last executing test programs:

1m51.097582723s ago: executing program 1 (id=2136):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x2000400, &(0x7f0000000800)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c001a2b91046ee117bde5e025d3fbfff828903821482423ab264b63dd73bd6161d5074608a726e3acc8ed96ed55b966f4dc9fb3023305819de982aeb48f303f62f93af9ba88e1fe698204c52881cace334f57cde23029fc52fc4a425452f84104a8c39cd64e35fa99410128906ca03c6638b69ee169d0420c"], 0xfd, 0x2ab, &(0x7f0000000280)="$eJzs3M1qE10cx/Ffk6ZNU9pk8fCAgnjQjW6GGq8gixbELqQ2oi6EqZ1oyJiUTIxEhBZcuPU6ikt3gvUGunHnXtwUQXDThXSkMxnzYuiLtp3afD8Q5mTO+c8585Lwn4E5W3dfP6mUPKtkN5RIm5cJaU3bUk4JRUbay0RQHlO3NV2d/P7pwu17928W5udnF4yZKyxezxtjpi++f/bizaUPjck7b6ffjWsz92DrW/7z5v+b57Z2FqOt1xrGNku1WsNech2zXPYqljG3XMf2HFOuek69p77k1lZWWsauLk9lVuqO5xm72jIVp2UaNdOot4z9yC5XjWVZZiqjYZM8dERxfWHBLhzLYBCHiUEr6/WCnRxYWVw/iUEBAIDTpS//10nl/4/Lnil7prpf/p/Q4Pzfbw+K/P9vBPn/zsCkEWdDavcGoGBn2r/fXuT/AAAAAAAAAAAAAAAAAAAAAAD8C7Z9P+v7fjZaRp9xSWlJ0fe4x4nj8QfnfyTG4eKIdb24l5bcV81isxguw/pCSWW5cjSTkn4E10NbWJ67MT87YwI5bbir7fjgJcHxKD6Sk/z07/HXwnjTFb/aLKaU6e4/r6z+G9x/vi8+JalZHNOVy13xlrL6+FA1uVoOrutO/Gg0vp7+J4J2AAAAAACcBZb5Jdd7/xvOJmlZJpo2pK8+XNl5PqDsPs8HjDbG1Ikf1fnR+PYbAAAAAIBh4rWeV2zXdeoUDlcYxkNnpcOLZs/Gvu+v7jbae4NJ7d9pQlJMe/pV0ik44Edd+PI0PIEHaRznvxIAAACA49BJ+uMeCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAw+ugk4dF7Q/SWH1TxHV1l4xlJwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBT4mcAAAD//+rSFRM=")

1m51.03563944s ago: executing program 1 (id=2138):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c)

1m50.973652013s ago: executing program 1 (id=2139):
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x46, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x44, @local, 0x3}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x1}, 0x41)

1m50.906829224s ago: executing program 1 (id=2141):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

1m50.006912228s ago: executing program 1 (id=2144):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0)

1m49.877564382s ago: executing program 1 (id=2147):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000003780)=[{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)="a6", 0x1}], 0x1, 0x0, 0x0, 0x200008c0}], 0x1, 0x44840)
recvmsg$can_j1939(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/128, 0x80}], 0x1}, 0x1)

1m49.691490036s ago: executing program 32 (id=2147):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000003780)=[{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)="a6", 0x1}], 0x1, 0x0, 0x0, 0x200008c0}], 0x1, 0x44840)
recvmsg$can_j1939(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/128, 0x80}], 0x1}, 0x1)

1m43.139515143s ago: executing program 0 (id=2203):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@host, 0x1})
close(0x3)

1m42.971222411s ago: executing program 0 (id=2205):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f0000000280)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@usrquota}, {@nodiscard}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x21, 0x61b6, &(0x7f00000075c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000840)=""/4096, 0x1000)

1m42.49569219s ago: executing program 0 (id=2214):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x4, 0x7}, {0x10}, {0x0, 0x80}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x70)

1m42.178196366s ago: executing program 0 (id=2220):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r0, &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000080)={0x2, 0xf8, 0x40000, {r0}}, 0x20)

1m42.109510714s ago: executing program 0 (id=2222):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)

1m41.891648403s ago: executing program 0 (id=2224):
r0 = epoll_create(0x2)
r1 = timerfd_create(0x0, 0x80800)
setresuid(0x0, 0xee00, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x300, r1, &(0x7f0000000040)={0x32000000})

1m41.748706599s ago: executing program 33 (id=2224):
r0 = epoll_create(0x2)
r1 = timerfd_create(0x0, 0x80800)
setresuid(0x0, 0xee00, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x300, r1, &(0x7f0000000040)={0x32000000})

1m31.19827909s ago: executing program 4 (id=2348):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000300))

1m31.134919386s ago: executing program 4 (id=2350):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000600)='./file1\x00', 0x800714, &(0x7f0000000340)={[{@orlov}, {@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9c7c}}, {@commit={'commit', 0x3d, 0x1}}, {@grpquota}, {@errors_continue}, {@test_dummy_encryption}, {@auto_da_alloc}, {@nodiscard}]}, 0xfe, 0x44d, &(0x7f0000000cc0)="$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")

1m31.086984228s ago: executing program 4 (id=2352):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$eJzs3cFvI1cZAPBvZjebNE2bFCoVENClFBa0WjvxtlHVU7mAUFUJUXHikIbEG0Vx4ih2ShNWavI/IFGJA4ITZyQQHCr1xBHBDW69lANSgRWoQeJgNONx1t3YG3c3awv795NGM29mMt97Y8178RfHL4CJdTUijiLiSkS8ERHzxf6kWOKV9pKd99Gd22snd26vJdFqvf6PJD+e7Yuun8k8XlxzJiK++62IHyRn4zYODrdWa7XqXlEuN7d3y42Dwxub26sb1Y3qTqWyvLS8+NLNFysDtWNmgHOe3f7Vh9/cfPV77/7uCx/86ejrP8qqNVcc627HRWo3feo0TuZyRLz6KIKNwKWiPVdGXREeSBoRn4qI5/Lnfz4u5a/mYHo81gDA/4FWaz5a891lAGDcpXkOLElLRS5gLtK0VGrn8J6O2bRWbzSv36rv76y3c2ULMZXe2qxVF4tc4UJMJVl56e1s+265Eh8v34yIpyLix9OP5eXS2uB5BgDgYj1+z/j/7+n2+A8AjLmeH57pfn++Mry6AADDMciHZwGA8WL8B4DJc3f8nx1pPQCA4fH+HwAmj/EfACbN+53x/9KoawIADMV3XnstW1onxfdfr795sL9Vf/PGerWxVdreXyut1fd2Sxv1+katWlqrb593vVq9vrv0Quy/VW5WG81y4+BwZbu+v9Ncyb/Xe6U6NZRWAQD389Sz7/0liYijlx/Ll+iay8FYDeMtHXUFgJGR84fJ5Vu4YXJ5jw+T69fFf/yeN5dn348Iv/MAQVtvP8APARft2mfl/2FSyf/D5JL/h8kl/w+Tq9VK+s35n56eAgCMlU+Y4/cnARhDQ/37PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyJuXxZ6CqnaakU8URELMRUcmuzVl2MiCcj4s/TU9NZeWmkNQYAHl76t6SY/+va/PNz9x69kvxnOl9HxA9/+vpP3lptNveWsv3/PN3ffKfYXxlF/QGA83TG6c443vHRndtrnWWY9fnwG+3JRbO4J8XSPnI5LmerP87kkw7P/itplwvZ7yuXLiD+0XFEfKZX+5M8N7JQzHx6b/ws9hNDjZ9+LH6aH2uvs3vx6TNXnu4b87y5XmFSvJf1P6/0ev7SuJqvZ3pOfjyT91APr9P/nZzp/zrP+0ze1/Tq/64OGuOF33+777HjiM9d7hU/OY2f9In//IDx3//8F5/rd6z184hr0Tt+d6xyc3u33Dg4vJHd+OpGdadSWV5aXnzp5ouVcp6jLncy1d3aI8TfX77+ZN/2//K3RUd5Nv7MOe3/yn1b3TrtgH/x3ze+/6V+8Y8jvvbl3q//0/eJn42JXy22+/f0bauzv+k7fXcWf719/48/6et//Zy4HR/89XB9wFMBgCFoHBxurdZq1b0L3ZiKC75g10byiOpsYwQbMcRY2a/JD3udZ4qU2Wrn+ek+5w8/e/eZbN/I7+qFbIyuTwKG4+5DP+qaAAAAAAAAAAAAAAAA/TzyfydKR91CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxtn/AgAA//8LKMVX")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x1)
sync()
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0)

1m30.89970007s ago: executing program 4 (id=2354):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000480)={[{@nouser_xattr}, {@heartbeat_none}, {@err_ro}, {@resv_level={'resv_level', 0x3d, 0x6}}, {@err_cont}, {@data_writeback}, {@nointr}, {@noacl}]}, 0x1, 0x4431, &(0x7f0000004480)="$eJzs3c9PHGUfAPBnBtpC37Yv9O2hb2LiJjbRqCHQk0oTKaWl0GJNtY0xJtsFti1mYRtYjIce8NbEk4kH46HRxBunhoPX+id48VjPTfTgxcSkEbO7s5QZdsOKLNjm8zkwO89v+M48+8xheOJE5fbcUm5uKVdYyJVnbi6dzn1SLi3PF0O8R5r2f2Dv+qc9nbhO2mjz0D8fOc1cOXfhveunQ/hh9qfH6+vr66GqOzQ1tOnz77/dndl8bIgzdartNm9tt3wYQjixZVxVXSGED74PIQohnE3SRpNjbwjhaKjnXb/7+Y3cLo3mwaPimfyTqXtrw6cmV++vtf7doxC+Lv3/9Vvzv7zUNfzzq7vUPQAAAAAAAAAAAAAAAAAAz7jxq1euvTs4FB5GoXs12vq+7nhybPV+7PquebHzvywAAAAAAAAAAAAAAAAAAAD8Sz19/z8XHW/y/v9YchxpUX/97c6Pkc6ZeOfK2PnBoWT/92hL/htJ0q9nu0J/k33fs/u/n83Ub77/+9Z+dqoxvka/fSGKB1LncTwwEMK3ycbvJ6PDcam8VHntZnl5YXbXhvHMSse/vnt/KjrJhv7txn80037n9///35arqXp+Y/cusedaOv5dLcv1hKit+J/L1NuL+LNz6fh319J6NxcYqU8A330WhS+6t4//WKb9TsX/WAghF1XHmkvNANU1TDW91XqFtHT8D9TSUlNn8oesxr/Z/f9HJv7nM+3v1/y/kv0ioql0/A/W0npSJZ7e//3x9vf/hUz7+xH/6vhXfP+3JR3/Q/XE7lSR2l+y3fl/PNN+p+J/LU7GeSxKXQGrUT291f+rIy0d/54t+U+f/+K21n8XM/X36vmv0W/j+a8x/b8S1Z//aC4d/96W5dq9/ycy9To9/4/U1n/sVDr+h2tp6bVzX+1nu/GfzLTfmfgf3Pg0kln//3movgD4xvqvLen4/6eeGG8usVL7WVv/Rduv/y9l2t+P9V91/CtxZ3t9XqTjf6RluWr8f2zj+/9ypl7n4x/CoLX+jqXjf7Rludr937N9/Kcy9Tod/5c72TgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAM2A0OfaFKB5IncfxwEAI55Lzk+FwNF2YzU+XyjMfLYUwlqTnwvHoVqk8XSjl5xbKs8V8oVQqz4RwPsk/EXqipVK5kp8v3Lmw0VZvdLtYWKxMFwuVEMJ4kv5CONpoa3quMl+4E0K4uJH337i8eOd2YSE/O7f41uDg4GCY2BhDf1T8tFJcqNR7r+eGMLlRty/aNLha9qWNsRyJPi4vLy4USrX0y5vqlMozhdKmOlNJ3pehP6osLi/MFCrFfKl8q9HffhpJjmMTV9+/enloS/6NqH4c3dthAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA3PRx+86sQQnf9LA4hjDQ+RM3KP3hUPJN/MnVvbfjU5Or9tcetygEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bc7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2KVjlIqBIAzAs2sRK/EYViHpbCOKaGFE8ARaewIPo0fxEt7BwsLWQoS4AclLHmneq76vGdifnR3YAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABY5/Kuv79t2ogUhz9VFW+P7x//8+tSX87m7x/sYUZ25+qmP79o2vLvaSM/LUefXR7S76/nh5ipo9fJnkz36c/Q9Oloy1xL+7Y03/jucaRcR0RX8pOUc12v6wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQeOBQAAAACE+VtH0bcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/AgAA//83QB5f")
creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x24)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000480)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0)
getgid()
unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1m30.317999057s ago: executing program 4 (id=2357):
syz_mount_image$cramfs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2200409, &(0x7f0000000400)=ANY=[], 0xfe, 0x15f, &(0x7f0000000200)="$eJzs0M1qGmEUxvH/O/M6ClVsqQUptArd2ErBD9pdKU6pVKgdaOmmK8FOP0CxVGjdVSnddSF066JJtiGQK9DoIiToJrmJbNwFsjTMjEkI8Q5yfrt5znueA/Py2SyjuPCi1fz23W233Y/pt061/O5oOCx5uQWd7Uvz4P2oBF/QjDTMe+DFkxh8+tpwjXqr4X3PSxAG7Bt+HgLiZ/fshKanIU+wn3kA4zv+O4OrmVsk5O/d1WDHgywHLNasoO9WkHl9x4AJSlnLY/dM/lSyqdsKOoPs1ub+m+le5fGj5+7fQrn/MJo0s79gHVtFdiefD83l1mxafe1UnVmxUHhazOUNnhz4hd0++lX0B3xQoL0+A7/PInlfv4ffCv75t+Y7KgaM/584zfD5v+7+NNOgUoN6LRnaqCVuGpgZ7U0WrOBPiKwaCSGEEEIIIYQQQgghhBBCCCGEuO5OAwAA//+/BFIO")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))

1m29.873881535s ago: executing program 4 (id=2364):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, <r1=>0x0}, &(0x7f00000001c0)=0xc)
mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000000180)={[{@gid={'gid', 0x3d, r1}}]})

1m29.757405985s ago: executing program 34 (id=2364):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, <r1=>0x0}, &(0x7f00000001c0)=0xc)
mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000000180)={[{@gid={'gid', 0x3d, r1}}]})

39.205142032s ago: executing program 5 (id=2856):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5)
r1 = dup(r0)
ioctl$SIOCSIFHWADDR(r1, 0x8926, &(0x7f0000002640)={'team_slave_0\x00', @random="76f64c34b99d"})

39.030838305s ago: executing program 5 (id=2857):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x71, 0x4004, @fd_index=0x3, 0xb, &(0x7f0000000280)=[{0x0}], 0x1, 0x1e, 0x0, {0x2}})
r0 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x48202)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000))

39.030552868s ago: executing program 5 (id=2858):
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x2401)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x80, 0x8, 0xd, 0x8, 0x6, 0x9, &(0x7f0000000440)="0392698e67fe"})

38.952679257s ago: executing program 5 (id=2859):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xa048c5, &(0x7f00000003c0)={[{@utf8no}, {@uni_xlateno}, {@rodir}, {@uni_xlate}, {@utf8}, {@shortname_winnt}, {@fat=@showexec}, {@shortname_win95}, {@fat=@fmask={'fmask', 0x3d, 0x8}}, {@utf8}, {@fat=@sys_immutable}, {@utf8}]}, 0x0, 0x28b, &(0x7f0000000a80)="$eJzs3c9qE1EUx/Ffk6Z/UtpkIYKCeNCNboY2PkGQFsSAUhtRF8LUTjRkTEomViJiu3PrcxSX7gT1Bbpx517cFEFw04UYaZKxSRux1sapzfcDZU7nzpm58y+cGcjN5q0XD0uFwCm4NcXGTDFpTVtSejtqG2pPY814RJ3WdHHi64czN27fuZrN5WbnzeayC5cyZjZ19s3jpy/PvatN3Hw19XpUG+m7m18yHzdObpza/L4Qrr0iubZYqdTcRd+zpWJQcsyu+54beFYsB161Zh3tBb+yvFw3t7w0mVyuekFgbrluJa9utYrVqnVz77vFsjmOY5NJDZr4H2fk1+fn3WxfOoMojPeaWa1m3XjPxvz6v+gUAAA4WqKq/x8UAysGVq501fd76/+YqP/7h/p/EGzX/8n2/duN+h8AAAAAAAAAAAAAAAAAAAAAgP/BVqORajQaqXAa/o1KGpMU/h91P9EfnP/B1vHFvTHJf76SX8m3pq32bEFF+fI0nZC+Na+HtlY8dyU3O21Nab31V9v5qyv5uEbD/FC6d/5MK9+68xNKdm4/o5RO9M7P9Mwf0YXzYX7Ck6OU3t9TRb6Wmtf1Tv6zGbPL13K78sebywEAAAAAcBw49tOe5/dmu2PhsCG72lszd94PKPWb9wO7nq+HdXo4uv0GAAAAAGCQBPUnJdf3vWpXENsz5zgE4e8fHMoKf3XoCA4tiEk6aHr8787yZ0kJHYWDcKjBp0etO2A/C0f5qQQAAACgH8KifyjqjgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMMD2O3hYuPxBxh7r2Fw8mr0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjoYfAQAA//8pFRpx")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

38.900712925s ago: executing program 5 (id=2861):
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x4, &(0x7f0000006400)=ANY=[@ANYRES64, @ANYRESOCT, @ANYRES8, @ANYRES64=0x0], 0xfd, 0x5abd, &(0x7f0000006440)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x4020bc10, 0x0)

38.582927698s ago: executing program 5 (id=2865):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0)
ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000000340)={"7837e8d24f8c355bc9a6cdead53fc6b79c7d36e7e3b494fb533b77222b6e", 0xff, 0x2, 0xfffffff3, [0x80000000, 0x9b4, 0xba02, 0x7, 0x5, 0x8, 0x0, 0x431, 0xe7, 0x3, 0x3, 0x2, 0x7, 0xeca1, 0x0, 0x41d, 0x4, 0x8001]})

38.417234326s ago: executing program 35 (id=2865):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0)
ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000000340)={"7837e8d24f8c355bc9a6cdead53fc6b79c7d36e7e3b494fb533b77222b6e", 0xff, 0x2, 0xfffffff3, [0x80000000, 0x9b4, 0xba02, 0x7, 0x5, 0x8, 0x0, 0x431, 0xe7, 0x3, 0x3, 0x2, 0x7, 0xeca1, 0x0, 0x41d, 0x4, 0x8001]})

2.968051845s ago: executing program 6 (id=3256):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}}], 0x1, 0x0)
r3 = syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0xbe5b, 0x10, 0x2, 0x40288}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}})
io_uring_enter(r3, 0x154e, 0x0, 0x41, 0x0, 0x0)

2.961728173s ago: executing program 3 (id=3257):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
preadv2(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000180)=""/212, 0x48}], 0x2, 0x4, 0x1be, 0x0)

2.900434065s ago: executing program 3 (id=3258):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0)
sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2400c0c3}, 0x20060000)

2.838149951s ago: executing program 3 (id=3259):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.780610002s ago: executing program 3 (id=3261):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000080)={0x40, 0x0, 0x4, "59d11c5f"}, 0x0, 0x0, 0x0, 0x0})

2.039954812s ago: executing program 6 (id=3265):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xba, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x22, 0x7, {[@global=@item_4={0x3, 0x1, 0x6, "3e22e5bb"}, @main=@item_012={0x1, 0x0, 0x8, 'Q'}]}}, 0x0}, 0x0)

1.335882883s ago: executing program 3 (id=3273):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$sock_cred(r5, 0x1, 0x11, 0x0, 0x0)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000140)={@local})
ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r6, 0x7ac, &(0x7f0000000080)={&(0x7f0000000e00)={{@host, 0x6}, {@local, 0x2}, 0x400, "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"}, 0x418, 0x800})

1.277580523s ago: executing program 2 (id=3275):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1480c, &(0x7f0000033380)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES16=0x0, @ANYRES8, @ANYBLOB="c85fb6eba7e56788375cd72fce22a1abfcd6d806077c0ace8719da9e7cc6e83ba005b48ddc42acd013bbade11c45e63987cb0b242bef8593c4bf44b1c946746cba0a85ae7b00b3698e4f445f", @ANYBLOB="108f2bbc120007171ae540810800f1d9ed7e6b556183cf5283da18c329fc2d1132e25424748c5ce2f044a26a71a4de16e74d22c6a1c791fde85bd9a764fe6fce36aa6b3fa6955e74b5b00555552570a64d455cedd37b6ad3f685ff3807c16bc31bc554aedf0b654e4fd98d6fee2d132b17cfa29e5cb8ad61cfa808973a8765ee335d3d94ed492ec65735a9789fec9e90fcf11ddc857c39ecfaeff5d28676fb5647093c8d4c7ed6ffe24515ce75f94c6e71ba05f8f7afb787856e3c7f6296f2b92894e189750940ccc0dda4db6115e9c8399bc0805eaf4cd1cd0824c2ac82d9a43f9e763a90b662", @ANYRES64=0x0, @ANYRES8, @ANYRES16], 0x1, 0xa70, &(0x7f0000002240)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)

981.502136ms ago: executing program 2 (id=3276):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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")
setxattr$security_evm(&(0x7f0000000380)='./file1\x00', &(0x7f00000003c0), 0x0, 0x0, 0x1)

919.66615ms ago: executing program 2 (id=3277):
rt_sigaction(0x14, &(0x7f00000000c0)={&(0x7f0000000040)="f30f1efc66450f2832c482adbcaf07000000c4e1fd5aa13c9c43713ef2400f1ed3c4c2e93be7f2262e669f8f88a4a2e100430f12957b280000653ed9fa", 0x18000005, 0x0, {[0x8000]}}, 0x0, 0x8, &(0x7f0000000200))
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
lseek(r0, 0x9, 0x0)

918.236733ms ago: executing program 2 (id=3278):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4, @local=@item_012={0x2, 0x2, 0x2, '\f\b'}, @global=@item_4={0x3, 0x1, 0x0, "0f00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0)

461.118938ms ago: executing program 3 (id=3279):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x4000, &(0x7f0000000380)={[{@coherency_buffered}, {@heartbeat_none}, {@user_xattr}, {@err_cont}, {@resv_level={'resv_level', 0x3d, 0x5}}, {@localflocks}, {@localflocks}, {@dir_resv_level}]}, 0x9, 0x4436, &(0x7f0000004480)="$eJzs3c9PXNUeAPBzL/QV+to+6OuiL3nJm+Q1MVFDoCuVJlJKS6HFmmob42Y6wLRFB6aBwbjoAndNXJm4MC4aTdyxali4rX+CG5d13agLNyYmjZiZuQNzL4yMhAFbP58Fl3t+D997z5y7uJw4Ubkzt5SbW8oVFnLlmVtLZ3IflEvL88UQ75Nt+z+0f/3Tnk5cJwd97f2dXT1/8a0bZ0L4Zva7J+vr6+uhqjskotBsqOn3X36+N9N8bIhDWrXd0FHvhhBObhlXVVcI4Z2v65/iXJI2mhx7QwjHkk94497HN3N7NJqHj4tn80+n7q8Nn55cfbDW+rNHIXxe+s/Lt+d//H/X8Pcv7lH3AAAAAAAAAAAAAAAAAAA848avXb3+5uBQeBSF7tVo6/u648mx1fux63vmf7sZ/qPdVAIAAAAAAAAAAAAAAAAAAIC/ms33/3PRiW3e/x9LjiMt6q+/3vkx0jkTb1wduzA4lOz/Hm3JfyVJ+ulcV+jfZt/37P7v5zL1t9//fWs/u9UYX6PfvhDFA6nzOB4YCOHLZOP3U9GRuFReqrx0q7y8MLtnw3hmpeNf370/FZ1kQ/924z+aab/z+///e8vVVD2/uXeX2HMtHf+uluW++ihqK/7nM/X2I/7sXjr+3bW03uYCI/UJoBr/T7p3jv9Ypv1Oxf94CCEXVceaS80A1TVMNb3VeoW0dPwP1dJSU2fyh2x1//+aif+FTPsHNf+vZL+I2FY6/v+opfWkSmze//3xzvf/xUz7BxH/6vhXfP+3JR3/w/XE7lSR2l+y3fl/PNN+6/j/wWKjDdfjZJzHo9QVsBrV01v9vzrS0vHv2ZK/+fwXt7X+u5Spv1/Pf41+G89/jen/h6j+/Mf20vHvbVmu3ft/IlOv0/P/SG39x26l43+klpZeO/fVfrYb/8lM+52Kf21V0tOI/+Z88tvhevoX1n9tScf/n/XEuLnESu1nbf0X7bz+v5xp/yDWf9Xxr8Sd7fV50Rz/rnC0Zblq/L9t4/v/SqZe5+MfwqC1/q6l7/9jLcvV7v+eneM/lanX6fi/0MnGAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4Bo8mxL0TxQOo8jgcGQjifnJ8KR6Lpwmx+ulSeeX8phLEkPRdORLdL5elCKT+3UJ4t5gulUnkmhAtJ/snQEy2VypX8fOHuxY22eqM7xcJiZbpYqIQQxpP0/4Zjjbam5yrzhbshhEsbef+Ky4t37xQW8rNzi68NDg4OhomNMfRHxQ8rxYVKvfd6bgiTG3X7oqbB1bIvb4zlaPReeXlxoVCqpV9pqlMqzxRKTXWmkrxPQ39UWVxemClUivlS+Xajv4M0khzHJq69fe3K0Jb8m1H9OLq/wwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgT3o0/OpnIYTu+lkcQhhp/BJtV/7h4+LZ/NOp+2vDpydXH6w9aVUOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgd3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS8coEQNRGIDfjIXaeQyrkHS2EUW0MCJ4Aj2Gh9GjeAnvYGFhK8uysDuB3WwCadJ9X/NIfmbeg3kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzHP33L081U1EirP1acTX2/fPfv5Q6sf1+PmTg6/VYnOyjPvH7ua2bsq7p6P8qvz6bfM2/f97f42R2vsc7Mlwn3b6PueTc03t29R8fd+LSLmKiLbklynnqpp3FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIYdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCxAAAAAIAwf+so+jYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH4FAAD//4dVIJc=")
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0x500, 0x10000002000003, 0x0, 0x0, 0x300})

460.872802ms ago: executing program 6 (id=3280):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$eJzs3T1oO2UcB/DvXRL/tg1SdRHEFxARLZS6CS51UShIKSKCChURF6UVaotb6+TioLNKJ5ciblZH6VJcFMGpaoe6CFocLA46RJJrpbYRX1Jz4n0+cLm75J77Pcfd97kQOBKgsaaTzCdpJZlJ0klSnN/gzmqaPl3dnthfTnq9x34oBttV65WzdlNJtpI8kGSvLPJCO9nYferop4NH7nl9vXP3u7tPToz1IE8dHx0+evLO4msfLNy/8dkX3y0WmU/3d8d19Yoh77WL5KZ/o9h/RNGuuwf8FUuvvP9lP/c3J7lrkP9OylQn74216/Y6ue/tP2r75vef3zrOvgJXr9fr9O+BWz2gccok3RTlbJJquSxnZ6vv8F+1JssXV9dennl+dX3lubpHKuCqdJPDhz+69uHUhfx/26ryD/xPVT9KHT6+tPN1f+GkVXeHgLG4rZr17/8zz2zeG/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmH5pJ/aC75h+aSf2iu8/kHAJqld63uJ5CButQ9/gAAAAAAAAAAAAAAAAAAAJdtT+wvn03jqvnJW8nxQ0naw+q3Bv9HnFw/eJ38sehv9puiajaSp+8YcQcjeq/mp69v+Kbe+p/eXm/9zZVk69Ukc+325euvOL3+/rkb/+TzzrMjFvibigvrDz4x3voX/bJTb/2Fg+Tj/vgzN2z8KXPLYD58/On2z9+I9V/6ecQdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDa/BgAA//8YZW08")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)
truncate(&(0x7f0000000040)='./file1\x00', 0x40006)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)
fallocate(r0, 0x20, 0x2000, 0x8000)

315.961262ms ago: executing program 2 (id=3281):
r0 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
io_uring_enter(r0, 0x7277, 0x0, 0x0, 0x0, 0x0)

311.999299ms ago: executing program 6 (id=3282):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000002c0)={0x20000008})

141.186417ms ago: executing program 2 (id=3283):
syz_open_procfs$namespace(0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000240), 0x57, 0x200002)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80805659, &(0x7f00000002c0)={0x0, @frame_sync})
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15)
remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0)

141.078267ms ago: executing program 6 (id=3284):
r0 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x2c, 0x1, 0x1, "3a8e07000034b53ba75088c27891ca55e21f0000000006b2b679d20000002000", 0x34343459})

0s ago: executing program 6 (id=3285):
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)

kernel console output (not intermixed with test programs):

olume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  284.297928][ T1272] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  284.353921][T12379] loop5: detected capacity change from 0 to 4096
[  284.358414][T12379] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  284.381504][T12379] ntfs3(loop5): ino=19, mi_enum_attr
[  284.386618][T12379] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  284.412509][T12379] ntfs3(loop5): failed to convert "076c" to cp949
[  284.422935][T12379] ntfs3(loop5): ino=20, mi_enum_attr
[  284.468576][ T1272] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[  284.472057][ T1272] usb 4-1: config 0 has no interface number 0
[  284.474765][ T1272] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  284.497929][ T1272] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  284.511861][ T1272] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  284.515869][ T1272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.544823][ T1272] usb 4-1: Product: syz
[  284.546857][ T1272] usb 4-1: Manufacturer: syz
[  284.564531][ T1272] usb 4-1: SerialNumber: syz
[  284.572330][T12385] loop5: detected capacity change from 0 to 8
[  284.574069][ T1272] usb 4-1: config 0 descriptor??
[  284.590248][T12385] Major/Minor mismatch, older Squashfs 0.0 filesystems are unsupported
[  284.590685][ T1272] yurex 4-1:0.50: Could not submitting URB
[  284.596497][ T1272] yurex 4-1:0.50: probe with driver yurex failed with error -5
[  284.786738][ T9633] usb 4-1: USB disconnect, device number 11
[  284.850396][T12398] loop2: detected capacity change from 0 to 128
[  284.986613][T12400] IPv6: addrconf: prefix option has invalid lifetime
[  285.127176][T12405] netlink: 'syz.2.2539': attribute type 1 has an invalid length.
[  285.134847][T12405] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2539'.
[  285.225165][T12407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2540'.
[  285.373011][T12417] loop3: detected capacity change from 0 to 512
[  285.415553][T12417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.429884][T12417] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  285.452178][T12428] loop5: detected capacity change from 0 to 2048
[  285.468790][T12428] UDF-fs: warning (device loop5): udf_fill_super: No partition found (2)
[  285.502818][T11326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.582953][T12434] loop3: detected capacity change from 0 to 256
[  285.591347][   T33] audit: type=1800 audit(1757545613.256:147): pid=12434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2552" name="file1" dev="loop3" ino=1048678 res=0 errno=0
[  285.599695][T12434] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  285.604176][T12434] FAT-fs (loop3): Filesystem has been set read-only
[  285.606802][T12434] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  285.616762][T12434] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  285.620996][   T33] audit: type=1800 audit(1757545613.296:148): pid=12434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2552" name="file1" dev="loop3" ino=1048678 res=0 errno=0
[  285.630596][T12434] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  285.659953][ T5899] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  285.669654][T12436] netlink: 'syz.3.2553': attribute type 2 has an invalid length.
[  285.690649][T12436] : entered promiscuous mode
[  285.726850][T12438] vivid-002: disconnect
[  285.737413][T12437] vivid-002: reconnect
[  285.755390][T12430] loop5: detected capacity change from 0 to 32768
[  285.764343][T12430] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  285.789246][T12430] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  285.819506][ T5899] usb 3-1: Using ep0 maxpacket: 16
[  285.844184][ T5899] usb 3-1: unable to get BOS descriptor or descriptor too short
[  285.848920][T11876] ocfs2: Unmounting device (7,5) on (node local)
[  285.875446][ T5899] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  285.882209][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.885724][ T5899] usb 3-1: Product: syz
[  285.888980][T12444] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2557'.
[  285.893693][ T5899] usb 3-1: Manufacturer: syz
[  285.896970][ T5899] usb 3-1: SerialNumber: syz
[  286.092481][T12456] loop3: detected capacity change from 0 to 64
[  286.111757][T12458] loop5: detected capacity change from 0 to 128
[  286.121247][T12458] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[  286.150313][ T5899] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  286.182793][T12460] loop5: detected capacity change from 0 to 512
[  286.190115][T12460] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  286.205854][T12460] EXT4-fs (loop5): 1 truncate cleaned up
[  286.208454][ T5899] usb 3-1: USB disconnect, device number 51
[  286.212005][T12460] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.285877][T12402] udevd[12402]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  286.314908][T11876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.603084][T12471] loop3: detected capacity change from 0 to 32768
[  286.624244][T12471] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  286.640535][T12471] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  286.773850][T12473] loop5: detected capacity change from 0 to 32768
[  287.064477][T12477] loop2: detected capacity change from 0 to 32768
[  287.069851][T12477] bcachefs (/dev/loop2): error reading superblock: error opening /dev/loop2: EACCES
[  287.075779][T12477] bcachefs: bch2_fs_get_tree() error: EACCES
[  287.234906][T12489] loop2: detected capacity change from 0 to 4096
[  287.274161][T12489] overlayfs: overlapping lowerdir path
[  287.287092][T11326] ocfs2: Unmounting device (7,3) on (node local)
[  287.356305][ T5899] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  287.377879][ T5914] hid_parser_main: 50 callbacks suppressed
[  287.377891][ T5914] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[  287.404614][ T5914] hid-generic 0000:0000:0000.0014: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  287.517465][ T5899] usb 6-1: Using ep0 maxpacket: 8
[  287.524083][ T5899] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  287.530173][ T5899] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  287.546460][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.556942][ T5899] usb 6-1: config 0 descriptor??
[  287.563830][ T5899] gspca_main: vc032x-2.14.0 probing 046d:0892
[  287.657480][T12500] loop3: detected capacity change from 0 to 128
[  287.747028][T12506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2585'.
[  287.925540][T12516] loop3: detected capacity change from 0 to 256
[  287.944644][T12516] exFAT-fs (loop3): failed to load upcase table (idx : 0x000103df, chksum : 0xf3211d0a, utbl_chksum : 0xe619d30d)
[  288.455024][T12527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2595'.
[  288.770739][ T5899] gspca_vc032x: reg_w err -71
[  288.773509][ T5899] vc032x 6-1:0.0: probe with driver vc032x failed with error -71
[  288.787155][ T5899] usb 6-1: USB disconnect, device number 3
[  288.905684][T12529] loop2: detected capacity change from 0 to 32768
[  288.909337][T12529] XFS: attr2 mount option is deprecated.
[  289.305373][ T5899] usb 3-1: new full-speed USB device number 52 using dummy_hcd
[  289.344817][T12536] loop5: detected capacity change from 0 to 4096
[  289.356650][T12536] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  289.380353][T12536] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  289.383614][T12536] ntfs3(loop5): Failed to load $Extend (-22).
[  289.388334][T12536] ntfs3(loop5): Failed to initialize $Extend.
[  289.469353][ T5899] usb 3-1: config 54 has an invalid interface number: 154 but max is 0
[  289.472821][ T5899] usb 3-1: config 54 has no interface number 0
[  289.480057][ T5899] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec
[  289.483692][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.490853][ T5899] usb 3-1: Product: syz
[  289.493192][ T5899] usb 3-1: Manufacturer: syz
[  289.495965][ T5899] usb 3-1: SerialNumber: syz
[  289.584537][T12544] loop3: detected capacity change from 0 to 4096
[  289.613956][T12544] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  289.819312][ T5899] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  289.833634][ T5899] usb 3-1: USB disconnect, device number 52
[  289.840583][ T5879] usb 3-1: Failed to submit usb control message: -71
[  289.856021][ T5879] usb 3-1: unable to send the bmi data to the device: -71
[  289.859136][ T5879] usb 3-1: unable to get target info from device
[  289.861930][ T5879] usb 3-1: could not get target info (-71)
[  289.867619][ T5879] usb 3-1: could not probe fw (-71)
[  289.996169][T12557] loop5: detected capacity change from 0 to 512
[  290.014655][T12557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.026986][   T47] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  290.048364][T11876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.159261][T12563] loop5: detected capacity change from 0 to 1024
[  290.173693][T12563] hfsplus: bad catalog entry type
[  290.184222][ T1090] hfsplus: b-tree write err: -5, ino 4
[  290.203558][   T47] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  290.214212][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  290.221678][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  290.226746][   T47] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  290.243206][   T47] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  290.247107][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.257595][   T47] usb 4-1: config 0 descriptor??
[  290.469951][T12567] loop5: detected capacity change from 0 to 32768
[  290.490523][T12567] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  290.501454][T12567] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  290.513744][T12567] XFS (loop5): Tail block (0x29) overwrite detected. Updated to 0x30
[  290.523962][T12567] XFS (loop5): Ending clean mount
[  290.567693][T11876] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  290.693048][   T47] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0
[  290.714575][   T47] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  290.946939][ T1272] usb 4-1: USB disconnect, device number 12
[  291.025091][   T47] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  291.198568][   T47] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  291.202564][   T47] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  291.208248][   T47] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  291.212022][   T47] usb 6-1: config 1 has no interface number 1
[  291.217171][   T47] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  291.225803][   T47] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  291.229682][   T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.232976][   T47] usb 6-1: Product: syz
[  291.237280][   T47] usb 6-1: Manufacturer: syz
[  291.239252][   T47] usb 6-1: SerialNumber: syz
[  291.471552][   T47] usb 6-1: USB disconnect, device number 4
[  291.497525][T12396] udevd[12396]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  291.661409][T12597] loop2: detected capacity change from 0 to 8192
[  291.952004][T12603] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2623'.
[  292.030931][T12611] input: syz1 as /devices/virtual/input/input19
[  292.101547][T12613] loop2: detected capacity change from 0 to 2048
[  292.139923][T12616] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  292.144159][T12615] IPVS: stopping master sync thread 12616 ...
[  292.309416][T12626] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[  292.309416][T12626]    program syz.2.2634 not setting count and/or reply_len properly
[  292.346100][   T47] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  292.527750][   T47] usb 4-1: config 0 has an invalid interface number: 113 but max is 0
[  292.539547][   T47] usb 4-1: config 0 has no interface number 0
[  292.547030][   T47] usb 4-1: config 0 interface 113 has no altsetting 0
[  292.577765][   T47] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  292.588860][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.613294][   T47] usb 4-1: Product: syz
[  292.617179][   T47] usb 4-1: Manufacturer: syz
[  292.638349][   T47] usb 4-1: SerialNumber: syz
[  292.689050][   T47] usb 4-1: config 0 descriptor??
[  292.791611][T12635] loop2: detected capacity change from 0 to 2048
[  292.876369][ T1272] Process accounting resumed
[  292.901247][    C1] usb 4-1: NFC: Urb failure (status -71)
[  292.911579][    C1] usb 4-1: NFC: Urb failure (status -71)
[  292.920413][   T47] usb 4-1: NFC: Unable to get FW version
[  292.930851][   T47] pn533_usb 4-1:0.113: probe with driver pn533_usb failed with error -71
[  292.959881][   T47] usb 4-1: USB disconnect, device number 13
[  292.985819][   T33] audit: type=1326 audit(1757545620.660:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.2.2640" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd018eba9 code=0x7ffc0000
[  293.003159][   T33] audit: type=1326 audit(1757545620.670:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.2.2640" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd018eba9 code=0x7ffc0000
[  293.015887][   T33] audit: type=1326 audit(1757545620.670:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.2.2640" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2dd018eba9 code=0x7ffc0000
[  293.034013][   T33] audit: type=1326 audit(1757545620.670:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.2.2640" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd018eba9 code=0x7ffc0000
[  293.042513][   T33] audit: type=1326 audit(1757545620.670:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.2.2640" exe="/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f2dd018eba9 code=0x7ffc0000
[  293.059521][   T33] audit: type=1326 audit(1757545620.670:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12640 comm="syz.2.2640" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd018eba9 code=0x7ffc0000
[  293.220957][T12648] netlink: 'syz.2.2643': attribute type 1 has an invalid length.
[  293.227458][T12648] NCSI netlink: No device for ifindex 0
[  293.291315][T12650] loop2: detected capacity change from 0 to 512
[  293.359029][T12646] loop5: detected capacity change from 0 to 32768
[  293.362945][T12646] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2642 (12646)
[  293.375724][T12646] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  293.380085][T12646] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  293.398947][T12653] loop2: detected capacity change from 0 to 8
[  293.771059][T12646] BTRFS info (device loop5): enabling ssd optimizations
[  293.779013][T12646] BTRFS info (device loop5): enabling free space tree
[  293.783500][   T47] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  293.849583][T11876] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  293.940056][   T47] usb 4-1: Using ep0 maxpacket: 8
[  293.976150][   T47] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  293.980835][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.996273][   T47] usb 4-1: Product: syz
[  294.015445][   T47] usb 4-1: Manufacturer: syz
[  294.024159][   T47] usb 4-1: SerialNumber: syz
[  294.041277][   T47] usb 4-1: config 0 descriptor??
[  294.065939][   T47] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  294.482884][ T1272] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  294.579760][T12680] loop2: detected capacity change from 0 to 32768
[  294.587604][T12680] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2650 (12680)
[  294.603367][T12680] BTRFS error: failed to open device for path /dev/loop2 with flags 0x23: -13
[  294.634532][ T1272] usb 6-1: Using ep0 maxpacket: 32
[  294.639458][ T1272] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  294.660768][ T1272] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  294.667904][ T1272] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.680105][ T1272] usb 6-1: Product: syz
[  294.682030][ T1272] usb 6-1: Manufacturer: syz
[  294.689865][ T1272] usb 6-1: SerialNumber: syz
[  294.704892][ T1272] usb 6-1: config 0 descriptor??
[  294.737418][ T1272] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input20
[  294.759311][ T1272] usbtouchscreen 6-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8
[  294.775272][ T1272] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -8
[  294.878674][T12684] block nbd2: shutting down sockets
[  294.883081][   T47] gspca_sonixj: reg_r err -71
[  294.885253][   T47] sonixj 4-1:0.0: probe with driver sonixj failed with error -71
[  294.892726][   T47] usb 4-1: USB disconnect, device number 14
[  294.925475][ T1272] usb 6-1: USB disconnect, device number 5
[  295.202528][ T5899] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  295.352423][ T5899] usb 3-1: Using ep0 maxpacket: 32
[  295.358556][ T5899] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  295.364456][ T5899] usb 3-1: config 0 has no interface number 0
[  295.367237][ T5899] usb 3-1: config 0 interface 184 has no altsetting 0
[  295.375461][ T5899] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  295.379048][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.381736][ T5899] usb 3-1: Product: syz
[  295.383274][ T5899] usb 3-1: Manufacturer: syz
[  295.385488][ T5899] usb 3-1: SerialNumber: syz
[  295.388297][ T5899] usb 3-1: config 0 descriptor??
[  295.393340][ T5899] smsc75xx v1.0.0
[  295.629439][T12688] loop3: detected capacity change from 0 to 32768
[  295.636643][T12688] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2653 (12688)
[  295.672094][T12688] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  295.676348][T12688] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  295.716659][T12688] BTRFS info (device loop3): enabling ssd optimizations
[  295.729879][T12688] BTRFS info (device loop3): enabling free space tree
[  295.759233][T11326] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  295.781699][ T9633] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  295.942005][ T9633] usb 6-1: Using ep0 maxpacket: 16
[  295.963976][ T9633] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  295.975459][ T9633] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  295.979657][ T9633] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  295.995332][ T9633] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  296.002065][ T9633] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  296.019767][ T9633] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  296.023451][ T9633] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  296.026477][ T9633] usb 6-1: Manufacturer: syz
[  296.034107][ T9633] usb 6-1: config 0 descriptor??
[  296.149156][T12712] loop3: detected capacity change from 0 to 32768
[  296.155423][T12712] (syz.3.2657,12712,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  296.161639][T12712] (syz.3.2657,12712,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  296.195994][T12712] (syz.3.2657,12712,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC.
[  296.207673][T12712] JBD2: Ignoring recovery information on journal
[  296.211978][ T5899] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  296.226114][ T5899] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  296.229604][ T5899] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  296.235195][ T5899] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  296.238328][ T5899] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  296.245097][ T5899] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  296.248797][ T5899] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[  296.260893][T12712] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  296.266888][ T5899] usb 3-1: USB disconnect, device number 53
[  296.291191][T12712] (syz.3.2657,12712,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC.
[  296.299975][T12712] (syz.3.2657,12712,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae
[  296.304106][T12712] (syz.3.2657,12712,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  296.307691][T12712] (syz.3.2657,12712,0):ocfs2_quota_read:201 ERROR: status = -5
[  296.312939][ T9633] rc_core: IR keymap rc-hauppauge not found
[  296.315581][ T9633] Registered IR keymap rc-empty
[  296.317712][ T9633] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  296.318353][T12712] Quota error (device loop3): find_tree_dqentry: Can't read quota tree block 5
[  296.329665][T12712] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  296.331865][ T9633] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  296.334022][T12712] (syz.3.2657,12712,1):ocfs2_acquire_dquot:890 ERROR: status = -5
[  296.343608][T12712] (syz.3.2657,12712,1):ocfs2_symlink:1894 ERROR: status = -5
[  296.346693][T12712] (syz.3.2657,12712,1):ocfs2_symlink:2080 ERROR: status = -5
[  296.352388][ T9633] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  296.359085][ T9633] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input21
[  296.366208][ T9633] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  296.381806][ T9633] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  296.401899][ T9633] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  296.421787][ T9633] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  296.442236][ T9633] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  296.461829][ T9633] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  296.481901][ T9633] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  296.501813][ T9633] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  296.522860][ T9633] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  296.542152][ T9633] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  296.564614][ T9633] mceusb 6-1:0.0: Registered  with mce emulator interface version 1
[  296.567663][ T9633] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  296.703981][ T5899] usb 6-1: USB disconnect, device number 6
[  296.876566][T11326] ocfs2: Unmounting device (7,3) on (node local)
[  297.022179][T12725] loop3: detected capacity change from 0 to 256
[  297.040984][T12725] FAT-fs (loop3): Directory bread(block 64) failed
[  297.050733][T12725] FAT-fs (loop3): Directory bread(block 65) failed
[  297.056222][T12725] FAT-fs (loop3): Directory bread(block 66) failed
[  297.059021][T12725] FAT-fs (loop3): Directory bread(block 67) failed
[  297.063867][T12725] FAT-fs (loop3): Directory bread(block 68) failed
[  297.066822][T12725] FAT-fs (loop3): Directory bread(block 69) failed
[  297.069799][T12725] FAT-fs (loop3): Directory bread(block 70) failed
[  297.075385][T12725] FAT-fs (loop3): Directory bread(block 71) failed
[  297.078343][T12725] FAT-fs (loop3): Directory bread(block 72) failed
[  297.081216][T12725] FAT-fs (loop3): Directory bread(block 73) failed
[  297.109678][   T33] audit: type=1800 audit(1757545624.782:155): pid=12725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2660" name="bus" dev="loop3" ino=1048684 res=0 errno=0
[  297.313988][T12741] loop3: detected capacity change from 0 to 512
[  297.318691][T12740] loop5: detected capacity change from 0 to 8
[  297.325513][T12741] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 2178, start 8e210000)
[  297.330251][T12741] FAT-fs (loop3): Filesystem has been set read-only
[  297.333814][T12741] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 2178, start 8e210000)
[  297.337840][T12741] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 2178, start 8e210000)
[  297.343506][   T33] audit: type=1800 audit(1757545625.022:156): pid=12741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2667" name="file1" dev="loop3" ino=1048685 res=0 errno=0
[  297.344627][T12741] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 2178, start 8e210000)
[  297.509771][T12749] loop5: detected capacity change from 0 to 2048
[  297.539477][T12749] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  297.545269][T12749] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  297.566773][T12749] overlayfs: failed to verify upper (/file0, ino=12, err=-28)
[  297.570257][T12749] overlayfs: failed to verify index dir 'upper' xattr
[  297.573808][T12749] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  297.593411][T11876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.875205][T12764] loop3: detected capacity change from 0 to 32768
[  297.878811][T12764] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2678 (12764)
[  297.886552][T12764] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  297.890244][T12764] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  298.114552][T12764] BTRFS info (device loop3): enabling ssd optimizations
[  298.117659][T12764] BTRFS info (device loop3): enabling free space tree
[  298.130685][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  298.130695][   T33] audit: type=1800 audit(1757545625.802:158): pid=12764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2678" name="file1" dev="loop3" ino=260 res=0 errno=0
[  298.695835][T11326] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  298.731210][T12777] loop5: detected capacity change from 0 to 32768
[  298.750593][T12777] o2cb: This node has not been configured.
[  298.752772][T12777] o2cb: Cluster check failed. Fix errors before retrying.
[  298.755262][T12777] (syz.5.2680,12777,0):ocfs2_dlm_init:3354 ERROR: status = -22
[  298.764108][T12777] (syz.5.2680,12777,0):ocfs2_mount_volume:1735 ERROR: status = -22
[  298.771605][T12777] (syz.5.2680,12777,0):ocfs2_fill_super:1177 ERROR: status = -22
[  299.003007][ T9633] usb 3-1: new full-speed USB device number 54 using dummy_hcd
[  299.157290][T12806] loop5: detected capacity change from 0 to 1024
[  299.187741][ T9633] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  299.189707][T12806] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  299.195023][ T9633] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.208462][ T9633] usb 3-1: Product: syz
[  299.215113][ T9633] usb 3-1: Manufacturer: syz
[  299.217197][ T9633] usb 3-1: SerialNumber: syz
[  299.368691][ T9633] usb 3-1: config 0 descriptor??
[  299.611193][T12822] loop3: detected capacity change from 0 to 128
[  299.628767][T12822] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  299.689115][T12822] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  299.819154][ T9633] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  299.958057][T12827] loop3: detected capacity change from 0 to 512
[  299.986900][T12827] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  299.991362][T12827] EXT4-fs (loop3): inodes count not valid: 24 vs 32
[  300.096717][T11876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.461829][T12829] loop3: detected capacity change from 0 to 40427
[  300.470328][T12829] F2FS-fs (loop3): build fault injection rate: 14
[  300.472989][T12829] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  300.496252][T12829] F2FS-fs (loop3): invalid crc value
[  300.505841][    C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  300.528374][    C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  300.595995][T12829] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  300.600023][T12829] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  300.608316][T12829] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  300.623716][T12829] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  300.627641][T12845] loop5: detected capacity change from 0 to 1024
[  300.630983][T12829] F2FS-fs (loop3): inject dquot initialize in f2fs_dquot_initialize of f2fs_mknod+0x155/0x5d0
[  300.635731][T12829] F2FS-fs (loop3): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x18b/0xa40
[  300.641554][T12829] F2FS-fs (loop3): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x11a/0xab0
[  300.661948][T11326] syz-executor: attempt to access beyond end of device
[  300.661948][T11326] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  300.672337][T11326] CPU: 0 UID: 0 PID: 11326 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  300.672349][T11326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  300.672353][T11326] Call Trace:
[  300.672356][T11326]  <TASK>
[  300.672359][T11326]  dump_stack_lvl+0x189/0x250
[  300.672372][T11326]  ? __pfx_dump_stack_lvl+0x10/0x10
[  300.672380][T11326]  ? __pfx_queue_work_on+0x10/0x10
[  300.672387][T11326]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  300.672398][T11326]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  300.672411][T11326]  f2fs_handle_critical_error+0x37c/0x540
[  300.672442][T11326]  f2fs_write_end_io+0x886/0xb60
[  300.672457][T11326]  __submit_merged_bio+0x27a/0x6a0
[  300.672469][T11326]  __submit_merged_write_cond+0x255/0x530
[  300.672481][T11326]  f2fs_write_data_pages+0x261d/0x3000
[  300.672487][T11326]  ? __lock_acquire+0xab9/0xd20
[  300.672509][T11326]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  300.672533][T11326]  ? __pfx_stack_trace_save+0x10/0x10
[  300.672549][T11326]  ? kthread_stop+0x194/0x5c0
[  300.672555][T11326]  ? kill_f2fs_super+0x137/0x6c0
[  300.672562][T11326]  ? deactivate_locked_super+0xbc/0x130
[  300.672573][T11326]  ? __lock_acquire+0xab9/0xd20
[  300.672588][T11326]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  300.672595][T11326]  do_writepages+0x32e/0x550
[  300.672609][T11326]  ? do_raw_spin_unlock+0x4d/0x240
[  300.672618][T11326]  filemap_fdatawrite+0x199/0x240
[  300.672628][T11326]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  300.672655][T11326]  ? do_raw_spin_unlock+0x4d/0x240
[  300.672665][T11326]  f2fs_sync_dirty_inodes+0x31f/0x830
[  300.672678][T11326]  f2fs_write_checkpoint+0x95a/0x1df0
[  300.672698][T11326]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  300.672735][T11326]  ? kill_f2fs_super+0x298/0x6c0
[  300.672747][T11326]  kill_f2fs_super+0x2c3/0x6c0
[  300.672761][T11326]  ? __pfx_kill_f2fs_super+0x10/0x10
[  300.672770][T11326]  ? radix_tree_delete_item+0x2b6/0x400
[  300.672790][T11326]  ? shrinker_free+0x2ce/0x3e0
[  300.672804][T11326]  deactivate_locked_super+0xbc/0x130
[  300.672816][T11326]  cleanup_mnt+0x425/0x4c0
[  300.672824][T11326]  ? lockdep_hardirqs_on+0x9c/0x150
[  300.672831][T11326]  task_work_run+0x1d4/0x260
[  300.672841][T11326]  ? __pfx_task_work_run+0x10/0x10
[  300.672850][T11326]  ? __x64_sys_umount+0x122/0x160
[  300.672866][T11326]  ? exit_to_user_mode_loop+0x40/0x110
[  300.672881][T11326]  exit_to_user_mode_loop+0xec/0x110
[  300.672894][T11326]  do_syscall_64+0x2bd/0x3b0
[  300.672904][T11326]  ? lockdep_hardirqs_on+0x9c/0x150
[  300.672913][T11326]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.672921][T11326]  ? exc_page_fault+0x9f/0xf0
[  300.672928][T11326]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.672934][T11326] RIP: 0033:0x7f648c78fed7
[  300.672941][T11326] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  300.672947][T11326] RSP: 002b:00007fff82f77dd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  300.672956][T11326] RAX: 0000000000000000 RBX: 00007f648c811c05 RCX: 00007f648c78fed7
[  300.672961][T11326] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff82f77e90
[  300.672965][T11326] RBP: 00007fff82f77e90 R08: 0000000000000000 R09: 0000000000000000
[  300.672969][T11326] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff82f78f20
[  300.672973][T11326] R13: 00007f648c811c05 R14: 0000000000049625 R15: 00007fff82f78f60
[  300.672986][T11326]  </TASK>
[  300.673002][   T64] hfsplus: b-tree write err: -5, ino 4
[  300.673055][T11326] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  300.851556][ T9633] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  300.855851][ T9633] usb 3-1: USB disconnect, device number 54
[  301.042459][T12856] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2708'.
[  301.122700][T12863] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  301.331507][T12875] loop5: detected capacity change from 0 to 128
[  301.334972][T12875] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  301.355882][T12875] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  301.425951][   T33] audit: type=1326 audit(1757545629.094:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12878 comm="syz.2.2719" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd018eba9 code=0x7ffc0000
[  301.437488][   T33] audit: type=1326 audit(1757545629.094:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12878 comm="syz.2.2719" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd018eba9 code=0x7ffc0000
[  301.452427][   T33] audit: type=1326 audit(1757545629.094:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12878 comm="syz.2.2719" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2dd018eba9 code=0x7ffc0000
[  301.463360][   T33] audit: type=1326 audit(1757545629.094:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12878 comm="syz.2.2719" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd018eba9 code=0x7ffc0000
[  301.484350][   T33] audit: type=1326 audit(1757545629.094:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12878 comm="syz.2.2719" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd018eba9 code=0x7ffc0000
[  301.496384][   T33] audit: type=1326 audit(1757545629.094:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12878 comm="syz.2.2719" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd018eba9 code=0x7ffc0000
[  301.508262][   T33] audit: type=1326 audit(1757545629.094:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12878 comm="syz.2.2719" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2dd018eba9 code=0x7ffc0000
[  301.520799][   T33] audit: type=1326 audit(1757545629.094:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12878 comm="syz.2.2719" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2dd018eba9 code=0x7ffc0000
[  301.828640][T12902] program syz.5.2729 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  301.854357][T12897] loop3: detected capacity change from 0 to 40427
[  301.862482][T12897] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  301.880943][T12897] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  301.891582][T12897] F2FS-fs (loop3): invalid crc value
[  301.893507][T12906] loop2: detected capacity change from 0 to 256
[  301.982337][T12897] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  301.996925][T12897] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  302.003815][T12897] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  302.026264][T12897] syz.3.2727: attempt to access beyond end of device
[  302.026264][T12897] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  302.417604][T12925] loop3: detected capacity change from 0 to 32768
[  302.529564][T12929] loop3: detected capacity change from 0 to 128
[  302.538706][ T1272] usb 3-1: new full-speed USB device number 55 using dummy_hcd
[  302.701200][ T1272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  302.711965][ T1272] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  302.715736][ T1272] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.724510][ T1272] usb 3-1: Product: syz
[  302.726309][ T1272] usb 3-1: Manufacturer: syz
[  302.731281][ T1272] usb 3-1: SerialNumber: syz
[  302.735337][ T1272] usb 3-1: config 0 descriptor??
[  302.796769][T12941] loop3: detected capacity change from 0 to 128
[  302.821110][T12941] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  302.826558][T12941] ext4 filesystem being mounted at /219/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  302.861256][T11326] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  302.965965][ T1272] usb 3-1: USB disconnect, device number 55
[  302.991988][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  303.158391][T11356] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  303.218600][T12952] loop5: detected capacity change from 0 to 32768
[  303.224237][T12952] bcachefs (/dev/loop5): error reading default superblock: Bad minimum version 1.536: (unknown version), greater than version field 1.7: mi_btree_bitmap
[  303.241407][T12952] bcachefs (/dev/loop5): error validating superblock: Invalid option invalid compression opt 7
[  303.245745][T12952] bcachefs: bch2_fs_get_tree() error: invalid_sb_opt_compression
[  303.326595][T11356] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  303.332689][T11356] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3
[  303.336571][T11356] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  303.345703][T11356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.360810][T11356] usb 4-1: config 0 descriptor??
[  303.425579][T12958] loop5: detected capacity change from 0 to 2048
[  303.455619][T12958] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  303.498025][T11876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  303.500568][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2753'.
[  303.838070][ T1272] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  303.857975][  T794] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  303.974675][T11356] Bluetooth: Can't get version to change to load ram patch err
[  303.978990][T11356] Bluetooth: Loading sysconfig file failed
[  303.982682][T11356] ath3k 4-1:0.0: probe with driver ath3k failed with error -71
[  303.986007][T11356] usb 4-1: USB disconnect, device number 15
[  303.989455][ T1272] usb 3-1: too many configurations: 23, using maximum allowed: 8
[  304.007942][ T1272] usb 3-1: New USB device found, idVendor=5bd3, idProduct=317c, bcdDevice= 4.5e
[  304.011642][ T1272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=19
[  304.015040][ T1272] usb 3-1: SerialNumber: syz
[  304.019245][ T1272] usb 3-1: config 0 descriptor??
[  304.023293][  T794] usb 6-1: config 0 has an invalid interface number: 9 but max is 0
[  304.026544][  T794] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  304.028517][ T1272] usb 3-1: bad CDC descriptors
[  304.033418][  T794] usb 6-1: config 0 has no interface number 0
[  304.036068][  T794] usb 6-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8
[  304.040810][  T794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.046742][  T794] usb 6-1: config 0 descriptor??
[  304.053712][  T794] rndis_host 6-1:0.9: More than one union descriptor, skipping ...
[  304.057252][  T794] usb 6-1: bad CDC descriptors
[  304.061345][  T794] cdc_acm 6-1:0.9: More than one union descriptor, skipping ...
[  304.235006][T11356] usb 3-1: USB disconnect, device number 56
[  304.257040][ T9633] usb 6-1: USB disconnect, device number 7
[  304.631920][T12973] loop3: detected capacity change from 0 to 1024
[  304.805756][ T3554] hfsplus: b-tree write err: -5, ino 8
[  305.015498][T12984] loop3: detected capacity change from 0 to 4096
[  305.029934][T12984] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  305.056736][T12984] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  305.063970][T12984] ntfs3(loop3): Failed to load $Extend (-22).
[  305.080185][T12984] ntfs3(loop3): Failed to initialize $Extend.
[  305.186200][T12992] loop2: detected capacity change from 0 to 1024
[  305.221999][T12979] loop5: detected capacity change from 0 to 32768
[  305.230798][T12995] loop3: detected capacity change from 0 to 512
[  305.233968][T12995] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  305.243469][T12979] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section members_v2: device 0: too many buckets (got 1099511627775, max 2147483583)
[  305.243469][T12979] members_v2 (size 152):
[  305.243469][T12979] Device:                        0
[  305.243469][T12979]   Label:                       (none)
[  305.243469][T12979]   UUID:                        7af6772b-00de-4159-84cd-1faeadf8ffff
[  305.243469][T12979]   Size:                        144115188075724800
[  305.243469][T12979]   read errors:                 0
[  305.243469][T12979]   write errors:                0
[  305.243469][T12979]   checksum errors:             150994944
[  305.243469][T12979]   seqread iops:                0
[  305.243469][T12979]   seqwrite iops:               0
[  305.243469][T12979]   randread iops:               0
[  305.243469][T12979]   randwrite iops:              0
[  305.243469][T12979]   Bucket size:                 131072
[  305.243469][T12979]   First bucket:                0
[  305.243469][T12979]   Buckets:                     1099511627775
[  305.243469][T12979]   Last mount:                  1714681267
[  305.243469][T12979]   Last superblock write:       42
[  305.243469][T12979]   State:                       rw
[  305.243469][T12979]   Data allowed:                journal,btree,user
[  305.243469][T12979]   Has data:                    (none)
[  305.243469][T12979]   Btree allocated bitmap blocksize:256
[  305.243469][T12979]   Btree allocated bitmap:      00000000000000000000010000100000
[  305.243585][T12979] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  305.293122][    C0] vkms_vblank_simulate: vblank timer overrun
[  305.430313][T13002] loop5: detected capacity change from 0 to 1024
[  305.449880][T13002] hfsplus: request for non-existent node 40 in B*Tree
[  305.452902][T13002] hfsplus: request for non-existent node 40 in B*Tree
[  305.506268][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2773'.
[  305.583966][T13014] loop5: detected capacity change from 0 to 512
[  305.591147][T13014] EXT4-fs: Ignoring removed orlov option
[  305.598826][T13014] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  305.617369][T13014] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  305.620299][T13014] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.2777: corrupted in-inode xattr: e_value size too large
[  305.633150][T13014] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2777: couldn't read orphan inode 15 (err -117)
[  305.643779][T13014] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  305.682623][T11876] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.908966][T13028] loop3: detected capacity change from 0 to 16384
[  305.967885][T11356] usb 3-1: new full-speed USB device number 57 using dummy_hcd
[  305.993457][T13028] bcachefs (loop3): starting version 1.13: inode_has_child_snapshots opts=errors=continue,metadata_checksum=none,data_checksum=none,grpquota,norecovery,reconstruct_alloc
[  305.993476][T13028]   features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  306.009273][T13028] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  306.013729][T13028] bcachefs (loop3): invalid journal entry, version=1.13: inode_has_child_snapshots type=clock in superblock: bad size, fixing
[  306.023227][T13028] bcachefs (loop3): recovering from clean shutdown, journal seq 18
[  306.026690][T13028] bcachefs (loop3): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive
[  306.026690][T13028]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  306.038771][T13028] bcachefs (loop3): dropping and reconstructing all alloc info
[  306.054400][T13028] bcachefs (loop3): accounting_read... done
[  306.058503][T13028] bcachefs (loop3): alloc_read... done
[  306.061136][T13028] bcachefs (loop3): snapshots_read... done
[  306.064001][T13028] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean
[  306.068240][T13028] bcachefs (loop3): reading quotas
[  306.071788][T13028] bcachefs (loop3): quotas done
[  306.074274][T13028] bcachefs (loop3): done starting filesystem
[  306.119252][T11326] bcachefs (loop3): shutting down
[  306.122833][T11356] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  306.128621][T11356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  306.133122][T11356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  306.143234][T11356] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  306.150748][T11356] usb 3-1: New USB device found, idVendor=056a, idProduct=48de, bcdDevice= 0.2e
[  306.154640][T11326] bcachefs (loop3): shutdown complete
[  306.157373][T11356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.163453][T11356] usb 3-1: config 0 descriptor??
[  306.589506][T11356] wacom 0003:056A:48DE.0016: unknown main item tag 0x0
[  306.594992][T11356] wacom 0003:056A:48DE.0016: unknown main item tag 0x0
[  306.605226][T11356] wacom 0003:056A:48DE.0016: Unknown device_type for 'HID 056a:48de'. Ignoring.
[  306.622293][T13039] loop5: detected capacity change from 0 to 256
[  306.627431][T13039] exfat: Deprecated parameter 'namecase'
[  306.629548][T13039] exfat: Deprecated parameter 'namecase'
[  306.636793][T13039] exfat: Deprecated parameter 'namecase'
[  306.639800][T13039] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  306.645922][T13039] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  306.791703][ T1272] usb 3-1: USB disconnect, device number 57
[  306.849562][T13043] loop5: detected capacity change from 0 to 32768
[  307.475750][T13049] netlink: 'syz.3.2785': attribute type 1 has an invalid length.
[  307.542932][T13051] loop3: detected capacity change from 0 to 4096
[  307.549348][T13051] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  307.553999][T13051] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  307.559762][T13051] ntfs3(loop3): volume is dirty and "force" flag is not set!
[  307.617212][T11356] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  307.768178][T11356] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  307.772441][T11356] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[  307.776937][T11356] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.783063][T11356] usb 3-1: config 0 descriptor??
[  307.866101][  T794] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  307.938131][T13055] loop5: detected capacity change from 0 to 32768
[  308.004323][T13055] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  308.004339][T13055]   allowing incompatible features above 0.0: (unknown version)
[  308.004345][T13055]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  308.016524][  T794] usb 4-1: Using ep0 maxpacket: 16
[  308.018757][T13055] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  308.018779][T13055] bcachefs (loop5): initializing new filesystem
[  308.022939][T13055] bcachefs (loop5): going read-write
[  308.036431][  T794] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  308.041860][  T794] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x33, changing to 0x3
[  308.042199][T13055] bcachefs (loop5): marking superblocks
[  308.050930][  T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  308.057412][  T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  308.061463][  T794] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  308.065420][  T794] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  308.067186][T13055] bcachefs (loop5): initializing freespace
[  308.078781][T13055] bcachefs (loop5): done initializing freespace
[  308.081811][  T794] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  308.087368][T13055] bcachefs (loop5): reading snapshots table
[  308.088404][  T794] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  308.089941][T13055] bcachefs (loop5): reading snapshots done
[  308.098391][  T794] usb 4-1: Manufacturer: syz
[  308.108736][T13055] bcachefs (loop5): done starting filesystem
[  308.114841][  T794] usb 4-1: config 0 descriptor??
[  308.191626][T11876] bcachefs (loop5): shutting down
[  308.194297][T11876] bcachefs (loop5): going read-only
[  308.197566][T11876] bcachefs (loop5): finished waiting for writes to stop
[  308.209449][T11356] itetech 0003:258A:6A88.0017: unbalanced collection at end of report description
[  308.213557][T11876] bcachefs (loop5): flushing journal and stopping allocators, journal seq 2
[  308.217893][T11356] itetech 0003:258A:6A88.0017: probe with driver itetech failed with error -22
[  308.253445][T11876] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3
[  308.259209][T11876] bcachefs (loop5): clean shutdown complete, journal seq 4
[  308.262893][T11876] bcachefs (loop5): marking filesystem clean
[  308.282081][T11876] bcachefs (loop5): shutdown complete
[  308.326306][ T1272] usb 4-1: USB disconnect, device number 16
[  308.410448][  T794] usb 3-1: USB disconnect, device number 58
[  308.991669][T13073] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2797'.
[  309.007300][T13073] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2797'.
[  309.262079][T13075] loop2: detected capacity change from 0 to 32768
[  309.334139][T13071] loop3: detected capacity change from 0 to 32768
[  309.402172][T13071] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  309.449525][T13071] XFS (loop3): Ending clean mount
[  309.503817][T11326] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  309.722640][T13094] loop2: detected capacity change from 0 to 4096
[  310.100174][T13114] loop5: detected capacity change from 0 to 4096
[  310.118783][T13114] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  310.150413][T13114] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  310.153415][T13114] ntfs3(loop5): ino=3, ntfs_set_state failed, -22.
[  310.157301][T13114] ntfs3(loop5): Failed to load $Bitmap (-22).
[  310.159976][T13114] ntfs3(loop5): ino=3, ntfs3_write_inode failed, -22.
[  310.509291][ T1272] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  310.738366][ T1272] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  310.751221][ T1272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.777855][ T1272] usb 4-1: config 0 descriptor??
[  310.808961][T13128] comedi comedi0: Cannot bond this driver to itself!
[  311.097647][T13130] loop2: detected capacity change from 0 to 32768
[  311.214709][ T1272] ath6kl: Failed to read usb control message: -71
[  311.218399][ T1272] ath6kl: Unable to read the bmi data from the device: -71
[  311.221178][ T1272] ath6kl: Unable to recv target info: -71
[  311.238571][ T1272] ath6kl: Failed to init ath6kl core: -71
[  311.240687][ T1272] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  311.265404][ T1272] usb 4-1: USB disconnect, device number 17
[  311.604139][ T5899] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  311.754196][ T5899] usb 3-1: Using ep0 maxpacket: 32
[  311.758968][ T5899] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  311.763319][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.769294][ T5899] usb 3-1: config 0 descriptor??
[  311.777987][ T5899] gspca_main: nw80x-2.14.0 probing 055f:d001
[  311.985879][ T5899] gspca_nw80x: reg_w err -71
[  311.987904][ T5899] nw80x 3-1:0.0: probe with driver nw80x failed with error -71
[  311.993457][ T5899] usb 3-1: USB disconnect, device number 59
[  312.022662][T13140] loop3: detected capacity change from 0 to 32768
[  312.032505][T13140] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2822 (13140)
[  312.055232][T13140] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  312.061581][T13140] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  312.095431][T13140] BTRFS info (device loop3): enabling ssd optimizations
[  312.098482][T13140] BTRFS info (device loop3): enabling free space tree
[  312.157329][T11326] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  313.046768][T13162] loop2: detected capacity change from 0 to 32768
[  313.354157][T13166] loop3: detected capacity change from 0 to 4096
[  313.357549][T13166] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  313.384800][   T54] Bluetooth: hci3: command 0x1003 tx timeout
[  313.400511][ T5850] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  313.499727][T13166] ntfs3(loop3): ino=1d, mi_enum_attr
[  313.501825][T13166] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  313.509571][T13166] ntfs3(loop3): ino=1d, mi_enum_attr
[  313.512476][T13166] ntfs3(loop3): ino=1d, mi_enum_attr
[  313.877608][T13178] loop3: detected capacity change from 0 to 128
[  313.895308][T13178] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  313.901008][T13176] loop5: detected capacity change from 0 to 4096
[  313.908678][T13178] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  314.115575][T13181] loop3: detected capacity change from 0 to 32768
[  314.123056][T13181] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  314.136929][T13181] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  314.286441][T11326] ocfs2: Unmounting device (7,3) on (node local)
[  314.292837][ T5899] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  314.462709][ T5899] usb 6-1: Using ep0 maxpacket: 8
[  314.464531][T13189] loop2: detected capacity change from 0 to 32768
[  314.466502][ T5899] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  314.467894][T13189] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2835 (13189)
[  314.479150][ T5899] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  314.482790][T13189] BTRFS error: failed to open device for path /dev/loop2 with flags 0x23: -13
[  314.492735][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11
[  314.502747][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024
[  314.507028][ T5899] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  314.536313][ T5899] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  314.540029][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.553391][ T5899] usb 6-1: Product: syz
[  314.555240][ T5899] usb 6-1: Manufacturer: syz
[  314.557118][ T5899] usb 6-1: SerialNumber: syz
[  314.561013][ T5899] usb 6-1: config 0 descriptor??
[  314.633839][ T5899] rc_core: IR keymap rc-imon-rsc not found
[  314.636774][ T5899] Registered IR keymap rc-empty
[  314.641649][T13191] loop3: detected capacity change from 0 to 32768
[  314.642873][ T5899] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  314.662170][   T33] audit: type=1800 audit(1757545642.340:167): pid=13191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2836" name="file1" dev="loop3" ino=4 res=0 errno=0
[  314.666408][ T5899] input: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input25
[  314.822187][  T794] usb 6-1: USB disconnect, device number 8
[  314.969253][T13191] ERROR: (device loop3): dbAdjCtl: the maximum free buddy is not the old root
[  314.969253][T13191] 
[  314.977846][T13191] ERROR: (device loop3): remounting filesystem as read-only
[  315.160135][T13207] loop2: detected capacity change from 0 to 2048
[  315.197530][T13209] loop3: detected capacity change from 0 to 512
[  315.200673][T13209] EXT4-fs: Ignoring removed orlov option
[  315.227519][T13209] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  315.244087][T13209] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.2843: corrupted in-inode xattr: e_value size too large
[  315.256600][T13209] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2843: couldn't read orphan inode 15 (err -117)
[  315.267466][T13209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  315.281733][T13209] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  315.341209][T11326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.514380][T13223] loop5: detected capacity change from 0 to 4096
[  315.566857][T13230] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  315.574720][T13229] loop3: detected capacity change from 0 to 1024
[  315.599404][  T794] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  315.653164][T13229] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  315.704262][T11326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.756028][  T794] usb 3-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[  315.771019][  T794] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  315.785663][  T794] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  315.804184][  T794] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  315.815787][  T794] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[  315.826861][  T794] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  315.838488][  T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.864738][T13217] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  316.074988][  T794] ath6kl: Failed to submit usb control message: -71
[  316.077828][  T794] ath6kl: unable to send the bmi data to the device: -71
[  316.096514][  T794] ath6kl: Unable to send get target info: -71
[  316.101363][  T794] ath6kl: Failed to init ath6kl core: -71
[  316.104639][  T794] ath6kl_usb 3-1:4.0: probe with driver ath6kl_usb failed with error -71
[  316.118740][  T794] usb 3-1: USB disconnect, device number 60
[  316.390788][T13244] mkiss: ax0: crc mode is auto.
[  316.412781][ T5899] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  316.563410][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  316.567293][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  316.571062][ T5899] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  316.574227][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.578200][ T5899] usb 4-1: config 0 descriptor??
[  316.585430][T13250] loop5: detected capacity change from 0 to 128
[  316.641881][T13252] loop2: detected capacity change from 0 to 128
[  316.744958][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  316.747269][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  317.002749][ T5899] hid-steam 0003:28DE:1142.0018: unknown main item tag 0x0
[  317.006572][ T5899] hid-steam 0003:28DE:1142.0018: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0
[  317.008016][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.061717][ T5899] hid-steam 0003:28DE:1142.0018: Steam wireless receiver connected
[  317.069645][ T5899] hid-steam 0003:28DE:1142.0019: unknown main item tag 0x0
[  317.086162][ T5899] hid-steam 0003:28DE:1142.0019: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0
[  317.125808][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.227760][ T5899] usb 4-1: USB disconnect, device number 18
[  317.238185][T13262] loop2: detected capacity change from 0 to 4096
[  317.247305][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.280887][ T5899] hid-steam 0003:28DE:1142.0018: Steam wireless receiver disconnected
[  317.367118][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.500167][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  317.506826][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  317.507670][T13268] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  317.517312][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  317.525912][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  317.537242][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  317.618194][T13272] loop2: detected capacity change from 0 to 256
[  317.634679][   T13] bridge_slave_1: left allmulticast mode
[  317.636906][   T13] bridge_slave_1: left promiscuous mode
[  317.639342][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.656740][   T13] bridge_slave_0: left allmulticast mode
[  317.659076][   T13] bridge_slave_0: left promiscuous mode
[  317.664640][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.898497][T13278] loop2: detected capacity change from 0 to 4096
[  318.095555][T13288] block nbd2: NBD_DISCONNECT
[  318.097995][T13288] block nbd2: Send disconnect failed -22
[  318.106910][T13287] block nbd2: Disconnected due to user request.
[  318.117278][T13287] block nbd2: shutting down sockets
[  318.170997][T13290] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  318.345008][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  318.353203][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  318.357637][   T13] bond0 (unregistering): Released all slaves
[  318.544143][T13300] loop2: detected capacity change from 0 to 512
[  318.638561][T13305] loop2: detected capacity change from 0 to 2048
[  318.802018][ T1272] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  318.834719][   T13] hsr_slave_0: left promiscuous mode
[  318.840755][   T13] hsr_slave_1: left promiscuous mode
[  318.843856][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  318.847012][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  318.851635][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  318.854827][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  318.879456][   T13] veth1_macvtap: left promiscuous mode
[  318.889055][   T13] veth0_macvtap: left promiscuous mode
[  318.895753][   T13] veth1_vlan: left promiscuous mode
[  318.897754][   T13] veth0_vlan: left promiscuous mode
[  318.923381][T13319] loop2: detected capacity change from 0 to 4096
[  318.950813][ T1272] usb 4-1: Using ep0 maxpacket: 32
[  318.956342][ T1272] usb 4-1: config 0 has an invalid interface number: 23 but max is 0
[  318.962816][ T1272] usb 4-1: config 0 has no interface number 0
[  318.965822][ T1272] usb 4-1: config 0 interface 23 has no altsetting 0
[  318.977115][ T1272] usb 4-1: New USB device found, idVendor=0557, idProduct=2002, bcdDevice=b6.ad
[  318.989258][ T1272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.992937][ T1272] usb 4-1: Product: syz
[  318.994472][ T1272] usb 4-1: Manufacturer: syz
[  318.996531][ T1272] usb 4-1: SerialNumber: syz
[  319.002774][ T1272] usb 4-1: config 0 descriptor??
[  319.216854][T13302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.223466][T13302] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  319.245318][ T1272] kaweth 4-1:0.23: Firmware present in device.
[  319.248674][ T1272] kaweth 4-1:0.23: Error reading configuration (-71), no net device created
[  319.253692][ T1272] kaweth 4-1:0.23: probe with driver kaweth failed with error -5
[  319.259642][ T1272] usb 4-1: USB disconnect, device number 19
[  319.505844][   T13] team0 (unregistering): Port device team_slave_1 removed
[  319.550569][   T13] team0 (unregistering): Port device team_slave_0 removed
[  319.635468][ T5850] Bluetooth: hci2: command tx timeout
[  320.020210][   T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  320.029330][T13269] chnl_net:caif_netlink_parms(): no params data found
[  320.189088][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  320.194680][   T10] usb 4-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00
[  320.205854][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.229089][   T10] usb 4-1: config 0 descriptor??
[  320.267351][T13334] loop2: detected capacity change from 0 to 256
[  320.307115][T13269] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.312831][T13269] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.315930][T13269] bridge_slave_0: entered allmulticast mode
[  320.328268][T13269] bridge_slave_0: entered promiscuous mode
[  320.355307][T13269] bridge0: port 2(bridge_slave_1) entered blocking state
[  320.358390][T13269] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.366535][T13269] bridge_slave_1: entered allmulticast mode
[  320.396985][T13269] bridge_slave_1: entered promiscuous mode
[  320.491991][T13269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  320.507945][T13269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  320.572721][T13269] team0: Port device team_slave_0 added
[  320.577068][T13269] team0: Port device team_slave_1 added
[  320.613315][T13269] batman_adv: batadv0: Adding interface: batadv_slave_0
[  320.616190][T13269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  320.627707][T13269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  320.634394][T13269] batman_adv: batadv0: Adding interface: batadv_slave_1
[  320.637416][T13269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  320.650779][T13269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  320.685749][   T10] sunplus 0003:04FC:05D8.001A: hidraw0: USB HID v0.00 Device [HID 04fc:05d8] on usb-dummy_hcd.3-1/input0
[  320.689697][ T1272] usb 3-1: new full-speed USB device number 61 using dummy_hcd
[  320.707505][T13269] hsr_slave_0: entered promiscuous mode
[  320.710854][T13269] hsr_slave_1: entered promiscuous mode
[  320.716170][T13269] debugfs: 'hsr0' already exists in 'hsr'
[  320.718564][T13269] Cannot create hsr debugfs directory
[  320.854470][ T1272] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  320.858876][ T1272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 34151, setting to 64
[  320.874681][ T1272] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=d4.aa
[  320.877802][ T1272] usb 3-1: New USB device strings: Mfr=16, Product=150, SerialNumber=0
[  320.894975][ T1272] usb 3-1: Product: syz
[  320.896584][ T1272] usb 3-1: Manufacturer: syz
[  320.903152][T13269] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  320.905837][ T1272] usb 3-1: config 0 descriptor??
[  320.908387][T13338] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  320.908431][   T47] usb 4-1: USB disconnect, device number 20
[  320.922471][ T1272] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input26
[  320.935678][T13269] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  320.946472][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  320.951503][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  320.954790][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  320.957974][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  320.961520][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  320.965306][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  320.968473][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  320.971928][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  320.975222][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  320.978366][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  320.981866][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  320.985042][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  320.988269][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  320.991393][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  320.994490][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  320.997600][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.000799][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.002842][T13269] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  321.004034][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.010435][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.013843][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.017072][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.018817][T13269] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  321.020337][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.020567][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.029772][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.032924][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.036198][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.039432][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.042658][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.045923][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.053470][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.056532][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.059684][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.062790][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.066001][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.069091][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.072394][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.075597][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.078844][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.082179][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.085330][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.088495][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.091879][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.095398][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.098760][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.102147][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.105471][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.108745][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.112066][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.115307][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.118648][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.121941][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.125200][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.128283][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.131449][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.134680][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.137934][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.146425][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.150203][ T5282] usb 3-1: control msg error: -71
[  321.150562][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.156846][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.160121][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.163352][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.166573][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  321.169630][    C1] usb 3-1: pegasus_irq - usb_submit_urb failed with result -1
[  321.183162][ T1272] usb 3-1: USB disconnect, device number 61
[  321.255433][T13269] 8021q: adding VLAN 0 to HW filter on device bond0
[  321.275948][T13269] 8021q: adding VLAN 0 to HW filter on device team0
[  321.283868][T10671] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.286591][T10671] bridge0: port 1(bridge_slave_0) entered forwarding state
[  321.305649][T10671] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.308614][T10671] bridge0: port 2(bridge_slave_1) entered forwarding state
[  321.437019][T13269] 8021q: adding VLAN 0 to HW filter on device batadv0
[  321.447928][T13364] loop3: detected capacity change from 0 to 256
[  321.473910][T13364] FAT-fs (loop3): Directory bread(block 64) failed
[  321.476192][T13364] FAT-fs (loop3): Directory bread(block 65) failed
[  321.478551][T13364] FAT-fs (loop3): Directory bread(block 66) failed
[  321.481213][T13364] FAT-fs (loop3): Directory bread(block 67) failed
[  321.483440][T13364] FAT-fs (loop3): Directory bread(block 68) failed
[  321.485669][T13364] FAT-fs (loop3): Directory bread(block 69) failed
[  321.487833][T13364] FAT-fs (loop3): Directory bread(block 70) failed
[  321.490624][T13364] FAT-fs (loop3): Directory bread(block 71) failed
[  321.493059][T13364] FAT-fs (loop3): Directory bread(block 72) failed
[  321.495865][T13364] FAT-fs (loop3): Directory bread(block 73) failed
[  321.614006][T13269] veth0_vlan: entered promiscuous mode
[  321.618862][T13269] veth1_vlan: entered promiscuous mode
[  321.637822][T13269] veth0_macvtap: entered promiscuous mode
[  321.644363][T13269] veth1_macvtap: entered promiscuous mode
[  321.656407][T13269] batman_adv: batadv0: Interface activated: batadv_slave_0
[  321.667052][T13269] batman_adv: batadv0: Interface activated: batadv_slave_1
[  321.685959][ T5878] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  321.693871][ T5878] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  321.699194][ T5850] Bluetooth: hci2: command tx timeout
[  321.731531][ T5879] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  321.734822][ T5879] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.806976][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.810397][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  321.845407][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.848661][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  321.905940][T13371] loop3: detected capacity change from 0 to 32768
[  321.911931][T13371] XFS: ikeep mount option is deprecated.
[  321.946727][T13371] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  321.949758][ T5880] usb 3-1: new full-speed USB device number 62 using dummy_hcd
[  321.967674][T13371] XFS (loop3): Ending clean mount
[  322.001803][T13387] loop6: detected capacity change from 0 to 256
[  322.037622][T13387] FAT-fs (loop6): Directory bread(block 64) failed
[  322.040087][T13387] FAT-fs (loop6): Directory bread(block 65) failed
[  322.042672][T13387] FAT-fs (loop6): Directory bread(block 66) failed
[  322.044965][T11326] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  322.045293][T13387] FAT-fs (loop6): Directory bread(block 67) failed
[  322.052822][T13387] FAT-fs (loop6): Directory bread(block 68) failed
[  322.055146][T13387] FAT-fs (loop6): Directory bread(block 69) failed
[  322.057443][T13387] FAT-fs (loop6): Directory bread(block 70) failed
[  322.070277][T13387] FAT-fs (loop6): Directory bread(block 71) failed
[  322.073313][T13387] FAT-fs (loop6): Directory bread(block 72) failed
[  322.075489][T13387] FAT-fs (loop6): Directory bread(block 73) failed
[  322.115937][T13387] syz.6.2895: attempt to access beyond end of device
[  322.115937][T13387] loop6: rw=524288, sector=1160, nr_sectors = 4 limit=256
[  322.133193][ T5880] usb 3-1: config 0 has an invalid interface number: 11 but max is 0
[  322.135976][ T5880] usb 3-1: config 0 has no interface number 0
[  322.152332][T13387] syz.6.2895: attempt to access beyond end of device
[  322.152332][T13387] loop6: rw=0, sector=1160, nr_sectors = 4 limit=256
[  322.157476][   T33] audit: type=1800 audit(1757545649.834:168): pid=13387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2895" name="freezer.state" dev="loop6" ino=1048692 res=0 errno=0
[  322.163600][ T5880] usb 3-1: config 0 interface 11 has no altsetting 0
[  322.168211][ T5880] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  322.186390][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.191217][ T5880] usb 3-1: config 0 descriptor??
[  322.201517][ T5880] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected
[  322.204691][ T5880] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 7
[  322.222239][ T5880] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81
[  322.226437][ T5880] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82
[  322.249544][ T5880] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1
[  322.252679][ T5880] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2
[  322.269034][ T5880] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85
[  322.299089][ T5880] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5
[  322.305263][ T5880] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  322.338237][ T5880] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83
[  322.348974][ T5880] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84
[  322.364162][ T5880] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3
[  322.367464][ T5880] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4
[  322.381512][ T5880] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 86
[  322.385665][ T5880] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6
[  322.422865][ T5880] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  322.447773][ T5880] usb 3-1: USB disconnect, device number 62
[  322.454541][ T5880] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  322.468495][ T5880] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  322.476770][ T5880] keyspan 3-1:0.11: device disconnected
[  322.658817][   T47] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  322.808570][   T47] usb 4-1: Using ep0 maxpacket: 32
[  322.813781][   T47] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  322.819622][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  322.828596][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  322.838554][   T47] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  322.842359][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.847925][   T47] usb 4-1: config 0 descriptor??
[  322.850995][T13398] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  322.859156][   T47] hub 4-1:0.0: USB hub found
[  322.978515][T13404] loop6: detected capacity change from 0 to 40427
[  322.985461][T13404] F2FS-fs: heap/no_heap options were deprecated
[  323.011422][T13404] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504)
[  323.014486][T13404] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  323.017776][T13404] F2FS-fs (loop6): journaled quota format not specified
[  323.059892][   T47] hub 4-1:0.0: 11 ports detected
[  323.067008][   T47] hub 4-1:0.0: insufficient power available to use all downstream ports
[  323.260791][   T47] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  323.263470][   T47] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  323.267403][T13409] loop2: detected capacity change from 0 to 32768
[  323.278352][   T47] usbhid 4-1:0.0: can't add hid device: -71
[  323.281078][   T47] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  323.319814][   T47] usb 4-1: USB disconnect, device number 21
[  323.373101][T13413] loop6: detected capacity change from 0 to 16
[  323.377061][T13413] erofs (device loop6): mounted with root inode @ nid 36.
[  323.542705][T13416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2907'.
[  323.555071][T13416] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  323.561233][T13416] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  323.701353][   T33] audit: type=1800 audit(1757545651.305:169): pid=13417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2906" name="file1" dev="loop6" ino=86 res=0 errno=0
[  323.778352][ T5850] Bluetooth: hci2: command tx timeout
[  323.963523][T13421] loop3: detected capacity change from 0 to 164
[  324.707422][ T5899] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  324.758533][T13436] loop6: detected capacity change from 0 to 8192
[  324.824762][T12396] Dev loop6 Sun disklabel: Csum bad, label corrupted
[  324.830294][T13436] Dev loop6 Sun disklabel: Csum bad, label corrupted
[  324.857732][ T5899] usb 3-1: Using ep0 maxpacket: 8
[  324.862287][ T5899] usb 3-1: unable to get BOS descriptor or descriptor too short
[  324.866754][ T5899] usb 3-1: config 250 has an invalid interface number: 4 but max is 0
[  324.870960][ T5899] usb 3-1: config 250 has no interface number 0
[  324.877934][ T5899] usb 3-1: config 250 interface 4 altsetting 43 endpoint 0x6 has invalid wMaxPacketSize 0
[  324.882390][ T5899] usb 3-1: config 250 interface 4 has no altsetting 0
[  324.887148][ T5899] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=1b.8a
[  324.891574][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.894933][ T5899] usb 3-1: Product: syz
[  324.896772][ T5899] usb 3-1: Manufacturer: syz
[  324.901692][ T5899] usb 3-1: SerialNumber: syz
[  324.965256][T13442] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0
[  325.006726][T13444] loop6: detected capacity change from 0 to 8
[  325.039619][T13444] SQUASHFS error: xz decompression failed, data probably corrupt
[  325.043775][T13444] SQUASHFS error: Failed to read block 0x108: -5
[  325.046581][T13444] SQUASHFS error: Unable to read metadata cache entry [106]
[  325.049990][T13444] SQUASHFS error: Unable to read inode 0x11f
[  325.124773][ T5899] powermate 3-1:250.4: probe with driver powermate failed with error -5
[  325.129843][ T5899] usb 3-1: USB disconnect, device number 63
[  325.347756][  T794] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  325.517537][  T794] usb 7-1: Using ep0 maxpacket: 16
[  325.522003][  T794] usb 7-1: too many configurations: 60, using maximum allowed: 8
[  325.536783][  T794] usb 7-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9
[  325.542021][  T794] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204
[  325.545392][  T794] usb 7-1: Product: syz
[  325.547482][  T794] usb 7-1: Manufacturer: syz
[  325.549524][  T794] usb 7-1: SerialNumber: syz
[  325.555090][  T794] usb 7-1: config 0 descriptor??
[  325.560569][  T794] pwc: Philips SPC 880NC USB webcam detected.
[  325.683899][T13449] loop3: detected capacity change from 0 to 512
[  325.691491][T13449] EXT4-fs (loop3): can't read group descriptor 0
[  325.762524][  T794] pwc: Warning: more than 1 configuration available.
[  325.768811][  T794] pwc: Failed to set LED on/off time (-71)
[  325.771243][  T794] pwc: send_video_command error -71
[  325.773012][  T794] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  325.775958][  T794] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71
[  325.781996][  T794] usb 7-1: USB disconnect, device number 2
[  325.857277][ T5850] Bluetooth: hci2: command tx timeout
[  325.927009][   T10] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  326.036537][T13455] loop3: detected capacity change from 0 to 32768
[  326.043639][T13455] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2924 (13455)
[  326.061282][T13455] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  326.069062][T13455] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  326.087065][   T10] usb 3-1: Using ep0 maxpacket: 32
[  326.095550][   T10] usb 3-1: config 0 has an invalid interface number: 247 but max is 0
[  326.104820][   T10] usb 3-1: config 0 has no interface number 0
[  326.107733][   T10] usb 3-1: config 0 interface 247 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  326.111912][   T10] usb 3-1: config 0 interface 247 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  326.117790][T13455] BTRFS info (device loop3): enabling ssd optimizations
[  326.120708][T13455] BTRFS info (device loop3): enabling free space tree
[  326.128465][   T10] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  326.132201][   T10] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  326.135504][   T10] usb 3-1: Product: syz
[  326.138131][   T10] usb 3-1: Manufacturer: syz
[  326.160497][   T10] usb 3-1: config 0 descriptor??
[  326.179578][T11326] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  326.395673][   T10] usb 3-1: USB disconnect, device number 64
[  327.614757][T13499] loop6: detected capacity change from 0 to 512
[  327.650793][T13499] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  327.654396][T13499] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  327.662025][T13499] System zones: 0-1, 15-15, 18-18, 34-34
[  327.665355][T13499] EXT4-fs (loop6): orphan cleanup on readonly fs
[  327.668443][T13499] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0
[  327.672681][T13499] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  327.680654][T13499] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  327.684013][T13499] EXT4-fs (loop6): 1 truncate cleaned up
[  327.688743][T13499] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  327.720020][T13269] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.033100][T13520] loop2: detected capacity change from 0 to 2048
[  328.220238][T13514] loop3: detected capacity change from 0 to 32768
[  328.247046][T13514] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  328.311792][   T33] audit: type=1800 audit(1757545655.997:170): pid=13514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2937" name="file1" dev="loop3" ino=17060 res=0 errno=0
[  328.379470][T11326] ocfs2: Unmounting device (7,3) on (node local)
[  329.899833][T13572] loop2: detected capacity change from 0 to 32768
[  330.059409][T13584] input: syz1 as /devices/virtual/input/input27
[  330.122014][T13588] loop6: detected capacity change from 0 to 256
[  330.143163][T13588] FAT-fs (loop6): Directory bread(block 64) failed
[  330.150433][T13588] FAT-fs (loop6): Directory bread(block 65) failed
[  330.160392][T13588] FAT-fs (loop6): Directory bread(block 66) failed
[  330.168667][T13588] FAT-fs (loop6): Directory bread(block 67) failed
[  330.172602][T13588] FAT-fs (loop6): Directory bread(block 68) failed
[  330.177290][T13588] FAT-fs (loop6): Directory bread(block 69) failed
[  330.192849][T13588] FAT-fs (loop6): Directory bread(block 70) failed
[  330.199495][T13592] loop2: detected capacity change from 0 to 512
[  330.205403][T13588] FAT-fs (loop6): Directory bread(block 71) failed
[  330.207562][T13588] FAT-fs (loop6): Directory bread(block 72) failed
[  330.209660][T13588] FAT-fs (loop6): Directory bread(block 73) failed
[  330.504767][   T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  330.658160][   T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  330.661051][   T47] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  330.661147][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.688118][   T10] usb 4-1: config 0 descriptor??
[  330.692035][   T10] cp210x 4-1:0.0: cp210x converter detected
[  330.811337][   T47] usb 7-1: Using ep0 maxpacket: 8
[  330.821167][   T47] usb 7-1: config 0 has an invalid interface number: 31 but max is 0
[  330.828000][   T47] usb 7-1: config 0 has no interface number 0
[  330.837043][   T47] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  330.840648][   T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.843979][   T47] usb 7-1: Product: syz
[  330.849255][   T47] usb 7-1: Manufacturer: syz
[  330.851131][   T47] usb 7-1: SerialNumber: syz
[  330.856631][   T47] usb 7-1: config 0 descriptor??
[  331.066560][   T47] usb 7-1: Found UVC 0.04 device syz (046d:08c3)
[  331.069908][   T47] usb 7-1: No valid video chain found.
[  331.076702][   T47] usb 7-1: USB disconnect, device number 3
[  331.303359][   T10] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -32
[  331.307834][   T10] cp210x 4-1:0.0: GPIO initialisation failed: -32
[  331.318694][   T10] usb 4-1: cp210x converter now attached to ttyUSB0
[  331.325177][   T10] usb 4-1: USB disconnect, device number 22
[  331.337204][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  331.341008][   T10] cp210x 4-1:0.0: device disconnected
[  331.597044][T13653] netlink: 'syz.6.3001': attribute type 10 has an invalid length.
[  331.604171][T13653] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3001'.
[  331.629814][T13653] team0: Port device geneve0 added
[  331.682154][T13657] loop6: detected capacity change from 0 to 256
[  331.712525][T13657] vfat: Bad value for 'nonumtail'
[  332.190863][T13686] loop3: detected capacity change from 0 to 1024
[  332.197402][T13686] EXT4-fs: Ignoring removed bh option
[  332.199696][T13686] EXT4-fs: inline encryption not supported
[  332.213538][T13686] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  332.230393][T13686] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.3015: lblock 2 mapped to illegal pblock 2 (length 1)
[  332.237354][T13686] Quota error (device loop3): qtree_write_dquot: dquota write failed
[  332.240672][T13686] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.3015: lblock 0 mapped to illegal pblock 48 (length 1)
[  332.249944][T13686] Quota error (device loop3): v2_write_file_info: Can't write info structure
[  332.254048][T13686] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.3015: Failed to acquire dquot type 0
[  332.259067][T13686] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  332.268309][T13686] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.3015: mark_inode_dirty error
[  332.273173][T13686] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  332.286243][T13686] EXT4-fs (loop3): 1 orphan inode deleted
[  332.302677][T13686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  332.311105][T12823] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u10:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  332.331872][T12823] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  332.335486][T12823] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u10:7: Failed to release dquot type 0
[  332.401248][T13696] pim6reg1: entered promiscuous mode
[  332.403498][T13696] pim6reg1: entered allmulticast mode
[  332.464704][T13686] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz.3.3015: Invalid inode table block 1 in block_group 0
[  332.494436][T13686] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  332.635306][T11326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.877635][  T164] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u9:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  332.889285][  T164] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  332.893054][  T164] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u9:3: Failed to release dquot type 0
[  332.899320][T11326] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  332.909723][T11326] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  332.921873][T11326] EXT4-fs error (device loop3): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error
[  333.774067][ T5850] Bluetooth: hci1: command 0x0406 tx timeout
[  333.789592][T13736] loop6: detected capacity change from 0 to 32768
[  333.806874][T13736] JBD2: Ignoring recovery information on journal
[  333.845599][T13736] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  333.884153][T13269] ocfs2: Unmounting device (7,6) on (node local)
[  334.016942][T13743] loop3: detected capacity change from 0 to 512
[  334.060298][T13743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  334.066408][T13743] ext4 filesystem being mounted at /299/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  334.095266][T11326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.272877][ T5880] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  334.424826][ T5880] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  334.431081][ T5880] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  334.438456][ T5880] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  334.442179][ T5880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.448011][ T5880] usb 7-1: Product: syz
[  334.450253][ T5880] usb 7-1: Manufacturer: syz
[  334.452408][ T5880] usb 7-1: SerialNumber: syz
[  334.460387][ T5880] usb 7-1: config 0 descriptor??
[  334.467272][T13745] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  334.470727][T13745] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  334.699074][T13745] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  334.706230][T13745] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  335.115563][ T5880] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  335.232363][T13775] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  335.280383][T13779] loop3: detected capacity change from 0 to 64
[  335.333123][T13781] loop3: detected capacity change from 0 to 128
[  335.350644][T13781] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  335.364845][T13781] ext4 filesystem being mounted at /307/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  335.388089][T11326] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  335.465206][   T33] audit: type=1326 audit(1757545663.161:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13786 comm="syz.3.3050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648c78eba9 code=0x7ffc0000
[  335.478490][   T33] audit: type=1326 audit(1757545663.161:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13786 comm="syz.3.3050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648c78eba9 code=0x7ffc0000
[  335.491665][   T33] audit: type=1326 audit(1757545663.171:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13786 comm="syz.3.3050" exe="/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f648c78eba9 code=0x7ffc0000
[  335.500344][   T33] audit: type=1326 audit(1757545663.171:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13786 comm="syz.3.3050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648c78eba9 code=0x7ffc0000
[  335.509717][   T33] audit: type=1326 audit(1757545663.171:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13786 comm="syz.3.3050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648c78eba9 code=0x7ffc0000
[  335.521514][   T33] audit: type=1326 audit(1757545663.171:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13786 comm="syz.3.3050" exe="/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f648c78eba9 code=0x7ffc0000
[  335.540060][   T33] audit: type=1326 audit(1757545663.171:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13786 comm="syz.3.3050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f648c78eba9 code=0x7ffc0000
[  335.721347][ T5880] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL
[  335.728357][ T5880] usb 7-1: USB disconnect, device number 4
[  335.792089][   T47] usb 4-1: new low-speed USB device number 23 using dummy_hcd
[  335.852195][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  335.943803][   T47] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  335.948977][   T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  335.954104][   T47] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  335.959281][   T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  335.967595][   T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  335.973812][   T47] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  335.977034][   T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  335.981466][   T47] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  335.989832][   T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  335.996206][   T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  336.002323][   T47] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  336.005531][   T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  336.010135][   T47] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  336.020696][   T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  336.032661][   T47] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  336.045232][   T47] usb 4-1: string descriptor 0 read error: -22
[  336.048049][   T47] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  336.061867][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.075750][   T47] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  336.290839][   T47] usb 4-1: USB disconnect, device number 23
[  336.894178][T13815] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  337.744239][   T33] audit: type=1326 audit(1757545665.442:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13853 comm="syz.6.3081" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57adb8eba9 code=0x7ffc0000
[  337.756384][   T33] audit: type=1326 audit(1757545665.442:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13853 comm="syz.6.3081" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57adb8eba9 code=0x7ffc0000
[  337.936108][ T5850] Bluetooth: hci1: command 0x0406 tx timeout
[  338.592004][T13880] loop3: detected capacity change from 0 to 512
[  338.630184][T13880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  338.642549][T13880] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  338.671137][T13880] EXT4-fs error (device loop3): ext4_empty_dir:3080: inode #12: comm syz.3.3090: Directory hole found for htree leaf block 0
[  338.678074][T13880] EXT4-fs (loop3): Remounting filesystem read-only
[  338.699753][T11326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.719244][ T3554] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  338.725974][ T3554] Quota error (device loop3): write_blk: dquota write failed
[  338.730912][ T3554] Quota error (device loop3): free_dqentry: Can't write quota data block 5
[  338.734409][ T3554] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  338.738147][ T3554] Quota error (device loop3): write_blk: dquota write failed
[  338.741141][ T3554] Quota error (device loop3): free_dqentry: Can't write quota data block 5
[  338.940495][   T47] usb 7-1: new low-speed USB device number 5 using dummy_hcd
[  339.200176][   T47] usb 7-1: config index 0 descriptor too short (expected 1307, got 27)
[  339.220164][   T47] usb 7-1: config 0 has an invalid interface number: 0 but max is -1
[  339.247517][   T47] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0
[  339.259464][   T47] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  339.272783][   T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  339.286420][   T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  339.296481][   T47] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  339.309440][   T47] usb 7-1: string descriptor 0 read error: -22
[  339.311865][   T47] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  339.318627][   T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.327313][   T47] usb 7-1: config 0 descriptor??
[  339.332762][   T47] hub 7-1:0.0: bad descriptor, ignoring hub
[  339.335985][   T47] hub 7-1:0.0: probe with driver hub failed with error -5
[  339.345391][   T47] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input28
[  339.552341][   T47] usb 7-1: USB disconnect, device number 5
[  339.971312][T13939] loop3: detected capacity change from 0 to 512
[  339.994455][T13939] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.3115: corrupted in-inode xattr: e_value size too large
[  340.007681][T13939] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3115: couldn't read orphan inode 15 (err -117)
[  340.013993][T13939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  340.042059][T11326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.131190][T13949] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  340.407533][T13960] loop6: detected capacity change from 0 to 512
[  340.517479][   T10] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  340.684751][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  340.691785][   T10] usb 4-1: not running at top speed; connect to a high speed hub
[  340.702581][   T10] usb 4-1: config 8 has an invalid interface number: 247 but max is 0
[  340.705582][   T10] usb 4-1: config 8 has no interface number 0
[  340.707625][   T10] usb 4-1: config 8 interface 247 has no altsetting 0
[  340.723241][   T10] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0005, bcdDevice=53.f1
[  340.727025][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.734352][   T10] usb 4-1: Product: syz
[  340.736224][   T10] usb 4-1: Manufacturer: syz
[  340.738294][   T10] usb 4-1: SerialNumber: syz
[  340.809786][ T5850] Bluetooth: hci1: command 0x0406 tx timeout
[  340.899532][ T9633] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  340.951277][   T10] ati_remote 4-1:8.247: ati_remote_probe: Unexpected desc.bNumEndpoints
[  340.956135][   T10] usb 4-1: USB disconnect, device number 24
[  341.049448][ T9633] usb 7-1: Using ep0 maxpacket: 16
[  341.053405][ T9633] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  341.057373][ T9633] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  341.062265][ T9633] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  341.065709][ T9633] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.070542][ T9633] usb 7-1: config 0 descriptor??
[  341.295887][   T33] audit: type=1326 audit(1757545668.984:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.2.3132" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd018eba9 code=0x7ffc0000
[  341.307614][   T33] audit: type=1326 audit(1757545668.994:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.2.3132" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd018eba9 code=0x7ffc0000
[  341.318070][   T33] audit: type=1326 audit(1757545668.994:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.2.3132" exe="/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f2dd018eba9 code=0x7ffc0000
[  341.327796][   T33] audit: type=1326 audit(1757545668.994:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.2.3132" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd018eba9 code=0x7ffc0000
[  341.336880][   T33] audit: type=1326 audit(1757545668.994:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.2.3132" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd018eba9 code=0x7ffc0000
[  341.405840][ T9633] usbhid 7-1:0.0: can't add hid device: -71
[  341.411273][ T9633] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  341.417172][ T9633] usb 7-1: USB disconnect, device number 6
[  341.516371][T13982] cgroup2: Unexpected value for 'memory_localevents'
[  341.614849][T13988] loop3: detected capacity change from 0 to 64
[  341.947635][ T5899] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  342.100852][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  342.104585][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  342.107781][ T5899] usb 4-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00
[  342.111006][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.115592][ T5899] usb 4-1: config 0 descriptor??
[  342.188814][   T47] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  342.360484][   T47] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  342.363981][   T47] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  342.368026][   T47] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  342.371143][   T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  342.373868][   T47] usb 7-1: SerialNumber: syz
[  342.527759][ T5899] ntrig 0003:1B96:0004.001B: unknown main item tag 0x0
[  342.538049][ T5899] ntrig 0003:1B96:0004.001B: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.3-1/input0
[  342.583790][   T47] usb 7-1: 0:2 : does not exist
[  342.598960][   T47] usb 7-1: 5:0: failed to get current value for ch 1 (-22)
[  342.612223][   T47] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  342.623843][   T47] usb 7-1: 5:0: cannot get min/max values for control 2 (id 5)
[  342.647145][   T47] usb 7-1: USB disconnect, device number 7
[  342.677230][T12396] udevd[12396]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  342.739461][ T5899] usb 4-1: USB disconnect, device number 25
[  342.847985][   T33] audit: type=1326 audit(1757545670.535:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14025 comm="syz.2.3156" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dd018eba9 code=0x7ffc0000
[  343.466689][T14038] loop6: detected capacity change from 0 to 32768
[  343.488349][T14038] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode.
[  343.507712][T14038] ocfs2: Unmounting device (7,6) on (node local)
[  343.608683][T14049] netlink: 'syz.3.3165': attribute type 1 has an invalid length.
[  343.612277][T14049] netlink: 'syz.3.3165': attribute type 1 has an invalid length.
[  343.615610][T14049] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3165'.
[  343.621715][T14049] netlink: 'syz.3.3165': attribute type 1 has an invalid length.
[  343.625167][T14049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3165'.
[  343.890600][T14057] loop3: detected capacity change from 0 to 32768
[  343.893867][T14057] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3169 (14057)
[  343.902385][T14057] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  343.905864][T14057] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  343.998696][T14057] BTRFS info (device loop3): enabling ssd optimizations
[  344.001149][T14057] BTRFS info (device loop3): enabling free space tree
[  344.048014][ T5899] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  344.427778][ T5899] usb 7-1: Using ep0 maxpacket: 8
[  344.431488][ T5899] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  344.435511][ T5899] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  344.441242][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.446884][ T5899] usb 7-1: config 0 descriptor??
[  344.455170][ T5899] gspca_main: vc032x-2.14.0 probing 046d:0892
[  344.718145][T11326] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  345.937012][ T5899] gspca_vc032x: reg_w err -71
[  345.939152][ T5899] vc032x 7-1:0.0: probe with driver vc032x failed with error -71
[  345.956186][ T5899] usb 7-1: USB disconnect, device number 8
[  346.697992][T14134] loop3: detected capacity change from 0 to 2048
[  346.705429][T14134] UDF-fs: warning (device loop3): udf_fill_super: No fileset found
[  346.716640][ T9633] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  346.866520][ T9633] usb 7-1: Using ep0 maxpacket: 8
[  346.871530][ T9633] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  346.875701][ T9633] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  346.881086][ T9633] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  346.885251][ T9633] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  346.891225][ T9633] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  346.895125][ T9633] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.120748][ T9633] usb 7-1: GET_CAPABILITIES returned 0
[  347.125401][ T9633] usbtmc 7-1:16.0: can't read capabilities
[  347.412573][ T9633] usb 7-1: USB disconnect, device number 9
[  347.998237][T14169] ieee802154 phy0 wpan0: encryption failed: -22
[  348.004689][T14171] loop3: detected capacity change from 0 to 256
[  348.015164][T14171] exfat: Deprecated parameter 'utf8'
[  348.025686][T14171] exfat: Deprecated parameter 'namecase'
[  348.030478][T14171] exfat: Deprecated parameter 'namecase'
[  348.032417][T14171] exfat: Deprecated parameter 'utf8'
[  348.047953][T14171] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d)
[  348.064801][T14171] exFAT-fs (loop3): start_clu is invalid cluster(0x400)
[  348.094269][T14175] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3215'.
[  348.255822][T14184] loop3: detected capacity change from 0 to 4096
[  348.259450][T14184] ntfs3(loop3): Primary boot: invalid bytes per sector 1792.
[  348.262215][T14184] ntfs3(loop3): try to read out of volume at offset 0x1ffe00
[  348.431933][T14193] ip6tnl1: entered allmulticast mode
[  348.483114][T14185] loop6: detected capacity change from 0 to 32768
[  348.488402][T14185] bcachefs (/dev/loop6): error validating superblock: Invalid superblock section disk_groups: disk 0 has invalid label 15 (have 0)
[  348.488402][T14185] disk_groups (size 40):
[  348.488402][T14185] 
[  348.508002][T14185] bcachefs: bch2_fs_get_tree() error: invalid_sb_disk_groups
[  349.221401][T14195] loop3: detected capacity change from 0 to 32768
[  349.238801][T14195] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  349.271572][T14195] XFS (loop3): Ending clean mount
[  349.346942][T11326] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  349.578393][T14218] loop6: detected capacity change from 0 to 4096
[  349.613721][T14220] Bluetooth: hci0: invalid length 4, exp 2 for type 11
[  349.736060][T14222] loop3: detected capacity change from 0 to 4096
[  349.772449][T14224] loop6: detected capacity change from 0 to 1024
[  349.777390][T14222] ntfs3(loop3): ino=b, Correct links count -> 1.
[  349.784186][T14222] ntfs3(loop3): ino=18, mi_enum_attr
[  349.788023][T14224] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  349.793714][T14222] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  349.802645][T14224] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  349.809287][T14224] JBD2: no valid journal superblock found
[  349.811781][T14224] EXT4-fs (loop6): Could not load journal inode
[  349.887856][T14226] loop6: detected capacity change from 0 to 128
[  349.911434][T14226] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  349.920257][T14226] ext4 filesystem being mounted at /84/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  349.932870][T14226] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #2: comm syz.6.3236: No space for directory leaf checksum. Please run e2fsck -D.
[  349.934745][T14230] bridge1: entered allmulticast mode
[  349.943941][T14226] EXT4-fs error (device loop6): htree_dirblock_to_tree:1051: inode #2: comm syz.6.3236: Directory block failed checksum
[  349.962457][T14226] EXT4-fs warning (device loop6): ext4_dirblock_csum_verify:375: inode #2: comm syz.6.3236: No space for directory leaf checksum. Please run e2fsck -D.
[  349.973474][T14226] EXT4-fs error (device loop6): __ext4_find_entry:1626: inode #2: comm syz.6.3236: checksumming directory block 0
[  350.004278][T13269] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  350.072086][T14234] loop6: detected capacity change from 0 to 2048
[  350.089894][T14234] EXT4-fs (loop6): failed to initialize system zone (-117)
[  350.093162][T14234] EXT4-fs (loop6): mount failed
[  350.447092][T14255] ubi: mtd0 is already attached to ubi31
[  350.784524][  T794] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  351.164594][   T47] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  351.354356][   T47] usb 4-1: Using ep0 maxpacket: 8
[  351.363098][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  351.368880][   T47] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  351.383387][   T47] usb 4-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00
[  351.387685][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.403959][  T794] usb 7-1: Using ep0 maxpacket: 16
[  351.408392][  T794] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  351.408688][   T47] usb 4-1: config 0 descriptor??
[  351.412885][  T794] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  351.412907][  T794] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  351.412943][  T794] usb 7-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00
[  351.427874][  T794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.433430][  T794] usb 7-1: config 0 descriptor??
[  351.838473][   T47] logitech 0003:046D:C298.001C: item fetching failed at offset 4/5
[  351.844804][  T794] ryos 0003:1E7D:31CE.001D: item 0 4 0 11 parsing failed
[  351.850205][  T794] ryos 0003:1E7D:31CE.001D: parse failed
[  351.852334][  T794] ryos 0003:1E7D:31CE.001D: probe with driver ryos failed with error -22
[  351.862418][   T47] logitech 0003:046D:C298.001C: parse failed
[  351.866990][   T47] logitech 0003:046D:C298.001C: probe with driver logitech failed with error -22
[  352.042662][   T47] usb 4-1: USB disconnect, device number 26
[  352.050177][ T5880] usb 7-1: USB disconnect, device number 10
[  352.983430][  T794] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  353.133422][  T794] usb 4-1: Using ep0 maxpacket: 16
[  353.139225][  T794] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  353.143059][  T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.146566][  T794] usb 4-1: Product: syz
[  353.148346][  T794] usb 4-1: Manufacturer: syz
[  353.150338][  T794] usb 4-1: SerialNumber: syz
[  353.160669][  T794] r8152-cfgselector 4-1: Unknown version 0x0000
[  353.166977][  T794] r8152-cfgselector 4-1: config 0 descriptor??
[  353.580613][   T10] r8152-cfgselector 4-1: USB disconnect, device number 27
[  353.733117][ T5880] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  353.883087][ T5880] usb 7-1: Using ep0 maxpacket: 8
[  353.886963][ T5880] usb 7-1: config 0 interface 0 has no altsetting 0
[  353.889763][ T5880] usb 7-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00
[  353.897191][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.907964][ T5880] usb 7-1: config 0 descriptor??
[  354.554162][   T10] usb 7-1: USB disconnect, device number 11
[  355.106405][T14332] loop6: detected capacity change from 0 to 128
[  355.113170][T14332] EXT4-fs: Ignoring removed nobh option
[  355.138359][T14332] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  355.153682][T14332] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  355.212036][T13269] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  355.397696][T14330] loop3: detected capacity change from 0 to 32768
[  355.430850][T14330] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  355.467841][   T13] (kworker/u8:1,13,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[  355.556887][T14349] 
[  355.557929][T14349] ======================================================
[  355.560731][T14349] WARNING: possible circular locking dependency detected
[  355.563503][T14349] syzkaller #0 Not tainted
[  355.565623][T14349] ------------------------------------------------------
[  355.568962][T14349] syz.3.3279/14349 is trying to acquire lock:
[  355.571072][T14349] ffff888024e7cd20 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xb0/0x130
[  355.574232][T14349] 
[  355.574232][T14349] but task is already holding lock:
[  355.576984][T14349] ffff88802c7d4ee0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_fiemap+0x2b0/0xc90
[  355.580930][T14349] 
[  355.580930][T14349] which lock already depends on the new lock.
[  355.580930][T14349] 
[  355.584779][T14349] 
[  355.584779][T14349] the existing dependency chain (in reverse order) is:
[  355.588037][T14349] 
[  355.588037][T14349] -> #2 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  355.591432][T14349]        lock_acquire+0x120/0x360
[  355.593326][T14349]        down_write+0x96/0x1f0
[  355.595096][T14349]        ocfs2_page_mkwrite+0x2ff/0xc40
[  355.597088][T14349]        do_page_mkwrite+0x14d/0x310
[  355.598876][T14349]        do_wp_page+0x268d/0x5800
[  355.600752][T14349]        __handle_mm_fault+0x1033/0x5440
[  355.602917][T14349]        handle_mm_fault+0x40a/0x8e0
[  355.605123][T14349]        do_user_addr_fault+0x764/0x1390
[  355.607176][T14349]        exc_page_fault+0x76/0xf0
[  355.609171][T14349]        asm_exc_page_fault+0x26/0x30
[  355.611226][T14349] 
[  355.611226][T14349] -> #1 (sb_pagefaults#3){.+.+}-{0:0}:
[  355.614235][T14349]        lock_acquire+0x120/0x360
[  355.615950][T14349]        ocfs2_page_mkwrite+0x1da/0xc40
[  355.617999][T14349]        do_page_mkwrite+0x14d/0x310
[  355.619807][T14349]        do_wp_page+0x268d/0x5800
[  355.621675][T14349]        __handle_mm_fault+0x1033/0x5440
[  355.623800][T14349]        handle_mm_fault+0x40a/0x8e0
[  355.625754][T14349]        do_user_addr_fault+0x764/0x1390
[  355.627654][T14349]        exc_page_fault+0x76/0xf0
[  355.629345][T14349]        asm_exc_page_fault+0x26/0x30
[  355.631345][T14349] 
[  355.631345][T14349] -> #0 (&mm->mmap_lock){++++}-{4:4}:
[  355.634058][T14349]        validate_chain+0xb9b/0x2140
[  355.636036][T14349]        __lock_acquire+0xab9/0xd20
[  355.637797][T14349]        lock_acquire+0x120/0x360
[  355.639473][T14349]        __might_fault+0xcc/0x130
[  355.641328][T14349]        _copy_to_user+0x2c/0xb0
[  355.643295][T14349]        fiemap_fill_next_extent+0x1c0/0x390
[  355.645406][T14349]        ocfs2_fiemap+0x888/0xc90
[  355.647187][T14349]        do_vfs_ioctl+0x1173/0x1430
[  355.648996][T14349]        __se_sys_ioctl+0x82/0x170
[  355.651026][T14349]        do_syscall_64+0xfa/0x3b0
[  355.652966][T14349]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.655470][T14349] 
[  355.655470][T14349] other info that might help us debug this:
[  355.655470][T14349] 
[  355.658957][T14349] Chain exists of:
[  355.658957][T14349]   &mm->mmap_lock --> sb_pagefaults#3 --> &ocfs2_file_ip_alloc_sem_key
[  355.658957][T14349] 
[  355.663978][T14349]  Possible unsafe locking scenario:
[  355.663978][T14349] 
[  355.666711][T14349]        CPU0                    CPU1
[  355.668816][T14349]        ----                    ----
[  355.670609][T14349]   rlock(&ocfs2_file_ip_alloc_sem_key);
[  355.672700][T14349]                                lock(sb_pagefaults#3);
[  355.675355][T14349]                                lock(&ocfs2_file_ip_alloc_sem_key);
[  355.678439][T14349]   rlock(&mm->mmap_lock);
[  355.680080][T14349] 
[  355.680080][T14349]  *** DEADLOCK ***
[  355.680080][T14349] 
[  355.682954][T14349] 1 lock held by syz.3.3279/14349:
[  355.684764][T14349]  #0: ffff88802c7d4ee0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_fiemap+0x2b0/0xc90
[  355.688777][T14349] 
[  355.688777][T14349] stack backtrace:
[  355.690977][T14349] CPU: 0 UID: 0 PID: 14349 Comm: syz.3.3279 Not tainted syzkaller #0 PREEMPT(full) 
[  355.690988][T14349] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  355.690993][T14349] Call Trace:
[  355.690996][T14349]  <TASK>
[  355.691001][T14349]  dump_stack_lvl+0x189/0x250
[  355.691012][T14349]  ? __pfx_dump_stack_lvl+0x10/0x10
[  355.691020][T14349]  ? __pfx__printk+0x10/0x10
[  355.691031][T14349]  ? print_lock_name+0xde/0x100
[  355.691041][T14349]  print_circular_bug+0x2ee/0x310
[  355.691050][T14349]  check_noncircular+0x134/0x160
[  355.691059][T14349]  validate_chain+0xb9b/0x2140
[  355.691070][T14349]  __lock_acquire+0xab9/0xd20
[  355.691081][T14349]  ? __might_fault+0xb0/0x130
[  355.691091][T14349]  lock_acquire+0x120/0x360
[  355.691099][T14349]  ? __might_fault+0xb0/0x130
[  355.691109][T14349]  ? stack_trace_save+0x9c/0xe0
[  355.691117][T14349]  ? __pfx_stack_trace_save+0x10/0x10
[  355.691124][T14349]  ? __might_fault+0xb0/0x130
[  355.691132][T14349]  __might_fault+0xcc/0x130
[  355.691140][T14349]  ? __might_fault+0xb0/0x130
[  355.691148][T14349]  _copy_to_user+0x2c/0xb0
[  355.691157][T14349]  fiemap_fill_next_extent+0x1c0/0x390
[  355.691166][T14349]  ? __pfx_fiemap_fill_next_extent+0x10/0x10
[  355.691176][T14349]  ? down_read+0x1ad/0x2e0
[  355.691184][T14349]  ocfs2_fiemap+0x888/0xc90
[  355.691194][T14349]  ? __pfx_ocfs2_fiemap+0x10/0x10
[  355.691202][T14349]  ? __might_fault+0xb0/0x130
[  355.691213][T14349]  do_vfs_ioctl+0x1173/0x1430
[  355.691221][T14349]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  355.691231][T14349]  ? __lock_acquire+0xab9/0xd20
[  355.691242][T14349]  ? __fget_files+0x2a/0x420
[  355.691249][T14349]  ? __fget_files+0x2a/0x420
[  355.691254][T14349]  ? __fget_files+0x3a0/0x420
[  355.691259][T14349]  ? __fget_files+0x2a/0x420
[  355.691265][T14349]  ? bpf_lsm_file_ioctl+0x9/0x20
[  355.691273][T14349]  __se_sys_ioctl+0x82/0x170
[  355.691281][T14349]  do_syscall_64+0xfa/0x3b0
[  355.691288][T14349]  ? lockdep_hardirqs_on+0x9c/0x150
[  355.691294][T14349]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.691300][T14349]  ? exc_page_fault+0x9f/0xf0
[  355.691306][T14349]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  355.691312][T14349] RIP: 0033:0x7f648c78eba9
[  355.691320][T14349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  355.691326][T14349] RSP: 002b:00007f648d5c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  355.691333][T14349] RAX: ffffffffffffffda RBX: 00007f648c9d6090 RCX: 00007f648c78eba9
[  355.691339][T14349] RDX: 0000200000000040 RSI: 00000000c020660b RDI: 0000000000000004
[  355.691343][T14349] RBP: 00007f648c811e19 R08: 0000000000000000 R09: 0000000000000000
[  355.691347][T14349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  355.691351][T14349] R13: 00007f648c9d6128 R14: 00007f648c9d6090 R15: 00007fff82f78b48
[  355.691358][T14349]  </TASK>
[  356.132684][T11326] ocfs2: Unmounting device (7,3) on (node local)
[  359.760005][   T54] Bluetooth: hci1: command 0x0406 tx timeout

VM DIAGNOSIS:
23:03:47  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000013c2 RDI=00000000000013c3 RBP=00000000000003f8 RSP=ffffc90004c0efb0
R8 =ffff888020610237 R9 =1ffff110040c2046 R10=dffffc0000000000 R11=ffffffff854f6e40
R12=dffffc0000000000 R13=ffffffff99b008c3 R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f6ebc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f648d5c16c0 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f648d5c0fc8 CR3=000000010f192000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f648c9a7498 00007f648c9a7470 XMM03=00007f648c9a74a8 00007f648c9a74a0
XMM04=00007f648d50d100 00007f648c9a7460 XMM05=00007f648c9a7478 00007f648c9a74c0
XMM06=00007f648c9a74b8 00007f648c9a74b0 XMM07=00007f648c9a74a8 00007f648c9a74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f648c812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000001 RCX=615c0fcc95c4d200 RDX=0000000000000000
RSI=ffffffff8be33960 RDI=ffffffff8be33920 RBP=0000000000000001 RSP=ffffc90004d6f560
R8 =ffffffff8fa3a037 R9 =1ffffffff1f47406 R10=dffffc0000000000 R11=fffffbfff1f47407
R12=0000000000000001 R13=000000000000000f R14=0000000000000001 R15=0000607e5c061890
RIP=ffffffff81a66064 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f57ae98a6c0 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c339833 CR3=000000001b3ae000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f57adda7498 00007f57adda7470 XMM03=00007f57adda74a8 00007f57adda74a0
XMM04=00007f57ae90d100 00007f57adda7460 XMM05=00007f57adda7478 00007f57adda74c0
XMM06=00007f57adda74b8 00007f57adda74b0 XMM07=00007f57adda74a8 00007f57adda74a0
XMM08=0000000000000000 00007f57adc12ee7 XMM09=0000000000000000 00007f57adc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
