last executing test programs:

1m24.05541667s ago: executing program 1 (id=108):
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b0f2b5aa40bf85edaca83000000"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0x0, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
readv(r1, &(0x7f0000000480)=[{&(0x7f0000001580)=""/4091, 0x18}], 0x1)
ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x3)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)

1m21.579923646s ago: executing program 1 (id=118):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000007000000040000000100008f"], 0x0, 0x47, 0x0, 0x1, 0x100}, 0x28)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2}, {0x0, [0x0]}}, &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20)

1m21.44273745s ago: executing program 1 (id=119):
r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_current(r0, &(0x7f0000000040)=@profile={'permprofile ', '&\x00\x00\x02'}, 0x10)

1m21.340568244s ago: executing program 1 (id=122):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@minixdf}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file2\x00', 0x42, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
chdir(&(0x7f00000001c0)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x141042, 0x100)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0)

1m21.177731401s ago: executing program 1 (id=124):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00')
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})

1m20.923275278s ago: executing program 1 (id=128):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80)

1m20.718367925s ago: executing program 32 (id=128):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80)

47.671931656s ago: executing program 3 (id=546):
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141902)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)

47.67176212s ago: executing program 3 (id=547):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r0, 0x89fd, &(0x7f0000000000))

47.600827588s ago: executing program 3 (id=548):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000000)="0000000009800089", 0x8)

47.600606174s ago: executing program 3 (id=549):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="757466383d302c696f636861727365743d69736f383835392d312c666d61736b3d30303030303030303030303030303030303030303036362c756e695f786c6174653d312c756e695f786c6174653d302c726f6469722c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d302c757466383d312c73686f72746e616d653d77696e39352c726f6469722c6e66733d6e6f7374616c655f726f2c726f6469722c757466383d312c73686f72746e616d653d77696e6e742c636865636b3d72656c617865642c00c63b831754d4eeec4cf38c28cf1e3409b9950bbab09abe8d407d1c7c935e034461a37ac3113829124efad15a202673b20ad011cb0f0cedb0cef9f6ec5e2634db26ef8581fd506844d0133ac021c0172b4b36a109949512e8dc6a8c7d603e3ef3cd57451eaee1b0e4804b9ea88fcad7afb59594dcfeaf8d34935fa0e54a36c57d964429e7ec869287810e5d97759017ace0c3f5"], 0x6, 0x2c3, &(0x7f0000000900)="$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")
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x8080)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0))
ptrace$cont(0x20, r0, 0x0, 0x0)

47.524860351s ago: executing program 3 (id=551):
mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000004000/0x2000)=nil, 0x4000)

47.260599853s ago: executing program 3 (id=554):
r0 = socket$inet6(0xa, 0x80002, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000840)='./bus\x00', 0x210052, &(0x7f0000000b40)=ANY=[@ANYBLOB='debug,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dots,dots,check=relaxed,dots,nodots,errors=continue,showexec,dots,dots,codepage=860,dots,nocase,codepage=936,check=relaxed,nodots,fmask=00000000000000000000002,umask=00000000000000000000005,uid=', @ANYRESHEX=0x0, @ANYRES16, @ANYRESDEC=0x0, @ANYBLOB=',context=system_u,ro,audit,subj_role=,hash,\x00'], 0x5, 0x1c7, &(0x7f0000000500)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00)

47.116631359s ago: executing program 33 (id=554):
r0 = socket$inet6(0xa, 0x80002, 0x0)
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000840)='./bus\x00', 0x210052, &(0x7f0000000b40)=ANY=[@ANYBLOB='debug,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dots,dots,check=relaxed,dots,nodots,errors=continue,showexec,dots,dots,codepage=860,dots,nocase,codepage=936,check=relaxed,nodots,fmask=00000000000000000000002,umask=00000000000000000000005,uid=', @ANYRESHEX=0x0, @ANYRES16, @ANYRESDEC=0x0, @ANYBLOB=',context=system_u,ro,audit,subj_role=,hash,\x00'], 0x5, 0x1c7, &(0x7f0000000500)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00)

28.644423266s ago: executing program 0 (id=759):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xac, 0x6, 0x0, 0xfffffffc}, {0x6, 0x0, 0x3, 0x7fff7ffc}]})

28.564688987s ago: executing program 0 (id=760):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0)

28.564514291s ago: executing program 0 (id=761):
syz_usb_connect(0x3, 0x51, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010102dd8a7a20670812980f240102030109023f0001f40820100904"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})

27.354151571s ago: executing program 0 (id=774):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000400)={[{@force}, {@nodecompose}, {@nobarrier}, {@nls={'nls', 0x3d, 'koi8-u'}}, {@part={'part', 0x3d, 0xff}}, {}, {@nobarrier}, {@nobarrier}]}, 0x3, 0x6b3, &(0x7f0000000780)="$eJzs3U9sHFcdB/DvbDbrbJBSt03TgJBiNVIFjUjsrEqChNSAEMohQhFcerUSp7HipJXjorRCZAMUJE6cUA8cilA49IQQQionRDkjIXHhlHskbhxyAIzmz9pre+PYieN1289Hmp03+96895tf5s/ubKwJ8Jl1/vXs76fI+RMXbpXL9+72Fu7d7V0flJNMJGkl7XqWopsUHyfnUk/5fPlm013xsHFevf9R0X7/w1691G6mqn1rs/U2GNmynxxYWdiXZKou/mcLHbZG91dNVT+XVvt7TMVK3GXCjg8SB+O2vEF/tXLUobHW1o9bYM+6XV83N5hMDqa+upafA9KcHR59Zhi/Tc9N/d2LAwAAAJ6Wkd/lhz3zIA9yK4d2JxwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4dCjqZwYWzdQalKdSDJ7/3xl6pn5nzOE+ofeuVLPvPjPuQAAAAAAAAADgiRx7kAe5lUOD5eWi+s3/pWrhcPX6ubydm5nLYk7mVmazlKUsZibJ5FBHnVuzS0uLMxvX/GXKNZeXl283a54euebptXH11wc66n8abGgEAAAAAAAAAJ9ZP8r51d//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgLyiSffWsmg4PypNptZMcSNIpplaad8Ya7A7487gDAAAAgKev28wPFf+rC8tF9Z3/SPW9/0Dezo0sZT5LWchcLlf3Aupv/a2/93sL9+72rpfTxo6/8a9txVH1mPrew+iRp6sWL6yscT7fzvdyIlO5mMXM5/uZzVLmMpVvVaXZFJls7l5M3rvbzSDWjfGeW7N0cX1sx4bKZXxHq0i6uZL5KraTudQZhN5q2h0dGu2PnWTdiHfK7BSvNbaYo8vNvNyiXzTzvWGy2vL9KxmZbnJfZuPZ4bxvzP0295P1I82ktXIP6vDqKOXi+pEeK+cHm3mZ658+3Zxv81ba2kz0f14uDfa+I5vnPPnyP/5y8WrrxrWrV26e2Du70WNav0/0hjLx4pYysVBmov8EmTjwJPHvnE6Tjfosur2z5UvVuocyn+/kzVzOXM5kOjM5m+l8LafTy+mhvL6weV6rY621vWPt+JeaQnlN+tnQtWnXTDysoszrs0N5HT7TTVZ1w++sZum5LWSp6GR0lv45MpT2F5pCOcaPh64447c+EzNDmXh+80z8+r/LSW4u3Li2eHX2rS2O93IzLw/b99aem3+zIxu0fc3mlvvLc+U/VurLxvDeUdY9P6hbl69O84tLu+lsTV0n1fFc1z3qSC17OnJnVE913YsjR+lVdUeH6tZ8ysmbWVj5FNLY9YMUgC04+MrBTvd+92/dD7o/6V7tXjjwzYmzE1/sZP9f23/a97vWb1tfL17JB/lhDo07UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+DS4+c6712YXFuYW92AhrR3u8M7IqkEq6nc6I9ocyx7IxiejMLHZHvX71I9resjqnXHE3M1D49ndQtq7MNZERlRdWHmnm7RW4klybY884A54Gk4tXX/r1M133v3K/PXZN+bemLtx+uyZ1870vjpz+9SV+YW56fq1adwec7DAjlr9GDDuSAAAAAAAAAAAAICt2o0/bxgxbNEfw7YCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAn0znX8/+forMTJ+cLpfv3e0tlNOgvNqynaSVpPhBUnycnEs9ZXKou+Jh47x6/6Nfvfz+h73VvtqD9q116/3h38vL29yKfjNlKsm+Zv5oE1vq79JQf/1tBlYrVrawTNjxQeJg3P4fAAD//+/HBYc=")
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f00000000c0)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})

27.250798012s ago: executing program 0 (id=776):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x6, 0x0, 0x0)

27.034880652s ago: executing program 0 (id=778):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x4, 0x1}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000080)={0x0, <r1=>0x0}}, 0x10)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r1}, 0xc)
bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000000)={r2, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0xfffffffffffffcbf, 0x0}}, 0x10)

27.001952257s ago: executing program 34 (id=778):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x4, 0x1}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000080)={0x0, <r1=>0x0}}, 0x10)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r1}, 0xc)
bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000000)={r2, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0xfffffffffffffcbf, 0x0}}, 0x10)

8.677488929s ago: executing program 5 (id=927):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x4}]}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'tunl0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f00000000c0)='?', 0x1, 0x0, &(0x7f0000000540)={0x11, 0x8847, r2, 0x1, 0xfd, 0x6, @multicast}, 0x14)

8.676978188s ago: executing program 5 (id=929):
creat(&(0x7f0000000080)='./file0\x00', 0xa)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ff", @ANYRES16], 0x52)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}})

8.622077599s ago: executing program 5 (id=932):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x2d9, &(0x7f0000000340)=ANY=[], 0x5, 0x214, &(0x7f0000000840)="$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")

8.563071499s ago: executing program 5 (id=934):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2, &(0x7f0000000740), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)

8.308299719s ago: executing program 5 (id=940):
flistxattr(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0xa}}, 0x5400)
write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e)

7.87174406s ago: executing program 5 (id=947):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x18, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x20048050}, 0x0)

7.775038498s ago: executing program 35 (id=947):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x18, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x20048050}, 0x0)

2.403783519s ago: executing program 2 (id=992):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a000000070000000200000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x63}, 0x50)

2.35173648s ago: executing program 2 (id=993):
syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x20}, {0xd, 0x24, 0xf, 0x1, 0x3}, [@acm={0x4, 0x24, 0x2, 0xf}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xff, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x240}}}}}]}}]}}, 0x0)

1.224441376s ago: executing program 4 (id=1007):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000000/0x3000)=nil], &(0x7f0000000200), 0x0, 0x2)

1.22430909s ago: executing program 4 (id=1008):
pipe(&(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x2, &(0x7f0000002400)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}])
fcntl$setpipe(r0, 0x407, 0x401)

1.101680461s ago: executing program 2 (id=1010):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740), 0x802, 0x0)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x10001)

1.101331135s ago: executing program 2 (id=1011):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x10008d0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1, 0x4440, &(0x7f00000088c0)="$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")
open(0x0, 0x14927e, 0x0)
unshare(0x24020400)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.pending_reads\x00', 0x149240, 0x0)
fdatasync(r0)
creat(0x0, 0x71283578ac7c5cd)

1.034313894s ago: executing program 4 (id=1012):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40)
pwrite64(r0, 0x0, 0x0, 0x8000c61)

1.034095504s ago: executing program 4 (id=1014):
request_key(&(0x7f0000000540)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x0}, &(0x7f0000000580)='*\x00\x00\x00\x00\x00\x000\x00\xa5^y\xa9n\x00\xe3\xa3\x89\x90&)\bT\x91\x14\xba\x190\xb3\x00\x00:\xb2\xbe\x1d\x00', 0xfffffffffffffffe)
request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00', 0x0)

943.670563ms ago: executing program 6 (id=1015):
r0 = socket$inet(0x2, 0x2, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)='\b\x00', 0x2}, {&(0x7f0000000180)="d0849e99c27f53", 0x7}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004)

872.871486ms ago: executing program 4 (id=1016):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
chdir(&(0x7f00000001c0)='./bus\x00')
rmdir(&(0x7f0000000380)='./file0/../file0\x00')

872.708991ms ago: executing program 6 (id=1017):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0)
connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0x7, 0x8, 0xff}, 0x10)

591.333831ms ago: executing program 6 (id=1018):
r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000080)=0x3)

591.17276ms ago: executing program 6 (id=1019):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
close(0x3)

531.952254ms ago: executing program 6 (id=1020):
socket$nl_route(0x10, 0x3, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006800e978000000", @ANYRES32], 0x20}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

442.39018ms ago: executing program 2 (id=1021):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x100000001, 0x20103)
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000000)={0x0, {0x7f, 0xc}})

442.142744ms ago: executing program 6 (id=1022):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
connect$can_j1939(r4, &(0x7f00000010c0)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0xff}, 0x18)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x200, 0x70bd2a, 0x0, {0x0, 0x0, 0x74, r5, {0x2, 0xffeb}, {0xe, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x1c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='dlm_bast\x00', r6, 0x0, 0x79a2}, 0x18)
move_pages(0x0, 0x0, 0x0, &(0x7f0000000040)=[0x1], 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6}, 0x18)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r8, &(0x7f0000000200), 0xf000)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_int(r9, 0x0, 0x18, 0x0, &(0x7f0000000040))

339.524524ms ago: executing program 2 (id=1023):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f00000001c0)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@nointegrity}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@discard_size={'discard', 0x3d, 0x3}}, {@discard}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jl989qBxEDI38nfwMYxISSb7NpO/EKbYsJrw1sJhEJfsF3v2iz4Da9dAo1k00CJhFFRRdtw0RYQanNTkQsuaAUoF6gVUiVoL+gNokLlIqoCCkiVaAXZas55nmdnZmdndu3x+sw5n4+U/LIzZ+acOXPm7H53850BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoNWtr5//dCPLsuY/+b+2ZtkLmv+9eWprftlrrvUWAgAAAFfqV/m/n7shXXBwDTdqWeafX/7dry0tLS1l7xv98/HPLy2lK6aybHxTluXXRU/96P2N1mWCx7LJxkjL1yN9Vj/a5/qxPteP97l+os/1m/pcP9nn+hU7YIXNxe9j8jvbmf/n1mKXZjdm4/l1O7vc6rHGppGR+LucXCO/zdL4sWwhO5HNZ7NtyxfLNvLlv3Frc11vyeK6RlrWtb15hPzs0aNxGxphH+9sW9fyfUY/eV029fOfPXr0b889e3O32Xc3tN1fsZ137Ghu5yfDJcW2NrJNaZ/E7Rxp2c7tXZ6T0bbtbOS3a/5353Y+t8btHF3ezA3V+ZxPZiP5f38v309jrb/WS/tpe7jsF7dlWXZxebM7l1mxrmwk29J2ycjy8zNZHJHN+2geSi/OxtZ1nN66huO0Oed2th+nna+J+PzfGm43tso2tD5NP/nERMvz/sulyzlOo+ajXu210nkMDvq1UpZjMB4X38sf9ONdj8Gd4fE/evvqx2DXY6fLMZged8sxuKPfMTgyMZpvc3oSGvltlo/BXW3Lj+ZrauTzmdt7H4Mz506emVn82MfvXjh55Pj88flTe3btmt2zd+/+/ftnji2cmJ8t/n2Ze7v8tmQj6TWwI+y7+Bp4VceyrYfq0pcmVpx/L/d1ONnjdbi1Y9lBvw7HOh9cY2NekCuP6eK18Z7mTp+8NJKt8hrLn587r/x1mB53y+twrOV12PV7SpfX4dgaXofNZc7cubafWcZa/um2Dat/L7iyY3BryzHY+fNI5zE46J9HynIMTobj4gd3rv69YHvY3sen1/vzyOiKYzA93HDuaV6Sft6f3J+PbsflLc0rrpvIzi/On73nkSPnzp3dlYWxIV7Scqx0Hq9bWh5TtuJ4HVn38Xpw4eWP39Ll8q1hX03e3fzX5KrPVXOZe+/p/Vzl392678+2S3dnYQzYRu/Pbt/Nm/tzIsu+8O1PPPTNR7/w+lX3ZzNvfnLmyn8WT7m05fw7vsr5N+b+54v1pbt6bHR8rHj9jqa9M952Pm5/qsbyc1cjX/dzM2s7H4+Hfzb6fHxjj/Pxto5lB30+Hu98cPF83Oj3244r0/l8Tobj5MRs7/Nxc5ltu9d7TI71PB/fFmYj7P9Xh6SQclHLsbPacZvWNTY2Hh7XWFxD+3G6p2358ZDNmut6cnf4oTBt5dqO0ztuK5YfbbldtFHH6VTHsoM+TtPvvlY7Thv9fvt2eTqfz8lwXNy4p/dx2lzm6Xuv/Ny5Of5ny7lzot8xOD460dzm8XQQ5uf7bGlzPAbvyY5mp7MT2Vx+7UR+PDXydU3ft7Zz5UT4Z6PPldt6HIN3dCw76GMwfR9b7dhrjK188APQ+XxOhuPiift6H4PNZd6wb7A/u94RLknLtPzs2vn7tdV+53VLx266WsfKWNjOb+/r/bvZ5jIn9q83Z/beT3eFS67rsp86X7+rvabmso3ZT9vCdj67f/X91Nye5jKfP7DG4+lglmUXPvJA/vve8PeVC+e//7W2v7t0+5vOhY888NMXHvun9Ww/AMPv+WJsKb7Xtfxlai1//wcAAACGQsz9I2Em8j8AAABURsz98f8KT+R/AAAAqIyY+8fCTKqQ//+4/yLb3vDswvMXstTMXwri9Wk3PFgsFzuus+HrqaVlzcsf+Mr8f//jhbVt3kiWZb988I+6Lr/twbhdhamwnU+9sf3yFb5295rWffjhC2m9rf31L4b7j49nrYdBtwrubJZl37jhs/l6pt5/KZ9PP3g4nw9dfPyx5jLPHSi+jrd/5iXF8n8Vyr8Hjx1pu/0zYT/8OMzZt3bfH/F2X7306u373ru8vni7xo7r84f9xAeK+43vk/O5x4rl435ebfu/+Zknv9pc/pFXdt/+CyPdt//JcL9fCfN/XlYs3/ocNL+Ot/tU2P64vni7e778ra7b/9Sni+XPvKlY7nCYcf13hK93vunZhdb99UjjSNvjyt5cLBfXP/v9P82vj/cX779z+ycPXWrbH53Hx9P/VtzPTMfy8fK4nugfOtbfvJ/W4zOu/8k/Ody2n/ut/6mHnnlZ8347139Xx3JnPnJnvv7l+2t/x6a//tRnu64vbs/Bvz/T9ngOviu8jsP6n/hAOB7D9f/7VHF/ne+ucPhd7eefuPwXt15oezzRW35erP+p1x7P56bJzVuue8ELr7/4iua+y7LvbSrur9/6j//N6bbt/9JNxf6I18eOfuf6VxPXf/aj06dOL55fmEt79dEb8vfOeVuxPXF7bwjn1s6vD50+98H5s1OzU7NZNlXdt9C7bF8O86fFuNh76aUVZ9A7Hw7P5y1/+Y0tt//rZ+Ll//6e4vJLby2+b70qLPe5cPnW8Pytb/0rPXHrTfnru/F02MKlle8XfCW27/yv/WtaMDz+zp8L4vF+5qUfzPdD87r8+0Z8XV/h9v9wrrifr4f9uhTemXnHTcvra10+vjfCpXcXr/cr3n/hNBef178Lz/fbf1zcf9yu+Hh/GH6O+da29vNdPD6+fmGk8/7zd/G4GM4n2cXi+rhU3N+Xnrup6+bF9yHJLt6cf/1n6X5uXtfDXM3ixxZnTiycOv/IzLn5xXMzix/7+KGTp8+fOncofy/PQx/qd/vl89OW/Pw0N7/33iw/W50uxlV2rbf/zMNH5/bN3j43f+zI+WPnHj4zf/b40cXFo/Nzi7cfOXZs/qP9br8wd/+u3Qf27Ns9fXxh7v79Bw7sOTC9cOp0czOKjepj7+yHp0+dPZTfZPH+ew/suu++e2enT56em79/3+zs9Pl+t8+/N003b/2H02fnTxw5t3Byfnpx4ePz9+86sHfv7r7vBnjyzLHFqZmz50/NnF+cPztTPJapc/nFze99/W5PNS3+R/HzbKdG8UZ82Tvv2pven7XpK59Y9a6KRTreQPTZ8F4033nRmf1r+Trm/vEwkyrkfwAAACAXc/9EmIn8DwAAAJURc/+mMBP5HwAAACoj5v7JMNP/ElCT/F+5/v+2C2tav/6//n/r/tL/r1n//91l6/8X5wv9/8G40v69/n+g/6//r/+v/6//zwCUrf8fc//mLPP3fwAAAKiomPu3hJnI/wAAAFAZMfdfF2Yi/wMAAEBlxNz/gjCTmuR//X/9f/1//X/9/+7r1/8fTvr/ven/96H/P5PVq/9/cZDbfw36/5tbv9D/p4zK1v+Puf+FYSY1yf8AAABQBzH3Xx9mIv8DAABAZcTcf0OYifwPAAAAlRFz/9Ywk5rkf/3/K+r/p86V/n/79uv/t9P/D8eD/r/+/wbQ/+9N/78P/X+f/z9c/f82+v+UUdn6/zH3vyjMpCb5HwAAAOog5v4Xh5nI/wAAAFA+Y5d3s5j7XxJmsiL/X+YKAAAAgGsu5v4bs44ieE3+/q//7/P/9f/1//X/u69/7f3/0Uz/vzz0/3vT/+9D/1//X/9f/5+BKlv/P8/92WT20jCTmuR/AAAAqIOY+28KM5H/AQAAoDJi7v9/YSbyPwAAAFRGzP3bwkxqkv/1/yvT//9F61On/6//32v9+v8+/7/K9P970//vQ/9f/1//X/+fgSpb/z/m/pvDTGqS/wEAAKAOYu6/JcxE/gcAAIDKiLn//4eZyP8AAABQGTH3bw8zqUn+1/8vef8/Nkd9/r/+v/5/Kfv/k/r/paP/35v+fx/6//r/+v/6/wxU2fr/Mfe/LMykJvkfAAAA6iDm/peHmcj/AAAAUBkx978izET+BwAAgMqIuX8qzKQm+X89/f/GRf3/1Vzlz/+fWMPn/7fR/9f/77V+/X+f/19l+v+96f/3of+v/6//r//PQJWt/x9z/61hJjXJ/wAAAFAHMffvCDOR/wEAAKAyYu6/LcxE/gcAAIDKiLl/Z5hJTfK/z/8fiv5/pv+v/6//r/+v/782+v+96f/3of+v/6//r//PQJWt/x9z/yvDTGqS/wEAAKAOYu6/PcxE/gcAAIDKiLn/VWEm8j8AAABURsz9d4SZ1CT/6//r/+v/6//r/3dfv/7/cNL/703/vw/9f/1//X/9fwaqbP3/mPtfHWZSk/wPAAAAdRBz/51hJvI/AAAAVEbM/XeFmcj/AAAAUBkx90+HmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j77w4zqUn+BwAAgDqIuf+eMBP5HwAAACoj5v6ZMBP5HwAAACoj5v7ZMJOa5H/9f/1//X/9/3X1/1+xfL/6/wX9/3LR/+9N/78P/X/9/2ve/x/X/6dSytb/j7l/V5hJTfI/AAAA1EHM/bvDTOR/AAAAqIyY+/eEmcj/AAAAUBkx998bZlKT/K//r/+v/6//7/P/u69f/3846f/3Nvj+f3yI+v/6//r/Pv9f/5+Vytb/j7n/vjCTmuR/AAAAqIOY+/eGmcj/AAAAUBkx9+8LM5H/AQAAoDJi7t8fZlKT/K//r/+v/6//r//fff36/8NJ/783n//fh/6//v8Q9/+bx5b+P2VTtv5/zP0Hwkxqkv8BAACgDmLuf02YifwPAAAAlRFz/6+Fmcj/AAAAUBkx9/96mElN8r/+v/6//r/+f9n7/xP6//r/66D/35v+fx/6//r/Q9z/9/n/lFHZ+v8x998fZlKT/A8AAAB1EHP/b4SZyP8AAABQGTH3vzbMRP4HAACAyoi5/2CYSU3yv/7/BvX/44X6//r/+v8+/1///6rS/+9N/78P/X/9f/1//X8Gqmz9/5j7XxdmUpP8DwAAAHUQc/8DYSbyPwAAAFRGzP2vDzOR/wEAAKAyYu5/Q5hJTfK//r/P/7/2/f/xtm3X/1++nf5/Qf9f/3899P970//vQ/9f/1//X/+fgSpb/z/m/jeGmdQk/wMAAEAdxNz/pjAT+R8AAAAqI+b+N4eZyP8AAABQGTH3vyXMpCb5X/9f///a9/99/r/+f0H/X/9/EPT/e9P/70P/X/9f/1//n4EqW/8/5v7fDDOpSf4HAACAOoi5/8EwE/kfAAAAKiPm/reGmcj/AAAAUBkx978tzKQm+V//X/9f/1//X/+/+/r1/4eT/n9vQ9b//9X14XL9/4L+f7m3f739/7GOr69K//9Hq/X/lzZ13l7/n6uhbP3/mPvfHmZSk/wPAAAAdRBz/zvCTOR/AAAAqIyY+98ZZiL/AwAAQGXE3P9bYSY1yf/6/83tWG4v6//r/+cX6P/r/+v/Dy39/96GrP/v8/876P+Xe/t9/r/+PyuVrf8fc/+7wkxqkv8BAACgDmLufyjMRP4HAACAyoi5/91hJvI/AAAAVEbM/e8JM6lJ/tf/9/n/+v/6//r/3dev/z+c9P970//vQ/9f/79s/f//1P9nuJWt/x9z/8NhJjXJ/wAAAFAHMfe/N8xE/gcAAIDKiLn/t8NM5H8AAACojJj73xdmUpP8r/8/LP3/Kf3/dfb/J8Jl+v/6//r/9aL/35v+fx/6//r/Zev/+/x/hlzZ+v8x978/zGTt+X9yzUsCAAAA10TM/b8TZlKTv/8DAABAHcTc/7thJvI/AAAAVEbM/b8XZlKT/K//Pyz9f5//n/n8f/3/jsej/6//383G9f/jmUf/X/9f/z/S/9f/1/+nU9n6/zH3/36YSU3yPwAAANRBzP0fCDOR/wEAAGAodPt/sjvF3H8ozET+BwAAgMqIuf9wmElN8r/+v/6//n9J+/9/seNffvDddxzepf+v/6//vy4b+vn/zRe/z//X/9f/T/T/9f/1/+lUtv5/zP1HwkyWg9/bfMA/AAAADLeY+/8gzKQmf/8HAACAOoi5/2iYifwPAAAAlRFz/1yYSU3yv/6//r/+f0n7/0P8+f9xfwxT/3960xD1/+NJV/+/qw3t/793uSeu/7/e/v9E10s7+/8N/f82+v/r3v7vZFmm/6//zzVUtv5/zP3zYSY1yf8AAABQByH3jxwr5vIV8j8AAABURsz9x8NM5H8AAACojJj7PxhmUpP8r/+v/6//r//v8/+7r7+0/X+f/9+T/n9v5en/d+fz//X/h3n79f/1/1mpbP3/mPsXwkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/4fDTOR/AAAAqIyY+0+EmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j7T4aZ1CT/AwAAQB3E3H8qzOT/2LuPJsvq847jt3FTzBQb77zwwt77JbAwa/sFeMHGC7vK5YWxjXNicI4454BtJRRQAAmhhHICJSSUhSSUc0AZSTUqmOd5Znr69LndM7e7z/0/n89CDzSMzkU1BfrRfDn2PwAAAAwjd//NcYv9DwAAAMPI3f/LcUuT/a//1/8P2///pP7/oOfr//X/I9P/z9P/r6H/1//r//X/bNTS+v/c/b8StzTZ/wAAANBB7v5fjVvsfwAAABhG7v5b4hb7HwAAAIaRu//X4pYm+/+y/n9n1bP/z4xX/z9S/+/9/wc+X/+v/x/Zyfb/tz3xZz79v/5f/x/0//p//T+XW1r/n7v/1+OWJvsfAAAAOsjd/xtxi/0PAAAAw8jd/5txi/0PAAAAw8jd/1txS5P97/3/3v+v/9f/6/+nn6//307e/z+vU/9/y8PX/9Jj9/7ofUd5vv5f/6//1/+zWUvr/3P3/3bc0mT/AwAAQAe5+38nbrH/AQAAYBi5+383brH/AQAAYAudnfxq7v7fi1ua7H/9v/5f/x/9/xn9v/5f/z8C/f+8Tv3/lTxf/6//1//r/9mspfX/uft/P25psv8BAACgg9z9fxC32P8AAACwXFP/IPaM3P23xi32PwAAAAwjd/+5uKXJ/tf/H3///339/3b0/97/r//X/w9B/z9P/7+G/l//r//X/7NRS+v/c/ffFrc02f8AAADQQe7+P4xb7H8AAAAYRu7+P4pb7H8AAAAYRu7+P45bmux//b/3/+v/9f/6/+nn6/+3k/5/nv5/Df3/1fbz1+r/9f/6fy51xP7/8Zk/bW+k/8/d/ydxS5P9DwAAAB3k7v/TuMX+BwAAgGHk7v+zuMX+BwAAgGHk7v/zuKXJ/tf/6//1//r/K+7/9//Ue5L+f5r+/2To/+ctpv/f2Z38sv5/6/t/7//X/+v/2WNp7//P3f8XcUuT/Q8AAAAd5O7/y7hlZv8f+W/mAwAAAKcqd/9fxS2+/w8AAABbL6uz3P1/Hbc02f/6f/2//l//7/3/08+f6//vu+Tz6f+XRf8/bzH9/wH0//r/bf78+n/9P/strf/P3f83cUuT/Q8AAAAd5O6/PW6x/wEAAGAYufv/Nm6x/wEAAGAYufv/Lm5psv+n+/+Lv13/fzj6/72fX/8//fNjU/1//jfq/2f7/xu9/78n/f88/f8a+n/9v/7/oP7/7Lofr/9nytL6/9z9fx+3NNn/AAAA0EHu/n+IW+x/AAAAGEbu/n+MW+x/AAAAGEbu/n+KW5rsf+//1//r/7ev//f+/wtO8/3/qxPv/3f1/4ek/5+n/19D/6//1//Pv/9/5t8CoP9nytL6/9z9/xy3NNn/AAAA0EHu/n+JW+x/AAAA2A6X/rMDl/8DpSF3/7/GLfY/AAAADCN3/7/FLePs/9l3der/9f/6f/2//n/6+cvq/73//7D0//P0/2vo/4+jn98drP+/46Afv4T+/9bj7v9n6P+Zsqf/v//i10+r/8/d/+9xyzj7HwAAANrL3f8fcYv9DwAAAMPI3f+fcYv9DwAAAMPI3f9fcUuT/X/s/f/Mv31A/6//1//r//X/+v9N0//P0/+vof/3/n/v/9f/s1F7+v9LnFb/n7v/v+OWJvsfAAAAOsjd/z9xi/0PAAAAw8jdf0fcYv8DAADAMHL3/2/c0mT/e/+//l//r//X/08/X/+/na6qv79G/1/0//p//b/+X//PBiyt/8/d/39xS5P9DwAAAB3k7v//uMX+BwAAgGHk7n9K3GL/AwAAwDBy9z81bmmy//X/x9v/59f1//r/lf5f/6//PxFt3/+/M/VXov0O6P8f/IVzP733K/p//b/+X/+v/+eQfnjmty2i/z9/8f9d5u5/WtzSZP8DAABAB7n7nx632P8AAAAwjNz9z4hb7H8AAAAYRu7+O+OWI+7/ueZhyfT/3v+v/9f/6/+nn6//305t+/9D8v7/NfT/+n/9v/6fjVpE/3/Jr+fuf2bc4vv/AAAAMIzc/c+KW+x/AAAAGEbu/mfHLfY/AAAADCN3/3Pilib7X/+v/9f/6//1/9PP1/9vJ/3/PP3/GtvU/995Ff3/7vSXT7ufv1qn/fn1//p/9lta/5+7/664pcn+BwAAgA5y9z83brH/AQAAYBi5+58Xt9j/AAAAMIzc/c+PW5rsf/2//l//r//X/08/X/+/nfT/8/T/q9Xq7pkPMNX/n79umf2/9/8v7vPr//X/7Le0/j93/wvilib7HwAAADrI3X933GL/AwAAwDBy998Tt9j/AAAAMIzc/S+MW5rsf/2//l//r//X/08/X/+/nfT/8/T/a2zT+//1/4v7/Pp//T/7La3/z93/orilyf4HAACADnL33xu32P8AAAAwjNz9L45b7H8AAAAYRu7+++KWJvtf/6//1//r//X/08/X/2+n4+v/V/p//b/+fw39v/5f/8/lltb/5+5/SdzSZP8DAABAB7n7Xxq32P8AAAAwjNz9L4tb7H8AAAAYRu7+l8ctTfa//l//r//X/+v/p5+v/99O3v8/T/+/hv5f/6//1/+zUdP9/62n1v/n7n9F3NJk/wMAAEAHufvvj1vsfwAAABhG7v5Xxi32PwAAAAwjd/+r4pYm+1//r//f2/+vVvp//b/+/4IT6P/PrPT/G6f/n6f/X0P/P2b/f81qoP7/7IE/Xv/PEi3t/f+5+18dtzTZ/wAAANBB7v7XxC32PwAAAAwjd/9r4xb7HwAAAIaRu/91cUuT/a//1/97/7/+X/8//Xzv/99O+v95+v819P9j9v/e/6//59Qsrf/P3f/6uKXJ/gcAAIAOcve/IW6x/wEAAGAYufvfGLfY/wAAADCM3P1vilua7H/9v/5f/6//1/9PP1//v530//P0/2vo//X/+n/9Pxu1tP4/d/+b45Ym+x8AAAA6yN3/QNxi/wMAAMAwcvc/GLfY/wAAADCM3P1viVua7H/9v/5f/7+d/f8Z/b/+X/8/aSn9/w03/NRD+n/9v/5f/6//1/93t7T+P3f/W+OWJvsfAAAAOsjd/7a4xf4HAACAYeTuf3vcYv8DAADAMHL3vyNuabL/9/f/164uFKoXTPX/0ajp/y+h/9/7+fX/0z8/vP9f/6//P35L6f+9///KPr/+X/+/zZ//SP3/j+//8fp/RrS0/j93/0NxS5P9DwAAAB3k7n9n3GL/AwAAwDBy978rbrH/AQAAYBi5+x+OW5rsf+//1//r//X/+v/p5+v/t5P+f57+fw39v/7f+/9v/rkf0v+zOUvr/3P3vztuabL/AQAAoIPc/e+JW+x/AAAAGEbu/vfGLfY/AAAADCN3//vilib7X/+v/9f/6//1/9PP1/9vJ/3/PP1/ufwP7YI+/f+ZqS+edj9/tU778w/T/3v/Pxu0tP4/d//745Ym+x8AAAA6yN3/gbjF/gcAAIBh5O7/YNxi/wMAAMAwcvd/KG5psv/1//r/8fv/n9X/X/Z8/b/+f2T6//wr+jT9/xp9+v9Jp93Pb/vn1//r/9lvaf1/7v5H4pYm+x8AAAA6yN3/4bjF/gcAAIBh5O7/SNxi/wMAAMAwcvd/NG5psv/1/736/51Vx/7f+//1//r/TvT/8/T/a+j/9f/6f/0/G7W0/j93/6M7uy33PwAAAGyrn/mJX3zksL/vo0/+55nVx+KWG1fnD/ltbAAAAGDhntj9O7ur1cef/DXf/wcAAIAR5e7/RNzSZP/r/3v1/z3f/6//1//r/zvR/8/T/6+h/9f/6//1/2zU0vr/3P2fjFsuGX67R/6jBAAAAJYkd/+n4pYm3/8HAACADnL3fzpu2bf//esAAQAAYFvl7v9M3NLk+//6/4X3/6tj6v/j99P/X6D/1/9PPV//v530//Ousv8/v6P/1//P0P/r//X/XG5p/X/u/s/GLU32PwAAAAxqz99RyN3/ubjF/gcAAIBh5O7/fNxi/wMAAMAwcvd/IW5psv/1/yfe/2eqfozv/z9bv+T9/837/9vPTD5f/6//H5n+f573/6+h/x+l/79O/6//ZxmW1v/n7v9i3NJk/wMAAEAHufu/FLfY/wAAADCM3P1fjlvsfwAAABhG7v6vxC1N9r/+f+Hv/7+i/v8Q7//X//fo/w94/jj9/49cf+6Bm37+nrv0/1x0kv1//lzQ/+v/9f8XLKj/9/5//T8Lsfn+f3fPF4/a/+fu/2rc0mT/AwAAQAe5+x+LW+x/AAAAGEbu/q/FLfY/AAAADCN3/9fjlib7X/+v/19K/5//W59C/3/uivv/s6vV6lT6/2yKu/f/3v+v/9/P+//n6f/X0P/r//X/+n82avP9/94vHrX/z93/jbilyf4HAACADnL3fzNuyf2/c+S/dQ8AAAAsTO7+b8Utvv8PAAAAw8jd/+24pcn+1//r/5fS/yfv/7/448Z6//9NFaf27P9/rH5J/3+89P/z9P9r6P/1//p//T8btbT+P3f/d+KWJvsfAAAAOsjd/3jcYv8DAADAMHL3fzdusf8BAABgGLn7vxe3NNn/+v9R+/8s4vX/+v+l9P/e/+/9/ydD/z9P/7+G/l//r//X/7NRS+v/c/f/IAAA//9GqnSo")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10)
chdir(&(0x7f00000001c0)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x280, 0x2)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

0s ago: executing program 4 (id=1024):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x7ffffffe, 0x4)

kernel console output (not intermixed with test programs):

69 code=0x7ffc0000
[   99.889011][   T33] audit: type=1326 audit(1754388088.342:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7431 comm="syz.2.470" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149378eb69 code=0x7ffc0000
[  100.691886][ T7447] loop3: detected capacity change from 0 to 128
[  100.705346][ T7447] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  100.713453][ T7447] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  100.728044][ T7447] EXT4-fs error (device loop3): __ext4_find_entry:1626: inode #2: comm syz.3.477: checksumming directory block 0
[  100.771741][ T6439] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  100.806464][ T7445] loop0: detected capacity change from 0 to 32768
[  101.059560][ T7445] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  101.059575][ T7445]   allowing incompatible features above 0.0: (unknown version)
[  101.059595][ T7445]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  101.076522][ T7445] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  101.089434][ T7445] bcachefs (loop0): initializing new filesystem
[  101.126516][ T7445] bcachefs (loop0): going read-write
[  101.153073][ T7445] bcachefs (loop0): marking superblocks
[  101.199672][ T7445] bcachefs (loop0): initializing freespace
[  101.221392][ T7445] bcachefs (loop0): done initializing freespace
[  101.240303][ T7445] bcachefs (loop0): reading snapshots table
[  101.245160][ T7445] bcachefs (loop0): reading snapshots done
[  101.285779][ T7445] bcachefs (loop0): done starting filesystem
[  101.371982][ T7475] loop2: detected capacity change from 0 to 512
[  101.376306][ T7445] syz.0.476 (7445) used greatest stack depth: 16328 bytes left
[  101.385240][ T5825] bcachefs (loop0): shutting down
[  101.387476][ T5825] bcachefs (loop0): going read-only
[  101.389504][ T5825] bcachefs (loop0): finished waiting for writes to stop
[  101.392885][ T5825] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[  101.400540][ T7475] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.485: attempt to clear invalid blocks 2 len 1
[  101.412261][ T7475] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters
[  101.420372][ T7475] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.485: invalid indirect mapped block 1819239214 (level 0)
[  101.426769][ T7475] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.485: invalid indirect mapped block 1819239214 (level 1)
[  101.448667][ T5825] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  101.452593][ T7475] EXT4-fs (loop2): 1 truncate cleaned up
[  101.455302][ T7475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.460264][ T5825] bcachefs (loop0): clean shutdown complete, journal seq 4
[  101.463040][ T5825] bcachefs (loop0): marking filesystem clean
[  101.483187][ T5825] bcachefs (loop0): shutdown complete
[  101.485938][ T6220] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.612055][ T7487] loop3: detected capacity change from 0 to 512
[  101.615122][ T7487] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  101.628711][ T7487] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002]
[  101.631324][ T7487] System zones: 1-12
[  101.632743][ T7487] EXT4-fs (loop3): orphan cleanup on readonly fs
[  101.634989][ T7487] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.491: invalid indirect mapped block 12 (level 1)
[  101.643593][ T7487] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.491: invalid indirect mapped block 2 (level 2)
[  101.649373][ T7487] EXT4-fs (loop3): 1 truncate cleaned up
[  101.652018][ T7487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  101.670379][ T6439] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  101.813207][ T7490] loop3: detected capacity change from 0 to 32768
[  101.824887][ T7490] (syz.3.492,7490,0):ocfs2_find_slot:468 ERROR: no free slots available!
[  101.827843][ T5867] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  101.830362][ T7490] (syz.3.492,7490,0):ocfs2_mount_volume:1751 ERROR: status = -22
[  101.845671][ T7490] (syz.3.492,7490,0):ocfs2_fill_super:1177 ERROR: status = -22
[  101.981112][   T24] kernel write not supported for file bpf-prog (pid: 24 comm: kworker/1:0)
[  102.000460][ T5867] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[  102.004005][ T5867] usb 3-1: config 0 has no interface number 0
[  102.021976][ T5867] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  102.025911][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.034096][ T5867] usb 3-1: Product: syz
[  102.035944][ T5867] usb 3-1: Manufacturer: syz
[  102.039440][ T5867] usb 3-1: SerialNumber: syz
[  102.043444][ T5867] usb 3-1: config 0 descriptor??
[  102.473777][ T5867] usb 3-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3)
[  102.675263][ T5867] usb 3-1: failed to fetch extended address, random address set
[  102.724262][ T5867] usb 3-1: USB disconnect, device number 9
[  103.067017][ T5859] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  103.248508][ T5859] usb 4-1: Using ep0 maxpacket: 8
[  103.300489][ T5859] usb 4-1: unable to get BOS descriptor or descriptor too short
[  103.306119][ T5859] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[  103.325776][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  103.337758][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  103.341892][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  103.346172][ T5859] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1
[  103.352907][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  103.359496][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  103.363723][ T5859] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  103.373789][ T5859] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  103.380956][ T5859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.384411][ T5859] usb 4-1: Product: syz
[  103.386295][ T5859] usb 4-1: Manufacturer: syz
[  103.402991][ T5859] usb 4-1: SerialNumber: syz
[  103.418272][ T5859] usb 4-1: config 0 descriptor??
[  103.421855][ T7543] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  103.446357][ T5859] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  103.547171][   T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  103.629832][ T5859] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12
[  103.660208][ T5859] usb 4-1: USB disconnect, device number 3
[  103.697034][   T24] usb 3-1: Using ep0 maxpacket: 32
[  103.703077][ T5822] udevd[5822]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  103.704300][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  103.723210][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.727520][   T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  103.730456][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.752372][   T24] usb 3-1: config 0 descriptor??
[  103.760251][   T24] hub 3-1:0.0: USB hub found
[  103.962571][   T24] hub 3-1:0.0: 31 ports detected
[  103.964734][   T24] hub 3-1:0.0: insufficient power available to use all downstream ports
[  104.053455][ T7550] loop0: detected capacity change from 0 to 256
[  104.181333][ T7557] loop3: detected capacity change from 0 to 1024
[  104.205122][ T7557] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal
[  104.250513][ T7559] Driver unsupported XDP return value 0 on prog  (id 47) dev N/A, expect packet loss!
[  104.381066][   T24] usb 3-1: USB disconnect, device number 10
[  104.550317][ T7578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.531'.
[  104.553282][ T7578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.531'.
[  104.567214][ T5867] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  104.721531][ T5867] usb 4-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=90.d6
[  104.725340][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.730262][ T5867] usb 4-1: Product: syz
[  104.732071][ T5867] usb 4-1: Manufacturer: syz
[  104.734028][ T5867] usb 4-1: SerialNumber: syz
[  104.738404][ T5867] usb 4-1: config 0 descriptor??
[  104.750277][ T5867] aiptek 4-1:0.0: interface has no int in endpoints, but must have minimum 1
[  104.957520][ T5859] usb 4-1: USB disconnect, device number 4
[  105.012619][ T7591] sch_fq: defrate 0 ignored.
[  105.551150][ T7603] tipc: Enabling of bearer <etl:g> rejected, media not registered
[  105.914888][ T7621] loop3: detected capacity change from 0 to 256
[  105.939855][ T7623] loop2: detected capacity change from 0 to 512
[  105.950789][ T7623] EXT4-fs: Ignoring removed nomblk_io_submit option
[  105.959343][ T7623] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  105.963328][ T7623] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102]
[  105.965586][ T6439] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  105.966125][ T7623] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80)
[  105.969518][ T6439] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  105.972070][ T7623] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features
[  105.972796][ T7623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  105.989751][ T7623] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80)
[  106.016039][ T6220] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.102456][ T7627] netlink: 40 bytes leftover after parsing attributes in process `syz.2.552'.
[  106.265285][ T5868] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.274035][ T7629] loop2: detected capacity change from 0 to 32768
[  106.278813][ T7629] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.553 (7629)
[  106.292649][ T7629] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  106.313073][ T7629] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  106.315968][ T7629] BTRFS info (device loop2): using free-space-tree
[  106.355512][ T5868] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.404300][ T6220] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  106.449410][ T5868] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.579049][ T5868] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.602989][ T7648] loop2: detected capacity change from 0 to 1024
[  106.611313][ T7648] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040e01c, mo2=0002]
[  106.619212][ T7648] System zones: 0-1, 3-36
[  106.641700][ T7648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.654052][   T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  106.662936][   T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  106.668526][   T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  106.673616][   T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  106.678730][   T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  106.759918][ T5868] bridge_slave_1: left allmulticast mode
[  106.762307][ T5868] bridge_slave_1: left promiscuous mode
[  106.764524][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.770256][ T5868] bridge_slave_0: left allmulticast mode
[  106.772108][ T5868] bridge_slave_0: left promiscuous mode
[  106.774079][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.872854][ T6220] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.103812][ T7664] loop2: detected capacity change from 0 to 40427
[  107.109596][ T7664] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  107.115514][ T7664] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  107.115655][ T5868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  107.123141][ T7664] F2FS-fs (loop2): invalid crc value
[  107.131879][ T5868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  107.139662][ T5868] bond0 (unregistering): Released all slaves
[  107.163187][ T7664] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  107.174708][ T7664] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  107.223023][ T7664] syz.2.558: attempt to access beyond end of device
[  107.223023][ T7664] loop2: rw=2049, sector=53248, nr_sectors = 16 limit=40427
[  107.254946][ T6220] syz-executor: attempt to access beyond end of device
[  107.254946][ T6220] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  107.268901][ T6220] CPU: 1 UID: 0 PID: 6220 Comm: syz-executor Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93-dirty #0 PREEMPT(full) 
[  107.268913][ T6220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  107.268918][ T6220] Call Trace:
[  107.268922][ T6220]  <TASK>
[  107.268926][ T6220]  dump_stack_lvl+0x189/0x250
[  107.268940][ T6220]  ? __pfx_dump_stack_lvl+0x10/0x10
[  107.268946][ T6220]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  107.268955][ T6220]  ? __pfx_queue_work_on+0x10/0x10
[  107.268967][ T6220]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  107.268974][ T6220]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  107.268982][ T6220]  ? f2fs_hw_is_readonly+0x39b/0x470
[  107.268995][ T6220]  f2fs_handle_critical_error+0x37c/0x540
[  107.269009][ T6220]  f2fs_write_end_io+0x495/0x810
[  107.269017][ T6220]  ? blkg_put+0x22/0x240
[  107.269031][ T6220]  __submit_merged_bio+0x27a/0x6a0
[  107.269045][ T6220]  __submit_merged_write_cond+0x255/0x530
[  107.269059][ T6220]  f2fs_write_data_pages+0x261d/0x3000
[  107.269081][ T6220]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  107.269111][ T6220]  ? folios_put_refs+0x559/0x640
[  107.269124][ T6220]  ? __pfx_folios_put_refs+0x10/0x10
[  107.269129][ T6220]  ? rcu_is_watching+0x15/0xb0
[  107.269144][ T6220]  ? __lock_acquire+0xab9/0xd20
[  107.269160][ T6220]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  107.269167][ T6220]  do_writepages+0x32e/0x550
[  107.269181][ T6220]  ? do_raw_spin_unlock+0x4d/0x240
[  107.269190][ T6220]  filemap_fdatawrite+0x191/0x230
[  107.269199][ T6220]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  107.269226][ T6220]  ? do_raw_spin_unlock+0x4d/0x240
[  107.269235][ T6220]  f2fs_sync_dirty_inodes+0x31f/0x830
[  107.269250][ T6220]  f2fs_write_checkpoint+0x94a/0x1de0
[  107.269268][ T6220]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  107.269296][ T6220]  ? kill_f2fs_super+0x298/0x6c0
[  107.269306][ T6220]  kill_f2fs_super+0x2c3/0x6c0
[  107.269317][ T6220]  ? __pfx_kill_f2fs_super+0x10/0x10
[  107.269323][ T6220]  ? radix_tree_delete_item+0x2b6/0x400
[  107.269334][ T6220]  ? shrinker_free+0x2ce/0x3e0
[  107.269342][ T6220]  deactivate_locked_super+0xbc/0x130
[  107.269351][ T6220]  cleanup_mnt+0x425/0x4c0
[  107.269361][ T6220]  ? lockdep_hardirqs_on+0x9c/0x150
[  107.269370][ T6220]  task_work_run+0x1d4/0x260
[  107.269379][ T6220]  ? __pfx_task_work_run+0x10/0x10
[  107.269386][ T6220]  ? __x64_sys_umount+0x122/0x160
[  107.269396][ T6220]  ? exit_to_user_mode_loop+0x40/0x110
[  107.269407][ T6220]  exit_to_user_mode_loop+0xec/0x110
[  107.269416][ T6220]  do_syscall_64+0x2bd/0x3b0
[  107.269423][ T6220]  ? lockdep_hardirqs_on+0x9c/0x150
[  107.269430][ T6220]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.269437][ T6220]  ? exc_page_fault+0x9f/0xf0
[  107.269445][ T6220]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.269451][ T6220] RIP: 0033:0x7f149378fe97
[  107.269459][ T6220] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  107.269485][ T6220] RSP: 002b:00007ffccd36c408 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  107.269495][ T6220] RAX: 0000000000000000 RBX: 00007f1493811bdd RCX: 00007f149378fe97
[  107.269500][ T6220] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccd36c4c0
[  107.269504][ T6220] RBP: 00007ffccd36c4c0 R08: 0000000000000000 R09: 0000000000000000
[  107.269508][ T6220] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffccd36d550
[  107.269512][ T6220] R13: 00007f1493811bdd R14: 000000000001a274 R15: 00007ffccd36d590
[  107.269525][ T6220]  </TASK>
[  107.270040][ T6220] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  107.418486][ T7651] chnl_net:caif_netlink_parms(): no params data found
[  107.581871][ T5868] hsr_slave_0: left promiscuous mode
[  107.586425][ T5868] hsr_slave_1: left promiscuous mode
[  107.590912][ T5868] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.595585][ T5868] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.600124][ T5868] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.602610][ T5868] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.614797][ T5868] veth1_macvtap: left promiscuous mode
[  107.616688][ T5868] veth0_macvtap: left promiscuous mode
[  107.620212][ T5868] veth1_vlan: left promiscuous mode
[  107.622061][ T5868] veth0_vlan: left promiscuous mode
[  107.889437][ T5868] team0 (unregistering): Port device team_slave_1 removed
[  107.915816][ T5868] team0 (unregistering): Port device team_slave_0 removed
[  108.167999][ T7651] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.176999][ T7651] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.179686][ T7651] bridge_slave_0: entered allmulticast mode
[  108.187664][ T7651] bridge_slave_0: entered promiscuous mode
[  108.190970][ T7651] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.193247][ T7651] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.195589][ T7651] bridge_slave_1: entered allmulticast mode
[  108.203571][ T7651] bridge_slave_1: entered promiscuous mode
[  108.251419][ T7651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  108.256050][ T7651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  108.306346][ T7651] team0: Port device team_slave_0 added
[  108.316603][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.562'.
[  108.330515][ T7651] team0: Port device team_slave_1 added
[  108.390648][ T7651] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.402359][ T7651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.414466][ T7651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.423320][ T7651] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.425849][ T7651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.434717][ T7651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.447916][ T7696] Bluetooth: MGMT ver 1.23
[  108.450085][ T7696] Bluetooth: hci0: service_discovery: too big uuid_count value 33022
[  108.505302][ T7651] hsr_slave_0: entered promiscuous mode
[  108.509575][ T7651] hsr_slave_1: entered promiscuous mode
[  108.512255][ T7651] debugfs: 'hsr0' already exists in 'hsr'
[  108.514553][ T7651] Cannot create hsr debugfs directory
[  108.569077][ T7700] loop2: detected capacity change from 0 to 2048
[  108.578599][ T7700] NILFS (loop2): invalid segment: Magic number mismatch
[  108.584085][ T7700] NILFS (loop2): trying rollback from an earlier position
[  108.597123][ T7700] NILFS (loop2): recovery complete
[  108.604908][ T7701] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  108.747946][ T5826] Bluetooth: hci0: command tx timeout
[  108.886096][ T7651] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  108.897924][ T7651] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  108.906626][ T7651] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  108.919689][ T7651] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  109.008111][ T7651] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.025065][ T7651] 8021q: adding VLAN 0 to HW filter on device team0
[  109.050131][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.053016][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.071757][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.074599][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.246587][ T7746] loop2: detected capacity change from 0 to 512
[  109.260241][ T7746] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  109.265330][ T7651] 8021q: adding VLAN 0 to HW filter on device batadv0
[  109.273057][ T7746] EXT4-fs (loop2): 1 truncate cleaned up
[  109.277690][ T7746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.294375][ T7746] EXT4-fs error (device loop2): ext4_find_dest_de:2052: inode #2: block 13: comm syz.2.573: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1
[  109.335973][ T6220] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.504095][ T7651] veth0_vlan: entered promiscuous mode
[  109.523730][ T7651] veth1_vlan: entered promiscuous mode
[  109.552212][ T7651] veth0_macvtap: entered promiscuous mode
[  109.556419][ T7651] veth1_macvtap: entered promiscuous mode
[  109.578219][ T7651] batman_adv: batadv0: Interface activated: batadv_slave_0
[  109.583115][ T7651] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.610276][ T5868] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.613829][ T5868] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.621432][ T5868] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.633769][ T5868] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.700199][ T7769] loop0: detected capacity change from 0 to 512
[  109.737636][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.740758][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.743965][ T7756] loop2: detected capacity change from 0 to 32768
[  109.754796][ T7769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.761845][ T7769] ext4 filesystem being mounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  109.785808][ T7756] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  109.795485][ T4026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.801126][ T4026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.834089][ T7756] XFS (loop2): Ending clean mount
[  109.841290][ T7756] XFS (loop2): Quotacheck needed: Please wait.
[  109.841563][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.880666][ T7756] XFS (loop2): Quotacheck: Done.
[  109.953875][ T7756] XFS (loop2): User initiated shutdown received.
[  109.956123][ T7756] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[  109.963835][ T7756] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  110.003101][ T6220] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  110.240541][ T7801] loop2: detected capacity change from 0 to 2048
[  110.248450][ T7801] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  110.262786][ T7803] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  110.409867][ T5866] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  110.432955][ T7815] loop2: detected capacity change from 0 to 1024
[  110.435602][ T7815] EXT4-fs: Ignoring removed orlov option
[  110.442737][ T7815] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  110.460927][ T7815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.491369][ T6220] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.549350][ T7820] loop2: detected capacity change from 0 to 1024
[  110.560248][ T5866] usb 1-1: unable to get BOS descriptor or descriptor too short
[  110.564601][ T5866] usb 1-1: not running at top speed; connect to a high speed hub
[  110.571353][ T5866] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  110.580644][ T5866] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[  110.584238][ T5866] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  110.601378][ T5866] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  110.609409][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.613901][ T5866] usb 1-1: Product: syz
[  110.617297][ T5866] usb 1-1: Manufacturer: syz
[  110.618823][ T5866] usb 1-1: SerialNumber: syz
[  110.826927][ T5826] Bluetooth: hci0: command tx timeout
[  110.863675][ T5866] usb 1-1: USB disconnect, device number 6
[  110.895115][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  110.975896][ T7832] loop4: detected capacity change from 0 to 64
[  111.038910][   T33] audit: type=1800 audit(1754388099.592:16): pid=7832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.591" name="file2" dev="loop4" ino=6 res=0 errno=0
[  111.127377][ T5859] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  111.288894][ T5859] usb 3-1: Using ep0 maxpacket: 32
[  111.294515][ T5859] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01
[  111.298369][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.301030][ T5859] usb 3-1: Product: syz
[  111.302713][ T5859] usb 3-1: Manufacturer: syz
[  111.304720][ T5859] usb 3-1: SerialNumber: syz
[  111.311223][ T5859] usb 3-1: config 0 descriptor??
[  111.529893][ T5859] usb 3-1: USB disconnect, device number 11
[  111.561880][ T7847] loop4: detected capacity change from 0 to 32768
[  111.570284][ T7851] loop0: detected capacity change from 0 to 32768
[  111.594570][ T7851] (syz.0.599,7851,0):ocfs2_check_set_options:1259 ERROR: Group quotas were requested, but this filesystem does not have the feature enabled.
[  111.595058][ T7847] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  111.605587][ T7851] (syz.0.599,7851,0):ocfs2_fill_super:1177 ERROR: status = -22
[  111.629228][ T7847] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  111.739624][ T7651] ocfs2: Unmounting device (7,4) on (node local)
[  111.923162][ T7861] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  111.926013][ T7861] macsec1: entered allmulticast mode
[  111.928261][ T7861] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  111.934677][ T7861] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[  111.938802][ T7861] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  112.021699][ T7863] loop4: detected capacity change from 0 to 512
[  112.026693][ T7863] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  112.031351][ T7863] EXT4-fs (loop4): ea_inode feature is not supported for Hurd
[  112.073456][   T59] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  112.229087][   T59] usb 1-1: config 0 has an invalid interface number: 139 but max is 0
[  112.233696][   T59] usb 1-1: config 0 has no interface number 0
[  112.236387][   T59] usb 1-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  112.241326][   T59] usb 1-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D
[  112.246362][   T59] usb 1-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64
[  112.251909][   T59] usb 1-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  112.259699][   T59] usb 1-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6
[  112.263417][   T59] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.266716][   T59] usb 1-1: Product: syz
[  112.269129][   T59] usb 1-1: Manufacturer: syz
[  112.271114][   T59] usb 1-1: SerialNumber: syz
[  112.275257][   T59] usb 1-1: config 0 descriptor??
[  112.279687][ T7857] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  112.287356][ T7857] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  112.496615][   T59] mct_u232 1-1:0.139: MCT U232 converter detected
[  112.504818][   T59] usb 1-1: MCT U232 converter now attached to ttyUSB0
[  112.510849][   T59] usb 1-1: USB disconnect, device number 7
[  112.517570][   T59] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0
[  112.521331][   T59] mct_u232 1-1:0.139: device disconnected
[  112.785905][ T7884] loop4: detected capacity change from 0 to 1024
[  112.791704][ T7884] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  112.813941][ T7884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  112.909326][ T5826] Bluetooth: hci0: command tx timeout
[  113.026417][ T7891] loop2: detected capacity change from 0 to 4096
[  113.034007][ T7891] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  113.074177][ T7891] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  113.080522][ T7891] ntfs3(loop2): Failed to load $Extend (-22).
[  113.085964][ T7891] ntfs3(loop2): Failed to initialize $Extend.
[  113.316894][  T791] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  113.405063][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.619'.
[  113.409135][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.619'.
[  113.412931][ T7901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.619'.
[  113.467937][  T791] usb 1-1: Using ep0 maxpacket: 8
[  113.473955][  T791] usb 1-1: config 2 has an invalid interface number: 31 but max is 0
[  113.479586][  T791] usb 1-1: config 2 has no interface number 0
[  113.481660][  T791] usb 1-1: config 2 interface 31 has no altsetting 0
[  113.497176][  T791] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  113.504410][  T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.512623][  T791] usb 1-1: Product: syz
[  113.514013][  T791] usb 1-1: Manufacturer: syz
[  113.515598][  T791] usb 1-1: SerialNumber: syz
[  113.641099][ T7651] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.691916][ T7912] loop4: detected capacity change from 0 to 2048
[  113.715334][ T7913] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  114.136917][ T5866] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  114.144415][  T791] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22
[  114.149669][  T791] usb 1-1: USB disconnect, device number 8
[  114.287005][ T5866] usb 5-1: Using ep0 maxpacket: 16
[  114.290919][ T5866] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8
[  114.297310][ T5866] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  114.300861][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.303384][ T5866] usb 5-1: Product: syz
[  114.305792][ T5866] usb 5-1: Manufacturer: syz
[  114.307409][ T5866] usb 5-1: SerialNumber: syz
[  114.310160][ T5866] usb 5-1: config 0 descriptor??
[  114.313499][ T5866] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  114.316628][ T5866] usb 5-1: Detected FT232R
[  114.357012][ T5867] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  114.507312][ T5867] usb 3-1: Using ep0 maxpacket: 8
[  114.514220][ T5867] usb 3-1: config 162 has an invalid interface number: 197 but max is 1
[  114.517312][ T5866] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  114.519177][ T5867] usb 3-1: config 162 has an invalid interface number: 143 but max is 1
[  114.523754][ T5867] usb 3-1: config 162 has no interface number 0
[  114.526386][ T5867] usb 3-1: config 162 has no interface number 1
[  114.529506][ T5867] usb 3-1: config 162 interface 197 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  114.535033][ T5867] usb 3-1: config 162 interface 143 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  114.539529][ T5867] usb 3-1: config 162 interface 143 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  114.544524][ T5867] usb 3-1: config 162 interface 143 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  114.550677][ T5867] usb 3-1: config 162 interface 143 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  114.554890][ T5867] usb 3-1: config 162 interface 143 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  114.560204][ T5867] usb 3-1: config 162 interface 197 has no altsetting 0
[  114.562854][ T5867] usb 3-1: config 162 interface 143 has no altsetting 0
[  114.569523][ T5867] usb 3-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7
[  114.572598][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.575095][ T5867] usb 3-1: Product: syz
[  114.576424][ T5867] usb 3-1: Manufacturer: syz
[  114.578660][ T5867] usb 3-1: SerialNumber: syz
[  114.749573][ T5866] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  114.820918][ T5826] Bluetooth: hci3: HCI Read Local Supported Commands not supported
[  114.821668][ T5867] usb 3-1: USB disconnect, device number 12
[  114.825510][   T53] Bluetooth: hci3: sending frame failed (-19)
[  114.830198][ T5826] Bluetooth: hci3: Opcode 0x0c03 failed: -19
[  114.940981][ T5866] usb 5-1: USB disconnect, device number 2
[  114.953707][ T5866] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  114.958555][ T5866] ftdi_sio 5-1:0.0: device disconnected
[  114.987556][ T5826] Bluetooth: hci0: command tx timeout
[  115.217019][ T5859] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  115.370266][ T5859] usb 1-1: Using ep0 maxpacket: 8
[  115.373869][ T5859] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  115.378750][ T5859] usb 1-1: config 0 has no interface number 0
[  115.381488][ T5859] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  115.385543][ T5859] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  115.390055][ T5859] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  115.394013][ T5859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.399299][ T5859] usb 1-1: config 0 descriptor??
[  115.409703][ T5859] hso 1-1:0.1: Failed to find BULK IN ep
[  115.609387][ T5866] usb 1-1: USB disconnect, device number 9
[  115.850345][ T7993] input: syz1 as /devices/virtual/input/input9
[  115.948886][ T7999] loop4: detected capacity change from 0 to 4096
[  115.982608][   T33] audit: type=1800 audit(1754388104.552:17): pid=7999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.658" name="file1" dev="loop4" ino=33 res=0 errno=0
[  115.995452][ T7999] ntfs3(loop4): ino=21, "file1" attr_collapse_range
[  116.068168][ T8001] loop4: detected capacity change from 0 to 4096
[  116.073115][ T8001] NILFS (loop4): mounting unchecked fs
[  116.075277][ T8001] NILFS (loop4): recovery required for readonly filesystem
[  116.079883][ T8001] NILFS (loop4): write access will be enabled during recovery
[  116.086037][ T8001] NILFS (loop4): invalid segment: Checksum error in super root
[  116.089210][ T8001] NILFS (loop4): error -22 while loading super root
[  116.496990][ T5859] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  116.659099][ T5859] usb 5-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1
[  116.663232][ T5859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.676564][ T5859] usb 5-1: config 0 descriptor??
[  116.683516][ T5859] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  116.693685][ T5859] dvb_usb_af9015 5-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  116.700499][ T8039] loop2: detected capacity change from 0 to 256
[  116.703229][ T8039] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  116.708725][ T8039] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  116.719917][ T8039] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  116.888670][ T5859] usb 5-1: USB disconnect, device number 3
[  117.359304][ T8053] loop0: detected capacity change from 0 to 16
[  117.374763][ T8053] erofs (device loop0): negative i_size @ nid 36
[  117.538909][ T8055] loop0: detected capacity change from 0 to 8192
[  117.547524][   T53] Bluetooth: hci0: command 0x0405 tx timeout
[  117.743982][ T8057] loop4: detected capacity change from 0 to 32768
[  117.792101][ T8057] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.683 (8057)
[  117.807374][ T8059] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  117.810493][ T8059] FAT-fs (loop0): Filesystem has been set read-only
[  118.017930][ T8057] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  118.027870][ T8057] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  118.030945][ T8057] BTRFS info (device loop4): using free-space-tree
[  118.140433][ T7651] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  118.839725][ T8094] loop4: detected capacity change from 0 to 256
[  118.844190][ T8094] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  118.848542][ T8094] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  118.853404][ T8094] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  119.032085][ T8096] loop4: detected capacity change from 0 to 32768
[  119.046039][ T8096] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.692 (8096)
[  119.095258][ T8096] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  119.117898][ T8096] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  119.121494][ T8096] BTRFS info (device loop4): using free-space-tree
[  119.194467][   T33] audit: type=1804 audit(1754388107.752:18): pid=8096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.692" name="/newroot/48/file1/file1" dev="loop4" ino=260 res=1 errno=0
[  119.386069][ T7651] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  119.613419][ T8128] loop4: detected capacity change from 0 to 40427
[  119.626509][ T8128] F2FS-fs (loop4): invalid crc value
[  119.628032][ T5832] udevd[5832]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system
[  119.641288][ T5832] udevd[5832]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system
[  119.663490][ T8128] F2FS-fs (loop4): Start checkpoint disabled!
[  119.666502][ T8128] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  119.698509][ T8128] F2FS-fs (loop4): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  119.733513][ T4026] kworker/u9:4: attempt to access beyond end of device
[  119.733513][ T4026] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  119.738251][ T4026] CPU: 0 UID: 0 PID: 4026 Comm: kworker/u9:4 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93-dirty #0 PREEMPT(full) 
[  119.738263][ T4026] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  119.738268][ T4026] Workqueue: writeback wb_workfn (flush-7:4)
[  119.738284][ T4026] Call Trace:
[  119.738288][ T4026]  <TASK>
[  119.738291][ T4026]  dump_stack_lvl+0x189/0x250
[  119.738302][ T4026]  ? __pfx_dump_stack_lvl+0x10/0x10
[  119.738308][ T4026]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  119.738317][ T4026]  ? __pfx_queue_work_on+0x10/0x10
[  119.738328][ T4026]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  119.738335][ T4026]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  119.738342][ T4026]  ? f2fs_hw_is_readonly+0x39b/0x470
[  119.738356][ T4026]  f2fs_handle_critical_error+0x37c/0x540
[  119.738393][ T4026]  f2fs_write_end_io+0x495/0x810
[  119.738400][ T4026]  ? blkg_put+0x22/0x240
[  119.738414][ T4026]  __submit_merged_bio+0x27a/0x6a0
[  119.738427][ T4026]  __submit_merged_write_cond+0x255/0x530
[  119.738441][ T4026]  f2fs_write_data_pages+0x261d/0x3000
[  119.738463][ T4026]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  119.738504][ T4026]  ? f2fs_write_meta_pages+0x357/0x450
[  119.738516][ T4026]  ? __lock_acquire+0xab9/0xd20
[  119.738527][ T4026]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  119.738535][ T4026]  do_writepages+0x32e/0x550
[  119.738546][ T4026]  ? reacquire_held_locks+0x127/0x1d0
[  119.738556][ T4026]  ? writeback_sb_inodes+0x372/0x1000
[  119.738568][ T4026]  __writeback_single_inode+0x145/0xff0
[  119.738575][ T4026]  ? do_raw_spin_unlock+0x4d/0x240
[  119.738585][ T4026]  writeback_sb_inodes+0x6b5/0x1000
[  119.738603][ T4026]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  119.738629][ T4026]  ? rcu_is_watching+0x15/0xb0
[  119.738644][ T4026]  wb_writeback+0x43b/0xaf0
[  119.738655][ T4026]  ? queue_io+0x3d1/0x590
[  119.738664][ T4026]  ? __pfx_wb_writeback+0x10/0x10
[  119.738681][ T4026]  ? _raw_spin_unlock_irq+0x23/0x50
[  119.738690][ T4026]  wb_workfn+0x409/0xef0
[  119.738707][ T4026]  ? __pfx_wb_workfn+0x10/0x10
[  119.738719][ T4026]  ? __lock_acquire+0xab9/0xd20
[  119.738732][ T4026]  ? process_scheduled_works+0x9ef/0x17b0
[  119.738745][ T4026]  ? _raw_spin_unlock_irq+0x23/0x50
[  119.738751][ T4026]  ? process_scheduled_works+0x9ef/0x17b0
[  119.738760][ T4026]  ? process_scheduled_works+0x9ef/0x17b0
[  119.738771][ T4026]  process_scheduled_works+0xae1/0x17b0
[  119.738793][ T4026]  ? __pfx_process_scheduled_works+0x10/0x10
[  119.738810][ T4026]  worker_thread+0x8a0/0xda0
[  119.738822][ T4026]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  119.738833][ T4026]  ? __kthread_parkme+0x7b/0x200
[  119.738843][ T4026]  kthread+0x711/0x8a0
[  119.738852][ T4026]  ? __pfx_worker_thread+0x10/0x10
[  119.738862][ T4026]  ? __pfx_kthread+0x10/0x10
[  119.738870][ T4026]  ? _raw_spin_unlock_irq+0x23/0x50
[  119.738877][ T4026]  ? lockdep_hardirqs_on+0x9c/0x150
[  119.738884][ T4026]  ? __pfx_kthread+0x10/0x10
[  119.738891][ T4026]  ret_from_fork+0x3fc/0x770
[  119.738904][ T4026]  ? __pfx_ret_from_fork+0x10/0x10
[  119.738917][ T4026]  ? __switch_to_asm+0x39/0x70
[  119.738924][ T4026]  ? __switch_to_asm+0x33/0x70
[  119.738931][ T4026]  ? __pfx_kthread+0x10/0x10
[  119.738938][ T4026]  ret_from_fork_asm+0x1a/0x30
[  119.738953][ T4026]  </TASK>
[  119.738957][ T4026] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  120.515498][ T8144] loop4: detected capacity change from 0 to 256
[  120.538018][ T8144] FAT-fs (loop4): bogus logical sector size 128
[  120.540081][ T8144] FAT-fs (loop4): Can't find a valid FAT filesystem
[  120.709850][ T8149] loop0: detected capacity change from 0 to 32768
[  120.712837][ T8149] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.704 (8149)
[  120.722922][ T8149] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  120.726100][ T8149] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  120.728744][ T5832] udevd[5832]: symlink '../../loop0' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:0' failed: Read-only file system
[  120.731313][ T8149] BTRFS info (device loop0): using free-space-tree
[  120.823094][ T5825] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  120.855461][ T5832] udevd[5832]: symlink '../../loop0' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:0' failed: Read-only file system
[  121.176903][ T5866] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  121.299811][ T8208] befs: Bad value for 'gid'
[  121.301296][ T8208] befs: Bad value for 'gid'
[  121.346965][ T5866] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  121.351220][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.357535][ T5866] usb 1-1: config 0 descriptor??
[  121.459596][ T8218] loop4: detected capacity change from 0 to 4096
[  121.474108][ T8218] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  121.483259][ T5832] udevd[5832]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  121.489477][ T5832] udevd[5832]: symlink '../../loop4' '/dev/disk/by-uuid/7089678B273CDB5C.tmp-b7:4' failed: Read-only file system
[  121.503470][ T5832] udevd[5832]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  121.507856][ T5832] udevd[5832]: symlink '../../loop4' '/dev/disk/by-uuid/7089678B273CDB5C.tmp-b7:4' failed: Read-only file system
[  121.524673][ T8218] ntfs3(loop4): ino=0, attr_set_size
[  121.526695][ T8218] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  121.553610][ T8218] ntfs3(loop4): ino=0, attr_set_size
[  121.563462][ T5866] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0e
[  121.565819][ T5866] hackrf 1-1:0.0: Could not detect board
[  121.573820][ T5866] hackrf 1-1:0.0: probe with driver hackrf failed with error -71
[  121.579248][ T5866] usb 1-1: USB disconnect, device number 10
[  121.887693][ T5859] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  122.050588][ T5859] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  122.053716][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.056349][ T5859] usb 5-1: Product: syz
[  122.058900][ T5859] usb 5-1: Manufacturer: syz
[  122.060441][ T5859] usb 5-1: SerialNumber: syz
[  122.063468][ T5859] usb 5-1: config 0 descriptor??
[  122.257913][ T8238] loop0: detected capacity change from 0 to 32768
[  122.282790][ T5997] udevd[5997]: symlink '../../loop0' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:0' failed: Read-only file system
[  122.291307][ T5859] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  122.303931][ T5997] udevd[5997]: symlink '../../loop0' '/dev/disk/by-uuid/35307472-fd4b-42de-878f-83186a645fa6.tmp-b7:0' failed: Read-only file system
[  123.043506][ T5866] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  123.135559][ T8251] netlink: 'syz.0.722': attribute type 1 has an invalid length.
[  123.138588][ T8251] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.722'.
[  123.197184][ T5866] usb 3-1: Using ep0 maxpacket: 32
[  123.208033][ T5866] usb 3-1: config 1 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.211338][ T5866] usb 3-1: config 1 interface 0 altsetting 254 bulk endpoint 0x82 has invalid maxpacket 32
[  123.214785][ T5866] usb 3-1: config 1 interface 0 altsetting 254 bulk endpoint 0x3 has invalid maxpacket 16
[  123.223006][ T5866] usb 3-1: config 1 interface 0 altsetting 254 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  123.227453][ T5866] usb 3-1: config 1 interface 0 has no altsetting 0
[  123.235222][ T5866] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  123.238478][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  123.241005][ T5866] usb 3-1: SerialNumber: syz
[  123.257232][ T8249] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  123.266752][ T8249] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  123.273913][ T5866] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[  123.279673][ T5866] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12
[  123.323305][   T33] audit: type=1326 audit(1754388111.882:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8258 comm="syz.0.726" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f961898eb69 code=0x0
[  123.493013][    T9] usb 3-1: USB disconnect, device number 13
[  123.515791][ T8265] loop0: detected capacity change from 0 to 32768
[  123.519375][ T8265] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.729 (8265)
[  123.525423][ T8265] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  123.529545][ T8265] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  123.532356][ T8265] BTRFS info (device loop0): using free-space-tree
[  123.626387][ T5825] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  123.807998][ T8289] input: syz1 as /devices/virtual/input/input10
[  123.899339][ T5859] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  123.907550][ T5859] usb 5-1: USB disconnect, device number 4
[  123.913661][ T8295] loop0: detected capacity change from 0 to 1024
[  123.919656][ T8295] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  124.074068][ T8305] loop0: detected capacity change from 0 to 256
[  124.410914][ T8323] loop2: detected capacity change from 0 to 40427
[  124.423792][ T8323] F2FS-fs (loop2): build fault injection rate: 690
[  124.430623][ T8323] F2FS-fs (loop2): Image doesn't support compression
[  124.432855][ T8323] F2FS-fs (loop2): Image doesn't support compression
[  124.438092][ T8323] F2FS-fs (loop2): invalid crc value
[  124.451096][ T8321] loop0: detected capacity change from 0 to 32768
[  124.459828][ T8321] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.748 (8321)
[  124.475981][ T8321] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  124.480021][ T8321] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  124.484371][ T8321] BTRFS error (device loop0): ignoredatacsums must be used with ro mount option
[  124.491256][ T8321] BTRFS info (device loop0): using free-space-tree
[  124.493453][ T8321] BTRFS error (device loop0): open_ctree failed: -22
[  124.502155][ T8323] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  124.519097][ T8323] syz.2.749: attempt to access beyond end of device
[  124.519097][ T8323] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  124.537558][ T8331] loop4: detected capacity change from 0 to 1024
[  124.557265][ T8331] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  124.565349][ T6220] syz-executor: attempt to access beyond end of device
[  124.565349][ T6220] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  124.576964][ T6220] CPU: 1 UID: 0 PID: 6220 Comm: syz-executor Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93-dirty #0 PREEMPT(full) 
[  124.576976][ T6220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  124.576981][ T6220] Call Trace:
[  124.576984][ T6220]  <TASK>
[  124.576988][ T6220]  dump_stack_lvl+0x189/0x250
[  124.577009][ T6220]  ? __pfx_dump_stack_lvl+0x10/0x10
[  124.577015][ T6220]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  124.577024][ T6220]  ? __pfx_queue_work_on+0x10/0x10
[  124.577038][ T6220]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  124.577045][ T6220]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  124.577053][ T6220]  ? f2fs_hw_is_readonly+0x39b/0x470
[  124.577067][ T6220]  f2fs_handle_critical_error+0x37c/0x540
[  124.577081][ T6220]  f2fs_write_end_io+0x495/0x810
[  124.577089][ T6220]  ? blkg_put+0x22/0x240
[  124.577104][ T6220]  __submit_merged_bio+0x27a/0x6a0
[  124.577118][ T6220]  __submit_merged_write_cond+0x255/0x530
[  124.577131][ T6220]  f2fs_write_data_pages+0x261d/0x3000
[  124.577138][ T6220]  ? __lock_acquire+0xab9/0xd20
[  124.577162][ T6220]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  124.577196][ T6220]  ? __mod_zone_page_state+0xd7/0x140
[  124.577216][ T6220]  ? folios_put_refs+0x560/0x640
[  124.577253][ T6220]  ? __pfx_folios_put_refs+0x10/0x10
[  124.577265][ T6220]  ? rcu_is_watching+0x15/0xb0
[  124.577287][ T6220]  ? __lock_acquire+0xab9/0xd20
[  124.577338][ T6220]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  124.577351][ T6220]  do_writepages+0x32e/0x550
[  124.577371][ T6220]  ? do_raw_spin_unlock+0x4d/0x240
[  124.577387][ T6220]  filemap_fdatawrite+0x191/0x230
[  124.577402][ T6220]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  124.577452][ T6220]  ? do_raw_spin_unlock+0x4d/0x240
[  124.577467][ T6220]  f2fs_sync_dirty_inodes+0x31f/0x830
[  124.577492][ T6220]  f2fs_write_checkpoint+0x94a/0x1de0
[  124.577524][ T6220]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  124.577573][ T6220]  ? kill_f2fs_super+0x298/0x6c0
[  124.577594][ T6220]  kill_f2fs_super+0x2c3/0x6c0
[  124.577612][ T6220]  ? __pfx_kill_f2fs_super+0x10/0x10
[  124.577621][ T6220]  ? radix_tree_delete_item+0x2b6/0x400
[  124.577639][ T6220]  ? shrinker_free+0x2ce/0x3e0
[  124.577652][ T6220]  deactivate_locked_super+0xbc/0x130
[  124.577666][ T6220]  cleanup_mnt+0x425/0x4c0
[  124.577685][ T6220]  ? lockdep_hardirqs_on+0x9c/0x150
[  124.577699][ T6220]  task_work_run+0x1d4/0x260
[  124.577710][ T6220]  ? __pfx_task_work_run+0x10/0x10
[  124.577717][ T6220]  ? __x64_sys_umount+0x122/0x160
[  124.577727][ T6220]  ? exit_to_user_mode_loop+0x40/0x110
[  124.577739][ T6220]  exit_to_user_mode_loop+0xec/0x110
[  124.577748][ T6220]  do_syscall_64+0x2bd/0x3b0
[  124.577756][ T6220]  ? lockdep_hardirqs_on+0x9c/0x150
[  124.577764][ T6220]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.577771][ T6220]  ? exc_page_fault+0x9f/0xf0
[  124.577779][ T6220]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.577786][ T6220] RIP: 0033:0x7f149378fe97
[  124.577794][ T6220] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  124.577800][ T6220] RSP: 002b:00007ffccd36c408 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  124.577809][ T6220] RAX: 0000000000000000 RBX: 00007f1493811bdd RCX: 00007f149378fe97
[  124.577814][ T6220] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccd36c4c0
[  124.577818][ T6220] RBP: 00007ffccd36c4c0 R08: 0000000000000000 R09: 0000000000000000
[  124.577823][ T6220] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffccd36d550
[  124.577827][ T6220] R13: 00007f1493811bdd R14: 000000000001e613 R15: 00007ffccd36d590
[  124.577840][ T6220]  </TASK>
[  124.578320][ T6220] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  124.625842][ T8331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.746557][ T8331] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.751: missing EA_INODE flag
[  124.758040][ T8331] EXT4-fs (loop4): Remounting filesystem read-only
[  124.761186][ T8331] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  124.793219][ T7651] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.206965][ T5866] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  125.357234][ T5866] usb 1-1: Using ep0 maxpacket: 32
[  125.360805][ T5866] usb 1-1: unable to get BOS descriptor or descriptor too short
[  125.364336][ T5866] usb 1-1: config 244 has an invalid descriptor of length 0, skipping remainder of the config
[  125.369777][ T5866] usb 1-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f
[  125.372847][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.376701][ T5866] usb 1-1: Product: syz
[  125.379328][ T5866] usb 1-1: Manufacturer: syz
[  125.380871][ T5866] usb 1-1: SerialNumber: syz
[  125.607696][ T5866] comedi comedi5: Wrong number of endpoints
[  125.613310][ T5866] dt9812 1-1:244.0: driver 'dt9812' failed to auto-configure device.
[  125.623862][ T5866] usb 1-1: USB disconnect, device number 11
[  125.826944][ T8344] comedi comedi2: reset error (fatal)
[  125.852068][ T8370] Bluetooth: hci0: unsupported parameter 5148
[  125.854131][ T8370] Bluetooth: hci0: unsupported parameter 101
[  125.857539][ T8370] Bluetooth: hci0: unsupported parameter 5148
[  125.860853][ T8370] Bluetooth: hci0: unsupported parameter 101
[  126.160601][ T8386] loop0: detected capacity change from 0 to 1024
[  126.179922][ T5832] udevd[5832]: symlink '../../loop0' '/dev/disk/by-label/untitled.tmp-b7:0' failed: Read-only file system
[  126.185367][ T5832] udevd[5832]: symlink '../../loop0' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:0' failed: Read-only file system
[  126.212693][ T5832] udevd[5832]: symlink '../../loop0' '/dev/disk/by-label/untitled.tmp-b7:0' failed: Read-only file system
[  126.213079][ T5825] hfsplus: bad catalog entry type
[  126.225033][ T5832] udevd[5832]: symlink '../../loop0' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:0' failed: Read-only file system
[  126.281618][ T1930] psmouse serio2: Failed to reset mouse on : -5
[  126.432212][   T27] hfsplus: b-tree write err: -5, ino 4
[  126.463981][ T5852] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.522661][ T5852] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.584937][ T5852] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.660785][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  126.663982][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  126.669570][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  126.672903][ T5852] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.676652][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  126.680205][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  126.826754][ T5852] bridge_slave_1: left allmulticast mode
[  126.829023][ T5852] bridge_slave_1: left promiscuous mode
[  126.831217][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.836594][ T5852] bridge_slave_0: left allmulticast mode
[  126.839020][ T5852] bridge_slave_0: left promiscuous mode
[  126.841129][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.181678][ T5852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  127.185806][ T5852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  127.189965][ T5852] bond0 (unregistering): Released all slaves
[  127.269694][ T5852] team0: Port device bond1 removed
[  127.272180][ T5852] bond1 (unregistering): Released all slaves
[  127.286384][ T8391] chnl_net:caif_netlink_parms(): no params data found
[  127.406277][ T8391] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.408861][ T8391] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.411189][ T8391] bridge_slave_0: entered allmulticast mode
[  127.413940][ T8391] bridge_slave_0: entered promiscuous mode
[  127.419066][ T8391] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.421545][ T8391] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.424001][ T8391] bridge_slave_1: entered allmulticast mode
[  127.426669][ T8391] bridge_slave_1: entered promiscuous mode
[  127.478383][ T8391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  127.487785][ T8391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  127.522799][ T8391] team0: Port device team_slave_0 added
[  127.526191][ T8391] team0: Port device team_slave_1 added
[  127.531420][ T5852] hsr_slave_0: left promiscuous mode
[  127.535406][ T5852] hsr_slave_1: left promiscuous mode
[  127.541119][ T5852] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.543601][ T5852] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.546375][ T5852] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  127.549949][ T5852] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.563581][ T5852] veth1_macvtap: left promiscuous mode
[  127.565420][ T5852] veth0_macvtap: left promiscuous mode
[  127.567615][ T5852] veth1_vlan: left promiscuous mode
[  127.569325][ T5852] veth0_vlan: left promiscuous mode
[  127.850460][ T5852] team0 (unregistering): Port device team_slave_1 removed
[  127.875194][ T5852] team0 (unregistering): Port device team_slave_0 removed
[  128.228218][ T8391] batman_adv: batadv0: Adding interface: batadv_slave_0
[  128.231920][ T8391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.247044][ T8391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  128.253333][ T8391] batman_adv: batadv0: Adding interface: batadv_slave_1
[  128.256465][ T8391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.273189][ T8391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.342127][ T8416] loop2: detected capacity change from 0 to 4096
[  128.366325][ T5832] udevd[5832]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  128.374993][ T5832] udevd[5832]: symlink '../../loop2' '/dev/disk/by-uuid/399AA58E54924951.tmp-b7:2' failed: Read-only file system
[  128.410926][ T8391] hsr_slave_0: entered promiscuous mode
[  128.413305][ T8391] hsr_slave_1: entered promiscuous mode
[  128.425653][ T5832] udevd[5832]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  128.428095][ T8391] debugfs: 'hsr0' already exists in 'hsr'
[  128.432469][ T8391] Cannot create hsr debugfs directory
[  128.445157][ T5832] udevd[5832]: symlink '../../loop2' '/dev/disk/by-uuid/399AA58E54924951.tmp-b7:2' failed: Read-only file system
[  128.673588][ T8391] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  128.678207][ T8391] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  128.682437][ T8391] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  128.687799][ T8391] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  128.744162][ T8391] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.747375][ T5826] Bluetooth: hci1: command tx timeout
[  128.766100][ T8391] 8021q: adding VLAN 0 to HW filter on device team0
[  128.773497][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.775893][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  128.797923][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.800292][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.814937][ T8391] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  128.955960][ T8391] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.005489][ T8440] loop2: detected capacity change from 0 to 32768
[  129.032573][ T8440] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  129.038320][ T5832] udevd[5832]: symlink '../../loop2' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:2' failed: Read-only file system
[  129.045195][ T8440] JBD2: Unrecognised features on journal
[  129.047324][ T8440] (syz.2.787,8440,1):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  129.050197][ T8440] (syz.2.787,8440,1):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  129.053196][ T8440] (syz.2.787,8440,1):ocfs2_check_volume:2432 ERROR: status = -22
[  129.056491][ T8440] (syz.2.787,8440,1):ocfs2_mount_volume:1764 ERROR: status = -22
[  129.070931][ T8440] (syz.2.787,8440,1):ocfs2_fill_super:1177 ERROR: status = -22
[  129.180581][ T8391] veth0_vlan: entered promiscuous mode
[  129.189557][ T8391] veth1_vlan: entered promiscuous mode
[  129.222356][ T8391] veth0_macvtap: entered promiscuous mode
[  129.228522][ T8391] veth1_macvtap: entered promiscuous mode
[  129.244389][ T8391] batman_adv: batadv0: Interface activated: batadv_slave_0
[  129.253536][ T8391] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.261595][ T5836] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.270957][ T5868] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.274040][ T5868] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.281799][ T5868] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.386009][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.389768][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.409557][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  129.412179][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  129.474547][ T8473] loop2: detected capacity change from 0 to 1024
[  129.480819][ T8475] loop5: detected capacity change from 0 to 1024
[  129.502498][ T5832] udevd[5832]: symlink '../../loop2' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system
[  129.540373][ T8475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.785410][ T8475] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.779: Allocating blocks 497-513 which overlap fs metadata
[  129.799516][ T8474] EXT4-fs (loop5): pa ffff88810ac5cd98: logic 64, phys. 193, len 20
[  129.802459][ T8474] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1
[  129.926156][ T8391] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.059358][ T8489] netlink: 165 bytes leftover after parsing attributes in process `syz.5.792'.
[  130.076960][ T1930] misc userio: Buffer overflowed, userio client isn't keeping up
[  130.651481][ T8505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  130.730137][ T8505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  130.827030][ T5826] Bluetooth: hci1: command tx timeout
[  130.915943][ T8509] loop2: detected capacity change from 0 to 2048
[  130.932131][ T8509] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  130.941665][ T8509] NILFS (loop2): mounting unchecked fs
[  130.989422][ T8509] NILFS (loop2): recovery complete
[  130.994518][ T8512] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  131.135805][ T1930] input: PS/2 Generic Mouse as /devices/serio2/input/input11
[  131.357384][ T1930] psmouse serio2: Failed to enable mouse on 
[  131.665244][ T8525] loop4: detected capacity change from 0 to 2048
[  131.688894][ T8525] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  131.709609][ T5997] udevd[5997]: symlink '../../loop4' '/dev/disk/by-label/LinuxUDF.tmp-b7:4' failed: Read-only file system
[  131.870013][ T5997] udevd[5997]: symlink '../../loop4' '/dev/disk/by-uuid/1234567812345678.tmp-b7:4' failed: Read-only file system
[  131.894255][ T8527] loop2: detected capacity change from 0 to 32768
[  131.911216][ T5832] udevd[5832]: symlink '../../loop2' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:2' failed: Read-only file system
[  131.923731][ T5832] udevd[5832]: symlink '../../loop2' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:2' failed: Read-only file system
[  131.935609][ T8527] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  131.953234][ T8527] XFS (loop2): Ending clean mount
[  131.957164][ T8527] XFS (loop2): Quotacheck needed: Please wait.
[  131.978789][ T8527] XFS (loop2): Quotacheck: Done.
[  132.020476][ T6220] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  132.099081][ T5866] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  132.170340][ T8552] loop2: detected capacity change from 0 to 16
[  132.175905][ T8552] erofs (device loop2): mounted with root inode @ nid 36.
[  132.182110][ T5832] udevd[5832]: symlink '../../loop2' '/dev/disk/by-uuid/de08ee7d-c14c-4657-8f5d-a5ca07e02e09.tmp-b7:2' failed: Read-only file system
[  132.209461][ T5832] udevd[5832]: symlink '../../loop2' '/dev/disk/by-uuid/de08ee7d-c14c-4657-8f5d-a5ca07e02e09.tmp-b7:2' failed: Read-only file system
[  132.250980][ T5866] usb 5-1: Using ep0 maxpacket: 8
[  132.262740][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  132.269109][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  132.271072][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.272489][ T5866] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  132.274256][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.295828][ T5866] usb 5-1: New USB device found, idVendor=1608, idProduct=0207, bcdDevice=43.8e
[  132.300634][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.312244][ T5866] usb 5-1: config 0 descriptor??
[  132.321263][ T5866] io_ti 5-1:0.0: required endpoints missing
[  132.523952][  T791] usb 5-1: USB disconnect, device number 5
[  132.593971][ T8581] loop2: detected capacity change from 0 to 32768
[  132.600342][ T8581] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.820 (8581)
[  132.606026][ T5832] udevd[5832]: symlink '../../loop2' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:2' failed: Read-only file system
[  132.608705][ T8581] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  132.624084][ T8581] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  132.627829][ T8581] BTRFS info (device loop2): using free-space-tree
[  132.647942][ T8579] loop5: detected capacity change from 0 to 40427
[  132.681689][ T6220] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  132.682286][ T5997] udevd[5997]: symlink '../../loop5' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:5' failed: Read-only file system
[  132.724096][ T5997] udevd[5997]: symlink '../../loop5' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:5' failed: Read-only file system
[  132.766007][ T8579] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  132.794106][ T8579] syz.5.819: attempt to access beyond end of device
[  132.794106][ T8579] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  132.808826][ T8579] syz.5.819: attempt to access beyond end of device
[  132.808826][ T8579] loop5: rw=2057, sector=45096, nr_sectors = 8 limit=40427
[  132.827514][ T8391] syz-executor: attempt to access beyond end of device
[  132.827514][ T8391] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  132.839760][ T8391] CPU: 0 UID: 0 PID: 8391 Comm: syz-executor Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93-dirty #0 PREEMPT(full) 
[  132.839776][ T8391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  132.839781][ T8391] Call Trace:
[  132.839785][ T8391]  <TASK>
[  132.839788][ T8391]  dump_stack_lvl+0x189/0x250
[  132.839803][ T8391]  ? __pfx_dump_stack_lvl+0x10/0x10
[  132.839810][ T8391]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  132.839819][ T8391]  ? __pfx_queue_work_on+0x10/0x10
[  132.839833][ T8391]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  132.839839][ T8391]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  132.839853][ T8391]  ? f2fs_hw_is_readonly+0x39b/0x470
[  132.839867][ T8391]  f2fs_handle_critical_error+0x37c/0x540
[  132.839880][ T8391]  f2fs_write_end_io+0x495/0x810
[  132.839889][ T8391]  ? blkg_put+0x22/0x240
[  132.839902][ T8391]  __submit_merged_bio+0x27a/0x6a0
[  132.839916][ T8391]  __submit_merged_write_cond+0x255/0x530
[  132.839928][ T8391]  f2fs_write_data_pages+0x261d/0x3000
[  132.839948][ T8391]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  132.839955][ T8391]  ? is_bpf_text_address+0x26/0x2b0
[  132.839969][ T8391]  ? arch_stack_walk+0xfc/0x150
[  132.839988][ T8391]  ? __lock_acquire+0xab9/0xd20
[  132.839999][ T8391]  ? css_rstat_updated+0x1a5/0xca0
[  132.840011][ T8391]  ? css_rstat_updated+0x1a5/0xca0
[  132.840028][ T8391]  ? __lock_acquire+0xab9/0xd20
[  132.840042][ T8391]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  132.840050][ T8391]  do_writepages+0x32e/0x550
[  132.840063][ T8391]  ? do_raw_spin_unlock+0x4d/0x240
[  132.840072][ T8391]  filemap_fdatawrite+0x191/0x230
[  132.840081][ T8391]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  132.840106][ T8391]  ? do_raw_spin_unlock+0x4d/0x240
[  132.840114][ T8391]  f2fs_sync_dirty_inodes+0x31f/0x830
[  132.840128][ T8391]  f2fs_write_checkpoint+0x94a/0x1de0
[  132.840144][ T8391]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  132.840169][ T8391]  ? kill_f2fs_super+0x298/0x6c0
[  132.840201][ T8391]  kill_f2fs_super+0x2c3/0x6c0
[  132.840214][ T8391]  ? __pfx_kill_f2fs_super+0x10/0x10
[  132.840221][ T8391]  ? radix_tree_delete_item+0x2b6/0x400
[  132.840232][ T8391]  ? shrinker_free+0x2ce/0x3e0
[  132.840240][ T8391]  deactivate_locked_super+0xbc/0x130
[  132.840248][ T8391]  cleanup_mnt+0x425/0x4c0
[  132.840259][ T8391]  ? lockdep_hardirqs_on+0x9c/0x150
[  132.840269][ T8391]  task_work_run+0x1d4/0x260
[  132.840278][ T8391]  ? __pfx_task_work_run+0x10/0x10
[  132.840285][ T8391]  ? __x64_sys_umount+0x122/0x160
[  132.840295][ T8391]  ? exit_to_user_mode_loop+0x40/0x110
[  132.840306][ T8391]  exit_to_user_mode_loop+0xec/0x110
[  132.840315][ T8391]  do_syscall_64+0x2bd/0x3b0
[  132.840323][ T8391]  ? lockdep_hardirqs_on+0x9c/0x150
[  132.840330][ T8391]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.840337][ T8391]  ? exc_page_fault+0x9f/0xf0
[  132.840345][ T8391]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.840351][ T8391] RIP: 0033:0x7f7e3a18fe97
[  132.840359][ T8391] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  132.840365][ T8391] RSP: 002b:00007ffe1ae873c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  132.840374][ T8391] RAX: 0000000000000000 RBX: 00007f7e3a211bdd RCX: 00007f7e3a18fe97
[  132.840379][ T8391] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe1ae87480
[  132.840383][ T8391] RBP: 00007ffe1ae87480 R08: 0000000000000000 R09: 0000000000000000
[  132.840387][ T8391] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe1ae88510
[  132.840392][ T8391] R13: 00007f7e3a211bdd R14: 000000000002065c R15: 00007ffe1ae88550
[  132.840403][ T8391]  </TASK>
[  132.840406][ T8391] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  132.894673][ T8606] loop2: detected capacity change from 0 to 1024
[  132.936025][ T5826] Bluetooth: hci1: command tx timeout
[  132.944429][ T8606] hfsplus: Bad value for 'gid'
[  132.978607][ T5832] udevd[5832]: symlink '../../loop2' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system
[  133.094868][ T8610] loop4: detected capacity change from 0 to 512
[  133.097351][   T33] audit: type=1800 audit(1754388122.654:20): pid=8609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.825" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  133.113204][ T8610] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.824: bad orphan inode 17
[  133.126195][ T8610] ext4_test_bit(bit=16, block=4) = 1
[  133.128805][ T8610] is_bad_inode(inode)=0
[  133.130891][ T8610] NEXT_ORPHAN(inode)=0
[  133.132298][ T8610] max_ino=32
[  133.133404][ T8610] i_nlink=1
[  133.135396][ T8610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.179075][ T7651] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.296713][   T33] audit: type=1326 audit(1754388122.854:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.4.832" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9b18eb69 code=0x7ffc0000
[  133.314915][   T33] audit: type=1326 audit(1754388122.874:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.4.832" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9b18eb69 code=0x7ffc0000
[  133.325061][   T33] audit: type=1326 audit(1754388122.874:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.4.832" exe="/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f0a9b18eb69 code=0x7ffc0000
[  133.349027][   T33] audit: type=1326 audit(1754388122.874:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.4.832" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9b18eb69 code=0x7ffc0000
[  133.356064][   T33] audit: type=1326 audit(1754388122.874:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8627 comm="syz.4.832" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9b18eb69 code=0x7ffc0000
[  133.437022][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  133.452920][ T8629] loop2: detected capacity change from 0 to 32768
[  133.491636][ T8631] loop4: detected capacity change from 0 to 40427
[  133.495125][ T8631] F2FS-fs (loop4): build fault injection rate: 690
[  133.495320][ T8629] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  133.498484][ T8631] F2FS-fs (loop4): invalid crc value
[  133.520906][ T8629] XFS (loop2): Ending clean mount
[  133.528718][ T8629] XFS (loop2): Quotacheck needed: Please wait.
[  133.561784][ T8631] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  133.563922][ T8629] XFS (loop2): Quotacheck: Done.
[  133.581289][ T7651] syz-executor: attempt to access beyond end of device
[  133.581289][ T7651] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  133.587194][   T33] audit: type=1800 audit(1754388123.154:26): pid=8629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.831" name="bus" dev="loop2" ino=6155 res=0 errno=0
[  133.587236][ T7651] CPU: 0 UID: 0 PID: 7651 Comm: syz-executor Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93-dirty #0 PREEMPT(full) 
[  133.587253][ T7651] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  133.587260][ T7651] Call Trace:
[  133.587267][ T7651]  <TASK>
[  133.587273][ T7651]  dump_stack_lvl+0x189/0x250
[  133.587294][ T7651]  ? __pfx_dump_stack_lvl+0x10/0x10
[  133.587305][ T7651]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  133.587319][ T7651]  ? __pfx_queue_work_on+0x10/0x10
[  133.587339][ T7651]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  133.587351][ T7651]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  133.587365][ T7651]  ? f2fs_hw_is_readonly+0x39b/0x470
[  133.587387][ T7651]  f2fs_handle_critical_error+0x37c/0x540
[  133.587409][ T7651]  f2fs_write_end_io+0x495/0x810
[  133.587422][ T7651]  ? blkg_put+0x22/0x240
[  133.587443][ T7651]  __submit_merged_bio+0x27a/0x6a0
[  133.587465][ T7651]  __submit_merged_write_cond+0x255/0x530
[  133.587487][ T7651]  f2fs_write_data_pages+0x261d/0x3000
[  133.587524][ T7651]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  133.587546][ T7651]  ? arch_stack_walk+0xfc/0x150
[  133.587579][ T7651]  ? __mod_zone_page_state+0xd7/0x140
[  133.587599][ T7651]  ? folios_put_refs+0x560/0x640
[  133.587617][ T7651]  ? __pfx_folios_put_refs+0x10/0x10
[  133.587635][ T7651]  ? rcu_is_watching+0x15/0xb0
[  133.587658][ T7651]  ? __lock_acquire+0xab9/0xd20
[  133.587685][ T7651]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  133.587698][ T7651]  do_writepages+0x32e/0x550
[  133.587720][ T7651]  ? do_raw_spin_unlock+0x4d/0x240
[  133.587737][ T7651]  filemap_fdatawrite+0x191/0x230
[  133.587752][ T7651]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  133.587798][ T7651]  ? do_raw_spin_unlock+0x4d/0x240
[  133.587813][ T7651]  f2fs_sync_dirty_inodes+0x31f/0x830
[  133.587837][ T7651]  f2fs_write_checkpoint+0x94a/0x1de0
[  133.587867][ T7651]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  133.587907][ T7651]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  133.587921][ T7651]  ? kfree+0x18e/0x440
[  133.587937][ T7651]  ? kill_f2fs_super+0x298/0x6c0
[  133.587954][ T7651]  kill_f2fs_super+0x2c3/0x6c0
[  133.587972][ T7651]  ? __pfx_kill_f2fs_super+0x10/0x10
[  133.587984][ T7651]  ? radix_tree_delete_item+0x2b6/0x400
[  133.588002][ T7651]  ? shrinker_free+0x2ce/0x3e0
[  133.588014][ T7651]  deactivate_locked_super+0xbc/0x130
[  133.588029][ T7651]  cleanup_mnt+0x425/0x4c0
[  133.588047][ T7651]  ? lockdep_hardirqs_on+0x9c/0x150
[  133.588062][ T7651]  task_work_run+0x1d4/0x260
[  133.588078][ T7651]  ? __pfx_task_work_run+0x10/0x10
[  133.588090][ T7651]  ? __x64_sys_umount+0x122/0x160
[  133.588106][ T7651]  ? exit_to_user_mode_loop+0x40/0x110
[  133.588122][ T7651]  exit_to_user_mode_loop+0xec/0x110
[  133.588138][ T7651]  do_syscall_64+0x2bd/0x3b0
[  133.588150][ T7651]  ? lockdep_hardirqs_on+0x9c/0x150
[  133.588160][ T7651]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.588200][ T7651]  ? exc_page_fault+0x9f/0xf0
[  133.588214][ T7651]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.588225][ T7651] RIP: 0033:0x7f0a9b18fe97
[  133.588237][ T7651] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  133.588247][ T7651] RSP: 002b:00007ffe51d0b738 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  133.588261][ T7651] RAX: 0000000000000000 RBX: 00007f0a9b211bdd RCX: 00007f0a9b18fe97
[  133.588269][ T7651] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe51d0b7f0
[  133.588275][ T7651] RBP: 00007ffe51d0b7f0 R08: 0000000000000000 R09: 0000000000000000
[  133.588282][ T7651] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe51d0c880
[  133.588291][ T7651] R13: 00007f0a9b211bdd R14: 000000000002094e R15: 00007ffe51d0c8c0
[  133.588309][ T7651]  </TASK>
[  133.588315][ T7651] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  133.594327][   T33] audit: type=1800 audit(1754388123.154:27): pid=8629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.831" name="bus" dev="loop2" ino=6155 res=0 errno=0
[  133.598893][    T9] usb 6-1: Using ep0 maxpacket: 32
[  133.673629][   T33] audit: type=1800 audit(1754388123.234:28): pid=8629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.831" name="file1" dev="loop2" ino=6150 res=0 errno=0
[  133.684407][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  133.768958][ T6220] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  133.774812][    T9] usb 6-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[  133.782307][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.785493][    T9] usb 6-1: Product: syz
[  133.787682][    T9] usb 6-1: Manufacturer: syz
[  133.789463][    T9] usb 6-1: SerialNumber: syz
[  133.802599][    T9] usb 6-1: config 0 descriptor??
[  133.813389][    T9] etas_es58x 6-1:0.0: Starting syz syz (Serial Number syz)
[  134.032736][  T791] usb 6-1: USB disconnect, device number 2
[  134.152424][ T8646] loop4: detected capacity change from 0 to 32768
[  134.174062][ T8646] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  134.184622][ T8646] XFS (loop4): Ending clean mount
[  134.279347][ T7651] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  134.503042][ T8662] loop4: detected capacity change from 0 to 40427
[  134.506071][ T5866] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  134.509204][ T8662] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  134.511795][ T8662] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  134.517845][ T8662] F2FS-fs (loop4): invalid crc value
[  134.564760][ T8662] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  134.567237][ T8662] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  134.689116][ T8668] loop5: detected capacity change from 0 to 32768
[  134.717049][ T5866] usb 3-1: Using ep0 maxpacket: 16
[  134.736693][ T5866] usb 3-1: config 252 has an invalid interface number: 15 but max is 0
[  134.739849][ T5866] usb 3-1: config 252 has no interface number 0
[  134.820950][ T5866] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  134.865123][ T8668] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  134.870488][ T5866] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29
[  134.873549][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.882966][ T5866] usb 3-1: Product: syz
[  134.885228][ T5866] usb 3-1: Manufacturer: syz
[  134.887440][ T5866] usb 3-1: SerialNumber: syz
[  134.918328][ T5866] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  134.940599][ T8391] ocfs2: Unmounting device (7,5) on (node local)
[  134.987015][ T5826] Bluetooth: hci1: command tx timeout
[  135.071397][ T8680] loop5: detected capacity change from 0 to 512
[  135.076266][ T8680] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  135.080380][ T8680] System zones: 1-12
[  135.083145][ T8680] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.842: error while reading EA inode 32 err=-116
[  135.092373][ T8680] EXT4-fs (loop5): Remounting filesystem read-only
[  135.096299][ T5866] usb 3-1: USB disconnect, device number 14
[  135.096344][ T5868] usb 3-1: Failed to submit usb control message: -71
[  135.098500][ T8680] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  135.107389][ T8680] EXT4-fs (loop5): 1 orphan inode deleted
[  135.110052][ T5868] usb 3-1: unable to send the bmi data to the device: -71
[  135.113285][ T5868] usb 3-1: unable to get target info from device
[  135.113449][ T8680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.115477][ T5868] usb 3-1: could not get target info (-71)
[  135.120449][ T8680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.122753][ T5868] usb 3-1: could not probe fw (-71)
[  135.468252][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  135.630920][    T9] usb 6-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice= d.df
[  135.636748][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.645076][    T9] usb 6-1: config 0 descriptor??
[  135.650440][    T9] gspca_main: benq-2.14.0 probing 04a5:3035
[  135.854624][   T24] usb 6-1: USB disconnect, device number 3
[  135.876980][ T5866] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  136.027526][ T5866] usb 3-1: Using ep0 maxpacket: 16
[  136.030816][ T5866] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  136.033510][ T5866] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  136.037981][ T5866] usb 3-1: config 0 has no interface number 0
[  136.042318][ T5866] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  136.045368][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.048558][ T5866] usb 3-1: Product: syz
[  136.049974][ T5866] usb 3-1: Manufacturer: syz
[  136.051501][ T5866] usb 3-1: SerialNumber: syz
[  136.054416][ T5866] usb 3-1: config 0 descriptor??
[  136.061299][ T5866] usb 3-1: Found UVC 0.00 device syz (046d:08f3)
[  136.063439][ T5866] usb 3-1: No valid video chain found.
[  136.265475][ T5866] usb 3-1: USB disconnect, device number 15
[  136.449366][ T8698] loop5: detected capacity change from 0 to 256
[  136.455465][ T8698] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  138.364079][ T8715] loop5: detected capacity change from 0 to 32768
[  138.368674][ T8715] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.853 (8715)
[  138.378456][ T8715] BTRFS error: invalid seeding and uuid-changed device detected
[  138.419319][ T5832] udevd[5832]: symlink '../../loop5' '/dev/disk/by-uuid/3d39d0ba-bdae-447e-827b-b091e1a68885.tmp-b7:5' failed: Read-only file system
[  138.749325][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.5.859'.
[  138.759621][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.859'.
[  138.999994][ T8743] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.864'.
[  139.403271][ T8763] netlink: 'syz.4.873': attribute type 1 has an invalid length.
[  139.706884][ T5291] usb 5-1: new low-speed USB device number 6 using dummy_hcd
[  139.757844][ T1930] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  139.858830][ T5291] usb 5-1: config index 0 descriptor too short (expected 1307, got 27)
[  139.866988][ T5291] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[  139.869723][ T5291] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[  139.876971][ T5291] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  139.880628][ T5291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  139.896927][ T5291] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8
[  139.900687][ T5291] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  139.905217][ T8775] loop2: detected capacity change from 0 to 32768
[  139.908222][ T5291] usb 5-1: string descriptor 0 read error: -22
[  139.910730][ T5291] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  139.913762][ T5291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.918004][ T5291] usb 5-1: config 0 descriptor??
[  139.921471][ T5832] udevd[5832]: symlink '../../loop2' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:2' failed: Read-only file system
[  139.923234][ T8769] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  139.929276][ T5291] hub 5-1:0.0: bad descriptor, ignoring hub
[  139.931416][ T5291] hub 5-1:0.0: probe with driver hub failed with error -5
[  139.936412][ T1930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.938873][ T5291] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13
[  139.941272][ T5832] udevd[5832]: symlink '../../loop2' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:2' failed: Read-only file system
[  139.954041][ T1930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.958414][ T1930] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  139.962955][ T8775] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  139.969822][ T1930] usb 6-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00
[  139.983542][ T1930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.992321][ T8775] XFS (loop2): Ending clean mount
[  139.994534][ T1930] usb 6-1: config 0 descriptor??
[  140.023713][ T6220] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  140.150879][ T5291] usb 5-1: USB disconnect, device number 6
[  140.542453][ T1930] waltop 0003:172F:0034.0006: item fetching failed at offset 0/3
[  140.545440][ T1930] waltop 0003:172F:0034.0006: probe with driver waltop failed with error -22
[  140.739968][ T1930] usb 6-1: USB disconnect, device number 4
[  141.771312][ T8805] loop2: detected capacity change from 0 to 32768
[  141.837373][ T5997] udevd[5997]: symlink '../../loop2' '/dev/disk/by-uuid/3550edcd-4d53-4e80-911f-c2d0fbc49ebf.tmp-b7:2' failed: Read-only file system
[  141.896330][ T5832] udevd[5832]: symlink '../../loop2' '/dev/disk/by-uuid/3550edcd-4d53-4e80-911f-c2d0fbc49ebf.tmp-b7:2' failed: Read-only file system
[  142.101525][ T8828] loop5: detected capacity change from 0 to 32768
[  142.108307][ T8828] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  142.108307][ T8828] clean (size 2912):
[  142.108307][ T8828] flags:          0
[  142.108307][ T8828] journal_seq:    10
[  142.108307][ T8828] usage: type=inodes v=8
[  142.108307][ T8828] write_buffer_keys: btree=dirents level=0 u64s 5 type deleted 0:21491613697:0 len 0 ver 4294967296
[  142.108307][ T8828] usage: type=reserved v=0
[  142.108307][ T8828] usage: type=reserved v=0
[  142.108307][ T8828] usage: type=reserved v=0
[  142.108307][ T8828] usage: type=reserved v=0
[  142.108307][ T8828] data_usage: free: 0/0 []=83888896
[  142.108307][ T8828] data_usage: journal: 1/1 [0]=0
[  142.108307][ T8828] data_usage: user: 1/1 [0]=32
[  142.108307][ T8828] dev_usage: dev=0  
[  142.108307][ T8828]   free: buckets=83 sectors=0 fragmented=0
[  142.108307][ T8828]   sb: buckets=25 sectors=6152 fragmented=248
[  142.108307][ T8828]   journal: buckets=8 sectors=2048 fragmented=0
[  142.108307][ T8828]   btree: buckets=11 sectors=2816 fragmented=0
[  142.108307][ T8828]   user: buckets=1 sectors=32 fragmented=224
[  142.108307][ T8828]   cached: buckets=0 sectors=0 fragmented=0
[  142.108307][ T8828]   parity: buckets=0 sectors=0 fragmented=0
[  142.108307][ T8828]   stripe: buckets=0 sectors=0 fragmented=0
[  142.108307][ T8828]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  142.108307][ T8828]   need_discard: buckets=0 sectors=0 fragmented=0
[  142.108307][ T8828] clock: read=0
[  142.108307][ T8828] clock: write=1336
[  142.108307][ T8828] btree_root: btre
[  142.108412][ T8828] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  142.236977][ T1930] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  142.392509][ T1930] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  142.396511][ T1930] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  142.401090][ T1930] usb 5-1: Product: syz
[  142.403283][ T1930] usb 5-1: Manufacturer: syz
[  142.405391][ T1930] usb 5-1: SerialNumber: syz
[  142.428816][ T1930] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  142.595019][   T33] audit: type=1326 audit(1754388132.154:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="syz.2.892" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149378eb69 code=0x7ffc0000
[  142.609597][   T33] audit: type=1326 audit(1754388132.174:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="syz.2.892" exe="/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f149378eb69 code=0x7ffc0000
[  142.616783][   T33] audit: type=1326 audit(1754388132.174:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="syz.2.892" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149378eb69 code=0x7ffc0000
[  142.647415][   T33] audit: type=1326 audit(1754388132.174:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="syz.2.892" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149378eb69 code=0x7ffc0000
[  142.660178][   T33] audit: type=1326 audit(1754388132.184:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="syz.2.892" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f149378eb69 code=0x7ffc0000
[  142.668910][ T8859] IPv6: Can't replace route, no match found
[  142.671508][   T33] audit: type=1326 audit(1754388132.184:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="syz.2.892" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149378eb69 code=0x7ffc0000
[  142.678735][   T33] audit: type=1326 audit(1754388132.184:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="syz.2.892" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149378eb69 code=0x7ffc0000
[  142.692563][   T33] audit: type=1326 audit(1754388132.184:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="syz.2.892" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f149378eb69 code=0x7ffc0000
[  142.699917][   T33] audit: type=1326 audit(1754388132.184:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="syz.2.892" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149378eb69 code=0x7ffc0000
[  142.708362][   T33] audit: type=1326 audit(1754388132.184:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8854 comm="syz.2.892" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f149378eb69 code=0x7ffc0000
[  142.826690][ T1930] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  142.830910][ T1930] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  142.835992][ T8875] openvswitch: netlink: EtherType 0 is less than min 600
[  143.037072][ T8872] usb 5-1: USB disconnect, device number 7
[  143.077386][ T5887] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  143.318287][ T8883] loop5: detected capacity change from 0 to 32768
[  143.321779][ T8883] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section replicas: no devices in entry sb: 33/0 []
[  143.321779][ T8883] replicas (size 24):
[  143.321779][ T8883] btree: 0/1 [2] sb: 33/0 [] (unknown data_type 144): 56/184 [0 0 0 0 0 0 108 1 0 0 6 0 0 0 0 0 0 0 0 0 0 0 10 0 0 0 0 0 0 0 1 0 1 0 5 0 0 0 8 0 0 0 0 0 0 0 1 0 2 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 2 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 3 5 0 0 0 0 0 0 0 0 0 0 0 2 0 0 0 6 0 0 0 0 11 0 0 0 0 0 0 3 1 1 0 0 0 0 0 2 0 0 0 6 0 0 0 0 0 0 0 0 0 0 0 2 1 1 0 0 0 0 0 2 0 0 0 6 0 0 0 16 0]
[  143.321779][ T8883] 
[  143.342626][ T8883] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  143.466919][ T5887] usb 3-1: Using ep0 maxpacket: 32
[  143.471262][ T5887] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  143.473895][ T5887] usb 3-1: config 0 has no interface number 0
[  143.478084][ T5887] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  143.481151][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.483786][ T5887] usb 3-1: Product: syz
[  143.485193][ T5887] usb 3-1: Manufacturer: syz
[  143.486768][ T5887] usb 3-1: SerialNumber: syz
[  143.493317][ T5887] usb 3-1: config 0 descriptor??
[  143.502787][ T5887] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  143.505705][ T5887] usb 3-1: selecting invalid altsetting 1
[  143.514109][ T5887] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  143.521497][ T5887] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  143.525080][ T5887] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  143.528867][ T5887] usb 3-1: media controller created
[  143.539999][ T5887] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  143.812609][ T8902] loop4: detected capacity change from 0 to 256
[  143.818099][ T8902] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  143.827730][ T8902] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  143.920277][ T5887] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  143.955152][ T5887] usb 3-1: USB disconnect, device number 16
[  144.141851][ T8922] loop5: detected capacity change from 0 to 1024
[  144.144905][ T8922] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  144.154754][ T8922] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz.5.918: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  144.156235][ T5832] udevd[5832]: symlink '../../loop5' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:5' failed: Read-only file system
[  144.161408][ T8922] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.918: couldn't read orphan inode 11 (err -117)
[  144.179993][ T8922] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.186453][ T5832] udevd[5832]: symlink '../../loop5' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:5' failed: Read-only file system
[  144.205412][ T8922] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.918: Invalid block bitmap block 0 in block_group 0
[  144.212714][ T8922] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.918: Failed to acquire dquot type 0
[  144.220213][ T8922] EXT4-fs error (device loop5): __ext4_get_inode_loc:4787: comm syz.5.918: Invalid inode table block 8589934593 in block_group 0
[  144.247095][   T28] EXT4-fs error (device loop5): __ext4_get_inode_loc:4787: comm kworker/u9:1: Invalid inode table block 8589934593 in block_group 0
[  144.253913][ T8391] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.614778][ T8937] loop2: detected capacity change from 0 to 1024
[  144.630714][ T5832] udevd[5832]: symlink '../../loop2' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system
[  144.640546][ T5832] udevd[5832]: symlink '../../loop2' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:2' failed: Read-only file system
[  144.667207][   T27] hfsplus: b-tree write err: -5, ino 4
[  144.693388][ T5832] udevd[5832]: symlink '../../loop0' '/dev/disk/by-label/untitled.tmp-b7:2' failed: Read-only file system
[  144.848406][ T8953] netlink: 'syz.2.930': attribute type 21 has an invalid length.
[  144.851105][ T8953] netlink: 164 bytes leftover after parsing attributes in process `syz.2.930'.
[  144.894318][ T8958] loop5: detected capacity change from 0 to 8
[  144.902328][ T8958] SQUASHFS error: xz decompression failed, data probably corrupt
[  144.905261][ T8958] SQUASHFS error: Failed to read block 0x108: -5
[  144.908575][ T8958] SQUASHFS error: Unable to read metadata cache entry [106]
[  144.911284][ T8958] SQUASHFS error: Unable to read inode 0x0
[  144.975759][ T8963] loop5: detected capacity change from 0 to 512
[  144.998179][ T5832] udevd[5832]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  145.006330][ T8963] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.012160][ T8963] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  145.019573][ T5832] udevd[5832]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  145.161367][ T8963] loop5: detected capacity change from 512 to 0
[  145.165999][ T8963] syz.5.934: attempt to access beyond end of device
[  145.165999][ T8963] loop5: rw=12288, sector=8, nr_sectors = 2 limit=0
[  145.171587][ T8963] EXT4-fs error (device loop5): __ext4_find_entry:1615: inode #2: comm syz.5.934: reading directory lblock 0
[  145.177452][ T8963] syz.5.934: attempt to access beyond end of device
[  145.177452][ T8963] loop5: rw=145409, sector=2, nr_sectors = 2 limit=0
[  145.182515][ T8963] buffer_io_error: 1 callbacks suppressed
[  145.182525][ T8963] Buffer I/O error on dev loop5, logical block 1, lost sync page write
[  145.188558][ T8963] EXT4-fs (loop5): I/O error while writing superblock
[  145.195972][ T8972] loop2: detected capacity change from 0 to 4096
[  145.205892][ T8972] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  145.215409][ T8391] syz-executor: attempt to access beyond end of device
[  145.215409][ T8391] loop5: rw=12288, sector=8, nr_sectors = 2 limit=0
[  145.234540][ T5997] udevd[5997]: symlink '../../loop2' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:2' failed: Read-only file system
[  145.235651][ T8972] ntfs3(loop2): mft corrupted
[  145.238982][ T8391] syz-executor: attempt to access beyond end of device
[  145.238982][ T8391] loop5: rw=524288, sector=72, nr_sectors = 2 limit=0
[  145.244848][ T8391] syz-executor: attempt to access beyond end of device
[  145.244848][ T8391] loop5: rw=524288, sector=74, nr_sectors = 2 limit=0
[  145.249156][ T8972] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  145.255620][ T5832] udevd[5832]: symlink '../../loop2' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:2' failed: Read-only file system
[  145.257147][ T8972] ntfs3(loop2): Failed to load $Bitmap (-22).
[  145.261930][ T8391] syz-executor: attempt to access beyond end of device
[  145.261930][ T8391] loop5: rw=524288, sector=76, nr_sectors = 2 limit=0
[  145.280032][ T8391] syz-executor: attempt to access beyond end of device
[  145.280032][ T8391] loop5: rw=524288, sector=78, nr_sectors = 2 limit=0
[  145.284365][ T8391] syz-executor: attempt to access beyond end of device
[  145.284365][ T8391] loop5: rw=12288, sector=70, nr_sectors = 2 limit=0
[  145.301237][ T8391] EXT4-fs error (device loop5): ext4_get_inode_loc:4925: inode #2: block 35: comm syz-executor: unable to read itable block
[  145.305422][ T8391] syz-executor: attempt to access beyond end of device
[  145.305422][ T8391] loop5: rw=145409, sector=2, nr_sectors = 2 limit=0
[  145.313359][ T8391] Buffer I/O error on dev loop5, logical block 1, lost sync page write
[  145.316026][ T8391] EXT4-fs (loop5): I/O error while writing superblock
[  145.321764][ T8391] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6250: IO failure
[  145.324620][ T8391] syz-executor: attempt to access beyond end of device
[  145.324620][ T8391] loop5: rw=145409, sector=2, nr_sectors = 2 limit=0
[  145.330454][ T8391] Buffer I/O error on dev loop5, logical block 1, lost sync page write
[  145.338682][ T8391] EXT4-fs (loop5): I/O error while writing superblock
[  145.340973][ T8391] EXT4-fs error (device loop5): ext4_dirty_inode:6454: inode #2: comm syz-executor: mark_inode_dirty error
[  145.344628][ T8391] Buffer I/O error on dev loop5, logical block 1, lost sync page write
[  145.351926][ T8391] EXT4-fs (loop5): I/O error while writing superblock
[  145.385893][   T28] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:4910: inode #2: block 35: comm kworker/u9:1: unable to read itable block
[  145.392766][   T28] Buffer I/O error on dev loop5, logical block 1, lost sync page write
[  145.395558][   T28] EXT4-fs (loop5): I/O error while writing superblock
[  145.401072][ T8870] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.406150][ T8981] loop4: detected capacity change from 0 to 8192
[  145.414833][ T8870] Buffer I/O error on dev loop5, logical block 1, lost sync page write
[  145.419111][ T8870] EXT4-fs (loop5): I/O error while writing superblock
[  145.422144][ T8965] Buffer I/O error on dev loop5, logical block 17, lost sync page write
[  145.445935][ T5832]  loop4: p1 p2 p3 p4[EZD]
[  145.448102][ T5832] loop4: p1 start 171116544 is beyond EOD, truncated
[  145.460691][ T5832] loop4: p3 start 360447 is beyond EOD, truncated
[  145.462880][ T5832] loop4: p4 size 262912 extends beyond EOD, truncated
[  145.470813][ T8981]  loop4: p1 p2 p3 p4[EZD]
[  145.472634][ T8981] loop4: p1 start 171116544 is beyond EOD, truncated
[  145.475785][ T8981] loop4: p3 start 360447 is beyond EOD, truncated
[  145.478713][ T8981] loop4: p4 size 262912 extends beyond EOD, truncated
[  145.515632][ T5997] udevd[5997]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  145.558613][ T8985] loop4: detected capacity change from 0 to 512
[  145.580613][ T8985] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.945: iget: bad extended attribute block 1
[  145.584945][ T8985] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.945: couldn't read orphan inode 15 (err -117)
[  145.590055][ T8985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.599120][ T8872] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  145.610358][ T7651] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.674976][ T5852] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.740697][ T5852] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.772550][ T8872] usb 3-1: unable to get BOS descriptor or descriptor too short
[  145.775987][ T8872] usb 3-1: not running at top speed; connect to a high speed hub
[  145.781396][ T8872] usb 3-1: config 1 interface 0 has no altsetting 0
[  145.802076][ T8872] usb 3-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40
[  145.823806][ T8872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.836637][ T8872] usb 3-1: Product: syz
[  145.839327][ T8872] usb 3-1: Manufacturer: syz
[  145.845763][ T8872] usb 3-1: SerialNumber: syz
[  145.853422][ T5852] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.951254][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  145.955475][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  145.958687][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  145.961849][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  145.964578][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  145.971477][ T5852] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.075536][ T8872] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input14
[  146.101803][ T8872] usb 3-1: USB disconnect, device number 17
[  146.112835][ T8996] chnl_net:caif_netlink_parms(): no params data found
[  146.229176][ T9008] mmap: syz.4.955 (9008) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  146.240847][ T5852] bridge_slave_1: left allmulticast mode
[  146.242895][ T5852] bridge_slave_1: left promiscuous mode
[  146.245209][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.254567][ T5852] bridge_slave_0: left allmulticast mode
[  146.256604][ T5852] bridge_slave_0: left promiscuous mode
[  146.259581][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.655641][ T5852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  146.673830][ T5852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  146.684070][ T5852] bond0 (unregistering): Released all slaves
[  147.087278][ T8996] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.089955][ T8996] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.092750][ T8996] bridge_slave_0: entered allmulticast mode
[  147.101675][ T8996] bridge_slave_0: entered promiscuous mode
[  147.118027][ T8996] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.120693][ T8996] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.123525][ T8996] bridge_slave_1: entered allmulticast mode
[  147.129107][ T8996] bridge_slave_1: entered promiscuous mode
[  147.375728][ T9024] netlink: 28 bytes leftover after parsing attributes in process `syz.4.959'.
[  147.435004][ T8996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.482131][ T5852] hsr_slave_0: left promiscuous mode
[  147.506175][ T5852] hsr_slave_1: left promiscuous mode
[  147.519173][ T5852] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.532343][ T5852] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.546236][ T5852] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.553044][ T5852] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.591320][ T5852] veth1_macvtap: left promiscuous mode
[  147.593965][ T5852] veth0_macvtap: left promiscuous mode
[  147.598001][ T5852] veth1_vlan: left promiscuous mode
[  147.600294][ T5852] veth0_vlan: left promiscuous mode
[  147.726050][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.962'.
[  148.032505][   T53] Bluetooth: hci1: command tx timeout
[  148.299388][ T5852] team0 (unregistering): Port device team_slave_1 removed
[  148.334394][ T5852] team0 (unregistering): Port device team_slave_0 removed
[  148.858634][ T8996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  148.902175][ T8996] team0: Port device team_slave_0 added
[  148.909419][ T8996] team0: Port device team_slave_1 added
[  148.952747][ T8996] batman_adv: batadv0: Adding interface: batadv_slave_0
[  148.955725][ T8996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.968559][ T8996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  148.974780][ T8996] batman_adv: batadv0: Adding interface: batadv_slave_1
[  148.978054][ T8996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.991607][ T8996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  149.035521][ T8996] hsr_slave_0: entered promiscuous mode
[  149.040984][ T8996] hsr_slave_1: entered promiscuous mode
[  149.043855][ T8996] debugfs: 'hsr0' already exists in 'hsr'
[  149.046307][ T8996] Cannot create hsr debugfs directory
[  149.187204][ T5866] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  149.195822][ T9041] IPVS: persistence engine module ip_vs_pe_s not found
[  149.313166][ T8996] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  149.323812][ T8996] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  149.332298][ T8996] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  149.341403][ T5866] usb 5-1: config 0 has no interfaces?
[  149.344375][ T8996] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  149.350063][ T5866] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  149.354548][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.358073][ T5866] usb 5-1: Product: syz
[  149.359895][ T5866] usb 5-1: Manufacturer: syz
[  149.362289][ T5866] usb 5-1: SerialNumber: syz
[  149.370564][ T5866] usb 5-1: config 0 descriptor??
[  149.521914][ T8996] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.539169][ T8996] 8021q: adding VLAN 0 to HW filter on device team0
[  149.553024][ T7379] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.555558][ T7379] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.569705][ T7379] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.572664][ T7379] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.593774][ T9039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.602054][ T9039] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.608454][ T9039] netlink: 20 bytes leftover after parsing attributes in process `syz.4.964'.
[  149.650061][ T9039] vlan2: entered promiscuous mode
[  149.652260][ T9039] batadv0: entered promiscuous mode
[  149.662218][ T5866] usb 5-1: USB disconnect, device number 8
[  149.765250][ T9068] gre0: Master is either lo or non-ether device
[  149.891552][ T8996] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.974333][ T9081] loop2: detected capacity change from 0 to 512
[  149.990320][ T5832] udevd[5832]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  150.001144][ T5832] udevd[5832]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  150.012247][ T9081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.016434][ T9081] ext4 filesystem being mounted at /296/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  150.107064][   T53] Bluetooth: hci1: command tx timeout
[  150.109394][ T6220] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.120192][ T8996] veth0_vlan: entered promiscuous mode
[  150.125326][ T8996] veth1_vlan: entered promiscuous mode
[  150.163643][ T8996] veth0_macvtap: entered promiscuous mode
[  150.175462][ T8996] veth1_macvtap: entered promiscuous mode
[  150.212827][ T8996] batman_adv: batadv0: Interface activated: batadv_slave_0
[  150.235225][ T8996] batman_adv: batadv0: Interface activated: batadv_slave_1
[  150.258631][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.264516][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.270651][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.319125][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.346192][ T9098] loop4: detected capacity change from 0 to 4096
[  150.438772][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.445402][ T5832] udevd[5832]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  150.452641][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.459716][ T5832] udevd[5832]: symlink '../../loop4' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:4' failed: Read-only file system
[  150.498045][ T7379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.510392][ T9108] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.978'.
[  150.517212][ T7379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.573328][ T9110] loop2: detected capacity change from 0 to 1024
[  150.574151][ T9113] loop4: detected capacity change from 0 to 1024
[  150.576278][ T9110] EXT4-fs: Ignoring removed bh option
[  150.589055][ T5997] udevd[5997]: symlink '../../loop2' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:2' failed: Read-only file system
[  150.595280][ T5832] udevd[5832]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system
[  150.605991][ T9110] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  150.612233][ T5832] udevd[5832]: symlink '../../loop4' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:4' failed: Read-only file system
[  150.620125][   T27] hfsplus: b-tree write err: -5, ino 4
[  150.623636][ T5997] udevd[5997]: symlink '../../loop2' '/dev/disk/by-label/syzkal\xff\xff\xff\xff\xff\xff\xff\x7f.tmp-b7:2' failed: Read-only file system
[  150.634512][ T9110] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  150.650309][ T5832] udevd[5832]: symlink '../../loop0' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system
[  150.654196][ T9110] EXT4-fs (loop2): orphan cleanup on readonly fs
[  150.655069][ T5832] udevd[5832]: symlink '../../loop0' '/dev/disk/by-uuid/3de3d207-fc4e-3c3b-aa08-7cb07cd064ab.tmp-b7:4' failed: Read-only file system
[  150.664324][ T9110] EXT4-fs error (device loop2): ext4_quota_enable:7124: comm syz.2.979: inode #2304: comm syz.2.979: iget: illegal inode #
[  150.694157][ T9110] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.979: Bad quota inode: 2304, type: 2
[  150.723102][ T9110] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix.
[  150.744515][ T9110] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  150.773660][ T9110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  150.800566][ T6220] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.387312][   T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  151.538362][   T24] usb 3-1: Using ep0 maxpacket: 16
[  151.543905][   T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.552217][   T24] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576
[  151.559103][   T24] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  151.568217][   T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  151.571241][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  151.573990][   T24] usb 3-1: SerialNumber: syz
[  151.585832][ T9159] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  151.594433][   T24] cdc_acm 3-1:1.0: Control and data interfaces are not separated!
[  151.631444][ T9176] loop6: detected capacity change from 0 to 1024
[  151.689022][ T9179] loop6: detected capacity change from 0 to 764
[  151.699674][ T9179] Symlink component flag not implemented
[  151.701697][ T9179] Symlink component flag not implemented
[  151.703611][ T9179] Symlink component flag not implemented (128)
[  151.705675][ T9179] Symlink component flag not implemented (122)
[  151.825763][   T24] cdc_acm 3-1:1.0: ttyACM0: USB ACM device
[  151.843138][   T24] usb 3-1: USB disconnect, device number 18
[  152.188205][   T53] Bluetooth: hci1: command tx timeout
[  152.199405][ T9208] loop6: detected capacity change from 0 to 512
[  152.213862][ T9208] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  152.218616][ T9208] EXT4-fs (loop6): 1 truncate cleaned up
[  152.221175][ T9208] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.393623][ T8996] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.477807][   T33] kauditd_printk_skb: 21 callbacks suppressed
[  152.477818][   T33] audit: type=1326 audit(1754388142.044:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.4.1012" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9b18eb69 code=0x7ffc0000
[  152.510660][   T33] audit: type=1326 audit(1754388142.044:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.4.1012" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9b18eb69 code=0x7ffc0000
[  152.526765][   T33] audit: type=1326 audit(1754388142.044:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.4.1012" exe="/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f0a9b18eb69 code=0x7ffc0000
[  152.547223][   T33] audit: type=1326 audit(1754388142.044:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.4.1012" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9b18eb69 code=0x7ffc0000
[  152.567050][   T33] audit: type=1326 audit(1754388142.044:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.4.1012" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9b18eb69 code=0x7ffc0000
[  152.575429][   T33] audit: type=1326 audit(1754388142.044:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.4.1012" exe="/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f0a9b18eb69 code=0x7ffc0000
[  152.595708][   T33] audit: type=1326 audit(1754388142.044:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.4.1012" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9b18eb69 code=0x7ffc0000
[  152.610700][   T33] audit: type=1326 audit(1754388142.044:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.4.1012" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a9b18eb69 code=0x7ffc0000
[  152.763372][ T9218] loop2: detected capacity change from 0 to 32768
[  152.987873][ T9218] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  153.041702][ T6220] ocfs2: Unmounting device (7,2) on (node local)
[  153.507544][ T9254] loop2: detected capacity change from 0 to 32768
[  153.545458][ T9254] read_mapping_page failed!
[  153.549767][ T9254] ERROR: (device loop2): txCommit: 
[  153.549767][ T9254] 
[  153.580914][  T115] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0)
[  153.588341][  T115] ------------[ cut here ]------------
[  153.590241][  T115] kernel BUG at fs/jfs/jfs_txnmgr.c:931!
[  153.597028][  T115] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  153.599105][  T115] CPU: 1 UID: 0 PID: 115 Comm: jfsCommit Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93-dirty #0 PREEMPT(full) 
[  153.603074][  T115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  153.606411][  T115] RIP: 0010:txUnlock+0xdaf/0xdf0
[  153.608090][  T115] Code: e6 fd 90 0f 0b e8 11 db 7e fe 48 c7 c7 a0 0a c4 8b 48 c7 c6 99 06 c4 8b ba a3 03 00 00 48 c7 c1 a0 17 c4 8b e8 52 e5 e6 fd 90 <0f> 0b e8 ea da 7e fe 48 c7 c7 a0 0a c4 8b 48 c7 c6 99 06 c4 8b ba
[  153.614457][  T115] RSP: 0018:ffffc9000243fbc8 EFLAGS: 00010246
[  153.616471][  T115] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 924d65e36e609900
[  153.619276][  T115] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  153.621859][  T115] RBP: ffffc90001fa2168 R08: ffffc9000243f8e7 R09: 1ffff92000487f1c
[  153.624422][  T115] R10: dffffc0000000000 R11: fffff52000487f1d R12: dffffc0000000000
[  153.627077][  T115] R13: 1ffff11007051389 R14: ffff888038289c48 R15: 0000000000000000
[  153.629697][  T115] FS:  0000000000000000(0000) GS:ffff8881a3c79000(0000) knlGS:0000000000000000
[  153.632689][  T115] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  153.634850][  T115] CR2: 000055695da26000 CR3: 0000000028e0e000 CR4: 00000000000006f0
[  153.637513][  T115] Call Trace:
[  153.638646][  T115]  <TASK>
[  153.639646][  T115]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.641389][  T115]  jfs_lazycommit+0x584/0xa90
[  153.643026][  T115]  ? __pfx_jfs_lazycommit+0x10/0x10
[  153.644752][  T115]  ? __pfx_default_wake_function+0x10/0x10
[  153.646710][  T115]  ? __kthread_parkme+0x7b/0x200
[  153.648363][  T115]  ? __kthread_parkme+0x1a1/0x200
[  153.650045][  T115]  kthread+0x711/0x8a0
[  153.651417][  T115]  ? __pfx_jfs_lazycommit+0x10/0x10
[  153.653192][  T115]  ? __pfx_kthread+0x10/0x10
[  153.654722][  T115]  ? _raw_spin_unlock_irq+0x23/0x50
[  153.656446][  T115]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.658183][  T115]  ? __pfx_kthread+0x10/0x10
[  153.659725][  T115]  ret_from_fork+0x3fc/0x770
[  153.661278][  T115]  ? __pfx_ret_from_fork+0x10/0x10
[  153.662984][  T115]  ? __switch_to_asm+0x39/0x70
[  153.664676][  T115]  ? __switch_to_asm+0x33/0x70
[  153.666317][  T115]  ? __pfx_kthread+0x10/0x10
[  153.667907][  T115]  ret_from_fork_asm+0x1a/0x30
[  153.669585][  T115]  </TASK>
[  153.670644][  T115] Modules linked in:
[  153.672158][    C1] vkms_vblank_simulate: vblank timer overrun
[  153.674679][  T115] ---[ end trace 0000000000000000 ]---
[  153.687073][  T115] RIP: 0010:txUnlock+0xdaf/0xdf0
[  153.689018][  T115] Code: e6 fd 90 0f 0b e8 11 db 7e fe 48 c7 c7 a0 0a c4 8b 48 c7 c6 99 06 c4 8b ba a3 03 00 00 48 c7 c1 a0 17 c4 8b e8 52 e5 e6 fd 90 <0f> 0b e8 ea da 7e fe 48 c7 c7 a0 0a c4 8b 48 c7 c6 99 06 c4 8b ba
[  153.695672][  T115] RSP: 0018:ffffc9000243fbc8 EFLAGS: 00010246
[  153.698180][  T115] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 924d65e36e609900
[  153.700911][  T115] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  153.703609][  T115] RBP: ffffc90001fa2168 R08: ffffc9000243f8e7 R09: 1ffff92000487f1c
[  153.706327][  T115] R10: dffffc0000000000 R11: fffff52000487f1d R12: dffffc0000000000
[  153.709403][  T115] R13: 1ffff11007051389 R14: ffff888038289c48 R15: 0000000000000000
[  153.712220][  T115] FS:  0000000000000000(0000) GS:ffff8881a3c79000(0000) knlGS:0000000000000000
[  153.715230][  T115] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  153.718333][  T115] CR2: 00007ffe51d0af88 CR3: 0000000027af2000 CR4: 00000000000006f0
[  153.721078][  T115] Kernel panic - not syncing: Fatal exception
[  153.723792][  T115] Kernel Offset: disabled
[  153.725217][  T115] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:02:22  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffffff8fbd0dec RCX=dffffc0000000000 RDX=ffffffff8fbd0dd0
RSI=ffffffff903ceb20 RDI=ffffffff8be2fca0 RBP=ffffffff8fbd0dec RSP=ffffc900066e7778
R8 =0000000000000011 R9 =ffffffff8172ad05 R10=ffffc900066e7898 R11=ffffffff81ac10b0
R12=ffffffff822268ab R13=ffffffff8fbd0de8 R14=ffffc900066e7848 R15=ffffffff8fbd0dec
RIP=ffffffff8172bf6e RFL=00000a07 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557cbf7500 ffffffff 00c00000
GS =0000 ffff8880b8679000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0a9b24f4e4 CR3=00000000386b0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000ffff00000000 000000000000ffff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=000000ff00000000 00000000000000ff XMM05=3131366163626264 6639666434653861
XMM06=3963383235626461 3033353462356239 XMM07=6438643965333436 3130303031326266
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f0a9b212f89
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff82236c17 RBX=ffffea0000adf200 RCX=ffff888021231cc0 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=0000000000000000 RSP=ffffc900031ff450
R8 =ffffea0000adf207 R9 =1ffffd400015be40 R10=dffffc0000000000 R11=fffff9400015be41
R12=1ffffd400015be40 R13=dffffc0000000000 R14=0000000000000000 R15=1ffffd400015be46
RIP=ffffffff81bf8d18 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff82df47800 ffffffff 00c00000
GS =0000 ffff8881a3c79000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055695da15000 CR3=000000001fc7a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
