last executing test programs:

5m4.416950671s ago: executing program 0 (id=169):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90)
stat(0x0, 0x0)

5m4.291252658s ago: executing program 0 (id=171):
mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000003c0)=0x2000000006, 0x5966, 0x0)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000400)=0x1, 0x7, 0x3)

5m4.288770333s ago: executing program 0 (id=173):
r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x335}, &(0x7f0000000080)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x12, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x400000, 0x40, 0x29}, &(0x7f0000000100)='./file0\x00', 0x30, 0x0, 0x12345})
io_uring_enter(r0, 0x47ba, 0xda2a, 0x62, 0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x220, 0x2f0, 0xfeffffff, 0x2f0, 0x220, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)

5m4.048799558s ago: executing program 0 (id=176):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(0x0, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)

5m4.046910497s ago: executing program 0 (id=177):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x14d802, 0x0)
r3 = dup(r2)
r4 = open(&(0x7f0000000240)='./file1\x00', 0x183142, 0x2f)
ftruncate(r4, 0x2007ffc)
sendfile(r3, r4, 0x0, 0x800000009)

5m3.81361097s ago: executing program 0 (id=178):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)

5m3.700809171s ago: executing program 32 (id=178):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)

4m23.119967071s ago: executing program 2 (id=612):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0xc0d6, &(0x7f0000000140)={[{@noload}, {@grpquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@lazytime}, {@norecovery}, {@inlinecrypt}, {@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x467, &(0x7f0000000400)="$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")

4m23.002902235s ago: executing program 2 (id=615):
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
msgsnd(0x0, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0)

4m22.771277347s ago: executing program 2 (id=616):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e000000000000000000200003801c000380"], 0x4c}}, 0x0)

4m22.584988929s ago: executing program 2 (id=618):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000003c0)={[{@errors_remount}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0x8c1}}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@errors_continue}, {@keep_last_dots}, {@errors_remount}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@namecase}]}, 0x1, 0x1531, &(0x7f0000001f80)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)

4m22.410725336s ago: executing program 2 (id=619):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0186e86, 0x0)

4m22.22499552s ago: executing program 2 (id=622):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x803, 0x81)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0})

4m22.027255386s ago: executing program 33 (id=622):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x803, 0x81)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0})

3m43.576993127s ago: executing program 3 (id=1008):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000300), 0x2)
r1 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3)
fcntl$addseals(r1, 0x409, 0x7)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)={0x1, 0x2, [{r1, 0x0, 0x100a000}, {r1, 0x0, 0x2000, 0x1000}]})

3m43.445500024s ago: executing program 3 (id=1009):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000004f40)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000004fc0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1})

3m43.385172244s ago: executing program 3 (id=1010):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0xc)
r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, r4, 0x0, 0x0, 0xffffffffffffffff, 0x1400})
io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0)

3m42.753344749s ago: executing program 3 (id=1011):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000040)='./file1\x00', 0xc00, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESOCT, @ANYRES8, @ANYRES32=0x0, @ANYRESOCT, @ANYRES8, @ANYRES16=0x0, @ANYRESOCT=0x0], 0x1, 0x6207, &(0x7f0000012500)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

3m42.38072338s ago: executing program 3 (id=1015):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0xb1cef3e40bebe696, 0xffffffff, '\x00', @p_u32=0x0}})

3m41.803787741s ago: executing program 3 (id=1023):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x0, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_fd={0x3, 0x2, 0x4, 0x0, 0x0, {}, {0x4, 0x3, 0x3, 0x2, 0x5, 0x4, "f1b29acf"}, 0x7f, 0x4, {0x0}, 0x8})

3m41.690448139s ago: executing program 34 (id=1023):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x0, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_fd={0x3, 0x2, 0x4, 0x0, 0x0, {}, {0x4, 0x3, 0x3, 0x2, 0x5, 0x4, "f1b29acf"}, 0x7f, 0x4, {0x0}, 0x8})

2.795562042s ago: executing program 1 (id=3727):
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES32, @ANYRES8, @ANYRES32, @ANYRES32, @ANYRES16, @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRESDEC, @ANYRESOCT=0x0, @ANYBLOB="96baa9bd293f32a4be21fdffc77440a9d9c7e16c6c51d63e8ba964b01e06c4ad80d5ba81bf754b2f63dd49ffac2f96d2be9ab12be13dc3bd59217be281d895795a047ce3258eb171bd1200000000000000a112eb61edbb22074fb2464c2c040aa73dc1cccff5291d669049a8e13b373c0960d91ad00e2765cf73b478067d073524b1515e0cf674b54ab1945a77534ca0c321c00bc82e1eec0d6ea55eab950800b5c12b71f10f76", @ANYRESOCT, @ANYRES16], 0x1, 0x1b7, &(0x7f0000000780)="$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")

2.423634902s ago: executing program 1 (id=3728):
syz_usb_connect(0x5, 0x3f, &(0x7f0000000640)={{0x12, 0x1, 0x201, 0x6d, 0x44, 0x4b, 0x8, 0x424, 0x9730, 0x5016, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x2, 0x1d, 0x60, 0x3, [{{0x9, 0x4, 0xa4, 0xb, 0x3, 0x96, 0xb4, 0x3, 0x2, [], [{{0x9, 0x5, 0xe, 0x10, 0x10, 0xfb, 0x6, 0x8}}, {{0x9, 0x5, 0xf, 0x3, 0x400, 0x3, 0x7f, 0x6}}, {{0x9, 0x5, 0x7, 0x1, 0x200, 0xf, 0xa, 0x4}}]}}]}}]}}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0})

2.224706377s ago: executing program 5 (id=3732):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbfb, {0x2, 0x20, 0x56, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})

2.15616843s ago: executing program 5 (id=3734):
syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000005a40)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {}, {@compress_force}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x67, 0x2d, 0x33, 0x74, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000f3c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x44042, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x2002, 0x0)
sendfile(r0, r2, 0x0, 0x20fffe82)
preadv2(0xffffffffffffffff, &(0x7f0000002440)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, 0x2, 0x7, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000380)={{}, 0x0, 0x8, @inherit={0x0, 0x0}, @name="6ece775074fb61503da5f75e6b00d498a5c67fa268f0711dbc13af8771294e6933f575fd4904fae87df4670dcb074e97940fe1775d524e93c0028b0c39fda9382ac2b5211b8aece7deaefd7c1f1171d33dcd66c7735b063a59af7d9fdb0cc489be14f37fcb39581931dbf5db565674db689c88aeceeff13062617e2e5db26e79dad7d981c059e4f193db24bc1add40dfc4e67831ce5d99741d0680d61c683459b461d8427fa90b8d542485c0131d6a824ea7c8e61be547ed8d01339a90c9ee88c23ad7f9b7d212ae74cc3c24ccbd9537301b3033e1addbe4be4cd133af14e5061db8841adc8f04e2fd3f1536317f33d5b9a61cba51c678bdf1ec5fc7e1144842229ae84990f256846dedeb1cba64ce1afdf96cf4959cc0d2738919ddc5ea0fb30ec2f0079d05732642f35e7b9394aff3640d9ee64078cdae4857fc19215819d7ec31e506394b7cd039e8e4ed76b2d2392e3f20ef3fdd852fdcc326c5da8dfcd980abe0c06325f142528208fe83e3861b17cae43564a5336ef59aad1c5ad8ef7c5346756719799af2f7bdf2b9fd41b5ed1bf160b6f16cb68449c9fbc7f52c3091dbdebef0c6ccb952ff355567fd5c141ef6d57fe059d23ee3e7d495b26676bf40447df9201d0a7119d871dee4b2c09386dd3ec2bbebb660c73288f9fe179f453e7ca76c1c367cc67d15a23933b7b8035e55d6c5dafa5177a084a1b00e5c702eb27d6f260fd795aca41264d07037f375afac30bb8aae49b0b701c0987e24bbd8d8cbab11bfa7805884b26f001d79137017e81f1c683dfa800b31485e1b4d38f0e277f2e525b35676522c59ca47feb1ab6e2c82f423f1ec9940e0e24c460dded04107a69095eaa02dc3d5d32192c6ae25a19f004e49b0d543ae55020a7a27d24db9108dc82e3a5e8eb0625ca87824a970848b35bdd3b9680d5af482ca2cb7a77ae0afd1127c40de54953347451bd966ff6d5e41a6324bcd0612027cd43074c1e5d233e9554a1ab1eb6fbfdcafec08db5128ddcd2bc70f0f3bd37b569f3b9621396d5eb7bf8214cfa7f4a3564414dc587e0a25f5d83a7ad0f1e3839679559ceb12b7bf2e19448306dfccc50961c42cc7f37d59465541f41e8239a646fe6039257c38e9842a735dc1f824833ee5643cb9f308f3fbdef36d836516d083a3af325e198ecf6d39f9f742dd7e4b477f909a800eaa8993ac36ec2c13683f8c20ac5c47f3ce0814cc84154770062eccff07aadcf8ce3a749b2631ab72a14deeb1e77dd56234648f07ec4e23fc86a2b47d9d0ed7c5b2c7af7409a7080cd7085f76cad13e815db6713cf71e35384743d87040df8ae0a920d0c05259c60d3158590d1fa8d53f80193f020a573d0f59950b7a5814fadcfd9d181fb9f04d1fe10a6cf90ac4f857a56e53354441aa0132906d109d7d4c0e555fbf6db0efcb53f1bd9e1d39410ce959e9e3e59f073323f019d8fd76b1b00a088d3f0e7216c2eac6a05abbc83aec0838fa5367734c65385bab842ab121cdac5976ab3f1529be882aad7d3dfd0482f86fb06018157033007ab90ab65b6836bd6f659547344b6fe3611ffc55db00c9338c19afa384cc98d125cc0ffc579fd1f6a0ffc49e7bcec5fe72c7c64a23c382b5c3794c3342a68a2f25114d0c2afaedec4a5381f845e7cf2f2dce01cfcad6feba3da4acd5285f1d5b3930d3a7757b7dacade0ab942de3b776192a901f7e1fafcce84fb165abf28789e3057aecd3cecd77df806888b2df9bec655c9f85a22a62b4ed8a66465a187efe823db2e51eb3357de3da2b26eead4e04f6b55b9ac845f72dbe26723bae8f4360863802b9f7a0407a489b8f15316c0d46266cee09723797823df2e38929240231a9a34f46c4a48c14e505251b76828739b4b14bc0c1d35a3a0a11352e54e4d1b22c80f1911955828c1d65899a93e561178411325f53477aee7c9d7ed9ca3a2b3ba86a81c082a3f4468dd36ff198a34ed2776bca70367d1b09e0242937fc3cc6ea82b0ad2b87ddb78ba9bf573fa0c60ba100a8b4fd3f89147bbcb88c7af087c54d7b744e91694be5a843d151e3c15472859ac5508003bc6f4bb5c1ac2fa97453bea5e52998c95b177e065cead797566529d6d1b66169a93001db6e8854d7d5db218e19d93d9479f0147b9dff6fee62245607e1b37cb65c3492345417224424e59648cf269b795325a04d8ee7c495749c75b9e0462262cce0c193889d9a6d6e7c67dc31e7461e6c14941f56129c7a7743e33c169d590bbdfc3282393a6a5c2184b9ca22c2e83d0ee2b09aca7ee61d2037c36fcb9e2bd2263fdc75014a29a1c60852305d0fa9110351827bbbacf0f08d25f1dc03264afb6eab2c40e03ae33dfddca97dfb967c910329757f8b643e61bac5f197ffedaa2f09d6273c09d86dafd4c6865b0a5f0f66754683e051ffc0c65f6b266c77ca2a92337e71c2f274d5af5a259851a9c2a820d4b30f4a796028fe6f73c6856b304d5b4c10dbf7528f2d7d22868b3a24dee05c57967b545c67cd3ca60509f08fe9a41493342db9287227ce0bbe5e86da8928f83409e172dfe84406fc9bffc0d8eea5bb291f0deffef493b71cfe7f7a33cc19f12f43bf42fb11507a085ae1c37bb78a718021021f869c6cb5f975c521eefbbb0d403bdf0dae5f2918ab267b6f25bc8b2d343ba0d70c062c756180befb728495cc13a0887805167b96af0d2ebf1f6681e0a8858f755f45d514f3bfcf952b49eaee8882913266fbb166c437905bc8bb574fec3e3486b5bab922326cf27289910700b295f48cc6a36b5211ec4b978d6ab256e063c3215f2bcafbf19b1391ee384ccd86790c4432e40c79fe2c9c031c1af9253cde933473b15c65c55af5763397b72b13d8b99b4f9230f389c38734ef221d6970d25234e1d7575501f3807d3e2053eff93b77fe0a0c337b40915924d75a8ce5677fbea21f0f92b859bb40e4e970b700d2a7266adad68cea1d45d451309436c222311e2ecb50e825562ae8fb9db94c0461959c9f1ef58acfd94f7ca7d56bb21741d36f3424d1a44efd416e4a96c135de53d4892fbfd09ba112d6399f4295e761acd5341015a084e91217e960a66685eef53ca5e587fbc04d58d7fbe5328555a8ebba05ca6dd158d2ea7e02b21eb1f865319cd9ff059cd7d95af5dcbd10b5632e408f0bf5d6ef45325b631ca8a7377cb5a863df7fcd4f1c5721e37716b83934bb79b2baec7e15210a55a7a9989998abfd4fb15e1f99b213162bb6f2f564ddc7c1013a14c273bc4105ba101e9194ff8893b0f4b3a434a19db7c02860f84868b2866d6bfe6a73e0bb8da1d8e303e67f7b619977c93803480d012b2041ac1537cc0410ae9f78f90753ae71a87ff93011f18d589e867b95988c8f2b5f1a78e441cddf388e4ec51145c3968e38d55730fd63e62023454e1c68d7a1eafc0147393b7c5efe61c388235288b79f92506d6b5b8616a56c182f21651a8d44f4da651731d7050ff75b2b82f4b0b9c21ef8eae1ed9295e3cac7b42a97e903f865ee276ea9df2ca1d273e5053212385a18f14e42a68177cec807110c5186f53f89223c0f2818243b37d83ec4a3641017f078a360a327bc3e0ae421e82f7be542e5037253f1e8973c833813d952d446831d297b866cde7957f6c6db66de0f52f105a7acfc465568f6731612d0fe9d8e52d4ba4f31953538ff7ab0304e7f59b9ba3edcff1de0a5b73f2cac3dea5fadd25c21977443cd62e0dcc949ee0b2afbdd71f8dc6f1c4e7b6160abd26752eded8e83acdd59983730c71baf8c58d145c10427e75cadb2bde3cb66dfc6655daf21315c2ae1ebb7f13b4f0524cb9d5eaf3da5fd74e48101a21ea948c39be3800a8b70b72def781e6335389aac967a200dc48a093fc6ce559305d46852feeb85cee5e74466b084e9a38833012a0132b6a0d3240f94b734e329082e4c02d91db1913b980c29eac9a294160d61e11d603a85f0bde712d5ab29b64b137644d552f240026664449721244c56193315833db0b12b2f3c5fda3a30ea9a1f0862ec9dcbab116ab60eae4ee378fcfecbd6f2e462ed56be72caeb72886550afebba662f466f8aaf6164d67598c8ddf4689d4c45effe76d9894e17fb520a8e631af18bbcab4c30b5ed908a706ea5e12b5614500609efa4aeb6e3a525c14abe9e32191900388dd362dc0aea432c2d1e7c423018c9ad6bb14d519dd7f72284f54cfda49dc5a5b25dae4e7c6d1493f32f7747ce3f317b0c9ab7d0d2a5d4b9ec436dc6e972a8bfe4a353c3df97f6ccb87a25f7aea11b545c6fcfe446adeac066028694c5b225853e5872b76001238f6a3fad9a6432fb83cb1e808ce78e01fa799a2605bd0d9f55eb3fb3dbe0fcb698bc4c2edd3df8ffe9db44facc526c06cb0479f8eba7fa886fc2ea85482eae1ce0b26168e81074f8ef51a051f4d84abd77fc9d3835a415b788c7fd6daeea6d4b15b0218fb9d0db4f5fc255cc9464d62a67805f1a78a1b12597c444f9f6b2c99e673084e55ae1ccf29bbb9f21bb953c86b7c30dd89e6c262105a67ef6827033d6bbf783bd18e24a687f92478da0b90a0723d1e45da9ef6d03295b3e0d6fe8111bc48465d1154693a8f0a08fcfa62bec89630e5590221a35911e699b1d63ae2b3d0ceab35e1d534144ee80e8cb3a1f8c4ab3af84e005bd13feca768eccfac53165dbfcb507aa606311d5c2e355e69ce103c6ae1388713647b2060e3cd6ad7c5fad652fb135d29c372ead197648f3a1af524a9e90b581dc297dcecec389607dd755aa53377a22edd9b02942e7f91900629145e8e0ad6bc12d25892beaad7adea2ec518e09ff1a53044f3c7985e5808496970261c397d38f22cd906129b9112c86fb76be99932ffbde61d7c3f38059d1ecfa8801508d48467f979dac25562f69e420ffb4c2d9ae9151890e5c65f0c16de3bb3b0ca66e777f1191d80a41a8f1762fa2cf01c54dfbf5345d019f34c75b86e4632552e87fc2a1033ff520557c5f309c5a2e443aaba473203e81c218510108d4ed88ca88e57737537ad1c1e2c5d62562b877d12cc7101e86c16a7cc3df6ad1bc54ead048b2ac472508c3337032d254b075f6f6255b56b067c3bfa0c60da853511899a89d781e4444f612506c39288a987b0bc4c4886322f87dda3d9ea7cf0e6797bbacd9cc3fd5125fef81b59f591b23f2fc85967b129ebdb0f1a8ab779409e09c66ecb40fbc27f3593a7b2c60c67d3a2f534e90a1d5cb8e0ba9d45bf50c7d3251ffefb6853a2a844e24c1493bae07eecdacea6a389dbc3e6ee93efe1a2f7a265b1c9cedf87ec348d9510cca14db2eb9f96b5d9b603e52ce70532dd6d50dc8a096222f1b3eeeac1bcc2145992b7a25244b94aa3742618e939ffa944211129cb7531e3c1dd918cb9426e5ffb99ac234df8fe40c88a1c8c29fd30c184f837ee12c868a5c2fd5b67e21af1ca88932c87bec80d94fa25ef940ef15a85202165dbedd14844b8647758b41852d5bbe29bbd4915d024d07bacb5f883377fa1ca759b4d44c2a8fa5c9457721c3f3690a986c0173439371b4832ca2e6e821d3d79b3b3b1eeaa0100d07b15951c4bf2e7e59f3f4b646cc182187abf456a073b1c4200275cf84cde303117eff495cda6c5dbb73e3d2dca5376ad87314dbad910bba633b119933b68d98d6facae1c89ad3ec78f9d16778e9269c074b82138452d6f24a9872c5bb5b2ef56eef60205fd17ce7e70294c317"})

1.436568344s ago: executing program 4 (id=3747):
unshare(0x40600)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='sched\x00')
lseek(r0, 0x0, 0x1)

1.379626715s ago: executing program 4 (id=3748):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x40000103, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10138, 0x2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50)
r4 = socket$inet6(0xa, 0x1, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

1.27602826s ago: executing program 5 (id=3749):
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0)={[{@usrquota}, {@acl}]}, 0xfe, 0x244, &(0x7f0000000400)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x2a)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15)
pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

860.871175ms ago: executing program 1 (id=3750):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
sendto$inet(r0, &(0x7f00000007c0)="25d7fe", 0x3, 0xe044, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

806.826127ms ago: executing program 1 (id=3751):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900070006990300000004000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0)

730.383188ms ago: executing program 1 (id=3752):
chdir(&(0x7f0000000540)='./cgroup\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000040)=@reiserfs_2={0x8, 0xfe, {0xb}}, 0x55117e)

637.143869ms ago: executing program 1 (id=3753):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x20008d0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3fGeefeYw+8SJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAsh9HX+7wUAAAAAAAAAAAAAAAAAAIC/o833/3PRiSbv/48lx5EW9dff6vwY6ZyJt6+OXRgcSvZ/j7blv54k/XKuK/Q32fc9u//7uUz95vu/b+9ntxrja/TbF6J4IHUexwMDIXyTbPx+KjoSl8pLlVdvlZcXZvdsGM+sdPzru/enopNs6N9u/Ecz7Xd+////bruaquc39+4Se66l49/Vsty3n0Ztxf98pt5+xJ/dS8e/u5bWu7XASH0CqMb/8+6d4z+Wab9T8T8eQshF1bHmUjNAdQ1TTW+1XiEtHf9DtbTU1Jn8I1vd/79n4n8h0/5Bzf8r2Q8imkrH/1+1tJ5Uic37vz/e+f6/mGn/IOJfHf+Kz/+2pON/uJ7YnSpS+0+2O/+PZ9rvVPyvx8k4j0epK2A1qqe3+r460tLx79mWv/n8F7e1/ruUqb9fz3+NfhvPf43p/+Wo/vxHc+n497Ys1+79P5Gp1+n5f6S2/mO30vE/UktLr53rX8rZbvwnM+13Kv61VUlPI/6b88kfh+vpX1v/tSUd/3/XE+OtJVZqP2vrv2jn9f/lTPsHsf6rjn8l7myvz4t0/I+2LFeN/w9tfP5fydTrfPxDGLTW37V0/I+1LFe7/3t2jv9Upl6n4/9SJxsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAaMJse+EMUDqfM4HhgI4XxyfiociaYLs/npUnnmo6UQxpL0XDgR3S6Vpwul/NxCebaYL5RK5ZkQLiT5J0NPtFQqV/LzhbsXN9rqje4UC4uV6WKhEkIYT9L/H4412pqeq8wX7oYQLm3k/ScuL969U1jIz84tvjk4ODgYJjbG0B8VP6kUFyr13uu5IUxu1O2Ltgyuln15YyxHow/Ly4sLhVIt/cqWOqXyTKG0pc5UkvdF6I8qi8sLM4VKMV8q3270d5BGkuPYxLX3rl0Z2pZ/M6ofR/d3WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8RY+G3/gyhNBdP4tDCCONX6Jm5R8+Lp7NP526vzZ8enL1wdqTVuUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgT3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS8coDQRRGIDfjIXaeQyrZbezXVFEC1cET6DH8DB6FC/hHVKkSJsiBJJZCJtd2Capvq95MD8z78E8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJ6n9+7jrW4iUlxtLiP+vv4Xh/lLqT/34/cvzjAjp/P82j081k3593SU35WjZZt36Xr1/Rkjtfc72JPhPu31fa4n55rat6n5+r43kXIVEW3Jb1POVTXvLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAtO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WUfRtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//+UFHyA=")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x81)
fallocate(r0, 0x0, 0x0, 0x1000f4)
open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x10)
open(&(0x7f00000001c0)='./bus\x00', 0x101000, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x4}}, 0x20)
r1 = open(&(0x7f00000001c0)='./file1\x00', 0x145142, 0xc1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
copy_file_range(r2, 0x0, r1, 0x0, 0xfffffbffa003e458, 0x700000000000000)
creat(&(0x7f00000000c0)='./bus\x00', 0x182)

509.186472ms ago: executing program 4 (id=3754):
pipe2$9p(&(0x7f0000000e80), 0x800)
r0 = syz_io_uring_setup(0x126b, &(0x7f00000006c0)={0x0, 0x72de}, &(0x7f0000000140), &(0x7f0000000780))
lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000180)={{}, {}, [], {}, [], {0x10, 0x7}}, 0x24, 0x1)
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x20)

279.443457ms ago: executing program 4 (id=3755):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x4000, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x3, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xf}, [@TCA_NETEM_CORR={0x10, 0x1, {0x1c000, 0x4, 0xbb1}}]}}}]}, 0x5c}}, 0x0)

241.217415ms ago: executing program 5 (id=3756):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x38, r1, 0x1, 0x0, 0x0, {0x9}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x5, 0x1}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)

184.652452ms ago: executing program 4 (id=3757):
pipe(&(0x7f0000000680)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
writev(r1, &(0x7f0000000200)=[{0x0}, {&(0x7f00000006c0)="e6", 0xfdef}], 0x2)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000880)="1e253ec931cc2734d5462725cddf6374995c82eceeca917f107e897432b51de03d3abf33ccfe22c152a693d1c169216b00fc6f4fe59798df24f443d7d981499940ca3d0e7b639a9c5699f40130615e8699408a777f5e92eb4179005efedbc946304666375d5d574e27aed6dce365611418c626ce7655ab5a0fe9e00a99f9ea1e8bfb3e5a76e1a34b33f767108f528b26b97ee08cb6706031454e8c6835cf077a2b0015e7a5ad84006b8ee7e416f7fadd4f3a59d9b8bca7bbdc3202f972ed42f3bff0981ce8f99ed93be4171d0a42feedebc274526115293e6deba184062ef3be97711af06d6abf576bf08cb099c6181380b3aa2b48a8b254090a6a2c2cdb37b69d975af91d344c646aadc5ebdc26e1b652eb6b0363b98b03a7b7db3600b258ba87fe77ff18a3dbd2bdd24f8d7961602ced3562dce471a4f3d3397900e1c8629da04127ecd8b24bbf75052fa4b84d3a52c31f0d541e813c4ebb95e9067b452fa13314033dbe8e726ad3b14e7a29fcb3215932d2269b2bf8792c847e4542c6be4f9d1d6ff235dd9df3508b26566f0e193811a7f0a8cee12ca6bb11f69dc84b3e8e0c7f6beefee4af3571b8c83f52e2d6ebf04ed1d687fafc13174d428756aefb7c7b75fa6f50b7a169e52e3a13388bc3c6066a967684da965877e69c16e60ae8fd4c437e9f6cafc979502895bb51c48f17a5692204a17760f719911b33d07436f5b976637d405ddb214fa7452efe0892aa8715", 0x212}], 0x1)
readv(r0, &(0x7f0000000400)=[{&(0x7f0000003600)=""/4096, 0x1000}], 0x1)

58.283734ms ago: executing program 5 (id=3758):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

240.835µs ago: executing program 4 (id=3759):
r0 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x1)
prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\xc0\a\xb0\xfd\xa3\x1c\n\x17\x1b\xfa\x81 \xdd!\xd9\xeb\x1d\nW\xc1\x81p\x92\nH\xb0i\x03\xbdv\xb4<\xb3\x7f/E+\x12\xf9\x1c\xf3\xad\x80\x9dxa\xbf\xa2\t\xee\xdc\xae\x19d\xa9\xb5\x8f\xb1\xfa\xb6)\v\xb8\xa7\xb1\xf0\xb7ysd\xe15\b\xe9\x91\xb6\xec\x8f\x922]\xe3\x0ez\xcd\x04\r\xb0\xe8\xff\xcd\xf8\xb6>\xe2\xa5\x04\xa9\v\x0f\xf2A\xf2\xf5\xf2\xd2\x1a\t\xf9R\xc6\xddO')
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
read$FUSE(r1, &(0x7f0000003340)={0x2020}, 0x2020)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={<r2=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x43, r2})
r3 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3e, &(0x7f0000000000)=0xfffffffe, 0x4)
ioctl(r3, 0x8916, &(0x7f0000000000))
ioctl(r3, 0x8936, &(0x7f0000000000))

0s ago: executing program 5 (id=3760):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x78, 0x1000, 0xc, 0x288}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000600)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}})
io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0)

kernel console output (not intermixed with test programs):

10500] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  224.656816][ T8576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.675886][T10505] orangefs_devreq_open: device cannot be opened in blocking mode
[  225.033395][T10519] loop1: detected capacity change from 0 to 32768
[  225.112294][T10519] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  225.112314][T10519]   allowing incompatible features above 0.0: (unknown version)
[  225.112322][T10519]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  225.130404][T10519] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  225.133914][T10519] bcachefs (loop1): initializing new filesystem
[  225.143327][T10519] bcachefs (loop1): going read-write
[  225.152151][T10519] bcachefs (loop1): marking superblocks
[  225.160780][T10519] bcachefs (loop1): initializing freespace
[  225.166591][T10519] bcachefs (loop1): done initializing freespace
[  225.172555][T10519] bcachefs (loop1): reading snapshots table
[  225.175293][T10519] bcachefs (loop1): reading snapshots done
[  225.205957][T10519] bcachefs (loop1): done starting filesystem
[  226.789204][T10519] syz.1.1707 (10519) used greatest stack depth: 15864 bytes left
[  226.813407][ T5940] bcachefs (loop1): shutting down
[  226.817621][ T5940] bcachefs (loop1): going read-only
[  226.819344][ T5940] bcachefs (loop1): finished waiting for writes to stop
[  226.823912][ T5940] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[  226.847203][ T5940] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 4
[  226.851158][ T5940] bcachefs (loop1): clean shutdown complete, journal seq 5
[  226.853745][ T5940] bcachefs (loop1): marking filesystem clean
[  226.880234][ T5940] bcachefs (loop1): shutdown complete
[  226.883839][T10548] netlink: 'syz.4.1715': attribute type 8 has an invalid length.
[  227.314513][ T5938] Bluetooth: hci1: unexpected cc 0x042d length: 63 > 7
[  227.856748][   T33] audit: type=1326 audit(1755131785.238:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10570 comm="syz.4.1726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c27b8ebe9 code=0x7ffc0000
[  227.898209][   T33] audit: type=1326 audit(1755131785.238:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10570 comm="syz.4.1726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c27b8ebe9 code=0x7ffc0000
[  227.938817][   T33] audit: type=1326 audit(1755131785.238:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10570 comm="syz.4.1726" exe="/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f9c27b8ebe9 code=0x7ffc0000
[  227.974872][   T33] audit: type=1326 audit(1755131785.238:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10570 comm="syz.4.1726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c27b8ebe9 code=0x7ffc0000
[  228.003837][   T33] audit: type=1326 audit(1755131785.238:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10570 comm="syz.4.1726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c27b8ebe9 code=0x7ffc0000
[  228.218822][T10587] netlink: 'syz.1.1733': attribute type 1 has an invalid length.
[  228.259637][T10592] openvswitch: netlink: IP tunnel dst address not specified
[  228.573997][T10613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1745'.
[  228.590381][T10613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1745'.
[  228.606329][ T5938] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  228.609266][ T5938] Bluetooth: hci1: Injecting HCI hardware error event
[  228.613113][ T5943] Bluetooth: hci1: hardware error 0x00
[  228.769216][T10620] loop5: detected capacity change from 0 to 16
[  228.782158][T10620] erofs (device loop5): mounted with root inode @ nid 36.
[  229.004634][T10628] loop5: detected capacity change from 0 to 256
[  229.039497][T10628] FAT-fs (loop5): Directory bread(block 64) failed
[  229.048416][T10628] FAT-fs (loop5): Directory bread(block 65) failed
[  229.057663][T10628] FAT-fs (loop5): Directory bread(block 66) failed
[  229.063302][T10628] FAT-fs (loop5): Directory bread(block 67) failed
[  229.070020][T10628] FAT-fs (loop5): Directory bread(block 68) failed
[  229.074641][T10628] FAT-fs (loop5): Directory bread(block 69) failed
[  229.081134][T10628] FAT-fs (loop5): Directory bread(block 70) failed
[  229.090009][T10628] FAT-fs (loop5): Directory bread(block 71) failed
[  229.096069][T10628] FAT-fs (loop5): Directory bread(block 72) failed
[  229.101787][T10628] FAT-fs (loop5): Directory bread(block 73) failed
[  229.134399][   T33] audit: type=1800 audit(1755131786.508:37): pid=10628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1751" name="bus" dev="loop5" ino=1048666 res=0 errno=0
[  229.393312][T10641] loop5: detected capacity change from 0 to 512
[  229.402392][T10641] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  229.446958][T10641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.452410][T10641] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  229.483728][T10641] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  229.533723][ T8576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.632921][T10657] loop1: detected capacity change from 0 to 8
[  229.648985][T10657] SQUASHFS error: lzo decompression failed, data probably corrupt
[  229.658950][T10657] SQUASHFS error: Failed to read block 0x28d: -5
[  229.661537][T10657] SQUASHFS error: Unable to read metadata cache entry [28b]
[  229.668143][T10657] SQUASHFS error: Unable to read inode 0x11f
[  230.284019][T10691] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  230.396816][T10693] loop5: detected capacity change from 0 to 2048
[  230.405266][T10693] EXT4-fs: Ignoring removed bh option
[  230.425575][ T5313] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  230.434576][T10693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  230.469648][ T8576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.594919][ T5313] usb 2-1: Using ep0 maxpacket: 32
[  230.606524][ T5313] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  230.611243][ T5313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  230.618968][ T5313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  230.624412][ T5313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  230.631857][ T5313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  230.642031][ T5313] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  230.646893][ T5313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.655062][ T5313] usb 2-1: Product: syz
[  230.656768][ T5313] usb 2-1: Manufacturer: syz
[  230.658684][ T5313] usb 2-1: SerialNumber: syz
[  230.666645][ T5313] usb 2-1: config 0 descriptor??
[  230.686788][ T5943] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  230.940209][T10728] loop5: detected capacity change from 0 to 256
[  230.960316][T10728] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d)
[  231.086768][ T5313] input input14: Device does not respond to id packet M
[  231.296174][ T5313] iforce 2-1:0.0: usb_submit_urb failed: -71
[  231.298587][ T5313] input input14: Device does not respond to id packet P
[  231.322658][ T5313] iforce 2-1:0.0: usb_submit_urb failed: -71
[  231.325812][ T5313] input input14: Device does not respond to id packet B
[  231.330235][ T5313] iforce 2-1:0.0: usb_submit_urb failed: -71
[  231.338737][ T5313] input input14: Device does not respond to id packet N
[  231.343053][ T5313] iforce 2-1:0.0: usb_submit_urb failed: -71
[  231.350033][ T5313] iforce 2-1:0.0: usb_submit_urb failed: -71
[  231.353169][ T5313] iforce 2-1:0.0: usb_submit_urb failed: -71
[  231.356181][ T5313] iforce 2-1:0.0: usb_submit_urb failed: -71
[  231.362004][ T5313] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input14
[  231.382660][ T5313] usb 2-1: USB disconnect, device number 24
[  232.107361][T10775] delete_channel: no stack
[  232.263687][T10788] IPv6: addrconf: prefix option has invalid lifetime
[  232.354227][T10794] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  232.358751][T10794] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  232.419635][T10798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1826'.
[  232.422701][T10798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1826'.
[  235.204154][T10849] loop1: detected capacity change from 0 to 512
[  235.222616][T10849] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  235.228557][T10849] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  235.232997][T10849] EXT4-fs (loop1): 1 truncate cleaned up
[  235.239233][T10849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.249903][T10849] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  235.268350][ T5940] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.562708][T10863] loop1: detected capacity change from 0 to 32768
[  235.591176][T10863] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  235.606494][T10863] XFS (loop1): Ending clean mount
[  235.659225][ T5940] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  235.838243][T10888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1861'.
[  235.841292][T10888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1861'.
[  236.119161][T10894] loop1: detected capacity change from 0 to 32768
[  236.124430][T10894] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1864 (10894)
[  236.138399][T10894] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  236.142750][T10894] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  236.222779][T10894] BTRFS info (device loop1): rebuilding free space tree
[  236.265960][T10894] BTRFS info (device loop1): disabling free space tree
[  236.268912][T10894] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  236.273051][T10894] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  236.452405][ T5940] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  236.670386][T10931] loop1: detected capacity change from 0 to 1024
[  236.713320][T10931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.726078][T10931] EXT4-fs error (device loop1): ext4_get_first_dir_block:3556: inode #11: comm syz.1.1874: directory missing '..'
[  236.749693][ T5940] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.816446][T10936] loop1: detected capacity change from 0 to 512
[  236.838600][T10936] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  236.842594][T10936] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  236.846985][T10936] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1875: Failed to acquire dquot type 1
[  236.854486][T10936] EXT4-fs (loop1): 1 truncate cleaned up
[  236.857999][T10936] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.862691][T10936] ext4 filesystem being mounted at /516/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  236.890053][ T5940] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.117535][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1882'.
[  237.193587][T10956] loop1: detected capacity change from 0 to 256
[  237.197597][T10956] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  237.446813][T10970] loop1: detected capacity change from 0 to 1024
[  237.514642][T10974] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3946
[  237.581977][T10978] loop1: detected capacity change from 0 to 256
[  237.692102][T10982] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  237.698352][T10982] Error validating options; rc = [-22]
[  237.833459][T10990] 9pnet: p9_errstr2errno: server reported unknown error @cF	S+
[  237.957706][T10993] loop1: detected capacity change from 0 to 8
[  238.405020][   T33] audit: type=1800 audit(1755131795.758:38): pid=11005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1906" name="/" dev="9p" ino=2 res=0 errno=0
[  238.512882][T11007] loop5: detected capacity change from 0 to 16
[  238.528521][T11007] erofs (device loop5): mounted with root inode @ nid 36.
[  238.688244][ T5943] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  238.693175][ T5943] CPU: 0 UID: 0 PID: 5943 Comm: kworker/u11:4 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  238.693190][ T5943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  238.693196][ T5943] Workqueue: hci0 hci_rx_work
[  238.693209][ T5943] Call Trace:
[  238.693214][ T5943]  <TASK>
[  238.693219][ T5943]  dump_stack_lvl+0x189/0x250
[  238.693233][ T5943]  ? __pfx_dump_stack_lvl+0x10/0x10
[  238.693242][ T5943]  ? __pfx__printk+0x10/0x10
[  238.693256][ T5943]  ? kernfs_path_from_node+0x250/0x290
[  238.693265][ T5943]  ? kernfs_path_from_node+0x2f/0x290
[  238.693274][ T5943]  sysfs_create_dir_ns+0x259/0x280
[  238.693283][ T5943]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  238.693293][ T5943]  ? do_raw_spin_unlock+0x4d/0x240
[  238.693304][ T5943]  kobject_add_internal+0x59f/0xb40
[  238.693317][ T5943]  kobject_add+0x155/0x220
[  238.693328][ T5943]  ? __pfx_kobject_add+0x10/0x10
[  238.693336][ T5943]  ? _raw_spin_unlock+0x28/0x50
[  238.693346][ T5943]  ? get_device_parent+0x366/0x3a0
[  238.693359][ T5943]  device_add+0x408/0xb50
[  238.693370][ T5943]  hci_conn_add_sysfs+0xd5/0x1e0
[  238.693381][ T5943]  le_conn_complete_evt+0xc3a/0x1220
[  238.693396][ T5943]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  238.693404][ T5943]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  238.693414][ T5943]  ? __asan_memcpy+0x40/0x70
[  238.693425][ T5943]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  238.693434][ T5943]  ? skb_pull_data+0xfb/0x200
[  238.693444][ T5943]  hci_le_conn_complete_evt+0x187/0x450
[  238.693455][ T5943]  hci_event_packet+0x78f/0x1200
[  238.693473][ T5943]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  238.693483][ T5943]  ? __pfx_hci_event_packet+0x10/0x10
[  238.693495][ T5943]  ? kcov_remote_start+0x4d3/0x7f0
[  238.693505][ T5943]  ? lockdep_hardirqs_on+0x90/0x150
[  238.693516][ T5943]  ? hci_send_to_monitor+0xe2/0x570
[  238.693527][ T5943]  hci_rx_work+0x46a/0xe80
[  238.693537][ T5943]  ? process_scheduled_works+0x9ef/0x17b0
[  238.693546][ T5943]  process_scheduled_works+0xae1/0x17b0
[  238.693565][ T5943]  ? __pfx_process_scheduled_works+0x10/0x10
[  238.693580][ T5943]  worker_thread+0x8a0/0xda0
[  238.693593][ T5943]  ? __kthread_parkme+0x7b/0x200
[  238.693604][ T5943]  kthread+0x711/0x8a0
[  238.693613][ T5943]  ? __pfx_worker_thread+0x10/0x10
[  238.693620][ T5943]  ? __pfx_kthread+0x10/0x10
[  238.693628][ T5943]  ? _raw_spin_unlock_irq+0x23/0x50
[  238.693635][ T5943]  ? lockdep_hardirqs_on+0x9c/0x150
[  238.693642][ T5943]  ? __pfx_kthread+0x10/0x10
[  238.693650][ T5943]  ret_from_fork+0x3fc/0x770
[  238.693658][ T5943]  ? __pfx_ret_from_fork+0x10/0x10
[  238.693667][ T5943]  ? __switch_to_asm+0x39/0x70
[  238.693675][ T5943]  ? __switch_to_asm+0x33/0x70
[  238.693683][ T5943]  ? __pfx_kthread+0x10/0x10
[  238.693691][ T5943]  ret_from_fork_asm+0x1a/0x30
[  238.693705][ T5943]  </TASK>
[  238.693721][ T5943] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  238.807983][ T5943] Bluetooth: hci0: failed to register connection device
[  239.224589][T11042] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1922'.
[  239.228967][T11042] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1922'.
[  239.514932][ T5313] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  239.584293][T11056] loop5: detected capacity change from 0 to 32768
[  239.592729][T11056] XFS: attr2 mount option is deprecated.
[  239.611494][T11056] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  239.620932][T11056] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  239.647720][T11056] XFS (loop5): Ending clean mount
[  239.654466][T11056] XFS (loop5): Quotacheck needed: Please wait.
[  239.665709][ T5313] usb 2-1: Using ep0 maxpacket: 8
[  239.669476][ T5313] usb 2-1: config 8 has an invalid interface number: 125 but max is 0
[  239.672188][ T5313] usb 2-1: config 8 has no interface number 0
[  239.689005][T11056] XFS (loop5): Quotacheck: Done.
[  239.693665][ T5313] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=26.ec
[  239.706433][ T5313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.710857][ T5313] usb 2-1: Product: syz
[  239.712665][ T5313] usb 2-1: Manufacturer: syz
[  239.714625][ T5313] usb 2-1: SerialNumber: syz
[  239.732635][ T5313] gspca_main: ALi m5602-2.14.0 probing 0402:5602
[  239.746516][ T8576] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  239.953226][ T5313] gspca_m5602: Failed to find a sensor
[  239.955757][ T5313] ALi m5602 2-1:8.125: ALi m5602 webcam failed
[  239.960416][ T5313] usb 2-1: USB disconnect, device number 25
[  240.518952][T11091] netlink: 'syz.1.1943': attribute type 10 has an invalid length.
[  240.540387][T11091] team0: Port device dummy0 added
[  240.551615][T11091] netlink: 'syz.1.1943': attribute type 10 has an invalid length.
[  240.568836][T11091] team0: Port device dummy0 removed
[  240.574182][T11091] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  241.325541][ T6132] usb 2-1: new low-speed USB device number 26 using dummy_hcd
[  241.479940][T11117] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  241.483238][T11117] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  241.489635][T11117] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  241.494221][T11117] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  241.497360][ T6132] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  241.501648][T11117] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  241.504388][ T6132] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  241.508267][T11117] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  241.511196][T11117] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  241.514637][T11117] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  241.518231][T11117] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  241.521375][T11117] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  241.524475][T11117] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  241.529866][T11117] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  241.532999][ T6132] usb 2-1: string descriptor 0 read error: -22
[  241.535492][T11117] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[  241.535917][ T6132] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  241.539231][T11117] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[  241.542411][ T6132] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.564063][ T6132] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  241.570362][ T6132] usb 2-1: MIDIStreaming interface descriptor not found
[  241.718173][T11124] syz.5.1957: attempt to access beyond end of device
[  241.718173][T11124] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[  241.722659][T11124] (syz.5.1957,11124,1):ocfs2_get_sector:1714 ERROR: status = -5
[  241.725712][T11124] (syz.5.1957,11124,1):ocfs2_sb_probe:753 ERROR: status = -5
[  241.728676][T11124] (syz.5.1957,11124,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  241.731469][T11124] (syz.5.1957,11124,1):ocfs2_fill_super:1177 ERROR: status = -5
[  241.772761][    T9] usb 2-1: USB disconnect, device number 26
[  241.992543][T11140] loop5: detected capacity change from 0 to 1024
[  241.999157][T11140] EXT4-fs: Ignoring removed nobh option
[  242.005863][T11140] EXT4-fs: inline encryption not supported
[  242.029201][T11140] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.044447][T11140] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.1965: Allocating blocks 385-513 which overlap fs metadata
[  242.051847][T11140] EXT4-fs (loop5): pa ffff88802ad8ce80: logic 16, phys. 129, len 24
[  242.054973][T11140] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  242.090110][ T8576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.376238][T11155] loop5: detected capacity change from 0 to 2048
[  242.412023][T11160] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  242.434512][T11155] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  242.468826][T11155] Remounting filesystem read-only
[  242.479234][T11155] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  242.495108][T11155] NILFS error (device loop5): nilfs_readdir: bad page in #12
[  242.505744][T11165] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  242.515761][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1977'.
[  242.841388][T11192] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  242.880293][T11192] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  242.921294][T11193] netlink: 'syz.5.1980': attribute type 21 has an invalid length.
[  242.924953][T11193] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1980'.
[  242.960616][T11193] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  242.963933][T11193] overlayfs: failed to set xattr on upper
[  242.966579][T11193] overlayfs: ...falling back to redirect_dir=nofollow.
[  242.969623][T11193] overlayfs: ...falling back to index=off.
[  242.972330][T11193] overlayfs: ...falling back to uuid=null.
[  243.219959][   T33] audit: type=1326 audit(1755656089.598:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11198 comm="syz.4.1991" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c27b8ebe9 code=0x7ffc0000
[  243.231844][   T33] audit: type=1326 audit(1755656089.608:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11198 comm="syz.4.1991" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c27b2add9 code=0x7ffc0000
[  243.247785][   T33] audit: type=1326 audit(1755656089.608:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11198 comm="syz.4.1991" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c27b2add9 code=0x7ffc0000
[  243.256964][   T33] audit: type=1326 audit(1755656089.608:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11198 comm="syz.4.1991" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c27b8ebe9 code=0x7ffc0000
[  243.268236][   T33] audit: type=1326 audit(1755656089.608:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11198 comm="syz.4.1991" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c27b8ebe9 code=0x7ffc0000
[  243.279190][   T33] audit: type=1326 audit(1755656089.608:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11198 comm="syz.4.1991" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c27b2add9 code=0x7ffc0000
[  243.288997][   T33] audit: type=1326 audit(1755656089.608:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11198 comm="syz.4.1991" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9c27b2add9 code=0x7ffc0000
[  243.298209][   T33] audit: type=1326 audit(1755656089.608:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11198 comm="syz.4.1991" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c27b8ebe9 code=0x7ffc0000
[  243.307166][   T33] audit: type=1326 audit(1755656089.608:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11198 comm="syz.4.1991" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c27b8ebe9 code=0x7ffc0000
[  243.594360][T11208] ref_ctr increment failed for inode: 0x498 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888038482040
[  243.755649][T11214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1998'.
[  243.812026][T11218] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.2000'.
[  244.069755][T11238] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  244.335180][T11257] veth1_vlan: entered allmulticast mode
[  244.389839][T11259] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2017'.
[  244.402913][T11261] netlink: 212296 bytes leftover after parsing attributes in process `syz.4.2018'.
[  244.433395][T11263] loop1: detected capacity change from 0 to 256
[  244.578538][T11269] pim6reg: entered allmulticast mode
[  244.582831][T11269] netlink: 'syz.1.2022': attribute type 10 has an invalid length.
[  244.585890][T11269] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  244.619469][T11269] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[  244.624086][T11269] team0: Failed to send options change via netlink (err -105)
[  244.627551][T11269] team0: Port device netdevsim0 added
[  244.928151][ T5938] Bluetooth: hci0: command 0x0406 tx timeout
[  245.480943][T11298] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12)
[  245.484286][T11298] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  245.490134][T11302] loop1: detected capacity change from 0 to 128
[  245.508002][T11298] vhci_hcd vhci_hcd.0: Device attached
[  245.515899][T11298] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(14)
[  245.518462][   T33] audit: type=1800 audit(1755656091.898:48): pid=11302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2035" name="file2" dev="loop1" ino=1048685 res=0 errno=0
[  245.518818][T11298] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  245.533210][T11298] vhci_hcd vhci_hcd.0: Device attached
[  245.560082][T11298] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  245.567428][T11298] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(18)
[  245.569760][T11298] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  245.572761][T11298] vhci_hcd vhci_hcd.0: Device attached
[  245.577255][T11298] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(20)
[  245.579773][T11298] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  245.594887][T11298] vhci_hcd vhci_hcd.0: Device attached
[  245.598366][T11298] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  245.602204][T11298] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  245.608695][T11298] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  245.613874][T11298] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(28)
[  245.616119][T11298] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  245.628399][T11298] vhci_hcd vhci_hcd.0: Device attached
[  245.648652][T11309] vhci_hcd: connection closed
[  245.649191][T11299] vhci_hcd: connection closed
[  245.652052][T11303] vhci_hcd: connection closed
[  245.654379][T11307] vhci_hcd: connection closed
[  245.656571][T11305] vhci_hcd: connection closed
[  245.660018][ T5948] vhci_hcd: stop threads
[  245.666525][ T5948] vhci_hcd: release socket
[  245.675027][ T5948] vhci_hcd: disconnect device
[  245.688625][ T5948] vhci_hcd: stop threads
[  245.690490][ T5948] vhci_hcd: release socket
[  245.696550][ T5948] vhci_hcd: disconnect device
[  245.703592][ T5948] vhci_hcd: stop threads
[  245.707330][ T5948] vhci_hcd: release socket
[  245.709403][ T5948] vhci_hcd: disconnect device
[  245.716421][ T5948] vhci_hcd: stop threads
[  245.718290][ T5948] vhci_hcd: release socket
[  245.722940][ T5948] vhci_hcd: disconnect device
[  245.727902][ T5948] vhci_hcd: stop threads
[  245.730610][ T5948] vhci_hcd: release socket
[  245.734943][ T5948] vhci_hcd: disconnect device
[  245.745080][ T6132] usb 43-1: new low-speed USB device number 2 using vhci_hcd
[  245.748028][ T6132] usb 43-1: enqueue for inactive port 0
[  245.815665][ T6132] vhci_hcd: vhci_device speed not set
[  245.928907][T11323] netdevsim netdevsim1 netdevsim0: Device is already in use.
[  246.223401][T11344] netlink: 'syz.1.2049': attribute type 7 has an invalid length.
[  246.237024][T11344] netlink: 'syz.1.2049': attribute type 8 has an invalid length.
[  247.009490][T11358] loop1: detected capacity change from 0 to 32768
[  247.014060][T11358] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2056 (11358)
[  247.062211][T11358] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  247.076237][T11358] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  247.080406][T11358] BTRFS info (device loop1): disk space caching is enabled
[  247.083536][T11358] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  247.153288][T11368] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  247.164006][T11368] CIFS mount error: No usable UNC path provided in device string!
[  247.164006][T11368] 
[  247.168813][T11368] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  247.478473][T11358] BTRFS info (device loop1): rebuilding free space tree
[  247.496045][T11358] BTRFS info (device loop1): disabling free space tree
[  247.498933][T11358] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  247.516380][T11358] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  247.606863][ T5940] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  247.840578][T11393] loop5: detected capacity change from 0 to 8
[  247.868926][T11393] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  248.427549][T11395] loop1: detected capacity change from 0 to 32768
[  248.674961][T11395] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  248.685818][T11395] XFS (loop1): Ending clean mount
[  248.689511][T11395] XFS (loop1): Quotacheck needed: Please wait.
[  248.722710][T11395] XFS (loop1): Quotacheck: Done.
[  248.781015][ T5940] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  249.174917][   T52] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  249.277621][T11439] loop5: detected capacity change from 0 to 256
[  249.296271][T11439] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  249.301853][T11439] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  249.324444][   T33] kauditd_printk_skb: 2 callbacks suppressed
[  249.324460][   T33] audit: type=1800 audit(1755656095.698:51): pid=11439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2079" name="file0" dev="loop5" ino=1048687 res=0 errno=0
[  249.327910][   T52] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  249.350309][   T52] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  249.364954][   T52] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  249.368747][   T52] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.389456][   T52] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  249.413041][   T52] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  249.417060][   T52] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  249.421220][   T52] usb 2-1: Product: syz
[  249.423352][   T52] usb 2-1: Manufacturer: syz
[  249.583412][   T52] cdc_wdm 2-1:1.0: skipping garbage
[  250.234249][T11460] loop1: detected capacity change from 0 to 1764
[  250.549147][   T52] cdc_wdm 2-1:1.0: skipping garbage
[  250.838669][   T52] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  250.841215][   T52] cdc_wdm 2-1:1.0: Unknown control protocol
[  250.848493][   T52] usb 2-1: USB disconnect, device number 27
[  250.920619][T11482] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  251.014246][T11487] bridge4: entered promiscuous mode
[  251.318578][T11498] loop1: detected capacity change from 0 to 32768
[  251.416501][T11498] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  251.416524][T11498]   allowing incompatible features above 0.0: (unknown version)
[  251.416532][T11498]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  251.433953][T11498] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  251.437412][T11498] bcachefs (loop1): initializing new filesystem
[  251.445942][T11498] bcachefs (loop1): going read-write
[  251.452200][T11498] bcachefs (loop1): marking superblocks
[  251.462253][T11498] bcachefs (loop1): initializing freespace
[  251.466046][T11498] bcachefs (loop1): done initializing freespace
[  251.469063][T11498] bcachefs (loop1): reading snapshots table
[  251.471126][T11498] bcachefs (loop1): reading snapshots done
[  251.508365][T11498] bcachefs (loop1): done starting filesystem
[  251.564958][ T5943] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  251.567165][ T5938] Bluetooth: hci3: command 0x1003 tx timeout
[  251.623561][ T5940] bcachefs (loop1): shutting down
[  251.626593][ T5940] bcachefs (loop1): going read-only
[  251.628999][ T5940] bcachefs (loop1): finished waiting for writes to stop
[  251.648330][ T5940] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  251.682265][ T5940] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  251.689510][ T5940] bcachefs (loop1): clean shutdown complete, journal seq 4
[  251.694407][ T5940] bcachefs (loop1): marking filesystem clean
[  251.746241][ T5940] bcachefs (loop1): shutdown complete
[  252.237980][T11544] sctp: [Deprecated]: syz.5.2125 (pid 11544) Use of int in maxseg socket option.
[  252.237980][T11544] Use struct sctp_assoc_value instead
[  252.324251][T11550] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2128'.
[  254.406593][T11577] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  254.410666][T11577] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.416329][T11577] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.599145][T11589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2145'.
[  254.610187][T11589] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  254.706221][T11589] batman_adv: batadv0: Removing interface: batadv_slave_1
[  255.032016][T11626] batadv_slave_0: entered promiscuous mode
[  255.042212][T11625] batadv_slave_0: left promiscuous mode
[  255.329932][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.332797][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  255.489363][T11642] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2168'.
[  255.600432][T11654] loop1: detected capacity change from 0 to 16
[  255.635776][T11654] erofs (device loop1): mounted with root inode @ nid 36.
[  255.648484][T11654] syz.1.2174: attempt to access beyond end of device
[  255.648484][T11654] loop1: rw=0, sector=103079215104, nr_sectors = 8 limit=16
[  256.328795][T11674] loop5: detected capacity change from 0 to 32768
[  256.372152][T11674] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  256.406788][T11674] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  256.415315][T11674] XFS (loop5): Tail block (0x29) overwrite detected. Updated to 0x30
[  256.425751][T11674] XFS (loop5): Ending clean mount
[  256.429110][T11686] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.461453][ T8576] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  256.703046][T11690] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2188'.
[  257.957771][T11717] loop1: detected capacity change from 0 to 512
[  257.972694][T11717] EXT4-fs: Ignoring removed orlov option
[  257.986591][T11717] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  258.017082][T11717] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #17: comm syz.1.2200: corrupted in-inode xattr: overlapping e_value 
[  258.038693][T11717] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2200: couldn't read orphan inode 17 (err -117)
[  258.058093][T11717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.073794][T11717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.495942][ T6134] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  258.659027][ T6134] usb 2-1: too many configurations: 151, using maximum allowed: 8
[  258.677120][ T6134] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[  258.684970][ T6134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[  258.687954][ T6134] usb 2-1: Product: syz
[  258.689669][ T6134] usb 2-1: Manufacturer: syz
[  258.691546][ T6134] usb 2-1: SerialNumber: syz
[  258.734110][ T6134] usb 2-1: config 0 descriptor??
[  258.973746][ T6134] usb 2-1: USB disconnect, device number 28
[  259.818754][T11758] loop5: detected capacity change from 0 to 1024
[  260.155763][   T36] hfsplus: b-tree write err: -5, ino 4
[  260.219185][T11761] loop5: detected capacity change from 0 to 4096
[  260.231170][T11761] ntfs3(loop5): ino=3, Correct links count -> 2.
[  260.653835][T11777] all: renamed from bridge_slave_0 (while UP)
[  261.828026][T11807] loop5: detected capacity change from 0 to 1024
[  261.830906][T11807] EXT4-fs: Ignoring removed orlov option
[  261.833459][T11807] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  261.864118][T11807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.054517][ T6134] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  263.413146][ T8576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.418627][ T6134] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  263.511559][ T6134] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  263.522823][ T6134] usb 2-1: config 1 has no interface number 0
[  263.527651][ T6134] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  263.532754][ T6134] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  263.536264][ T6134] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  263.559180][ T6134] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  263.562723][ T6134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.566653][ T6134] usb 2-1: Product: syz
[  263.568209][ T6134] usb 2-1: Manufacturer: syz
[  263.570007][ T6134] usb 2-1: SerialNumber: syz
[  264.228664][T11838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2249'.
[  264.242876][ T5948] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  264.242975][T11838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2249'.
[  264.246720][ T5948] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  264.254052][ T5948] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  264.258732][ T5948] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  264.318868][T11840] syz.4.2250: attempt to access beyond end of device
[  264.318868][T11840] loop9: rw=4096, sector=2, nr_sectors = 2 limit=0
[  264.325913][T11840] EXT4-fs (loop9): unable to read superblock
[  264.387240][ T6134] cdc_ncm 2-1:1.1: bind() failure
[  264.524289][T11849] bond0: Unable to set up delay as MII monitoring is disabled
[  264.590839][ T6134] usb 2-1: USB disconnect, device number 29
[  266.229408][T11889] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  266.746887][T11911] syz.5.2283: attempt to access beyond end of device
[  266.746887][T11911] loop11: rw=4096, sector=2, nr_sectors = 2 limit=0
[  266.752435][T11911] EXT4-fs (loop11): unable to read superblock
[  266.814909][ T6134] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  266.971150][T11923] loop5: detected capacity change from 0 to 256
[  266.987377][ T6134] usb 2-1: Using ep0 maxpacket: 16
[  267.003550][ T6134] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  267.019533][ T6134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.028320][ T6134] usb 2-1: Product: syz
[  267.033920][ T6134] usb 2-1: Manufacturer: syz
[  267.041739][ T6134] usb 2-1: SerialNumber: syz
[  267.049339][T11923] FAT-fs (loop5): Directory bread(block 64) failed
[  267.057260][ T6134] usb 2-1: config 0 descriptor??
[  267.060789][T11923] FAT-fs (loop5): Directory bread(block 65) failed
[  267.062261][ T6134] appledisplay 2-1:0.0: Could not find int-in endpoint
[  267.073874][ T6134] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  267.075350][T11923] FAT-fs (loop5): Directory bread(block 66) failed
[  267.101218][T11923] FAT-fs (loop5): Directory bread(block 67) failed
[  267.104079][T11923] FAT-fs (loop5): Directory bread(block 68) failed
[  267.115851][T11923] FAT-fs (loop5): Directory bread(block 69) failed
[  267.123810][T11923] FAT-fs (loop5): Directory bread(block 70) failed
[  267.128923][T11923] FAT-fs (loop5): Directory bread(block 71) failed
[  267.132121][T11923] FAT-fs (loop5): Directory bread(block 72) failed
[  267.165244][T11923] FAT-fs (loop5): Directory bread(block 73) failed
[  267.354535][T11935] loop5: detected capacity change from 0 to 256
[  267.413155][T11935] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x00949fb8, utbl_chksum : 0x7319d30d)
[  267.569498][T11944] loop5: detected capacity change from 0 to 1024
[  268.637303][ T6134] usb 2-1: USB disconnect, device number 30
[  268.762390][T11958] loop5: detected capacity change from 0 to 256
[  268.796860][T11958] FAT-fs (loop5): Directory bread(block 64) failed
[  268.799414][T11958] FAT-fs (loop5): Directory bread(block 65) failed
[  268.801611][T11958] FAT-fs (loop5): Directory bread(block 66) failed
[  268.803886][T11958] FAT-fs (loop5): Directory bread(block 67) failed
[  268.807472][T11958] FAT-fs (loop5): Directory bread(block 68) failed
[  268.809976][T11958] FAT-fs (loop5): Directory bread(block 69) failed
[  268.812277][T11958] FAT-fs (loop5): Directory bread(block 70) failed
[  268.814467][T11958] FAT-fs (loop5): Directory bread(block 71) failed
[  268.818066][T11958] FAT-fs (loop5): Directory bread(block 72) failed
[  268.820251][T11958] FAT-fs (loop5): Directory bread(block 73) failed
[  268.908704][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2305'.
[  269.000482][T11970] netlink: 'syz.5.2310': attribute type 1 has an invalid length.
[  269.023957][T11970] 8021q: adding VLAN 0 to HW filter on device bond1
[  269.043579][T11970] gretap1: entered promiscuous mode
[  269.051789][T11970] bond1: (slave gretap1): making interface the new active one
[  269.055949][T11970] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  269.176677][T11979] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  269.181956][T11979] netlink: 'syz.5.2314': attribute type 10 has an invalid length.
[  269.191527][T11979] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.195927][T11979] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.203548][T11979] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.205994][T11979] bridge0: port 2(bridge_slave_1) entered forwarding state
[  269.209083][T11979] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.211977][T11979] bridge0: port 1(bridge_slave_0) entered forwarding state
[  269.217766][T11979] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  269.237395][   T13] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex
[  269.516172][T11994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2320'.
[  269.761725][T11992] loop5: detected capacity change from 0 to 32768
[  269.782156][T11992] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  269.826038][T11992] XFS (loop5): Ending clean mount
[  269.889824][T12014] loop1: detected capacity change from 0 to 16
[  269.896061][T12014] erofs (device loop1): mounted with root inode @ nid 36.
[  269.959519][T12016] loop1: detected capacity change from 0 to 512
[  269.967929][T12016] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  269.993954][T12016] EXT4-fs (loop1): 1 truncate cleaned up
[  270.001611][T12016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.064237][ T8576] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  270.096282][T12016] EXT4-fs (loop1): shut down requested (0)
[  270.264293][ T5940] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.473294][ T6134] IPVS: starting estimator thread 0...
[  270.564525][T12046] openvswitch: netlink: IP tunnel dst address not specified
[  270.577343][T12034] IPVS: using max 79 ests per chain, 189600 per kthread
[  270.973017][T12061] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2344'.
[  271.058830][T12065] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.2346'.
[  271.121605][T12069] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2348'.
[  271.840578][T12095] netlink: 'syz.1.2360': attribute type 40 has an invalid length.
[  271.844123][T12095] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2360'.
[  272.448778][T12100] loop1: detected capacity change from 0 to 32768
[  272.507706][T12100] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  272.602755][   T33] audit: type=1800 audit(1755656118.978:52): pid=12100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2362" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  272.869580][ T5940] ocfs2: Unmounting device (7,1) on (node local)
[  273.126336][T12122] loop5: detected capacity change from 0 to 4096
[  273.129303][T12122] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  273.365048][    T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  273.527056][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  273.533052][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  273.538000][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  273.544138][    T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  273.549862][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.565238][    T9] usb 2-1: config 0 descriptor??
[  273.987162][    T9] plantronics 0003:047F:FFFF.000C: reserved main item tag 0xd
[  274.007223][    T9] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  274.246785][    T9] usb 2-1: USB disconnect, device number 31
[  274.397314][T12183] openvswitch: netlink: Key 4 has unexpected len 0 expected 12
[  274.554597][T12191] loop5: detected capacity change from 0 to 4096
[  274.560744][T12191] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  276.762783][T12223] loop1: detected capacity change from 0 to 512
[  276.783197][T12223] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.2416: corrupted in-inode xattr: overlapping e_value 
[  276.790916][T12223] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2416: couldn't read orphan inode 15 (err -117)
[  276.799937][T12223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  276.868633][T12223] evm: overlay not supported
[  276.965387][ T5940] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.047080][T12231] vlan0: entered promiscuous mode
[  277.049405][T12231] dummy0: entered promiscuous mode
[  277.055078][T12231] vlan0: entered allmulticast mode
[  277.064819][T12231] dummy0: entered allmulticast mode
[  277.288363][T12244] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2425'.
[  277.333965][   T33] audit: type=1326 audit(1755656123.708:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12247 comm="syz.1.2427" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2b158ebe9 code=0x0
[  277.539266][T12258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2432'.
[  277.955256][   T10] usb 2-1: new full-speed USB device number 32 using dummy_hcd
[  278.117131][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  278.120298][   T10] usb 2-1: not running at top speed; connect to a high speed hub
[  278.123754][   T10] usb 2-1: config 4 has an invalid interface number: 32 but max is 0
[  278.128201][   T10] usb 2-1: config 4 has no interface number 0
[  278.132498][   T10] usb 2-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50
[  278.136547][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.139157][   T10] usb 2-1: Product: syz
[  278.140548][   T10] usb 2-1: Manufacturer: syz
[  278.142662][   T10] usb 2-1: SerialNumber: syz
[  278.364978][   T10] usb 2-1: Found UVC 0.02 device syz (17dc:0202)
[  278.367151][   T10] usb 2-1: No valid video chain found.
[  278.371539][   T10] usb 2-1: USB disconnect, device number 32
[  278.689244][T12307] lo speed is unknown, defaulting to 1000
[  278.692469][T12307] lo speed is unknown, defaulting to 1000
[  278.703787][T12307] lo speed is unknown, defaulting to 1000
[  278.731232][T12307] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  278.782203][T12307] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98
[  278.943619][T12307] lo speed is unknown, defaulting to 1000
[  278.947866][T12307] lo speed is unknown, defaulting to 1000
[  278.951626][T12307] lo speed is unknown, defaulting to 1000
[  279.137570][ T5943] Bluetooth: hci0: unexpected event for opcode 0x0c26
[  279.260344][T12321] sctp: [Deprecated]: syz.1.2462 (pid 12321) Use of int in maxseg socket option.
[  279.260344][T12321] Use struct sctp_assoc_value instead
[  279.261421][T12319] loop5: detected capacity change from 0 to 4096
[  279.464292][T12329] loop5: detected capacity change from 0 to 512
[  279.492859][T12329] EXT4-fs (loop5): unsupported inode size: 269
[  279.496288][T12329] EXT4-fs (loop5): blocksize: 1024
[  279.969794][   T33] audit: type=1326 audit(1755656126.228:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12340 comm="syz.1.2471" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa2b158ebe9 code=0x0
[  279.995349][T12355] team0: Device ip6gretap1 is up. Set it down before adding it as a team port
[  280.471957][T12363] loop5: detected capacity change from 0 to 32768
[  280.478028][T12363] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2479 (12363)
[  280.494631][T12363] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  280.505848][T12363] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  280.530038][T12363] BTRFS info (device loop5): using free-space-tree
[  280.720388][ T8576] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  281.044950][ T6132] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[  281.197195][ T6132] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  281.199746][T12401] loop5: detected capacity change from 0 to 32768
[  281.202427][ T6132] usb 2-1: config 0 interface 0 has no altsetting 0
[  281.208243][ T6132] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  281.212135][ T6132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.219292][ T6132] usb 2-1: config 0 descriptor??
[  281.230900][T12401] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  281.266149][T12401] XFS (loop5): Ending clean mount
[  281.270844][T12401] XFS (loop5): Quotacheck needed: Please wait.
[  281.308188][T12401] XFS (loop5): Quotacheck: Done.
[  281.351396][ T8576] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  281.550366][T12411] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  281.632512][ T6132] kye 0003:0458:5010.000D: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  281.646737][ T6132] kye 0003:0458:5010.000D: unknown main item tag 0x1
[  281.652861][ T6132] kye 0003:0458:5010.000D: hidraw0: USB HID vff.ff Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0
[  281.659493][ T6132] kye 0003:0458:5010.000D: tablet-enabling feature report not found
[  281.663897][ T6132] kye 0003:0458:5010.000D: tablet enabling failed
[  281.811192][T12428] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2498'.
[  281.819895][T12428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2498'.
[  281.833084][ T6132] usb 2-1: USB disconnect, device number 33
[  282.038646][T12444] overlayfs: failed to clone upperpath
[  282.434535][T12454] loop5: detected capacity change from 0 to 40427
[  282.458940][T12454] F2FS-fs (loop5): invalid crc value
[  282.545190][T12454] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  282.552088][T12454] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  282.591566][ T8576] syz-executor: attempt to access beyond end of device
[  282.591566][ T8576] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  282.612812][ T8576] CPU: 0 UID: 0 PID: 8576 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  282.612834][ T8576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  282.612841][ T8576] Call Trace:
[  282.612847][ T8576]  <TASK>
[  282.612853][ T8576]  dump_stack_lvl+0x189/0x250
[  282.612877][ T8576]  ? __pfx_dump_stack_lvl+0x10/0x10
[  282.612891][ T8576]  ? __pfx_queue_work_on+0x10/0x10
[  282.612903][ T8576]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  282.612919][ T8576]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  282.612939][ T8576]  f2fs_handle_critical_error+0x37c/0x540
[  282.612961][ T8576]  f2fs_write_end_io+0x886/0xb60
[  282.612992][ T8576]  __submit_merged_bio+0x27a/0x6a0
[  282.613011][ T8576]  __submit_merged_write_cond+0x255/0x530
[  282.613031][ T8576]  f2fs_write_data_pages+0x261d/0x3000
[  282.613071][ T8576]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  282.613126][ T8576]  ? folios_put_refs+0x559/0x640
[  282.613149][ T8576]  ? __lock_acquire+0xab9/0xd20
[  282.613173][ T8576]  ? do_raw_spin_lock+0x121/0x290
[  282.613194][ T8576]  ? do_raw_spin_unlock+0x4d/0x240
[  282.613208][ T8576]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  282.613224][ T8576]  do_writepages+0x32e/0x550
[  282.613268][ T8576]  ? do_raw_spin_unlock+0x4d/0x240
[  282.613287][ T8576]  filemap_fdatawrite+0x199/0x240
[  282.613302][ T8576]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  282.613351][ T8576]  ? do_raw_spin_unlock+0x4d/0x240
[  282.613368][ T8576]  f2fs_sync_dirty_inodes+0x31f/0x830
[  282.613397][ T8576]  f2fs_write_checkpoint+0x95a/0x1df0
[  282.613432][ T8576]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  282.613481][ T8576]  ? kill_f2fs_super+0x298/0x6c0
[  282.613501][ T8576]  kill_f2fs_super+0x2c3/0x6c0
[  282.613522][ T8576]  ? __pfx_kill_f2fs_super+0x10/0x10
[  282.613536][ T8576]  ? radix_tree_delete_item+0x2b6/0x400
[  282.613561][ T8576]  ? shrinker_free+0x2ce/0x3e0
[  282.613604][ T8576]  deactivate_locked_super+0xbc/0x130
[  282.613621][ T8576]  cleanup_mnt+0x425/0x4c0
[  282.613635][ T8576]  ? lockdep_hardirqs_on+0x9c/0x150
[  282.613652][ T8576]  task_work_run+0x1d4/0x260
[  282.613670][ T8576]  ? __pfx_task_work_run+0x10/0x10
[  282.613683][ T8576]  ? __x64_sys_umount+0x122/0x160
[  282.613702][ T8576]  ? exit_to_user_mode_loop+0x40/0x110
[  282.613723][ T8576]  exit_to_user_mode_loop+0xec/0x110
[  282.613739][ T8576]  do_syscall_64+0x2bd/0x3b0
[  282.613752][ T8576]  ? lockdep_hardirqs_on+0x9c/0x150
[  282.613764][ T8576]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.613776][ T8576]  ? exc_page_fault+0x9f/0xf0
[  282.613791][ T8576]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.613802][ T8576] RIP: 0033:0x7f0d0978ff17
[  282.613814][ T8576] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  282.613824][ T8576] RSP: 002b:00007fffd688f548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  282.613839][ T8576] RAX: 0000000000000000 RBX: 00007f0d09811c05 RCX: 00007f0d0978ff17
[  282.613846][ T8576] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd688f600
[  282.613852][ T8576] RBP: 00007fffd688f600 R08: 0000000000000000 R09: 0000000000000000
[  282.613858][ T8576] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffd6890690
[  282.613867][ T8576] R13: 00007f0d09811c05 R14: 0000000000044f5d R15: 00007fffd68906d0
[  282.613885][ T8576]  </TASK>
[  282.749319][ T8576] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  283.590857][T12488] loop1: detected capacity change from 0 to 512
[  283.608890][T12488] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  283.619138][T12488] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842e018, mo2=0002]
[  283.630545][T12488] System zones: 0-1, 15-15, 18-18, 34-34
[  283.640508][T12488] EXT4-fs (loop1): orphan cleanup on readonly fs
[  283.695611][T12488] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #16: comm syz.1.2521: casefold flag without casefold feature
[  283.701876][T12488] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2521: couldn't read orphan inode 16 (err -117)
[  283.714533][T12488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  283.785306][T12488] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  283.788012][T12488] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842e018, mo2=0002]
[  283.861861][ T5940] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.358653][T12511] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  284.363964][T12511] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  284.998190][T12522] loop1: detected capacity change from 0 to 2048
[  285.019183][T12522] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  285.022888][ T6103] udevd[6103]: incorrect nilfs2 checksum on /dev/loop1
[  285.025094][T12522] NILFS (loop1): mounting unchecked fs
[  285.034386][ T6103] udevd[6103]: incorrect nilfs2 checksum on /dev/loop1
[  285.060189][T12522] NILFS (loop1): recovery complete
[  285.067544][T12526] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  285.080641][T12527] loop5: detected capacity change from 0 to 128
[  285.102477][T12527] ufs: You didn't specify the type of your ufs filesystem
[  285.102477][T12527] 
[  285.102477][T12527] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  285.102477][T12527] 
[  285.102477][T12527] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  285.134670][T12529] sctp: [Deprecated]: syz.4.2538 (pid 12529) Use of struct sctp_assoc_value in delayed_ack socket option.
[  285.134670][T12529] Use struct sctp_sack_info instead
[  285.162296][T12527] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  285.203378][T12531] loop1: detected capacity change from 0 to 4096
[  285.212117][T12531] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  285.258359][T12531] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  285.599543][   T10] usb 2-1: new full-speed USB device number 34 using dummy_hcd
[  285.779247][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  285.797930][   T10] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  285.800901][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.803989][   T10] usb 2-1: Product: syz
[  285.819534][   T10] usb 2-1: Manufacturer: syz
[  285.821646][   T10] usb 2-1: SerialNumber: syz
[  285.841681][   T10] usb 2-1: config 0 descriptor??
[  286.052818][   T52] usb 2-1: USB disconnect, device number 34
[  286.108668][T12596] loop5: detected capacity change from 0 to 256
[  286.121359][T12596] exfat: Deprecated parameter 'namecase'
[  286.130697][T12596] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  286.249922][T12603] loop5: detected capacity change from 0 to 256
[  286.252711][T12603] exfat: Deprecated parameter 'namecase'
[  286.254640][T12603] exfat: Deprecated parameter 'utf8'
[  286.262658][T12603] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  286.692516][T12616] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2569'.
[  287.230238][T12631] loop1: detected capacity change from 0 to 32768
[  287.234375][T12631] bcachefs (/dev/loop1): error validating superblock: Invalid option shard_inode_numbers_bits: too big (max 8)
[  287.246194][T12631] bcachefs: bch2_fs_get_tree() error: ERANGE_option_too_big
[  287.562137][T12643] loop1: detected capacity change from 0 to 40427
[  287.575637][T12643] F2FS-fs: heap/no_heap options were deprecated
[  287.589658][T12643] F2FS-fs (loop1): invalid crc value
[  287.756768][T12643] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  287.814848][T12643] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  288.131777][ T5938] Bluetooth: hci0: command 0x0406 tx timeout
[  288.524605][T12682] loop1: detected capacity change from 0 to 8192
[  288.697721][T12686] loop1: detected capacity change from 0 to 1024
[  288.732394][T12686] hfsplus: invalid extended attribute record
[  288.798952][ T1091] hfsplus: b-tree write err: -5, ino 8
[  288.897256][T12684] loop5: detected capacity change from 0 to 32768
[  288.911833][T12684] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section members_v2: section too small (28 > 8)
[  288.911833][T12684] members_v2 (size 8):
[  288.911833][T12684] field ends before start of entries
[  288.921980][T12684] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  288.961644][T12688] loop1: detected capacity change from 0 to 2048
[  289.018423][T12688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  289.140021][T12688] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2600: bg 0: block 234: padding at end of block bitmap is not set
[  289.201966][T12688] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 190 with error 28
[  289.227826][T12688] EXT4-fs (loop1): This should not happen!! Data will be lost
[  289.227826][T12688] 
[  289.239049][T12688] EXT4-fs (loop1): Total free blocks count 0
[  289.241571][T12688] EXT4-fs (loop1): Free/Dirty block details
[  289.243939][T12688] EXT4-fs (loop1): free_blocks=0
[  289.247164][T12688] EXT4-fs (loop1): dirty_blocks=192
[  289.249184][T12688] EXT4-fs (loop1): Block reservation details
[  289.251373][T12688] EXT4-fs (loop1): i_reserved_data_blocks=12
[  289.313303][ T5940] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.239039][T12705] loop1: detected capacity change from 0 to 32768
[  290.337312][T12705] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  290.423121][ T5940] ocfs2: Unmounting device (7,1) on (node local)
[  291.100710][T12737] loop1: detected capacity change from 0 to 32768
[  291.103659][T12737] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2619 (12737)
[  291.138800][T12737] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  291.142104][T12737] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  291.150499][T12737] BTRFS info (device loop1): using free-space-tree
[  291.278756][ T5940] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  291.343124][T12775] netlink: 'syz.5.2630': attribute type 1 has an invalid length.
[  291.377916][T12775] 8021q: adding VLAN 0 to HW filter on device bond2
[  291.708374][T12802] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0
[  291.745647][    T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  291.908752][    T9] usb 2-1: config index 0 descriptor too short (expected 63186, got 210)
[  291.913923][    T9] usb 2-1: config 0 has an invalid interface number: 106 but max is 0
[  291.918644][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  291.923066][    T9] usb 2-1: config 0 has no interface number 0
[  291.927689][    T9] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  291.933210][    T9] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  291.938143][    T9] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  291.949145][    T9] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  291.953908][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=64
[  291.957757][    T9] usb 2-1: SerialNumber: syz
[  291.962379][    T9] usb 2-1: config 0 descriptor??
[  291.981568][    T9] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  292.174271][   T13] usb 2-1: Failed to submit usb control message: -71
[  292.179499][   T13] usb 2-1: unable to send the bmi data to the device: -71
[  292.182896][   T13] usb 2-1: unable to get target info from device
[  292.185279][ T6132] usb 2-1: USB disconnect, device number 35
[  292.186109][   T13] usb 2-1: could not get target info (-71)
[  292.191175][   T13] usb 2-1: could not probe fw (-71)
[  292.385305][T12816] overlayfs: failed to clone upperpath
[  292.906142][T12849] 9pnet_fd: p9_fd_create_tcp (12849): problem connecting socket to 127.0.0.1
[  293.166292][T12852] loop1: detected capacity change from 0 to 128
[  293.170173][T12852] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  293.179421][T12852] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  293.243757][ T1091] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  293.291067][T12858] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  293.686175][T12866] loop1: detected capacity change from 0 to 32768
[  293.799129][T12873] loop5: detected capacity change from 0 to 32768
[  293.834287][T12866] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  293.842183][T12873] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  293.907976][T12866] XFS (loop1): Ending clean mount
[  293.919787][ T8576] ocfs2: Unmounting device (7,5) on (node local)
[  293.948907][T12866] XFS (loop1): Quotacheck needed: Please wait.
[  293.983945][T12866] XFS (loop1): Quotacheck: Done.
[  294.017257][ T5940] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  294.919564][T12929] loop1: detected capacity change from 0 to 256
[  294.936043][T12929] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  295.448528][T12963] netlink: 'syz.1.2708': attribute type 2 has an invalid length.
[  295.794589][T12989] netlink: 'syz.4.2720': attribute type 1 has an invalid length.
[  295.797370][T12989] netlink: 'syz.4.2720': attribute type 4 has an invalid length.
[  295.799892][T12989] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2720'.
[  296.043107][T13007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2729'.
[  296.047266][T13007] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  297.013927][ T5313] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  297.165068][ T5313] usb 2-1: Using ep0 maxpacket: 32
[  297.173469][ T5313] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  297.177877][ T5313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.185822][ T5313] usb 2-1: config 0 descriptor??
[  297.194197][ T5313] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  298.376372][ T5313] gspca_vc032x: reg_w err -71
[  298.378343][ T5313] gspca_vc032x: I2c Bus Busy Wait 00
[  298.380632][ T5313] gspca_vc032x: I2c Bus Busy Wait 00
[  298.396009][ T5313] gspca_vc032x: I2c Bus Busy Wait 00
[  298.398205][ T5313] gspca_vc032x: I2c Bus Busy Wait 00
[  298.400439][ T5313] gspca_vc032x: I2c Bus Busy Wait 00
[  298.402720][ T5313] gspca_vc032x: I2c Bus Busy Wait 00
[  298.418475][ T5313] gspca_vc032x: I2c Bus Busy Wait 00
[  298.420799][ T5313] gspca_vc032x: I2c Bus Busy Wait 00
[  298.435158][ T5313] gspca_vc032x: I2c Bus Busy Wait 00
[  298.437547][ T5313] gspca_vc032x: I2c Bus Busy Wait 00
[  298.448330][ T5313] gspca_vc032x: I2c Bus Busy Wait 00
[  298.459220][ T5313] gspca_vc032x: I2c Bus Busy Wait 00
[  298.462910][ T5313] gspca_vc032x: I2c Bus Busy Wait 00
[  298.465464][ T5313] gspca_vc032x: I2c Bus Busy Wait 00
[  298.467818][ T5313] gspca_vc032x: I2c Bus Busy Wait 00
[  298.480001][ T5313] gspca_vc032x: I2c Bus Busy Wait 00
[  298.482332][ T5313] gspca_vc032x: I2c Bus Busy Wait 00
[  298.484980][ T5313] gspca_vc032x: I2c Bus Busy Wait 00
[  298.488734][ T5313] gspca_vc032x: Unknown sensor...
[  298.491434][ T5313] vc032x 2-1:0.0: probe with driver vc032x failed with error -22
[  298.503559][ T5313] usb 2-1: USB disconnect, device number 36
[  299.436463][T13064] loop1: detected capacity change from 0 to 32768
[  299.451248][T13064] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2747 (13064)
[  299.468505][T13064] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  299.475414][T13064] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  299.478730][T13064] BTRFS info (device loop1): using free-space-tree
[  299.800510][ T5940] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  299.803317][ T5999] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[  300.127775][T13089] loop5: detected capacity change from 0 to 32768
[  300.858389][T13115] netdevsim netdevsim5 netdevsim0: left promiscuous mode
[  300.869416][T13115] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  300.874010][T13115] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  301.099081][T13117] loop5: detected capacity change from 0 to 128
[  301.728825][T13131] loop5: detected capacity change from 0 to 1024
[  301.788555][ T1029] hfsplus: b-tree write err: -5, ino 4
[  301.893197][T13138] netlink: 'syz.5.2774': attribute type 21 has an invalid length.
[  302.086857][T13143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  302.115267][   T52] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[  302.124539][   T52] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  302.152028][T13143] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  302.156145][ T1091] wlan1: authenticated
[  302.171215][ T1091] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[  302.227165][ T1091] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[  302.231178][T13150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  302.249312][ T1091] wlan1: associated
[  302.787339][T13136] loop1: detected capacity change from 0 to 262144
[  302.803018][T13136] F2FS-fs (loop1): invalid crc value
[  302.866165][T13136] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  302.870154][T13136] F2FS-fs (loop1): Start checkpoint disabled!
[  302.878735][T13136] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  302.955209][T13171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  304.526607][T13195] loop1: detected capacity change from 0 to 128
[  304.758990][T13200] ptrace attach of "/syz-executor exec"[5940] was attempted by ""[13200]
[  306.542104][T13227] loop5: detected capacity change from 0 to 512
[  306.552714][T13227] EXT4-fs: Ignoring removed nomblk_io_submit option
[  306.561880][T13227] EXT4-fs: Ignoring removed nomblk_io_submit option
[  306.565378][T13227] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  306.577553][T13227] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  306.580773][T13227] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  306.591134][T13227] EXT4-fs (loop5): 1 truncate cleaned up
[  306.594274][T13227] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  306.609812][T13227] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  306.652003][ T8576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.943045][   T10] usb 2-1: new full-speed USB device number 37 using dummy_hcd
[  307.274638][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  307.280451][   T10] usb 2-1: not running at top speed; connect to a high speed hub
[  307.298562][   T10] usb 2-1: config 3 has an invalid interface number: 106 but max is 0
[  307.307126][   T10] usb 2-1: config 3 has no interface number 0
[  307.310146][   T10] usb 2-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64
[  307.316345][   T10] usb 2-1: config 3 interface 106 altsetting 10 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  307.320624][   T10] usb 2-1: config 3 interface 106 has no altsetting 0
[  307.326102][   T10] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a
[  307.329614][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.333581][   T10] usb 2-1: Product: syz
[  307.335193][   T10] usb 2-1: Manufacturer: syz
[  307.337073][   T10] usb 2-1: SerialNumber: syz
[  307.347145][T13237] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  307.350370][T13237] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  307.550683][   T10] kobil_sct 2-1:3.106: KOBIL USB smart card terminal converter detected
[  307.559470][   T10] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  307.571927][   T10] usb 2-1: USB disconnect, device number 37
[  307.579683][   T10] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  307.583776][   T10] kobil_sct 2-1:3.106: device disconnected
[  308.273781][T13311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2831'.
[  308.279223][T13311] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  308.282524][T13311] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  308.370863][T13314] proc: Bad value for 'gid'
[  308.905083][T13320] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  308.908138][T13320] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  308.936841][T13320] vhci_hcd vhci_hcd.0: Device attached
[  309.166671][ T6132] usb 35-1: new high-speed USB device number 2 using vhci_hcd
[  310.920863][T13321] vhci_hcd: connection reset by peer
[  310.968635][   T13] vhci_hcd: stop threads
[  310.992349][   T13] vhci_hcd: release socket
[  311.033084][   T13] vhci_hcd: disconnect device
[  311.695983][T13376] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  313.030933][T13418] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2869'.
[  313.662756][   T52] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  313.804713][   T52] usb 2-1: Using ep0 maxpacket: 8
[  313.833346][   T52] usb 2-1: config index 0 descriptor too short (expected 30, got 18)
[  313.850103][   T52] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  313.861207][   T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.866942][   T52] usb 2-1: Product: syz
[  313.868921][   T52] usb 2-1: Manufacturer: syz
[  313.870696][   T52] usb 2-1: SerialNumber: syz
[  313.877252][   T52] usb 2-1: config 0 descriptor??
[  313.889490][   T52] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  313.897187][   T52] usb 2-1: setting power ON
[  313.899450][   T52] dvb-usb: bulk message failed: -22 (2/0)
[  313.929436][   T52] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  313.948054][   T52] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  313.951597][   T52] usb 2-1: media controller created
[  314.040087][   T52] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  314.046124][ T6132] vhci_hcd: vhci_device speed not set
[  314.101113][   T52] usb 2-1: selecting invalid altsetting 6
[  314.116303][   T52] usb 2-1: digital interface selection failed (-22)
[  314.120726][   T52] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  314.127677][   T52] usb 2-1: setting power OFF
[  314.129826][   T52] dvb-usb: bulk message failed: -22 (2/0)
[  314.132180][   T52] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  314.159063][   T52] (NULL device *): no alternate interface
[  314.215447][T13510] tipc: Started in network mode
[  314.220101][T13510] tipc: Node identity 7365725f69643d3, cluster identity 4711
[  314.223752][   T52] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  314.231849][   T52] usb 2-1: USB disconnect, device number 38
[  314.243761][T13510] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  314.648376][   T33] audit: type=1326 audit(1755656930.046:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13518 comm="syz.5.2887" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d0978ebe9 code=0x7ffe0000
[  314.870363][T13531] netlink: 'syz.4.2891': attribute type 2 has an invalid length.
[  314.929945][T13531] : entered promiscuous mode
[  315.369361][T13552] trusted_key: encrypted_key: keyword 'updat`fault' not recognized
[  315.668911][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  315.671790][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  316.321934][T13569] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2906'.
[  316.473100][T13591] loop5: detected capacity change from 0 to 4096
[  316.504934][T13591] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  316.531338][T13591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  316.602841][ T8576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.121647][T13603] loop5: detected capacity change from 0 to 32768
[  317.127941][T13603] XFS: noattr2 mount option is deprecated.
[  317.137914][T13603] XFS (loop5): attr2 and noattr2 cannot both be specified.
[  317.172955][T13618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2917'.
[  317.656822][T13638] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check.
[  318.056902][T13656] loop5: detected capacity change from 0 to 8192
[  318.545061][T13695] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2938'.
[  318.550909][T13687] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2938'.
[  318.554593][T13687] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2938'.
[  319.514728][ T6132] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  319.732711][ T6132] usb 2-1: config 0 has no interfaces?
[  319.734880][ T6132] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  319.738020][ T6132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.748516][ T6132] usb 2-1: config 0 descriptor??
[  320.138148][T13741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  320.145296][T13741] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  320.150041][ T6134] usb 2-1: USB disconnect, device number 39
[  320.972729][T13767] loop1: detected capacity change from 0 to 32768
[  322.251752][T13818] loop1: detected capacity change from 0 to 512
[  322.260562][T13818] ext4: Unknown parameter 'fsuuid'
[  322.269412][T13818] tmpfs: Bad value for 'mpol'
[  322.822440][T13853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2981'.
[  323.457103][T13862] overlayfs: failed to resolve './file0': -2
[  323.814538][T13875] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  323.876702][T13882] netlink: 'syz.5.2988': attribute type 21 has an invalid length.
[  323.879572][T13882] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2988'.
[  324.068695][T13897] lo: entered allmulticast mode
[  324.071405][T13896] lo: left allmulticast mode
[  324.297136][T13917] loop1: detected capacity change from 0 to 4096
[  324.323178][T13917] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  324.740882][T13926] overlayfs: failed to clone upperpath
[  326.430233][T13960] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3013'.
[  326.952738][   T33] audit: type=1326 audit(1755656943.083:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.1.3020" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b158ebe9 code=0x50000
[  326.962253][   T33] audit: type=1326 audit(1755656943.093:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.1.3020" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b158ebe9 code=0x50000
[  326.971657][   T33] audit: type=1326 audit(1755656943.093:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.1.3020" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b158ebe9 code=0x50000
[  326.980817][   T33] audit: type=1326 audit(1755656943.093:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.1.3020" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b158ebe9 code=0x50000
[  326.991508][   T33] audit: type=1326 audit(1755656943.093:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.1.3020" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b158ebe9 code=0x50000
[  327.000388][   T33] audit: type=1326 audit(1755656943.093:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.1.3020" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b158ebe9 code=0x50000
[  327.010443][   T33] audit: type=1326 audit(1755656943.093:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.1.3020" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b158ebe9 code=0x50000
[  327.019296][   T33] audit: type=1326 audit(1755656943.093:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.1.3020" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b158ebe9 code=0x50000
[  327.028673][   T33] audit: type=1326 audit(1755656943.093:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.1.3020" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b158ebe9 code=0x50000
[  327.038003][   T33] audit: type=1326 audit(1755656943.093:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13978 comm="syz.1.3020" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2b158ebe9 code=0x50000
[  328.026634][T13987] openvswitch: netlink: Message has 1 unknown bytes.
[  328.885974][T14034] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  328.900477][T14034] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.903228][T14034] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.927302][ T5999] bond0: (slave bridge0): link status definitely down, disabling slave
[  328.998990][T14037] loop5: detected capacity change from 0 to 2048
[  329.071917][T14037] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  329.080514][T14037] ext4 filesystem being mounted at /530/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  329.097719][T14037] fs-verity (loop5, inode 13): Unknown hash algorithm number: 3
[  329.128551][ T8576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.775946][T14051] overlayfs: failed to resolve './file0': -2
[  330.565201][T14082] overlayfs: failed to clone upperpath
[  331.703282][ T5313] usb 2-1: new full-speed USB device number 40 using dummy_hcd
[  331.849893][ T5313] usb 2-1: config 131 has an invalid interface number: 242 but max is 0
[  331.852773][ T5313] usb 2-1: config 131 has no interface number 0
[  331.858594][ T5313] usb 2-1: config 131 interface 242 altsetting 13 endpoint 0x2 has invalid maxpacket 7573, setting to 64
[  331.862411][ T5313] usb 2-1: config 131 interface 242 altsetting 13 endpoint 0xC has invalid wMaxPacketSize 0
[  331.866372][ T5313] usb 2-1: config 131 interface 242 has no altsetting 0
[  331.873422][ T5313] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010b, bcdDevice=19.10
[  331.876542][ T5313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5
[  331.879316][ T5313] usb 2-1: Product: syz
[  331.880723][ T5313] usb 2-1: Manufacturer: syz
[  331.882285][ T5313] usb 2-1: SerialNumber: syz
[  331.888807][T14097] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  332.089467][ T5313] kvaser_usb 2-1:131.242: error -ENODEV: Cannot get usb endpoint(s)
[  332.099350][ T5313] usb 2-1: USB disconnect, device number 40
[  332.659346][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3062'.
[  332.771030][T14145] loop5: detected capacity change from 0 to 512
[  332.801117][T14145] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  332.808229][T14145] ext4 filesystem being mounted at /538/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  332.817554][T14145] __quota_error: 11657 callbacks suppressed
[  332.817564][T14145] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present
[  332.825965][T14145] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  332.826374][T14151] loop1: detected capacity change from 0 to 512
[  332.830488][T14145] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3066: Failed to acquire dquot type 0
[  332.842815][T14145] EXT4-fs (loop5): Remounting filesystem read-only
[  332.884832][T14151] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.3068: iget: bad i_size value: 38620345925642
[  332.905479][T14151] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3068: couldn't read orphan inode 15 (err -117)
[  332.907938][ T8576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.914230][T14151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  332.930432][T14151] fscrypt (loop1, inode 18): Direct key flag not allowed with different contents and filenames modes
[  332.963342][ T5940] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.351593][T14209] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  334.305443][T14232] IPVS: persistence engine module ip_vs_pe_s not found
[  334.319813][T14237] netlink: 'syz.4.3095': attribute type 2 has an invalid length.
[  334.364404][T14237] k*]: entered promiscuous mode
[  335.368481][T14267] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3106'.
[  335.768251][T14278] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3110'.
[  335.773230][T14278] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3110'.
[  336.500103][T14289] loop5: detected capacity change from 0 to 32768
[  336.509778][T14289] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3115 (14289)
[  336.568989][T14289] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  336.573477][T14289] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  336.577073][T14289] BTRFS info (device loop5): using free-space-tree
[  336.845531][ T8576] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  336.957661][T14340] loop1: detected capacity change from 0 to 1024
[  336.979576][T14340] EXT4-fs: Ignoring removed bh option
[  336.990850][T14340] EXT4-fs: inline encryption not supported
[  337.019711][T14340] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  337.044647][T14340] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.3127: lblock 2 mapped to illegal pblock 2 (length 1)
[  337.073312][T14340] Quota error (device loop1): qtree_write_dquot: dquota write failed
[  337.076735][T14340] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.3127: lblock 0 mapped to illegal pblock 48 (length 1)
[  337.109913][T14340] Quota error (device loop1): v2_write_file_info: Can't write info structure
[  337.125722][T14340] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3127: Failed to acquire dquot type 0
[  337.146332][T14340] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  337.171965][T14340] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.3127: mark_inode_dirty error
[  337.177947][T14340] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  337.182470][T14340] EXT4-fs (loop1): 1 orphan inode deleted
[  337.189005][T14340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  337.194476][T14227] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u9:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  337.224106][T14340] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 16: comm syz.1.3127: lblock 0 mapped to illegal pblock 16 (length 1)
[  337.244634][T14227] Quota error (device loop1): remove_tree: Can't read quota data block 1
[  337.248248][T14227] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u9:7: Failed to release dquot type 0
[  337.300714][ T5940] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.306434][ T5940] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  337.317993][ T5940] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  337.322080][ T5940] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  338.754845][T14428] loop1: detected capacity change from 0 to 2048
[  338.768646][T14430] IPv4: Oversized IP packet from 172.20.20.24
[  338.773700][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  338.776594][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  338.785425][T14428] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  338.878521][T14439] atomic_op ffff888029ef8998 conn xmit_atomic 0000000000000000
[  339.015310][ T5313] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  339.015812][   T33] audit: type=1800 audit(1755656955.812:11723): pid=14446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3157" name="file0" dev="tmpfs" ino=5888 res=0 errno=0
[  339.158651][ T5313] usb 2-1: Using ep0 maxpacket: 16
[  339.164365][ T5313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  339.172198][ T5313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  339.177399][ T5313] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  339.181228][ T5313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.188925][ T5313] usb 2-1: config 0 descriptor??
[  339.906138][ T5313] usb 2-1: string descriptor 0 read error: -71
[  339.935871][ T5313] usb 2-1: Max retries (5) exceeded reading string descriptor 200
[  339.939156][ T5313] letsketch 0003:6161:4D15.000E: probe with driver letsketch failed with error -32
[  339.950698][ T5313] usb 2-1: USB disconnect, device number 41
[  340.510377][T14513] overlayfs: failed to clone upperpath
[  341.243117][T14591] loop5: detected capacity change from 0 to 512
[  341.302015][T14591] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  341.304868][T14591] System zones: 0-2, 18-18, 34-34
[  341.330270][T14591] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3203: bg 0: block 248: padding at end of block bitmap is not set
[  341.343567][T14591] Quota error (device loop5): write_blk: dquota write failed
[  341.346845][T14591] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  341.354370][T14591] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3203: Failed to acquire dquot type 1
[  341.364090][T14591] EXT4-fs (loop5): 1 truncate cleaned up
[  341.374592][T14591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  341.384583][T14591] ext4 filesystem being mounted at /564/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  341.431309][ T8576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.746095][T14628] netlink: 'syz.5.3215': attribute type 22 has an invalid length.
[  341.749385][T14628] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3215'.
[  341.840276][T14640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3218'.
[  342.026827][T14653] loop1: detected capacity change from 0 to 2048
[  342.043008][T14653] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  342.098516][   T33] audit: type=1800 audit(1755656959.037:11724): pid=14653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3223" name="file1" dev="loop1" ino=1346 res=0 errno=0
[  343.875409][T14705] netlink: 'syz.5.3240': attribute type 3 has an invalid length.
[  343.878480][T14705] netlink: 'syz.5.3240': attribute type 1 has an invalid length.
[  343.883411][T14705] netlink: 192 bytes leftover after parsing attributes in process `syz.5.3240'.
[  343.887174][T14705] NCSI netlink: No device for ifindex 0
[  344.139893][T14725] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3249'.
[  344.474534][T14748] loop5: detected capacity change from 0 to 4096
[  344.486617][T14748] EXT4-fs (loop5): Test dummy encryption mode enabled
[  344.495811][T14748] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  344.502870][T14748] System zones: 0-5
[  344.533253][T14748] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  344.679215][T14697] comedi comedi3: reset error (fatal)
[  344.811104][ T8576] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.958675][T14767] loop5: detected capacity change from 0 to 128
[  344.973826][T14767] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  344.979902][T14767] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  345.038816][T14767] overlayfs: failed to create directory ./file0/work (errno: 28); mounting read-only
[  345.045486][T14767] overlayfs: failed to get uuid (/bus, err=-95); falling back to uuid=null.
[  346.505266][ T5313] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  346.693345][ T5313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  346.701604][ T5313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  346.705625][ T5313] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  346.710790][ T5313] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  346.714686][ T5313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.720797][ T5313] usb 2-1: config 0 descriptor??
[  347.190392][ T5313] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  347.248384][T14816] loop5: detected capacity change from 0 to 128
[  347.276834][T14816] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  347.316167][T14816] hpfs: hpfs_map_sector(): read error
[  347.391133][ T6132] usb 2-1: USB disconnect, device number 42
[  347.903902][T14848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3279'.
[  348.327985][T14861] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  348.331624][T14861] IPv6: NLM_F_CREATE should be set when creating new route
[  348.970922][T14870] dvmrp5: entered allmulticast mode
[  348.984001][T14870] pimreg: entered allmulticast mode
[  350.493624][T14928] pimreg: entered allmulticast mode
[  350.501848][T14928] pimreg: left allmulticast mode
[  350.538161][   T33] audit: type=1326 audit(1755656967.952:11725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="syz.4.3305" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c27b8ebe9 code=0x7ffc0000
[  350.546901][   T33] audit: type=1326 audit(1755656967.952:11726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="syz.4.3305" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c27b8ebe9 code=0x7ffc0000
[  350.548324][T14937] loop1: detected capacity change from 0 to 512
[  350.556966][   T33] audit: type=1326 audit(1755656967.952:11727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="syz.4.3305" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9c27b8ebe9 code=0x7ffc0000
[  350.573831][   T33] audit: type=1326 audit(1755656967.952:11728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="syz.4.3305" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c27b8ebe9 code=0x7ffc0000
[  350.592408][T14937] EXT4-fs (loop1): orphan cleanup on readonly fs
[  350.592513][   T33] audit: type=1326 audit(1755656967.952:11729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="syz.4.3305" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c27b8ebe9 code=0x7ffc0000
[  350.595044][T14937] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  350.608577][   T33] audit: type=1326 audit(1755656967.963:11730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="syz.4.3305" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9c27b8ebe9 code=0x7ffc0000
[  350.612856][T14937] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  350.617415][   T33] audit: type=1326 audit(1755656967.963:11731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="syz.4.3305" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c27b8ebe9 code=0x7ffc0000
[  350.631398][   T33] audit: type=1326 audit(1755656967.963:11732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="syz.4.3305" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c27b8ebe9 code=0x7ffc0000
[  350.638811][   T33] audit: type=1326 audit(1755656967.973:11733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="syz.4.3305" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9c27b8ebe9 code=0x7ffc0000
[  350.649260][   T33] audit: type=1326 audit(1755656967.973:11734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14935 comm="syz.4.3305" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9c27b8ebe9 code=0x7ffc0000
[  350.661498][T14937] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.3304: attempt to clear invalid blocks 2 len 1
[  350.672085][T14937] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3304: invalid indirect mapped block 1819239214 (level 0)
[  350.678290][T14937] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3304: invalid indirect mapped block 1819239214 (level 1)
[  350.683592][T14937] EXT4-fs (loop1): 1 truncate cleaned up
[  350.686173][T14937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  350.700300][T14937] EXT4-fs error (device loop1): ext4_lookup:1784: inode #2: comm syz.1.3304: 'file1' linked to parent dir
[  350.723556][ T5940] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.057292][ T6134] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  351.189486][T14996] loop5: detected capacity change from 0 to 2048
[  351.202130][ T6134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  351.206480][ T6134] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  351.217798][ T6134] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  351.229139][T14996] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  351.233311][ T6134] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  351.250603][ T6134] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  351.254707][ T6134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.266100][ T6134] usb 2-1: Product: syz
[  351.267892][ T6134] usb 2-1: Manufacturer: syz
[  351.270078][ T6134] usb 2-1: SerialNumber: syz
[  351.280824][ T6134] usb 2-1: config 0 descriptor??
[  351.288950][ T6134] kvaser_usb 2-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0
[  351.296279][ T6134] kvaser_usb 2-1:0.0: error -EMSGSIZE: Failed to initialize card
[  351.299709][ T6134] kvaser_usb 2-1:0.0: probe with driver kvaser_usb failed with error -90
[  351.481563][ T6134] usb 2-1: USB disconnect, device number 43
[  352.371105][T15059] loop1: detected capacity change from 0 to 4096
[  352.375316][T15059] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  352.381457][T15059] ntfs3(loop1): ino=3, mi_enum_attr
[  353.205122][    T9] usb 2-1: new full-speed USB device number 44 using dummy_hcd
[  353.371633][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  353.378116][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  353.384691][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  353.391981][    T9] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  353.396039][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.399326][    T9] usb 2-1: Product: syz
[  353.401074][    T9] usb 2-1: Manufacturer: syz
[  353.404717][    T9] usb 2-1: SerialNumber: syz
[  353.410486][    T9] usb 2-1: config 0 descriptor??
[  353.417688][T15080] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  353.421057][T15080] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  353.425317][    T9] usb 2-1: ucan: probing device on interface #0
[  353.818215][    T9] usb 2-1: ucan: failed to retrieve device info
[  353.821360][    T9] usb 2-1: ucan: probe failed; try to update the device firmware
[  353.829030][    T9] usb 2-1: USB disconnect, device number 44
[  354.329060][T15104] sctp: [Deprecated]: syz.1.3354 (pid 15104) Use of int in maxseg socket option.
[  354.329060][T15104] Use struct sctp_assoc_value instead
[  354.580879][T15117] loop1: detected capacity change from 0 to 256
[  354.594963][T15117] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[  355.792371][T15163] loop5: detected capacity change from 0 to 256
[  355.808149][T15163] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  356.103822][T15188] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3380'.
[  356.747186][T15215] loop5: detected capacity change from 0 to 4096
[  356.755921][T15215] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  357.536308][T15231] loop1: detected capacity change from 0 to 32768
[  357.908683][T15246] loop5: detected capacity change from 0 to 16
[  357.912905][T15246] erofs (device loop5): rootino(nid 36) is not a directory(i_mode 16700)
[  358.018234][T15258] syzkaller1: entered promiscuous mode
[  358.020587][T15258] syzkaller1: entered allmulticast mode
[  358.109657][T15266] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3399'.
[  358.259663][T15282] loop1: detected capacity change from 0 to 1764
[  358.465075][T15296] loop1: detected capacity change from 0 to 512
[  358.489842][T15296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  358.505047][T15296] ext4 filesystem being mounted at /933/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  358.531885][   T33] audit: type=1800 audit(1755656976.368:11735): pid=15296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3408" name="file2" dev="loop1" ino=16 res=0 errno=0
[  358.589073][ T5940] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.021170][T15323] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3414'.
[  359.407900][T15353] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  359.571659][T15361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3428'.
[  359.577834][T15361] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3428'.
[  359.676637][T15365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3429'.
[  360.042461][T15382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3429'.
[  360.434011][T15399] loop1: detected capacity change from 0 to 512
[  360.460352][T15399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  360.490018][T15399] EXT4-fs (loop1): shut down requested (2)
[  360.531660][ T5940] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.990911][T15444] loop1: detected capacity change from 0 to 256
[  360.996656][T15444] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  361.003600][T15444] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  361.037539][T15444] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  361.214500][T15460] binder: 15459:15460 ioctl 4018620d 0 returned -22
[  362.284298][T15490] input: syz0 as /devices/virtual/input/input17
[  362.522392][T15519] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  362.525232][T15519] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  362.592010][T15528] loop5: detected capacity change from 0 to 128
[  362.646619][T15528] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  362.667672][T15528] ext4 filesystem being mounted at /648/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  362.677836][T15528] __find_get_block_slow() failed. block=144115188075855873, b_blocknr=0, b_state=0x00000019, b_size=1024, device loop5 blocksize: 1024
[  362.698967][T15528] grow_buffers: requested out-of-range block 144115188075855873 for device loop5
[  362.707885][T15528] EXT4-fs warning (device loop5): ext4_resize_fs:2019: can't read last block, resize aborted
[  362.796844][ T8576] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  362.867323][T15545] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  363.255426][T15584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3480'.
[  363.711857][T15608] loop1: detected capacity change from 0 to 1764
[  363.825641][T15625] loop1: detected capacity change from 0 to 1024
[  363.897847][T15625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  363.905789][T15631] loop5: detected capacity change from 0 to 2048
[  363.919543][T15625] ext4 filesystem being mounted at /964/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  363.994393][ T5940] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.068455][T15648] loop1: detected capacity change from 0 to 512
[  364.087188][T15648] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  364.096088][T15648] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  364.100058][T15648] EXT4-fs (loop1): 1 truncate cleaned up
[  364.104661][T15648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  364.121243][T15648] EXT4-fs: user quota file already specified
[  364.189041][ T5940] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.222995][T15664] loop1: detected capacity change from 0 to 256
[  364.307327][T15664] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  364.311716][T15664] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  364.375264][T15664] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  364.442415][ T5943] Bluetooth: hci2: command 0x0406 tx timeout
[  364.458886][ T5313] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  364.483425][ T5313] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  365.129379][T15689] bond0: option lp_interval: invalid value (0)
[  365.133288][T15689] bond0: option lp_interval: allowed values 1 - 2147483647
[  365.510046][T15703] loop5: detected capacity change from 0 to 128
[  365.522994][T15703] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  365.533547][T15703] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  367.095498][ T5943] Bluetooth: hci0: command 0x0406 tx timeout
[  367.095607][ T5313] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  367.116358][ T5313] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  367.240406][ T5313] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING)
[  367.434682][   T33] audit: type=1800 audit(1755656985.739:11736): pid=15746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3516" name="file1" dev="tmpfs" ino=3539 res=0 errno=0
[  367.626310][T15751] loop5: detected capacity change from 0 to 736
[  368.455571][   T52] usb 2-1: new full-speed USB device number 45 using dummy_hcd
[  368.704611][   T52] usb 2-1: config 9 has an invalid interface number: 252 but max is 0
[  368.710722][   T52] usb 2-1: config 9 has no interface number 0
[  368.713479][   T52] usb 2-1: config 9 interface 252 has no altsetting 0
[  368.721306][   T52] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice=dd.7c
[  368.725158][   T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.748384][   T52] usb 2-1: Product: syz
[  368.750371][   T52] usb 2-1: Manufacturer: syz
[  368.752330][   T52] usb 2-1: SerialNumber: syz
[  368.970799][   T52] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:9.252/input/input18
[  368.979979][ T5280] bcm5974 2-1:9.252: could not read from device
[  368.990231][ T5280] bcm5974 2-1:9.252: could not read from device
[  369.014011][   T52] usb 2-1: USB disconnect, device number 45
[  369.019417][ T5280] bcm5974 2-1:9.252: could not read from device
[  369.252770][T15869] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  369.256355][T15869] IPv6: NLM_F_CREATE should be set when creating new route
[  369.305390][T15872] IPv6: sit1: Disabled Multicast RS
[  369.309131][T15872] sit1: entered allmulticast mode
[  371.034602][T15962] tipc: Cannot configure node identity twice
[  371.170679][T15973] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 2
[  371.195870][T14227] Bluetooth: hci3: Frame reassembly failed (-84)
[  371.206136][T14227] Bluetooth: hci3: Frame reassembly failed (-84)
[  371.533023][T15982] IPv6: NLM_F_CREATE should be specified when creating new route
[  371.536815][T15982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  371.540195][T15982] IPv6: NLM_F_CREATE should be set when creating new route
[  371.543551][T15982] IPv6: NLM_F_CREATE should be set when creating new route
[  371.546534][T15982] IPv6: NLM_F_CREATE should be set when creating new route
[  371.557099][T15982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  372.394197][T15998] netlink: 392 bytes leftover after parsing attributes in process `syz.4.3594'.
[  373.099284][ T5938] Bluetooth: hci3: command 0x1003 tx timeout
[  373.101899][ T5943] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  373.552134][T16029] loop1: detected capacity change from 0 to 256
[  373.674261][T16029] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  373.966333][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  373.968649][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  374.436007][T16070] loop1: detected capacity change from 0 to 2048
[  374.441438][T16070] EXT4-fs: Ignoring removed mblk_io_submit option
[  374.491572][T16070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  374.544548][ T5940] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.852460][T16081] loop5: detected capacity change from 0 to 4096
[  375.377761][T16081] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  375.395562][T16081] ntfs3(loop5): Failed to load $Extend (-22).
[  375.397792][T16081] ntfs3(loop5): Failed to initialize $Extend.
[  375.593191][T16090] loop1: detected capacity change from 0 to 4096
[  375.671971][T16099] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3625'.
[  375.926070][T16114] netlink: 'syz.5.3630': attribute type 15 has an invalid length.
[  375.986112][T16117] loop5: detected capacity change from 0 to 2048
[  376.020450][T16117] NILFS (loop5): Invalid checkpoint (checkpoint number=2)
[  376.023189][T16117] NILFS (loop5): error -22 while loading last checkpoint (checkpoint number=2)
[  376.299227][T16090] ntfs3(loop1): mft corrupted
[  376.303412][T16090] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  376.311407][T16090] ntfs3(loop1): ino=1a, mi_enum_attr
[  376.313810][T16090] ntfs3(loop1): ino=1a, mi_enum_attr
[  376.316023][T16090] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  376.446870][T16137] loop1: detected capacity change from 0 to 4096
[  376.469582][T16137] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  376.523611][T16144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3637'.
[  376.561391][T16147] loop1: detected capacity change from 0 to 512
[  376.564679][T16147] EXT4-fs: Ignoring removed mblk_io_submit option
[  376.567361][T16147] EXT4-fs: inline encryption not supported
[  376.572678][T16147] EXT4-fs: Ignoring removed mblk_io_submit option
[  376.578013][T16147] EXT4-fs (loop1): Test dummy encryption mode enabled
[  376.580292][T16147] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  376.585563][T16147] EXT4-fs (loop1): 1 truncate cleaned up
[  376.591547][T16147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  376.599936][T16147] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  376.743617][ T5940] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.050616][T16173] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  377.075668][T16163] loop1: detected capacity change from 0 to 32768
[  377.080463][T16163] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3641 (16163)
[  377.093444][T16163] BTRFS error: invalid seeding and uuid-changed device detected
[  377.127211][T16180] netlink: 'syz.4.3647': attribute type 21 has an invalid length.
[  377.132334][T16180] netlink: 'syz.4.3647': attribute type 6 has an invalid length.
[  377.135006][T16180] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3647'.
[  377.170997][T16184] netlink: 324 bytes leftover after parsing attributes in process `syz.1.3648'.
[  377.173975][T16184] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3648'.
[  377.178592][T16184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3648'.
[  377.190630][T16185] delete_channel: no stack
[  378.510833][T16255] loop1: detected capacity change from 0 to 1024
[  378.513841][T16255] EXT4-fs: Ignoring removed bh option
[  378.529246][T16255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  378.552175][ T5940] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.685315][T16331] netlink: 'syz.4.3699': attribute type 29 has an invalid length.
[  380.691702][T16333] loop1: detected capacity change from 0 to 256
[  380.699250][T16333] exfat: Deprecated parameter 'utf8'
[  380.722635][T16331] netlink: 'syz.4.3699': attribute type 29 has an invalid length.
[  380.730510][T16333] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e3e, chksum : 0x38c882e6, utbl_chksum : 0xe619d30d)
[  381.050801][T16367] netlink: 'syz.1.3710': attribute type 83 has an invalid length.
[  381.349250][   T52] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  381.490729][   T52] usb 2-1: Using ep0 maxpacket: 16
[  381.494204][   T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  381.497813][   T52] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  381.503948][   T52] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  381.507244][   T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.515606][   T52] usb 2-1: config 0 descriptor??
[  381.698524][T16384] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3715'.
[  381.703347][T16384] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3715'.
[  381.929901][   T52] HID 045e:07da: Invalid code 65791 type 1
[  381.947987][   T52] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0010/input/input20
[  381.967592][   T52] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  382.824920][   T52] usb 2-1: USB disconnect, device number 46
[  382.853251][T16407] openvswitch: netlink: IPv4 tunnel dst address is zero
[  383.520178][T16434] loop1: detected capacity change from 0 to 8
[  383.535796][T16434] SQUASHFS error: zlib decompression failed, data probably corrupt
[  383.545103][T16434] SQUASHFS error: Failed to read block 0x9b: -5
[  383.548344][T16434] SQUASHFS error: Unable to read metadata cache entry [99]
[  383.551769][T16434] SQUASHFS error: Unable to read inode 0x127
[  384.160732][ T6132] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  384.303720][ T6132] usb 2-1: Using ep0 maxpacket: 8
[  384.319241][ T6132] usb 2-1: unable to get BOS descriptor or descriptor too short
[  384.324791][ T6132] usb 2-1: config 2 has an invalid interface number: 164 but max is 0
[  384.327440][ T6132] usb 2-1: config 2 has no interface number 0
[  384.329804][ T6132] usb 2-1: config 2 interface 164 has no altsetting 0
[  384.343921][ T6132] usb 2-1: New USB device found, idVendor=0424, idProduct=9730, bcdDevice=50.16
[  384.347132][ T6132] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.350031][ T6132] usb 2-1: Product: syz
[  384.360789][ T6132] usb 2-1: Manufacturer: syz
[  384.362344][ T6132] usb 2-1: SerialNumber: syz
[  384.399662][T16458] loop5: detected capacity change from 0 to 32768
[  384.403471][T16458] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3734 (16458)
[  384.444157][T16458] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  384.455234][T16458] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  384.459672][T16458] BTRFS info (device loop5): using free-space-tree
[  384.519334][T16458] BTRFS info (device loop5): rebuilding free space tree
[  384.567074][T16499] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  384.573024][ T6132] smsc95xx v2.0.0
[  384.574296][ T6132] smsc95xx 2-1:2.164 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  384.585493][   T33] audit: type=1800 audit(1755657003.777:11737): pid=16458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3734" name="file1" dev="loop5" ino=260 res=0 errno=0
[  384.593096][ T6132] smsc95xx 2-1:2.164: probe with driver smsc95xx failed with error -22
[  384.639295][ T6132] usb 2-1: USB disconnect, device number 47
[  385.435243][ T8576] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  385.855334][T16549] loop5: detected capacity change from 0 to 128
[  385.871804][T16549] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  385.881702][T16549] ext4 filesystem being mounted at /720/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  386.093929][T16546] loop1: detected capacity change from 0 to 32768
[  386.104011][ T8576] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  386.155880][T16546] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  386.236837][   T33] audit: type=1804 audit(1755657005.524:11738): pid=16546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3753" name="/newroot/1030/file1/bus" dev="loop1" ino=17058 res=1 errno=0
[  386.296614][   T33] audit: type=1800 audit(1755657005.587:11739): pid=16546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3753" name="file1" dev="loop1" ino=17059 res=0 errno=0
[  386.314563][   T33] audit: type=1804 audit(1755657005.608:11740): pid=16546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3753" name="/newroot/1030/file1/bus" dev="loop1" ino=17058 res=1 errno=0
[  386.354909][T16546] 
[  386.356061][T16546] ======================================================
[  386.358966][T16546] WARNING: possible circular locking dependency detected
[  386.361884][T16546] 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 Not tainted
[  386.365597][T16546] ------------------------------------------------------
[  386.368731][T16546] syz.1.3753/16546 is trying to acquire lock:
[  386.371284][T16546] ffff888113fb6be0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xb6/0x320
[  386.376055][T16546] 
[  386.376055][T16546] but task is already holding lock:
[  386.379083][T16546] ffff888113fb6c78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x320
[  386.383443][T16546] 
[  386.383443][T16546] which lock already depends on the new lock.
[  386.383443][T16546] 
[  386.387694][T16546] 
[  386.387694][T16546] the existing dependency chain (in reverse order) is:
[  386.391348][T16546] 
[  386.391348][T16546] -> #4 (&oi->ip_xattr_sem){++++}-{4:4}:
[  386.394518][T16546]        lock_acquire+0x120/0x360
[  386.396644][T16546]        down_read+0x46/0x2e0
[  386.398591][T16546]        ocfs2_init_acl+0x2f9/0x720
[  386.400707][T16546]        ocfs2_mknod+0x1321/0x2050
[  386.402769][T16546]        ocfs2_create+0x1a5/0x440
[  386.404856][T16546]        path_openat+0x14f4/0x3830
[  386.406943][T16546]        do_filp_open+0x1fa/0x410
[  386.409069][T16546]        do_sys_openat2+0x121/0x1c0
[  386.411170][T16546]        __x64_sys_creat+0x8f/0xc0
[  386.413251][T16546]        do_syscall_64+0xfa/0x3b0
[  386.415296][T16546]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.417857][T16546] 
[  386.417857][T16546] -> #3 (jbd2_handle){++++}-{0:0}:
[  386.420806][T16546]        lock_acquire+0x120/0x360
[  386.422952][T16546]        start_this_handle+0x1fa7/0x21c0
[  386.425220][T16546]        jbd2__journal_start+0x2c1/0x5b0
[  386.427470][T16546]        jbd2_journal_start+0x2a/0x40
[  386.429708][T16546]        ocfs2_start_trans+0x376/0x6d0
[  386.431952][T16546]        ocfs2_mknod+0xe93/0x2050
[  386.434012][T16546]        ocfs2_create+0x1a5/0x440
[  386.436097][T16546]        path_openat+0x14f4/0x3830
[  386.438207][T16546]        do_filp_open+0x1fa/0x410
[  386.439918][T16546]        do_sys_openat2+0x121/0x1c0
[  386.441619][T16546]        __x64_sys_creat+0x8f/0xc0
[  386.443268][T16546]        do_syscall_64+0xfa/0x3b0
[  386.444909][T16546]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.447290][T16546] 
[  386.447290][T16546] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  386.450716][T16546]        lock_acquire+0x120/0x360
[  386.452596][T16546]        down_read+0x46/0x2e0
[  386.454204][T16546]        ocfs2_start_trans+0x36a/0x6d0
[  386.456012][T16546]        ocfs2_mknod+0xe93/0x2050
[  386.457645][T16546]        ocfs2_create+0x1a5/0x440
[  386.459247][T16546]        path_openat+0x14f4/0x3830
[  386.460915][T16546]        do_filp_open+0x1fa/0x410
[  386.462847][T16546]        do_sys_openat2+0x121/0x1c0
[  386.465073][T16546]        __x64_sys_creat+0x8f/0xc0
[  386.466883][T16546]        do_syscall_64+0xfa/0x3b0
[  386.468900][T16546]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.471501][T16546] 
[  386.471501][T16546] -> #1 (sb_internal#2){.+.+}-{0:0}:
[  386.474335][T16546]        lock_acquire+0x120/0x360
[  386.475949][T16546]        ocfs2_start_trans+0x26b/0x6d0
[  386.477777][T16546]        ocfs2_write_begin_nolock+0x1ca6/0x4340
[  386.479829][T16546]        ocfs2_write_begin+0x1bb/0x310
[  386.481576][T16546]        generic_perform_write+0x2c5/0x900
[  386.483498][T16546]        ocfs2_file_write_iter+0x157a/0x1d10
[  386.485426][T16546]        iter_file_splice_write+0x93a/0x1000
[  386.487484][T16546]        do_splice+0xc79/0x1660
[  386.489345][T16546]        __se_sys_splice+0x2e1/0x460
[  386.491064][T16546]        do_syscall_64+0xfa/0x3b0
[  386.492739][T16546]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.494832][T16546] 
[  386.494832][T16546] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  386.497672][T16546]        validate_chain+0xb9b/0x2140
[  386.499427][T16546]        __lock_acquire+0xab9/0xd20
[  386.501089][T16546]        lock_acquire+0x120/0x360
[  386.502713][T16546]        down_write+0x96/0x1f0
[  386.504255][T16546]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[  386.506298][T16546]        ocfs2_truncate_file+0xda0/0x1420
[  386.508485][T16546]        ocfs2_setattr+0x1520/0x1b40
[  386.510293][T16546]        notify_change+0xb36/0xe40
[  386.511928][T16546]        do_truncate+0x1a4/0x220
[  386.513544][T16546]        path_openat+0x306c/0x3830
[  386.515198][T16546]        do_filp_open+0x1fa/0x410
[  386.516799][T16546]        do_sys_openat2+0x121/0x1c0
[  386.518610][T16546]        __x64_sys_creat+0x8f/0xc0
[  386.520311][T16546]        do_syscall_64+0xfa/0x3b0
[  386.522165][T16546]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.524240][T16546] 
[  386.524240][T16546] other info that might help us debug this:
[  386.524240][T16546] 
[  386.527598][T16546] Chain exists of:
[  386.527598][T16546]   &ocfs2_file_ip_alloc_sem_key --> jbd2_handle --> &oi->ip_xattr_sem
[  386.527598][T16546] 
[  386.532828][T16546]  Possible unsafe locking scenario:
[  386.532828][T16546] 
[  386.535240][T16546]        CPU0                    CPU1
[  386.536957][T16546]        ----                    ----
[  386.538974][T16546]   lock(&oi->ip_xattr_sem);
[  386.540480][T16546]                                lock(jbd2_handle);
[  386.542619][T16546]                                lock(&oi->ip_xattr_sem);
[  386.544892][T16546]   lock(&ocfs2_file_ip_alloc_sem_key);
[  386.546655][T16546] 
[  386.546655][T16546]  *** DEADLOCK ***
[  386.546655][T16546] 
[  386.549903][T16546] 3 locks held by syz.1.3753/16546:
[  386.551679][T16546]  #0: ffff888129c22428 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  386.554651][T16546]  #1: ffff888113fb6f40 (&sb->s_type->i_mutex_key#21){+.+.}-{4:4}, at: do_truncate+0x171/0x220
[  386.558025][T16546]  #2: ffff888113fb6c78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x320
[  386.561556][T16546] 
[  386.561556][T16546] stack backtrace:
[  386.563693][T16546] CPU: 0 UID: 0 PID: 16546 Comm: syz.1.3753 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  386.563704][T16546] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  386.563710][T16546] Call Trace:
[  386.563716][T16546]  <TASK>
[  386.563722][T16546]  dump_stack_lvl+0x189/0x250
[  386.563736][T16546]  ? __pfx_dump_stack_lvl+0x10/0x10
[  386.563745][T16546]  ? __pfx__printk+0x10/0x10
[  386.563756][T16546]  ? print_lock_name+0xde/0x100
[  386.563765][T16546]  print_circular_bug+0x2ee/0x310
[  386.563775][T16546]  check_noncircular+0x134/0x160
[  386.563783][T16546]  validate_chain+0xb9b/0x2140
[  386.563796][T16546]  __lock_acquire+0xab9/0xd20
[  386.563808][T16546]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  386.563815][T16546]  lock_acquire+0x120/0x360
[  386.563824][T16546]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  386.563832][T16546]  down_write+0x96/0x1f0
[  386.563842][T16546]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  386.563848][T16546]  ? __pfx_down_write+0x10/0x10
[  386.563857][T16546]  ocfs2_try_remove_refcount_tree+0xb6/0x320
[  386.563864][T16546]  ? __pfx_ocfs2_try_remove_refcount_tree+0x10/0x10
[  386.563870][T16546]  ? up_write+0x1c4/0x420
[  386.563878][T16546]  ocfs2_truncate_file+0xda0/0x1420
[  386.563888][T16546]  ? __pfx_ocfs2_truncate_file+0x10/0x10
[  386.563896][T16546]  ? do_raw_spin_unlock+0x4d/0x240
[  386.563903][T16546]  ? _raw_spin_unlock+0x28/0x50
[  386.563917][T16546]  ? ocfs2_inode_lock_tracker+0x3ec/0x660
[  386.563931][T16546]  ? __pfx_ocfs2_inode_lock_tracker+0x10/0x10
[  386.563940][T16546]  ? ocfs2_rw_lock+0x13a/0x240
[  386.563949][T16546]  ? __pfx___dquot_initialize+0x10/0x10
[  386.563957][T16546]  ? __pfx_ocfs2_rw_lock+0x10/0x10
[  386.563965][T16546]  ? setattr_prepare+0x1e7/0xac0
[  386.563975][T16546]  ? inode_newsize_ok+0x11b/0x1c0
[  386.564009][T16546]  ocfs2_setattr+0x1520/0x1b40
[  386.564021][T16546]  ? __pfx_ocfs2_setattr+0x10/0x10
[  386.564029][T16546]  ? ktime_get_coarse_real_ts64_mg+0x52/0x1e0
[  386.564040][T16546]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  386.564050][T16546]  ? ktime_get_coarse_real_ts64_mg+0x1be/0x1e0
[  386.564060][T16546]  ? current_time+0x222/0x370
[  386.564067][T16546]  ? evm_inode_setattr+0x1b6/0x7d0
[  386.564073][T16546]  ? __pfx_current_time+0x10/0x10
[  386.564080][T16546]  ? try_break_deleg+0x79/0x130
[  386.564087][T16546]  ? __pfx_ocfs2_setattr+0x10/0x10
[  386.564094][T16546]  notify_change+0xb36/0xe40
[  386.564103][T16546]  do_truncate+0x1a4/0x220
[  386.564112][T16546]  ? __pfx_do_truncate+0x10/0x10
[  386.564120][T16546]  ? apparmor_file_truncate+0x23e/0x2d0
[  386.564130][T16546]  path_openat+0x306c/0x3830
[  386.564138][T16546]  ? arch_stack_walk+0xfc/0x150
[  386.564148][T16546]  ? stack_depot_save_flags+0x40/0x860
[  386.564159][T16546]  ? __pfx_path_openat+0x10/0x10
[  386.564167][T16546]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.564176][T16546]  do_filp_open+0x1fa/0x410
[  386.564183][T16546]  ? __lock_acquire+0xab9/0xd20
[  386.564192][T16546]  ? __pfx_do_filp_open+0x10/0x10
[  386.564202][T16546]  ? _raw_spin_unlock+0x28/0x50
[  386.564208][T16546]  ? alloc_fd+0x64c/0x6c0
[  386.564218][T16546]  do_sys_openat2+0x121/0x1c0
[  386.564224][T16546]  ? __se_sys_futex+0x36f/0x400
[  386.564232][T16546]  ? __pfx_do_sys_openat2+0x10/0x10
[  386.564239][T16546]  ? __pfx___se_sys_futex+0x10/0x10
[  386.564247][T16546]  ? rcu_is_watching+0x15/0xb0
[  386.564254][T16546]  __x64_sys_creat+0x8f/0xc0
[  386.564261][T16546]  do_syscall_64+0xfa/0x3b0
[  386.564270][T16546]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.564276][T16546]  ? asm_sysvec_call_function_single+0x1a/0x20
[  386.564283][T16546]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  386.564290][T16546] RIP: 0033:0x7fa2b158ebe9
[  386.564298][T16546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  386.564304][T16546] RSP: 002b:00007fa2b2319038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  386.564312][T16546] RAX: ffffffffffffffda RBX: 00007fa2b17b5fa0 RCX: 00007fa2b158ebe9
[  386.564318][T16546] RDX: 0000000000000000 RSI: 0000000000000182 RDI: 00002000000000c0
[  386.564323][T16546] RBP: 00007fa2b1611e19 R08: 0000000000000000 R09: 0000000000000000
[  386.564329][T16546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  386.564334][T16546] R13: 00007fa2b17b6038 R14: 00007fa2b17b5fa0 R15: 00007ffd251cdce8
[  386.564341][T16546]  </TASK>
[  386.773674][ T5940] ocfs2: Unmounting device (7,1) on (node local)

VM DIAGNOSIS:
00:39:03  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000234a RDI=000000000000234b RBP=00000000000003f8 RSP=ffffc9000b096850
R8 =ffff888107cf8237 R9 =1ffff11020f9f046 R10=dffffc0000000000 R11=ffffffff854e7660
R12=dffffc0000000000 R13=ffffffff99af2904 R14=ffffffff99de74e0 R15=0000000000000000
RIP=ffffffff854e76dc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa2b23196c0 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32821ff8 CR3=000000003d644000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81aced3b ffffffff81ac6d2d
XMM02=ffffffff823c7194 ffffffff81ac6d2d XMM03=ffffffff823c7b7d ffffffff823c721c
XMM04=ffffffff823c7ce4 ffffffff823c7b7d XMM05=ffffffff823c721c ffffffff823c7194
XMM06=ffffffff823c6ed2 ffffffff823c6e7e XMM07=ffffffff82391755 ffffffff82391708
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f9c27c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81ad7e7b RBX=0000000000000010 RCX=ffff88810608b980 RDX=0000000000000000
RSI=0000000000000010 RDI=0000000000000000 RBP=ffff888136627acc RSP=ffffc90003037b40
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff52000606f44
R12=dffffc0000000000 R13=ffffc90003037d40 R14=ffffc90003037d01 R15=1ffff11026cc4f59
RIP=ffffffff81bfaee8 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555568c1f500 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000563ced95c000 CR3=000000002704e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000017 000000000003bf12
XMM02=0000555568c3d21e 0000555568c3ce00 XMM03=0000555568c664b8 0000555568c664b0
XMM04=0000000000000000 0000000000000000 XMM05=0000555568c35dbd 0000555568c35d50
XMM06=0000555568c38474 0000555568c38470 XMM07=de0b800400000006 1006000000041006
XMM08=0601749a00000000 0000000000000000 XMM09=2030633734303061 3966666666666666
XMM10=74696e695f687475 615f687065632062 XMM11=3966666666666666 660a79656b5f5f2e
XMM12=3061633530306139 6666666666666666 XMM13=5f7663725f6c6e65 675f63666e206220
XMM14=660a79656b5f5f2e 746e6576655f6c6e XMM15=2030636335303061 3966666666666666
