last executing test programs:

2m21.796372514s ago: executing program 1 (id=707):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_cmd={0x2e, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000045}})

2m21.659061239s ago: executing program 1 (id=708):
r0 = socket(0x10, 0x3, 0x0)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0xffffffff}, 0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)

2m21.58730834s ago: executing program 1 (id=709):
write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x3, 0x8)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r1, &(0x7f0000000480)=[{&(0x7f0000000080)="ec", 0x1}], 0x1)

2m20.077995531s ago: executing program 1 (id=718):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f0000000540)="$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")
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

2m18.897597389s ago: executing program 1 (id=720):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve1\x00', <r1=>0x0})
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r0, &(0x7f0000000040)="3f031c000302140006001e00890000004a1b7880610cc945000088a800008100000081000000", 0x26, 0x1, &(0x7f0000000540)={0xc9, 0x88a8, r1, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14)

2m17.616514335s ago: executing program 1 (id=732):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="140004006e696376663000000000000000000000080005000600000024001780040006"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2m17.305424704s ago: executing program 32 (id=732):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="140004006e696376663000000000000000000000080005000600000024001780040006"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2m15.206312293s ago: executing program 0 (id=744):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000000000000c00010003000000000000000c00010005000000000000000c00010000000000000000000c000100000000000000000004000480080005"], 0x9c}, 0x1, 0xba01}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000)

2m15.048227522s ago: executing program 0 (id=745):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000040)="ee1bc38a371c1633c91508fa4902a7c0", 0x10}], 0x2)

2m13.254795336s ago: executing program 0 (id=750):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000480000000000000000085000000b5000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

2m13.057459587s ago: executing program 0 (id=752):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x677, &(0x7f0000002100)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00'}, 0x10)
ptrace$cont(0x21, r1, 0x80000001, 0x4)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1)

2m12.710410059s ago: executing program 0 (id=754):
set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0)

2m12.149577534s ago: executing program 0 (id=760):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004084)

2m11.895171299s ago: executing program 33 (id=760):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004084)

1m21.544650671s ago: executing program 2 (id=1207):
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, 0x0, 0x0)
listen(r0, 0x2)
r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xf2cf, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x90c0}, 0x1})
io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r7 = openat$cgroup_type(r6, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r7, &(0x7f0000000280), 0x9)
r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f0000000c40), 0x12)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12)
creat(&(0x7f00000002c0)='./file0\x00', 0x157)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff04800000080039"], 0x15)
dup(0xffffffffffffffff)

1m20.613629055s ago: executing program 2 (id=1212):
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

1m19.98606669s ago: executing program 2 (id=1215):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0)
sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}]}, 0x30}}, 0x4)

1m19.66452496s ago: executing program 2 (id=1217):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200010, &(0x7f0000000240)={[{@resgid}, {}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@discard}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x146)
fallocate(r0, 0x20, 0x0, 0x8000)
r1 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0)
sendfile(r1, r1, 0x0, 0x800000009)

1m19.409724885s ago: executing program 2 (id=1219):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000000480)=ANY=[], 0xff, 0x5a02, &(0x7f000000bc00)="$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")
open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
open(&(0x7f00000000c0)='./bus\x00', 0x68042, 0x62)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
r1 = open(&(0x7f0000000380)='./file1\x00', 0x8011, 0x20)
sendfile(r1, r0, 0x0, 0x80000000c)

1m18.850025534s ago: executing program 2 (id=1220):
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000012c0), 0x1000)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
preadv2(r0, &(0x7f0000000140), 0x10000000000002dd, 0x10001, 0xa78, 0x0)

1m17.284946494s ago: executing program 4 (id=1227):
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r0, 0x0)
pipe2$9p(&(0x7f00000027c0), 0x0)
mbind(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x0, 0x80000000000005a, 0x3)

1m17.169843683s ago: executing program 4 (id=1228):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)={0x14, 0x5e, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x13a}]}, 0x14}], 0x1}, 0x0)

1m17.116713949s ago: executing program 4 (id=1230):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000200)=@raw=[@jmp={0x4, 0x0, 0xd, 0x1, 0x0, 0x0, 0x10}, @initr0, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90)

1m17.104761806s ago: executing program 4 (id=1231):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x28b501e, 0x0)
mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x84000, 0x0)

1m16.921683675s ago: executing program 4 (id=1232):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
acct(&(0x7f0000000000)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88040, 0x0)
fcntl$setlease(r1, 0x400, 0x0)

1m14.616729529s ago: executing program 4 (id=1235):
r0 = epoll_create1(0x0)
r1 = socket(0x1, 0x80802, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001})
epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
shutdown(r1, 0x0)

1m14.332094565s ago: executing program 34 (id=1235):
r0 = epoll_create1(0x0)
r1 = socket(0x1, 0x80802, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001})
epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
shutdown(r1, 0x0)

1m3.292482582s ago: executing program 35 (id=1220):
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000012c0), 0x1000)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
preadv2(r0, &(0x7f0000000140), 0x10000000000002dd, 0x10001, 0xa78, 0x0)

5.723659944s ago: executing program 6 (id=1582):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'erspan0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x4, 0x6, @remote}, 0x14)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r2, 0x0)
sendto$inet6(r0, &(0x7f0000000280)="050350038f0b48030102", 0xa, 0x800, 0x0, 0x0)

5.529619021s ago: executing program 6 (id=1583):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000070a050000000000000000000a004001090001"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x4004014)

5.230400313s ago: executing program 6 (id=1584):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x9, @empty, 0x6}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

5.149929759s ago: executing program 6 (id=1585):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000001600)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}, {@userxattr}], [], 0x2c})

4.968580488s ago: executing program 6 (id=1587):
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0)
rmdir(&(0x7f00000000c0)='./bus/file0\x00')
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020)

4.478361465s ago: executing program 6 (id=1595):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)

4.307678736s ago: executing program 36 (id=1595):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)

2.994467349s ago: executing program 3 (id=1604):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000100)=ANY=[], 0x1, 0x2f4, &(0x7f0000000500)="$eJzs3M9PE1sUwPHTn7QlUBYv7+W95IUb3ehmAtW10hhIjE0kSI0/EpMBptp0bEmnwdQY0ZVb4x/hgrBkR6L8A2zc6caNOzYmLmRhrOn8oKVMKYVKEb6fhMxhzj3tvZ2SnNt02Lrz+nEhZ2k5vSLBmJKAiMi2yIgExRNwj0E7jkqzF3Jx8NvH/2/dvXcjnclMzig1lZ69lFJKDY++e/Is7g5bH5DNkQdbX1NfNv/e/Hfr5+yjvKXyliqWKkpXc6XPFX3ONNRC3ipoSk2bhm4ZKl+0jLKTLzn5nFlaXKwqvbgwlFgsG5al9GJVFYyqqpRUpVxVoYd6vqg0TVNDCUEn2ZWZGT19yOL5Hk8Gv0m5nNZDIhLfk8mu9GVCAACgr1r7/6CoXvb/q+c2KoO314bd/n896tf/X/7kPNau/j8mIr79v/f8vv2/3l3/v7cjOluO1P/jZBiN7jkVaIT1ZDmtJ9y/X9vL+6tjdkD/DwAAAAAAAAAAAAAAAAAAAADAn2C7VkvWarWkd/R+6rmYiDT/3iIkIlePf8bopXbXf6Dz9ccp0LhxLzwsYr5ayi5lnaM7YENETDFkTJLyw34/uOqxd+eRqhuR9+ayW7+8lA3ZmXRO8nb9uCQj0lpfq01dz0yOK8fu+ogkmutTkpS//OtTvvVRuXC+qV6TpHyYl5KYsmDPo1H/fFypazczLfVxexwAAAAAAKeBpnb47t81rV3eqd/ZX7d+PhBq7K/HfPfnYfkv3N+1AwAAAABwVljVpwXdNI3yPkFcOo9xgsgBxrQG4W4GdxF4Kzxolfddhh5P42CB9+S7UjH3ZM9flkAXL0ubICiHqRqtr0YddRXex0btxsj0xPFfQTv4583b7717wCtrsQ4rPXwQ2v8NEHG//gUAAADgFGk0/d6Zif5OCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAM+g4/jtav9cIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnBS/AgAA//9p2gTn")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x43, 0x1, 0x3, "b49e1b62251dd37bb50730df4749af087c17e6e724ae01b9424f5ab23870ecd4"})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0)
landlock_restrict_self(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002, 0xfffffffd}, 0x1c)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x5c}}, 0x0)
r6 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0x71)
keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0xffffffff)
keyctl$setperm(0x5, r6, 0x10)
sendmsg$nl_xfrm(r0, 0x0, 0x0)

2.096133621s ago: executing program 3 (id=1605):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00', r0}, 0x18)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000440), 0x40004, 0x0)
read$ptp(r1, 0x0, 0x0)

1.83660988s ago: executing program 3 (id=1607):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x5a, &(0x7f0000000040)={&(0x7f0000000440)=@ipv4_newroute={0x2c, 0x18, 0xaba64f4add525e83, 0x0, 0x0, {0x2, 0x0, 0x10, 0x4, 0x2, 0x0, 0xfe, 0x2, 0x700}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x2c}, 0x1, 0xffffff7f, 0x0, 0x8000}, 0x4040000)

1.749147081s ago: executing program 5 (id=1608):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x6, 0x0, 0x0)

1.74364958s ago: executing program 5 (id=1609):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000b080003400000000008000440000000300500020007000000240001800b0001007470726f78790000140002800800034000000016080001400000000a0900010073797a30"], 0xf8}}, 0x0)

1.659907898s ago: executing program 5 (id=1610):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x70, 0x1, 0x800000, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x2, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x9}}]}, 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x20044014)

1.358640767s ago: executing program 3 (id=1611):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001780)=""/4071, 0xfe7}], 0x1}, 0x0)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ac0)}, 0x0)

1.358223748s ago: executing program 5 (id=1612):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000000)=""/24, 0x0, 0x8000000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680))
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00')
dup3(r0, r2, 0x0)
ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000380)=&(0x7f00000002c0))
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000000c0)={0x0, r2})

1.229828258s ago: executing program 5 (id=1613):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="71756f74612c646973636172642c646973636172642c696f636861727365743d6b6f69382d72752c646973636172642c00f4193eb3ba2a0d5ff2cd7374288ff89ec513a53e007345decb720900f8312da2463eb0edf52fad1a00ebd41c14b3ce75d0cffefd379624b16f7260c835713b263352e03b5cb8fa0c042bd1225ed4ded2b62e12fea4d7e61b738e40781e58d5fff112364ac140f419e5dafecd283b3fab6b142ddbc893b35a81fe9265591ef35fa2928e095fee4c10b22e4212378de59bca0307cc644b9620b63f0000007bbbd422d87856b71348b8f45398b9660b6b3e8ee8a8c32f3234cb46e2cd827ec25c1ca4d046bc004f8df7b1ee690a5e50510700d80c7fa65fa724d0e1b4369f1b64fe249a0312010000004ac983de925f52d735b03fea941b1e948ad8d19cfda5b799325fd69d14fcf6cdde7700a63150eb3699e5314e0827750e244150ec19f3f3f1d8be542c084b5e40bfaa8ad206d2a33b0ddbd7f8e07dc7d17174a4549ffaf5976949cb69658c42ec7cd9fe8ad82852cefb04646edb3a41eb514eb6a772b3ee9f21e25822b54ec33e592d5c040946721101d53aff21f90351c95aa0f73f1853d6afcbf9448b220e988466066fa5c09e6198fc4520d199b93bdedee87c4043815aa05668a06f8da96680ccc1a139ade90f5c79af46208f9762f54e7c29088d9de69bd2d51c6b9c42209ddc3880051303b855853407d959a5777dce25201c5ea1faa084c36e3e349915ebec53435eb2910c59394ee84ba3baf9c440ae5833c23f46b0eaac543ce0c80ba0603213e53ea59755070b18bc10b9224aa082d96700e63d51c5bffa4f712c2d7fafb9cf506c06e1ddad4fc19038407786fedb9afdfb11a5f182676dd84c919f71d5eee2f3b740b68ee7f6518eb9d8baa26f1c3871f863b134ee942eb3af92d19e70d8268839cd7b4637f0627299f99b1873ca165e410f8bd421e1a4859fd9bd6bb34d25c07e1a52b9668a530b10b8585d797124a6975a71aedbe557a17b06bbfe547aa553c3d08b8921a4b0d938c03687bd48a9a387b4c066c056f457fba5738775b900a1e82a89aae1494b05c4bb0fc8ed1a93688bf850a4f7b0942eda1f16ecf043efa6b8c1f9e0fba31f4a58ed0031180fb1b8a00e4a86826b030000002dd1272a3d1609bed545b86ca7a6bf569ed35d0000ca23b0de742f6008fdf20928370d88f8c04bc3b97b9a9e0062e8fc5fd2337d85a66bd20730f3153db2459fb34c134c06c19364e9645e83040dd16ee08f18f0ba69ac9ca3e25e15442b07000000d30d38a64613b535fa808a9b3bae00bc371271d45db200a5cbf433e2f6dd03b7c7fcc040781e5151c9badb787e7e1e2f39d60998919aa8dbd156f31a5b7fa5f9e5ec01e8c799edc322703c7fc4a81ab9bc02dd96714ee9d7e75d28d040ff3566404fd6db547a4b553197c1f316d20ea54f9459cd81351a510d101e90eabe6dc6c6ac3ffa189c073a5fb3fc382df620bf5af9e638819c77a051e6875866a849f6f578c068c0e4c7cfbc15033997efa853c96297b3201dd30ea40dc94d010a0c33da9f63a10b8f813dc789b80be3bb3f00ee58b30d5c03a6ddbf418ac1b3d4a13839e4b273c4f914bed13f8806295495d41609478798396aeec06e8d342efd8ac6b422f6c23a011b1400000000000000bc2a02094e19a1ee8bb3c3c0c088ae8efaf68c85001faf7cf5426fb7c5c367ed93eb25c48a293549d15b91b59f1b574b3f6171f8e56a402ec56bdf51d90312b3ca5398f4050000007504be21456ec953bf06f12fff20c31e7c8b55fee5c49aa939830b09995ff149258118f9aae29206f9731288b56b10de51525665fdb4e289b1c177df97af3085f82045fbd012f1dde94ffecd90b7b63d8197d9c24a6fe5915ac7d7240847f6d0bf9099ee117c83e363f2ad36a4a9f4faa5734afe9770c38c565cae87a408d0acbb2db7db9174acab60a344814ee643fa82ba41706d2360269ed276e13dd83abbc258f07b0d58ab0b65290b18b7f9f871bcb43fec5a2e3789ecd0c1069d2da80b93c86dff8933e70c2108346003ddf6b60379eee63b66e7341cdd8f87ed9f11894c9ae040976321d87405b492f419ebfa77eb367ca6e360b808451102f54893d7d1695c24bcc184b1e7d19940a2b6931ade8638dd2b85a86dc511dbb97f5035d07ca024076e8581db332b1c5f135fe6b2e9d2c18c9d5d5a524d3d5b2657e4b28f1a09696bd5b076a1471c8b2ab2ca3ba57843af1d03590f4e8985e1c463c781bb03ad7ec816ea70bbe06411aae001e0ca72ee7e828ad14bb7a092d883ad000554bf7f00000000000075cc01f8a2e1802192f09e77bc488b3bd3f08a9ce88ba2e2bcc23cf5d7372b339ce1f5003db0ad70fa6e93aa908a2ced81f5514e23e2f94ff03c1c02f5a9195f4735563efd0a1fc7dafcfb3dae043fe0c172ec3a12747d7abf4382bf7453c13df994641017a0f461add956ef8f834b762af30408af6a61f317fd3c7b0816236a768601b7c6606ba52ff126eb13d33c915c5da99d118db488da3f3d7783a608282a93fcbe0910f0389c3ef91de7c84e23daa6554c42b2b3e9f70a9f790f29011a0b5101b23bfeba6e52877ed8a188958e39375dd203d434bef4dc82cc8a21fc40c6e6e6a2475f70bf1503beb9555036e606a9d3239d1df6f2e9ef16dee590b15ac028c6d873bb2965374b733d8e11ba763ab157ed91dd871b098c0543dcbba4cf67db8c83c84369dc67735fa4faa0fdcf34b1c6a862ccae9fe4fa28746504643b57f02623a2ef34ea90f2e7f7dd771f8f75217c799d978a3533fcfab6c6f5391b626d61b400f08172fc675e2a062d06c31b85452804f7b125c291f60a02a5d62271e96fe70d64bae36e28b42e197259169ebee8f64355544fbad8b83c1c8fad02cd1a2e56a6f6e82ec7719a48a1bea803546b8af7a89faf7cef94d8ada45fc0a98a79ba90c95262f0110725c6bf7c81237534dcd6a8a113bd8ac48b7db5526ab762cec103674742476cd6b92b8c7abcfb1f8e08f0a05c1b209187049f3206bd545e8c20f8db6d8a7cdd0c9ecbb9011b611a013cd581521dfcb028d59d5c69d286fb93e4c498b3aaff7e0cdcf1f41fec65ebdbe4c2bf453140251cdd94c32b87c4634d6500000000000000000000000000000000816e6c33f92dca3e03c400"/2294], 0xff, 0x5e54, &(0x7f0000005d80)="$eJzs3U9vHGcdB/Df/vH6T2kbVagKEQc3hdJSmv8JlH9NOXCAA0ioZxK5bhVIASUB0SoirnJAXICXAJdeOPQt8AL6GhAvgEg2px4og8Z+nmQ8XmcdEu/s+vl8JGfmN8+O95l8PZ5dz8w+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADED77/k7O9iLjym7TgWMTnYhDRj1iu69WoZy7nxw8j4nhsN8fzETFYjKjX3/7n2YgLEfHJMxGbW7fX6sXnDtiPi2du3fjsh9/7x+//dPf4z97+6Uft9h9//vzHf7gTcexHr3/82Z0ns+0AAABQiqqqql56m38ivb/vd90pAGAq8vG/SvJytVqtVj/R+o/92eqPutC6qRrvTrOIiI3mOvVrBqfjAWDObMSnXXeBDsm/aMOIeKrrTgAzrdd1BzgUm1u313op317zeLC6057/Trkr/43e/fs79ptO0r7GZFo/X3djEM/t05/lKfVhluT8++38r+y0j9LjDjv/adkv/9HOrU/FyfkP2vm37Mr/zxExt/n3x+Zfqpz/8FHy3xjM8f4vfwAAAAAAjr789/9jHZ//XXz8TTmQh53/XZ1SHwAAAAAAAADgSXvc8f/uM/4fAAAAzKz6vXrtL888WLbfZ7HVy9/qRTzdejxQmNXGhwMCAAAAAAAAAAAAANMxjFhJ1/UvRMTTKytVVdVfTe36UT3u+vOu9O2HknX9Sx4AAHZ88kzrXv5exFJEvJU+629hZWWlqpaWV6qVankxv54dLS5Vy433tXlaL1scHeAF8XBU1d9sqbFe06T3y5Pa29+vfq5RNThAx6ajw8ABICJ2jkabjkhHTFU9G12/ymE+2P+PHvs/B9H1zykAAABw+Kqqqnrp47xPpHP+/a47BQBMRT7+t88LqNVqtVqtPnp1UzXenWYRERvNderXDIbjB4A5sxGfdt0FOiT/og0j4njXnQBmWq/rDnAoNrdur/VSvr3m8WB1pz1fC7Ir/43e9np5/XHTSdrXmEzr5+tuDOK5ffrz/JT6MEty/v12/ld22vMQ/4ed/7Tsl3+9ncc66E/Xcv6Ddv4tRyf//tj8S5XzHz5S/gP5AwAAAADADMt//z/m/G/eZAAAAAAAAACYO5tbt9fyfa/5/P8Xxzyu15xz/+eRkfPvHTh/9/8eJTn/fjv/1gU5g8b8vTcf5P/vrdtrH9361xfydObzXxiM6ude6PUHw3TNT7XwTlyL67EeZ/Y8frir/eye9oVd7ecmtJ/f0z6q25dz+6lYi1/G9Xj7fvvihAujlia0VxPac/4D+3+Rcv7Dxled/0pq77WmtXsf9vfs983puOe5/Lf/vLR375q+uzG4v21N9fad7KA/2/8nT43i1zfXb5z67dVbt26cjTTZtfRcpMkTlvNfSF85/5df3GnPv/eb++u9D0ePnP+suBvDffN/sTFfb+8rU+5bF3L+o/SV889HoPH7/zznv//+/2oH/QEAAAAAAAAAAAAAAICHqapq+xbRyxFxKd3/09W9mQDAdOXjf5Xk5Wq1Wq1Wq49e3VSN90aziIi/N9epXzP8btw3AwBm2X8j4p9dd4LOyL9g+fP+6umXuu4MMFU33//g51evX1+/cbPrngAAAAAAAAAA/688/udqY/zn7euAWuNG7xr/9c1YndvxP/ujwfZY52mDXoiHj/99Mh4+/vdwwvMtTGgfTWhfnNC+NKF97I0eDTn/F1LGOf8TacNKGv/15Q7607Wc/8k01nPO/yutxzXzr/46z/n3d+V/+tZ7vzp98/0PXrv23tV3199d/8XZM5cunL944fzFi6ffuXZ9/czOvx32+HDl/PPY164DLUvOP2cu/7Lk/L+cavmXJef/UqrlX5acf369J/+y5Pzzex/5lyXn/0qq5V+WnP9XUy3/suT8X021/MuS8/9aquVflpz/a6mWf1ly/qdSLf+y5PxPp1r+Zcn55zNc8i9Lzj9f2SD/suT8z6Va/mXJ+Z9PtfzLkvO/kGr5lyXnfzHV8i9Lzv9SquVflpz/11Mt/7Lk/L+RavmXJef/eqrlX5ac/zdTLf+y5Py/lWr5lyXn/+1Uy78sOf/vpFr+Zcn5fzfV8i9Lzv+NVMu/LA8+/9+MGTNm8kzXv5kAAAAAAAAAAAAAgLZpXE7c9TYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvXuLkfOszwD+7dFrJxCXhBCCIbZzwJBNdtenxAQnDhCahh7SQGhpQx1jrx2DT/Wuc1LULE3aBhGpkdqL9KIUEEVIbZWoQiqVUhSpSO1duSrKDWolLnyRVCaCSlQkW30z7/vuzOzszPow9sz3/n6R/ffOfDPzzjffzO6z0TMDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANNr08dk/GyqKovxT+2t9UVxe/nttsaf8cmHnpV4hAAAAcL7eqv3991ekE/as4kIN2/zbB/7ju4uLi4vFF948/fZfLC6mMzYWxciaoqidF/37L36+2LhN8EwxMTTc8PVwl5sf6XL+aJfzx7qcP97l/DVdzp/ocv6yHbDM2vrvY2pXdkPtn+vru7S4qhirnXdDm0s9M7RmeDj+LqdmqHaZxbGDxeHiSDFbTC+7zFDtv6J4ZVN5W/cW8baGG25rQ1EUZ3761P64hqGwj28omm6spvGxe+PuYuObP31q/7fnX39vu9l1NyxbaVFs2Vyu89miWPp1VTFUrEn7JK5zuGGdG9qsc6RpnUO1y5X/bl3nmVWuM97vibDOH3ZY54Zw2uPXF0WxUKy4TatniuFiXcutpv09UT8iyusoH8p3FaNndZxsWsVxUl7mJ9c3Hyetx2Tc/5vCPhldYQ2ND8cbXx5ftt/P9Tgp73U/HKvldd9f3ujEROOvVpuO1XKbp25c+Rho+9i1OQbSsdxwDGzudgwMj4/UjoHhpTVvbjoGZpZdZrgYqt3W6Rs7HwNT80dPTM098eQth4/uOzR7aPbYzPTO7dt2bN+2Y8fUwcNHZqfrf5/dLh0g64rhdAxuDq818Rj8YMu2jYfk4jcu3PNgok+eB+V9/8xN5YIuHy5WOMbLbZ7dcv7Pg/R9v+F5MNrwPGj7mtrmeTC6iudBuc2ZLav7njna8KfdGnr1Wri+4Ri4lN8Py9t86EMrvxZuCOt67sNn+/1wZNkxEO/WUHjulaekn/cmbg/7ZflxcW15xmXjxam52ZO3Pr5vfv7kTBHGRXFlw2PVerysa7hPxbLjZfisj5c9f/fLm65tc/r6sK8mbu78WJXbbJ/s/FjVXt3b78+mU7cWYVxgF3t/tvtuVu7PlCU67M9ym2dvOf+fBVMuaXj9G+v2+jcyNlp//RtJe2Os6fVv+UMzUltZUZy5ZXWvf2Phz8V+/buqT17/yn310K2dj4Fym+emzvYYGO34+nd9mENhPR8KiWGiIfe/XTt/oX6YNjyWXY+b0dGxcNyMxltsPm62LbtMeW3lbW+ZPrfjZsv1zY9V088tFTxuyn31l9Odj5tym1dnzv+1Y238Z8Nrx3i3Y2BsZLxc71g6COqvd4tr4zFwa7G/OF4cKQ6ky5SPcnlbk1tXdwyMhz8X+7Xjmj45Bsp99eLWzsdAuc0Ptl3Yn522hFPSNg0/O7X+fmGlzH/t6NL1te62C535y3V+Ynvn3w2V27y+/WxzRuf9dHM45bI2+6n1+bPSMX2guDj76ZqwziM7Ov9uqtzmqp2rPJ72FEXx2sxrtd93hd/v/uOp//xu0+992/1O+bWZ1+6beuBHZ7N+AADO3du1vxfG6z9rNvwf69X8/38AAABgIMTcPxxmIv8DAABAZcTcPxJmIv8DAABAZcTcPxpmkkn+f+T2XS+99XSR3g1wMYjnx91w/5317WLHeyF8vXFxSXn6x7419tJXnl7dbQ8XRfHL+97XdvtH7ozrqjsR1/mR5tOXuea6Vd3+ww8ubdf4/glndtWvP96f1R4Gsav8ytTW2vVufGKmNl+9r6jNBxaee6Z+/fWv4/ant9W3/+vwpiV7Dg41XX5LWM8NYW4M7ylz/56l/VDOeLmXNnzgX6/87NLtxcsNbX5n7W6++Ef1643vEfXClfXt4/1eaf3/8tXvvFRu//iN7df/9HD79Z8O1/uTMH+xu7594z7/SsP6/ySsP95evNyt3/x+2/W//J769i+H4+LrYbau/+4/f/9b7R6veDt77qhfLt7+9P9ur10uXl+8/tb1Tzw907Q/Wq//1Tfr17P70Z+NNG4fT4+3Ez18R/PxPRQe36YeeVEU3/nTomk/Fx+tX+6fW9Yfr+/EHe3Xf3PLOk8MXVe7/NL9Wd90v772t1vb3t+4nj3/sL7p/rxwT9h/b079oLze0w+E4zGc/38/rF9f63uZvnxP8+tN3P7r6+vP23h9Uy3rf6Fl/QvXlfuu+/rvfbO+/pfvWtO0/j2fDMfTvfXZbf2H/uaKpst/49v1x+PkY5PHjs+dOnygYa82Po/XTKxdd9nl73jnFeG1tPXrvcfnH5k9uXF643RRbBzAtwzs9fq/Geb/1MfChb+Fuh/9rH7cPf+p+vetD/68/vUL4fSHw+MZvz9+7a/Gmo7X1sd94a76PN/1fzisY7Xe89X/vm5VG57+/Cun/umPX2/9uSDenxPvnqjdvxc3XV07b+jV+vmtr1fd/Ne7m5/XPx6drs3vhf26GN6ZefPV9dtrvf743iTPf7r+/I0/ycXLFy3vJ7J+pPl+nO/6fxx+jvn+Nc2vf/H4+N7TLe/mvL4YKpewEF4fioX6+XGruL+fP3N129uL78NTLLz3bJa5orkn5qaOHD526vGp+dm5+am5J57ce/T4qWPze2vvXbr3i90uv/T8Xld7fh+Y3bm9qD3bj9dHj13q9Z94cP+B26ZvOjB7cN+pg/MPnpg9eWj/3Nz+2QNzN+07eHD2sW6XP3xg98zWXdtu2zp56PCB3bfv2rVt1+ThY8fLZdQX1cXO6S9NHju5t3aRud3bd83s2LF9evLo8QOzu2+bnp481e3yte9Nk+WlH508OXtk3/zho7OTc4efnN09s2vnzq1d3/3x6ImDcxunTp46NnVqbvbkVP2+bJyvnVx+7+t2efIwdzy83rUYCj+df+7mnen9cUvf+vKKV1XfpPnH0+KN8F5Q8ftbt69j7h8LM8kk/wMAAEAOYu4Pb/y/dIb8DwAAAJURc/+aMBP5HwAAACoj5v6JMJNM8r/+v/6//r/+v/6//n8v6f/r/3ei/6//P8jr1//X/6e7fuv/x9y/tiiyzP8AAACQg5j714WZyP8AAABQGTH3XxZmIv8DAABAZcTcf3mYSR75f6z1n/r/+v/6/439/7it/n+h/6//f470//X/O9H/1/8f5PX3Yf9/be/7/0vHtP4/q7Gq/v/40um97v/H3P+OMJM88j8AAABkIeb+d4aZyP8AAABQGTH3XxFmIv8DAABAZcTcvz7MJJP87/P/9f/1/33+v/6//n8v6f/r/3ei/6//P8jr78P+v8//p+/02+f/x9z/K2EmmeR/AAAAyEHM/e8KM5H/AQAAoDJi7r8yzET+BwAAgMqIuf+qMJNM8r/+v/6//r/+v/6//n8v6f/r/3ei/6//P8jr1//X/6e7fuv/x9z/7jCTTPI/AAAA5CDm/qvDTOR/AAAAqIyY+98TZiL/AwAAQGXE3H9NmEkm+V//X/9f/1//X/9f/7+X9P/1/zvR/9f/H+T16//r/9Ndv/X/Y+5/b5hJJvkfAAAAchBz/7VhJvI/AAAAVEbM/e8LM5H/AQAAoDJi7t8QZpJJ/tf/1//X/9f/1//X/++lwer/D694jv5/nf5/M/1//X/9f/1/Ouu3/n/M/e8PM8kk/wMAAEAOYu7/QJiJ/A8AAACVEXP/dWEm8j8AAABURsz9G8NMMsn/+v/6//r/+v/6//r/vTRY/f+V6f/X6f830//X/9f/1/+ns37r/8fcvynMJJP8DwAAADmIuX9zmIn8DwAAAJURc//1YSbyPwAAAFRGzP03hJlkkv/1//X/9f/1//X/9f97Sf9f/78T/X/9/0Fev/7/6vr/492uiErrt/5/zP03hplkkv8BAAAgBzH33xRmIv8DAABAZcTc/8EwE/kfAAAAKiPm/i1hJpnkf/1//X/9f/1//X/9/17S/9f/70T/X/9/kNev/+/z/+mu3/r/Mfd/KMwkk/wPAAAAOYi5/8NhJvI/AAAAVEbM/TeHmcj/AAAAUBkx90+GmWSS//X/9f/1//X/9f/1/3upqv3/9Dqq/6//r/+v/6//r//Pivqt/x9z/y1hJpnkfwAAAMhBzP23hpnI/wAAAFAZMfdPhZnI/wAAAFAZMfdPh5lkkv/1//X/9f/1//X/9f97qar9f5//r/9f6P/r/+v/6//TVb/1/2PunwkzyST/AwAAQA5i7t8aZiL/AwAAQGXE3L8tzET+BwAAgMqIuX97mEkm+V///xz7/2uav9T/b79+/X/9f/1//X/9f/3/TvT/9f8Hef36//r/NBtuc1q/9f9j7t8RZpJJ/gcAAIAcxNy/M8xE/gcAAIDKiLn/tjAT+R8AAAAqI+b+28NMMsn/+v8+/1//X/9f/39Q+//jxSDQ/9f/70T/X/9/kNev/6//T3f91v+PuX9XmEkm+R8AAAByEHP/R8JM5H8AAACojJj77wgzkf8BAABgoLT7HMIo5v6Phplkkv/1/6ve/19co/+v/6//33n9g9v/Hwz6//r/nej/6/8P8vr1//X/6a7f+v8x9+8OM8kk/wMAAEAOYu6/M8xE/gcAAIDKiLn/rjAT+R8AAAAqI+b+PWEmmeR//f+q9/99/r/+/+D0/8fi46r/r/9/FvT/9f8L/f9zdq79+fBji/5/H/X/y2NI/59+1G/9/5j77w4zyST/AwAAQA5i7v9YmIn8DwAAAJURc//Hw0zkfwAAAKiMmPs/EWaSSf7X/9f/1//X/++X/n+k/6//fzb0//X/C/3/c3ap+/ODvv5+6v/7/H/6Vb/1/2PuvyfMJJP8DwAAADmIuf+TYSbyPwAAAFRGzP2/GmYi/wMAAEBlxNx/b5hJJvlf/1//X/9f/1//X/+/l/T/9f870f/X/x/k9ev/6//TXb/1/2Pu/7Uwk0zyPwAAAOQg5v77wkzkfwAAAKiMmPs/FWYi/wMAAEBlxNz/62EmmeR//f+L0/8fTtev/6//r/+v/6//fyHp/+v/F/r/5+xS9+cHff36//r/dNdv/f+Y+38jzCST/A8AAAA5iLn/N8NM5H8AAACojJj7fyvMRP4HAACAyoi5//4wk0zyv/6/z//X/9f/1//X/+8l/X/9/070//X/B3n9+v/6/3TXb/3/mPt/O8wkk/wPAAAAOYi5/4EwE/kfAAAAKiPm/k+Hmcj/AAAAUBkx938mzCST/K//r/+v/6//r/+v/99L+v/6/53o/+v/D/L69f/1/+mu3/r/Mfc/GGaSSf4HAACAHMTc/9kwE/kfAAAAKiPm/t8JM5H/AQAAoDJi7v/dMJNM8r/+v/6//r/+v/6//n8v6f8v7/+Xr2GXsv8/vpoN9f9XRf9f/1//X/+fzvqt/x9z/+fCTDLJ/wAAAJCDmPt/L8xE/gcAAIDKiLn/98NM5H8AAACojJj7HwozyST/6//r/+v/6//r/+v/95L+v8//70T/X/9/kNev/6//T3f91v+Puf/zYSaZ5H8AAADIQcz9fxBmIv8DAABAZcTcvzfMRP4HAACAyoi5/+Ewk0zyv/6//r/+v/6//r/+fy/p/+v/d6L/r/8/yOvX/9f/p7t+6//H3L8vzCST/A8AAAA5iLn/C2Em8j8AAABURsz9+8NM5H8AAACojJj7D4SZZJL/9f/1//X/9f/1//X/e0n/X/+/E/1//f9BXr/+v/4/3fVb/z/m/tkwk0zyPwAAAOQg5v6DYSbyPwAAAFRGzP2HwkzkfwAAAKiMmPsfCTPJJP/r/+v/6//r/+v/6//3kv6//n8n+v/6/4O8fv1//X+667f+f8z9h8NMMsn/AAAAkIOY+78YZiL/AwAAQGXE3P+lMBP5HwAAACoj5v4jYSaZ5H/9f/1//X/9f/1//f9e0v/X/+9E/1//f5DXr/+v/093/db/j7n/aJhJJvkfAAAAchBz/7EwE/kfAAAAKiPm/uNhJvI/AAAAVEbM/SfCTDLJ//r/+v/6//r/+v/6/72k/7+8/z8erlP/X/9f/3+w16//r/9Pd/3W/4+5/w/DTDLJ/wAAAJCDmPtPhpnI/wAAAFAZMffPhZnI/wAAAFAZMffPh5lkkv/1//X/9f/1//X/9f97Sf/f5/93ov+v/z/I69f/1/+nu37r/8fcfyrMJJP8DwAAADmIuf/RMBP5HwAAACoj5v7HwkzkfwAAAKiMmPsfDzPJJP/r//8/e3e961t5xHF406aWpum19Ap6Cb2GXkbdhbq7u7u7u1N3d1rqmtCEPTOQAmudA/zY75p5nn+mhZ3whk1IviGfLP2//n+Z/v+889P/6//1/5dF/3+79//X/SOv/z+n/9f/6//1/2xbrf/P3X+/uGXI/gcAAIAJcvffP26x/wEAAKCN3P0PiFvsfwAAAGgjd/8D45Yh+1//r//X/y/T//v+f/5e9f/6/8ug//f9/zP9/y120f380d+v/9f/s2+1/j93/4PiliH7HwAAACbI3f/guMX+BwAAgDZy9z8kbrH/AQAAoI3c/Q+NW4bsf/2//l//r//X/+v/T0n/r//fov/X/x/5/fp//T/7Vuv/c/c/LG4Zsv8BAABggtz9D49b7H8AAABoI3f/I+IW+x8AAADayN3/yLhlyP7X/+v/9f/6f/2//v+U9P/6/y36f/3/kd+v/9f/s2+1/j93/6PiliH7HwAAACbI3f/ouMX+BwAAgDZy9z8mbrH/AQAAoI3c/Y+NW4bsf/2//l//r//X/+v/T0n/r//fov/X/x/5/fp//T/7Tt7/3+fK6+6l9v+5+6+MW4bsfwAAAJggd//j4hb7HwAAANrI3f/4uMX+BwAAgDZy9z8hbhmy//X/+v/r+/9rr9D/6//1/9f/cf3/bUP/r//fov9ftf+/tL8T+n/9v/6fPSfv/3d6/////7n7nxi3DNn/AAAAMEHu/ifFLfY/AAAAtJG7/8lxi/0PAAAAbeTuf0rcMmT/H6X/v1v+D/2/7//r//X/+v9D0f/r/7fo/1ft/33//9b2//e+hPfr/5lgtf4/d/9T45Yh+x8AAAAmyN3/tLjF/gcAAIA2cvc/PW6x/wEAAKCN3P3PiFuG7P+j9P++/6//v6n36//1/2f6/+Xp//X/W/T/+v8jv9/3//X/7Fut/8/d/8y4Zcj+BwAAgAly9z8rbrH/AQAAoI3c/c+OW+x/AAAAaCN3/3PiliH7X/+v/9f/6/9vVf9/R/2//n+b/l//v0X/r/8/8vv1//p/9q3W/+fuf27cMmT/AwAAwAS5+58Xt9j/AAAA0Ebu/ufHLfY/AAAAtJG7/wVxy5D9r//X/+v/9f++/6//PyX9f7v+/wr9//X0//p//b/+n22r9f+5+18YtwzZ/wAAADBB7v4XxS32PwAAALSRu//FcYv9DwAAAG3k7n9J3DJk/+v/9f/6f/2//l//f0r6/3b9v+//34D+X/+v/9f/s221/j93/0vjliH7HwAAACbI3f+yuMX+BwAAgDZy9788brH/AQAAoI3c/a+IW4bsf/2//l//r//X/+v/T0n/r//fov+/6f7/rjfz19P/r/V+/b/+n32r9f+5+18ZtwzZ/wAAADBB7v5XxS32PwAAALSRu//VcYv9DwAAAG3k7n9N3DJk/99c/3/N3c//vP7/0uj/b/r9+n/9v/5f/6//1/9v0f/7/v+R36//1/+zb7X+P3f/a+OWIfsfAAAAJsjd/7q4xf4HAACANnL3vz5usf8BAACgjdz9b4hbhux/3//X/+v/9f/6f/3/Ken/9f9b9P/6/yO/X/+v/2ffav1/7v43xi1D9j8AAABMkLv/TXGL/Q8AAABt5O5/c9xi/wMAAEAbufvfErcM2f/6f/3/hff/d9D/J/1//F71//r/y6D/1/+f6f9vsYvu54/+fv2//p99q/X/ufvfGrcM2f8AAAAwQe7+t8Ut9j8AAAC0kbv/7XGL/Q8AAABt5O5/R9wyZP/r//X/F97/+/5/0f/H71X/r/+/DPp//f+Z/v8Wu+h+/ujv1//r/9m3Wv+fu/+dccuQ/Q8AAAAT5O5/V9xi/wMAAEAbufvfHbfY/wAAANBG7v73xC1D9r/+X/+v/9f/6//1/6ek/9f/b9H/6/+P/H79v/6ffav1/7n73xu3DNn/AAAAMEHu/vfFLfY/AAAAtJG7//1xi/0PAAAAbeTu/0DcMmT/6/+P3v/f9+p4gf5f/6//1/8vSf+v/9+i/9f/H/n9+n/9P/tW6/9z938wbhmy/wEAAGCC3P0filvsfwAAAGgjd/+H4xb7HwAAANrI3f+RuGXI/p/R/9/pRj/Wp//3/X/9v/5f/782/b/+f4v+X/9/5Pfr//X/7Fut/8/d/9G4Zcj+BwAAgAly938sbrH/AQAAoI3c/R+PW+x/AAAAaCN3/yfiliH7f0b/f2P6/3O3ef9/7T31//r/ov/X/5/p//X/O/T/+v8jv1//r/9n32r9f+7+T8YtQ/Y/AAAATJC7/1Nxi/0PAAAAbeTu/3TcYv8DAABAG7n7PxM33OseF/ek25X+X//v+//6f/2//v+U9P/6/y36f/3/kd+v/9f/s2+1/j93/2fjFv/9HwAAANrI3f+5uMX+BwAAgDZy938+brH/AQAAoI3c/V+IW4bsf/2//l//r//X/+v/T0n/r//fov/X/x/5/fp//T/7Vuv/c/d/MW4Zsv8BAABggtz9X4pb7H8AAABoI3f/l+MW+x8AAADayN3/lbhlyP7X/+v/9f/6f/2//v+U9P/6/y36f/3/kd+v/9f/s2+1/j93/1fjliH7HwAAACbI3f+1uMX+BwAAgDZy918Vt9j/AAAA0Ebu/q/HLUP2v/5f/6//1//r//X/p6T/1/9v0f/foP/Pf5no/w/zfv2//p99q/X/ufu/EbcM2f8AAAAwQe7+b8Yt9j8AAAC0kbv/W3GL/Q8AAABt5O7/dtwyZP937v+3fkz/f07/r/8/0//r/09M/6//36L/9/3/I79f/6//Z99q/X/u/u/ELUP2PwAAAEyQu/+7cYv9DwAAAG3k7v9e3GL/AwAAQBu5+78ftwzZ/537/y36/3P6f/3/mf5f/39i+n/9/xb9v/7/yO/X/+v/2bda/5+7/wdxy5D9DwAAABPk7v9h3GL/AwAAQBu5+38Ut9j/AAAA0Ebu/h/HLUP2v/5f/6//1//r//X/p6T/1/9v0f/r/4/8fv2//p99q/X/uft/ErcM2f8AAAAwQe7+n8Yt9j8AAAC0kbv/Z3GL/Q8AAABt5O7/edwyZP/r//X/+n/9v/5f/39K+n/9/xb9v/7/yO/X/+v/2bda/5+7/xdxy5D9DwAAABPk7v9l3GL/AwAAQBu5+38Vt9j/AAAA0Ebu/l/HLUP2v/5f/6//1//r//X/p6T/1/9v0f/r/4/8fv2//p99q/X/uft/E7cM2f8AAAAwQe7+38Yt9j8AAAC0kbv/d3GL/Q8AAABt5O7/fdwyZP/r//X/+n/9v/5f/39K+n/9/xb9v/7/yO/X/+v/2bda/5+7/+q4Zcj+BwAAgAly9/8hbrH/AQAAoI3c/X+MW+x/AAAAaCN3/zVxy5D937n/v+rON/9j+v9zbfv/u+j/9f/6/1Xo//X/W/T/+v8jv1//r/9n32r9f+7+P8UtQ/Y/AAAATJC7/89xi/0PAAAAbeTu/0vcYv8DAABAG7n7/xq3DNn/nfv/Lfr/c237f9//1//r/5eh/9f/b9H/6/+P/H79v/6ffav1/7n7/xa3DNn/AAAAMEHu/r/HLfY/AAAAtJG7/x9xi/0PAAAAbeTu/2fcMmT/6//1//p//b/+X/9/Svp//f8W/b/+/8jv1//r/9m3Wv+fu/9fccuQ/Q8AAAAT5O7/d9xi/wMAAEAbufv/E7fY/wAAANBG7v7/xi1D9r/+X/+v/9f/6//1/6ek/9f/b9H/6/+P/H79v/6ffav1/7n7/xcAAP//mdcmSQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0xb9cbbe05c791f09e)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
sendfile(r0, r1, 0x0, 0xff7e82)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)

349.554546ms ago: executing program 3 (id=1614):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0)
syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000))
close_range(r0, r0, 0x0)

165.562544ms ago: executing program 3 (id=1615):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094)
connect$llc(r0, 0x0, 0x0)

0s ago: executing program 5 (id=1616):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x2}}}, @dstopts_2292={{0x18, 0x29, 0x3b}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x58}, 0x0)

kernel console output (not intermixed with test programs):

tmp-b7:4' failed: Read-only file system
[  161.693468][  T793] usb 3-1: usb_control_msg returned -32
[  161.695818][  T793] usbtmc 3-1:16.0: can't read capabilities
[  161.698361][ T8524] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[  162.021644][ T8533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.895'.
[  162.287685][ T5916] usb 3-1: USB disconnect, device number 11
[  163.158674][ T8548] program syz.2.898 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  163.421947][ T8555] netlink: 3 bytes leftover after parsing attributes in process `syz.3.903'.
[  163.431862][ T8555] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.757297][ T8580] loop4: detected capacity change from 0 to 40427
[  164.771194][ T8580] F2FS-fs (loop4): invalid crc value
[  164.825548][ T7632] udevd[7632]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system
[  164.829019][ T8580] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  164.837722][ T8580] F2FS-fs (loop4): Start checkpoint disabled!
[  164.848241][ T8580] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  164.973051][ T7898] kworker/u9:46: attempt to access beyond end of device
[  164.973051][ T7898] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  164.980176][ T7898] CPU: 0 UID: 0 PID: 7898 Comm: kworker/u9:46 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  164.980192][ T7898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.980201][ T7898] Workqueue: writeback wb_workfn (flush-7:4)
[  164.980219][ T7898] Call Trace:
[  164.980224][ T7898]  <TASK>
[  164.980229][ T7898]  dump_stack_lvl+0x189/0x250
[  164.980245][ T7898]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.980255][ T7898]  ? __pfx_queue_work_on+0x10/0x10
[  164.980264][ T7898]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  164.980276][ T7898]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  164.980291][ T7898]  f2fs_handle_critical_error+0x37c/0x540
[  164.980308][ T7898]  f2fs_write_end_io+0x886/0xb60
[  164.980330][ T7898]  __submit_merged_bio+0x27a/0x6a0
[  164.980344][ T7898]  __submit_merged_write_cond+0x255/0x530
[  164.980358][ T7898]  f2fs_write_data_pages+0x261d/0x3000
[  164.980387][ T7898]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  164.980405][ T7898]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  164.980435][ T7898]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  164.980452][ T7898]  ? trace_f2fs_writepages+0x7f/0x200
[  164.980462][ T7898]  ? f2fs_write_node_pages+0x478/0x6e0
[  164.980474][ T7898]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  164.980492][ T7898]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  164.980502][ T7898]  do_writepages+0x32e/0x550
[  164.980518][ T7898]  ? reacquire_held_locks+0x127/0x1d0
[  164.980526][ T7898]  ? writeback_sb_inodes+0x384/0x1010
[  164.980541][ T7898]  __writeback_single_inode+0x145/0xff0
[  164.980551][ T7898]  ? do_raw_spin_unlock+0x4d/0x240
[  164.980563][ T7898]  writeback_sb_inodes+0x6c7/0x1010
[  164.980588][ T7898]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  164.980651][ T7898]  ? rcu_is_watching+0x15/0xb0
[  164.980667][ T7898]  wb_writeback+0x43b/0xaf0
[  164.980682][ T7898]  ? queue_io+0x391/0x590
[  164.980693][ T7898]  ? __pfx_wb_writeback+0x10/0x10
[  164.980708][ T7898]  ? _raw_spin_unlock_irq+0x23/0x50
[  164.980724][ T7898]  wb_workfn+0x409/0xef0
[  164.980742][ T7898]  ? __pfx_wb_workfn+0x10/0x10
[  164.980753][ T7898]  ? __lock_acquire+0xab9/0xd20
[  164.980771][ T7898]  ? process_scheduled_works+0x9ef/0x17b0
[  164.980784][ T7898]  ? _raw_spin_unlock_irq+0x23/0x50
[  164.980791][ T7898]  ? process_scheduled_works+0x9ef/0x17b0
[  164.980798][ T7898]  ? process_scheduled_works+0x9ef/0x17b0
[  164.980807][ T7898]  process_scheduled_works+0xae1/0x17b0
[  164.980832][ T7898]  ? __pfx_process_scheduled_works+0x10/0x10
[  164.980854][ T7898]  worker_thread+0x8a0/0xda0
[  164.980865][ T7898]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  164.980878][ T7898]  ? __kthread_parkme+0x7b/0x200
[  164.980893][ T7898]  kthread+0x711/0x8a0
[  164.980904][ T7898]  ? __pfx_worker_thread+0x10/0x10
[  164.980912][ T7898]  ? __pfx_kthread+0x10/0x10
[  164.980923][ T7898]  ? _raw_spin_unlock_irq+0x23/0x50
[  164.980931][ T7898]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.980941][ T7898]  ? __pfx_kthread+0x10/0x10
[  164.980951][ T7898]  ret_from_fork+0x3fc/0x770
[  164.980962][ T7898]  ? __pfx_ret_from_fork+0x10/0x10
[  164.980974][ T7898]  ? __switch_to_asm+0x39/0x70
[  164.980984][ T7898]  ? __switch_to_asm+0x33/0x70
[  164.980993][ T7898]  ? __pfx_kthread+0x10/0x10
[  164.981003][ T7898]  ret_from_fork_asm+0x1a/0x30
[  164.981023][ T7898]  </TASK>
[  164.981028][ T7898] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  165.319789][ T8601] syz.2.922 uses obsolete (PF_INET,SOCK_PACKET)
[  166.182627][  T793] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  166.375566][  T793] usb 5-1: Using ep0 maxpacket: 32
[  166.384645][  T793] usb 5-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=a5.af
[  166.388587][  T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.392005][  T793] usb 5-1: Product: syz
[  166.396134][  T793] usb 5-1: Manufacturer: syz
[  166.398026][  T793] usb 5-1: SerialNumber: syz
[  166.412170][  T793] usb 5-1: config 0 descriptor??
[  166.424593][  T793] gspca_main: sunplus-2.14.0 probing 046d:0960
[  166.632911][  T793] gspca_sunplus: reg_w_riv err -71
[  166.635433][  T793] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  166.660362][  T793] usb 5-1: USB disconnect, device number 3
[  166.879007][ T8640] netlink: 'syz.2.930': attribute type 6 has an invalid length.
[  167.375767][ T8664] loop2: detected capacity change from 0 to 512
[  167.389711][ T8664] EXT4-fs: Ignoring removed orlov option
[  167.407083][ T7632] udevd[7632]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  167.415485][ T8649] loop3: detected capacity change from 0 to 32768
[  167.419165][ T8649] XFS: noikeep mount option is deprecated.
[  167.437657][ T8649] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  167.475154][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:3' failed: Read-only file system
[  167.512967][ T8664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.569802][ T8664] ext4 filesystem being mounted at /381/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  167.638945][ T8680] hfsplus: unable to find HFS+ superblock
[  167.763500][ T8649] XFS (loop3): Ending clean mount
[  167.784353][ T8649] XFS (loop3): Quotacheck needed: Please wait.
[  167.929147][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.975478][ T8649] XFS (loop3): Quotacheck: Done.
[  168.321999][ T7904] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  168.976797][ T8708] netlink: 28 bytes leftover after parsing attributes in process `syz.3.941'.
[  169.140658][ T8713] netlink: 152 bytes leftover after parsing attributes in process `syz.2.943'.
[  169.594483][ T8723] loop4: detected capacity change from 0 to 2048
[  169.620326][ T7632] udevd[7632]: symlink '../../loop4' '/dev/disk/by-label/LinuxUDF.tmp-b7:4' failed: Read-only file system
[  169.626499][ T8723] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  169.633038][ T7632] udevd[7632]: symlink '../../loop4' '/dev/disk/by-uuid/1234567812345678.tmp-b7:4' failed: Read-only file system
[  169.795484][ T8730] loop2: detected capacity change from 0 to 128
[  169.847300][ T8731] netlink: 'syz.3.945': attribute type 2 has an invalid length.
[  169.850633][ T8731] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.945'.
[  169.882440][ T8731] nbd: must specify at least one socket
[  170.261595][ T8750] loop4: detected capacity change from 0 to 512
[  170.272976][ T8750] EXT4-fs: Ignoring removed orlov option
[  170.290641][ T8750] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  170.292015][ T7632] udevd[7632]: symlink '../../loop4' '/dev/disk/by-label/\x86\x5b.tmp-b7:4' failed: Read-only file system
[  170.317879][ T8750] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.951: corrupted in-inode xattr: e_value size too large
[  170.345702][ T8750] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.951: couldn't read orphan inode 15 (err -117)
[  170.376085][ T8750] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.487095][ T8003] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.352606][ T8812] loop4: detected capacity change from 0 to 1024
[  171.435571][ T7632] udevd[7632]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system
[  171.457168][ T7632] udevd[7632]: symlink '../../loop4' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:4' failed: Read-only file system
[  171.566200][ T8814] hfsplus: xattr search failed
[  172.277662][ T8003] hfsplus: node 4:3 still has 1 user(s)!
[  172.450567][ T7632] udevd[7632]: symlink '../../loop0' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system
[  172.497907][ T7632] udevd[7632]: symlink '../../loop0' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:4' failed: Read-only file system
[  172.533899][   T54] Bluetooth: hci3: Entering manufacturer mode failed (-110)
[  172.669172][ T8834] loop2: detected capacity change from 0 to 4096
[  172.683838][ T8834] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  172.724401][ T7632] udevd[7632]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  172.738323][ T7632] udevd[7632]: symlink '../../loop2' '/dev/disk/by-uuid/5EB3BBC71C8702BB.tmp-b7:2' failed: Read-only file system
[  173.152637][ T8861] openvswitch: netlink: Message has 1 unknown bytes.
[  173.212896][ T8863] loop2: detected capacity change from 0 to 512
[  173.220627][ T8863] EXT4-fs: Ignoring removed mblk_io_submit option
[  173.237764][ T8863] ext4: Bad value for 'debug_want_extra_isize'
[  173.251423][ T7632] udevd[7632]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  173.475411][ T8863] loop2: detected capacity change from 0 to 32768
[  173.484052][ T8863] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.985 (8863)
[  173.513482][ T7632] udevd[7632]: symlink '../../loop2' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:2' failed: Read-only file system
[  173.522346][ T8863] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  173.526544][ T8863] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  173.544215][ T8863] BTRFS info (device loop2): using free-space-tree
[  173.640482][ T8865] loop3: detected capacity change from 0 to 32768
[  173.655378][ T8865] BTRFS error: device /dev/loop3 (7:3) belongs to fsid ed167579-eb65-4e76-9a50-61ac97e9b59d, and the fs is already mounted, scanned by syz.3.986 (8865)
[  173.697177][ T5848] BTRFS error: device /dev/loop3 (7:3) belongs to fsid ed167579-eb65-4e76-9a50-61ac97e9b59d, and the fs is already mounted, scanned by udevd (5848)
[  173.708569][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:3' failed: Read-only file system
[  173.718167][ T5846] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  174.433147][    T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  174.842416][    T9] usb 3-1: Using ep0 maxpacket: 32
[  174.846537][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.850372][    T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  174.854745][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.860993][    T9] usb 3-1: config 0 descriptor??
[  175.038115][ T8909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.998'.
[  175.041190][ T8909] netlink: 'syz.3.998': attribute type 6 has an invalid length.
[  175.278014][    T9] magicmouse 0003:05AC:0265.0006: item fetching failed at offset 2/5
[  175.281560][    T9] magicmouse 0003:05AC:0265.0006: magicmouse hid parse failed
[  175.285339][    T9] magicmouse 0003:05AC:0265.0006: probe with driver magicmouse failed with error -22
[  175.432918][ T5916] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  175.481105][    T9] usb 3-1: USB disconnect, device number 12
[  175.815253][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  175.820000][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  175.825094][ T5916] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  175.829199][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.834617][ T5916] usb 4-1: config 0 descriptor??
[  175.837612][ T8911] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  176.268689][ T5916] hid-rmi 0003:0461:4E72.0007: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.3-1/input0
[  176.287391][ T7632] udevd[7632]: setting mode of /dev/hidraw0 to 020600 failed: Read-only file system
[  176.301089][ T7632] udevd[7632]: setting owner of /dev/hidraw0 to uid=0, gid=0 failed: Read-only file system
[  176.398853][ T8925] loop4: detected capacity change from 0 to 4096
[  176.440923][ T8925] ntfs3(loop4): ino=3, ntfs_set_state failed, -22.
[  176.444980][ T8921] loop2: detected capacity change from 0 to 32768
[  176.445723][ T8925] ntfs3(loop4): Failed to initialize $Secure::$SII (-22).
[  176.453036][ T8921] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1003 (8921)
[  176.456304][ T8925] ntfs3(loop4): Failed to initialize $Secure (-22).
[  176.471868][ T8925] ntfs3(loop4): ino=3, ntfs3_write_inode failed, -22.
[  176.479958][ T8921] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  176.482356][ T5887] usb 4-1: USB disconnect, device number 3
[  176.490685][ T7632] udevd[7632]: symlink '../../loop2' '/dev/disk/by-uuid/14d642db-7b15-43e4-81e6-4b8fac6a25f8.tmp-b7:2' failed: Read-only file system
[  176.502463][ T8921] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  176.514097][ T8921] BTRFS info (device loop2): using free-space-tree
[  176.816074][ T5846] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  176.982802][  T793] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  177.042083][ T8947] loop3: detected capacity change from 0 to 8
[  177.144767][  T793] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.151194][  T793] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.155136][  T793] usb 5-1: config 0 interface 0 has no altsetting 0
[  177.158952][  T793] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  177.161822][  T793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.169081][  T793] usb 5-1: config 0 descriptor??
[  177.784243][  T793] usb 5-1: string descriptor 0 read error: -22
[  177.846598][ T8985] mkiss: ax0: crc mode is auto.
[  178.021406][  T793] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0008/input/input10
[  178.095427][  T793] uclogic 0003:256C:006D.0008: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input0
[  178.116970][ T5851] udevd[5851]: setting mode of /dev/hidraw0 to 020600 failed: Read-only file system
[  178.120943][ T5851] udevd[5851]: setting owner of /dev/hidraw0 to uid=0, gid=0 failed: Read-only file system
[  178.254789][ T5916] usb 5-1: USB disconnect, device number 4
[  178.891746][ T9009] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  179.015166][ T9016] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1040'.
[  179.425899][ T9023] loop2: detected capacity change from 0 to 32768
[  179.813892][ T9023] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1043 (9023)
[  179.846104][ T9023] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  179.850099][ T9023] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  179.852050][ T7632] udevd[7632]: symlink '../../loop2' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:2' failed: Read-only file system
[  179.874424][ T9023] BTRFS info (device loop2): using free-space-tree
[  180.100458][ T5863] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  180.213362][ T5846] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  180.282916][ T9055] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1051'.
[  180.869924][ T9080] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1061'.
[  180.877003][ T9080] 0: renamed from hsr0 (while UP)
[  180.888846][ T9080] 0: entered allmulticast mode
[  180.890932][ T9080] hsr_slave_0: entered allmulticast mode
[  180.900790][ T9080] hsr_slave_1: entered allmulticast mode
[  180.903308][ T9080] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  180.965374][ T9085] loop3: detected capacity change from 0 to 256
[  181.008975][ T9085] FAT-fs (loop3): Directory bread(block 64) failed
[  181.012013][ T9085] FAT-fs (loop3): Directory bread(block 65) failed
[  181.020900][ T9085] FAT-fs (loop3): Directory bread(block 66) failed
[  181.024078][ T9085] FAT-fs (loop3): Directory bread(block 67) failed
[  181.027054][ T9085] FAT-fs (loop3): Directory bread(block 68) failed
[  181.030038][ T9085] FAT-fs (loop3): Directory bread(block 69) failed
[  181.033536][ T9085] FAT-fs (loop3): Directory bread(block 70) failed
[  181.036741][ T9085] FAT-fs (loop3): Directory bread(block 71) failed
[  181.039668][ T9085] FAT-fs (loop3): Directory bread(block 72) failed
[  181.042434][ T9085] FAT-fs (loop3): Directory bread(block 73) failed
[  181.167012][ T9091] loop4: detected capacity change from 0 to 16
[  181.239746][ T5848] udevd[5848]: symlink '../../loop4' '/dev/disk/by-label/Compressed.tmp-b7:4' failed: Read-only file system
[  181.302505][ T9097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1069'.
[  181.408122][ T9102] loop2: detected capacity change from 0 to 1024
[  181.447352][ T9102] hfsplus: bad catalog entry type
[  181.461513][ T7632] udevd[7632]: symlink '../../loop2' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system
[  181.479402][ T7632] udevd[7632]: symlink '../../loop2' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:2' failed: Read-only file system
[  181.509252][ T7884] hfsplus: b-tree write err: -5, ino 4
[  181.537249][ T7632] udevd[7632]: symlink '../../loop0' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system
[  181.731890][ T9124] loop3: detected capacity change from 0 to 8
[  181.735426][ T9124] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  181.745767][ T9124] cramfs: Error -3 while decompressing!
[  181.747712][ T9124] cramfs: ffffffff99be7628(26)->ffff88803a964000(4096)
[  181.749792][ T9124] cramfs: Error -3 while decompressing!
[  181.756700][ T9124] cramfs: ffffffff99be7642(282)->ffff888033dc4000(4096)
[  181.758871][ T9124] cramfs: bad data blocksize 4294966884
[  181.760874][ T9124] cramfs: Error -3 while decompressing!
[  181.766869][ T9124] cramfs: ffffffff99be7628(26)->ffff88803a964000(4096)
[  181.769500][   T33] audit: type=1800 audit(1755040997.144:41): pid=9124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1082" name="file2" dev="loop3" ino=348 res=0 errno=0
[  181.865159][ T9131] loop3: detected capacity change from 0 to 512
[  181.873757][ T9131] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  181.878324][ T7632] udevd[7632]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  181.901931][ T9131] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.907159][ T9131] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.925403][   T33] audit: type=1800 audit(1755040997.304:42): pid=9131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1084" name="file1" dev="loop3" ino=15 res=0 errno=0
[  181.981796][ T9139] wg1 speed is unknown, defaulting to 1000
[  182.014232][ T9139] wg1 speed is unknown, defaulting to 1000
[  182.044331][ T9139] wg1 speed is unknown, defaulting to 1000
[  182.099443][ T9139] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  182.101725][ T7904] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.191622][ T9139] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  182.341898][ T9139] wg1 speed is unknown, defaulting to 1000
[  182.360837][ T9139] wg1 speed is unknown, defaulting to 1000
[  182.370060][ T9139] wg1 speed is unknown, defaulting to 1000
[  183.028827][ T9159] loop3: detected capacity change from 0 to 4096
[  183.044768][ T9159] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  183.091101][ T7632] udevd[7632]: symlink '../../loop3' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:3' failed: Read-only file system
[  183.104933][   T33] audit: type=1400 audit(1755040998.474:43): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200DFFFFFFFFFFFFFF7FA6 pid=9160 comm="syz.4.1097"
[  183.285613][   T33] audit: type=1800 audit(1755040998.664:44): pid=9159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1096" name="file1" dev="loop3" ino=33 res=0 errno=0
[  183.511478][ T5916] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0
[  183.515488][ T5916] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0
[  183.518429][ T5916] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0
[  183.547041][ T5916] hid-generic 0000:0004:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  183.553529][ T7632] udevd[7632]: setting mode of /dev/hidraw0 to 020600 failed: Read-only file system
[  183.567869][ T7632] udevd[7632]: setting owner of /dev/hidraw0 to uid=0, gid=0 failed: Read-only file system
[  183.690329][ T9180] loop2: detected capacity change from 0 to 1024
[  183.705297][ T9180] EXT4-fs: Ignoring removed orlov option
[  183.707450][ T9180] EXT4-fs: Ignoring removed nomblk_io_submit option
[  183.730668][ T7632] udevd[7632]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  183.777932][ T9180] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.937433][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.022024][ T9195] netlink: 'syz.2.1111': attribute type 3 has an invalid length.
[  184.032364][ T9195] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1111'.
[  184.191692][ T9202] loop2: detected capacity change from 0 to 1024
[  184.210379][ T7872] hfsplus: b-tree write err: -5, ino 4
[  184.221334][ T7632] udevd[7632]: symlink '../../loop2' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system
[  184.234102][ T7632] udevd[7632]: symlink '../../loop2' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:2' failed: Read-only file system
[  184.315136][ T9193] loop3: detected capacity change from 0 to 40427
[  184.322068][ T9193] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  184.327960][ T9193] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  184.331256][ T9193] F2FS-fs (loop3): build fault injection rate: 17008
[  184.334445][ T9193] F2FS-fs (loop3): build fault injection type: 0x1f8
[  184.341355][ T9193] F2FS-fs (loop3): invalid crc value
[  184.412124][ T9193] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  184.423047][ T9193] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  184.426143][ T9193] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  184.589033][ T9206] loop2: detected capacity change from 0 to 32768
[  184.606576][ T9206] (syz.2.1117,9206,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  184.626481][ T9206] (syz.2.1117,9206,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  184.645891][ T9206] JBD2: Ignoring recovery information on journal
[  184.685672][ T9193] syz.3.1112: attempt to access beyond end of device
[  184.685672][ T9193] loop3: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[  184.698528][ T9193] CPU: 0 UID: 0 PID: 9193 Comm: syz.3.1112 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  184.698557][ T9193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  184.698568][ T9193] Call Trace:
[  184.698575][ T9193]  <TASK>
[  184.698583][ T9193]  dump_stack_lvl+0x189/0x250
[  184.698615][ T9193]  ? __pfx_dump_stack_lvl+0x10/0x10
[  184.698633][ T9193]  ? __pfx_queue_work_on+0x10/0x10
[  184.698649][ T9193]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  184.698668][ T9193]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  184.698695][ T9193]  f2fs_handle_critical_error+0x37c/0x540
[  184.698723][ T9193]  f2fs_write_end_io+0x886/0xb60
[  184.698761][ T9193]  __submit_merged_bio+0x27a/0x6a0
[  184.698785][ T9193]  __submit_merged_write_cond+0x255/0x530
[  184.698809][ T9193]  f2fs_write_data_pages+0x261d/0x3000
[  184.698859][ T9193]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  184.698916][ T9193]  ? check_path+0x21/0x40
[  184.698931][ T9193]  ? check_noncircular+0xe0/0x160
[  184.698994][ T9193]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  184.699016][ T9193]  do_writepages+0x32e/0x550
[  184.699047][ T9193]  ? do_raw_spin_unlock+0x4d/0x240
[  184.699071][ T9193]  filemap_fdatawrite+0x199/0x240
[  184.699094][ T9193]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  184.699153][ T9193]  ? do_raw_spin_unlock+0x4d/0x240
[  184.699174][ T9193]  f2fs_sync_dirty_inodes+0x31f/0x830
[  184.699246][ T9193]  f2fs_write_checkpoint+0x95a/0x1df0
[  184.699291][ T9193]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  184.699344][ T9193]  ? down_write+0x162/0x1f0
[  184.699364][ T9193]  ? __pfx_down_write+0x10/0x10
[  184.699392][ T9193]  f2fs_issue_checkpoint+0x3ac/0x570
[  184.699417][ T9193]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  184.699444][ T9193]  ? do_raw_spin_lock+0x121/0x290
[  184.699471][ T9193]  ? __up_read+0x280/0x680
[  184.699495][ T9193]  ? f2fs_sync_fs+0x200/0x3d0
[  184.699515][ T9193]  f2fs_do_sync_file+0x869/0x1860
[  184.699544][ T9193]  ? __pfx_f2fs_do_sync_file+0x10/0x10
[  184.699599][ T9193]  ? __pfx_down_write+0x10/0x10
[  184.699619][ T9193]  ? sb_start_write+0x114/0x1c0
[  184.699636][ T9193]  ? mnt_want_write_file+0x164/0x200
[  184.699655][ T9193]  __f2fs_ioctl+0x485a/0xb610
[  184.699691][ T9193]  ? file_ioctl+0x22d/0x780
[  184.699712][ T9193]  ? __pfx_file_ioctl+0x10/0x10
[  184.699740][ T9193]  ? kasan_quarantine_put+0xdd/0x220
[  184.699761][ T9193]  ? __pfx___f2fs_ioctl+0x10/0x10
[  184.699785][ T9193]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  184.699804][ T9193]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  184.699824][ T9193]  ? do_vfs_ioctl+0xb33/0x1430
[  184.699844][ T9193]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  184.699865][ T9193]  ? do_mprotect_pkey+0xb00/0xce0
[  184.699887][ T9193]  ? __lock_acquire+0xab9/0xd20
[  184.699925][ T9193]  ? __fget_files+0x2a/0x420
[  184.699949][ T9193]  ? __fget_files+0x2a/0x420
[  184.699976][ T9193]  ? __fget_files+0x3a0/0x420
[  184.699997][ T9193]  ? __fget_files+0x2a/0x420
[  184.700021][ T9193]  ? f2fs_ioctl+0x135/0x250
[  184.700043][ T9193]  ? __pfx_f2fs_ioctl+0x10/0x10
[  184.700066][ T9193]  __se_sys_ioctl+0xfc/0x170
[  184.700086][ T9193]  do_syscall_64+0xfa/0x3b0
[  184.700104][ T9193]  ? lockdep_hardirqs_on+0x9c/0x150
[  184.700120][ T9193]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.700135][ T9193]  ? exc_page_fault+0x9f/0xf0
[  184.700154][ T9193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.700168][ T9193] RIP: 0033:0x7f617278ebe9
[  184.700217][ T9193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.700231][ T9193] RSP: 002b:00007f617366e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  184.700249][ T9193] RAX: ffffffffffffffda RBX: 00007f61729b5fa0 RCX: 00007f617278ebe9
[  184.700261][ T9193] RDX: 0000000000000000 RSI: 000000000000f502 RDI: 0000000000000006
[  184.700270][ T9193] RBP: 00007f6172811e19 R08: 0000000000000000 R09: 0000000000000000
[  184.700280][ T9193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  184.700289][ T9193] R13: 00007f61729b6038 R14: 00007f61729b5fa0 R15: 00007fff083e0c68
[  184.700316][ T9193]  </TASK>
[  184.700324][ T9193] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  184.747144][ T9206] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  184.750010][ T9193] CPU: 0 UID: 0 PID: 9193 Comm: syz.3.1112 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  184.750035][ T9193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  184.750045][ T9193] Call Trace:
[  184.750053][ T9193]  <TASK>
[  184.750059][ T9193]  dump_stack_lvl+0x189/0x250
[  184.750088][ T9193]  ? __pfx_dump_stack_lvl+0x10/0x10
[  184.750107][ T9193]  ? __pfx_queue_work_on+0x10/0x10
[  184.750123][ T9193]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  184.750140][ T9193]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  184.750167][ T9193]  f2fs_handle_critical_error+0x37c/0x540
[  184.750230][ T9193]  f2fs_write_end_io+0x886/0xb60
[  184.750268][ T9193]  __submit_merged_bio+0x27a/0x6a0
[  184.750294][ T9193]  __submit_merged_write_cond+0x255/0x530
[  184.750320][ T9193]  f2fs_write_data_pages+0x261d/0x3000
[  184.750371][ T9193]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  184.750435][ T9193]  ? check_path+0x21/0x40
[  184.750451][ T9193]  ? check_noncircular+0xe0/0x160
[  184.750513][ T9193]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  184.750535][ T9193]  do_writepages+0x32e/0x550
[  184.750567][ T9193]  ? do_raw_spin_unlock+0x4d/0x240
[  184.750590][ T9193]  filemap_fdatawrite+0x199/0x240
[  184.750611][ T9193]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  184.750677][ T9193]  ? do_raw_spin_unlock+0x4d/0x240
[  184.750699][ T9193]  f2fs_sync_dirty_inodes+0x31f/0x830
[  184.750737][ T9193]  f2fs_write_checkpoint+0x95a/0x1df0
[  184.750782][ T9193]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  184.750843][ T9193]  ? down_write+0x162/0x1f0
[  184.750862][ T9193]  ? __pfx_down_write+0x10/0x10
[  184.750893][ T9193]  f2fs_issue_checkpoint+0x3ac/0x570
[  184.750919][ T9193]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  184.750947][ T9193]  ? do_raw_spin_lock+0x121/0x290
[  184.750984][ T9193]  ? __up_read+0x280/0x680
[  184.751011][ T9193]  ? f2fs_sync_fs+0x200/0x3d0
[  184.751031][ T9193]  f2fs_do_sync_file+0x869/0x1860
[  184.751063][ T9193]  ? __pfx_f2fs_do_sync_file+0x10/0x10
[  184.751123][ T9193]  ? __pfx_down_write+0x10/0x10
[  184.751143][ T9193]  ? sb_start_write+0x114/0x1c0
[  184.751161][ T9193]  ? mnt_want_write_file+0x164/0x200
[  184.751211][ T9193]  __f2fs_ioctl+0x485a/0xb610
[  184.751252][ T9193]  ? file_ioctl+0x22d/0x780
[  184.751273][ T9193]  ? __pfx_file_ioctl+0x10/0x10
[  184.751305][ T9193]  ? kasan_quarantine_put+0xdd/0x220
[  184.751329][ T9193]  ? __pfx___f2fs_ioctl+0x10/0x10
[  184.751355][ T9193]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  184.751374][ T9193]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  184.751394][ T9193]  ? do_vfs_ioctl+0xb33/0x1430
[  184.751414][ T9193]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  184.751436][ T9193]  ? do_mprotect_pkey+0xb00/0xce0
[  184.751460][ T9193]  ? __lock_acquire+0xab9/0xd20
[  184.751502][ T9193]  ? __fget_files+0x2a/0x420
[  184.751528][ T9193]  ? __fget_files+0x2a/0x420
[  184.751548][ T9193]  ? __fget_files+0x3a0/0x420
[  184.751568][ T9193]  ? __fget_files+0x2a/0x420
[  184.751593][ T9193]  ? f2fs_ioctl+0x135/0x250
[  184.751614][ T9193]  ? __pfx_f2fs_ioctl+0x10/0x10
[  184.751636][ T9193]  __se_sys_ioctl+0xfc/0x170
[  184.751656][ T9193]  do_syscall_64+0xfa/0x3b0
[  184.751675][ T9193]  ? lockdep_hardirqs_on+0x9c/0x150
[  184.751694][ T9193]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.751709][ T9193]  ? exc_page_fault+0x9f/0xf0
[  184.751728][ T9193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.751743][ T9193] RIP: 0033:0x7f617278ebe9
[  184.751759][ T9193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  184.751771][ T9193] RSP: 002b:00007f617366e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  184.751789][ T9193] RAX: ffffffffffffffda RBX: 00007f61729b5fa0 RCX: 00007f617278ebe9
[  184.751800][ T9193] RDX: 0000000000000000 RSI: 000000000000f502 RDI: 0000000000000006
[  184.751808][ T9193] RBP: 00007f6172811e19 R08: 0000000000000000 R09: 0000000000000000
[  184.751817][ T9193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  184.751825][ T9193] R13: 00007f61729b6038 R14: 00007f61729b5fa0 R15: 00007fff083e0c68
[  184.751854][ T9193]  </TASK>
[  184.751861][ T9193] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  185.004955][ T9193] CPU: 0 UID: 0 PID: 9193 Comm: syz.3.1112 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  185.004974][ T9193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  185.004982][ T9193] Call Trace:
[  185.004986][ T9193]  <TASK>
[  185.004991][ T9193]  dump_stack_lvl+0x189/0x250
[  185.005011][ T9193]  ? __pfx_dump_stack_lvl+0x10/0x10
[  185.005031][ T9193]  ? __pfx_queue_work_on+0x10/0x10
[  185.005042][ T9193]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  185.005055][ T9193]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  185.005075][ T9193]  f2fs_handle_critical_error+0x37c/0x540
[  185.005091][ T9193]  f2fs_write_end_io+0x886/0xb60
[  185.005115][ T9193]  __submit_merged_bio+0x27a/0x6a0
[  185.005130][ T9193]  __submit_merged_write_cond+0x255/0x530
[  185.005145][ T9193]  f2fs_write_data_pages+0x261d/0x3000
[  185.005207][ T9193]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  185.005248][ T9193]  ? check_path+0x21/0x40
[  185.005259][ T9193]  ? check_noncircular+0xe0/0x160
[  185.005298][ T9193]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  185.005311][ T9193]  do_writepages+0x32e/0x550
[  185.005330][ T9193]  ? do_raw_spin_unlock+0x4d/0x240
[  185.005351][ T9193]  filemap_fdatawrite+0x199/0x240
[  185.005363][ T9193]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  185.005400][ T9193]  ? do_raw_spin_unlock+0x4d/0x240
[  185.005412][ T9193]  f2fs_sync_dirty_inodes+0x31f/0x830
[  185.005433][ T9193]  f2fs_write_checkpoint+0x95a/0x1df0
[  185.005458][ T9193]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  185.005491][ T9193]  ? down_write+0x162/0x1f0
[  185.005503][ T9193]  ? __pfx_down_write+0x10/0x10
[  185.005519][ T9193]  f2fs_issue_checkpoint+0x3ac/0x570
[  185.005533][ T9193]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  185.005550][ T9193]  ? do_raw_spin_lock+0x121/0x290
[  185.005566][ T9193]  ? __up_read+0x280/0x680
[  185.005581][ T9193]  ? f2fs_sync_fs+0x200/0x3d0
[  185.005592][ T9193]  f2fs_do_sync_file+0x869/0x1860
[  185.005610][ T9193]  ? __pfx_f2fs_do_sync_file+0x10/0x10
[  185.005644][ T9193]  ? __pfx_down_write+0x10/0x10
[  185.005655][ T9193]  ? sb_start_write+0x114/0x1c0
[  185.005666][ T9193]  ? mnt_want_write_file+0x164/0x200
[  185.005677][ T9193]  __f2fs_ioctl+0x485a/0xb610
[  185.005700][ T9193]  ? file_ioctl+0x22d/0x780
[  185.005711][ T9193]  ? __pfx_file_ioctl+0x10/0x10
[  185.005728][ T9193]  ? kasan_quarantine_put+0xdd/0x220
[  185.005741][ T9193]  ? __pfx___f2fs_ioctl+0x10/0x10
[  185.005756][ T9193]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  185.005767][ T9193]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  185.005779][ T9193]  ? do_vfs_ioctl+0xb33/0x1430
[  185.005811][ T9193]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  185.005826][ T9193]  ? do_mprotect_pkey+0xb00/0xce0
[  185.005841][ T9193]  ? __lock_acquire+0xab9/0xd20
[  185.005871][ T9193]  ? __fget_files+0x2a/0x420
[  185.005887][ T9193]  ? __fget_files+0x2a/0x420
[  185.005898][ T9193]  ? __fget_files+0x3a0/0x420
[  185.005909][ T9193]  ? __fget_files+0x2a/0x420
[  185.005923][ T9193]  ? f2fs_ioctl+0x135/0x250
[  185.005936][ T9193]  ? __pfx_f2fs_ioctl+0x10/0x10
[  185.005949][ T9193]  __se_sys_ioctl+0xfc/0x170
[  185.005961][ T9193]  do_syscall_64+0xfa/0x3b0
[  185.005972][ T9193]  ? lockdep_hardirqs_on+0x9c/0x150
[  185.005981][ T9193]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.005990][ T9193]  ? exc_page_fault+0x9f/0xf0
[  185.006001][ T9193]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  185.006011][ T9193] RIP: 0033:0x7f617278ebe9
[  185.006030][ T9193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  185.006039][ T9193] RSP: 002b:00007f617366e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  185.006050][ T9193] RAX: ffffffffffffffda RBX: 00007f61729b5fa0 RCX: 00007f617278ebe9
[  185.006056][ T9193] RDX: 0000000000000000 RSI: 000000000000f502 RDI: 0000000000000006
[  185.006061][ T9193] RBP: 00007f6172811e19 R08: 0000000000000000 R09: 0000000000000000
[  185.006066][ T9193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  185.006071][ T9193] R13: 00007f61729b6038 R14: 00007f61729b5fa0 R15: 00007fff083e0c68
[  185.006088][ T9193]  </TASK>
[  185.006094][ T9193] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  185.113335][ T9219] loop4: detected capacity change from 0 to 4096
[  185.170537][ T5846] ocfs2: Unmounting device (7,2) on (node local)
[  185.695890][ T9241] loop2: detected capacity change from 0 to 256
[  185.701172][ T9241] vfat: Bad value for 'nonumtail'
[  185.810868][   T33] audit: type=1804 audit(1755041001.184:45): pid=9249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1130" name="/newroot/93/file0" dev="tmpfs" ino=503 res=1 errno=0
[  186.330419][ T9262] loop2: detected capacity change from 0 to 8
[  186.383971][ T9262] SQUASHFS error: xz decompression failed, data probably corrupt
[  186.387495][ T9262] SQUASHFS error: Failed to read block 0x108: -5
[  186.390053][ T9262] SQUASHFS error: Unable to read metadata cache entry [106]
[  186.393083][ T9262] SQUASHFS error: Unable to read inode 0x11f
[  187.020600][ T9277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1141'.
[  187.327427][ T9292] orangefs_devreq_write_iter: failed to copy head.
[  187.379052][ T9282] loop3: detected capacity change from 0 to 32768
[  187.395762][ T9282] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1143 (9282)
[  187.416942][ T7632] udevd[7632]: symlink '../../loop3' '/dev/disk/by-uuid/a6a605fc-d5f1-4e66-8595-3726e2b761d6.tmp-b7:3' failed: Read-only file system
[  187.433194][ T9282] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  187.437510][ T9282] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  187.441614][ T9282] BTRFS info (device loop3): using free-space-tree
[  187.464212][ T5887] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  187.584892][ T9303] loop4: detected capacity change from 0 to 8192
[  187.597746][ T7904] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  187.627232][ T7632] udevd[7632]: symlink '../../loop4' '/dev/disk/by-uuid/1DC8-C73B.tmp-b7:4' failed: Read-only file system
[  187.630361][ T5887] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  187.647798][ T5887] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  187.655206][ T5887] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  187.658878][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  187.663290][ T5887] usb 3-1: SerialNumber: syz
[  187.888528][ T5887] usb 3-1: 0:2 : does not exist
[  187.969146][ T9315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  187.979519][ T5887] usb 3-1: USB disconnect, device number 13
[  188.058704][ T9319] loop3: detected capacity change from 0 to 1024
[  188.120119][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system
[  188.150005][ T9322] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[  188.182351][   T33] audit: type=1800 audit(1755041003.554:46): pid=9322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1154" name="file1" dev="loop3" ino=20 res=0 errno=0
[  188.184518][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:3' failed: Read-only file system
[  188.189433][ T7632] udevd[7632]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  188.592801][   T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  188.708105][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1159'.
[  188.711580][ T9330] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  188.715425][ T9330] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  188.792968][   T10] usb 5-1: Using ep0 maxpacket: 8
[  188.813917][   T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  188.817006][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  188.820344][   T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 49526, setting to 1024
[  188.850748][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  188.858217][   T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  188.864506][   T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  188.867437][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.869549][ T9332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1160'.
[  189.112029][   T10] usb 5-1: GET_CAPABILITIES returned 0
[  189.114793][   T10] usbtmc 5-1:16.0: can't read capabilities
[  189.339785][  T792] usb 5-1: USB disconnect, device number 5
[  189.577476][ T7632] udevd[7632]: symlink '../../loop0' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system
[  189.591734][ T7632] udevd[7632]: symlink '../../loop0' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:3' failed: Read-only file system
[  189.637575][ T9336] loop2: detected capacity change from 0 to 32768
[  189.644164][ T9336] (syz.2.1162,9336,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #66: rec_len is too small for name_len - offset=132, inode=71, rec_len=16, name_len=13
[  189.650405][ T9336] (syz.2.1162,9336,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  189.654307][ T9336] (syz.2.1162,9336,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 4, possibly corrupt fs?
[  189.654326][ T9336] (syz.2.1162,9336,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  189.661181][ T9336] (syz.2.1162,9336,0):ocfs2_initialize_super:2198 ERROR: status = -22
[  189.664199][ T9336] (syz.2.1162,9336,0):ocfs2_fill_super:1177 ERROR: status = -22
[  189.691173][ T7632] udevd[7632]: symlink '../../loop2' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:2' failed: Read-only file system
[  189.944383][   T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  190.127406][   T10] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  190.141712][   T10] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  190.152991][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  190.155700][   T10] usb 4-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00
[  190.169618][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.184962][   T10] usb 4-1: config 0 descriptor??
[  190.610518][   T10] aquacomputer_d5next 0003:0C70:F010.000A: hidraw0: USB HID v0.00 Device [HID 0c70:f010] on usb-dummy_hcd.3-1/input0
[  190.614798][ T7632] udevd[7632]: setting mode of /dev/hidraw0 to 020600 failed: Read-only file system
[  190.614850][ T7632] udevd[7632]: setting owner of /dev/hidraw0 to uid=0, gid=0 failed: Read-only file system
[  190.812081][ T5856] usb 4-1: USB disconnect, device number 4
[  190.863950][ T5236] Bluetooth: hci0: command 0x0406 tx timeout
[  191.433625][ T9377] loop2: detected capacity change from 0 to 32768
[  191.465804][ T9377] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  191.516032][ T9377] XFS (loop2): Ending clean mount
[  191.526045][ T9377] XFS (loop2): Quotacheck needed: Please wait.
[  191.605562][ T9377] XFS (loop2): Quotacheck: Done.
[  191.671983][ T5846] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  191.852483][ T5916] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  192.142498][ T5916] usb 5-1: Using ep0 maxpacket: 32
[  192.193022][  T792] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  192.377238][ T5916] usb 5-1: config 0 has an invalid interface number: 61 but max is 1
[  192.390759][ T5916] usb 5-1: config 0 has no interface number 1
[  192.450120][ T5916] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  192.454802][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.457849][ T5916] usb 5-1: Product: syz
[  192.459404][ T5916] usb 5-1: Manufacturer: syz
[  192.461082][ T5916] usb 5-1: SerialNumber: syz
[  192.466865][  T792] usb 3-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  192.470162][ T5916] usb 5-1: config 0 descriptor??
[  192.472004][  T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.476827][  T792] usb 3-1: Product: syz
[  192.478350][  T792] usb 3-1: Manufacturer: syz
[  192.479843][  T792] usb 3-1: SerialNumber: syz
[  192.486663][  T792] usb 3-1: config 0 descriptor??
[  192.586761][ T5916] viperboard 5-1:0.61: version 0.00 found at bus 005 address 006
[  192.610722][ T5916] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100
[  192.615373][ T5916] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5
[  192.634117][ T5916] viperboard 5-1:0.0: version 0.00 found at bus 005 address 006
[  192.645478][ T5916] viperboard-i2c viperboard-i2c.6.auto: error -EIO: failure setting i2c_bus_freq to 100
[  192.648821][ T5916] viperboard-i2c viperboard-i2c.6.auto: probe with driver viperboard-i2c failed with error -5
[  192.714541][ T5916] usb 5-1: USB disconnect, device number 6
[  192.910188][ T9411] delete_channel: no stack
[  192.916358][ T9411] delete_channel: no stack
[  192.987169][   T33] audit: type=1326 audit(1755043584.364:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.3.1192" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617278ebe9 code=0x7ffc0000
[  193.000151][   T33] audit: type=1326 audit(1755043584.364:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.3.1192" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617278ebe9 code=0x7ffc0000
[  193.015246][   T33] audit: type=1326 audit(1755043584.364:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.3.1192" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f617278ebe9 code=0x7ffc0000
[  193.024501][   T33] audit: type=1326 audit(1755043584.374:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.3.1192" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617278ebe9 code=0x7ffc0000
[  193.039617][   T33] audit: type=1326 audit(1755043584.374:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.3.1192" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617278ebe9 code=0x7ffc0000
[  193.052010][   T33] audit: type=1326 audit(1755043584.374:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.3.1192" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f617278ebe9 code=0x7ffc0000
[  193.061346][   T33] audit: type=1326 audit(1755043584.374:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.3.1192" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617278ebe9 code=0x7ffc0000
[  193.070328][   T33] audit: type=1326 audit(1755043584.374:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.3.1192" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617278ebe9 code=0x7ffc0000
[  193.092056][   T33] audit: type=1326 audit(1755043584.374:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9412 comm="syz.3.1192" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f617278ebe9 code=0x7ffc0000
[  193.110538][ T9415] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1193'.
[  193.443941][ T9419] loop3: detected capacity change from 0 to 32768
[  193.459392][ T9419] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1195 (9419)
[  193.475238][ T9419] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  193.478905][ T9419] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  193.481989][ T9419] BTRFS info (device loop3): using free-space-tree
[  193.487440][ T7632] udevd[7632]: symlink '../../loop3' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:3' failed: Read-only file system
[  193.534756][  T792] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  193.546090][  T792] asix 3-1:0.0: probe with driver asix failed with error -71
[  193.566364][  T792] usb 3-1: USB disconnect, device number 14
[  193.684871][ T7904] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  193.912477][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  193.915842][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  193.949979][ T9425] loop4: detected capacity change from 0 to 40427
[  193.954724][ T9425] F2FS-fs (loop4): Image doesn't support compression
[  193.959475][ T9425] F2FS-fs (loop4): invalid crc value
[  194.018830][ T7632] udevd[7632]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system
[  194.106460][ T9425] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  194.120403][ T9425] F2FS-fs (loop4): Start checkpoint disabled!
[  194.135648][ T9425] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  194.268718][   T33] kauditd_printk_skb: 7 callbacks suppressed
[  194.268733][   T33] audit: type=1800 audit(1755043585.644:63): pid=9425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1198" name="bus" dev="loop4" ino=10 res=0 errno=0
[  194.359202][ T7842] kworker/u10:10: attempt to access beyond end of device
[  194.359202][ T7842] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  194.368911][ T7842] CPU: 1 UID: 0 PID: 7842 Comm: kworker/u10:10 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  194.368935][ T7842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  194.368946][ T7842] Workqueue: writeback wb_workfn (flush-7:4)
[  194.368975][ T7842] Call Trace:
[  194.368982][ T7842]  <TASK>
[  194.368990][ T7842]  dump_stack_lvl+0x189/0x250
[  194.369018][ T7842]  ? __pfx_dump_stack_lvl+0x10/0x10
[  194.369036][ T7842]  ? __pfx_queue_work_on+0x10/0x10
[  194.369066][ T7842]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  194.369085][ T7842]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  194.369111][ T7842]  f2fs_handle_critical_error+0x37c/0x540
[  194.369162][ T7842]  f2fs_write_end_io+0x886/0xb60
[  194.369206][ T7842]  __submit_merged_bio+0x27a/0x6a0
[  194.369231][ T7842]  __submit_merged_write_cond+0x255/0x530
[  194.369256][ T7842]  f2fs_write_data_pages+0x261d/0x3000
[  194.369308][ T7842]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  194.369340][ T7842]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  194.369394][ T7842]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  194.369426][ T7842]  ? trace_f2fs_writepages+0x7f/0x200
[  194.369445][ T7842]  ? f2fs_write_node_pages+0x478/0x6e0
[  194.369466][ T7842]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  194.369527][ T7842]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  194.369549][ T7842]  do_writepages+0x32e/0x550
[  194.369575][ T7842]  ? reacquire_held_locks+0x127/0x1d0
[  194.369590][ T7842]  ? writeback_sb_inodes+0x384/0x1010
[  194.369618][ T7842]  __writeback_single_inode+0x145/0xff0
[  194.369636][ T7842]  ? do_raw_spin_unlock+0x4d/0x240
[  194.369659][ T7842]  writeback_sb_inodes+0x6c7/0x1010
[  194.369703][ T7842]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  194.369763][ T7842]  ? rcu_is_watching+0x15/0xb0
[  194.369789][ T7842]  wb_writeback+0x43b/0xaf0
[  194.369815][ T7842]  ? queue_io+0x391/0x590
[  194.369837][ T7842]  ? __pfx_wb_writeback+0x10/0x10
[  194.369864][ T7842]  ? _raw_spin_unlock_irq+0x23/0x50
[  194.369885][ T7842]  wb_workfn+0x409/0xef0
[  194.369916][ T7842]  ? __pfx_wb_workfn+0x10/0x10
[  194.369937][ T7842]  ? __lock_acquire+0xab9/0xd20
[  194.369971][ T7842]  ? process_scheduled_works+0x9ef/0x17b0
[  194.369993][ T7842]  ? _raw_spin_unlock_irq+0x23/0x50
[  194.370007][ T7842]  ? process_scheduled_works+0x9ef/0x17b0
[  194.370020][ T7842]  ? process_scheduled_works+0x9ef/0x17b0
[  194.370036][ T7842]  process_scheduled_works+0xae1/0x17b0
[  194.370080][ T7842]  ? __pfx_process_scheduled_works+0x10/0x10
[  194.370121][ T7842]  worker_thread+0x8a0/0xda0
[  194.370162][ T7842]  kthread+0x711/0x8a0
[  194.370184][ T7842]  ? __pfx_worker_thread+0x10/0x10
[  194.370204][ T7842]  ? __pfx_kthread+0x10/0x10
[  194.370224][ T7842]  ? _raw_spin_unlock_irq+0x23/0x50
[  194.370239][ T7842]  ? lockdep_hardirqs_on+0x9c/0x150
[  194.370255][ T7842]  ? __pfx_kthread+0x10/0x10
[  194.370274][ T7842]  ret_from_fork+0x3fc/0x770
[  194.370295][ T7842]  ? __pfx_ret_from_fork+0x10/0x10
[  194.370316][ T7842]  ? __switch_to_asm+0x39/0x70
[  194.370334][ T7842]  ? __switch_to_asm+0x33/0x70
[  194.370350][ T7842]  ? __pfx_kthread+0x10/0x10
[  194.370368][ T7842]  ret_from_fork_asm+0x1a/0x30
[  194.370404][ T7842]  </TASK>
[  194.498392][    C1] vkms_vblank_simulate: vblank timer overrun
[  194.521367][ T7842] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  196.318515][ T9483] 9pnet_fd: p9_fd_create_tcp (9483): problem connecting socket to 127.0.0.1
[  196.937644][ T9492] loop2: detected capacity change from 0 to 1024
[  196.946375][ T9492] EXT4-fs: Ignoring removed orlov option
[  196.970020][ T7632] udevd[7632]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  196.986519][ T9492] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  197.034395][ T9492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.108747][ T5846] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.136433][   T33] audit: type=1800 audit(1755043588.435:64): pid=9492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1217" name="file1" dev="loop2" ino=15 res=0 errno=0
[  197.322960][ T9499] loop2: detected capacity change from 0 to 32768
[  197.462819][ T9499] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  197.462836][ T9499]   allowing incompatible features above 0.0: (unknown version)
[  197.462843][ T9499]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  197.477194][ T9499] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  197.480569][ T9499] bcachefs (loop2): initializing new filesystem
[  197.490704][ T9499] bcachefs (loop2): going read-write
[  197.536873][ T9499] bcachefs (loop2): marking superblocks
[  197.544810][ T9499] bcachefs (loop2): initializing freespace
[  197.549603][ T9499] bcachefs (loop2): done initializing freespace
[  197.553184][ T9499] bcachefs (loop2): reading snapshots table
[  197.555885][ T9499] bcachefs (loop2): reading snapshots done
[  197.594678][ T9499] bcachefs (loop2): done starting filesystem
[  197.653456][   T33] audit: type=1800 audit(1755043589.035:65): pid=9499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1219" name="file1" dev="loop2" ino=4098 res=0 errno=0
[  197.711938][ T5846] bcachefs (loop2): shutting down
[  197.714674][ T5846] bcachefs (loop2): going read-only
[  197.718973][ T5846] bcachefs (loop2): finished waiting for writes to stop
[  197.943318][ T5846] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  198.048878][ T5846] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  198.071805][ T5846] bcachefs (loop2): clean shutdown complete, journal seq 4
[  198.075477][ T5846] bcachefs (loop2): marking filesystem clean
[  198.163192][ T5846] bcachefs (loop2): shutdown complete
[  198.379635][ T9518] loop3: detected capacity change from 0 to 4096
[  198.396692][ T9518] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  198.436110][ T7632] udevd[7632]: symlink '../../loop3' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:3' failed: Read-only file system
[  198.480607][   T33] audit: type=1800 audit(1755043589.855:66): pid=9518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1222" name="file1" dev="loop3" ino=33 res=0 errno=0
[  198.947841][ T9520] loop3: detected capacity change from 0 to 32768
[  198.976495][ T9520] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1223 (9520)
[  199.019106][ T7632] udevd[7632]: symlink '../../loop3' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:3' failed: Read-only file system
[  199.028976][ T9520] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  199.044436][ T9520] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  199.063709][ T9520] BTRFS info (device loop3): using free-space-tree
[  199.180089][ T9530] netlink: 'syz.4.1225': attribute type 3 has an invalid length.
[  199.195622][ T9530] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  199.359368][ T9520] BTRFS error (device loop3): balance: invalid convert data profile single
[  199.434647][ T7904] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  199.722037][ T9552] loop3: detected capacity change from 0 to 512
[  199.744821][ T7632] udevd[7632]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  199.756966][ T9552] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  199.776591][ T9552] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.799250][ T9552] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.898762][ T8003] syz_tun (unregistering): left allmulticast mode
[  200.022052][ T7904] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.981994][ T5863] bridge_slave_1: left allmulticast mode
[  201.984846][ T5863] bridge_slave_1: left promiscuous mode
[  201.987438][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.030923][ T5863] bridge_slave_0: left allmulticast mode
[  202.039801][ T5863] bridge_slave_0: left promiscuous mode
[  202.043039][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.639296][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  202.666427][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  202.678016][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  202.683814][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  202.687108][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  204.771277][ T5236] Bluetooth: hci1: command tx timeout
[  207.154131][ T5236] Bluetooth: hci1: command tx timeout
[  208.378280][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  208.431533][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  208.449437][ T5863] bond0 (unregistering): Released all slaves
[  208.702727][ T9577] loop3: detected capacity change from 0 to 32768
[  208.743400][ T9572] udevd[9572]: symlink '../../loop3' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:3' failed: Read-only file system
[  209.025485][ T9561] wg1 speed is unknown, defaulting to 1000
[  209.165647][ T9581] loop3: detected capacity change from 0 to 1024
[  209.183821][ T9581] EXT4-fs: Ignoring removed nobh option
[  209.196472][ T9572] udevd[9572]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  209.201227][ T5236] Bluetooth: hci1: command tx timeout
[  209.246604][ T9581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  209.375923][ T7904] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.406912][ T9561] chnl_net:caif_netlink_parms(): no params data found
[  209.473794][   T16] sched: DL replenish lagged too much
[  209.567260][ T9561] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.569670][ T9561] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.573885][ T9561] bridge_slave_0: entered allmulticast mode
[  209.576929][ T9561] bridge_slave_0: entered promiscuous mode
[  209.582648][ T9561] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.585161][ T9561] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.587614][ T9561] bridge_slave_1: entered allmulticast mode
[  209.592066][ T9561] bridge_slave_1: entered promiscuous mode
[  209.674719][ T9561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.685257][ T9561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.782507][ T9561] team0: Port device team_slave_0 added
[  209.787496][ T9561] team0: Port device team_slave_1 added
[  209.886240][ T9561] batman_adv: batadv0: Adding interface: batadv_slave_0
[  209.888962][ T9561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.904234][ T9561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.911619][ T9561] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.914518][ T9561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.928127][ T9561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  210.031134][ T9561] hsr_slave_0: entered promiscuous mode
[  210.034699][ T9561] hsr_slave_1: entered promiscuous mode
[  210.037989][ T9561] debugfs: 'hsr0' already exists in 'hsr'
[  210.043467][ T9561] Cannot create hsr debugfs directory
[  210.498274][ T9561] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.519441][ T9561] 8021q: adding VLAN 0 to HW filter on device team0
[  210.543901][ T7849] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.546822][ T7849] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.564539][ T7849] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.567525][ T7849] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.808799][ T9561] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.250652][   T54] Bluetooth: hci1: command tx timeout
[  211.307585][ T9561] veth0_vlan: entered promiscuous mode
[  211.321731][ T9561] veth1_vlan: entered promiscuous mode
[  211.361911][ T9561] veth0_macvtap: entered promiscuous mode
[  211.368688][ T9561] veth1_macvtap: entered promiscuous mode
[  211.389531][ T9561] batman_adv: batadv0: Interface activated: batadv_slave_0
[  211.412791][ T9561] batman_adv: batadv0: Interface activated: batadv_slave_1
[  211.578401][ T7860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.592568][ T7860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  211.634870][ T7846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  211.638011][ T7846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.200400][ T5887] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  212.386234][ T5887] usb 6-1: config index 0 descriptor too short (expected 35577, got 27)
[  212.389219][ T5887] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  212.396053][ T5887] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92
[  212.398920][ T5887] usb 6-1: config 1 has no interface number 0
[  212.411231][ T5887] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  212.420002][ T5887] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  212.424360][ T5887] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  212.437961][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.462134][ T5887] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found
[  212.640388][ T9619] loop3: detected capacity change from 0 to 32768
[  212.653035][ T9619] btrfs: Deprecated parameter 'usebackuproot'
[  212.661025][ T9619] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  212.673081][ T9619] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1248 (9619)
[  212.686403][ T9613] udevd[9613]: symlink '../../loop3' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:3' failed: Read-only file system
[  212.702164][ T9619] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  212.708268][ T9619] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  212.718369][ T9619] BTRFS info (device loop3): using free-space-tree
[  212.847137][ T7846] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  212.860919][ T9619] BTRFS error (device loop3): failed to load root extent
[  212.863473][ T9619] BTRFS warning (device loop3): try to load backup roots slot 1
[  212.875756][ T7860] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  212.885810][ T9619] BTRFS warning (device loop3): couldn't read tree root
[  212.895537][ T9619] BTRFS warning (device loop3): try to load backup roots slot 2
[  212.903931][ T7846] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  212.913004][ T9619] BTRFS warning (device loop3): couldn't read tree root
[  212.918377][ T9619] BTRFS warning (device loop3): try to load backup roots slot 3
[  212.945130][ T9619] BTRFS info (device loop3): rebuilding free space tree
[  213.027725][ T5887] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached
[  213.051985][ T9619] BTRFS info (device loop3): checking UUID tree
[  213.244629][   T47] usb 6-1: USB disconnect, device number 2
[  213.247431][   T47] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected
[  213.313227][ T7904] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  213.862328][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  213.868586][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  213.876752][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  213.881598][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  213.885238][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  214.025637][ T9646] wg1 speed is unknown, defaulting to 1000
[  214.151709][ T9649] block nbd0: server does not support multiple connections per device.
[  214.177415][ T9649] block nbd0: shutting down sockets
[  214.616382][ T9646] chnl_net:caif_netlink_parms(): no params data found
[  216.030310][   T54] Bluetooth: hci3: command tx timeout
[  216.151656][ T9671] loop5: detected capacity change from 0 to 128
[  216.177319][ T9671] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  216.219568][ T9671] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  216.277211][ T9673] loop3: detected capacity change from 0 to 4096
[  216.298720][ T9673] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  216.324086][ T9638] udevd[9638]: symlink '../../loop3' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:3' failed: Read-only file system
[  216.586651][ T9646] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.590231][ T9646] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.593372][ T9646] bridge_slave_0: entered allmulticast mode
[  216.596841][ T9646] bridge_slave_0: entered promiscuous mode
[  216.602103][ T9646] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.607646][ T9646] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.622440][ T9646] bridge_slave_1: entered allmulticast mode
[  216.637660][ T9646] bridge_slave_1: entered promiscuous mode
[  216.714002][ T9673] ntfs3(loop3): ino=19, mi_enum_attr
[  216.716042][ T9673] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  216.757786][ T9646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  216.791253][   T33] audit: type=1800 audit(1755043608.157:67): pid=9673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1260" name="file1" dev="loop3" ino=33 res=0 errno=0
[  216.802307][ T9646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  216.981954][ T9646] team0: Port device team_slave_0 added
[  217.001690][ T9646] team0: Port device team_slave_1 added
[  217.172058][ T9646] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.174470][ T9646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.206632][ T9646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.220288][ T9646] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.223004][ T9646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.257547][ T9646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.364174][ T9703] loop3: detected capacity change from 0 to 512
[  217.386682][ T9646] hsr_slave_0: entered promiscuous mode
[  217.394960][ T9703] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  217.410067][ T9638] udevd[9638]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  217.423809][ T9646] hsr_slave_1: entered promiscuous mode
[  217.430930][ T9646] debugfs: 'hsr0' already exists in 'hsr'
[  217.439402][  T792] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  217.444136][ T9646] Cannot create hsr debugfs directory
[  217.459768][ T9703] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1272: iget: bad i_size value: 360287970189639680
[  217.466065][ T9703] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1272: couldn't read orphan inode 15 (err -117)
[  217.474298][ T9703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.499152][ T9703] EXT4-fs error (device loop3): ext4_empty_dir:3090: inode #12: block 13: comm syz.3.1272: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=1
[  217.524521][ T9703] EXT4-fs warning (device loop3): ext4_empty_dir:3093: inode #12: comm syz.3.1272: directory missing '.'
[  217.585328][ T7904] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.598947][  T792] usb 6-1: config 7 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 55911, setting to 64
[  217.608992][  T792] usb 6-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  217.639622][  T792] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  217.642983][  T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.667038][ T9699] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  217.858677][ T9646] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.944388][  T792] usb 6-1: USB disconnect, device number 3
[  217.964848][ T9646] 8021q: adding VLAN 0 to HW filter on device team0
[  217.994218][ T7846] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.997375][ T7846] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.025164][ T7846] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.028535][ T7846] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.053728][   T54] Bluetooth: hci3: command tx timeout
[  218.288471][ T9646] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.545054][ T9646] veth0_vlan: entered promiscuous mode
[  218.565300][ T9646] veth1_vlan: entered promiscuous mode
[  218.701465][ T9646] veth0_macvtap: entered promiscuous mode
[  218.761214][ T9646] veth1_macvtap: entered promiscuous mode
[  218.812083][ T9729] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  220.129113][   T54] Bluetooth: hci3: command tx timeout
[  221.234140][ T9741] loop3: detected capacity change from 0 to 2048
[  221.256293][ T9638] udevd[9638]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  221.275195][ T9741] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.288318][ T9741] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.874294][ T9646] batman_adv: batadv0: Interface activated: batadv_slave_0
[  221.986704][ T7904] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.178233][ T9750] loop3: detected capacity change from 0 to 2048
[  222.205875][ T5863] hsr_slave_0: left promiscuous mode
[  222.209308][   T54] Bluetooth: hci3: command tx timeout
[  222.226755][ T5863] hsr_slave_1: left promiscuous mode
[  222.234393][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  222.236948][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.249970][ T9638] Alternate GPT is invalid, using primary GPT.
[  222.253275][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  222.255743][ T9638]  loop3: p1 p2 p3
[  222.267958][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  222.310780][ T9750] Alternate GPT is invalid, using primary GPT.
[  222.312887][ T9750]  loop3: p1 p2 p3
[  222.376308][ T9613] udevd[9613]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  222.382721][ T9572] udevd[9572]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  222.422878][ T9638] udevd[9638]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  222.453828][ T5863] veth1_macvtap: left promiscuous mode
[  222.455814][ T5863] veth0_macvtap: left promiscuous mode
[  222.510827][ T5863] veth1_vlan: left promiscuous mode
[  222.518523][ T5863] veth0_vlan: left promiscuous mode
[  222.542312][ T9613] udevd[9613]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  222.571271][ T9638] udevd[9638]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  222.577071][ T9572] udevd[9572]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  222.642508][ T9752] loop3: detected capacity change from 0 to 512
[  222.708494][ T9638] udevd[9638]: symlink '../../loop3' '/dev/disk/by-label/SYZKALLER.tmp-b7:3' failed: Read-only file system
[  222.730988][ T9638] udevd[9638]: symlink '../../loop3' '/dev/disk/by-uuid/1DDD-580F.tmp-b7:3' failed: Read-only file system
[  222.827747][ T9638] udevd[9638]: symlink '../../loop3' '/dev/disk/by-label/SYZKALLER.tmp-b7:3' failed: Read-only file system
[  222.894660][ T9638] udevd[9638]: symlink '../../loop3' '/dev/disk/by-uuid/1DDD-580F.tmp-b7:3' failed: Read-only file system
[  223.055249][ T9749] loop5: detected capacity change from 0 to 32768
[  223.144726][   T33] audit: type=1800 audit(1755043614.518:68): pid=9749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1280" name="file1" dev="loop5" ino=4 res=0 errno=0
[  223.832638][ T9758] [U] ^C
[  223.872717][ T9761] netlink: 'syz.5.1285': attribute type 5 has an invalid length.
[  225.556424][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  225.722037][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  229.403839][ T5916] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  229.581162][ T5916] usb 4-1: Using ep0 maxpacket: 8
[  229.588034][ T5916] usb 4-1: config 0 has no interfaces?
[  229.590302][ T5916] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  229.594701][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.614542][ T5916] usb 4-1: config 0 descriptor??
[  229.834554][ T5916] usb 4-1: USB disconnect, device number 5
[  230.080669][ T9646] batman_adv: batadv0: Interface activated: batadv_slave_1
[  231.806088][ T7860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.830725][ T7860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.034547][ T7842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.039158][ T7842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.535592][ T9808] loop3: detected capacity change from 0 to 32768
[  232.539289][ T9808] btrfs: Deprecated parameter 'usebackuproot'
[  232.541810][ T9808] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  232.571379][ T9808] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1302 (9808)
[  232.590072][ T9808] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  232.594052][ T9808] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  232.597684][ T9808] BTRFS info (device loop3): using free-space-tree
[  232.658894][ T9638] udevd[9638]: symlink '../../loop3' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:3' failed: Read-only file system
[  232.849212][ T9808] BTRFS info (device loop3): rebuilding free space tree
[  232.974528][ T9832] BTRFS info (device loop3): space_info DATA+METADATA (sub-group id 0) has 159744 free, is not full
[  232.978373][ T9832] BTRFS info (device loop3): space_info total=3276800, used=57344, pinned=16384, reserved=0, may_use=3043328, readonly=0 zone_unusable=0
[  232.982951][ T9832] BTRFS info (device loop3): global_block_rsv: size 1441792 reserved 1441792
[  232.985961][ T9832] BTRFS info (device loop3): trans_block_rsv: size 0 reserved 0
[  232.988356][ T9832] BTRFS info (device loop3): chunk_block_rsv: size 0 reserved 0
[  232.990707][ T9832] BTRFS info (device loop3): delayed_block_rsv: size 0 reserved 0
[  232.993048][ T9832] BTRFS info (device loop3): delayed_refs_rsv: size 196608 reserved 196608
[  233.228227][ T5916] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  233.417605][ T5916] usb 6-1: Using ep0 maxpacket: 16
[  233.428918][ T7904] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  233.432613][ T5916] usb 6-1: config 0 has an invalid interface number: 180 but max is 0
[  233.443513][ T5916] usb 6-1: config 0 has no interface number 0
[  233.468630][ T5916] usb 6-1: New USB device found, idVendor=0421, idProduct=0134, bcdDevice=11.72
[  233.471471][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.473872][ T5916] usb 6-1: Product: syz
[  233.516516][ T5916] usb 6-1: Manufacturer: syz
[  233.520238][ T5916] usb 6-1: SerialNumber: syz
[  233.541662][ T5916] usb 6-1: config 0 descriptor??
[  233.565436][ T5916] usb 6-1: bad CDC descriptors
[  233.793241][  T792] usb 6-1: USB disconnect, device number 4
[  234.846789][ T9872] loop5: detected capacity change from 0 to 256
[  234.891623][ T9872] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  234.895825][ T9872] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  234.948849][ T9872] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  235.600385][ T9868] loop6: detected capacity change from 0 to 32768
[  235.723199][ T9868] (syz.6.1317,9868,1):ocfs2_verify_heartbeat:830 ERROR: Mismatching o2cb heartbeat modes
[  235.736579][ T9876] loop5: detected capacity change from 0 to 4096
[  235.751573][ T9868] (syz.6.1317,9868,1):ocfs2_fill_super:1177 ERROR: status = -22
[  235.756552][ T9638] udevd[9638]: symlink '../../loop6' '/dev/disk/by-uuid/03e7aa51-a951-448e-b9eb-6dd609435e20.tmp-b7:6' failed: Read-only file system
[  235.859393][ T9613] udevd[9613]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  235.865375][ T9613] udevd[9613]: symlink '../../loop5' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:5' failed: Read-only file system
[  236.003584][ T9879] syz.6.1322: attempt to access beyond end of device
[  236.003584][ T9879] nbd6: rw=4096, sector=2, nr_sectors = 2 limit=0
[  236.034592][ T9879] EXT4-fs (nbd6): unable to read superblock
[  236.042944][ T9871] loop3: detected capacity change from 0 to 40427
[  236.080907][ T9871] F2FS-fs (loop3): build fault injection rate: 14
[  236.093110][ T9871] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  236.122672][ T9613] udevd[9613]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system
[  236.127675][ T9871] F2FS-fs (loop3): invalid crc value
[  236.136391][    C1] f2fs_printk: 3 callbacks suppressed
[  236.136402][    C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  236.163728][    C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  236.314347][ T9871] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  236.336671][ T9871] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  236.367310][ T9871] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  236.396341][ T9887] loop5: detected capacity change from 0 to 128
[  236.406030][ T9888] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1325'.
[  236.429233][ T9887] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  236.447031][ T9638] udevd[9638]: symlink '../../loop5' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:5' failed: Read-only file system
[  236.455431][ T9871] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  236.460930][ T9887] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  236.479293][   T33] audit: type=1800 audit(1755043627.860:69): pid=9871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1319" name="file1" dev="loop3" ino=10 res=0 errno=0
[  236.489582][ T9887] EXT4-fs warning (device loop5): verify_group_input:156: Last group not full
[  236.499718][ T9871] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_get_read_data_folio+0xc1/0x7d0
[  236.589418][ T7904] syz-executor: attempt to access beyond end of device
[  236.589418][ T7904] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  236.599177][ T9561] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  236.605896][ T7904] CPU: 1 UID: 0 PID: 7904 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  236.605913][ T7904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  236.605920][ T7904] Call Trace:
[  236.605925][ T7904]  <TASK>
[  236.605930][ T7904]  dump_stack_lvl+0x189/0x250
[  236.605950][ T7904]  ? __pfx_dump_stack_lvl+0x10/0x10
[  236.605960][ T7904]  ? __pfx_queue_work_on+0x10/0x10
[  236.605969][ T7904]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  236.605981][ T7904]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  236.605996][ T7904]  f2fs_handle_critical_error+0x37c/0x540
[  236.606013][ T7904]  f2fs_write_end_io+0x886/0xb60
[  236.606034][ T7904]  __submit_merged_bio+0x27a/0x6a0
[  236.606047][ T7904]  __submit_merged_write_cond+0x255/0x530
[  236.606061][ T7904]  f2fs_write_data_pages+0x261d/0x3000
[  236.606091][ T7904]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  236.606125][ T7904]  ? __mod_zone_page_state+0xd7/0x140
[  236.606143][ T7904]  ? folios_put_refs+0x560/0x640
[  236.606159][ T7904]  ? __lock_acquire+0xab9/0xd20
[  236.606177][ T7904]  ? do_raw_spin_lock+0x121/0x290
[  236.606193][ T7904]  ? do_raw_spin_unlock+0x4d/0x240
[  236.606202][ T7904]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  236.606214][ T7904]  do_writepages+0x32e/0x550
[  236.606232][ T7904]  ? do_raw_spin_unlock+0x4d/0x240
[  236.606243][ T7904]  filemap_fdatawrite+0x199/0x240
[  236.606255][ T7904]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  236.606292][ T7904]  ? do_raw_spin_unlock+0x4d/0x240
[  236.606304][ T7904]  f2fs_sync_dirty_inodes+0x31f/0x830
[  236.606325][ T7904]  f2fs_write_checkpoint+0x95a/0x1df0
[  236.606349][ T7904]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  236.606387][ T7904]  ? kill_f2fs_super+0x298/0x6c0
[  236.606401][ T7904]  kill_f2fs_super+0x2c3/0x6c0
[  236.606415][ T7904]  ? __pfx_kill_f2fs_super+0x10/0x10
[  236.606424][ T7904]  ? radix_tree_delete_item+0x2b6/0x400
[  236.606438][ T7904]  ? shrinker_free+0x2ce/0x3e0
[  236.606448][ T7904]  deactivate_locked_super+0xbc/0x130
[  236.606498][ T7904]  cleanup_mnt+0x425/0x4c0
[  236.606509][ T7904]  ? lockdep_hardirqs_on+0x9c/0x150
[  236.606521][ T7904]  task_work_run+0x1d4/0x260
[  236.606534][ T7904]  ? __pfx_task_work_run+0x10/0x10
[  236.606542][ T7904]  ? __x64_sys_umount+0x122/0x160
[  236.606557][ T7904]  ? exit_to_user_mode_loop+0x40/0x110
[  236.606572][ T7904]  exit_to_user_mode_loop+0xec/0x110
[  236.606583][ T7904]  do_syscall_64+0x2bd/0x3b0
[  236.606592][ T7904]  ? lockdep_hardirqs_on+0x9c/0x150
[  236.606601][ T7904]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.606610][ T7904]  ? exc_page_fault+0x9f/0xf0
[  236.606620][ T7904]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.606628][ T7904] RIP: 0033:0x7f617278ff17
[  236.606638][ T7904] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  236.606646][ T7904] RSP: 002b:00007fff083dfef8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  236.606656][ T7904] RAX: 0000000000000000 RBX: 00007f6172811c05 RCX: 00007f617278ff17
[  236.606661][ T7904] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff083dffb0
[  236.606667][ T7904] RBP: 00007fff083dffb0 R08: 0000000000000000 R09: 0000000000000000
[  236.606672][ T7904] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff083e1040
[  236.606677][ T7904] R13: 00007f6172811c05 R14: 0000000000039b92 R15: 00007fff083e1080
[  236.606692][ T7904]  </TASK>
[  236.606697][ T7904] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  237.550165][ T9892] loop6: detected capacity change from 0 to 32768
[  237.604074][ T9892] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  237.610711][ T9638] udevd[9638]: symlink '../../loop6' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:6' failed: Read-only file system
[  237.661420][ T9892] XFS (loop6): Ending clean mount
[  237.677646][ T9892] XFS (loop6): Quotacheck needed: Please wait.
[  237.730869][ T9892] XFS (loop6): Quotacheck: Done.
[  237.819795][ T9646] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  237.870837][ T9904] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.1333'.
[  239.412805][  T792] wg1 speed is unknown, defaulting to 1000
[  239.416013][  T792] syz0: Port: 1 Link DOWN
[  239.568111][ T5863] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.712662][ T5863] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  239.892012][ T5863] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.053291][ T5863] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.611214][ T5863] bridge_slave_1: left allmulticast mode
[  240.633157][ T5863] bridge_slave_1: left promiscuous mode
[  240.645361][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.702449][ T5863] bridge_slave_0: left allmulticast mode
[  240.704566][ T5863] bridge_slave_0: left promiscuous mode
[  240.713782][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.729632][ T9934] loop6: detected capacity change from 0 to 32768
[  240.873802][ T9934] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode.
[  240.912884][ T9638] udevd[9638]: symlink '../../loop6' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:6' failed: Read-only file system
[  240.980971][ T9646] (syz-executor,9646,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 76
[  241.022438][ T9646] ocfs2: Unmounting device (7,6) on (node local)
[  241.813066][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  241.821495][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  241.828321][ T5863] bond0 (unregistering): Released all slaves
[  241.839262][ T9947] netlink: 10 bytes leftover after parsing attributes in process `syz.5.1345'.
[  242.002536][ T5863] tipc: Disabling bearer <udp:syz2>
[  242.019196][ T5863] tipc: Disabling bearer <udp:s>
[  242.039059][ T9964] loop3: detected capacity change from 0 to 2048
[  242.055921][ T5863] tipc: Left network mode
[  242.114751][ T9964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.171296][ T9638] udevd[9638]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  242.262007][ T5863] IPVS: stopping backup sync thread 6647 ...
[  242.465698][ T9976] pim6reg1: entered allmulticast mode
[  242.522883][ T7904] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.943932][ T5863] hsr_slave_0: left promiscuous mode
[  242.952972][ T5863] hsr_slave_1: left promiscuous mode
[  242.960717][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  242.964075][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  242.984133][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  242.995163][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  243.030257][ T5863] veth1_macvtap: left promiscuous mode
[  243.032248][ T5863] veth0_macvtap: left promiscuous mode
[  243.034339][ T5863] veth1_vlan: left promiscuous mode
[  243.037013][ T5863] veth0_vlan: left promiscuous mode
[  243.980348][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  244.063443][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  244.347122][ T9992] loop6: detected capacity change from 0 to 256
[  244.375091][ T9992] FAT-fs (loop6): Directory bread(block 64) failed
[  244.381122][ T9992] FAT-fs (loop6): Directory bread(block 65) failed
[  244.384010][ T9992] FAT-fs (loop6): Directory bread(block 66) failed
[  244.388104][ T9992] FAT-fs (loop6): Directory bread(block 67) failed
[  244.390973][ T9992] FAT-fs (loop6): Directory bread(block 68) failed
[  244.393831][ T9992] FAT-fs (loop6): Directory bread(block 69) failed
[  244.396749][ T9992] FAT-fs (loop6): Directory bread(block 70) failed
[  244.399453][ T9992] FAT-fs (loop6): Directory bread(block 71) failed
[  244.402146][ T9992] FAT-fs (loop6): Directory bread(block 72) failed
[  244.405380][ T9992] FAT-fs (loop6): Directory bread(block 73) failed
[  244.449750][   T33] audit: type=1800 audit(1755043635.811:70): pid=9992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1361" name="file1" dev="loop6" ino=1048636 res=0 errno=0
[  245.324016][T10012] loop3: detected capacity change from 0 to 256
[  245.443378][T10012] FAT-fs (loop3): Directory bread(block 64) failed
[  245.461204][T10012] FAT-fs (loop3): Directory bread(block 65) failed
[  245.476773][T10012] FAT-fs (loop3): Directory bread(block 66) failed
[  245.478969][T10012] FAT-fs (loop3): Directory bread(block 67) failed
[  245.481098][T10012] FAT-fs (loop3): Directory bread(block 68) failed
[  245.503865][T10012] FAT-fs (loop3): Directory bread(block 69) failed
[  245.507873][T10012] FAT-fs (loop3): Directory bread(block 70) failed
[  245.510244][T10012] FAT-fs (loop3): Directory bread(block 71) failed
[  245.512576][T10012] FAT-fs (loop3): Directory bread(block 72) failed
[  245.523691][T10012] FAT-fs (loop3): Directory bread(block 73) failed
[  246.106065][ T9809] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  246.264289][T10059] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1383'.
[  246.273401][T10059] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1383'.
[  246.278489][T10059] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1383'.
[  246.282971][T10059] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1383'.
[  246.288532][ T9809] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  246.292972][ T9809] usb 4-1: config 0 has an invalid interface number: 4 but max is 0
[  246.302587][ T9809] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  246.322272][ T9809] usb 4-1: config 0 has no interface number 0
[  246.335856][ T9809] usb 4-1: config 0 has no interface number 1
[  246.345113][ T9809] usb 4-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f
[  246.358048][ T9809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.363119][ T9809] usb 4-1: Product: syz
[  246.365073][ T9809] usb 4-1: Manufacturer: syz
[  246.375555][ T9809] usb 4-1: SerialNumber: syz
[  246.381554][ T9809] usb 4-1: config 0 descriptor??
[  246.391407][ T9809] cdc_acm 4-1:0.51: probe with driver cdc_acm failed with error -22
[  246.597609][ T9809] usb 4-1: USB disconnect, device number 6
[  247.050943][T10102] usb usb1: check_ctrlrecip: process 10102 (syz.6.1399) requesting ep 01 but needs 81
[  247.055183][T10102] usb usb1: usbfs: process 10102 (syz.6.1399) did not claim interface 0 before use
[  247.646963][ T5916] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  248.138129][ T5916] usb 7-1: config 0 has an invalid interface number: 105 but max is 0
[  248.141422][ T5916] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  248.145253][ T5916] usb 7-1: config 0 has no interface number 0
[  248.156979][ T5916] usb 7-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28
[  248.160493][ T5916] usb 7-1: New USB device strings: Mfr=5, Product=2, SerialNumber=3
[  248.163550][ T5916] usb 7-1: Product: syz
[  248.165169][ T5916] usb 7-1: Manufacturer: syz
[  248.169910][ T5916] usb 7-1: SerialNumber: syz
[  248.183429][ T5916] usb 7-1: config 0 descriptor??
[  248.189758][ T5916] usb 7-1: Found UVC 0.00 device syz (046c:14e8)
[  248.192218][ T5916] uvcvideo 7-1:0.105: Entity type for entity Output 1 was not initialized!
[  248.200190][ T5916] usb 7-1: Failed to create links for entity 1
[  248.202698][ T5916] usb 7-1: Failed to register entities (-22).
[  248.405051][ T9809] usb 7-1: USB disconnect, device number 2
[  253.510773][T10201] loop3: detected capacity change from 0 to 128
[  253.606148][ T9638] udevd[9638]: symlink '../../loop3' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:3' failed: Read-only file system
[  253.658892][T10201] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  253.691674][T10201] ext4 filesystem being mounted at /195/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  253.792643][T10201] syz.3.1432 (pid 10201) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  254.052013][T10201] fscrypt: Adiantum using implementation "adiantum(xchacha12-generic,aes-fixed-time,nhpoly1305-sse2)"
[  254.161816][ T7904] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  254.512828][T10220] binder: 10219:10220 ioctl c0306201 200000000280 returned -14
[  255.118889][T10233] syz.5.1441: attempt to access beyond end of device
[  255.118889][T10233] nbd5: rw=0, sector=2, nr_sectors = 2 limit=0
[  255.125223][T10233] syz.5.1441: attempt to access beyond end of device
[  255.125223][T10233] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0
[  255.357655][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.360516][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  256.655098][ T5916] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  256.814695][ T5916] usb 4-1: Using ep0 maxpacket: 32
[  256.820920][ T5916] usb 4-1: config 0 has an invalid interface number: 180 but max is 0
[  256.825418][ T5916] usb 4-1: config 0 has no interface number 0
[  256.827982][ T5916] usb 4-1: config 0 interface 180 has no altsetting 0
[  256.844714][ T5916] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0113, bcdDevice=f0.8f
[  256.852530][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.858938][ T5916] usb 4-1: Product: syz
[  256.861362][ T5916] usb 4-1: Manufacturer: syz
[  256.863132][ T5916] usb 4-1: SerialNumber: syz
[  256.871605][ T5916] usb 4-1: config 0 descriptor??
[  257.030417][T10270] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1458'.
[  257.085839][ T5916] kvaser_usb 4-1:0.180: error -ENODEV: Cannot get usb endpoint(s)
[  257.130409][T10274] loop6: detected capacity change from 0 to 4096
[  257.168672][T10276] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  257.177759][ T9638] udevd[9638]: symlink '../../loop6' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:6' failed: Read-only file system
[  257.200260][T10274] NILFS error (device loop6): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  257.234250][T10274] Remounting filesystem read-only
[  257.300451][ T5900] usb 4-1: USB disconnect, device number 7
[  257.337927][T10279] loop5: detected capacity change from 0 to 164
[  257.375189][ T9613] udevd[9613]: symlink '../../loop5' '/dev/disk/by-label/CDROM.tmp-b7:5' failed: Read-only file system
[  257.381049][ T9613] udevd[9613]: symlink '../../loop5' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:5' failed: Read-only file system
[  257.530749][T10281] loop6: detected capacity change from 0 to 4096
[  257.564004][ T9638] udevd[9638]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  257.588771][ T9638] udevd[9638]: symlink '../../loop6' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:6' failed: Read-only file system
[  258.536506][ T5900] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  258.693152][ T5900] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  258.697172][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.700443][ T5900] usb 4-1: Product: syz
[  258.702358][ T5900] usb 4-1: Manufacturer: syz
[  258.704595][ T5900] usb 4-1: SerialNumber: syz
[  258.710368][ T5900] usb 4-1: config 0 descriptor??
[  258.770315][ T9613] udevd[9613]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: Read-only file system
[  258.925515][ T5916] usb 4-1: USB disconnect, device number 8
[  258.961802][T10324] loop6: detected capacity change from 0 to 16
[  258.974415][T10324] erofs (device loop6): mounted with root inode @ nid 36.
[  258.995998][ T9638] udevd[9638]: symlink '../../loop6' '/dev/disk/by-uuid/75500962-132d-43aa-bb98-c3833f701d6f.tmp-b7:6' failed: Read-only file system
[  259.421019][T10332] netlink: 'syz.6.1477': attribute type 3 has an invalid length.
[  259.424488][T10332] netlink: 'syz.6.1477': attribute type 3 has an invalid length.
[  259.443857][T10332] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1477'.
[  259.472950][T10333] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1477'.
[  259.778553][T10338] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1481'.
[  261.274343][T10358] loop3: detected capacity change from 0 to 32768
[  261.351236][ T9638] udevd[9638]: symlink '../../loop3' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:3' failed: Read-only file system
[  261.591856][T10364] loop5: detected capacity change from 0 to 131072
[  261.622991][T10364] F2FS-fs (loop5): invalid crc value
[  261.690698][T10364] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  261.696095][T10364] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  261.708261][ T9638] udevd[9638]: symlink '../../loop5' '/dev/disk/by-uuid/36fde3fc-a519-493c-8baa-e32931e9a89c.tmp-b7:5' failed: Read-only file system
[  261.799506][T10366] loop6: detected capacity change from 0 to 32768
[  261.803213][T10366] XFS: ikeep mount option is deprecated.
[  261.859792][ T9638] udevd[9638]: symlink '../../loop6' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:6' failed: Read-only file system
[  261.888398][T10366] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  261.987679][T10366] XFS (loop6): Ending clean mount
[  261.999234][T10366] XFS (loop6): Quotacheck needed: Please wait.
[  262.111728][T10366] XFS (loop6): Quotacheck: Done.
[  262.239809][T10383] loop3: detected capacity change from 0 to 32768
[  262.249367][T10383] (syz.3.1494,10383,0):ocfs2_verify_volume:2312 ERROR: bad cluster size bit found: 8
[  262.253258][T10383] (syz.3.1494,10383,0):ocfs2_verify_volume:2331 ERROR: status = -22
[  262.257337][T10383] (syz.3.1494,10383,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  262.261273][T10383] (syz.3.1494,10383,0):ocfs2_fill_super:1177 ERROR: status = -22
[  262.286997][ T9638] udevd[9638]: symlink '../../loop3' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:3' failed: Read-only file system
[  262.470947][ T9646] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  262.533824][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  263.102725][T10394] loop3: detected capacity change from 0 to 32768
[  263.120360][T10394] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section replicas_v0: no devices in entry btree: 1/0 []
[  263.120360][T10394] replicas_v0 (size 24):
[  263.120360][T10394] btree: 0 [] (unknown data_type 16): 2 [1 0] user: 1 [0]
[  263.120360][T10394] 
[  263.182987][T10394] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  263.488579][T10401] loop5: detected capacity change from 0 to 32768
[  263.503188][T10401] jfs_mount: Mount Failure: superblock is corrupt!
[  263.519438][T10401] Mount JFS Failure: -22
[  263.533223][T10401] jfs_mount failed w/return code = -22
[  264.289851][ T5900] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  264.456805][ T5900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  264.461108][ T5900] usb 4-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53
[  264.476233][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.482704][ T5900] usb 4-1: config 0 descriptor??
[  264.498819][ T5900] option 4-1:0.0: GSM modem (1-port) converter detected
[  264.626596][T10441] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  264.631224][ T5916] IPVS: starting estimator thread 0...
[  264.717561][ T5900] usb 4-1: USB disconnect, device number 9
[  264.735794][ T5900] option 4-1:0.0: device disconnected
[  264.774961][T10443] IPVS: using max 33 ests per chain, 79200 per kthread
[  265.063813][ T5916] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  265.213577][ T5916] usb 6-1: Using ep0 maxpacket: 8
[  265.221667][ T5916] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  265.227106][ T5916] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  265.230827][ T5916] usb 6-1: config 1 has no interface number 1
[  265.234006][ T5916] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  265.241799][ T5916] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  265.247268][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.262687][ T5916] usb 6-1: Product: syz
[  265.266329][ T5916] usb 6-1: Manufacturer: syz
[  265.268425][ T5916] usb 6-1: SerialNumber: syz
[  265.390041][T10462] loop3: detected capacity change from 0 to 128
[  265.409328][ T9613] udevd[9613]: symlink '../../loop3' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:3' failed: Read-only file system
[  265.420501][T10462] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  265.427949][T10462] ext4 filesystem being mounted at /217/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  265.499632][T10465] EXT4-fs (loop3): shut down requested (1)
[  265.501203][ T5916] usb 6-1: 2:1: invalid format type 0xbd67 is detected, processed as PCM
[  265.518917][ T5916] usb 6-1: 2:1: cannot set freq 9540521 to ep 0x82
[  265.519643][T10462] EXT4-fs (loop3): ext4_do_writepages: jbd2_start: 9223372036854775805 pages, ino 12; err -5
[  265.570729][ T5916] usb 6-1: USB disconnect, device number 5
[  265.586213][ T7904] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  265.701118][T10467] udevd[10467]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  265.764065][T10471] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1514'.
[  266.041781][T10474] loop6: detected capacity change from 0 to 32768
[  266.054673][T10474] XFS: ikeep mount option is deprecated.
[  266.082389][T10474] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  266.114063][ T9638] udevd[9638]: symlink '../../loop6' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:6' failed: Read-only file system
[  266.166560][T10474] XFS (loop6): Ending clean mount
[  266.180128][T10474] XFS (loop6): Quotacheck needed: Please wait.
[  266.252995][T10474] XFS (loop6): Quotacheck: Done.
[  266.294531][   T33] audit: type=1800 audit(1755043657.683:71): pid=10474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1515" name="file1" dev="loop6" ino=9286 res=0 errno=0
[  266.751939][T10500] overlayfs: invalid redirect (./file0)
[  266.818033][ T9646] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  266.920979][ T5887] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  267.073636][ T5887] usb 6-1: Using ep0 maxpacket: 32
[  267.077636][ T5887] usb 6-1: config 0 interface 0 has no altsetting 0
[  267.081638][ T5887] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  267.085162][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.087672][ T5887] usb 6-1: Product: syz
[  267.088925][ T5887] usb 6-1: Manufacturer: syz
[  267.090297][ T5887] usb 6-1: SerialNumber: syz
[  267.108476][ T5887] usb 6-1: config 0 descriptor??
[  267.131813][T10512] loop6: detected capacity change from 0 to 512
[  267.154579][T10512] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  267.162902][ T9613] udevd[9613]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  267.171888][T10514] GUP no longer grows the stack in syz.3.1528 (10514): 200000005000-200000008000 (200000004000)
[  267.178675][T10514] CPU: 1 UID: 0 PID: 10514 Comm: syz.3.1528 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  267.178704][T10514] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  267.178716][T10514] Call Trace:
[  267.178725][T10514]  <TASK>
[  267.178732][T10514]  dump_stack_lvl+0x189/0x250
[  267.178765][T10514]  ? __pfx_dump_stack_lvl+0x10/0x10
[  267.178805][T10514]  ? __pfx__printk+0x10/0x10
[  267.178827][T10514]  ? find_vma+0xe7/0x160
[  267.178858][T10514]  fixup_user_fault+0x661/0x720
[  267.178885][T10514]  fault_in_user_writeable+0x72/0xe0
[  267.178903][T10514]  futex_lock_pi+0x773/0xa90
[  267.178931][T10514]  ? __pfx_futex_lock_pi+0x10/0x10
[  267.178968][T10514]  ? futex_private_hash_put+0x4b/0x280
[  267.178988][T10514]  ? __pfx_futex_wake_mark+0x10/0x10
[  267.179015][T10514]  ? __lock_acquire+0xab9/0xd20
[  267.179050][T10514]  do_futex+0x292/0x420
[  267.179071][T10514]  ? __pfx_do_futex+0x10/0x10
[  267.179097][T10514]  ? bpf_trace_run2+0x322/0x4b0
[  267.179126][T10514]  __se_sys_futex+0x36f/0x400
[  267.179150][T10514]  ? __pfx___se_sys_futex+0x10/0x10
[  267.179171][T10514]  ? rcu_is_watching+0x15/0xb0
[  267.179186][T10514]  ? trace_sys_enter+0x25/0x100
[  267.179207][T10514]  ? __x64_sys_futex+0x21/0xf0
[  267.179227][T10514]  do_syscall_64+0xfa/0x3b0
[  267.179247][T10514]  ? lockdep_hardirqs_on+0x9c/0x150
[  267.179296][T10514]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.179314][T10514]  ? exc_page_fault+0x9f/0xf0
[  267.179335][T10514]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  267.179352][T10514] RIP: 0033:0x7f617278ebe9
[  267.179369][T10514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  267.179385][T10514] RSP: 002b:00007f617366e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  267.179404][T10514] RAX: ffffffffffffffda RBX: 00007f61729b5fa0 RCX: 00007f617278ebe9
[  267.179415][T10514] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000
[  267.179425][T10514] RBP: 00007f6172811e19 R08: 0000000000000000 R09: 0000000000000000
[  267.179435][T10514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  267.179444][T10514] R13: 00007f61729b6038 R14: 00007f61729b5fa0 R15: 00007fff083e0c68
[  267.179472][T10514]  </TASK>
[  267.275951][T10512] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1527: invalid indirect mapped block 4294967295 (level 1)
[  267.287393][T10512] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1527: invalid indirect mapped block 4294967295 (level 1)
[  267.294150][T10512] EXT4-fs (loop6): 2 truncates cleaned up
[  267.297514][T10512] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.338559][ T9646] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.424654][T10524] netlink: 'syz.3.1532': attribute type 15 has an invalid length.
[  267.519202][ T5887] gs_usb 6-1:0.0: Configuring for 1 interfaces
[  267.713396][ T5915] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  267.865485][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  267.873206][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  267.879338][ T5915] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  267.884595][ T5915] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  267.888203][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.896309][ T5915] usb 7-1: config 0 descriptor??
[  267.926523][ T5887] gs_usb 6-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO)
[  267.937697][ T5887] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71
[  267.953917][T10536] loop3: detected capacity change from 0 to 32768
[  267.954346][ T5887] usb 6-1: USB disconnect, device number 6
[  267.978631][T10536] syz.3.1538: attempt to access beyond end of device
[  267.978631][T10536] loop3: rw=0, sector=153240, nr_sectors = 8 limit=32768
[  267.994190][T10536] lbmIODone: I/O error in JFS log
[  267.998190][T10536] syz.3.1538: attempt to access beyond end of device
[  267.998190][T10536] loop3: rw=2049, sector=153240, nr_sectors = 8 limit=32768
[  268.004951][T10536] lbmIODone: I/O error in JFS log
[  268.005314][ T9613] udevd[9613]: symlink '../../loop3' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:3' failed: Read-only file system
[  268.008054][T10536] lmLogInit: exit(-5)
[  268.015484][T10536] lmLogOpen: exit(-5)
[  268.017353][T10536] jfs_mount_rw failed, return code = -5
[  268.328443][ T9638] udevd[9638]: setting mode of /dev/usb/hiddev0 to 020600 failed: Read-only file system
[  268.330585][ T5915] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  268.332101][ T9638] udevd[9638]: setting owner of /dev/usb/hiddev0 to uid=0, gid=0 failed: Read-only file system
[  268.356315][ T9613] udevd[9613]: setting mode of /dev/hidraw0 to 020600 failed: Read-only file system
[  268.365041][ T9613] udevd[9613]: setting owner of /dev/hidraw0 to uid=0, gid=0 failed: Read-only file system
[  268.448890][T10549] loop3: detected capacity change from 0 to 512
[  268.460256][ T9638] udevd[9638]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  268.498228][T10549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.502938][T10549] ext4 filesystem being mounted at /238/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  268.521588][ T5915] usb 7-1: USB disconnect, device number 3
[  268.579751][ T7904] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.716031][T10563] loop3: detected capacity change from 0 to 8
[  268.737620][T10563] SQUASHFS error: Corrupted symlink
[  269.039479][T10568] loop3: detected capacity change from 0 to 32768
[  269.158739][T10585] tipc: Can't bind to reserved service type 2
[  269.429927][T10592] loop6: detected capacity change from 0 to 32768
[  269.436009][T10592] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1564 (10592)
[  269.457693][T10592] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  269.461114][T10592] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  269.464167][T10592] BTRFS info (device loop6): using free-space-tree
[  269.599451][T10617] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1559'.
[  270.018372][T10628] loop3: detected capacity change from 0 to 512
[  270.021194][T10628] EXT4-fs: Ignoring removed mblk_io_submit option
[  270.025805][T10628] EXT4-fs: inline encryption not supported
[  270.029901][T10628] EXT4-fs: Ignoring removed mblk_io_submit option
[  270.033547][T10628] EXT4-fs (loop3): Test dummy encryption mode enabled
[  270.036141][T10628] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  270.042457][T10628] EXT4-fs (loop3): 1 truncate cleaned up
[  270.046818][T10628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  270.081368][ T7904] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.198099][ T9646] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  270.625971][ T9831] printk: udevd: 14 output lines suppressed due to ratelimiting
[  271.030440][T10652] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1583'.
[  271.387218][T10647] loop5: detected capacity change from 0 to 32768
[  271.388871][T10657] loop6: detected capacity change from 0 to 1024
[  271.390489][T10647] XFS: attr2 mount option is deprecated.
[  271.397822][T10647] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  271.416994][T10657] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  271.423523][T10647] XFS (loop5): Ending clean mount
[  271.459908][ T9561] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  271.706597][ T9646] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  271.732290][ T9646] EXT4-fs error (device loop6): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  271.784902][T10671] vxcan3: entered allmulticast mode
[  271.988608][ T9646] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.002516][ T5863] bridge_slave_1: left allmulticast mode
[  272.005522][ T5863] bridge_slave_1: left promiscuous mode
[  272.009383][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.041493][ T5863] bridge_slave_0: left allmulticast mode
[  272.044736][ T5863] bridge_slave_0: left promiscuous mode
[  272.047118][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.066684][T10684] loop5: detected capacity change from 0 to 256
[  272.070150][T10684] exfat: Deprecated parameter 'namecase'
[  272.083385][T10684] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  272.637297][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  272.664479][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  272.669326][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  272.673931][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  272.677690][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  272.803045][T10691] loop5: detected capacity change from 0 to 32768
[  272.925189][T10691] JBD2: Ignoring recovery information on journal
[  272.927440][T10691] JBD2: corrupted journal superblock
[  272.929291][T10691] JBD2: error -117 scanning journal
[  272.931131][T10691] (syz.5.1599,10691,1):ocfs2_journal_wipe:1216 ERROR: status = -117
[  272.934926][T10691] (syz.5.1599,10691,1):ocfs2_check_volume:2363 ERROR: status = -117
[  272.938156][T10691] (syz.5.1599,10691,1):ocfs2_check_volume:2432 ERROR: status = -117
[  272.941434][T10691] (syz.5.1599,10691,1):ocfs2_mount_volume:1764 ERROR: status = -117
[  273.006442][T10691] (syz.5.1599,10691,1):ocfs2_fill_super:1177 ERROR: status = -117
[  273.050354][ T5863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  273.057094][ T5863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  273.064733][ T5863] bond0 (unregistering): Released all slaves
[  273.401643][ T5863] hsr_slave_0: left promiscuous mode
[  273.405218][ T5863] hsr_slave_1: left promiscuous mode
[  273.408098][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  273.411285][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_0
[  273.416235][ T5863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  273.419851][ T5863] batman_adv: batadv0: Removing interface: batadv_slave_1
[  273.439686][ T5863] veth1_macvtap: left promiscuous mode
[  273.441640][ T5863] veth0_macvtap: left promiscuous mode
[  273.445031][ T5863] veth1_vlan: left promiscuous mode
[  273.447350][ T5863] veth0_vlan: left promiscuous mode
[  273.503526][ T5887] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  273.565326][T10709] loop3: detected capacity change from 0 to 128
[  273.664127][ T5887] usb 6-1: Using ep0 maxpacket: 16
[  273.692070][ T5887] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[  273.696366][ T5887] usb 6-1: config 0 has no interface number 0
[  273.698559][ T5887] usb 6-1: config 0 interface 41 has no altsetting 0
[  273.708685][ T5887] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  273.712172][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.731001][ T5887] usb 6-1: Product: syz
[  273.737594][ T5887] usb 6-1: Manufacturer: syz
[  273.739352][ T5887] usb 6-1: SerialNumber: syz
[  273.744837][ T5887] usb 6-1: config 0 descriptor??
[  273.750327][ T5887] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -22
[  273.955223][ T5887] usb 6-1: USB disconnect, device number 7
[  274.210189][ T5863] team0 (unregistering): Port device team_slave_1 removed
[  274.270507][ T5863] team0 (unregistering): Port device team_slave_0 removed
[  274.441401][ T7853] kworker/u10:21: attempt to access beyond end of device
[  274.441401][ T7853] loop3: rw=1, sector=153, nr_sectors = 8 limit=128
[  274.447316][ T7853] kworker/u10:21: attempt to access beyond end of device
[  274.447316][ T7853] loop3: rw=1, sector=169, nr_sectors = 8 limit=128
[  274.461068][ T7853] kworker/u10:21: attempt to access beyond end of device
[  274.461068][ T7853] loop3: rw=1, sector=185, nr_sectors = 8 limit=128
[  274.467949][ T7853] kworker/u10:21: attempt to access beyond end of device
[  274.467949][ T7853] loop3: rw=1, sector=201, nr_sectors = 8 limit=128
[  274.474528][ T7853] kworker/u10:21: attempt to access beyond end of device
[  274.474528][ T7853] loop3: rw=1, sector=217, nr_sectors = 8 limit=128
[  274.481811][ T7853] kworker/u10:21: attempt to access beyond end of device
[  274.481811][ T7853] loop3: rw=1, sector=233, nr_sectors = 8 limit=128
[  274.503408][ T7853] kworker/u10:21: attempt to access beyond end of device
[  274.503408][ T7853] loop3: rw=1, sector=249, nr_sectors = 8 limit=128
[  274.509507][ T7853] kworker/u10:21: attempt to access beyond end of device
[  274.509507][ T7853] loop3: rw=1, sector=265, nr_sectors = 8 limit=128
[  274.515350][ T7853] kworker/u10:21: attempt to access beyond end of device
[  274.515350][ T7853] loop3: rw=1, sector=281, nr_sectors = 8 limit=128
[  274.520872][ T7853] kworker/u10:21: attempt to access beyond end of device
[  274.520872][ T7853] loop3: rw=1, sector=297, nr_sectors = 8 limit=128
[  274.772461][ T5236] Bluetooth: hci0: command tx timeout
[  275.121536][T10723] netlink: 'syz.5.1610': attribute type 6 has an invalid length.
[  275.132740][T10696] chnl_net:caif_netlink_parms(): no params data found
[  275.287249][T10696] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.290411][T10696] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.303604][T10696] bridge_slave_0: entered allmulticast mode
[  275.308195][T10696] bridge_slave_0: entered promiscuous mode
[  275.353896][T10696] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.372364][T10696] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.376002][T10696] bridge_slave_1: entered allmulticast mode
[  275.379994][T10696] bridge_slave_1: entered promiscuous mode
[  275.866763][T10696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  275.873747][T10696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  275.950092][T10696] team0: Port device team_slave_0 added
[  275.957102][T10696] team0: Port device team_slave_1 added
[  276.026342][T10696] batman_adv: batadv0: Adding interface: batadv_slave_0
[  276.029385][T10696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.051174][T10734] loop5: detected capacity change from 0 to 32768
[  276.059349][T10696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  276.067937][T10696] batman_adv: batadv0: Adding interface: batadv_slave_1
[  276.070886][T10696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  276.112239][T10696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  276.135825][ T5863] IPVS: stop unused estimator thread 0...
[  276.144330][   T33] audit: type=1800 audit(1755043667.474:72): pid=10734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1613" name="file1" dev="loop5" ino=7 res=0 errno=0
[  276.249190][T10696] hsr_slave_0: entered promiscuous mode
[  276.254980][T10696] hsr_slave_1: entered promiscuous mode
[  276.436398][T10734] ERROR: (device loop5): dbAdjCtl: the maximum free buddy is not the old root
[  276.436398][T10734] 
[  276.444922][T10734] ERROR: (device loop5): remounting filesystem as read-only
[  276.559164][T10696] 8021q: adding VLAN 0 to HW filter on device bond0
[  276.567560][ T9561] ------------[ cut here ]------------
[  276.569914][ T9561] kernel BUG at fs/jfs/inode.c:169!
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  276.583902][T10696] 8021q: adding VLAN 0 to HW filter on device team0
[  276.587566][ T9561] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  276.589889][ T9561] CPU: 1 UID: 0 PID: 9561 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  276.594483][ T9561] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  276.598941][ T9561] RIP: 0010:jfs_evict_inode+0x438/0x440
[  276.601425][ T9561] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 b3 f5 e8 fe e9 16 fe ff ff e8 39 8b 85 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  276.608337][T10696] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  276.609251][ T9561] RSP: 0018:ffffc9000447fae0 EFLAGS: 00010293
[  276.613832][T10696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  276.615915][ T9561] RAX: ffffffff833a2077 RBX: ffff88803846e060 RCX: ffff88801f1a0000
[  276.622733][ T9561] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88803846e060
[  276.626022][ T9561] RBP: 0000000000000001 R08: ffffffff8fa34237 R09: 1ffffffff1f46846
[  276.629474][ T9561] R10: dffffc0000000000 R11: ffffffff8339fd70 R12: dffffc0000000000
[  276.632829][ T9561] R13: dffffc0000000000 R14: ffff88803846dce8 R15: ffffffff833a1c40
[  276.636013][ T9561] FS:  0000555586bf9500(0000) GS:ffff8881a3c24000(0000) knlGS:0000000000000000
[  276.639454][ T9561] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  276.642157][ T9561] CR2: fffffffffffffffd CR3: 0000000037f64000 CR4: 00000000000006f0
[  276.645614][ T9561] Call Trace:
[  276.647038][ T9561]  <TASK>
[  276.648350][ T9561]  ? evict+0x4f8/0x9c0
[  276.650194][ T9561]  ? __pfx_jfs_evict_inode+0x10/0x10
[  276.652376][ T9561]  evict+0x504/0x9c0
[  276.653986][ T9561]  ? __pfx_evict+0x10/0x10
[  276.655789][ T9561]  ? do_raw_spin_unlock+0x4d/0x240
[  276.657871][ T9561]  evict_inodes+0x64c/0x6d0
[  276.659848][ T9561]  ? __pfx_evict_inodes+0x10/0x10
[  276.662112][ T9561]  generic_shutdown_super+0x9a/0x2c0
[  276.664451][ T9561]  kill_block_super+0x44/0x90
[  276.666484][ T9561]  deactivate_locked_super+0xbc/0x130
[  276.668708][ T9561]  cleanup_mnt+0x425/0x4c0
[  276.670495][ T9561]  ? lockdep_hardirqs_on+0x9c/0x150
[  276.672557][ T9561]  task_work_run+0x1d4/0x260
[  276.674483][ T9561]  ? __pfx_task_work_run+0x10/0x10
[  276.676635][ T9561]  ? __x64_sys_umount+0x122/0x160
[  276.678886][ T9561]  ? exit_to_user_mode_loop+0x40/0x110
[  276.681176][ T9561]  exit_to_user_mode_loop+0xec/0x110
[  276.683426][ T9561]  do_syscall_64+0x2bd/0x3b0
[  276.685361][ T9561]  ? lockdep_hardirqs_on+0x9c/0x150
[  276.687528][ T9561]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.690292][ T9561]  ? exc_page_fault+0x9f/0xf0
[  276.692475][ T9561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.695166][ T9561] RIP: 0033:0x7f3c1118ff17
[  276.697067][ T9561] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  276.704952][ T9561] RSP: 002b:00007ffd31a7bd68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  276.708739][ T9561] RAX: 0000000000000000 RBX: 00007f3c11211c05 RCX: 00007f3c1118ff17
[  276.712263][ T9561] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd31a7be20
[  276.715546][ T9561] RBP: 00007ffd31a7be20 R08: 0000000000000000 R09: 0000000000000000
[  276.718998][ T9561] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd31a7ceb0
[  276.722547][ T9561] R13: 00007f3c11211c05 R14: 00000000000437b4 R15: 00007ffd31a7cef0
[  276.726061][ T9561]  </TASK>
[  276.727406][ T9561] Modules linked in:
[  276.729900][ T9561] ---[ end trace 0000000000000000 ]---
[  276.746562][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.750241][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  276.754070][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.756455][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  276.772738][ T9561] RIP: 0010:jfs_evict_inode+0x438/0x440
[  276.774934][ T9561] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 b3 f5 e8 fe e9 16 fe ff ff e8 39 8b 85 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  276.784610][ T9561] RSP: 0018:ffffc9000447fae0 EFLAGS: 00010293
[  276.787287][ T9561] RAX: ffffffff833a2077 RBX: ffff88803846e060 RCX: ffff88801f1a0000
[  276.790535][ T9561] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88803846e060
[  276.794327][ T9561] RBP: 0000000000000001 R08: ffffffff8fa34237 R09: 1ffffffff1f46846
[  276.801617][ T9561] R10: dffffc0000000000 R11: ffffffff8339fd70 R12: dffffc0000000000
[  276.824036][ T9561] R13: dffffc0000000000 R14: ffff88803846dce8 R15: ffffffff833a1c40
[  276.827758][ T9561] FS:  0000555586bf9500(0000) GS:ffff8881a3c24000(0000) knlGS:0000000000000000
[  276.831509][ T9561] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  276.834895][ T9561] CR2: fffffffffffffffd CR3: 0000000037f64000 CR4: 00000000000006f0
[  276.851965][ T9561] Kernel panic - not syncing: Fatal exception
[  276.855509][ T9561] Kernel Offset: disabled
[  276.857486][ T9561] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:24:52  Registers:
info registers vcpu 0

CPU#0
RAX=9f449678488cfb00 RBX=ffffffff81968308 RCX=9f449678488cfb00 RDX=0000000000000001
RSI=ffffffff8d9b4408 RDI=ffffffff8be32600 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa34230 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7893f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=fffffffffffffffd CR3=00000000273fa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f6172812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff110036de188 RBX=ffffffff822aa0e9 RCX=0000000000000001 RDX=0000000000000000
RSI=ffffffff8be325e0 RDI=ffffea000455ec40 RBP=0000000000000011 RSP=ffffc9000334f508
R8 =0000000000000000 R9 =ffffffff822aa0e9 R10=dffffc0000000000 R11=fffff940008abd8f
R12=ffff88801b6f0c40 R13=00000000ffffffff R14=dffffc0000000000 R15=ffff88813fff7400
RIP=ffffffff822aa19c RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f342ece7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f342e1876c3 00007f342e1876c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=000055558323c5f8 000055558323c5a0
XMM06=0000000000000000 0000000000000000 XMM07=ae03000000000000 0000000000000001
XMM08=ffffffffffffffff e508109403028002 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
