last executing test programs:

1m13.020524138s ago: executing program 1 (id=450):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x202006, 0x1, {0xa, 0x4e1f, 0x9, @loopback, 0x97}}}, 0x80, 0x0}, 0xf725)
ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="234602ffffff"})

1m12.523014136s ago: executing program 1 (id=452):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfffffffc, 0x0, 0x2, 0x8, 0x0, 0x2}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0x8b32, &(0x7f0000000040))

1m12.17693085s ago: executing program 1 (id=454):
r0 = socket$rds(0x15, 0x5, 0x0)
recvmmsg(r0, &(0x7f0000006180)=[{{0x0, 0x0, 0x0}, 0x46a2}], 0x1, 0x2022, 0x0)

1m11.943866604s ago: executing program 1 (id=457):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_xen(0x0, 0x0, 0x0, 0x1030001, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)

1m11.71971039s ago: executing program 1 (id=461):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x4008800)

1m11.272918859s ago: executing program 1 (id=468):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000003d000107000000000000000003"], 0x18}}, 0x0)

1m10.969541143s ago: executing program 32 (id=468):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000003d000107000000000000000003"], 0x18}}, 0x0)

2.106155829s ago: executing program 2 (id=1120):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f00000002c0)={[{@undelete}, {@umask={'umask', 0x3d, 0x6}}, {@adinicb}, {@dmode}, {@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@gid}, {}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}]}, 0x1, 0xc76, &(0x7f0000000f40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x105042, 0x1db)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x3fe00}], 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0)

2.103867043s ago: executing program 3 (id=1121):
unshare(0x20000400)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
write$P9_RUNLINKAT(r2, &(0x7f0000000100)={0x7, 0x4d, 0x1}, 0x7ac00)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0)
r4 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES16, @ANYBLOB="017bd269f7dd3a93fa412d09c2790257816e859e38befc7634f092626c62b45f123b8f0f84059ba4351abe0bfd3933e564c513028b41a418555d5e4c744478e7ca03d24a2c1b0f248513f8f9cfc324431f5d5a6999ad47b61152edad98c141cf359dfcf021d4e8a18166aa7767e69420c5308149bcddd4a62a31d8f902a24645ef50e8395e891793f46aaa025a260c8d784a1ec9233755d12803582f0700000000000000df6c634447f23d2cd9e65d3461d3a09b93f7318e486e862f288bb7ce21e0df72e59ed16f3796c260b5be486b21c5d7cf21996406b4b3240f4255406a009a12c844c2d35cefba99e2b26b01a1347225c1a8cb9f6630d930847f193662a5eea4daf62aeb29324a86f8ec6367bf3105d3529316d3e044bbeedf80c3b301686b44cd51c9ff53690e9269caf72a039b5e32b3e543b8fbba25a1eaf60c3e1da6becef1750a9e8d991ef03ce3d14d85d69f6ff54465fba8ad4aef62561284fdc9cba6fea9a38fb5244e7729c047949660af09fa91fd17928f55f6bed589cdf6e6dde72206336961da8ce2c100ff90ac4a598e9846bc2b868a640021bec390b7f460d14330beadd5458a0352cde0d6c8bc1655da9121090c98cdf98438ab1baa3bbbb60db2436ae26fad78755d3df25b0f03c4c8f39f27a668aa45aa2953ebd6a34233a386f3d63a07f7e491a2db98af12cc6fc814e8a75efcf90c0e2a56a833d53b086be1ec10efe3c7d46abfedb36fc2fc75ebbdabcd356e489fe87dbf67bfe8de6d24d4db48c65da860ccf9f9b2f8b1fc8c8d2e7293a465ea21757521a1b0677f50901ea19c53fd3a8ca59fbc328e69b0d064746a000000a1ed7631a64c8ecb86645f66b4efc49b74ec93f4897a56c7dbb42f094e6685051a0d42bed7598cc30ffc08bc2db500c5e5f9d51fc89d25f3a202b0abc67dd7926f915d61c24e031636d984759a36ba0b3a06151764621bdbe91b510a6064aa51e0a73317ccb02dbb89c701eac52445561f7355071ef71ae5427f612f8620f6b9a80c440af2f162"], 0x41, 0x2f5, &(0x7f0000000b40)="$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")
r5 = io_uring_setup(0x71b9, 0x0)
io_uring_register$IORING_REGISTER_CLOCK(r5, 0x1d, &(0x7f0000000040)={0x7}, 0x0)
io_uring_enter(r5, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18)
unshare(0xc060300)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000080)={0x6002, r4}, 0x0)
ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x6000})

1.948253315s ago: executing program 2 (id=1122):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0)
ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000fee000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0xf000, 0x2})

1.813420243s ago: executing program 2 (id=1124):
r0 = socket$kcm(0xa, 0x2, 0x11)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3d, &(0x7f00000002c0), 0x8)

1.712232244s ago: executing program 2 (id=1126):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6a)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
close(r4)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETDUPLEX(r5, 0x5016, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000000)={'sit0\x00', <r6=>0x0, 0x40, 0x7, 0x6837, 0x8000, {{0x5, 0x4, 0x1, 0x3, 0x14, 0x8001, 0x0, 0x1, 0x2f, 0x0, @empty, @empty}}}})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000c3b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000001700000018", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

766.117954ms ago: executing program 2 (id=1127):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0xb}, 0x18}}, 0x0)

746.465432ms ago: executing program 3 (id=1128):
r0 = io_uring_setup(0x6001, &(0x7f0000000000)={0x0, 0xeec2, 0x10, 0x2, 0x378})
close_range(r0, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={<r1=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xffff)
sendmmsg$unix(r1, &(0x7f00000004c0), 0x400000000000352, 0x2404c008)

676.970157ms ago: executing program 2 (id=1129):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
r2 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27})
io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0)

277.137638ms ago: executing program 3 (id=1131):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x56555959, 0x500, 0x2d0, 0x4, @stepwise={{0x1, 0xfffffffb}, {0x2, 0x445}, {0xa9}}})

276.955289ms ago: executing program 3 (id=1132):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000040), 0x10)
sendmsg$netlink(r0, &(0x7f0000005d80)={&(0x7f0000000440)=@proc={0x1d, 0x0, 0x25dfdbff, 0x80000}, 0xc, &(0x7f0000005cc0)=[{&(0x7f0000001380)=ANY=[], 0x38}], 0x1, 0x0, 0x0, 0x44011}, 0x4001)

196.466586ms ago: executing program 3 (id=1133):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000380)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@tclass={{0x14, 0x29, 0x43, 0x1}}], 0x18}, 0x0)

194.224035ms ago: executing program 3 (id=1135):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000008940)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3+5159pnD8MSJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAud/2MBAAAAAAAAAAAAAAAAAADgb2rz/f9cdKLJ+/9jyXGkRf31tzo/Rjpn4u2rYxcGh5L936Nt+a8nSb+c6wr9TfZ9z+7/fi5Tv/n+79v72a3G+Br99oUoHkidx/HAQAjfJBu/n4qOxKXyUuXVW+Xlhdk9G8YzKx3/+u79qegkG/q3G//RTPud3///v9uupur5zb27xJ5r6fh3tSz37adRW/E/n6m3H/Fn99Lx766l9W4tMFKfAKrx/7x75/iPZdrvVPyPhxByUXWsudQMUF3DVNNbrVdIS8f/UC0tNXUmH2Sr+//3TPwvZNo/qPl/JftFRFPp+P+rltaTKrF5//fHO9//FzPtH0T8q+Nf8f3flnT8D9cTu1NFap9ku/P/eKb9TsX/epyM83iUugJWo3p6q/9XR1o6/j3b8jef/+K21n+XMvX36/mv0W/j+a8x/b8c1Z//aC4d/96W5dq9/ycy9To9/4/U1n/sVjr+R2pp6bVzX+1nu/GfzLTfqfjXViU9jfhvzid/HK6nf23915Z0/P9dT4y3llip/ayt/6Kd1/+XM+0fxPqvOv6VuLO9Pi/S8T/aslw1/j+08f1/JVOv8/EPYdBaf9fS8T/Wslzt/u/ZOf5TmXqdjv9LnWwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Bkwmhz7QhQPpM7jeGAghPPJ+alwJJouzOanS+WZj5ZCGEvSc+FEdLtUni6U8nML5dlivlAqlWdCuJDknww90VKpXMnPF+5e3GirN7pTLCxWpouFSghhPEn/fzjWaGt6rjJfuBtCuLSR95+4vHj3TmEhPzu3+Obg4OBgmNgYQ39U/KRSXKjUe6/nhjC5Ubcv2jK4WvbljbEcjT4sLy8uFEq19Ctb6pTKM4XSljpTSd4XoT+qLC4vzBQqxXypfLvR30EaSY5jE9feu3ZlaFv+zah+HN3fYQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFz0afuPLEEJ3/SwOIYw0fomalX/4uHg2/3Tq/trw6cnVB2tPWpUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JMdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7NIxSgNBFAbgN2Ohdh7DatntbFcU0cIVwRPoMTyMHsVLeIcUKdKmCIFkFsJmF7ZJqu9rHszPzHswDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHme3ruPt7qJSHG1uYz4+/pfHOYvpf7cj9+/OMOMnM7za/fwWDfl39NRfleOlm3epevV92eM1N7vYE+G+7TX97menGtq36bm6/veRMpVRLQlv005V9W8twAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgyw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRR9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD///4CHxA=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
ioctl$FITRIM(r0, 0x40406f06, &(0x7f0000000400)={0x0, 0x8000000000000001, 0x86ff})

137.804278ms ago: executing program 0 (id=1136):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f008, 0x2400})

137.586593ms ago: executing program 0 (id=1137):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$FIONREAD(r0, 0x541b, 0x0)

86.286064ms ago: executing program 0 (id=1138):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x1001, 0x1000, 0x36}, 0x1c)

86.016417ms ago: executing program 0 (id=1139):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'i'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)

2.826384ms ago: executing program 0 (id=1140):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0)

0s ago: executing program 0 (id=1141):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = epoll_create1(0x80000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a})

kernel console output (not intermixed with test programs):

 bNumInterfaces, ignoring interface number: 255
[   92.616977][  T793] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[   92.622073][  T793] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   92.627384][  T793] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   92.632544][  T793] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[   92.637889][  T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.643888][  T793] usb 2-1: config 0 descriptor??
[   92.653189][  T793] usb-storage 2-1:0.0: USB Mass Storage device detected
[   92.665129][  T793] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[   92.732060][    T9] ucan 1-1:0.0 can0: firmware string: S hM6.`PO˦t<րv1E]d
[   92.822819][ T5854] shield 0003:0955:7214.0003: unknown main item tag 0x0
[   92.826595][ T5854] shield 0003:0955:7214.0003: unknown main item tag 0x0
[   92.829302][ T5854] shield 0003:0955:7214.0003: unknown main item tag 0x0
[   92.832132][ T5854] shield 0003:0955:7214.0003: unknown main item tag 0x0
[   92.836414][ T5854] shield 0003:0955:7214.0003: unknown main item tag 0x0
[   92.842764][ T5854] input: HID 0955:7214 Haptics as /devices/virtual/input/input5
[   92.891231][  T793] usb 2-1: USB disconnect, device number 3
[   92.922083][ T5854] shield 0003:0955:7214.0003: Registered Thunderstrike controller
[   92.932736][ T5854] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0
[   92.941166][    T9] usb 1-1: USB disconnect, device number 5
[   93.041557][ T6514] random: crng reseeded on system resumption
[   93.061448][ T5961] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[   93.061716][ T5883] usb 3-1: USB disconnect, device number 5
[   93.077270][ T5961] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[   93.081846][ T5961] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[   93.090772][ T5961] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[   93.522189][ T6541] netlink: 'syz.0.236': attribute type 13 has an invalid length.
[   93.534711][ T6542] bridge0: port 3(syz_tun) entered blocking state
[   93.537743][ T6542] bridge0: port 3(syz_tun) entered disabled state
[   93.541467][ T6542] syz_tun: entered allmulticast mode
[   93.552771][ T6542] syz_tun: entered promiscuous mode
[   93.560270][ T6542] bridge0: port 3(syz_tun) entered blocking state
[   93.563349][ T6542] bridge0: port 3(syz_tun) entered forwarding state
[   93.653449][ T6548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   93.755903][ T6556] syz.0.245: attempt to access beyond end of device
[   93.755903][ T6556] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0
[   93.760042][ T6556] hpfs: hpfs_map_sector(): read error
[   93.780348][ T6558] loop2: detected capacity change from 0 to 512
[   93.784021][ T6558] journal_path: Lookup failure for './file0/../file0'
[   93.803020][ T6558] EXT4-fs: error: could not find journal device path
[   95.090277][ T6601] netlink: 830 bytes leftover after parsing attributes in process `syz.1.264'.
[   95.221100][ T6611] netlink: 'syz.1.268': attribute type 21 has an invalid length.
[   95.224317][ T6611] netlink: 128 bytes leftover after parsing attributes in process `syz.1.268'.
[   95.229064][ T6611] netlink: 'syz.1.268': attribute type 4 has an invalid length.
[   95.232556][ T6611] netlink: 'syz.1.268': attribute type 3 has an invalid length.
[   95.238601][ T6611] netlink: 3 bytes leftover after parsing attributes in process `syz.1.268'.
[   95.959513][ T6639] mmap: syz.2.278 (6639) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   96.010352][ T6641] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   96.035147][ T6643] loop1: detected capacity change from 0 to 16
[   96.043299][ T6643] erofs (device loop1): mounted with root inode @ nid 36.
[   96.138650][ T6650] netlink: 'syz.1.287': attribute type 21 has an invalid length.
[   96.142022][ T6650] netlink: 128 bytes leftover after parsing attributes in process `syz.1.287'.
[   96.147423][ T6650] netlink: 'syz.1.287': attribute type 4 has an invalid length.
[   96.150682][ T6650] netlink: 3 bytes leftover after parsing attributes in process `syz.1.287'.
[   96.170526][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'.
[   96.440952][ T6653] loop1: detected capacity change from 0 to 32768
[   96.446525][ T6653] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.288 (6653)
[   96.462972][ T6653] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   96.473596][ T6653] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   96.487873][ T6653] BTRFS info (device loop1): using free-space-tree
[   96.566432][   T33] audit: type=1800 audit(1755246865.319:4): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.288" name="file1" dev="loop1" ino=260 res=0 errno=0
[   96.574294][   T33] audit: type=1800 audit(1755246865.329:5): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.288" name="file1" dev="loop1" ino=260 res=0 errno=0
[   96.685330][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   96.845375][    T9] usb 3-1: Using ep0 maxpacket: 16
[   96.849888][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   96.853997][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   96.857854][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   96.866216][    T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   96.869750][    T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   96.872844][    T9] usb 3-1: Manufacturer: syz
[   96.880662][    T9] usb 3-1: config 0 descriptor??
[   97.085714][ T5853] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   97.092612][    T9] usb 3-1: USB disconnect, device number 6
[   97.442587][ T6679] process 'syz.1.292' launched './file1' with NULL argv: empty string added
[   97.493911][ T6681] loop1: detected capacity change from 0 to 512
[   97.574551][ T6683] netlink: 24 bytes leftover after parsing attributes in process `syz.1.294'.
[   98.032990][ T6701] loop0: detected capacity change from 0 to 736
[   98.374591][ T6706] syz.2.304: attempt to access beyond end of device
[   98.374591][ T6706] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[   98.421691][ T6708] syzkaller1: entered promiscuous mode
[   98.423607][ T6708] syzkaller1: entered allmulticast mode
[   98.655885][ T6710] loop2: detected capacity change from 0 to 32768
[   98.662270][ T6710] XFS: attr2 mount option is deprecated.
[   98.710299][ T6710] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   98.739329][ T6710] XFS (loop2): Ending clean mount
[   98.782880][ T5848] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   99.248545][ T6740] loop0: detected capacity change from 0 to 4096
[   99.296701][ T6743] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   99.616585][  T793] libceph: connect (1)[c::]:6789 error -101
[   99.619819][  T793] libceph: mon0 (1)[c::]:6789 connect error
[   99.658458][ T6759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.323'.
[   99.712921][ T6764] loop2: detected capacity change from 0 to 164
[   99.747680][ T6754] ceph: No mds server is up or the cluster is laggy
[   99.756630][ T6764] syz.2.325: attempt to access beyond end of device
[   99.756630][ T6764] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164
[   99.765948][ T6764] syz.2.325: attempt to access beyond end of device
[   99.765948][ T6764] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164
[   99.773353][   T33] audit: type=1800 audit(1755246868.529:6): pid=6764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.325" name="file0" dev="loop2" ino=1862 res=0 errno=0
[   99.876292][ T6767] loop1: detected capacity change from 0 to 1024
[   99.911259][ T6767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.920037][ T6767] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.064432][ T5853] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.474272][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.339'.
[  100.530672][ T6791] loop1: detected capacity change from 0 to 32768
[  100.538534][ T6791] bcachefs: bch2_fs_parse_param() Error parsing option degraded: option_value
[  100.694041][ T6805] loop1: detected capacity change from 0 to 8
[  100.724003][ T6805] SQUASHFS error: zlib decompression failed, data probably corrupt
[  100.737213][ T6805] SQUASHFS error: Failed to read block 0x9b: -5
[  100.747360][ T6805] SQUASHFS error: Unable to read metadata cache entry [99]
[  100.750349][ T6805] SQUASHFS error: Unable to read inode 0x127
[  101.153723][ T6807] loop0: detected capacity change from 0 to 64
[  101.454561][  T793] IPVS: starting estimator thread 0...
[  101.574953][ T6810] IPVS: using max 64 ests per chain, 153600 per kthread
[  101.972623][ T6824] ieee802154 phy0 wpan0: encryption failed: -22
[  102.438950][   T54] Bluetooth: hci0: command tx timeout
[  102.852018][ T6846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.358'.
[  102.964994][ T5854] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  102.986546][ T6852] loop0: detected capacity change from 0 to 256
[  102.992165][ T6852] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  103.000786][ T6852] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  103.006201][ T6852] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  103.009806][ T6852] UDF-fs: Scanning with blocksize 512 failed
[  103.018080][ T6852] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  103.032228][ T6852] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  103.125862][ T6854] loop0: detected capacity change from 0 to 128
[  103.138425][ T6854] FAT-fs (loop0): Directory bread(block 414) failed
[  103.140865][ T6854] FAT-fs (loop0): Directory bread(block 415) failed
[  103.143538][ T6854] FAT-fs (loop0): Directory bread(block 416) failed
[  103.146439][ T6854] FAT-fs (loop0): Directory bread(block 417) failed
[  103.148600][ T6854] FAT-fs (loop0): Directory bread(block 418) failed
[  103.150681][ T6854] FAT-fs (loop0): Directory bread(block 419) failed
[  103.153284][ T6854] FAT-fs (loop0): Directory bread(block 420) failed
[  103.158264][ T6854] FAT-fs (loop0): Directory bread(block 421) failed
[  103.172497][ T5854] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  103.187183][ T5854] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  103.198587][ T6854] FAT-fs (loop0): Directory bread(block 414) failed
[  103.201500][ T6854] FAT-fs (loop0): Directory bread(block 415) failed
[  103.207586][ T6854] syz.0.362: attempt to access beyond end of device
[  103.207586][ T6854] loop0: rw=3, sector=478, nr_sectors = 2 limit=128
[  103.213043][ T6854] syz.0.362: attempt to access beyond end of device
[  103.213043][ T6854] loop0: rw=2051, sector=480, nr_sectors = 6 limit=128
[  103.221149][ T5854] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  103.239722][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  103.243925][ T5854] usb 3-1: SerialNumber: syz
[  103.522470][ T5854] usb 3-1: 0:2 : does not exist
[  103.526112][ T5854] usb 3-1: unit 5: unexpected type 0x09
[  103.569692][ T5854] usb 3-1: USB disconnect, device number 7
[  103.660612][ T5980] udevd[5980]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  104.263717][ T6866] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.367'.
[  104.914997][ T6875] loop2: detected capacity change from 0 to 32768
[  104.918997][ T6875] XFS (loop2): sunit and swidth options incompatible with the noalign option
[  105.444229][ T6891] Failed to get privilege flags for destination (handle=0x2:0x0)
[  106.577173][ T6907] netlink: 48 bytes leftover after parsing attributes in process `syz.1.385'.
[  106.768327][ T6910] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  106.771516][    C1] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  106.774603][    C1] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  106.826940][ T6910] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  106.830272][ T6910] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  106.833298][ T6910] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  106.836385][ T6910] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  106.839354][ T6910] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  106.842247][ T6910] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  106.847304][ T6910] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  106.991625][ T6920] loop0: detected capacity change from 0 to 128
[  107.123623][ T6924] bridge0: port 1(bridge_slave_0) entered forwarding state
[  107.202338][ T6926] veth0: entered promiscuous mode
[  107.210612][ T6925] veth0: left promiscuous mode
[  107.628315][ T6930] loop2: detected capacity change from 0 to 128
[  107.654283][ T6930] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  107.738532][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.398'.
[  108.098952][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.411'.
[  108.194796][ T5883] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  108.356565][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.360875][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.364541][ T5883] usb 1-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00
[  108.374743][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.380493][ T5883] usb 1-1: config 0 descriptor??
[  108.548081][ T6968] loop2: detected capacity change from 0 to 32768
[  108.555094][ T6968] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1281 transid 8 /dev/loop2 (7:2) scanned by syz.2.414 (6968)
[  108.579178][ T5980] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1281 transid 8 /dev/loop2 (7:2) scanned by udevd (5980)
[  108.618637][ T6971] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  108.621547][ T6971] IPv6: NLM_F_CREATE should be set when creating new route
[  108.630792][ T6971] lo: entered allmulticast mode
[  108.637409][ T6971] tunl0: entered allmulticast mode
[  108.642429][ T6971] gre0: entered allmulticast mode
[  108.654634][ T6971] gretap0: entered allmulticast mode
[  108.664274][ T6971] erspan0: entered allmulticast mode
[  108.673759][ T6971] ip_vti0: entered allmulticast mode
[  108.680529][ T6971] ip6_vti0: entered allmulticast mode
[  108.690480][ T6971] sit0: entered allmulticast mode
[  108.697364][ T6971] ip6tnl0: entered allmulticast mode
[  108.702007][ T6971] ip6gre0: entered allmulticast mode
[  108.710302][ T6971] syz_tun: entered allmulticast mode
[  108.717638][ T6971] ip6gretap0: entered allmulticast mode
[  108.730321][ T6971] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.733832][ T6971] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.741180][ T6971] bridge0: entered allmulticast mode
[  108.747002][ T6971] vcan0: entered allmulticast mode
[  108.752617][ T6971] bond0: entered allmulticast mode
[  108.754632][ T6971] bond_slave_0: entered allmulticast mode
[  108.760471][ T6971] bond_slave_1: entered allmulticast mode
[  108.771242][ T6971] team0: entered allmulticast mode
[  108.773116][ T6971] team_slave_0: entered allmulticast mode
[  108.777186][ T6971] team_slave_1: entered allmulticast mode
[  108.787579][ T6971] dummy0: entered allmulticast mode
[  108.811225][ T6971] nlmon0: entered allmulticast mode
[  108.830451][ T6971] caif0: entered allmulticast mode
[  108.833209][ T6971] batadv0: entered allmulticast mode
[  108.848276][ T6971] veth0: entered allmulticast mode
[  108.854435][ T6971] veth1: entered allmulticast mode
[  108.863979][ T6971] wg0: entered allmulticast mode
[  108.869187][ T6971] wg1: entered allmulticast mode
[  108.882839][ T6971] wg2: entered allmulticast mode
[  108.886845][ T6971] veth0_to_bridge: entered allmulticast mode
[  108.898505][ T6971] veth1_to_bridge: entered allmulticast mode
[  108.909362][ T6971] veth0_to_bond: entered allmulticast mode
[  108.917328][ T6971] veth1_to_bond: entered allmulticast mode
[  108.926068][ T6971] veth0_to_team: entered allmulticast mode
[  108.934278][ T6971] veth1_to_team: entered allmulticast mode
[  108.946754][ T6971] veth0_to_batadv: entered allmulticast mode
[  108.952448][ T6971] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.956725][ T6971] batadv_slave_0: entered allmulticast mode
[  108.962730][ T6971] veth1_to_batadv: entered allmulticast mode
[  108.968345][ T6971] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.972055][ T6971] batadv_slave_1: entered allmulticast mode
[  108.984006][ T6971] xfrm0: entered allmulticast mode
[  108.990824][ T6971] veth0_to_hsr: entered allmulticast mode
[  108.996601][ T6971] hsr_slave_0: entered allmulticast mode
[  108.999958][ T5883] usb 1-1: USB disconnect, device number 6
[  109.001675][ T6971] veth1_to_hsr: entered allmulticast mode
[  109.011321][ T6971] hsr_slave_1: entered allmulticast mode
[  109.021414][ T6971] hsr0: entered allmulticast mode
[  109.036997][ T6971] veth1_virt_wifi: entered allmulticast mode
[  109.045738][ T6971] veth0_virt_wifi: entered allmulticast mode
[  109.050951][ T6971] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  109.062124][ T6971] veth1_vlan: entered allmulticast mode
[  109.067840][ T6971] veth0_vlan: entered allmulticast mode
[  109.083986][ T6971] vlan0: entered allmulticast mode
[  109.087429][ T6971] vlan1: entered allmulticast mode
[  109.091335][ T6971] macvlan0: entered allmulticast mode
[  109.098797][ T6971] macvlan1: entered allmulticast mode
[  109.103625][ T6971] ipvlan0: entered allmulticast mode
[  109.108988][ T6971] ipvlan1: entered allmulticast mode
[  109.111929][ T6971] veth1_macvtap: entered allmulticast mode
[  109.119333][ T6971] veth0_macvtap: entered allmulticast mode
[  109.128737][ T6971] macvtap0: entered allmulticast mode
[  109.137688][ T6971] macsec0: entered allmulticast mode
[  109.144359][ T6971] geneve0: entered allmulticast mode
[  109.150788][ T6971] geneve1: entered allmulticast mode
[  109.157859][ T6971] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  109.169665][ T6971] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  109.176637][ T6971] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  109.183806][ T6971] netdevsim netdevsim2 netdevsim3: entered allmulticast mode
[  109.203346][ T6971] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  109.214026][ T6971] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  109.217831][ T6971] syztnl0: entered allmulticast mode
[  109.224897][ T5745] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.228590][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.232377][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.249962][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  109.407322][ T6982] loop2: detected capacity change from 0 to 256
[  109.419389][ T6982] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  109.422675][ T6982] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  109.438753][ T6982] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  110.468780][ T7008] loop2: detected capacity change from 0 to 32768
[  110.483493][ T7008] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.431 (7008)
[  110.520213][ T7008] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  110.524397][ T7008] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  110.528936][ T7008] BTRFS info (device loop2): using free-space-tree
[  110.787482][ T5848] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  110.980739][ T7036] loop1: detected capacity change from 0 to 8
[  111.012998][ T7036] Major/Minor mismatch, trying to mount newer 5.0 filesystem
[  111.026604][ T7036] Please update your kernel
[  111.208460][ T7050] loop0: detected capacity change from 0 to 256
[  111.246964][ T7050] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  111.521443][ T7056] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.441' sets config #0
[  113.510535][ T7088] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  113.685121][ T7093] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  113.757200][ T6115] bridge0: port 3(syz_tun) entered disabled state
[  113.791161][ T6115] syz_tun (unregistering): left allmulticast mode
[  113.794162][ T6115] syz_tun (unregistering): left promiscuous mode
[  113.799422][ T7096] netlink: 20 bytes leftover after parsing attributes in process `syz.2.465'.
[  113.800817][ T6115] bridge0: port 3(syz_tun) entered disabled state
[  114.059382][ T5745] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.203517][ T5745] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.361674][ T5745] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.519546][ T5745] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.632990][ T7104] netlink: 'syz.0.471': attribute type 30 has an invalid length.
[  114.701928][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  114.710086][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  114.717121][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  114.723470][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  114.745182][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  115.043904][ T5745] bridge_slave_1: left allmulticast mode
[  115.073058][ T5745] bridge_slave_1: left promiscuous mode
[  115.085708][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.121981][ T5745] bridge_slave_0: left allmulticast mode
[  115.124087][ T5745] bridge_slave_0: left promiscuous mode
[  115.129634][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.350989][ T7118] virtio-fs: tag </dev/md0> not found
[  116.254404][ T5745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.262017][ T5745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.268552][ T5745] bond0 (unregistering): Released all slaves
[  116.809412][ T7137] loop0: detected capacity change from 0 to 32768
[  116.847547][ T7105] chnl_net:caif_netlink_parms(): no params data found
[  116.864970][ T5236] Bluetooth: hci1: command tx timeout
[  116.893338][ T5745] hsr_slave_0: left promiscuous mode
[  116.895480][ T5883] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  116.901713][ T5745] hsr_slave_1: left promiscuous mode
[  116.910703][ T5745] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.913239][ T5745] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.925535][ T5745] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.928671][ T5745] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.954509][ T5745] veth1_macvtap: left promiscuous mode
[  116.957799][ T5745] veth0_macvtap: left promiscuous mode
[  116.960199][ T5745] veth1_vlan: left promiscuous mode
[  116.962556][ T5745] veth0_vlan: left promiscuous mode
[  117.065405][ T5883] usb 3-1: Using ep0 maxpacket: 8
[  117.070356][ T5883] usb 3-1: config 7 has an invalid interface number: 190 but max is 0
[  117.073594][ T5883] usb 3-1: config 7 has no interface number 0
[  117.076681][ T5883] usb 3-1: config 7 interface 190 has no altsetting 0
[  117.104824][ T5883] usb 3-1: New USB device found, idVendor=0af0, idProduct=8400, bcdDevice=c0.15
[  117.108417][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.111514][ T5883] usb 3-1: Product: syz
[  117.113173][ T5883] usb 3-1: Manufacturer: syz
[  117.125293][ T5883] usb 3-1: SerialNumber: syz
[  117.395359][ T5883] hso 3-1:7.190: Not our interface
[  117.402679][ T5883] usb 3-1: USB disconnect, device number 8
[  117.502458][ T5745] team0 (unregistering): Port device team_slave_1 removed
[  117.545494][ T5745] team0 (unregistering): Port device team_slave_0 removed
[  118.148235][ T7105] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.151511][ T7105] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.154461][ T7105] bridge_slave_0: entered allmulticast mode
[  118.157192][   T33] audit: type=1326 audit(1755246886.902:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.2.494" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0938ebe9 code=0x7ffc0000
[  118.169326][ T7105] bridge_slave_0: entered promiscuous mode
[  118.180358][ T7105] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.183627][   T33] audit: type=1326 audit(1755246886.902:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.2.494" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0938ebe9 code=0x7ffc0000
[  118.193602][ T7105] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.201056][   T33] audit: type=1326 audit(1755246886.922:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.2.494" exe="/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f3a0938ebe9 code=0x7ffc0000
[  118.209358][ T7105] bridge_slave_1: entered allmulticast mode
[  118.210870][ T7105] bridge_slave_1: entered promiscuous mode
[  118.212379][   T33] audit: type=1326 audit(1755246886.922:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.2.494" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0938ebe9 code=0x7ffc0000
[  118.225706][   T33] audit: type=1326 audit(1755246886.922:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.2.494" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0938ebe9 code=0x7ffc0000
[  118.298972][ T7160] loop2: detected capacity change from 0 to 4096
[  118.335618][ T7105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  118.356487][ T7105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  118.424520][ T7164] netlink: 'syz.0.497': attribute type 8 has an invalid length.
[  118.432431][ T7105] team0: Port device team_slave_0 added
[  118.447022][ T7105] team0: Port device team_slave_1 added
[  118.510013][ T7105] batman_adv: batadv0: Adding interface: batadv_slave_0
[  118.520279][ T7105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.529972][ T7105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  118.536032][ T7105] batman_adv: batadv0: Adding interface: batadv_slave_1
[  118.539310][ T7105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.551125][ T7105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  118.615998][ T7105] hsr_slave_0: entered promiscuous mode
[  118.623248][ T7105] hsr_slave_1: entered promiscuous mode
[  118.628839][ T7105] debugfs: 'hsr0' already exists in 'hsr'
[  118.630668][ T7105] Cannot create hsr debugfs directory
[  118.947014][ T5236] Bluetooth: hci1: command tx timeout
[  119.154119][ T7105] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  119.174299][ T7105] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  119.181911][ T7105] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  119.191186][ T7105] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  119.273254][   T33] audit: type=1326 audit(1755246888.022:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.0.507" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef858ebe9 code=0x7ffc0000
[  119.292775][   T33] audit: type=1326 audit(1755246888.022:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.0.507" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef858ebe9 code=0x7ffc0000
[  119.312650][   T33] audit: type=1326 audit(1755246888.022:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.0.507" exe="/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f1ef858ebe9 code=0x7ffc0000
[  119.330450][ T7105] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.332762][   T33] audit: type=1326 audit(1755246888.022:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.0.507" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef858ebe9 code=0x7ffc0000
[  119.350370][   T33] audit: type=1326 audit(1755246888.022:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7192 comm="syz.0.507" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ef858ebe9 code=0x7ffc0000
[  119.364210][ T7105] 8021q: adding VLAN 0 to HW filter on device team0
[  119.371473][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.374777][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.387561][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.390545][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.452214][ T7105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  119.509943][ T7199] loop0: detected capacity change from 0 to 512
[  119.526032][ T7199] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  119.553347][ T7199] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  119.568613][ T7199] EXT4-fs (loop0): 1 truncate cleaned up
[  119.578749][ T7199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.640615][ T7105] 8021q: adding VLAN 0 to HW filter on device batadv0
[  119.678770][ T5856] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.709586][ T7105] veth0_vlan: entered promiscuous mode
[  119.746120][ T7105] veth1_vlan: entered promiscuous mode
[  119.766329][ T7211] netlink: 96 bytes leftover after parsing attributes in process `syz.0.513'.
[  119.826733][ T7105] veth0_macvtap: entered promiscuous mode
[  119.833888][ T7105] veth1_macvtap: entered promiscuous mode
[  119.861409][ T7105] batman_adv: batadv0: Interface activated: batadv_slave_0
[  119.870158][ T7213] loop2: detected capacity change from 0 to 4096
[  119.872520][ T7105] batman_adv: batadv0: Interface activated: batadv_slave_1
[  119.890680][ T7213] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.913063][ T5910] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  119.931910][ T5910] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  119.949794][ T5910] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  119.953281][ T5910] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.007348][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.236299][ T7220] loop2: detected capacity change from 0 to 32768
[  120.249874][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.252332][ T7220] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.516 (7220)
[  120.252757][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.377353][ T7220] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  120.389943][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.395764][ T7220] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  120.399268][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.401984][ T7220] BTRFS info (device loop2): using free-space-tree
[  120.614083][ T5848] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  121.092243][ T5236] Bluetooth: hci1: command tx timeout
[  121.178881][ T7252] netlink: 'syz.0.521': attribute type 1 has an invalid length.
[  121.182701][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'.
[  121.187258][ T7252] netlink: 32 bytes leftover after parsing attributes in process `syz.0.521'.
[  121.197566][ T7252] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  121.202157][ T7252] gretap1: entered promiscuous mode
[  121.357146][ T7260] cgroup: fork rejected by pids controller in /syz0
[  121.421149][ T7266] netlink: 16 bytes leftover after parsing attributes in process `syz.2.526'.
[  121.678008][ T5910] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.771119][ T5910] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.805397][  T793] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  121.840087][ T5910] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.916434][ T5910] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.966703][  T793] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  121.970255][  T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.002041][  T793] usb 3-1: config 0 descriptor??
[  122.025168][  T793] cp210x 3-1:0.0: cp210x converter detected
[  122.219981][ T5910] bridge_slave_1: left allmulticast mode
[  122.222181][ T5910] bridge_slave_1: left promiscuous mode
[  122.225718][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.477467][ T5910] bridge_slave_0: left allmulticast mode
[  122.480508][ T5910] bridge_slave_0: left promiscuous mode
[  122.484180][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.485443][  T793] usb 3-1: cp210x converter now attached to ttyUSB0
[  122.621866][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  122.641147][   T47] usb 3-1: USB disconnect, device number 9
[  122.651939][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  122.657611][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  122.669504][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  122.672592][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  122.685637][   T47] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  122.699307][   T47] cp210x 3-1:0.0: device disconnected
[  123.011143][ T5910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  123.018292][ T5910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.023360][ T5910] bond0 (unregistering): Released all slaves
[  123.102412][ T5910] tipc: Disabling bearer <udp:syz0>
[  123.104887][ T5236] Bluetooth: hci1: command tx timeout
[  123.118534][ T5910] tipc: Left network mode
[  123.369848][ T7284] chnl_net:caif_netlink_parms(): no params data found
[  123.448572][ T5910] hsr_slave_0: left promiscuous mode
[  123.454121][ T5910] hsr_slave_1: left promiscuous mode
[  123.460874][ T5910] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.463956][ T5910] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.474409][ T5910] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.484424][ T5910] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.520931][ T5910] veth1_macvtap: left promiscuous mode
[  123.523249][ T5910] veth0_macvtap: left promiscuous mode
[  123.526400][ T5910] veth1_vlan: left promiscuous mode
[  123.532379][ T5910] veth0_vlan: left promiscuous mode
[  123.964367][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'.
[  123.980766][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.546'.
[  124.707000][ T5236] Bluetooth: hci2: command tx timeout
[  124.899888][ T5910] team0 (unregistering): Port device team_slave_1 removed
[  125.045817][ T5910] team0 (unregistering): Port device team_slave_0 removed
[  125.796875][   T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  125.881443][ T7284] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.885056][ T7284] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.888186][ T7284] bridge_slave_0: entered allmulticast mode
[  125.892434][ T7284] bridge_slave_0: entered promiscuous mode
[  125.901845][ T7284] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.905299][ T7284] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.908265][ T7284] bridge_slave_1: entered allmulticast mode
[  125.912381][ T7284] bridge_slave_1: entered promiscuous mode
[  125.958761][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.967213][ T7284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.970887][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.980909][   T24] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  125.989328][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.994117][ T7284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.001180][   T24] usb 3-1: config 0 descriptor??
[  126.080911][ T7284] team0: Port device team_slave_0 added
[  126.088231][ T7284] team0: Port device team_slave_1 added
[  126.121519][ T7284] batman_adv: batadv0: Adding interface: batadv_slave_0
[  126.124023][ T7284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.136249][ T7284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.144475][ T7284] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.148459][ T7284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.157728][ T7284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  126.193060][ T7284] hsr_slave_0: entered promiscuous mode
[  126.198266][ T7284] hsr_slave_1: entered promiscuous mode
[  126.200674][ T7284] debugfs: 'hsr0' already exists in 'hsr'
[  126.202930][ T7284] Cannot create hsr debugfs directory
[  126.209541][ T5910] IPVS: stop unused estimator thread 0...
[  126.447942][ T7355] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  126.451000][ T7355] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  126.456206][ T7355] overlayfs: missing 'lowerdir'
[  126.664243][ T7284] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  126.680614][ T7284] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  126.688447][ T7284] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  126.695428][ T7284] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  126.728826][ T7284] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.732038][ T7284] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.735284][ T7284] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.738592][ T7284] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.785100][ T5236] Bluetooth: hci2: command tx timeout
[  126.833836][   T24] hid-led 0003:27B8:01ED.0005: probe with driver hid-led failed with error -71
[  126.870887][   T24] usb 3-1: USB disconnect, device number 10
[  126.878559][  T161] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.892180][  T161] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.921232][ T7284] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.934047][ T7284] 8021q: adding VLAN 0 to HW filter on device team0
[  126.942063][  T161] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.945014][  T161] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.953978][  T161] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.956757][  T161] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.131663][ T7284] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.181882][ T7284] veth0_vlan: entered promiscuous mode
[  127.196777][ T7284] veth1_vlan: entered promiscuous mode
[  127.226595][ T7284] veth0_macvtap: entered promiscuous mode
[  127.235938][ T7284] veth1_macvtap: entered promiscuous mode
[  127.282122][ T7284] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.302963][ T7284] batman_adv: batadv0: Interface activated: batadv_slave_1
[  127.317664][ T5745] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.322063][ T5745] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.331611][ T5745] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.344379][ T5745] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.458963][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.462141][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.546106][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.551105][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.600621][ T7387] netlink: 20 bytes leftover after parsing attributes in process `syz.3.574'.
[  127.708580][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  127.708591][   T33] audit: type=1326 audit(1755246896.462:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.2.572" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0938ebe9 code=0x7ffc0000
[  127.730728][   T33] audit: type=1326 audit(1755246896.482:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.2.572" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0938ebe9 code=0x7ffc0000
[  127.783801][   T33] audit: type=1326 audit(1755246896.532:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.2.572" exe="/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3a0938ebe9 code=0x7ffc0000
[  127.807547][   T33] audit: type=1326 audit(1755246896.532:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.2.572" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0938ebe9 code=0x7ffc0000
[  127.823826][ T7396] loop3: detected capacity change from 0 to 2048
[  127.830489][   T33] audit: type=1326 audit(1755246896.532:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.2.572" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0938ebe9 code=0x7ffc0000
[  127.840106][ T7396] EXT4-fs: Ignoring removed bh option
[  127.860887][ T7396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.896134][ T7105] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.189065][ T7412] raw_sendmsg: syz.0.583 forgot to set AF_INET. Fix it!
[  128.864982][ T5236] Bluetooth: hci2: command tx timeout
[  129.245869][ T7420] loop2: detected capacity change from 0 to 40427
[  129.248696][ T7420] F2FS-fs: heap/no_heap options were deprecated
[  129.257248][ T7420] F2FS-fs (loop2): build fault injection rate: 19
[  129.261432][ T7420] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[  129.276342][ T7420] F2FS-fs (loop2): invalid crc value
[  129.299284][ T7420] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  129.380681][ T7420] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[  129.409090][ T7420] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  129.423665][ T7420] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  129.458803][ T7420] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  129.541761][ T7420] syz.2.587: attempt to access beyond end of device
[  129.541761][ T7420] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  129.611490][ T5848] syz-executor: attempt to access beyond end of device
[  129.611490][ T5848] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  129.620214][ T5848] CPU: 0 UID: 0 PID: 5848 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  129.620236][ T5848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  129.620244][ T5848] Call Trace:
[  129.620250][ T5848]  <TASK>
[  129.620266][ T5848]  dump_stack_lvl+0x189/0x250
[  129.620289][ T5848]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.620303][ T5848]  ? __pfx_queue_work_on+0x10/0x10
[  129.620315][ T5848]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  129.620331][ T5848]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  129.620356][ T5848]  f2fs_handle_critical_error+0x37c/0x540
[  129.620380][ T5848]  f2fs_write_end_io+0x886/0xb60
[  129.620408][ T5848]  __submit_merged_bio+0x27a/0x6a0
[  129.620430][ T5848]  __submit_merged_write_cond+0x255/0x530
[  129.620453][ T5848]  f2fs_write_data_pages+0x261d/0x3000
[  129.620468][ T5848]  ? __lock_acquire+0xab9/0xd20
[  129.620515][ T5848]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.620575][ T5848]  ? check_path+0x21/0x40
[  129.620586][ T5848]  ? check_noncircular+0xe0/0x160
[  129.620644][ T5848]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.620662][ T5848]  do_writepages+0x32e/0x550
[  129.620689][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[  129.620707][ T5848]  filemap_fdatawrite+0x199/0x240
[  129.620723][ T5848]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  129.620782][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[  129.620800][ T5848]  f2fs_sync_dirty_inodes+0x31f/0x830
[  129.620826][ T5848]  f2fs_write_checkpoint+0x95a/0x1df0
[  129.620860][ T5848]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  129.620916][ T5848]  ? kill_f2fs_super+0x298/0x6c0
[  129.620933][ T5848]  kill_f2fs_super+0x2c3/0x6c0
[  129.620951][ T5848]  ? __pfx_kill_f2fs_super+0x10/0x10
[  129.620961][ T5848]  ? radix_tree_delete_item+0x2b6/0x400
[  129.620984][ T5848]  ? shrinker_free+0x2ce/0x3e0
[  129.621000][ T5848]  deactivate_locked_super+0xbc/0x130
[  129.621016][ T5848]  cleanup_mnt+0x425/0x4c0
[  129.621030][ T5848]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.621048][ T5848]  task_work_run+0x1d4/0x260
[  129.621069][ T5848]  ? __pfx_task_work_run+0x10/0x10
[  129.621082][ T5848]  ? __x64_sys_umount+0x122/0x160
[  129.621102][ T5848]  ? exit_to_user_mode_loop+0x40/0x110
[  129.621155][ T5848]  exit_to_user_mode_loop+0xec/0x110
[  129.621171][ T5848]  do_syscall_64+0x2bd/0x3b0
[  129.621187][ T5848]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.621201][ T5848]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.621213][ T5848]  ? exc_page_fault+0x9f/0xf0
[  129.621230][ T5848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.621241][ T5848] RIP: 0033:0x7f3a0938ff17
[  129.621254][ T5848] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  129.621263][ T5848] RSP: 002b:00007ffddd789788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  129.621277][ T5848] RAX: 0000000000000000 RBX: 00007f3a09411c05 RCX: 00007f3a0938ff17
[  129.621285][ T5848] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffddd789840
[  129.621292][ T5848] RBP: 00007ffddd789840 R08: 0000000000000000 R09: 0000000000000000
[  129.621298][ T5848] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffddd78a8d0
[  129.621305][ T5848] R13: 00007f3a09411c05 R14: 000000000001f9a5 R15: 00007ffddd78a910
[  129.621329][ T5848]  </TASK>
[  129.621335][ T5848] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  130.423908][ T7446] syz.3.595(7446): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  130.640994][ T7461] loop2: detected capacity change from 0 to 512
[  130.653075][ T7463] bridge1: entered promiscuous mode
[  130.681620][ T7461] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.602: casefold flag without casefold feature
[  130.697191][ T7461] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.602: couldn't read orphan inode 15 (err -117)
[  130.702501][ T7461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.946340][ T5236] Bluetooth: hci2: command tx timeout
[  131.170012][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.475978][   T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  131.609617][ T7479] vcan0: MTU too low for tipc bearer
[  131.611339][ T7479] tipc: Enabling of bearer <eth:vcan0> rejected, failed to enable media
[  131.629855][   T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  131.633304][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.642445][ T7481] loop3: detected capacity change from 0 to 512
[  131.661179][   T24] usb 3-1: config 0 descriptor??
[  131.677028][   T24] cp210x 3-1:0.0: cp210x converter detected
[  131.681149][ T7481] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  131.683820][ T7481] UDF-fs: Scanning with blocksize 512 failed
[  131.700067][ T7481] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  131.703196][ T7481] UDF-fs: Scanning with blocksize 1024 failed
[  131.723548][ T7481] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  131.728549][ T7481] UDF-fs: Scanning with blocksize 2048 failed
[  131.733996][ T7481] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  131.743956][ T7481] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  131.749880][ T7483] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  131.776607][ T7483] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  132.087183][   T24] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -71
[  132.090478][   T24] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71
[  132.093261][   T24] cp210x 3-1:0.0: GPIO initialisation failed: -71
[  132.102231][   T24] usb 3-1: cp210x converter now attached to ttyUSB0
[  132.107648][   T24] usb 3-1: USB disconnect, device number 11
[  132.116504][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  132.120753][   T24] cp210x 3-1:0.0: device disconnected
[  132.473164][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.476426][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  133.231572][ T7511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.623'.
[  134.283670][ T7541] loop0: detected capacity change from 0 to 4096
[  134.373727][ T7541] ntfs3(loop0): ino=5, "/" mi_enum_attr
[  134.425477][ T7548] netlink: 20 bytes leftover after parsing attributes in process `syz.3.638'.
[  134.438503][ T7548] geneve2: entered promiscuous mode
[  134.676042][ T7561] netlink: 'syz.2.644': attribute type 2 has an invalid length.
[  134.681299][ T7561] netlink: 'syz.2.644': attribute type 1 has an invalid length.
[  134.872832][ T7567] loop0: detected capacity change from 0 to 4096
[  134.954111][ T7556] loop3: detected capacity change from 0 to 40427
[  134.995804][ T7556] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  134.999037][ T7556] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  135.440403][ T7556] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  135.451089][ T7556] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  135.454503][ T7556] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  135.821232][ T7583] netlink: 376 bytes leftover after parsing attributes in process `syz.0.653'.
[  135.921439][ T7590] input: syz0 as /devices/virtual/input/input7
[  136.030475][ T7592] input: syz1 as /devices/virtual/input/input8
[  136.235421][ T7583] loop0: detected capacity change from 0 to 32768
[  136.272128][ T7583] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  136.316998][ T7583] XFS (loop0): Ending clean mount
[  136.331115][ T7583] XFS (loop0): Quotacheck needed: Please wait.
[  136.382517][ T7583] XFS (loop0): Quotacheck: Done.
[  136.698304][ T7284] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  137.196178][ T7613] loop0: detected capacity change from 0 to 4096
[  137.435635][ T7615] loop0: detected capacity change from 0 to 4096
[  137.452248][ T7615] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  137.455566][ T7615] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  137.656190][ T5961] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  137.985832][ T5961] usb 4-1: Using ep0 maxpacket: 8
[  137.992278][ T5961] usb 4-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d
[  137.996927][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.000101][ T5961] usb 4-1: Product: syz
[  138.001943][ T5961] usb 4-1: Manufacturer: syz
[  138.004103][ T5961] usb 4-1: SerialNumber: syz
[  138.013848][ T5961] usb 4-1: config 0 descriptor??
[  138.022718][ T5961] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  138.295851][  T161] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22.
[  138.301507][ T7284] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  138.304554][ T7284] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  138.309218][ T7284] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[  138.313334][  T161] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22.
[  138.409009][ T7623] xt_policy: too many policy elements
[  138.460417][ T7625] loop0: detected capacity change from 0 to 2048
[  138.495495][ T7625]  loop0: p2 p3 p7
[  139.134851][   T47] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  139.233129][ T5961] gspca_sonixj: reg_w1 err -71
[  139.235621][ T5961] sonixj 4-1:0.0: probe with driver sonixj failed with error -71
[  139.243661][ T5961] usb 4-1: USB disconnect, device number 2
[  139.285010][   T47] usb 1-1: Using ep0 maxpacket: 32
[  139.290459][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.295007][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.298981][   T47] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  139.302575][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.309795][   T47] usb 1-1: config 0 descriptor??
[  139.314354][   T47] hub 1-1:0.0: USB hub found
[  139.517545][   T47] hub 1-1:0.0: config failed, can't read hub descriptor (err -90)
[  139.730668][   T47] usbhid 1-1:0.0: can't add hid device: -71
[  139.733252][   T47] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  139.769983][   T47] usb 1-1: USB disconnect, device number 7
[  139.870860][ T7653] vivid-002: disconnect
[  139.876911][ T7649] vivid-002: reconnect
[  140.033483][ T7652] loop2: detected capacity change from 0 to 32768
[  140.051651][ T7652] ERROR: (device loop2): diNewExt: no free extents
[  140.051651][ T7652] 
[  140.059262][ T7652] ERROR: (device loop2): remounting filesystem as read-only
[  140.063671][ T7652] ialloc: diAlloc returned -5!
[  140.203700][ T7667] loop2: detected capacity change from 0 to 1024
[  140.293720][ T1096] hfsplus: b-tree write err: -5, ino 4
[  140.446875][ T7687] tun0: tun_chr_ioctl cmd 35108
[  140.857390][ T7696] netlink: 28 bytes leftover after parsing attributes in process `syz.2.698'.
[  141.259880][ T7706] loop0: detected capacity change from 0 to 256
[  141.675159][ T5961] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  141.825101][ T5961] usb 4-1: Using ep0 maxpacket: 8
[  141.830323][ T5961] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  141.834030][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.843298][ T5961] pvrusb2: Hardware description: Terratec Grabster AV400
[  141.846276][ T5961] pvrusb2: **********
[  141.847881][ T5961] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  141.852021][ T5961] pvrusb2: Important functionality might not be entirely working.
[  141.855271][ T5961] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  141.859714][ T5961] pvrusb2: **********
[  142.049294][ T2398] pvrusb2: Invalid write control endpoint
[  142.103741][ T2398] pvrusb2: Invalid write control endpoint
[  142.108036][ T2398] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  142.112468][ T2398] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  142.115889][ T2398] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  142.120119][ T2398] pvrusb2: Device being rendered inoperable
[  142.128880][ T2398] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  142.131995][ T2398] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  142.139820][ T2398] pvrusb2: Attached sub-driver cx25840
[  142.142314][ T2398] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  142.146629][ T2398] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  142.257970][    T9] usb 4-1: USB disconnect, device number 3
[  142.945770][ T7726] netlink: 'syz.0.708': attribute type 2 has an invalid length.
[  143.014958][ T7728] loop0: detected capacity change from 0 to 512
[  143.032923][ T7728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.038585][ T7728] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.056468][ T7728] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 18: comm syz.0.710: lblock 23 mapped to illegal pblock 18 (length 1)
[  143.069483][ T7728] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 12: comm syz.0.710: path /60/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  143.081845][ T7728] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 13: comm syz.0.710: path /60/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[  143.090947][ T7728] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 14: comm syz.0.710: path /60/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  143.101235][ T7728] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 15: comm syz.0.710: path /60/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  143.109700][ T7728] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 16: comm syz.0.710: path /60/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[  143.118708][ T7728] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 17: comm syz.0.710: path /60/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  143.127204][ T7728] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 18: comm syz.0.710: lblock 23 mapped to illegal pblock 18 (length 1)
[  143.136589][ T7728] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 19: comm syz.0.710: path /60/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  143.145187][ T7728] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 20: comm syz.0.710: path /60/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[  143.429531][ T7746] loop3: detected capacity change from 0 to 8
[  143.468401][ T7746] SQUASHFS error: Failed to read block 0x738: -5
[  143.470944][ T7746] SQUASHFS error: Unable to read metadata cache entry [736]
[  143.791080][ T7754] loop3: detected capacity change from 0 to 512
[  143.819470][ T7754] Quota error (device loop3): v2_read_file_info: Free block number 1090519040 out of range (1, 6).
[  143.824078][ T7754] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  143.835245][ T7754] EXT4-fs (loop3): mount failed
[  143.906014][ T7284] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.239382][ T7785] loop0: detected capacity change from 0 to 16
[  144.242295][ T7785] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  144.410968][ T7795] loop0: detected capacity change from 0 to 2048
[  144.416341][    T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  144.420231][ T7795] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d
[  144.425344][ T7795] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  144.556941][ T7791] loop3: detected capacity change from 0 to 32768
[  144.562482][ T7791] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section members_v1: too many devices for section size
[  144.562482][ T7791] members_v1 (size 64):
[  144.562482][ T7791] nr_devices mismatch: have 0 entries, should be 8
[  144.572376][ T7791] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  144.577333][    T9] usb 3-1: config 0 has an invalid interface number: 197 but max is 0
[  144.584805][    T9] usb 3-1: config 0 has no interface number 0
[  144.587311][    T9] usb 3-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8
[  144.591169][    T9] usb 3-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  144.598339][    T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42
[  144.601760][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.604994][    T9] usb 3-1: Product: syz
[  144.606603][    T9] usb 3-1: Manufacturer: syz
[  144.608439][    T9] usb 3-1: SerialNumber: syz
[  144.613764][    T9] usb 3-1: config 0 descriptor??
[  144.616821][ T7779] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  144.724808][ T5883] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  144.742689][ T7801] syz.3.741: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  144.750214][ T7801] CPU: 0 UID: 0 PID: 7801 Comm: syz.3.741 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  144.750244][ T7801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  144.750254][ T7801] Call Trace:
[  144.750262][ T7801]  <TASK>
[  144.750270][ T7801]  dump_stack_lvl+0x189/0x250
[  144.750299][ T7801]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.750319][ T7801]  ? __pfx__printk+0x10/0x10
[  144.750342][ T7801]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  144.750361][ T7801]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  144.750379][ T7801]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  144.750398][ T7801]  warn_alloc+0x214/0x310
[  144.750422][ T7801]  ? stack_depot_save_flags+0x41b/0x860
[  144.750443][ T7801]  ? __pfx_warn_alloc+0x10/0x10
[  144.750465][ T7801]  ? kasan_save_track+0x4f/0x80
[  144.750486][ T7801]  ? xskq_create+0x56/0x170
[  144.750504][ T7801]  ? xsk_init_queue+0xb0/0x110
[  144.750519][ T7801]  ? xsk_setsockopt+0x4dc/0x8d0
[  144.750534][ T7801]  ? do_sock_setsockopt+0x17c/0x1b0
[  144.750557][ T7801]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  144.750568][ T7801]  ? do_syscall_64+0xfa/0x3b0
[  144.750586][ T7801]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.750607][ T7801]  __vmalloc_node_range_noprof+0x125/0x12f0
[  144.750648][ T7801]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  144.750666][ T7801]  ? xskq_create+0x56/0x170
[  144.750682][ T7801]  ? __kasan_kmalloc+0x93/0xb0
[  144.750701][ T7801]  vmalloc_user_noprof+0xad/0xf0
[  144.750751][ T7801]  ? xskq_create+0xbf/0x170
[  144.750771][ T7801]  xskq_create+0xbf/0x170
[  144.750792][ T7801]  xsk_init_queue+0xb0/0x110
[  144.750814][ T7801]  xsk_setsockopt+0x4dc/0x8d0
[  144.750833][ T7801]  ? __pfx_xsk_setsockopt+0x10/0x10
[  144.750849][ T7801]  ? __pfx_aa_sk_perm+0x10/0x10
[  144.750872][ T7801]  ? aa_sock_opt_perm+0xff/0x1b0
[  144.750886][ T7801]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  144.750901][ T7801]  ? __pfx_xsk_setsockopt+0x10/0x10
[  144.750916][ T7801]  do_sock_setsockopt+0x17c/0x1b0
[  144.750936][ T7801]  __x64_sys_setsockopt+0x13f/0x1b0
[  144.750951][ T7801]  do_syscall_64+0xfa/0x3b0
[  144.750969][ T7801]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.750988][ T7801]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.751000][ T7801]  ? exc_page_fault+0x9f/0xf0
[  144.751021][ T7801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.751035][ T7801] RIP: 0033:0x7f80adf8ebe9
[  144.751050][ T7801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  144.751064][ T7801] RSP: 002b:00007f80aee5d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  144.751090][ T7801] RAX: ffffffffffffffda RBX: 00007f80ae1b6090 RCX: 00007f80adf8ebe9
[  144.751101][ T7801] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  144.751110][ T7801] RBP: 00007f80ae011e19 R08: 0000000000000004 R09: 0000000000000000
[  144.751120][ T7801] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  144.751130][ T7801] R13: 00007f80ae1b6128 R14: 00007f80ae1b6090 R15: 00007ffe9e163b48
[  144.751155][ T7801]  </TASK>
[  144.751163][ T7801] Mem-Info:
[  144.887229][    T9] usb 3-1: USB disconnect, device number 12
[  144.899386][ T7801] active_anon:7195 inactive_anon:0 isolated_anon:0
[  144.899386][ T7801]  active_file:11427 inactive_file:38249 isolated_file:0
[  144.899386][ T7801]  unevictable:1768 dirty:358 writeback:0
[  144.899386][ T7801]  slab_reclaimable:10076 slab_unreclaimable:52622
[  144.899386][ T7801]  mapped:18207 shmem:5295 pagetables:877
[  144.899386][ T7801]  sec_pagetables:0 bounce:0
[  144.899386][ T7801]  kernel_misc_reclaimable:0
[  144.899386][ T7801]  free:280269 free_pcp:16969 free_cma:0
[  144.921248][ T7801] Node 0 active_anon:21432kB inactive_anon:0kB active_file:42884kB inactive_file:6612kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:24704kB dirty:1096kB writeback:0kB shmem:16436kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4972kB pagetables:1872kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  144.936534][ T7801] Node 1 active_anon:7348kB inactive_anon:0kB active_file:2824kB inactive_file:146384kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:48124kB dirty:336kB writeback:0kB shmem:4744kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6360kB pagetables:1636kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  144.948994][ T7801] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  144.963496][ T7801] lowmem_reserve[]: 0 811 811 811 811
[  144.965912][ T7801] Node 0 DMA32 free:370276kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21432kB inactive_anon:0kB active_file:42884kB inactive_file:6612kB unevictable:3536kB writepending:1096kB present:1556484kB managed:830956kB mlocked:0kB bounce:0kB free_pcp:30420kB local_pcp:9924kB free_cma:0kB
[  144.980580][ T7801] lowmem_reserve[]: 0 0 0 0 0
[  144.982829][ T7801] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  144.999073][ T7801] lowmem_reserve[]: 0 0 854 854 854
[  145.001375][ T7801] Node 1 Normal free:276824kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:7348kB inactive_anon:0kB active_file:2824kB inactive_file:146384kB unevictable:3536kB writepending:336kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:37456kB local_pcp:21020kB free_cma:0kB
[  145.013672][ T7801] lowmem_reserve[]: 0 0 0 0 0
[  145.017573][ T7801] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  145.022761][ T7801] Node 0 DMA32: 48*4kB (UME) 108*8kB (UME) 120*16kB (UME) 653*32kB (UME) 363*64kB (UME) 189*128kB (UM) 37*256kB (UME) 13*512kB (UM) 8*1024kB (UM) 6*2048kB (ME) 64*4096kB (M) = 370048kB
[  145.030070][ T7801] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  145.039035][ T7801] Node 1 Normal: 362*4kB (UE) 2*8kB (UE) 36*16kB (UME) 27*32kB (UM) 55*64kB (UM) 12*128kB (UE) 14*256kB (UME) 18*512kB (UME) 12*1024kB (UM) 7*2048kB (UM) 56*4096kB (M) = 276760kB
[  145.046301][ T7801] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  145.050101][ T7801] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  145.053944][ T7801] 54964 total pagecache pages
[  145.057920][ T7801] 0 pages in swap cache
[  145.059722][ T7801] Free swap  = 124996kB
[  145.061532][ T7801] Total swap = 124996kB
[  145.063352][ T7801] 786301 pages RAM
[  145.065027][ T7801] 0 pages HighMem/MovableOnly
[  145.067127][ T7801] 241330 pages reserved
[  145.069009][ T7801] 0 pages cma reserved
[  145.455178][ T7804] loop2: detected capacity change from 0 to 4096
[  145.482470][ T7805] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  145.507960][ T7804] NILFS error (device loop2): nilfs_dotdot: directory #12 missing '.'
[  145.532025][ T7804] Remounting filesystem read-only
[  145.568492][ T5848] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  145.664793][ T5883] usb 1-1: Using ep0 maxpacket: 32
[  145.671908][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.678729][ T5883] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  145.682327][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.689605][ T5883] usb 1-1: config 0 descriptor??
[  145.693589][ T7815] netlink: 'syz.2.745': attribute type 40 has an invalid length.
[  145.700033][ T7815] netlink: 52 bytes leftover after parsing attributes in process `syz.2.745'.
[  146.001218][ T7820] loop2: detected capacity change from 0 to 32768
[  146.116244][ T5883] belkin 0003:1020:0006.0006: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.0-1/input0
[  146.307897][   T47] usb 1-1: USB disconnect, device number 8
[  146.434948][ T5883] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  146.444872][    T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  146.584861][ T5883] usb 3-1: Using ep0 maxpacket: 16
[  146.589964][ T5883] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  146.593658][ T5883] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  146.597830][ T5883] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  146.603916][ T5883] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  146.607482][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.610707][ T5883] usb 3-1: Product: syz
[  146.612535][ T5883] usb 3-1: Manufacturer: syz
[  146.616207][ T5883] usb 3-1: SerialNumber: syz
[  146.616412][    T9] usb 4-1: Using ep0 maxpacket: 8
[  146.622570][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  146.626916][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  146.633637][    T9] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  146.639025][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.642327][    T9] usb 4-1: Product: syz
[  146.644077][    T9] usb 4-1: Manufacturer: syz
[  146.646107][    T9] usb 4-1: SerialNumber: syz
[  146.650500][    T9] usb 4-1: config 0 descriptor??
[  146.874362][   T47] usb 4-1: USB disconnect, device number 4
[  146.954043][ T7843] netlink: 28 bytes leftover after parsing attributes in process `syz.0.756'.
[  146.958038][ T7843] netlink: 28 bytes leftover after parsing attributes in process `syz.0.756'.
[  147.028420][ T5883] usb 3-1: 0:2 : does not exist
[  147.234843][  T793] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  147.394792][  T793] usb 1-1: Using ep0 maxpacket: 16
[  147.399134][  T793] usb 1-1: unable to get BOS descriptor or descriptor too short
[  147.408123][  T793] usb 1-1: config 1 has an invalid interface number: 206 but max is 0
[  147.411222][  T793] usb 1-1: config 1 has no interface number 0
[  147.418782][  T793] usb 1-1: string descriptor 0 read error: -22
[  147.421450][  T793] usb 1-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a
[  147.425057][  T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.438197][  T793] uvcvideo 1-1:1.206: probe with driver uvcvideo failed with error -22
[  147.644444][    T9] usb 1-1: USB disconnect, device number 9
[  147.677342][ T7861] netlink: 'syz.3.765': attribute type 1 has an invalid length.
[  147.850583][ T5883] usb 3-1: 1:0: failed to get current value for ch 0 (-22)
[  147.868167][ T5883] usb 3-1: USB disconnect, device number 13
[  148.004802][ T5961] usb 4-1: new low-speed USB device number 5 using dummy_hcd
[  148.160813][ T5961] usb 4-1: unable to get BOS descriptor or descriptor too short
[  148.167749][ T5961] usb 4-1: config 7 has an invalid interface number: 67 but max is 0
[  148.171360][ T5961] usb 4-1: config 7 has no interface number 0
[  148.187447][ T5961] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16
[  148.192803][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.197756][ T5961] usb 4-1: Product: 㯑
[  148.387271][ T7877] netlink: 'syz.0.773': attribute type 1 has an invalid length.
[  148.429512][ T7877] bond1: entered promiscuous mode
[  148.432156][ T5961] usb 4-1: USB disconnect, device number 5
[  148.436890][ T7877] 8021q: adding VLAN 0 to HW filter on device bond1
[  148.458707][ T7881] 8021q: adding VLAN 0 to HW filter on device bond1
[  148.461235][ T7881] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  148.469762][ T7881] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  148.480136][ T7881] bond1: (slave ip6gre1): making interface the new active one
[  148.482734][ T7881] ip6gre1: entered promiscuous mode
[  148.487269][ T7881] bond1: (slave ip6gre1): Enslaving as an active interface with an up link
[  148.604010][ T7880] loop2: detected capacity change from 0 to 32768
[  148.626532][ T7880] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  148.637350][ T7880] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  148.655192][   T33] audit: type=1800 audit(1755246917.402:23): pid=7880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.774" name="bus" dev="loop2" ino=17058 res=0 errno=0
[  148.689763][ T5848] ocfs2: Unmounting device (7,2) on (node local)
[  149.157460][ T7899] loop0: detected capacity change from 0 to 256
[  149.179959][ T7899] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[  149.195011][ T7899] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  149.211565][ T7903] loop3: detected capacity change from 0 to 128
[  149.230913][ T7903] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  149.239254][ T7903] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  149.259744][ T7903] EXT4-fs (loop3): shut down requested (1)
[  149.262564][ T7903] fscrypt (loop3, inode 12): Error -5 getting encryption context
[  149.290406][ T7105] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  150.697422][ T7929] ip6gretap1: entered promiscuous mode
[  150.699867][ T7929] ip6gretap1: entered allmulticast mode
[  150.875488][ T7935] netlink: 'syz.3.794': attribute type 1 has an invalid length.
[  151.313689][ T7962] loop0: detected capacity change from 0 to 1764
[  151.438348][ T7960] loop3: detected capacity change from 0 to 32768
[  151.458490][ T7960] ERROR: (device loop3): dbAlloc: the hint is outside the map
[  151.458490][ T7960] 
[  151.469019][ T7960] ERROR: (device loop3): remounting filesystem as read-only
[  151.473549][ T7960] syz.3.806: attempt to access beyond end of device
[  151.473549][ T7960] loop3: rw=2049, sector=4680032, nr_sectors = 8 limit=32768
[  151.504000][  T114] blkno = 8ed2c, nblocks = 1
[  151.507822][  T114] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[  151.507822][  T114] 
[  151.588231][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'.
[  151.591937][ T7970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.812'.
[  151.612374][ T7957] loop2: detected capacity change from 0 to 65536
[  151.640497][ T7957] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  151.652702][ T7957] XFS (loop2): Ending clean mount
[  151.663501][ T7957] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x27 dinode
[  151.670779][ T7957] XFS (loop2): Unmount and run xfs_repair
[  151.672773][ T7957] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  151.675313][ T7957] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[  151.678065][ T7957] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  151.680806][ T7957] 00000020: 34 f7 58 68 7a bb 44 4d 34 f7 58 68 7a bb 44 4d  4.Xhz.DM4.Xhz.DM
[  151.683657][ T7957] 00000030: 34 f7 58 68 7a bb 44 4d 00 00 00 00 00 00 23 28  4.Xhz.DM......#(
[  151.687987][ T7957] 00000040: 00 00 00 00 00 00 00 09 00 00 00 00 00 00 00 01  ................
[  151.690755][ T7957] 00000050: 00 00 18 02 00 00 00 00 00 00 00 00 29 7f f3 2c  ............)..,
[  151.693691][ T7957] 00000060: ff ff ff ff ac d7 f2 a3 00 00 00 00 00 00 00 06  ................
[  151.697503][ T7957] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[  151.712609][ T5848] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  151.937142][ T7982] loop0: detected capacity change from 0 to 32768
[  151.967997][ T7982] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  151.987884][ T7988] loop2: detected capacity change from 0 to 1024
[  152.007077][ T7988] hfsplus: bad catalog entry type
[  152.035531][   T64] hfsplus: b-tree write err: -5, ino 4
[  152.073235][ T7284] ocfs2: Unmounting device (7,0) on (node local)
[  152.102024][ T7990] loop3: detected capacity change from 0 to 4096
[  152.112561][ T7990] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  152.123417][ T7990] ntfs3(loop3): Failed to load $UpCase (-22).
[  152.343731][ T8014] loop2: detected capacity change from 0 to 512
[  152.364333][ T8014] EXT4-fs (loop2): Test dummy encryption mode enabled
[  152.367488][ T8014] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  152.379862][ T8014] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.828: bad orphan inode 131083
[  152.387515][ T8014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.423780][ T8019] loop0: detected capacity change from 0 to 4096
[  152.434421][ T8019] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  152.454571][ T8019] ntfs3(loop0): Failed to load $Extend (-22).
[  152.460139][ T8019] ntfs3(loop0): Failed to initialize $Extend.
[  152.465477][ T8014] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  152.469609][ T8026] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long
[  153.353304][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.540704][ T8047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.840'.
[  153.548687][ T8047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.840'.
[  154.361506][   T33] audit: type=1400 audit(1755246923.112:24): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8059 comm="syz.0.846"
[  154.502288][ T8064] loop3: detected capacity change from 0 to 512
[  154.505235][ T8064] EXT4-fs: Ignoring removed mblk_io_submit option
[  154.511865][ T8064] EXT4-fs error (device loop3): ext4_orphan_get:1392: comm syz.3.848: inode #13: comm syz.3.848: iget: illegal inode #
[  154.517442][ T8064] EXT4-fs (loop3): Remounting filesystem read-only
[  154.520399][ T8064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.541288][ T7105] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.581012][ T8053] loop2: detected capacity change from 0 to 40427
[  154.585087][ T8053] F2FS-fs (loop2): Image doesn't support compression
[  154.588397][ T8053] F2FS-fs (loop2): build fault injection rate: 690
[  154.592056][ T8053] F2FS-fs (loop2): invalid crc value
[  154.643793][ T8053] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  154.650428][ T8053] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  154.930666][ T8084] net_ratelimit: 3323 callbacks suppressed
[  154.930679][ T8084] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  155.166536][   T33] audit: type=1800 audit(1755246923.902:25): pid=8100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.861" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  155.426041][    T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  155.574857][    T9] usb 3-1: Using ep0 maxpacket: 8
[  155.580197][    T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  155.639507][    T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  155.645170][    T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  155.649747][    T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  155.654024][    T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  155.662780][    T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  155.666862][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.972643][    T9] usb 3-1: usb_control_msg returned -32
[  155.975094][    T9] usbtmc 3-1:16.0: can't read capabilities
[  156.875853][ T8139] loop3: detected capacity change from 0 to 32768
[  156.968160][ T8139] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  156.968178][ T8139]   allowing incompatible features above 0.0: (unknown version)
[  156.968183][ T8139]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  156.982846][ T8139] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  156.986095][ T8139] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  156.988702][ T8139] bcachefs (loop3): Version upgrade required:
[  156.988702][ T8139] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  156.988702][ T8139] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  156.988702][ T8139]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  157.017914][ T8139] bcachefs (loop3): dropping and reconstructing all alloc info
[  157.037084][ T8139] bcachefs (loop3): accounting_read... done
[  157.041914][ T8139] bcachefs (loop3): alloc_read... done
[  157.045029][ T8139] bcachefs (loop3): snapshots_read... done
[  157.047813][ T8139] bcachefs (loop3): check_allocations... done
[  157.067747][ T8139] bcachefs (loop3): going read-write
[  157.079385][ T8139] bcachefs (loop3): done starting filesystem
[  157.119646][ T7105] bcachefs (loop3): shutting down
[  157.122536][ T7105] bcachefs (loop3): going read-only
[  157.127052][ T7105] bcachefs (loop3): finished waiting for writes to stop
[  157.133796][ T7105] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10
[  157.137976][ T7105] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10
[  157.168451][ T7105] bcachefs (loop3): unclean shutdown complete, journal seq 11
[  157.174763][ T7105] bcachefs (loop3): done going read-only, filesystem not clean
[  157.196803][ T7105] bcachefs (loop3): shutdown complete
[  157.908779][ T5854] usb 3-1: USB disconnect, device number 14
[  158.588201][ T8196] loop3: detected capacity change from 0 to 764
[  158.594127][ T8196] rock: directory entry would overflow storage
[  158.601290][ T8196] rock: sig=0x5245, size=8, remaining=5
[  159.496683][ T8230] capability: warning: `syz.3.907' uses 32-bit capabilities (legacy support in use)
[  159.782047][ T8250] overlay: Unknown parameter '\'
[  159.921626][ T8259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  159.993955][ T8266] loop0: detected capacity change from 0 to 8
[  160.002719][ T8266] SQUASHFS error: lzo decompression failed, data probably corrupt
[  160.007401][ T8268] input: syz1 as /devices/virtual/input/input10
[  160.008436][ T8266] SQUASHFS error: Failed to read block 0x28d: -5
[  160.011674][ T8266] SQUASHFS error: Unable to read metadata cache entry [28b]
[  160.014158][ T8266] SQUASHFS error: Unable to read inode 0x11f
[  160.174067][ T8277] loop0: detected capacity change from 0 to 2048
[  160.188469][ T8277] FAT-fs (loop0): Directory bread(block 131102) failed
[  160.191547][ T8277] FAT-fs (loop0): Directory bread(block 131103) failed
[  160.194466][ T8277] FAT-fs (loop0): Directory bread(block 131104) failed
[  160.203345][ T8277] FAT-fs (loop0): Directory bread(block 131105) failed
[  160.206177][ T8277] FAT-fs (loop0): Directory bread(block 131106) failed
[  160.208718][ T8277] FAT-fs (loop0): Directory bread(block 131107) failed
[  160.211633][ T8277] FAT-fs (loop0): Directory bread(block 131108) failed
[  160.214242][ T8271] loop3: detected capacity change from 0 to 32768
[  160.214517][ T8277] FAT-fs (loop0): Directory bread(block 131109) failed
[  160.223991][ T8277] FAT-fs (loop0): Directory bread(block 131110) failed
[  160.232439][ T8277] FAT-fs (loop0): Directory bread(block 131111) failed
[  160.678464][ T8282] loop0: detected capacity change from 0 to 256
[  160.717932][ T8282] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000e8a4, chksum : 0x7bc75166, utbl_chksum : 0xe619d30d)
[  160.976325][ T8289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.939'.
[  160.977489][ T8288] loop0: detected capacity change from 0 to 128
[  161.021354][ T8288] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[  161.025422][ T8288] System zones: 1-3, 19-19, 35-36
[  161.035660][ T8288] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  161.050910][ T8288] ext4 filesystem being mounted at /150/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  161.407080][ T7284] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  162.116589][   T47] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  162.288484][   T47] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  162.292552][   T47] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  162.309822][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  162.314015][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  162.334824][   T47] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  162.347591][   T47] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  162.351232][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  162.354516][   T47] usb 4-1: Product: syz
[  162.369072][   T47] usb 4-1: Manufacturer: syz
[  162.371182][   T47] usb 4-1: SerialNumber: syz
[  162.511768][   T47] usb 4-1: config 0 descriptor??
[  163.218700][   T47] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  163.221545][   T47] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  163.422285][   T47] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71
[  163.425857][   T47] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -71
[  163.432897][   T47] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5
[  163.457570][   T47] usb 4-1: USB disconnect, device number 6
[  164.480170][ T8335] delete_channel: no stack
[  164.505766][ T8335] delete_channel: no stack
[  164.726486][ T8340] loop0: detected capacity change from 0 to 512
[  164.729773][ T8340] EXT4-fs: Ignoring removed nobh option
[  164.739954][ T8340] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.958: iget: bad i_size value: 38620345925642
[  164.765726][ T8340] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.958: couldn't read orphan inode 15 (err -117)
[  164.779638][ T8340] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.827317][ T7284] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.849382][ T8347] loop2: detected capacity change from 0 to 512
[  164.853855][ T8347] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  164.857838][ T8347] System zones: 1-12
[  164.869440][ T8347] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.963: error while reading EA inode 32 err=-116
[  164.879328][ T8347] EXT4-fs (loop2): Remounting filesystem read-only
[  164.881635][ T8347] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  164.889288][ T8347] EXT4-fs (loop2): 1 orphan inode deleted
[  164.892960][ T8347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.933950][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.952540][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  164.991882][ T8354] max out of range
[  165.111828][    T9] usb 4-1: config 48 interface 0 altsetting 98 bulk endpoint 0x4 has invalid maxpacket 1024
[  165.116769][    T9] usb 4-1: config 48 interface 0 altsetting 98 bulk endpoint 0x9 has invalid maxpacket 1024
[  165.122437][    T9] usb 4-1: config 48 interface 0 has no altsetting 0
[  165.132784][    T9] usb 4-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f
[  165.142160][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.149342][    T9] usb 4-1: Product: syz
[  165.151117][    T9] usb 4-1: Manufacturer: syz
[  165.153093][    T9] usb 4-1: SerialNumber: syz
[  165.167916][ T8337] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  165.170440][ T8337] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  165.448144][ T8366] loop0: detected capacity change from 0 to 32768
[  165.454115][ T8366] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.971 (8366)
[  165.463725][ T8366] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  165.467079][ T8366] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  165.469935][ T8366] BTRFS info (device loop0): using free-space-tree
[  165.478306][    T9] usb 4-1: USB disconnect, device number 7
[  165.622931][ T8366] BTRFS error: failed to open device for path nhؤo6:ƾ+@W4xF	2i{!Xg]C with flags 0x1: -2
[  165.644013][ T7284] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  165.862743][ T8391] overlayfs: missing 'lowerdir'
[  165.878870][ T8391] Mount JFS Failure: -22
[  165.888236][ T8392] loop0: detected capacity change from 0 to 2048
[  165.892461][ T8392] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  165.898370][ T8392] NILFS (loop0): mounting unchecked fs
[  165.910026][ T8392] NILFS (loop0): recovery complete
[  165.913814][ T8393] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  166.342324][ T8416] netlink: 'syz.0.986': attribute type 3 has an invalid length.
[  166.348960][ T8416] netlink: 716 bytes leftover after parsing attributes in process `syz.0.986'.
[  166.445075][ T5883] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  166.562587][ T8420] loop0: detected capacity change from 0 to 32768
[  166.568535][ T8420] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.988 (8420)
[  166.576430][ T8420] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  166.579753][ T8420] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  166.583668][ T8420] BTRFS info (device loop0): using free-space-tree
[  166.604955][ T5883] usb 4-1: Using ep0 maxpacket: 16
[  166.622045][ T5883] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  166.634830][ T5883] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  166.647276][ T5883] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  166.672279][ T5883] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  166.684930][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.688169][ T5883] usb 4-1: Product: syz
[  166.689937][ T5883] usb 4-1: Manufacturer: syz
[  166.707058][ T5883] usb 4-1: SerialNumber: syz
[  166.901074][ T7284] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  167.144149][ T5883] usb 4-1: 0:2 : does not exist
[  167.175032][ T5883] usb 4-1: USB disconnect, device number 8
[  167.749800][ T5883] IPVS: starting estimator thread 0...
[  167.856751][ T8462] IPVS: using max 53 ests per chain, 127200 per kthread
[  168.850552][ T8479] loop0: detected capacity change from 0 to 8192
[  169.119663][ T8502] netlink: 'syz.3.1018': attribute type 5 has an invalid length.
[  169.240651][ T8517] loop0: detected capacity change from 0 to 128
[  169.390090][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1030'.
[  169.393128][ T8527] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1030'.
[  169.425504][   T47] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  169.564870][  T793] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  169.574851][   T47] usb 4-1: Using ep0 maxpacket: 32
[  169.578746][   T47] usb 4-1: config index 0 descriptor too short (expected 164, got 36)
[  169.581905][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.586531][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  169.590402][   T47] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  169.594076][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.599683][   T47] usb 4-1: config 0 descriptor??
[  169.717865][  T793] usb 1-1: config 0 has an invalid interface number: 120 but max is 0
[  169.721184][  T793] usb 1-1: config 0 has no interface number 0
[  169.723756][  T793] usb 1-1: config 0 interface 120 has no altsetting 0
[  169.729890][  T793] usb 1-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72
[  169.733620][  T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.736886][  T793] usb 1-1: Product: syz
[  169.738654][  T793] usb 1-1: Manufacturer: syz
[  169.740554][  T793] usb 1-1: SerialNumber: syz
[  169.746083][  T793] usb 1-1: config 0 descriptor??
[  169.974566][  T793] comedi comedi5: could not switch to alternate setting 1
[  169.980601][  T793] usbduxfast 1-1:0.120: driver 'usbduxfast' failed to auto-configure device.
[  169.991273][  T793] usb 1-1: USB disconnect, device number 10
[  170.011088][   T47] logitech 0003:046D:C29C.0007: reserved main item tag 0xe
[  170.018779][   T47] logitech 0003:046D:C29C.0007: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0
[  170.209126][   T47] logitech 0003:046D:C29C.0007: no inputs found
[  170.216085][   T47] usb 4-1: USB disconnect, device number 9
[  170.360847][ T8534] loop2: detected capacity change from 0 to 2048
[  170.366960][ T8534] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  170.372478][ T8534] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  170.379560][ T8534] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  171.383438][ T8560] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1044'.
[  171.725572][ T8562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1045'.
[  172.096617][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'.
[  172.104847][    C1] vcan0: j1939_xtp_rx_dat: no tx connection found
[  172.107868][    C1] vcan0: j1939_xtp_rx_dat: no rx connection found
[  172.110582][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.113788][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.117063][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.120232][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.123141][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.125956][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.128716][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.131566][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.134766][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.137934][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.141098][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.144117][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.147522][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.150542][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.153664][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.157133][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.160527][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.163766][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.167043][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.170247][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.173432][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.176625][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.179767][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.182753][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.185908][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.189054][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.192592][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.195839][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.199022][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.202094][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.205376][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.208481][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.211597][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.214757][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.217903][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.220993][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.224133][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.227275][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.230439][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.233469][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.236708][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.239669][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.242748][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.245804][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.248850][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.251858][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.255070][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.258125][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.261226][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.264258][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.267423][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.270372][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.273520][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.276668][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.279876][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.283092][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.286383][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.289386][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.292575][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.295761][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.298920][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.301955][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.305098][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.308018][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.311048][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.314030][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.317211][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.320250][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.323351][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.326467][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.329537][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.332563][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.335813][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.338875][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.341825][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.344934][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.348017][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.351099][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.354262][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.357425][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.360543][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.363592][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.366753][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.369799][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.372915][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.376100][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.379290][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.381811][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.384290][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.386884][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.389545][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.392643][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.395932][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.398952][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.402217][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.405349][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.408501][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.411495][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.414718][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.417732][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.420829][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.423844][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.427050][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.430071][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.433218][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.436382][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.439403][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.442415][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.445612][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.448610][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  172.451779][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  172.454935][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  173.548551][ T8573] (unnamed net_device) (uninitialized): down delay (2) is not a multiple of miimon (100), value rounded to 0 ms
[  173.553409][ T8573] (unnamed net_device) (uninitialized): peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms
[  173.603639][ T8573] 8021q: adding VLAN 0 to HW filter on device bond2
[  173.703679][ T8583] tmpfs: Bad value for 'size'
[  174.206474][ T8594] loop0: detected capacity change from 0 to 4096
[  174.226299][ T8594] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  174.229451][ T8594] ntfs3(loop0): Failed to load $Extend (-22).
[  174.232032][ T8594] ntfs3(loop0): Failed to initialize $Extend.
[  174.610504][ T8602] overlayfs: missing 'lowerdir'
[  174.927849][ T8600] loop2: detected capacity change from 0 to 32768
[  175.265119][ T5854] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  175.367922][ T8621] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1069'.
[  175.415241][ T5854] usb 4-1: Using ep0 maxpacket: 16
[  175.420534][ T5854] usb 4-1: config index 0 descriptor too short (expected 16456, got 72)
[  175.424221][ T5854] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  175.429172][ T5854] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  175.433157][ T5854] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  175.437796][ T5854] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  175.442312][ T5854] usb 4-1: config 0 has no interface number 0
[  175.446692][ T5854] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  175.451344][ T5854] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  175.455682][ T5854] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  175.459917][ T5854] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  175.467196][ T5854] usb 4-1: config 0 interface 125 has no altsetting 0
[  175.470118][ T5854] usb 4-1: config 0 interface 125 has no altsetting 2
[  175.476204][ T5854] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  175.480130][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.483544][ T5854] usb 4-1: Product: syz
[  175.487650][ T5854] usb 4-1: Manufacturer: syz
[  175.489723][ T5854] usb 4-1: SerialNumber: syz
[  175.495512][ T5854] usb 4-1: config 0 descriptor??
[  175.500725][ T5854] usb 4-1: selecting invalid altsetting 2
[  175.709071][    C0] usb 4-1: async_complete: urb error -71
[  175.711533][    C0] usb 4-1: async_complete: urb error -71
[  175.713989][    C0] usb 4-1: async_complete: urb error -71
[  175.716398][    C0] usb 4-1: async_complete: urb error -71
[  175.721222][ T5854] get_1284_register: usb error -71
[  175.723429][ T5854] uss720 4-1:0.125: probe with driver uss720 failed with error -71
[  175.728807][ T5854] usb 4-1: USB disconnect, device number 10
[  175.855257][ T8626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1071'.
[  176.598987][ T8661] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1080'.
[  176.751958][ T8670] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1081'.
[  176.761597][ T8670] netlink: zone id is out of range
[  176.767086][ T8670] netlink: zone id is out of range
[  176.769273][ T8670] netlink: get zone limit has 8 unknown bytes
[  178.836675][ T8698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  179.603821][   T54] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  179.610114][   T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u11:0 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  179.610158][   T54] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  179.610171][   T54] Workqueue: hci2 hci_rx_work
[  179.610196][   T54] Call Trace:
[  179.610202][   T54]  <TASK>
[  179.610210][   T54]  dump_stack_lvl+0x189/0x250
[  179.610236][   T54]  ? __pfx_dump_stack_lvl+0x10/0x10
[  179.610255][   T54]  ? __pfx__printk+0x10/0x10
[  179.610279][   T54]  ? kernfs_path_from_node+0x250/0x290
[  179.610293][   T54]  ? kernfs_path_from_node+0x2f/0x290
[  179.610312][   T54]  sysfs_create_dir_ns+0x259/0x280
[  179.610330][   T54]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  179.610346][   T54]  ? do_raw_spin_unlock+0x4d/0x240
[  179.610368][   T54]  kobject_add_internal+0x59f/0xb40
[  179.610396][   T54]  kobject_add+0x155/0x220
[  179.610422][   T54]  ? __pfx_kobject_add+0x10/0x10
[  179.610444][   T54]  ? _raw_spin_unlock+0x28/0x50
[  179.610465][   T54]  ? get_device_parent+0x366/0x3a0
[  179.610485][   T54]  device_add+0x408/0xb50
[  179.610535][   T54]  hci_conn_add_sysfs+0xd5/0x1e0
[  179.610557][   T54]  le_conn_complete_evt+0xc3a/0x1220
[  179.610591][   T54]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  179.610615][   T54]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  179.610633][   T54]  ? __asan_memcpy+0x40/0x70
[  179.610654][   T54]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  179.610674][   T54]  ? skb_pull_data+0xfb/0x200
[  179.610694][   T54]  hci_le_conn_complete_evt+0x187/0x450
[  179.610721][   T54]  hci_event_packet+0x78f/0x1200
[  179.610739][   T54]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  179.610760][   T54]  ? __pfx_hci_event_packet+0x10/0x10
[  179.610777][   T54]  ? kcov_remote_start+0x4d3/0x7f0
[  179.610796][   T54]  ? lockdep_hardirqs_on+0x90/0x150
[  179.610817][   T54]  ? hci_send_to_monitor+0xe2/0x570
[  179.610836][   T54]  hci_rx_work+0x46a/0xe80
[  179.610855][   T54]  ? process_scheduled_works+0x9ef/0x17b0
[  179.610871][   T54]  process_scheduled_works+0xae1/0x17b0
[  179.610908][   T54]  ? __pfx_process_scheduled_works+0x10/0x10
[  179.610932][   T54]  worker_thread+0x8a0/0xda0
[  179.610966][   T54]  kthread+0x711/0x8a0
[  179.610987][   T54]  ? __pfx_worker_thread+0x10/0x10
[  179.610996][   T54]  ? __pfx_kthread+0x10/0x10
[  179.611015][   T54]  ? _raw_spin_unlock_irq+0x23/0x50
[  179.611030][   T54]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.611047][   T54]  ? __pfx_kthread+0x10/0x10
[  179.611064][   T54]  ret_from_fork+0x3fc/0x770
[  179.611080][   T54]  ? __pfx_ret_from_fork+0x10/0x10
[  179.611101][   T54]  ? __switch_to_asm+0x39/0x70
[  179.611120][   T54]  ? __switch_to_asm+0x33/0x70
[  179.611138][   T54]  ? __pfx_kthread+0x10/0x10
[  179.611156][   T54]  ret_from_fork_asm+0x1a/0x30
[  179.611179][   T54]  </TASK>
[  179.611266][   T54] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  179.619204][ T8745] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1092'.
[  179.620874][   T54] Bluetooth: hci2: failed to register connection device
[  180.871418][ T8746] loop2: detected capacity change from 0 to 131072
[  180.874969][ T8746] F2FS-fs (loop2): Invalid log sectorsize (67108873)
[  180.877570][ T8746] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  180.883955][ T8746] F2FS-fs (loop2): invalid crc value
[  180.942892][ T8746] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  180.947989][ T8754] netlink: 'syz.3.1096': attribute type 1 has an invalid length.
[  180.956369][ T8746] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  180.958922][ T8746] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  180.988953][ T8746] F2FS-fs (loop2): inconsistent node block, node_type:2, nid:8, node_footer[nid:8,ino:8,ofs:0,cpver:5013063228981249506,blkaddr:100678662]
[  181.667788][ T5236] Bluetooth: hci2: command tx timeout
[  182.072779][ T8776] loop3: detected capacity change from 0 to 32768
[  182.085983][ T8776] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1104 (8776)
[  182.119395][ T8776] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  182.123534][ T8776] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  182.137405][ T8776] BTRFS info (device loop3): using free-space-tree
[  182.158694][ T8781] loop0: detected capacity change from 0 to 32768
[  182.168890][ T8781] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section replicas: bad nr_required in entry (unknown data_type 155): 239/36 [0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 8 26 41 44 51 70 73 87 93 102 106 112 120 128 144 184 203 237 245]
[  182.168890][ T8781] replicas (size 64):
[  182.168890][ T8781] (unknown data_type 155): 239/36 [237 106 112 73 203 144 87 44 70 41 26 120 93 128 0 0 0 0 0 0 0 0 0 0 1 8 0 0 0 184 245 51 102 0 0 0]
[  182.168890][ T8781] 
[  182.190572][ T8781] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  182.370738][ T7105] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  182.539910][ T8804] netlink: 'syz.2.1111': attribute type 1 has an invalid length.
[  182.543074][ T8804] netlink: 'syz.2.1111': attribute type 4 has an invalid length.
[  182.547942][ T8804] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1111'.
[  182.552383][ T8804] netlink: 'syz.2.1111': attribute type 1 has an invalid length.
[  182.555450][ T8804] netlink: 'syz.2.1111': attribute type 4 has an invalid length.
[  182.558100][ T8804] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1111'.
[  182.990887][ T8823] loop3: detected capacity change from 0 to 4096
[  182.995968][ T8823] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  183.018257][ T8823] ntfs3(loop3): ino=19, mi_enum_attr
[  183.020794][ T8823] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  183.045152][   T33] audit: type=1804 audit(1755246951.792:26): pid=8823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1119" name="/newroot/205/file0/file0" dev="loop3" ino=0 res=1 errno=0
[  183.114107][ T8825] loop2: detected capacity change from 0 to 2048
[  183.120001][ T8825] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  183.130738][ T8825] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  183.169826][   T33] audit: type=1800 audit(1755246951.892:27): pid=8825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1120" name="file1" dev="loop2" ino=1367 res=0 errno=0
[  183.188990][   T33] audit: type=1804 audit(1755246951.912:28): pid=8825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1120" name="/newroot/341/file0/file1" dev="loop2" ino=1367 res=1 errno=0
[  183.257642][ T8827] loop3: detected capacity change from 0 to 40427
[  183.262112][ T8827] F2FS-fs (loop3): invalid crc value
[  183.292645][ T8827] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  183.296729][ T8827] F2FS-fs (loop3): Start checkpoint disabled!
[  183.304416][ T8830] program syz.0.1123 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  183.310341][ T8827] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  183.456418][   T33] audit: type=1800 audit(1755246952.202:29): pid=8839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1121" name="file1" dev="loop3" ino=10 res=0 errno=0
[  183.487759][ T8839] syz.3.1121: attempt to access beyond end of device
[  183.487759][ T8839] loop3: rw=2049, sector=77824, nr_sectors = 984 limit=40427
[  184.399092][ T8837] loop0: detected capacity change from 0 to 40427
[  184.403409][ T8837] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  184.406451][ T8837] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  184.423566][ T1103] kworker/u10:9: attempt to access beyond end of device
[  184.423566][ T1103] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  184.440736][ T1103] CPU: 1 UID: 0 PID: 1103 Comm: kworker/u10:9 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  184.440780][ T1103] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  184.440798][ T1103] Workqueue: writeback wb_workfn (flush-7:3)
[  184.440822][ T1103] Call Trace:
[  184.440829][ T1103]  <TASK>
[  184.440836][ T1103]  dump_stack_lvl+0x189/0x250
[  184.440858][ T1103]  ? __pfx_dump_stack_lvl+0x10/0x10
[  184.440874][ T1103]  ? __pfx_queue_work_on+0x10/0x10
[  184.440888][ T1103]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  184.440906][ T1103]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  184.440934][ T1103]  f2fs_handle_critical_error+0x37c/0x540
[  184.440960][ T1103]  f2fs_write_end_io+0x886/0xb60
[  184.440991][ T1103]  __submit_merged_bio+0x27a/0x6a0
[  184.441016][ T1103]  __submit_merged_write_cond+0x255/0x530
[  184.441039][ T1103]  f2fs_write_data_pages+0x261d/0x3000
[  184.441121][ T1103]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  184.441155][ T1103]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  184.441200][ T1103]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  184.441231][ T1103]  ? trace_f2fs_writepages+0x7f/0x200
[  184.441250][ T1103]  ? f2fs_write_node_pages+0x478/0x6e0
[  184.441274][ T1103]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  184.441320][ T1103]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  184.441341][ T1103]  do_writepages+0x32e/0x550
[  184.441365][ T1103]  ? reacquire_held_locks+0x127/0x1d0
[  184.441380][ T1103]  ? writeback_sb_inodes+0x384/0x1010
[  184.441405][ T1103]  __writeback_single_inode+0x145/0xff0
[  184.441423][ T1103]  ? do_raw_spin_unlock+0x4d/0x240
[  184.441444][ T1103]  writeback_sb_inodes+0x6c7/0x1010
[  184.441469][ T1103]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  184.441503][ T1103]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  184.441560][ T1103]  ? rcu_is_watching+0x15/0xb0
[  184.441584][ T1103]  wb_writeback+0x43b/0xaf0
[  184.441610][ T1103]  ? queue_io+0x2f1/0x590
[  184.441630][ T1103]  ? __pfx_wb_writeback+0x10/0x10
[  184.441656][ T1103]  ? _raw_spin_unlock_irq+0x23/0x50
[  184.441678][ T1103]  wb_workfn+0x409/0xef0
[  184.441708][ T1103]  ? __pfx_wb_workfn+0x10/0x10
[  184.441728][ T1103]  ? __lock_acquire+0xab9/0xd20
[  184.441758][ T1103]  ? process_scheduled_works+0x9ef/0x17b0
[  184.441778][ T1103]  ? _raw_spin_unlock_irq+0x23/0x50
[  184.441793][ T1103]  ? process_scheduled_works+0x9ef/0x17b0
[  184.441806][ T1103]  ? process_scheduled_works+0x9ef/0x17b0
[  184.441822][ T1103]  process_scheduled_works+0xae1/0x17b0
[  184.441865][ T1103]  ? __pfx_process_scheduled_works+0x10/0x10
[  184.441896][ T1103]  worker_thread+0x8a0/0xda0
[  184.441912][ T1103]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  184.441935][ T1103]  ? __kthread_parkme+0x7b/0x200
[  184.441959][ T1103]  kthread+0x711/0x8a0
[  184.441978][ T1103]  ? __pfx_worker_thread+0x10/0x10
[  184.441991][ T1103]  ? __pfx_kthread+0x10/0x10
[  184.442009][ T1103]  ? _raw_spin_unlock_irq+0x23/0x50
[  184.442024][ T1103]  ? lockdep_hardirqs_on+0x9c/0x150
[  184.442039][ T1103]  ? __pfx_kthread+0x10/0x10
[  184.442077][ T1103]  ret_from_fork+0x3fc/0x770
[  184.442096][ T1103]  ? __pfx_ret_from_fork+0x10/0x10
[  184.442117][ T1103]  ? __switch_to_asm+0x39/0x70
[  184.442134][ T1103]  ? __switch_to_asm+0x33/0x70
[  184.442149][ T1103]  ? __pfx_kthread+0x10/0x10
[  184.442167][ T1103]  ret_from_fork_asm+0x1a/0x30
[  184.442199][ T1103]  </TASK>
[  184.442206][ T1103] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  184.542359][ T8837] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  184.589839][ T8837] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  184.592665][ T8837] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  184.661763][ T7284] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  184.667786][ T7284] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  184.670950][ T7284] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  184.674085][ T7284] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  184.678381][ T7284] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  184.681875][ T7284] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  184.686839][ T7284] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  185.156468][ T8868] loop3: detected capacity change from 0 to 32768
[  185.169565][ T8868] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  185.189846][ T8868] 
[  185.190794][ T8868] ======================================================
[  185.192798][ T8868] WARNING: possible circular locking dependency detected
[  185.194847][ T8868] 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 Not tainted
[  185.197367][ T8868] ------------------------------------------------------
[  185.201214][ T8868] syz.3.1135/8868 is trying to acquire lock:
[  185.203238][ T8868] ffff8881132b9578 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2f9/0x720
[  185.206322][ T8868] 
[  185.206322][ T8868] but task is already holding lock:
[  185.209089][ T8868] ffff88811df2a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  185.212692][ T8868] 
[  185.212692][ T8868] which lock already depends on the new lock.
[  185.212692][ T8868] 
[  185.216585][ T8868] 
[  185.216585][ T8868] the existing dependency chain (in reverse order) is:
[  185.219358][ T8868] 
[  185.219358][ T8868] -> #4 (jbd2_handle){++++}-{0:0}:
[  185.222397][ T8868]        lock_acquire+0x120/0x360
[  185.224507][ T8868]        start_this_handle+0x1fa7/0x21c0
[  185.226644][ T8868]        jbd2__journal_start+0x2c1/0x5b0
[  185.228943][ T8868]        jbd2_journal_start+0x2a/0x40
[  185.231042][ T8868]        ocfs2_start_trans+0x376/0x6d0
[  185.232721][ T8868]        ocfs2_mknod+0xe93/0x2050
[  185.234425][ T8868]        ocfs2_create+0x1a5/0x440
[  185.235978][ T8868]        path_openat+0x14f4/0x3830
[  185.237590][ T8868]        do_filp_open+0x1fa/0x410
[  185.239204][ T8868]        do_sys_openat2+0x121/0x1c0
[  185.241209][ T8868]        __x64_sys_openat+0x138/0x170
[  185.242899][ T8868]        do_syscall_64+0xfa/0x3b0
[  185.244486][ T8868]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.246498][ T8868] 
[  185.246498][ T8868] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  185.249310][ T8868]        lock_acquire+0x120/0x360
[  185.251140][ T8868]        down_read+0x46/0x2e0
[  185.252743][ T8868]        ocfs2_start_trans+0x36a/0x6d0
[  185.254954][ T8868]        ocfs2_mknod+0xe93/0x2050
[  185.256568][ T8868]        ocfs2_create+0x1a5/0x440
[  185.258079][ T8868]        path_openat+0x14f4/0x3830
[  185.259832][ T8868]        do_filp_open+0x1fa/0x410
[  185.261886][ T8868]        do_sys_openat2+0x121/0x1c0
[  185.264079][ T8868]        __x64_sys_openat+0x138/0x170
[  185.266227][ T8868]        do_syscall_64+0xfa/0x3b0
[  185.268242][ T8868]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.270705][ T8868] 
[  185.270705][ T8868] -> #2 (sb_internal#3){.+.+}-{0:0}:
[  185.273574][ T8868]        lock_acquire+0x120/0x360
[  185.275581][ T8868]        ocfs2_start_trans+0x26b/0x6d0
[  185.277762][ T8868]        ocfs2_xattr_set+0xd69/0x11f0
[  185.279882][ T8868]        __vfs_setxattr+0x43c/0x480
[  185.282005][ T8868]        __vfs_setxattr_noperm+0x12d/0x660
[  185.284298][ T8868]        vfs_setxattr+0x16b/0x2f0
[  185.286258][ T8868]        filename_setxattr+0x274/0x600
[  185.288423][ T8868]        path_setxattrat+0x364/0x3a0
[  185.290477][ T8868]        __x64_sys_setxattr+0xbc/0xe0
[  185.292516][ T8868]        do_syscall_64+0xfa/0x3b0
[  185.294565][ T8868]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.297090][ T8868] 
[  185.297090][ T8868] -> #1 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  185.301349][ T8868]        lock_acquire+0x120/0x360
[  185.303415][ T8868]        down_write+0x96/0x1f0
[  185.305346][ T8868]        ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  185.307845][ T8868]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  185.310654][ T8868]        ocfs2_init_xattr_set_ctxt+0x307/0x700
[  185.313129][ T8868]        ocfs2_xattr_set+0xb70/0x11f0
[  185.315306][ T8868]        __vfs_setxattr+0x43c/0x480
[  185.317526][ T8868]        __vfs_setxattr_noperm+0x12d/0x660
[  185.319994][ T8868]        vfs_setxattr+0x16b/0x2f0
[  185.322077][ T8868]        filename_setxattr+0x274/0x600
[  185.324367][ T8868]        path_setxattrat+0x364/0x3a0
[  185.326438][ T8868]        __x64_sys_setxattr+0xbc/0xe0
[  185.328438][ T8868]        do_syscall_64+0xfa/0x3b0
[  185.330295][ T8868]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.332449][ T8868] 
[  185.332449][ T8868] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}:
[  185.335246][ T8868]        validate_chain+0xb9b/0x2140
[  185.337273][ T8868]        __lock_acquire+0xab9/0xd20
[  185.339333][ T8868]        lock_acquire+0x120/0x360
[  185.341427][ T8868]        down_read+0x46/0x2e0
[  185.343329][ T8868]        ocfs2_init_acl+0x2f9/0x720
[  185.345478][ T8868]        ocfs2_mknod+0x1321/0x2050
[  185.347530][ T8868]        ocfs2_create+0x1a5/0x440
[  185.349592][ T8868]        path_openat+0x14f4/0x3830
[  185.351657][ T8868]        do_filp_open+0x1fa/0x410
[  185.353696][ T8868]        do_sys_openat2+0x121/0x1c0
[  185.355574][ T8868]        __x64_sys_openat+0x138/0x170
[  185.357522][ T8868]        do_syscall_64+0xfa/0x3b0
[  185.359243][ T8868]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.361409][ T8868] 
[  185.361409][ T8868] other info that might help us debug this:
[  185.361409][ T8868] 
[  185.364934][ T8868] Chain exists of:
[  185.364934][ T8868]   &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle
[  185.364934][ T8868] 
[  185.369601][ T8868]  Possible unsafe locking scenario:
[  185.369601][ T8868] 
[  185.371949][ T8868]        CPU0                    CPU1
[  185.374116][ T8868]        ----                    ----
[  185.376326][ T8868]   rlock(jbd2_handle);
[  185.378051][ T8868]                                lock(&journal->j_trans_barrier);
[  185.381239][ T8868]                                lock(jbd2_handle);
[  185.383848][ T8868]   rlock(&oi->ip_xattr_sem);
[  185.385814][ T8868] 
[  185.385814][ T8868]  *** DEADLOCK ***
[  185.385814][ T8868] 
[  185.388851][ T8868] 8 locks held by syz.3.1135/8868:
[  185.390661][ T8868]  #0: ffff8881245d2428 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  185.394527][ T8868]  #1: ffff8881132b9840 (&type->i_mutex_dir_key#11){+.+.}-{4:4}, at: path_openat+0x8da/0x3830
[  185.398709][ T8868]  #2: ffff8881132b6f40 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  185.404055][ T8868]  #3: ffff8881132bef40 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  185.408923][ T8868]  #4: ffff8881132b09c0 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  185.414496][ T8868]  #5: ffff8881245d2618 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_mknod+0xe93/0x2050
[  185.418173][ T8868]  #6: ffff88811e80e4e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x36a/0x6d0
[  185.422443][ T8868]  #7: ffff88811df2a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f87/0x21c0
[  185.426317][ T8868] 
[  185.426317][ T8868] stack backtrace:
[  185.428810][ T8868] CPU: 1 UID: 0 PID: 8868 Comm: syz.3.1135 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  185.428835][ T8868] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  185.428846][ T8868] Call Trace:
[  185.428854][ T8868]  <TASK>
[  185.428862][ T8868]  dump_stack_lvl+0x189/0x250
[  185.428886][ T8868]  ? __pfx_dump_stack_lvl+0x10/0x10
[  185.428903][ T8868]  ? __pfx__printk+0x10/0x10
[  185.428922][ T8868]  ? stack_trace_save+0x9c/0xe0
[  185.428949][ T8868]  print_circular_bug+0x2ee/0x310
[  185.428991][ T8868]  check_noncircular+0x134/0x160
[  185.429009][ T8868]  validate_chain+0xb9b/0x2140
[  185.429032][ T8868]  __lock_acquire+0xab9/0xd20
[  185.429056][ T8868]  ? ocfs2_init_acl+0x2f9/0x720
[  185.429070][ T8868]  lock_acquire+0x120/0x360
[  185.429089][ T8868]  ? ocfs2_init_acl+0x2f9/0x720
[  185.429107][ T8868]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  185.429126][ T8868]  down_read+0x46/0x2e0
[  185.429146][ T8868]  ? ocfs2_init_acl+0x2f9/0x720
[  185.429161][ T8868]  ocfs2_init_acl+0x2f9/0x720
[  185.429176][ T8868]  ? ocfs2_mknod_locked+0x148/0x250
[  185.429192][ T8868]  ? __pfx_ocfs2_init_acl+0x10/0x10
[  185.429206][ T8868]  ? dquot_alloc_inode+0x216/0xa50
[  185.429221][ T8868]  ? ocfs2_block_signals+0x94/0xe0
[  185.429242][ T8868]  ? __pfx_ocfs2_block_signals+0x10/0x10
[  185.429264][ T8868]  ? ocfs2_init_security_get+0x139/0x1a0
[  185.429282][ T8868]  ocfs2_mknod+0x1321/0x2050
[  185.429300][ T8868]  ? __pfx_ocfs2_mknod+0x10/0x10
[  185.429312][ T8868]  ? __pfx_ocfs2_find_entry+0x10/0x10
[  185.429328][ T8868]  ? __lock_acquire+0xab9/0xd20
[  185.429353][ T8868]  ? look_up_lock_class+0x74/0x170
[  185.429373][ T8868]  ? register_lock_class+0x51/0x320
[  185.429394][ T8868]  ? __lock_acquire+0xab9/0xd20
[  185.429415][ T8868]  ? __lock_acquire+0xab9/0xd20
[  185.429437][ T8868]  ? do_raw_spin_lock+0x121/0x290
[  185.429457][ T8868]  ? do_raw_spin_unlock+0x4d/0x240
[  185.429476][ T8868]  ? rcu_is_watching+0x15/0xb0
[  185.429490][ T8868]  ? ocfs2_lookup+0x5b9/0x9b0
[  185.429505][ T8868]  ocfs2_create+0x1a5/0x440
[  185.429518][ T8868]  ? __pfx_ocfs2_lookup+0x10/0x10
[  185.429530][ T8868]  ? from_kgid+0x1b0/0x650
[  185.429550][ T8868]  ? __pfx_ocfs2_create+0x10/0x10
[  185.429561][ T8868]  ? HAS_UNMAPPED_ID+0x11a/0x180
[  185.429576][ T8868]  ? inode_permission+0x149/0x470
[  185.429588][ T8868]  ? __pfx_ocfs2_permission+0x10/0x10
[  185.429608][ T8868]  ? bpf_lsm_inode_create+0x9/0x20
[  185.429623][ T8868]  ? __pfx_ocfs2_create+0x10/0x10
[  185.429635][ T8868]  path_openat+0x14f4/0x3830
[  185.429651][ T8868]  ? arch_stack_walk+0xfc/0x150
[  185.429678][ T8868]  ? __pfx_path_openat+0x10/0x10
[  185.429693][ T8868]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.429713][ T8868]  do_filp_open+0x1fa/0x410
[  185.429729][ T8868]  ? __lock_acquire+0xab9/0xd20
[  185.429749][ T8868]  ? __pfx_do_filp_open+0x10/0x10
[  185.429772][ T8868]  ? _raw_spin_unlock+0x28/0x50
[  185.429788][ T8868]  ? alloc_fd+0x64c/0x6c0
[  185.429811][ T8868]  do_sys_openat2+0x121/0x1c0
[  185.429826][ T8868]  ? __se_sys_futex+0x36f/0x400
[  185.429843][ T8868]  ? __pfx_do_sys_openat2+0x10/0x10
[  185.429859][ T8868]  ? rcu_is_watching+0x15/0xb0
[  185.429874][ T8868]  __x64_sys_openat+0x138/0x170
[  185.429890][ T8868]  do_syscall_64+0xfa/0x3b0
[  185.429909][ T8868]  ? lockdep_hardirqs_on+0x9c/0x150
[  185.429926][ T8868]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.429947][ T8868]  ? exc_page_fault+0x9f/0xf0
[  185.429996][ T8868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.430012][ T8868] RIP: 0033:0x7f80adf8ebe9
[  185.430028][ T8868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  185.430042][ T8868] RSP: 002b:00007f80aee7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  185.430058][ T8868] RAX: ffffffffffffffda RBX: 00007f80ae1b5fa0 RCX: 00007f80adf8ebe9
[  185.430069][ T8868] RDX: 000000000000275a RSI: 0000200000000180 RDI: ffffffffffffff9c
[  185.430079][ T8868] RBP: 00007f80ae011e19 R08: 0000000000000000 R09: 0000000000000000
[  185.430088][ T8868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  185.430097][ T8868] R13: 00007f80ae1b6038 R14: 00007f80ae1b5fa0 R15: 00007ffe9e163b48
[  185.430113][ T8868]  </TASK>
[  185.600336][   T33] audit: type=1326 audit(1755246954.352:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8880 comm="syz.0.1141" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c238ebe9 code=0x7ffc0000
[  185.609888][   T33] audit: type=1326 audit(1755246954.352:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8880 comm="syz.0.1141" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c238ebe9 code=0x7ffc0000
[  185.620354][   T33] audit: type=1326 audit(1755246954.382:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8880 comm="syz.0.1141" exe="/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f11c238ebe9 code=0x7ffc0000
[  185.628695][   T33] audit: type=1326 audit(1755246954.382:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8880 comm="syz.0.1141" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c238ebe9 code=0x7ffc0000
[  185.636695][   T33] audit: type=1326 audit(1755246954.382:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8880 comm="syz.0.1141" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c238ebe9 code=0x7ffc0000
[  185.644452][   T33] audit: type=1326 audit(1755246954.382:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8880 comm="syz.0.1141" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f11c238ebe9 code=0x7ffc0000
[  185.682449][ T7105] ocfs2: Unmounting device (7,3) on (node local)
[  190.864973][ T5236] Bluetooth: hci0: command 0x0406 tx timeout
[  193.917346][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  193.919881][ T1365] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
08:35:54  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b44d4b RBX=1ffff11026cc7f61 RCX=ffff88801f5ab980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000653f7e0 RSP=ffffc9000653f658
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81bfab98 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055557d134808 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f11c2412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000026bd RDI=00000000000026be RBP=00000000000003f8 RSP=ffffc900069d68f0
R8 =ffff888021820237 R9 =1ffff11004304046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98f5 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f80aee7e6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30e1dff8 CR3=000000011eaf2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8133c57e ffffffff8133c57e
XMM02=00007f3a09587498 ffffffff8133c57e XMM03=00007f3a095874a8 00007f3a095874a0
XMM04=00007f3a0a0ed100 00007f3a09587460 XMM05=00007f3a09587478 00007f3a095874c0
XMM06=00007f3a095874b8 00007f3a095874b0 XMM07=00007f3a095874a8 00007f3a095874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f3a09412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
