last executing test programs:

1m34.554427388s ago: executing program 3 (id=405):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1f0, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x5}, @TCA_FLOWER_KEY_FLAGS={0x8, 0x2f, 0x8}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0xf}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e20}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0xb}]}}, @filter_kind_options=@f_cgroup={{0xb}, {0x178, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_ife={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_CGROUP_ACT={0x4}, @TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x200}}]}, @TCA_CGROUP_EMATCHES={0x12c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xe0, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xfffb, 0x3, 0x453}, {0x0, 0x7fffffff, 0x1e, 0x101}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x7, 0x1, 0x3}, {0x80000001, 0x40, 0x64ea, 0xcbbc66a001d418c, 0x7, 0x2, 0x2}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x5, 0x8, 0x1000}, {0x6, 0x0, 0x4}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x101, 0x0, 0x8000}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x3ff, 0x8, 0x7}, {0x1, 0x6}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x2, 0xe5d4}, {0x81, 0x9, 0x2, "f8e5755513f42aeab9"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x4, 0x1, 0xf6c}, {0xe67a, 0x9, 0x6, 0x4, 0x7, 0x2, 0x2}}}, @TCF_EM_CONTAINER={0x48, 0x3, 0x0, 0x0, {{0x56b, 0x0, 0x80}, "5689fff81c0850ef01b1a307253548314b21624a823e47a522d319098ba5d1df0913a5e583d8061a03e14a08ec743e7d6f3410c101dfa73523"}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1d}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0xbd4}, {0x81, 0x1, 0x2, 0x62a}}}]}]}]}}]}, 0x1f0}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

1m34.422895359s ago: executing program 3 (id=406):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000700)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
recvfrom(r1, &(0x7f0000000840)=""/194, 0xc2, 0x150, 0x0, 0x0)

1m34.23527839s ago: executing program 3 (id=407):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0x70bd2a, 0x25dfdbfd, {0x2, 0x80, 0x1, 0xff, r2}, [@IFA_LABEL={0x14, 0x3, 'vxcan1\x00'}]}, 0x2c}}, 0x0)

1m34.134941661s ago: executing program 3 (id=408):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x800414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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")
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='size=E'])
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r0, &(0x7f0000001780)={0x2020}, 0x2020)

1m33.704166233s ago: executing program 3 (id=410):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={<r1=>0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
shutdown(r0, 0x2)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000003c0)={r1}, &(0x7f00000000c0)=0x8)

1m31.203421557s ago: executing program 3 (id=420):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800020009e7"], 0x3c}}, 0x0)

1m30.963645069s ago: executing program 32 (id=420):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c0002800800020009e7"], 0x3c}}, 0x0)

6.073344785s ago: executing program 4 (id=1201):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x20108c0, &(0x7f0000002ac0)=ANY=[@ANYRES8=0x0], 0xfe, 0x6217, &(0x7f0000002b00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fchown(r0, 0x0, 0xee01)

5.26645475s ago: executing program 5 (id=1215):
r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000080)=0x2)
chdir(&(0x7f0000000140)='./file0\x00')
truncate(&(0x7f00000002c0)='./file1\x00', 0xc00)

5.148069141s ago: executing program 4 (id=1216):
r0 = socket$inet6(0xa, 0x3, 0xff)
r1 = dup2(r0, r0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000000c0)={0x2, 0x28, 0xfa2c, {0xf5ff, {0xa, 0x4e24, 0xfffffffc, @private0, 0x3b}}}, 0x30)

4.743556603s ago: executing program 4 (id=1223):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv0}, {@grpid}, {@mblk_io_submit}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f0000000680)={0x58f5, 0xfffe, 0x1, 0x5, 0x14, 0x0, 0x2401})

4.285327636s ago: executing program 4 (id=1230):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4400000011000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000024001a80200005801c00048008000200000000000800010000000000080003"], 0x44}}, 0x0)

4.023549717s ago: executing program 4 (id=1234):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x300401a, &(0x7f0000000200)=ANY=[@ANYBLOB='errors=continue,usrquota,integrity,iocharset=cp857,noquota,grpquota,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c007bd598141a550df33dd47ded539aef131d50bbd580000000000000000b9b0fa44661887a1633f523184b4e52fbab2783d4a8e4c913491c6800c959a6cba88690ccbce67e3919"], 0x1, 0x6135, &(0x7f00000063c0)="$eJzs3UuPHFfZB/Cn+jaXvEmsLKK8FkKTxFxCiK/BGAIkkYAFGxYoW2RrMoksHEC2QU5k4Ylmw4IPAUJiiRBLVnyALNiy4wNgyUYCZYFSqGbOGdd0ut0zGU9Xj8/vJ42rnj5V06f87+rLVFWfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADiB9//0bkqIi7/Mt1wIuL/oh/Ri1hp6rWIWFk7kZcfRMRzsd0cz0bEcCmiWX/7n6cjXo2Ij56KuHf/9npz8/l99uN7f/r773/8xA//9sfhmf/8+Wb/tWnL3br1m3//5c7hthkAAABKU9d1XaWP+SfT5/te150CAOYiv/7XSb59Vv3dAy6vVqvVarW6+7qtnuxOu4iIzfY6zXsGh+MB4JjZjI+77gIdkn/RBhHxRNedABZa1XUHOBL37t9er1K+Vfv1YG2nPZ8Lsif/zWr3+o5p01nGzzGZ1+NrK/rxzJT+rMypD4sk598bz//yTvsoLXfU+c/LtPxHO5c+FSfn3x/Pf8zjk39vYv6lyvkPDpR/X/4AAAAAALDA8t//T3R8/Hfp8JuyLw87/rs2pz4AAAAAAAAAwKN22PH/dhn/DwAAABZW81m98dunHtw27bvYmtvfqiKeHFseKEy6WGa1634AAAAAAAAAAAAAQEkGO+fwvlVFDCPiydXVuq6bn7bx+qAOu/5xV/r2Q8m6fpIHAIAdHz01di1/FbHcKoerq6t1vbyyWq/WK0v5/exoableaX2uzdPmtqXRPt4QD0Z188uWW+u1zfq8PKt9/Pc19zWq+/vo2Hx0EDQAtOy8Gt3zivSYqeuno+t3ORwP9v/Hj/2f/ej6cQoAAAAcvbqu6yp9nffJNL5fr+tOAQBzkV//x48LqB99/d8F649arVary6vb6snutIuI2Gyv07xnMBw/ABwzm/Fx112gQ/Iv2iAinuu6E8BCq7ruAEfi3v3b61XKt2q/HqTx3fO5IHvy36y218vrT5rOMn6OybweX1vRj2em9OfZOfVhkeT8e+P5X95pH6Xljjr/eZmWf7OdJzroT9dy/v3x/Mc8Pvn3JuZfqpz/4ED59+UPAAAAAAALLP/9/8RCHf8dfdbNmelhx3/XjuxeAQAAAAAAAOBo3bt/ez1f95qP/39uwnKu/3w85fwr+Rcp598by//LY8v1W/N333yQ/7/u317/w81//n+e7jf/pTxTpUdWlR4RVbqnapCmh9m6T9sa9kfNPQ2rXn+Qzvmph+/E1bgWG3F2z7K99P/xoP3cnvamp8Pt9rq/035+T/tgtz2vf2FP+zCd6VSv5PbTsR4/i2vx9nZ707Y0Y/uXZ7TXM9pz/n37f5Fy/oPWT5P/amqvxqaNux/2PrXft6eT7ueNq5//9dmj35yZtqK/u21tzfa90EF/tv9PnhjFL25sXD9968rNm9fPRZrsufV8pMkjlvMfpp/d5/8Xd9rz8357f7374ejA+S+KrRhMzf/F1nyzvS/NuW9dyPmP0k/O/+3UPnn/P875T9//X+6gPwAAAAAAAAAAAAAAAPAwdV1vXyL6RkRcTNf/dHVtJgAwX/n1v07y7fOq+3O+P7X6mNfVgvVnrvUn9WL1R61esHqwn+Xb6slebxcR8df2Os17hl9N+mUAwOLa+WKvf3TdDTrzifzLlb/vr5me6rozwFzdeP+Dn1y5dm3j+o2uewIAAAAAAAAAfFZ5/M+11vjPp+q6vjO23J7xX9+MtcOO/znIM7sDjE4ZqLp/8G16mK3eqN9rDTf+fEwb/3u4O/ew8b8HM+5vOKN9NKN9aUb78oz2iRd6tOT8n2+Nd34qIk6ODb9ewviv42PelyDn/0Lr8dzk/6Wx5dr51787zvn39uR/5uZ7Pz9z4/0PXrn63pV3N97d+OmFc+fOXrh48dKlS2feuXpt4+zOvx32+Gjl/PPY184DLUvOP2cu/7Lk/L+QavmXJef/xVTLvyw5//x+T/5lyfnnzz7yL0vO/6VUy78sOf+vpFr+Zcn5v5xq+Zcl5//VVMu/LDn/V1It/7Lk/E+nWv5lyfmfSfU+81856n4xHzn/fITL/l+WnH8+s0H+Zcn5n0+1/MuS87+QavmXJef/aqrlX5ac/9dSLf+y5Pwvplr+Zcn5fz3V8i9Lzv9SquVflpz/N1It/7Lk/L+ZavmXJef/WqrlX5ac/7dSLf+y5Py/nWr5lyXn/51Uy78sOf/XUy3/sjz4/n8zZsyYyTNdPzMBAAAAAAAAAAAAAOPmcTpx19sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyPHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh795i5LrrO4CfvXrjQGIgpE5qyMYxxjib7PoSX2hdTLg23EogFHrBdr1rs+AbXrsEGslGgRIVo6KKtuGhLSDU5qXCqnigFaA8oFaVKkH7QF8QVSUeoiqggFSprSBbzTn//39nZs/O7Hon9sw5n48U/7wzZ+acOXPm7H7X+c4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0OzuN8x9ZijLssZ/+R+bsuxFjb/fNLkpv+y1N3oLAQAAgPX6Rf7nc7emCw6v4kZNy/zTK7/79cXFxcXs/SN/OvaFxcV0xWSWjW3Isvy66Op/fmCoeZng8WxiaLjp6+Euqx/pcv1ol+vHulw/3uX6DV2un+hy/bIdsMxNxe9j8jvblv91U7FLs9uysfy6bSW3enxow/Bw/F1Obii/zeLYiWw+O5XNZTMtyxfLDuXLf/PuxrremsV1DTeta0vjCPnpY8fjNgyFfbytZV1L9xn9+PXZ5M9++tjxv77w7B1ls+tuaLm/Yjt3bG1s56fCJcW2DmUb0j6J2znctJ1bSp6TkZbtHMpv1/h7+3Y+t8rtHFnazOuq/TmfyIbzv38v30+jzb/WS/tpS7jsf+7Jsuzy0ma3L7NsXdlwtrHlkuGl52eiOCIb99E4lF6aja7pOL17FcdpY85uaz1O218T8fm/O9xudIVtaH6afvzJ8abn/eeL13KcRo1HvdJrpf0Y7PVrpV+OwXhcfC9/0E+UHoPbwuN/bPvKx2DpsVNyDKbH3XQMbu12DA6Pj+TbnJ6Eofw2S8fgrpblR/I1DeXzme2dj8HpC6fPTS98/BP3zZ8+dnLu5NyZPbt2zezZt+/AgQPTJ+ZPzc0Uf17j3u5/G7Ph9BrYGvZdfA28um3Z5kN18cvjy86/1/o6nOjwOtzUtmyvX4ej7Q9u6Pq8IJcf08Vr472NnT5xZThb4TWWPz871/86TI+76XU42vQ6LP2eUvI6HF3F67CxzLmdq/uZZbTpv7JtWPl7wfqOwU1Nx2D7zyPtx2Cvfx7pl2NwIhwXP9i58veCLWF7n5ha688jI8uOwfRww7mncUn6eX/iQD7Kjss7G1fcPJ5dXJg7f/+jxy5cOL8rC+O6eFnTsdJ+vG5sekzZsuN1eM3H6+H5Vz5xZ8nlm8K+mriv8cfEis9VY5m993d+rvLvbuX7s+XS3VkYPXa992fZd/PG/hzPsi9+55MPf+uxL75hxf3ZyJufml7/z+Iplzadf8dWOP/G3P98sb50V4+PjI0Wr9+RtHfGWs7HrU/VaH7uGsrX/dz06s7HY+G/630+vq3D+Xhz27K9Ph+PtT+4eD4e6vbbjvVpfz4nwnFyaqbz+bixzObdaz0mRzuej+8Jcyjs/9eEpJByUdOxs9Jxm9Y1OjoWHtdoXEPrcbqnZfmxkM0a63pq97UdpzvuKe5rJD26JdfrOJ1sW7bXx2n63ddKx+lQt9++XZv253MiHBe37el8nDaWeXrv+s+dN8W/Np07x7sdg2Mj441tHksHYX6+zxZvisfg/dnx7Gx2KpvNrx3Pj6ehfF1TD6zuGBwP/13vc+XmDsfgjrZle30Mpu9jKx17Q6PLH3wPtD+fE+G4ePKBzsdgY5k37u/tz647wiVpmaafXdt/v7bS77zubNtNL9SxMhq28zv7O/9utrHMqQNrzZmd99O94ZKbS/ZT++t3pdfUbHZ99tPmsJ3PHlh5PzW2p7HMFw6u8ng6nGXZpY8+mP++N/z7yt9d/P7XW/7dpezfdC599MGfvPjEP65l+wEYfM8XY2PxvW5i6Weu1fz7PwAAADAQYu4fDjOR/wEAAKAyYu6P/1d4Iv8DAABAZcTcPxpmUpP8v/mNz84/fylLzfzFIF6fdsNDxXKx4zoTvp5cXNK4/MGvzv33P1xa3bqHsyz7+UN/ULr85ofidhUmw3ZefVPr5ct8/b5VrfvoI5fSepv7618K9x8fz2oPg7IK7kyWZd+89XP5eiY/cCWfTz90NJ8PX37i8cYyzx0svo63f+ZlxfJ/EYooh08ca7n9M2E//CjMmbeV7494u69dec2W/e9bWl+83dDWW/KH/eQHi/uN75Pz+ceL5eN+Xmn7v/XZp77WWP7RV5Vv/6Xh8u1/KtzvV8P831cUyzc/B42v4+0+HbY/ri/e7v6vfLt0+69+plj+3JuL5Y6GGde/I3y97c3Pzjfvr0eHjrU8ruwtxXJx/TPf/+P8+nh/8f7bt3/iyJWW/dF+fDz9b8X9TLctHy+P64n+vm39jftpPj7j+p/6w6Mt+7nb+q8+/MwrGvfbvv5725Y799Gd+fqX7q/1HZv+8tOfK11f3J7Df3uu5fEcfnd4HYf1P/nBcDyG6//vanF/7e+ucPTdreefuPyXNl1qeTzRW39WrP/q607mc8PETRtvftGLb7l8V2PfZdn3NhT31239J//qbMv2f/n2Yn/E62NfrH39K4nrP/+xqTNnFy7Oz6a9+tit+XvnvL3Ynri9t4Zza/vXR85e+NDc+cmZyZksm6zuW+hds6+E+ZNiXF7r7Xc+Ep7PO//8mxu3/+tn4+X//t7i8itvK75vvTos9/lw+abw/K13/U/efXv++h56uvi6pcfeA1u2/deBVS0YHn/7zwXxeD/38g/l+6FxXf59I76u17n9P5wt7ucbYb8uhndm3nr70vqal4/vjXDlPcXrfd37L5zm4vP6N+H5fsePivuP2xUf7w/DzzHf3tx6vovHxzcuDbfff/4uHpfD+SS7XFwfl4r7+8pzt5duXnwfkuzyHfnXf5Lu5441PcyVLHx8YfrU/JmLj05fmFu4ML3w8U8cOX324pkLR/L38jzy4W63Xzo/bczPT7Nz+/Zm+dnqbDFeYDd6+889cnx2/8z22bkTxy6euPDIubnzJ48vLByfm13YfuzEibmPdbv9/OyhXbsP7tm/e+rk/OyhAwcP7jk4NX/mbGMzio3qYt/MR6bOnD+S32Th0N6Dux54YO/M1Omzs3OH9s/MTF3sdvv8e9NU49a/P3V+7tSxC/On56YW5j8xd2jXwX37dnd9N8DT504sTE6fv3hm+uLC3Pnp4rFMXsgvbnzv63Z7qmnhP4qfZ9sNFW/El73r3n3p/VkbvvrJFe+qWKTtDUSfDe9F888vOXdgNV/H3D8WZlKT/A8AAAB1EHP/eJiJ/A8AAACVEXP/hjAT+R8AAAAqI+b+iTCTmuT/yvX/N19a1fr1//X/m/dXTfv/i5fq2v9/T7/1/4vzhf5/b+j/d6b/34X+v/6//r/+Pz3Vb/3/mPtvyrJa5n8AAACog5j7N4aZyP8AAABQGTH33xxmIv8DAABAZcTc/6Iwk5rkf/1//X/9/9r2/+v7+f/6/5Wm/9+Z/n8Xq+//D2UV7f9n9er/X+7l9uv/6/+zXL/1/2Puf3GYSU3yPwAAANRBzP23hJnI/wAAAFAZMfffGmYi/wMAAEBlxNy/KcykJvlf/1//X/9f/1//v3z9+v+DqfL9//YXyBrp/3fh8/99/r/+v/4/a7C4odsS/db/j7n/JWEmNcn/AAAAUAcx9780zET+BwAAgP4zem03i7n/ZWEmy/L/Na4AAAAAuOFi7r8tayuC1+Tf//X/9f/1//X/9f/L17/6/v9Ipv/fPyrf/18n/f8u9P/1//X/9f/pqX7r/+e5P5vIXh5mUpP8DwAAAHUQc//tYSbyPwAAAFRGzP2/FGYi/wMAAEBlxNy/OcykJvlf/1//X/9f/1//v3z9Pv9/MOn/d6b/34X+v/5/9+3/o7Kf+zL9f/1/SvVb/z/m/jvCTGqS/wEAAKAOYu6/M8xE/gcAAIDKiLn/l8NM5H8AAACojJj7t4SZ1CT/6//r/6/Y/1/U/9f/1//X/x88+v+d6f93of+v/+/z//X/6al+6//H3P+KMJOa5H8AAACog5j7XxlmIv8DAABAZcTcf1eYifwPAAAAlRFz/2SYSU3yv/6//r/P/9f/1/8vX7/+/2DS/+9M/78L/X/9f/1//X96an39/5ZzaE/6/zH33x1mUpP8DwAAAHUQc//WMBP5HwAAACoj5v57wkzkfwAAAKiMmPu3hZnUJP/r/+v/6//r/+v/l69f/38w6f93pv/fhf6//r/+v/4/PbW+/n/rTfI/19n/j7n/VWEmNcn/AAAAUAcx928PM5H/AQAAoDJi7n91mIn8DwAAAJURc/+OMJOa5H/9f/1//X/9f/3/8vXr/w8m/f/O9P+70P/X/9f/1/+np/qt/x9z/2vCTGqS/wEAAKAOYu7fGWYi/wMAAEBlxNx/b5iJ/A8AAACVEXP/VJhJTfK//r/+v/6//r/+f/n69f8Hk/5/Z/r/Xej/6//r/+v/01P91v+Puf++MJOa5H8AAACokuEVLo+5//4wE/kfAAAAKiPm/ukwE/kfAAAAKiPm/pkwk5rkf/1//X/9f/3/NfX/71q6X/3/gv5/f9H/70z/vwv9f/3/G97/H9P/p1L6rf8fc/+uMJOa5H8AAACog5j7d4eZyP8AAABQGTH37wkzkf8BAACgMmLu3xtmUpP8r/+v/6//r//v8//L16//P5j0/zvrff8/PkT9f/1//X+f/6//z3L91v+Puf+BMJOa5H8AAACog5j794WZyP8AAABQGTH37w8zkf8BAACgMmLuPxBmUpP8X+X+/+Li4opL6v/r/zfvL/1//f+y9ev/Dyb9/858/n8X+v/6//r/+v/0VL/1/2PuPxhmUpP8DwAAAHUQc/9rw0zkfwAAAKiMmPt/JcxE/gcAAIDKiLn/V8NMapL/q9z/70T/X/+/eX/p/+v/l61f/38w6f93pv/fhf6//r/+v/4/PdVv/f+Y+w+FmdQk/wMAAEAdxNz/a2Em8j8AAABURsz9rwszkf8BAACgMmLuPxxmUpP8r/+v/6//r/+v/1++fv3/waT/35n+fxf6//r/fd7/bxwfz69wXOv/04/6rf8fc//rw0xqkv8BAACgDmLufzDMRP4HAACAyoi5/w1hJvI/AAAAVEbM/W8MM6lJ/tf/1//X/9f/1/8vX7/+/2DS/+9M/78L/X/9/z7v/3ei/08/6rf+f8z9bwozqUn+BwAAgDqIuf/NYSbyPwAAAFRGzP1vCTOR/wEAAKAyYu5/a5hJTfK//r/+v/6//r/+f/n69f8Hk/5/Z/r/XdSg/39Xh+tudH9+vW709uv/6/+zXL/1/2Pu//Uwk5rkfwAAAKiDmPsfCjOR/wEAAKAyYu5/W5iJ/A8AAACVEXP/28NMapL/9f/1//X/9f/1/8vXr/8/mPT/Oxuw/v8vbgmX6/8XfP5/f2//YPX/Fze0317/nxdCv/X/Y+5/R5hJTfI/AAAA1EHM/e8MM5H/AQAAoDJi7n9XmIn8DwAAAJURc/9vhJnUJP/r/ze2Y6m9rP+v/59foP+v/6//P7D0/zsbsP6/z/9vo//f39s/WP3/5fT/eSH0W/8/5v53h5nUJP8DAABAHcTc/3CYifwPAAAAlRFz/3vCTOR/AAAAqIyY+98bZlKT/K//7/P/9f/1//X/y9ev/z+Y9P870//vQv9f/1//X/+fnuq3/n/M/Y+EmdQk/wMAAEAdxNz/vjAT+R8AAAAqI+b+3wwzkf8BAACgMmLuf3+YSU3yv/7/oPT/J/X/9f/1/9sej/6//n8Z/f/O9P+70P/X/9f/1/+np/qt/x9z/wfCTGqS/wEAAKAOYu7/rTAT+R8AAAAqI+b+3w4zkf8BAACgMmLu/50wk5rkf/3/Qen/+/z/TP9f/7/t8ej/6/+XuX79/3jm0f/X/9f/j/T/9f/1/2nXb/3/mPt/N8ykJvkfAAAA6iDm/g+Gmcj/AAAAMBDK/p/sdjH3Hwkzkf8BAACgMmLuPxpmUpP8r/+v/6//36f9/z/b+i8/+O47j+7S/9f/1/9fk+v6+f+NF7/P/9f/1/9P0vnpruLEpv+v/6//T7/1/2PuPxZmUpP8DwAAAHUQc//vhZnI/wAAAFAZMfcfDzOR/wEAAKAyYu6fDTOpSf7X/9f/1//v0/7/AH/+f9wf+v+tetb/jydd/f9S17X//76lnrj+/1r7/+Oll+r/V6T/7/P/9f/1/wn6rf8fc/9cmElN8j8AAADUQcj9wyeKuXSF/A8AAACVEXP/yTAT+R8AAAAqI+b+D4WZ1CT/6//r/+v/6//7/P/y9fdt/9/n/3ek/99Z//T/y+n/6/8P8vbr/+v/s1y/9f9j7p8PM6lJ/gcAAIA6iLn/w2Em8j8AAABURsz9Hwkzkf8BAACgMmLuPxVmUpP8r/+v/6//r/+v/1++fv3/wdT3/f+JzuvX/9f/1/8f3O3X/9f/Z7l+6//H3H86zKQm+R8AAADqIOb+M2Em8j8AAABURsz9Z8NM5H8AgP9n706a7aqrPo7f8ITHpHgBDpw49yUw0LG+AAdOnFhlObBU7DuCfYt9gx32PYqgiB32qGCHYi/2fS9ih1bForLWym323Sc3nJvs81+fz2SZxOs+ljHwI/nWBoBh5O5/RNzSZP/r//X/w/b/99X/7/d8/b/+f2SL7/9X0P/r//X/m/v59f/6f/ZaWv+fu/+RcUuT/Q8AAAAd5O5/VNxi/wMAAMAwcvdfErfY/wAAADCM3P2Pjlua7P9d/f+RrZ79f2a8+v+R+n/v/9/3+cP1/0f1/5x2bvv/y+76lU//r//X/wf9v/5f/89uS+v/c/c/Jm5psv8BAACgg9z9j41b7H8AAAAYRu7+x8Ut9j8AAAAMI3f/4+OWJvvf+/+9/1//P9X/H9f/b1L/7/3/bOP9//M69f+X3HrRw2+/7l7XH+T5+n/9v/5f/896La3/z93/hLilyf4HAACADnL3PzFusf8BAABgGLn7nxS32P8AAAAwjNz9T45bmux//b/+f939/4kh+n/v/9f/6/83lf5/Xqf+/2yer//X/29U/3/1zm/q/1mipfX/ufufErc02f8AAADQQe7+p8Yt9j8AAAAMI3f/pXGL/Q8AAADDyN1/Im5psv/1//p/7//X/+v/p5+v/99M+v95+v8V9P/6/03q/3fR/7NES+v/c/dfFrc02f8AAADQQe7+p8Ut9j8AAAAMI3f/0+MW+x8AAACGkbv/GXFLk/2v/9f/6//1//r/6efr/zeT/n+e/n8F/f/d7ecv1P/r//X/bHfA/v/OmV+219L/5+5/ZtzSZP8DAABAB7n7nxW32P8AAAAwjNz9z45b7H8AAAAYRu7+58QtTfa//l//r//X/+v/p5+v/99M+v95i+n/jxyd/G79/8b3/97/r//X/7PD0t7/n7v/uXFLk/0PAAAAHeTuf17cYv8DAADAMHL3Pz9usf8BAABgGLn7XxC3NNn/+n/9v/5f/6//n37+XP9//bbPp/9fFv3/vMX0//vQ/+v/N/nz6//1/+y1tP4/d/8L45Ym+x8AAAA6yN1/edxi/wMAAMAwcve/KG6x/wEAAGAYuftfHLc02f/T/f/pH9f/nxn9/87Pr/+f/vmxrv4//xP1/7P9//28/78n/f88/f8K+n/9v/5/v/7/+Kqv1/8zZWn9f+7+l8QtTfY/AAAAdJC7/6Vxi/0PAAAAw8jd/7K4xf4HAACAYeTuf3nc0mT/e/+//l//v3n9v/f/n3I+3/+/dc77/6P6/zOk/5+n/19B/6//1/97/z9rtbT+P3f/K+KWJvsfAAAAOsjd/8q4xf4HAACAzbD9zw7s/gOlIXf/q+IW+x8AAACGkbv/1XHLWPv/gv1+QP+v/9f/6/+X1P8fn/jHtfp/7/8/CP3/PP3/Cvr/w+jnjw7W/1+539cvof+/VP/Pwuzo/284/f3nq//P3X9F3DLW/gcAAIDWcve/Jm6x/wEAAGAYuftfG7fY/wAAADCM3P2vi1ua7P9D7/+P7/9s/b/+X/+v//f+f/3/uun/5+n/V9D/e/+/9//r/1mrHf3/Nuer/8/d//q4pcn+BwAAgA5y978hbrH/AQAAYBi5+6+MW+x/AAAAGEbu/jfGLU32v/f/6//1//p//f/08/X/m0n/P0//v4L+/0z7+Sumvl7/r//X/7Pb0vr/3P1vilua7H8AAADoIHf/m+MW+x8AAACGkbv/LXGL/Q8AAADDyN3/1rilyf7X/x9u/5/fr//X/2/p//X/+v9zom3/f2Tqr0R77dP/3/zQEw/Y+T36f/2/9//r//X/rMEi+v+Tp//uMnf/2+KWJvsfAAAAOsjd//a4xf4HAACAYeTuf0fcYv8DAADAMHL3vzNuabL/9f/e/6//1//r/6efr//fLPm/Y9v+/wx5//8K+n/9v/5f/89aLaL/3/bt3P3vilua7H8AAADoIHf/u+MW+x8AAACGkbv/PXGL/Q8AAADDyN3/3rilyf7X/+v/9f/6f/3/9PP1/5tJ/z9P/7+C/v8A/fyRo7u/Xv+v/9f/s9sh9P9Htv/F9aD9f+7+q+KWJvsfAAAAOsjd/764xf4HAACAYeTuf3/cYv8DAADAMHL3Xx23NNn/+n/9v/5f/6//n36+/n8z6f/n6f+3traumfkAU/3/yXvo/9faz+/+VX599P/6f5Znae//z93/gbilyf4HAACADnL3XxO32P8AAAAwjNz918Yt9j8AAAAMI3f/B+OWJvtf/6//1//r//X/08/X/28m/f88/f8K3v9/Xvv5Tf/8+n/9P3strf/P3f+huOFYl/0PAAAAHeTuvy5usf8BAABgGLn7Pxy32P8AAAAwjNz918ctTfa//l//r//X/+v/p59/N/v/Pc2x/v/cOLz+f0v/r//X/6+g/9f/6//ZbWn9f+7+j8QtTfY/AAAAdJC7/6Nxi/0PAAAAw8jd/7G4xf4HAACAYeTu/3jc0mT/6//1//p//b/+f/r53v+/mbz/f57+fwX9v/6/ff9/189Q/T/rs7T+P3f/J+KWJvsfAAAAOsjdf0PcYv8DAADAMHL3fzJusf8BAABgGLn7PxW3NNn/+n/9v/5f/6//n37+Oej/j23p/9dO/z9P/7+C/n/M/v+CrYH6/+P7fr33/7NES+v/c/d/Om5psv8BAACgg9z9n4lb7H8AAAAYRu7+z8Yt9j8AAAAMI3f/5+KWJvtf/6//1//r//X/08/3/v/NpP+fp/9fQf8/Zv/v/f/6f86bpfX/ufs/H7c02f8AAADQQe7+G+MW+x8AAACGkbv/C3GL/Q8AAADDyN3/xbilyf7X/+v/9f/6f/3/9PP1/5tJ/z9P/7+C/l//r//X/7NWS+v/c/d/KW5psv8BAACgg9z9N8Ut9j8AAAAMI3f/zXGL/Q8AAADDyN3/5bilyf7X/+v/D6P/3/059P+nrLP/P6b/1//r/yctpf+/+OL736L/1//r//X/+n/9f3dL6/9z938lbmmy/wEAAKCD3P1fjVvsfwAAABhG7v6vxU3/f94+EQAAALBuufu/Hrc0+f3/vf3/hVunCtVTpvr/aNT0/9vo/3d+fu//n/754f3/+n/9/+FbSv/v/f9n9/n1//r/Tf78B+r/77336/X/jGhp/X/u/lvilib7HwAAADrI3f+NuMX+BwAAgGHk7v9m3GL/AwAAwDBy998atzTZ/97/r//X/+v/9f/Tz9f/byb9/zz9/wr6f/3/+O//Pzn1961b2/v//9P/sz5L6/9z938rbmmy/wEAAKCD3P3fjlvsfwAAABhG7v7vxC32PwAAAAwjd/9345Ym+1//r//X/+v/9f/Tz9f/byb9/zz9/wr6f/3/mX/+G3d/x4b0//vy/n8Ow9L6/9z934tbmux/AAAA6CB3//fjFvsfAAAAhpG7/wdxi/0PAAAAw8jd/8O4pcn+1//r/8fv/x+s/9/1fP2//n9kZ93fx/+RR+j/L5z5Mf3/Cvp//f/47//fl/6fw7C0/j93/21xS5P9DwAAAB3k7v9R3GL/AwAAwDBy9/84brH/AQAAYBi5+38StzTZ//r/Xv3/ka2O/b/3/+v/9f+deP//PP3/Cvp//b/+X//PWi2t/8/d/9O4pcn+BwAAgE31wPs87LYz/ffm7v9Z3GL/AwAAwDBy9/88brH/AQAAYBi5+38RtzTZ//r/Xv1/z/f/6//1//r/TvT/8/T/K+j/9f/6f/0/a7W0/j93/y/jlm3D7+iB/1sCAAAAS5K7/1dxS5Pf/wcAAIAOcvf/Om7Zs/9PnuGfagcAAACWJnf/b+KWJr//r/9feP+/pf/X/+v/9f/6/4PQ/8+7m/3/ySP6f/3/DP2//l//z25L6/9z9/82bmmy/wEAAGBQO/6JQu7+38Ut9j8AAAAMI3f/7+MW+x8AAACGkbv/D3FLk/2v/194/39W7/8/Xv9K/9+8/7/82OTz9f/6/5Hp/+d5//8K+n/9v/5f/89aLa3/z93/x7ilyf4HAACADnL3/ylusf8BAABgGLn7/xy32P8AAAAwjNz9f4lbmux//f+I/b/3/+v/558/Tv9/z4tO3PSgh1x7lf6f085l/58/F/T/+n/9/yn6f/2//p/dltb/5+7/a9zSZP8DAABAB7n7b49b7H8AAAAYRu7+v8Ut9j8AAAAMI3f/HXFLk/2v/9f/6/83sf/Pprh7/+/9//r/vbz/f57+fwX9v/7/QJ//jh3f0v/r/9lraf1/7v6/xy1N9j8AAAB0kLv/H3GL/Q8AAADDyN3/z7jF/gcAAIBh5O7/V9zSZP/r//X/+v9N7P+9/39L/6//34f+f57+fwX9v/7f+//1/6zV0vr/3P3/jlua7H8AAADoIHf/nXGL/Q8AAADDyN3/n7jF/gcAAIBh5O7/b9zSZP/r//X/+n/9v/5/+vn6/82k/5+n/19B/6//1//r/1mrpfX/ufv/FwAA//9+iYM7")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000000)=""/32, 0x20)
getdents(r0, 0x0, 0x58)

3.735402289s ago: executing program 5 (id=1236):
r0 = io_uring_setup(0x67bb, &(0x7f0000000040)={0x0, 0x1, 0x2, 0x2, 0x30d})
syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1)
io_uring_enter(r0, 0x800000, 0x2, 0xf, &(0x7f0000000000)={[0x2]}, 0x18)

3.289381232s ago: executing program 4 (id=1239):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b0500000000000904"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

2.939028223s ago: executing program 5 (id=1244):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}, 0x20)
syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0)

2.865791024s ago: executing program 5 (id=1246):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x26c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20, 0x0, 0x8}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x7, "af9abad1"}]}}, 0x0}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

2.671222935s ago: executing program 2 (id=1249):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000020}]})

2.343968097s ago: executing program 2 (id=1252):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x7f, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x200008c9, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

2.287171447s ago: executing program 2 (id=1253):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x21, r0)

2.174580748s ago: executing program 2 (id=1255):
syz_mount_image$bfs(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x4, 0xb1, &(0x7f0000000400)="$eJzs1zFqwmAYBuC3oW3aJT1Ah94gd+hRSsd261Rx8ELunsIjCB7AwU1cIjExZHYwIM8DCby8/wff+P/r4/I9VdK85awZ+fuf/Xz9tv9VBs/hjhRJyiQvbai6vPvsuoe+3+zn35dvNPo40coAAMCVitRJXvubfhZF6rprtsOZj/YtcOjD02i4vOmqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJM4BQAA//8fTCFM")
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
ftruncate(r0, 0x402)
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000900)=ANY=[], 0x3a)

1.892155949s ago: executing program 2 (id=1257):
r0 = inotify_init1(0x80000)
r1 = inotify_init1(0x0)
r2 = inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x400)
inotify_rm_watch(r0, r2)

1.8262738s ago: executing program 1 (id=1258):
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x0, 0x7}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev, 0x0, 0x0, 0x3, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x800, 0x0, 0x2}, 0x20)

1.695977531s ago: executing program 1 (id=1259):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0)
sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x41}]}, 0x28}}, 0x0)

1.695827271s ago: executing program 2 (id=1260):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000001180)={{0x12, 0x1, 0x0, 0x22, 0x6a, 0xa1, 0x40, 0xa07, 0xd0, 0x1013, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xbd, 0x22, 0xf0, 0x0, [], [{{0x9, 0x5, 0x3, 0x3}}, {{0x9, 0x5, 0x8a, 0x3}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000e40)={0x24, 0x0, &(0x7f0000000d80)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)

1.676027271s ago: executing program 1 (id=1261):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

1.610752471s ago: executing program 1 (id=1262):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, 0x0, 0x0)

1.516040122s ago: executing program 1 (id=1263):
r0 = timerfd_create(0x0, 0x800)
timerfd_settime(r0, 0x3, &(0x7f0000000200)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3})
read(r0, &(0x7f0000000240)=""/66, 0x42)

1.442702712s ago: executing program 1 (id=1264):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0xed, 0x3e, 0xc9, 0x8, 0xccd, 0xb3, 0x2dee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb0, 0x87, 0x1d}}]}}]}}, 0x0)
ioctl$EVIOCRMFF(r0, 0x5501, &(0x7f0000000200)=0x10000)

811.995545ms ago: executing program 0 (id=1269):
r0 = syz_open_procfs(0x0, &(0x7f0000000340)='attr\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002)

811.773306ms ago: executing program 5 (id=1270):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000000)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@nombcache}, {@mblk_io_submit}]}, 0x3, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O")
setxattr$trusted_overlay_upper(&(0x7f0000000300)='./file0\x00', &(0x7f0000000240), &(0x7f0000000880)=ANY=[], 0xff34, 0x0)
chown(&(0x7f0000000340)='./file0\x00', 0xee01, 0x0)
llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

414.736618ms ago: executing program 0 (id=1271):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x24, 0x14, 0x603, 0x0, 0x0, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "bc0a5a8f395123f324"}]}, 0x24}}, 0x0)

345.681538ms ago: executing program 0 (id=1272):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000002c00)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000300000000020000000200000001000000000000000000000105da73a2400000000000000000000009"], 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)

291.738458ms ago: executing program 5 (id=1273):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x107042, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000240)={0x3920e, r0, 0x40000000018, 0x0, 0x0, 0x2000003})

262.962759ms ago: executing program 0 (id=1274):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00'}, 0x10)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@default, @bcast, @netrom, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
sendto(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@ieee802154={0x24, @long}, 0x80)

153.546289ms ago: executing program 0 (id=1275):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})

0s ago: executing program 0 (id=1276):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x4}}}]}, 0x58}}, 0x0)

kernel console output (not intermixed with test programs):

7] loop2: detected capacity change from 0 to 32768
[   96.538869][ T2284] cp210x 4-1:0.0: cp210x converter detected
[   96.675775][ T5087] JBD2: Ignoring recovery information on journal
[   96.731369][    T7] usb 5-1: USB disconnect, device number 3
[   96.803460][ T5087] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   97.028377][ T2284] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[   97.124846][ T2284] usb 4-1: cp210x converter now attached to ttyUSB0
[   97.195629][ T5087] (syz.2.318,5087,0):ocfs2_read_blocks_sync:112 ERROR: status = -12
[   97.260441][ T5087] (syz.2.318,5087,1):ocfs2_read_locked_inode:521 ERROR: status = -12
[   97.279431][ T5087] (syz.2.318,5087,1):ocfs2_double_lock:1186 ERROR: status = -12
[   97.306470][ T5087] (syz.2.318,5087,1):ocfs2_link:713 ERROR: status = -12
[   97.332375][ T2284] usb 4-1: USB disconnect, device number 4
[   97.353701][ T2284] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   97.486621][ T4212] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[   97.501924][ T2284] cp210x 4-1:0.0: device disconnected
[   97.508362][ T4212] ath9k_htc: Failed to initialize the device
[   97.510944][    T7] usb 5-1: ath9k_htc: USB layer deinitialized
[   97.682027][ T5094] loop1: detected capacity change from 0 to 40427
[   97.744412][ T5094] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   97.754024][ T5094] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   97.797104][ T5094] F2FS-fs (loop1): invalid crc value
[   97.808221][ T4169] ocfs2: Unmounting device (7,2) on (node local)
[   97.909415][ T5094] F2FS-fs (loop1): Found nat_bits in checkpoint
[   97.934496][ T5106] netlink: 32 bytes leftover after parsing attributes in process `syz.0.323'.
[   98.357957][ T5094] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   98.365157][ T5094] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   98.445339][ T5121] loop0: detected capacity change from 0 to 164
[   98.606613][ T5121] isofs: isofs_export_get_parent(): child directory not normalized!
[   98.918984][  T154] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   98.941970][  T154] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[   99.202584][ T5104] loop4: detected capacity change from 0 to 32768
[   99.285554][ T5104] XFS: attr2 mount option is deprecated.
[   99.449038][ T5104] XFS (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[   99.457561][ T5104] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[   99.469959][ T5104] XFS (loop4): Mounting V5 Filesystem
[   99.521030][ T5152] loop3: detected capacity change from 0 to 2048
[   99.704129][ T5159] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   99.720319][ T5104] XFS (loop4): Ending clean mount
[   99.797237][ T5104] XFS (loop4): Quotacheck needed: Please wait.
[   99.911055][ T5104] XFS (loop4): Quotacheck: Done.
[  100.046263][ T5104] XFS (loop4): User initiated shutdown received.
[  100.084183][ T5104] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491).  Shutting down filesystem.
[  100.167150][ T5104] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  100.302376][ T4167] XFS (loop4): Unmounting Filesystem
[  100.308534][ T5172] loop0: detected capacity change from 0 to 256
[  100.939554][   T26] audit: type=1326 audit(2000000031.910:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5178 comm="syz.4.345" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab1998f809 code=0x0
[  100.961113][    C0] vkms_vblank_simulate: vblank timer overrun
[  100.991228][ T5170] loop2: detected capacity change from 0 to 32768
[  101.404994][ T5186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.348'.
[  101.460043][ T5172] exfat: Deprecated parameter 'utf8'
[  101.589560][ T5172] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  101.810691][ T5194] MPI: mpi too large (187712 bits)
[  102.368487][   T26] audit: type=1326 audit(2000000033.340:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe234a48809 code=0x7ffc0000
[  102.390551][    C0] vkms_vblank_simulate: vblank timer overrun
[  102.440724][   T26] audit: type=1326 audit(2000000033.370:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe234a48809 code=0x7ffc0000
[  102.490941][   T26] audit: type=1326 audit(2000000033.370:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe234a48809 code=0x7ffc0000
[  102.557529][   T26] audit: type=1326 audit(2000000033.370:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7fe234a48809 code=0x7ffc0000
[  102.591475][ T5212] loop3: detected capacity change from 0 to 512
[  102.613954][   T26] audit: type=1326 audit(2000000033.370:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5207 comm="syz.3.359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe234a48809 code=0x7ffc0000
[  102.737817][ T5212] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback.
[  102.761866][ T5212] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  102.835422][   T26] audit: type=1800 audit(2000000033.810:9): pid=5212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.361" name="file1" dev="loop3" ino=15 res=0 errno=0
[  102.864308][   T26] audit: type=1800 audit(2000000033.830:10): pid=5212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.361" name="file2" dev="loop3" ino=16 res=0 errno=0
[  103.152989][ T5227] loop3: detected capacity change from 0 to 128
[  103.232534][ T5227] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  103.301772][ T5227] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  103.333847][    C0] vkms_vblank_simulate: vblank timer overrun
[  103.369939][ T5231] loop0: detected capacity change from 0 to 4096
[  103.383513][ T5234] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  103.390721][   T26] audit: type=1800 audit(2000000034.370:11): pid=5227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.363" name="file2" dev="loop3" ino=12 res=0 errno=0
[  103.449044][ T5231] EXT4-fs (loop0): Test dummy encryption mode enabled
[  103.504735][ T5231] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  103.760581][ T5246] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  103.813363][ T5231] EXT4-fs (loop0): mounted filesystem without journal. Opts: norecovery,test_dummy_encryption,nombcache,user_xattr,nomblk_io_submit,,errors=continue. Quota mode: writeback.
[  104.231144][ T5251] loop1: detected capacity change from 0 to 128
[  104.771736][ T5243] loop2: detected capacity change from 0 to 32768
[  105.262128][ T5261] loop3: detected capacity change from 0 to 8192
[  105.379306][ T5261] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  105.395557][ T5261] REISERFS (device loop3): using ordered data mode
[  105.423864][ T5261] reiserfs: using flush barriers
[  105.441565][ T5261] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  105.482559][ T5261] REISERFS (device loop3): checking transaction log (loop3)
[  105.618786][ T5261] REISERFS (device loop3): Using r5 hash to sort names
[  105.662214][ T5261] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  105.683532][ T5251] VFS: Found a Xenix FS (block size = 512) on device loop1
[  105.707590][ T5251] sysv_free_block: trying to free block not in datazone
[  105.774281][ T5265] UBIFS error (pid: 5265): cannot open "./file0", error -22
[  105.909417][ T4168] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  106.070176][ T4177] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  106.298412][ T5259] loop4: detected capacity change from 0 to 32768
[  106.372178][ T5259] XFS: noikeep mount option is deprecated.
[  106.438696][ T4177] usb 1-1: Using ep0 maxpacket: 32
[  106.516194][ T5243] XFS (loop2): Mounting V5 Filesystem
[  106.522187][ T5259] XFS (loop4): Mounting V5 Filesystem
[  106.629905][ T4177] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.647180][ T4177] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.684474][ T4177] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  106.962805][ T4177] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  106.979267][ T4177] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  107.013685][ T4177] usb 1-1: Product: syz
[  107.017892][ T4177] usb 1-1: Manufacturer: syz
[  107.022503][ T4177] usb 1-1: SerialNumber: syz
[  107.153345][ T5293] netlink: 'syz.1.397': attribute type 1 has an invalid length.
[  107.185083][ T5293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'.
[  107.196757][ T4177] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input8
[  107.542467][ T4177] usb 1-1: USB disconnect, device number 2
[  107.616612][ T4177] appletouch 1-1:1.0: input: appletouch disconnected
[  108.405298][ T5243] XFS (loop2): Ending clean mount
[  108.495378][ T4169] XFS (loop2): Unmounting Filesystem
[  108.604147][ T5309] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  108.784309][ T5312] loop1: detected capacity change from 0 to 1024
[  109.172800][ T5319] loop0: detected capacity change from 0 to 2048
[  109.229880][ T5135] hfsplus: b-tree write err: -5, ino 4
[  109.600393][ T5334] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  109.638819][ T5334] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.649402][ T5334] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.915178][ T5259] XFS (loop4): Ending clean mount
[  109.975006][ T5259] XFS (loop4): Quotacheck needed: Please wait.
[  110.130951][ T5343] loop1: detected capacity change from 0 to 2048
[  110.203376][ T5259] XFS (loop4): Quotacheck: Done.
[  110.256251][ T4167] XFS (loop4): Unmounting Filesystem
[  110.832898][ T5360] loop3: detected capacity change from 0 to 128
[  110.858284][ T5361] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  110.888999][ T5360] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  110.963158][ T5360] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  111.177697][ T4174] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  111.229906][ T4174] FAT-fs (loop3): Filesystem has been set read-only
[  111.280496][ T4174] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  111.976288][ T5343] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  112.001211][ T5363] loop0: detected capacity change from 0 to 32768
[  112.104411][ T5343] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry at pos 232 with incorrect tag 0
[  112.493838][ T5363] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  112.738572][ T5363] JBD2: Ignoring recovery information on journal
[  113.014033][ T5363] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  113.208613][ T5363] OCFS2: ERROR (device loop0): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total
[  113.338391][ T5363] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  113.348884][ T5363] OCFS2: Returning error to the calling process.
[  113.405837][ T5363] (syz.0.409,5363,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -5
[  113.467165][ T5363] (syz.0.409,5363,1):__ocfs2_claim_clusters:2355 ERROR: status = -5
[  113.503761][ T5363] (syz.0.409,5363,0):__ocfs2_claim_clusters:2363 ERROR: status = -5
[  113.511812][ T5363] (syz.0.409,5363,0):ocfs2_local_alloc_new_window:1222 ERROR: status = -5
[  113.600943][ T5363] (syz.0.409,5363,0):ocfs2_local_alloc_new_window:1247 ERROR: status = -5
[  113.653686][ T5363] (syz.0.409,5363,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -5
[  113.742338][ T5363] (syz.0.409,5363,0):ocfs2_local_alloc_slide_window:1340 ERROR: status = -5
[  113.796623][ T5363] (syz.0.409,5363,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -5
[  113.848812][ T5363] (syz.0.409,5363,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -5
[  113.879264][ T5363] (syz.0.409,5363,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -5
[  113.971860][ T5363] (syz.0.409,5363,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -5
[  114.024778][ T5363] (syz.0.409,5363,0):ocfs2_symlink:1909 ERROR: status = -5
[  114.032494][ T5363] (syz.0.409,5363,0):ocfs2_symlink:2063 ERROR: status = -5
[  114.382100][ T5398] ALSA: mixer_oss: invalid OSS volume ''
[  114.484591][ T4172] ocfs2: Unmounting device (7,0) on (node local)
[  114.604583][ T5405] loop2: detected capacity change from 0 to 512
[  114.836201][ T5405] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  114.942648][ T5405] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  114.982658][ T5405] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.428: invalid indirect mapped block 2683928664 (level 1)
[  115.062052][ T5409] loop4: detected capacity change from 0 to 4096
[  115.125793][ T5405] EXT4-fs (loop2): Remounting filesystem read-only
[  115.132939][ T5405] EXT4-fs (loop2): 1 truncate cleaned up
[  115.149012][ T5405] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.,. Quota mode: writeback.
[  115.274687][ T5405] EXT4-fs (loop2): shut down requested (2)
[  115.329842][ T5405] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback.
[  115.333419][ T5403] chnl_net:caif_netlink_parms(): no params data found
[  115.648445][ T5403] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.660920][ T5403] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.689293][ T5403] device bridge_slave_0 entered promiscuous mode
[  115.711765][ T5403] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.735416][ T5403] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.740235][ T5401] loop1: detected capacity change from 0 to 32768
[  115.776791][ T5403] device bridge_slave_1 entered promiscuous mode
[  115.874613][ T5403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.902553][ T5403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.006615][ T5403] team0: Port device team_slave_0 added
[  116.065718][ T5403] team0: Port device team_slave_1 added
[  116.171083][ T5403] batman_adv: batadv0: Adding interface: batadv_slave_0
[  116.183676][ T5403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.263910][ T5403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.355843][ T5403] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.364896][ T5403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.476841][ T5403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.667913][ T5403] device hsr_slave_0 entered promiscuous mode
[  116.703936][   T21] Bluetooth: hci4: command 0x0409 tx timeout
[  116.714013][ T5403] device hsr_slave_1 entered promiscuous mode
[  116.732198][ T5403] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  116.739834][ T5403] Cannot create hsr debugfs directory
[  116.834372][ T5409] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  116.920427][ T5420] loop2: detected capacity change from 0 to 40427
[  117.163030][ T5420] F2FS-fs (loop2): Found nat_bits in checkpoint
[  117.280368][ T5403] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  117.322871][ T5403] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  117.336549][ T5420] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  117.446314][ T5403] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  117.488091][   T26] audit: type=1804 audit(2000000048.460:12): pid=5420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.431" name="/newroot/76/file2/file0" dev="loop2" ino=10 res=1 errno=0
[  117.561417][ T5403] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  117.672209][ T5401] (syz.1.427,5401,1):ocfs2_initialize_super:2310 ERROR: status = -12
[  117.754296][ T5401] (syz.1.427,5401,1):ocfs2_fill_super:1177 ERROR: status = -12
[  117.767087][ T4169] attempt to access beyond end of device
[  117.767087][ T4169] loop2: rw=2049, want=45104, limit=40427
[  117.948989][ T5403] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.013595][ T5437] sp0: Synchronizing with TNC
[  118.072432][ T5403] 8021q: adding VLAN 0 to HW filter on device team0
[  118.114188][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  118.122123][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  118.325138][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  118.346577][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  118.373051][ T5135] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.380198][ T5135] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.447851][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  118.471127][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  118.500541][ T5447] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.440'.
[  118.515656][ T5135] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.522745][ T5135] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.773605][ T2284] Bluetooth: hci4: command 0x041b tx timeout
[  119.469798][ T5456] loop4: detected capacity change from 0 to 2048
[  119.589005][ T5460] loop2: detected capacity change from 0 to 128
[  119.788748][ T5460] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  119.820266][ T5460] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  119.842235][ T5456] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  119.851481][ T5460] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #2: comm syz.2.445: Directory block failed checksum
[  119.951112][ T5463] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #2: comm syz.2.445: Directory block failed checksum
[  120.871090][ T4217] Bluetooth: hci4: command 0x040f tx timeout
[  121.665094][ T5487] loop2: detected capacity change from 0 to 64
[  121.865489][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  121.875714][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  121.903459][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  121.962368][ T5403] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  122.021288][ T5403] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  122.091878][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  122.101643][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  122.139700][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  122.172887][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  122.238000][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  122.281827][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  122.291258][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  122.326742][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  122.359090][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  122.377772][ T5135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  122.780979][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  122.807636][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  122.856768][ T5403] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.939224][ T2284] Bluetooth: hci4: command 0x0419 tx timeout
[  122.979901][ T5489] loop4: detected capacity change from 0 to 32768
[  123.304745][ T4212] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  123.409778][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  123.427786][ T3075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  123.456999][ T5403] device veth0_vlan entered promiscuous mode
[  123.539835][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  123.585231][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  123.616842][ T5513] loop0: detected capacity change from 0 to 512
[  123.639596][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  123.683108][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  123.719420][ T5403] device veth1_vlan entered promiscuous mode
[  123.760531][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  123.785910][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  123.788494][ T5513] EXT4-fs (loop0): Ignoring removed orlov option
[  123.808408][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  123.834589][ T5513] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  123.850567][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  123.862234][ T5403] device veth0_macvtap entered promiscuous mode
[  123.889068][ T4212] usb 2-1: config 0 interface 0 has no altsetting 0
[  123.907693][ T4212] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  123.908911][ T5403] device veth1_macvtap entered promiscuous mode
[  123.919486][ T4212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.962469][ T4212] usb 2-1: config 0 descriptor??
[  123.992022][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.009786][ T5513] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.463: casefold flag without casefold feature
[  124.065209][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.091383][ T5513] EXT4-fs (loop0): Remounting filesystem read-only
[  124.108382][ T5513] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.463: couldn't read orphan inode 15 (err -117)
[  124.144598][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.165908][ T5513] EXT4-fs (loop0): Remounting filesystem read-only
[  124.172457][ T5513] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,nodelalloc,errors=remount-ro,grpquota,quota,dioread_nolock,quota,grpjquota=,inode_readahead_blks=0x0000000000020000,. Quota mode: writeback.
[  124.179129][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.237634][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.273744][ T5513] EXT4-fs error (device loop0): ext4_empty_dir:3136: inode #2: comm syz.0.463: invalid size
[  124.276516][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.319420][ T5513] EXT4-fs (loop0): Remounting filesystem read-only
[  124.347064][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.390169][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.432591][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.459339][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.500447][ T5403] batman_adv: batadv0: Interface activated: batadv_slave_0
[  124.553365][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  124.561821][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  124.581285][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  124.604416][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  124.655136][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.722168][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.771271][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.833090][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.922271][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.969983][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.973940][ T4212] video4linux radio48: keene_cmd_main failed (-71)
[  125.012692][ T4212] radio-keene 2-1:0.0: V4L2 device registered as radio48
[  125.037234][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.065701][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.065752][ T4212] usb 2-1: USB disconnect, device number 3
[  125.096601][ T5403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  125.135081][ T5403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.171896][ T5403] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.215541][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  125.233539][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  125.306441][ T5403] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.326014][ T5403] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.350792][ T5403] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.417043][ T5403] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.796383][ T4260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.817077][ T4260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.952798][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  125.981338][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  126.031806][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.087401][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  126.116433][ T5531] loop1: detected capacity change from 0 to 8192
[  126.511160][ T4211] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  126.888651][ T4211] usb 5-1: Using ep0 maxpacket: 8
[  127.123997][ T4211] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  127.144263][ T4211] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  127.200381][ T4211] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  127.223753][ T4211] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  127.261268][ T4211] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  127.310980][ T4211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.629641][ T4211] usb 5-1: GET_CAPABILITIES returned 0
[  127.635225][ T4211] usbtmc 5-1:16.0: can't read capabilities
[  127.845669][ T5534] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90
[  127.906734][    T7] usb 5-1: USB disconnect, device number 4
[  128.105699][ T5545] loop5: detected capacity change from 0 to 32768
[  128.171150][ T5531] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  128.181731][ T5531] REISERFS (device loop1): using ordered data mode
[  128.216604][ T5531] reiserfs: using flush barriers
[  128.240206][ T5548] tap0: tun_chr_ioctl cmd 1074025676
[  128.290310][ T5548] tap0: owner set to 0
[  128.304219][ T5531] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  128.333495][ T5531] REISERFS (device loop1): checking transaction log (loop1)
[  128.455108][ T5531] REISERFS (device loop1): Using r5 hash to sort names
[  128.483171][ T5531] REISERFS (device loop1): using 3.5.x disk format
[  128.539786][ T5531] REISERFS warning (device loop1): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are!
[  128.570385][ T5531] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  128.616226][ T5551] loop4: detected capacity change from 0 to 128
[  129.150761][ T5545] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  129.198384][ T4239] (kworker/u4:5,4239,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[  129.429513][   T26] audit: type=1800 audit(2000000060.400:13): pid=5545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.474" name="file1" dev="loop5" ino=17058 res=0 errno=0
[  129.450969][ T5556] (syz.5.474,5556,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[  129.516238][ T5556] (syz.5.474,5556,0):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -2
[  129.593663][ T5556] (syz.5.474,5556,0):__ocfs2_prepare_orphan_dir:2166 ERROR: status = -2
[  129.669067][ T5556] (syz.5.474,5556,0):ocfs2_prepare_orphan_dir:2208 ERROR: status = -2
[  129.730203][ T5556] (syz.5.474,5556,0):ocfs2_prepare_orphan_dir:2224 ERROR: status = -2
[  129.769234][ T5556] (syz.5.474,5556,0):ocfs2_unlink:962 ERROR: status = -2
[  129.898475][ T5563] netlink: 20 bytes leftover after parsing attributes in process `syz.1.481'.
[  130.026091][ T5563] netlink: 20 bytes leftover after parsing attributes in process `syz.1.481'.
[  130.082030][ T5563] Zero length message leads to an empty skb
[  130.104817][ T5565] loop0: detected capacity change from 0 to 4096
[  130.139666][ T5565] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  130.199247][ T5403] ocfs2: Unmounting device (7,5) on (node local)
[  130.277903][ T5565] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  130.662810][ T5571] loop1: detected capacity change from 0 to 128
[  130.671162][ T5565] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match.  Run ntfsfix or chkdsk.
[  130.730198][ T5565] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  130.838474][ T5565] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[  130.863071][ T5565] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  130.915095][ T5565] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  131.002689][ T5565] ntfs: volume version 3.1.
[  131.007692][ T5565] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  131.048986][ T5565] ntfs: (device loop0): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  132.271648][ T5584] netlink: 20 bytes leftover after parsing attributes in process `syz.4.490'.
[  132.398946][ T5586] loop2: detected capacity change from 0 to 32768
[  132.656897][ T5586] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.492 (5586)
[  132.697612][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.703987][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  132.751078][ T5586] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  132.759800][ T5586] BTRFS info (device loop2): using free space tree
[  132.796506][ T5586] BTRFS info (device loop2): has skinny extents
[  133.053903][ T5610] loop4: detected capacity change from 0 to 256
[  133.350810][ T5586] BTRFS info (device loop2): enabling ssd optimizations
[  134.311499][ T5610] FAT-fs (loop4): Directory bread(block 64) failed
[  134.352600][ T5610] FAT-fs (loop4): Directory bread(block 65) failed
[  134.434581][ T5610] FAT-fs (loop4): Directory bread(block 66) failed
[  134.467383][ T5610] FAT-fs (loop4): Directory bread(block 67) failed
[  134.494465][ T5610] FAT-fs (loop4): Directory bread(block 68) failed
[  134.548033][ T5610] FAT-fs (loop4): Directory bread(block 69) failed
[  134.606133][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  134.606148][   T26] audit: type=1326 audit(2000000065.580:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9868f809 code=0x7ffc0000
[  134.615598][ T5610] FAT-fs (loop4): Directory bread(block 70) failed
[  134.668753][ T5636] loop5: detected capacity change from 0 to 256
[  134.679085][  T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.709343][ T5618] loop1: detected capacity change from 0 to 40427
[  134.718688][ T5610] FAT-fs (loop4): Directory bread(block 71) failed
[  134.740981][ T5610] FAT-fs (loop4): Directory bread(block 72) failed
[  134.765845][   T26] audit: type=1326 audit(2000000065.630:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9868f809 code=0x7ffc0000
[  134.790886][ T5610] FAT-fs (loop4): Directory bread(block 73) failed
[  134.843263][ T5618] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(262146) root(3)
[  134.887880][   T26] audit: type=1326 audit(2000000065.640:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f6e9868f809 code=0x7ffc0000
[  134.903705][ T5618] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  134.986474][  T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.009629][ T5618] F2FS-fs (loop1): Found nat_bits in checkpoint
[  135.024439][   T26] audit: type=1326 audit(2000000065.640:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9868f809 code=0x7ffc0000
[  135.129557][   T26] audit: type=1326 audit(2000000065.640:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5633 comm="syz.0.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9868f809 code=0x7ffc0000
[  135.182826][   T26] audit: type=1800 audit(2000000065.880:19): pid=5636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.505" name="file0" dev="loop5" ino=1048638 res=0 errno=0
[  135.214779][ T5618] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  135.243592][ T5618] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  135.263774][ T2284] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  135.308263][ T5655] sg_write: process 203 (syz.4.511) changed security contexts after opening file descriptor, this is not allowed.
[  135.352814][ T5655] program syz.4.511 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  135.378575][  T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.448625][  T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  135.629379][ T2284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  135.656911][ T2284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  135.688062][ T2284] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[  135.731784][ T2284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.797565][ T2284] usb 3-1: config 0 descriptor??
[  136.079460][ T5650] loop5: detected capacity change from 0 to 32768
[  136.152175][ T5650] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.508 (5650)
[  136.233862][ T5650] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  136.282465][ T5650] BTRFS info (device loop5): enabling auto defrag
[  136.303202][ T5650] BTRFS info (device loop5): max_inline at 0
[  136.311576][ T5683] loop0: detected capacity change from 0 to 512
[  136.312671][ T2284] samsung 0003:0419:0001.0002: unknown main item tag 0x0
[  136.338049][ T5650] BTRFS info (device loop5): enabling ssd optimizations
[  136.353766][ T2284] samsung 0003:0419:0001.0002: unknown main item tag 0x0
[  136.367758][ T5650] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  136.382209][ T2284] samsung 0003:0419:0001.0002: unknown main item tag 0x0
[  136.389074][ T5683] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  136.411467][ T2284] samsung 0003:0419:0001.0002: unknown main item tag 0x0
[  136.422687][ T5650] BTRFS info (device loop5): use lzo compression, level 0
[  136.450293][ T5650] BTRFS info (device loop5): using free space tree
[  136.461344][ T2284] samsung 0003:0419:0001.0002: unknown main item tag 0x0
[  136.465467][ T5650] BTRFS info (device loop5): has skinny extents
[  136.487114][ T5683] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, 
[  136.487154][ T2284] samsung 0003:0419:0001.0002: unknown main item tag 0x0
[  136.503300][ T5683] block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  136.526164][ T5683] EXT4-fs (loop0): 1 truncate cleaned up
[  136.531966][ T5683] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,lazytime,quota,quota,,errors=continue. Quota mode: writeback.
[  136.544554][ T2284] samsung 0003:0419:0001.0002: unknown main item tag 0x0
[  136.606505][ T2284] samsung 0003:0419:0001.0002: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.2-1/input0
[  136.640391][ T2284] usb 3-1: USB disconnect, device number 5
[  136.941098][ T5707] loop1: detected capacity change from 0 to 4096
[  136.989891][ T5707] ntfs3: Unknown parameter 'ÿÿÿÿÿ'
[  137.274904][ T5727] loop0: detected capacity change from 0 to 256
[  137.290678][ T5707] loop1: detected capacity change from 0 to 1024
[  137.399043][  T144] device hsr_slave_0 left promiscuous mode
[  137.414281][  T144] device hsr_slave_1 left promiscuous mode
[  137.543774][ T4177] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  137.623106][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.650851][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.790402][ T4177] usb 3-1: Using ep0 maxpacket: 8
[  137.924018][ T4177] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  137.937934][ T4239] hfsplus: b-tree write err: -5, ino 4
[  137.958192][ T4177] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  137.959113][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.019313][ T4177] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  138.021112][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.046134][  T144] device bridge_slave_1 left promiscuous mode
[  138.059130][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.087932][ T4177] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  138.127489][  T144] device bridge_slave_0 left promiscuous mode
[  138.145183][ T4177] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  138.151939][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.181741][ T4177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.251636][  T144] device veth1_macvtap left promiscuous mode
[  138.262194][  T144] device veth0_macvtap left promiscuous mode
[  138.268481][  T144] device veth1_vlan left promiscuous mode
[  138.275527][  T144] device veth0_vlan left promiscuous mode
[  138.494679][ T4177] usb 3-1: GET_CAPABILITIES returned 0
[  138.500235][ T4177] usbtmc 3-1:16.0: can't read capabilities
[  138.734215][ T5728] usb 3-1: usbtmc_ioctl_clear_in_halt returned -32
[  138.755418][ T2284] usb 3-1: USB disconnect, device number 6
[  138.832954][ T5779] loop1: detected capacity change from 0 to 1024
[  138.878195][ T5779] EXT4-fs (loop1): Test dummy encryption mode enabled
[  138.893007][ T5779] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  138.901902][ T5779] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  138.923210][ T5779] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,test_dummy_encryption,resuid=0x0000000000000000,errors=remount-ro,dioread_nolock,max_dir_size_kb=0x0000000000000009,nomblk_io_submit,data_err=abort,. Quota mode: writeback.
[  138.946636][    C1] vkms_vblank_simulate: vblank timer overrun
[  139.007928][  T144] team0 (unregistering): Port device team_slave_1 removed
[  139.026971][  T144] team0 (unregistering): Port device team_slave_0 removed
[  139.062331][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  139.079795][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  139.223563][  T144] bond0 (unregistering): Released all slaves
[  139.477651][ T5788] loop4: detected capacity change from 0 to 8
[  139.566063][ T5788] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  139.694946][ T5797] netlink: 44 bytes leftover after parsing attributes in process `syz.5.549'.
[  139.931543][ T5806] loop5: detected capacity change from 0 to 512
[  140.232455][ T5806] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback.
[  140.327214][ T5806] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  140.534710][ T5826] loop1: detected capacity change from 0 to 256
[  140.616194][ T5785] loop2: detected capacity change from 0 to 32768
[  140.712106][ T5785] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.545 (5785)
[  140.735085][   T26] audit: type=1800 audit(2000000071.710:20): pid=5826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.555" name="file2" dev="loop1" ino=1048643 res=0 errno=0
[  140.751027][ T5826] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001)
[  140.863829][ T5826] FAT-fs (loop1): Filesystem has been set read-only
[  140.872819][ T5785] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  140.914119][ T5785] BTRFS info (device loop2): using free space tree
[  140.920759][ T5785] BTRFS info (device loop2): has skinny extents
[  141.296919][ T5794] loop0: detected capacity change from 0 to 40427
[  141.360630][ T5785] BTRFS info (device loop2): enabling ssd optimizations
[  141.451608][ T5856] loop1: detected capacity change from 0 to 4096
[  141.452915][ T5794] F2FS-fs (loop0): Invalid log blocks per segment (4278190089)
[  141.542007][ T5872] loop5: detected capacity change from 0 to 1024
[  141.550748][ T5794] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  141.636535][ T5794] F2FS-fs (loop0): invalid crc value
[  141.738168][ T5794] F2FS-fs (loop0): Found nat_bits in checkpoint
[  142.047577][ T5794] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  142.083797][ T5794] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  142.172581][ T4168] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  142.183779][ T4168] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  142.348213][ T4172] attempt to access beyond end of device
[  142.348213][ T4172] loop0: rw=2049, want=45104, limit=40427
[  142.668811][ T5906] device bond0 entered promiscuous mode
[  142.683993][ T5906] device bond_slave_0 entered promiscuous mode
[  142.700858][ T5906] device bond_slave_1 entered promiscuous mode
[  142.779156][ T5906] netlink: 10 bytes leftover after parsing attributes in process `syz.5.572'.
[  143.022798][ T5919] loop2: detected capacity change from 0 to 2048
[  143.207542][ T5919] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  143.226619][ T5928] netlink: 'syz.5.580': attribute type 14 has an invalid length.
[  143.251161][ T5919] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  143.527029][ T5944] syz.1.584 uses obsolete (PF_INET,SOCK_PACKET)
[  143.874023][   T21] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  143.992554][ T5967] netlink: 76 bytes leftover after parsing attributes in process `syz.4.590'.
[  144.113781][   T21] usb 3-1: Using ep0 maxpacket: 8
[  144.233978][   T21] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  144.253784][   T21] usb 3-1: config 0 has no interface number 0
[  144.282930][   T21] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  144.348783][   T21] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  144.394667][   T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.448596][   T21] usb 3-1: config 0 descriptor??
[  144.507002][   T21] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  144.780024][   T21] usb 3-1: USB disconnect, device number 7
[  144.807387][   T21] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected
[  144.831857][ T6003] tipc: Started in network mode
[  144.855260][ T6003] tipc: Node identity ac14140f, cluster identity 4711
[  144.887118][ T6003] tipc: New replicast peer: 255.255.255.255
[  144.942735][ T6003] tipc: Enabled bearer <udp:syz2>, priority 10
[  145.092202][ T6010] loop1: detected capacity change from 0 to 256
[  145.152194][ T5954] loop5: detected capacity change from 0 to 40427
[  145.570837][ T6023] loop2: detected capacity change from 0 to 256
[  145.617379][ T5986] loop4: detected capacity change from 0 to 40427
[  146.025379][ T6012] loop0: detected capacity change from 0 to 131072
[  146.056231][ T2284] tipc: Node number set to 2886997007
[  146.130152][ T6012] F2FS-fs (loop0): Segment count (31) mismatch with total segments from devices (0)
[  146.140048][ T6012] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  146.151873][ T6012] F2FS-fs (loop0): invalid crc value
[  146.183748][ T5986] F2FS-fs (loop4): Found nat_bits in checkpoint
[  146.192117][ T6010] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  146.235118][ T5954] F2FS-fs (loop5): Found nat_bits in checkpoint
[  146.255573][ T6012] F2FS-fs (loop0): Found nat_bits in checkpoint
[  146.350084][ T6012] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  146.357245][ T6012] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  146.476567][ T6012] F2FS-fs (loop0): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891
[  146.559002][ T5986] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  146.572615][ T5954] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  146.727095][ T6059] loop1: detected capacity change from 0 to 1024
[  146.781576][ T6061] sp0: Synchronizing with TNC
[  146.806588][ T6059] EXT4-fs (loop1): Test dummy encryption mode enabled
[  146.813446][ T6059] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  146.849663][ T6059] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  146.859621][ T6059] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c815c01c, mo2=0003]
[  146.904838][ T6060] [U] è
[  146.953814][ T6059] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,noblock_validity,debug,test_dummy_encryption,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  147.781086][ T6082] loop5: detected capacity change from 0 to 256
[  147.904842][ T6082] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x0b0ca5f0, utbl_chksum : 0xe619d30d)
[  148.008797][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.606'.
[  148.024290][ T6087] netlink: 1 bytes leftover after parsing attributes in process `syz.4.606'.
[  148.295965][ T6100] loop4: detected capacity change from 0 to 512
[  148.321965][ T6104] loop5: detected capacity change from 0 to 512
[  148.500858][ T6104] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,barrier,,errors=continue. Quota mode: writeback.
[  148.525838][ T6104] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  148.624541][ T6104] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #2: comm syz.5.617: corrupted inode contents
[  148.699797][ T6104] EXT4-fs error (device loop5): ext4_dirty_inode:6010: inode #2: comm syz.5.617: mark_inode_dirty error
[  148.727698][ T6100] EXT4-fs (loop4): 1 orphan inode deleted
[  148.733723][ T6100] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  148.746051][ T6104] EXT4-fs error (device loop5): ext4_do_update_inode:5174: inode #2: comm syz.5.617: corrupted inode contents
[  148.755086][ T6100] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.773934][ T6104] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.617: mark_inode_dirty error
[  148.813756][ T6085] loop1: detected capacity change from 0 to 32768
[  148.874084][ T6120] EXT4-fs error (device loop5): ext4_get_first_dir_block:3608: inode #18: comm syz.5.617: directory missing '.'
[  150.156499][ T6149] loop0: detected capacity change from 0 to 8192
[  150.253306][ T6159] loop4: detected capacity change from 0 to 2048
[  150.275023][ T6149] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  150.325116][ T6159] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  150.373855][ T6149] REISERFS (device loop0): using ordered data mode
[  150.433835][ T6149] reiserfs: using flush barriers
[  150.450126][ T6149] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  150.504223][ T6149] REISERFS (device loop0): checking transaction log (loop0)
[  150.514180][ T6149] REISERFS (device loop0): Using r5 hash to sort names
[  150.621352][ T6149] reiserfs: enabling write barrier flush mode
[  150.692238][ T6149] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  150.734069][ T6155] loop1: detected capacity change from 0 to 32768
[  150.822798][ T6142] loop5: detected capacity change from 0 to 32768
[  150.940822][ T6142] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.631 (6142)
[  150.947253][ T6155] XFS (loop1): Mounting V5 Filesystem
[  151.004798][ T6151] loop2: detected capacity change from 0 to 40427
[  151.081974][ T6142] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  151.123742][ T6142] BTRFS info (device loop5): setting nodatacow, compression disabled
[  151.138660][ T6142] BTRFS info (device loop5): enabling auto defrag
[  151.148955][ T6142] BTRFS info (device loop5): max_inline at 0
[  151.158807][ T6142] BTRFS info (device loop5): using free space tree
[  151.171837][ T6151] F2FS-fs (loop2): invalid crc value
[  151.174046][ T6142] BTRFS info (device loop5): has skinny extents
[  151.198114][ T6155] XFS (loop1): Ending clean mount
[  151.217146][ T6151] F2FS-fs (loop2): Found nat_bits in checkpoint
[  151.251708][ T6182] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  151.251708][ T6182] The task syz.0.640 (6182) triggered the difference, watch for misbehavior.
[  151.254538][ T6155] XFS (loop1): Quotacheck needed: Please wait.
[  151.371422][ T6164] loop4: detected capacity change from 0 to 40427
[  151.427216][ T6155] XFS (loop1): Quotacheck: Done.
[  151.468883][ T6164] F2FS-fs (loop4): Fix alignment : internally, start(4096) end(16896) block(12288)
[  151.509897][ T6164] F2FS-fs (loop4): invalid crc value
[  151.529136][ T6164] F2FS-fs (loop4): Found nat_bits in checkpoint
[  151.561308][ T6151] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  151.589955][   T26] audit: type=1800 audit(2000000082.560:21): pid=6142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.631" name="bus" dev="loop5" ino=263 res=0 errno=0
[  151.619232][ T6164] F2FS-fs (loop4): recover fsync data on readonly fs
[  151.638245][ T6164] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  151.733985][   T26] audit: type=1800 audit(2000000082.700:22): pid=6151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.635" name="bus" dev="loop2" ino=10 res=0 errno=0
[  151.759578][ T4168] XFS (loop1): Unmounting Filesystem
[  151.814667][ T6164] F2FS-fs (loop4): Try to recover all the superblocks, ret: 0
[  151.826446][ T6164] F2FS-fs (loop4): switch extent_cache option is not allowed
[  151.842729][ T6151] attempt to access beyond end of device
[  151.842729][ T6151] loop2: rw=34817, want=78688, limit=40427
[  151.941869][ T4169] attempt to access beyond end of device
[  151.941869][ T4169] loop2: rw=2049, want=45104, limit=40427
[  152.925093][ T6219] block nbd1: shutting down sockets
[  153.101862][ T6229] loop2: detected capacity change from 0 to 8
[  153.143745][ T5753] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  153.179713][ T6229] SQUASHFS error: Unknown inode type 1078 in squashfs_iget!
[  153.195585][ T6234] loop1: detected capacity change from 0 to 8
[  153.274900][ T6234] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  153.364404][ T6229] blk_update_request: I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  153.404409][ T5753] usb 6-1: Using ep0 maxpacket: 32
[  153.414116][ T6229] EXT4-fs (loop2): unable to read superblock
[  153.503003][ T6204] loop0: detected capacity change from 0 to 32768
[  153.543932][ T5753] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  153.570069][ T5753] usb 6-1: config 0 has no interfaces?
[  153.593723][ T5753] usb 6-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0
[  153.618345][ T6204] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  153.641845][ T6250] loop1: detected capacity change from 0 to 512
[  153.648361][ T5753] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.672322][ T6204] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  153.688858][ T5753] usb 6-1: config 0 descriptor??
[  153.771657][ T6255] loop2: detected capacity change from 0 to 512
[  153.823103][ T6204] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  153.841291][ T6250] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  153.856383][ T5752] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  153.874708][ T5752] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  153.892522][ T6250] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  153.922064][ T6255] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.662: corrupted inode contents
[  153.992453][ T6255] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #3: comm syz.2.662: mark_inode_dirty error
[  154.018829][ T5752] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 144ms
[  154.050527][ T5752] gfs2: fsid=syz:syz.0: jid=0: Done
[  154.071565][ T6255] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.662: corrupted inode contents
[  154.095856][ T6204] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  154.164199][ T6255] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.662: mark_inode_dirty error
[  154.230446][ T6255] Quota error (device loop2): write_blk: dquota write failed
[  154.232872][ T4425] usb 6-1: USB disconnect, device number 2
[  154.264864][ T6255] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  154.312621][ T6255] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.662: Failed to acquire dquot type 0
[  154.348339][ T6255] EXT4-fs (loop2): 1 orphan inode deleted
[  154.379258][ T6255] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  154.437890][ T6255] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  154.549391][ T6258] loop4: detected capacity change from 0 to 32768
[  154.604361][ T6255] EXT4-fs (loop2): shut down requested (2)
[  154.668955][ T6258] ERROR: (device loop4): diAllocBit: iag inconsistent
[  154.668955][ T6258] 
[  154.684966][ T6255] syz.2.662 (6255) used greatest stack depth: 17912 bytes left
[  154.705743][ T6258] ialloc: diAlloc returned -5!
[  154.912100][   T26] audit: type=1326 audit(2000000085.880:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.5.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68bd07809 code=0x7ffc0000
[  154.967912][   T26] audit: type=1326 audit(2000000085.920:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.5.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fc68bd07809 code=0x7ffc0000
[  155.015463][   T26] audit: type=1326 audit(2000000085.920:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.5.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68bd07809 code=0x7ffc0000
[  155.128175][   T26] audit: type=1326 audit(2000000085.920:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.5.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc68bd07809 code=0x7ffc0000
[  155.247028][ T6298] loop5: detected capacity change from 0 to 8
[  155.382634][ T6298] SQUASHFS error: zstd decompression error: 2
[  155.430933][ T6298] SQUASHFS error: zstd decompression failed, data probably corrupt
[  155.458871][ T6298] SQUASHFS error: Failed to read block 0x62b: -5
[  155.471524][ T6303] SQUASHFS error: Unable to read metadata cache entry [629]
[  155.482159][ T6298] SQUASHFS error: Unable to read metadata cache entry [629]
[  155.493137][ T6303] SQUASHFS error: Unable to read directory block [629:ff26]
[  155.508183][ T6298] SQUASHFS error: Unable to read directory block [629:ff26]
[  155.778628][ T6292] loop2: detected capacity change from 0 to 32768
[  155.890152][ T6294] loop0: detected capacity change from 0 to 32768
[  156.017098][   T26] audit: type=1800 audit(2000000086.990:27): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.665" name="file1" dev="loop0" ino=4 res=0 errno=0
[  156.289397][ T4429] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  156.302523][ T6333] loop4: detected capacity change from 0 to 256
[  156.410767][ T6333] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  156.458947][ T6337] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  156.560313][ T6341] loop5: detected capacity change from 0 to 512
[  156.654021][ T4429] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  156.673359][ T4429] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  156.694122][ T6341] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  156.716150][ T4429] usb 2-1: config 1 has no interface number 0
[  156.722303][ T4429] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.772644][ T4429] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  156.834558][ T6341] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,noblock_validity,mblk_io_submit,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  156.872297][ T6341] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.063921][ T4429] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  157.098151][ T4429] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.111932][ T4429] usb 2-1: Product: syz
[  157.123471][ T4429] usb 2-1: Manufacturer: syz
[  157.128307][ T4429] usb 2-1: SerialNumber: syz
[  157.274280][ T6380] loop5: detected capacity change from 0 to 512
[  157.388944][ T6380] EXT4-fs (loop5): 1 orphan inode deleted
[  157.397339][ T6384] loop4: detected capacity change from 0 to 2048
[  157.406354][ T6380] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,usrquota,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback.
[  157.428992][ T6380] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.531247][ T6384] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  157.638832][ T6392] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  157.730535][    T9] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  157.759683][    T9] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28
[  157.782953][    T9] EXT4-fs (loop4): This should not happen!! Data will be lost
[  157.782953][    T9] 
[  157.850352][    T9] EXT4-fs (loop4): Total free blocks count 0
[  157.859400][ T6378] loop2: detected capacity change from 0 to 40427
[  157.865395][    T9] EXT4-fs (loop4): Free/Dirty block details
[  157.871891][    T9] EXT4-fs (loop4): free_blocks=2415919504
[  157.883586][    T9] EXT4-fs (loop4): dirty_blocks=32
[  157.899948][    T9] EXT4-fs (loop4): Block reservation details
[  157.907028][    T9] EXT4-fs (loop4): i_reserved_data_blocks=2
[  157.922658][ T6401] netlink: 140 bytes leftover after parsing attributes in process `syz.0.710'.
[  157.950010][ T6401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.710'.
[  157.976016][ T6378] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  157.989364][ T6378] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  158.063985][ T4429] cdc_ncm 2-1:1.1: failed GET_NTB_PARAMETERS
[  158.073723][ T4429] cdc_ncm 2-1:1.1: bind() failure
[  158.091930][ T6378] F2FS-fs (loop2): invalid crc value
[  158.109660][ T4429] usb 2-1: USB disconnect, device number 4
[  158.129535][ T6378] F2FS-fs (loop2): Found nat_bits in checkpoint
[  158.259534][ T6415] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.261261][ T6378] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  158.267129][ T6415] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.282438][ T6378] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  158.416407][ T6415] device bridge0 entered promiscuous mode
[  158.474088][    T9] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  158.482989][    T9] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  158.500273][ T6425] loop4: detected capacity change from 0 to 512
[  158.622622][ T6425] EXT4-fs error (device loop4): __ext4_iget:4872: inode #15: block 1803188595: comm syz.4.718: invalid block
[  158.749689][ T6425] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.718: couldn't read orphan inode 15 (err -117)
[  158.890117][ T6425] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000000967,debug_want_extra_isize=0x000000000000005c,usrquota,nombcache,stripe=0x0000000000000008,usrjquota=,,errors=continue. Quota mode: writeback.
[  159.021638][ T4425] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  159.061997][ T6425] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.718: invalid indirect mapped block 234881024 (level 0)
[  159.113525][ T6417] loop0: detected capacity change from 0 to 32768
[  159.202397][ T6417] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.716 (6417)
[  159.263704][ T4425] usb 6-1: Using ep0 maxpacket: 16
[  159.353961][ T6417] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  159.383915][ T4425] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.406858][ T4425] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  159.420140][ T6417] BTRFS info (device loop0): using free space tree
[  159.440514][ T6417] BTRFS info (device loop0): has skinny extents
[  159.461873][ T4425] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  159.503237][ T4425] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.511745][ T6457] loop2: detected capacity change from 0 to 512
[  159.529151][ T4425] usb 6-1: config 0 descriptor??
[  159.674684][ T6457] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  159.756827][ T6457] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.767784][ T6417] BTRFS info (device loop0): enabling ssd optimizations
[  159.781422][ T6447] loop1: detected capacity change from 0 to 32768
[  159.906382][ T6447] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop1 scanned by syz.1.724 (6447)
[  159.960438][ T6447] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  159.984700][ T6447] BTRFS info (device loop1): use zlib compression, level 3
[  160.009440][ T4425] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0003/input/input9
[  160.012563][ T6447] BTRFS info (device loop1): turning on sync discard
[  160.060798][ T6447] BTRFS info (device loop1): max_inline at 0
[  160.083793][ T6447] BTRFS info (device loop1): enabling ssd optimizations
[  160.133809][ T6447] BTRFS info (device loop1): using spread ssd allocation scheme
[  160.189745][ T6447] BTRFS info (device loop1): using free space tree
[  160.197378][ T4425] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  160.220109][ T6447] BTRFS info (device loop1): has skinny extents
[  160.464646][ T4421] usb 6-1: USB disconnect, device number 3
[  160.768784][ T6542] loop4: detected capacity change from 0 to 128
[  160.974449][ T6542] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  161.027832][ T6542] ext4 filesystem being mounted at /152/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  161.059680][    C1] vkms_vblank_simulate: vblank timer overrun
[  161.202736][ T6542] fscrypt (loop4, inode 12): Unsupported encryption flags (0x36)
[  161.306256][ T6563] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  161.325369][ T6565] loop5: detected capacity change from 0 to 128
[  161.417391][ T6565] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  161.441394][   T26] audit: type=1326 audit(2000000092.410:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.2.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa9386809 code=0x7ffc0000
[  161.478871][ T6565] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  161.545691][   T26] audit: type=1326 audit(2000000092.470:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.2.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f5fa9386809 code=0x7ffc0000
[  161.579824][   T26] audit: type=1326 audit(2000000092.470:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.2.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa9386809 code=0x7ffc0000
[  161.624377][   T26] audit: type=1326 audit(2000000092.470:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz.2.741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fa9386809 code=0x7ffc0000
[  161.969974][ T6584] netlink: 'syz.1.736': attribute type 1 has an invalid length.
[  162.018798][ T6584] netlink: 9284 bytes leftover after parsing attributes in process `syz.1.736'.
[  162.069349][ T6584] netlink: 'syz.1.736': attribute type 1 has an invalid length.
[  162.083100][   T26] audit: type=1326 audit(2000000093.050:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6587 comm="syz.0.746" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e9868f809 code=0x0
[  162.391007][ T6604] loop5: detected capacity change from 0 to 4096
[  162.616770][ T6618] device gretap0 entered promiscuous mode
[  162.641264][   T26] audit: type=1800 audit(2000000093.610:33): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.749" name="bus" dev="loop5" ino=33 res=0 errno=0
[  162.669461][ T6618] device erspan0 entered promiscuous mode
[  162.705482][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  162.721300][ T6625] netlink: 28 bytes leftover after parsing attributes in process `syz.1.756'.
[  162.830961][ T6628] loop2: detected capacity change from 0 to 1024
[  162.859163][ T6628] EXT4-fs (loop2): required journal recovery suppressed and not mounted read-only
[  163.079641][   T26] audit: type=1326 audit(2000000094.050:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6603 comm="syz.4.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1998f809 code=0x7fc00000
[  163.458566][ T6667] loop4: detected capacity change from 0 to 256
[  163.584492][ T6667] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  163.701445][ T6681] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  163.808780][ T6687] netlink: 'syz.2.773': attribute type 16 has an invalid length.
[  163.820546][ T4763] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  163.848709][ T6687] netlink: 'syz.2.773': attribute type 3 has an invalid length.
[  163.871861][ T6687] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.773'.
[  164.040091][ T6703] syz.1.780[6703] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  164.040194][ T6703] syz.1.780[6703] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  164.229201][ T4763] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.274915][ T4763] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.294031][ T4763] usb 1-1: New USB device found, idVendor=056a, idProduct=032a, bcdDevice= 0.00
[  164.323452][ T4763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.349026][ T4763] usb 1-1: config 0 descriptor??
[  164.688224][ T6708] loop4: detected capacity change from 0 to 32768
[  164.733542][ T6704] loop2: detected capacity change from 0 to 32768
[  164.776053][ T6708] 
[  164.776053][ T6708]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  164.776053][ T6708] 
[  164.832986][ T6708] 
[  164.832986][ T6708]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  164.832986][ T6708] 
[  164.874093][ T4763] wacom 0003:056A:032A.0004: unknown main item tag 0x4
[  164.905782][ T4763] wacom 0003:056A:032A.0004: hidraw0: USB HID v0.00 Device [HID 056a:032a] on usb-dummy_hcd.0-1/input0
[  164.922231][ T6708] 
[  164.922231][ T6708]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  164.922231][ T6708] 
[  164.962910][ T6708] JFS: Invalid value of umask
[  165.014916][ T6704] XFS (loop2): Mounting V5 Filesystem
[  165.021278][ T4167] 
[  165.021278][ T4167]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  165.021278][ T4167] 
[  165.065555][ T4167] 
[  165.065555][ T4167]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  165.065555][ T4167] 
[  165.089687][ T4177] usb 1-1: USB disconnect, device number 3
[  165.162738][ T6704] XFS (loop2): Ending clean mount
[  165.357723][   T26] audit: type=1800 audit(2000000096.330:35): pid=6704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.782" name="file1" dev="loop2" ino=7430 res=0 errno=0
[  165.402235][ T4169] XFS (loop2): Unmounting Filesystem
[  165.503839][ T4421] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  165.638688][ T6744] capability: warning: `syz.5.793' uses 32-bit capabilities (legacy support in use)
[  165.679360][ T6747] loop0: detected capacity change from 0 to 64
[  165.691426][ T6748] loop4: detected capacity change from 0 to 512
[  165.823549][ T6748] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities
[  165.840680][   T26] audit: type=1800 audit(2000000096.810:36): pid=6747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.794" name="file1" dev="loop0" ino=18 res=0 errno=0
[  165.904147][ T4421] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 121, changing to 10
[  165.926803][ T4421] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25772, setting to 1024
[  165.958722][ T4421] usb 2-1: New USB device found, idVendor=05ac, idProduct=022a, bcdDevice= 0.00
[  165.967764][ T6753] loop5: detected capacity change from 0 to 512
[  166.005373][ T4421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.066880][ T4421] usb 2-1: config 0 descriptor??
[  166.104016][ T6741] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  166.143185][ T6753] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  166.209972][ T6759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.796'.
[  166.304658][ T6753] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.518265][ T6753] EXT4-fs error (device loop5): ext4_readdir:260: inode #12: block 32: comm syz.5.797: path /67/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  166.573915][ T4421] appletouch 2-1:0.0: Geyser mode initialized.
[  166.594027][ T4421] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13
[  166.783880][ T4421] usb 2-1: USB disconnect, device number 5
[  166.812522][ T4421] appletouch 2-1:0.0: input: appletouch disconnected
[  166.839878][ T4184] udevd[4184]: Error opening device "/dev/input/event4": No such device
[  166.864242][ T4184] udevd[4184]: Unable to EVIOCGABS device "/dev/input/event4"
[  166.877732][ T4184] udevd[4184]: Unable to EVIOCGABS device "/dev/input/event4"
[  166.958098][ T6792] loop2: detected capacity change from 0 to 1024
[  167.151642][ T3075] hfsplus: b-tree write err: -5, ino 8
[  167.258654][ T6799] netlink: 32 bytes leftover after parsing attributes in process `syz.4.814'.
[  167.291331][ T6799] netlink: 32 bytes leftover after parsing attributes in process `syz.4.814'.
[  167.309862][ T6801] loop5: detected capacity change from 0 to 64
[  167.341795][ T6801] hfs: unable to locate alternate MDB
[  167.410878][ T6801] hfs: continuing without an alternate MDB
[  167.414983][ T6806] netlink: 16 bytes leftover after parsing attributes in process `syz.4.817'.
[  167.564438][ T6810] netlink: 140 bytes leftover after parsing attributes in process `syz.2.819'.
[  167.608280][ T6810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.819'.
[  167.975440][ T6831] loop1: detected capacity change from 0 to 64
[  168.029636][ T6834] loop5: detected capacity change from 0 to 16
[  168.146953][ T6834] erofs: (device loop5): mounted with root inode @ nid 36.
[  168.693457][ T6859] loop1: detected capacity change from 0 to 512
[  168.807595][ T6859] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  168.932105][ T6858] loop0: detected capacity change from 0 to 8192
[  168.936048][ T6859] Quota error (device loop1): v2_read_file_info: Free block number too big (58381 >= 6).
[  169.024097][ T6859] EXT4-fs warning (device loop1): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  169.052421][ T6858] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  169.119844][ T6858] REISERFS (device loop0): using ordered data mode
[  169.157366][ T6858] reiserfs: using flush barriers
[  169.182010][ T6859] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  169.240576][ T6858] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  169.306503][ T6858] REISERFS (device loop0): checking transaction log (loop0)
[  169.326501][ T6859] Quota error (device loop1): v2_read_file_info: Free block number too big (58381 >= 6).
[  169.341802][ T6858] REISERFS (device loop0): Using tea hash to sort names
[  169.348474][ T6859] EXT4-fs warning (device loop1): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  169.360318][ T6858] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  169.751823][ T6868] loop4: detected capacity change from 0 to 32768
[  169.782383][ T6870] loop2: detected capacity change from 0 to 32768
[  169.846992][ T6868] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  169.890325][ T6868] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  169.936525][ T6868] gfs2: fsid=syz:syz.s: journal 0 mapped with 16 extents in 0ms
[  170.274737][ T6868] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  170.491842][ T6899] loop2: detected capacity change from 0 to 1024
[  170.584287][ T6899] EXT4-fs (loop2): Ignoring removed orlov option
[  170.590780][ T6899] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  170.623978][ T6899] EXT4-fs (loop2): Test dummy encryption mode enabled
[  170.736443][ T6899] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x000000007fffffff,orlov,nomblk_io_submit,test_dummy_encryption,nojournal_checksum,grpquota,auto_da_alloc=0x0000000000000ae8,discard,,errors=continue. Quota mode: writeback.
[  170.889335][ T6912] loop5: detected capacity change from 0 to 512
[  170.919507][ T6907] loop1: detected capacity change from 0 to 4096
[  171.056632][ T6907] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing.
[  171.093832][ T6907] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  171.140137][ T6920] loop4: detected capacity change from 0 to 256
[  171.147525][ T6907] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  171.203970][ T6907] ntfs: volume version 3.1.
[  171.287623][ T6926] loop0: detected capacity change from 0 to 1024
[  171.300688][ T6912] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nobarrier,quota,,errors=continue. Quota mode: writeback.
[  171.371521][ T6912] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  171.387494][ T6907] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28).
[  171.429993][ T6907] ntfs: (device loop1): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28.
[  171.495129][ T6926] EXT4-fs (loop0): Ignoring removed orlov option
[  171.501534][ T6926] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  171.625125][ T6928] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28).
[  171.634336][ T6926] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  171.657918][    C1] vkms_vblank_simulate: vblank timer overrun
[  171.683755][ T6928] ntfs: (device loop1): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28.
[  171.736586][ T1276] ntfs: (device loop1): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  171.804850][ T6943] loop4: detected capacity change from 0 to 256
[  171.910569][ T6943] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196)
[  171.953252][ T6943] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  171.996243][ T6946] tun0: tun_chr_ioctl cmd 1074812118
[  172.026957][ T6943] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196)
[  172.052473][ T6943] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196)
[  172.069462][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.5.879'.
[  172.167610][ T4167] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 196)
[  172.437724][ T6964] loop2: detected capacity change from 0 to 2048
[  172.543264][ T6964] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  172.643717][ T4773] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  172.764838][ T6977] loop0: detected capacity change from 0 to 1024
[  172.808857][ T6978] loop5: detected capacity change from 0 to 4096
[  172.862136][ T6977] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,bsdgroups,resuid=0x0000000000000000,noblock_validity,minixdf,errors=remount-ro,journal_ioprio=0x0000000000000006,data_err=abort,. Quota mode: writeback.
[  172.974963][ T6978] ntfs: volume version 3.1.
[  173.059559][ T6977] EXT4-fs error (device loop0): ext4_get_inode_usage:834: inode #2: comm syz.0.889: corrupted in-inode xattr
[  173.077481][ T4773] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  173.105599][ T4773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.133007][ T4773] usb 2-1: config 0 descriptor??
[  173.144013][ T6977] EXT4-fs (loop0): Remounting filesystem read-only
[  173.190771][ T4172] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2746: inode #2: comm syz-executor: corrupted in-inode xattr
[  173.238685][ T4172] EXT4-fs (loop0): Remounting filesystem read-only
[  173.418337][ T6975] loop4: detected capacity change from 0 to 32768
[  173.621990][ T6993] tipc: Started in network mode
[  173.664541][ T6993] tipc: Node identity 7ff, cluster identity 4711
[  173.705619][ T6993] tipc: Node number set to 2047
[  173.742076][ T6990] loop2: detected capacity change from 0 to 4096
[  173.794373][ T6990] ntfs3: Bad value for 'uid'
[  173.873986][ T4773] usb 2-1: Cannot set autoneg
[  173.892172][ T4773] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71
[  173.956938][ T4773] usb 2-1: USB disconnect, device number 6
[  174.024141][ T6997] netlink: 'syz.5.900': attribute type 7 has an invalid length.
[  174.360602][ T6988] loop0: detected capacity change from 0 to 32768
[  174.520825][ T6988] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  174.808827][ T4172] ocfs2: Unmounting device (7,0) on (node local)
[  174.993179][ T7027] netlink: 104 bytes leftover after parsing attributes in process `syz.5.913'.
[  175.034445][ T6990] loop2: detected capacity change from 0 to 32768
[  175.270535][ T6990] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  175.445119][ T4169] ocfs2: Unmounting device (7,2) on (node local)
[  175.451905][ T7042] program syz.5.920 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  175.638121][ T7046] loop5: detected capacity change from 0 to 164
[  175.682522][ T7049] loop4: detected capacity change from 0 to 256
[  176.577897][ T7075] loop1: detected capacity change from 0 to 256
[  176.706061][ T7072] loop4: detected capacity change from 0 to 4096
[  176.810472][ T7072] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  177.147215][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  177.849613][ T7068] loop5: detected capacity change from 0 to 32768
[  177.912922][ T7068] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  177.923804][ T4763] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  177.939309][ T7068] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  178.045697][ T7068] gfs2: fsid=syz:syz.s: journal 0 mapped with 16 extents in 0ms
[  178.175267][ T7096] loop4: detected capacity change from 0 to 32768
[  178.212719][ T4763] usb 2-1: Using ep0 maxpacket: 16
[  178.278677][ T7068] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  178.334039][ T4763] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  178.352331][ T4763] usb 2-1: config 0 has no interface number 0
[  178.359446][ T4763] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.377344][ T7096] XFS (loop4): Mounting V5 Filesystem
[  178.412157][ T4763] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  178.509945][ T4763] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  178.559029][ T4763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.598531][ T4763] usb 2-1: config 0 descriptor??
[  178.637679][ T7096] XFS (loop4): Ending clean mount
[  178.864164][ T4167] XFS (loop4): Unmounting Filesystem
[  178.981583][ T7117] netlink: 248 bytes leftover after parsing attributes in process `syz.5.950'.
[  179.354266][ T4763] uclogic 0003:28BD:0071.0005: pen parameters not found
[  179.361326][ T4763] uclogic 0003:28BD:0071.0005: interface is invalid, ignoring
[  179.484739][ T7125] sp0: Synchronizing with TNC
[  179.572667][ T4763] usb 2-1: USB disconnect, device number 7
[  179.628843][ T7127] loop4: detected capacity change from 0 to 8
[  179.755285][ T7131] loop5: detected capacity change from 0 to 256
[  179.831610][ T7131] FAT-fs (loop5): Unrecognized mount option "01777777777777777777777ÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿ¿ÄØR¢ˆ“~©	]Ñôf	õ5¢Ä6㇄yeð<z#+<u¸kWôÈ“¥¥=z" or missing value
[  179.891669][ T7127] SQUASHFS error: Unknown inode type 1078 in squashfs_iget!
[  180.002873][ T7127] blk_update_request: I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0
[  180.025171][ T7127] EXT4-fs (loop4): unable to read superblock
[  180.238163][ T7137] loop5: detected capacity change from 0 to 512
[  180.361186][ T7137] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5
[  180.361186][ T7137] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  180.361186][ T7137] 
[  180.497505][ T7137] EXT4-fs (loop5): 1 orphan inode deleted
[  180.512557][ T7137] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x0000000000000000,discard,noblock_validity,init_itable,stripe=0x000000000000002e,nouser_xattr,sysvgroups,norecovery,usrquota,minixdf,,errors=continue. Quota mode: writeback.
[  180.543918][ T7137] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.550117][ T7145] loop2: detected capacity change from 0 to 4096
[  180.694881][ T7145] ntfs3: loop2: failed to convert "0080" to cp857
[  180.709399][ T7145] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  180.742128][ T7145] ntfs3: loop2: failed to convert name for inode 1e.
[  180.881838][ T7158] loop4: detected capacity change from 0 to 8
[  180.964695][ T7158] squashfs: Unknown parameter ''
[  181.173249][ T7139] loop1: detected capacity change from 0 to 32768
[  181.241481][ T7139] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  181.263736][ T7139] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  181.295580][ T7040] Set syz1 is full, maxelem 65536 reached
[  181.379612][ T7139] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  181.414418][ T4763] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  181.416066][ T7168] loop5: detected capacity change from 0 to 64
[  181.441725][ T4763] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  181.478268][ T7168] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing
[  181.523936][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.973'.
[  181.561781][ T4763] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 120ms
[  181.578495][ T4763] gfs2: fsid=syz:syz.0: jid=0: Done
[  181.588003][ T7139] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  182.071817][ T7169] loop0: detected capacity change from 0 to 32768
[  182.144796][ T7169] XFS: attr2 mount option is deprecated.
[  182.161504][ T7169] XFS: ikeep mount option is deprecated.
[  182.165906][ T7191] loop1: detected capacity change from 0 to 2048
[  182.169778][ T7169] XFS: noikeep mount option is deprecated.
[  182.176058][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.983'.
[  182.210139][ T7193] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.271445][ T7202] loop5: detected capacity change from 0 to 64
[  182.277483][ T7193] device bridge_slave_0 left promiscuous mode
[  182.285090][ T7193] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.309538][ T7191] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  182.330197][ T7191] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.335193][ T7169] XFS (loop0): Mounting V5 Filesystem
[  182.356598][ T7203] loop4: detected capacity change from 0 to 512
[  182.482298][ T7203] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  182.691289][ T7203] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noblock_validity,mblk_io_submit,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  182.772135][ T7203] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.822498][ T7169] XFS (loop0): Ending clean mount
[  182.843300][ T7169] XFS (loop0): Quotacheck needed: Please wait.
[  182.908990][ T7228] loop1: detected capacity change from 0 to 512
[  183.064722][ T7239] netlink: 140 bytes leftover after parsing attributes in process `syz.4.996'.
[  183.066948][ T7241] loop2: detected capacity change from 0 to 256
[  183.079464][ T7239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.996'.
[  183.087256][ T7169] XFS (loop0): Quotacheck: Done.
[  183.119587][ T7228] EXT4-fs (loop1): 1 orphan inode deleted
[  183.174484][ T7228] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,grpquota,noblock_validity,init_itable,stripe=0x000000000000002e,usrquota,sysvgroups,norecovery,usrquota,,errors=continue. Quota mode: writeback.
[  183.273454][ T4172] XFS (loop0): Unmounting Filesystem
[  183.287549][ T7241] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d)
[  183.288394][ T7241] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  183.334161][ T7228] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.366647][ T7241] attempt to access beyond end of device
[  183.366647][ T7241] loop2: rw=524288, want=408, limit=256
[  183.368129][ T7241] attempt to access beyond end of device
[  183.368129][ T7241] loop2: rw=524288, want=664, limit=256
[  183.368217][ T7241] attempt to access beyond end of device
[  183.368217][ T7241] loop2: rw=0, want=288, limit=256
[  183.368971][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  183.368984][   T26] audit: type=1800 audit(2000000370.342:37): pid=7241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.997" name="file1" dev="loop2" ino=1048656 res=0 errno=0
[  183.942040][ T7271] pim6reg0: tun_chr_ioctl cmd 1074025675
[  184.009124][ T7271] pim6reg0: persist disabled
[  184.479398][ T7292] loop5: detected capacity change from 0 to 4096
[  184.546681][ T7264] loop1: detected capacity change from 0 to 40427
[  184.708413][ T7264] F2FS-fs (loop1): Found nat_bits in checkpoint
[  184.758059][ T7292] ntfs: volume version 3.1.
[  184.862828][ T7264] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  185.018771][ T4168] attempt to access beyond end of device
[  185.018771][ T4168] loop1: rw=2049, want=45104, limit=40427
[  185.205245][ T7311] usb usb4: usbfs: process 7311 (syz.0.1029) did not claim interface 0 before use
[  185.319119][ T7307] loop5: detected capacity change from 0 to 4096
[  185.368479][ T7307] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  185.705993][ T7323] loop1: detected capacity change from 0 to 4096
[  185.789410][ T7323] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  185.910849][ T7323] ntfs3: loop1: Inode r=19 is not in use!
[  185.924383][ T7323] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  185.951691][ T7335] digital: digital_start_poll: Unknown protocol
[  185.964133][ T4426] Bluetooth: hci2: command 0x0406 tx timeout
[  185.979782][ T4426] Bluetooth: hci1: command 0x0406 tx timeout
[  185.996354][ T4426] Bluetooth: hci3: command 0x0406 tx timeout
[  186.363745][ T4763] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  186.639836][ T4763] usb 6-1: Using ep0 maxpacket: 8
[  186.784068][ T4763] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  186.792109][ T4763] usb 6-1: config 0 has no interface number 0
[  186.795886][ T7347] loop1: detected capacity change from 0 to 32768
[  186.808693][ T4763] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  186.841903][ T4763] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  186.861985][ T4763] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.917160][ T4763] usb 6-1: config 0 descriptor??
[  186.963319][ T7347] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  186.985135][ T5136] (kworker/u4:9,5136,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[  187.007387][ T4763] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  187.017978][   T26] audit: type=1800 audit(2000000373.982:38): pid=7347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1042" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  187.054977][ T7347] (syz.1.1042,7347,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[  187.100144][ T7347] (syz.1.1042,7347,1):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -2
[  187.119938][ T7347] (syz.1.1042,7347,1):__ocfs2_prepare_orphan_dir:2166 ERROR: status = -2
[  187.133695][ T7386] TCP: tcp_parse_options: Illegal window scaling value 184 > 14 received
[  187.156971][ T7347] (syz.1.1042,7347,1):ocfs2_prepare_orphan_dir:2208 ERROR: status = -2
[  187.164911][ T7384] netlink: 'syz.2.1062': attribute type 10 has an invalid length.
[  187.177257][ T7347] (syz.1.1042,7347,1):ocfs2_prepare_orphan_dir:2224 ERROR: status = -2
[  187.217634][ T7347] (syz.1.1042,7347,1):ocfs2_unlink:962 ERROR: status = -2
[  187.226807][ T4426] usb 6-1: USB disconnect, device number 4
[  187.246272][ T4426] iowarrior 6-1:0.1: I/O-Warror #0 now disconnected
[  187.356371][ T4168] ocfs2: Unmounting device (7,1) on (node local)
[  187.408114][ T7392] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  187.620755][ T7400] device gretap0 entered promiscuous mode
[  187.681407][ T7400] device erspan0 entered promiscuous mode
[  187.694318][ T7400] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  187.718983][ T7400] Cannot create hsr debugfs directory
[  187.797736][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  187.856399][ T7413] loop0: detected capacity change from 0 to 8
[  187.920803][ T7413] SQUASHFS error: zlib decompression failed, data probably corrupt
[  187.961799][ T7413] SQUASHFS error: Failed to read block 0x9b: -5
[  187.976038][ T7413] SQUASHFS error: Unable to read metadata cache entry [99]
[  188.022909][ T7413] SQUASHFS error: Unable to read inode 0x127
[  188.088566][ T7417] loop1: detected capacity change from 0 to 8192
[  188.170910][ T7429] loop4: detected capacity change from 0 to 24
[  188.194966][ T7417] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  188.192605][ T7431] bridge0: port 1(gretap0) entered blocking state
[  188.229405][ T7417] REISERFS (device loop1): using ordered data mode
[  188.245590][ T7417] reiserfs: using flush barriers
[  188.272596][ T7431] bridge0: port 1(gretap0) entered disabled state
[  188.319026][ T7417] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  188.335928][ T7417] REISERFS (device loop1): checking transaction log (loop1)
[  188.368299][ T7417] REISERFS (device loop1): Using tea hash to sort names
[  188.376936][ T7417] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  188.495769][ T7438] loop5: detected capacity change from 0 to 512
[  188.568497][ T7438] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  188.686659][ T7438] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1088: invalid indirect mapped block 4294967295 (level 1)
[  188.747963][ T7438] EXT4-fs (loop5): Remounting filesystem read-only
[  188.767151][ T7438] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1088: invalid indirect mapped block 4294967295 (level 1)
[  188.796592][ T7434] loop0: detected capacity change from 0 to 32768
[  188.839104][ T7434] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1086 (7434)
[  188.853013][ T7438] EXT4-fs (loop5): Remounting filesystem read-only
[  188.880740][ T7434] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  188.894411][ T7438] EXT4-fs (loop5): 2 truncates cleaned up
[  188.901637][ T7438] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,dioread_nolock,. Quota mode: writeback.
[  188.913793][ T7434] BTRFS info (device loop0): setting nodatacow, compression disabled
[  188.963353][ T7434] BTRFS info (device loop0): max_inline at 0
[  189.010021][ T7434] BTRFS info (device loop0): enabling disk space caching
[  189.042732][ T7434] BTRFS info (device loop0): turning off barriers
[  189.060267][ T7434] BTRFS info (device loop0): turning on flush-on-commit
[  189.099198][ T7434] BTRFS info (device loop0): doing ref verification
[  189.114002][ T7434] BTRFS info (device loop0): force clearing of disk cache
[  189.124047][ T7434] BTRFS info (device loop0): enabling ssd optimizations
[  189.131051][ T7434] BTRFS info (device loop0): max_inline at 4096
[  189.194022][ T7434] BTRFS info (device loop0): disk space caching is enabled
[  189.211906][ T7434] BTRFS info (device loop0): has skinny extents
[  189.406800][ T7434] BTRFS info (device loop0): clearing free space tree
[  189.451218][ T7434] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  189.461624][ T7434] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  189.621209][ T7485] loop1: detected capacity change from 0 to 256
[  189.746887][ T7485] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  189.972566][ T7488] loop4: detected capacity change from 0 to 8192
[  190.096714][ T7496] loop1: detected capacity change from 0 to 256
[  190.115661][ T7498] loop5: detected capacity change from 0 to 256
[  190.131505][ T7488] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  190.162453][ T7488] REISERFS (device loop4): using ordered data mode
[  190.175299][ T7488] reiserfs: using flush barriers
[  190.228035][ T7488] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  190.262396][   T26] audit: type=1800 audit(2000000377.232:39): pid=7496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1101" name="file0" dev="loop1" ino=1048658 res=0 errno=0
[  190.326479][ T7464] loop2: detected capacity change from 0 to 32768
[  190.360370][ T7488] REISERFS (device loop4): checking transaction log (loop4)
[  190.398305][ T7464] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  190.407337][ T7488] REISERFS (device loop4): Using tea hash to sort names
[  190.415273][ T7488] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  190.424940][ T7464] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  190.457874][ T7464] gfs2: fsid=syz:syz.s: journal 0 mapped with 16 extents in 0ms
[  190.628486][ T7464] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  190.781135][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1105'.
[  191.362771][ T7521] input: syz0 as /devices/virtual/input/input14
[  191.375053][ T7523] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  191.647708][ T7530] loop4: detected capacity change from 0 to 256
[  191.714407][ T7502] loop1: detected capacity change from 0 to 32768
[  191.782885][ T7530] FAT-fs (loop4): Directory bread(block 64) failed
[  191.793524][ T7502] ERROR: (device loop1): dtSearch: DT_GETPAGE: dtree page corrupt
[  191.793524][ T7502] 
[  191.802017][ T7530] FAT-fs (loop4): Directory bread(block 65) failed
[  191.830019][ T7530] FAT-fs (loop4): Directory bread(block 66) failed
[  191.853850][ T7530] FAT-fs (loop4): Directory bread(block 67) failed
[  191.874021][ T7502] ERROR: (device loop1): remounting filesystem as read-only
[  191.881887][ T7530] FAT-fs (loop4): Directory bread(block 68) failed
[  191.882594][ T7502] jfs_lookup: dtSearch returned -5
[  191.902035][ T7530] FAT-fs (loop4): Directory bread(block 69) failed
[  191.938345][ T7530] FAT-fs (loop4): Directory bread(block 70) failed
[  191.965536][ T7530] FAT-fs (loop4): Directory bread(block 71) failed
[  191.993826][ T7530] FAT-fs (loop4): Directory bread(block 72) failed
[  192.013707][ T7530] FAT-fs (loop4): Directory bread(block 73) failed
[  192.038963][ T7533] loop0: detected capacity change from 0 to 256
[  192.087403][ T7519] loop5: detected capacity change from 0 to 32768
[  192.224527][ T7533] FAT-fs (loop0): Directory bread(block 64) failed
[  192.238186][ T7533] FAT-fs (loop0): Directory bread(block 65) failed
[  192.279076][ T7533] FAT-fs (loop0): Directory bread(block 66) failed
[  192.301827][ T7533] FAT-fs (loop0): Directory bread(block 67) failed
[  192.315117][ T7533] FAT-fs (loop0): Directory bread(block 68) failed
[  192.321759][ T7533] FAT-fs (loop0): Directory bread(block 69) failed
[  192.383369][ T7533] FAT-fs (loop0): Directory bread(block 70) failed
[  192.427133][ T7533] FAT-fs (loop0): Directory bread(block 71) failed
[  192.457337][ T7533] FAT-fs (loop0): Directory bread(block 72) failed
[  192.467175][ T7533] FAT-fs (loop0): Directory bread(block 73) failed
[  192.510527][ T7541] loop1: detected capacity change from 0 to 64
[  192.540276][ T7535] loop5: detected capacity change from 0 to 8192
[  192.599034][ T7535] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  192.614654][ T7535] REISERFS (device loop5): using ordered data mode
[  192.618281][ T7526] loop2: detected capacity change from 0 to 32768
[  192.621555][ T7535] reiserfs: using flush barriers
[  192.657876][ T7526] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1114 (7526)
[  192.722593][ T7535] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  192.743339][ T7535] REISERFS (device loop5): checking transaction log (loop5)
[  192.763820][ T7526] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  192.772502][ T7526] BTRFS info (device loop2): using free space tree
[  192.783503][ T7526] BTRFS info (device loop2): has skinny extents
[  192.886605][ T7561] loop4: detected capacity change from 0 to 8
[  192.903331][ T7535] REISERFS (device loop5): Using tea hash to sort names
[  192.910801][ T7535] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  192.979961][ T7526] BTRFS info (device loop2): enabling ssd optimizations
[  193.543099][ T7593] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  193.756938][ T7595] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1135'.
[  193.895967][ T7581] loop0: detected capacity change from 0 to 32768
[  193.965036][ T4770] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  194.144961][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.151378][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  194.233526][ T7608] loop2: detected capacity change from 0 to 8192
[  194.299819][ T4764] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  194.348912][ T7608] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  194.376002][ T7608] REISERFS (device loop2): using ordered data mode
[  194.382998][ T7608] reiserfs: using flush barriers
[  194.398421][ T7608] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  194.424080][ T4770] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  194.435232][ T4770] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  194.447551][ T4770] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  194.456907][ T4770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.471128][ T4770] usb 2-1: config 0 descriptor??
[  194.500823][ T7608] REISERFS (device loop2): checking transaction log (loop2)
[  194.539632][ T7608] REISERFS (device loop2): Using tea hash to sort names
[  194.568792][ T7608] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  194.694448][ T4764] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  194.703138][ T4764] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  194.753788][ T4764] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  194.763028][ T4764] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  194.782454][ T4764] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  194.952524][ T4764] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  194.970410][ T4764] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  194.984425][ T4764] usb 6-1: Product: syz
[  194.988627][ T4764] usb 6-1: Manufacturer: syz
[  195.064881][ T4764] cdc_wdm 6-1:1.0: skipping garbage
[  195.070132][ T4764] cdc_wdm 6-1:1.0: skipping garbage
[  195.102875][ T4764] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  195.119243][ T4764] cdc_wdm 6-1:1.0: Unknown control protocol
[  195.296184][ T7643] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1154'.
[  195.309078][ T7643] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1154'.
[  195.361227][ T4764] usb 6-1: USB disconnect, device number 5
[  195.386486][ T4770] hid-led: probe of 0003:0FC5:B080.0006 failed with error -71
[  195.394237][ T7602] cdc_wdm 6-1:1.0: Tx URB error: -19
[  195.404419][ T4770] usb 2-1: USB disconnect, device number 8
[  195.580334][ T7635] loop0: detected capacity change from 0 to 32768
[  195.653924][ T7635] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1162 (7635)
[  195.703713][ T7635] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  195.712398][ T7635] BTRFS info (device loop0): enabling auto defrag
[  195.725930][ T7635] BTRFS info (device loop0): doing ref verification
[  195.733497][ T7635] BTRFS info (device loop0): max_inline at 0
[  195.738918][ T7657] loop4: detected capacity change from 0 to 512
[  195.740541][ T7635] BTRFS info (device loop0): force clearing of disk cache
[  195.753174][ T4177] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  195.760887][ T7635] BTRFS info (device loop0): turning on sync discard
[  195.768370][ T7635] BTRFS info (device loop0): disabling free space tree
[  195.782302][ T7635] BTRFS info (device loop0): has skinny extents
[  195.864260][ T7657] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback.
[  195.889700][ T7657] ext4 filesystem being mounted at /242/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  195.921976][ T7635] BTRFS info (device loop0): enabling ssd optimizations
[  195.945599][ T7635] BTRFS info (device loop0): clearing free space tree
[  195.952881][ T7635] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  195.963385][ T7635] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  195.971942][ T7680] loop1: detected capacity change from 0 to 1024
[  196.138352][ T7680] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none.
[  196.141462][ T7684] bridge0: port 3(syz_tun) entered blocking state
[  196.162912][ T4177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.204721][ T4184] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop0 scanned by udevd (4184)
[  196.223449][ T7684] bridge0: port 3(syz_tun) entered disabled state
[  196.268894][ T4177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.302749][ T7684] device syz_tun entered promiscuous mode
[  196.327333][ T4177] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  196.351219][ T7680] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: none.
[  196.381654][ T4177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.409342][ T7680] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: none.
[  196.422775][ T4177] usb 3-1: config 0 descriptor??
[  196.431407][ T7684] bridge0: port 3(syz_tun) entered blocking state
[  196.438566][ T7684] bridge0: port 3(syz_tun) entered forwarding state
[  196.543018][ T7692] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1164'.
[  196.587890][ T7692] device ip6gretap0 entered promiscuous mode
[  196.659699][ T7692] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1164'.
[  196.672562][   T26] audit: type=1400 audit(2000000383.642:40): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=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
[  196.849371][ T7705] loop0: detected capacity change from 0 to 256
[  196.916127][ T4177] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0
[  196.936245][    C0] vkms_vblank_simulate: vblank timer overrun
[  197.030344][ T4177] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0
[  197.043852][ T4177] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0
[  197.082517][ T7705] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  197.103815][ T4177] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0
[  197.111337][ T4177] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0
[  197.126016][ T4177] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0
[  197.144177][ T4177] arvo 0003:1E7D:30D4.0007: unknown main item tag 0x0
[  197.179029][ T4177] arvo 0003:1E7D:30D4.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0
[  197.186539][ T7718] loop5: detected capacity change from 0 to 64
[  197.306399][ T4764] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  197.455507][ T7731] netlink: 'syz.5.1181': attribute type 1 has an invalid length.
[  197.480268][ T4756] usb 3-1: USB disconnect, device number 8
[  197.593790][ T4764] usb 2-1: Using ep0 maxpacket: 32
[  197.657363][ T7742] loop0: detected capacity change from 0 to 512
[  197.683967][ T7742] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities
[  197.733882][ T4764] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.776227][ T4764] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.804793][ T7738] loop5: detected capacity change from 0 to 8192
[  197.826070][ T4764] usb 2-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00
[  197.853663][ T4764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.887790][ T4764] usb 2-1: config 0 descriptor??
[  197.921564][ T7738] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  197.961979][ T7738] REISERFS (device loop5): using journaled data mode
[  198.030411][ T7738] reiserfs: using flush barriers
[  198.060107][ T7738] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  198.100699][ T7738] REISERFS (device loop5): checking transaction log (loop5)
[  198.105041][ T7749] loop0: detected capacity change from 0 to 512
[  198.119227][ T7738] REISERFS (device loop5): Using r5 hash to sort names
[  198.133073][ T7738] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  198.154258][ T7738] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  198.192574][ T7740] loop4: detected capacity change from 0 to 32768
[  198.205977][ T7749] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  198.242312][ T7749] EXT4-fs (loop0): 1 truncate cleaned up
[  198.248649][ T7749] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  198.370444][ T4764] wacom 0003:056A:00F0.0008: unknown main item tag 0x0
[  198.395636][ T4764] wacom 0003:056A:00F0.0008: hidraw0: USB HID v0.00 Device [HID 056a:00f0] on usb-dummy_hcd.1-1/input0
[  198.580022][ T4177] usb 2-1: USB disconnect, device number 9
[  198.653056][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1196'.
[  198.899346][ T7773] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1200'.
[  198.983392][ T7778] loop0: detected capacity change from 0 to 128
[  199.085221][ T7778] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  199.123003][ T7778] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  199.515105][ T7795] binfmt_misc: register: failed to install interpreter file ./file0/../file0
[  199.525079][ T7789] loop1: detected capacity change from 0 to 4096
[  199.565960][ T7771] loop4: detected capacity change from 0 to 32768
[  199.661816][ T7789] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  199.973420][ T7809] loop2: detected capacity change from 0 to 256
[  200.083260][ T7809] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000006)
[  200.095351][ T7809] FAT-fs (loop2): Filesystem has been set read-only
[  200.169735][ T7818] loop4: detected capacity change from 0 to 512
[  200.229239][ T7818] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  200.283809][ T7818] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  200.283865][ T4426] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  200.387137][ T7818] EXT4-fs (loop4): 1 truncate cleaned up
[  200.434033][ T7818] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,jqfmt=vfsv0,grpid,mblk_io_submit,,errors=continue. Quota mode: none.
[  200.499609][ T7799] loop5: detected capacity change from 0 to 32768
[  200.553768][ T4426] usb 2-1: Using ep0 maxpacket: 16
[  200.589613][ T7833] program syz.2.1228 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  200.622807][ T7799] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1215 (7799)
[  200.673916][ T4426] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  200.700716][ T7799] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  200.723757][ T7799] BTRFS info (device loop5): using free space tree
[  200.730330][ T7799] BTRFS info (device loop5): has skinny extents
[  200.840300][ T7849] loop2: detected capacity change from 0 to 256
[  200.853914][ T4426] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  200.871466][ T4426] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.920519][ T7849] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196)
[  200.939870][ T4426] usb 2-1: Product: syz
[  200.947503][ T7849] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  200.954626][ T4426] usb 2-1: Manufacturer: syz
[  200.961125][ T4426] usb 2-1: SerialNumber: syz
[  200.982014][ T7849] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196)
[  200.984046][ T7799] BTRFS info (device loop5): enabling ssd optimizations
[  200.997086][ T7849] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196)
[  201.028734][ T4426] usb 2-1: config 0 descriptor??
[  201.080954][ T4169] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 196)
[  201.090261][ T4426] hub 2-1:0.0: bad descriptor, ignoring hub
[  201.102965][ T4426] hub: probe of 2-1:0.0 failed with error -5
[  201.127228][ T4426] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input18
[  201.462574][ T7853] loop4: detected capacity change from 0 to 32768
[  201.474002][ T7868] input: syz0 as /devices/virtual/input/input19
[  201.559476][ T7870] loop0: detected capacity change from 0 to 64
[  201.814119][ T3532] usb 2-1: reset high-speed USB device number 10 using dummy_hcd
[  201.990689][ T7882] loop2: detected capacity change from 0 to 512
[  202.083080][ T7882] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,abort,errors=remount-ro,. Quota mode: writeback.
[  202.099335][ T7882] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.205829][ T7893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1248'.
[  202.273512][ T7895] loop0: detected capacity change from 0 to 64
[  202.327964][ T4765] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  202.537677][ T4247] usb 2-1: USB disconnect, device number 10
[  202.751124][ T4765] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9
[  202.769166][ T4765] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  202.769878][ T7914] loop2: detected capacity change from 0 to 64
[  202.786952][ T4765] usb 6-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00
[  202.800176][ T4765] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.847500][ T4765] usb 6-1: config 0 descriptor??
[  203.345538][ T4765] apple 0003:05AC:026C.0009: hidraw0: USB HID v0.00 Device [HID 05ac:026c] on usb-dummy_hcd.5-1/input0
[  203.443880][ T5753] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  203.543847][ T4421] usb 6-1: USB disconnect, device number 6
[  203.884529][ T5753] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  203.911907][ T5753] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  203.931566][ T7961] netlink: 'syz.0.1266': attribute type 1 has an invalid length.
[  203.935131][ T5753] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  203.956907][ T5753] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  204.113219][ T7969] loop5: detected capacity change from 0 to 512
[  204.153778][ T5753] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  204.162978][ T4247] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  204.170855][ T5753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.183748][ T7969] EXT4-fs (loop5): Ignoring removed mblk_io_submit option
[  204.191087][ T5753] usb 3-1: Product: syz
[  204.191110][ T5753] usb 3-1: Manufacturer: syz
[  204.191127][ T5753] usb 3-1: SerialNumber: syz
[  204.211402][ T5753] usb 3-1: config 0 descriptor??
[  204.238573][ T7969] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.1270: inode #1: comm syz.5.1270: iget: illegal inode #
[  204.256831][ T7969] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.1270: error while reading EA inode 1 err=-117
[  204.278301][ T7969] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.1270: inode #1: comm syz.5.1270: iget: illegal inode #
[  204.295596][ T7969] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.1270: error while reading EA inode 1 err=-117
[  204.314543][ T7969] EXT4-fs (loop5): 1 orphan inode deleted
[  204.320526][ T7969] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,resgid=0x0000000000000000,nombcache,mblk_io_submit,,errors=continue. Quota mode: none.
[  204.461220][ T4247] usb 2-1: Using ep0 maxpacket: 8
[  204.483935][ T5753] adutux 3-1:0.0: Could not retrieve serial number
[  204.490825][ T5753] adutux: probe of 3-1:0.0 failed with error -5
[  204.704480][ T7979] loop5: detected capacity change from 0 to 512
[  204.803984][ T4247] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[  204.813304][ T4247] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.815764][ T7979] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000000,minixdf,,errors=continue. Quota mode: writeback.
[  204.824726][ T4247] usb 2-1: Product: syz
[  204.851361][ T7979] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  204.862929][ T4247] usb 2-1: Manufacturer: syz
[  204.874278][ T4247] usb 2-1: SerialNumber: syz
[  204.891010][ T4247] usb 2-1: config 0 descriptor??
[  204.900243][   T26] audit: type=1800 audit(2000000647.872:41): pid=7979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1273" name="file1" dev="loop5" ino=15 res=0 errno=0
[  204.926473][ T7979] ------------[ cut here ]------------
[  204.931955][ T7979] WARNING: CPU: 0 PID: 7979 at kernel/locking/lockdep.c:896 look_up_lock_class+0xa0/0x120
[  204.935178][   T26] audit: type=1800 audit(2000000647.902:42): pid=7979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1273" name="file2" dev="loop5" ino=16 res=0 errno=0
[  204.941868][ T7979] Modules linked in:
[  204.941883][ T7979] CPU: 0 PID: 7979 Comm: syz.5.1273 Not tainted 5.15.173-syzkaller #0
[  204.941907][ T7979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  204.941919][ T7979] RIP: 0010:look_up_lock_class+0xa0/0x120
[  204.990005][ T7979] Code: 00 48 85 db 74 4c 4c 39 7b 40 74 05 48 8b 1b eb eb 48 8b 83 b0 00 00 00 49 3b 46 18 74 36 48 c7 c0 c0 7f 4f 90 49 39 06 74 2a <0f> 0b eb 26 e8 57 c2 d1 f9 48 c7 c7 80 4b ab 8a 89 de e8 69 cf fe
[  205.009624][ T7979] RSP: 0018:ffffc9000164f510 EFLAGS: 00010006
[  205.015717][ T7979] RAX: ffffffff904f7fc0 RBX: ffffffff903b7e40 RCX: ffff888021de0000
[  205.023786][ T7979] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff888060740c70
[  205.031779][ T7979] RBP: ffffc9000164f610 R08: 0000000000000001 R09: 0000000000000000
[  205.039783][ T7979] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001
[  205.047759][ T7979] R13: 1ffff920002c9eb0 R14: ffff888060740c70 R15: ffffffff96bb6c81
[  205.055748][ T7979] FS:  00007fc689b7d6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  205.064697][ T7979] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  205.071296][ T7979] CR2: 0000001b2cd1fffc CR3: 000000002b5c0000 CR4: 00000000003506f0
[  205.079292][ T7979] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  205.087264][ T7979] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  205.095257][ T7979] Call Trace:
[  205.098542][ T7979]  <TASK>
[  205.101468][ T7979]  ? __warn+0x15b/0x300
[  205.105646][ T7979]  ? look_up_lock_class+0xa0/0x120
[  205.110786][ T7979]  ? report_bug+0x1b7/0x2e0
[  205.115342][ T7979]  ? handle_bug+0x3d/0x70
[  205.119672][ T7979]  ? exc_invalid_op+0x16/0x40
[  205.124368][ T7979]  ? asm_exc_invalid_op+0x16/0x20
[  205.129420][ T7979]  ? look_up_lock_class+0xa0/0x120
[  205.134560][ T7979]  register_lock_class+0x100/0x9a0
[  205.139694][ T7979]  ? reacquire_held_locks+0x660/0x660
[  205.145172][ T7979]  ? is_dynamic_key+0x1f0/0x1f0
[  205.150047][ T7979]  ? mark_lock+0x98/0x340
[  205.154432][ T7979]  __lock_acquire+0xd7/0x1ff0
[  205.159111][ T7979]  lock_acquire+0x1db/0x4f0
[  205.163616][ T7979]  ? ext4_move_extents+0x3a1/0xe50
[  205.168754][ T7979]  ? read_lock_is_recursive+0x10/0x10
[  205.174143][ T7979]  ? __might_sleep+0xc0/0xc0
[  205.178726][ T7979]  ? rwsem_write_trylock+0x166/0x210
[  205.184098][ T7979]  ? inode_owner_or_capable+0x210/0x210
[  205.189900][ T7979]  ? clear_nonspinnable+0x60/0x60
[  205.194960][ T7979]  down_write_nested+0x3b/0x60
[  205.199745][ T7979]  ? ext4_move_extents+0x3a1/0xe50
[  205.204862][ T7979]  ext4_move_extents+0x3a1/0xe50
[  205.209827][ T7979]  ? rcu_read_lock_any_held+0xb3/0x160
[  205.215315][ T7979]  ? ext4_double_up_write_data_sem+0x30/0x30
[  205.221350][ T7979]  ? __fget_files+0x413/0x480
[  205.226044][ T7979]  ext4_ioctl+0x2fcb/0x5b80
[  205.230605][ T7979]  ? do_vfs_ioctl+0x1b66/0x2b70
[  205.235457][ T7979]  ? ext4_fileattr_set+0x1750/0x1750
[  205.240758][ T7979]  ? __x64_compat_sys_ioctl+0x80/0x80
[  205.246134][ T7979]  ? __lock_acquire+0x1ff0/0x1ff0
[  205.251180][ T7979]  ? slab_free_freelist_hook+0xdd/0x160
[  205.256744][ T7979]  ? tomoyo_path_number_perm+0x648/0x810
[  205.262376][ T7979]  ? kfree+0xf1/0x270
[  205.266478][ T7979]  ? tomoyo_path_number_perm+0x6ab/0x810
[  205.272141][ T7979]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  205.277632][ T7979]  ? __fget_files+0x413/0x480
[  205.282330][ T7979]  ? bpf_lsm_file_ioctl+0x5/0x10
[  205.287290][ T7979]  ? security_file_ioctl+0x7d/0xa0
[  205.292421][ T7979]  ? ext4_fileattr_set+0x1750/0x1750
[  205.297743][ T7979]  __se_sys_ioctl+0xf1/0x160
[  205.302330][ T7979]  do_syscall_64+0x3b/0xb0
[  205.306744][ T7979]  ? clear_bhb_loop+0x15/0x70
[  205.311434][ T7979]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  205.317344][ T7979] RIP: 0033:0x7fc68bd07809
[  205.321769][ T7979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.341367][ T7979] RSP: 002b:00007fc689b7d058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  205.349784][ T7979] RAX: ffffffffffffffda RBX: 00007fc68beccfa0 RCX: 00007fc68bd07809
[  205.357769][ T7979] RDX: 0000000020000240 RSI: 00000000c028660f RDI: 0000000000000005
[  205.365743][ T7979] RBP: 00007fc68bd7a93e R08: 0000000000000000 R09: 0000000000000000
[  205.373725][ T7979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  205.381707][ T7979] R13: 0000000000000000 R14: 00007fc68beccfa0 R15: 00007ffd0f641098
[  205.389693][ T7979]  </TASK>
[  205.392748][ T7979] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  205.400016][ T7979] CPU: 0 PID: 7979 Comm: syz.5.1273 Not tainted 5.15.173-syzkaller #0
[  205.408167][ T7979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  205.418225][ T7979] Call Trace:
[  205.421497][ T7979]  <TASK>
[  205.424424][ T7979]  dump_stack_lvl+0x1e3/0x2d0
[  205.429127][ T7979]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  205.434773][ T7979]  ? panic+0x860/0x860
[  205.438869][ T7979]  ? look_up_lock_class+0x50/0x120
[  205.444011][ T7979]  ? look_up_lock_class+0x50/0x120
[  205.449141][ T7979]  panic+0x318/0x860
[  205.453057][ T7979]  ? __warn+0x16a/0x300
[  205.457233][ T7979]  ? fb_is_primary_device+0xd0/0xd0
[  205.462543][ T7979]  ? look_up_lock_class+0xa0/0x120
[  205.467699][ T7979]  __warn+0x2b2/0x300
[  205.471704][ T7979]  ? look_up_lock_class+0xa0/0x120
[  205.476848][ T7979]  report_bug+0x1b7/0x2e0
[  205.481208][ T7979]  handle_bug+0x3d/0x70
[  205.485389][ T7979]  exc_invalid_op+0x16/0x40
[  205.489924][ T7979]  asm_exc_invalid_op+0x16/0x20
[  205.494799][ T7979] RIP: 0010:look_up_lock_class+0xa0/0x120
[  205.500555][ T7979] Code: 00 48 85 db 74 4c 4c 39 7b 40 74 05 48 8b 1b eb eb 48 8b 83 b0 00 00 00 49 3b 46 18 74 36 48 c7 c0 c0 7f 4f 90 49 39 06 74 2a <0f> 0b eb 26 e8 57 c2 d1 f9 48 c7 c7 80 4b ab 8a 89 de e8 69 cf fe
[  205.520185][ T7979] RSP: 0018:ffffc9000164f510 EFLAGS: 00010006
[  205.526277][ T7979] RAX: ffffffff904f7fc0 RBX: ffffffff903b7e40 RCX: ffff888021de0000
[  205.534265][ T7979] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff888060740c70
[  205.542248][ T7979] RBP: ffffc9000164f610 R08: 0000000000000001 R09: 0000000000000000
[  205.550222][ T7979] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001
[  205.558205][ T7979] R13: 1ffff920002c9eb0 R14: ffff888060740c70 R15: ffffffff96bb6c81
[  205.566193][ T7979]  register_lock_class+0x100/0x9a0
[  205.571327][ T7979]  ? reacquire_held_locks+0x660/0x660
[  205.576720][ T7979]  ? is_dynamic_key+0x1f0/0x1f0
[  205.581590][ T7979]  ? mark_lock+0x98/0x340
[  205.585920][ T7979]  __lock_acquire+0xd7/0x1ff0
[  205.590614][ T7979]  lock_acquire+0x1db/0x4f0
[  205.595118][ T7979]  ? ext4_move_extents+0x3a1/0xe50
[  205.600424][ T7979]  ? read_lock_is_recursive+0x10/0x10
[  205.605793][ T7979]  ? __might_sleep+0xc0/0xc0
[  205.610385][ T7979]  ? rwsem_write_trylock+0x166/0x210
[  205.615691][ T7979]  ? inode_owner_or_capable+0x210/0x210
[  205.621256][ T7979]  ? clear_nonspinnable+0x60/0x60
[  205.626385][ T7979]  down_write_nested+0x3b/0x60
[  205.631146][ T7979]  ? ext4_move_extents+0x3a1/0xe50
[  205.636260][ T7979]  ext4_move_extents+0x3a1/0xe50
[  205.641217][ T7979]  ? rcu_read_lock_any_held+0xb3/0x160
[  205.646691][ T7979]  ? ext4_double_up_write_data_sem+0x30/0x30
[  205.652737][ T7979]  ? __fget_files+0x413/0x480
[  205.657442][ T7979]  ext4_ioctl+0x2fcb/0x5b80
[  205.662172][ T7979]  ? do_vfs_ioctl+0x1b66/0x2b70
[  205.667024][ T7979]  ? ext4_fileattr_set+0x1750/0x1750
[  205.672320][ T7979]  ? __x64_compat_sys_ioctl+0x80/0x80
[  205.677700][ T7979]  ? __lock_acquire+0x1ff0/0x1ff0
[  205.682745][ T7979]  ? slab_free_freelist_hook+0xdd/0x160
[  205.688402][ T7979]  ? tomoyo_path_number_perm+0x648/0x810
[  205.694044][ T7979]  ? kfree+0xf1/0x270
[  205.698054][ T7979]  ? tomoyo_path_number_perm+0x6ab/0x810
[  205.703715][ T7979]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  205.709215][ T7979]  ? __fget_files+0x413/0x480
[  205.713901][ T7979]  ? bpf_lsm_file_ioctl+0x5/0x10
[  205.718859][ T7979]  ? security_file_ioctl+0x7d/0xa0
[  205.723982][ T7979]  ? ext4_fileattr_set+0x1750/0x1750
[  205.729262][ T7979]  __se_sys_ioctl+0xf1/0x160
[  205.733852][ T7979]  do_syscall_64+0x3b/0xb0
[  205.738365][ T7979]  ? clear_bhb_loop+0x15/0x70
[  205.743068][ T7979]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  205.749048][ T7979] RIP: 0033:0x7fc68bd07809
[  205.753461][ T7979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  205.773063][ T7979] RSP: 002b:00007fc689b7d058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  205.781499][ T7979] RAX: ffffffffffffffda RBX: 00007fc68beccfa0 RCX: 00007fc68bd07809
[  205.789466][ T7979] RDX: 0000000020000240 RSI: 00000000c028660f RDI: 0000000000000005
[  205.797438][ T7979] RBP: 00007fc68bd7a93e R08: 0000000000000000 R09: 0000000000000000
[  205.805426][ T7979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  205.813407][ T7979] R13: 0000000000000000 R14: 00007fc68beccfa0 R15: 00007ffd0f641098
[  205.821391][ T7979]  </TASK>
[  205.824679][ T7979] Kernel Offset: disabled
[  205.829001][ T7979] Rebooting in 86400 seconds..