syz
[  145.677789][   T47] r8152-cfgselector 2-1: Unknown version 0x0000
[  145.680287][   T47] r8152-cfgselector 2-1: config 0 descriptor??
[  145.820598][ T7506] loop0: detected capacity change from 0 to 64
[  146.116834][   T47] r8152-cfgselector 2-1: USB disconnect, device number 7
[  146.348919][ T7526] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.575'.
[  146.353763][ T7526] netlink: 4280 bytes leftover after parsing attributes in process `syz.4.575'.
[  146.919041][ T7538] loop1: detected capacity change from 0 to 512
[  147.034250][ T7530] loop0: detected capacity change from 0 to 32768
[  147.035415][ T7538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.040476][ T7530] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section members_v2: device 0: invalid btree_bitmap_shift 248
[  147.040476][ T7530] members_v2 (size 152):
[  147.040476][ T7530] Device:                        0
[  147.040476][ T7530]   Label:                       (none)
[  147.040476][ T7530]   UUID:                        7af6772b-00de-4159-84cd-1faead05aceb
[  147.040476][ T7530]   Size:                        16777216
[  147.040476][ T7530]   read errors:                 0
[  147.040476][ T7530]   write errors:                0
[  147.040476][ T7530]   checksum errors:             0
[  147.040476][ T7530]   seqread iops:                0
[  147.040476][ T7530]   seqwrite iops:               0
[  147.040476][ T7530]   randread iops:               0
[  147.040476][ T7530]   randwrite iops:              0
[  147.040476][ T7530]   Bucket size:                 131072
[  147.040476][ T7530]   First bucket:                0
[  147.040476][ T7530]   Buckets:                     128
[  147.040476][ T7530]   Last mount:                  1714681267
[  147.040476][ T7530]   Last superblock write:       42
[  147.040476][ T7530]   State:                       rw
[  147.040476][ T7530]   Data allowed:                journal,btree,user
[  147.040476][ T7530]   Has data:                    (none)
[  147.040476][ T7530]   Btree allocated bitmap blocksize:(invalid shift 248)
[  147.040476][ T7530]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[  147.040476][ T7530]  
[  147.041512][ T7530] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  147.041508][ T7538] ext4 filesystem being mounted at /249/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  147.150475][ T7543] loop4: detected capacity change from 0 to 2048
[  147.166501][ T7538] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.584: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[  147.201608][ T7543] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  147.209209][ T7538] EXT4-fs (loop1): Remounting filesystem read-only
[  147.492870][ T7551] loop4: detected capacity change from 0 to 2048
[  147.512425][ T7551] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=26504, location=26504
[  147.540228][ T7551] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  147.593950][ T1273] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  147.695071][ T7553] netlink: 'syz.4.590': attribute type 9 has an invalid length.
[  147.746609][ T1273] usb 1-1: Using ep0 maxpacket: 16
[  147.757776][ T1273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  147.762034][ T1273] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  147.784316][ T1273] usb 1-1: New USB device found, idVendor=07c0, idProduct=1525, bcdDevice= 0.00
[  147.787918][ T1273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.810056][ T1273] usb 1-1: config 0 descriptor??
[  147.860498][ T5892] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.919802][ T7561] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  148.048905][ T1273] usb 1-1: USB disconnect, device number 9
[  148.313869][ T7567] loop1: detected capacity change from 0 to 32768
[  148.439411][ T7567] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  148.644877][ T5892] ocfs2: Unmounting device (7,1) on (node local)
[  148.777743][ T7590] loop4: detected capacity change from 0 to 128
[  148.810083][ T7590] EXT4-fs: Ignoring removed nobh option
[  148.834830][ T7590] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  148.850325][ T7590] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  148.964600][ T7048] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  149.097863][ T7606] loop0: detected capacity change from 0 to 2048
[  149.309737][ T7614] trusted_key: encrypted_key: insufficient parameters specified
[  149.669298][ T7625] loop1: detected capacity change from 0 to 512
[  149.704952][ T7625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.720342][ T7625] ext4 filesystem being mounted at /255/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  149.760543][ T7625] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 7: comm syz.1.612: lblock 12 mapped to illegal pblock 7 (length 22)
[  149.770016][ T7625] EXT4-fs (loop1): Remounting filesystem read-only
[  149.801895][ T5892] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.160156][ T7654] loop4: detected capacity change from 0 to 2048
[  150.176637][ T7654] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  150.196177][   T33] audit: type=1800 audit(1758170530.055:18): pid=7654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.624" name="file2" dev="loop4" ino=1347 res=0 errno=0
[  150.225999][ T1273] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  150.503321][ T1273] usb 2-1: Using ep0 maxpacket: 16
[  150.508553][ T1273] usb 2-1: unable to get BOS descriptor or descriptor too short
[  150.514806][ T1273] usb 2-1: config 5 has an invalid interface number: 118 but max is 0
[  150.518163][ T1273] usb 2-1: config 5 has no interface number 0
[  150.520712][ T1273] usb 2-1: config 5 interface 118 has no altsetting 0
[  150.526762][ T1273] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=1c.96
[  150.531672][ T1273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.536438][ T1273] usb 2-1: Product: syz
[  150.538205][ T1273] usb 2-1: Manufacturer: syz
[  150.540103][ T1273] usb 2-1: SerialNumber: syz
[  150.835015][ T7668] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0)
[  150.835721][ T1273] imon_raw 2-1:5.118: IR endpoint missing
[  150.868544][ T1273] usb 2-1: USB disconnect, device number 8
[  151.792105][ T7680] loop1: detected capacity change from 0 to 512
[  151.853220][ T7680] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  151.903396][ T7680] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  151.939471][ T7680] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  151.956027][ T7680] EXT4-fs (loop1): 1 truncate cleaned up
[  151.965838][ T7680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.067188][ T5892] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.100978][ T7693] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  152.120171][ T7693] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  152.126311][ T7693] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  152.433422][ T5941] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  152.583576][ T5941] usb 5-1: Using ep0 maxpacket: 16
[  152.588550][ T5941] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  152.593829][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  152.601520][ T5941] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  152.606025][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.609669][ T5941] usb 5-1: Product: syz
[  152.611416][ T5941] usb 5-1: Manufacturer: syz
[  152.614125][ T5941] usb 5-1: SerialNumber: syz
[  152.618830][ T5941] usb 5-1: config 0 descriptor??
[  152.629427][ T5941] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  152.633513][ T5941] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  153.201113][ T7707] devpts: Bad value for 'max'
[  153.236431][ T5941] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[  153.242823][ T5941] em28xx 5-1:0.0: Config register raw data: 0x67
[  153.251949][ T5941] em28xx 5-1:0.0: I2S Audio (1 sample rate(s))
[  153.255379][ T5941] em28xx 5-1:0.0: No AC97 audio processor
[  153.279997][ T7701] loop0: detected capacity change from 0 to 32768
[  153.291033][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.647'.
[  153.296985][ T7701] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.643 (7701)
[  153.325080][ T7701] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  153.329714][ T7701] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  153.469301][ T7701] BTRFS info (device loop0): enabling ssd optimizations
[  153.482582][ T7701] BTRFS info (device loop0): enabling free space tree
[  153.654243][ T5941] usb 5-1: USB disconnect, device number 3
[  153.735861][ T5890] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  154.306101][ T7746] loop0: detected capacity change from 0 to 512
[  154.357429][ T7746] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  154.386397][ T7746] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  154.398120][ T7746] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.656: Corrupt directory, running e2fsck is recommended
[  154.421732][ T7746] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  154.440565][ T7746] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.656: corrupted in-inode xattr: invalid ea_ino
[  154.464698][ T7746] EXT4-fs (loop0): Remounting filesystem read-only
[  154.480570][ T7746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.512949][ T7746] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  154.522116][ T7746] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  154.526819][ T7746] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.656: Corrupt directory, running e2fsck is recommended
[  154.544810][ T7746] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  154.549637][ T7746] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  154.563253][ T7746] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.656: Corrupt directory, running e2fsck is recommended
[  154.577619][ T7746] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  154.598487][ T7746] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  154.602643][ T7746] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.656: Corrupt directory, running e2fsck is recommended
[  154.617143][ T7746] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  154.662551][ T5890] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.109190][ T5955] kernel write not supported for file /506/loginuid (pid: 5955 comm: kworker/1:5)
[  155.631185][ T7791] loop0: detected capacity change from 0 to 512
[  155.649124][ T7791] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.677: casefold flag without casefold feature
[  155.659424][ T7791] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.677: couldn't read orphan inode 15 (err -117)
[  155.670584][ T7791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.685002][ T7791] syz.0.677 (pid 7791) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  155.718020][ T5890] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.868428][ T7788] loop4: detected capacity change from 0 to 32768
[  155.941739][ T7788] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  155.969671][   T33] audit: type=1800 audit(1758170535.825:19): pid=7788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.673" name="file1" dev="loop4" ino=17058 res=0 errno=0
[  156.000273][ T7788] (syz.4.673,7788,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  156.051898][ T7048] ocfs2: Unmounting device (7,4) on (node local)
[  156.134609][ T7802] loop0: detected capacity change from 0 to 256
[  156.179810][ T7802] exFAT-fs (loop0): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d)
[  156.272423][ T7806] netlink: 32 bytes leftover after parsing attributes in process `syz.4.682'.
[  157.026589][ T1273] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  157.195600][ T1273] usb 2-1: config 0 has an invalid interface number: 255 but max is 0
[  157.198882][ T1273] usb 2-1: config 0 has no interface number 0
[  157.201376][ T1273] usb 2-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  157.292299][ T1273] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  157.317095][ T1273] usb 2-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  157.340343][ T1273] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  157.361900][ T1273] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  157.380507][ T1273] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  157.390141][ T1273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.398468][ T1273] usb 2-1: Product: syz
[  157.400232][ T1273] usb 2-1: Manufacturer: syz
[  157.402112][ T1273] usb 2-1: SerialNumber: syz
[  157.424416][ T1273] usb 2-1: config 0 descriptor??
[  157.428643][ T7817] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  157.435043][ T1273] iguanair 2-1:0.255: probe with driver iguanair failed with error -12
[  157.636589][ T1273] usb 2-1: USB disconnect, device number 9
[  158.061634][ T7826] loop0: detected capacity change from 0 to 764
[  158.140618][ T7828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.691'.
[  158.222824][ T7830] loop1: detected capacity change from 0 to 512
[  158.224929][ T7832] loop0: detected capacity change from 0 to 136
[  158.249439][ T7830] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.692: invalid indirect mapped block 4294967295 (level 1)
[  158.257548][ T7830] EXT4-fs (loop1): Remounting filesystem read-only
[  158.260333][ T7830] EXT4-fs (loop1): 2 truncates cleaned up
[  158.272889][ T7830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.287277][ T7832] rock: directory entry would overflow storage
[  158.290825][ T7832] rock: sig=0x4f50, size=4, remaining=3
[  158.293003][ T7832] iso9660: Corrupted directory entry in block 2 of inode 1472
[  158.329376][ T5892] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.465772][ T7840] loop0: detected capacity change from 0 to 2048
[  158.489102][ T7840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.505921][ T7840] netlink: 1 bytes leftover after parsing attributes in process `syz.0.696'.
[  158.533009][ T5890] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.795078][ T7844] loop0: detected capacity change from 0 to 32768
[  158.822716][ T7844] JBD2: Ignoring recovery information on journal
[  158.867352][ T7844] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  158.913798][ T5890] ocfs2: Unmounting device (7,0) on (node local)
[  159.556043][ T7868] loop1: detected capacity change from 0 to 1764
[  159.679537][ T7871] netlink: 'syz.4.707': attribute type 11 has an invalid length.
[  160.530680][ T7889] loop4: detected capacity change from 0 to 4096
[  160.540036][ T7889] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  161.691222][ T7909] loop1: detected capacity change from 0 to 32768
[  161.724799][ T7909] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  161.801077][ T5892] ocfs2: Unmounting device (7,1) on (node local)
[  162.230520][ T7931] mmap: syz.4.732 (7931): VmData 45854720 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  162.383285][ T7933] loop1: detected capacity change from 0 to 4096
[  162.389574][ T7933] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  162.415800][ T7933] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  162.427732][ T7933] ntfs3(loop1): Failed to load $Extend (-22).
[  162.431542][ T7933] ntfs3(loop1): Failed to initialize $Extend.
[  162.639054][ T7945] loop1: detected capacity change from 0 to 16
[  162.646499][ T7945] erofs (device loop1): mounted with root inode @ nid 36.
[  162.800756][ T7950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.838221][ T7950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  164.102826][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.745'.
[  164.277832][ T7964] loop4: detected capacity change from 0 to 32768
[  165.416581][ T7977] random: crng reseeded on system resumption
[  165.638373][ T7983] loop4: detected capacity change from 0 to 512
[  165.696987][ T7983] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002]
[  165.700496][ T7983] System zones: 1-12
[  165.704336][ T7983] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.755: corrupted in-inode xattr: e_value size too large
[  165.710370][ T7983] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.755: couldn't read orphan inode 15 (err -117)
[  165.718913][ T7983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.758854][ T7987] comedi comedi0: rti800: I/O port conflict (0x3,16)
[  165.794413][ T7983] loop4: detected capacity change from 512 to 0
[  165.807176][    C1] I/O error, dev loop4, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  165.813665][ T7983] EXT4-fs error (device loop4): __ext4_find_entry:1615: inode #2: comm syz.4.755: reading directory lblock 0
[  165.859064][    C1] I/O error, dev loop4, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  165.863896][ T7048] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block
[  165.908093][    C1] I/O error, dev loop4, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2
[  165.912686][    C1] I/O error, dev loop4, sector 10 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  165.916535][ T7048] EXT4-fs error (device loop4): ext4_get_inode_loc:4999: inode #2: block 5: comm syz-executor: unable to read itable block
[  165.925157][ T7048] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: IO failure
[  165.929071][ T7048] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error
[  165.937847][    C1] I/O error, dev loop4, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2
[  165.942798][    C1] I/O error, dev loop4, sector 10 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  165.946878][ T1098] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4984: inode #2: block 5: comm kworker/u10:8: unable to read itable block
[  165.961049][ T7048] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.084266][ T7991] loop0: detected capacity change from 0 to 1024
[  166.091423][ T7991] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  166.127786][ T7989] loop1: detected capacity change from 0 to 32768
[  166.142495][ T7989] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.757 (7989)
[  166.148833][ T7991] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.759: Invalid block bitmap block 0 in block_group 0
[  166.162258][ T7991] Quota error (device loop0): write_blk: dquota write failed
[  166.167958][ T7991] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  166.171896][ T7991] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.759: Failed to acquire dquot type 0
[  166.180154][ T7991] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.759: Freeing blocks not in datazone - block = 0, count = 4096
[  166.187639][ T7989] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  166.191530][ T7989] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  166.200445][ T7991] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.759: Invalid inode bitmap blk 0 in block_group 0
[  166.210221][ T7991] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem
[  166.214697][ T6553] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-7
[  166.220413][ T7991] EXT4-fs (loop0): 1 orphan inode deleted
[  166.223547][ T6553] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u9:7: Failed to release dquot type 0
[  166.234514][ T7991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.317449][ T7989] BTRFS info (device loop1): enabling ssd optimizations
[  166.319769][ T7989] BTRFS info (device loop1): enabling free space tree
[  166.339154][ T5927] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.424828][   T33] audit: type=1800 audit(1758170546.285:20): pid=8011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.757" name="file1" dev="loop1" ino=260 res=0 errno=0
[  166.456445][ T5927] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.546678][ T5927] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.630848][ T5927] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.876152][ T5873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  166.890724][ T5873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  166.906360][ T5873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  166.924580][ T5873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  166.929037][ T5873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  166.934589][ T5927] bridge_slave_1: left allmulticast mode
[  166.948122][ T5927] bridge_slave_1: left promiscuous mode
[  166.950191][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.986881][ T5927] bridge_slave_0: left allmulticast mode
[  166.988706][ T5890] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.988904][ T5927] bridge_slave_0: left promiscuous mode
[  166.996635][ T5892] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  167.017860][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.279972][ T5955] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  167.476483][ T5955] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  167.479502][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.482113][ T5955] usb 1-1: Product: syz
[  167.492272][ T5955] usb 1-1: Manufacturer: syz
[  167.497688][ T5955] usb 1-1: SerialNumber: syz
[  167.531227][ T5955] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  167.597360][ T8027] capability: warning: `syz.1.767' uses 32-bit capabilities (legacy support in use)
[  167.616887][ T5317] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  167.687834][ T8029] netlink: 'syz.1.768': attribute type 3 has an invalid length.
[  167.691242][ T8029] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.768'.
[  168.024636][ T5927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  168.037027][ T5927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  168.100471][ T5926] usb 1-1: USB disconnect, device number 10
[  168.124677][ T5927] bond0 (unregistering): Released all slaves
[  168.592976][ T8059] 9pnet: Found fid 0 not clunked
[  168.600823][ T8014] chnl_net:caif_netlink_parms(): no params data found
[  168.666946][ T5317] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  168.671802][ T5317] ath9k_htc: Failed to initialize the device
[  168.678090][ T5926] usb 1-1: ath9k_htc: USB layer deinitialized
[  168.829142][ T8068] loop0: detected capacity change from 0 to 4096
[  168.839503][ T5927] hsr_slave_0: left promiscuous mode
[  168.854774][ T8068] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  168.861162][ T5927] hsr_slave_1: left promiscuous mode
[  168.869133][ T5927] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  168.872296][ T5927] batman_adv: batadv0: Removing interface: batadv_slave_0
[  168.885979][ T8068] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  168.903563][ T5927] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  168.916530][ T5927] batman_adv: batadv0: Removing interface: batadv_slave_1
[  168.937383][ T8068] ntfs3(loop0): volume is dirty and "force" flag is not set!
[  168.983607][ T5898] Bluetooth: hci2: command tx timeout
[  169.006004][ T5927] veth1_macvtap: left promiscuous mode
[  169.013940][ T5927] veth0_macvtap: left promiscuous mode
[  169.016689][ T5927] veth1_vlan: left promiscuous mode
[  169.019446][ T5927] veth0_vlan: left promiscuous mode
[  169.067236][ T8077] netlink: 'syz.1.783': attribute type 4 has an invalid length.
[  169.119530][ T8080] netlink: 'syz.1.783': attribute type 4 has an invalid length.
[  170.261072][ T5927] team0 (unregistering): Port device team_slave_1 removed
[  170.360802][ T5927] team0 (unregistering): Port device team_slave_0 removed
[  171.067248][ T5898] Bluetooth: hci2: command tx timeout
[  171.268214][ T8014] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.271434][ T8014] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.279642][ T8014] bridge_slave_0: entered allmulticast mode
[  171.288478][ T8014] bridge_slave_0: entered promiscuous mode
[  171.293600][ T8014] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.296452][ T8014] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.299519][ T8014] bridge_slave_1: entered allmulticast mode
[  171.305196][ T8014] bridge_slave_1: entered promiscuous mode
[  171.415705][ T8014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  171.428995][ T8014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  171.538548][ T8014] team0: Port device team_slave_0 added
[  171.558662][ T8014] team0: Port device team_slave_1 added
[  171.698077][ T8014] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.701032][ T8014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.736777][ T8014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.770670][ T8014] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.785124][ T8014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.801997][ T8014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.109848][ T8014] hsr_slave_0: entered promiscuous mode
[  172.145650][ T8014] hsr_slave_1: entered promiscuous mode
[  172.956523][ T8014] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  172.974968][ T8014] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  172.997253][ T8014] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  173.025465][ T8014] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  173.143571][ T5898] Bluetooth: hci2: command tx timeout
[  173.359828][ T8014] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.396167][ T8014] 8021q: adding VLAN 0 to HW filter on device team0
[  173.411138][ T8139] loop0: detected capacity change from 0 to 64
[  173.431466][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.434714][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.454023][ T8139] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  173.487984][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.491280][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  173.718190][ T8150] netlink: 36 bytes leftover after parsing attributes in process `syz.1.803'.
[  173.721716][ T8150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.803'.
[  173.736425][ T8150] netlink: 36 bytes leftover after parsing attributes in process `syz.1.803'.
[  173.746148][ T8150] netlink: 36 bytes leftover after parsing attributes in process `syz.1.803'.
[  173.761287][ T8154] loop0: detected capacity change from 0 to 1024
[  173.831077][ T8014] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.842987][   T33] audit: type=1800 audit(1758170553.695:21): pid=8154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.805" name="file1" dev="loop0" ino=2 res=0 errno=0
[  173.896117][ T8154] hfsplus: invalid catalog entry type
[  173.978021][   T36] hfsplus: bad catalog folder entry
[  173.980221][   T36] hfsplus: bad catalog file entry
[  174.069681][ T8166] usb usb8: check_ctrlrecip: process 8166 (syz.0.806) requesting ep 01 but needs 81
[  174.084928][ T8166] usb usb8: usbfs: process 8166 (syz.0.806) did not claim interface 0 before use
[  174.094890][ T8166] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  174.179833][ T8014] veth0_vlan: entered promiscuous mode
[  174.226476][ T8014] veth1_vlan: entered promiscuous mode
[  174.302799][ T8014] veth0_macvtap: entered promiscuous mode
[  174.319199][ T8014] veth1_macvtap: entered promiscuous mode
[  174.364944][ T8014] batman_adv: batadv0: Interface activated: batadv_slave_0
[  174.387904][ T8014] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.405028][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.413158][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.431675][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.443798][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.596207][ T6553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.599452][ T6553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  174.647076][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  174.651032][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.223552][ T5898] Bluetooth: hci2: command tx timeout
[  175.387438][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'.
[  175.501500][ T8198] loop1: detected capacity change from 0 to 128
[  176.601039][ T8204] loop0: detected capacity change from 0 to 32768
[  177.423581][   T47] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  177.583200][   T47] usb 2-1: Using ep0 maxpacket: 16
[  177.594950][   T47] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  177.599670][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  177.608817][   T47] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  177.612639][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.616014][   T47] usb 2-1: Product: syz
[  177.617779][   T47] usb 2-1: Manufacturer: syz
[  177.619775][   T47] usb 2-1: SerialNumber: syz
[  177.640638][   T47] usb 2-1: config 0 descriptor??
[  177.663585][   T47] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  177.667432][   T47] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  178.279641][   T47] em28xx 2-1:0.0: chip ID is em2882/3
[  178.487690][   T47] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  178.503657][   T47] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[  178.506523][   T47] em28xx 2-1:0.0: No AC97 audio processor
[  178.544975][   T47] usb 2-1: USB disconnect, device number 10
[  178.548635][   T47] em28xx 2-1:0.0: Disconnecting em28xx
[  178.570100][   T47] em28xx 2-1:0.0: Freeing device
[  178.708294][ T8213] loop5: detected capacity change from 0 to 40427
[  178.730200][ T8213] F2FS-fs (loop5): invalid crc value
[  178.790885][ T8213] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  178.800457][ T8213] F2FS-fs (loop5): Start checkpoint disabled!
[  178.814298][ T8213] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  178.828399][ T8227] gtp0: entered promiscuous mode
[  178.852371][ T6553] kworker/u9:7: attempt to access beyond end of device
[  178.852371][ T6553] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  178.859701][ T6553] CPU: 0 UID: 0 PID: 6553 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT(full) 
[  178.859726][ T6553] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  178.859735][ T6553] Workqueue: writeback wb_workfn (flush-7:5)
[  178.859764][ T6553] Call Trace:
[  178.859772][ T6553]  <TASK>
[  178.859779][ T6553]  dump_stack_lvl+0x189/0x250
[  178.859801][ T6553]  ? __pfx_dump_stack_lvl+0x10/0x10
[  178.859816][ T6553]  ? __pfx_queue_work_on+0x10/0x10
[  178.859830][ T6553]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  178.859852][ T6553]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  178.859878][ T6553]  f2fs_handle_critical_error+0x37c/0x540
[  178.859907][ T6553]  f2fs_write_end_io+0x886/0xb60
[  178.859936][ T6553]  __submit_merged_bio+0x27a/0x6a0
[  178.859963][ T6553]  __submit_merged_write_cond+0x255/0x530
[  178.859988][ T6553]  f2fs_write_data_pages+0x261d/0x3000
[  178.860032][ T6553]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  178.860067][ T6553]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  178.860112][ T6553]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  178.860161][ T6553]  ? look_up_lock_class+0x74/0x170
[  178.860185][ T6553]  ? trace_f2fs_writepages+0x7f/0x200
[  178.860204][ T6553]  ? f2fs_write_node_pages+0x478/0x6e0
[  178.860227][ T6553]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  178.860257][ T6553]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  178.860271][ T6553]  do_writepages+0x32e/0x550
[  178.860296][ T6553]  ? reacquire_held_locks+0x127/0x1d0
[  178.860310][ T6553]  ? writeback_sb_inodes+0x384/0x1010
[  178.860335][ T6553]  __writeback_single_inode+0x145/0xff0
[  178.860353][ T6553]  ? do_raw_spin_unlock+0x4d/0x240
[  178.860372][ T6553]  writeback_sb_inodes+0x6c7/0x1010
[  178.860412][ T6553]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  178.860466][ T6553]  ? rcu_is_watching+0x15/0xb0
[  178.860490][ T6553]  wb_writeback+0x43b/0xaf0
[  178.860514][ T6553]  ? queue_io+0x341/0x590
[  178.860534][ T6553]  ? __pfx_wb_writeback+0x10/0x10
[  178.860556][ T6553]  ? _raw_spin_unlock_irq+0x23/0x50
[  178.860578][ T6553]  wb_workfn+0x409/0xef0
[  178.860608][ T6553]  ? __pfx_wb_workfn+0x10/0x10
[  178.860626][ T6553]  ? __lock_acquire+0xab9/0xd20
[  178.860657][ T6553]  ? process_scheduled_works+0x9ef/0x17b0
[  178.860677][ T6553]  ? _raw_spin_unlock_irq+0x23/0x50
[  178.860694][ T6553]  ? process_scheduled_works+0x9ef/0x17b0
[  178.860706][ T6553]  ? process_scheduled_works+0x9ef/0x17b0
[  178.860719][ T6553]  process_scheduled_works+0xae1/0x17b0
[  178.860761][ T6553]  ? __pfx_process_scheduled_works+0x10/0x10
[  178.860791][ T6553]  worker_thread+0x8a0/0xda0
[  178.860808][ T6553]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  178.860854][ T6553]  ? __kthread_parkme+0x7b/0x200
[  178.860878][ T6553]  kthread+0x711/0x8a0
[  178.860896][ T6553]  ? __pfx_worker_thread+0x10/0x10
[  178.860910][ T6553]  ? __pfx_kthread+0x10/0x10
[  178.860926][ T6553]  ? _raw_spin_unlock_irq+0x23/0x50
[  178.860944][ T6553]  ? lockdep_hardirqs_on+0x9c/0x150
[  178.860956][ T6553]  ? __pfx_kthread+0x10/0x10
[  178.860974][ T6553]  ret_from_fork+0x439/0x7d0
[  178.860993][ T6553]  ? __pfx_ret_from_fork+0x10/0x10
[  178.861012][ T6553]  ? __switch_to_asm+0x39/0x70
[  178.861027][ T6553]  ? __switch_to_asm+0x33/0x70
[  178.861048][ T6553]  ? __pfx_kthread+0x10/0x10
[  178.861064][ T6553]  ret_from_fork_asm+0x1a/0x30
[  178.861095][ T6553]  </TASK>
[  178.891034][ T6553] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  179.404457][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.833'.
[  179.519147][ T8240] netlink: 136 bytes leftover after parsing attributes in process `syz.0.834'.
[  179.524882][ T8240] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  179.711250][ T8244] loop0: detected capacity change from 0 to 512
[  179.777120][ T8244] EXT4-fs error (device loop0): ext4_quota_enable:7128: inode #4: comm syz.0.836: iget: bad i_size value: 5910974510929920
[  179.785647][ T8244] EXT4-fs error (device loop0): ext4_quota_enable:7131: comm syz.0.836: Bad quota inode: 4, type: 1
[  179.790364][ T8244] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  179.797332][ T8244] EXT4-fs (loop0): mount failed
[  180.237129][ T8267] netlink: 'syz.5.843': attribute type 30 has an invalid length.
[  180.501505][ T8274] input: syz0 as /devices/virtual/input/input7
[  181.673451][ T5317] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  181.826747][ T8321] loop5: detected capacity change from 0 to 2048
[  181.833500][ T5317] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  181.839219][ T8321] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  181.843313][ T5317] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  181.847129][ T5317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  181.859943][ T5317] usb 1-1: SerialNumber: syz
[  181.868011][ T8321] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24)
[  181.887482][ T5317] usb 1-1: bad CDC descriptors
[  182.289211][ T5317] usb 1-1: USB disconnect, device number 11
[  182.382575][ T8341] loop1: detected capacity change from 0 to 1024
[  182.411115][ T8341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.481697][ T5892] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.544610][ T8336] loop5: detected capacity change from 0 to 32768
[  182.587916][ T8336] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  182.626261][ T8336] XFS (loop5): Ending clean mount
[  182.635836][ T8336] XFS (loop5): Quotacheck needed: Please wait.
[  182.681512][ T8336] XFS (loop5): Quotacheck: Done.
[  182.727493][ T8014] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  183.096243][ T8358] loop1: detected capacity change from 0 to 32768
[  183.133428][ T5955] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  183.290011][ T5955] usb 1-1: unable to get BOS descriptor or descriptor too short
[  183.299475][ T5955] usb 1-1: config 1 interface 0 has no altsetting 0
[  183.320731][ T5955] usb 1-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40
[  183.325162][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.331735][ T5955] usb 1-1: Product: syz
[  183.334017][ T5955] usb 1-1: Manufacturer: syz
[  183.334934][ T8358] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  183.336216][ T5955] usb 1-1: SerialNumber: syz
[  183.348586][ T8358]   allowing incompatible features above 0.0: (unknown version)
[  183.352892][ T8358]   features: lz4
[  183.354966][ T8358] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  183.374026][ T8358] bcachefs (loop1): initializing new filesystem
[  183.422046][ T8358] bcachefs (loop1): going read-write
[  183.460177][ T8358] bcachefs (loop1): marking superblocks
[  183.646358][ T5955] usbhid 1-1:1.0: can't add hid device: -71
[  183.661479][ T5955] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  183.672878][ T5955] usb 1-1: USB disconnect, device number 12
[  183.679405][ T8358] bcachefs (loop1): initializing freespace
[  183.742002][ T8358] bcachefs (loop1): done initializing freespace
[  183.792913][ T8358] bcachefs (loop1): reading snapshots table
[  183.798172][ T8358] bcachefs (loop1): reading snapshots done
[  183.907532][ T8358] bcachefs (loop1): done starting filesystem
[  184.172054][ T8358] syz.1.881 (8358) used greatest stack depth: 16328 bytes left
[  184.242057][ T5892] bcachefs (loop1): shutting down
[  184.257807][ T5892] bcachefs (loop1): going read-only
[  184.262141][ T5892] bcachefs (loop1): finished waiting for writes to stop
[  184.296808][ T5892] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[  184.723702][ T5892] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  184.756604][ T5892] bcachefs (loop1): clean shutdown complete, journal seq 4
[  184.780889][ T5892] bcachefs (loop1): marking filesystem clean
[  184.944282][ T8391] loop0: detected capacity change from 0 to 4096
[  184.950033][ T8391] EXT4-fs: Ignoring removed nomblk_io_submit option
[  184.961728][ T8391] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  184.966626][ T8391] EXT4-fs (loop0): Test dummy encryption mode enabled
[  184.982662][ T8391] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.993021][ T8391] EXT4-fs: Ignoring removed nomblk_io_submit option
[  184.997014][ T8391] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  185.006775][ T5892] bcachefs (loop1): shutdown complete
[  185.014068][ T8391] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  185.135135][ T5890] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.110029][ T8409] loop0: detected capacity change from 0 to 32768
[  186.125896][ T8409] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.892 (8409)
[  186.197313][ T8409] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  186.201631][ T8409] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  186.267920][ T8409] BTRFS info (device loop0): enabling ssd optimizations
[  186.270863][ T8409] BTRFS info (device loop0): enabling free space tree
[  186.367626][ T5890] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  186.777108][ T8447] loop5: detected capacity change from 0 to 512
[  186.802741][ T8447] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.900: bad orphan inode 15
[  186.808890][ T8447] ext4_test_bit(bit=14, block=18) = 1
[  186.811158][ T8447] is_bad_inode(inode)=0
[  186.812921][ T8447] NEXT_ORPHAN(inode)=1023
[  186.815832][ T8447] max_ino=32
[  186.818546][ T8447] i_nlink=0
[  186.849161][ T8447] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2962: inode #15: comm syz.5.900: corrupted xattr block 19: invalid header
[  186.866075][ T8447] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117)
[  186.872745][ T8447] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  186.878819][ T8447] ext4 filesystem being mounted at /37/qY3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  186.960745][ T8014] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  187.293824][ T5317] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  187.471956][ T5317] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  187.477341][ T5317] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.496437][ T5317] usb 6-1: config 0 descriptor??
[  187.504819][ T5317] cp210x 6-1:0.0: cp210x converter detected
[  187.548751][ T8474] netlink: 'syz.0.906': attribute type 13 has an invalid length.
[  187.551883][ T8474] netlink: 'syz.0.906': attribute type 17 has an invalid length.
[  187.621773][ T8474] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  187.905455][ T5317] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  188.028553][ T5317] usb 6-1: cp210x converter now attached to ttyUSB0
[  188.111930][ T5317] usb 6-1: USB disconnect, device number 2
[  188.121171][ T5317] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  188.132010][ T5317] cp210x 6-1:0.0: device disconnected
[  188.347615][ T8484] loop0: detected capacity change from 0 to 32768
[  188.361714][ T8484] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  188.373960][ T8484] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  188.393485][ T8484] XFS (loop0): Ending clean mount
[  188.411773][ T8484] XFS (loop0): Quotacheck needed: Please wait.
[  188.468106][ T8484] XFS (loop0): Quotacheck: Done.
[  188.492080][ T8498] loop1: detected capacity change from 0 to 256
[  188.517788][ T5890] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  188.862351][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.917'.
[  188.915385][   T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  189.088284][   T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  189.104206][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  189.108712][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  189.125525][   T10] usb 6-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00
[  189.129113][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.145252][   T10] usb 6-1: config 0 descriptor??
[  189.600942][   T10] thrustmaster 0003:044F:B323.0007: unknown main item tag 0x0
[  189.612395][   T10] thrustmaster 0003:044F:B323.0007: unknown main item tag 0x0
[  189.618381][   T10] thrustmaster 0003:044F:B323.0007: item fetching failed at offset 2/5
[  189.624458][   T10] thrustmaster 0003:044F:B323.0007: parse failed
[  189.632301][   T10] thrustmaster 0003:044F:B323.0007: probe with driver thrustmaster failed with error -22
[  189.798114][ T5317] usb 6-1: USB disconnect, device number 3
[  191.349562][ T8532] loop0: detected capacity change from 0 to 512
[  191.364721][ T8532] EXT4-fs: Ignoring removed nomblk_io_submit option
[  191.631565][ T8532] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  191.779672][ T8532] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  191.815823][ T8532] EXT4-fs (loop0): orphan cleanup on readonly fs
[  191.837508][ T8532] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0
[  191.844440][ T8532] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  191.851434][ T8532] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  191.859200][ T8532] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.927: bg 0: block 40: padding at end of block bitmap is not set
[  191.869066][ T8532] EXT4-fs (loop0): Remounting filesystem read-only
[  191.871898][ T8532] EXT4-fs (loop0): 1 truncate cleaned up
[  191.879360][ T8532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  191.975682][ T5890] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.458801][ T8544] mmap: syz.1.930 (8544) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  192.572894][ T8546] loop1: detected capacity change from 0 to 4096
[  192.628016][ T8546] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[  192.641191][ T8548] loop0: detected capacity change from 0 to 4096
[  192.644555][ T8546] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  192.663418][ T8548] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  192.689134][ T8548] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  192.700055][ T8548] ntfs3(loop0): Failed to load $Extend (-22).
[  192.702181][ T8548] ntfs3(loop0): Failed to initialize $Extend.
[  192.705113][ T8546] ntfs3(loop1): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size
[  192.744237][ T8545] ntfs3(loop1): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size
[  192.847081][  T696] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22.
[  192.849994][ T5892] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[  192.852519][ T5892] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  192.867241][ T5892] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[  192.878693][ T6553] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22.
[  192.941126][ T8558] delete_channel: no stack
[  192.943012][ T8558] delete_channel: no stack
[  193.011350][ T8564] loop1: detected capacity change from 0 to 1024
[  193.127431][ T8566] loop5: detected capacity change from 0 to 4096
[  193.141079][   T33] audit: type=1326 audit(1758170572.995:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.1.943" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e3d8eba9 code=0x7ffc0000
[  193.173391][   T33] audit: type=1326 audit(1758170573.015:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.1.943" exe="/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f35e3d8eba9 code=0x7ffc0000
[  193.206272][   T33] audit: type=1326 audit(1758170573.015:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.1.943" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e3d8eba9 code=0x7ffc0000
[  193.238820][   T33] audit: type=1326 audit(1758170573.015:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8567 comm="syz.1.943" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e3d8eba9 code=0x7ffc0000
[  193.298707][ T8562] loop0: detected capacity change from 0 to 32768
[  193.311702][ T8572] loop1: detected capacity change from 0 to 1024
[  193.330545][ T8562] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  193.344608][ T8572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.355423][ T8562] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  193.379817][ T8562] (syz.0.940,8562,1):ocfs2_read_blocks:239 ERROR: status = -12
[  193.393182][ T8562] (syz.0.940,8562,1):ocfs2_xattr_block_find:2831 ERROR: status = -12
[  193.422749][ T5892] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.477002][ T5890] ocfs2: Unmounting device (7,0) on (node local)
[  194.109153][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  195.272141][ T8640] loop0: detected capacity change from 0 to 2048
[  195.281373][ T8640] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  195.284296][ T8455] udevd[8455]: incorrect nilfs2 checksum on /dev/loop0
[  195.289606][ T8640] NILFS (loop0): mounting unchecked fs
[  195.300245][ T8455] udevd[8455]: incorrect nilfs2 checksum on /dev/loop0
[  195.317776][ T8640] NILFS (loop0): recovery complete
[  195.326152][ T8641] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  195.815773][ T8661] loop5: detected capacity change from 0 to 128
[  195.821021][ T8661] hpfs: 
[  195.821021][ T8661] HPFS filesystem options:
[  195.821021][ T8661]       help              do not mount and display this text
[  195.821021][ T8661]       uid=xxx           set uid of files that don't have uid specified in eas
[  195.821021][ T8661]       gid=xxx           set gid of files that don't have gid specified in eas
[  195.821021][ T8661]       umask=xxx         set mode of files that don't have mode specified in eas
[  195.821021][ T8661]       case=lower        lowercase all files
[  195.821021][ T8661]       case=asis         do not lowercase files (default)
[  195.821021][ T8661]       check=none        no fs checks - kernel may crash on corrupted filesystem
[  195.821021][ T8661]       check=normal      do some checks - it should not crash (default)
[  195.821021][ T8661]       check=strict      do extra time-consuming checks, used for debugging
[  195.821021][ T8661]       errors=continue   continue on errors
[  195.821021][ T8661]       errors=remount-ro remount read-only if errors found (default)
[  195.821021][ T8661]       errors=panic      panic on errors
[  195.821021][ T8661]       chkdsk=no         do not mark fs for chkdsking even if there were errors
[  195.821021][ T8661]       chkdsk=errors     mark fs dirty if errors found (default)
[  195.821021][ T8661]       chkdsk=always     always mark fs dirty - used for debugging
[  195.821021][ T8661]       e
[  196.393309][ T5941] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  196.623731][ T5941] usb 1-1: Using ep0 maxpacket: 16
[  196.718857][ T5941] usb 1-1: config 0 has an invalid interface number: 236 but max is 1
[  196.723164][ T5941] usb 1-1: config 0 has an invalid interface number: 129 but max is 1
[  196.726853][ T5941] usb 1-1: config 0 has no interface number 0
[  196.729521][ T5941] usb 1-1: config 0 has no interface number 1
[  196.732193][ T5941] usb 1-1: config 0 interface 236 has no altsetting 0
[  196.738883][ T5941] usb 1-1: config 0 interface 129 has no altsetting 0
[  196.745383][ T5941] usb 1-1: New USB device found, idVendor=1ace, idProduct=e9b2, bcdDevice=5c.3d
[  196.749586][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.752858][ T5941] usb 1-1: Product: syz
[  196.755023][ T5941] usb 1-1: Manufacturer: syz
[  196.758904][ T5941] usb 1-1: SerialNumber: syz
[  196.766674][ T5941] usb 1-1: config 0 descriptor??
[  196.999537][ T5941] ir_usb 1-1:0.236: required endpoints missing
[  197.061285][ T8689] loop5: detected capacity change from 0 to 256
[  197.070859][ T8689] exfat: Deprecated parameter 'utf8'
[  197.073015][ T8689] exfat: Deprecated parameter 'utf8'
[  197.096131][ T8689] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  197.120762][ T5941] usb 1-1: selecting invalid altsetting 0
[  197.144245][ T5941] usb 1-1: selecting invalid altsetting 0
[  197.147435][ T5941] usb 1-1: Found UVC 2.26 device syz (1ace:e9b2)
[  197.150010][ T5941] usb 1-1: No valid video chain found.
[  197.193925][ T5941] usb 1-1: USB disconnect, device number 13
[  197.579282][ T8691] loop1: detected capacity change from 0 to 32768
[  197.596957][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'.
[  198.039390][ T8704] loop0: detected capacity change from 0 to 1764
[  198.042804][ T8704] iso9660: Unknown parameter 'u'
[  198.089818][ T8701] IPVS: fo: FWM 3 0x00000003 - no destination available
[  198.095036][ T1273] IPVS: starting estimator thread 0...
[  198.183326][ T8707] IPVS: using max 64 ests per chain, 153600 per kthread
[  198.293539][ T5941] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  198.438000][ T8709] loop5: detected capacity change from 0 to 32768
[  198.443530][ T8709] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section replicas_v0: invalid device 1 in entry (unknown data_type 224): 1/245 [0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 4 5 5 6 10 11 11 11 26 33 34 45 45 56 80]
[  198.443530][ T8709] replicas_v0 (size 40):
[  198.443530][ T8709] (unknown data_type 224): 15 [0 0 0 0 0 0 255 255 255 255 255 255 255 255 255] (unknown data_type 224): 245 [5 0 0 0 0 1 0 0 0 0 0 0 0 80 0 0 0 10 0 0 0 0 0 0 0 0 0 0 0 56 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 34 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 45 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
[  198.443663][ T8709] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  198.564510][ T5941] usb 2-1: Using ep0 maxpacket: 32
[  198.587765][ T5941] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  198.591301][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.610559][ T5941] usb 2-1: config 0 descriptor??
[  198.620210][ T5941] gspca_main: nw80x-2.14.0 probing 055f:d001
[  198.763923][ T1273] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  198.913478][ T1273] usb 6-1: Using ep0 maxpacket: 16
[  198.919801][ T1273] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  198.924769][ T1273] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  198.930864][ T1273] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  198.935466][ T1273] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.938001][ T1273] usb 6-1: Product: syz
[  198.939536][ T1273] usb 6-1: Manufacturer: syz
[  198.941486][ T1273] usb 6-1: SerialNumber: syz
[  198.950142][ T1273] usb 6-1: config 0 descriptor??
[  198.957693][ T1273] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  198.960845][ T1273] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[  199.016155][   T10] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  199.166564][   T10] usb 1-1: config 253 has an invalid interface number: 57 but max is 0
[  199.170434][   T10] usb 1-1: config 253 has no interface number 0
[  199.172919][   T10] usb 1-1: config 253 interface 57 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  199.184312][   T10] usb 1-1: New USB device found, idVendor=1546, idProduct=1313, bcdDevice=1c.86
[  199.188056][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.191515][   T10] usb 1-1: Product: syz
[  199.193559][   T10] usb 1-1: Manufacturer: syz
[  199.195510][   T10] usb 1-1: SerialNumber: syz
[  199.416672][   T10] cdc_ether 1-1:253.57: invalid descriptor buffer length
[  199.419627][   T10] usb 1-1: bad CDC descriptors
[  199.429136][   T10] usb 1-1: USB disconnect, device number 14
[  199.431822][ T5941] gspca_nw80x: reg_r err -71
[  199.434936][ T5941] nw80x 2-1:0.0: probe with driver nw80x failed with error -71
[  199.464882][ T5941] usb 2-1: USB disconnect, device number 11
[  199.567545][ T1273] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  199.570875][ T1273] em28xx 6-1:0.0: Config register raw data: 0xfffffffb
[  200.182367][ T1273] em28xx 6-1:0.0: Unknown AC97 audio processor detected!
[  200.391550][ T1273] em28xx 6-1:0.0: couldn't setup AC97 register 2
[  200.411967][ T1273] em28xx 6-1:0.0: couldn't setup AC97 register 4
[  200.422170][ T1273] em28xx 6-1:0.0: couldn't setup AC97 register 6
[  200.428151][ T1273] em28xx 6-1:0.0: couldn't setup AC97 register 54
[  200.433402][ T1273] em28xx 6-1:0.0: couldn't setup AC97 register 56
[  200.452522][ T8736] loop0: detected capacity change from 0 to 2048
[  200.452704][ T1273] usb 6-1: USB disconnect, device number 4
[  200.535832][ T8736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.579988][ T5890] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  200.588840][ T8743] loop1: detected capacity change from 0 to 4096
[  200.593420][ T5890] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  200.634756][ T5890] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.638419][ T8744] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  200.820208][ T8754] Illegal XDP return value 4294967294 on prog  (id 97) dev N/A, expect packet loss!
[  200.990667][ T8764] ALSA: mixer_oss: invalid OSS volume ''
[  201.147793][   T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  201.172259][ T8768] loop0: detected capacity change from 0 to 32768
[  201.190452][   T33] audit: type=1800 audit(1758170581.045:26): pid=8768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1026" name="file1" dev="loop0" ino=4 res=0 errno=0
[  201.238680][ T8776] loop5: detected capacity change from 0 to 256
[  201.254811][ T8776] FAT-fs (loop5): Directory bread(block 1285) failed
[  201.265102][ T8776] FAT-fs (loop5): Directory bread(block 1285) failed
[  201.268574][ T8776] FAT-fs (loop5): Directory bread(block 1285) failed
[  201.271167][ T8776] FAT-fs (loop5): Directory bread(block 1285) failed
[  201.303319][ T5873] Bluetooth: hci0: command 0x040f tx timeout
[  201.326304][   T10] usb 2-1: Using ep0 maxpacket: 8
[  201.349578][   T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  201.360501][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.376349][   T10] usb 2-1: Product: syz
[  201.381736][   T10] usb 2-1: Manufacturer: syz
[  201.387596][   T10] usb 2-1: SerialNumber: syz
[  201.399680][   T10] usb 2-1: config 0 descriptor??
[  201.616444][   T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  201.753241][ T5941] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  201.918508][ T5941] usb 6-1: config 0 has an invalid interface number: 133 but max is 0
[  201.921192][ T5941] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  201.924870][ T5941] usb 6-1: config 0 has no interface number 0
[  201.929381][ T5941] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  201.932650][ T5941] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.936351][ T5941] usb 6-1: Product: syz
[  201.938230][ T5941] usb 6-1: Manufacturer: syz
[  201.940433][ T5941] usb 6-1: SerialNumber: syz
[  201.947075][ T5941] usb 6-1: config 0 descriptor??
[  202.171576][ T5941] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected
[  202.177759][ T5941] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 82
[  202.183233][ T5941] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81
[  202.186420][ T5941] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1
[  202.189421][ T5941] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2
[  202.194661][ T5941] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  202.203625][ T5941] usb 6-1: USB disconnect, device number 5
[  202.212471][ T5941] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  202.217474][ T5941] keyspan 6-1:0.133: device disconnected
[  202.426727][   T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  202.433185][   T10] usb 2-1: USB disconnect, device number 12
[  203.638061][ T8799] loop1: detected capacity change from 0 to 8192
[  203.860029][ T8802] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  203.865832][ T8802] FAT-fs (loop1): Filesystem has been set read-only
[  203.876300][ T8799] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  203.879843][ T8799] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  203.920543][ T8811] loop5: detected capacity change from 0 to 512
[  203.975879][ T8811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.980919][ T8811] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  204.049016][ T8818] snd_dummy snd_dummy.0: control 4:4:4:syz0:4096 is already present
[  204.190472][ T8825] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  204.237759][ T8014] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.442903][ T8838] loop0: detected capacity change from 0 to 128
[  204.450166][ T8838] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  204.485876][ T8838] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  204.543607][ T4034] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  204.608217][ T8844] loop0: detected capacity change from 0 to 512
[  204.632144][ T8844] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  204.663796][   T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  204.669476][ T8844] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.697167][ T8844] EXT4-fs (loop0): shut down requested (2)
[  204.813126][   T10] usb 6-1: Using ep0 maxpacket: 16
[  204.828386][   T10] usb 6-1: config 0 has an invalid interface number: 214 but max is 0
[  204.837934][   T10] usb 6-1: config 0 has no interface number 0
[  204.840705][   T10] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  204.912218][   T10] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  204.915951][ T8846] loop1: detected capacity change from 0 to 32768
[  204.933173][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.936643][   T10] usb 6-1: Product: syz
[  204.938399][   T10] usb 6-1: Manufacturer: syz
[  204.940422][   T10] usb 6-1: SerialNumber: syz
[  204.961335][   T10] usb 6-1: config 0 descriptor??
[  205.196802][ T8850] loop1: detected capacity change from 0 to 128
[  205.465805][ T5890] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.629158][   T10] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.214/input/input9
[  205.783322][   T47] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  205.934405][   T47] usb 1-1: Using ep0 maxpacket: 32
[  205.940865][   T47] usb 1-1: unable to get BOS descriptor or descriptor too short
[  205.948264][   T47] usb 1-1: config 128 has an invalid interface number: 127 but max is 3
[  205.951437][   T47] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  205.958958][   T47] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4
[  205.964105][   T47] usb 1-1: config 128 has no interface number 0
[  205.967086][   T47] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  205.971855][   T47] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  205.977821][   T47] usb 1-1: config 128 interface 127 has no altsetting 0
[  205.984600][   T47] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  205.988485][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.992714][   T47] usb 1-1: Product: syz
[  205.996214][   T47] usb 1-1: Manufacturer: syz
[  205.998851][   T47] usb 1-1: SerialNumber: syz
[  206.110676][   T10] usb 6-1: USB disconnect, device number 6
[  206.330127][   T47] usb 1-1: USB disconnect, device number 15
[  206.420105][ T8455] udevd[8455]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  206.491192][ T8856] loop1: detected capacity change from 0 to 32768
[  206.533498][ T8856] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  206.587482][ T5892] ocfs2: Unmounting device (7,1) on (node local)
[  206.706615][ T8860] loop5: detected capacity change from 0 to 32768
[  206.736943][ T8860] syz.5.1065: attempt to access beyond end of device
[  206.736943][ T8860] loop5: rw=2049, sector=4680032, nr_sectors = 8 limit=32768
[  206.776321][  T116] blkno = 8ed2c, nblocks = 1
[  206.787341][  T116] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  206.787341][  T116] 
[  206.801954][  T116] ERROR: (device loop5): remounting filesystem as read-only
[  207.000386][ T8876] loop0: detected capacity change from 0 to 1024
[  207.011026][ T8876] EXT4-fs: Ignoring removed mblk_io_submit option
[  207.037794][ T8876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.108040][ T5890] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.203940][   T47] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  207.287928][ T8886] loop0: detected capacity change from 0 to 512
[  207.302669][ T8886] EXT4-fs (loop0): external journal device major/minor numbers have changed
[  207.307691][ T8886] EXT4-fs (loop0): failed to open journal device unknown-block(8,1) -16
[  207.375968][   T47] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  207.381196][   T47] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  207.385890][   T47] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  207.398198][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.410312][ T8874] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  207.429316][   T47] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  207.481533][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1079'.
[  207.487142][ T8893] bridge_slave_1: left allmulticast mode
[  207.490148][ T8893] bridge_slave_1: left promiscuous mode
[  207.492731][ T8893] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.511389][ T8893] bridge_slave_0: left allmulticast mode
[  207.517428][ T8893] bridge_slave_0: left promiscuous mode
[  207.521603][ T8893] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.553758][ T5317] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  207.642714][   T10] usb 2-1: USB disconnect, device number 13
[  207.717460][ T5317] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[  207.722454][ T5317] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  207.731327][ T5317] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  207.736979][ T5317] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  207.740529][ T5317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.746177][ T5317] usb 1-1: config 0 descriptor??
[  207.755088][ T5317] usb-storage 1-1:0.0: USB Mass Storage device detected
[  207.766173][ T5317] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  207.962622][ T5317] usb 1-1: USB disconnect, device number 16
[  208.062201][ T8896] loop5: detected capacity change from 0 to 40427
[  208.066014][ T8896] F2FS-fs: heap/no_heap options were deprecated
[  208.073942][ T8896] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  208.077184][ T8896] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  208.080447][ T8896] F2FS-fs (loop5): old and new quota format mixing
[  208.631681][ T8904] loop5: detected capacity change from 0 to 32768
[  208.819556][ T8922] loop0: detected capacity change from 0 to 256
[  208.856589][ T8922] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  209.192428][ T8930] FAT-fs (loop0): error, corrupted directory (invalid entries)
[  209.533278][ T5317] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  209.645819][ T8936] loop5: detected capacity change from 0 to 65
[  209.649699][ T8936] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway
[  209.683886][ T5317] usb 2-1: Using ep0 maxpacket: 8
[  209.697642][ T5317] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  209.701241][ T5317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.717686][ T5317] usb 2-1: config 0 descriptor??
[  209.901994][ T8938] loop0: detected capacity change from 0 to 2048
[  209.927786][ T5317] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  209.931835][ T5317] asix 2-1:0.0: probe with driver asix failed with error -71
[  209.943499][ T5317] usb 2-1: USB disconnect, device number 14
[  209.966314][ T8455]  loop0: p1 < > p2 < > p3 p4 < >
[  209.968378][ T8455] loop0: partition table partially beyond EOD, truncated
[  209.971182][ T8455] loop0: p1 start 2305 is beyond EOD, truncated
[  209.978476][ T8455] loop0: p2 start 4294902784 is beyond EOD, truncated
[  209.981344][ T8455] loop0: p3 start 3724543488 is beyond EOD, truncated
[  210.015680][ T8938]  loop0: p1 < > p2 < > p3 p4 < >
[  210.018460][ T8938] loop0: partition table partially beyond EOD, truncated
[  210.021559][ T8938] loop0: p1 start 2305 is beyond EOD, truncated
[  210.045073][ T8938] loop0: p2 start 4294902784 is beyond EOD, truncated
[  210.048092][ T8938] loop0: p3 start 3724543488 is beyond EOD, truncated
[  210.228670][ T8455] udevd[8455]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  210.274205][ T8455] udevd[8455]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  210.710194][ T8955] loop1: detected capacity change from 0 to 128
[  210.714301][ T8955] vfat: Unknown parameter ' ~gD&Ƹӷ0xgG?8{{TGݫP
[  210.714301][ T8955] ?lMؒBw>+C;.]o`NNxu^@+ԱKc{)qDڲaNJE>GtU	F0s?O^D'
[  212.301664][ T8970] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1110'.
[  212.317659][ T8970] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1110'.
[  212.386431][ T8972] loop0: detected capacity change from 0 to 128
[  212.693653][ T8990] loop1: detected capacity change from 0 to 2048
[  212.716433][ T8990] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  212.720724][   T33] audit: type=1326 audit(1758170592.575:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b0b8eba9 code=0x7ffc0000
[  212.754490][   T33] audit: type=1326 audit(1758170592.575:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b0b8eba9 code=0x7ffc0000
[  212.773669][   T33] audit: type=1326 audit(1758170592.575:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53b0b8eba9 code=0x7ffc0000
[  212.782400][   T33] audit: type=1326 audit(1758170592.575:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b0b8eba9 code=0x7ffc0000
[  212.821532][   T33] audit: type=1326 audit(1758170592.575:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f53b0b8eba9 code=0x7ffc0000
[  212.843344][   T33] audit: type=1326 audit(1758170592.575:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b0b8eba9 code=0x7ffc0000
[  212.853726][   T33] audit: type=1326 audit(1758170592.575:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f53b0b8eba9 code=0x7ffc0000
[  212.890002][   T33] audit: type=1326 audit(1758170592.575:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b0b8eba9 code=0x7ffc0000
[  212.950837][   T33] audit: type=1326 audit(1758170592.575:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53b0b8eba9 code=0x7ffc0000
[  213.037746][   T33] audit: type=1326 audit(1758170592.595:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8991 comm="syz.0.1122" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f53b0b8eba9 code=0x7ffc0000
[  213.404116][ T5941] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  213.571326][ T5941] usb 2-1: unable to get BOS descriptor or descriptor too short
[  213.586538][ T5941] usb 2-1: not running at top speed; connect to a high speed hub
[  213.596688][ T5941] usb 2-1: config 4 has an invalid interface number: 32 but max is 0
[  213.604597][ T5941] usb 2-1: config 4 has no interface number 0
[  213.628975][ T5941] usb 2-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50
[  213.633378][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.636983][ T5941] usb 2-1: Product: syz
[  213.639094][ T5941] usb 2-1: Manufacturer: syz
[  213.641363][ T5941] usb 2-1: SerialNumber: syz
[  213.900229][ T5941] usb 2-1: Found UVC 0.02 device syz (17dc:0202)
[  213.905158][ T5941] usb 2-1: No valid video chain found.
[  213.919137][ T5941] usb 2-1: USB disconnect, device number 15
[  214.122400][ T9011] loop0: detected capacity change from 0 to 1024
[  214.571931][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1133'.
[  214.801341][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1139'.
[  214.808644][ T9030] IPVS: Error joining to the multicast group
[  215.510865][ T9059] netlink: 21 bytes leftover after parsing attributes in process `syz.0.1153'.
[  215.845025][ T9075] loop5: detected capacity change from 0 to 164
[  215.874639][ T9075] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  215.970222][ T9061] loop1: detected capacity change from 0 to 32768
[  215.981472][ T9061] (syz.1.1154,9061,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  215.994899][ T9075] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  216.002547][ T9061] (syz.1.1154,9061,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  216.054451][ T9061] JBD2: Ignoring recovery information on journal
[  216.101910][ T9061] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  216.208949][ T9061] 
[  216.210059][ T9061] ======================================================
[  216.212577][ T9061] WARNING: possible circular locking dependency detected
[  216.215109][ T9061] syzkaller #0 Not tainted
[  216.217225][ T9061] ------------------------------------------------------
[  216.221073][ T9061] syz.1.1154/9061 is trying to acquire lock:
[  216.223207][ T9061] ffff88810ec2a618 (sb_internal#6){.+.+}-{0:0}, at: ocfs2_acquire_dquot+0x455/0xb30
[  216.226414][ T9061] 
[  216.226414][ T9061] but task is already holding lock:
[  216.228844][ T9061] ffff8881230b6be0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_lock_global_qf+0x1e8/0x270
[  216.232405][ T9061] 
[  216.232405][ T9061] which lock already depends on the new lock.
[  216.232405][ T9061] 
[  216.236162][ T9061] 
[  216.236162][ T9061] the existing dependency chain (in reverse order) is:
[  216.239310][ T9061] 
[  216.239310][ T9061] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}:
[  216.242187][ T9061]        lock_acquire+0x120/0x360
[  216.243850][ T9061]        down_write+0x96/0x1f0
[  216.245410][ T9061]        ocfs2_lock_global_qf+0x1e8/0x270
[  216.247555][ T9061]        ocfs2_acquire_dquot+0x2b0/0xb30
[  216.249687][ T9061]        dqget+0x7b1/0xf10
[  216.251314][ T9061]        __dquot_initialize+0x3b3/0xcb0
[  216.253421][ T9061]        ocfs2_get_init_inode+0x13b/0x1b0
[  216.255427][ T9061]        ocfs2_mknod+0x863/0x2050
[  216.257369][ T9061]        ocfs2_create+0x1a5/0x440
[  216.258930][ T9061]        path_openat+0x14f4/0x3830
[  216.260897][ T9061]        do_filp_open+0x1fa/0x410
[  216.263023][ T9061]        do_sys_openat2+0x121/0x1c0
[  216.264955][ T9061]        __x64_sys_openat+0x138/0x170
[  216.266812][ T9061]        do_syscall_64+0xfa/0x3b0
[  216.268834][ T9061]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.271263][ T9061] 
[  216.271263][ T9061] -> #5 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}:
[  216.275598][ T9061]        lock_acquire+0x120/0x360
[  216.277697][ T9061]        down_write+0x96/0x1f0
[  216.279676][ T9061]        ocfs2_lock_global_qf+0x1ca/0x270
[  216.282122][ T9061]        ocfs2_acquire_dquot+0x2b0/0xb30
[  216.284585][ T9061]        dqget+0x7b1/0xf10
[  216.286016][ T9061]        __dquot_initialize+0x3b3/0xcb0
[  216.288415][ T9061]        ocfs2_get_init_inode+0x13b/0x1b0
[  216.290199][ T9061]        ocfs2_mknod+0x863/0x2050
[  216.292244][ T9061]        ocfs2_create+0x1a5/0x440
[  216.294362][ T9061]        path_openat+0x14f4/0x3830
[  216.296441][ T9061]        do_filp_open+0x1fa/0x410
[  216.298127][ T9061]        do_sys_openat2+0x121/0x1c0
[  216.300108][ T9061]        __x64_sys_openat+0x138/0x170
[  216.302101][ T9061]        do_syscall_64+0xfa/0x3b0
[  216.304151][ T9061]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.306725][ T9061] 
[  216.306725][ T9061] -> #4 (&dquot->dq_lock){+.+.}-{4:4}:
[  216.309609][ T9061]        lock_acquire+0x120/0x360
[  216.311164][ T9061]        __mutex_lock+0x187/0x1350
[  216.312970][ T9061]        dqget+0x72a/0xf10
[  216.314795][ T9061]        __dquot_initialize+0x3b3/0xcb0
[  216.317049][ T9061]        __ext4_new_inode+0x7dd/0x3cb0
[  216.319071][ T9061]        ext4_xattr_inode_lookup_create+0xa3a/0x1c20
[  216.321300][ T9061]        ext4_xattr_block_set+0x223/0x2ac0
[  216.323078][ T9061]        ext4_xattr_set_handle+0xdfb/0x1590
[  216.325190][ T9061]        ext4_xattr_set+0x230/0x320
[  216.326998][ T9061]        __vfs_setxattr+0x43c/0x480
[  216.328629][ T9061]        __vfs_setxattr_noperm+0x12d/0x660
[  216.330500][ T9061]        vfs_setxattr+0x16b/0x2f0
[  216.332189][ T9061]        filename_setxattr+0x274/0x600
[  216.334464][ T9061]        path_setxattrat+0x364/0x3a0
[  216.336658][ T9061]        __x64_sys_lsetxattr+0xbf/0xe0
[  216.338953][ T9061]        do_syscall_64+0xfa/0x3b0
[  216.341077][ T9061]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.343747][ T9061] 
[  216.343747][ T9061] -> #3 (&ei->xattr_sem){++++}-{4:4}:
[  216.346883][ T9061]        lock_acquire+0x120/0x360
[  216.348968][ T9061]        down_read+0x46/0x2e0
[  216.350934][ T9061]        ext4_setattr+0x855/0x1bc0
[  216.353071][ T9061]        notify_change+0xb36/0xe40
[  216.354733][ T9061]        chown_common+0x40c/0x5c0
[  216.356372][ T9061]        do_fchownat+0x161/0x270
[  216.357978][ T9061]        __x64_sys_chown+0x82/0xa0
[  216.359624][ T9061]        do_syscall_64+0xfa/0x3b0
[  216.361225][ T9061]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.363656][ T9061] 
[  216.363656][ T9061] -> #2 (jbd2_handle){++++}-{0:0}:
[  216.366238][ T9061]        lock_acquire+0x120/0x360
[  216.367728][ T9061]        start_this_handle+0x1fa7/0x21c0
[  216.369636][ T9061]        jbd2__journal_start+0x2c1/0x5b0
[  216.371402][ T9061]        jbd2_journal_start+0x2a/0x40
[  216.373576][ T9061]        ocfs2_start_trans+0x376/0x6d0
[  216.375343][ T9061]        ocfs2_fileattr_set+0x301/0x7e0
[  216.377056][ T9061]        vfs_fileattr_set+0x932/0xb90
[  216.378897][ T9061]        ioctl_fssetxattr+0x1ed/0x270
[  216.381087][ T9061]        do_vfs_ioctl+0x81d/0x1430
[  216.383092][ T9061]        __se_sys_ioctl+0x82/0x170
[  216.384788][ T9061]        do_syscall_64+0xfa/0x3b0
[  216.386739][ T9061]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.389293][ T9061] 
[  216.389293][ T9061] -> #1 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  216.392132][ T9061]        lock_acquire+0x120/0x360
[  216.394104][ T9061]        down_read+0x46/0x2e0
[  216.395486][ T9061]        ocfs2_start_trans+0x36a/0x6d0
[  216.397432][ T9061]        ocfs2_fileattr_set+0x301/0x7e0
[  216.399939][ T9061]        vfs_fileattr_set+0x932/0xb90
[  216.402116][ T9061]        ioctl_fssetxattr+0x1ed/0x270
[  216.404303][ T9061]        do_vfs_ioctl+0x81d/0x1430
[  216.406277][ T9061]        __se_sys_ioctl+0x82/0x170
[  216.408172][ T9061]        do_syscall_64+0xfa/0x3b0
[  216.409882][ T9061]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.412367][ T9061] 
[  216.412367][ T9061] -> #0 (sb_internal#6){.+.+}-{0:0}:
[  216.415286][ T9061]        validate_chain+0xb9b/0x2140
[  216.417250][ T9061]        __lock_acquire+0xab9/0xd20
[  216.419193][ T9061]        lock_acquire+0x120/0x360
[  216.420979][ T9061]        ocfs2_start_trans+0x26b/0x6d0
[  216.422983][ T9061]        ocfs2_acquire_dquot+0x455/0xb30
[  216.425003][ T9061]        dqget+0x7b1/0xf10
[  216.426455][ T9061]        __dquot_initialize+0x3b3/0xcb0
[  216.428337][ T9061]        ocfs2_get_init_inode+0x13b/0x1b0
[  216.430358][ T9061]        ocfs2_mknod+0x863/0x2050
[  216.432292][ T9061]        ocfs2_create+0x1a5/0x440
[  216.434551][ T9061]        path_openat+0x14f4/0x3830
[  216.437000][ T9061]        do_filp_open+0x1fa/0x410
[  216.438657][ T9061]        do_sys_openat2+0x121/0x1c0
[  216.440594][ T9061]        __x64_sys_openat+0x138/0x170
[  216.442623][ T9061]        do_syscall_64+0xfa/0x3b0
[  216.444745][ T9061]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.447411][ T9061] 
[  216.447411][ T9061] other info that might help us debug this:
[  216.447411][ T9061] 
[  216.453626][ T9061] Chain exists of:
[  216.453626][ T9061]   sb_internal#6 --> &ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE] --> &ocfs2_quota_ip_alloc_sem_key
[  216.453626][ T9061] 
[  216.460682][ T9061]  Possible unsafe locking scenario:
[  216.460682][ T9061] 
[  216.463714][ T9061]        CPU0                    CPU1
[  216.465893][ T9061]        ----                    ----
[  216.468059][ T9061]   lock(&ocfs2_quota_ip_alloc_sem_key);
[  216.470325][ T9061]                                lock(&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]);
[  216.474286][ T9061]                                lock(&ocfs2_quota_ip_alloc_sem_key);
[  216.477560][ T9061]   rlock(sb_internal#6);
[  216.479300][ T9061] 
[  216.479300][ T9061]  *** DEADLOCK ***
[  216.479300][ T9061] 
[  216.482477][ T9061] 6 locks held by syz.1.1154/9061:
[  216.484529][ T9061]  #0: ffff88810ec2a428 (sb_writers#31){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  216.488099][ T9061]  #1: ffff8881230b3540 (&type->i_mutex_dir_key#23){++++}-{4:4}, at: path_openat+0x8da/0x3830
[  216.492185][ T9061]  #2: ffff88812309c3c0 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  216.497463][ T9061]  #3: ffff88803647c0a8 (&dquot->dq_lock){+.+.}-{4:4}, at: ocfs2_acquire_dquot+0x2a3/0xb30
[  216.501869][ T9061]  #4: ffff8881230b6f40 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_lock_global_qf+0x1ca/0x270
[  216.507047][ T9061]  #5: ffff8881230b6be0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_lock_global_qf+0x1e8/0x270
[  216.511461][ T9061] 
[  216.511461][ T9061] stack backtrace:
[  216.513890][ T9061] CPU: 0 UID: 0 PID: 9061 Comm: syz.1.1154 Not tainted syzkaller #0 PREEMPT(full) 
[  216.513911][ T9061] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  216.513921][ T9061] Call Trace:
[  216.513931][ T9061]  <TASK>
[  216.513940][ T9061]  dump_stack_lvl+0x189/0x250
[  216.513964][ T9061]  ? __pfx_dump_stack_lvl+0x10/0x10
[  216.513981][ T9061]  ? __pfx__printk+0x10/0x10
[  216.514003][ T9061]  ? print_lock_name+0xde/0x100
[  216.514023][ T9061]  print_circular_bug+0x2ee/0x310
[  216.514042][ T9061]  check_noncircular+0x134/0x160
[  216.514059][ T9061]  validate_chain+0xb9b/0x2140
[  216.514080][ T9061]  __lock_acquire+0xab9/0xd20
[  216.514102][ T9061]  ? ocfs2_acquire_dquot+0x455/0xb30
[  216.514119][ T9061]  lock_acquire+0x120/0x360
[  216.514136][ T9061]  ? ocfs2_acquire_dquot+0x455/0xb30
[  216.514155][ T9061]  ? do_raw_spin_unlock+0x4d/0x240
[  216.514171][ T9061]  ocfs2_start_trans+0x26b/0x6d0
[  216.514189][ T9061]  ? ocfs2_acquire_dquot+0x455/0xb30
[  216.514205][ T9061]  ? __pfx_ocfs2_start_trans+0x10/0x10
[  216.514220][ T9061]  ? do_raw_spin_unlock+0x4d/0x240
[  216.514237][ T9061]  ? _raw_spin_unlock+0x28/0x50
[  216.514257][ T9061]  ? ocfs2_qinfo_unlock+0x121/0x150
[  216.514273][ T9061]  ocfs2_acquire_dquot+0x455/0xb30
[  216.514294][ T9061]  ? __pfx_ocfs2_acquire_dquot+0x10/0x10
[  216.514314][ T9061]  dqget+0x7b1/0xf10
[  216.514331][ T9061]  __dquot_initialize+0x3b3/0xcb0
[  216.514347][ T9061]  ? __pfx___dquot_initialize+0x10/0x10
[  216.514360][ T9061]  ? do_raw_spin_unlock+0x4d/0x240
[  216.514374][ T9061]  ? from_vfsgid+0x72/0xa0
[  216.514389][ T9061]  ? inode_init_owner+0x1ee/0x3a0
[  216.514407][ T9061]  ocfs2_get_init_inode+0x13b/0x1b0
[  216.514420][ T9061]  ? __pfx_ocfs2_get_init_inode+0x10/0x10
[  216.514434][ T9061]  ? kasan_save_free_info+0x46/0x50
[  216.514457][ T9061]  ocfs2_mknod+0x863/0x2050
[  216.514477][ T9061]  ? __pfx_ocfs2_mknod+0x10/0x10
[  216.514489][ T9061]  ? __pfx_ocfs2_find_entry+0x10/0x10
[  216.514531][ T9061]  ? __lock_acquire+0xab9/0xd20
[  216.514554][ T9061]  ? look_up_lock_class+0x74/0x170
[  216.514568][ T9061]  ? register_lock_class+0x51/0x320
[  216.514585][ T9061]  ? __lock_acquire+0xab9/0xd20
[  216.514602][ T9061]  ? __lock_acquire+0xab9/0xd20
[  216.514618][ T9061]  ? do_raw_spin_lock+0x121/0x290
[  216.514631][ T9061]  ? do_raw_spin_unlock+0x4d/0x240
[  216.514645][ T9061]  ? rcu_is_watching+0x15/0xb0
[  216.514657][ T9061]  ? ocfs2_lookup+0x5b9/0x9b0
[  216.514670][ T9061]  ocfs2_create+0x1a5/0x440
[  216.514682][ T9061]  ? __pfx_ocfs2_lookup+0x10/0x10
[  216.514693][ T9061]  ? from_kgid+0x1b0/0x650
[  216.514708][ T9061]  ? __pfx_ocfs2_create+0x10/0x10
[  216.514719][ T9061]  ? HAS_UNMAPPED_ID+0x11a/0x180
[  216.514733][ T9061]  ? inode_permission+0x149/0x470
[  216.514743][ T9061]  ? __pfx_ocfs2_permission+0x10/0x10
[  216.514753][ T9061]  ? bpf_lsm_inode_create+0x9/0x20
[  216.514767][ T9061]  ? __pfx_ocfs2_create+0x10/0x10
[  216.514779][ T9061]  path_openat+0x14f4/0x3830
[  216.514792][ T9061]  ? arch_stack_walk+0xfc/0x150
[  216.514818][ T9061]  ? __pfx_path_openat+0x10/0x10
[  216.514833][ T9061]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.514850][ T9061]  do_filp_open+0x1fa/0x410
[  216.514864][ T9061]  ? __lock_acquire+0xab9/0xd20
[  216.514883][ T9061]  ? __pfx_do_filp_open+0x10/0x10
[  216.514906][ T9061]  ? _raw_spin_unlock+0x28/0x50
[  216.514924][ T9061]  ? alloc_fd+0x64c/0x6c0
[  216.514946][ T9061]  do_sys_openat2+0x121/0x1c0
[  216.514959][ T9061]  ? __se_sys_futex+0x36f/0x400
[  216.514973][ T9061]  ? __pfx_do_sys_openat2+0x10/0x10
[  216.514987][ T9061]  ? rcu_is_watching+0x15/0xb0
[  216.514999][ T9061]  __x64_sys_openat+0x138/0x170
[  216.515011][ T9061]  do_syscall_64+0xfa/0x3b0
[  216.515024][ T9061]  ? lockdep_hardirqs_on+0x9c/0x150
[  216.515034][ T9061]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.515046][ T9061]  ? exc_page_fault+0x9f/0xf0
[  216.515058][ T9061]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  216.515072][ T9061] RIP: 0033:0x7f35e3d8eba9
[  216.515088][ T9061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  216.515101][ T9061] RSP: 002b:00007f35e4cc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  216.515117][ T9061] RAX: ffffffffffffffda RBX: 00007f35e3fd5fa0 RCX: 00007f35e3d8eba9
[  216.515128][ T9061] RDX: 0000000000000042 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  216.515138][ T9061] RBP: 00007f35e3e11e19 R08: 0000000000000000 R09: 0000000000000000
[  216.515147][ T9061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  216.515154][ T9061] R13: 00007f35e3fd6038 R14: 00007f35e3fd5fa0 R15: 00007ffed1a13a68
[  216.515166][ T9061]  </TASK>
[  216.779082][ T5892] ocfs2: Unmounting device (7,1) on (node local)

VM DIAGNOSIS:
04:43:16  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000033b2 RDI=00000000000033b3 RBP=00000000000003f8 RSP=ffffc9000429e610
R8 =ffff888107df0237 R9 =1ffff11020fbe046 R10=dffffc0000000000 R11=ffffffff854fa930
R12=dffffc0000000000 R13=ffffffff99b008e6 R14=ffffffff99df5440 R15=0000000000000000
RIP=ffffffff854fa9ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f35e4cc06c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9b6a9d7dac CR3=000000002bbe0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f9b6a9a7498 00007f9b6a9a7470 XMM03=00007f9b6a9a74a8 00007f9b6a9a74a0
XMM04=00007f9b6b50d100 00007f9b6a9a7460 XMM05=00007f9b6a9a7478 00007f9b6a9a74c0
XMM06=00007f9b6a9a74b8 00007f9b6a9a74b0 XMM07=00007f9b6a9a74a8 00007f9b6a9a74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f9b6a812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b45e7b RBX=1ffff11009608341 RCX=ffff888109715640 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000332f6c0 RSP=ffffc9000332f540
R8 =ffffffff8fa3a537 R9 =1ffffffff1f474a6 R10=dffffc0000000000 R11=fffffbfff1f474a7
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b45e63 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555895ff500 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9b6b6dbfc8 CR3=0000000121d6e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f35e3e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
