last executing test programs:

2m31.270481985s ago: executing program 2 (id=4333):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt(r0, 0x10001, 0x1000, 0x0, 0x0)

2m31.119445722s ago: executing program 2 (id=4336):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="24000000000000002900000032000000ff85"], 0x28}, 0x24000080)

2m31.081556882s ago: executing program 2 (id=4337):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000040)=0x2, 0x4)

2m30.975805595s ago: executing program 2 (id=4341):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x800, &(0x7f0000001bc0)={[{@keep_last_dots}, {@sys_tz}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@allow_utime={'allow_utime', 0x3d, 0x9}}, {@errors_remount}, {@gid}, {@namecase}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}]}, 0x1, 0x1529, &(0x7f0000000680)="$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")
mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0)

2m30.600216285s ago: executing program 2 (id=4348):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000001840)={'sit0\x00', &(0x7f0000001800)={@mcast1, @local, 0x8, 0x812}})

2m30.224852031s ago: executing program 2 (id=4354):
r0 = openat$random(0xffffff9c, &(0x7f0000001280), 0x101040, 0x0)
poll(&(0x7f0000001840)=[{r0, 0x4}], 0x1, 0x9)

2m29.929691627s ago: executing program 32 (id=4354):
r0 = openat$random(0xffffff9c, &(0x7f0000001280), 0x101040, 0x0)
poll(&(0x7f0000001840)=[{r0, 0x4}], 0x1, 0x9)

2.175311424s ago: executing program 5 (id=6989):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa}]}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}]}}}]}, 0x50}}, 0x0)

1.953612442s ago: executing program 5 (id=6993):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.764391616s ago: executing program 5 (id=6996):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
bind$qrtr(r0, &(0x7f00000000c0)={0x2a, 0x1, 0xfffffffe}, 0xc)

1.685451985s ago: executing program 5 (id=6998):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000001c0)='./file2\x00', 0x800c08, &(0x7f0000000540)=ANY=[@ANYBLOB="2c756d61736b3d300004000000000000000000", @ANYRES8=0x0, @ANYRES16=0x0, @ANYRESDEC, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRES8=0x0, @ANYBLOB="c49ecfdd8711048bea9eb55574810b5cbc454ccd5a63c7941ba393a86e5b7a8fdcf7b75e9bd7459f7e129fadabeef1e9b084a7568c9ce90014069121b0700a4f948941c59d1e8e3f80ffa601a20f979dd6e1fe150ba283f14999be8b6fe530f67dbac2443da65608409abd01602980fb5227c272180171dfa09978bf40bd650d5c4a54e6cecfcfd2e41e9ec85c6a274e668e7443cdd2c3cba6972ccffb41487a8202816ac3ba65bb5cb3d1323194c102f39aae52e46500849660e484f39210872d958d69f61e1311c51a34b64f81cb8a5cc30bf568185b0bb1f0d438777c833a9b362a10cace728b508eb7642244"], 0x21, 0x627f, &(0x7f0000001600)="$eJzs3UuPHFfZB/Cnr3PxG8fKIsprITRJzCWE+BqMIUCSBSzYsEDeIluTSWThALINciILTzQbFnwIEBJLhFiy4gNkwZYdHwBLNhIoqxSqmXPGNeVp94zt6eqZ8/tJ4+qnTlX3Kf+7prunqvoEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA//MGPz/Ui4sqv0owTEf8Xg4h+xFJdr0TE0sqJ5jovxWZzvBgRo4WIev3Nf56PeDMiPj0ecf/BndV69vk99uP7f/7HH35y7Ed//9PozH//cmvw1qTlbt/+7X/+evfJtxcAAABKVFVV1Usf809GxDB9tgcAjr78+l8leb567ur1OeuPWq1Wqw9h3VTt7m6ziIj15jr1ewaH4wHgkFmPz7ruAh2Sf9GGEXGs604Ac63XdQc4EPcf3FntpXx7zdeDla32fC7IjvzXe9vXd0yaTtM+x2RWz6+NGMQLE/qzNKM+zJOcf7+d/5Wt9nFa7qDzn5VJ+Y+3Ln0qTs5/0M6/5ejk3981/1Ll/If7yn8gfwAAAAAAmGP57/8nOj7+u/D0m7Injzv+uzKjPgAAAAAAAADAs7bf8f+GrfH/thn/DwAAAOZW/Vm99rvjD+dN+i62ev7lXsRzreWBwqSLZZa77gcAAAAAAAAAAAAAlGS4dQ7v5V7EKCKeW16uqqr+aWrX+/W06x92pW8/lKzrX/IAALDl0+Ota/l7EYsRcTl9199oeXm5qhaXlqvlamkhv58dLyxWS43PtXlaz1sY7+EN8XBc1Xe22Fivadrn5Wnt7furH2tcDfbQsdnoMHAAiIitV6P7XpGOmKp6Prp+l8PhYP8/euz/7EXXz1MAAADg4FVVVfXS13mfTMf8+113CgCYifz63z4uoFar1Wq1+ujVTdXu7jaLiFhvrlO/ZzAcPwAcMuvxWdddoEPyL9owIl7quhPAXOt13QEOxP0Hd1Z7Kd9e8/Ugje+ezwXZkf96b3O9vP5u02na55jM6vm1EYN4YUJ/XpxRH+ZJzr/fzv/KVvs4LXfQ+c/KpPzr7TzRQX+6lvMftPNvOTr593fNv1Q5/+G+8h/IHwAAAAAA5lj++/+JuTr+O37SzZnqccd/Vw7sUQEAAAAAAADgYN1/cGc1X/eaj/9/YZflXP95NOX8e/IvUs6/38r/q63lBo3b9959mP+/H9xZ/eOtf/1/nu4x/4d310vPrF56RvRSU2+Ypk+zdY/aGA3G9SONev3BMJ3zU43ej2txPdbi7I5l++n/42H7uUc2YrTZXg222s/vaB9ut+f1L+xoH6Uznaql3H46VuPncT3e22yv2xambP/ilPZqSnvOf2D/L1LOf9j4qfNfTu291rR275P+I/t9c7rb47xz7Yu/OXvwmzPVRgy2t62p3r5XOujP5v/JsXH88ubajdO3r966deNcpMmOuecjTZ6xnP8o/Wz//n91qz3/om7ur/c+Ge87/3mxEcOJ+b/auF1v72sz7lsXcv7j9JPzfy+1777/H+b8J+//r3fQHwAAAAAAAAAAAAAAAHicqqo2LxF9JyIuput/uro2EwCYrfz6XyV5/qzqwYwfT60+5HVvzvoz0/rz6lnd3zDmYXvU6i7qpmp3bzeLiPhbc536PcOvd7szAGCefR4R/+y6E3RG/gXL3/dXT0913Rlgpm5+9PFPr16/vnbjZtc9AQAAAAAAAACeVB7/c6Ux/vOpqqrutpbbMf7ru7HytON/DvON7QFGJwxUPdj/Nj3ORn886DeGG385Jo3/Pdq+9bjxv4dTHm80pX08pX3h0VlLzWJxyvq7XujRkPN/uTHe+amIONkafr2E8V/bY96XIOf/SuP5XOf/ldZyzfyr3x/m/Ps78j9z68NfnLn50cdvXPvw6gdrH6z97MK5c2cvXLx46dKlM+9fu752duvfDnt8sHL+eexr54GWJeefM5d/WXL+X0q1/MuS8/9yquVflpx/fr8n/7Lk/PNnH/mXJef/WqrlX5ac/9dSLf+y5PxfT7X8y5Lz/3qq5V+WnP8bqZZ/WXL+p1Mt/7Lk/M+keo/5Lx10v5iNnH8+wmX/L0vOP5/ZIP+y5PzPp1r+Zcn5X0i1/MuS838z1fIvS87/G6mWf1ly/hdTLf+y5Py/mWr5lyXnfynV8i9Lzv9bqZZ/WXL+3061/MuS838r1fIvS87/O6mWf1ly/t9NtfzLkvP/XqrlX5ac/9upln9ZHn7/vxtuzPjGyNNvfm90/ZsJAAAAAAAAAAAAAGibxenEXW8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9iBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuNkaOu74D+Nz57nx2IDEQUic1cHZMCImTOz/ED7QpJjw2PAdCoQ/Yru9sDvyEzy6BRrJRoETCqKiibXjRFhAqeYOIKlTRClBeoFZVK0H7gr5BVLS8iKqAAmqltgKu2pn//3+7e3u7e77NeXbm85Hin293dmd2dnbuvud8dwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJptf/XcJ0ayLGv8l/+xJcue0/j7pqkt+WWvuNZbCAAAAKzVz/M/n7khXXC4jxs1LfP3L/72VxcXFxezd2/44/HPLC6mK6aybHxjluXXRU/84D0jzcsEj2STI6NNX4/2WP2GHteP9bh+vMf1Ez2u39jj+ske1y/bActsKn4fk9/ZzvyvW4pdmt2YjefX7exwq0dGNo6Oxt/l5Eby2yyOn8jms1PZXDbTsnyx7Ei+/Ne3N9b1hiyua7RpXdsaR8hPHj4et2Ek7OOdLetaus/oR6/Kpn76k4eP/+WFp2/uNHvuhpb7K7bz9h2N7fxYuKTY1pFsY9oncTtHm7ZzW4fnZEPLdo7kt2v8vX07n+lzOzcsbea6an/OJ7PR/O/fyffTWPOv9dJ+2hYu+59bsyy7vLTZ7cssW1c2mm1uuWR06fmZLI7Ixn00DqXnZ2OrOk6393GcNubsztbjtP01EZ//7eF2YytsQ/PT9KOPTjQ97z9bvJrjNGo86pVeK+3H4KBfK2U5BuNx8Z38QT/a8RjcGR7/w7etfAx2PHY6HIPpcTcdgzt6HYOjExvybR790ua49h0tx+DuluU35GsayedTt3U/BqcvnD43vfDhj9w1f/rYybmTc2f27t49s3f//oMHD06fmD81N1P8edX7u+w2Z6PpNbAj7Lv4GnhZ27LNh+ri5yeWnX+v9nU42eV1uKVt2UG/DsfaH9zI+rwgl47peEnx2nhnY6dPXhnNVniN5c/PHWt/HabH3fQ6HGt6HXb8nrJsm0fy2/R6HTaWOXdHfz+zjDX912kbVv5esLZjcEvTMdj+80j7MTjon0fKcgxOhuPie3es/L1gW9jeR3et9ueRDcuOwfRww7mncUn6eX/yYD46HZe3NK64biK7uDB3/u6Hjl24cH53Fsa6eEHTsdJ+vG5uekzZsuN1dNXH6+H5Fz96S4fLt4R9NXlX44/JFZ+rxjL77u7+XOXf3Trvz5ZL92RhDNh6789O380b+3Miyz77rY8+8I2HP/vqFfdnI29+bHrtP4unXNp0/h1f4fwbc/8vivWlu3pkw/hY8frdkPbOeMv5uPWpGsvPXSP5up+Z7u98PB7+W+/z8Y1dzsdb25Yd9Pl4vP3BxfPxSK/fdqxN+/M5GY6TUzPdz8eNZbbuWe0xOdb1fHxrmCNh/788JIWUi5qOnZWO27SusbHx8LjG4hpaj9O9LcuPh2zWWNfje67uOL391uK+NqRHt2S9jtOptmUHfZym332tdJyO9Prt29Vpfz4nw3Fx497ux2ljmSf3rf3cuSn+tencOdHrGBzfMNHY5vF0EObn+2xxUzwG786OZ2ezU9lsfu1EfjyN5OvadU9/x+BE+G+9z5VbuxyDt7ctO+hjMH0fW+nYGxlb/uAHoP35nAzHxWP3dD8GG8u85sBgf3a9PVySlmn62bX992sr/c7rlrbd9GwdK2NhO791oPvvZhvLnDq42pzZfT/dGS65rsN+an/9rvSams3WZz9tDdv59MGV99OXt2f5Mp851OfxdDjLsksfvC//fW/495W/uvjdr7b8u0unf9O59MH7fvzcE3+3mu0HYPj9ohibi+91Tf8y1c+//wMAAABDIeb+0TAT+R8AAAAqI+b++H+FJ/I/AAAAVEbM/WNhJjXJ/1tf8/T8Ly5lqZm/GMTr0264v1gudlxnwtdTi0sal9/3xbn//ttL/a17NMuyn93/+x2X33p/3K7CVNjOJ17bevkyX72rr3UfffBSWm9zf/1z4f7j4+n3MOhUwZ3JsuzrN3wqX8/Ue67k88n7j+bzgcuPPtJY5plDxdfx9k+9oFj+z0L59/CJYy23fyrshx+GOfPGzvsj3u4rV16+7cC7ltYXbzey4/r8YT/23uJ+4/vkfPqRYvm4n1fa/m988vGvNJZ/6KWdt//SaOftfzzc7xfD/N8XFcs3PweNr+PtPh62P64v3u7uL3yz4/Y/8Yli+XOvK5Y7GmZc/+3h652ve3q+eX89NHKs5XFlry+Wi+uf+e4f5tfH+4v33779k0eutOyP9uPjyX8p7me6bfl4eVxP9Ddt62/cT/PxGdf/+B8cbdnPvdb/xANPvahxv+3rv7NtuXMfvCNf/9L9tb5j059//FMd1xe35/CXz7U8nsNvD6/jsP7H3huOx3D9/z1R3F/7uyscfXvr+Scu/7ktl1oeT/SGnxbrf+KVJ/O5cXLT5uue89zrL7+kse+y7Dsbi/vrtf6Tf3G2Zfs/f1OxP+L1saPfvv6VxPWf/9CuM2cXLs7Ppr368A35e+e8qdieuL03hHNr+9dHzl5439z5qZmpmSybqu5b6F21L4T542Jc7r704rIz6B0Phufzlj/9+ubb/vmT8fJ/fWdx+ZU3Ft+3XhaW+3S4fEt4/la3/uUe235T/voeeTJs4eLy9wtei207//NgXwuGx9/+c0E83s+98H35fmhcl3/fiK/rNW7/92eL+/la2K+L4Z2Zd9y0tL7m5eN7I1x5R/F6X/P+C6e5+Lx+KTzfb/5hcf9xu+Lj/X74OeabW1vPd/H4+Nql0fb7z9/F43I4n2SXi+vjUnF/X3nmpo6bF9+HJLt8c/71H6X7uXlVD3MlCx9emD41f+biQ9MX5hYuTC98+CNHTp+9eObCkfy9PI+8v9ftl85Pm/Pz0+zc/n1ZfrY6W4xn2bXe/nMPHp89MHPb7NyJYxdPXHjw3Nz5k8cXFo7PzS7cduzEibkP9br9/Oy9u/cc2ntgz66T87P3Hjx0aO+hXfNnzjY2o9ioHvbPfGDXmfNH8pss3Lvv0O577tk3s+v02dm5ew/MzOy62Ov2+femXY1b/96u83Onjl2YPz23a2H+I3P37j60f/+enu8GePrciYWp6fMXz0xfXJg7P108lqkL+cWN7329bk81Lfxb8fNsu5Hijfiyt965P70/a8MXP7riXRWLtL2B6NPhvWj+4XnnDvbzdcz942EmNcn/AAAAUAcx90+Emcj/AAAAUBkx928MM5H/AQAAoDJi7p8MM6lJ/q9c/3/rpb7Wr/+v/9+8v/T/a9b/f0fZ+v+N88Vc6nXq/6/NWvv3+v+B/r/+v/6//r/+PwNQtv5/zP2bsqyW+R8AAADqIOb+zWEm8j8AAABURsz914WZyP8AAABQGTH3PyfMpCb5X/9f/1//X/9f/7/z+te3/+/z/wdF/787/f8e9P+ns3r1/y8Pcvv1//vs/0/1uieqpGz9/5j7nxtmUpP8DwAAAHUQc//1YSbyPwAAAFRGzP03hJnI/wAAAFAZMfdvCTOpSf7X/9f/1//X/9f/77x+/f/hpP/fnf5/D/r/Pv9f/9/n/zNQZev/x9z/vDCTmuR/AAAAqJ7lv0yIuf/5YSbyPwAAAJTP2NXdLOb+F4SZLMv/V7kCAAAA4JqLuf/GrK0IXpN//y9X/3/pCdD/L77W/9f/1/8fhv7/hkz/vzz0/7vT/+9B/39t/fnGiVH/X/9f/58mZev/57k/m8xeGGZSk/wPAAAAdRBz/01hJvI/AAAAVEbM/b8UZiL/AwAAQGXE3L81zKQm+b9c/f+m7dL/z+n/D77//+/79P/1/33+f5Xp/3en/9+D/r/P/9f/1/9nMOIPSiXr/8fcf3OYSU3yPwAAANRBzP23hJnI/wAAAFAZMff/cpiJ/A8AAACVEXP/tjCTmuR//f+S9/9jc1T/3+f/6//r/+v/90X/vzv9/x70//X/9f/1/xmohZL1/2Puf1GYSU3yPwAAANRBzP0vDjOR/wEAAKAyYu5/SZiJ/A8AAACVEXP/VJhJTfK//n/J+/9FD37C5//r/+v/6//r//dH/787/f8e9P/1//X/9f8ZqLL1/2Pu3x5mUpP8DwAAAHUQc/+OMBP5HwAAACoj5v5bw0zkfwAAAKiMmPt3hpnUJP/r/w9F/z/T/9f/1//X/9f/74/+f3f6/z3o/+v/6//r/zNQZev/x9z/0jCTmuR/AAAAqIOY+28LM5H/AQAAoDJi7n9ZmIn8DwAAAJURc//tYSY1yf/6//r/+v/6//r/ndev/z+c9P+70//vQf9f/1//X/+fgSpb/z/m/peHmdQk/wMAAEAdxNx/R5iJ/A8AAACVEXP/nWEm8j8AAABURsz9u8JMapL/9f/1//X/9f/1/zuvX/9/OOn/d6f/34P+v/6//r/+PwNVtv5/zP13hZnUJP8DAABAHcTcf3eYifwPAAAAlRFz/3SYifwPAAAAlRFz/0yYSU3yv/6//r/+fyn7//lNStn/f8nS/er/F/T/y0X/v7s++//T+v/6//r/16r/P67/T6WUrf8fc//uMJOa5H8AAACog5j794SZyP8AAABQGTH37w0zkf8BAACgMmLu3xdmUpP8r/+v/6//X8r+f66U/f8m+v8F/f9y0f/vbvCf/x8fov6//r/+v8//1/9nubL1/2PuvyfMpCb5HwAAAOog5v79YSbyPwAAAFRGzP0HwkzkfwAAAKiMmPsPhpnUJP/r/+v/6//r/+v/d16//v9wKmf/f7Tv9Q9f/9/n/w9X//9U12uvdX9+ra719uv/6/+zXNn6/zH3HwozqUn+BwAAgDqIuf8VYSbyPwAAAFRGzP2/EmYi/wMAAEBlxNz/q2EmNcn/+v9l7/+PZvr/+v/6//r/+v/9K2f/v3/6//r/Pv9/eLdf/1//n+XK1v+Puf/eMJOa5H8AAACog5j7fy3MRP4HAACAyoi5/5VhJvI/AAAAVEbM/YfDTGqS/yvW/5/sb83D1P/3+f/XsP//qvb+vf6//r/+f/np/3en/9+D/r/+v/6//j8DVbb+f8z9rwozqUn+BwAAgDqIuf++MBP5HwAAACoj5v5Xh5nI/wAAAFAZMfe/JsykJvm/Yv3/Cn7+v/6/z//X/9f/1/9fDf3/7vT/e9D/1//X/9f/Z6DK1v+Puf+1YSY1yf8AAABQBzH3vy7MaPyabREAAAAwaDH3vz7MxL//AwAAQGXE3P+GMJOa5H/9f/1//X/9f/3/zuvX/x9O+v/d6f/3oP+v/6//r//PQJWt/x9z/6+HmdQk/wMAAEAdxNx/f5iJ/A8AAACVEXP/G8NM5H8AAACojJj73xRmUpP8r/+v/6//r/+v/995/fr/w0n/v7sh6////Ppwuf5/Qf+/3Nu/2v7/WNvXz0r//wcr9f8XN7bfXv+fZ0PZ+v8x9785zKQm+R8AAADqIOb+t4SZyP8AAABQGTH3vzXMRP4HAACAyoi5/21hJjXJ//r/je1Yai/r/+v/5xesS///bf+l/6//n+n/D5z+f3dD1v/3+f9t9P/Lvf0+/1//n+XK1v+Puf/tYSY1yf8AAABQBzH3PxBmIv8DAABAZcTc/44wE/kfAAAAKiPm/neGmdQk/+v/+/x//X+f/6//33n9q+3/dzoPNNP/Xx/6/93p//eg/6//X7b+/3/o/zPcytb/j7n/wTCTmuR/AAAAqIOY+98VZiL/AwAAQGXE3P8bYSbyPwAAAFRGzP3vDjOpSf5fuf//gdYFn6X+/yb9/z77/1P6//r/+v9tj6ds/f9e9P/Xh/5/d/r/Pej/6/+Xrf/v8/8ZcmXr/8fc/54wk/7z/2TfSwIAAADXRMz9vxlmUpN//wcAAIA6iLn/t8JM5H8AAACojJj7fzvMpCb53+f/D0v/3+f/Z/r/w9//H9X/1/9/9q1f/z+eefT/9f/1/yP9f/1//X/ala3/H3P/74SZ1CT/AwAAQB3E3P/eMBP5HwAAAIZCp/8nu13M/UfCTOR/AAAAqIyY+4+GmdQk/+v/16j//9f/WFyp/z8c/f8/2fFP3/v2W47urlL/3+f/6/+vg3X9/P/Gi9/n/+v/6/8n+v/6//r/tCtb/z/m/mNhJjXJ/wAAAFAHMff/bpiJ/A8AAACVEXP/8TAT+R8AAAAqI+b+2TCTmuR//f8a9f99/v9w9f+H+PP/4/7Q/281sP5/POnq/3e0rv3/dy31xPX/V9v/n+h4qf6//v8wb7/+v/4/y5Wt/x9z/1yYSU3yPwAAANRByP2jJ4q5dIX8DwAAAJURc//JMBP5HwAAACoj5v73hZnUJP/r/+v/6//r//v8/87rL23/3+f/d6X/3115+v+d6f/r/w/z9uv/6/+zXNn6/zH3z4eZ1CT/AwAAQB3E3P/+MBP5HwAAACoj5v4PhJnI/wAAAFAZMfefCjOpSf7X/9f/1//X/9f/77x+/f/hpP/fnf5/D/r/+v9Xs/3huNH/1/9nubL1/2PuPx1mUpP8DwD/z96dNFlWl3kcvwlFV2bQ0fSuF73pdfdLYNG97n4B3RG96U1HqAtQcVakcB5xwnnAecYBFHFCxRmcUJxFxHlARRQHxCjDrOd56mbdk/dmFjczz/n/P58FT5GS3FtlBfCrrG8cAIAe5O6/KG6x/wEAAKAZufsvjlvsfwAAAGhG7v4Hxy2d7H/9v/6/2f7/3/X/u72+/l//3zL9/5CL61v6/xX0//p/z//X/7NWY+v/c/c/JG7pZP8DAABAD3L3PzRusf8BAACgGbn7L4lb7H8AAABoRu7+h8Utnez/M/r/jVmf/X9mvPr/lvp/z//f9fX1//r/lh1u/3/53/7JN4H+/zT9/wr6f/2//l//z1qNrf/P3f/wuKWT/Q8AAAA9yN3/iLjF/gcAAIBm5O5/ZNxi/wMAAEAzcvc/Km7pZP97/r/n/+v/9f/6/+HX1/9Pk+f/L9dT/3/JredfdPd1/3z9fl7/4Pv/u3b2/0H/vx5H/f71//p/Fo2t/8/d/+i4pZP9DwAAAD3I3f+YuMX+BwAAgGbk7n9s3GL/AwAAQDNy9z8ubulk/+v/9f/6f/1/fPzkmX/d1Pr/K+Pj+v++6f+X66n/P5vX9/x//b/+X//Peo2t/8/df2nc0sn+BwAAgB7k7n983GL/AwAAQDNy918Wt9j/AAAA0Izc/Sfilk72v/7/4Pv/v+j/9f9xR97/e/6//r8J+v/l9P8r6P/1//p//T9rNbb+P3f/5XFLJ/sfAAAAepC7/wlxi/0PAAAAzcjd/8S4xf4HAACAZuTuf1Lc0sn+1/97/r/+X/+v/x9+ff3/NOn/l9P/r9BX/3/8zA+soZ8/T/+v/9f/M2+f/f+9S/6xvZb+P3f/k+OWTvY/AAAA9CB3/1PiFvsfAAAAmpG7/6lxi/0PAAAAzcjd/7S4pZP9r//X/+v/9f9n3f8v/tTbpv8ftr7+f6v+nvr/Rfr/5UbT/28cG/yw/t/z/6f8/vX/+n8Wje35/7n7nx63dLL/AQAAoAe5+58RtyzZ//v+xXwAAADgSOXuf2bc4uv/AAAAMHlZneXuf1bc0sn+1//r//X/+n/P/x9+/WX9//Vz78/z/8dF/7/caPr/Xej/9f9Tfv/6f/0/i8bW/+fuf3bc0sn+BwAAgB7k7r8ibrH/AQAAoBm5+58Tt9j/AAAA0Izc/c+NWzrZ/8P9/+n/Xf+/N/r/ne9f/z/882Nd/X/+HfX/S/v//2j3+f/6/2X0/8vp/1fQ/++/n5/7Lur/z6b/v7S+NfL+f2vV5+v/GTK2/j93//Pilk72PwAAAPQgd//z4xb7HwAAAJqRu/8FcYv9DwAAAM3I3X9l3NLJ/vf8f/1/9vObE+j/z9X/e/7/SJ7/Pzv0/v+Y/n+P9P/L6f9X0P97/n8bz//PD3n+P0dubP1/7v4Xxi2d7H8AAADoQe7+F8Ut9j8AAABMw/zvHTjzN5SG3P0vjlvsfwAAAGhG7v6XxC2d7H/9v/7f8//1//r/4dcfV//v+f97pf9fTv+/gv7/IPr5Y431/1ft9vlj6P8vO7jn/+v/OSs7+v8bTn/8qPr/3P0vjVs62f8AAADQg9z9L4tb7H8AAABoRu7+l8ct9j8AAAA0I3f/K+KWTvb/gff/W7u/tv5f/6//1//r/0/97NH/r4/+fzn9/wr6f8//b+P5//p/RmNH/z/nqPr/3P2vjFs62f8AAADQg9z9r4pb7H8AAABoRu7+q+IW+x8AAACakbv/1XFLJ/vf8//1//p//b/+f/j1Pf9/mvT/y+n/V9D/z/fzD5zp//X/+n/up7H1/7n7XxO3dLL/AQAAoAe5+18bt9j/AAAA0Izc/a+LW+x/AAAAaEbu/tfHLZ3sf/3/wfb/+XH9v/5/pv/X/+v/D0W3/f/G0L+JFu3S/9/8gBP/tfMj+n/9v+f/6//1/6zBKPr/k6f/6zJ3/xvilk72PwAAAPQgd/8b4xb7HwAAAJqRu/9NcYv9DwAAAM3I3f/muGWf+/8f1/quDo/+3/P/9f/6f/3/8Ovr/6ep2/5/jzz/fwX9v/5f/6//Z61G0f/P/Xnu/rfELb7+DwAAAM3I3f/WuMX+BwAAgGbk7n9b3GL/AwAAQDNy9789bulk/+v/9f/6f/2//n/49fX/0zTF/n/uvz567f+38hv6/7Pq/+/8V/3/KN6//l//z6Kx9f+5+6+OWzrZ/wAAANCD3P3viFvsfwAAAGhG7v53xi32PwAAADTj3uis3rX9Z/3tf/2//l//r//X/w+/vv5/mqbY/8/rtP8vh9L/X7PkDQz1/yePj73/9/z/kbx//b/+n0Vj6/9z9787bulk/wMAAEAPcvdfE7fY/wAAANCM3P3Xxi32PwAAADQjd/974pZO9r/+X/+v/9f/6/+HX3+g/z82/770/+Ok/19O/7/CNJ//r/8fyfvX/+v/WTS2/j93/3vjlk72PwAAAPQgd/91cYv9DwAAAM3I3f++uMX+BwAAgGbk7r8+bulk/+v/9f/6f/2//n/49T3/f5oOrv+f6f/1//r/FfbVzx9fy1s+uvc/QP+v/2fR2Pr/3P3vj1s62f8AAADQg9z9H4hb9rL/ty44qLcFAAAArFHu/g/GLb7+DwAAAM3I3f+huKWT/a//n83OmYuX9f/6/+0P6P/1/+vu/y/Q/x8Wz/9fTv+/gv7f8//1//p/1mps/X/u/g/HLZ3sfwAAAOhB7v4b4hb7HwAAAJpxz/YfN2cfiVvsfwAAAGhG7v6Pxi2d7H/9v+f/7+z/ZzP9v/5f/3/KITz/f3Om/187/f9y+v8V9P9t9v/nzBrq/7d2/Xz9P2M0tv4/d//H4pZO9j8AAAD0IHf/jXGL/Q8AAADNyN3/8bjF/gcAAIBm5O7/RNzSyf7X/+v/Pf9f/6//H379Q+j/60dV/78+B9X//73+f5v+X/+/zGj7f8//1/9zZMbW/+fu/2Tc0sn+BwAAgB7k7v9U3GL/AwAAQDNy9386brH/AQAAoBm5+z8Tt3Sy//X/+n/9v/5f/z/8+vr/afL8/+X0/yvo//X/+n/9P2s1tv4/d/9n45ZO9j8AAAD0IHf/TXGL/Q8AAADNyN1/c9xi/wMAAEAzcvd/Lm7pZP/r//X/+v9p9v+b+n/9v/5/0Fj6/wsv/M9b9P/6f/2//l//r//v3dj6/9z9n49bOtn/AAAA0IPc/V+IW+x/AAAAaEbu/i/GLfY/AAAANCN3/5filk72/2L/f97sVKF6ylD/H42a/n+O/n/n+9f/D//88Px//b/+/+Cd2f8f3+fne/5/0P/r//X/B9v//8vi5+v/adHY+v/c/bfELZ3sfwAAAOhB7v4vxy32PwAAADQjd/9X4hb7HwAAAJqRu//WuKWT/e/5//p//f9h9v8b+n/9v/7/gI3l+f/6/7N7//p//f+U338zz/8/V//P+hx8/78V39pb/5+7/6txSyf7HwAAAHqQu/9rcYv9DwAAAM3I3f/1uMX+BwAAgGbk7v9G3NLJ/tf/6//1/57/r/8ffn39/zTp/5fT/6/QT/+/OfTBo+7n76+jfv/N9P+e/88aje35/7n7vxm3dLL/AQAAoAe5+78Vt+zY//9zyO8KAAAAWKfc/d+OW3z9HwAAAJqRu/87cUsn+1//r/9vv///v0n1/1tzn9dY/39C/6//Pwz6//w3+jD9/wqj6f+H/1/0/P9xv3/9v/6fRWPr/3P33xa3dLL/AQAAoAe5+78bt9j/AAAA0Izc/bfHLfY/AAAANCN3//filk72v/6/r/5/Y9Zj/+/5/yPp/z3/X/9/KPT/y+n/VxhN/3/gz/8fdNT9/BG8//vW+f71//p/Fo2t/8/df8fGsS73PwAAAEzVf//bg27b6197x/YfN2ffj1vsfwAAAGhG7v4fxC32PwAAADQjd/8P45ZO9r/+v6/+v8/n/+v/9f/6/57o/5fT/6+g/++t/1/r+9f/6/9ZNLb+P3f/j+KWueF3bN/fSwAAAGBMcvf/OG7p5Ov/AAAA0IPc/T+JWxb2/8k9/q52AAAAYGxy9/80bunk6/8T7v+Hs4zW+v/ZAfX/8df12v/feOHOHy/9v/5/6PX1/9Ok/1/ufvb/Jzf0//r/JYb7+dv/Qf+v/9f/92ts/X/u/p/FLZ3sfwAAAGjUjl9RyN3/87jF/gcAAIBm5O7/Rdxi/wMAAEAzcvffGbd0sv8n3P/v8h1qrP8/q+f/b9W3PP+/8+f/X7E5+Ppr7//P2/n91f8P0/8fDv3/nM3FD3n+/wr6f8//1//r/1mrsfX/uft/Gbd0sv8BAACgB7n7fxW32P8AAADQjNz9v45b7H8AAABoRu7+u+KWTva//r/F/n8Pz//X//fR/+/y+u08//+fzj9x0//+/7VX6/857TD7//y5MNr+f4D+fwX9v/5f/6//Z63G1v/n7v9N3NLJ/gcAAIAe5O6/O26x/wEAAKAZuft/G7fY/wAAANCM3P2/i1s62f/6f/3/WPr//LE+gv7/xPT6/2yKe+//Pf9f/7/I8/+X0/+voP/X/+v/9f+s1dj6/9z998Qtnex/AAAA6EHu/t/HLbn/N/b9S/cAAADAyOTu/8P2nfs9Wr7+DwAAAM04tfs3Z3+MWzrZ//p//f9Y+v/k+f+nP8/z/0/R/+v/92Py/f/sHP2//l//P9H3r//X/7NobP1/7v4/xS2d7H8AAADoQe7+jbhl5/7/u8N9VwAAAMA63bv9x83Zn+MWX/8HAACAZuTuvy9u6WT/6//1//p//b/+f/j19f/TNPn+3/P/9f/6/8m+f/2//p9FY+v/c/f/NQAA//+VAGrk")
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0)

1.517272887s ago: executing program 3 (id=6999):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2d, 0x10, {0x2, 0x4e22, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x8000)

1.403905631s ago: executing program 3 (id=7001):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6f6163767461700000000900010073797a310000000064000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000040004800b00070066696c7465"], 0x330}}, 0x4008800)

1.236746123s ago: executing program 3 (id=7004):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1000, &(0x7f0000001cc0)=""/4096, 0x41100, 0xd}, 0x94)

1.091142305s ago: executing program 3 (id=7007):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800000, &(0x7f0000000600)={[{@numtail}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x90003}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@uni_xlate}, {@uni_xlate}, {@shortname_win95}, {@utf8no}, {@utf8no}]}, 0x25, 0x35b, &(0x7f0000000200)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)

1.061438219s ago: executing program 1 (id=7009):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

959.35312ms ago: executing program 4 (id=7011):
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r0, r0, r0}, &(0x7f0000000300)=""/39, 0x27, &(0x7f0000000000)={&(0x7f0000000280)={'sm3\x00'}})

836.373423ms ago: executing program 1 (id=7012):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000002640)=0xffffffff, 0x4)

834.217092ms ago: executing program 0 (id=7013):
syz_mount_image$vfat(&(0x7f0000000980), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYBLOB="79057a2c1e9ae72898229ce6287c"], 0x1, 0x2cb, &(0x7f0000000a40)="$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")
creat(&(0x7f0000000340)='./file0\x00', 0x0)

716.272723ms ago: executing program 1 (id=7014):
pipe2(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80080)
tee(r1, r0, 0x42ea, 0x0)

715.22391ms ago: executing program 4 (id=7015):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x5, "f47e6aeb88"}, &(0x7f0000000100)=0x2d)

706.072261ms ago: executing program 0 (id=7016):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a00)=@can_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5, 0xd, 0x81}]}, 0x1c}}, 0x0)

602.627845ms ago: executing program 5 (id=7017):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

601.356554ms ago: executing program 1 (id=7018):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x88, 0x30, 0xffff, 0xfffffffc, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0xffffffffffffffff}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0)

570.847132ms ago: executing program 4 (id=7019):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100))

498.059893ms ago: executing program 0 (id=7020):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x437, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x6}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x7}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x3}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x4c040)

421.811019ms ago: executing program 1 (id=7021):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000340], 0x0, 0x0, &(0x7f0000000340)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x108)

420.383012ms ago: executing program 4 (id=7022):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r0, 0x10c, 0x5, 0x0, &(0x7f0000000080)=0x4)

351.775239ms ago: executing program 3 (id=7023):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x84, 0x5}], 0x10}, 0x41)

325.473627ms ago: executing program 0 (id=7024):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89f2, &(0x7f0000000900)={'ip6gre0\x00', @random="0610002000"})

247.969579ms ago: executing program 1 (id=7025):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000140)={{0x0, 0x8, 0x100, 0x8000000000000000, 0xfffffffffffbfffc, 0x5, 0x100000002, 0xe, 0x9, 0x80000008, 0x0, 0xd, 0x8, 0xffffffffffffffff, 0x1}})

247.364627ms ago: executing program 4 (id=7026):
syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000000)='./file1\x00', 0x30008c0, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYBLOB="11f4579be01e435c584a33c63f8173f96bc4546035804d47be19163bd9e589bfdd0a9e6804495a4e4d83804e78ac5a72446295afd79de3fd6a02932a26ab4045133c371e56b0d48544db3c7db23a432f837b93f89b6f223cd1f6731d407ffdcedd9467f5cd2d6c4e8b3043614238ac91501a4bb780c4723929e22f55254546facc4f0284e644e6", @ANYRES8, @ANYRESDEC=0x0], 0x11, 0x31b, &(0x7f0000000240)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00))

174.750645ms ago: executing program 0 (id=7027):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xff, @dev={0xfe, 0x80, '\x00', 0x31}, 0x7c7d1f10, 0x1}, 0x20)

162.761217ms ago: executing program 5 (id=7028):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0)
faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2)

134.110244ms ago: executing program 3 (id=7029):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x27}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x86}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)

1.73168ms ago: executing program 0 (id=7030):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0)
fsetxattr$security_ima(r0, &(0x7f0000000080), 0x0, 0x0, 0x0)

0s ago: executing program 4 (id=7031):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)

kernel console output (not intermixed with test programs):

ng 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  529.592879][ T6008] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  529.620484][ T6008] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  529.631851][ T5846] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  529.642202][ T6008] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.653107][ T6008] usb 2-1: Product: syz
[  529.657317][ T6008] usb 2-1: Manufacturer: syz
[  529.679058][ T6008] usb 2-1: SerialNumber: syz
[  529.707801][ T6008] usb 2-1: config 0 descriptor??
[  529.736658][T18506] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  529.762190][T18533] loop5: detected capacity change from 0 to 4096
[  529.772177][ T6008] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  529.822301][ T6008] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  529.863535][T18533] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  529.942270][T18533] ntfs3(loop5): ino=1a, mi_enum_attr
[  529.948301][T18533] ntfs3(loop5): ino=1a, mi_enum_attr
[  530.031668][T18533] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  530.286738][T18544] loop4: detected capacity change from 0 to 8192
[  530.351669][ T5946] usb 2-1: USB disconnect, device number 112
[  530.387222][ T5946] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  530.449022][ T5946] cyberjack 2-1:0.69: device disconnected
[  530.626654][T18564] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  530.640338][T18563] netlink: 'syz.3.5411': attribute type 2 has an invalid length.
[  531.153075][T18589] hmaÓË2
: entered promiscuous mode
[  531.288117][T18598] netlink: 'syz.1.5428': attribute type 1 has an invalid length.
[  531.322111][T18602] cgroup: Need name or subsystem set
[  531.363457][ T5946] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  531.437007][T18609] SET target dimension over the limit!
[  531.521536][T18613] netlink: 344 bytes leftover after parsing attributes in process `syz.0.5435'.
[  531.535799][ T5946] usb 6-1: Using ep0 maxpacket: 8
[  531.552492][ T5946] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  531.585197][ T5946] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  531.612967][ T5946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  531.645722][ T5946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  531.684432][ T5946] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  531.717213][ T5946] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  531.743564][ T5946] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  531.753900][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.764038][ T5946] usb 6-1: Product: syz
[  531.768221][ T5946] usb 6-1: Manufacturer: syz
[  531.790597][ T5946] usb 6-1: SerialNumber: syz
[  531.809338][ T5946] usb 6-1: config 0 descriptor??
[  531.823889][T18590] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  532.084451][T18642] loop4: detected capacity change from 0 to 256
[  532.114747][T18645] loop3: detected capacity change from 0 to 512
[  532.172493][T18645] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002]
[  532.188258][T18645] System zones: 1-12
[  532.199068][T18645] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.5448: Directory hole found for htree index block 0
[  532.221666][T18645] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  532.223565][T18645] EXT4-fs (loop3): Remounting filesystem read-only
[  532.232677][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  532.232699][    C1] EXT4-fs (loop3): initial error at time 1788387094: dx_probe:791: inode 2
[  532.232726][    C1] EXT4-fs (loop3): last error at time 1788387094: dx_probe:791: inode 2
[  532.265090][T18645] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117
[  532.273420][T18645] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  532.295519][T18645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  532.412912][T18645] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  532.535336][ T5846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  532.671302][T18667] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5460'.
[  532.729197][T18673] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[  532.853512][T18679] vlan0: entered promiscuous mode
[  532.866767][T18681] loop4: detected capacity change from 0 to 64
[  532.929843][   T29] audit: type=1800 audit(1788387094.783:78): pid=18681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5468" name="file1" dev="loop4" ino=22 res=0 errno=0
[  533.257970][T18700] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5477'.
[  533.368396][ T5946] rc_core: IR keymap rc-snapstream-firefly not found
[  533.405329][ T5946] Registered IR keymap rc-empty
[  533.417243][ T5946] rc rc0: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  533.469892][ T5946] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input45
[  533.532925][ T5946] input: syz syz mouse as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input46
[  533.618260][ T5946] usb 6-1: USB disconnect, device number 5
[  533.624208][    C1] ati_remote 6-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[  533.801484][T18718] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  534.045938][T18689] loop1: detected capacity change from 0 to 32768
[  534.106274][T18689] JBD2: Ignoring recovery information on journal
[  534.213349][T18739] netlink: 'syz.5.5497': attribute type 2 has an invalid length.
[  534.220289][T18689] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  534.221774][T18739] netlink: 'syz.5.5497': attribute type 1 has an invalid length.
[  534.405628][   T29] audit: type=1326 audit(1788387096.167:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18746 comm="syz.5.5499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1da79c629 code=0x7ffc0000
[  534.483768][T18689] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature 
[  534.507113][   T29] audit: type=1326 audit(1788387096.167:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18746 comm="syz.5.5499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1da79c629 code=0x7ffc0000
[  534.543614][T18689] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  534.572301][   T29] audit: type=1326 audit(1788387096.176:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18746 comm="syz.5.5499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc1da79c629 code=0x7ffc0000
[  534.595007][T18689] OCFS2: File system is now read-only.
[  534.600498][T18689] (syz.1.5473,18689,0):ocfs2_search_chain:1888 ERROR: status = -30
[  534.620760][   T29] audit: type=1326 audit(1788387096.176:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18746 comm="syz.5.5499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1da79c629 code=0x7ffc0000
[  534.665978][T18689] (syz.1.5473,18689,0):ocfs2_search_chain:2011 ERROR: status = -30
[  534.674926][T18689] (syz.1.5473,18689,0):ocfs2_claim_suballoc_bits:2098 ERROR: status = -30
[  534.684163][   T29] audit: type=1326 audit(1788387096.176:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18746 comm="syz.5.5499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1da79c629 code=0x7ffc0000
[  534.706588][T18689] (syz.1.5473,18689,0):ocfs2_claim_suballoc_bits:2151 ERROR: status = -30
[  534.728965][T18753] loop4: detected capacity change from 0 to 4096
[  534.756085][T18689] (syz.1.5473,18689,0):ocfs2_claim_metadata:2176 ERROR: status = -30
[  534.766057][T18753] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  534.782959][T18689] (syz.1.5473,18689,0):ocfs2_claim_metadata:2189 ERROR: status = -30
[  534.794013][T18689] (syz.1.5473,18689,0):ocfs2_dx_dir_attach_index:2357 ERROR: status = -30
[  534.803832][T18689] (syz.1.5473,18689,0):ocfs2_expand_inline_dir:3050 ERROR: status = -30
[  534.834309][T18689] (syz.1.5473,18689,0):ocfs2_extend_dir:3232 ERROR: status = -30
[  534.848223][T18689] (syz.1.5473,18689,0):ocfs2_prepare_dir_for_insert:4350 ERROR: status = -30
[  534.914261][T18689] (syz.1.5473,18689,0):ocfs2_mknod:302 ERROR: status = -30
[  534.948944][T18689] (syz.1.5473,18689,0):ocfs2_mknod:506 ERROR: status = -30
[  534.971393][T18753] ntfs3(loop4): ino=0, attr_set_size_ex
[  534.995822][T18689] (syz.1.5473,18689,0):ocfs2_mkdir:662 ERROR: status = -30
[  535.003973][T18753] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  535.124957][T18773] loop5: detected capacity change from 0 to 2048
[  535.162357][T18773] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  535.189436][ T5842] __find_get_block_slow() failed. block=1008806316530991136, b_blocknr=32, b_state=0x00620019, b_size=512, device loop1 blocksize: 512
[  535.236913][T18782] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  535.245830][ T5842] grow_buffers: requested out-of-range block 1008806316530991136 for device loop1
[  535.296632][ T5842] (syz-executor,5842,0):ocfs2_read_blocks:239 ERROR: status = -12
[  535.338577][ T5842] (syz-executor,5842,0):_ocfs2_free_suballoc_bits:2866 ERROR: status = -12
[  535.372358][ T5842] (syz-executor,5842,0):_ocfs2_free_clusters:2977 ERROR: status = -12
[  535.380610][ T5842] (syz-executor,5842,0):ocfs2_sync_local_to_main:994 ERROR: status = -12
[  535.401931][ T5842] (syz-executor,5842,0):ocfs2_sync_local_to_main:1007 ERROR: status = -12
[  535.411536][ T5842] (syz-executor,5842,0):ocfs2_shutdown_local_alloc:450 ERROR: status = -12
[  535.504753][ T5842] ocfs2: Unmounting device (7,1) on (node local)
[  535.881777][T18804] xt_hashlimit: max too large, truncated to 1048576
[  535.938028][T18780] loop3: detected capacity change from 0 to 32768
[  535.983697][T18780] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5516 (18780)
[  536.036902][T18780] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  536.066496][T18780] BTRFS info (device loop3): using sha256 checksum algorithm
[  536.135835][T18826] loop5: detected capacity change from 0 to 512
[  536.212114][T18780] BTRFS info (device loop3): enabling ssd optimizations
[  536.248757][T18826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  536.268204][T18780] BTRFS info (device loop3): turning on async discard
[  536.301509][T18780] BTRFS info (device loop3): enabling free space tree
[  536.518730][T16039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  536.557712][ T5846] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  536.618743][T18851] loop4: detected capacity change from 0 to 164
[  536.731684][T18851] iso9660: Corrupted directory entry in block 2 of inode 1920
[  537.035578][T18869] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5549'.
[  537.036252][T18871] netlink: 'syz.3.5551': attribute type 71 has an invalid length.
[  537.648716][T18896] vlan0: left promiscuous mode
[  537.712050][T18901] Cannot find del_set index 4 as target
[  537.804927][T18906] loop4: detected capacity change from 0 to 2048
[  537.857193][T18906] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  538.039421][T18919] netlink: 'syz.5.5575': attribute type 1 has an invalid length.
[  538.176442][T18926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5578'.
[  538.385602][   T29] audit: type=1326 audit(1788387099.880:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18935 comm="syz.0.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afab9c629 code=0x7ffc0000
[  538.474419][   T29] audit: type=1326 audit(1788387099.880:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18935 comm="syz.0.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afab9c629 code=0x7ffc0000
[  538.519637][T18942] loop5: detected capacity change from 0 to 256
[  538.534330][T18944] loop1: detected capacity change from 0 to 256
[  538.555781][   T29] audit: type=1326 audit(1788387099.909:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18935 comm="syz.0.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f5afab9c629 code=0x7ffc0000
[  538.579325][T18947] netlink: 'syz.4.5589': attribute type 8 has an invalid length.
[  538.591602][   T29] audit: type=1326 audit(1788387099.909:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18935 comm="syz.0.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afab9c629 code=0x7ffc0000
[  538.628795][   T29] audit: type=1326 audit(1788387099.909:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18935 comm="syz.0.5583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afab9c629 code=0x7ffc0000
[  538.684816][T18944] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d)
[  538.896086][T18960] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5595'.
[  539.058150][T18970] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5600'.
[  539.073127][T18970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5600'.
[  539.097594][T18966] loop5: detected capacity change from 0 to 4096
[  539.102183][T18970] netlink: 172 bytes leftover after parsing attributes in process `syz.1.5600'.
[  539.126119][T18966] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  539.141730][T18966] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  539.185184][T18970] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5600'.
[  539.203796][T16039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  539.242557][T18970] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5600'.
[  539.302268][T18977] : renamed from veth0_to_bond (while UP)
[  539.387820][T18981] tmpfs: Bad value for 'mpol'
[  539.670349][T18997] bond2: option lp_interval: invalid value (18446744073709551613)
[  539.678393][T18997] bond2: option lp_interval: allowed values 1 - 2147483647
[  539.687526][T14419] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807e0ac000 (14)(syz2) rdma_ndev=ffff888076434000 (24)(ip6_vti0) cookie=ffff88804d28c000 (42)(bond2) start
[  539.693756][T18997] bond2 (unregistering): Released all slaves
[  539.734058][T14419] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807e0ac000 (14)(syz2) rdma_ndev=ffff888076434000 (24)(ip6_vti0) cookie=ffff88804d28c000 (3)(bond2) end
[  539.903004][T19010] netlink: 'syz.5.5619': attribute type 1 has an invalid length.
[  540.050807][T19015] netlink: 'syz.5.5623': attribute type 1 has an invalid length.
[  540.082287][T19015] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5623'.
[  540.108492][T19015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5623'.
[  540.292219][T18983] Bluetooth: hci1: Opcode 0x080f failed: -4
[  540.414606][T19032] loop3: detected capacity change from 0 to 512
[  540.436031][T19032] EXT4-fs (loop3): Test dummy encryption mode enabled
[  540.476107][T19032] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  540.543246][T19032] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  540.603063][T19032] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  540.648761][T19045] loop5: detected capacity change from 0 to 256
[  540.732996][T19045] FAT-fs (loop5): Directory bread(block 64) failed
[  540.749879][T19045] FAT-fs (loop5): Directory bread(block 65) failed
[  540.778299][T19045] FAT-fs (loop5): Directory bread(block 66) failed
[  540.796271][ T5846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  540.838712][T19045] FAT-fs (loop5): Directory bread(block 67) failed
[  540.845386][T19045] FAT-fs (loop5): Directory bread(block 68) failed
[  540.901996][T19045] FAT-fs (loop5): Directory bread(block 69) failed
[  540.932542][T19045] FAT-fs (loop5): Directory bread(block 70) failed
[  540.955852][T19045] FAT-fs (loop5): Directory bread(block 71) failed
[  540.962509][T19045] FAT-fs (loop5): Directory bread(block 72) failed
[  541.016751][T19045] FAT-fs (loop5): Directory bread(block 73) failed
[  541.064212][T19057] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  541.569600][T19071] loop5: detected capacity change from 0 to 4096
[  541.583988][ T5847] Bluetooth: hci1: command 0x080f tx timeout
[  541.623991][T19071] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  541.710261][T19071] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  541.738737][T19071] ntfs3(loop5): ino=19, mi_enum_attr
[  541.811093][T19071] ntfs3(loop5): failed to convert "c46c" to macromanian
[  541.844573][T19071] ntfs3(loop5): ino=20, mi_enum_attr
[  542.004932][T19091] vim2m vim2m.0: Fourcc format (0x47425247) invalid.
[  542.017286][   T29] audit: type=1326 audit(1788387103.285:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19090 comm="syz.3.5659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19bab9c629 code=0x7ffc0000
[  542.118231][   T29] audit: type=1326 audit(1788387103.285:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19090 comm="syz.3.5659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19bab9c629 code=0x7ffc0000
[  542.192811][   T29] audit: type=1326 audit(1788387103.313:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19090 comm="syz.3.5659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f19bab9c629 code=0x7ffc0000
[  542.258424][T19100] netlink: 'syz.0.5661': attribute type 11 has an invalid length.
[  542.281629][   T29] audit: type=1326 audit(1788387103.313:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19090 comm="syz.3.5659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19bab9c629 code=0x7ffc0000
[  542.328301][   T29] audit: type=1326 audit(1788387103.313:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19090 comm="syz.3.5659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19bab9c629 code=0x7ffc0000
[  542.468385][T19109] loop4: detected capacity change from 0 to 512
[  542.632482][T19109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  542.727830][T19109] ext4 filesystem being mounted at /1059/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  542.869418][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  542.869871][T19127] loop3: detected capacity change from 0 to 1024
[  542.889271][T19127] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  542.984930][T19127] EXT4-fs error (device loop3): ext4_map_blocks:818: inode #3: block 1: comm syz.3.5675: lblock 1 mapped to illegal pblock 1 (length 1)
[  543.052441][T19138] ipt_REJECT: TCP_RESET invalid for non-tcp
[  543.080454][T19127] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  543.080773][T19127] Quota error (device loop3): write_blk: dquota write failed
[  543.097990][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  543.104461][    C1] EXT4-fs (loop3): initial error at time 1788387104: ext4_map_blocks:818: inode 3: block 1
[  543.114524][    C1] EXT4-fs (loop3): last error at time 1788387104: ext4_map_blocks:818: inode 3: block 1
[  543.166564][T19127] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  543.237126][T19127] EXT4-fs error (device loop3): ext4_acquire_dquot:7003: comm syz.3.5675: Failed to acquire dquot type 0
[  543.299740][T19127] loop3: lost filesystem error report for type 5 error -117
[  543.300088][T19127] EXT4-fs error (device loop3): ext4_free_blocks:6726: comm syz.3.5675: Freeing blocks not in datazone - block = 0, count = 4096
[  543.348414][T19127] loop3: lost filesystem error report for type 5 error -117
[  543.350095][T19127] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.5675: Invalid inode bitmap blk 0 in block_group 0
[  543.381454][   T35] EXT4-fs error (device loop3): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  543.415291][   T35] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  543.419765][   T35] Quota error (device loop3): remove_tree: Can't read quota data block 1
[  543.452166][T19127] loop3: lost filesystem error report for type 5 error -117
[  543.452443][T19127] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem
[  543.495649][   T35] EXT4-fs error (device loop3): ext4_release_dquot:7039: comm kworker/u8:2: Failed to release dquot type 0
[  543.509713][T19127] loop3: lost filesystem error report for type 5 error -117
[  543.512737][T19127] EXT4-fs (loop3): 1 orphan inode deleted
[  543.529555][   T35] loop3: lost filesystem error report for type 5 error -117
[  543.541908][T19127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  543.602319][ T5846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  543.861131][T19140] loop5: detected capacity change from 0 to 32768
[  543.931871][T19140] (syz.5.5683,19140,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  543.994919][T19140] (syz.5.5683,19140,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  544.041853][T19140] JBD2: Ignoring recovery information on journal
[  544.049971][T19164] 8021q: adding VLAN 0 to HW filter on device bond2
[  544.226165][T19140] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  544.369139][T19166] loop1: detected capacity change from 0 to 32768
[  544.410315][T19166] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  544.544276][T16039] ocfs2: Unmounting device (7,5) on (node local)
[  544.588068][T19166] XFS (loop1): Ending clean mount
[  544.791838][ T5842] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  544.859845][T19205] __nla_validate_parse: 4 callbacks suppressed
[  544.860042][T19205] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.5710'.
[  544.876032][T19205] openvswitch: netlink: Missing key (keys=40, expected=100)
[  544.984032][ T5904] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[  545.154405][ T5904] usb 1-1: Using ep0 maxpacket: 16
[  545.161408][ T5904] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  545.185959][ T5904] usb 1-1: config 0 has no interface number 0
[  545.212774][ T5904] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  545.231810][ T5904] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  545.250833][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  545.290411][ T5904] usb 1-1: Product: syz
[  545.306964][ T5904] usb 1-1: SerialNumber: syz
[  545.326262][ T5904] usb 1-1: config 0 descriptor??
[  545.370692][ T5904] cm109 1-1:0.8: invalid payload size 208, expected 4
[  545.383002][ T5904] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input47
[  545.411048][T19225] loop3: detected capacity change from 0 to 1024
[  545.696008][T19235] loop5: detected capacity change from 0 to 4096
[  545.764152][T19242] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[  545.828839][    C1] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71
[  545.836301][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  545.843625][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  545.850869][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  545.858032][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  545.865205][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  545.872399][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  545.879598][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  545.886782][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  545.894313][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  545.901515][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  545.911091][    C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  545.920556][T19235] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[  545.923037][T19234] bond3: Removing last ns target with arp_interval on
[  545.935272][ T5904] usb 1-1: USB disconnect, device number 112
[  545.961183][ T5904] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  546.215861][T19254] netlink: 'syz.5.5731': attribute type 2 has an invalid length.
[  546.464402][T19268] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.5739'.
[  546.527012][T19268] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  546.528175][T19270] netlink: 'syz.5.5740': attribute type 29 has an invalid length.
[  546.562164][T19272] loop3: detected capacity change from 0 to 128
[  546.621148][T19272] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  546.663826][T19272] ext4 filesystem being mounted at /1186/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  546.742103][T19284] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5744'.
[  546.744428][ T5846] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  546.796564][T19284] netlink: 'syz.1.5744': attribute type 2 has an invalid length.
[  546.847129][T19287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5748'.
[  546.873079][T19287] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5748'.
[  546.928960][T19287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5748'.
[  546.979194][T19287] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5748'.
[  547.019560][T19287] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5748'.
[  547.351647][T19311] loop4: detected capacity change from 0 to 512
[  547.358938][ T5838] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  547.412571][T19311] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.5759: bg 0: block 5: invalid block bitmap
[  547.453858][T19311] loop4: lost filesystem error report for type 5 error -117
[  547.454516][T19311] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6687: Corrupt filesystem
[  547.470597][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  547.470622][    C0] EXT4-fs (loop4): initial error at time 1788387108: ext4_validate_block_bitmap:432
[  547.470648][    C0] EXT4-fs (loop4): last error at time 1788387108: ext4_validate_block_bitmap:432
[  547.502834][T19311] loop4: lost filesystem error report for type 5 error -117
[  547.503259][T19311] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5759: invalid indirect mapped block 3 (level 2)
[  547.525941][T19311] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  547.526604][T19311] EXT4-fs (loop4): 1 orphan inode deleted
[  547.543809][T19311] EXT4-fs (loop4): 1 truncate cleaned up
[  547.564584][ T5838] usb 6-1: config 0 has an invalid interface number: 156 but max is 1
[  547.580755][ T5838] usb 6-1: config 0 has no interface number 1
[  547.588621][ T5838] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  547.602031][ T5838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  547.612248][T19311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  547.632264][ T5838] usb 6-1: config 0 descriptor??
[  547.642351][ T5838] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  547.650205][ T5838] usb 6-1: MIDIStreaming interface descriptor not found
[  547.676169][T19288] loop3: detected capacity change from 0 to 32768
[  547.764487][T19288] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  547.797928][T19288] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  547.831973][ T5838] gspca_main: spca561-2.14.0 probing abcd:cdee
[  547.841025][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  547.880510][ T5838] spca561 6-1:0.0: probe with driver spca561 failed with error -22
[  547.935400][ T5838] usb 6-1: USB disconnect, device number 6
[  548.017693][T19288] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  548.087590][ T5897] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  548.113957][ T5897] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  548.259823][ T5897] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 136ms
[  548.278318][ T5945] ip6_vti0 speed is unknown, defaulting to 1000
[  548.286471][ T5897] gfs2: fsid=syz:syz.0: jid=0: Done
[  548.296355][T19288] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  548.356806][T19288] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 8366 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1431
[  548.394768][T19288] CPU: 1 UID: 0 PID: 19288 Comm: syz.3.5747 Not tainted syzkaller #0 PREEMPT(full) 
[  548.394800][T19288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  548.394814][T19288] Call Trace:
[  548.394823][T19288]  <TASK>
[  548.394833][T19288]  dump_stack_lvl+0xe8/0x150
[  548.394870][T19288]  gfs2_withdraw+0xc3/0x1b0
[  548.394896][T19288]  gfs2_quota_init+0x10f8/0x1220
[  548.394940][T19288]  ? __pfx_gfs2_quota_init+0x10/0x10
[  548.394961][T19288]  ? __pfx_wake_up_bit+0x10/0x10
[  548.394989][T19288]  ? inode_go_inval+0x2a0/0x360
[  548.395015][T19288]  gfs2_make_fs_rw+0x143/0x230
[  548.395044][T19288]  gfs2_fill_super+0x1ba5/0x21d0
[  548.395085][T19288]  ? __pfx_gfs2_fill_super+0x10/0x10
[  548.395113][T19288]  ? init_locking+0xb8/0x210
[  548.395135][T19288]  ? sb_set_blocksize+0x155/0x240
[  548.395163][T19288]  ? setup_bdev_super+0x4c1/0x5b0
[  548.395190][T19288]  get_tree_bdev_flags+0x431/0x4f0
[  548.395213][T19288]  ? __pfx_gfs2_fill_super+0x10/0x10
[  548.395234][T19288]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  548.395254][T19288]  ? __pfx_vfs_parse_comma_sep+0x10/0x10
[  548.395288][T19288]  gfs2_get_tree+0x51/0x1e0
[  548.395317][T19288]  vfs_get_tree+0x92/0x2a0
[  548.395342][T19288]  do_new_mount+0x341/0xd30
[  548.395370][T19288]  ? apparmor_capable+0x126/0x170
[  548.395400][T19288]  ? __pfx_do_new_mount+0x10/0x10
[  548.395429][T19288]  ? ns_capable+0x89/0xe0
[  548.395467][T19288]  ? user_path_at+0xd4/0x160
[  548.395489][T19288]  __se_sys_mount+0x31d/0x420
[  548.395524][T19288]  ? __pfx___se_sys_mount+0x10/0x10
[  548.395558][T19288]  ? __x64_sys_mount+0x20/0xc0
[  548.395589][T19288]  do_syscall_64+0x14d/0xf80
[  548.395621][T19288]  ? trace_irq_disable+0x3b/0x150
[  548.395639][T19288]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.395659][T19288]  ? clear_bhb_loop+0x40/0x90
[  548.395681][T19288]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.395702][T19288] RIP: 0033:0x7f19bab9d8ca
[  548.395722][T19288] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  548.395740][T19288] RSP: 002b:00007f19bb9f5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  548.395762][T19288] RAX: ffffffffffffffda RBX: 00007f19bb9f5ee0 RCX: 00007f19bab9d8ca
[  548.395778][T19288] RDX: 0000200000037f40 RSI: 00002000000008c0 RDI: 00007f19bb9f5ea0
[  548.395792][T19288] RBP: 0000200000037f40 R08: 00007f19bb9f5ee0 R09: 0000000003000094
[  548.395806][T19288] R10: 0000000003000094 R11: 0000000000000246 R12: 00002000000008c0
[  548.395820][T19288] R13: 00007f19bb9f5ea0 R14: 0000000000037f68 R15: 0000200000000480
[  548.395853][T19288]  </TASK>
[  548.395916][T19288] gfs2: fsid=syz:syz.0: can't make FS RW: -5
[  548.874618][ T5897] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  548.980335][T19335] loop4: detected capacity change from 0 to 32768
[  549.047367][ T5897] usb 6-1: Using ep0 maxpacket: 8
[  549.073222][ T5897] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  549.096030][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.121376][ T5897] usb 6-1: Product: syz
[  549.126589][ T5897] usb 6-1: Manufacturer: syz
[  549.137271][ T5897] usb 6-1: SerialNumber: syz
[  549.178900][ T5897] usb 6-1: config 0 descriptor??
[  549.191219][T14419] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807e0ac000 (14)(syz2) rdma_ndev=ffff888076434000 (24)(ip6_vti0) cookie=ffff88807edcc000 (6)(bridge1) start
[  549.249575][T14419] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807e0ac000 (14)(syz2) rdma_ndev=ffff888076434000 (24)(ip6_vti0) cookie=ffff88807edcc000 (6)(bridge1) end
[  549.341594][T19366] sit0: left promiscuous mode
[  549.404169][ T5897] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  549.619357][ T5897] usb write operation failed. (-71)
[  549.633355][ T5897] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  549.673117][ T5897] dvbdev: DVB: registering new adapter (Terratec H7)
[  549.691039][ T5897] usb 6-1: media controller created
[  549.702367][ T5897] usb read operation failed. (-71)
[  549.711559][ T5897] usb write operation failed. (-71)
[  549.734732][ T5897] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  549.753732][ T5897] usb 6-1: USB disconnect, device number 7
[  550.081101][T19396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5796'.
[  550.317488][T19400] netdevsim netdevsim5 netdevsim0: left promiscuous mode
[  550.329757][T19400] bridge1: left promiscuous mode
[  550.373626][T19386] loop3: detected capacity change from 0 to 40427
[  550.389698][T19386] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  550.407389][T19386] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  550.438881][T19386] F2FS-fs (loop3): invalid crc value
[  550.678959][T19386] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  550.679790][T19419] loop4: detected capacity change from 0 to 8
[  550.712475][T19419] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  550.758384][T19386] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  550.775674][T19386] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  550.902909][T19386] syz.3.5791: attempt to access beyond end of device
[  550.902909][T19386] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  551.346376][ T5897] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  551.591108][ T5897] usb 6-1: Using ep0 maxpacket: 32
[  551.601250][ T5897] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[  551.643517][ T5897] usb 6-1: config 0 has no interface number 0
[  551.649665][ T5897] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  551.695367][ T5897] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  551.716487][ T5897] usb 6-1: config 0 interface 85 has no altsetting 0
[  551.744026][ T5897] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  551.759603][T19455] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  551.762638][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  551.783560][T19456] loop4: detected capacity change from 0 to 256
[  551.813627][ T5897] usb 6-1: Product: syz
[  551.821781][ T5897] usb 6-1: Manufacturer: syz
[  551.831794][ T5897] usb 6-1: SerialNumber: syz
[  551.839084][ T5897] usb 6-1: config 0 descriptor??
[  551.847454][T19456] exfat: Deprecated parameter 'utf8'
[  551.874646][T19456] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  552.082420][ T5945] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[  552.260513][ T5945] usb 4-1: unable to get BOS descriptor or descriptor too short
[  552.282906][ T5945] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  552.303325][ T5945] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  552.320354][ T5897] appletouch 6-1:0.85: Failed to request geyser raw mode
[  552.333426][ T5897] appletouch 6-1:0.85: probe with driver appletouch failed with error -5
[  552.342539][ T5945] usb 4-1: config 1 interface 0 has no altsetting 1
[  552.354613][ T5945] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  552.364981][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.381527][ T5897] usb 6-1: USB disconnect, device number 8
[  552.397656][ T5945] usb 4-1: Product: syz
[  552.404189][ T5945] usb 4-1: Manufacturer: syz
[  552.408821][ T5945] usb 4-1: SerialNumber: syz
[  552.489727][ T5945] smsusb:smsusb_probe: board id=8, interface number 0
[  552.702757][ T5945] smsusb:smsusb_probe: Device initialized with return code -19
[  552.902474][T19509] netlink: 200 bytes leftover after parsing attributes in process `syz.4.5847'.
[  552.950161][ T5904] usb 4-1: USB disconnect, device number 117
[  553.200573][T19527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5855'.
[  553.530522][T19547] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5866'.
[  553.542192][T19545] ceph: No source
[  553.611650][T19548] loop5: detected capacity change from 0 to 1764
[  553.632806][T19548] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  553.688809][T19548] iso9660: Corrupted directory entry in block 2 of inode 1920
[  553.828641][T19564] loop1: detected capacity change from 0 to 512
[  553.856760][T19564] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  553.911497][T19564] EXT4-fs (loop1): 1 truncate cleaned up
[  553.945372][T19564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  553.965963][T19558] loop4: detected capacity change from 0 to 1764
[  553.972831][T19568] netlink: 'syz.5.5875': attribute type 33 has an invalid length.
[  554.001708][T19568] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5875'.
[  554.043264][T19558] iso9660: Corrupted directory entry in block 2 of inode 1920
[  554.075384][T19572] bond3: entered allmulticast mode
[  554.080992][T19568] `: renamed from team0 (while UP)
[  554.083678][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  554.394292][T19585] loop3: detected capacity change from 0 to 512
[  554.424582][T19583] loop4: detected capacity change from 0 to 2048
[  554.465900][T19583] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=3932051, location=3932051
[  554.470330][T19585] EXT4-fs (loop3): 1 orphan inode deleted
[  554.488252][T19588] overlayfs: unescaped trailing colons in lowerdir mount option.
[  554.521638][T19585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  554.536741][T19585] ext4 filesystem being mounted at /1198/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  554.544680][T19583] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  554.618150][ T5846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  554.755800][ T6008] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  554.780285][T19599] netlink: 'syz.4.5888': attribute type 4 has an invalid length.
[  554.806572][T19599] netlink: 'syz.4.5888': attribute type 1 has an invalid length.
[  554.833292][T19599] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5888'.
[  554.916991][ T5847] Bluetooth: hci4: unexpected Set CIG Parameters response data
[  554.935885][ T5847] Bluetooth: hci4: unexpected event for opcode 0x2062
[  554.962531][ T6008] usb 6-1: not running at top speed; connect to a high speed hub
[  554.977033][ T6008] usb 6-1: config 95 has an invalid interface number: 1 but max is 0
[  554.985798][T19603] loop3: detected capacity change from 0 to 128
[  554.996541][ T6008] usb 6-1: config 95 has no interface number 0
[  555.022111][ T6008] usb 6-1: config 95 interface 1 has no altsetting 0
[  555.031971][ T6008] usb 6-1: string descriptor 0 read error: -22
[  555.032868][T19603] FAT-fs (loop3): bogus number of reserved sectors
[  555.038768][ T6008] usb 6-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79
[  555.064622][ T6008] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  555.092020][T19603] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  555.142379][T19603] FAT-fs (loop3): Can't find a valid FAT filesystem
[  555.360455][T19613] loop1: detected capacity change from 0 to 764
[  555.394539][T19613] rock: directory entry would overflow storage
[  555.427981][T19613] rock: sig=0x4654, size=5, remaining=4
[  555.592760][T19619] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5899'.
[  555.601971][ T6008] usb 6-1: USB disconnect, device number 9
[  555.648818][T19619] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate.
[  555.741135][T19625] set_capacity_and_notify: 1 callbacks suppressed
[  555.741152][T19625] loop1: detected capacity change from 0 to 1024
[  555.894168][   T49] hfsplus: b-tree write err: -5, ino 25
[  555.909219][   T49] hfsplus: b-tree write err: -5, ino 4
[  555.914803][   T49] hfsplus: b-tree write err: -5, ino 2
[  556.476822][T19662] loop4: detected capacity change from 0 to 1024
[  556.517189][T19662] syz.4.5920: attempt to access beyond end of device
[  556.517189][T19662] loop4: rw=8388608, sector=917504, nr_sectors = 2 limit=1024
[  556.561690][T19662] Buffer I/O error on dev loop4, logical block 458752, async page read
[  556.593928][T19662] syz.4.5920: attempt to access beyond end of device
[  556.593928][T19662] loop4: rw=8388608, sector=917504, nr_sectors = 2 limit=1024
[  556.640854][T19662] Buffer I/O error on dev loop4, logical block 458752, async page read
[  556.796151][T19676] loop5: detected capacity change from 0 to 2048
[  556.834413][T19684] tmpfs: Bad value for 'mpol'
[  556.840691][T19680] loop1: detected capacity change from 0 to 1764
[  556.859613][T19676] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  556.873511][T19676] ext4 filesystem being mounted at /296/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  556.971318][T16039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  557.464188][T19715] loop5: detected capacity change from 0 to 256
[  557.518071][T19715] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d)
[  557.579808][T19715] exFAT-fs (loop5): error, data size is invalid(150994954)
[  557.609712][T19715] exFAT-fs (loop5): Filesystem has been set read-only
[  557.844284][T19735] netlink: 'syz.1.5955': attribute type 4 has an invalid length.
[  558.646036][T19780] netlink: 'syz.0.5977': attribute type 7 has an invalid length.
[  558.906886][ T5970] kernel read not supported for file /2452/net/xfrm_stat (pid: 5970 comm: kworker/0:7)
[  558.923247][ T5897] kernel write not supported for file /2452/net/xfrm_stat (pid: 5897 comm: kworker/0:4)
[  558.974720][T19799] 8021q: adding VLAN 0 to HW filter on device bond0
[  559.000798][T19799] bond0: (slave gre0): The slave device specified does not support setting the MAC address
[  559.041526][ T6008] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[  559.071141][T19799] bond0: (slave gre0): Error -95 calling set_mac_address
[  559.083305][T19807] dlm: non-version read from control device 90
[  559.084853][T19806] loop3: detected capacity change from 0 to 512
[  559.116430][ T5945] usb 2-1: new full-speed USB device number 113 using dummy_hcd
[  559.190161][T19806] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  559.201840][ T5847] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  559.212041][ T5847] Bluetooth: hci4: Injecting HCI hardware error event
[  559.222615][ T5847] Bluetooth: hci4: hardware error 0x00
[  559.234271][ T6008] usb 5-1: Using ep0 maxpacket: 16
[  559.246846][T19806] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5988: bg 0: block 384: padding at end of block bitmap is not set
[  559.298597][T19806] loop3: lost filesystem error report for type 5 error -117
[  559.302749][T19806] EXT4-fs (loop3): Remounting filesystem read-only
[  559.304395][ T6008] usb 5-1: config 0 has an invalid interface number: 34 but max is 0
[  559.310124][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  559.331187][    C1] EXT4-fs (loop3): initial error at time 1788387119: ext4_validate_block_bitmap:441
[  559.340583][    C1] EXT4-fs (loop3): last error at time 1788387119: ext4_validate_block_bitmap:441
[  559.340889][ T6008] usb 5-1: config 0 has no interface number 0
[  559.356154][T19806] EXT4-fs (loop3): 1 truncate cleaned up
[  559.358231][T19806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  559.386663][ T5945] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  559.398785][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.426283][ T5945] usb 2-1: Product: syz
[  559.430493][ T5945] usb 2-1: Manufacturer: syz
[  559.446027][ T6008] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  559.456584][ T5945] usb 2-1: SerialNumber: syz
[  559.462445][ T6008] usb 5-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024
[  559.483801][ T5945] usb 2-1: config 0 descriptor??
[  559.504052][ T5846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  559.520942][ T6008] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  559.553457][ T6008] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  559.577794][ T6008] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.585871][ T6008] usb 5-1: Product: syz
[  559.629424][ T6008] usb 5-1: Manufacturer: syz
[  559.634265][ T6008] usb 5-1: SerialNumber: syz
[  559.666744][ T6008] usb 5-1: config 0 descriptor??
[  559.673290][T19788] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  559.680728][T19788] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  559.725314][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  559.731780][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  559.896695][ T5904] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[  559.915618][T19788] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  559.934940][T19788] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  559.958464][T19811] loop5: detected capacity change from 0 to 32768
[  559.971675][ T5945] usb 2-1: f81604_write: reg: 105 data: b8 failed: -EPROTO
[  559.980936][ T5945] f81604 2-1:0.0: Setting termination of CH#0 failed: -EPROTO
[  559.998994][ T5945] f81604 2-1:0.0: probe with driver f81604 failed with error -71
[  560.034176][T19811] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  560.037642][ T5945] usb 2-1: USB disconnect, device number 113
[  560.069437][ T5904] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  560.089152][ T5904] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  560.141518][ T5904] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  560.161156][T19811] XFS (loop5): Ending clean mount
[  560.171964][ T5904] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  560.183562][ T6008] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  560.208066][ T6008] asix 5-1:0.34: probe with driver asix failed with error -71
[  560.218411][T19811] syz.5.5990: attempt to access beyond end of device
[  560.218411][T19811] loop5: rw=8392704, sector=3546894483, nr_sectors = 1 limit=32768
[  560.238174][ T6008] usb 5-1: USB disconnect, device number 78
[  560.240332][ T5904] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  560.275245][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.308898][ T5904] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  560.322957][T16039] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  560.344695][ T5904] usb 4-1: invalid MIDI out EP 0
[  560.652219][ T5904] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22
[  560.698883][ T5904] usb 4-1: USB disconnect, device number 118
[  560.904612][T19868] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6004'.
[  561.393331][ T6008] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[  561.425728][ T5847] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  561.453270][T19883] loop3: detected capacity change from 0 to 512
[  561.499848][T19864] loop5: detected capacity change from 0 to 32768
[  561.542481][T19883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  561.586434][ T6008] usb 2-1: Using ep0 maxpacket: 16
[  561.599079][ T6008] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  561.612375][T19864] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  561.619489][ T6008] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.656205][T19883] EXT4-fs error (device loop3): ext4_validate_block_bitmap:423: comm syz.3.6009: bg 0: bad block bitmap checksum
[  561.676008][ T6008] usb 2-1: Product: syz
[  561.691863][ T6008] usb 2-1: Manufacturer: syz
[  561.720490][ T6008] usb 2-1: SerialNumber: syz
[  561.751298][ T6008] usb 2-1: config 0 descriptor??
[  561.770092][T19883] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6687: Filesystem failed CRC
[  561.821642][T19864] XFS (loop5): Ending clean mount
[  561.861966][T19864] XFS (loop5): Quotacheck needed: Please wait.
[  561.977468][T19901] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  561.994871][ T6008] speedtch 2-1:0.0: speedtch_bind: wrong device class 68
[  561.997792][ T5846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  562.001944][ T6008] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19!
[  562.034867][T19864] XFS (loop5): Quotacheck: Done.
[  562.152614][T19911] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 8, id = 0
[  562.215407][T16039] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  562.241316][ T6008] usb 2-1: USB disconnect, device number 114
[  563.112468][T19954] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6034'.
[  563.139838][T19955] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0
[  563.189151][T19957] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6035'.
[  563.424648][T19969] netlink: 'syz.4.6040': attribute type 21 has an invalid length.
[  563.432584][T19969] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6040'.
[  563.463331][T19969] netlink: 'syz.4.6040': attribute type 1 has an invalid length.
[  563.613540][T19981] loop1: detected capacity change from 0 to 8
[  563.693149][T19981] SQUASHFS error: Unable to read inode 0xe3
[  563.697994][T19985] openvswitch: netlink: Invalid VLAN frame
[  563.842673][T19991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6052'.
[  563.889627][T19996] loop5: detected capacity change from 0 to 128
[  563.899307][T19999] overlayfs: empty lowerdir
[  563.919622][T19996] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  564.027869][T20002] netlink: 'syz.3.6057': attribute type 32 has an invalid length.
[  564.161224][T20008] loop5: detected capacity change from 0 to 2048
[  564.209353][T20011] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  564.246245][T20008] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  564.262228][T20013] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6062'.
[  564.283248][T20008] Remounting filesystem read-only
[  564.289439][T20008] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  564.306024][T20008] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  564.318403][T20008] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  564.341294][T20008] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  564.354867][T20008] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  564.368517][   T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807e0ac000 (14)(syz2) rdma_ndev=ffff888076434000 (24)(ip6_vti0) cookie=ffff88807b438000 (26)(bond0) start
[  564.385711][T20008] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  564.391605][T20013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  564.404636][   T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807e0ac000 (14)(syz2) rdma_ndev=ffff888076434000 (24)(ip6_vti0) cookie=ffff88807b438000 (16)(bond0) end
[  564.424906][T20008] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  564.447395][T20008] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  564.452771][T20013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  564.459133][T20008] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  564.476975][   T29] audit: type=1800 audit(1788387124.294:94): pid=20008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6060" name="file2" dev="loop5" ino=16 res=0 errno=0
[  564.520395][T20013] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  564.530082][T20013] veth1_vlan: left allmulticast mode
[  564.538731][T20013] bond0 (unregistering): Released all slaves
[  565.022803][T20036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6073'.
[  565.342817][T20052] loop5: detected capacity change from 0 to 256
[  565.343144][T20051] loop3: detected capacity change from 0 to 2048
[  565.369530][T20052] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  565.392924][T20052] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  565.415112][T20051] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  565.420041][T20052] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  565.456274][T20052] exFAT-fs (loop5): failed to load alloc-bitmap
[  565.463985][T20052] exFAT-fs (loop5): failed to recognize exfat type
[  565.499639][T20059] loop1: detected capacity change from 0 to 512
[  565.524672][T20059] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.6084: ea_inode with extended attributes
[  565.551866][T20059] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  565.552384][T20059] EXT4-fs (loop1): Remounting filesystem read-only
[  565.568111][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  565.568136][    C1] EXT4-fs (loop1): initial error at time 1788387125: ext4_xattr_inode_iget:441: inode 11
[  565.568168][    C1] EXT4-fs (loop1): last error at time 1788387125: ext4_xattr_inode_iget:441: inode 11
[  565.594973][T20059] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -30)
[  565.604704][T20059] EXT4-fs (loop1): 1 orphan inode deleted
[  565.637393][T20059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  565.765217][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  565.851383][ T5897] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  566.033046][ T5897] usb 6-1: Using ep0 maxpacket: 8
[  566.048445][ T5897] usb 6-1: unable to get BOS descriptor or descriptor too short
[  566.053576][T20079] netlink: 404 bytes leftover after parsing attributes in process `syz.3.6093'.
[  566.066225][ T5897] usb 6-1: config 4 has an invalid interface number: 147 but max is 0
[  566.086138][ T5897] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  566.101100][ T5897] usb 6-1: config 4 has no interface number 0
[  566.120468][ T5897] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  566.141669][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.152500][ T5918] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[  566.171359][ T5897] usb 6-1: Product: syz
[  566.181642][ T5897] usb 6-1: Manufacturer: syz
[  566.192227][ T5897] usb 6-1: SerialNumber: syz
[  566.349997][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  566.379985][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  566.401155][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  566.419597][ T5918] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  566.429024][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.437028][ T5918] usb 2-1: Product: syz
[  566.446703][ T5897] uvcvideo 6-1:4.147: Found multiple Units with ID 6
[  566.452185][ T5918] usb 2-1: Manufacturer: syz
[  566.458017][ T5918] usb 2-1: SerialNumber: syz
[  566.474775][ T5918] usb 2-1: config 0 descriptor??
[  566.479731][ T5897] uvcvideo 6-1:4.147: Found UVC 0.00 device syz (04f2:b746)
[  566.503567][ T5897] uvcvideo 6-1:4.147: Entity type for entity Output 33017 was not initialized!
[  566.517320][ T5897] uvcvideo 6-1:4.147: Failed to create links for entity 33017
[  566.525092][ T5897] uvcvideo 6-1:4.147: Failed to register entities (-22).
[  566.536961][T20076] loop4: detected capacity change from 0 to 40427
[  566.555699][T20076] F2FS-fs (loop4): Image doesn't support compression
[  566.561291][ T5897] usb 6-1: USB disconnect, device number 10
[  566.563409][T20076] F2FS-fs (loop4): build fault injection type: 0x35f8
[  566.583289][T20076] F2FS-fs (loop4): invalid crc value
[  566.663926][ T5946] usb 1-1: new low-speed USB device number 113 using dummy_hcd
[  566.737432][T20076] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  566.744770][T20094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6100'.
[  566.747036][T20076] F2FS-fs (loop4): Start checkpoint disabled!
[  566.765800][T20076] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  566.773932][T20076] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  566.790316][T20094] bond0: option resend_igmp: invalid value (511)
[  566.796923][T20094] bond0: option resend_igmp: allowed values 0 - 255
[  566.810103][T14419] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807e0ac000 (14)(syz2) rdma_ndev=ffff888076434000 (24)(ip6_vti0) cookie=ffff88807904c000 (42)(bond0) start
[  566.826618][ T5946] usb 1-1: config index 0 descriptor too short (expected 6427, got 27)
[  566.830035][T20094] bond0 (unregistering): Released all slaves
[  566.841186][ T5946] usb 1-1: config 0 has an invalid interface number: 21 but max is 0
[  566.841211][ T5946] usb 1-1: config 0 has no interface number 0
[  566.841252][ T5946] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  566.841337][ T5946] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  566.841376][ T5946] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  566.841405][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.848568][T14419] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807e0ac000 (14)(syz2) rdma_ndev=ffff888076434000 (24)(ip6_vti0) cookie=ffff88807904c000 (37)(bond0) end
[  566.918404][ T5946] usb 1-1: config 0 descriptor??
[  567.166143][T20097] netlink: 10 bytes leftover after parsing attributes in process `syz.5.6102'.
[  567.370419][T20101] loop5: detected capacity change from 0 to 256
[  567.396914][ T5946] usb 1-1: USB disconnect, device number 113
[  567.457146][T20107] xt_connbytes: Forcing CT accounting to be enabled
[  567.475158][T20107] xt_NFQUEUE: number of total queues is 0
[  567.709740][T20115] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6109'.
[  567.758402][   T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807e0ac000 (14)(syz2) rdma_ndev=ffff888076434000 (24)(ip6_vti0) cookie=ffff88807edcc000 (12)(bridge1) start
[  567.824340][   T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807e0ac000 (14)(syz2) rdma_ndev=ffff888076434000 (24)(ip6_vti0) cookie=ffff88807edcc000 (5)(bridge1) end
[  567.859814][T20119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6112'.
[  567.895081][T20119] openvswitch: netlink: Invalid VLAN frame
[  568.512458][T20145] netlink: 'syz.0.6124': attribute type 3 has an invalid length.
[  568.533224][T20143] loop1: detected capacity change from 0 to 512
[  568.574937][T20143] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  568.620433][T20143] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  568.653043][T20143] EXT4-fs (loop1): 1 truncate cleaned up
[  568.670090][T20143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  568.898822][T20159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6129'.
[  568.984541][T20123] loop5: detected capacity change from 0 to 32768
[  569.088462][T20163] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  569.432853][T20176] veth1_vlan: left promiscuous mode
[  569.470955][T14419] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807e0ac000 (14)(syz2) rdma_ndev=ffff888076434000 (24)(ip6_vti0) cookie=ffff888058470000 (21)(macvlan1) start
[  569.500198][T14419] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807e0ac000 (14)(syz2) rdma_ndev=ffff888076434000 (24)(ip6_vti0) cookie=ffff888058470000 (7)(macvlan1) end
[  569.507575][ T1215] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  569.689385][ T1215] usb 6-1: Using ep0 maxpacket: 8
[  569.714272][ T1215] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  569.723362][T20061] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  569.749714][ T1215] usb 6-1: config 0 has no interface number 0
[  569.769452][T20188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6143'.
[  569.770577][ T1215] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  569.796411][T20061] EXT4-fs (loop1): Remounting filesystem read-only
[  569.810778][ T1215] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  569.830917][ T1215] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  569.867853][ T1215] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  569.892566][ T1215] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  569.947523][ T1215] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  569.958030][ T1215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.971984][ T1215] usb 6-1: config 0 descriptor??
[  569.989593][ T1215] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  570.162313][T20199] loop3: detected capacity change from 0 to 4096
[  570.231909][T20199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  570.247498][T20168] ldusb 6-1:0.55: Couldn't submit interrupt_in_urb -90
[  570.257220][ T5945] usb 6-1: USB disconnect, device number 11
[  570.283390][ T5945] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  570.379825][T20199] EXT4-fs error (device loop3): ext4_empty_dir:3094: inode #12: block 80: comm syz.3.6149: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0
[  570.431433][T20199] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #12: comm syz.3.6149: directory missing '..'
[  570.514087][ T5846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  570.608782][ T5946] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[  570.653144][T20216] netlink: 'syz.3.6156': attribute type 1 has an invalid length.
[  570.673712][T20216] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6156'.
[  570.690317][T20216] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6156'.
[  570.700914][T20216] netlink: 658 bytes leftover after parsing attributes in process `syz.3.6156'.
[  570.722522][T20218] loop4: detected capacity change from 0 to 256
[  570.751885][T20218] exfat: Deprecated parameter 'namecase'
[  570.783010][ T5946] usb 1-1: config 0 has an invalid interface number: 117 but max is 0
[  570.798717][ T5946] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  570.801213][T20218] exfat: Deprecated parameter 'utf8'
[  570.831029][ T5946] usb 1-1: config 0 has no interface number 0
[  570.841741][ T5946] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  570.889450][ T5946] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  570.915067][T20218] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d)
[  570.946249][ T5946] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  570.961236][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.025789][ T5946] usb 1-1: Product: syz
[  571.031068][ T5946] usb 1-1: Manufacturer: syz
[  571.035743][ T5946] usb 1-1: SerialNumber: syz
[  571.091972][ T5946] usb 1-1: config 0 descriptor??
[  571.621467][ T1215] usb 1-1: USB disconnect, device number 114
[  571.632136][T20244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6171'.
[  571.736666][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  572.077490][T20256] loop3: detected capacity change from 0 to 4096
[  572.109116][T20262] netlink: 'syz.5.6179': attribute type 16 has an invalid length.
[  572.132865][T20262] netlink: 'syz.5.6179': attribute type 17 has an invalid length.
[  572.233400][T20262] bridge0: port 1(bridge_slave_0) entered disabled state
[  572.249334][T20262] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.350228][T20266] loop4: detected capacity change from 0 to 1024
[  572.353767][T20256] ntfs3(loop3): ino=5, "/" indx_read_ra
[  572.397181][T20256] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  572.519974][   T35] hfsplus: b-tree write err: -5, ino 25
[  572.550349][   T35] hfsplus: b-tree write err: -5, ino 4
[  572.563653][   T35] hfsplus: b-tree write err: -5, ino 2
[  572.959742][T20284] loop1: detected capacity change from 0 to 764
[  573.102989][T20294] loop3: detected capacity change from 0 to 512
[  573.125582][T20296] __nla_validate_parse: 1 callbacks suppressed
[  573.125602][T20296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6196'.
[  573.152991][T20294] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  573.193023][T20294] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=284ee01c, mo2=0002]
[  573.232036][T20294] System zones: 1-12
[  573.236221][T20294] EXT4-fs (loop3): orphan cleanup on readonly fs
[  573.262348][T20294] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.6195: invalid indirect mapped block 12 (level 1)
[  573.276182][T20294] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  573.281245][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  573.296894][    C1] EXT4-fs (loop3): initial error at time 1788387132: ext4_free_branches:1023: inode 11
[  573.306622][    C1] EXT4-fs (loop3): last error at time 1788387132: ext4_free_branches:1023: inode 11
[  573.328705][T20294] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.6195: invalid indirect mapped block 2 (level 2)
[  573.342238][T20294] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  573.343574][T20294] EXT4-fs (loop3): 1 truncate cleaned up
[  573.361573][T20294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  573.509088][ T5846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  573.979302][T20319] loop3: detected capacity change from 0 to 1024
[  576.025844][T20385] loop5: detected capacity change from 0 to 1764
[  576.038248][T20386] loop4: detected capacity change from 0 to 256
[  576.796762][T20418] loop3: detected capacity change from 0 to 2048
[  576.833038][T20420] x_tables: ip_tables: osf match: only valid for protocol 6
[  576.873909][T20418] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  576.921895][ T6069] udevd[6069]: incorrect nilfs2 checksum on /dev/loop3
[  576.972409][T20425] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  577.033116][T20418] NILFS error (device loop3): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12
[  577.109513][T20418] Remounting filesystem read-only
[  577.417366][T20435] loop1: detected capacity change from 0 to 4096
[  577.476084][T20435] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  577.504443][ T5918] iguanair 2-1:0.0: failed to get version
[  577.535620][ T5918] iguanair 2-1:0.0: probe with driver iguanair failed with error -110
[  577.555284][ T5918] usb 2-1: USB disconnect, device number 115
[  577.586028][T20451] netlink: 'syz.0.6271': attribute type 1 has an invalid length.
[  577.600959][T20450] ieee802154 phy0 wpan0: encryption failed: -22
[  577.635104][T20451] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6271'.
[  577.679245][T20451] NCSI netlink: No device for ifindex 0
[  577.848086][T20461] xt_socket: unknown flags 0x4
[  577.921437][   T29] audit: type=1326 audit(1788387136.857:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20464 comm="syz.0.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afab9c629 code=0x7ffc0000
[  578.004291][   T29] audit: type=1326 audit(1788387136.857:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20464 comm="syz.0.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afab9c629 code=0x7ffc0000
[  578.074214][   T29] audit: type=1326 audit(1788387136.904:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20464 comm="syz.0.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f5afab9c629 code=0x7ffc0000
[  578.177113][   T29] audit: type=1326 audit(1788387136.904:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20464 comm="syz.0.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afab9c629 code=0x7ffc0000
[  578.255567][   T29] audit: type=1326 audit(1788387136.904:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20464 comm="syz.0.6279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5afab9c629 code=0x7ffc0000
[  578.384864][T20491] loop3: detected capacity change from 0 to 256
[  578.482043][T20491] FAT-fs (loop3): Directory bread(block 64) failed
[  578.510226][T20491] FAT-fs (loop3): Directory bread(block 65) failed
[  578.545518][T20491] FAT-fs (loop3): Directory bread(block 66) failed
[  578.583961][T20491] FAT-fs (loop3): Directory bread(block 67) failed
[  578.608170][T20491] FAT-fs (loop3): Directory bread(block 68) failed
[  578.614751][T20491] FAT-fs (loop3): Directory bread(block 69) failed
[  578.658180][T20491] FAT-fs (loop3): Directory bread(block 70) failed
[  578.682680][T20491] FAT-fs (loop3): Directory bread(block 71) failed
[  578.718781][T20491] FAT-fs (loop3): Directory bread(block 72) failed
[  578.745831][T20491] FAT-fs (loop3): Directory bread(block 73) failed
[  578.759984][T20505] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  578.766576][T20491] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  579.032015][T20521] loop1: detected capacity change from 0 to 1024
[  579.098442][T20521] hfsplus: catalog name length corrupted
[  579.229288][T14419] hfsplus: b-tree write err: -5, ino 25
[  579.267393][T14419] hfsplus: b-tree write err: -5, ino 4
[  579.289648][T14419] hfsplus: b-tree write err: -5, ino 2
[  579.502005][T20546] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  579.666769][T20553] xt_limit: Overflow, try lower: 31324/2147483648
[  579.972519][T20567] netlink: 'syz.0.6330': attribute type 10 has an invalid length.
[  580.079884][T20567] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  580.148081][T20573] loop5: detected capacity change from 0 to 2048
[  580.205223][T20573] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  580.499232][T16039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  580.522327][T20590] netlink: 'syz.1.6339': attribute type 10 has an invalid length.
[  580.544403][T20590] hsr0: entered promiscuous mode
[  580.560933][T20590] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  580.587546][T20590] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  580.602395][T20590] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  580.676025][T20595] program syz.5.6341 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  580.708963][T20595] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  581.160400][ T5945] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[  581.178093][T20622] usb usb9: usbfs: process 20622 (syz.0.6355) did not claim interface 0 before use
[  581.229205][T20625] loop3: detected capacity change from 0 to 512
[  581.272309][T20625] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  581.333141][ T5945] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  581.362074][T20625] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128
[  581.364351][ T5945] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  581.380663][T20631] loop5: detected capacity change from 0 to 512
[  581.396997][ T5945] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  581.415924][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.437481][T20631] EXT4-fs (loop5): Test dummy encryption mode enabled
[  581.448406][T20634] IPv6: NLM_F_CREATE should be specified when creating new route
[  581.464100][   T29] audit: type=1326 audit(1788387140.187:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20635 comm="syz.4.6362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb339c629 code=0x7ffc0000
[  581.480151][T20631] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  581.496834][T20606] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  581.600933][   T29] audit: type=1326 audit(1788387140.206:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20635 comm="syz.4.6362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb339c629 code=0x7ffc0000
[  581.604038][ T5945] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  581.630971][   T29] audit: type=1326 audit(1788387140.234:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20635 comm="syz.4.6362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7faeb339c629 code=0x7ffc0000
[  581.700987][   T29] audit: type=1326 audit(1788387140.234:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20635 comm="syz.4.6362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb339c629 code=0x7ffc0000
[  581.731122][T20631] EXT4-fs (loop5): Couldn't remount RDWR because of unprocessed orphan inode list.  Please umount/remount instead
[  581.793533][   T29] audit: type=1326 audit(1788387140.486:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20643 comm="syz.3.6364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19bab9c629 code=0x7ffc0000
[  581.890009][T16039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  582.022608][ T5945] usb 2-1: USB disconnect, device number 116
[  582.101186][T20654] loop5: detected capacity change from 0 to 1024
[  582.136482][T20654] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  582.227659][T20654] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #3: block 1: comm syz.5.6368: lblock 1 mapped to illegal pblock 1 (length 1)
[  582.275549][T20654] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  582.276588][T20654] EXT4-fs error (device loop5): ext4_acquire_dquot:7003: comm syz.5.6368: Failed to acquire dquot type 0
[  582.285718][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  582.285746][    C1] EXT4-fs (loop5): initial error at time 1788387140: ext4_map_blocks:818: inode 3: block 1
[  582.285783][    C1] EXT4-fs (loop5): last error at time 1788387140: ext4_map_blocks:818: inode 3: block 1
[  582.344246][T20654] loop5: lost filesystem error report for type 5 error -117
[  582.349543][T20654] EXT4-fs error (device loop5): ext4_free_blocks:6726: comm syz.5.6368: Freeing blocks not in datazone - block = 0, count = 4096
[  582.376725][T20654] loop5: lost filesystem error report for type 5 error -117
[  582.380179][T20654] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.6368: Invalid inode bitmap blk 0 in block_group 0
[  582.402194][T14419] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  582.425053][T20654] loop5: lost filesystem error report for type 5 error -117
[  582.428251][T20654] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[  582.437127][T14419] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  582.474873][T20654] loop5: lost filesystem error report for type 5 error -117
[  582.479521][T14419] EXT4-fs error (device loop5): ext4_release_dquot:7039: comm kworker/u8:0: Failed to release dquot type 0
[  582.485179][T20654] EXT4-fs (loop5): 1 orphan inode deleted
[  582.514648][T20654] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  582.528733][T14419] loop5: lost filesystem error report for type 5 error -117
[  582.660236][T20678] binder: 20676:20678 ioctl 400c620e 200000000240 returned -22
[  582.690098][T20654] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000.
[  582.810455][T16039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  582.847865][T20689] netlink: 'syz.0.6389': attribute type 5 has an invalid length.
[  583.095805][ T5945] usb 2-1: new full-speed USB device number 117 using dummy_hcd
[  583.299815][ T5945] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  583.326115][ T5945] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1
[  583.329390][T20718] ÿ: renamed from bond_slave_0 (while UP)
[  583.371626][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10
[  583.405712][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 10
[  583.434262][ T5945] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  583.459357][ T5945] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  583.505418][ T5945] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  583.529261][ T5945] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  583.544590][ T5945] usb 2-1: Manufacturer: syz
[  583.580633][ T5945] usb 2-1: config 0 descriptor??
[  583.862493][ T5945] usb 2-1: USB disconnect, device number 117
[  584.052355][T20740] netlink: 'syz.4.6413': attribute type 16 has an invalid length.
[  584.089883][T20740] netlink: 'syz.4.6413': attribute type 17 has an invalid length.
[  584.159011][T20740] bridge0: port 1(bridge_slave_0) entered disabled state
[  584.191471][T20740] bridge0: port 2(bridge_slave_1) entered disabled state
[  584.235795][T20726] loop5: detected capacity change from 0 to 40427
[  584.256428][T20726] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  584.265388][T20726] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  584.282356][T20742] geneve3: entered promiscuous mode
[  584.534237][T20726] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  584.573843][T20726] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  584.586503][T20756] xt_CT: You must specify a L4 protocol and not use inversions on it
[  584.596421][T20726] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  584.687448][T20764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6423'.
[  584.827188][ T5904] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[  585.018128][ T5904] usb 2-1: Using ep0 maxpacket: 8
[  585.036275][ T5904] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  585.057049][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  585.097913][ T5904] usb 2-1: Product: syz
[  585.102386][ T5904] usb 2-1: Manufacturer: syz
[  585.121971][ T5904] usb 2-1: SerialNumber: syz
[  585.146061][ T5904] usb 2-1: config 0 descriptor??
[  585.173488][ T5904] gspca_main: sq905-2.14.0 probing 2770:9120
[  585.304635][T20787] loop4: detected capacity change from 0 to 4096
[  585.326530][T20787] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  585.426225][T20787] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  585.448308][T20787] ntfs3(loop4): ino=19, mi_enum_attr
[  585.472056][T20793] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6429'.
[  585.570005][T20795] loop3: detected capacity change from 0 to 4096
[  585.587428][T20795] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  585.614146][ T5904] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71)
[  585.626407][ T5904] sq905 2-1:0.0: probe with driver sq905 failed with error -71
[  585.673304][ T5904] usb 2-1: USB disconnect, device number 118
[  585.673809][T20795] ntfs3(loop3): ino=3, ntfs_set_state failed, -22.
[  585.711940][T20795] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  585.801286][T20795] ntfs3(loop3): ino=1e, mi_enum_attr
[  585.807138][T20795] ntfs3(loop3): ino=1e, mi_enum_attr
[  585.834401][T20803] loop5: detected capacity change from 0 to 128
[  585.928495][T14419] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22.
[  585.936014][T20801] loop4: detected capacity change from 0 to 8192
[  585.937023][ T5846] ntfs3(loop3): ino=3, ntfs_set_state failed, -22.
[  585.983962][T20801]  loop4: p2 p3 p4[EZD]
[  585.989815][T20801] loop4: p3 start 360447 is beyond EOD, truncated
[  585.999033][ T5846] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  586.015154][T20801] loop4: p4 size 262912 extends beyond EOD, truncated
[  586.024612][ T5846] ntfs3(loop3): ino=3, ntfs_set_state failed, -22.
[  586.032599][T14419] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22.
[  586.076261][T20807] loop5: detected capacity change from 0 to 256
[  586.108677][T20807] exfat: Deprecated parameter 'utf8'
[  586.149057][T20807] exfat: Deprecated parameter 'utf8'
[  586.180244][T20807] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  586.235301][T20807] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  586.313219][ T5904] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  586.408631][T20818] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6449'.
[  586.508555][ T5904] usb 5-1: Using ep0 maxpacket: 32
[  586.536160][ T5904] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  586.554463][ T5904] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  586.575686][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.590861][T20823] loop3: detected capacity change from 0 to 2048
[  586.598955][ T5904] usb 5-1: Product: syz
[  586.607597][ T5904] usb 5-1: Manufacturer: syz
[  586.624118][ T5904] usb 5-1: SerialNumber: syz
[  586.646744][ T5904] usb 5-1: config 0 descriptor??
[  586.663420][ T5904] cdc_ether 5-1:0.0: invalid descriptor buffer length
[  586.688271][ T5904] usb 5-1: bad CDC descriptors
[  586.697700][T20823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  586.699499][ T5904] usb 5-1: unsupported MDLM descriptors
[  586.727624][T20823] ext4 filesystem being mounted at /1331/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  586.780525][T20823] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6451: bg 0: block 345: padding at end of block bitmap is not set
[  586.896484][ T5945] usb 5-1: USB disconnect, device number 79
[  586.897622][ T5846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  587.053890][T20843] openvswitch: netlink: Duplicate or invalid key (type 0).
[  587.072326][T20843] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  587.119769][T20842] loop3: detected capacity change from 0 to 8192
[  587.126343][ T5897] usb 1-1: new full-speed USB device number 115 using dummy_hcd
[  587.202501][T20835] loop1: detected capacity change from 0 to 32768
[  587.224289][T20835] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6456 (20835)
[  587.266322][T20835] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  587.278013][T20835] BTRFS info (device loop1): using xxhash64 checksum algorithm
[  587.322430][ T5897] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  587.354824][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  587.372285][ T5897] usb 1-1: Product: syz
[  587.383117][ T5897] usb 1-1: Manufacturer: syz
[  587.392879][ T5897] usb 1-1: SerialNumber: syz
[  587.394305][T20835] BTRFS info (device loop1): enabling ssd optimizations
[  587.437342][ T5897] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  587.453198][T20835] BTRFS info (device loop1): turning on async discard
[  587.472579][T20864] veth0_vlan: left promiscuous mode
[  587.482794][T20863] loop5: detected capacity change from 0 to 512
[  587.482834][T20835] BTRFS info (device loop1): enabling free space tree
[  587.496958][T20864] veth0_vlan: entered promiscuous mode
[  587.512184][T20863] EXT4-fs: Ignoring removed orlov option
[  587.517870][T20863] EXT4-fs: Ignoring removed i_version option
[  587.528617][T20863] EXT4-fs: Ignoring removed nomblk_io_submit option
[  587.650208][T20863] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  587.665346][T20863] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002]
[  587.682582][T20863] EXT4-fs (loop5): orphan cleanup on readonly fs
[  587.704657][ T5842] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  587.729723][T20863] __quota_error: 7 callbacks suppressed
[  587.729741][T20863] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0
[  587.760729][T20863] EXT4-fs warning (device loop5): ext4_enable_quotas:7238: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  587.782236][T20863] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  587.801351][T20863] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6463: bg 0: block 40: padding at end of block bitmap is not set
[  587.852870][T20863] loop5: lost filesystem error report for type 5 error -117
[  587.863599][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  587.877373][    C0] EXT4-fs (loop5): initial error at time 1788387146: ext4_validate_block_bitmap:441
[  587.886814][    C0] EXT4-fs (loop5): last error at time 1788387146: ext4_validate_block_bitmap:441
[  587.910310][ T5897] vp7045: USB control message 'in' went wrong.
[  587.916535][ T5897] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  587.927962][T20863] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6687: Corrupt filesystem
[  587.962206][ T5897] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  587.999756][T20873] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  588.001215][T20874] Cannot find del_set index 286 as target
[  588.008314][T20863] loop5: lost filesystem error report for type 5 error -117
[  588.021669][T20863] EXT4-fs (loop5): 1 truncate cleaned up
[  588.073555][ T5897] usb 1-1: USB disconnect, device number 115
[  588.084380][T20863] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  588.199916][T20863] EXT4-fs error (device loop5): ext4_encrypted_get_link:46: inode #16: comm syz.5.6463: bad symlink.
[  588.316610][T16039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  588.460296][   T29] audit: type=1326 audit(1788387146.725:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20887 comm="syz.5.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1da79c629 code=0x7ffc0000
[  588.578076][   T29] audit: type=1326 audit(1788387146.772:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20887 comm="syz.5.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1da79c629 code=0x7ffc0000
[  588.665130][   T29] audit: type=1326 audit(1788387146.781:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20887 comm="syz.5.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fc1da79c629 code=0x7ffc0000
[  588.758475][   T29] audit: type=1326 audit(1788387146.781:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20887 comm="syz.5.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1da79c629 code=0x7ffc0000
[  588.766410][T20896] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  588.883496][   T29] audit: type=1326 audit(1788387146.781:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20887 comm="syz.5.6473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1da79c629 code=0x7ffc0000
[  589.042454][T20896] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  589.207351][T20884] (syz.1.6472,20884,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  589.267376][T20884] (syz.1.6472,20884,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  589.383067][T20884] JBD2: Ignoring recovery information on journal
[  589.514834][T20884] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  589.716531][T20935] set_capacity_and_notify: 2 callbacks suppressed
[  589.716552][T20935] loop4: detected capacity change from 0 to 64
[  589.763016][T20935] syz.4.6491: attempt to access beyond end of device
[  589.763016][T20935] loop4: rw=8388608, sector=65534, nr_sectors = 2 limit=64
[  589.807393][T20935] Buffer I/O error on dev loop4, logical block 32767, async page read
[  589.841627][T20935] syz.4.6491: attempt to access beyond end of device
[  589.841627][T20935] loop4: rw=8388608, sector=65534, nr_sectors = 2 limit=64
[  589.879065][ T5842] ocfs2: Unmounting device (7,1) on (node local)
[  589.884363][T20935] Buffer I/O error on dev loop4, logical block 32767, async page read
[  589.902531][T20938] netlink: 'syz.0.6493': attribute type 4 has an invalid length.
[  589.937352][T20938] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.6493'.
[  590.188195][T20917] loop5: detected capacity change from 0 to 40427
[  590.215076][T20917] F2FS-fs (loop5): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[  590.238826][T20944] No such timeout policy "syz0"
[  590.248375][T20917] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  590.257165][T20917] F2FS-fs (loop5): build fault injection type: 0x6
[  590.284639][T20946] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6497'.
[  590.294625][T20917] F2FS-fs (loop5): invalid crc value
[  590.496742][T20917] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  590.506862][T20917] F2FS-fs (loop5): Start checkpoint disabled!
[  590.515970][T20917] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[  590.541343][T20917] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  590.554660][T20917] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  590.598269][T20958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6501'.
[  590.670835][T20917] syz.5.6485: attempt to access beyond end of device
[  590.670835][T20917] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  590.793357][ T3518] kworker/u8:10: attempt to access beyond end of device
[  590.793357][ T3518] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  590.842278][ T3518] CPU: 1 UID: 0 PID: 3518 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) 
[  590.842307][ T3518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  590.842318][ T3518] Workqueue: writeback wb_workfn (flush-7:5)
[  590.842347][ T3518] Call Trace:
[  590.842355][ T3518]  <TASK>
[  590.842363][ T3518]  dump_stack_lvl+0xe8/0x150
[  590.842393][ T3518]  f2fs_handle_critical_error+0x37c/0x540
[  590.842424][ T3518]  f2fs_write_end_io+0xcdb/0xff0
[  590.842463][ T3518]  __submit_merged_bio+0x256/0x700
[  590.842496][ T3518]  __submit_merged_write_cond+0x3c9/0x4e0
[  590.842530][ T3518]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  590.842580][ T3518]  f2fs_write_data_pages+0x2975/0x35e0
[  590.842597][ T3518]  ? unwind_next_frame+0xa5/0x23c0
[  590.842621][ T3518]  ? lock_release+0x4b/0x3d0
[  590.842678][ T3518]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  590.842711][ T3518]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  590.842769][ T3518]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  590.842818][ T3518]  ? __lock_acquire+0x6b5/0x2cf0
[  590.842864][ T3518]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  590.842889][ T3518]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  590.842909][ T3518]  do_writepages+0x32e/0x550
[  590.842942][ T3518]  ? reacquire_held_locks+0x104/0x190
[  590.842967][ T3518]  ? writeback_sb_inodes+0x477/0x1a20
[  590.842997][ T3518]  __writeback_single_inode+0x133/0x11a0
[  590.843022][ T3518]  ? do_raw_spin_unlock+0xf5/0x210
[  590.843047][ T3518]  writeback_sb_inodes+0x992/0x1a20
[  590.843094][ T3518]  ? __lock_acquire+0x6b5/0x2cf0
[  590.843124][ T3518]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  590.843145][ T3518]  ? do_raw_spin_lock+0x12b/0x2f0
[  590.843210][ T3518]  ? rcu_is_watching+0x15/0xb0
[  590.843246][ T3518]  wb_writeback+0x456/0xb70
[  590.843277][ T3518]  ? queue_io+0x231/0x4a0
[  590.843309][ T3518]  ? __pfx_wb_writeback+0x10/0x10
[  590.843329][ T3518]  ? do_raw_spin_lock+0x12b/0x2f0
[  590.843369][ T3518]  wb_workfn+0x414/0xf50
[  590.843391][ T3518]  ? look_up_lock_class+0x57/0x110
[  590.843429][ T3518]  ? __pfx_wb_workfn+0x10/0x10
[  590.843451][ T3518]  ? do_raw_spin_lock+0x12b/0x2f0
[  590.843474][ T3518]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  590.843518][ T3518]  ? process_one_work+0x87c/0x1650
[  590.843541][ T3518]  process_one_work+0x949/0x1650
[  590.843590][ T3518]  ? __pfx_process_one_work+0x10/0x10
[  590.843610][ T3518]  ? do_raw_spin_lock+0x12b/0x2f0
[  590.843648][ T3518]  worker_thread+0xb46/0x1140
[  590.843699][ T3518]  kthread+0x388/0x470
[  590.843719][ T3518]  ? __pfx_worker_thread+0x10/0x10
[  590.843741][ T3518]  ? __pfx_kthread+0x10/0x10
[  590.843762][ T3518]  ret_from_fork+0x51e/0xb90
[  590.843790][ T3518]  ? __pfx_ret_from_fork+0x10/0x10
[  590.843812][ T3518]  ? __switch_to+0xc7d/0x1450
[  590.843838][ T3518]  ? __pfx_kthread+0x10/0x10
[  590.843864][ T3518]  ret_from_fork_asm+0x1a/0x30
[  590.843899][ T3518]  </TASK>
[  591.119616][ T3518] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  591.289599][T20979] loop3: detected capacity change from 0 to 64
[  591.301304][T20979] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.	Mounting read-only.
[  591.312154][T20979] hfs: filesystem is marked locked, mounting read-only.
[  591.533700][T20986] syz.0.6514 uses old SIOCAX25GETINFO
[  591.607917][T20993] netlink: 'syz.4.6517': attribute type 3 has an invalid length.
[  591.641158][T20993] netlink: 666 bytes leftover after parsing attributes in process `syz.4.6517'.
[  591.704910][T20998] infiniband: Added to hash: ib_dev=ffff888037d78000 (0)() ndev=ffff88802a6da000 (20)(team_slave_0)
[  591.867227][T21005] netlink: 'syz.4.6524': attribute type 21 has an invalid length.
[  592.254573][T20998] infiniband !yz!: set active
[  592.259791][T20998] infiniband !yz!: added team_slave_0
[  592.289921][T20998] smbdirect: ib_dev[!yz!]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  592.305959][T20998] smbdirect: ib_dev[!yz!]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  592.331389][T20998] smbdirect: ib_dev[!yz!]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  592.387134][T21024] netlink: 'syz.0.6533': attribute type 23 has an invalid length.
[  592.429133][T20998] RDS/IB: !yz!: added
[  592.433206][T20998] smc: adding ib device !yz! with port count 1
[  592.487591][T21028] xt_hashlimit: Unknown mode mask 360, kernel too old?
[  592.515867][T20998] smc:    ib device !yz! port 1 has no pnetid
[  592.706248][ T6008] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  592.760235][T21039] loop3: detected capacity change from 0 to 4096
[  592.772590][T21034] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  592.784224][T21039] EXT4-fs (loop3): Test dummy encryption mode enabled
[  592.799644][T21039] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  592.810191][T21039] System zones: 0-5
[  592.821659][T21039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  592.864861][T21039] tmpfs: User quota inode hardlimit too large.
[  592.873873][T21034] bond1 (unregistering): Released all slaves
[  592.886093][T14419] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807e0ac000 (14)(syz2) rdma_ndev=ffff888076434000 (24)(ip6_vti0) cookie=ffff88807904c000 (37)(bond1) start
[  592.909670][ T6008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  592.919497][ T6008] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x52, changing to 0x2
[  592.939862][ T6008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  592.952169][T14419] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807e0ac000 (14)(syz2) rdma_ndev=ffff888076434000 (24)(ip6_vti0) cookie=ffff88807904c000 (5)(bond1) end
[  592.993314][ T6008] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  593.005628][ T6008] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  593.013659][ T6008] usb 5-1: Product: syz
[  593.016922][ T5846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  593.018468][T14419] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037d78000 (15)(!yz!) rdma_ndev=ffff88802a6da000 (22)(team_slave_0) cookie=ffff88807904c000 (3)(bond1) start
[  593.044340][ T6008] usb 5-1: Manufacturer: syz
[  593.049202][ T6008] usb 5-1: SerialNumber: syz
[  593.059863][ T6008] usb 5-1: config 0 descriptor??
[  593.076332][T14419] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037d78000 (15)(!yz!) rdma_ndev=ffff88802a6da000 (22)(team_slave_0) cookie=ffff88807904c000 (3)(bond1) end
[  593.470803][ T6008] usb 5-1: USB disconnect, device number 80
[  593.564087][ T6092] udevd[6092]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  593.902036][T21073] bridge0: port 1(bridge_slave_0) entered disabled state
[  593.949847][T21073] bridge0: port 2(bridge_slave_1) entered disabled state
[  593.992586][T21077] loop1: detected capacity change from 0 to 2048
[  594.037349][T21081] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  594.115929][T21077] NILFS (loop1): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0
[  594.172370][T21077] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  594.216637][T21077] Remounting filesystem read-only
[  594.250846][T21077] NILFS (loop1): bad btree node (ino=16, blocknr=12): level = 0, flags = 0x0, nchildren = 0
[  594.300017][T21077] NILFS error (device loop1): nilfs_bmap_last_key: broken bmap (inode number=16)
[  594.331576][T21077] NILFS (loop1): error -5 truncating bmap (ino=16)
[  594.397570][ T5842] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[  594.438210][ T5945] usb 5-1: new full-speed USB device number 81 using dummy_hcd
[  594.487435][T21094] loop1: detected capacity change from 0 to 256
[  594.539608][T21094] FAT-fs (loop1): Directory bread(block 64) failed
[  594.566309][T21094] FAT-fs (loop1): Directory bread(block 65) failed
[  594.597624][T21094] FAT-fs (loop1): Directory bread(block 66) failed
[  594.611683][ T5945] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64
[  594.626947][T21094] FAT-fs (loop1): Directory bread(block 67) failed
[  594.634935][ T5945] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  594.644907][T21094] FAT-fs (loop1): Directory bread(block 68) failed
[  594.668257][T21094] FAT-fs (loop1): Directory bread(block 69) failed
[  594.700127][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  594.708541][T21094] FAT-fs (loop1): Directory bread(block 70) failed
[  594.726749][T21094] FAT-fs (loop1): Directory bread(block 71) failed
[  594.740325][T21094] FAT-fs (loop1): Directory bread(block 72) failed
[  594.751248][T21094] FAT-fs (loop1): Directory bread(block 73) failed
[  594.751843][T21085] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  595.217425][T21116] netlink: 'syz.3.6577': attribute type 1 has an invalid length.
[  595.226317][T21116] netlink: 'syz.3.6577': attribute type 2 has an invalid length.
[  595.237325][T21116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6577'.
[  595.247346][ T5945] aiptek 5-1:17.0: Aiptek using 400 ms programming speed
[  595.279904][ T5945] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input52
[  595.394630][ T5945] usb 5-1: USB disconnect, device number 81
[  595.400618][    C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  595.731033][T21130] loop3: detected capacity change from 0 to 2048
[  595.753228][T21130] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  596.135565][T21142] loop4: detected capacity change from 0 to 4096
[  596.212746][T21142] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  596.236527][T21151] netlink: 'syz.1.6594': attribute type 30 has an invalid length.
[  596.249700][T21149] loop3: detected capacity change from 0 to 1024
[  596.322863][T21142] ntfs3(loop4): ino=19, mi_enum_attr
[  596.328224][T21142] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  596.479938][T21142] ntfs3(loop4): failed to convert "c46c" to iso8859-4
[  596.511230][T21142] ntfs3(loop4): ino=20, mi_enum_attr
[  596.908025][T21179] xt_hashlimit: max too large, truncated to 1048576
[  596.916748][T21181] loop4: detected capacity change from 0 to 1024
[  597.014564][T21181] hfsplus: keylen 65060 too large
[  597.161569][T21155] loop5: detected capacity change from 0 to 32768
[  597.215630][T21155] JBD2: Ignoring recovery information on journal
[  597.312861][T21155] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  597.621160][T21199] loop4: detected capacity change from 0 to 4096
[  597.641156][T21199] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  597.653457][T16039] ocfs2: Unmounting device (7,5) on (node local)
[  598.095960][T21212] can: request_module (can-proto-0) failed.
[  598.664933][T21244] loop5: detected capacity change from 0 to 256
[  598.699352][T21244] exfat: Deprecated parameter 'namecase'
[  598.762696][T21244] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  598.779229][ T1033] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807e0ac000 (14)(syz2) rdma_ndev=ffff888076434000 (24)(ip6_vti0) cookie=ffff888068b70000 (6)(bridge3) start
[  598.807882][ T1033] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807e0ac000 (14)(syz2) rdma_ndev=ffff888076434000 (24)(ip6_vti0) cookie=ffff888068b70000 (6)(bridge3) end
[  598.825185][ T1033] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037d78000 (14)(!yz!) rdma_ndev=ffff88802a6da000 (21)(team_slave_0) cookie=ffff888068b70000 (6)(bridge3) start
[  598.852637][ T1033] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037d78000 (14)(!yz!) rdma_ndev=ffff88802a6da000 (21)(team_slave_0) cookie=ffff888068b70000 (6)(bridge3) end
[  599.325855][T21262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6646'.
[  599.406046][T21256] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  599.532535][ T1033] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807e0ac000 (14)(syz2) rdma_ndev=ffff888076434000 (24)(ip6_vti0) cookie=ffff88802afc4000 (37)(bond1) start
[  599.552487][T21256] bond1 (unregistering): Released all slaves
[  599.596586][ T1033] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807e0ac000 (14)(syz2) rdma_ndev=ffff888076434000 (24)(ip6_vti0) cookie=ffff88802afc4000 (33)(bond1) end
[  599.655111][ T1033] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037d78000 (14)(!yz!) rdma_ndev=ffff88802a6da000 (21)(team_slave_0) cookie=ffff88802afc4000 (5)(bond1) start
[  599.692287][ T1033] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888037d78000 (14)(!yz!) rdma_ndev=ffff88802a6da000 (21)(team_slave_0) cookie=ffff88802afc4000 (3)(bond1) end
[  599.779088][T21283] loop3: detected capacity change from 0 to 512
[  599.786728][T21283] EXT4-fs: Ignoring removed nomblk_io_submit option
[  599.805963][T21283] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.6656: corrupted in-inode xattr: e_value size too large
[  599.827592][ T5904] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  599.841107][T21283] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  599.841492][T21283] EXT4-fs (loop3): Remounting filesystem read-only
[  599.850693][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  599.850715][    C1] EXT4-fs (loop3): initial error at time 1788387157: ext4_iget_extra_inode:5025: inode 15
[  599.850749][    C1] EXT4-fs (loop3): last error at time 1788387157: ext4_iget_extra_inode:5025: inode 15
[  599.888117][T21283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  600.008977][ T5904] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  600.042275][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.050314][ T5904] usb 5-1: Product: syz
[  600.056660][ T5846] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  600.099571][ T5904] usb 5-1: Manufacturer: syz
[  600.114932][ T5904] usb 5-1: SerialNumber: syz
[  600.180236][ T5904] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  600.213290][ T1215] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  600.254798][T19812] Bluetooth: hci1: command 0x080f tx timeout
[  600.631891][T21317] xt_connbytes: Forcing CT accounting to be enabled
[  600.705638][ T6008] usb 5-1: USB disconnect, device number 82
[  600.798208][T21297] loop5: detected capacity change from 0 to 32768
[  600.875492][   T29] audit: type=1800 audit(1788387158.343:114): pid=21297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6662" name="file1" dev="loop5" ino=4 res=0 errno=0
[  600.921720][T21330] befs: (loop3): No write support. Marking filesystem read-only
[  600.931389][T21330] befs: (loop3): unable to read superblock
[  601.375256][ T1215] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  601.420362][ T1215] ath9k_htc: Failed to initialize the device
[  601.456675][ T6008] usb 5-1: ath9k_htc: USB layer deinitialized
[  601.559167][T21364] netlink: 308 bytes leftover after parsing attributes in process `syz.4.6695'.
[  601.585665][T21364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6695'.
[  601.629573][T21364] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  602.222741][T21401] loop4: detected capacity change from 0 to 64
[  602.539036][T21415] netlink: 'syz.3.6720': attribute type 7 has an invalid length.
[  602.782638][T21389] loop5: detected capacity change from 0 to 40427
[  602.804910][T21389] F2FS-fs (loop5): build fault injection rate: 690
[  602.828076][T21389] F2FS-fs (loop5): invalid crc value
[  602.840486][T21431] netlink: 'syz.0.6726': attribute type 1 has an invalid length.
[  602.853912][T21431] netlink: 16949 bytes leftover after parsing attributes in process `syz.0.6726'.
[  602.883831][ T6008] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  602.985225][T21389] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  603.002828][ T5897] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[  603.013603][T21389] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  603.080176][ T6008] usb 5-1: Using ep0 maxpacket: 8
[  603.091388][ T6008] usb 5-1: config 0 has an invalid interface number: 181 but max is 0
[  603.114138][ T6008] usb 5-1: config 0 has no interface number 0
[  603.120607][ T6008] usb 5-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=bc.36
[  603.152994][ T6008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  603.173581][ T5897] usb 4-1: Using ep0 maxpacket: 32
[  603.182060][ T6008] usb 5-1: config 0 descriptor??
[  603.193238][ T5897] usb 4-1: config 4 has an invalid interface number: 228 but max is 0
[  603.202205][ T5897] usb 4-1: config 4 has no interface number 0
[  603.215638][ T6008] gspca_main: STV06xx-2.14.0 probing 046d:08f6
[  603.221902][ T6008] gspca_stv06xx: st6422 sensor detected
[  603.234478][ T5897] usb 4-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid wMaxPacketSize 0
[  603.255508][ T5897] usb 4-1: config 4 interface 228 altsetting 68 bulk endpoint 0x7 has invalid maxpacket 0
[  603.276974][ T5897] usb 4-1: config 4 interface 228 has no altsetting 0
[  603.295634][ T5897] usb 4-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8
[  603.312558][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3
[  603.338583][ T5897] usb 4-1: Product: syz
[  603.352830][ T5897] usb 4-1: Manufacturer: syz
[  603.364678][ T5897] usb 4-1: SerialNumber: syz
[  603.756406][ T6008] STV06xx 5-1:0.181: probe with driver STV06xx failed with error -71
[  603.776239][ T6008] usb 5-1: unknown interface protocol 0xa0, assuming v1
[  603.793793][ T6008] usb 5-1: cannot find UAC_HEADER
[  603.809304][ T5897] usb 4-1: USB disconnect, device number 119
[  603.854230][ T6069] udevd[6069]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  603.979007][ T6008] snd-usb-audio 5-1:0.181: probe with driver snd-usb-audio failed with error -22
[  603.994912][ T6008] usb 5-1: USB disconnect, device number 83
[  604.046045][T21475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6746'.
[  604.281484][T21489] loop3: detected capacity change from 0 to 64
[  604.948240][T21527] loop1: detected capacity change from 0 to 8
[  604.969746][T21527] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  604.999383][ T6069] udevd[6069]: incorrect cramfs checksum on /dev/loop1
[  605.028582][T21530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6773'.
[  605.041740][ T6069] udevd[6069]: incorrect cramfs checksum on /dev/loop1
[  605.050497][T21527] cramfs: Error -5 while decompressing!
[  605.064500][T21527] cramfs: ffffffff9a3b7c68(26)->ffff88804f522000(4096)
[  605.076658][T21532] netlink: 6032 bytes leftover after parsing attributes in process `syz.5.6774'.
[  605.085913][T21527] cramfs: Error -3 while decompressing!
[  605.107099][T21527] cramfs: ffffffff9a3b7c82(26)->ffff88804f8cf000(4096)
[  605.117998][T21527] cramfs: Error -3 while decompressing!
[  605.136301][T21527] cramfs: ffffffff9a3b7c9c(16)->ffff88804f8cd000(4096)
[  605.147170][T21527] cramfs: Error -5 while decompressing!
[  605.168220][T21527] cramfs: ffffffff9a3b7c68(26)->ffff88804f522000(4096)
[  605.258195][T21543] loop4: detected capacity change from 0 to 256
[  605.369025][T21547] raw_sendmsg: syz.5.6783 forgot to set AF_INET. Fix it!
[  605.685457][   T29] audit: type=1326 audit(1788387162.842:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21563 comm="syz.3.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19bab9c629 code=0x7ffc0000
[  605.791712][   T29] audit: type=1326 audit(1788387162.842:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21563 comm="syz.3.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19bab9c629 code=0x7ffc0000
[  605.856936][   T29] audit: type=1326 audit(1788387162.842:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21563 comm="syz.3.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19bab9c629 code=0x7ffc0000
[  605.944418][   T29] audit: type=1326 audit(1788387162.842:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21563 comm="syz.3.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19bab9c629 code=0x7ffc0000
[  606.037339][   T29] audit: type=1326 audit(1788387162.852:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21563 comm="syz.3.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f19bab9c629 code=0x7ffc0000
[  606.112739][   T29] audit: type=1326 audit(1788387162.852:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21563 comm="syz.3.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19bab9c629 code=0x7ffc0000
[  606.202924][   T29] audit: type=1326 audit(1788387162.861:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21563 comm="syz.3.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19bab9c629 code=0x7ffc0000
[  606.335357][   T29] audit: type=1326 audit(1788387162.861:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21563 comm="syz.3.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19bab9c629 code=0x7ffc0000
[  606.382745][   T29] audit: type=1326 audit(1788387162.861:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21563 comm="syz.3.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f19bab9c629 code=0x7ffc0000
[  606.421609][   T29] audit: type=1326 audit(1788387162.861:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21563 comm="syz.3.6790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f19bab9c629 code=0x7ffc0000
[  606.422286][T21602] binder: 21599:21602 ioctl c0306201 0 returned -14
[  607.172938][T21640] tmpfs: Bad value for 'mpol'
[  607.759579][T21660] loop1: detected capacity change from 0 to 4096
[  607.781259][T21660] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  608.038077][T21646] loop5: detected capacity change from 0 to 32768
[  608.059724][T21646] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.6830 (21646)
[  608.090862][T21646] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  608.109045][T21646] BTRFS info (device loop5): using sha256 checksum algorithm
[  608.173160][T21683] xt_bpf: check failed: parse error
[  608.286370][T21646] BTRFS info (device loop5): enabling ssd optimizations
[  608.313761][T21646] BTRFS info (device loop5): turning on async discard
[  608.366560][T21646] BTRFS info (device loop5): enabling free space tree
[  608.532780][T16039] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  608.602072][T21711] netlink: 'syz.3.6853': attribute type 1 has an invalid length.
[  608.630011][T21711] netlink: 'syz.3.6853': attribute type 3 has an invalid length.
[  608.654057][T21711] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6853'.
[  609.096385][T21729] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6855'.
[  609.533397][T21760] netlink: 'syz.3.6875': attribute type 10 has an invalid length.
[  609.541595][T21760] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  609.598623][T21760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  610.401465][T21814] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6904'.
[  610.666024][T21829] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6912'.
[  610.735946][T21829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6912'.
[  611.274451][T21872] loop3: detected capacity change from 0 to 64
[  611.350286][T21872] hfs: unable to locate alternate MDB
[  611.400763][T21872] hfs: continuing without an alternate MDB
[  611.596727][ T5897] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  611.629103][T21890] loop3: detected capacity change from 0 to 1024
[  611.675515][T21890] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[  611.742957][T21897] loop1: detected capacity change from 0 to 128
[  611.765403][T21898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6945'.
[  611.776009][T21898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6945'.
[  611.789024][ T5897] usb 5-1: Using ep0 maxpacket: 32
[  611.797204][ T5897] usb 5-1: config 4 has an invalid interface number: 128 but max is 0
[  611.819998][T21898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6945'.
[  611.837514][ T5897] usb 5-1: config 4 has no interface number 0
[  611.850817][ T5897] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  611.869868][ T5897] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  611.889426][T21898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6945'.
[  611.900009][T21898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6945'.
[  611.904116][ T5897] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  611.911169][T21898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6945'.
[  611.922592][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  611.927892][T21902] netlink: 'syz.3.6948': attribute type 2 has an invalid length.
[  611.935691][T21898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6945'.
[  611.968401][ T5897] hub 5-1:4.128: USB hub found
[  611.999553][T21902] netlink: 'syz.3.6948': attribute type 1 has an invalid length.
[  612.048403][T21906] netlink: 'syz.1.6950': attribute type 2 has an invalid length.
[  612.191215][ T5897] hub 5-1:4.128: 2 ports detected
[  612.203577][ T5897] hub 5-1:4.128: Using single TT (err -22)
[  612.248955][T21918] loop3: detected capacity change from 0 to 164
[  612.412550][ T5897] hub 5-1:4.128: hub_hub_status failed (err = -71)
[  612.439206][ T5897] hub 5-1:4.128: config failed, can't get hub status (err -71)
[  612.506541][ T5897] usb 5-1: USB disconnect, device number 84
[  612.814260][T21941] netlink: 'syz.0.6967': attribute type 4 has an invalid length.
[  612.992715][T21948] loop5: detected capacity change from 0 to 512
[  613.010992][ T1215] IPVS: starting estimator thread 0...
[  613.022788][T21915] loop1: detected capacity change from 0 to 40427
[  613.070880][T21915] F2FS-fs: heap/no_heap options were deprecated
[  613.093312][T21948] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  613.156365][T21951] IPVS: using max 34 ests per chain, 81600 per kthread
[  613.163859][T21948] ext4 filesystem being mounted at /470/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  613.195333][T21915] F2FS-fs (loop1): Image doesn't support compression
[  613.229833][T21915] F2FS-fs (loop1): build fault injection rate: 23
[  613.248809][T21948] Quota error (device loop5): do_check_range: Getting dqdh_next_free 2741 out of range 0-6
[  613.259274][T21915] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  613.272623][T21948] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  613.272843][T21915] F2FS-fs (loop1): invalid crc value
[  613.289254][T21948] EXT4-fs error (device loop5): ext4_acquire_dquot:7003: comm syz.5.6971: Failed to acquire dquot type 0
[  613.366920][T21915] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810
[  613.455940][T16039] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  613.643000][T21915] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  613.723968][T21915] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  613.763121][T21982] loop4: detected capacity change from 0 to 4096
[  613.793527][T21982] ntfs3(loop4): ino=3, Correct links count -> 2.
[  613.832245][T21915] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_get_read_data_folio+0xe0/0xb70
[  615.046596][T22030] loop3: detected capacity change from 0 to 256
[  615.165044][T22030] FAT-fs (loop3): Directory bread(block 64) failed
[  615.183722][T22030] FAT-fs (loop3): Directory bread(block 65) failed
[  615.192125][T22010] loop5: detected capacity change from 0 to 32768
[  615.212356][T22030] FAT-fs (loop3): Directory bread(block 66) failed
[  615.218947][T22030] FAT-fs (loop3): Directory bread(block 67) failed
[  615.263511][T22030] FAT-fs (loop3): Directory bread(block 68) failed
[  615.270173][T22030] FAT-fs (loop3): Directory bread(block 69) failed
[  615.282724][T22010] add_index: next_index = 0.  Resetting!
[  615.289781][T22010] find_entry called with index >= next_index
[  615.296028][T22030] FAT-fs (loop3): Directory bread(block 70) failed
[  615.302923][T22030] FAT-fs (loop3): Directory bread(block 71) failed
[  615.306586][T22010] find_entry called with index >= next_index
[  615.338339][T22030] FAT-fs (loop3): Directory bread(block 72) failed
[  615.387095][T22030] FAT-fs (loop3): Directory bread(block 73) failed
[  615.492693][T22051] netlink: 'syz.1.7018': attribute type 4 has an invalid length.
[  615.570126][T22055] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  615.886098][T22069] loop4: detected capacity change from 0 to 64
[  615.920987][T22069] hfs: unable to locate alternate MDB
[  615.946242][T22069] hfs: continuing without an alternate MDB
[  616.046116][ T1033] 
[  616.048478][ T1033] ======================================================
[  616.055478][ T1033] WARNING: possible circular locking dependency detected
[  616.062487][ T1033] syzkaller #0 Tainted: G             L     
[  616.068444][ T1033] ------------------------------------------------------
[  616.075443][ T1033] kworker/u8:7/1033 is trying to acquire lock:
[  616.081581][ T1033] ffff8880559000f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}, at: hfs_extend_file+0xf2/0x15e0
[  616.092371][ T1033] 
[  616.092371][ T1033] but task is already holding lock:
[  616.099728][ T1033] ffff8880233da0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x300
[  616.109034][ T1033] 
[  616.109034][ T1033] which lock already depends on the new lock.
[  616.109034][ T1033] 
[  616.119418][ T1033] 
[  616.119418][ T1033] the existing dependency chain (in reverse order) is:
[  616.128413][ T1033] 
[  616.128413][ T1033] -> #1 (&tree->tree_lock/1){+.+.}-{4:4}:
[  616.136307][ T1033]        __mutex_lock+0x19f/0x1300
[  616.141409][ T1033]        hfs_find_init+0x18e/0x300
[  616.146502][ T1033]        hfs_get_block+0x556/0xc50
[  616.151595][ T1033]        block_read_full_folio+0x29f/0x830
[  616.157391][ T1033]        filemap_read_folio+0x137/0x3b0
[  616.162920][ T1033]        do_read_cache_folio+0x358/0x590
[  616.168537][ T1033]        read_cache_page+0x5d/0x170
[  616.173719][ T1033]        __hfs_bnode_create+0x4b9/0x980
[  616.179258][ T1033]        hfs_bnode_find+0x211/0xd40
[  616.184436][ T1033]        hfs_brec_find+0x17b/0x510
[  616.189529][ T1033]        hfs_brec_read+0x24/0x110
[  616.194534][ T1033]        hfs_cat_find_brec+0x177/0x3f0
[  616.199979][ T1033]        hfs_fill_super+0x4ff/0x770
[  616.205164][ T1033]        get_tree_bdev_flags+0x431/0x4f0
[  616.210779][ T1033]        vfs_get_tree+0x92/0x2a0
[  616.215696][ T1033]        do_new_mount+0x341/0xd30
[  616.220707][ T1033]        __se_sys_mount+0x31d/0x420
[  616.225888][ T1033]        do_syscall_64+0x14d/0xf80
[  616.230987][ T1033]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  616.237382][ T1033] 
[  616.237382][ T1033] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{4:4}:
[  616.246573][ T1033]        __lock_acquire+0x15a5/0x2cf0
[  616.251930][ T1033]        lock_acquire+0xf0/0x2e0
[  616.256851][ T1033]        __mutex_lock+0x19f/0x1300
[  616.261945][ T1033]        hfs_extend_file+0xf2/0x15e0
[  616.267218][ T1033]        hfs_bmap_reserve+0x107/0x430
[  616.272571][ T1033]        __hfs_ext_write_extent+0x1fa/0x470
[  616.278446][ T1033]        hfs_ext_write_extent+0x17e/0x210
[  616.284152][ T1033]        hfs_write_inode+0x117/0x960
[  616.289430][ T1033]        __writeback_single_inode+0x75a/0x11a0
[  616.295577][ T1033]        writeback_sb_inodes+0x992/0x1a20
[  616.301282][ T1033]        wb_writeback+0x456/0xb70
[  616.306291][ T1033]        wb_workfn+0x414/0xf50
[  616.311034][ T1033]        process_one_work+0x949/0x1650
[  616.316475][ T1033]        worker_thread+0xb46/0x1140
[  616.321659][ T1033]        kthread+0x388/0x470
[  616.326240][ T1033]        ret_from_fork+0x51e/0xb90
[  616.331338][ T1033]        ret_from_fork_asm+0x1a/0x30
[  616.336615][ T1033] 
[  616.336615][ T1033] other info that might help us debug this:
[  616.336615][ T1033] 
[  616.346835][ T1033]  Possible unsafe locking scenario:
[  616.346835][ T1033] 
[  616.354279][ T1033]        CPU0                    CPU1
[  616.359629][ T1033]        ----                    ----
[  616.364975][ T1033]   lock(&tree->tree_lock/1);
[  616.369651][ T1033]                                lock(&HFS_I(tree->inode)->extents_lock);
[  616.378134][ T1033]                                lock(&tree->tree_lock/1);
[  616.385319][ T1033]   lock(&HFS_I(tree->inode)->extents_lock);
[  616.391280][ T1033] 
[  616.391280][ T1033]  *** DEADLOCK ***
[  616.391280][ T1033] 
[  616.399402][ T1033] 3 locks held by kworker/u8:7/1033:
[  616.404664][ T1033]  #0: ffff88801fadc148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x855/0x1650
[  616.415271][ T1033]  #1: ffffc9000491fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x87c/0x1650
[  616.427084][ T1033]  #2: ffff8880233da0b0 (&tree->tree_lock/1){+.+.}-{4:4}, at: hfs_find_init+0x18e/0x300
[  616.436816][ T1033] 
[  616.436816][ T1033] stack backtrace:
[  616.442690][ T1033] CPU: 1 UID: 0 PID: 1033 Comm: kworker/u8:7 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  616.442711][ T1033] Tainted: [L]=SOFTLOCKUP
[  616.442716][ T1033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  616.442726][ T1033] Workqueue: writeback wb_workfn (flush-7:4)
[  616.442749][ T1033] Call Trace:
[  616.442755][ T1033]  <TASK>
[  616.442762][ T1033]  dump_stack_lvl+0xe8/0x150
[  616.442781][ T1033]  print_circular_bug+0x2e1/0x300
[  616.442804][ T1033]  check_noncircular+0x12e/0x150
[  616.442825][ T1033]  __lock_acquire+0x15a5/0x2cf0
[  616.442842][ T1033]  ? unwind_next_frame+0x1aaf/0x23c0
[  616.442864][ T1033]  ? unwind_next_frame+0xa5/0x23c0
[  616.442882][ T1033]  ? ret_from_fork_asm+0x1a/0x30
[  616.442894][ T1033]  ? ret_from_fork_asm+0x1a/0x30
[  616.442908][ T1033]  lock_acquire+0xf0/0x2e0
[  616.442924][ T1033]  ? hfs_extend_file+0xf2/0x15e0
[  616.442944][ T1033]  __mutex_lock+0x19f/0x1300
[  616.442962][ T1033]  ? hfs_extend_file+0xf2/0x15e0
[  616.442979][ T1033]  ? check_path+0x21/0x40
[  616.442996][ T1033]  ? check_noncircular+0xda/0x150
[  616.443016][ T1033]  ? add_lock_to_list+0xc7/0x100
[  616.443033][ T1033]  ? hfs_extend_file+0xf2/0x15e0
[  616.443050][ T1033]  ? __pfx___mutex_lock+0x10/0x10
[  616.443067][ T1033]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  616.443088][ T1033]  hfs_extend_file+0xf2/0x15e0
[  616.443105][ T1033]  ? __pfx___mutex_trylock_common+0x10/0x10
[  616.443119][ T1033]  ? __pfx_hfs_extend_file+0x10/0x10
[  616.443135][ T1033]  ? trace_contention_end+0x3d/0x150
[  616.443148][ T1033]  ? __mutex_lock+0x319/0x1300
[  616.443168][ T1033]  ? __asan_memset+0x22/0x50
[  616.443180][ T1033]  ? hfs_brec_find+0x19a/0x510
[  616.443195][ T1033]  hfs_bmap_reserve+0x107/0x430
[  616.443214][ T1033]  __hfs_ext_write_extent+0x1fa/0x470
[  616.443232][ T1033]  hfs_ext_write_extent+0x17e/0x210
[  616.443255][ T1033]  ? __pfx_hfs_ext_write_extent+0x10/0x10
[  616.443276][ T1033]  hfs_write_inode+0x117/0x960
[  616.443294][ T1033]  ? __pfx_hfs_write_inode+0x10/0x10
[  616.443313][ T1033]  ? __pfx_hfs_writepages+0x10/0x10
[  616.443333][ T1033]  ? do_raw_spin_unlock+0xf5/0x210
[  616.443349][ T1033]  __writeback_single_inode+0x75a/0x11a0
[  616.443368][ T1033]  writeback_sb_inodes+0x992/0x1a20
[  616.443393][ T1033]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  616.443409][ T1033]  ? do_raw_spin_lock+0x12b/0x2f0
[  616.443433][ T1033]  ? rcu_is_watching+0x15/0xb0
[  616.443454][ T1033]  wb_writeback+0x456/0xb70
[  616.443471][ T1033]  ? queue_io+0x231/0x4a0
[  616.443489][ T1033]  ? __pfx_wb_writeback+0x10/0x10
[  616.443504][ T1033]  ? do_raw_spin_lock+0x12b/0x2f0
[  616.443522][ T1033]  wb_workfn+0x414/0xf50
[  616.443536][ T1033]  ? look_up_lock_class+0x57/0x110
[  616.443557][ T1033]  ? __pfx_wb_workfn+0x10/0x10
[  616.443571][ T1033]  ? do_raw_spin_lock+0x12b/0x2f0
[  616.443585][ T1033]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  616.443605][ T1033]  ? process_one_work+0x87c/0x1650
[  616.443622][ T1033]  process_one_work+0x949/0x1650
[  616.443642][ T1033]  ? trace_irq_disable+0x30/0x150
[  616.443657][ T1033]  ? __pfx_process_one_work+0x10/0x10
[  616.443672][ T1033]  ? do_raw_spin_lock+0x12b/0x2f0
[  616.443690][ T1033]  worker_thread+0xb46/0x1140
[  616.443714][ T1033]  kthread+0x388/0x470
[  616.443728][ T1033]  ? __pfx_worker_thread+0x10/0x10
[  616.443744][ T1033]  ? __pfx_kthread+0x10/0x10
[  616.443757][ T1033]  ret_from_fork+0x51e/0xb90
[  616.443777][ T1033]  ? __pfx_ret_from_fork+0x10/0x10
[  616.443792][ T1033]  ? __switch_to+0xc7d/0x1450
[  616.443808][ T1033]  ? __pfx_kthread+0x10/0x10
[  616.443820][ T1033]  ret_from_fork_asm+0x1a/0x30
[  616.443838][ T1033]  </TASK>
[  616.897333][T22067] loop1: detected capacity change from 0 to 32768
[  616.921198][T22067] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7025 (22067)
[  616.968256][T22067] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  616.978624][T22067] BTRFS info (device loop1): using sha256 checksum algorithm
[  617.035264][T22067] BTRFS info (device loop1): enabling ssd optimizations
[  617.044814][T22067] BTRFS info (device loop1): turning on async discard
[  617.053773][T22067] BTRFS info (device loop1): enabling free space tree
[  617.081045][ T5842] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  625.401193][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  625.407763][ T1307] ieee802154 phy1 wpan1: encryption failed: -22