last executing test programs:

35.218064838s ago: executing program 2 (id=575):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000300)='gKe', 0x3, 0x0, &(0x7f00000000c0)={0x11, 0xd, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x14)

35.109295849s ago: executing program 2 (id=577):
r0 = syz_open_procfs(0x0, &(0x7f0000001680)='coredump_filter\x00')
r1 = fanotify_init(0x0, 0x0)
fanotify_mark(r1, 0x1, 0x40000011, r0, 0x0)
preadv(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/26, 0x1a}], 0x1, 0xf018, 0x1cf)

34.89870945s ago: executing program 2 (id=579):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, r1, 0x703, 0x0, 0x0, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x480d0}, 0x0)

34.80052561s ago: executing program 2 (id=581):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x8, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=")
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
chdir(&(0x7f0000000380)='./file0\x00')
rmdir(&(0x7f0000000040)='./bus\x00')

34.466537932s ago: executing program 2 (id=586):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0), 0x4)

32.91049694s ago: executing program 2 (id=607):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="1a", 0x1}, {&(0x7f0000000140)="fa791027e01b4d51411c754af98e6e4427d85564937fa989c20892b2cac8664dd5bc099f9664a3", 0x27}], 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006573bb08ac051992da610200000109021b000100000000090400000103b80000090581"], 0x0)

32.73472627s ago: executing program 32 (id=607):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="1a", 0x1}, {&(0x7f0000000140)="fa791027e01b4d51411c754af98e6e4427d85564937fa989c20892b2cac8664dd5bc099f9664a3", 0x27}], 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006573bb08ac051992da610200000109021b000100000000090400000103b80000090581"], 0x0)

5.185707835s ago: executing program 0 (id=945):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000100)=0x13)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0xd)

5.014631486s ago: executing program 0 (id=947):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x200}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x80}, @IFLA_BR_MCAST_QUERY_INTVL={0xc}]}}}]}, 0x50}}, 0x0)

4.921181196s ago: executing program 0 (id=949):
r0 = openat$dsp(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080))
read$dsp(r0, &(0x7f0000000140)=""/60, 0x3c)

4.674614728s ago: executing program 0 (id=954):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)=""/69, 0x45}], 0x1, &(0x7f0000000ac0)=""/191, 0xbf}, 0x1}], 0x1, 0x0, 0x0)

4.674098477s ago: executing program 0 (id=956):
syz_mount_image$xfs(&(0x7f0000009680), &(0x7f00000096c0)='./file0\x00', 0x40, &(0x7f0000009700), 0x1, 0x965c, &(0x7f0000009740)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x6, 0x3})

4.520655538s ago: executing program 1 (id=957):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x18, &(0x7f0000000f80)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

4.366707499s ago: executing program 1 (id=960):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@block_validity}, {@block_validity}, {@quota}]}, 0x1, 0x452, &(0x7f0000000780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)

3.726704802s ago: executing program 1 (id=964):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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")
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x440000a0)
lremovexattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)=@known='system.posix_acl_default\x00')

3.523997413s ago: executing program 5 (id=969):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000c00)={0x2, 0x0, [{0x40000022}, {0x40000001}]})

3.319876754s ago: executing program 1 (id=972):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SG_GET_REQUEST_TABLE(r1, 0x227e, &(0x7f00000000c0))

3.285475144s ago: executing program 5 (id=973):
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080), &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1})
io_uring_enter(r0, 0x1ce4, 0x0, 0x0, 0x0, 0x0)

3.122589585s ago: executing program 5 (id=974):
syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000900)={[{@acl}, {@usrjquota_file, 0x4}, {@acl}, {@balloc_hashed_reloc}, {@usrjquota, 0x3d}]}, 0x2, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})

3.122372175s ago: executing program 1 (id=975):
syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x800080, &(0x7f0000000900)={[{@init_itable}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@stripe}]}, 0x3, 0x452, &(0x7f0000000400)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
fallocate(r0, 0x10, 0x6, 0x9128)

2.850320366s ago: executing program 1 (id=979):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000480)={[{@coherency_buffered}, {@heartbeat_none}, {@coherency_full}, {@err_cont}, {@journal_async_commit}, {@localflocks}, {@atime_quantum={'atime_quantum', 0x3d, 0x7}}, {@dir_resv_level}]}, 0x9, 0x4430, &(0x7f00000088c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff)
sendfile(r0, r0, 0x0, 0xfffe80)
unlink(&(0x7f0000000280)='./file1\x00')

2.16658913s ago: executing program 4 (id=986):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, 0xffffffffffffffff, 0x60000000}, 0xc)

2.06089487s ago: executing program 4 (id=988):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000300)="10008100", 0x4, 0x0, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x1, 0x6, @multicast}, 0x14)

1.942943351s ago: executing program 0 (id=990):
syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000000), 0x1, 0x55a1, &(0x7f0000005b00)="$eJzs3X1sVWcdB/BzeynlJaFlyjLUhfkPThCpmFiEoEVgAoPRgSbDwCgO2BAGhQRhY9OOOZ0jk4Y5xoovDKQCxq6+rJiYIbqIcU4mi8OGEXnJIuICK4yoJNOZ3nufy73n0vYO5zq3z4e05z73d57nPPfk/HG/lz7nRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABBF0cHlC/627gfLv/nQdSenbLz/zAMnap57fNP4u+fsHnX4gVVXtp1uaip99fmzNyy67+GqoSf2zD8URYlUv0Sm/7xPTZ65aNa86X3CgLU3prcVFZ0dMt31WLrRO+/Jjn75P/OjKCqNDZDMbCf1z2kn4geIVhYO2KXtVWNWDdw4cdrmssmDFibrGgtfOh369PQEekrmunrx4rVUnfpdEtsj28659BJ5l2i6f/yCe1NeBADwulTWpDbZt6OZt7jZdn28HmtXx9oNsXZ4h9CQ27gc6XF7dzbPa+L1HppndToqlHU6z1g9c/6z7Zp4/1g7FjVexzzzd81Emj6dzbMuVu+peQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8ldx9/JanSzb96H1L149MHh887BdfbdryvUnt5VO+tm9D2+9bn3tPU1Ppq8+fvWHRfQ9XDT2xZ/6hKKpI9Uukuyfm7mjd8LMVU1b/fM6jzefee8euZGbcsO2Vs3PUFh58vDyKPp9TeTEMe2pAFNXkF1LN6NHCwuLUgymhAAAAwNvJ4NTvkmw7HQdL89qJVJpMpP4F6bC4vWrMqoEbJ07bXDZ50MJkXePlj1fTyXjVlxwv2664+JPICcYh/sbHu1gPu64sGKdr8RHjeX7U0AuHj3x9+Ya1jf1P7u87MDnpV1+uHXzFnNGvXDt2zG1/fWRHQf6v6Dr/hzMn/wMAAPDfkP/j43Stu/w/7Mj9Z+469dN1tZ/ZNvf4+G/UDnhX5Zo/NX/4c+uHTZ3Y69iVWwry/zV5hyzI/2HGIf+XRJeX/wEAAOCt7H+d/6sLxulad/l/2ZoRf592YdbEJ8Zd+OGZO4f88uCRaG/9iC+03P6B/bP7DWj4SUH+rywu//fKnXZ48pkw4SXlUVRZ/EkFAAAA8oT/d7/40ULI6+lPDuJ5fc75g5NuLn3w7EdmXzt029Ehu9rP/2PJ8k0XRjfPGF716acrNhTk/+ri8n/pm/NyAQAAgCI8tfgTN+2Mpk/6UPU9h/cv2P5I/bK1K5c2liWm/ntl2/X/au5dkP9risv/ZT3zcgAAAIBLOPSlbbtfm7msdXhz2fmtf3jtz49fPXz1gabKoyt/O7B0RWvt4oL8X1tc/u+X2WZWPqQ77Q9/hfBQeRT16XhQly78Jmr4ZLYAAAAAvEFCTv/nsbaRO68r+/VT339586zvfHvQ3m/NONj43Qn9b5n44IEZB56sLcj/dV3f/z/c6SCs/8+7/1/B+v+cQvquf2PdGAAAAIB3osL1/OH2+OlvLujs+/eLXf9/4xdbXzp++/yvtL97yE3LXr7tils/Nv7UH6ffmdw57q6SqVNfOl2Q/+uLy//J3O0b+f1/AAAAcBn+377/b3bBOF3r7v7/Mx+752j7X14YN2Jm49pFJ8dv/PG8Lc88trvq6nMLbu77wWeX7i3I/w3F5f+w7Z/78vaF83NveRRd1fEgczfBXWG6S2KFltKcQvrEx3rMCj0yhZaynEJKXazHqPIoen/Hg/pYYWAoNMQK7QMyha2xwrOhkLkesoXmWGFfuNI2DchMN17YEwqZBRYtYQVF/+ySiFiPVzrr0VG4ZI8XsgcHAAB4RwnhOZNlS/ObUTzKtiS626FfdzuUdLdDsrsdesV2iO/Y2fNRbX4hPH9+zRO/q/xoyWcP3XrHhOEjF667t2HsgeTcCdc/uaPvuRWnR68uyP9bi8v/4VT0Tm86W/8fhfX/me81zK7/rw2FilihJRRq4ncMqAnHSIfd9eEYFTWZHu1XZQsAAADwthY+F0j28DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+zde5xU1Z0g8NNNP2homhbjK2JsdW1Fh6ZBUT/BB2omGmBNo+zMuPhohEaRVhBhIq5RULObxMEoKlFnRmEVRlZx8AVkNQE1ooloNI5mRh1DMOq4O34UR/Qzawz76b51iqpbXXYhoLTz/f7Rdap+53nr0XXuvXUuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwH8P6x28+6u8ueXr0qA3zBix/7cj//nH94csWvfe//vD8DXfsO+8H61ctWVL5hxc3njL5ezcd2bhh5YSXQmjpLFeWFC87c/GKH6266FvfefiMW+59f+/ZS6sy9WbioW/Hn/LMnatjq7/vF8LKshAq0oHBtUmgMnO/NtY3sDaEXcKWQLZEW5+kRLrh8ERNCAvDlkC2qp/UhFCbExj368dWz+tI3FgTwoEhhOp0G/9cnbRRkw1sThKNVUmgT7rEtIok8NHmRDawqjwJwDaLb4bsi355S36G+q7LFXn9VW63jn2x0sPrFRP1xfO9c/wO7lSOqvQDLdv0tBVUxw5R8PZY493WA95tBdv5Ok9b7hepzDeUzVtC1aF8UtvkCbPaZ8ZHykNTU69iNe2g5/nljZdN3Jp0j3kdxg7Ub5fX4ZMXDrx7QeOY3W99dMPkN6ueX7Ct3Sy2eXe06pB5zfWY5zEa6fOkB7z9Cr4lNfjSFUK488RN7/7+lbH/9zcPPzv4g28PPWfIS68Nrbv1+9P6/fm5/6fytqkbC+b/9Z8+/48v53hbnpc7tvpxXTI3j4/UxsS7dcncHAAAAHqMnrDX9K0Rh7xbu67h0f2/uWLyBYvmvXHm+X+s+nnfCYecfNrQH95189QzCub/DaUd/4+H/GtzR7smhJGdiav6h7Bn5+NJYGnszjn9Q9ivM9WSHzg+FVgTwl6diUHZqlIlescSDanAW3WZwMhUYG0MtKQCi2PgulTg6hhYngpMjIE1qcAJMRCm5I/jkLrMOEoO1MRAa7IRl8ezEP6tLraW2lavZKsCAADYTjKzw8r8uznnOmxrhji9XF7TXYZ4BnbRDNWpGtIz2Oy0qmgNFd3VUN5dDdlxz/n04RfUXNZdzQWnYZTlZ/jg4Afmrn7on35684Qjnjnk49azXl2/6vHRm3r91Xtjfnr5uPnDxhfM/5s/ff5f3UVHygqO/4cwtvNvzF2eibRn460teRkAAACAbVDxxtJTfzX3k7Ilvzhv44F/esa4a3uv2H//AWsPfeD/Nbw94MRVBxbM/0eWdv5/3CfSKydzWBd3Q0ztH0JzfiCpdkRhIDnq3TcTAAAAgJ4gezw+eyx8SuY2OUU7PZ8uzN+ylfnjgf+RXeYfPO7adc2r7zxtyojD16zZdNbury7b8MxuB7730sGnnnnSg1Mb7iuY/7eUdv5/n/zbpBNrYy9u6B9C75zAk7GXHYFODTGw/rj8QGb8a+MGuCZWlTkxIVvVNbFEaww0pwILi5V4Lltiz/xA5snKNn5VdhxTMiVyAgAAAPC5i7sD4nH5eP7/s+f3e/xvl9122cNL1oW+5y7/1RXHDh84f3Dvd6Y9d9hjf/n+qVML5v+tW3f+f+c8uOD0/va+IQypCKFX+ocB6/okCwPGQG1ZJvHTPkldvdJVXdknhBEdA0tXtSGz/n9Feo3BF2qSqmJgz/3v2tjYkbizJoQhuYGXxi8a3pGYlQpkG/+zmhD27RhtuvEVvZPGK9ON39w7hK/lBLJVTewdQkdjVemqHq/OXMcgXdXy6hB2zQlkqzqyOoTZAYCeKv4vnZT74MWzL506ob29bcYOTMSd+DVh8pT2tqaJ09onVRfp06RUn/PWMZpbOKZSL33zamaNontGNfUvJZ39oWBzbluZHfkFZw5m7scvQ5Wd4xxWmXf3sPSQDz6gsImQ81Wq2JDLd/CQ++RWsuVJLKg/5q8KfUPvWRe3zWi6ZMLMmTOGJn9LzT4s+RuPMyXbamh6W/Xpqm8lvDyKLpeV8lm3VWNuJUNmXjB9yMWzLx085YIJ57ad23bhEcOPOOqoYYcfPnxIx6Cak7/djLSxq5pTI928qMRhbceRfrUip5LP40NDQkKipyVW/cterx6729IfrLht8Yxfth/T9stv7rrrmCVV335p0+VXHPjs//ioYP4//dPn//FTJ37wZ9ZnKHb8vz4e5k8e33KYvzUGFpZ6/L++2NH87IkBDanAnBiY4zA/AAAAXw5xd2Tcmxl3Sj82f49/uHvcA2Pmrz/06XUvlK3vc+hff/yv5ZVXjPsvxz3UcMf3/6Jg/j+ntN//b6f1/7NL148qtsz/oFiiudj6/+ll/rPr/88ptv5/epn/7Pr/C7+A9f9nZQOpTfJv1v8HAAC+DD6/9f+7Xd4/fYGAggzdLu+fvkBAQYZul/Ev9QIBW73+/2MNh4z82erv/a5x2UXT3vtvQx4YPWDvhn95bJ+rJ00dOXr0iMH/UDD/v660+b+F+wEAAGDncdDE45/ZOGnf46/9n3fsstfPWr+7+xG7/XDZ0W3zN62f+Bd3vH/enxfM/xeWNv///Nf/C8XO/28oFmgptjCg9f8AAADooYqt/zf05u9c+friEx6878ppo1pbx8++6toDVh9UfXp4ZfT8hj+Zcf8nBfP/5aXN/+NpF+V5uWNvPq5L1rQL6TXt3q3L/mQAAAAAeoby0NRUWWLevIVRj//sbb6cWQr009K5nn74gBcf+vqIk+cvrrr2jbI9hm1+5saZh574jR+/vnGfy+46/4IDCub/a0qb/+f9LuPJCwfevaBxzO4f3/rohslvVj2/YMvxfwAAAGDHKXW/BAAAAAAAAAAAAAAA8MU76dGfXfvuxCXfmLPw17v/vNfY55dvmDWnaXbtja//+PrfHHX3o+MKfv8fxnaWK/b7/3jdv/j7gq/k5Y6tdr/+X+b+uNH3zu5csnBdXQgH5AamXjl1l5C5Nv9BuYHVZw7aoyNxZbrEI6+d8EZH4ux04OTBAz7sSBydCrTGRRL3SgfiVRU/7JcKxOUVX0gH4vZYng5UZQI/6JeMoyy9rd6uTbZVWXpbvVwbQv+cQHZbraxN2ihLD/DGVCA7wIvSgTjAUzKB8nSv7u2b9CoGamPR2/smvQIAYKcVvwVWhslT2tua41f4ePvVivzbKG/JsrmF1ZaV2PyrmaXJ7hnV1L+UdK/0d9Et1xqvDNUdQxha8HU1N0tZ5yi3Ty3dbLqvFBlyd6u9lRcpl7a1m66q+IhqkhE1TZzWPqmy24Ef1n2WYRXdZhlaMNnJzVLeuUlLqKWEvpQwohK3TQldjvfLQ1NTr1Sur8dgfcjT3Sui1N/r567zV+xVkJvn6bfbn3nq719cud+Tf3z23I/+bNJ3L593zlnvH31e9d/857Jn/+vAXQvm//Wlzf+rc8f1YeZiAHPilfVG9A+htcQRAQAAwJffeRe+Nv/7j1//1vqWxjemDbl+9T/OvvnSirqlV//py4/85abx1569rfG3f3nXfo9OnvDcV84/bNlJb+536BWNZ7/zwJ/MG/fwNX1v+/H8u35UMP9vKG3+H/dgZQ4FJ3s71sTr/1/VP4TOS+vXJ4Glcbjn9A9hv85USyyRXFB/VCzRnASWxh0mg2KJ1pb8qnrHwPJU4K26TGBNKrA2BjJ7Ke4KmV0519eFMLwzNTa/xPRYoj4V+HYMNKQCTTHQnAr0i4GRqcC/9ssEWlKBp2MgTMnfVg/0y2wrAACArZGZZ1Xm3w3ped7yiu4ylHWXoU93Gcq7y1DdXYZio4j3748ZKlMnr5TlZKpM11qTqqUgQ7wY/lb3qyBDeC4/Z7pgQdPx/IPs+QZl+RkeOvXr912zYPKg8t98snZp6wcPTlxx++xjV573yF89NWn/RffcuG/B/L+5tPl/n/zbpPW1cf6/5fp/SeDJ2L0b4qnjDTGw/rj8QGbHwNo42b0mW1VLpkRm0n5NLDEyBhpSgekxMDIVaB2bCSzcIz+QmWlnG78q2/iUTImcAAAAAHzu4g6CuJsmzv//fdnzxzxRseief3x9/D33z3nnvvt/ft99t98/+s5N33zhqkvfv+STgvn/yNLm/7G9vrmNXR178/t+Iaws29KbbGBwbRKI+zFq48/jB9aGsEvODo5sibY+SYmqVMPhiZrkF+pV6ap+UpOsMRDvj/v1Y6vndSRurAnhwJy9L9k2/rk6aaMmHWisSgJ90oFpFUkg7vnJBlaVJwHYZtm9gvEFlTnVJau+63JFXn9flmuCpodXsA+0i3xd/eZqR6lOP5DZp5q1dU9bQXXsEAVvjzXebT3x3Vbv3Zb7RSrzDWXzllB1KJ/UNnnCrPaZ8ZHcX7IW2EHPc+6vVEtJb4fX4ZzP3tvuVac70Jz6+GjuulzXr8OyWN2TFw68e0HjmN1vfXTD5Dernl9QcjeKiD8Ufq5qQH3u5t3RqkPmNdfjPk9afJ70xH8DDZ62EMKGy0+6YWTV9KtWjj7s6H3eOOO06pkfzPvrB1956P39/3bFxGHfGFAw/28pbf5fkbrt9O9xY17cP4SDczbuurj5T+yffA7mBJJPyV0LA8kh99frin5yAgAAwPaW3d2R3V8wJXObnBCenicX5m/Zyvxxf8XILvOX2u+fDDptnwf3uHfc9acfc8vf/25sv43jX15y3IrWYxqXHvuL/3R2zbyC+X/rp8//e6e66fi/4//sII7/d2ln3xXdO/3AnG3aFV1QHTuE4/9d2tnfbY7/d8nxf8f/u+L4fzcc/+/Szv60FXxLmu5LVwhh2JizBtfeM/ipDweu/u1Tz0z5p7mtE+771jW37b35u/WLF9Tv3rdg/j+9tPm/9f+6XrQvu/5fa7H1/6YXW/9vjvX/AACAHarIQnPpeV7B6n0FGdKr9xVk6HaBwG6XGLT+31av//fEMUePXz568W/X7DvmoCv6zp17+m5P3/Jyy8wPa+746MM9fnXwqIL5/5zS5v/x5dA3t/Wesv5fw9giVV0XA9MtDAgAAMDOqNgOAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL5Ye950w/jjmqtP+d2Jl9eM/uEj6w6qvu610y9fNuH2SV+788JBs1YsWVL5hxc3njL5ezcd2bhh5YSXQpjSWa4sKV525uIVP1p10be+8/AZt9z7/t6zl1Zn6q3M3O6dlzu2+nFdCAtzHqmNiXfrOu5sCYwbfe/sio7EuroQDsgNTL1y6i4dicV1IRyUG1h95qA9OhJXpks88toJb3Qkzk4HTh484MOOxNGZQFm6u3/TL+luWbq78/qF0D8nkO3u+f3yq8q2cVImUJ5u4+9qkzZioDYWvbk2aSMG2mOJKb1DGFIRQq90Vb+oTqrqla7qf1cnVfVKV3VFdQgjQggV6ap+W5VUVZEe+XNVSVUxsOf+d21s7EgsqgphSG7gpfGLhnckZqQC2cZPqwph346XTLrxByqTxivTjd9UGcLXQghV6RKbKpISVekSGypC2DUnsGUjVoQwO/DlED99JuU+ePHsS6dOaG9vm7EDE1WZtmrC5CntbU0Tp7VPqk71qZiynPTmuZ997K9uvGxix+09o5r6l5KuyJSr7OzysMq8u4ft7L2P/eqTW8mW56Og/pi/KvQNvWdd3Daj6ZIJM2fOGJr8LTX7sORvr0w02VZDe8q2asytZMjMC6YPuXj2pYOnXDDh3LZz2y48YvgRRx017PDDhw/pGFRz8nd7jHTR5z/Sr1bkVPJ5vP8lJCR6WqI879OteWf/HC/4or+lo5WhuvMDumBakZulrHOU22PQx3/GEX+WryndjmhowcShIMuw7rMcVjCZ2JKlJsnS+bWuYHKYW1N55yaN98tDU1OvYtuhPv9u7uZ9Zxs278uZTVdqGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/zw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAPHAgAAAADC/K3D6NkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBLAQAA//8/pyM3")
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280))
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0x40089413, 0x0)

1.894415791s ago: executing program 4 (id=992):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f0000000f40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000000f80)="ea", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000000), 0x4)

1.734383802s ago: executing program 4 (id=993):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x5, 0xfffffffe}, {0x6, 0x0, 0x3, 0x1000}]})
write$ppp(r0, &(0x7f0000000080)="2f12", 0x2)

1.607055242s ago: executing program 5 (id=994):
syz_mount_image$reiserfs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x1000098, &(0x7f00000002c0), 0x1, 0x10f6, &(0x7f00000022c0)="$eJzs2LFqFEEYB/D/7J6C1cmkXwJaKEhIOF8ghcI1FtZ2h5WdVyn3OD6OpLIPeYAUAXtlb10NIki4JQfH7wfL7vyZb76dciYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQmyUPkxw1SR2zJklJuu5ieZWkG/PHX9smJW/fL9evPi5er4dp6bMmpa/ajuvZk1oXdVHP6suj86d1/enzh/ZWy5Iulzeb1aM315Nupe/dTroiAAAAHIYfO5vvuT8AAADwP5NdJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMoI4fTZKSdN3F8ipJt9/fAgAAAHZU0uTd/F/5cA3wx4t8m5dtPvpe+jmn+TLUP7979wd3LwEAAIADVW6dx59l9vtc3mfHmeXkZBj/euX6PGmTnP61zuXNZrV9jjercp8bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+sgPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAACAqQIAAP//I7HRJg==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000007980)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYBLOB="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"/353, @ANYRESHEX, @ANYRES16, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES8, @ANYRES16], 0x0, 0x0, &(0x7f0000000000))
fsync(r0)

702.764807ms ago: executing program 3 (id=997):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x0)

646.662577ms ago: executing program 5 (id=998):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000019c0), r0)
sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x48, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)

640.068097ms ago: executing program 3 (id=999):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r1, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x7, 0x0, @remote, 0x19}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000540)="79408e00004c410b34c1", 0xa}], 0x1, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="79fdae7c281a39f339deef", 0xb}, {&(0x7f0000000140)}, {0x0}], 0x3}}], 0x2, 0xc008801)

590.681338ms ago: executing program 3 (id=1000):
r0 = socket(0x200000100000011, 0x803, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000140)="4dcdc7d96a760000ff88000500000000e0060000", 0x14, 0x0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)

516.851858ms ago: executing program 3 (id=1001):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x28, r1, 0x201, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x4048810)

400.522908ms ago: executing program 3 (id=1002):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ff00000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x41, 0x3, 0x240, 0x0, 0x19, 0x542c, 0xd0, 0x3200, 0x1a8, 0x1f0, 0x1f0, 0x1a8, 0x1f0, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0xffffffff, 'bond_slave_0\x00', 'wg0\x00'}, 0x32020000, 0x70, 0xd0, 0x6400, {0x500000000000000, 0xffffffffa0028000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0)

324.587248ms ago: executing program 5 (id=1003):
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r0, &(0x7f0000000080), 0x2000011a)
recvfrom(r0, &(0x7f0000000980)=""/206, 0xce, 0x2122, &(0x7f0000000b00)=@un=@file={0x0, './file0\x00'}, 0x80)

142.635519ms ago: executing program 3 (id=1004):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004340)=[{{&(0x7f0000000340)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000840)="b1", 0x1}], 0x1}}], 0x1, 0x40040)
sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)

110.11572ms ago: executing program 4 (id=1005):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x10012, r0, 0x0)
semtimedop(0x0, &(0x7f0000000100)=[{0x1, 0x5, 0x1000}], 0x1, &(0x7f0000000180))

0s ago: executing program 4 (id=1006):
setregid(0x0, 0xee01)
syz_open_procfs(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f000009dfc0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f000009e000))

kernel console output (not intermixed with test programs):

 the iptables CT target to attach helpers instead.
[   59.265314][ T4278] loop4: detected capacity change from 0 to 128
[   59.439147][ T4166] Bluetooth: hci2: command 0x0419 tx timeout
[   59.445213][ T4166] Bluetooth: hci1: command 0x0419 tx timeout
[   59.449974][ T4212] Bluetooth: hci3: command 0x0419 tx timeout
[   59.468216][ T4212] Bluetooth: hci4: command 0x0419 tx timeout
[   59.483935][ T4166] Bluetooth: hci0: command 0x0419 tx timeout
[   59.688466][ T4243] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[   59.712835][ T4243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.741317][ T4243] usb 3-1: Product: syz
[   59.745523][ T4243] usb 3-1: Manufacturer: syz
[   59.774909][ T4243] usb 3-1: SerialNumber: syz
[   59.813927][ T4243] r8152-cfgselector 3-1: config 0 descriptor??
[   59.904174][ T4321] loop0: detected capacity change from 0 to 24
[   60.085606][ T4330] loop3: detected capacity change from 0 to 1024
[   60.139452][ T4330] EXT4-fs (loop3): Ignoring removed orlov option
[   60.155373][ T4330] EXT4-fs (loop3): Ignoring removed oldalloc option
[   60.169190][ T4330] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   60.197999][ T4330] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869)
[   60.202836][ T4335] loop1: detected capacity change from 0 to 512
[   60.219045][ T4330] EXT4-fs (loop3): invalid journal inode
[   60.224845][ T4330] EXT4-fs (loop3): can't get journal size
[   60.243870][ T4330] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000008001,norecovery,orlov,oldalloc,,errors=continue. Quota mode: writeback.
[   60.319697][ T4243] r8152-cfgselector 3-1: Unknown version 0x0000
[   60.326953][ T4243] r8152-cfgselector 3-1: bad CDC descriptors
[   60.351142][ T4335] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.35: casefold flag without casefold feature
[   60.367460][ T4243] r8152-cfgselector 3-1: Unknown version 0x0000
[   60.369507][ T4335] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.35: couldn't read orphan inode 15 (err -117)
[   60.377130][ T4243] r8152-cfgselector 3-1: USB disconnect, device number 2
[   60.467517][ T4335] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[   61.158354][ T4173] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   61.191840][ T4374] binder: 4373:4374 ioctl 400c620e 20000040 returned -22
[   61.271133][ T4343] loop3: detected capacity change from 0 to 32768
[   61.340636][ T4343] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.37 (4343)
[   61.466792][ T4343] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[   61.527112][ T4343] BTRFS info (device loop3): setting nodatacow, compression disabled
[   61.553487][ T4212] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   61.561284][ T4173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   61.574838][ T4343] BTRFS info (device loop3): enabling auto defrag
[   61.582959][ T4173] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   61.593407][ T4343] BTRFS info (device loop3): max_inline at 0
[   61.600729][ T4173] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[   61.613801][ T4343] BTRFS info (device loop3): using free space tree
[   61.624658][ T4396] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   61.631815][ T4173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.640362][ T4343] BTRFS info (device loop3): has skinny extents
[   61.668051][ T4173] usb 1-1: config 0 descriptor??
[   61.784217][ T4406] loop4: detected capacity change from 0 to 128
[   61.897691][ T4422] loop2: detected capacity change from 0 to 2048
[   61.899733][ T4406] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[   61.960680][ T4425] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   61.971721][ T4212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   61.982872][ T4212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   61.993654][ T4212] usb 2-1: New USB device found, idVendor=056a, idProduct=032a, bcdDevice= 0.00
[   62.004272][ T4212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.018364][ T4212] usb 2-1: config 0 descriptor??
[   62.044317][ T4427] loop4: detected capacity change from 0 to 1024
[   62.104567][ T4427] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   62.149386][ T4359] udc-core: couldn't find an available UDC or it's busy
[   62.171362][ T4359] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   62.230151][ T4173] sony 0003:054C:024B.0001: unknown main item tag 0x0
[   62.233666][   T26] audit: type=1326 audit(1732319590.047:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4431 comm="syz.2.71" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f18bc7ba819 code=0x0
[   62.248106][ T4173] sony 0003:054C:024B.0001: unknown main item tag 0x0
[   62.302392][ T4173] sony 0003:054C:024B.0001: unknown main item tag 0x0
[   62.336153][ T4173] sony 0003:054C:024B.0001: unknown main item tag 0x0
[   62.355525][ T4173] sony 0003:054C:024B.0001: unknown main item tag 0x0
[   62.369206][ T4173] sony 0003:054C:024B.0001: unknown main item tag 0x0
[   62.376073][ T4173] sony 0003:054C:024B.0001: unknown main item tag 0x0
[   62.389982][ T4173] sony 0003:054C:024B.0001: unknown main item tag 0x0
[   62.397936][ T4173] sony 0003:054C:024B.0001: unknown main item tag 0x0
[   62.411846][ T4173] sony 0003:054C:024B.0001: unexpected long global item
[   62.427230][ T4173] sony 0003:054C:024B.0001: parse failed
[   62.433143][ T4173] sony: probe of 0003:054C:024B.0001 failed with error -22
[   62.454911][ T4173] usb 1-1: USB disconnect, device number 2
[   62.494272][ T4212] wacom 0003:056A:032A.0002: unknown main item tag 0x4
[   62.568386][ T4212] wacom 0003:056A:032A.0002: hidraw0: USB HID v0.00 Device [HID 056a:032a] on usb-dummy_hcd.1-1/input0
[   62.695388][ T4166] usb 2-1: USB disconnect, device number 2
[   62.823443][ T4453] netlink: 20 bytes leftover after parsing attributes in process `syz.3.74'.
[   62.867557][ T4455] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   62.883879][ T4457] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   62.990685][ T4462] loop3: detected capacity change from 0 to 512
[   63.032385][ T4462] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.78: inode #1: comm syz.3.78: iget: illegal inode #
[   63.078580][ T4462] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.78: error while reading EA inode 1 err=-117
[   63.167629][ T4462] EXT4-fs (loop3): 1 orphan inode deleted
[   63.197894][ T4462] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,journal_dev=0x0000000000008000,debug_want_extra_isize=0x0000000000000006,grpid,resgid=0x0000000000000000,grpquota,usrjquota=,journal_dev=0x0000000000000dcc,,errors=continue. Quota mode: writeback.
[   63.278659][ T4462] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5826: inode #18: comm syz.3.78: bad extra_isize 6 (inode size 256)
[   63.320836][ T4474] loop2: detected capacity change from 0 to 1
[   63.409818][ T4474] attempt to access beyond end of device
[   63.409818][ T4474] loop2: rw=2048, want=8, limit=1
[   63.444068][ T4474] SQUASHFS error: Failed to read block 0x0: -5
[   63.463488][ T4474] unable to read squashfs_super_block
[   63.568394][ T4449] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   63.577781][ T4463] loop4: detected capacity change from 0 to 40427
[   63.649688][ T4479] loop3: detected capacity change from 0 to 8192
[   63.680313][ T4463] F2FS-fs (loop4): Invalid segment count (0)
[   63.686537][ T4463] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   63.710218][ T4479] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[   63.726544][ T4479] REISERFS (device loop3): using ordered data mode
[   63.733601][ T4479] reiserfs: using flush barriers
[   63.741427][ T4479] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   63.752441][ T4481] loop0: detected capacity change from 0 to 4096
[   63.758904][ T4479] REISERFS (device loop3): checking transaction log (loop3)
[   63.777410][ T4479] REISERFS (device loop3): Using r5 hash to sort names
[   63.778593][ T4463] F2FS-fs (loop4): invalid crc value
[   63.789216][ T4479] REISERFS (device loop3): using 3.5.x disk format
[   63.800343][ T4479] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[   63.883357][ T4463] F2FS-fs (loop4): Found nat_bits in checkpoint
[   63.940135][ T4481] ntfs: volume version 3.1.
[   63.958345][ T4449] usb 2-1: too many endpoints for config 0 interface 0 altsetting 7: 65, using maximum allowed: 30
[   63.981095][ T4449] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   63.995797][ T4463] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   64.004481][ T4463] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   64.032490][ T4449] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 65
[   64.076159][ T4449] usb 2-1: config 0 interface 0 has no altsetting 0
[   64.093726][ T4449] usb 2-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00
[   64.136889][ T4449] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.184658][ T4449] usb 2-1: config 0 descriptor??
[   64.192298][ T4178] attempt to access beyond end of device
[   64.192298][ T4178] loop4: rw=2049, want=45104, limit=40427
[   64.550272][ T4513] loop0: detected capacity change from 0 to 2048
[   64.646162][ T4513] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   64.663489][ T4513] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.698609][ T4449] kye 0003:0458:0087.0003: hidraw0: USB HID v0.04 Device [HID 0458:0087] on usb-dummy_hcd.1-1/input0
[   64.894021][ T4446] usb 2-1: USB disconnect, device number 3
[   64.963384][ T4523] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   65.028551][ T4449] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   65.448860][ T4449] usb 5-1: config 0 has an invalid interface number: 195 but max is 0
[   65.457073][ T4449] usb 5-1: config 0 has no interface number 0
[   65.494582][   T26] audit: type=1326 audit(1732319593.317:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4537 comm="syz.3.108" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f841f047819 code=0x0
[   65.517576][ T4449] usb 5-1: New USB device found, idVendor=33f7, idProduct=0004, bcdDevice=19.50
[   65.533358][ T4449] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.550730][ T4536] loop0: detected capacity change from 0 to 4096
[   65.569303][ T4449] usb 5-1: config 0 descriptor??
[   65.701040][ T4536] ntfs: volume version 3.1.
[   65.754735][ T4525] loop2: detected capacity change from 0 to 40427
[   65.856386][ T4449] usb 5-1: USB disconnect, device number 2
[   65.859923][ T4525] F2FS-fs (loop2): invalid crc value
[   65.906896][ T4525] F2FS-fs (loop2): Found nat_bits in checkpoint
[   66.037159][ T4525] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   66.064448][ T4555] tipc: Started in network mode
[   66.076643][ T4555] tipc: Node identity 7f000001, cluster identity 4711
[   66.084121][ T4557] loop1: detected capacity change from 0 to 256
[   66.100332][ T4555] tipc: Enabled bearer <udp:syz1>, priority 10
[   66.165059][ T4557] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   66.202849][ T4165] attempt to access beyond end of device
[   66.202849][ T4165] loop2: rw=2049, want=45104, limit=40427
[   66.677565][ T4575] Attempt to restore checkpoint with obsolete wellknown handles
[   66.787874][ T4580] loop1: detected capacity change from 0 to 64
[   67.089344][ T4595] �: renamed from pim6reg1
[   67.242786][ T4447] tipc: Node number set to 2130706433
[   67.340065][ T4605] loop3: detected capacity change from 0 to 64
[   67.347620][ T4603] loop1: detected capacity change from 0 to 2048
[   67.842343][ T4619] loop0: detected capacity change from 0 to 1024
[   67.882992][ T4619] EXT4-fs (loop0): Ignoring removed orlov option
[   67.899041][ T4619] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[   68.020259][ T4593] loop2: detected capacity change from 0 to 32768
[   68.054584][ T4593] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.116 (4593)
[   68.135472][ T4593] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   68.167158][ T4619] EXT4-fs (loop0): Test dummy encryption mode enabled
[   68.215134][ T4619] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x000000007fffffff,orlov,nomblk_io_submit,test_dummy_encryption,nojournal_checksum,grpquota,auto_da_alloc=0x0000000000000ae8,discard,,errors=continue. Quota mode: writeback.
[   68.252267][ T4593] BTRFS info (device loop2): using free space tree
[   68.323515][ T4593] BTRFS info (device loop2): has skinny extents
[   68.403158][ T4611] loop4: detected capacity change from 0 to 32768
[   68.577295][ T4642] loop0: detected capacity change from 0 to 256
[   68.593706][ T4615] loop1: detected capacity change from 0 to 40427
[   68.637836][ T4611] XFS (loop4): Mounting V5 Filesystem
[   68.638386][ T4642] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   68.672058][ T4615] F2FS-fs (loop1): invalid crc value
[   68.714775][ T4615] F2FS-fs (loop1): Found nat_bits in checkpoint
[   68.737957][ T4611] XFS (loop4): Ending clean mount
[   68.764777][ T4611] XFS (loop4): Quotacheck needed: Please wait.
[   68.850426][ T4615] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   68.892498][ T4593] BTRFS info (device loop2): enabling ssd optimizations
[   68.900108][ T4448] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   68.926978][ T4611] XFS (loop4): Quotacheck: Done.
[   68.937994][ T4163] attempt to access beyond end of device
[   68.937994][ T4163] loop1: rw=2049, want=45104, limit=40427
[   69.146898][ T4178] XFS (loop4): Unmounting Filesystem
[   69.343586][ T4448] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[   69.379956][ T4448] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.418027][ T4448] usb 4-1: config 0 descriptor??
[   70.028414][ T4243] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   70.029633][ T4448] [drm:udl_init] *ERROR* Selecting channel failed
[   70.111831][ T4448] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2
[   70.126555][ T4448] [drm] Initialized udl on minor 2
[   70.149338][ T4448] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[   70.159418][ T4448] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[   70.189867][ T4448] usb 4-1: USB disconnect, device number 2
[   70.197860][ T4444] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[   70.216367][ T4444] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[   70.259015][ T4444] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[   70.270066][ T4243] usb 1-1: Using ep0 maxpacket: 8
[   70.355675][ T4694] loop4: detected capacity change from 0 to 256
[   70.372550][ T4678] loop2: detected capacity change from 0 to 32768
[   70.388640][ T4243] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[   70.407331][ T4243] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   70.422961][ T4243] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   70.447196][ T4243] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   70.466552][ T4243] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   70.471508][ T4694] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d)
[   70.477440][ T4243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.603083][ T4678] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   70.723733][ T4692] loop1: detected capacity change from 0 to 32768
[   70.768746][ T4243] usb 1-1: GET_CAPABILITIES returned 0
[   70.775043][ T4243] usbtmc 1-1:16.0: can't read capabilities
[   70.804915][ T4165] ocfs2: Unmounting device (7,2) on (node local)
[   70.811637][ T4692] XFS (loop1): Mounting V5 Filesystem
[   70.882004][ T4692] XFS (loop1): Ending clean mount
[   70.992104][   T26] audit: type=1800 audit(1732319598.817:4): pid=4692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.157" name="file1" dev="loop1" ino=7430 res=0 errno=0
[   71.057151][ T4212] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 
[   71.075744][ T4680] usbtmc 1-1:16.0: usbtmc488_ioctl_trigger returned -71
[   71.122222][ T4212] XFS (loop1): Unmount and run xfs_repair
[   71.163736][ T4212] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[   71.205662][ T4212] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[   71.222451][ T4716] loop2: detected capacity change from 0 to 512
[   71.232145][   T26] audit: type=1326 audit(1732319599.057:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4713 comm="syz.4.164" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdfde4ac819 code=0x0
[   71.239203][ T4212] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 40  ...............@
[   71.279004][ T4212] 00000020: 9f 91 83 2a 3b 79 45 c3 9d 6d ed 0b c7 35 7f e4  ...*;yE..m...5..
[   71.288763][ T4212] 00000030: 00 00 00 00 23 eb 6e b5 00 00 00 00 00 00 00 01  ....#.n.........
[   71.297793][ T4212] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[   71.334755][ T4716] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #17: comm syz.2.163: iget: bogus i_mode (0)
[   71.352369][ T4212] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[   71.365707][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[   71.372401][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[   71.430206][ T4212] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[   71.440186][ T4716] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.163: couldn't read orphan inode 17 (err -117)
[   71.464496][ T4212] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[   71.484737][ T4716] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   71.507042][ T4692] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74
[   71.527471][ T4212] usb 1-1: USB disconnect, device number 3
[   71.564235][ T4692] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1750/0x1df0 (fs/xfs/libxfs/xfs_defer.c:504).  Shutting down filesystem.
[   71.607483][ T4692] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[   71.614174][ T4716] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.163: bg 0: block 7: invalid block bitmap
[   71.680193][ T4163] XFS (loop1): Unmounting Filesystem
[   71.760455][ T4724] netlink: 20 bytes leftover after parsing attributes in process `syz.0.167'.
[   72.213938][ T4722] loop3: detected capacity change from 0 to 32768
[   72.253480][ T4730] loop4: detected capacity change from 0 to 4096
[   72.331687][ T4736] loop0: detected capacity change from 0 to 1024
[   72.359920][ T4737] loop1: detected capacity change from 0 to 1024
[   72.676512][ T4722] XFS: ikeep mount option is deprecated.
[   72.757459][ T4730] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[   72.758421][ T4722] XFS (loop3): Mounting V5 Filesystem
[   72.859232][ T4736] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none.
[   73.043239][ T4736] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2816: Unable to expand inode 12. Delete some EAs or run e2fsck.
[   73.068034][ T4722] XFS (loop3): Ending clean mount
[   73.141572][ T4722] XFS (loop3): Quotacheck needed: Please wait.
[   73.274465][ T4722] XFS (loop3): Quotacheck: Done.
[   73.603350][ T4169] XFS (loop3): Unmounting Filesystem
[   73.781595][ T4763] loop0: detected capacity change from 0 to 2048
[   73.874403][ T4763] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   73.922884][ T4753] loop2: detected capacity change from 0 to 32768
[   74.030562][ T4753] XFS: ikeep mount option is deprecated.
[   74.134924][ T4768] capability: warning: `syz.0.182' uses deprecated v2 capabilities in a way that may be insecure
[   74.155825][ T4756] loop1: detected capacity change from 0 to 32768
[   74.197680][ T4753] XFS (loop2): Mounting V5 Filesystem
[   74.206039][ T4778] netlink: 'syz.3.184': attribute type 33 has an invalid length.
[   74.213820][ T4756] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.175 (4756)
[   74.264950][ T4778] netlink: 'syz.3.184': attribute type 13 has an invalid length.
[   74.280794][ T4756] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[   74.284600][ T4753] XFS (loop2): Ending clean mount
[   74.291033][ T4756] BTRFS info (device loop1): using free space tree
[   74.301285][ T4756] BTRFS info (device loop1): has skinny extents
[   74.301550][ T4778] netlink: 152 bytes leftover after parsing attributes in process `syz.3.184'.
[   74.326795][ T4789] loop4: detected capacity change from 0 to 1024
[   74.348434][ T4753] XFS (loop2): Quotacheck needed: Please wait.
[   74.351179][ T4786] netlink: 'syz.3.184': attribute type 33 has an invalid length.
[   74.404401][ T4796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'.
[   74.420268][ T4786] syz.3.184 (4786) used greatest stack depth: 18904 bytes left
[   74.488421][ T4753] XFS (loop2): Quotacheck: Done.
[   74.595894][ T4165] XFS (loop2): Unmounting Filesystem
[   74.720782][ T4756] BTRFS info (device loop1): enabling ssd optimizations
[   75.155514][ T4820] loop3: detected capacity change from 0 to 4096
[   75.279081][ T4820] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[   75.425446][ T4835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.193'.
[   75.447879][ T4811] loop0: detected capacity change from 0 to 32768
[   75.589867][ T4811] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[   75.630432][ T4811] JBD2: Ignoring recovery information on journal
[   75.862759][ T4811] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   75.887371][ T4830] loop2: detected capacity change from 0 to 32768
[   75.917227][ T4811] OCFS2: ERROR (device loop0): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total
[   75.949847][ T4811] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   75.969295][ T4811] OCFS2: Returning error to the calling process.
[   75.986561][ T4830] XFS: ikeep mount option is deprecated.
[   75.987333][ T4811] (syz.0.199,4811,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -5
[   76.007049][ T4811] (syz.0.199,4811,1):__ocfs2_claim_clusters:2355 ERROR: status = -5
[   76.015660][ T4811] (syz.0.199,4811,1):__ocfs2_claim_clusters:2363 ERROR: status = -5
[   76.054677][ T4811] (syz.0.199,4811,0):ocfs2_local_alloc_new_window:1222 ERROR: status = -5
[   76.065462][ T4811] (syz.0.199,4811,0):ocfs2_local_alloc_new_window:1247 ERROR: status = -5
[   76.074609][ T4811] (syz.0.199,4811,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -5
[   76.086349][ T4811] (syz.0.199,4811,0):ocfs2_local_alloc_slide_window:1340 ERROR: status = -5
[   76.096924][ T4811] (syz.0.199,4811,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -5
[   76.105843][ T4811] (syz.0.199,4811,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -5
[   76.123755][ T4811] (syz.0.199,4811,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -5
[   76.126769][ T4830] XFS (loop2): Mounting V5 Filesystem
[   76.133741][ T4811] (syz.0.199,4811,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -5
[   76.147826][ T4811] (syz.0.199,4811,0):ocfs2_symlink:1909 ERROR: status = -5
[   76.156186][ T4811] (syz.0.199,4811,0):ocfs2_symlink:2063 ERROR: status = -5
[   76.205579][ T4164] ocfs2: Unmounting device (7,0) on (node local)
[   76.233254][ T4830] XFS (loop2): Ending clean mount
[   76.243361][ T4830] XFS (loop2): Quotacheck needed: Please wait.
[   76.325118][ T4830] XFS (loop2): Quotacheck: Done.
[   76.388382][ T4165] XFS (loop2): Unmounting Filesystem
[   76.416736][ T4869] loop3: detected capacity change from 0 to 1024
[   76.489918][ T4871] loop1: detected capacity change from 0 to 4096
[   76.507872][ T1323] cfg80211: failed to load regulatory.db
[   76.610857][ T4875] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   77.076518][ T4887] netlink: 'syz.3.212': attribute type 7 has an invalid length.
[   77.138258][ T4212] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   77.228940][ T4894] loop4: detected capacity change from 0 to 1024
[   77.310467][ T4895] loop2: detected capacity change from 0 to 4096
[   77.360830][ T4894] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   77.364018][ T4895] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[   77.399775][ T4894] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended
[   77.419449][ T4212] usb 1-1: Using ep0 maxpacket: 32
[   77.475761][ T4894] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,noinit_itable,dioread_nolock,dioread_nolock,bsdgroups,min_batch_time=0x0000000000005c0a,inode_readahead_blks=0x0000000000000001,max_dir_size_kb=0x0000000000000001,,errors=continue. Quota mode: writeback.
[   77.536701][ T4894] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback.
[   77.598498][ T4448] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   77.606231][ T4212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.617256][ T4212] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.650367][ T4212] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00
[   77.684895][ T4212] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.708287][ T4212] usb 1-1: config 0 descriptor??
[   77.725148][ T4901] loop3: detected capacity change from 0 to 512
[   77.878263][ T4448] usb 2-1: Using ep0 maxpacket: 8
[   77.985493][ T4907] loop3: detected capacity change from 0 to 1024
[   78.053252][ T4907] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[   78.097178][ T4907] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,init_itable,debug_want_extra_isize=0x0000000000000080,auto_da_alloc,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[   78.191166][ T4212] macally 0003:060B:0001.0004: item fetching failed at offset 2/5
[   78.203328][ T4904] loop4: detected capacity change from 0 to 32768
[   78.210462][ T4212] macally: probe of 0003:060B:0001.0004 failed with error -22
[   78.248375][ T4448] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[   78.257700][ T4448] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.265836][ T4448] usb 2-1: Product: syz
[   78.270941][ T4904] XFS: ikeep mount option is deprecated.
[   78.276651][ T4448] usb 2-1: Manufacturer: syz
[   78.282074][ T4448] usb 2-1: SerialNumber: syz
[   78.295472][ T4448] usb 2-1: config 0 descriptor??
[   78.429170][ T4243] usb 1-1: USB disconnect, device number 4
[   78.448260][ T4904] XFS (loop4): Mounting V5 Filesystem
[   78.521122][ T4928] loop2: detected capacity change from 0 to 4096
[   78.531399][ T4935] loop3: detected capacity change from 0 to 256
[   78.565617][ T4904] XFS (loop4): Ending clean mount
[   78.572351][ T4448] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71
[   78.580067][ T4928] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[   78.580241][ T4448] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71
[   78.593666][ T4904] XFS (loop4): Quotacheck needed: Please wait.
[   78.606010][ T4448] usb 2-1: USB disconnect, device number 4
[   78.608514][ T4935] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[   78.662314][ T4928] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[   78.715133][ T4904] XFS (loop4): Quotacheck: Done.
[   78.805642][ T4178] XFS (loop4): Unmounting Filesystem
[   78.896260][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!!
[   79.103110][   T26] audit: type=1326 audit(1732319606.924:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4942 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd890a82819 code=0x7ffc0000
[   79.198419][   T26] audit: type=1326 audit(1732319606.964:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4942 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fd890a82819 code=0x7ffc0000
[   79.257591][ T4944] loop3: detected capacity change from 0 to 4096
[   79.266051][   T26] audit: type=1326 audit(1732319606.964:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4942 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd890a82819 code=0x7ffc0000
[   79.407113][ T4959] netlink: 'syz.4.230': attribute type 1 has an invalid length.
[   79.431962][ T4944] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[   79.496500][ T4963] loop2: detected capacity change from 0 to 16
[   79.599889][ T4963] erofs: (device loop2): mounted with root inode @ nid 36.
[   79.662535][ T4963] erofs: (device loop2): z_erofs_fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel
[   79.700575][ T4963] erofs: (device loop2): z_erofs_readahead: readahead error at page 3604 @ nid 36
[   79.727703][ T4963] erofs: (device loop2): z_erofs_fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel
[   79.772288][ T4971] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   79.775331][ T4972] erofs: (device loop2): z_erofs_fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel
[   79.850070][ T4963] erofs: (device loop2): z_erofs_readahead: readahead error at page 3603 @ nid 36
[   79.863261][ T4972] erofs: (device loop2): z_erofs_readpage: failed to read, err [-95]
[   79.877030][ T4974] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   79.893251][ T4963] erofs: (device loop2): z_erofs_fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel
[   79.987562][ T4963] erofs: (device loop2): z_erofs_readahead: readahead error at page 3602 @ nid 36
[   79.997191][ T4971] syz.0.245 (4971) used greatest stack depth: 18296 bytes left
[   80.018285][ T4963] erofs: (device loop2): z_erofs_fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel
[   80.082592][ T4963] erofs: (device loop2): z_erofs_readahead: readahead error at page 3601 @ nid 36
[   80.116399][ T4963] erofs: (device loop2): z_erofs_fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel
[   80.149232][ T4963] erofs: (device loop2): z_erofs_readahead: readahead error at page 3600 @ nid 36
[   80.189980][ T4963] erofs: (device loop2): z_erofs_fill_inode_lazy: unknown compression format 4 for nid 36, please upgrade kernel
[   80.218356][ T4963] erofs: (device loop2): z_erofs_readahead: readahead error at page 3599 @ nid 36
[   80.265551][ T4961] loop1: detected capacity change from 0 to 32768
[   80.307459][ T4961] XFS: ikeep mount option is deprecated.
[   80.461015][ T4961] XFS (loop1): Mounting V5 Filesystem
[   80.530417][ T4996] loop3: detected capacity change from 0 to 64
[   80.595808][ T4961] XFS (loop1): Ending clean mount
[   80.605962][ T4961] XFS (loop1): Quotacheck needed: Please wait.
[   80.673293][ T4996] hfs: walked past end of dir
[   80.733303][ T4961] XFS (loop1): Quotacheck: Done.
[   80.766105][ T5000] loop2: detected capacity change from 0 to 2048
[   80.824122][ T4978] loop4: detected capacity change from 0 to 40427
[   80.847644][ T4163] XFS (loop1): Unmounting Filesystem
[   80.870217][ T5000] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   80.909206][ T4978] F2FS-fs (loop4): invalid crc value
[   80.962588][ T4978] F2FS-fs (loop4): Found nat_bits in checkpoint
[   81.121196][ T5009] sock: sock_set_timeout: `syz.3.260' (pid 5009) tries to set negative timeout
[   81.155897][ T4978] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   81.437041][ T5020] loop3: detected capacity change from 0 to 128
[   81.514330][ T5020] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   81.531884][ T5022] device syz_tun entered promiscuous mode
[   81.585607][ T5020] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   81.597234][ T5022] device syz_tun left promiscuous mode
[   81.754446][ T4248] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   81.933025][ T5026] loop4: detected capacity change from 0 to 2048
[   82.078548][ T5026] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   82.096631][ T5018] loop2: detected capacity change from 0 to 32768
[   82.152164][ T5018] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.263 (5018)
[   82.251334][ T5018] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[   82.274984][ T5018] BTRFS info (device loop2): using free space tree
[   82.313091][ T5018] BTRFS info (device loop2): has skinny extents
[   82.369083][ T5007] loop0: detected capacity change from 0 to 32768
[   82.429439][ T5007] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   82.527210][ T5007] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   82.541679][ T5043] loop3: detected capacity change from 0 to 4096
[   82.604486][ T5043] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[   82.665181][ T5018] BTRFS info (device loop2): enabling ssd optimizations
[   82.754855][ T5007] gfs2: fsid=syz:syz.s: journal 0 mapped with 16 extents in 0ms
[   82.764413][ T5043] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,grpquota,init_itable,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback.
[   82.816577][ T5044] loop4: detected capacity change from 0 to 40427
[   82.918810][ T5044] F2FS-fs (loop4): invalid crc value
[   82.937882][ T5007] gfs2: fsid=syz:syz.s: first mount done, others may mount
[   82.954632][ T5044] F2FS-fs (loop4): Found nat_bits in checkpoint
[   83.289260][ T5044] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0
[   83.328514][ T5044] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   83.424250][ T5037] loop1: detected capacity change from 0 to 32768
[   83.454600][ T4178] attempt to access beyond end of device
[   83.454600][ T4178] loop4: rw=2049, want=45104, limit=40427
[   83.634117][ T5088] loop2: detected capacity change from 0 to 512
[   83.720119][ T5037] XFS (loop1): Mounting V5 Filesystem
[   83.726087][ T5088] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5
[   83.726087][ T5088] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   83.726087][ T5088] 
[   83.790109][ T5088] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[   83.847741][ T5088] EXT4-fs (loop2): 1 truncate cleaned up
[   83.947603][ T5088] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,jqfmt=vfsv1,usrjquota="oldalloc,noacl,data_err=abort,,errors=continue. Quota mode: writeback.
[   83.979157][ T5037] XFS (loop1): Ending clean mount
[   83.991937][ T5037] XFS (loop1): Quotacheck needed: Please wait.
[   84.065217][ T5088] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #2: block 4: comm syz.2.283: lblock 0 mapped to illegal pblock 4 (length 1)
[   84.127492][ T5037] XFS (loop1): Quotacheck: Done.
[   84.298567][ T4243] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   84.346947][ T4163] XFS (loop1): Unmounting Filesystem
[   84.531806][ T5126] raw_sendmsg: syz.0.297 forgot to set AF_INET. Fix it!
[   84.538879][ T4243] usb 4-1: Using ep0 maxpacket: 32
[   84.663625][ T4243] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[   84.678344][ T4243] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   84.720399][ T4243] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   84.758617][ T4243] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   84.765185][ T5115] loop4: detected capacity change from 0 to 32768
[   84.784865][ T4243] usb 4-1: config 0 interface 0 has no altsetting 0
[   84.854942][ T5115] JBD2: Ignoring recovery information on journal
[   84.952485][ T5115] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   84.965015][ T4243] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   84.975338][ T4243] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   85.043473][ T4243] usb 4-1: Product: syz
[   85.047669][ T4243] usb 4-1: Manufacturer: syz
[   85.070722][ T4243] usb 4-1: SerialNumber: syz
[   85.108847][ T4243] usb 4-1: config 0 descriptor??
[   85.164666][ T4243] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   85.191939][ T4243] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   85.198677][   T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   85.257349][ T5129] loop0: detected capacity change from 0 to 32768
[   85.264924][ T4178] ocfs2: Unmounting device (7,4) on (node local)
[   85.317456][ T5129] XFS (loop0): Mounting V5 Filesystem
[   85.405622][ T5161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.308'.
[   85.426447][ T4243] usb 4-1: USB disconnect, device number 3
[   85.436847][ T5161] device macsec0 entered promiscuous mode
[   85.468198][   T21] usb 3-1: Using ep0 maxpacket: 32
[   85.483342][ T4243] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[   85.550355][ T5129] XFS (loop0): Ending clean mount
[   85.566346][ T5129] XFS (loop0): Quotacheck needed: Please wait.
[   85.598454][   T21] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[   85.611492][   T21] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   85.625429][ T5167] cifs: Unknown parameter 'mode'
[   85.638458][   T21] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   85.655679][   T21] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   85.677707][ T5129] XFS (loop0): Quotacheck: Done.
[   85.732947][   T21] usb 3-1: config 0 interface 0 has no altsetting 0
[   85.753250][ T4164] XFS (loop0): Unmounting Filesystem
[   85.953931][   T21] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   85.984147][   T21] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   86.006995][ T5175] loop3: detected capacity change from 0 to 1024
[   86.023356][   T21] usb 3-1: Product: syz
[   86.033410][   T21] usb 3-1: Manufacturer: syz
[   86.053658][   T21] usb 3-1: SerialNumber: syz
[   86.081216][   T21] usb 3-1: config 0 descriptor??
[   86.139586][   T21] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   86.164741][   T21] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   86.242027][ T5183] loop0: detected capacity change from 0 to 16
[   86.317043][ T5169] loop1: detected capacity change from 0 to 32768
[   86.338438][ T5183] erofs: (device loop0): mounted with root inode @ nid 36.
[   86.346045][   T21] usb 3-1: USB disconnect, device number 3
[   86.360009][   T21] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[   86.509895][ T5169] XFS (loop1): Mounting V5 Filesystem
[   86.665064][ T5169] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[   86.780987][ T5169] XFS (loop1): Starting recovery (logdev: internal)
[   86.841647][ T5169] XFS (loop1): Ending recovery (logdev: internal)
[   86.846756][ T5210] loop4: detected capacity change from 0 to 128
[   86.917559][ T4163] XFS (loop1): Unmounting Filesystem
[   86.917884][ T5187] loop3: detected capacity change from 0 to 32768
[   86.945645][ T5210] befs: (loop4): No write support. Marking filesystem read-only
[   86.993727][ T5210] befs: (loop4): invalid magic header
[   87.131234][ T5210] Zero length message leads to an empty skb
[   87.159875][ T5221] loop2: detected capacity change from 0 to 64
[   87.224979][ T5223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.335'.
[   88.045327][ T5255] loop4: detected capacity change from 0 to 512
[   88.172910][ T5255] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[   88.294372][ T5255] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.343: invalid indirect mapped block 10 (level 1)
[   88.297930][ T5255] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.343: invalid indirect mapped block 8 (level 1)
[   88.300353][ T5255] EXT4-fs (loop4): 1 truncate cleaned up
[   88.300378][ T5255] EXT4-fs (loop4): mounted filesystem without journal. Opts: mblk_io_submit,resuid=0x000000000000ee00,,errors=continue. Quota mode: none.
[   88.668942][ T5293] netlink: 24 bytes leftover after parsing attributes in process `syz.3.352'.
[   88.754393][ T5293] sch_fq: defrate 2 ignored.
[   88.773517][ T5299] program syz.4.353 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   88.890372][ T5263] loop2: detected capacity change from 0 to 32768
[   88.923119][ T5305] loop3: detected capacity change from 0 to 64
[   89.297670][ T5313] loop3: detected capacity change from 0 to 256
[   89.423750][ T5313] FAT-fs (loop3): Directory bread(block 64) failed
[   89.440868][ T5313] FAT-fs (loop3): Directory bread(block 65) failed
[   89.464342][ T5313] FAT-fs (loop3): Directory bread(block 66) failed
[   89.485434][ T5313] FAT-fs (loop3): Directory bread(block 67) failed
[   89.506791][ T5313] FAT-fs (loop3): Directory bread(block 68) failed
[   89.525724][ T5313] FAT-fs (loop3): Directory bread(block 69) failed
[   89.551436][ T5313] FAT-fs (loop3): Directory bread(block 70) failed
[   89.575173][ T5313] FAT-fs (loop3): Directory bread(block 71) failed
[   89.575341][ T5295] loop1: detected capacity change from 0 to 40427
[   89.596512][ T5313] FAT-fs (loop3): Directory bread(block 72) failed
[   89.624169][ T5313] FAT-fs (loop3): Directory bread(block 73) failed
[   89.692873][ T5295] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[   89.699681][ T5301] loop0: detected capacity change from 0 to 32768
[   89.730677][ T5295] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   89.779004][ T5295] F2FS-fs (loop1): invalid crc value
[   89.807983][ T5295] F2FS-fs (loop1): Found nat_bits in checkpoint
[   89.829417][ T5301] XFS (loop0): Mounting V5 Filesystem
[   89.889466][ T5295] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   89.903229][ T5295] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   89.956031][   T26] audit: type=1326 audit(1732319617.774:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.4.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfde4ac819 code=0x7fc00000
[   89.997501][ T5346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'.
[   90.013417][ T5346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.370'.
[   90.026712][ T5301] XFS (loop0): Ending clean mount
[   90.034951][   T26] audit: type=1326 audit(1732319617.774:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.4.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdfde4ac819 code=0x7fc00000
[   90.127009][ T4164] XFS (loop0): Unmounting Filesystem
[   90.146656][ T4163] attempt to access beyond end of device
[   90.146656][ T4163] loop1: rw=2049, want=45104, limit=40427
[   90.169103][   T26] audit: type=1326 audit(1732319617.774:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.4.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfde4ac819 code=0x7fc00000
[   90.245815][   T26] audit: type=1326 audit(1732319617.774:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.4.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfde4ac819 code=0x7fc00000
[   90.296457][   T26] audit: type=1326 audit(1732319617.774:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.4.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfde4ac819 code=0x7fc00000
[   90.349310][   T26] audit: type=1326 audit(1732319617.774:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.4.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfde4ac819 code=0x7fc00000
[   90.439350][   T26] audit: type=1326 audit(1732319617.774:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.4.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfde4ac819 code=0x7fc00000
[   90.485176][ T5355] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   90.526255][   T26] audit: type=1326 audit(1732319617.774:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.4.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfde4ac819 code=0x7fc00000
[   90.598671][   T26] audit: type=1326 audit(1732319617.774:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.4.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfde4ac819 code=0x7fc00000
[   90.641463][   T26] audit: type=1326 audit(1732319617.774:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5306 comm="syz.4.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfde4ac819 code=0x7fc00000
[   90.799515][ T5366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.380'.
[   90.886934][ T5368] loop0: detected capacity change from 0 to 256
[   90.968386][ T5347] loop2: detected capacity change from 0 to 32768
[   91.041994][ T5368] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   91.134528][ T5383] loop3: detected capacity change from 0 to 512
[   91.204416][ T5383] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   91.239198][ T5383] EXT4-fs (loop3): invalid journal inode
[   91.266927][ T5383] EXT4-fs (loop3): can't get journal size
[   91.293178][ T5385] loop0: detected capacity change from 0 to 2048
[   91.312088][ T5383] EXT4-fs (loop3): 1 truncate cleaned up
[   91.317737][ T5383] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[   91.363754][ T5385] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   91.368301][ T4243] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   91.658229][ T4243] usb 2-1: Using ep0 maxpacket: 8
[   91.727107][ T5401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.393'.
[   91.784027][ T4243] usb 2-1: config 0 has an invalid interface number: 17 but max is 0
[   91.806760][ T4243] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   91.850093][ T4243] usb 2-1: config 0 has no interface number 0
[   91.881282][ T4243] usb 2-1: config 0 interface 17 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   91.926928][ T4243] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[   91.964809][ T4243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.986519][ T4243] usb 2-1: config 0 descriptor??
[   92.046561][ T5417] netlink: 136 bytes leftover after parsing attributes in process `syz.0.402'.
[   92.066162][ T5417] netlink: 89 bytes leftover after parsing attributes in process `syz.0.402'.
[   92.238543][   T21] usb 2-1: USB disconnect, device number 5
[   92.326104][ T5435] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   92.654991][ T5454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'.
[   93.482781][ T5456] loop2: detected capacity change from 0 to 32768
[   93.576025][ T5456] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop2 scanned by syz.2.421 (5456)
[   93.634019][ T5456] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[   93.654327][ T5456] BTRFS info (device loop2): using free space tree
[   93.673682][ T5456] BTRFS info (device loop2): has skinny extents
[   93.695703][ T5466] loop3: detected capacity change from 0 to 32768
[   93.772503][ T5473] loop1: detected capacity change from 0 to 32768
[   93.785665][ T5466] XFS: ikeep mount option is deprecated.
[   93.849011][ T5466] XFS (loop3): Mounting V5 Filesystem
[   93.877665][ T5473] 
[   93.877665][ T5473]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   93.877665][ T5473] 
[   93.896668][ T5466] XFS (loop3): Ending clean mount
[   93.899260][ T5473] ERROR: (device loop1): diWrite: ixpxd invalid
[   93.899260][ T5473] 
[   93.914516][ T5473] ERROR: (device loop1): txCommit: 
[   93.914516][ T5473] 
[   93.916535][ T5466] XFS (loop3): Quotacheck needed: Please wait.
[   93.937783][ T5473] jfs_create: dtSearch returned -17
[   93.956207][ T4163] 
[   93.956207][ T4163]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   93.956207][ T4163] 
[   93.969365][ T4163] 
[   93.969365][ T4163]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   93.969365][ T4163] 
[   93.984188][ T5456] BTRFS info (device loop2): enabling ssd optimizations
[   94.066227][ T5466] XFS (loop3): Quotacheck: Done.
[   94.324744][ T5105] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 10 /dev/loop2 scanned by udevd (5105)
[   94.533382][ T4169] XFS (loop3): Unmounting Filesystem
[   94.640368][ T5511] kernel read not supported for file /eth0 (pid: 5511 comm: syz.1.431)
[   94.695205][ T5516] 9pnet: Insufficient options for proto=fd
[   94.751449][ T5522] loop0: detected capacity change from 0 to 1024
[   95.015672][ T5522] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,bsddf,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[   95.092333][ T5538] loop2: detected capacity change from 0 to 256
[   95.104596][ T5536] device geneve2 entered promiscuous mode
[   95.198438][ T4243] Bluetooth: hci4: command 0x0407 tx timeout
[   95.283508][ T5543] netlink: 40 bytes leftover after parsing attributes in process `syz.3.435'.
[   95.354295][ T5544] bridge0: port 3(syz_tun) entered blocking state
[   95.395900][ T5544] bridge0: port 3(syz_tun) entered disabled state
[   95.416101][ T5547] loop3: detected capacity change from 0 to 512
[   95.433281][ T5544] device syz_tun entered promiscuous mode
[   95.447291][ T5544] bridge0: port 3(syz_tun) entered blocking state
[   95.454372][ T5544] bridge0: port 3(syz_tun) entered forwarding state
[   95.500146][ T5547] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5
[   95.500146][ T5547] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   95.500146][ T5547] 
[   95.552393][ T5547] EXT4-fs (loop3): Ignoring removed oldalloc option
[   95.578619][ T5547] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[   95.665202][ T5547] EXT4-fs (loop3): mounted filesystem without journal. Opts: resuid=0x0000000000000000,lazytime,noacl,oldalloc,lazytime,jqfmt=vfsv1,nodelalloc,noload,,errors=continue. Quota mode: writeback.
[   95.724762][ T5565] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   95.741829][ T5547] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.748913][ T5561] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   95.831463][ T5568] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[   96.121782][ T5576] process 'syz.0.461' launched './file0' with NULL argv: empty string added
[   96.343066][ T5581] loop4: detected capacity change from 0 to 4096
[   96.441107][ T5587] loop3: detected capacity change from 0 to 2048
[   96.508604][ T5581] NILFS (loop4): invalid segment: Checksum error in segment payload
[   96.517165][ T5581] NILFS (loop4): trying rollback from an earlier position
[   96.525794][ T5587] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   96.608362][ T5581] NILFS (loop4): recovery complete
[   96.668310][ T5596] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   96.743630][ T5599] loop1: detected capacity change from 0 to 128
[   97.096150][ T5591] loop0: detected capacity change from 0 to 8192
[   97.113642][ T5608] loop3: detected capacity change from 0 to 16
[   97.126216][ T5572] loop2: detected capacity change from 0 to 32768
[   97.188864][ T5572] XFS: attr2 mount option is deprecated.
[   97.214308][ T5608] erofs: (device loop3): mounted with root inode @ nid 36.
[   97.241902][ T5614] loop1: detected capacity change from 0 to 512
[   97.337009][ T5591] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   97.351503][ T5614] EXT4-fs (loop1): Mount option "nouser_xattr" will be removed by 3.5
[   97.351503][ T5614] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[   97.351503][ T5614] 
[   97.372463][ T5572] XFS (loop2): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent.
[   97.436533][ T5625] loop3: detected capacity change from 0 to 64
[   97.452848][ T5572] XFS (loop2): Quotacheck needed: Please wait.
[   97.496975][ T5591] REISERFS (device loop0): using journaled data mode
[   97.541395][ T5614] EXT4-fs (loop1): 1 orphan inode deleted
[   97.547162][ T5614] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,discard,noblock_validity,init_itable,stripe=0x000000000000002e,nouser_xattr,sysvgroups,norecovery,usrquota,minixdf,,errors=continue. Quota mode: writeback.
[   97.584858][ T5591] reiserfs: using flush barriers
[   97.597095][ T5591] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   97.608498][ T5614] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   97.627971][ T5572] XFS (loop2): Quotacheck: Done.
[   97.716839][ T5591] REISERFS (device loop0): checking transaction log (loop0)
[   97.758395][ T4169] Trying to free block not in datazone
[   97.770677][ T4165] XFS (loop2): Unmounting Filesystem
[   97.822909][ T5591] REISERFS (device loop0): Using r5 hash to sort names
[   97.910100][ T5591] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[   98.032586][ T5591] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[   99.162405][ T5638] loop4: detected capacity change from 0 to 40427
[   99.237795][ T5660] loop0: detected capacity change from 0 to 256
[   99.266313][ T5638] F2FS-fs (loop4): invalid crc value
[   99.320550][ T5660] exfat: Deprecated parameter 'namecase'
[   99.363051][ T5638] F2FS-fs (loop4): Found nat_bits in checkpoint
[   99.399561][ T5660] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[   99.457968][ T5638] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   99.692548][ T5666] netlink: 164320 bytes leftover after parsing attributes in process `syz.2.492'.
[   99.718278][ T5666] netlink: del zone limit has 4 unknown bytes
[  100.184260][ T5657] loop3: detected capacity change from 0 to 40427
[  100.295794][ T5657] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  100.303701][ T5657] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  100.374562][ T5657] F2FS-fs (loop3): invalid crc value
[  100.433928][ T5657] F2FS-fs (loop3): Found nat_bits in checkpoint
[  100.517500][ T5696] loop1: detected capacity change from 0 to 4096
[  100.580632][ T5696] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  100.600607][ T5657] F2FS-fs (loop3): Start checkpoint disabled!
[  100.650436][ T5657] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  100.660569][ T5657] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  100.927250][  T144] attempt to access beyond end of device
[  100.927250][  T144] loop3: rw=2049, want=41000, limit=40427
[  101.475856][ T5701] loop4: detected capacity change from 0 to 32768
[  101.579631][ T5701] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop4 scanned by syz.4.505 (5701)
[  101.698278][ T5701] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  101.733585][ T5701] BTRFS info (device loop4): disabling tree log
[  101.758706][ T5735] program syz.1.519 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  101.769994][ T5701] BTRFS info (device loop4): turning on sync discard
[  101.798213][ T5701] BTRFS info (device loop4): force clearing of disk cache
[  101.805372][ T5701] BTRFS info (device loop4): enabling ssd optimizations
[  101.863705][ T5701] BTRFS info (device loop4): using spread ssd allocation scheme
[  101.872994][ T5674] loop0: detected capacity change from 0 to 32768
[  101.888223][ T5701] BTRFS info (device loop4): using free space tree
[  101.895519][ T5701] BTRFS info (device loop4): has skinny extents
[  101.988637][ T5737] loop3: detected capacity change from 0 to 4096
[  102.066595][ T5711] loop2: detected capacity change from 0 to 40427
[  102.089297][ T5737] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  102.207183][ T5757] netlink: 24 bytes leftover after parsing attributes in process `syz.1.524'.
[  102.222271][ T5711] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  102.277724][ T5711] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  102.327208][ T5737] ntfs3: loop3: failed to convert "c46c" to iso8859-5
[  102.403188][ T5701] BTRFS info (device loop4): clearing free space tree
[  102.420568][ T5771] loop1: detected capacity change from 0 to 512
[  102.431600][ T5701] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  102.455735][ T5771] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  102.481508][ T5701] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  102.505273][ T5711] F2FS-fs (loop2): Found nat_bits in checkpoint
[  102.547470][ T5701] BTRFS info (device loop4): creating free space tree
[  102.562463][ T5701] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  102.574150][ T5777] netlink: 830 bytes leftover after parsing attributes in process `syz.3.528'.
[  102.574778][ T5701] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  102.585504][ T5771] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  102.649800][ T5777] device bond_slave_0 entered promiscuous mode
[  102.656542][ T5777] device bond_slave_1 entered promiscuous mode
[  102.686866][ T5711] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  102.706131][ T5711] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  102.706748][ T5771] EXT4-fs (loop1): 1 truncate cleaned up
[  102.777682][ T5771] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier=0x0000000000000007,nodiscard,quota,,errors=continue. Quota mode: writeback.
[  102.814991][ T5785] loop3: detected capacity change from 0 to 2048
[  102.858715][ T5771] EXT4-fs error (device loop1): empty_inline_dir:1855: inode #12: block 7: comm syz.1.527: bad entry in directory: rec_len is smaller than minimal - offset=4, inode=33488896, rec_len=0, size=60 fake=0
[  102.882410][ T5785] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  102.941138][ T5785] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  102.976157][ T5789] loop0: detected capacity change from 0 to 512
[  103.009926][ T5771] EXT4-fs warning (device loop1): empty_inline_dir:1862: bad inline directory (dir #12) - inode 33488896, rec_len 0, name_len 5inline size 60
[  103.114631][ T5789] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  103.169822][ T5789] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal
[  103.349470][ T5789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.534'.
[  103.402794][ T5793] loop4: detected capacity change from 0 to 1024
[  103.544400][ T5793] attempt to access beyond end of device
[  103.544400][ T5793] loop4: rw=2049, want=5780, limit=1024
[  103.579398][ T5793] Buffer I/O error on dev loop4, logical block 2889, lost async page write
[  103.605561][ T5803] netlink: 16 bytes leftover after parsing attributes in process `syz.3.538'.
[  103.624279][ T5801] attempt to access beyond end of device
[  103.624279][ T5801] loop4: rw=2049, want=5780, limit=1024
[  103.654593][ T5801] Buffer I/O error on dev loop4, logical block 2889, lost async page write
[  103.761818][ T4243] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  103.860840][ T5813] loop4: detected capacity change from 0 to 1024
[  103.894107][ T5815] loop0: detected capacity change from 0 to 128
[  103.959538][ T5813] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,minixdf,init_itable,,errors=continue. Quota mode: writeback.
[  104.018517][ T4243] usb 2-1: Using ep0 maxpacket: 16
[  104.075733][ T5791] loop2: detected capacity change from 0 to 32768
[  104.139886][ T4243] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  104.147928][ T4243] usb 2-1: config 0 has no interface number 0
[  104.171783][ T4243] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.187756][ T4243] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.197948][ T4243] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  104.229977][ T4243] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.254003][ T5811] loop3: detected capacity change from 0 to 32768
[  104.281844][ T4243] usb 2-1: config 0 descriptor??
[  104.322740][ T5811] XFS (loop3): Mounting V5 Filesystem
[  104.478148][ T5834] netlink: 'syz.2.547': attribute type 4 has an invalid length.
[  104.496493][ T5811] XFS (loop3): Ending clean mount
[  104.515868][ T5811] XFS (loop3): Quotacheck needed: Please wait.
[  104.546334][ T5836] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method
[  104.611013][ T5811] XFS (loop3): Quotacheck: Done.
[  104.629254][ T5841] program syz.4.552 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  104.676313][ T4169] XFS (loop3): Unmounting Filesystem
[  104.980855][ T4243] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0005/input/input8
[  105.062933][ T5855] loop3: detected capacity change from 0 to 256
[  105.082813][ T4243] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0005/input/input9
[  105.099316][ T4243] uclogic 0003:28BD:0071.0005: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1
[  105.186419][ T4213] usb 2-1: USB disconnect, device number 6
[  105.276962][ T5857] loop3: detected capacity change from 0 to 512
[  105.359824][ T5857] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  105.583022][ T5863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.562'.
[  105.618233][ T5863] netlink: 72 bytes leftover after parsing attributes in process `syz.3.562'.
[  105.639723][ T5861] loop2: detected capacity change from 0 to 4096
[  105.726795][ T5861] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  105.950090][   T26] kauditd_printk_skb: 61 callbacks suppressed
[  105.950104][   T26] audit: type=1800 audit(1732319633.774:80): pid=5861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.561" name="file1" dev="loop2" ino=33 res=0 errno=0
[  105.971467][ T5859] loop0: detected capacity change from 0 to 32768
[  106.005940][ T5879] capability: warning: `syz.3.570' uses 32-bit capabilities (legacy support in use)
[  106.090987][ T5880] loop1: detected capacity change from 0 to 512
[  106.166495][ T5859] XFS (loop0): Mounting V5 Filesystem
[  106.228368][ T5880] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback.
[  106.258980][ T5880] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  106.366179][ T5859] XFS (loop0): Ending clean mount
[  106.400244][ T5865] loop4: detected capacity change from 0 to 32768
[  106.468829][ T5865] XFS: ikeep mount option is deprecated.
[  106.489427][ T4164] XFS (loop0): Unmounting Filesystem
[  106.588563][ T5865] XFS (loop4): Mounting V5 Filesystem
[  106.790548][ T5885] loop3: detected capacity change from 0 to 32768
[  106.840353][ T5865] XFS (loop4): Ending clean mount
[  106.895207][ T5885] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.571 (5885)
[  106.914789][ T5865] XFS (loop4): Quotacheck needed: Please wait.
[  106.926139][ T5918] loop2: detected capacity change from 0 to 512
[  106.954067][ T5885] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  107.000186][ T5885] BTRFS info (device loop3): using free space tree
[  107.006726][ T5885] BTRFS info (device loop3): has skinny extents
[  107.030224][ T5865] XFS (loop4): Quotacheck: Done.
[  107.091379][ T4178] XFS (loop4): Unmounting Filesystem
[  107.119168][ T5918] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  107.132170][ T5918] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  107.308936][ T4165] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  107.351332][ T5934] loop1: detected capacity change from 0 to 8192
[  107.353451][ T4165] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  107.432539][ T5934] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  107.437283][ T4165] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  107.465027][ T4165] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  107.480774][ T4165] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  107.493112][ T5934] REISERFS (device loop1): using ordered data mode
[  107.494248][ T5885] BTRFS info (device loop3): enabling ssd optimizations
[  107.500525][ T5934] reiserfs: using flush barriers
[  107.518891][ T5934] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  107.562524][ T4165] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  107.576569][ T5934] REISERFS (device loop1): checking transaction log (loop1)
[  107.609338][ T5956] block nbd0: shutting down sockets
[  107.632732][ T4165] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  107.679534][ T5934] REISERFS (device loop1): Using r5 hash to sort names
[  107.686799][ T5934] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  107.724957][ T4165] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  107.831273][ T4165] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  107.937584][ T4165] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz-executor: Directory hole found for htree leaf block 0
[  108.068953][   T26] audit: type=1326 audit(1732319635.894:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.0.595" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd890a82819 code=0x0
[  108.403271][ T5978] input: syz0 as /devices/virtual/input/input10
[  108.519231][ T5984] syz.3.602[5984] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  108.519342][ T5984] syz.3.602[5984] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  108.557303][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.593001][ T5986] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.600171][ T5986] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.610301][ T5986] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  108.856913][    T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.014407][    T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.113752][    T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.213278][    T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.288247][ T4440] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  109.500051][ T6008] loop1: detected capacity change from 0 to 32768
[  109.544591][ T6008] XFS: attr2 mount option is deprecated.
[  109.578276][ T4440] usb 4-1: Using ep0 maxpacket: 32
[  109.610865][ T4213] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  109.619661][ T6017] chnl_net:caif_netlink_parms(): no params data found
[  109.655853][ T6008] XFS (loop1): Mounting V5 Filesystem
[  109.763123][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.764823][ T4440] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  109.770717][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.789405][ T6017] device bridge_slave_0 entered promiscuous mode
[  109.791193][ T4440] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  109.811174][ T4440] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  109.822528][ T6017] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.825512][ T4440] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  109.833186][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.849995][ T4440] usb 4-1: config 0 interface 0 has no altsetting 0
[  109.857529][ T6017] device bridge_slave_1 entered promiscuous mode
[  109.862894][ T6008] XFS (loop1): Ending clean mount
[  109.888581][ T6008] XFS (loop1): Quotacheck needed: Please wait.
[  109.915974][ T6017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  109.956466][ T6008] XFS (loop1): Quotacheck: Done.
[  109.970653][ T6017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  110.016367][ T4163] XFS (loop1): Unmounting Filesystem
[  110.032862][ T4440] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  110.045979][ T4440] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  110.062865][ T4440] usb 4-1: Product: syz
[  110.067058][ T4440] usb 4-1: Manufacturer: syz
[  110.074644][ T4440] usb 4-1: SerialNumber: syz
[  110.123452][ T6046] netlink: 104 bytes leftover after parsing attributes in process `syz.0.621'.
[  110.130296][ T4440] usb 4-1: config 0 descriptor??
[  110.176211][ T6017] team0: Port device team_slave_0 added
[  110.213717][ T4440] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  110.228227][ T4213] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  110.265797][ T4213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.276551][ T6017] team0: Port device team_slave_1 added
[  110.282233][ T4213] usb 5-1: Product: syz
[  110.282253][ T4213] usb 5-1: Manufacturer: syz
[  110.282267][ T4213] usb 5-1: SerialNumber: syz
[  110.292954][ T4440] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  110.325956][ T4213] usb 5-1: config 0 descriptor??
[  110.462901][   T21] usb 4-1: USB disconnect, device number 4
[  110.479840][    C1] ldusb 4-1:0.0: usb_submit_urb failed (-19)
[  110.491816][   T21] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  110.500621][ T6017] batman_adv: batadv0: Adding interface: batadv_slave_0
[  110.518340][ T4166] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  110.525964][ T6017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.559179][ T6017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  110.620400][ T4440] usb 5-1: USB disconnect, device number 3
[  110.651688][ T6017] batman_adv: batadv0: Adding interface: batadv_slave_1
[  110.655105][ T6006] ldusb: No device or device unplugged -19
[  110.658754][ T6017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  110.658780][ T6017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  110.704823][ T6055] netlink: 'syz.1.620': attribute type 7 has an invalid length.
[  110.758532][ T4166] usb 1-1: Using ep0 maxpacket: 16
[  110.769780][ T6017] device hsr_slave_0 entered promiscuous mode
[  110.784161][ T6017] device hsr_slave_1 entered promiscuous mode
[  110.804204][ T6017] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  110.816824][ T6017] Cannot create hsr debugfs directory
[  110.878574][ T4166] usb 1-1: config 0 has an invalid interface number: 26 but max is 0
[  110.886685][ T4166] usb 1-1: config 0 has no interface number 0
[  111.088536][ T4166] usb 1-1: New USB device found, idVendor=0130, idProduct=0130, bcdDevice=a7.1c
[  111.097601][ T4166] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.138412][ T4166] usb 1-1: Product: syz
[  111.142610][ T4166] usb 1-1: Manufacturer: syz
[  111.147209][ T4166] usb 1-1: SerialNumber: syz
[  111.200445][ T4166] usb 1-1: config 0 descriptor??
[  111.235347][ T6081] netlink: 'syz.1.628': attribute type 12 has an invalid length.
[  111.245105][ T4166] gspca_main: spca508-2.14.0 probing 0130:0130
[  111.254897][ T6081] netlink: 'syz.1.628': attribute type 10 has an invalid length.
[  111.278433][ T4215] Bluetooth: hci2: command 0x0409 tx timeout
[  111.386722][    T9] device hsr_slave_0 left promiscuous mode
[  111.418677][    T9] device hsr_slave_1 left promiscuous mode
[  111.456696][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.458463][ T4166] gspca_spca508: reg_read err -32
[  111.466170][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.488811][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.496257][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.528328][ T4166] gspca_spca508: reg_read err -32
[  111.528682][    T9] device bridge_slave_1 left promiscuous mode
[  111.554510][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.574123][ T6098] loop3: detected capacity change from 0 to 64
[  111.603233][    T9] device bridge_slave_0 left promiscuous mode
[  111.617798][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.651043][ T6098] hfs: unable to read volume bitmap
[  111.656877][ T6098] hfs: can't find a HFS filesystem on dev loop3
[  111.683696][    T9] device veth1_macvtap left promiscuous mode
[  111.690418][    T9] device veth0_macvtap left promiscuous mode
[  111.696480][    T9] device veth1_vlan left promiscuous mode
[  111.703881][    T9] device veth0_vlan left promiscuous mode
[  111.794130][ T4166] gspca_spca508: reg_read err -71
[  111.803012][ T6098] netlink: 'syz.3.635': attribute type 1 has an invalid length.
[  111.818249][ T4166] gspca_spca508: reg_read err -71
[  111.838678][ T4166] gspca_spca508: reg write: error -71
[  111.844130][ T4166] spca508: probe of 1-1:0.26 failed with error -71
[  111.869140][ T4166] usb 1-1: USB disconnect, device number 5
[  112.159488][ T4211] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  112.184513][    T9] team0 (unregistering): Port device team_slave_1 removed
[  112.199265][    T9] team0 (unregistering): Port device team_slave_0 removed
[  112.213930][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  112.227485][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  112.315678][    T9] bond0 (unregistering): Released all slaves
[  112.323877][ T6118] loop0: detected capacity change from 0 to 512
[  112.394099][ T6118] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  112.408652][ T4211] usb 2-1: Using ep0 maxpacket: 16
[  112.416151][ T6118] EXT4-fs (loop0): 1 truncate cleaned up
[  112.422367][ T6118] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,grpjquota=,usrjquota=,block_validity,lazytime,quota,acl,i_version,,errors=continue. Quota mode: writeback.
[  112.457638][ T4213] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  112.466942][ T6017] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  112.510640][ T6017] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  112.543374][ T4211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.546925][ T6017] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  112.554698][ T4211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.571048][ T4211] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  112.580651][ T4211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.592210][ T4211] usb 2-1: config 0 descriptor??
[  112.612670][ T6017] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  112.728410][ T4213] usb 4-1: Using ep0 maxpacket: 32
[  112.786758][ T6017] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.812530][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  112.833636][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  112.867548][ T6017] 8021q: adding VLAN 0 to HW filter on device team0
[  112.874805][ T4213] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  112.890416][ T4213] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  112.912147][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  112.923002][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  112.931151][ T4213] usb 4-1: config 1 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  112.942819][ T4651] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.949947][ T4651] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.958157][ T4213] usb 4-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping
[  113.025787][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  113.052001][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  113.067096][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  113.070473][ T4211] corsair 0003:1B1C:1B02.0006: unknown main item tag 0x0
[  113.107656][ T4651] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.114834][ T4651] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.117611][ T4211] corsair 0003:1B1C:1B02.0006: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0
[  113.138401][ T4213] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  113.147977][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  113.158406][ T4213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.186454][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  113.197130][ T4213] usb 4-1: Product: syz
[  113.207187][ T4213] usb 4-1: Manufacturer: syz
[  113.221325][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  113.232904][ T4213] usb 4-1: SerialNumber: syz
[  113.252577][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  113.262193][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  113.278716][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  113.288512][ T4211] corsair 0003:1B1C:1B02.0006: Read invalid backlight brightness: db.
[  113.295396][ T6017] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  113.325142][ T6017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  113.364644][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  113.373050][   T21] Bluetooth: hci2: command 0x041b tx timeout
[  113.389822][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  113.411113][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  113.426018][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  113.436590][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  113.484652][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  113.541335][ T4211] usb 2-1: USB disconnect, device number 7
[  113.741630][ T4213] usb 4-1: USB disconnect, device number 5
[  113.803401][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  113.856413][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  113.893396][ T6017] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.002509][ T6138] loop0: detected capacity change from 0 to 40427
[  114.075947][ T6138] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  114.098222][ T6138] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  114.135932][ T6138] F2FS-fs (loop0): invalid crc value
[  114.178696][   T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  114.194861][ T6138] F2FS-fs (loop0): Found nat_bits in checkpoint
[  114.222750][ T6167] loop1: detected capacity change from 0 to 2048
[  114.339653][ T6138] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  114.375339][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  114.386769][ T6138] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  114.436556][ T4248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  114.473978][ T6181] netem: change failed
[  114.510672][ T6167] EXT4-fs (loop1): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none.
[  114.543786][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  114.561927][ T4164] attempt to access beyond end of device
[  114.561927][ T4164] loop0: rw=2049, want=45104, limit=40427
[  114.567383][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  114.606880][ T6186] loop3: detected capacity change from 0 to 128
[  114.616472][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  114.624824][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  114.628397][   T21] usb 5-1: config 0 has an invalid interface number: 19 but max is 0
[  114.660159][ T6017] device veth0_vlan entered promiscuous mode
[  114.673999][ T6186] FAT-fs (loop3): bogus logical sector size 256
[  114.703026][   T21] usb 5-1: config 0 has no interface number 0
[  114.734886][ T6186] FAT-fs (loop3): Can't find a valid FAT filesystem
[  114.769469][ T6017] device veth1_vlan entered promiscuous mode
[  114.865926][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  114.922530][   T21] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=ef.dd
[  114.934528][ T1218] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  114.951553][   T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.979506][   T21] usb 5-1: Product: syz
[  114.985451][ T6017] device veth0_macvtap entered promiscuous mode
[  115.004234][   T21] usb 5-1: Manufacturer: syz
[  115.014621][ T6017] device veth1_macvtap entered promiscuous mode
[  115.021357][   T21] usb 5-1: SerialNumber: syz
[  115.048068][   T21] usb 5-1: config 0 descriptor??
[  115.067978][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.101619][   T21] kalmia: probe of 5-1:0.19 failed with error -22
[  115.118436][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.129701][   T21] option 5-1:0.19: GSM modem (1-port) converter detected
[  115.139153][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.179804][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.207121][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.218965][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.233716][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.245009][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.256820][ T6017] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.310960][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  115.327495][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  115.383273][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  115.419025][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  115.448654][   T21] Bluetooth: hci2: command 0x040f tx timeout
[  115.459037][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.489562][ T4440] usb 5-1: USB disconnect, device number 4
[  115.503029][ T4440] option 5-1:0.19: device disconnected
[  115.533136][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.575218][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.628168][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.658140][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.674851][ T6222] loop1: detected capacity change from 0 to 1024
[  115.688187][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.710823][ T6017] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.741995][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  115.763045][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  115.804084][ T6222] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000007,noquota,resuid=0x0000000000000000,norecovery,lazytime,noblock_validity,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback.
[  115.914120][ T6017] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.933979][ T6017] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.993488][ T6017] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.055152][ T6017] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.089695][ T6237] loop0: detected capacity change from 0 to 256
[  116.243174][ T6237] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  116.278029][ T6242] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  116.325941][ T4651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.356526][ T4651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.390897][  T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.402145][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  116.442805][  T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.498701][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  116.590952][ T6253] loop1: detected capacity change from 0 to 16
[  116.644339][ T6256] loop3: detected capacity change from 0 to 2048
[  116.718573][ T6253] erofs: (device loop1): mounted with root inode @ nid 36.
[  116.785047][ T6256] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  116.809327][ T6271] tap0: tun_chr_ioctl cmd 1074025680
[  116.848457][ T6256] ext4 filesystem being mounted at /161/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  116.933798][ T6256] fs-verity: sha512 using implementation "sha512-avx2"
[  117.519460][ T4447] Bluetooth: hci2: command 0x0419 tx timeout
[  117.629048][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.689'.
[  117.657995][ T6274] loop4: detected capacity change from 0 to 32768
[  117.684067][ T6305] netlink: 10 bytes leftover after parsing attributes in process `syz.1.689'.
[  117.712829][ T6302] loop5: detected capacity change from 0 to 2048
[  117.795613][ T6302] EXT4-fs (loop5): bad geometry: first data block 0 is beyond end of filesystem (0)
[  117.814569][ T6274] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.677 (6274)
[  117.828331][ T4447] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  117.866818][ T6274] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  117.875389][ T6312] device bridge_slave_0 left promiscuous mode
[  117.901461][ T6274] BTRFS info (device loop4): using free space tree
[  117.910051][ T6312] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.930274][ T6274] BTRFS info (device loop4): has skinny extents
[  117.974879][ T6312] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  118.077591][ T6312] syz.1.692 (6312) used greatest stack depth: 17912 bytes left
[  118.092832][ T6315] loop3: detected capacity change from 0 to 4096
[  118.193255][ T6315] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  118.249219][ T4447] usb 1-1: config 0 interface 0 has no altsetting 0
[  118.260331][ T4447] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  118.278547][ T4447] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.307990][ T4447] usb 1-1: config 0 descriptor??
[  118.333363][ T6315] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  118.367239][ T6274] BTRFS info (device loop4): enabling ssd optimizations
[  118.412113][   T26] audit: type=1800 audit(1732319646.234:82): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.677" name="file1" dev="loop4" ino=260 res=0 errno=0
[  118.599306][ T6355] tipc: Started in network mode
[  118.604196][ T6355] tipc: Node identity :, cluster identity 4711
[  118.663592][ T6355] tipc: Enabling of bearer <udp:m0> rejected, failed to enable media
[  118.913934][ T6364] loop1: detected capacity change from 0 to 4096
[  119.022131][ T6364] ntfs: volume version 3.1.
[  119.056335][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.703'.
[  119.258398][ T4447] video4linux radio48: keene_cmd_main failed (-71)
[  119.265589][ T4447] radio-keene 1-1:0.0: V4L2 device registered as radio48
[  119.313698][ T4447] usb 1-1: USB disconnect, device number 6
[  119.518450][ T1106] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  119.940275][ T1106] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  119.958369][ T1106] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  120.005636][ T1106] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  120.036838][ T1106] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  120.176911][ T6420] loop5: detected capacity change from 0 to 2048
[  120.220524][ T1106] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  120.243398][ T1106] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  120.262454][ T1106] usb 4-1: Product: syz
[  120.276923][ T1106] usb 4-1: Manufacturer: syz
[  120.290824][ T6420] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  120.339206][ T1106] cdc_wdm 4-1:1.0: skipping garbage
[  120.344438][ T1106] cdc_wdm 4-1:1.0: skipping garbage
[  120.376692][ T1106] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  120.395327][ T1106] cdc_wdm 4-1:1.0: Unknown control protocol
[  120.453890][ T6394] loop4: detected capacity change from 0 to 40427
[  120.502816][ T6394] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  120.553595][ T6394] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  120.599733][ T4449] usb 4-1: USB disconnect, device number 6
[  120.605567][ T6399] loop1: detected capacity change from 0 to 40427
[  120.608944][ T6394] F2FS-fs (loop4): invalid crc value
[  120.668336][ T1323] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  120.681603][ T6399] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  120.691971][ T6394] F2FS-fs (loop4): Found nat_bits in checkpoint
[  120.693525][ T6399] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  120.721504][ T6399] F2FS-fs (loop1): invalid crc value
[  120.775659][ T6399] F2FS-fs (loop1): Found nat_bits in checkpoint
[  120.798998][ T6394] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  120.806977][ T6394] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  120.847435][   T26] audit: type=1804 audit(1732319648.664:83): pid=6394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.709" name="/newroot/125/bus/file0" dev="loop4" ino=10 res=1 errno=0
[  120.896957][ T6399] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  120.918261][ T6399] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  121.048373][ T6446] loop5: detected capacity change from 0 to 256
[  121.059459][ T1323] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  121.069069][ T1323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.077351][    T9] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  121.079597][ T1323] usb 1-1: config 0 descriptor??
[  121.098003][    T9] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  121.142852][ T1323] cp210x 1-1:0.0: cp210x converter detected
[  121.588487][ T1323] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[  121.666213][ T1323] usb 1-1: cp210x converter now attached to ttyUSB0
[  121.833572][ T6467] loop1: detected capacity change from 0 to 512
[  121.866902][ T4211] usb 1-1: USB disconnect, device number 7
[  121.895914][ T4211] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  121.994672][ T4211] cp210x 1-1:0.0: device disconnected
[  121.995375][ T6467] EXT4-fs (loop1): 1 orphan inode deleted
[  122.007036][ T6467] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,resgid=0x0000000000000000,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback.
[  122.031554][ T6467] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.491967][ T6451] loop5: detected capacity change from 0 to 32768
[  122.785836][ T6473] loop3: detected capacity change from 0 to 32768
[  122.888290][ T6473] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.734 (6473)
[  122.890628][ T6490] loop0: detected capacity change from 0 to 64
[  122.967069][ T6473] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  123.023149][ T6473] BTRFS info (device loop3): using free space tree
[  123.039798][ T6473] BTRFS info (device loop3): has skinny extents
[  123.259330][ T6473] BTRFS info (device loop3): enabling ssd optimizations
[  123.320736][ T6511] syz.0.743 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  123.623318][ T6480] loop1: detected capacity change from 0 to 32768
[  123.797314][ T6482] loop4: detected capacity change from 0 to 32768
[  123.849880][ T6480] JBD2: Ignoring recovery information on journal
[  123.923006][ T6482] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.736 (6482)
[  123.979784][ T6480] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  124.023530][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'.
[  124.075787][ T6482] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  124.138335][ T6482] BTRFS info (device loop4): setting nodatasum
[  124.144546][ T6482] BTRFS info (device loop4): enabling auto defrag
[  124.208192][ T6482] BTRFS info (device loop4): disabling tree log
[  124.247971][ T6482] BTRFS info (device loop4): using free space tree
[  124.279620][ T6482] BTRFS info (device loop4): has skinny extents
[  124.309151][ T4163] ocfs2: Unmounting device (7,1) on (node local)
[  124.320851][ T6513] loop5: detected capacity change from 0 to 32768
[  124.380466][ T6543] loop3: detected capacity change from 0 to 512
[  124.415312][ T6549] loop0: detected capacity change from 0 to 64
[  124.422850][ T6513] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.742 (6513)
[  124.438265][ T6543] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  124.483028][ T6543] EXT4-fs (loop3): 1 orphan inode deleted
[  124.496309][ T6513] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  124.508461][ T6543] EXT4-fs (loop3): 1 truncate cleaned up
[  124.514132][ T6543] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  124.525991][ T6513] BTRFS info (device loop5): enabling auto defrag
[  124.533353][ T6513] BTRFS info (device loop5): doing ref verification
[  124.540278][ T6513] BTRFS info (device loop5): max_inline at 0
[  124.546548][ T6513] BTRFS info (device loop5): force clearing of disk cache
[  124.554041][ T6513] BTRFS info (device loop5): turning on sync discard
[  124.561159][ T6513] BTRFS info (device loop5): disabling free space tree
[  124.568031][ T6513] BTRFS info (device loop5): has skinny extents
[  124.731881][ T6570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.752'.
[  124.758469][ T6570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.752'.
[  124.815741][ T6482] BTRFS info (device loop4): enabling ssd optimizations
[  124.924757][ T6586] loop3: detected capacity change from 0 to 128
[  125.082592][ T6586] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  125.116263][ T6513] BTRFS info (device loop5): enabling ssd optimizations
[  125.137251][ T6586] ext4 filesystem being mounted at /180/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  125.149502][ T6513] BTRFS info (device loop5): clearing free space tree
[  125.168948][    C1] vkms_vblank_simulate: vblank timer overrun
[  125.200927][ T6513] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  125.211851][ T6513] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  125.312418][ T6513] BTRFS error (device loop5): unrecognized mount option '�����������	Z*��� m�.Dc�8�'�@��C9G�9���?�9�S�{�1��J���լ��5æ�Ԍ�����qq���Y�糔����'
[  125.417471][ T6512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  125.903968][ T6623] loop4: detected capacity change from 0 to 2048
[  125.968862][ T6623]  loop4: p1 < > p3 < > p4 < >
[  125.989015][ T6623] loop4: partition table partially beyond EOD, truncated
[  126.081605][ T6623] loop4: p3 start 4284289 is beyond EOD, truncated
[  126.152544][ T6628] loop3: detected capacity change from 0 to 164
[  126.366080][ T6607] loop0: detected capacity change from 0 to 32768
[  126.495161][ T5105] udevd[5105]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  126.577097][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  126.622840][ T6607] XFS (loop0): Mounting V5 Filesystem
[  126.643003][ T6639] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  126.674974][ T5105] udevd[5105]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  126.693941][ T6619] loop1: detected capacity change from 0 to 32768
[  126.694093][ T4182] udevd[4182]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  126.742307][ T6639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  126.808479][    C1] Illegal XDP return value 16128, expect packet loss!
[  126.809461][ T6607] XFS (loop0): Ending clean mount
[  126.862564][ T6639] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  126.917046][ T6639] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  126.948604][ T6607] XFS (loop0): Quotacheck needed: Please wait.
[  126.953881][ T6645] loop4: detected capacity change from 0 to 32768
[  126.967145][ T6645] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.777 (6645)
[  127.029760][ T6645] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  127.076277][ T6645] BTRFS info (device loop4): setting nodatacow, compression disabled
[  127.113016][ T6607] XFS (loop0): Quotacheck: Done.
[  127.149005][ T6645] BTRFS info (device loop4): enabling auto defrag
[  127.155650][ T6645] BTRFS info (device loop4): max_inline at 0
[  127.190511][ T6654] netlink: 87 bytes leftover after parsing attributes in process `syz.5.780'.
[  127.200323][ T6645] BTRFS info (device loop4): using free space tree
[  127.238671][ T6645] BTRFS info (device loop4): has skinny extents
[  127.249648][ T4164] XFS (loop0): Unmounting Filesystem
[  127.528317][   T13] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  127.614769][ T6689] xt_l2tp: invalid flags combination: 8
[  127.762363][   T26] audit: type=1800 audit(1732319655.584:84): pid=6645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.777" name="bus" dev="loop4" ino=263 res=0 errno=0
[  127.782943][   T13] usb 4-1: Using ep0 maxpacket: 32
[  127.908640][   T13] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  127.929942][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.987364][   T13] usb 4-1: config 0 descriptor??
[  128.070203][   T13] gspca_main: sq930x-2.14.0 probing 041e:403c
[  128.987018][ T6753] loop1: detected capacity change from 0 to 4096
[  129.009329][   T13] gspca_sq930x: reg_w 0105 bf00 failed -71
[  129.081026][   T13] sq930x: probe of 4-1:0.0 failed with error -71
[  129.109364][   T13] usb 4-1: USB disconnect, device number 7
[  129.290719][ T6771] loop0: detected capacity change from 0 to 512
[  129.316327][ T6777] program syz.1.815 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  129.406156][ T6780] loop4: detected capacity change from 0 to 1024
[  129.421932][ T6771] EXT4-fs (loop0): 1 orphan inode deleted
[  129.454518][ T6771] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,quota,delalloc,usrquota,,errors=continue. Quota mode: writeback.
[  129.561873][   T26] audit: type=1804 audit(1732319657.384:85): pid=6780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.818" name=2F6E6577726F6F742F3133382F66696C65302FE91F7189591E9233614B dev="loop4" ino=25 res=1 errno=0
[  129.605117][ T6780] Process accounting resumed
[  129.617576][ T6767] loop5: detected capacity change from 0 to 32768
[  129.627028][ T6771] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.667011][ T6780] attempt to access beyond end of device
[  129.667011][ T6780] loop4: rw=0, want=201326594, limit=1024
[  129.687071][ T6789] loop1: detected capacity change from 0 to 2048
[  129.694843][ T6780] Buffer I/O error on dev loop4, logical block 100663296, async page read
[  129.713332][ T6780] attempt to access beyond end of device
[  129.713332][ T6780] loop4: rw=0, want=201326594, limit=1024
[  129.725322][ T6780] Buffer I/O error on dev loop4, logical block 100663296, async page read
[  129.756574][ T6789] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  129.849787][   T26] audit: type=1800 audit(1732319657.674:86): pid=6789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.821" name="file1" dev="loop1" ino=1335 res=0 errno=0
[  129.915676][ T6799] netlink: 'syz.4.825': attribute type 9 has an invalid length.
[  130.040570][ T6807] netlink: 52 bytes leftover after parsing attributes in process `syz.4.831'.
[  130.073605][ T6803] loop1: detected capacity change from 0 to 2048
[  130.208683][ T6814] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  130.446616][ T6811] loop3: detected capacity change from 0 to 8192
[  130.502990][ T6826] loop0: detected capacity change from 0 to 64
[  130.576980][ T6811] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  130.577056][ T6811] REISERFS (device loop3): using ordered data mode
[  130.577068][ T6811] reiserfs: using flush barriers
[  130.578909][ T6811] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  130.579225][ T6811] REISERFS (device loop3): checking transaction log (loop3)
[  130.783360][ T6811] REISERFS (device loop3): Using tea hash to sort names
[  130.783638][ T6811] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  130.783694][ T6811] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  131.139181][ T6855] loop0: detected capacity change from 0 to 2048
[  131.275001][ T6855] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,stripe=0x0000000000000020,,errors=continue. Quota mode: none.
[  131.308457][ T6855] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.546262][ T6881] netlink: 'syz.1.852': attribute type 29 has an invalid length.
[  131.575846][ T6881] netlink: 'syz.1.852': attribute type 29 has an invalid length.
[  131.745837][ T6891] loop0: detected capacity change from 0 to 2048
[  131.803587][ T6891] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  131.903533][ T6891] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 40 with incorrect tag 0
[  132.284626][ T6933] loop0: detected capacity change from 0 to 256
[  132.307033][ T6932] device syz_tun entered promiscuous mode
[  132.325242][ T6936] loop5: detected capacity change from 0 to 164
[  132.332128][ T6932] device macvtap1 entered promiscuous mode
[  132.350382][ T6932] device syz_tun left promiscuous mode
[  132.560262][ T6946] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input11
[  132.793211][ T6954] Falling back ldisc for ttyS3.
[  132.799835][ T1420] ieee802154 phy0 wpan0: encryption failed: -22
[  132.806173][ T1420] ieee802154 phy1 wpan1: encryption failed: -22
[  132.812203][ T6962] loop0: detected capacity change from 0 to 512
[  132.904967][ T6962] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  132.967000][ T6962] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.142727][ T6962] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.881: bg 0: block 18: invalid block bitmap
[  133.184425][   T26] audit: type=1326 audit(1732319661.004:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.5.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21d9ac819 code=0x7ffc0000
[  133.231683][ T6993] loop3: detected capacity change from 0 to 256
[  133.242630][ T6991] loop1: detected capacity change from 0 to 1024
[  133.249210][   T26] audit: type=1326 audit(1732319661.004:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.5.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa21d9ac819 code=0x7ffc0000
[  133.271283][    C1] vkms_vblank_simulate: vblank timer overrun
[  133.286481][   T26] audit: type=1326 audit(1732319661.104:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.5.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21d9ac819 code=0x7ffc0000
[  133.309467][ T6962] Quota error (device loop0): write_blk: dquota write failed
[  133.321036][ T6962] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  133.335812][ T6962] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.881: Failed to acquire dquot type 1
[  133.347569][   T26] audit: type=1326 audit(1732319661.104:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.5.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21d9ac819 code=0x7ffc0000
[  133.369660][    C1] vkms_vblank_simulate: vblank timer overrun
[  133.390778][   T26] audit: type=1326 audit(1732319661.164:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.5.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7fa21d9ac819 code=0x7ffc0000
[  133.506808][   T26] audit: type=1326 audit(1732319661.164:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.5.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21d9ac819 code=0x7ffc0000
[  133.593983][   T26] audit: type=1326 audit(1732319661.184:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6987 comm="syz.5.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21d9ac819 code=0x7ffc0000
[  133.983828][ T7034] netlink: 'syz.4.901': attribute type 1 has an invalid length.
[  134.058608][ T7037] loop3: detected capacity change from 0 to 2048
[  134.171332][ T7037] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  134.306352][ T6236] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  134.337360][ T6236] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28
[  134.393871][ T6236] EXT4-fs (loop3): This should not happen!! Data will be lost
[  134.393871][ T6236] 
[  134.421476][ T7063] netlink: 20 bytes leftover after parsing attributes in process `syz.0.909'.
[  134.430510][ T6236] EXT4-fs (loop3): Total free blocks count 0
[  134.438513][ T6236] EXT4-fs (loop3): Free/Dirty block details
[  134.444521][ T6236] EXT4-fs (loop3): free_blocks=2415919504
[  134.453932][ T7066] loop5: detected capacity change from 0 to 64
[  134.462354][ T7063] device netdevsim0 entered promiscuous mode
[  134.467601][ T7064] loop4: detected capacity change from 0 to 2048
[  134.469148][ T6236] EXT4-fs (loop3): dirty_blocks=32
[  134.491777][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.909'.
[  134.506565][ T6236] EXT4-fs (loop3): Block reservation details
[  134.527479][ T6236] EXT4-fs (loop3): i_reserved_data_blocks=2
[  134.579605][ T7064] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  134.627158][ T7064] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  134.668857][ T7079] loop0: detected capacity change from 0 to 256
[  134.755092][ T7079] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xcc9b7de9, utbl_chksum : 0xe619d30d)
[  134.845095][ T7088] loop3: detected capacity change from 0 to 2048
[  134.985396][ T7096] netlink: 'syz.0.917': attribute type 3 has an invalid length.
[  135.001348][ T7088] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  135.702023][ T7134] loop3: detected capacity change from 0 to 128
[  135.781921][ T7138] loop4: detected capacity change from 0 to 256
[  135.860997][ T7134] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  135.895940][ T7138] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 198)
[  135.944943][ T7148] loop0: detected capacity change from 0 to 2048
[  135.946140][ T7134] ext4 filesystem being mounted at /209/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  135.964350][ T7138] FAT-fs (loop4): Filesystem has been set read-only
[  136.006824][ T7148] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  136.031402][ T7134] fscrypt (loop3, inode 12): Direct key flag not allowed with different contents and filenames modes
[  136.161938][ T7160] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  136.598613][ T4448] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  136.643389][ T7186] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  136.663637][ T7187] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg2, syncid = 2, id = 0
[  136.674560][ T7186] bridge0: port 3(syz_tun) entered disabled state
[  136.681169][ T7186] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.688752][ T7186] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.821927][ T7189] loop1: detected capacity change from 0 to 4096
[  136.871581][ T7197] loop5: detected capacity change from 0 to 256
[  136.892061][ T4448] usb 5-1: Using ep0 maxpacket: 16
[  137.016706][ T7197] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d)
[  137.034124][ T4448] usb 5-1: config 0 has an invalid interface number: 251 but max is 0
[  137.063480][ T4448] usb 5-1: config 0 has no interface number 0
[  137.070179][ T4448] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  137.100667][ T4448] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  137.298633][ T4448] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  137.307753][ T4448] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.325340][ T7217] loop5: detected capacity change from 0 to 8
[  137.330519][ T4448] usb 5-1: Product: syz
[  137.340640][ T4448] usb 5-1: Manufacturer: syz
[  137.345266][ T4448] usb 5-1: SerialNumber: syz
[  137.350322][ T7216] loop1: detected capacity change from 0 to 512
[  137.374789][ T4448] usb 5-1: config 0 descriptor??
[  137.383953][ T7213] loop3: detected capacity change from 0 to 4096
[  137.408588][ T7170] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  137.428014][ T7170] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  137.468551][ T7213] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  137.479921][ T7216] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  137.527447][ T7217] SQUASHFS error: zlib decompression failed, data probably corrupt
[  137.536262][ T7217] SQUASHFS error: Failed to read block 0x4de: -5
[  137.543169][ T7217] SQUASHFS error: Failed to read block 0x4e2: -5
[  137.567127][ T7217] SQUASHFS error: Failed to read block 0x9ca: -5
[  137.570577][ T7216] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.960: invalid indirect mapped block 4294967295 (level 0)
[  137.576168][ T7217] SQUASHFS error: Failed to read block 0x2cf2: -5
[  137.600996][ T7216] EXT4-fs (loop1): Remounting filesystem read-only
[  137.605177][ T7217] SQUASHFS error: Failed to read block 0x35f2: -5
[  137.607693][ T7216] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.960: invalid indirect mapped block 4294967295 (level 1)
[  137.649771][ T7216] EXT4-fs (loop1): Remounting filesystem read-only
[  137.657124][ T7216] EXT4-fs (loop1): 1 orphan inode deleted
[  137.658963][   T26] audit: type=1800 audit(1732319665.474:94): pid=7217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.961" name="file1" dev="loop5" ino=5 res=0 errno=0
[  137.662943][ T7216] EXT4-fs (loop1): 1 truncate cleaned up
[  137.691746][ T7170] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  137.699172][ T7170] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  137.701934][ T7213] ntfs3: loop3: ino=19, "file1" The size of extended attributes must not exceed 64KiB
[  137.731175][ T7216] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,debug_want_extra_isize=0x000000000000006e,block_validity,block_validity,quota,. Quota mode: writeback.
[  137.774865][ T7204] loop0: detected capacity change from 0 to 32768
[  137.810471][ T7216] EXT4-fs warning (device loop1): __ext4fs_dirhash:283: invalid/unsupported hash tree version 15
[  138.042785][ T7230] loop1: detected capacity change from 0 to 2048
[  138.058564][ T7204] XFS (loop0): Mounting V5 Filesystem
[  138.124848][ T7204] XFS (loop0): Ending clean mount
[  138.189055][ T7230] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  138.374058][ T4448] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  138.406804][ T4448] asix 5-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  138.430337][ T4448] asix: probe of 5-1:0.251 failed with error -71
[  138.448823][ T4448] usb 5-1: USB disconnect, device number 5
[  138.572185][ T7259] loop1: detected capacity change from 0 to 512
[  138.637268][ T7259] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  138.680773][ T7259] EXT4-fs (loop1): 1 truncate cleaned up
[  138.680834][ T7263] program syz.3.977 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  138.686439][ T7259] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,journal_ioprio=0x0000000000000001,stripe=0x0000000000000000,,errors=continue. Quota mode: none.
[  138.722518][ T7258] loop5: detected capacity change from 0 to 8192
[  138.833196][ T7258] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  138.920948][ T7258] REISERFS (device loop5): using ordered data mode
[  138.927515][ T7258] reiserfs: using flush barriers
[  139.023455][ T7258] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  139.104483][ T7258] REISERFS (device loop5): checking transaction log (loop5)
[  139.140136][ T7258] REISERFS (device loop5): Using r5 hash to sort names
[  139.147315][ T7258] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  139.219585][ T7258] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  139.295024][ T7258] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  139.326914][ T7282] netlink: 16 bytes leftover after parsing attributes in process `syz.4.985'.
[  139.351804][ T7258] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  139.432985][ T7258] overlayfs: upper fs needs to support d_type.
[  139.451207][ T7204] XFS (loop0): User initiated shutdown received.
[  139.468405][ T7204] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x10c/0x150 (fs/xfs/xfs_fsops.c:481).  Shutting down filesystem.
[  139.512103][ T7258] overlayfs: upper fs does not support tmpfile.
[  139.532758][ T7258] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  139.567612][ T7204] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  139.640711][ T7258] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  139.672151][ T7258] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  139.705025][ T4164] XFS (loop0): Unmounting Filesystem
[  139.732412][ T7258] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  139.809299][ T7258] REISERFS warning (device loop5): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  139.871974][ T7258] overlayfs: failed to set xattr on upper
[  139.890338][ T7258] overlayfs: ...falling back to index=off,metacopy=off.
[  139.906739][ T7258] overlayfs: failed to resolve './file0': -2
[  139.968021][ T7269] loop1: detected capacity change from 0 to 32768
[  140.334735][ T7301] loop5: detected capacity change from 0 to 8192
[  140.407235][ T7301] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  140.423263][ T7301] REISERFS (device loop5): using ordered data mode
[  140.433058][ T7301] reiserfs: using flush barriers
[  140.453700][ T7301] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  140.475546][ T7301] REISERFS (device loop5): checking transaction log (loop5)
[  140.656485][ T7301] REISERFS (device loop5): Using tea hash to sort names
[  140.664125][ T7301] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  140.674756][ T7304] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  140.689913][ T7301] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  140.697347][ T7304] XFS (loop3): SB validate failed with error -5.
[  140.867158][ T7301] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "��0xffffffffffffffff�	Z*��� m�.Dc�8�'�@��C9G�9���?�9�S�{�1��J���լ��5æ�Ԍ�����qq���Y�糔����"
[  141.339770][ T7325] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead
[  141.380670][ T7325] xt_CT: You must specify a L4 protocol and not use inversions on it
[  141.530521][ T7269] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  141.641316][ T4651] (kworker/u4:7,4651,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[  141.736955][ T7269] 
[  141.739314][ T7269] ======================================================
[  141.746413][ T7269] WARNING: possible circular locking dependency detected
[  141.753436][ T7269] 5.15.173-syzkaller #0 Not tainted
[  141.758751][ T7269] ------------------------------------------------------
[  141.765770][ T7269] syz.1.979/7269 is trying to acquire lock:
[  141.771662][ T7269] ffff88805f9f86f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x398/0x930
[  141.780984][ T7269] 
[  141.780984][ T7269] but task is already holding lock:
[  141.788384][ T7269] ffff88807651e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12b9/0x1570
[  141.797706][ T7269] 
[  141.797706][ T7269] which lock already depends on the new lock.
[  141.797706][ T7269] 
[  141.808103][ T7269] 
[  141.808103][ T7269] the existing dependency chain (in reverse order) is:
[  141.817116][ T7269] 
[  141.817116][ T7269] -> #4 (jbd2_handle){++++}-{0:0}:
[  141.824424][ T7269]        lock_acquire+0x1db/0x4f0
[  141.829454][ T7269]        start_this_handle+0x12e1/0x1570
[  141.835092][ T7269]        jbd2__journal_start+0x2d1/0x5c0
[  141.840732][ T7269]        jbd2_journal_start+0x25/0x30
[  141.846113][ T7269]        ocfs2_start_trans+0x3c2/0x6f0
[  141.851582][ T7269]        ocfs2_shutdown_local_alloc+0x214/0xa90
[  141.857834][ T7269]        ocfs2_dismount_volume+0x1db/0x8b0
[  141.863688][ T7269]        generic_shutdown_super+0x130/0x310
[  141.869588][ T7269]        kill_block_super+0x7a/0xe0
[  141.874789][ T7269]        deactivate_locked_super+0xa0/0x110
[  141.880698][ T7269]        cleanup_mnt+0x44e/0x500
[  141.885646][ T7269]        task_work_run+0x129/0x1a0
[  141.890770][ T7269]        exit_to_user_mode_loop+0x106/0x130
[  141.896662][ T7269]        exit_to_user_mode_prepare+0xb1/0x140
[  141.902743][ T7269]        syscall_exit_to_user_mode+0x5d/0x240
[  141.908819][ T7269]        do_syscall_64+0x47/0xb0
[  141.913763][ T7269]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  141.920190][ T7269] 
[  141.920190][ T7269] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  141.928711][ T7269]        lock_acquire+0x1db/0x4f0
[  141.933739][ T7269]        down_read+0x45/0x2e0
[  141.938416][ T7269]        ocfs2_start_trans+0x3b7/0x6f0
[  141.943895][ T7269]        ocfs2_shutdown_local_alloc+0x214/0xa90
[  141.950150][ T7269]        ocfs2_dismount_volume+0x1db/0x8b0
[  141.955969][ T7269]        generic_shutdown_super+0x130/0x310
[  141.961868][ T7269]        kill_block_super+0x7a/0xe0
[  141.967068][ T7269]        deactivate_locked_super+0xa0/0x110
[  141.972964][ T7269]        cleanup_mnt+0x44e/0x500
[  141.977904][ T7269]        task_work_run+0x129/0x1a0
[  141.983024][ T7269]        exit_to_user_mode_loop+0x106/0x130
[  141.988918][ T7269]        exit_to_user_mode_prepare+0xb1/0x140
[  141.994982][ T7269]        syscall_exit_to_user_mode+0x5d/0x240
[  142.001056][ T7269]        do_syscall_64+0x47/0xb0
[  142.005998][ T7269]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  142.012421][ T7269] 
[  142.012421][ T7269] -> #2 (sb_internal#5){.+.+}-{0:0}:
[  142.019901][ T7269]        lock_acquire+0x1db/0x4f0
[  142.024934][ T7269]        ocfs2_start_trans+0x2b2/0x6f0
[  142.030400][ T7269]        ocfs2_write_begin_nolock+0x2242/0x4d20
[  142.036645][ T7269]        ocfs2_write_begin+0x1fd/0x390
[  142.042099][ T7269]        generic_perform_write+0x2bf/0x5b0
[  142.047996][ T7269]        __generic_file_write_iter+0x243/0x4f0
[  142.054161][ T7269]        ocfs2_file_write_iter+0x17d5/0x1fa0
[  142.060149][ T7269]        vfs_write+0xacd/0xe50
[  142.064928][ T7269]        ksys_write+0x1a2/0x2c0
[  142.069794][ T7269]        do_syscall_64+0x3b/0xb0
[  142.074747][ T7269]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  142.081168][ T7269] 
[  142.081168][ T7269] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}:
[  142.089955][ T7269]        lock_acquire+0x1db/0x4f0
[  142.094989][ T7269]        down_write+0x38/0x60
[  142.099675][ T7269]        ocfs2_try_remove_refcount_tree+0xb2/0x330
[  142.106826][ T7269]        ocfs2_truncate_file+0xe3c/0x14f0
[  142.112730][ T7269]        ocfs2_setattr+0x16dd/0x1ce0
[  142.118026][ T7269]        notify_change+0xc6d/0xf50
[  142.123141][ T7269]        do_truncate+0x21c/0x300
[  142.128079][ T7269]        vfs_truncate+0x2dd/0x3a0
[  142.133097][ T7269]        do_sys_truncate+0xda/0x190
[  142.138303][ T7269]        do_syscall_64+0x3b/0xb0
[  142.143247][ T7269]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  142.149761][ T7269] 
[  142.149761][ T7269] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}:
[  142.158023][ T7269]        validate_chain+0x1649/0x5930
[  142.163401][ T7269]        __lock_acquire+0x1295/0x1ff0
[  142.168778][ T7269]        lock_acquire+0x1db/0x4f0
[  142.173813][ T7269]        down_read+0x45/0x2e0
[  142.178490][ T7269]        ocfs2_init_acl+0x398/0x930
[  142.183690][ T7269]        ocfs2_mknod+0x1e8f/0x2cd0
[  142.188804][ T7269]        ocfs2_create+0x194/0x430
[  142.193837][ T7269]        path_openat+0x130a/0x2f20
[  142.198947][ T7269]        do_filp_open+0x21c/0x460
[  142.203983][ T7269]        do_sys_openat2+0x13b/0x4f0
[  142.209180][ T7269]        __x64_sys_openat+0x243/0x290
[  142.214548][ T7269]        do_syscall_64+0x3b/0xb0
[  142.219491][ T7269]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  142.225910][ T7269] 
[  142.225910][ T7269] other info that might help us debug this:
[  142.225910][ T7269] 
[  142.236134][ T7269] Chain exists of:
[  142.236134][ T7269]   &oi->ip_xattr_sem --> &journal->j_trans_barrier --> jbd2_handle
[  142.236134][ T7269] 
[  142.249993][ T7269]  Possible unsafe locking scenario:
[  142.249993][ T7269] 
[  142.257447][ T7269]        CPU0                    CPU1
[  142.262823][ T7269]        ----                    ----
[  142.268194][ T7269]   lock(jbd2_handle);
[  142.272264][ T7269]                                lock(&journal->j_trans_barrier);
[  142.280081][ T7269]                                lock(jbd2_handle);
[  142.286674][ T7269]   lock(&oi->ip_xattr_sem);
[  142.291270][ T7269] 
[  142.291270][ T7269]  *** DEADLOCK ***
[  142.291270][ T7269] 
[  142.299417][ T7269] 8 locks held by syz.1.979/7269:
[  142.304441][ T7269]  #0: ffff888060a06460 (sb_writers#24){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80
[  142.313815][ T7269]  #1: ffff88805f9f89c8 (&type->i_mutex_dir_key#22){+.+.}-{3:3}, at: path_openat+0x824/0x2f20
[  142.324108][ T7269]  #2: ffff888074f26d88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x18e/0x4c70
[  142.326990][ T7332] loop0: detected capacity change from 0 to 32768
[  142.337781][ T7269]  #3: ffff88805f9f9808 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x18e/0x4c70
[  142.357897][ T7269]  #4: ffff888074f23488 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x12e/0x27a0
[  142.371838][ T7269]  #5: ffff888060a06650 (sb_internal#5){.+.+}-{0:0}, at: ocfs2_mknod+0x15bb/0x2cd0
[  142.381173][ T7269]  #6: ffff8880202c08e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3b7/0x6f0
[  142.391898][ T7269]  #7: ffff88807651e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12b9/0x1570
[  142.401573][ T7269] 
[  142.401573][ T7269] stack backtrace:
[  142.407466][ T7269] CPU: 0 PID: 7269 Comm: syz.1.979 Not tainted 5.15.173-syzkaller #0
[  142.415533][ T7269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  142.425601][ T7269] Call Trace:
[  142.428890][ T7269]  <TASK>
[  142.431820][ T7269]  dump_stack_lvl+0x1e3/0x2d0
[  142.436501][ T7269]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  142.442140][ T7269]  ? print_circular_bug+0x12b/0x1a0
[  142.447459][ T7269]  check_noncircular+0x2f8/0x3b0
[  142.452423][ T7269]  ? add_chain_block+0x850/0x850
[  142.457381][ T7269]  ? lockdep_lock+0x11f/0x2a0
[  142.462092][ T7269]  ? reacquire_held_locks+0x660/0x660
[  142.467473][ T7269]  validate_chain+0x1649/0x5930
[  142.472325][ T7269]  ? lockdep_init_map_type+0x9d/0x8d0
[  142.477701][ T7269]  ? mark_lock+0x98/0x340
[  142.482029][ T7269]  ? reacquire_held_locks+0x660/0x660
[  142.487406][ T7269]  ? __lock_acquire+0x1295/0x1ff0
[  142.492440][ T7269]  ? mark_lock+0x98/0x340
[  142.496790][ T7269]  __lock_acquire+0x1295/0x1ff0
[  142.501646][ T7269]  lock_acquire+0x1db/0x4f0
[  142.506154][ T7269]  ? ocfs2_init_acl+0x398/0x930
[  142.511019][ T7269]  ? read_lock_is_recursive+0x10/0x10
[  142.516394][ T7269]  ? __might_sleep+0xc0/0xc0
[  142.520996][ T7269]  ? trace_ocfs2_claim_new_inode_at_loc+0x1e0/0x1e0
[  142.527597][ T7269]  ? set_current_blocked+0x40/0x40
[  142.532713][ T7269]  down_read+0x45/0x2e0
[  142.536872][ T7269]  ? ocfs2_init_acl+0x398/0x930
[  142.541734][ T7269]  ocfs2_init_acl+0x398/0x930
[  142.546416][ T7269]  ? ocfs2_mknod_locked+0x21e/0x3a0
[  142.551626][ T7269]  ? ocfs2_acl_chmod+0x360/0x360
[  142.556568][ T7269]  ? ocfs2_start_trans+0x4dc/0x6f0
[  142.561683][ T7269]  ? __ocfs2_abort+0x230/0x230
[  142.566451][ T7269]  ? ocfs2_init_security_get+0x130/0x190
[  142.572084][ T7269]  ocfs2_mknod+0x1e8f/0x2cd0
[  142.576691][ T7269]  ? ocfs2_mkdir+0x430/0x430
[  142.581281][ T7269]  ? mark_lock+0x98/0x340
[  142.585618][ T7269]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  142.591597][ T7269]  ? print_irqtrace_events+0x210/0x210
[  142.597077][ T7269]  ? read_lock_is_recursive+0x10/0x10
[  142.602451][ T7269]  ? ocfs2_inode_unlock+0xa3/0x150
[  142.607571][ T7269]  ? __lock_acquire+0x1ff0/0x1ff0
[  142.612598][ T7269]  ? do_raw_spin_lock+0x14a/0x370
[  142.617624][ T7269]  ? do_raw_spin_unlock+0x137/0x8b0
[  142.622837][ T7269]  ? do_raw_spin_unlock+0x137/0x8b0
[  142.628038][ T7269]  ? __d_add+0x4d7/0x7f0
[  142.632284][ T7269]  ? _raw_spin_unlock+0x24/0x40
[  142.637150][ T7269]  ? rcu_is_watching+0x11/0xa0
[  142.641934][ T7269]  ? ocfs2_lookup+0x4ed/0x9f0
[  142.646792][ T7269]  ocfs2_create+0x194/0x430
[  142.651303][ T7269]  ? ocfs2_lookup+0x9f0/0x9f0
[  142.655989][ T7269]  ? inode_permission+0xf7/0x450
[  142.660936][ T7269]  ? ocfs2_getattr+0x380/0x380
[  142.665703][ T7269]  ? bpf_lsm_inode_create+0x5/0x10
[  142.670818][ T7269]  ? security_inode_create+0xb4/0x100
[  142.676199][ T7269]  ? ocfs2_lookup+0x9f0/0x9f0
[  142.680885][ T7269]  path_openat+0x130a/0x2f20
[  142.685490][ T7269]  ? do_filp_open+0x460/0x460
[  142.690177][ T7269]  do_filp_open+0x21c/0x460
[  142.694683][ T7269]  ? vfs_tmpfile+0x2e0/0x2e0
[  142.699280][ T7269]  ? _raw_spin_unlock+0x24/0x40
[  142.704133][ T7269]  ? alloc_fd+0x598/0x630
[  142.708467][ T7269]  do_sys_openat2+0x13b/0x4f0
[  142.713233][ T7269]  ? do_sys_open+0x220/0x220
[  142.717833][ T7269]  __x64_sys_openat+0x243/0x290
[  142.722683][ T7269]  ? __ia32_sys_open+0x270/0x270
[  142.727621][ T7269]  ? syscall_enter_from_user_mode+0x2e/0x240
[  142.733603][ T7269]  ? lockdep_hardirqs_on+0x94/0x130
[  142.738806][ T7269]  ? syscall_enter_from_user_mode+0x2e/0x240
[  142.744790][ T7269]  do_syscall_64+0x3b/0xb0
[  142.749206][ T7269]  ? clear_bhb_loop+0x15/0x70
[  142.753893][ T7269]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  142.759795][ T7269] RIP: 0033:0x7fcfee75a819
[  142.764217][ T7269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  142.783918][ T7269] RSP: 002b:00007fcfec5d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  142.792343][ T7269] RAX: ffffffffffffffda RBX: 00007fcfee911fa0 RCX: 00007fcfee75a819
[  142.800330][ T7269] RDX: 00000000000c4042 RSI: 0000000020000100 RDI: ffffffffffffff9c
[  142.808316][ T7269] RBP: 00007fcfee7cd75e R08: 0000000000000000 R09: 0000000000000000
[  142.816300][ T7269] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000000
[  142.824454][ T7269] R13: 0000000000000000 R14: 00007fcfee911fa0 R15: 00007ffe61af29e8
[  142.832442][ T7269]  </TASK>
[  142.856707][ T7335] (syz.1.979,7335,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[  142.871995][ T7335] (syz.1.979,7335,0):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -2
[  142.884653][ T7341] loop5: detected capacity change from 0 to 256
[  142.888974][ T7339] loop4: detected capacity change from 0 to 512
[  142.891136][ T7335] (syz.1.979,7335,0):__ocfs2_prepare_orphan_dir:2166 ERROR: status = -2
[  142.907150][ T7335] (syz.1.979,7335,0):ocfs2_prepare_orphan_dir:2208 ERROR: status = -2
[  142.916915][ T7335] (syz.1.979,7335,0):ocfs2_prepare_orphan_dir:2224 ERROR: status = -2
[  142.926790][ T7335] (syz.1.979,7335,0):ocfs2_unlink:962 ERROR: status = -2
[  142.934110][   T26] audit: type=1800 audit(1732319670.764:95): pid=7269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.979" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  142.954615][ T7341] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xa7648d78, utbl_chksum : 0xe619d30d)
[  142.975392][ T4163] ocfs2: Unmounting device (7,1) on (node local)
[  143.701290][ T7339] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback.
[  143.721923][ T7339] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  144.109826][ T7332] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.990 (7332)
[  144.170848][ T7332] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  144.186013][ T7332] BTRFS info (device loop0): using free space tree
[  144.193888][ T7332] BTRFS info (device loop0): has skinny extents
[  144.312264][ T7332] BTRFS info (device loop0): enabling ssd optimizations