last executing test programs:

14.124801326s ago: executing program 2 (id=724):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
open(&(0x7f00000000c0)='./bus\x00', 0x68042, 0x62)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000500)=0xd0)
recvmsg$can_raw(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x40000003)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x103c00, 0x8d)
ftruncate(r3, 0x2007ffb)
r4 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x11f8, 0x800, 0x1000, 0x5cc}, 0x0, &(0x7f0000000080)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setresgid(0xee00, 0xee01, 0x0)
mkdir(&(0x7f0000000000)='./file1\x00', 0x74)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r4})
io_uring_enter(r4, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5)

13.067858277s ago: executing program 2 (id=725):
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2091c13, 0x0, 0x0, 0x0, &(0x7f0000000080))

12.947862299s ago: executing program 2 (id=726):
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x40100, 0x0)
r0 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x20002)
r1 = socket$inet6(0xa, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6a)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r5 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x8b)
fsconfig$FSCONFIG_SET_PATH(r5, 0x3, 0x0, &(0x7f0000000080)='./file0\x00', r6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0)
r7 = socket$inet_icmp(0x2, 0x2, 0x1)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xc248, &(0x7f0000000240)={[{@nodelalloc}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}]}, 0x83, 0x5f9, &(0x7f0000001200)="$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")
recvfrom$inet(r7, 0x0, 0x0, 0x40000100, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10)
sendmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x7fffd, @empty}, 0x80, 0x0, 0x0, 0x0, 0x43}, 0x5b4}], 0x1, 0x850)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000600)=""/84, 0x54, <r8=>0x0, &(0x7f0000000280)=""/26, 0x1a}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=r8, 0x4)

11.592983766s ago: executing program 2 (id=728):
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)
r0 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000003640)={0x2020}, 0x2020)
openat$dlm_monitor(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300))
socket$unix(0x1, 0x5, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000040)="240000001e005f0214ffff0600fffff8070000000000000000000100080003000b000000", 0x24)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mremap(&(0x7f00003ab000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000024a000/0x1000)=nil)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000940))
r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000140), 0x0, 0x0})

10.233879072s ago: executing program 3 (id=732):
socket$nl_route(0x10, 0x3, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
r2 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07})
mq_getsetattr(r2, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0)
mq_timedreceive(r2, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0)

10.171982423s ago: executing program 2 (id=733):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES16, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000fb00000000470300"/27], 0x48)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0))
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000040000000700b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x800c)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x88}}, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r7 = dup(r6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)

8.671806932s ago: executing program 3 (id=736):
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x40100, 0x0)
r0 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x20002)
r1 = socket$inet6(0xa, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6a)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r5 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x8b)
fsconfig$FSCONFIG_SET_PATH(r5, 0x3, 0x0, &(0x7f0000000080)='./file0\x00', r6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0)
r7 = socket$inet_icmp(0x2, 0x2, 0x1)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xc248, &(0x7f0000000240)={[{@nodelalloc}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}]}, 0x83, 0x5f9, &(0x7f0000001200)="$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")
recvfrom$inet(r7, 0x0, 0x0, 0x40000100, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10)
sendmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x7fffd, @empty}, 0x80, 0x0, 0x0, 0x0, 0x43}, 0x5b4}], 0x1, 0x850)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000600)=""/84, 0x54, <r8=>0x0, &(0x7f0000000280)=""/26, 0x1a}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=r8, 0x4)

8.596360644s ago: executing program 0 (id=737):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sndtimer(0xffffff9c, &(0x7f00000001c0), 0x416400)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000140)={'wg2\x00', @local})

7.449476786s ago: executing program 3 (id=739):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
open(&(0x7f00000000c0)='./bus\x00', 0x68042, 0x62)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000500)=0xd0)
recvmsg$can_raw(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x40000003)
ftruncate(0xffffffffffffffff, 0x2007ffb)
syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x11f8, 0x800, 0x1000, 0x5cc}, 0x0, &(0x7f0000000080))
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setresgid(0xee00, 0xee01, 0x0)
mkdir(&(0x7f0000000000)='./file1\x00', 0x74)

7.348104048s ago: executing program 1 (id=740):
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0xfff}, 0x8)

7.040077984s ago: executing program 1 (id=741):
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)
r0 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000003640)={0x2020}, 0x2020)
openat$dlm_monitor(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300))
socket$unix(0x1, 0x5, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000040)="240000001e005f0214ffff0600fffff8070000000000000000000100080003000b000000", 0x24)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mremap(&(0x7f00003ab000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000024a000/0x1000)=nil)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000940))
r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000140), 0x0, 0x0})

5.897176066s ago: executing program 3 (id=742):
socket(0x10, 0x3, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
openat(0xffffffffffffffff, 0x0, 0x281c2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x400801, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"})
keyctl$dh_compute(0x17, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})

4.892082546s ago: executing program 1 (id=743):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4.225935748s ago: executing program 1 (id=744):
socket$nl_route(0x10, 0x3, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18)
r2 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07})
mq_getsetattr(r2, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0)
mq_timedreceive(r2, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0)

3.743280398s ago: executing program 3 (id=745):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fstat(0xffffffffffffffff, 0x0)
getgid()
syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0)

3.592641871s ago: executing program 0 (id=746):
prlimit64(0x0, 0xe, &(0x7f00000192c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = syz_open_procfs(r0, &(0x7f0000019340)='net/snmp6\x00')
pread64(r1, 0x0, 0x0, 0x1000000000)

3.207831218s ago: executing program 0 (id=747):
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x40100, 0x0)
r0 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x20002)
r1 = socket$inet6(0xa, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6a)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r5 = fsopen(&(0x7f00000000c0)='nfsd\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x8b)
fsconfig$FSCONFIG_SET_PATH(r5, 0x3, 0x0, &(0x7f0000000080)='./file0\x00', r6)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0)
r7 = socket$inet_icmp(0x2, 0x2, 0x1)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0xc248, &(0x7f0000000240)={[{@nodelalloc}, {@resgid={'resgid', 0x3d, 0xee00}}, {@init_itable}]}, 0x83, 0x5f9, &(0x7f0000001200)="$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")
recvfrom$inet(r7, 0x0, 0x0, 0x40000100, &(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10)
sendmmsg(r1, &(0x7f00000002c0)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x500, 0x7fffd, @empty}, 0x80, 0x0, 0x0, 0x0, 0x43}, 0x5b4}], 0x1, 0x850)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000600)=""/84, 0x54, <r8=>0x0, &(0x7f0000000280)=""/26, 0x1a}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=r8, 0x4)

1.794271685s ago: executing program 2 (id=748):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c646973636172643d3078303030303030303030303030303030332c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d6d6163637972696c6c69632c0067add4ceec7cb8702b1b4a0ff322839e69b507d7478e0706b00408dc59283f5c0159b8e3c0289dcb182504844ef8e6972cdb3f50680fc9602ed27c1f6b47a91f941f154ae205d34a9b7a7c67efa0c0e2a70251d664fce12ae64a5a521aa83080b7672c4e1566a61a0ade4b6c9d78151053d9fb31fd2cfc77f269f873e14e5fe3c46c0acbb22d40391ae31d2025dcd947adf76739ae4ecbe3b630040b37e2b09d7816e0b93981de1147532cf2f46d4d4904f68fb43cd165b9"], 0x1, 0x6213, &(0x7f0000000240)="$eJzs3U9vHGcdB/Df7D//KW2jHqoSIeS2AVpK87eEQIG2Bzj0wgHlihK5bhWRAkoCSquIuMqFAy8ChMQREEdOvIAeuHLjBRApQQJ66qCxn8cZL96s43R31n4+H8md+c0z432m3x3vbmZmnwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4u3v//BMFRGXfpEWHIv4XPQjehErTb0WEStrx/L6g4h4Lraa49mIGC5FVLnx6YjXIuLjpyLu3b+13iw6u89+fO9Pf//dj574wd/+MDz1nz/f6L8+ab2bN3/977/cPvj+AgAAQInquq6r9DH/ePp83+u6UwDAXOTX/zrJy9ULV28uWH/UarVafQjrtnpvt9tFRGy2t2neMzgdDwCHzGZ80nUX6JD8izaIiCe67gSw0KquO8BM3Lt/a71K+Vbt14O17fZ8Lciu/Dernfs7Jk2nGb/GZF7PrzvRj2cm9GdlTn1YJDn/3nj+l7bbR2m9Wec/L5PyH23f+lScnH9/PP8xRyf/3p75lyrnP3ik/PvyBwAAAACABZb//f9Yx+d/lx5/V/blYed/1+bUBwAAAAAAAAD4rD3u+H87KuP/AQAAwKJqPqs3fvPUg2WTvoutWX6xinhybH2gMOlmmdWu+wEAAAAAAAAAAAAAJRlsX8N7sYoYRsSTq6t1XTc/beP1o3rc7Q+70vcfStb1H3kAANj28VNj9/JXEcsRcTF9199wdXW1rpdXVuvVemUpv58dLS3XK63PtXnaLFsa7eMN8WBUN79subVd27TPy9Pax39f81ijur+Pjs1Hh4EDQERsvxrd84p0xNT109H1uxwOB8f/0eP4Zz+6fp4CAAAAs1fXdV2lr/M+ns7597ruFAAwF/n1f/y8gFqtVqvV6qNXt9V7u90uImKzvU3znsFw/ABwyGzGJ113gQ7Jv2iDiHiu604AC63qugPMxL37t9arlG/Vfj1I47vna0F25b9ZbW2Xt99rOs34NSbzen7diX48M6E/z86pD4sk598bz//SdvsorTfr/OdlUv7Nfh7roD9dy/n3x/Mfc3Ty7+2Zf6ly/oNHyr8vfwAAAAAAWGD53/+PLdT539FBd2eqh53/XZvZowIAAAAAAADAbN27f2s93/eaz/9/YY/13P95NOX8K/kXKeef7v/fufDmpbH1+q35u289yP9f92+t//7GPz+fp/vNfynPVOmZVaVnRJUeqRqk6QF3bII7w/6oeaRh1esP0jU/9fDduBJXYyNO71q3l46HB+1ndrU3PR1utdf97fazu9oHO+15+3O72ofpSqd6JbefjPX4aVyNd7bam7alKfu/PKW9ntKe8+87/ouU8x+0fpr8V1N7NTZt3P2o93/HfXu61+O8eeWLvzo9+92Z6k70d/atrdm/Fzroz9b/kydG8fPrG9dO3rx848a1M5Emu5aejTT5jOX8h+kn5//Si9vt+e9++3i9+9HokfNfFHdiMDH/F1vzzf6+POe+dSHnP0o/Of93Uvvex/9hzn/y8f9KB/0BAAAAAAAAAAAAAACAh6nreusW0Tcj4ny6/6erezMBgPnKr/91kpfPq+4fdPs/7t6PrvqvVs+5rhasP3OtP61n/XhvL9T+qg9U/3fB+rNwdVu9tzfaRUT8tb1N857hl3v9MgBgkX0aEf/ouhN0Rv4Fy9/310xPdN0ZYK6uf/Dhjy9fvbpx7XrXPQEAAAAAAAAADiqP/7nWGv/5RF3Xt8fW2zX+61ux9rjjfw7yzM4AoxMGqu4/+j49TC+i32sNN/58TBr/e7gz97DxvwdTHm84pX00pX1pSvvylPY9b/Royfk/3xrv/EREHB8bfr2E8V/Hx7wvQc7/hdbzucn/K2PrtfOvf3uY8+/tyv/Ujfd/dur6Bx++euX9y+9tvLfxk3Nnzpw+d/78hQsXTr175erG6e3/dtjj2cr557GvXQdalpx/zlz+Zcn5fynV8i9Lzv/LqZZ/WXL++f2e/MuS88+ffeRflpz/y6mWf1ly/l9NtfzLkvN/JdXyL0vO/2upln9Zcv6vplr+Zcn5n0y1/MuS8z+V6n3mvzLrfjEfOf98hsvxX5acf76yQf5lyfmfTbX8y5LzP5dq+Zcl5/9aquVflpz/11Mt/7Lk/M+nWv5lyfl/I9XyL0vO/0Kq5V+WnP83Uy3/suT8v5Vq+Zcl5/96quVflpz/t1Mt/7Lk/L+TavmXJef/3VTLvyw5/zdSLf+yPPj+fzNmzJjJM13/ZQIAAAAAAAAAAAAAxs3jcuKu9xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+B87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLevcXIddd3AD+zN28cSAyE1ElN2DjGGGeTXV/iC62LCdeGW0kIhV6wXe/aLPiG1y6BRrWjQImEUVFF2/DQFhBq81JhVTzQClAeUKtKlaB9oC+ICpWHqAooIFWlFWSrmfP//3dmdnZm1zvenDnn85GSX3bmzJwzZ/4zu1873x0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmt35htlP1bIsq9Vq+QWbsuxF9XnDxKbGJa99YY8PAAAAWLtfNP793M3pgsMruFHTNv90x7e/urCwsJC9b/hPRz+3sJCumMiy0Q1Z1rguuvqD99eatwkez8ZrQ01fD/XY/XCP60d6XD/a4/qxHtdv6HH9eI/rl5yAJW7IaunOtjX+c1N+SrNbstHGdds63Orx2oah+rlLt81qjdssjJ7I5rJT2Ww23bJ9vm2tsf3X76zv661Z3NdQ07621FfITx49Ho+hFs7xtpZ9Ld5n9KPXZxM//cmjx//6wrO3dZo9T0PL/eXHuWNr/Tg/ES7Jj7WWbUjnJB7nUNNxbunwnAy3HGetcbv6f7cf53MrPM7hxcNcV+3P+Xg21Pjv7zTO00gt63CetoTLfnZXlmWXFw+7fZsl+8qGso0tlwwtPj/j+Yqs30d9Kb00G1nVOr1zBeu0Pme2ta7T9tdEfP7vDLcbWeYYmp+mHz021vS8/3zhWtZpVH/Uy71W2tdgv18rRVmDcV18p/Ggn+i4BreFx//o9uXXYMe102ENpsfdtAa39lqDQ2PDjWNOT0KtcZvFNbirZfvhxp5qjfnM9u5rcOrC6XNT8x/7+D1zp4+dnD05e2bPrl3Te/btO3DgwNSJuVOz0/m/r/FsF9/GbCi9BraGcxdfA69u27Z5qS58cWzJ+++1vg7Hu7wON7Vt2+/X4Uj7g6utzwty6ZrOXxvvqZ/08StD2TKvscbzs3Ptr8P0uJtehyNNr8OO31M6vA5HVvA6rG9zbufKfmYZafqn0zEs/71gbWtwU9MabP95pH0N9vvnkaKswfGwLr63c/nvBVvC8T4xudqfR4aXrMH0cMN7T/2S9PP++IHG6LQub69fceNYdnF+9vy9jxy7cOH8riyMdfGyprXSvl43Nj2mbMl6HVr1ej08d8cTt3e4fFM4V+P31P81vuxzVd9m773dn6vGd7fO57Pl0t1ZGH223uez03fz+vkcy7LPf+uxB7/x6OffsOz5rOfNT0yt/WfxlEub3n9Hl3n/jbn/+Xx/6a4eHx4dyV+/w+nsjLa8H7c+VSON965aY9/PTa3s/Xg0/LPe78e3dHk/3ty2bb/fj0fbH1x8P671+tOOtWl/PsfDOjk13f39uL7N5t2rXZMjXd+P7wqzFs7/a0JSSLmoae0st27TvkZGRsPjGol7aF2ne1q2Hw3ZrL6vp3Zf2zrdcVd+X8Pp0S1ar3U60bZtv9dp+rOv5dZprdefvl2b9udzPKyLW/Z0X6f1bZ7eu/b3zhvifza9d471WoOjw2P1Yx5Ni7Dxfp8t3BDX4L3Z8exsdiqbaVw71lhPtca+Ju9b2RocC/+s93vl5i5rcEfbtv1eg+n72HJrrzay9MH3QfvzOR7WxZP3dV+D9W3euL+/P7vuCJekbZp+dm3/87Xl/szr9rbTdL3Wykg4zm/t7/5ns/VtTh1Ybc7sfp7uDpfc2OE8tb9+l3tNzWTrc542h+N89sDy56l+PPVtPndwhevpcJZllz5yf+PPe8Pfr/zdxe9+teXvXTr9nc6lj9z/4xef+MfVHD8Ag+/5fGzMv9c1/c3USv7+HwAAABgIMfcPhZnI/wAAAFAaMffH/ys8kf8BAACgNGLuHwkzqUj+3/zGZ+eev5SlZv5CEK9Pp+GBfLvYcZ0OX08sLKpffv+XZ//7Hy6tbN9DWZb9/IE/6Lj95gficeUmwnFefVPr5Ut89Z4V7fvow5fSfpv7618I9x8fz0qXQacK7nSWZV+/+TON/Uy8/0pjPv3A0cZ88PITj9e3ee5g/nW8/TMvy7f/i1D+PXziWMvtnwnn4YdhTr+t8/mIt/vKldds2f/exf3F29W23tR42E9+IL/f+HtyPvt4vn08z8sd/zc+/dRX6ts/8qrOx39pqPPxPxXu98th/u8r8u2bn4P61/F2nwzHH/cXb3fvl77Z8fivfirf/tyb8+2Ohhn3vyN8ve3Nz841n69HasdaHlf2lny7uP/p7/5x4/p4f/H+249//MiVlvPRvj6e/rf8fqbato+Xx/1Ef9+2//r9NK/PuP+n/uhoy3nutf+rDz7zivr9tu//7rbtzn1kZ2P/i/fX+hub/vKTn+m4v3g8h//2XMvjOfzu8DoO+3/yA2E9huv/72p+f+2/XeHou1vff+L2X9h0qeXxRG/9ab7/q6872Zgbxm/YeOOLXnzT5VfWz12WfWdDfn+99n/yr862HP8Xb83PR7w+dvTb97+cuP/zH508c3b+4txMOquP3tz43Tlvz48nHu/N4b21/esjZy98cPb8xPTEdJZNlPdX6F2zL4X543xc7r71wpJ30J0Ph+fz9j//+sbt//rpePm/vye//Mrb8u9brw7bfTZcvik8f6vb/1JP3nlr4/Vdezoc4cLS3xe8Flu2/deBFW0YHn/7zwVxvZ97+Qcb56F+XeP7Rnxdr/H4vz+T38/XwnldCL+Zeeuti/tr3j7+boQrD+Wv9zWfv/A2F5/XvwnP9zt+mN9/PK74eL8ffo755ubW97u4Pr52aaj9/hu/xeNyeD/JLufXx63i+b7y3K0dDy/+HpLs8m2Nr/8k3c9tq3qYy5n/2PzUqbkzFx+ZujA7f2Fq/mMfP3L67MUzF440fpfnkQ/1uv3i+9PGxvvTzOy+vVnj3epsPq6zF/r4zz18fGb/9PaZ2RPHLp648PC52fMnj8/PH5+dmd9+7MSJ2Y/2uv3czKFduw/u2b978uTczKEDBw/uOTg5d+Zs/TDyg+ph3/SHJ8+cP9K4yfyhvQd33Xff3unJ02dnZg/tn56evNjr9o3vTZP1W//+5PnZU8cuzJ2enZyf+/jsoV0H9+3b3fO3AZ4+d2J+Yur8xTNTF+dnz0/lj2XiQuPi+ve+XrennOb/I/95tl0t/0V82bvu3pd+P2vdlx9b9q7yTdp+geiz4XfR/PNLzh1Yydcx94+GmVQk/wMAAEAVxNw/FmYi/wMAAEBpxNy/IcxE/gcAAIDSiLl/PMykIvm/dP3/zZdWtH/9f/3/5vOl/1+x/v9DRev/5+8X+v/9sdb+vf5/oP+v/6//r/+v/08fFK3/H3P/DVlWyfwPAAAAVRBz/8YwE/kfAAAASiPm/hvDTOR/AAAAKI2Y+18UZlKR/K//r/+v/6//r//fef/6/4NJ/787/f8e9P+nsmr1/y/38/j1//X/Wapo/f+Y+18cZlKR/A8AAABVEHP/TWEm8j8AAACURsz9N4eZyP8AAABQGjH3bwozqUj+1//X/9f/1//X/++8f/3/waT/353+fw/6/z7/X/9f/5++Klr/P+b+l4SZVCT/AwAAQBXE3P/SMBP5HwAAAIpn5NpuFnP/y8JMluT/a9wBAAAA8IKLuf+WrK0IXpG//9f/1/8vfv9/Q7pO/1//Pytk/3840/8vDv3/7vT/e9D/1//X/9f/p6+K1v9v5P5sPHt5mElF8j8AAABUQcz9t4aZyP8AAABQGjH3/1KYifwPAAAApRFz/+Ywk4rkf/1//f/i9/99/r/+f9H7/z7/v0j0/7vT/+9B/1//X/9f/5++Klr/P+b+28JMKpL/AQAAoApi7r89zET+BwAAgNKIuf+Xw0zkfwAAACiNmPu3hJlUJP/r/xe8/x+bo/r/+v/6//r/+v8rov/fnf5/D/r/+v/6//r/9FXR+v8x978izKQi+R8AAACqIOb+O8JM5H8AAAAojZj7XxlmIv8DAABAacTcPxFmUpH8r/9f8P5/3oMf8/n/+v/6//r/+v8ro//fnf5/D/r/+v996f8vXNL/1/8nV7T+f8z9d4aZVCT/AwAAQBXE3L81zET+BwAAgNKIuf+uMBP5HwAAAEoj5v5tYSYVyf/6/wPR/8/0//X/9f/1//X/V0b/vzv9/x70//X/ff6//j99VbT+f8z9rwozqUj+BwAAgCqIuX97mIn8DwAAAKURc/+rw0zkfwAAACiNmPt3hJlUJP/r/+v/6//r/+v/d96//v9g0v/vTv+/B/1//X/9f/1/+qpo/f+Y+18TZlKR/A8AAABVEHP/zjAT+R8AAABKI+b+u8NM5H8AAAAojZj7J8NMKpL/9f/1//X/9f/1/zvvX/9/MOn/d6f/34P+v/6//r/+P31VtP5/zP33hJlUJP8DAABAFcTcf2+YifwPAAAApRFz/1SYifwPAAAApRFz/3SYSUXyv/6//r/+v/7/qvr/r1y8X/3/nP5/sej/d6f/34P+v/7/C97/H9X/p1SK1v+PuX9XmElF8j8AAABUQcz9u8NM5H8AAAAojZj794SZyP8AAABQGjH37w0zqUj+1//X/9f/1//3+f+d96//P5j0/7vrf/8/PkT9f/1//X+f/6//z1JF6//H3H9fmElF8j8AAABUQcz9+8JM5H8AAAAojZj794eZyP8AAABQGjH3HwgzqUj+1//X/9f/1//X/++8f/3/waT/353P/+9B/1//X/9f/581eugPm78qWv8/5v6DYSYVyf8AAABQBTH3vzbMRP4HAACA0oi5/1fCTOR/AAAAKI2Y+381zKQi+V//v6V7Xn+4+v/6//r/+v8N+v+DSf+/O/3/HvT/9f/1//X/6atl+/8heq93/z/m/kNhJhXJ/wAAAFAFMff/WpiJ/A8AAAClEXP/68JM5H8AAAAojZj7D4eZVCT/6//7/H/9f/1//f/O+1/v/v9YvF/9/zXR/+9O/78H/X/9f/1//X/6qmif/x9z/+vDTCqS/wEAAKAKYu6/P8xE/gcAAIDSiLn/DWEm8j8AAACURsz9bwwzqUj+1//X/x+U/v+N+v/6/22Pp2z9f5//3x/6/93p//eg/6//r/+v/09fFa3/H3P/m8JMKpL/AQAAoApi7n9zmIn8DwAAAKURc/9bwkzkfwAAACiNmPvfGmZSkfyv/6//Pyj9/0z/X/+/7fHo/+v/d6L/353+fw/6//r/+v/6//RV0fr/Mff/ephJRfI/AAAAVEHM/Q+Emcj/AAAAUBox978tzET+BwAAgNKIuf/tYSYVyf/6//r/+v/6//r/nfev/z+Y9P+7G7D+/y9uCpfr/+f0/4t9/Kvt/4+0fX1d+v8/WK7/v7Ch/fb6/1wPRev/x9z/jjCTiuR/AAAAqIKY+98ZZiL/AwAAQGnE3P+uMBP5HwAAAEoj5v7fCDOpSP7X/68fx2J7Wf+/rP3/If1//X/9/4rQ/+9uwPr/Pv+/jf5/sY/f5//r/7NU0fr/Mfe/O8ykIvkfAAAAqiDm/gfDTOR/AAAAKI2Y+x8KM5H/AQAAoDRi7n9PmElF8r/+v8//r0b/3+f/Z/r/+v8Vof/fnf5/D/r/+v9F6///p/4/g61o/f+Y+x8OM6lI/gcAAIAqiLn/vWEm8j8AAACURsz9vxlmIv8DAABAacTc/74wk4rkf/3/Qen/Twxo//8x/f/r2P+/46Z8O/1//X8W6f93p//fg/6//n/R+v8+/58BV7T+f8z97w8zWXn+H1/xlgAAAMALIub+3wozqcjf/wMAAEAVxNz/22Em8j8AAACURsz9vxNmUpH8r/8/KP1/n/+f6f/7/P+2x6P/r//fyfr1/+M7j/6//r/+f6T/r/+v/0+7ovX/Y+7/3TCTiuR/AAAAqIKY+z8QZiL/AwAAwEDo9P9kt4u5/0iYifwPAAAApRFz/9Ewk4rkf/1//X/9/4L2//9s679879vvPLpL/1//X/9/Vdb18//rL36f/6//r/+f6P/r/+v/065o/f+Y+4+FmVQk/wMAAEAVxNz/e2Em8j8AAACURsz9x8NM5H8AAAAojZj7Z8JMKpL/9f/1//X/C9r/H+DP/4/nQ/+/Vd/6//FNV/+/o7x/n1bR9e3/v3exJ67/v9r+/1jHS/X/9f8H+fj1//X/Wapo/f+Y+2fDTCqS/wEAAKAKQu4fOpHPxSvkfwAAACiNmPtPhpnI/wAAAFAaMfd/MMykIvlf/1//X/9f/9/n/3fef7f+f23E5/8XVerf/6zxQtH/b1Oc/n9n+v/6/4N8/Pr/+v8sVbT+f8z9c2EmFcn/AAAAUAUx938ozET+BwAAgNKIuf/DYSbyPwAAAJRGzP2nwkwqkv/1//X/9f/1//X/O++/sJ//r//f1Vr79/r/gf5/tfv//6P/r/+v/09/FK3/H3P/6TCTiuR/AAAAqIKY+8+Emcj/8P/s3UmTXfV5x/HTiUCtIovsssgmVVnmJbBI1skLyCKbbFKVyiITSciMyDySQELmhEDm2GAbDMbYBs8D2MbYeAbbeJ4HPGFsSi5az/NI3X363G717b7n/P+fz0KPaau515RK4qfW1wcAAKAZuft/IW6x/wEAAKAZuft/MW7pZP/r/4/T/1+qlPX/u9//6v4/X/EE+/8f1f8f9Pr6f/1/y/T/0/T/K4z3/1cPw9BX/+/5//p//T9rMrf+P3f/L8Utnex/AAAA6EHu/l+OW+x/AAAAaEbu/uviFvsfAAAAmpG7/1filk72/57+f2vos//PjNfz/z3/X/+v/9f/L9zp9v83Pv8zn/7/0P3/XbesetmZ9v8tPv//6rEPbrqfP65Nv/9D9v9nD/p8/T8tmlv/n7v/V+OWTvY/AAAA9CB3/6/FLfY/AAAANCN3//Vxi/0PAAAAzcjd/+txSyf7f33P/z+38/GF9v9F/6//3/mA/l//r/9fLM//n9bT8/+ve/yan3/6vh+8/yiv31H/P2rT/fzS37/n/+v/2W9u/X/u/t+IWzrZ/wAAANCD3P2/GbfY/wAAANCM3P2/FbfY/wAAANCM3P2/Hbd0sv/X1/8v+vn/Rf+v/9/5gP5f/6//Xyz9/7Se+v8reX39v/5f/6//Z73m1v/n7v+duKWT/Q8AAAA9yN3/u3GL/Q8AAADNyN1/Q9xi/wMAAEAzcvefj1s62f/6/5Pv/5/T/+v/4+r/9f/6/5On/5+m/19B/6//1//r/1mrufX/uftvjFs62f8AAADQg9z9vxe32P8AAADQjNz9vx+32P8AAADQjNz9fxC3dLL/9f+e/6//1//r/8dfX/+/TPr/afr/FfT/x+3nr9L/6//1/1zuiP3/sxM/ba+l/8/d/4dxSyf7HwAAAHqQu/+P4hb7HwAAAJqRu/+P4xb7HwAAAJqRu/9P4pZO9r/+X/+v/9f/X3H/v/+H3g79/zj9/+nQ/0+bTf+/dWb0w/r/xff/nv+v/9f/s8vcnv+fu/9P45ZO9j8AAAD0IHf/n8UtE/v/yL+ZDwAAAGxU7v4/j1t8/R8AAAAWL6uz3P1/Ebd0sv/1//p//b/+3/P/x19/qv+//7L3p/+fF/3/tNn0/wfQ/+v/l/z+9f/6f/abW/+fu/8v45ZO9j8AAAD0IHf/TXGL/Q8AAADNyN3/V3GL/Q8AAADNyN3/13FLJ/t/vP+/9N/r/w9H/7/7/ev/x398rKv/z7+j/n+y//8xz//vk/5/2un3/2f1/7v//vr/E7Tp9994/39u1efr/xkzt/4/d//NcUsn+x8AAAB6kLv/lrjF/gcAAIBm5O7/m7jF/gcAAIBm5O7/27ilk/3v+f/6f/3/8vp/z/+/aJPP/x9Ovf8/o/8/JP3/NM//X0H/r//X/3v+P2s1t/4/d/+tcUsn+x8AAAB6cOszw87u/7thsP8BAABgiS7/swN7/0BpyN3/93GL/Q8AAADNyN3/D3FLJ/tf/6//1//r//X/469/1P5/1YORPf//dOj/p+n/V9D/n0Q/f6ax/v+2gz5/Dv3/Dfp/ZmZX///gpY9vqv/P3f+PcUsn+x8AAAB6kLv/n+IW+x8AAACakbv/n+MW+x8AAACakbv/X+KWTvb/iff/E0Gs/l//r//X/7fU/6+i/z8d+v9p+v8V9P+e/+/5//p/1upS/7/758NN9f+5+/81bulk/wMAAEAPcvf/W9xi/wMAAEAzcvffFrfY/wAAANCM3P3/Hrd0sv89/1//r//X/+v/x19f/79M+v9p+v8V9P/6f/2//p+12vX8/8tsqv/P3X973NLJ/gcAAIAe5O6/I26x/wEAAKAZufv/I26x/wEAAKAZufv/M27pZP/r/0+2/8+P6//1/4P+X/+v/z8V3fb/W2O/Eu13QP//yM+e/4ndH9H/6//1//p//T9rMIv+/8Klf7vM3f9fcUsn+x8AAAB6kLv/v+MW+x8AAACakbv/f+IW+x8AAACakbv/f+OWI+7/71/ruzo9+n/P/9f/6//1/+Ovr/9fpm77/0Py/P8V9P/6f/2//p+1mkX/f9lf5+7/v7jF1/8BAACgGbn7/z9usf8BAACgGbn7XxC32P8AAADQjNz9L4xbOtn/+n/9v/5f/6//H3/9K+3/t4dx+v/Tof+fpv9fQf+v/9f/6/9Zq7n1/7n774xbOtn/AAAA0IPc/XfFLfY/AAAANCN3/4viFvsfAAAAmpG7/8VxSyf7X/+v/9f/6//1/+Ov7/n/y6T/n6b/H4bh7ok3MNb/Xzir/9f/6//1/1yhufX/uftfErd0sv8BAACgB7n7745b7H8AAABoRu7+e+IW+x8AAACakbv/pXFLJ/tf/6//1//r//X/46+v/18m/f80/f8Knv+v/9f/6/9Zq7n1/7n7741bOtn/AAAA0IPc/ffFLfY/AAAANCN3/8viFvsfAAAAmpG7//64pZP9r//X/+v/9f8n0v+f1//vpf8/HSfX/w/6f/2//n8F/b/+X//PXqfV/z8bP9+v6v9z9788bulk/wMAAEAPcvc/ELfY/wAAANCM3P2viFvsfwAAAGhG7v5Xxi2d7H/9v/5f/6//9/z/8dfX/y+T5/9P0/+voP/X/+v/9f+s1Wn1/wf1/nv/Onf/q+KWTvY/AAAA9CB3/4Nxi/0PAAAAzcjd/1DcYv8DAABAM3L3vzpu6WT/6//1/7v7/2HQ/+v/9f8XnUL/vz3o/9dO/z9N/7+C/r/N/v97hob6/3MHfr7+nzmaW/+fu/81cUsn+x8AAAB6kLv/tXGL/Q8AAADNyN3/urjF/gcAAIBm5O5/fdzS0v5/7uD0bfn9/9k9n6j/H4bhies9/1//P/H6+v/Z9P/1T1X/vz76/2n6/xX0/232/57/r/9nY+bW/+fuf0Pc0tL+BwAAgM7l7n9j3GL/AwAAQDNy978pbrH/AQAAoBm5+98ct3Sy/5ff/+/9RP3/cKzn/+v/dz6g/9f/6/8X67j9/e3b8Wua/l//r/8f7ee3Dvj3nkH/r//X/zNibv1/7v63xC2d7H8AAADoQe7+h+MW+x8AAACakbv/kbjF/gcAAIBm5O5/a9zSyf7X/+v/9f/L7P+39f/6f/3/qLk8///aa3/8Mf2//r/F/n+K/l//r/9nr7n1/7n73xa3dLL/AQAAoAe5+98et9j/AAAA0Izc/Y/GLfY/AAAANOPRnZBze3jHMHS5//f3/1cNFwvVi8b6/2jU9P+X0f/vfv/6//EfH57/r//X/5+8ufT/nv9/Ze9f/6//X/L7P1L//0P7P1//T4vm1v/n7n8sbulk/wMAAEAPcve/M26x/wEAAKAZufvfFbfY/wAAANCM3P2Pxy2d7H/P/9f/6//1//r/8dfX/y+T/n+a/n8F/f/x+/n8WVX/v9zn/3+v/p/1mVv/n7v/3XHLzvD74e+7wv+ZAAAAwIzk7n9P3NLJ1/8BAACgB7n73xu32P8AAADQjNz974tbOtn/+n/9v/5f/6//H399/f8y6f+n6f9X6Kf/3x774Kb7+ePa9Ptvpv/3/H/WaG79f+7+98ctnex/AAAAaNszO9/m7v9A3GL/AwAAQDNy938wbrH/AQAAoBm5+5+IWzrZ//p//X/7/f9P6//3vL7+X//fMv1//oo+Tv+/Qj/9/6hN9/NLf//6f/0/+82t/8/d/2Tc0sn+BwAAgB7k7v9Q3GL/AwAAQDNy9384brH/AQAAoBm5+z8StzSx/8+s/B76/776/62hx/7f8//1//r/niyn/79j9Bdpz//X/+v/l/v+9f/6f/abW/+fu/+prTMN7n8AAABo10/+yM89edjv+9TOt9vDR+MW+x8AAACakbv/Y3GL/Q8AAADNyN3/8bilk/2v/++r/+/z+f/6f/2//r8ny+n/x+n/9f/6/+W+f/2//p/95tb/5+7/RNxy2fBb/f+iBwAAAJyqq4/23XP3fzJu6eTr/wAAANCD3P2filv27f8Lh/xT7QAAAMDc5O7/dNzSydf/9f8z7/+HE+r/4/vp/y/S/+v/x15f/79M+v9px+z/L2zp//X/E/T/+n/9P3vNrf/P3f/AvUOX+x8AAAAatet3FD6z8+328Nm4xf4HAACAZuTu/1zcYv8DAABAM3L3fz5u6WT/6/9n3v9f0fP/z9V/8vz/zvv/m7ZHX1//r/9vmf5/muf/r6D/1//r//X/rNUR+v+dQXrS/X/u/i/ELZ3sfwAAAOhB7v4vxi32PwAAADQjd/+X4hb7HwAAAJqRu//LcUsn+1//v4H+/+azw3Ci/f8hnv+v/++j/z/g9dvp/3/gmvMP/9TP3HOn/p9LTrP/zx8L+n/9v/7/Iv2//l//z15ze/5/7v6vxC2d7H8AAADoQe7+p+MW+x8AAACakbv/q3HL8/v/oU29KwAAAGCdcvd/LW7p5Ov/+v8Wn/+/zP4//1lvoP8/v7z+P5vi3vt/z//X/+/n+f/T9P8r6P/1//p//T9rNbf+P3f/1+OWTvY/AAAA9CB3/zfiltz/W0f+rXsAAABgZnL3fzNu8fV/AAAAaEbu/mfilk72v/5f/z+X/j95/v+lz/P8/4v0//r/o9D/T9P/r6D/1//r//X/rNXc+v/c/d+KWzrZ/wAAANCD3P3Pxi32PwAAADQjd/+34xb7HwAAAJqRu/87cUsn+1//r//X/+v/9f/jr6//Xyb9/zT9/wr6f/2//l//z1rNrf/P3f/dAAAA//9ky21Q")
chdir(&(0x7f0000000040)='./file0\x00')
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000065c0)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x4ac41, 0x0)

1.630390479s ago: executing program 0 (id=749):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x11)

1.207661637s ago: executing program 1 (id=750):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
open(&(0x7f00000000c0)='./bus\x00', 0x68042, 0x62)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000500)=0xd0)
recvmsg$can_raw(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x40000003)
ftruncate(0xffffffffffffffff, 0x2007ffb)
syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x11f8, 0x800, 0x1000, 0x5cc}, 0x0, &(0x7f0000000080))
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setresgid(0xee00, 0xee01, 0x0)
mkdir(&(0x7f0000000000)='./file1\x00', 0x74)

1.03437682s ago: executing program 3 (id=751):
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)
r0 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000003640)={0x2020}, 0x2020)
openat$dlm_monitor(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300))
socket$unix(0x1, 0x5, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mremap(&(0x7f00003ab000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f000024a000/0x1000)=nil)

1.02659253s ago: executing program 0 (id=752):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
dup3(r1, r0, 0x0)

218.435196ms ago: executing program 0 (id=753):
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000040)={0xa, @pix_mp={0x3, 0x0, 0x47524247, 0x8, 0x6, [{0xffffffff, 0x5}, {0x4, 0x1}, {0x7fffffff, 0xa}, {0x5, 0xfffffffe}, {0x5, 0x4}, {0x3, 0x9}, {0x7f, 0x9}, {0x40, 0x5}], 0x4, 0xc0, 0x6}})
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000a00)='./bus\x00', 0x10000, &(0x7f00000009c0)=ANY=[], 0x2, 0x62d2, &(0x7f0000006e00)="$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")
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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")
syz_io_uring_setup(0x70e4, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x20000, 0x40)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2091c13, 0x0, 0x0, 0x0, &(0x7f0000000080))

0s ago: executing program 1 (id=754):
socket(0x10, 0x3, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
openat(0xffffffffffffffff, 0x0, 0x281c2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x400801, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"})
keyctl$dh_compute(0x17, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})

kernel console output (not intermixed with test programs):

7295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec638eec9 code=0x7ffc0000
[  100.369092][    C1] vkms_vblank_simulate: vblank timer overrun
[  100.407948][ T5930] loop1: detected capacity change from 0 to 16
[  100.419623][ T5930] erofs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ18446744073709551615'
[  100.455299][   T28] audit: type=1326 audit(1759311031.092:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec638eec9 code=0x7ffc0000
[  100.762878][ T5889] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  100.768035][   T28] audit: type=1326 audit(1759311031.132:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2ec638eec9 code=0x7ffc0000
[  101.087136][   T28] audit: type=1326 audit(1759311031.132:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec638eec9 code=0x7ffc0000
[  101.115480][   T28] audit: type=1326 audit(1759311031.132:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec638eec9 code=0x7ffc0000
[  101.171600][   T28] audit: type=1326 audit(1759311031.182:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2ec638eec9 code=0x7ffc0000
[  101.194298][   T28] audit: type=1326 audit(1759311031.182:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec638eec9 code=0x7ffc0000
[  101.268325][   T28] audit: type=1326 audit(1759311031.192:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec638eec9 code=0x7ffc0000
[  101.338330][    T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  101.391888][   T28] audit: type=1326 audit(1759311031.192:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2ec638eec9 code=0x7ffc0000
[  101.434426][   T28] audit: type=1326 audit(1759311031.202:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5927 comm="syz.2.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ec6385d67 code=0x7ffc0000
[  101.697945][    T9] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[  102.404451][    T9] usb 2-1: config 1 has no interface number 0
[  102.416401][    T9] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping
[  102.695316][    T9] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16
[  102.718334][    T9] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  102.749402][    T9] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  102.759216][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.776421][    T9] usb 2-1: Product: syz
[  102.784363][    T9] usb 2-1: Manufacturer: syz
[  102.801075][    T9] usb 2-1: SerialNumber: syz
[  102.806088][ T5945] loop2: detected capacity change from 0 to 512
[  102.817736][ T5933] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  102.847596][ T5933] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  102.916266][ T5946] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  102.947625][    T9] usb 2-1: Expected 3 endpoints, found: 1
[  103.029969][ T5947] loop0: detected capacity change from 0 to 1024
[  103.041681][ T5947] EXT4-fs: Ignoring removed nobh option
[  103.047357][ T5947] EXT4-fs: Ignoring removed bh option
[  103.089101][ T5947] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  103.371206][ T5945] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.17: iget: bad i_size value: 38620345925642
[  103.589346][ T5941] loop3: detected capacity change from 0 to 2048
[  103.604758][ T5945] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.17: couldn't read orphan inode 15 (err -117)
[  103.866668][ T5945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.159160][ T5947] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.879275][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.885421][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.988365][   T50] Bluetooth: hci1: command tx timeout
[  106.105609][   T28] kauditd_printk_skb: 53 callbacks suppressed
[  106.105624][   T28] audit: type=1326 audit(1759311036.852:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec638eec9 code=0x7ffc0000
[  106.150073][   T28] audit: type=1326 audit(1759311036.882:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec638eec9 code=0x7ffc0000
[  106.173384][   T28] audit: type=1326 audit(1759311036.882:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2ec638eec9 code=0x7ffc0000
[  106.466506][   T28] audit: type=1326 audit(1759311036.882:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec638eec9 code=0x7ffc0000
[  106.744099][   T28] audit: type=1326 audit(1759311036.892:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec638eec9 code=0x7ffc0000
[  106.773344][   T28] audit: type=1326 audit(1759311036.892:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2ec638eec9 code=0x7ffc0000
[  106.807483][   T28] audit: type=1326 audit(1759311036.892:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec638eec9 code=0x7ffc0000
[  107.128579][   T28] audit: type=1326 audit(1759311036.892:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec638eec9 code=0x7ffc0000
[  107.229010][   T28] audit: type=1326 audit(1759311036.892:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2ec638eec9 code=0x7ffc0000
[  107.548576][   T28] audit: type=1326 audit(1759311036.892:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5966 comm="syz.2.23" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ec6385d67 code=0x7ffc0000
[  108.422558][ T5981] loop2: detected capacity change from 0 to 512
[  108.463521][ T5979] loop3: detected capacity change from 0 to 4096
[  108.493673][ T5981] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.27: iget: bad i_size value: 38620345925642
[  108.619007][ T5981] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.27: couldn't read orphan inode 15 (err -117)
[  108.912261][ T5981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.248695][ T5990] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  111.662981][  T126] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm kworker/u4:5: bg 0: block 5: invalid block bitmap
[  111.678875][ T5877] usb 2-1: USB disconnect, device number 3
[  111.722660][  T126] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 36 with error 28
[  111.736171][  T126] EXT4-fs (loop2): This should not happen!! Data will be lost
[  111.736171][  T126] 
[  111.749630][  T126] EXT4-fs (loop2): Total free blocks count 0
[  111.755680][  T126] EXT4-fs (loop2): Free/Dirty block details
[  111.761885][  T126] EXT4-fs (loop2): free_blocks=0
[  111.767008][  T126] EXT4-fs (loop2): dirty_blocks=36
[  111.772406][  T126] EXT4-fs (loop2): Block reservation details
[  111.778470][  T126] EXT4-fs (loop2): i_reserved_data_blocks=36
[  111.790817][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.314290][ T5995] netlink: 152 bytes leftover after parsing attributes in process `syz.3.30'.
[  113.277761][   T28] kauditd_printk_skb: 49 callbacks suppressed
[  113.277774][   T28] audit: type=1326 audit(1759311044.012:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  113.327619][   T28] audit: type=1326 audit(1759311044.012:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  113.356742][   T28] audit: type=1326 audit(1759311044.022:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  113.379637][   T28] audit: type=1326 audit(1759311044.022:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  113.533835][   T28] audit: type=1326 audit(1759311044.022:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  113.827807][   T28] audit: type=1326 audit(1759311044.022:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  113.959942][ T6013] loop2: detected capacity change from 0 to 2048
[  114.064196][ T6013] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  114.073973][ T6013] UDF-fs: error (device loop2): udf_read_inode: (ino 1376) failed !bh
[  114.082636][ T6013] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=64, partition=0
[  114.917014][   T28] audit: type=1326 audit(1759311044.022:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  115.336830][   T28] audit: type=1326 audit(1759311044.062:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  115.468341][   T28] audit: type=1326 audit(1759311044.062:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdb39985d67 code=0x7ffc0000
[  115.578308][   T28] audit: type=1326 audit(1759311044.062:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6005 comm="syz.1.33" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb3992af79 code=0x7ffc0000
[  115.932439][ T6021] loop2: detected capacity change from 0 to 512
[  115.982710][ T6021] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.37: iget: bad i_size value: 38620345925642
[  116.015682][ T6021] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.37: couldn't read orphan inode 15 (err -117)
[  116.090935][ T6021] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.845904][   T34] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm kworker/u4:2: bg 0: block 5: invalid block bitmap
[  116.862139][   T34] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  116.875222][   T34] EXT4-fs (loop2): This should not happen!! Data will be lost
[  116.875222][   T34] 
[  116.898244][   T34] EXT4-fs (loop2): Total free blocks count 0
[  116.905564][   T34] EXT4-fs (loop2): Free/Dirty block details
[  116.917787][   T34] EXT4-fs (loop2): free_blocks=0
[  116.928302][   T34] EXT4-fs (loop2): dirty_blocks=15948
[  116.934617][   T34] EXT4-fs (loop2): Block reservation details
[  116.941491][   T34] EXT4-fs (loop2): i_reserved_data_blocks=15948
[  117.080163][   T34] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  120.284450][ T6053] loop3: detected capacity change from 0 to 1024
[  120.662429][ T6053] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  120.687589][ T6053] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  120.698733][ T6053] EXT4-fs (loop3): orphan cleanup on readonly fs
[  120.810325][ T6053] __quota_error: 87 callbacks suppressed
[  120.810366][ T6053] Quota error (device loop3): v2_read_file_info: Can't read info structure
[  120.826222][ T6053] EXT4-fs warning (device loop3): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  120.841080][ T6053] EXT4-fs (loop3): Cannot turn on quotas: error -5
[  120.881797][ T6053] EXT4-fs (loop3): 1 truncate cleaned up
[  120.889090][ T6053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  121.211833][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.360587][ T6060] loop3: detected capacity change from 0 to 512
[  121.380565][ T6060] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.48: iget: bad i_size value: 38620345925642
[  121.557392][ T6060] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.48: couldn't read orphan inode 15 (err -117)
[  121.581641][ T6060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.205194][ T5793] EXT4-fs: 15 callbacks suppressed
[  122.205208][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.978954][ T1130] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm kworker/u4:10: bg 0: block 5: invalid block bitmap
[  123.032761][ T1130] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  123.209862][ T1130] EXT4-fs (loop3): This should not happen!! Data will be lost
[  123.209862][ T1130] 
[  123.221358][ T1130] EXT4-fs (loop3): Total free blocks count 0
[  123.227414][ T1130] EXT4-fs (loop3): Free/Dirty block details
[  123.242793][ T1130] EXT4-fs (loop3): free_blocks=0
[  123.252315][ T1130] EXT4-fs (loop3): dirty_blocks=11992
[  123.257850][ T1130] EXT4-fs (loop3): Block reservation details
[  123.265031][ T1130] EXT4-fs (loop3): i_reserved_data_blocks=11992
[  123.357974][  T126] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  125.123467][ T6084] loop3: detected capacity change from 0 to 2048
[  125.149718][ T6084] UDF-fs: bad mount option "uid=00000000000000000000Lã.Árs" or missing value
[  126.122590][ T6086] loop0: detected capacity change from 0 to 1024
[  126.203555][ T6086] EXT4-fs: Ignoring removed nobh option
[  126.223664][ T6086] EXT4-fs: Ignoring removed bh option
[  126.242948][ T6086] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  126.624854][ T6095] loop3: detected capacity change from 0 to 1024
[  127.265834][ T6095] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  127.294187][ T6095] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  127.302815][ T6095] EXT4-fs (loop3): orphan cleanup on readonly fs
[  127.310205][ T6095] Quota error (device loop3): v2_read_file_info: Can't read info structure
[  127.319037][ T6095] EXT4-fs warning (device loop3): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  127.333621][ T6095] EXT4-fs (loop3): Cannot turn on quotas: error -5
[  127.342245][ T6095] EXT4-fs (loop3): 1 truncate cleaned up
[  127.349616][ T6095] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  127.408306][ T6086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.684082][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.058642][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.385413][ T6112] loop3: detected capacity change from 0 to 2048
[  128.400590][ T6112] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  128.412774][ T6112] UDF-fs: error (device loop3): udf_read_inode: (ino 1376) failed !bh
[  128.421121][ T6112] UDF-fs: error (device loop3): udf_fill_super: Error in udf_iget, block=64, partition=0
[  128.491357][ T5889] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  129.085485][ T6117] loop3: detected capacity change from 0 to 4096
[  129.286936][ T6119] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  130.072867][ T6124] loop3: detected capacity change from 0 to 2048
[  130.089464][ T6124] UDF-fs: bad mount option "uid=00000000000000000000Lã.Árs" or missing value
[  130.799687][ T6128] loop2: detected capacity change from 0 to 1024
[  130.842601][ T6128] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  130.865925][ T6128] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  130.874485][ T6128] EXT4-fs (loop2): orphan cleanup on readonly fs
[  130.881758][ T6128] Quota error (device loop2): v2_read_file_info: Can't read info structure
[  130.891153][ T6128] EXT4-fs warning (device loop2): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  130.905724][ T6128] EXT4-fs (loop2): Cannot turn on quotas: error -5
[  130.916788][ T6128] EXT4-fs (loop2): 1 truncate cleaned up
[  130.924076][ T6128] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  131.279438][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.398977][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  133.405675][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  135.075724][ T6158] loop2: detected capacity change from 0 to 2048
[  135.403844][ T6158] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  135.456100][ T6158] UDF-fs: error (device loop2): udf_read_inode: (ino 1376) failed !bh
[  135.471185][ T6164] loop0: detected capacity change from 0 to 2048
[  135.488440][ T6158] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=64, partition=0
[  135.514405][ T6164] UDF-fs: bad mount option "uid=00000000000000000000Lã.Árs" or missing value
[  135.570747][ T5900] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  135.576255][ T5889] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  136.345323][ T6174] loop1: detected capacity change from 0 to 1024
[  136.621790][ T6174] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  136.639908][ T6174] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  136.648553][ T6174] EXT4-fs (loop1): orphan cleanup on readonly fs
[  136.655784][ T6174] Quota error (device loop1): v2_read_file_info: Can't read info structure
[  136.664683][ T6174] EXT4-fs warning (device loop1): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  136.679270][ T6174] EXT4-fs (loop1): Cannot turn on quotas: error -5
[  136.712068][ T6174] EXT4-fs (loop1): 1 truncate cleaned up
[  136.721722][ T6174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  137.793674][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.205018][ T6199] loop0: detected capacity change from 0 to 1024
[  139.214879][ T6199] EXT4-fs: Ignoring removed nobh option
[  139.220615][ T6199] EXT4-fs: Ignoring removed bh option
[  139.620741][ T6199] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  141.371237][ T6207] loop1: detected capacity change from 0 to 16
[  141.378776][ T6207] erofs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ18446744073709551615'
[  141.405118][ T6199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.478232][ T6206] loop2: detected capacity change from 0 to 2048
[  141.506628][ T6206] UDF-fs: bad mount option "uid=00000000000000000000Lã.Árs" or missing value
[  141.675016][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.830993][  T787] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  142.551219][  T787] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[  142.612113][  T787] usb 2-1: config 1 has no interface number 0
[  142.786351][  T787] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping
[  142.797804][  T787] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16
[  142.811987][  T787] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  142.838070][  T787] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  142.852473][  T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.863096][  T787] usb 2-1: Product: syz
[  142.868423][  T787] usb 2-1: Manufacturer: syz
[  142.876771][  T787] usb 2-1: SerialNumber: syz
[  142.902961][ T6217] loop2: detected capacity change from 0 to 2048
[  142.927534][ T6217] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  142.939340][ T6207] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  142.946742][ T6207] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  142.960646][  T787] usb 2-1: Expected 3 endpoints, found: 1
[  142.982400][ T6217] UDF-fs: error (device loop2): udf_read_inode: (ino 1376) failed !bh
[  142.990791][ T6217] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=64, partition=0
[  144.535765][ T6229] loop0: detected capacity change from 0 to 1024
[  145.173093][ T6229] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  145.216275][  T787] usb 2-1: USB disconnect, device number 4
[  145.225111][ T6229] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  145.233819][ T6229] EXT4-fs (loop0): orphan cleanup on readonly fs
[  145.248266][ T6229] Quota error (device loop0): v2_read_file_info: Can't read info structure
[  145.257095][ T6229] EXT4-fs warning (device loop0): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  145.271859][ T6229] EXT4-fs (loop0): Cannot turn on quotas: error -5
[  145.292865][ T6229] EXT4-fs (loop0): 1 truncate cleaned up
[  145.319596][ T6229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  145.770816][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.768722][ T6244] loop1: detected capacity change from 0 to 1024
[  146.778863][ T6244] EXT4-fs: Ignoring removed nobh option
[  146.784528][ T6244] EXT4-fs: Ignoring removed bh option
[  148.897602][ T6244] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  148.988797][ T6244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.190914][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.522485][ T6261] loop0: detected capacity change from 0 to 16
[  150.572892][ T6261] erofs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ18446744073709551615'
[  150.917678][ T6268] netlink: 28 bytes leftover after parsing attributes in process `syz.2.101'.
[  151.066391][ T6270] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  151.468285][  T787] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  151.871832][ T6274] loop1: detected capacity change from 0 to 1024
[  152.238285][ T6274] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  152.326803][ T6274] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  152.338587][ T6274] EXT4-fs (loop1): orphan cleanup on readonly fs
[  152.348897][ T6274] Quota error (device loop1): v2_read_file_info: Can't read info structure
[  152.358666][ T6274] EXT4-fs warning (device loop1): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  152.373417][ T6274] EXT4-fs (loop1): Cannot turn on quotas: error -5
[  152.398248][ T6274] EXT4-fs (loop1): 1 truncate cleaned up
[  152.411386][ T6274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  152.473789][  T787] usb 1-1: config 1 has an invalid interface number: 7 but max is 0
[  152.501044][  T787] usb 1-1: config 1 has no interface number 0
[  152.518584][  T787] usb 1-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping
[  152.570727][  T787] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16
[  152.590422][  T787] usb 1-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  152.743176][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.763882][  T787] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  152.783303][  T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.803579][  T787] usb 1-1: Product: syz
[  152.815060][  T787] usb 1-1: Manufacturer: syz
[  152.833473][  T787] usb 1-1: SerialNumber: syz
[  152.893119][ T6261] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  152.927415][ T6261] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  152.970127][  T787] usb 1-1: Expected 3 endpoints, found: 1
[  153.026321][ T6278] loop2: detected capacity change from 0 to 2048
[  153.042623][ T6278] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  153.056375][ T6278] UDF-fs: error (device loop2): udf_read_inode: (ino 1376) failed !bh
[  153.072295][ T6278] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=64, partition=0
[  154.787480][ T5859] usb 1-1: USB disconnect, device number 2
[  155.170773][ T6296] loop2: detected capacity change from 0 to 1024
[  155.180991][ T6296] EXT4-fs: Ignoring removed nobh option
[  155.186787][ T6296] EXT4-fs: Ignoring removed bh option
[  156.120171][ T6296] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  158.051782][ T6296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.354651][ T6306] loop0: detected capacity change from 0 to 512
[  158.373610][ T6306] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.109: iget: bad i_size value: 38620345925642
[  158.388659][ T6306] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.109: couldn't read orphan inode 15 (err -117)
[  158.432916][ T6306] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.490056][ T1086] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm kworker/u4:7: bg 0: block 5: invalid block bitmap
[  159.600947][ T1086] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  159.658361][ T1086] EXT4-fs (loop0): This should not happen!! Data will be lost
[  159.658361][ T1086] 
[  159.671697][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.698199][ T1086] EXT4-fs (loop0): Total free blocks count 0
[  159.706771][ T1086] EXT4-fs (loop0): Free/Dirty block details
[  159.745420][ T1086] EXT4-fs (loop0): free_blocks=0
[  159.787441][ T1086] EXT4-fs (loop0): dirty_blocks=5160
[  159.834993][ T1086] EXT4-fs (loop0): Block reservation details
[  159.865297][ T1086] EXT4-fs (loop0): i_reserved_data_blocks=5160
[  160.025506][ T1086] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  162.588586][ T6324] loop3: detected capacity change from 0 to 4096
[  163.365734][ T6334] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  163.706302][ T6338] loop0: detected capacity change from 0 to 2048
[  163.752879][ T6338] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  163.765989][ T6338] UDF-fs: error (device loop0): udf_read_inode: (ino 1376) failed !bh
[  163.774540][ T6338] UDF-fs: error (device loop0): udf_fill_super: Error in udf_iget, block=64, partition=0
[  164.772834][ T6349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.123'.
[  165.640079][ T6355] loop2: detected capacity change from 0 to 1024
[  165.646750][ T6351] loop3: detected capacity change from 0 to 512
[  165.657475][ T6355] EXT4-fs: Ignoring removed nobh option
[  165.663456][ T6355] EXT4-fs: Ignoring removed bh option
[  166.221183][ T6355] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  166.397005][ T6351] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.122: iget: bad i_size value: 38620345925642
[  166.420348][ T6355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.744863][ T6351] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.122: couldn't read orphan inode 15 (err -117)
[  166.858255][   T28] audit: type=1800 audit(1759311097.582:221): pid=6346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.121" name="file2" dev="loop2" ino=16 res=0 errno=0
[  166.901997][ T6351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.677605][ T1086] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm kworker/u4:7: bg 0: block 5: invalid block bitmap
[  167.725405][ T1086] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  167.816697][ T1086] EXT4-fs (loop3): This should not happen!! Data will be lost
[  167.816697][ T1086] 
[  167.831912][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.881738][ T1086] EXT4-fs (loop3): Total free blocks count 0
[  167.935776][ T1086] EXT4-fs (loop3): Free/Dirty block details
[  167.996612][ T1086] EXT4-fs (loop3): free_blocks=0
[  168.836708][ T1086] EXT4-fs (loop3): dirty_blocks=16000
[  168.848271][ T1086] EXT4-fs (loop3): Block reservation details
[  168.854410][ T1086] EXT4-fs (loop3): i_reserved_data_blocks=16000
[  168.931798][ T1086] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[  172.164509][ T6387] loop1: detected capacity change from 0 to 128
[  172.534410][ T6392] loop0: detected capacity change from 0 to 512
[  172.658383][ T6392] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.135: iget: bad i_size value: 38620345925642
[  172.676897][ T6392] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.135: couldn't read orphan inode 15 (err -117)
[  173.747213][ T6399] loop1: detected capacity change from 0 to 1024
[  173.758573][ T6399] EXT4-fs: Ignoring removed nobh option
[  173.764278][ T6399] EXT4-fs: Ignoring removed bh option
[  175.633212][ T6392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  175.808279][ T6394] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  176.593435][ T6399] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  176.819652][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.840307][ T6399] EXT4-fs warning (device loop1): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop1.
[  178.192399][   T28] audit: type=1326 audit(1759311108.772:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a098eec9 code=0x7ffc0000
[  178.235854][   T28] audit: type=1326 audit(1759311108.772:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a098eec9 code=0x7ffc0000
[  178.971263][   T28] audit: type=1326 audit(1759311108.782:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff4a098eec9 code=0x7ffc0000
[  179.148581][   T28] audit: type=1326 audit(1759311108.782:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a098eec9 code=0x7ffc0000
[  179.439500][   T28] audit: type=1326 audit(1759311108.782:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a098eec9 code=0x7ffc0000
[  180.218266][   T28] audit: type=1326 audit(1759311108.782:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff4a098eec9 code=0x7ffc0000
[  180.301767][   T28] audit: type=1326 audit(1759311108.782:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a098eec9 code=0x7ffc0000
[  180.471346][   T28] audit: type=1326 audit(1759311108.782:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a098eec9 code=0x7ffc0000
[  180.494271][   T28] audit: type=1326 audit(1759311108.782:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff4a098eec9 code=0x7ffc0000
[  180.656579][   T28] audit: type=1326 audit(1759311108.782:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6415 comm="syz.0.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff4a0985d67 code=0x7ffc0000
[  180.892629][ T6443] loop0: detected capacity change from 0 to 1024
[  180.922283][ T6443] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  180.965414][ T6443] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  180.973754][ T6443] EXT4-fs (loop0): orphan cleanup on readonly fs
[  181.075476][ T6443] EXT4-fs warning (device loop0): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  181.090050][ T6443] EXT4-fs (loop0): Cannot turn on quotas: error -5
[  181.122845][ T6443] EXT4-fs (loop0): 1 truncate cleaned up
[  181.130307][ T6443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  182.361130][ T6450] loop3: detected capacity change from 0 to 4096
[  184.084410][ T6464] loop2: detected capacity change from 0 to 16
[  184.099311][   T28] kauditd_printk_skb: 32 callbacks suppressed
[  184.099328][   T28] audit: type=1326 audit(1759311114.832:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  184.103876][ T6464] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  184.146626][   T28] audit: type=1326 audit(1759311114.832:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  184.248784][   T28] audit: type=1326 audit(1759311114.842:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  184.465688][ T6471] ntfs3: Unknown parameter '000000000000000'
[  184.661630][   T28] audit: type=1326 audit(1759311114.842:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  184.770740][   T28] audit: type=1326 audit(1759311114.842:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  184.856599][   T28] audit: type=1326 audit(1759311114.842:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  184.981255][   T28] audit: type=1326 audit(1759311114.842:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  185.051514][   T28] audit: type=1326 audit(1759311114.842:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  185.099192][   T28] audit: type=1326 audit(1759311114.842:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdb39985d67 code=0x7ffc0000
[  185.134012][   T28] audit: type=1326 audit(1759311114.842:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.1.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb3992af79 code=0x7ffc0000
[  185.190696][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.299473][ T6474] loop3: detected capacity change from 0 to 128
[  185.396196][ T6474] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  185.779005][ T6474] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.463867][ T6464] erofs: DAX unsupported by block device. Turning off DAX.
[  186.493748][ T6474] syz.3.154 (pid 6474) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  186.500450][ T6464] erofs: (device loop2): mounted with root inode @ nid 36.
[  186.673239][ T5785] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  189.649554][ T6497] sched: RT throttling activated
[  189.673383][ T6500] loop3: detected capacity change from 0 to 128
[  192.091014][ T6504] loop1: detected capacity change from 0 to 1024
[  192.115760][ T6504] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  192.135320][ T6504] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  192.143851][ T6504] EXT4-fs (loop1): orphan cleanup on readonly fs
[  192.151014][ T6504] __quota_error: 60 callbacks suppressed
[  192.151029][ T6504] Quota error (device loop1): v2_read_file_info: Can't read info structure
[  192.165559][ T6504] EXT4-fs warning (device loop1): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  192.180065][ T6504] EXT4-fs (loop1): Cannot turn on quotas: error -5
[  192.195065][ T6504] EXT4-fs (loop1): 1 truncate cleaned up
[  192.202221][ T6504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  193.164473][   T28] audit: type=1326 audit(1759311123.902:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cfff8eec9 code=0x7ffc0000
[  193.302732][   T28] audit: type=1326 audit(1759311123.902:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cfff8eec9 code=0x7ffc0000
[  193.336657][   T28] audit: type=1326 audit(1759311123.982:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1cfff8eec9 code=0x7ffc0000
[  193.408231][   T28] audit: type=1326 audit(1759311123.982:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cfff8eec9 code=0x7ffc0000
[  193.493981][   T28] audit: type=1326 audit(1759311123.982:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cfff8eec9 code=0x7ffc0000
[  194.035413][   T28] audit: type=1326 audit(1759311123.992:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1cfff8eec9 code=0x7ffc0000
[  194.075374][   T28] audit: type=1326 audit(1759311123.992:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cfff8eec9 code=0x7ffc0000
[  194.130989][   T28] audit: type=1326 audit(1759311123.992:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f1cfff8eec9 code=0x7ffc0000
[  194.184246][   T28] audit: type=1326 audit(1759311123.992:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6514 comm="syz.3.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1cfff85d67 code=0x7ffc0000
[  194.344742][ T6529] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  194.672903][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  194.679580][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  194.979300][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'.
[  196.831754][ T6538] loop3: detected capacity change from 0 to 32768
[  196.934238][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.042599][ T6538] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  197.383544][ T6538] XFS (loop3): Ending clean mount
[  197.591630][ T6546] loop0: detected capacity change from 0 to 32768
[  197.664500][ T6546] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.176 (6546)
[  197.816305][ T6561] loop2: detected capacity change from 0 to 2048
[  197.837342][ T6561] NILFS (loop2): unrecognized mount option "cp=0x0000000000000003±£ø¢þápô"
[  197.862081][ T6546] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  198.178654][ T6546] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  198.371302][ T6546] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  198.381373][ T6546] BTRFS info (device loop0): use zstd compression, level 3
[  198.412572][ T6546] BTRFS info (device loop0): using free space tree
[  198.502082][ T5785] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  198.815810][   T28] kauditd_printk_skb: 62 callbacks suppressed
[  198.815824][   T28] audit: type=1326 audit(1759311129.562:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6571 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  199.066598][   T28] audit: type=1326 audit(1759311129.602:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6571 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  199.094521][   T28] audit: type=1326 audit(1759311129.622:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6571 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  199.117086][   T28] audit: type=1326 audit(1759311129.622:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6571 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  199.140816][   T28] audit: type=1326 audit(1759311129.622:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6571 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  199.165181][   T28] audit: type=1326 audit(1759311129.622:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6571 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  199.188158][   T28] audit: type=1326 audit(1759311129.622:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6571 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  199.210761][   T28] audit: type=1326 audit(1759311129.622:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6571 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  199.256631][   T28] audit: type=1326 audit(1759311129.622:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6571 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdb39985d67 code=0x7ffc0000
[  199.298556][ T6546] BTRFS info (device loop0): enabling ssd optimizations
[  199.315909][ T6546] BTRFS info (device loop0): auto enabling async discard
[  199.329727][   T28] audit: type=1326 audit(1759311129.622:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6571 comm="syz.1.179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb3992af79 code=0x7ffc0000
[  200.544132][ T5789] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  201.261162][ T6605] loop3: detected capacity change from 0 to 1024
[  201.279467][ T6605] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  201.303807][ T6605] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  201.312496][ T6605] EXT4-fs (loop3): orphan cleanup on readonly fs
[  201.328739][ T6605] EXT4-fs warning (device loop3): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  201.343901][ T6605] EXT4-fs (loop3): Cannot turn on quotas: error -5
[  201.354591][ T6605] EXT4-fs (loop3): 1 truncate cleaned up
[  201.361731][ T6605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  202.871797][ T6601] loop0: detected capacity change from 0 to 32768
[  202.925114][ T6613] loop2: detected capacity change from 0 to 1024
[  203.011848][ T6601] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  203.100769][ T6613] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  203.269325][ T6613] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  203.277719][ T6613] EXT4-fs (loop2): orphan cleanup on readonly fs
[  203.530559][ T6613] EXT4-fs warning (device loop2): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  204.042364][ T6613] EXT4-fs (loop2): Cannot turn on quotas: error -5
[  204.241867][ T6613] EXT4-fs (loop2): 1 truncate cleaned up
[  204.499830][ T6613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  204.656676][ T6623] loop1: detected capacity change from 0 to 1024
[  204.672876][ T6623] EXT4-fs: Ignoring removed nobh option
[  204.678736][ T6623] EXT4-fs: Ignoring removed bh option
[  204.697057][ T6623] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  204.726787][ T5789] ocfs2: Unmounting device (7,0) on (node local)
[  204.905241][ T6623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.910133][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.153795][   T28] kauditd_printk_skb: 70 callbacks suppressed
[  208.153810][   T28] audit: type=1326 audit(1759311138.902:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  208.245399][   T28] audit: type=1326 audit(1759311138.902:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  208.278272][   T28] audit: type=1326 audit(1759311138.922:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  208.344274][   T28] audit: type=1326 audit(1759311138.922:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  208.405529][   T28] audit: type=1326 audit(1759311138.922:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  208.431981][   T28] audit: type=1326 audit(1759311138.922:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  208.484676][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.496326][   T28] audit: type=1326 audit(1759311138.922:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  208.550516][   T28] audit: type=1326 audit(1759311138.922:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  208.604367][   T28] audit: type=1326 audit(1759311138.922:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdb39985d67 code=0x7ffc0000
[  208.651275][   T28] audit: type=1326 audit(1759311138.922:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6629 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdb3992af79 code=0x7ffc0000
[  208.704654][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.368315][ T6657] loop1: detected capacity change from 0 to 1024
[  210.378606][ T6657] EXT4-fs: Ignoring removed nobh option
[  210.384304][ T6657] EXT4-fs: Ignoring removed bh option
[  212.109758][ T5792] Bluetooth: hci0: command 0x0406 tx timeout
[  212.115905][ T5792] Bluetooth: hci2: command 0x0406 tx timeout
[  212.122029][ T5788] Bluetooth: hci3: command 0x0406 tx timeout
[  212.521498][ T6657] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  212.623254][ T6657] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.181046][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.470931][ T6674] loop3: detected capacity change from 0 to 1024
[  214.496454][ T6674] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  214.579026][ T6674] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  214.587395][ T6674] EXT4-fs (loop3): orphan cleanup on readonly fs
[  214.597053][ T6674] __quota_error: 117 callbacks suppressed
[  214.597070][ T6674] Quota error (device loop3): v2_read_file_info: Can't read info structure
[  214.614419][ T6674] EXT4-fs warning (device loop3): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  214.630226][ T6674] EXT4-fs (loop3): Cannot turn on quotas: error -5
[  214.643308][ T6674] EXT4-fs (loop3): 1 truncate cleaned up
[  214.650069][ T6674] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  214.695653][ T6679] loop2: detected capacity change from 0 to 1024
[  214.797980][ T6679] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  214.811260][ T6679] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  214.837425][ T6679] EXT4-fs (loop2): orphan cleanup on readonly fs
[  214.853331][ T6679] Quota error (device loop2): v2_read_file_info: Can't read info structure
[  214.903248][ T6679] EXT4-fs warning (device loop2): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  215.072791][ T6679] EXT4-fs (loop2): Cannot turn on quotas: error -5
[  215.281088][ T6679] EXT4-fs (loop2): 1 truncate cleaned up
[  215.322303][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.348841][ T6679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  216.988005][ T6694] loop3: detected capacity change from 0 to 2048
[  217.027891][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.069267][ T6694] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  217.320845][ T6701] loop2: detected capacity change from 0 to 1164
[  220.797648][ T5800] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  221.785620][ T6741] loop0: detected capacity change from 0 to 1024
[  221.909525][ T6741] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  222.088805][ T6741] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  222.097245][ T6741] EXT4-fs (loop0): orphan cleanup on readonly fs
[  222.128439][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'.
[  222.247439][ T6741] Quota error (device loop0): v2_read_file_info: Can't read info structure
[  222.375896][ T6741] EXT4-fs warning (device loop0): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  222.390990][ T6741] EXT4-fs (loop0): Cannot turn on quotas: error -5
[  222.411095][ T6741] EXT4-fs (loop0): 1 truncate cleaned up
[  222.448525][ T6741] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  222.835463][ T6740] loop1: detected capacity change from 0 to 32768
[  222.905256][ T6740] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  223.222904][ T6740] syz.1.222 (6740) used greatest stack depth: 18544 bytes left
[  223.264216][ T5786] ocfs2: Unmounting device (7,1) on (node local)
[  223.637787][ T6760] loop3: detected capacity change from 0 to 512
[  223.982818][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.011217][ T6760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.072298][ T6760] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  224.133160][ T6760] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #2: comm syz.3.227: corrupted inode contents
[  224.158206][ T6760] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #2: comm syz.3.227: mark_inode_dirty error
[  224.188022][ T6760] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #2: comm syz.3.227: corrupted inode contents
[  224.202808][ T6760] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.227: mark_inode_dirty error
[  224.304902][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.317417][ T6772] loop3: detected capacity change from 0 to 40427
[  226.348229][ T6772] F2FS-fs (loop3): heap/no_heap options were deprecated
[  226.386566][ T6772] F2FS-fs (loop3): build fault injection attr: rate: 19, type: 0x7ffff
[  227.032389][ T6782] loop0: detected capacity change from 0 to 32768
[  227.142858][ T6782] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  227.952969][ T5789] (syz-executor,5789,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  228.256232][ T6797] loop1: detected capacity change from 0 to 32768
[  228.431848][ T5889] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  228.564632][ T6801] netlink: 32 bytes leftover after parsing attributes in process `syz.1.236'.
[  229.074631][ T5789] ocfs2: Unmounting device (7,0) on (node local)
[  229.645186][ T6809] loop0: detected capacity change from 0 to 256
[  230.818750][ T6823] loop3: detected capacity change from 0 to 1024
[  231.329908][ T6822] loop2: detected capacity change from 0 to 512
[  231.377639][ T6822] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  231.498904][ T6822] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002]
[  231.514530][ T6822] System zones: 0-2, 18-18, 34-34
[  231.731373][ T6822] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[  231.780260][ T6822] EXT4-fs (loop2): Remounting filesystem read-only
[  231.886065][ T6822] EXT4-fs (loop2): 1 truncate cleaned up
[  231.897289][ T6822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.923850][   T11] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[  232.071137][ T6822] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  232.082791][   T11] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  232.135579][   T11] Quota error (device loop2): write_blk: dquota write failed
[  232.186365][   T11] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries
[  232.227490][   T11] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started
[  232.290053][   T11] Quota error (device loop2): write_blk: dquota write failed
[  232.346788][   T11] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list
[  232.384463][   T11] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started
[  232.442080][   T11] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  232.486434][   T11] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[  232.558558][   T11] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  232.760444][ T6840] netlink: 'syz.3.246': attribute type 30 has an invalid length.
[  233.028805][ T6840] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  233.038188][ T6840] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  233.048202][ T6840] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  233.057694][ T6840] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  233.086589][ T6840] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  233.095768][ T6840] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  233.104771][ T6840] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  233.113741][ T6840] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  234.392969][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.087209][ T6868] loop3: detected capacity change from 0 to 1024
[  236.804624][ T6871] loop0: detected capacity change from 0 to 2048
[  236.816469][ T6871] NILFS (loop0): unrecognized mount option "cp=0x0000000000000003±£ø¢þápô"
[  246.021444][ T6922] loop0: detected capacity change from 0 to 512
[  246.281186][ T6926] loop2: detected capacity change from 0 to 1024
[  246.291297][ T6926] EXT4-fs: Ignoring removed nobh option
[  246.296943][ T6926] EXT4-fs: Ignoring removed bh option
[  247.409505][ T6926] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  249.012553][ T6922] EXT4-fs warning (device loop0): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop0.
[  249.486431][ T6926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  249.569771][ T6943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.273'.
[  250.661689][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.479297][ T6947] loop0: detected capacity change from 0 to 32768
[  251.499574][ T6947] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.275 (6947)
[  251.752037][ T6947] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  251.788431][ T6947] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  251.800553][ T6947] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  251.811729][ T6947] BTRFS info (device loop0): use zstd compression, level 3
[  251.819422][ T6947] BTRFS info (device loop0): using free space tree
[  251.918038][ T6947] BTRFS info (device loop0): enabling ssd optimizations
[  252.076821][ T6947] BTRFS info (device loop0): auto enabling async discard
[  253.567542][ T5789] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  253.777442][ T6991] loop1: detected capacity change from 0 to 512
[  253.975310][ T6991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  254.055853][ T6991] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  254.143735][ T6991] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #2: comm syz.1.284: corrupted inode contents
[  254.211663][ T6991] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #2: comm syz.1.284: mark_inode_dirty error
[  254.298835][ T6991] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #2: comm syz.1.284: corrupted inode contents
[  254.369051][ T6991] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.284: mark_inode_dirty error
[  254.608471][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.921884][ T7007] loop1: detected capacity change from 0 to 512
[  256.320286][ T7010] loop3: detected capacity change from 0 to 1024
[  256.330537][ T7010] EXT4-fs: Ignoring removed nobh option
[  256.336331][ T7010] EXT4-fs: Ignoring removed bh option
[  256.617780][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  256.630041][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  257.079693][ T7010] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  258.505141][ T7007] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.287: iget: bad i_size value: 38620345925642
[  258.526880][ T7010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.831450][ T7007] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.287: couldn't read orphan inode 15 (err -117)
[  259.019612][ T7007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.535717][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.645614][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.758486][ T7053] loop3: detected capacity change from 0 to 512
[  262.789009][ T7053] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.299: iget: bad i_size value: 38620345925642
[  262.823814][ T7053] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.299: couldn't read orphan inode 15 (err -117)
[  262.935457][ T7053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.661415][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.849622][ T7061] loop0: detected capacity change from 0 to 1024
[  264.861317][ T7061] EXT4-fs: Ignoring removed nobh option
[  264.867376][ T7061] EXT4-fs: Ignoring removed bh option
[  265.132421][ T7061] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  266.941313][ T7061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.543894][ T7080] loop1: detected capacity change from 0 to 512
[  268.477110][ T7080] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.688766][ T7080] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  268.744430][ T7080] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #2: comm syz.1.304: corrupted inode contents
[  268.758662][ T7080] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #2: comm syz.1.304: mark_inode_dirty error
[  268.792637][ T7080] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #2: comm syz.1.304: corrupted inode contents
[  268.846870][ T7080] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.304: mark_inode_dirty error
[  269.105066][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.204639][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.401243][ T7101] loop1: detected capacity change from 0 to 512
[  269.448652][ T7101] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.309: iget: bad i_size value: 38620345925642
[  269.517302][ T7101] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.309: couldn't read orphan inode 15 (err -117)
[  269.552708][ T7101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.299302][ T7097] loop0: detected capacity change from 0 to 32768
[  270.679165][ T7097] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  270.722348][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.983368][ T5789] (syz-executor,5789,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  272.090296][ T5789] ocfs2: Unmounting device (7,0) on (node local)
[  274.858490][ T7131] loop0: detected capacity change from 0 to 16
[  274.993063][ T7131] erofs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ18446744073709551615'
[  275.288254][ T5860] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  276.001598][ T5860] usb 1-1: config 1 has an invalid interface number: 7 but max is 0
[  276.114220][ T5860] usb 1-1: config 1 has no interface number 0
[  276.131479][ T5860] usb 1-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping
[  276.430260][ T5860] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16
[  276.455716][ T7146] loop1: detected capacity change from 0 to 512
[  276.680848][ T5860] usb 1-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  276.723255][ T5860] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  276.813097][ T7146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  276.826302][ T7146] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  277.379762][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.457549][ T5860] usb 1-1: Product: syz
[  277.461854][ T5860] usb 1-1: Manufacturer: syz
[  277.466607][ T5860] usb 1-1: SerialNumber: syz
[  277.493171][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.498675][ T7131] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  277.511924][ T7131] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  277.527515][ T5860] usb 1-1: Expected 3 endpoints, found: 1
[  277.812213][ T7156] overlayfs: failed to decode file handle (len=6, type=0, flags=0, err=-22)
[  279.523038][ T7162] loop3: detected capacity change from 0 to 32768
[  279.589960][ T7162] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  280.096994][ T5859] usb 1-1: USB disconnect, device number 3
[  280.542483][ T7178] loop0: detected capacity change from 0 to 4096
[  280.551111][ T7178] EXT4-fs: Ignoring removed mblk_io_submit option
[  280.694680][ T5785] (syz-executor,5785,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  281.059761][ T5785] ocfs2: Unmounting device (7,3) on (node local)
[  283.316314][ T7178] fscrypt: Error allocating hmac(sha512): -2
[  283.815025][ T7185] loop2: detected capacity change from 0 to 512
[  283.907879][ T7185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.928570][ T7185] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  284.038999][ T7185] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #2: comm syz.2.331: corrupted inode contents
[  284.145180][ T7185] EXT4-fs error (device loop2): ext4_dirty_inode:6106: inode #2: comm syz.2.331: mark_inode_dirty error
[  284.198633][ T7185] EXT4-fs error (device loop2): ext4_do_update_inode:5230: inode #2: comm syz.2.331: corrupted inode contents
[  284.211265][ T7185] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.331: mark_inode_dirty error
[  284.919647][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.134179][ T7205] loop0: detected capacity change from 0 to 16
[  285.153217][ T7205] erofs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ18446744073709551615'
[  285.508493][ T5846] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  285.710610][ T5846] usb 1-1: config 1 has an invalid interface number: 7 but max is 0
[  285.725201][ T5846] usb 1-1: config 1 has no interface number 0
[  285.731937][ T5846] usb 1-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping
[  285.742812][ T5846] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16
[  285.752981][ T5846] usb 1-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  285.805576][ T5846] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  285.815383][ T7215] loop1: detected capacity change from 0 to 164
[  285.838006][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.862145][ T7215] ISOFS: unable to read i-node block
[  285.872755][ T5846] usb 1-1: Product: syz
[  285.877248][ T7215] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  285.901324][ T5846] usb 1-1: Manufacturer: syz
[  285.906458][ T5846] usb 1-1: SerialNumber: syz
[  285.918662][ T7205] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  285.962644][ T7205] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  285.990031][ T5846] usb 1-1: Expected 3 endpoints, found: 1
[  287.537701][ T7229] loop1: detected capacity change from 0 to 512
[  287.762425][ T7229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  288.025960][ T7229] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  288.577701][ T5860] usb 1-1: USB disconnect, device number 4
[  288.670200][ T7229] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #2: comm syz.1.344: corrupted inode contents
[  288.774335][ T7229] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #2: comm syz.1.344: mark_inode_dirty error
[  288.798601][ T7229] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #2: comm syz.1.344: corrupted inode contents
[  288.837904][ T7229] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.344: mark_inode_dirty error
[  288.899010][ T7246] loop3: detected capacity change from 0 to 2048
[  289.053415][ T7246] NILFS (loop3): unrecognized mount option "cp=0x0000000000000003±£ø¢þápô"
[  290.302635][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.627696][ T7273] loop1: detected capacity change from 0 to 16
[  291.635138][ T7273] erofs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ18446744073709551615'
[  291.948332][ T5860] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  292.155530][ T5860] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[  292.164156][ T5860] usb 2-1: config 1 has no interface number 0
[  292.205010][ T5860] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping
[  292.232439][ T5860] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16
[  292.262742][ T5860] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  292.295173][ T5860] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  292.304845][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.338776][ T5860] usb 2-1: Product: syz
[  292.343035][ T5860] usb 2-1: Manufacturer: syz
[  292.398168][ T5860] usb 2-1: SerialNumber: syz
[  292.411358][ T7273] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  292.419358][ T7273] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  292.644495][ T5860] usb 2-1: Expected 3 endpoints, found: 1
[  295.661498][ T5846] usb 2-1: USB disconnect, device number 5
[  295.907193][ T7291] loop2: detected capacity change from 0 to 2048
[  296.039622][ T7291] NILFS (loop2): unrecognized mount option "cp=0x0000000000000003±£ø¢þápô"
[  298.431255][ T7296] loop0: detected capacity change from 0 to 32768
[  298.501607][ T7296] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  298.548944][   T28] audit: type=1800 audit(1759311458.299:609): pid=7296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.364" name="file1" dev="loop0" ino=17058 res=0 errno=0
[  300.008639][ T7319] capability: warning: `syz.3.370' uses 32-bit capabilities (legacy support in use)
[  300.144551][ T5789] ocfs2: Unmounting device (7,0) on (node local)
[  303.712602][ T7347] loop0: detected capacity change from 0 to 1024
[  304.279808][ T5800] Bluetooth: hci1: command 0x0406 tx timeout
[  305.443769][ T7359] overlayfs: missing 'lowerdir'
[  305.503703][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'.
[  306.727679][ T7367] loop3: detected capacity change from 0 to 1024
[  307.041973][ T1125] hfsplus: b-tree write err: -5, ino 8
[  307.046663][ T7373] loop1: detected capacity change from 0 to 2048
[  307.164748][ T7373] NILFS (loop1): unrecognized mount option "cp=0x0000000000000003±£ø¢þápô"
[  313.577532][ T7429] loop3: detected capacity change from 0 to 32768
[  313.593713][ T7429] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.399 (7429)
[  313.757877][ T7429] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  313.830466][ T7429] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  313.903654][ T7429] BTRFS info (device loop3): setting nodatacow, compression disabled
[  313.958819][ T7429] BTRFS info (device loop3): max_inline at 0
[  313.983172][ T7429] BTRFS info (device loop3): enabling disk space caching
[  314.028992][ T7429] BTRFS info (device loop3): setting datasum, datacow enabled
[  314.083307][ T7429] BTRFS info (device loop3): turning on flush-on-commit
[  314.109359][ T7429] BTRFS info (device loop3): doing ref verification
[  314.127620][ T7429] BTRFS info (device loop3): force clearing of disk cache
[  314.165492][ T7429] BTRFS info (device loop3): enabling ssd optimizations
[  314.198211][ T7429] BTRFS info (device loop3): turning off barriers
[  314.204811][ T7429] BTRFS info (device loop3): max_inline at 4096
[  314.244687][ T7429] BTRFS info (device loop3): disk space caching is enabled
[  314.517610][ T7429] BTRFS info (device loop3): auto enabling async discard
[  314.651135][ T7429] BTRFS info (device loop3): rebuilding free space tree
[  314.839546][ T7429] BTRFS info (device loop3): disabling free space tree
[  314.888345][ T7429] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  314.928240][ T7429] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  315.295673][   T28] audit: type=1800 audit(1759311475.039:610): pid=7429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.399" name="file1" dev="loop3" ino=261 res=0 errno=0
[  315.498504][ T7463] loop3: detected capacity change from 32768 to 64
[  315.569683][ T7429] syz.3.399: attempt to access beyond end of device
[  315.569683][ T7429] loop3: rw=34817, sector=10256, nr_sectors = 8 limit=64
[  315.688994][ T7429] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[  315.700539][ T7429] BTRFS warning (device loop3): direct IO failed ino 261 op 0x8801 offset 0x1000 len 4096 err no 10
[  316.003030][ T7429] syz.3.399: attempt to access beyond end of device
[  316.003030][ T7429] loop3: rw=524288, sector=10240, nr_sectors = 8 limit=64
[  316.033173][   T28] audit: type=1804 audit(1759311475.729:611): pid=7429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.399" name="/newroot/100/file1/file1" dev="loop3" ino=261 res=1 errno=0
[  316.111193][ T7429] syz.3.399: attempt to access beyond end of device
[  316.111193][ T7429] loop3: rw=524288, sector=10352, nr_sectors = 8 limit=64
[  316.148742][ T7429] syz.3.399: attempt to access beyond end of device
[  316.148742][ T7429] loop3: rw=0, sector=10240, nr_sectors = 8 limit=64
[  316.187501][ T7429] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 1, rd 1, flush 0, corrupt 0, gen 0
[  316.210306][   T28] audit: type=1800 audit(1759311475.959:612): pid=7429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.399" name="file1" dev="loop3" ino=261 res=0 errno=0
[  316.754131][ T1130] kworker/u4:10: attempt to access beyond end of device
[  316.754131][ T1130] loop3: rw=6145, sector=10496, nr_sectors = 8 limit=64
[  316.774044][ T1130] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 2, rd 1, flush 0, corrupt 0, gen 0
[  316.786983][ T1130] kworker/u4:10: attempt to access beyond end of device
[  316.786983][ T1130] loop3: rw=6145, sector=10512, nr_sectors = 8 limit=64
[  316.804913][ T1130] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 3, rd 1, flush 0, corrupt 0, gen 0
[  316.818030][ T1130] kworker/u4:10: attempt to access beyond end of device
[  316.818030][ T1130] loop3: rw=6145, sector=10552, nr_sectors = 8 limit=64
[  316.853571][ T1130] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 4, rd 1, flush 0, corrupt 0, gen 0
[  316.868760][ T5785] BTRFS error (device loop3: state A): Transaction aborted (error -5)
[  316.889694][ T5785] BTRFS: error (device loop3: state A) in btrfs_run_delayed_refs:2199: errno=-5 IO failure
[  316.928257][ T5785] BTRFS info (device loop3: state EA): forced readonly
[  316.951533][ T5785] BTRFS info (device loop3: state EA): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  316.954790][ T7460] BTRFS: error (device loop3: state EAL) in free_log_tree:3323: errno=-5 IO failure
[  317.559043][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  317.565560][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  318.637693][ T7490] loop3: detected capacity change from 0 to 40427
[  318.785371][ T7490] F2FS-fs (loop3): Current segment's next free block offset is inconsistent with bitmap, logtype:0, segno:3, type:0, next_blkoff:5, blkofs:5
[  318.919053][ T7490] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117)
[  319.058908][ T5889] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  320.994292][ T7517] loop1: detected capacity change from 0 to 16
[  321.001781][ T7517] erofs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ18446744073709551615'
[  321.399965][ T3065] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  321.810654][ T3065] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[  321.832847][ T3065] usb 2-1: config 1 has no interface number 0
[  321.840569][ T3065] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping
[  321.856233][ T3065] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16
[  321.866700][ T3065] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  321.880551][ T3065] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  321.894071][ T3065] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.904844][ T3065] usb 2-1: Product: syz
[  322.209969][ T3065] usb 2-1: Manufacturer: syz
[  322.214703][ T3065] usb 2-1: SerialNumber: syz
[  322.251135][ T7517] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  322.262551][ T7517] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  322.276580][ T3065] usb 2-1: Expected 3 endpoints, found: 1
[  324.610521][    T8] usb 2-1: USB disconnect, device number 6
[  326.666921][ T7554] loop2: detected capacity change from 0 to 1024
[  326.677946][ T7554] EXT4-fs: Ignoring removed nobh option
[  326.683768][ T7554] EXT4-fs: Ignoring removed bh option
[  328.780054][ T7554] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  328.929893][ T7554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  329.276264][ T7562] loop3: detected capacity change from 0 to 1024
[  329.286430][ T7562] EXT4-fs: Ignoring removed nobh option
[  329.292206][ T7562] EXT4-fs: Ignoring removed bh option
[  330.748170][ T5800] Bluetooth: hci1: command 0x0406 tx timeout
[  331.588546][ T7562] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  331.692388][ T7562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  331.971396][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.051878][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.470517][ T7571] loop3: detected capacity change from 0 to 64
[  332.962572][ T7571] hfs: unable to read volume bitmap
[  333.003648][ T7571] hfs: can't find a HFS filesystem on dev loop3
[  333.307854][ T7575] loop0: detected capacity change from 0 to 2048
[  333.388447][ T7575] NILFS (loop0): unrecognized mount option "cp=0x0000000000000003±£ø¢þápô"
[  335.049662][ T7594] loop0: detected capacity change from 0 to 1024
[  335.057154][ T7594] EXT4-fs: Ignoring removed nobh option
[  335.057223][ T7594] EXT4-fs: Ignoring removed bh option
[  335.069641][ T7594] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  335.413934][ T7594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  336.101820][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.114748][ T7604] loop1: detected capacity change from 0 to 1024
[  336.126786][ T7604] EXT4-fs: Ignoring removed nobh option
[  336.132586][ T7604] EXT4-fs: Ignoring removed bh option
[  336.182801][ T7604] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  337.320696][ T5800] Bluetooth: hci1: command 0x0406 tx timeout
[  338.319365][ T7604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  338.946064][   T28] audit: type=1800 audit(1759311498.669:613): pid=7603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.443" name="file2" dev="loop1" ino=16 res=0 errno=0
[  339.050981][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.509210][ T7630] loop0: detected capacity change from 0 to 2048
[  340.551548][ T7630] NILFS (loop0): unrecognized mount option "cp=0x0000000000000003±£ø¢þápô"
[  342.725024][ T7645] Bluetooth: MGMT ver 1.22
[  347.496514][ T7661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.458'.
[  347.582908][ T7652] loop0: detected capacity change from 0 to 32768
[  347.645224][ T7663] loop3: detected capacity change from 0 to 2048
[  347.665449][ T7663] NILFS (loop3): unrecognized mount option "cp=0x0000000000000003±£ø¢þápô"
[  347.747339][ T7652] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  347.938402][ T5889] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  349.359644][ T5789] (syz-executor,5789,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  350.311395][ T5789] ocfs2: Unmounting device (7,0) on (node local)
[  352.012305][ T7688] loop0: detected capacity change from 0 to 32768
[  353.134291][ T7692] read_mapping_page failed!
[  353.139424][ T7692] ialloc: diAlloc returned -5!
[  353.284834][ T7694] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  355.399745][ T7717] loop1: detected capacity change from 0 to 1024
[  355.410685][ T7717] EXT4-fs: Ignoring removed nobh option
[  355.417080][ T7717] EXT4-fs: Ignoring removed bh option
[  357.927097][ T7717] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  359.259601][ T7717] EXT4-fs: error -4 creating inode table initialization thread
[  359.360949][ T7717] EXT4-fs (loop1): mount failed
[  362.030557][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'.
[  362.058279][ T7755] netlink: 'syz.2.480': attribute type 30 has an invalid length.
[  362.085174][ T7755] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  362.094257][ T7755] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  362.103020][ T7755] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  362.111906][ T7755] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  365.298129][ T7774] [U] 
[  365.301218][ T7774] [U] 
[  365.304127][ T7774] [U] 
[  365.306866][ T7774] [U] 
[  365.310352][ T7774] [U] 
[  365.313098][ T7774] [U] 
[  365.315818][ T7774] [U] 
[  365.318550][ T7774] [U] 


[  365.322100][ T7774] [U] 
[  365.324838][ T7774] [U] 
[  365.327569][ T7774] [U] 
[  365.757036][ T7770] [U] 
[  366.358605][ T7779] loop2: detected capacity change from 0 to 1024
[  366.369409][ T7779] EXT4-fs: Ignoring removed nobh option
[  366.375144][ T7779] EXT4-fs: Ignoring removed bh option
[  366.447400][ T7779] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  368.281914][ T5800] Bluetooth: hci1: command 0x0406 tx timeout
[  368.440871][ T7779] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  370.407487][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  371.783630][ T7805] loop0: detected capacity change from 0 to 64
[  371.819738][ T7805] hfs: unable to read volume bitmap
[  371.835293][ T7805] hfs: can't find a HFS filesystem on dev loop0
[  372.680643][ T7807] loop0: detected capacity change from 0 to 32768
[  372.736405][ T7807] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.495 (7807)
[  372.754002][ T7795] loop1: detected capacity change from 0 to 40427
[  372.793563][ T7795] F2FS-fs (loop1): build fault injection attr: rate: 25, type: 0x7ffff
[  372.828652][ T7795] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x7698c
[  372.870119][ T7807] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  372.879482][ T7795] F2FS-fs (loop1): invalid crc value
[  372.936054][ T7795] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1d6/0x920
[  372.948397][ T7807] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  372.957343][ T7807] BTRFS info (device loop0): using free space tree
[  373.002733][ T7795] F2FS-fs (loop1): Found nat_bits in checkpoint
[  373.137015][ T7795] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920
[  373.164388][ T7807] BTRFS info (device loop0): enabling ssd optimizations
[  373.190561][ T7807] BTRFS info (device loop0): auto enabling async discard
[  373.317819][ T7795] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  373.504613][ T7795] F2FS-fs (loop1): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0
[  373.691092][    C0] F2FS-fs (loop1): inject write IO error in f2fs_write_end_io of blk_update_request+0x597/0xe40
[  373.703446][    C0] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  373.779274][ T5786] F2FS-fs (loop1): do_checkpoint failed err:-5, stop checkpoint
[  373.795896][   T11] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  373.977043][ T5789] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  379.013898][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  379.065107][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  379.402373][ T7875] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  380.076248][ T7878] loop3: detected capacity change from 0 to 2048
[  380.219579][ T7878] NILFS (loop3): unrecognized mount option "cp=0x0000000000000003±£ø¢þápô"
[  382.314995][ T7895] loop0: detected capacity change from 0 to 1024
[  382.326182][ T7895] EXT4-fs: Ignoring removed nobh option
[  382.332253][ T7895] EXT4-fs: Ignoring removed bh option
[  382.593496][ T7895] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  384.125541][ T5800] Bluetooth: hci1: command 0x0406 tx timeout
[  384.500455][ T7895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  385.741845][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  386.847539][ T7917] loop3: detected capacity change from 0 to 64
[  386.873982][ T7917] hfs: unable to read volume bitmap
[  386.879328][ T7917] hfs: can't find a HFS filesystem on dev loop3
[  386.964341][ T7919] loop0: detected capacity change from 0 to 1024
[  386.980304][ T7919] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  386.996062][ T7919] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  387.004622][ T7919] EXT4-fs (loop0): orphan cleanup on readonly fs
[  387.015441][ T7919] Quota error (device loop0): v2_read_file_info: Can't read info structure
[  387.024416][ T7919] EXT4-fs warning (device loop0): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  387.039244][ T7919] EXT4-fs (loop0): Cannot turn on quotas: error -5
[  387.430226][ T7919] EXT4-fs (loop0): 1 truncate cleaned up
[  387.437328][ T7919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  387.552783][ T7922] loop1: detected capacity change from 0 to 2048
[  387.571877][ T7922] NILFS (loop1): unrecognized mount option "cp=0x0000000000000003±£ø¢þápô"
[  388.118473][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.861250][ T7933] random: crng reseeded on system resumption
[  391.701047][ T7948] loop2: detected capacity change from 0 to 1024
[  391.719911][ T7948] EXT4-fs: Ignoring removed nobh option
[  391.781913][ T7948] EXT4-fs: Ignoring removed bh option
[  391.805851][ T7948] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  391.863447][ T7948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  392.201629][ T7966] loop3: detected capacity change from 0 to 1024
[  392.237189][ T7966] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  392.847404][ T7966] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  392.855730][ T7966] EXT4-fs (loop3): orphan cleanup on readonly fs
[  392.868130][ T7966] Quota error (device loop3): v2_read_file_info: Can't read info structure
[  392.876967][ T7966] EXT4-fs warning (device loop3): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  392.892315][ T7966] EXT4-fs (loop3): Cannot turn on quotas: error -5
[  392.908655][ T7966] EXT4-fs (loop3): 1 truncate cleaned up
[  392.916380][ T7966] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  393.081134][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.259788][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.549164][ T5800] Bluetooth: hci1: command 0x0406 tx timeout
[  393.655772][ T7978] loop1: detected capacity change from 0 to 1024
[  393.666695][ T7978] EXT4-fs: Ignoring removed nobh option
[  393.672611][ T7978] EXT4-fs: Ignoring removed bh option
[  393.903684][ T7978] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  395.890143][ T7979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.531'.
[  395.954498][ T7978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  396.365429][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.984123][ T7990] loop0: detected capacity change from 0 to 64
[  397.036952][ T7990] hfs: unable to read volume bitmap
[  397.042783][ T7990] hfs: can't find a HFS filesystem on dev loop0
[  399.630971][ T8010] loop2: detected capacity change from 0 to 1024
[  400.203251][ T8010] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  400.297217][ T8015] loop3: detected capacity change from 0 to 1024
[  400.308153][ T8015] EXT4-fs: Ignoring removed nobh option
[  400.313882][ T8015] EXT4-fs: Ignoring removed bh option
[  400.362191][ T8015] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  402.055607][ T8010] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  402.064089][ T8010] EXT4-fs (loop2): orphan cleanup on readonly fs
[  402.080306][ T8010] Quota error (device loop2): v2_read_file_info: Can't read info structure
[  402.089577][ T8010] EXT4-fs warning (device loop2): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  402.104183][ T8010] EXT4-fs (loop2): Cannot turn on quotas: error -5
[  402.113838][ T8010] EXT4-fs (loop2): 1 truncate cleaned up
[  402.120518][ T8010] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  402.254203][ T8015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  402.274110][ T5800] Bluetooth: hci1: command 0x0406 tx timeout
[  402.391522][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  402.748810][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'.
[  402.778403][ T8028] netlink: 'syz.0.544': attribute type 30 has an invalid length.
[  402.835433][ T8028] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  402.844503][ T8028] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  402.849060][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  402.853359][ T8028] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  402.871011][ T8028] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  405.593718][ T8045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.548'.
[  405.731547][ T8047] tipc: Failed to remove unknown binding: 66,1,1/0:932459530/932459532
[  405.758796][ T8047] tipc: Failed to remove unknown binding: 66,1,1/0:932459530/932459532
[  406.354346][ T8053] loop3: detected capacity change from 0 to 1024
[  407.068946][ T8053] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  407.109171][ T8053] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  407.117458][ T8053] EXT4-fs (loop3): orphan cleanup on readonly fs
[  407.140302][ T8053] Quota error (device loop3): v2_read_file_info: Can't read info structure
[  407.149297][ T8053] EXT4-fs warning (device loop3): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  407.163866][ T8053] EXT4-fs (loop3): Cannot turn on quotas: error -5
[  407.187014][ T8053] EXT4-fs (loop3): 1 truncate cleaned up
[  407.193809][ T8053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  407.472266][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  409.906963][ T8073] loop1: detected capacity change from 0 to 256
[  409.982316][ T8073] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  410.360245][   T28] audit: type=1326 audit(1759311570.109:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.1.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  410.432753][   T28] audit: type=1326 audit(1759311570.109:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.1.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  410.795681][ T8083] loop2: detected capacity change from 0 to 1024
[  410.830526][ T8083] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  410.910906][ T8083] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  410.921569][ T8083] EXT4-fs (loop2): orphan cleanup on readonly fs
[  410.937408][ T8083] Quota error (device loop2): v2_read_file_info: Can't read info structure
[  410.946766][ T8083] EXT4-fs warning (device loop2): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  410.961436][ T8083] EXT4-fs (loop2): Cannot turn on quotas: error -5
[  410.991118][ T8083] EXT4-fs (loop2): 1 truncate cleaned up
[  411.003872][ T8083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  411.294097][   T28] audit: type=1326 audit(1759311570.109:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.1.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  411.316927][   T28] audit: type=1326 audit(1759311570.109:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.1.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  411.348305][   T28] audit: type=1326 audit(1759311570.109:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.1.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  411.463923][   T28] audit: type=1326 audit(1759311570.109:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.1.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  411.486343][   T28] audit: type=1326 audit(1759311570.109:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.1.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb3998eec9 code=0x7ffc0000
[  411.519978][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  414.305710][ T8116] loop3: detected capacity change from 0 to 2048
[  414.329443][ T8116] NILFS (loop3): unrecognized mount option "cp=0x0000000000000003±£ø¢þápô"
[  415.641880][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.570'.
[  415.820250][ T8130] loop0: detected capacity change from 0 to 1024
[  416.508384][ T8130] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  416.529169][ T8130] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  416.537471][ T8130] EXT4-fs (loop0): orphan cleanup on readonly fs
[  416.548230][ T8130] Quota error (device loop0): v2_read_file_info: Can't read info structure
[  416.557047][ T8130] EXT4-fs warning (device loop0): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  416.572383][ T8130] EXT4-fs (loop0): Cannot turn on quotas: error -5
[  416.580836][ T8130] EXT4-fs (loop0): 1 truncate cleaned up
[  416.587927][ T8130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  416.916559][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.753081][ T8146] ksmbd: Unknown IPC event: 6, ignore.
[  418.318726][ T8151] loop1: detected capacity change from 0 to 1024
[  418.331579][ T8151] EXT4-fs: Ignoring removed nobh option
[  418.337348][ T8151] EXT4-fs: Ignoring removed bh option
[  420.609599][ T8151] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  420.746735][ T8151] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  422.694915][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  423.500486][ T8173] loop0: detected capacity change from 0 to 64
[  423.649902][ T8173] hfs: unable to read volume bitmap
[  423.656104][ T8173] hfs: can't find a HFS filesystem on dev loop0
[  425.224347][ T8187] loop2: detected capacity change from 0 to 2048
[  425.291859][ T8187] NILFS (loop2): unrecognized mount option "cp=0x0000000000000003±£ø¢þápô"
[  425.450821][ T8189] loop1: detected capacity change from 0 to 1024
[  426.585851][ T8198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.590'.
[  428.474190][ T8214] loop1: detected capacity change from 0 to 64
[  428.492900][ T8213] loop0: detected capacity change from 0 to 512
[  428.536165][ T8213] EXT4-fs (loop0): failed to initialize system zone (-117)
[  428.571302][ T8214] hfs: unable to read volume bitmap
[  428.578200][ T8214] hfs: can't find a HFS filesystem on dev loop1
[  428.586818][ T8213] EXT4-fs (loop0): mount failed
[  429.460483][ T8222] loop3: detected capacity change from 0 to 4096
[  430.192580][ T8224] loop0: detected capacity change from 0 to 2048
[  430.227508][ T8224] NILFS (loop0): unrecognized mount option "cp=0x0000000000000003±£ø¢þápô"
[  430.323503][ T8228] loop1: detected capacity change from 0 to 512
[  430.494214][ T8228] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6).
[  430.538523][ T8228] EXT4-fs warning (device loop1): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  431.269705][ T8228] EXT4-fs (loop1): mount failed
[  432.409682][ T8246] loop3: detected capacity change from 0 to 16
[  432.416659][ T8246] erofs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ18446744073709551615'
[  432.675804][ T8254] loop2: detected capacity change from 0 to 1024
[  433.042474][    T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  433.249792][    T8] usb 4-1: config 1 has an invalid interface number: 7 but max is 0
[  433.257958][    T8] usb 4-1: config 1 has no interface number 0
[  433.270759][    T8] usb 4-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping
[  433.294361][    T8] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16
[  433.360283][    T8] usb 4-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  433.393224][    T8] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  433.412751][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.438489][    T8] usb 4-1: Product: syz
[  433.627007][    T8] usb 4-1: Manufacturer: syz
[  433.641436][    T8] usb 4-1: SerialNumber: syz
[  433.672303][ T8246] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  433.695030][ T8246] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  434.043225][    T8] usb 4-1: Expected 3 endpoints, found: 1
[  436.187171][ T8263] ªªªªªª: renamed from wg2 (while UP)
[  436.361242][ T8266] loop0: detected capacity change from 0 to 64
[  436.855826][ T8271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.610'.
[  437.029470][    T8] usb 4-1: USB disconnect, device number 2
[  437.375747][ T8275] loop3: detected capacity change from 0 to 2048
[  437.423088][ T8275] NILFS (loop3): unrecognized mount option "cp=0x0000000000000003±£ø¢þápô"
[  440.547192][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  440.553643][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  440.657703][ T8291] [U] 
[  440.660487][ T8291] [U] 
[  440.663218][ T8291] [U] 
[  440.665949][ T8291] [U] 
[  440.669712][ T8291] [U] 
[  440.672468][ T8291] [U] 
[  440.675194][ T8291] [U] 
[  440.677937][ T8291] [U] 


[  440.681532][ T8291] [U] 
[  440.684266][ T8291] [U] 
[  440.686991][ T8291] [U] 
[  441.225419][ T8288] [U] 
[  442.091636][ T8307] loop2: detected capacity change from 0 to 128
[  442.107051][ T8308] loop0: detected capacity change from 0 to 256
[  442.115723][ T8308] exfat: Deprecated parameter 'utf8'
[  442.134633][ T8310] loop1: detected capacity change from 0 to 16
[  442.137187][ T8307] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  442.144078][ T8310] erofs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ18446744073709551615'
[  442.190045][ T8307] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  442.217995][ T8308] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  442.538225][ T5860] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  442.730208][ T5860] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[  442.744337][ T5860] usb 2-1: config 1 has no interface number 0
[  442.755623][ T5860] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping
[  442.779291][ T5860] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16
[  442.799057][ T5860] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  442.818210][ T5860] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  442.834066][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.846390][ T5860] usb 2-1: Product: syz
[  442.853609][ T5860] usb 2-1: Manufacturer: syz
[  442.861669][ T5860] usb 2-1: SerialNumber: syz
[  442.885131][ T8310] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  442.902195][ T8310] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  442.925239][ T5860] usb 2-1: Expected 3 endpoints, found: 1
[  442.993889][ T5793] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  444.233460][ T8326] ªªªªªª: renamed from wg2 (while UP)
[  444.470057][ T8330] netlink: 164 bytes leftover after parsing attributes in process `syz.0.626'.
[  444.632752][ T8332] [U] 
[  444.635540][ T8332] [U] 
[  444.638271][ T8332] [U] 
[  444.640995][ T8332] [U] 
[  444.644719][ T8332] [U] 
[  444.647463][ T8332] [U] 
[  444.650188][ T8332] [U] 
[  444.652939][ T8332] [U] 


[  444.656684][ T8332] [U] 
[  444.659809][ T8332] [U] 
[  444.662626][ T8332] [U] 
[  445.131885][ T8327] [U] 
[  445.267788][    T8] usb 2-1: USB disconnect, device number 7
[  445.367398][ T8322] loop2: detected capacity change from 0 to 32768
[  445.392022][ T8322] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.623 (8322)
[  445.510254][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.627'.
[  445.613361][ T8322] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  445.675014][ T8322] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  445.685480][ T8322] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  445.697399][ T8322] BTRFS info (device loop2): use zstd compression, level 3
[  445.704939][ T8322] BTRFS info (device loop2): using free space tree
[  445.938135][ T8322] BTRFS info (device loop2): enabling ssd optimizations
[  445.958197][ T8322] BTRFS info (device loop2): auto enabling async discard
[  447.006500][ T5793] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  447.198771][ T5877] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  448.338315][ T5877] usb 2-1: Using ep0 maxpacket: 32
[  448.347110][ T5877] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  448.413866][ T5877] usb 2-1: config 0 has no interface number 0
[  448.423938][ T8379] ªªªªªª: renamed from wg2 (while UP)
[  448.439722][ T5877] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  448.465960][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.556490][ T5877] usb 2-1: Product: syz
[  448.566753][ T5877] usb 2-1: Manufacturer: syz
[  448.588415][ T5877] usb 2-1: SerialNumber: syz
[  448.614517][ T5877] usb 2-1: config 0 descriptor??
[  448.636295][ T5877] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  448.678117][ T5877] usb 2-1: selecting invalid altsetting 1
[  448.683977][ T5877] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  448.747695][ T5877] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  448.774204][ T5877] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  448.807145][ T5877] usb 2-1: media controller created
[  448.937725][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  449.297512][ T8377] loop3: detected capacity change from 0 to 32768
[  449.344856][ T8377] 
[  449.344856][ T8377]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  449.344856][ T8377] 
[  449.950421][ T8368] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  449.961104][ T8382] 
[  449.961104][ T8382]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  449.961104][ T8382] 
[  449.997204][ T8382] 
[  449.997204][ T8382]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  449.997204][ T8382] 
[  450.018726][ T8382] 
[  450.018726][ T8382]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  450.018726][ T8382] 
[  450.032976][ T8382] 
[  450.032976][ T8382]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  450.032976][ T8382] 
[  450.047787][ T8382] 
[  450.047787][ T8382]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  450.047787][ T8382] 
[  450.059477][ T8382] 
[  450.059477][ T8382]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  450.059477][ T8382] 
[  450.225253][  T112] 
[  450.225253][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  450.225253][  T112] 
[  450.268321][ T5877] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  450.275857][ T5877] zl10353_read_register: readreg error (reg=127, ret==-71)
[  450.375106][ T5877] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  450.408185][ T5785] 
[  450.408185][ T5785]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  450.408185][ T5785] 
[  450.454029][ T5785] 
[  450.454029][ T5785]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  450.454029][ T5785] 
[  453.276898][ T5877] usb 2-1: USB disconnect, device number 8
[  456.594201][ T8420] netlink: 'syz.2.645': attribute type 10 has an invalid length.
[  456.745862][ T8420] can0: slcan on ttyS3.
[  463.431737][ T8432] loop0: detected capacity change from 0 to 128
[  463.534322][ T8432] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  463.560522][ T8411] can0 (unregistered): slcan off ttyS3.
[  463.693957][ T8432] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  463.767070][ T8432] fscrypt (loop0, inode 12): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS
[  463.971605][ T5789] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  467.691158][ T8464] loop0: detected capacity change from 0 to 32768
[  467.703987][ T8464] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.659 (8464)
[  467.800011][ T8464] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  467.838547][ T8464] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  467.858110][ T8464] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  467.898118][ T8464] BTRFS info (device loop0): use zstd compression, level 3
[  467.905410][ T8464] BTRFS info (device loop0): using free space tree
[  468.150301][ T8464] BTRFS info (device loop0): enabling ssd optimizations
[  468.163858][ T8464] BTRFS info (device loop0): auto enabling async discard
[  469.347054][ T8499] [U] 
[  469.349923][ T8499] [U] 
[  469.352660][ T8499] [U] 
[  469.355393][ T8499] [U] 
[  469.359041][ T8499] [U] 
[  469.361791][ T8499] [U] 
[  469.364516][ T8499] [U] 
[  469.367242][ T8499] [U] 


[  469.370727][ T8499] [U] 
[  469.373469][ T8499] [U] 
[  469.376197][ T8499] [U] 
[  469.726271][ T8493] [U] 
[  469.867245][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.665'.
[  469.890780][ T8501] netlink: 'syz.3.665': attribute type 30 has an invalid length.
[  469.926135][ T8501] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  469.935366][ T8501] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  469.944330][ T8501] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  469.953493][ T8501] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  470.122324][ T5789] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  472.593715][ T8527] loop1: detected capacity change from 0 to 64
[  472.659293][ T8527] hfs: unable to read volume bitmap
[  472.708294][ T8527] hfs: can't find a HFS filesystem on dev loop1
[  474.556576][ T8535] loop1: detected capacity change from 0 to 32768
[  474.588187][ T8535] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.675 (8535)
[  474.693678][ T8542] [U] 
[  474.696459][ T8542] [U] 
[  474.699193][ T8542] [U] 
[  474.701919][ T8542] [U] 
[  474.705428][ T8542] [U] 
[  474.708159][ T8542] [U] 
[  474.710878][ T8542] [U] 
[  474.713648][ T8542] [U] 


[  474.717626][ T8542] [U] 
[  474.720368][ T8542] [U] 
[  474.723101][ T8542] [U] 
[  475.022264][ T8535] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  475.178436][ T8537] [U] 
[  475.199238][ T8535] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  475.256199][ T8535] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  475.265977][ T8535] BTRFS info (device loop1): use zstd compression, level 3
[  475.273293][ T8535] BTRFS info (device loop1): using free space tree
[  475.638694][ T8535] BTRFS info (device loop1): enabling ssd optimizations
[  475.659785][ T8535] BTRFS info (device loop1): auto enabling async discard
[  477.753300][ T5786] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  479.531221][ T8592] loop0: detected capacity change from 0 to 24
[  479.547348][ T8592] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  479.918108][ T8594] [U] 
[  479.920896][ T8594] [U] 
[  479.923658][ T8594] [U] 
[  479.926398][ T8594] [U] 
[  479.934502][ T8594] [U] 
[  479.937276][ T8594] [U] 
[  479.940445][ T8594] [U] 
[  479.943199][ T8594] [U] 


[  479.948241][ T8594] [U] 
[  479.951091][ T8594] [U] 
[  479.953830][ T8594] [U] 
[  480.011353][ T8592] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  480.118410][ T8589] [U] 
[  481.330116][ T8610] loop0: detected capacity change from 0 to 2048
[  481.374432][ T8610] NILFS (loop0): unrecognized mount option "cp=0x0000000000000003±£ø¢þápô"
[  481.776209][ T8605] loop1: detected capacity change from 0 to 32768
[  481.794223][ T8605] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.691 (8605)
[  481.830523][ T8605] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  481.847605][ T8605] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  481.857958][ T8605] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  481.872291][ T8605] BTRFS info (device loop1): use zstd compression, level 3
[  481.884476][ T8605] BTRFS info (device loop1): using free space tree
[  482.078225][ T8605] BTRFS info (device loop1): enabling ssd optimizations
[  482.103096][ T8605] BTRFS info (device loop1): auto enabling async discard
[  483.381071][ T8636] loop2: detected capacity change from 0 to 4096
[  483.420585][ T5786] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  483.701781][ T8641] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  487.646017][ T8661] loop1: detected capacity change from 0 to 32768
[  487.840104][ T5889] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  487.936595][ T8665] netlink: 32 bytes leftover after parsing attributes in process `syz.1.703'.
[  490.265318][ T8683] kAFS: Can only specify source 'none' with -o dyn
[  492.677464][ T8709] loop3: detected capacity change from 0 to 1024
[  492.709818][ T8709] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  493.317599][ T8709] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  493.326090][ T8709] EXT4-fs (loop3): orphan cleanup on readonly fs
[  493.339834][ T8709] Quota error (device loop3): v2_read_file_info: Can't read info structure
[  493.349472][ T8709] EXT4-fs warning (device loop3): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  493.364704][ T8709] EXT4-fs (loop3): Cannot turn on quotas: error -5
[  493.380715][ T8709] EXT4-fs (loop3): 1 truncate cleaned up
[  493.387784][ T8709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  493.800052][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  493.987717][ T8717] loop0: detected capacity change from 0 to 128
[  494.078402][ T8717] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  494.099531][ T8717] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  494.282912][ T5789] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  494.706436][ T8732] netlink: 'syz.0.721': attribute type 10 has an invalid length.
[  495.379101][ T8733] slcan: can't register candev
[  495.584906][ T8733] Falling back ldisc for ttyS3.
[  497.333240][ T8748] loop2: detected capacity change from 0 to 1024
[  497.702025][ T8748] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  497.967398][ T8748] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  497.975848][ T8748] EXT4-fs (loop2): orphan cleanup on readonly fs
[  497.983078][ T8748] Quota error (device loop2): v2_read_file_info: Can't read info structure
[  497.992139][ T8748] EXT4-fs warning (device loop2): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  498.006626][ T8748] EXT4-fs (loop2): Cannot turn on quotas: error -5
[  498.014885][ T8748] EXT4-fs (loop2): 1 truncate cleaned up
[  498.021527][ T8748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  498.333594][ T5793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  498.384059][ T8735] loop3: detected capacity change from 0 to 32768
[  498.414576][ T8735] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.722 (8735)
[  499.999379][ T8769] netlink: 12 bytes leftover after parsing attributes in process `syz.2.733'.
[  501.957140][ T8785] loop3: detected capacity change from 0 to 1024
[  502.053714][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  502.061332][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  502.101825][ T8785] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  502.115071][ T8785] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  502.124467][ T8785] EXT4-fs (loop3): orphan cleanup on readonly fs
[  502.131952][ T8785] Quota error (device loop3): v2_read_file_info: Can't read info structure
[  502.140877][ T8785] EXT4-fs warning (device loop3): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  502.156145][ T8785] EXT4-fs (loop3): Cannot turn on quotas: error -5
[  502.176591][ T8785] EXT4-fs (loop3): 1 truncate cleaned up
[  502.183776][ T8785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  502.504305][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  505.168518][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.743'.
[  505.188747][ T8811] netlink: 'syz.1.743': attribute type 30 has an invalid length.
[  505.226535][ T8811] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  505.235687][ T8811] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  505.244530][ T8811] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  505.253304][ T8811] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  507.222949][ T8826] loop0: detected capacity change from 0 to 1024
[  507.868855][ T8826] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  507.887041][ T8826] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  507.895395][ T8826] EXT4-fs (loop0): orphan cleanup on readonly fs
[  507.905938][ T8826] Quota error (device loop0): v2_read_file_info: Can't read info structure
[  507.915172][ T8826] EXT4-fs warning (device loop0): ext4_enable_quotas:7175: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  507.929994][ T8826] EXT4-fs (loop0): Cannot turn on quotas: error -5
[  507.960175][ T8826] EXT4-fs (loop0): 1 truncate cleaned up
[  507.967294][ T8826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  508.324688][ T5789] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  508.659829][ T8833] can0: slcan on ttyS3.
[  508.782159][ T8832] can0 (unregistered): slcan off ttyS3.
[  509.821646][ T8829] loop2: detected capacity change from 0 to 32768
[  509.843664][ T8829] 
[  509.843664][ T8829]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  509.843664][ T8829] 
[  510.043456][ T8829] read_mapping_page failed!
[  510.049827][ T8829] ERROR: (device loop2): txCommit: 
[  510.049827][ T8829] 
[  510.067404][ T8845] read_mapping_page failed!
[  510.073373][ T8845] ERROR: (device loop2): txCommit: 
[  510.073373][ T8845] 
[  510.102710][ T8829] ==================================================================
[  510.110843][ T8829] BUG: KASAN: slab-out-of-bounds in dtInsertEntry+0xe8b/0x13e0
[  510.118442][ T8829] Read of size 4 at addr ffff8880540e52cc by task syz.2.748/8829
[  510.126196][ T8829] 
[  510.128610][ T8829] CPU: 0 PID: 8829 Comm: syz.2.748 Not tainted syzkaller #0
[  510.135934][ T8829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  510.146049][ T8829] Call Trace:
[  510.149361][ T8829]  <TASK>
[  510.152333][ T8829]  dump_stack_lvl+0x16c/0x230
[  510.157055][ T8829]  ? read_lock_is_recursive+0x20/0x20
[  510.162474][ T8829]  ? show_regs_print_info+0x20/0x20
[  510.167828][ T8829]  ? load_image+0x3b0/0x3b0
[  510.172381][ T8829]  ? _raw_spin_lock_irqsave+0xb4/0xf0
[  510.177797][ T8829]  ? __virt_addr_valid+0x18c/0x540
[  510.182952][ T8829]  ? __virt_addr_valid+0x469/0x540
[  510.188118][ T8829]  print_report+0xac/0x220
[  510.192577][ T8829]  ? dtInsertEntry+0xe8b/0x13e0
[  510.197468][ T8829]  kasan_report+0x117/0x150
[  510.202067][ T8829]  ? dtInsertEntry+0xe8b/0x13e0
[  510.206970][ T8829]  dtInsertEntry+0xe8b/0x13e0
[  510.211705][ T8829]  ? release_metapage+0x703/0x870
[  510.216768][ T8829]  dtSplitPage+0x2a66/0x3b10
[  510.221438][ T8829]  dtInsert+0x108f/0x5f40
[  510.225823][ T8829]  ? txLock+0x2b1/0x2090
[  510.230103][ T8829]  ? __lock_acquire+0x7c80/0x7c80
[  510.235173][ T8829]  ? UniStrupr+0x2e0/0x2e0
[  510.239631][ T8829]  ? txLock+0x1125/0x2090
[  510.244003][ T8829]  ? txEnd+0x520/0x520
[  510.248125][ T8829]  jfs_create+0x6a1/0xa40
[  510.252535][ T8829]  ? jfs_lookup+0x380/0x380
[  510.257076][ T8829]  ? jfs_get_parent+0xb0/0xb0
[  510.261847][ T8829]  ? make_vfsuid+0x51/0xb0
[  510.266314][ T8829]  ? inode_permission+0xf3/0x480
[  510.271349][ T8829]  ? bpf_lsm_inode_create+0x9/0x10
[  510.276514][ T8829]  ? security_inode_create+0xb7/0x100
[  510.281947][ T8829]  ? jfs_lookup+0x380/0x380
[  510.286482][ T8829]  path_openat+0x1277/0x3190
[  510.291215][ T8829]  ? do_filp_open+0x3d0/0x3d0
[  510.295935][ T8829]  do_filp_open+0x1c5/0x3d0
[  510.300457][ T8829]  ? vfs_tmpfile+0x490/0x490
[  510.305344][ T8829]  ? _raw_spin_unlock+0x28/0x40
[  510.310209][ T8829]  ? alloc_fd+0x58f/0x630
[  510.314576][ T8829]  do_sys_openat2+0x12c/0x1c0
[  510.319266][ T8829]  ? do_sys_open+0xe0/0xe0
[  510.323706][ T8829]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  510.329697][ T8829]  ? lock_chain_count+0x20/0x20
[  510.334558][ T8829]  __x64_sys_openat+0x139/0x160
[  510.339429][ T8829]  do_syscall_64+0x55/0xb0
[  510.343874][ T8829]  ? clear_bhb_loop+0x40/0x90
[  510.348582][ T8829]  ? clear_bhb_loop+0x40/0x90
[  510.353287][ T8829]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  510.359209][ T8829] RIP: 0033:0x7f2ec638eec9
[  510.363661][ T8829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  510.383292][ T8829] RSP: 002b:00007f2ec7291038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  510.391812][ T8829] RAX: ffffffffffffffda RBX: 00007f2ec65e5fa0 RCX: 00007f2ec638eec9
[  510.399792][ T8829] RDX: 000000000004ac41 RSI: 0000200000000580 RDI: ffffffffffffff9c
[  510.407780][ T8829] RBP: 00007f2ec6411f91 R08: 0000000000000000 R09: 0000000000000000
[  510.415767][ T8829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  510.423773][ T8829] R13: 00007f2ec65e6038 R14: 00007f2ec65e5fa0 R15: 00007ffd4dabdea8
[  510.431781][ T8829]  </TASK>
[  510.434842][ T8829] 
[  510.437175][ T8829] Allocated by task 8829:
[  510.441510][ T8829]  kasan_set_track+0x4e/0x70
[  510.446120][ T8829]  __kasan_slab_alloc+0x6c/0x80
[  510.451014][ T8829]  slab_post_alloc_hook+0x6e/0x4d0
[  510.456140][ T8829]  kmem_cache_alloc_lru+0x115/0x2e0
[  510.461350][ T8829]  jfs_alloc_inode+0x28/0x60
[  510.465948][ T8829]  iget_locked+0x1ad/0x840
[  510.470371][ T8829]  jfs_iget+0x24/0x3c0
[  510.474446][ T8829]  jfs_lookup+0x1c6/0x380
[  510.478781][ T8829]  __lookup_slow+0x281/0x3b0
[  510.483383][ T8829]  lookup_slow+0x53/0x70
[  510.487636][ T8829]  walk_component+0x2be/0x3f0
[  510.492338][ T8829]  path_lookupat+0x169/0x440
[  510.496933][ T8829]  filename_lookup+0x1f4/0x510
[  510.501724][ T8829]  user_path_at_empty+0x42/0x60
[  510.506583][ T8829]  __se_sys_chdir+0x95/0x290
[  510.511173][ T8829]  do_syscall_64+0x55/0xb0
[  510.515594][ T8829]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  510.521526][ T8829] 
[  510.523848][ T8829] The buggy address belongs to the object at ffff8880540e4a00
[  510.523848][ T8829]  which belongs to the cache jfs_ip of size 2240
[  510.537581][ T8829] The buggy address is located 12 bytes to the right of
[  510.537581][ T8829]  allocated 2240-byte region [ffff8880540e4a00, ffff8880540e52c0)
[  510.552269][ T8829] 
[  510.554599][ T8829] The buggy address belongs to the physical page:
[  510.561022][ T8829] page:ffffea0001503800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880540e1bc0 pfn:0x540e0
[  510.572667][ T8829] head:ffffea0001503800 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  510.581606][ T8829] memcg:ffff88807c74ca01
[  510.585843][ T8829] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  510.593835][ T8829] page_type: 0xffffffff()
[  510.598173][ T8829] raw: 00fff00000000840 ffff8880187c38c0 dead000000000122 0000000000000000
[  510.606859][ T8829] raw: ffff8880540e1bc0 00000000800d0009 00000001ffffffff ffff88807c74ca01
[  510.615551][ T8829] page dumped because: kasan: bad access detected
[  510.622008][ T8829] page_owner tracks the page as allocated
[  510.627748][ T8829] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d2050(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 7688, tgid 7687 (syz.0.461), ts 352021245583, free_ts 186776054595
[  510.651387][ T8829]  post_alloc_hook+0x1cd/0x210
[  510.656344][ T8829]  get_page_from_freelist+0x195c/0x19f0
[  510.661905][ T8829]  __alloc_pages+0x1e3/0x460
[  510.666505][ T8829]  alloc_slab_page+0x5d/0x170
[  510.671192][ T8829]  new_slab+0x87/0x2e0
[  510.675294][ T8829]  ___slab_alloc+0xc6d/0x1300
[  510.679986][ T8829]  kmem_cache_alloc_lru+0x1ae/0x2e0
[  510.685192][ T8829]  jfs_alloc_inode+0x28/0x60
[  510.689787][ T8829]  new_inode_pseudo+0x63/0x1d0
[  510.694558][ T8829]  new_inode+0x22/0x1b0
[  510.698714][ T8829]  jfs_fill_super+0x396/0xac0
[  510.703399][ T8829]  mount_bdev+0x22b/0x2d0
[  510.707816][ T8829]  legacy_get_tree+0xea/0x180
[  510.712498][ T8829]  vfs_get_tree+0x8c/0x280
[  510.716914][ T8829]  do_new_mount+0x24b/0xa40
[  510.721428][ T8829]  __se_sys_mount+0x2da/0x3c0
[  510.726106][ T8829] page last free stack trace:
[  510.730777][ T8829]  free_unref_page_prepare+0x7ce/0x8e0
[  510.736264][ T8829]  free_unref_page+0x32/0x2e0
[  510.740970][ T8829]  __unfreeze_partials+0x1cf/0x210
[  510.746120][ T8829]  put_cpu_partial+0x17c/0x250
[  510.750902][ T8829]  __slab_free+0x31d/0x410
[  510.755599][ T8829]  qlist_free_all+0x75/0xe0
[  510.760127][ T8829]  kasan_quarantine_reduce+0x143/0x160
[  510.765595][ T8829]  __kasan_slab_alloc+0x22/0x80
[  510.770453][ T8829]  slab_post_alloc_hook+0x6e/0x4d0
[  510.775597][ T8829]  __kmem_cache_alloc_node+0x13e/0x260
[  510.781088][ T8829]  __kmalloc+0xa4/0x240
[  510.785257][ T8829]  tomoyo_realpath_from_path+0xe3/0x5d0
[  510.790814][ T8829]  tomoyo_path_perm+0x20f/0x4b0
[  510.795690][ T8829]  security_inode_getattr+0xd3/0x120
[  510.800987][ T8829]  __x64_sys_newfstat+0x101/0x1f0
[  510.806015][ T8829]  do_syscall_64+0x55/0xb0
[  510.810448][ T8829] 
[  510.812774][ T8829] Memory state around the buggy address:
[  510.818404][ T8829]  ffff8880540e5180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  510.826464][ T8829]  ffff8880540e5200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  510.834530][ T8829] >ffff8880540e5280: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  510.842591][ T8829]                                               ^
[  510.849002][ T8829]  ffff8880540e5300: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00
[  510.857064][ T8829]  ffff8880540e5380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  510.865150][ T8829] ==================================================================
[  510.918246][ T8829] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  510.925488][ T8829] CPU: 1 PID: 8829 Comm: syz.2.748 Not tainted syzkaller #0
[  510.932795][ T8829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  510.942862][ T8829] Call Trace:
[  510.946186][ T8829]  <TASK>
[  510.949128][ T8829]  dump_stack_lvl+0x16c/0x230
[  510.953834][ T8829]  ? show_regs_print_info+0x20/0x20
[  510.959104][ T8829]  ? load_image+0x3b0/0x3b0
[  510.963641][ T8829]  panic+0x2c0/0x710
[  510.967578][ T8829]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  510.973772][ T8829]  ? bpf_jit_dump+0xd0/0xd0
[  510.978304][ T8829]  ? _raw_spin_unlock_irqrestore+0xfa/0x110
[  510.984222][ T8829]  ? _raw_spin_unlock+0x40/0x40
[  510.989201][ T8829]  ? dtInsertEntry+0xe8b/0x13e0
[  510.994165][ T8829]  check_panic_on_warn+0x84/0xa0
[  510.999121][ T8829]  ? dtInsertEntry+0xe8b/0x13e0
[  511.003992][ T8829]  end_report+0x6f/0x140
[  511.008333][ T8829]  kasan_report+0x128/0x150
[  511.012876][ T8829]  ? dtInsertEntry+0xe8b/0x13e0
[  511.017773][ T8829]  dtInsertEntry+0xe8b/0x13e0
[  511.022474][ T8829]  ? release_metapage+0x703/0x870
[  511.027505][ T8829]  dtSplitPage+0x2a66/0x3b10
[  511.032156][ T8829]  dtInsert+0x108f/0x5f40
[  511.036538][ T8829]  ? txLock+0x2b1/0x2090
[  511.040825][ T8829]  ? __lock_acquire+0x7c80/0x7c80
[  511.045872][ T8829]  ? UniStrupr+0x2e0/0x2e0
[  511.050307][ T8829]  ? txLock+0x1125/0x2090
[  511.054653][ T8829]  ? txEnd+0x520/0x520
[  511.058738][ T8829]  jfs_create+0x6a1/0xa40
[  511.063092][ T8829]  ? jfs_lookup+0x380/0x380
[  511.067616][ T8829]  ? jfs_get_parent+0xb0/0xb0
[  511.072319][ T8829]  ? make_vfsuid+0x51/0xb0
[  511.076758][ T8829]  ? inode_permission+0xf3/0x480
[  511.081714][ T8829]  ? bpf_lsm_inode_create+0x9/0x10
[  511.086832][ T8829]  ? security_inode_create+0xb7/0x100
[  511.092219][ T8829]  ? jfs_lookup+0x380/0x380
[  511.096739][ T8829]  path_openat+0x1277/0x3190
[  511.101365][ T8829]  ? do_filp_open+0x3d0/0x3d0
[  511.106067][ T8829]  do_filp_open+0x1c5/0x3d0
[  511.110590][ T8829]  ? vfs_tmpfile+0x490/0x490
[  511.115296][ T8829]  ? _raw_spin_unlock+0x28/0x40
[  511.120161][ T8829]  ? alloc_fd+0x58f/0x630
[  511.124511][ T8829]  do_sys_openat2+0x12c/0x1c0
[  511.129209][ T8829]  ? do_sys_open+0xe0/0xe0
[  511.133642][ T8829]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  511.139635][ T8829]  ? lock_chain_count+0x20/0x20
[  511.144496][ T8829]  __x64_sys_openat+0x139/0x160
[  511.149361][ T8829]  do_syscall_64+0x55/0xb0
[  511.153821][ T8829]  ? clear_bhb_loop+0x40/0x90
[  511.158507][ T8829]  ? clear_bhb_loop+0x40/0x90
[  511.163207][ T8829]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  511.169229][ T8829] RIP: 0033:0x7f2ec638eec9
[  511.173661][ T8829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  511.193287][ T8829] RSP: 002b:00007f2ec7291038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  511.201714][ T8829] RAX: ffffffffffffffda RBX: 00007f2ec65e5fa0 RCX: 00007f2ec638eec9
[  511.209785][ T8829] RDX: 000000000004ac41 RSI: 0000200000000580 RDI: ffffffffffffff9c
[  511.217769][ T8829] RBP: 00007f2ec6411f91 R08: 0000000000000000 R09: 0000000000000000
[  511.225772][ T8829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  511.233788][ T8829] R13: 00007f2ec65e6038 R14: 00007f2ec65e5fa0 R15: 00007ffd4dabdea8
[  511.241784][ T8829]  </TASK>
[  511.244958][ T8829] Kernel Offset: disabled
[  511.249307][ T8829] Rebooting in 86400 seconds..