last executing test programs:

4m23.949825809s ago: executing program 0 (id=379):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "fc6f"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

4m23.861560984s ago: executing program 0 (id=380):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804380100000000000109022400010000000009040002010300000009210000000122f80409058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

4m22.252775152s ago: executing program 0 (id=395):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x36, 0x301, 0x1, 0x25dfdbfc, {0xb}}, 0x14}}, 0x0)

4m22.173898292s ago: executing program 0 (id=396):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000)={[{@grpquota}, {@bh}]}, 0xfe, 0x55b, &(0x7f0000000980)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x17e)
getdents64(r0, &(0x7f0000000200)=""/179, 0xb3)

4m22.059392872s ago: executing program 0 (id=397):
munmap(&(0x7f0000001000/0x1000)=nil, 0x1000)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000f80)={0x16, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e24, 0xaf0931d, @remote, 0x3}}}, 0x90)

4m21.203916544s ago: executing program 0 (id=408):
futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000000340), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000280)=0x1, 0x0)

4m21.01962015s ago: executing program 32 (id=408):
futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000000340), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000280)=0x1, 0x0)

3m28.573058043s ago: executing program 2 (id=897):
socket$phonet_pipe(0x23, 0x5, 0x2)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8947, &(0x7f00000002c0)={'bond0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write(r3, &(0x7f0000000000)='\"', 0x1)
bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r4, &(0x7f0000000000), 0xd)

3m27.210760368s ago: executing program 2 (id=901):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[], 0x160}}], 0x2, 0x20004840)

3m27.023926721s ago: executing program 2 (id=902):
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r0, &(0x7f00000082c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1, {0x7, 0x29, 0x5, 0xffffffffd9034008, 0x0, 0x0, 0x1, 0xfff, 0x0, 0x0, 0x4, 0x800}}, 0x50)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0xfffff6ea, 0x0, 0x0, 0x3})
openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)={0x62f41, 0x109}, 0x18)

3m26.090708786s ago: executing program 2 (id=907):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='devtmpfs\x00', 0x10, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

3m25.970390554s ago: executing program 2 (id=910):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r0, &(0x7f0000000040)=@target={'target ', {'PCI:', '0', ':', '7', ':', '2', '.', '0'}}, 0x13)

3m25.884061604s ago: executing program 2 (id=912):
r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
shmctl$IPC_RMID(r0, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)

3m25.768284584s ago: executing program 33 (id=912):
r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil)
shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
shmctl$IPC_RMID(r0, 0x0)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0)

2m49.80898664s ago: executing program 4 (id=1260):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x7c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x2, 0x6, 0x77dd, 0x1, 0x7, 0x9}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x79, 0x5, 0x8, 0x0, 0x41, 0xf}}, {0x4}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008094}, 0x8840)

2m49.791048513s ago: executing program 4 (id=1262):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000080)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98)
quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, 0x0, 0x0)

2m49.483977206s ago: executing program 4 (id=1263):
r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x5d7000000000000, 0x82442)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x53, 0xffffffffffffffff, 0x102, 0x3, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000400)="b9e41ba4eaccbabfdc0faa5b6257b5f7cd872582a03639736544c168886bf5b128725241e7d142742c31fd78eca84a2876156fad756000fd977b839b40d1916c4afab2f62d7c4de01928131c8cf0297c5fed48843c19c38643ee948f8cbe6f7039eaed7dd62f0c3d7cf8f50b2f6e3e6fe71e9a4f1e96b16cafe6161447ee0f76d174479e16739ee35c1b966a4a347a12aca919ec85d8d6f070bba48044b1dee5d27dea8543e7660d3142431b7b87753ec0898914274a0abe839838a9b7bdeec0670b1653c552bb66ca2dbe9b30cb879519a093e25e6d18f7901ffef04ea6a1eeb6aec34c1bd9ff3dd87afd407328ea81eab9a29a73ba7437388f52951fc6a84374db", 0x0, 0x80000001, 0x18023, 0x0, 0x0})

2m49.433447639s ago: executing program 4 (id=1264):
syz_mount_image$jfs(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x101c002, &(0x7f0000000a00)=ANY=[@ANYBLOB='discard,discard=0x0000000000020001,discard,iocharset=cp857,errors=remount-ro,iocharset=iso8859-2,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c6572726f72733d72656d6f756e742d726f2c696f636861727365743d69736f383835392d342c00fb8602bc827d678ff4d12dba8652b9d39b4b4ff5657dd6ec1c923fb62ce2b91d41de0069a0e4d9cc00c46db0687686104197b53eeedda4d051ba690ba658ce6beb"], 0x23, 0x61c3, &(0x7f000000c9c0)="$eJzs3c1vHGcdB/Df7JtfQtOoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyBSggTqAXXQ2M/jjKe7XjuJd3Yzn4/kzPz2mfE+k+/uzq5nZp8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKHP/jxuSIirvwq3XAi4nPRj+hFrFT1WkSsrJ2or/NCbDfH8xExXIqo1t/+59mI1yPi4+MR9x/cWa9uPn/Afnz/z//4w0+O/ejvfxqe+e9fbvXfmLTc7du//c9f7z769gIAAEAXlWVZFulj/smIGKTP9gDA0y/v/8sk366eu3pzzvqjVqvV6gWs68rx7taLiNisr1O9Z3A4HgAWzGZ80nYXaJH8O20QEcfa7gQw14q2O8CRuP/gznqR8i3q+4O1nfZ8Lsie/DeL3es7Jk2naZ5jMqvH11b047kJ/VmZUR/mSc6/18z/yk77KC131PnPyqT8RzuXPnVOzr/fzL/h6cm/Nzb/rsr5Dw6Vf1/+AAAAAAAwx/Lf/0+0fPx36fE35UD2O/67NqM+AAAAAAAAAMCTdtjx/waN8f92Gf8PAAAA5lb1Wb3yu+MPb5v0XWzV7ZeLiGcaywMdky6WWW27HwAAAAAAAAAAAADQJYOdc3gvFxHDiHhmdbUsy+qnrlkf1uOuv+i6vv3QZW2/yAMAwI6Pjzeu5S8iliPicvquv+Hq6mpZLq+slqvlylJ+PztaWi5Xap9r87S6bWl0gDfEg1FZ/bLl2np10z4vT2tv/r7qvkZl/wAdm40WAweAiNjZG92ftEf6n/3VYirLZ6PlNzksiH2e/ywoz38Oou3HKQAAAHD0yrIsi/R13ifTMf9e250CAGYi7/+bxwXUarVarVY/fXVdOd7dehERm/V1qvcMhuMHgAWzGZ+03QVaJP9OG0TEC213AphrRdsd4Ejcf3BnvUj5FvX9QRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJY76vxnZVL+1XaeaKE/bcv595v5Nzw9+ffG5t9VOf/BofLvyx8AAAAAAOZY/vv/ibk6/jt61M2Zar/jv2tj1zi6vgAAAAAAAADAk3L/wZ31fN1rPv7/hTHLuf7z6ZTzL+TfSTn/XiP/rzaW69fm7739MP9/P7iz/sdb//p8nh40/6U8U6RHVpEeEUW6p2KQpo+zdZ+1NeyPqnsaFr3+IJ3zUw7fjWtxPTbi7J5le+n/42H7uT3tVU+H2+1lf6f9/J72wW57Xv/CnvZhOruoXMntp2M9fh7X453t9qptacr2L09pL6e05/z7nv+dlPMf1H6q/FdTe9GYVu591PvM874+HXc/b1374m/OHv3mTLUV/d1tq6u276UW+rP9f3JsFL+8uXHj9O2rt27dOBdpsufW85EmT1jOf5h+dl//X95pz6/79efrvY9Gh86/Nf295VYMJub/cm2+2t5XZtG/luX8R+kn5/9Oah///F+g/Bv2e/6/2kJ/AAAAAAAAAAAAAAAAYD9lWW5fIvpWRFxM1/+0dW0mADBbef9fJvn2WdX9Gd+fWr3gdTFn/Zlp/Wk5X/1RqxexrivHe7NeRMTf6utU7xl+Pe6XAQDz7NOI+GfbnaA18u+w/H1/1fRU250BZurmBx/+9Or16xs3brbdEwAAAAAAAADgUeXxP9dq4z+fKsvybmO5PeO/vh1rjzv+5yDP7A4wOmGg6v7ht2k/W71Rv1cbbvzFmDT+93B3br/xvwdT7m84pX00pX1pSvvylPaxF3rU5PxfrI13fioiTjaGX+/C+K/NMe+7IOf/Uu3xXOX/lcZy9fzL3y9y/r09+Z+59f4vztz84MPXrr1/9b2N9zZ+duHcubMXLl68dOnSmXevXd84u/Nviz0+Wjn/PPa180C7JeefM5d/t+T8v5Rq+XdLzv/LqZZ/t+T88/s9+XdLzj9/9pF/t+T8X0m1/Lsl5/+1VMu/W3L+r6Za/t2S8/96quXfLTn/11It/27J+Z9Otfy7Jed/JtUHzH/lqPvFbOT88xEuz/9uyfnnMxvk3y05//Opln+35PwvpFr+3ZLzfz3V8u+WnP83Ui3/bsn5X0y1/Lsl5//NVMu/W3L+l1It/27J+X8r1fLvlpz/t1Mt/27J+b+Ravl3S87/O6mWf7fk/L+bavl3S87/e6mWf7fk/N9Mtfy75eH3/5sxY8ZMnmn7lQkAAAAAAAAAAAAAaJrF6cRtbyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9nBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYu7cYue76DuBnr147kBgIqZMaWDvGGGeTXV/iC62LCdeGWwmEQi/YrndtFnyL1y5JGsmOAiUSRkUVbcNDW0BRm5cKP+SBVgHlAbVCqkTaB/qCqFB5iCqDEqRKaQXZas75//87Mzs7s2tP1jPnfD5S/PPOnJlz5syZs/td5zsDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1Nv0zpkvDmRZVvsv/2N9lr2q9ve14+vzy952vbcQAAAAuFa/yv984aZ0wcFl3KhumX954w+enp+fn88+MfQXI1+dn09XjGfZyJosy6+LLv/kkwP1ywSPZWMDg3VfD3ZY/VCH64c7XD/S4frRDtev6XD9WIfrF+2ARdYWv4/J72xL/tf1xS7Nbs5G8uu2tLjVYwNrBgfj73JyA/lt5keOZbPZiWwmm2pYvlh2IF/+mU21db0vi+sarFvXxtoR8uIjR+M2DIR9vKVhXQv3Gf3sHdn4L1585Ojfnbtya6vZcTc03F+xnds217bz8+GSYlsHsjVpn8TtHKzbzo0tnpOhhu0cyG9X+3vzdr6wzO0cWtjMVdX8nI9lg/nfn8v303D9r/XSftoYLnvp9izLLi5sdvMyi9aVDWbrGi4ZXHh+xoojsnYftUPptdnwio7TTcs4Tmtzekvjcdr8mojP/6Zwu+EltqH+afrZo6N1z/sv56/mOI1qj3qp10rzMdjt10qvHIPxuHguf9CPtzwGt4TH/8jWpY/BlsdOi2MwPe66Y3Bzp2NwcHQo3+b0JAzkt1k4Bnc0LD+Ur2kgn89vbX8MTp47eWZy7qGH75w9eeT4zPGZU7t27JjatWfPvn37Jo/NnpiZKv68yr3d+9Zlg+k1sDnsu/gaeEvTsvWH6vw3Rhedf6/2dTjW5nW4vmnZbr8Oh5sf3MDqvCAXH9PFa+NjtZ0+dmkwW+I1lj8/26/9dZged93rcLjuddjye0qL1+HwMl6HtWXObF/ezyzDdf+12oalvxdc2zG4vu4YbP55pPkY7PbPI71yDI6F4+JH25f+XrAxbO/jEyv9eWRo0TGYHm4499QuST/vj+3LR6vj8rbaFTeMZufnZs7e9eCRc+fO7sjCWBWvqztWmo/XdXWPKVt0vA6u+Hg9OPvGx29rcfn6sK/G7qz9Mbbkc1VbZvdd7Z+r/Ltb6/3ZcOnOLIwuW+392eq7eW1/jmbZ17736H3feeRr71xyf9by5ucnr/1n8ZRL686/I0ucf2Puf7lYX7qrx4ZGhovX71DaOyMN5+PGp2o4P3cN5Ot+YXJ55+OR8N9qn49vbnM+3tC0bLfPxyPNDy6ejwc6/bbj2jQ/n2PhODkx1f58XFtmw86VHpPDbc/Ht4c5EPb/W0NSSLmo7thZ6rhN6xoeHgmPaziuofE43dWw/EjIZrV1PbXzKo7TF7Ns2+3FfQ2lR7dgtY7T8aZlu32cpt99LXWcDnT67dvVaX4+x8JxcfOu9sdpbZlnd1/7uXNt/GvduXO00zE4MjRa2+aRdBDm5/tsfm08Bu/KjmansxPZdH7taH48DeTrmrh7ecfgaPhvtc+VG9ocg9ualu32MZi+jy117A0ML37wXdD8fI6F4+KJu9sfg7Vl3rW3uz+7bguXpGXqfnZt/v3aUr/zuq1pN71Sx8pw2M7v7W3/u9naMif2rTRntt9Pd4RLbmixn5pfv0u9pqaz1dlPG8J2Xtm39H6qbU9tma/uX+bxdDDLsgsP3JP/vjf8+8qF8z98uuHfXVr9m86FB+75+auP/fNKth+A/vdyMdYV3+vq/mVqOf/+DwAAAPSFmPsHw0zkfwAAACiNmPvj/xWeyP8AAABQGjH3D4eZVCT/b3jXldmXL2SpmT8fxOvTbri3WC52XKfC1+PzC2qX3/PkzP/804XlrXswy7Jf3vsnLZffcG/crsJ42M7L7268fJGn71zWug/ffyGtt76//vVw//HxLPcwaFXBncqy7JmbvpyvZ/yTl/L57L2H83nfxccfqy3zwv7i63j7519XLP/Xofx78NiRhts/H/bDT8Ocen/r/RFv961Lb9249+ML64u3G9h8Y/6wn/hUcb/xfXK+8lixfNzPS23/d7701Ldqyz/45tbbf2Gw9fY/Fe73yTD/9w3F8vXPQe3reLsvhO2P64u3u+ub3225/Ze/WCx/5j3FcofDjOvfFr7e8p4rs/X768GBIw2PK3tvsVxc/9QP/yy/Pt5fvP/m7R87dKlhfzQfH8/+e3E/k03Lx8vjeqJ/bFp/7X7qj8+4/qf+9HDDfu60/sv3Pf+G2v02r/+OpuXOPLA9X//C/TW+Y9PffOHLLdcXt+fgP5xpeDwHPxJex2H9T3wqHI/h+v+7XNxf87srHP5I4/knLv/19RcaHk/0vl8U67/89uP5XDO2dt0Nr3r1jRffVNt3WfbcmuL+Oq3/+N+ebtj+b9xS7I94fezoN69/KXH9Zz83cer03PnZ6bRXH7kpf++cDxTbE7f3pnBubf760Olzn545Oz41PpVl4+V9C72r9s0wf16Mi+2Xnl90Bt1+f3g+b/urZ9Zt/bcvxcv/42PF5ZfeX3zfektY7ivh8vXh+VvZ+hd7YtMt+et74NmwhfOL3y/4Wmzc8t/7lrVgePzNPxfE4/3M6z+d74fadfn3jfi6vsbt//F0cT/fDvt1Prwz8+ZbFtZXv3x8b4RLHy1e79e8/8JpLj6vfx+e7w/+tLj/uF3x8f44/Bzz3Q2N57t4fHz7wmDz/efv4nExnE+yi8X1cam4vy+9cEvLzYvvQ5JdvDX/+s/T/dy6ooe5lLmH5iZPzJ46/+DkuZm5c5NzDz186OTp86fOHcrfy/PQZzrdfuH8tC4/P03P7Nmd5Wer08V4hV3v7T9z/9HpvVNbp2eOHTl/7Nz9Z2bOHj86N3d0Znpu65Fjx2Y+1+n2s9MHduzcv2vvzonjs9MH9u3fv2v/xOyp07XNKDaqgz1Tn504dfZQfpO5A7v377j77t1TEydPT88c2Ds1NXG+0+3z700TtVv/8cTZmRNHzs2enJmYm3145sCO/Xv27Oz4boAnzxybG588e/7U5Pm5mbOTxWMZP5dfXPve1+n2lNPcfxY/zzYbKN6IL/vwHXvS+7PWPPnokndVLNL0BqJXwnvRfP81Z/Yt5+uY+0fCTCqS/wEAAKAKYu4fDTOR/wEAAKA0Yu5fE2Yi/wMAAEBpxNw/Fmb6XwIqkv9L1//fcGFZ69f/1/+v31/6/xXr/3+01/r/xflC/787rrV/r/8f6P/r/+v/6//r/9MFvdb/j7l/bZb5938AAAAoqZj714WZyP8AAABQGjH33xBmIv8DAABAacTc/6owk4rkf/1//X/9/1L2/8farV//X/+/zPT/29P/70D/fzKrVv//Yje3X/9f/5/Feq3/H3P/q8NMKpL/AQAAoApi7r8xzET+BwAAgNKIuf+mMBP5HwAAAEoj5v71YSYVyf/6//r/+v+l7P+3Xb/+v/5/men/t6f/34H+v8//1//X/6ereq3/H3P/a8JMKpL/AQAAoApi7n9tmIn8DwAAAL1n+OpuFnP/68JMFuX/q1wBAAAAcN3F3H9z1lQEr8i//+v/6//r/+v/6/+3Xv/y+/9Dmf5/79D/b0//vwP9/xX150eavtb/1//X/6dZr/X/89yfjWWvDzOpSP4HAACAKoi5/5YwE/kfAAAASiPm/l8LM5H/AQAAoDRi7t8QZlKR/K//X5r+/0v1T53+/5XZl19a6OsP6f83rF//3+f/l5n+f3v6/x3o//v8f/1//X+6qtf6/zH33xpmUpH8DwAAAFUQc/9tYSbyPwAAAPSJwY5LxNz/62Em8j8AAACURsz9G8NMKpL/9f97vP8fm6M+/9/n/+v/92T/f0z/v+fo/7en/9+B/r/+v/6//j9d1Wv9/5j73xBmUpH8DwAAAFUQc/8bw0zkfwAAACiNmPvfFGYi/wMAAEBpxNw/HmZSkfyv/9/j/f+iBz+6jM//b6D/r//fbv36/z7/v8z0/9vT/+9A/1//X/9f/5+u6rX+f8z9m8JMKpL/AQAAoApi7t8cZiL/AwAAQGnE3H97mIn8DwAAAKURc/+WMJOK5H/9/77o/2f6//r/+v/6//r/y6P/357+fwf6//r/+v/6/3RVr/X/Y+5/c5hJRfI/AAAAVEHM/VvDTOR/AAAAKI2Y+98SZiL/AwAAQGnE3L8tzKQi+V//X/9f/1//X/+/9fr1//uT/n97+v8d6P/r/+v/6//TVb3W/4+5/61hJhXJ/wAAAFAFMfdvDzOR/wEAAKA0Yu6/I8xE/gcAAIDSiLl/IsykIvlf/1//X/9f/1//v/X69f/7k/5/e/r/Hej/6//r/+v/01W91v+Puf/OMJOK5H8AAACogpj77wozkf8BAACgNGLunwwzkf8BAACgNGLunwozqUj+1//X/9f/1/9fUf//TQv3q/9f0P/vLfr/7en/d6D/r/9/3fv/I/r/lEqv9f9j7t8RZlKR/A8AAABVEHP/zjAT+R8AAABKI+b+XWEm8j8AAACURsz9u8NMKpL/9f/1//X/9f99/n/r9ev/9yf9//a63/+PD1H/X/9f/9/n/+v/s1iv9f9j7r87zKQi+R8AAACqIOb+PWEm8j8AAACURsz9e8NM5H8AAAAojZj794WZVCT/6//r/+v/6//r/7dev/5/f9L/b8/n/3eg/6//38f9/9qxpf9Pr+m1/n/M/fvDTCqS/wEAAKAKYu5/W5iJ/A8AAAClEXP/b4SZyP8AAABQGjH3/2aYSUXyv/6//n+v9/+LS0fzP/X/q9n/H9X/1/9fAf3/9vT/O9D/1//v4/6/z/+nF/Va/z/m/gNhJhXJ/wAAAFAFMff/VpiJ/A8AAAClEXP/28NM5H8AAAAojZj7D4aZVCT/6/+vUv8/Xqj/7/P/K9X/X9Nwuc//1/9fDfr/7en/d6D/r/+v/6//T1f1Wv8/5v53hJlUJP8DAABAFcTcf0+YifwPAAAApRFz/zvDTOR/AAAAKI2Y+98VZlKR/K//7/P/r3//f6Rh2/X/F27X//3/7nz+v/6//v9K6P+3p//fgf6//r/+v/4/XdVr/f+Y+98dZlKR/A8AAABVEHP/e8JM5H8AAAAojZj73xtmIv8DAABAacTc/74wk4rkf/1//f/r3//3+f/6/wX9f/3/btD/b0//vwP9f/1//X/9f7pqFfv/a7Nl9P9j7v/tMJOK5H8AAACogpj77w0zkf8BAACgNGLuf3+YifwPAAAApRFz/wfCTCqS//X/9f/1//X/9f9br1//vz/p/7fXZ/3/X90YLtf/L+j/9/b2r7T/P9z09SvS///JUv3/+TXNt9f/55Wwiv3/ln3/5q9j7v9gmElF8j8AAABUQcz9Hwozkf8BAACgNGLu/3CYifwPAAAApRFz/++EmVQk/+v/17Zjob2s/6//n1+g/6//r//ft/T/2+uz/r/P/2+i/9/b2+/z//X/WazX+v8x938kzKQi+R8AAACqIOb++8JM5H8AAAAojZj7PxpmIv8DAABAacTc/7Ewk4rkf/1/n/+v/6//r//fev36//1J/789/f8O9P/1/3ut//9f+v/0t17r/8fcf3+YSUXyPwAAAFRBzP0fDzOR/wEAAKA0Yu7/3TAT+R8AAABKI+b+T4SZVCT/6//3S/9/XP9f/1//v+nx6P/r/7ei/9+e/n8H+v/6/73W//f5//S5Xuv/x9z/yTCT5ef/sWUvCQAAAFwXMff/XphJRf79HwAAAKog5v7fDzOR/wEAAKA0Yu7/gzCTiuR//f9+6f/7/P9M/1//v+nx6P/r/7eyev3/eObR/9f/1/+P9P/1//X/adZr/f+Y+/8wzKQi+R8AAACqIOb+T4WZyP8AAADQF1r9P9nNYu4/FGYi/wMAAEBpxNx/OMykIvlf/1//X/+/R/v/f7n5X3/0gw8d3qH/r/+v/78iq/r5/7UXv8//1//X/0/0/1fe/6//Hqr/Txn1Wv8/5v4jYSYLwe8DPuAfAAAA+lvM/X8UZlKRf/8HAACAKoi5/2iYifwPAAAApRFz/3SYSUXyv/6//r/+f4/2//v48//j/uin/v/Emj7q/8eTrv5/S6va///4Qk9c/3+l/f/RlpdWqP8/kOn/d12L7f9+lmU93f+vp/9PGfVa/z/m/pkwk4rkfwAAAKiCkPsHjxVz4Qr5HwAAAEoj5v7jYSbyPwAAAJRGzP2fDjOpSP7X/9f/1//X//f5/63X37P9f5//35b+f3u90/9vrUL9f5///wq43tuv/6//z2K91v+PuX82zKQi+R8AAACqIOb+z4SZyP8AAABQGjH3fzbMRP4HAACA0oi5/0SYSUXyv/6//r/+v/6//n/r9ev/9yf9//b0/zvQ/9f/1//X/6ereq3/H3P/yTCTiuR/AAD+n737aLKsPu84fgcPxUyx8c4LL+y9XwILe22/AC+88cZVLi9wwDkxOEecowLKQgEFkBBKKAdACQllIQnlHFBGUo1K9PM80z19+tzumdvd5/6fz2ehBzWMzpVqCvjR89UBoIPc/TfGLfY/AAAADCN3/2/GLfY/AAAADCN3/2/FLU32v/5f/z9s///z+v+Dnq//1/+PTP8/T/+/hv5f/6//1/+zUUvr/3P3/3bc0mT/AwAAQAe5+38nbrH/AQAAYBi5+2+KW+x/AAAAGEbu/t+NW5rs/8v6/zOrnv1/Zrz6/5H6f+//P/D5+n/9/8hOtv+/5cd/5tP/6//1/0H/r//X/3O5pfX/uft/L25psv8BAACgg9z9vx+32P8AAAAwjNz9fxC32P8AAAAwjNz9fxi3NNn/3v/v/f/6f/2//n/6+fr/7eT9//M69f83PXT9jY/e/dP3HOX5+n/9v/5f/89mLa3/z93/R3FLk/0PAAAAHeTu/+O4xf4HAACAYeTu/5O4xf4HAACALXR+8qu5+/80bmmy//X/+n/9v/5f/z/9fP3/dtL/z+vU/1/J8/X/+n/9v/6fzVpa/5+7/8/ilib7HwAAADrI3f/ncYv9DwAAAMPI3X9z3GL/AwAAwDBy91+IW5rsf/3/8ff/P9T/6//j6v/1//r/46f/n6f/X0P/r//X/+v/2ail9f+5+2+JW5rsfwAAAOggd/9fxC32PwAAAAwjd/9fxi32PwAAAAwjd/9fxS1N9r/+3/v/9f/6f/3/9PP1/9tJ/z9P/7+G/v9q+/lr9f/6f/0/ux2x/39s5k/bG+n/c/f/ddzSZP8DAABAB7n7/yZusf8BAABgGLn7/zZusf8BAABgGLn7/y5uabL/9f/6f/2//v+K+//9P/Uep/+fpv8/GZvs/3f/uUn/v2Nj/f+Zs5Nf1v9vff/v/f/6f/0/eyzt/f+5+/8+bmmy/wEAAKCD3P3/ELfM7P8j/8N8AAAA4FTl7v/HuMX3/wEAAGDrZXWWu/+f4pYm+1//r//X/+v/vf9/+vlz/f89uz6f/n9ZvP9/3rH0/+dXq5X3/+v/9f/6f/0/E5bW/+fu/+e4pcn+BwAAgA5y998at9j/AAAAMIzc/f8St9j/AAAAMIzc/f8atzTZ/9P9/6Xfr/8/HP3/3s+v/5/++bGp/j//E6+2/19d9vXB+v9f8P7/nvT/8xbz/v8D6P/1/9v8+Qfv/8+v+/H6f6Ysrf/P3f9vcUuT/Q8AAAAd5O7/97jF/gcAAIBh5O7/j7jF/gcAAIBh5O7/z7ilyf73/n/9v/5/+/p/7//fcZrv/1+deP9/Vv9/SPr/efr/NfT/+n/9//z7/2f+XwD0/0xZWv+fu/+/4pYm+x8AAAA6yN3/33GL/Q8AAADbYfevHbj8F5SG3P3/E7fY/wAAADCM3P3/G7c02f/6f/2//l//r/+ffv6y+n/v/z8s/f88/f8a+v/j6OfPDtb/33bQj19C/3/zcff/M/T/TNnT/9976eun1f/n7v+/uKXJ/gcAAIAOcvf/f9xi/wMAAMAwcvc/IW6x/wEAAGAYufufGLc02f/H3v/PvCNU/6//1//r//X/+v9N0//P0/+vof/3/n/v/9f/s1F7+v9dTqv/z93/pLilyf4HAACADnL3Pzlusf8BAABgGLn7b4ubrjm1TwQAAABsWu7+p8QtTb7/7/3/+n/9v/5f/z/9fP3/dtL/z9P/r6H/1//r//X/bNTS+v/c/U+NW5rsfwAAAOggd//T4hb7HwAAAIaRu//pcYv9DwAAAMPI3f+MuKXJ/tf/H2//n1/X/+v/V/p//b/+/0S07f/PTP2VaL8D+v8Hfv3CL+39iv5f/6//1//r/zmkn5z5fYvo/y9e+rvL3P3PjFua7H8AAADoIHf/s+IW+x8AAACGkbv/2XGL/Q8AAADDyN1/e9xyxP0/1zwsmf7f+//1//p//f/08/X/26lt/39I3v+/hv5f/6//1/+zUYvo/3f9+9z9z4lbfP8fAAAAhpG7/7lxi/0PAAAAw8jd/7y4xf4HAACAYeTuf37c0mT/6//1//p//b/+f/r5+v/tpP+fp/9fY5v6/9v1/1f4+e87rs+v/9f/s9/S+v/c/XfELU32PwAAAHSQu/8FcYv9DwAAAMPI3f/CuMX+BwAAgGHk7n9R3NJk/+v/9f/6f/2//n/6+fr/7aT/nzdA/39u9x9/Rf3/nTMfYKr/v3jdMvt/7/9f3OfX/+v/2W9p/X/u/hfHLU32PwAAAHSQu//OuMX+BwAAgGHk7r8rbrH/AQAAYBi5+18StzTZ//p//b/+X/+v/59+vv5/O+n/5w3Q/3v//0r/v9TPr//X/7Pf0vr/3P0vjVua7H8AAADoIHf/3XGL/Q8AAADDyN3/srjF/gcAAIBh5O6/J25psv/1//p//b/+X/8//Xz9/3Y6vv5/pf/X/+v/19D/6//1/1xuaf1/7v6Xxy1N9j8AAAB0kLv/FXGL/Q8AAADDyN3/yrjF/gcAAIBh5O5/VdzSZP/r//X/+n/9v/5/+vn6/+3k/f/z9P9r6P/1//p//T8bNd3/33xq/X/u/lfHLU32PwAAAHSQu//euMX+BwAAgGHk7n9N3GL/AwAAwDBy9782bmmy//X/+v+9/f9qpf/X/+v/d5xA/39upf/fOP3/PP3/Gvr/Mfv/a1YD9f/nD/zx+n+WaGnv/8/d/7q4pcn+BwAAgA5y978+brH/AQAAYBi5+98Qt9j/AAAAMIzc/W+MW5rsf/2//t/7//X/+v/p53v//3bS/8/T/6+h/x+z//f+f/0/p2Zp/X/u/jfFLU32PwAAAHSQu//NcYv9DwAAAMPI3f+WuMX+BwAAgGHk7n9r3NJk/+v/9f/6f/2//n/6+fr/7aT/n6f/X0P/r//X/+v/2ail9f+5+++LW5rsfwAAAOggd//9cYv9DwAAAMPI3f9A3GL/AwAAwDBy978tbmmy//X/+n/9/3b2/+f0//p//f+kpfT/N9zwiw/q//X/+n/9v/5f/9/d0vr/3P1vj1ua7H8AAADoIHf/O+IW+x8AAACGkbv/nXGL/Q8AAADDyN3/rrilyf7f3/9fu9opVHdM9f/RqOn/d9H/7/38+v/pnx/e/6//1/8fv6X0/97/f2WfX/+v/9/mz3+k/v9n9/94/T8jWlr/n7v/wbilyf4HAACADnL3vztusf8BAABgGLn73xO32P8AAAAwjNz9D8UtTfa/9//r//X/+n/9//Tz9f/b6fj6/52/R9D/6//1/wfT/w/y/v+f0P+zOUvr/3P3vzduabL/AQAAoIPc/e+LW+x/AAAAGEbu/vfHLfY/AAAADCN3/wfilib7X/+v/9f/6//1/9PP1/9vJ+//n6f/X6NP/39u6oun3c9frdP+/MP0/97/zwYtrf/P3f/BuKXJ/gcAAIAOcvd/KG6x/wEAAGAYufs/HLfY/wAAADCM3P0fiVua7H/9v/5//P7/V/X/lz1f/6//H5n+P/+KPk3/v0af/n/Saffz2/759f/6f/ZbWv+fu//huKXJ/gcAAIAOcvd/NG6x/wEAAGAYufs/FrfY/wAAADCM3P0fj1ua7H/9f6/+/8yqY//v/f/6f/1/J/r/efr/NfT/+n/9v/6fjVpa/5+7/5EzZ1vufwAAANhWv/xzv/HwYf/YRx7/13OrT8Qt9j8AAAAMI3f/J+MW+x8AAACGkbv/U3FLk/2v/+/V//d8/7/+X/+v/+9E/z9P/7+G/l//r//X/7NRS+v/c/d/Om7ZNfzOHvm/JQAAALAkufs/E7c0+f4/AAAAdJC7/7Nxy779f/GQv6odAAAAWJrc/Z+LW5p8/1//v/D+f3VM/X/8cfr/Hfp//f/U8/X/20n/P+8q+/+LZ/T/+v8Z+n/9v/6fyy2t/8/d//m4pcn+BwAAgEHt+ScKufu/ELfY/wAAADCM3P1fjFvsfwAAABhG7v4vxS1N9r/+/8T7/0zVj/H9/+frt7z/v3n/f+u5yefr//X/I9P/z/P+/zX0/6P0/9fp//X/LMPS+v/c/V+OW5rsfwAAAOggd/9X4hb7HwAAAIaRu/+rcYv9DwAAAMPI3f+1uKXJ/tf/L/z9/1fU/x/i/f/6/x79/wHPH6f//6nrL9z/K7921x36fy45yf4/fy7o//X/+v8dC+r/vf9f/89CbL7/P7vni0ft/3P3fz1uabL/AQAAoIPc/Y/GLfY/AAAADCN3/zfiFvsfAAAAhpG7/5txS5P9r//X/y+l/8//rU+h/7+wff1/NsXd+3/v/9f/7+f9//P0/2vo//X/+n/9Pxu1+f5/7xeP2v/n7v9W3NJk/wMAAEAHufu/Hbfk/j9z5H90DwAAACxM7v7vxC2+/w8AAADDyN3/3bilyf7X/+v/l9L/J+//v/TjvP9/xxj9/8/Ub+n/j9eV9Pe7fw7r/4P+X/+v/9f/6//ZgKX1/7n7vxe3NNn/AAAA0EHu/sfiFvsfAAAAhpG7//txi/0PAAAAw8jd/4O4pcn+1/+P2v9nEa//1//r/5fR/3v//0nx/v95+v819P/6f/2//p+NWlr/n7v/RwEAAP//auBn+g==")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x187842, 0x0)

2m49.19574944s ago: executing program 4 (id=1266):
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00')
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pread64(r0, 0x0, 0x0, 0x6)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff})
connect$unix(r4, 0x0, 0x0)
r5 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000))
io_uring_enter(r5, 0x0, 0xe38e, 0x5, 0x0, 0x0)
r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r6, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)=""/191, 0xbf}], &(0x7f0000002480)=[0x0, 0x2]}, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20)

2m48.593900617s ago: executing program 4 (id=1277):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8040)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x40045702, &(0x7f0000000000))
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000080)={0x1, 0xa7cb, 0x0, 0x0, 0xe809})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x400, 0x1)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
newfstatat(0xffffffffffffff9c, &(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x4000)
setresuid(r4, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x10040, 0x103)
capset(0x0, 0x0)
request_key(&(0x7f0000000300)='logon\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='fscrypt:', 0x0)
r5 = getpid()
kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x8001})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0xa}, 0x1c)

2m48.428918213s ago: executing program 34 (id=1277):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8040)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x40045702, &(0x7f0000000000))
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000080)={0x1, 0xa7cb, 0x0, 0x0, 0xe809})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x400, 0x1)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
newfstatat(0xffffffffffffff9c, &(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x4000)
setresuid(r4, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x10040, 0x103)
capset(0x0, 0x0)
request_key(&(0x7f0000000300)='logon\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)='fscrypt:', 0x0)
r5 = getpid()
kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x8001})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0xa}, 0x1c)

2m33.204893223s ago: executing program 3 (id=1403):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1, 0x200, 0x5, 0x6, 0x6}, &(0x7f00000004c0)=0x98)

2m32.142792083s ago: executing program 3 (id=1416):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x34, 0x9, 0x0, 0x4000, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x14040044)

2m32.071302371s ago: executing program 3 (id=1417):
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0)
r0 = syz_io_uring_setup(0x2e94, &(0x7f0000000180)={0x0, 0x100, 0x13090, 0x4, 0x1c4}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x497c, 0x0, 0x0, 0x0, 0x0)

2m32.006927851s ago: executing program 3 (id=1418):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000500)="002e000000000000d8c1a2", 0xb}], 0x1, 0x9, 0x8000400, 0x0)

2m31.933653441s ago: executing program 3 (id=1419):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000200)={0x50}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40800, 0x0)
read$FUSE(r3, &(0x7f0000002ac0)={0x2020}, 0x2020)

2m31.897359267s ago: executing program 3 (id=1421):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0xf)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ff9, 0x0, 0x3, 0x1e, 0xa3e79f9d9d86f9ac, "faf98317e5dc25f5ab0200000080f985981a7beda9d69098c8b534464c516bdd8a0f35000000006a1500f300040000000000000062008000", "32d8cc26f7061a74dfaf8e315e9f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}})

2m16.85462142s ago: executing program 35 (id=1421):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0xf)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ff9, 0x0, 0x3, 0x1e, 0xa3e79f9d9d86f9ac, "faf98317e5dc25f5ab0200000080f985981a7beda9d69098c8b534464c516bdd8a0f35000000006a1500f300040000000000000062008000", "32d8cc26f7061a74dfaf8e315e9f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}})

1m38.141377033s ago: executing program 1 (id=1889):
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000)
mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1)
munlockall()

1m38.011539001s ago: executing program 1 (id=1890):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0)
sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x14, 0x3, 0x7, 0x187a67a68afe9213, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40048c0)

1m37.038895692s ago: executing program 1 (id=1895):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000008000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b01010000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xa0, &(0x7f0000001a80)=""/160, 0x41000}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0}, 0x94)

1m36.963373543s ago: executing program 1 (id=1896):
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESOCT=0x0, @ANYBLOB='\x00\x00\x00\x00=', @ANYRESDEC=0x0, @ANYBLOB=',nostrict,\x00'], 0x1, 0x489, &(0x7f0000000580)="$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")
socket$inet(0x2, 0x2, 0x1)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1edc01, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000002f40)={0x2020}, 0x2020)

1m36.752415342s ago: executing program 1 (id=1897):
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0xffffffffffffffff)

1m36.37832223s ago: executing program 1 (id=1898):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1854, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x80, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0xb, {[@global=@item_012={0x2, 0x1, 0x6, "44a6"}, @local=@item_4={0x3, 0x2, 0x0, "3a2146a0"}, @local=@item_012={0x2, 0x2, 0x9, "1920"}]}}, 0x0}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)

1m36.125058507s ago: executing program 36 (id=1898):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1854, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x80, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x80}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0xb, {[@global=@item_012={0x2, 0x1, 0x6, "44a6"}, @local=@item_4={0x3, 0x2, 0x0, "3a2146a0"}, @local=@item_012={0x2, 0x2, 0x9, "1920"}]}}, 0x0}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)

56.181055555s ago: executing program 6 (id=2377):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = dup(r0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r2, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0})
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340))
r4 = dup(r3)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4})
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1})

55.31782642s ago: executing program 6 (id=2379):
sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x5f, 0x20000800}, 0x4000008)
r0 = syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, r3, 0x0, 0x0, r3})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

55.272996332s ago: executing program 6 (id=2380):
r0 = fanotify_init(0x40, 0x1000)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18)
fanotify_mark(r0, 0x241, 0x8000000, r1, 0x0)
fanotify_mark(r0, 0x406, 0x1020, r1, 0x0)

55.220400757s ago: executing program 6 (id=2381):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4")
chdir(&(0x7f00000001c0)='./file0\x00')
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x400000]})

54.983273358s ago: executing program 6 (id=2384):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000540)=[@in={0x2, 0x4e24, @local}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f0000000680)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010102}], 0x18, 0x8000}, 0x2800c051)

53.778636059s ago: executing program 6 (id=2385):
socket$kcm(0x10, 0x2, 0x4)
keyctl$KEYCTL_RESTRICT_KEYRING(0xb, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
r1 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00')
syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0)
pread64(r1, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a)

52.833412055s ago: executing program 37 (id=2385):
socket$kcm(0x10, 0x2, 0x4)
keyctl$KEYCTL_RESTRICT_KEYRING(0xb, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
r1 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00')
syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0)
pread64(r1, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a)

19.322167931s ago: executing program 7 (id=2666):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2d, 0x4e20, @broadcast}}, 0x24)

19.042048316s ago: executing program 7 (id=2669):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x300000000000000)

18.683893291s ago: executing program 7 (id=2675):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x8f}}, &(0x7f0000000480)='GPL\x00'}, 0x80)

18.492649206s ago: executing program 7 (id=2676):
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x205)
move_mount(r1, 0x0, r0, 0x0, 0x46)

18.387608566s ago: executing program 7 (id=2678):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000}, 0x0)

17.962252801s ago: executing program 7 (id=2681):
syz_mount_image$iso9660(&(0x7f0000000700), &(0x7f0000000140)='./file0\x00', 0x1111090, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0, @ANYRES8=0x0, @ANYRES32, @ANYRES8=0x0, @ANYRES16, @ANYRESDEC, @ANYRES16=0x0], 0x1, 0x404, &(0x7f00000007c0)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000003, 0x4c831, 0xffffffffffffffff, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380))
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000000a10"], 0x26}}, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000b31000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x0, &(0x7f0000000400)=""/215, 0xd7}, &(0x7f0000000500)=0x40)
syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x4, &(0x7f0000000000), 0x1, 0xb990, &(0x7f000000bec0)="$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")
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010600000000000000000900000024000480130001"], 0x38}}, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {0x1, 0x2}, [{}], {}, [], {0x10, 0x5}}, 0x2c, 0x2)
tkill(0x0, 0x1d)

17.649040915s ago: executing program 38 (id=2681):
syz_mount_image$iso9660(&(0x7f0000000700), &(0x7f0000000140)='./file0\x00', 0x1111090, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0, @ANYRES8=0x0, @ANYRES32, @ANYRES8=0x0, @ANYRES16, @ANYRESDEC, @ANYRES16=0x0], 0x1, 0x404, &(0x7f00000007c0)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020786c3100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000003, 0x4c831, 0xffffffffffffffff, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380))
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a00000000000000000a10"], 0x26}}, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000b31000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47, 0x0, &(0x7f0000000400)=""/215, 0xd7}, &(0x7f0000000500)=0x40)
syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x4, &(0x7f0000000000), 0x1, 0xb990, &(0x7f000000bec0)="$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")
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010600000000000000000900000024000480130001"], 0x38}}, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {0x1, 0x2}, [{}], {}, [], {0x10, 0x5}}, 0x2c, 0x2)
tkill(0x0, 0x1d)

2.143824355s ago: executing program 5 (id=2804):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x10fff9)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x18, 0x0, 0x2})

1.98509102s ago: executing program 5 (id=2811):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000002480)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0)

1.89814079s ago: executing program 5 (id=2814):
syz_emit_ethernet(0xe, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@generic={0x88f5}}}, 0x0)

1.819509992s ago: executing program 5 (id=2815):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="0205500c0c0000000000000000000000030006000000000002004e21ffffffff00000000000000000200010000100000000000000000000005000500330000000a"], 0x60}, 0x1, 0x7}, 0x0)

1.771472537s ago: executing program 5 (id=2818):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6c, 0x76, 0x4e, 0x10, 0x5752, 0x75b9, 0xae00, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x6, 0x50}}]}}]}}, 0x0)

1.675887137s ago: executing program 9 (id=2819):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14)
sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

1.621920385s ago: executing program 9 (id=2820):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x437, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}, @IFLA_IPTUN_LINK={0x8}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44801}, 0x0)

1.614547947s ago: executing program 9 (id=2823):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'io'}, 0xb)

1.551374209s ago: executing program 9 (id=2825):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x0, 0x3}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000bc0)={0x0, 0x15, 0x3, "c39242"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

566.877594ms ago: executing program 5 (id=2838):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0xc225, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\a\a\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(r0)

491.401231ms ago: executing program 8 (id=2840):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nolazytime}, {@dioread_nolock}, {@test_dummy_encryption}, {@nobarrier}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@barrier_val={'barrier', 0x3d, 0xc}}, {@nogrpid}]}, 0x1, 0xbb7, &(0x7f00000017c0)="$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")
socket$nl_route(0x10, 0x3, 0x0)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

422.104135ms ago: executing program 8 (id=2841):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x40000002}, 0x1c)
bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
listen(r0, 0x204)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1)

421.79472ms ago: executing program 8 (id=2842):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000023c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r2, @ANYBLOB="24005a80200001801400030000000200fd0308000000000000006d04"], 0x40}}, 0x8000)

370.179753ms ago: executing program 8 (id=2843):
syz_emit_ethernet(0x7e, &(0x7f0000000380)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x32, 0x0, @multicast2, @multicast1, {[@noop, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@local}, {@empty}, {@remote}, {@loopback, 0x800}, {@dev}, {}]}]}}}}}}}, 0x0)

369.83284ms ago: executing program 8 (id=2844):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x0)

369.724391ms ago: executing program 8 (id=2845):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c8f6055b5010203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

62.383214ms ago: executing program 9 (id=2846):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x111, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r1, 0x1}}, 0x10)

0s ago: executing program 9 (id=2847):
r0 = io_uring_setup(0x7370, &(0x7f0000000600)={0x0, 0xcb04, 0x100, 0x0, 0x5e})
r1 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000040)=0x10000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0xa000001c})

kernel console output (not intermixed with test programs):

isconnected from ttyUSB0
[  282.759166][    T9] cypress_m8 8-1:5.215: device disconnected
[  282.838619][T11673] loop5: detected capacity change from 0 to 8
[  282.870958][T11673] SQUASHFS error: Corrupted symlink
[  283.847699][T11689] loop7: detected capacity change from 0 to 512
[  283.877697][T11689] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.2074: bad orphan inode 15
[  283.898195][T11689] ext4_test_bit(bit=14, block=5) = 0
[  283.901769][T11689] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.967736][T11202] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.069216][T11695] loop7: detected capacity change from 0 to 512
[  284.113644][T11695] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2076: bg 0: block 5: invalid block bitmap
[  284.123321][T11695] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  284.129601][T11695] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2076: invalid indirect mapped block 3 (level 2)
[  284.134252][T11695] EXT4-fs (loop7): 2 truncates cleaned up
[  284.138836][T11695] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  284.208325][   T33] audit: type=1800 audit(1755269367.967:43): pid=11698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2077" name="/" dev="9p" ino=2 res=0 errno=0
[  284.210430][T11202] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.527321][T11718] loop7: detected capacity change from 0 to 1024
[  284.939844][T11737] loop6: detected capacity change from 0 to 1024
[  284.950629][T11737] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  284.971162][T11737] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002]
[  284.979075][T11737] System zones: 0-1, 2-3, 4-36, 98-101, 102-102
[  284.982441][T11737] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  285.034776][T10160] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.484572][T11735] loop7: detected capacity change from 0 to 32768
[  285.544458][T11735] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  285.547316][T11770] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2101'.
[  285.570374][T11735] XFS (loop7): Ending clean mount
[  285.590622][T11735] XFS (loop7): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  285.676729][T11202] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  285.965021][   T47] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[  286.130840][   T47] usb 6-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=90.d6
[  286.145223][  T793] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  286.145644][   T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.153146][   T47] usb 6-1: Product: syz
[  286.158291][   T47] usb 6-1: Manufacturer: syz
[  286.160320][   T47] usb 6-1: SerialNumber: syz
[  286.198796][   T47] usb 6-1: config 0 descriptor??
[  286.211507][   T47] aiptek 6-1:0.0: interface has no int in endpoints, but must have minimum 1
[  286.294949][  T793] usb 8-1: Using ep0 maxpacket: 32
[  286.298458][  T793] usb 8-1: unable to get BOS descriptor or descriptor too short
[  286.302056][  T793] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  286.308618][  T793] usb 8-1: config 1 has an invalid descriptor of length 249, skipping remainder of the config
[  286.312536][  T793] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[  286.316478][  T793] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  286.322180][  T793] usb 8-1: string descriptor 0 read error: -22
[  286.328080][  T793] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  286.332000][  T793] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.347493][  T793] cdc_ncm 8-1:1.0: skipping garbage
[  286.349251][  T793] cdc_ncm 8-1:1.0: skipping garbage
[  286.351007][  T793] cdc_ncm 8-1:1.0: invalid descriptor buffer length
[  286.353175][  T793] cdc_ncm 8-1:1.0: CDC Union missing and no IAD found
[  286.357786][  T793] cdc_ncm 8-1:1.0: bind() failure
[  286.359239][T11800] trusted_key: syz.6.2106 sent an empty control message without MSG_MORE.
[  286.425737][   T47] usb 6-1: USB disconnect, device number 17
[  286.446864][T11805] loop6: detected capacity change from 0 to 128
[  286.556553][  T793] usb 8-1: USB disconnect, device number 5
[  286.686076][T11812] loop6: detected capacity change from 0 to 32768
[  286.716741][T11812] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  286.740237][T11812] XFS (loop6): Ending clean mount
[  287.326793][T11841] sch_fq: defrate 0 ignored.
[  287.462593][T10160] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  287.680290][T11836] loop5: detected capacity change from 0 to 32768
[  287.686657][T11836] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  287.686657][T11836] clean (size 2912):
[  287.686657][T11836] flags:          0
[  287.686657][T11836] journal_seq:    10
[  287.686657][T11836] usage: type=inodes v=8
[  287.686657][T11836] usage: type=key_version v=0
[  287.686657][T11836] btree_keys: 
[  287.686657][T11836] usage: type=reserved v=0
[  287.686657][T11836] usage: type=reserved v=0
[  287.686657][T11836] usage: type=reserved v=0
[  287.686657][T11836] data_usage: btree: 1/1 [0]=2816
[  287.686657][T11836] data_usage: journal: 1/1 [0]=0
[  287.686657][T11836] data_usage: user: 1/1 [0]=16
[  287.686657][T11836] dev_usage: dev=0  
[  287.686657][T11836]   free: buckets=83 sectors=0 fragmented=0
[  287.686657][T11836]   sb: buckets=25 sectors=6152 fragmented=248
[  287.686657][T11836]   journal: buckets=8 sectors=2048 fragmented=0
[  287.686657][T11836]   btree: buckets=11 sectors=2816 fragmented=0
[  287.686657][T11836]   user: buckets=1 sectors=16 fragmented=240
[  287.686657][T11836]   cached: buckets=0 sectors=0 fragmented=13565952
[  287.686657][T11836]   parity: buckets=0 sectors=0 fragmented=0
[  287.686657][T11836]   stripe: buckets=0 sectors=0 fragmented=0
[  287.686657][T11836]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  287.686657][T11836]   need_discard: buckets=0 sectors=0 fragmented=0
[  287.686657][T11836] clock: read=0
[  287.686657][T11836] clock: write=1280
[  287.686657][T11836] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c0
[  287.686812][T11836] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  287.751360][ T5951] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  287.926574][ T5951] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  287.932682][ T5951] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  287.936940][ T5951] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  287.942574][ T5951] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  287.949102][ T5951] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.968962][ T5951] usb 8-1: config 0 descriptor??
[  288.057432][ T6624] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  288.205088][ T6624] usb 7-1: Using ep0 maxpacket: 32
[  288.223193][ T6624] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  288.233725][ T6624] usb 7-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice= 9.75
[  288.240665][ T6624] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.244068][ T6624] usb 7-1: Product: syz
[  288.248768][ T6624] usb 7-1: Manufacturer: syz
[  288.251213][ T6624] usb 7-1: SerialNumber: syz
[  288.261618][ T6624] usb 7-1: config 0 descriptor??
[  288.332399][T11884] IPv4: Oversized IP packet from 172.20.20.24
[  288.335886][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  288.338904][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  288.394004][ T5951] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  288.479500][ T5951] usb 7-1: USB disconnect, device number 9
[  289.375009][ T6624] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  289.525021][ T6624] usb 7-1: Using ep0 maxpacket: 16
[  289.531956][ T6624] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  289.536765][ T6624] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  289.540575][ T6624] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  289.549127][ T6624] usb 7-1: config 0 interface 0 has no altsetting 0
[  289.552014][ T6624] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  289.557507][ T6624] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.564281][ T6624] usb 7-1: config 0 descriptor??
[  289.997586][ T6624] hid (null): invalid report_size 1936287343
[  290.200810][   T10] usb 7-1: USB disconnect, device number 10
[  290.274239][T11904] loop7: detected capacity change from 0 to 8
[  290.310609][T11904] SQUASHFS error: Unable to read directory block [2c0:35]
[  290.467590][T11463] usb 8-1: USB disconnect, device number 6
[  291.084257][T11920] loop5: detected capacity change from 0 to 128
[  291.096028][T11920] FAT-fs (loop5): Directory bread(block 11554) failed
[  291.098661][T11920] FAT-fs (loop5): Directory bread(block 11555) failed
[  291.101118][T11920] FAT-fs (loop5): Directory bread(block 11556) failed
[  291.103512][T11920] FAT-fs (loop5): Directory bread(block 11557) failed
[  291.109109][T11920] FAT-fs (loop5): Directory bread(block 11558) failed
[  291.112567][T11920] FAT-fs (loop5): Directory bread(block 11559) failed
[  291.122103][T11920] FAT-fs (loop5): Directory bread(block 11560) failed
[  291.129307][T11920] FAT-fs (loop5): Directory bread(block 11561) failed
[  291.131605][T11920] FAT-fs (loop5): Directory bread(block 11562) failed
[  291.133967][T11920] FAT-fs (loop5): Directory bread(block 11563) failed
[  291.403497][T11935] loop5: detected capacity change from 0 to 128
[  291.415155][T11935] EXT4-fs: Ignoring removed nobh option
[  291.433494][T11935] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  291.446516][T11935] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  291.565512][ T9358] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  291.630076][ T5951] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  291.665505][T11943] loop7: detected capacity change from 0 to 32768
[  291.686800][T11943] overlayfs: upper fs needs to support d_type.
[  291.688986][T11943] overlayfs: upper fs does not support tmpfile.
[  291.696660][T11943] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  291.702237][T11943] ERROR: (device loop7): dbAlloc: the hint is outside the map
[  291.702237][T11943] 
[  291.709242][T11943] ERROR: (device loop7): remounting filesystem as read-only
[  291.711559][T11943] overlayfs: failed to set uuid (/file0, err=-5); falling back to uuid=null.
[  291.837095][ T5951] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  291.840945][ T5951] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  291.847600][ T5951] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  291.851185][ T5951] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  291.865109][T11947] loop7: detected capacity change from 0 to 2048
[  291.866484][ T5951] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  291.872445][ T5951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.880833][ T5951] usb 7-1: config 0 descriptor??
[  291.886578][T11945] loop5: detected capacity change from 0 to 40427
[  291.892815][T11945] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  291.895434][T11945] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  291.902328][T11945] F2FS-fs (loop5): invalid crc value
[  291.917795][ T5928]  loop7: p1 < > p4
[  291.924023][ T5928] loop7: p4 start 42180 is beyond EOD, truncated
[  291.933222][T11947]  loop7: p1 < > p4
[  291.937966][T11947] loop7: p4 start 42180 is beyond EOD, truncated
[  292.030505][ T5928] udevd[5928]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  292.049476][T11945] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  292.060716][T11945] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  292.063084][T11945] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  292.073972][ T5928] udevd[5928]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  292.099493][ T5928] udevd[5928]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory
[  292.108377][T11945] F2FS-fs (loop5): inconsistent node block, node_type:1, nid:12, node_footer[nid:12,ino:3,ofs:249659,cpver:0,blkaddr:0]
[  292.174253][ T9358] syz-executor: attempt to access beyond end of device
[  292.174253][ T9358] loop5: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  292.182464][ T9358] CPU: 0 UID: 0 PID: 9358 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  292.182477][ T9358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  292.182482][ T9358] Call Trace:
[  292.182486][ T9358]  <TASK>
[  292.182490][ T9358]  dump_stack_lvl+0x189/0x250
[  292.182504][ T9358]  ? __pfx_dump_stack_lvl+0x10/0x10
[  292.182512][ T9358]  ? __pfx_queue_work_on+0x10/0x10
[  292.182520][ T9358]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  292.182532][ T9358]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  292.182553][ T9358]  f2fs_handle_critical_error+0x37c/0x540
[  292.182574][ T9358]  f2fs_write_end_io+0x886/0xb60
[  292.182600][ T9358]  __submit_merged_bio+0x27a/0x6a0
[  292.182614][ T9358]  ? up_write+0x1c4/0x420
[  292.182634][ T9358]  __submit_merged_write_cond+0x44c/0x530
[  292.182656][ T9358]  f2fs_sync_node_pages+0x1479/0x15e0
[  292.182691][ T9358]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  292.182732][ T9358]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  292.182749][ T9358]  ? up_write+0x1c4/0x420
[  292.182759][ T9358]  ? do_raw_spin_unlock+0x4d/0x240
[  292.182775][ T9358]  f2fs_write_checkpoint+0xe6f/0x1df0
[  292.182807][ T9358]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  292.182857][ T9358]  ? kill_f2fs_super+0x298/0x6c0
[  292.182874][ T9358]  kill_f2fs_super+0x2c3/0x6c0
[  292.182890][ T9358]  ? __pfx_kill_f2fs_super+0x10/0x10
[  292.182899][ T9358]  ? radix_tree_delete_item+0x2b6/0x400
[  292.182920][ T9358]  ? shrinker_free+0x2ce/0x3e0
[  292.182936][ T9358]  deactivate_locked_super+0xbc/0x130
[  292.182975][ T9358]  cleanup_mnt+0x425/0x4c0
[  292.182988][ T9358]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.183005][ T9358]  task_work_run+0x1d4/0x260
[  292.183030][ T9358]  ? __pfx_task_work_run+0x10/0x10
[  292.183042][ T9358]  ? __x64_sys_umount+0x122/0x160
[  292.183065][ T9358]  ? exit_to_user_mode_loop+0x40/0x110
[  292.183084][ T9358]  exit_to_user_mode_loop+0xec/0x110
[  292.183099][ T9358]  do_syscall_64+0x2bd/0x3b0
[  292.183113][ T9358]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.183126][ T9358]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.183137][ T9358]  ? exc_page_fault+0x9f/0xf0
[  292.183153][ T9358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.183163][ T9358] RIP: 0033:0x7f1331d8ff17
[  292.183175][ T9358] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  292.183184][ T9358] RSP: 002b:00007ffddc603f28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  292.183197][ T9358] RAX: 0000000000000000 RBX: 00007f1331e11c05 RCX: 00007f1331d8ff17
[  292.183204][ T9358] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffddc603fe0
[  292.183211][ T9358] RBP: 00007ffddc603fe0 R08: 0000000000000000 R09: 0000000000000000
[  292.183217][ T9358] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffddc605070
[  292.183224][ T9358] R13: 00007f1331e11c05 R14: 00000000000474bc R15: 00007ffddc6050b0
[  292.183247][ T9358]  </TASK>
[  292.184093][ T9358] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  292.263411][T11965] loop7: detected capacity change from 0 to 1024
[  292.277820][ T9358] CPU: 0 UID: 0 PID: 9358 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  292.277839][ T9358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  292.277846][ T9358] Call Trace:
[  292.277851][ T9358]  <TASK>
[  292.277858][ T9358]  dump_stack_lvl+0x189/0x250
[  292.277880][ T9358]  ? __pfx_dump_stack_lvl+0x10/0x10
[  292.277894][ T9358]  ? __pfx_queue_work_on+0x10/0x10
[  292.277905][ T9358]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  292.277921][ T9358]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  292.277946][ T9358]  f2fs_handle_critical_error+0x37c/0x540
[  292.277969][ T9358]  f2fs_write_end_io+0x886/0xb60
[  292.277997][ T9358]  __submit_merged_bio+0x27a/0x6a0
[  292.278012][ T9358]  ? up_write+0x1c4/0x420
[  292.278038][ T9358]  __submit_merged_write_cond+0x44c/0x530
[  292.278060][ T9358]  f2fs_sync_node_pages+0x1479/0x15e0
[  292.278091][ T9358]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  292.278131][ T9358]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  292.278149][ T9358]  ? up_write+0x1c4/0x420
[  292.278160][ T9358]  ? do_raw_spin_unlock+0x4d/0x240
[  292.278178][ T9358]  f2fs_write_checkpoint+0xe6f/0x1df0
[  292.278212][ T9358]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  292.278264][ T9358]  ? kill_f2fs_super+0x298/0x6c0
[  292.278282][ T9358]  kill_f2fs_super+0x2c3/0x6c0
[  292.278299][ T9358]  ? __pfx_kill_f2fs_super+0x10/0x10
[  292.278310][ T9358]  ? radix_tree_delete_item+0x2b6/0x400
[  292.278331][ T9358]  ? shrinker_free+0x2ce/0x3e0
[  292.278373][ T9358]  deactivate_locked_super+0xbc/0x130
[  292.278391][ T9358]  cleanup_mnt+0x425/0x4c0
[  292.278406][ T9358]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.278423][ T9358]  task_work_run+0x1d4/0x260
[  292.278443][ T9358]  ? __pfx_task_work_run+0x10/0x10
[  292.278455][ T9358]  ? __x64_sys_umount+0x122/0x160
[  292.278477][ T9358]  ? exit_to_user_mode_loop+0x40/0x110
[  292.278496][ T9358]  exit_to_user_mode_loop+0xec/0x110
[  292.278513][ T9358]  do_syscall_64+0x2bd/0x3b0
[  292.278529][ T9358]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.278543][ T9358]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.278554][ T9358]  ? exc_page_fault+0x9f/0xf0
[  292.278570][ T9358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.278581][ T9358] RIP: 0033:0x7f1331d8ff17
[  292.278592][ T9358] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  292.278602][ T9358] RSP: 002b:00007ffddc603f28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  292.278614][ T9358] RAX: 0000000000000000 RBX: 00007f1331e11c05 RCX: 00007f1331d8ff17
[  292.278622][ T9358] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffddc603fe0
[  292.278629][ T9358] RBP: 00007ffddc603fe0 R08: 0000000000000000 R09: 0000000000000000
[  292.278637][ T9358] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffddc605070
[  292.278645][ T9358] R13: 00007f1331e11c05 R14: 00000000000474bc R15: 00007ffddc6050b0
[  292.278667][ T9358]  </TASK>
[  292.278672][ T9358] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  292.293821][ T5951] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  292.296637][ T9358] CPU: 0 UID: 0 PID: 9358 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  292.296655][ T9358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  292.296663][ T9358] Call Trace:
[  292.296668][ T9358]  <TASK>
[  292.296673][ T9358]  dump_stack_lvl+0x189/0x250
[  292.296694][ T9358]  ? __pfx_dump_stack_lvl+0x10/0x10
[  292.296709][ T9358]  ? __pfx_queue_work_on+0x10/0x10
[  292.296722][ T9358]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  292.296737][ T9358]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  292.296761][ T9358]  f2fs_handle_critical_error+0x37c/0x540
[  292.296785][ T9358]  f2fs_write_end_io+0x886/0xb60
[  292.296813][ T9358]  __submit_merged_bio+0x27a/0x6a0
[  292.296827][ T9358]  ? up_write+0x1c4/0x420
[  292.296845][ T9358]  __submit_merged_write_cond+0x44c/0x530
[  292.296868][ T9358]  f2fs_sync_node_pages+0x1479/0x15e0
[  292.296902][ T9358]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  292.296942][ T9358]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  292.296960][ T9358]  ? up_write+0x1c4/0x420
[  292.296971][ T9358]  ? do_raw_spin_unlock+0x4d/0x240
[  292.296988][ T9358]  f2fs_write_checkpoint+0xe6f/0x1df0
[  292.297021][ T9358]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  292.297083][ T9358]  ? kill_f2fs_super+0x298/0x6c0
[  292.297101][ T9358]  kill_f2fs_super+0x2c3/0x6c0
[  292.297118][ T9358]  ? __pfx_kill_f2fs_super+0x10/0x10
[  292.297128][ T9358]  ? radix_tree_delete_item+0x2b6/0x400
[  292.297149][ T9358]  ? shrinker_free+0x2ce/0x3e0
[  292.297166][ T9358]  deactivate_locked_super+0xbc/0x130
[  292.297183][ T9358]  cleanup_mnt+0x425/0x4c0
[  292.297196][ T9358]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.297214][ T9358]  task_work_run+0x1d4/0x260
[  292.297232][ T9358]  ? __pfx_task_work_run+0x10/0x10
[  292.297246][ T9358]  ? __x64_sys_umount+0x122/0x160
[  292.297265][ T9358]  ? exit_to_user_mode_loop+0x40/0x110
[  292.297285][ T9358]  exit_to_user_mode_loop+0xec/0x110
[  292.297301][ T9358]  do_syscall_64+0x2bd/0x3b0
[  292.297316][ T9358]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.297330][ T9358]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.297366][ T9358]  ? exc_page_fault+0x9f/0xf0
[  292.297384][ T9358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.297394][ T9358] RIP: 0033:0x7f1331d8ff17
[  292.297406][ T9358] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  292.297415][ T9358] RSP: 002b:00007ffddc603f28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  292.297429][ T9358] RAX: 0000000000000000 RBX: 00007f1331e11c05 RCX: 00007f1331d8ff17
[  292.297436][ T9358] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffddc603fe0
[  292.297444][ T9358] RBP: 00007ffddc603fe0 R08: 0000000000000000 R09: 0000000000000000
[  292.297451][ T9358] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffddc605070
[  292.297457][ T9358] R13: 00007f1331e11c05 R14: 00000000000474bc R15: 00007ffddc6050b0
[  292.297481][ T9358]  </TASK>
[  292.297487][ T9358] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  292.322006][ T5951] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  292.329989][ T9358] CPU: 0 UID: 0 PID: 9358 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  292.330001][ T9358] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  292.330006][ T9358] Call Trace:
[  292.330009][ T9358]  <TASK>
[  292.330012][ T9358]  dump_stack_lvl+0x189/0x250
[  292.330026][ T9358]  ? __pfx_dump_stack_lvl+0x10/0x10
[  292.330035][ T9358]  ? __pfx_queue_work_on+0x10/0x10
[  292.330042][ T9358]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  292.330051][ T9358]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  292.330065][ T9358]  f2fs_handle_critical_error+0x37c/0x540
[  292.330079][ T9358]  f2fs_write_end_io+0x886/0xb60
[  292.330095][ T9358]  __submit_merged_bio+0x27a/0x6a0
[  292.330106][ T9358]  ? up_write+0x1c4/0x420
[  292.330116][ T9358]  __submit_merged_write_cond+0x44c/0x530
[  292.330129][ T9358]  f2fs_sync_node_pages+0x1479/0x15e0
[  292.330147][ T9358]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  292.330169][ T9358]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  292.330179][ T9358]  ? up_write+0x1c4/0x420
[  292.330185][ T9358]  ? do_raw_spin_unlock+0x4d/0x240
[  292.330199][ T9358]  f2fs_write_checkpoint+0xe6f/0x1df0
[  292.330218][ T9358]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  292.330247][ T9358]  ? kill_f2fs_super+0x298/0x6c0
[  292.330257][ T9358]  kill_f2fs_super+0x2c3/0x6c0
[  292.330266][ T9358]  ? __pfx_kill_f2fs_super+0x10/0x10
[  292.330272][ T9358]  ? radix_tree_delete_item+0x2b6/0x400
[  292.330289][ T9358]  ? shrinker_free+0x2ce/0x3e0
[  292.330304][ T9358]  deactivate_locked_super+0xbc/0x130
[  292.330318][ T9358]  cleanup_mnt+0x425/0x4c0
[  292.330331][ T9358]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.330374][ T9358]  task_work_run+0x1d4/0x260
[  292.330393][ T9358]  ? __pfx_task_work_run+0x10/0x10
[  292.330405][ T9358]  ? __x64_sys_umount+0x122/0x160
[  292.330425][ T9358]  ? exit_to_user_mode_loop+0x40/0x110
[  292.330445][ T9358]  exit_to_user_mode_loop+0xec/0x110
[  292.330462][ T9358]  do_syscall_64+0x2bd/0x3b0
[  292.330478][ T9358]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.330492][ T9358]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.330504][ T9358]  ? exc_page_fault+0x9f/0xf0
[  292.330520][ T9358]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.330531][ T9358] RIP: 0033:0x7f1331d8ff17
[  292.330542][ T9358] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  292.330552][ T9358] RSP: 002b:00007ffddc603f28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  292.330566][ T9358] RAX: 0000000000000000 RBX: 00007f1331e11c05 RCX: 00007f1331d8ff17
[  292.330573][ T9358] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffddc603fe0
[  292.330580][ T9358] RBP: 00007ffddc603fe0 R08: 0000000000000000 R09: 0000000000000000
[  292.330587][ T9358] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffddc605070
[  292.330594][ T9358] R13: 00007f1331e11c05 R14: 00000000000474bc R15: 00007ffddc6050b0
[  292.330618][ T9358]  </TASK>
[  292.330623][ T9358] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  292.377065][T11965] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  292.516846][T11933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  292.646825][T11933] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  292.653820][T11202] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.706465][   T10] usb 7-1: USB disconnect, device number 11
[  292.940873][T11977] loop5: detected capacity change from 0 to 4096
[  292.969306][   T33] audit: type=1800 audit(1755269376.727:44): pid=11977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2170" name="file1" dev="loop5" ino=30 res=0 errno=0
[  292.979594][   T33] audit: type=1800 audit(1755269376.737:45): pid=11977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2170" name="file1" dev="loop5" ino=30 res=0 errno=0
[  292.982872][T11977] ntfs3(loop5): ino=1e, "file1" attr_set_size
[  293.065117][   T47] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  293.223295][   T47] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  293.233813][   T47] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.270094][   T47] usb 8-1: config 0 descriptor??
[  293.440869][T11995] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  293.499277][T11998] futex_wake_op: syz.5.2180 tries to shift op by -1; fix this program
[  294.156629][T12003] loop5: detected capacity change from 0 to 32768
[  294.160697][T12003] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2182 (12003)
[  294.168510][T12003] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  294.172763][T12003] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  294.177082][T12003] BTRFS info (device loop5): using free-space-tree
[  294.268511][T12013] loop6: detected capacity change from 0 to 128
[  294.513989][ T9358] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  294.915573][T12041] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2192'.
[  294.918930][T12041] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2192'.
[  294.922313][T12041] netlink: 'syz.6.2192': attribute type 4 has an invalid length.
[  295.253639][T12046] loop5: detected capacity change from 0 to 4096
[  295.275761][T12046] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  295.283558][T12046] ntfs3(loop5): Failed to load $Extend (-22).
[  295.286572][T12046] ntfs3(loop5): Failed to initialize $Extend.
[  295.450142][   T47] usb 8-1: Cannot set autoneg
[  295.452528][   T47] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  295.459520][   T47] usb 8-1: USB disconnect, device number 7
[  295.662459][T12059] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2199'.
[  296.269782][T12081] loop7: detected capacity change from 0 to 512
[  296.691912][T12099] loop6: detected capacity change from 0 to 4096
[  297.064630][T12106] loop6: detected capacity change from 0 to 1024
[  297.111884][T12106] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  297.133608][T12106] EXT4-fs error (device loop6): ext4_get_first_dir_block:3556: inode #11: comm syz.6.2220: directory missing '..'
[  297.167638][T10160] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.447940][T12125] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  297.939542][T12166] netlink: 'syz.5.2247': attribute type 4 has an invalid length.
[  298.374037][T12183] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2254'.
[  299.101763][T12198] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  299.420453][T12207] loop5: detected capacity change from 0 to 256
[  299.643662][T12207] FAT-fs (loop5): Directory bread(block 64) failed
[  299.649670][T12207] FAT-fs (loop5): Directory bread(block 65) failed
[  299.652672][T12207] FAT-fs (loop5): Directory bread(block 66) failed
[  299.664803][T12207] FAT-fs (loop5): Directory bread(block 67) failed
[  299.683917][T12207] FAT-fs (loop5): Directory bread(block 68) failed
[  299.691198][T12207] FAT-fs (loop5): Directory bread(block 69) failed
[  299.697503][T12207] FAT-fs (loop5): Directory bread(block 70) failed
[  299.700458][T12207] FAT-fs (loop5): Directory bread(block 71) failed
[  299.703751][T12207] FAT-fs (loop5): Directory bread(block 72) failed
[  299.715205][T12207] FAT-fs (loop5): Directory bread(block 73) failed
[  299.992552][T12213] netlink: 64535 bytes leftover after parsing attributes in process `syz.5.2267'.
[  300.198232][T12219] loop7: detected capacity change from 0 to 2048
[  300.586881][T12217] loop6: detected capacity change from 0 to 32768
[  300.598957][T12217] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  300.616003][T12217] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  300.627992][T12217] XFS (loop6): Ending clean mount
[  300.669400][T10160] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  300.863543][T12246] loop7: detected capacity change from 0 to 512
[  300.878671][T12246] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  300.894788][T12246] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.2279: invalid indirect mapped block 2683928664 (level 1)
[  300.905977][T12246] EXT4-fs (loop7): 1 truncate cleaned up
[  300.918693][T12246] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  300.928422][T12246] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.2279: Invalid block bitmap block 3 in block_group 0
[  300.956813][T11202] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.055403][T12255] loop7: detected capacity change from 0 to 1024
[  301.064304][T12255] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  301.162514][T11202] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.225131][T12260] loop5: detected capacity change from 0 to 512
[  301.231256][T12260] EXT4-fs: Ignoring removed mblk_io_submit option
[  301.246589][T12260] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  301.259977][T12260] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  301.264065][T12260] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  301.284654][ T9358] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.447422][ T5404] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  301.607045][ T5404] usb 7-1: Using ep0 maxpacket: 32
[  301.610882][ T5404] usb 7-1: config index 0 descriptor too short (expected 35577, got 27)
[  301.614472][ T5404] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  301.618301][ T5404] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  301.622508][ T5404] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92
[  301.629887][ T5404] usb 7-1: config 1 has no interface number 0
[  301.634828][ T5404] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  301.638957][ T5404] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.650775][T12288] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2297'.
[  301.655944][T12288] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2297'.
[  301.659957][ T5404] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found
[  301.862262][ T5404] snd_usb_pod 7-1:1.1: endpoint not available, using fallback values
[  301.869903][ T5404] snd_usb_pod 7-1:1.1: invalid control EP
[  301.872353][ T5404] snd_usb_pod 7-1:1.1: cannot start listening: -22
[  301.875794][ T5404] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected
[  301.879322][ T5404] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -22
[  302.009554][T12296] loop7: detected capacity change from 0 to 32768
[  302.014095][T12296] bcachefs (/dev/loop7): error validating superblock: Invalid superblock section clean: entry type clock overruns end of section
[  302.014095][T12296] clean (size 2912):
[  302.014095][T12296] flags:          0
[  302.014095][T12296] journal_seq:    10
[  302.014095][T12296] dev_usage: 
[  302.014095][T12296] usage: type=key_version v=0
[  302.014095][T12296] (unknown jset_entry_type 255)
[  302.014095][T12296] usage: type=reserved v=0
[  302.014095][T12296] usage: type=reserved v=0
[  302.014095][T12296] usage: type=reserved v=0
[  302.014095][T12296] data_usage: btree: 1/1 [0]=2816
[  302.014095][T12296] data_usage: journal: 1/1 [0]=0
[  302.014095][T12296] data_usage: user: 1/1 [0]=16
[  302.014095][T12296] dev_usage: dev=0  
[  302.014095][T12296]   free: buckets=83 sectors=0 fragmented=0
[  302.014095][T12296]   sb: buckets=25 sectors=6152 fragmented=248
[  302.014095][T12296]   journal: buckets=8 sectors=2048 fragmented=0
[  302.014095][T12296]   btree: buckets=11 sectors=2816 fragmented=0
[  302.014095][T12296]   user: buckets=1 sectors=16 fragmented=240
[  302.014095][T12296]   cached: buckets=0 sectors=0 fragmented=0
[  302.014095][T12296]   parity: buckets=0 sectors=0 fragmented=0
[  302.014095][T12296]   stripe: buckets=0 sectors=0 fragmented=0
[  302.014095][T12296]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  302.014095][T12296]   need_discard: buckets=0 sectors=0 fragmented=0
[  302.014095][T12296] 
[  302.066988][T12296] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  302.084058][  T793] usb 7-1: USB disconnect, device number 12
[  302.329188][T12304] tipc: Started in network mode
[  302.331207][T12304] tipc: Node identity ac14140f, cluster identity 4711
[  302.334061][T12304] tipc: New replicast peer: 255.255.255.255
[  302.336993][T12304] tipc: Enabled bearer <udp:s>, priority 10
[  302.370128][T12306] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2305'.
[  302.438698][T12312] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  302.656345][ T5404] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  302.815181][ T5404] usb 6-1: Using ep0 maxpacket: 8
[  302.833488][ T5404] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  302.837648][ T5404] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.841406][ T5404] usb 6-1: Product: syz
[  302.844760][ T5404] usb 6-1: Manufacturer: syz
[  302.847770][T12325] netlink: 'syz.6.2314': attribute type 1 has an invalid length.
[  302.848237][ T5404] usb 6-1: SerialNumber: syz
[  302.854367][T12325] netlink: 'syz.6.2314': attribute type 4 has an invalid length.
[  302.856665][ T5404] usb 6-1: config 0 descriptor??
[  302.862044][T12325] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.2314'.
[  302.944393][T12327] netlink: 'syz.6.2315': attribute type 11 has an invalid length.
[  302.954147][T12327] netlink: 149476 bytes leftover after parsing attributes in process `syz.6.2315'.
[  303.010372][T12326] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.100168][ T5404] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  303.178592][T12333] netlink: 'syz.6.2318': attribute type 12 has an invalid length.
[  303.189635][T12333] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2318'.
[  303.243997][T12335] macsec1: entered promiscuous mode
[  303.249830][T12335] macsec1: entered allmulticast mode
[  303.352454][T12337] loop6: detected capacity change from 0 to 128
[  303.374061][T12337] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  303.423872][T12337] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  303.457775][  T793] tipc: Node number set to 2886997007
[  303.513899][ T5404] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  303.540855][ T5404] usb 6-1: USB disconnect, device number 18
[  303.978165][T12347] loop7: detected capacity change from 0 to 512
[  304.434964][T11463] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  304.584965][T11463] usb 7-1: Using ep0 maxpacket: 8
[  304.588793][T11463] usb 7-1: config 8 has an invalid interface number: 49 but max is 0
[  304.592073][T11463] usb 7-1: config 8 has no interface number 0
[  304.594421][T11463] usb 7-1: config 8 interface 49 has no altsetting 0
[  304.599424][T11463] usb 7-1: New USB device found, idVendor=05ac, idProduct=d551, bcdDevice=df.20
[  304.603077][T11463] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.606952][T11463] usb 7-1: Product: syz
[  304.608712][T11463] usb 7-1: Manufacturer: syz
[  304.610629][T11463] usb 7-1: SerialNumber: syz
[  304.621326][ T5404] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  304.777424][ T5404] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  304.781185][ T5404] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.786740][ T5404] usb 6-1: config 0 descriptor??
[  304.791038][ T5404] cp210x 6-1:0.0: cp210x converter detected
[  304.824761][T11463] ipheth 7-1:8.49: Unable to find alternate settings interface
[  304.834371][T11463] usb 7-1: USB disconnect, device number 13
[  304.930551][T12383] loop7: detected capacity change from 0 to 256
[  304.950847][T12383] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x18b10316, utbl_chksum : 0xe619d30d)
[  304.959997][T12383] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  304.971424][   T33] audit: type=1800 audit(1755269388.727:46): pid=12383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2337" name="file2" dev="loop7" ino=1048740 res=0 errno=0
[  305.193396][ T5404] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  305.205390][ T5404] usb 6-1: cp210x converter now attached to ttyUSB0
[  305.278505][T12387] loop7: detected capacity change from 0 to 40427
[  305.288582][T12387] F2FS-fs (loop7): Image doesn't support compression
[  305.295192][T12387] F2FS-fs (loop7): build fault injection rate: 690
[  305.299331][T12387] F2FS-fs (loop7): invalid crc value
[  305.360801][T12387] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  305.366655][T12387] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  305.403717][T11463] usb 6-1: USB disconnect, device number 19
[  305.425513][T11463] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  305.436710][T11463] cp210x 6-1:0.0: device disconnected
[  305.509019][T12396] netlink: 'syz.6.2343': attribute type 1 has an invalid length.
[  305.536400][T12396] bond1: entered promiscuous mode
[  305.538688][T12396] bond1: entered allmulticast mode
[  305.541720][T12396] 8021q: adding VLAN 0 to HW filter on device bond1
[  305.585868][T12396] bridge1: entered promiscuous mode
[  305.587921][T12396] bridge1: entered allmulticast mode
[  305.590879][T12396] bond1: (slave bridge1): Enslaving as a backup interface with an up link
[  305.654475][ T5918] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  305.796824][   T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  305.818102][T12410] loop6: detected capacity change from 0 to 2048
[  305.843900][T12410] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  305.851921][T12410] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  305.888869][T10160] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.071681][T12415] loop6: detected capacity change from 0 to 32768
[  306.850388][T12431] loop7: detected capacity change from 0 to 256
[  307.650087][T12446] loop6: detected capacity change from 0 to 256
[  307.680797][T12446] FAT-fs (loop6): Directory bread(block 64) failed
[  307.683018][T12446] FAT-fs (loop6): Directory bread(block 65) failed
[  307.685934][T12446] FAT-fs (loop6): Directory bread(block 66) failed
[  307.700444][T12446] FAT-fs (loop6): Directory bread(block 67) failed
[  307.702748][T12446] FAT-fs (loop6): Directory bread(block 68) failed
[  307.715244][T12446] FAT-fs (loop6): Directory bread(block 69) failed
[  307.717990][T12446] FAT-fs (loop6): Directory bread(block 70) failed
[  307.720696][T12446] FAT-fs (loop6): Directory bread(block 71) failed
[  307.723832][T12446] FAT-fs (loop6): Directory bread(block 72) failed
[  307.735337][T12446] FAT-fs (loop6): Directory bread(block 73) failed
[  307.740378][T12454] loop5: detected capacity change from 0 to 512
[  307.782135][T12454] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  307.813061][ T9358] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  307.920471][T12470] loop5: detected capacity change from 0 to 256
[  307.975796][T12473] netlink: 260 bytes leftover after parsing attributes in process `syz.7.2375'.
[  308.032333][T12475] loop5: detected capacity change from 0 to 4096
[  308.067827][T12475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  308.102146][ T9358] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.415058][ T5951] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  308.765039][ T5951] usb 8-1: Using ep0 maxpacket: 32
[  308.769445][ T5951] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  308.774613][ T5951] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  308.779933][ T5951] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  308.790597][ T5951] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  308.798479][ T5951] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  308.806507][ T5951] usb 8-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  308.810506][ T5951] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.814088][ T5951] usb 8-1: Product: syz
[  308.820040][ T5951] usb 8-1: Manufacturer: syz
[  308.822194][ T5951] usb 8-1: SerialNumber: syz
[  308.830412][ T5951] usb 8-1: config 0 descriptor??
[  309.011749][T12491] loop6: detected capacity change from 0 to 2048
[  309.061446][T12473] loop7: detected capacity change from 0 to 256
[  309.093312][T12473] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  309.106508][T12491] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  309.111794][T12491] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.178515][T12473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  309.186126][T12491] loop6: detected capacity change from 2048 to 64
[  309.188749][T12473] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  309.286537][T10160] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.397002][T12492] kmmpd-loop6: attempt to access beyond end of device
[  309.397002][T12492] loop6: rw=14337, sector=512, nr_sectors = 8 limit=64
[  309.402082][T12492] buffer_io_error: 11 callbacks suppressed
[  309.402096][T12492] Buffer I/O error on dev loop6, logical block 64, lost sync page write
[  309.422171][ T5951] iforce 8-1:0.0: usb_submit_urb failed: -32
[  309.584118][T12499] futex_wake_op: syz.5.2383 tries to shift op by 32; fix this program
[  309.764242][ T5951] iforce 8-1:0.0: usb_submit_urb failed: -71
[  309.776654][ T5951] iforce 8-1:0.0: usb_submit_urb failed: -71
[  309.808665][ T5951] iforce 8-1:0.0: usb_submit_urb failed: -71
[  309.834368][ T5951] iforce 8-1:0.0: usb_submit_urb failed: -71
[  309.848557][ T5951] iforce 8-1:0.0: usb_submit_urb failed: -71
[  309.852335][ T5951] iforce 8-1:0.0: usb_submit_urb failed: -71
[  309.860983][ T5951] iforce 8-1:0.0: usb_submit_urb failed: -71
[  309.879869][ T5951] iforce 8-1:0.0: usb_submit_urb failed: -71
[  309.888492][ T5951] iforce 8-1:0.0: usb_submit_urb failed: -71
[  309.897472][ T5951] iforce 8-1:0.0: usb_submit_urb failed: -71
[  309.901401][ T5951] iforce 8-1:0.0: usb_submit_urb failed: -71
[  309.910602][ T5951] iforce 8-1:0.0: usb_submit_urb failed: -71
[  309.917357][ T5951] iforce 8-1:0.0: usb_submit_urb failed: -71
[  309.920838][ T5951] iforce 8-1:0.0: usb_submit_urb failed: -71
[  309.924363][ T5951] iforce 8-1:0.0: usb_submit_urb failed: -71
[  309.935400][ T5951] iforce 8-1:0.0: usb_submit_urb failed: -71
[  309.941572][ T5951] iforce 8-1:0.0: usb_submit_urb failed: -71
[  309.954075][ T5951] input input19: Timeout waiting for response from device.
[  309.981935][ T5951] usb 8-1: USB disconnect, device number 8
[  311.475342][T12505] loop7: detected capacity change from 0 to 8
[  311.493703][T12505] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  311.687112][   T10] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  311.717583][   T10] hid-generic 0000:0000:0000.0018: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  311.719606][ T5926] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  311.728511][ T5926] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  311.733404][ T5926] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  311.753335][ T5926] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  311.762949][ T5926] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  311.836180][T12512] cramfs: Error -3 while decompressing!
[  311.838894][T12512] cramfs: ffffffff99bf0628(26)->ffff88811cbca000(4096)
[  311.841883][T12512] cramfs: Error -3 while decompressing!
[  311.843897][T12512] cramfs: ffffffff99bf0642(26)->ffff88811cbcb000(4096)
[  311.846673][T12512] cramfs: Error -3 while decompressing!
[  311.848808][T12512] cramfs: ffffffff99bf065c(16)->ffff88811db78000(4096)
[  311.851350][T12512] cramfs: Error -3 while decompressing!
[  311.853685][T12512] cramfs: ffffffff99bf0628(26)->ffff88811cbca000(4096)
[  312.259414][T12510] chnl_net:caif_netlink_parms(): no params data found
[  312.468296][T12510] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.475383][T12510] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.477630][T12510] bridge_slave_0: entered allmulticast mode
[  312.480295][T12510] bridge_slave_0: entered promiscuous mode
[  312.483541][T12510] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.488271][T12510] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.491000][T12510] bridge_slave_1: entered allmulticast mode
[  312.495026][ T5404] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  312.507689][T12510] bridge_slave_1: entered promiscuous mode
[  312.548469][T12510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  312.560512][T12510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  312.614100][T12510] team0: Port device team_slave_0 added
[  312.629039][T12510] team0: Port device team_slave_1 added
[  312.654712][ T5404] usb 6-1: unable to get BOS descriptor or descriptor too short
[  312.661107][ T5404] usb 6-1: config 8 has an invalid interface number: 43 but max is 0
[  312.664816][ T5404] usb 6-1: config 8 has no interface number 0
[  312.671414][ T5404] usb 6-1: config 8 interface 43 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 64
[  312.698643][ T5404] usb 6-1: config 8 interface 43 has no altsetting 0
[  312.707062][ T5404] usb 6-1: New USB device found, idVendor=0582, idProduct=935b, bcdDevice=be.6c
[  312.709455][T12535] loop7: detected capacity change from 0 to 512
[  312.716839][T12535] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  312.723491][T12510] batman_adv: batadv0: Adding interface: batadv_slave_0
[  312.730496][ T5404] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.734073][T12510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.734461][T12535] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[  312.749552][ T5404] usb 6-1: Product: syz
[  312.752605][T12535] EXT4-fs (loop7): orphan cleanup on readonly fs
[  312.756828][T12535] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2398: bg 0: block 361: padding at end of block bitmap is not set
[  312.760452][ T5404] usb 6-1: Manufacturer: syz
[  312.767129][ T5404] usb 6-1: SerialNumber: syz
[  312.774008][T12535] EXT4-fs (loop7): Remounting filesystem read-only
[  312.776352][T12510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  312.777013][T12518] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  312.784517][T12510] batman_adv: batadv0: Adding interface: batadv_slave_1
[  312.787051][T12535] EXT4-fs (loop7): 1 truncate cleaned up
[  312.788249][T12510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  312.791174][T12535] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  312.804997][T12510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  312.908645][T12510] hsr_slave_0: entered promiscuous mode
[  312.913127][T12510] hsr_slave_1: entered promiscuous mode
[  312.923173][T12510] debugfs: 'hsr0' already exists in 'hsr'
[  312.926446][T12510] Cannot create hsr debugfs directory
[  313.046740][ T5404] usb 6-1: USB disconnect, device number 20
[  313.139476][T12538] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.2398: dx entry: limit 0 != root limit 125
[  313.145261][T12538] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.2398: Corrupt directory, running e2fsck is recommended
[  313.154361][T12538] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.2398: dx entry: limit 0 != root limit 125
[  313.160430][T12538] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.2398: Corrupt directory, running e2fsck is recommended
[  313.169272][T12538] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.2398: dx entry: limit 0 != root limit 125
[  313.174673][T12538] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.2398: Corrupt directory, running e2fsck is recommended
[  313.185274][T12538] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.2398: dx entry: limit 0 != root limit 125
[  313.190403][T12538] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.2398: Corrupt directory, running e2fsck is recommended
[  313.399827][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:8.43/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  313.462139][T11202] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  313.654243][T12510] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  313.666742][T12510] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  313.677306][T12510] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  313.683377][T12510] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  313.768687][T12510] 8021q: adding VLAN 0 to HW filter on device bond0
[  313.773648][T12542] loop7: detected capacity change from 0 to 32768
[  313.780889][T12542] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2400 (12542)
[  313.791377][ T5926] Bluetooth: hci3: command tx timeout
[  313.798725][T12542] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  313.802590][T12542] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm
[  313.806774][T12510] 8021q: adding VLAN 0 to HW filter on device team0
[  313.817615][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  313.820675][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  313.824013][T12542] BTRFS info (device loop7): using free-space-tree
[  313.848502][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.851356][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  314.103602][T12571] binder: 12570:12571 unknown command 0
[  314.137071][T12571] binder: 12570:12571 ioctl c0306201 2000000003c0 returned -22
[  314.160791][T11202] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  314.236786][T12510] 8021q: adding VLAN 0 to HW filter on device batadv0
[  314.297291][T12576] tmpfs: Bad value for 'mpol'
[  314.569412][T12510] veth0_vlan: entered promiscuous mode
[  314.593997][T12510] veth1_vlan: entered promiscuous mode
[  314.860626][T12510] veth0_macvtap: entered promiscuous mode
[  314.873548][T12510] veth1_macvtap: entered promiscuous mode
[  314.886220][T12593] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2408'.
[  314.898726][T12510] batman_adv: batadv0: Interface activated: batadv_slave_0
[  314.904256][T12510] batman_adv: batadv0: Interface activated: batadv_slave_1
[  314.923981][ T5918] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  314.927902][ T5918] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  314.938527][ T5918] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  314.948799][ T5918] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  315.010259][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.012823][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.031422][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  315.034344][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  315.202422][T12597] loop7: detected capacity change from 0 to 32768
[  315.213637][T12605] loop8: detected capacity change from 0 to 2048
[  315.214462][T12597] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  315.234122][T12597] XFS (loop7): Ending clean mount
[  315.287716][T11202] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  315.300001][T12605] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  315.421268][T12510] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.490723][T12620] loop8: detected capacity change from 0 to 256
[  315.499905][T12620] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  315.606881][T11463] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  315.765517][T12635] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2421'.
[  315.770078][T11463] usb 6-1: Using ep0 maxpacket: 16
[  315.793108][T11463] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  315.798766][T11463] usb 6-1: config 0 has no interface number 0
[  315.801493][T11463] usb 6-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  315.826000][T11463] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  315.849197][T11463] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  315.853069][T11463] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  315.865827][ T5926] Bluetooth: hci3: command tx timeout
[  315.873472][T11463] usb 6-1: Product: syz
[  315.878528][T11463] usb 6-1: SerialNumber: syz
[  315.896084][T11463] usb 6-1: config 0 descriptor??
[  315.921499][T11463] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input20
[  316.141055][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[  316.141205][  T792] usb 6-1: USB disconnect, device number 21
[  316.144207][    C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  316.178970][  T792] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  316.909576][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  316.912293][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  317.003751][T12643] loop5: detected capacity change from 0 to 256
[  317.073102][T12645] netlink: 'syz.8.2426': attribute type 1 has an invalid length.
[  317.090176][T12645] netlink: 'syz.8.2426': attribute type 2 has an invalid length.
[  317.322633][T12657] netlink: 'syz.5.2432': attribute type 15 has an invalid length.
[  317.331369][T12657] netlink: 666 bytes leftover after parsing attributes in process `syz.5.2432'.
[  317.945047][ T5926] Bluetooth: hci3: command tx timeout
[  318.094694][T12690] loop8: detected capacity change from 0 to 4096
[  318.100686][T12690] ntfs3(loop8): try to read out of volume at offset 0x3fffffc0c00
[  318.104029][T12690] ntfs3(loop8): try to read out of volume at offset 0x3fffffc0c00
[  318.108588][T12690] ntfs3(loop8): try to read out of volume at offset 0x3fffffc0c00
[  318.111925][T12690] ntfs3(loop8): try to read out of volume at offset 0x3fffffc0c00
[  318.118414][T12690] ntfs3(loop8): try to read out of volume at offset 0x3fffffc1c00
[  318.121922][T12690] ntfs3(loop8): try to read out of volume at offset 0x3fffffc2c00
[  318.125741][T12690] ntfs3(loop8): try to read out of volume at offset 0x3fffffc4c00
[  318.129183][T12690] ntfs3(loop8): try to read out of volume at offset 0x3fffffc8c00
[  318.132634][T12690] ntfs3(loop8): try to read out of volume at offset 0x3fffffd0c00
[  318.137924][T12690] ntfs3(loop8): try to read out of volume at offset 0x3fffffe0c00
[  318.595165][ T8425] hid-generic 00A0:0006:0003.0019: unknown main item tag 0x0
[  318.608968][ T8425] hid-generic 00A0:0006:0003.0019: unknown main item tag 0x0
[  318.612312][ T8425] hid-generic 00A0:0006:0003.0019: unknown main item tag 0x0
[  318.619240][ T8425] hid-generic 00A0:0006:0003.0019: unknown main item tag 0x0
[  318.622558][ T8425] hid-generic 00A0:0006:0003.0019: unknown main item tag 0x0
[  318.630906][ T8425] hid-generic 00A0:0006:0003.0019: unknown main item tag 0x0
[  318.634234][ T8425] hid-generic 00A0:0006:0003.0019: unknown main item tag 0x0
[  318.639317][ T8425] hid-generic 00A0:0006:0003.0019: unknown main item tag 0x0
[  318.642554][ T8425] hid-generic 00A0:0006:0003.0019: unknown main item tag 0x0
[  318.650940][ T8425] hid-generic 00A0:0006:0003.0019: unknown main item tag 0x0
[  318.657316][ T8425] hid-generic 00A0:0006:0003.0019: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[  318.720039][T12689] loop5: detected capacity change from 0 to 131072
[  318.725418][T12689] F2FS-fs (loop5): invalid crc value
[  318.767837][T12689] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  318.772455][T12689] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  318.865068][  T793] usb 8-1: new full-speed USB device number 9 using dummy_hcd
[  318.904444][T12716] loop8: detected capacity change from 0 to 1024
[  318.909441][T12716] EXT4-fs: Ignoring removed nobh option
[  318.911674][T12716] EXT4-fs: inline encryption not supported
[  318.931573][T12716] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  318.956029][T12716] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.2458: Allocating blocks 385-513 which overlap fs metadata
[  318.962497][T12716] EXT4-fs (loop8): pa ffff88801dde6658: logic 16, phys. 129, len 24
[  318.965412][T12716] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  318.976867][T12716] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28
[  318.981484][T12716] EXT4-fs (loop8): This should not happen!! Data will be lost
[  318.981484][T12716] 
[  318.984704][T12716] EXT4-fs (loop8): Total free blocks count 0
[  318.987502][ T5926] Bluetooth: hci0: command 0x0406 tx timeout
[  318.990463][T12716] EXT4-fs (loop8): Free/Dirty block details
[  318.992430][T12716] EXT4-fs (loop8): free_blocks=128
[  318.994408][T12716] EXT4-fs (loop8): dirty_blocks=0
[  318.996758][T12716] EXT4-fs (loop8): Block reservation details
[  318.998969][T12716] EXT4-fs (loop8): i_reserved_data_blocks=0
[  319.064949][  T793] usb 8-1: config 0 has no interfaces?
[  319.067706][  T793] usb 8-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00
[  319.070761][  T793] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.098931][  T793] usb 8-1: config 0 descriptor??
[  319.280367][T12723] loop8: detected capacity change from 0 to 2048
[  319.287487][T12723] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  319.318417][ T5404] usb 8-1: USB disconnect, device number 9
[  319.900744][T12732] loop8: detected capacity change from 0 to 32768
[  320.033513][   T55] Bluetooth: hci3: command tx timeout
[  320.104022][T12732] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  320.104044][T12732]   allowing incompatible features above 0.0: (unknown version)
[  320.104052][T12732]   features: 
[  320.167161][T12732] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0
[  320.179638][T12732] bcachefs (loop8): initializing new filesystem
[  320.209999][T12732] bcachefs (loop8): going read-write
[  320.239108][T12732] bcachefs (loop8): marking superblocks
[  320.252471][T12749] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2466'.
[  320.261987][T12732] bcachefs (loop8): initializing freespace
[  320.274738][T12732] bcachefs (loop8): done initializing freespace
[  320.278679][T12732] bcachefs (loop8): reading snapshots table
[  320.280667][T12732] bcachefs (loop8): reading snapshots done
[  320.316751][T12732] bcachefs (loop8): done starting filesystem
[  320.339230][   T33] audit: type=1800 audit(1755269404.097:47): pid=12732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2463" name="file1" dev="loop8" ino=4098 res=0 errno=0
[  320.400248][T12510] bcachefs (loop8): shutting down
[  320.402147][T12510] bcachefs (loop8): going read-only
[  320.404299][T12510] bcachefs (loop8): finished waiting for writes to stop
[  320.417837][T12510] bcachefs (loop8): flushing journal and stopping allocators, journal seq 2
[  320.473266][T12510] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 3
[  320.479854][T12510] bcachefs (loop8): clean shutdown complete, journal seq 4
[  320.483437][T12510] bcachefs (loop8): marking filesystem clean
[  320.538951][T12510] bcachefs (loop8): shutdown complete
[  320.551976][T12760] ieee802154 phy0 wpan0: encryption failed: -22
[  321.284977][  T792] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  321.437663][  T792] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  321.441761][  T792] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  321.446188][  T792] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  321.449311][  T792] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  321.454043][  T792] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  321.457537][  T792] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.465413][  T792] usb 8-1: config 0 descriptor??
[  321.883847][  T792] plantronics 0003:047F:FFFF.001A: ignoring exceeding usage max
[  321.901515][  T792] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  322.086000][   T47] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  322.324987][   T47] usb 6-1: Using ep0 maxpacket: 32
[  322.330202][   T47] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  322.333548][   T47] usb 6-1: config 0 has no interface number 0
[  322.338510][   T47] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  322.350263][   T47] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  322.354371][   T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.358969][   T47] usb 6-1: Product: syz
[  322.360957][   T47] usb 6-1: Manufacturer: syz
[  322.363250][   T47] usb 6-1: SerialNumber: syz
[  322.427183][   T47] usb 6-1: config 0 descriptor??
[  322.456309][   T47] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  322.460634][   T47] em28xx 6-1:0.132: Video interface 132 found:
[  322.889581][   T47] em28xx 6-1:0.132: unknown em28xx chip ID (0)
[  323.231617][T12785] loop8: detected capacity change from 0 to 1024
[  323.299713][   T47] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[  323.331529][   T47] em28xx 6-1:0.132: board has no eeprom
[  323.359185][T12789] loop8: detected capacity change from 0 to 512
[  323.362661][T12789] EXT4-fs: Ignoring removed nomblk_io_submit option
[  323.376771][T12789] EXT4-fs (loop8): filesystem is read-only
[  323.382555][T12789] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  323.390603][T12789] EXT4-fs (loop8): filesystem is read-only
[  323.393155][T12789] EXT4-fs (loop8): orphan cleanup on readonly fs
[  323.396834][T12789] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #16: comm syz.8.2483: iget: bad i_size value: 648518346341360424
[  323.403296][T12789] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.2483: couldn't read orphan inode 16 (err -117)
[  323.412471][T12789] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  323.425979][   T47] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  323.432465][   T47] em28xx 6-1:0.132: analog set to bulk mode.
[  323.442454][  T792] em28xx 6-1:0.132: Registering V4L2 extension
[  323.442845][T12510] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.552628][  T792] em28xx 6-1:0.132: failed to trigger read from i2c address 0x4a (error=-5)
[  323.557306][   T47] usb 6-1: USB disconnect, device number 22
[  323.559434][  T792] em28xx 6-1:0.132: failed to trigger read from i2c address 0x48 (error=-19)
[  323.565625][T12794] vivid-000: disconnect
[  323.565827][   T47] em28xx 6-1:0.132: Disconnecting em28xx
[  323.571468][T12792] vivid-000: reconnect
[  323.623528][  T792] em28xx 6-1:0.132: Config register raw data: 0xffffffed
[  323.629087][  T792] em28xx 6-1:0.132: AC97 chip type couldn't be determined
[  323.631994][  T792] em28xx 6-1:0.132: No AC97 audio processor
[  323.646335][  T792] usb 6-1: Decoder not found
[  323.648327][  T792] em28xx 6-1:0.132: failed to create media graph
[  323.650886][  T792] em28xx 6-1:0.132: V4L2 device video103 deregistered
[  323.659384][  T792] em28xx 6-1:0.132: Remote control support is not available for this card.
[  323.664409][   T47] em28xx 6-1:0.132: Closing input extension
[  323.706479][   T47] em28xx 6-1:0.132: Freeing device
[  323.857974][T12807] loop7: detected capacity change from 0 to 736
[  323.901836][T12805] loop8: detected capacity change from 0 to 32768
[  323.904668][T12805] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2487 (12805)
[  323.911472][T12805] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  323.915341][T12805] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[  323.918609][T12805] BTRFS info (device loop8): using free-space-tree
[  323.988253][T11463] usb 8-1: USB disconnect, device number 10
[  324.673314][T12827] loop7: detected capacity change from 0 to 32768
[  324.696620][T12827] BTRFS info: device /dev/loop7 (7:7) using temp-fsid 3c15964b-a062-4053-a775-6e184a570570
[  324.726796][T12827] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2491 (12827)
[  324.773208][T12510] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  324.822823][T12827] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  324.840552][T12827] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  324.977605][T12859] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2499'.
[  325.061699][T12827] BTRFS info (device loop7): rebuilding free space tree
[  325.124380][T12827] BTRFS info (device loop7): disabling free space tree
[  325.145133][T12827] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  325.167030][T12827] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  325.247782][T12867] netlink: 'syz.8.2501': attribute type 5 has an invalid length.
[  325.308857][T11202] BTRFS info (device loop7): last unmount of filesystem 3c15964b-a062-4053-a775-6e184a570570
[  325.400766][T12840] loop5: detected capacity change from 0 to 32768
[  325.451888][T12840] JBD2: Ignoring recovery information on journal
[  325.502217][T12840] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  325.629864][ T9358] ocfs2: Unmounting device (7,5) on (node local)
[  325.838691][   T33] audit: type=1326 audit(1755269409.577:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12886 comm="syz.8.2511" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2865f8ebe9 code=0x0
[  326.094707][T12896] loop7: detected capacity change from 0 to 32768
[  326.098049][T12896] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2514 (12896)
[  326.154727][T12896] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  326.160822][T12896] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  326.163764][T12896] BTRFS info (device loop7): using free-space-tree
[  326.490813][   T47] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  326.691138][T11202] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  326.729916][   T47] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  326.745469][   T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.756111][   T47] usb 6-1: config 0 descriptor??
[  326.940787][  T792] IPVS: starting estimator thread 0...
[  326.944777][T12925] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  326.971144][   T47] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  327.046614][T12929] IPVS: using max 81 ests per chain, 194400 per kthread
[  327.146198][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  327.173220][   T47] [drm:udl_init] *ERROR* Selecting channel failed
[  327.220282][   T47] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 3
[  327.230484][   T47] [drm] Initialized udl on minor 3
[  327.249285][   T47] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  327.270195][   T47] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  327.289055][   T47] usb 6-1: USB disconnect, device number 23
[  327.291752][  T792] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  327.295339][ T5404] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  327.298637][ T5404] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  327.458356][  T792] usb 9-1: config index 0 descriptor too short (expected 4114, got 18)
[  327.464309][  T792] usb 9-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.09
[  327.468227][  T792] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.471516][  T792] usb 9-1: Product: syz
[  327.473437][  T792] usb 9-1: Manufacturer: syz
[  327.476299][  T792] usb 9-1: SerialNumber: syz
[  327.481006][  T792] usb 9-1: config 0 descriptor??
[  327.694395][  T792] usb 9-1: USB disconnect, device number 2
[  327.878444][T12956] netlink: 'syz.5.2532': attribute type 10 has an invalid length.
[  327.891748][T12956] veth0_vlan: left promiscuous mode
[  327.897500][T12956] veth0_vlan: entered promiscuous mode
[  327.906038][T12956] team0: Device veth0_vlan failed to register rx_handler
[  328.285753][T12967] misc userio: Can't change port type on an already running userio instance
[  328.353761][T12973] loop9: detected capacity change from 0 to 3
[  328.487710][T12985] loop8: detected capacity change from 0 to 256
[  328.515107][T12985] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x1a371bfb, utbl_chksum : 0xe619d30d)
[  328.519968][T12984] loop7: detected capacity change from 0 to 8192
[  328.608178][T12987] loop8: detected capacity change from 0 to 4096
[  328.614164][T12987] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[  328.631042][T12987] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  328.637495][T12987] ntfs3(loop8): ino=19, mi_enum_attr
[  328.663516][T12987] ntfs3(loop8): failed to convert "c46c" to cp863
[  328.675784][T12987] ntfs3(loop8): ino=20, mi_enum_attr
[  328.690152][T12991] loop7: detected capacity change from 0 to 1024
[  328.702488][T12991] hfsplus: b-tree write err: -5, ino 4
[  329.068544][T11463] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  329.260934][T11463] usb 8-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  329.264608][T11463] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.285336][T11463] usb 8-1: config 0 descriptor??
[  329.521839][T11463] kaweth 8-1:0.0: Firmware present in device.
[  329.716179][T11463] kaweth 8-1:0.0: Statistics collection: 0
[  329.718492][T11463] kaweth 8-1:0.0: Multicast filter limit: 0
[  329.720969][T11463] kaweth 8-1:0.0: MTU: 0
[  329.722791][T11463] kaweth 8-1:0.0: Read MAC address 00:00:00:00:00:00
[  330.374686][T11463] kaweth 8-1:0.0: kaweth interface created at eth17
[  330.377449][   T47] usb 9-1: new full-speed USB device number 3 using dummy_hcd
[  330.530631][   T47] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  330.534947][   T47] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  330.539591][   T47] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  330.544002][   T47] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 232, setting to 64
[  330.549980][   T47] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  330.557863][   T47] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  330.564942][   T47] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.568239][   T47] usb 9-1: Product: syz
[  330.569970][   T47] usb 9-1: Manufacturer: syz
[  330.571544][T11463] usb 8-1: USB disconnect, device number 11
[  330.571859][   T47] usb 9-1: SerialNumber: syz
[  330.583364][   T47] usb 9-1: config 0 descriptor??
[  330.587477][T13006] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  330.599384][   T47] input: KB Gear Tablet as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input21
[  330.812437][T11463] usb 9-1: USB disconnect, device number 3
[  331.361542][T13023] netlink: 4280 bytes leftover after parsing attributes in process `syz.7.2557'.
[  331.365944][T13023] netlink: 4280 bytes leftover after parsing attributes in process `syz.7.2557'.
[  331.671388][T13026] loop8: detected capacity change from 0 to 256
[  331.706708][T11463] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  331.731699][T13028] loop8: detected capacity change from 0 to 16
[  331.736573][T13028] erofs (device loop8): negative i_size @ nid 36
[  331.791114][T13030] vlan2: entered promiscuous mode
[  331.793056][T13030] macvtap0: entered promiscuous mode
[  331.859081][T11463] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  331.871463][T11463] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  331.884305][T11463] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  331.895689][T11463] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  331.899585][T13036] netlink: 'syz.8.2564': attribute type 10 has an invalid length.
[  331.903243][T11463] usb 6-1: Manufacturer: syz
[  331.912953][T11463] usb 6-1: config 0 descriptor??
[  331.926208][T13036] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[  331.932946][T13036] team0: Failed to send options change via netlink (err -105)
[  331.937759][T13036] team0: Port device netdevsim0 added
[  331.979795][T11463] rc_core: IR keymap rc-hauppauge not found
[  331.982265][T11463] Registered IR keymap rc-empty
[  331.989738][T11463] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  331.998510][T11463] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input22
[  332.163112][    C0] igorplugusb 6-1:0.0: Error: urb status = -32
[  332.167280][T13021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  332.185520][T13021] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  332.207922][T11463] usb 6-1: USB disconnect, device number 24
[  332.399896][T13046] loop7: detected capacity change from 0 to 32768
[  332.491464][T13050] loop8: detected capacity change from 0 to 32768
[  332.510309][T13050] JBD2: Ignoring recovery information on journal
[  332.536470][T13050] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  332.541524][T13046] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow,no_data_io
[  332.541535][T13046]   allowing incompatible features above 0.0: (unknown version)
[  332.541540][T13046]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  332.558647][T13046] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[  332.559821][T13050] OCFS2: ERROR (device loop8): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature 
[  332.561920][T13046] bcachefs (loop7): recovering from clean shutdown, journal seq 10
[  332.567266][T13050] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  332.570620][T13046] bcachefs (loop7): Version upgrade required:
[  332.570620][T13046] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  332.570620][T13046] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  332.570620][T13046]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  332.573188][T13050] OCFS2: File system is now read-only.
[  332.573197][T13050] (syz.8.2570,13050,0):ocfs2_search_chain:1852 ERROR: status = -30
[  332.606309][T13050] (syz.8.2570,13050,0):ocfs2_search_chain:1940 ERROR: status = -30
[  332.606370][T13046] bcachefs (loop7): dropping and reconstructing all alloc info
[  332.609452][T13050] (syz.8.2570,13050,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30
[  332.609473][T13050] (syz.8.2570,13050,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  332.609487][T13050] (syz.8.2570,13050,0):ocfs2_claim_new_inode:2298 ERROR: status = -30
[  332.609500][T13050] (syz.8.2570,13050,0):ocfs2_claim_new_inode:2313 ERROR: status = -30
[  332.620851][T13046] bcachefs (loop7): accounting_read...
[  332.622237][T13050] (syz.8.2570,13050,0):ocfs2_mknod_locked:641 ERROR: status = -30
[  332.630836][T13050] (syz.8.2570,13050,0):ocfs2_mknod:388 ERROR: status = -30
[  332.634075][T13050] (syz.8.2570,13050,0):ocfs2_mknod:505 ERROR: status = -30
[  332.637552][T13050] (syz.8.2570,13050,0):ocfs2_create:678 ERROR: status = -30
[  332.641497][T13046]  done
[  332.644056][T13046] bcachefs (loop7): alloc_read... done
[  332.654545][T13046] bcachefs (loop7): snapshots_read... done
[  332.657055][T13046] bcachefs (loop7): done starting filesystem
[  332.678646][T12510] ocfs2: Unmounting device (7,8) on (node local)
[  332.719563][T11202] bcachefs (loop7): shutting down
[  332.751014][T11202] bcachefs (loop7): shutdown complete
[  333.088918][T13066] loop8: detected capacity change from 0 to 32768
[  333.101774][T13066] XFS: ikeep mount option is deprecated.
[  333.118310][T13066] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  333.137614][T13066] XFS (loop8): Ending clean mount
[  333.141361][T13066] XFS (loop8): Quotacheck needed: Please wait.
[  333.191108][T13066] XFS (loop8): Quotacheck: Done.
[  333.276376][T12510] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  333.302842][T13088] netlink: 'syz.5.2581': attribute type 1 has an invalid length.
[  333.313333][T13088] netlink: 'syz.5.2581': attribute type 1 has an invalid length.
[  333.854115][T13100] loop8: detected capacity change from 0 to 1024
[  333.857841][T13100] EXT4-fs: inline encryption not supported
[  333.860363][T13100] EXT4-fs: Ignoring removed i_version option
[  333.877250][T13100] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  333.885203][T11463] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  333.909664][T12510] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.016818][T13109] loop7: detected capacity change from 0 to 16
[  334.025746][T13109] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  334.051907][T13109] cramfs: Error -3 while decompressing!
[  334.054479][T13109] cramfs: ffffffff99bec628(27)->ffff88811cb55000(4096)
[  334.067593][T11463] usb 6-1: config index 0 descriptor too short (expected 39, got 27)
[  334.071658][T13109] cramfs: Error -3 while decompressing!
[  334.072740][T11463] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  334.074077][T13109] cramfs: ffffffff99bec643(16)->ffff88811cb58000(4096)
[  334.078227][T11463] usb 6-1: config 0 interface 0 has no altsetting 0
[  334.080296][T11463] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  334.084953][T13109] cramfs: Error -3 while decompressing!
[  334.089628][T13109] cramfs: ffffffff99bec628(27)->ffff88811cb55000(4096)
[  334.090005][T11463] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  334.096146][T11463] usb 6-1: Product: syz
[  334.097924][T11463] usb 6-1: Manufacturer: syz
[  334.099772][T11463] usb 6-1: SerialNumber: syz
[  334.103576][T11463] usb 6-1: config 0 descriptor??
[  334.107270][   T33] audit: type=1800 audit(1755269417.867:49): pid=13109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2587" name="file2" dev="loop7" ino=348 res=0 errno=0
[  334.125806][T11463] hub 6-1:0.0: bad descriptor, ignoring hub
[  334.128169][T11463] hub 6-1:0.0: probe with driver hub failed with error -5
[  334.134961][T11463] usb 6-1: selecting invalid altsetting 0
[  334.330844][T13107] loop8: detected capacity change from 0 to 32768
[  334.338988][T13107] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2586 (13107)
[  334.378657][   T33] audit: type=1800 audit(1755269418.137:50): pid=13115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.7.2590" name="/newroot/225/file0" dev="tmpfs" ino=1201 res=0 errno=0
[  334.390895][T13107] BTRFS info (device loop8): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  334.395688][T13107] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[  334.400627][T13107] BTRFS info (device loop8): using free-space-tree
[  334.607976][T13107] BTRFS warning (device loop8): can't clear the compat:0,compat:1 feature bits while mounted
[  334.669845][T12510] BTRFS info (device loop8): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  334.848767][T13098] usb 6-1: reset high-speed USB device number 25 using dummy_hcd
[  335.080108][T13098] usb 6-1: device firmware changed
[  335.107665][   T47] usb 6-1: USB disconnect, device number 25
[  335.157884][T13142] loop8: detected capacity change from 0 to 16
[  335.162303][T13142] erofs (device loop8): mounted with root inode @ nid 36.
[  335.253893][T13146] ALSA: mixer_oss: invalid OSS volume ''
[  335.285908][   T47] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  335.443318][   T47] usb 6-1: config index 0 descriptor too short (expected 39, got 27)
[  335.449566][   T47] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  335.453458][   T47] usb 6-1: config 0 interface 0 has no altsetting 0
[  335.460898][   T47] usb 6-1: string descriptor 0 read error: -22
[  335.463114][   T47] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  335.473643][   T47] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  335.480705][   T47] usb 6-1: config 0 descriptor??
[  335.497402][   T47] hub 6-1:0.0: bad descriptor, ignoring hub
[  335.507178][   T47] hub 6-1:0.0: probe with driver hub failed with error -5
[  335.531191][   T47] usb 6-1: selecting invalid altsetting 0
[  335.613388][   T33] audit: type=1326 audit(1755269419.367:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13162 comm="syz.7.2603" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f901058ebe9 code=0x0
[  335.825277][   T47] usb 6-1: USB disconnect, device number 26
[  336.412371][T13180] ptrace attach of "/syz-executor exec"[9358] was attempted by "ߖ鷴)Qo  \x0dvҢ9T{-92\x0ap_3j nޭOa)bkߟ.\x0aK~򜛱تKOkF^3B3){\x5crHBd,X\x09\x0b3c\x22&W\x22\x1bTL'\x09!_Nhٹ=n>a (G6茷A+&ϋЈUߍa{@{\x0b[ɸYacAzÂGl:d<]u~v!9,?Ŵ>\x22ar\x1blKڬY*VS8ȁ6]kK.=`#\x07x!gMDR*OLK\x0c}oKbA>{@aMdnQj̖5)];r,L\x0c=\x0dWAE n`>Ɵs-3`yfeH^/$L1&NP\x0d1D<\x07cPd(EdtaE!ҭ \x09@ݞHG~H<D$\x0crX`-ͪ/IFEtI;{*W\x0c\x0a:ÈV'\x0c8sejke~ɫRLB*\x0b-r@\x07VMšv%OymWGܕ|ʤ=tU?hK0uӣٜ0G 'b,\x22ߊ;2Ո'G/޳7Wd\x5c!w%xg\x22x[4!NlQ(\x0a@[+ ؐǬ[[zN sB&X>%3{- ^Qǚ4e3\x0b>sF̗H]+\x0
[  336.962550][T13197] loop7: detected capacity change from 0 to 1024
[  337.044123][T13197] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  337.105463][T11202] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.432625][T13198] use of bytesused == 0 is deprecated and will be removed in the future,
[  337.437023][T13198] use the actual size instead.
[  337.591271][T13209] hugetlbfs: syz.7.2617 (13209): Using mlock ulimits for SHM_HUGETLB is obsolete
[  338.037083][T13221] loop8: detected capacity change from 0 to 128
[  338.047712][T13221] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  338.072724][T13221] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  338.187123][T13222] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000400)
[  338.191712][T13222] FAT-fs (loop8): Filesystem has been set read-only
[  338.973573][T13224] program syz.5.2623 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  339.192765][T13230] loop5: detected capacity change from 0 to 1024
[  339.272872][T13230] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  339.281841][T13235] loop7: detected capacity change from 0 to 128
[  339.294164][T13230] EXT4-fs warning (device loop5): ext4_empty_dir:3103: inode #11: comm syz.5.2625: directory missing '..'
[  339.437912][ T9358] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.801006][ T1089] kworker/u9:4: attempt to access beyond end of device
[  339.801006][ T1089] loop7: rw=1, sector=145, nr_sectors = 8 limit=128
[  339.819221][ T1089] kworker/u9:4: attempt to access beyond end of device
[  339.819221][ T1089] loop7: rw=1, sector=161, nr_sectors = 8 limit=128
[  339.837488][ T1089] kworker/u9:4: attempt to access beyond end of device
[  339.837488][ T1089] loop7: rw=1, sector=177, nr_sectors = 8 limit=128
[  339.854588][ T1089] kworker/u9:4: attempt to access beyond end of device
[  339.854588][ T1089] loop7: rw=1, sector=193, nr_sectors = 8 limit=128
[  339.872226][ T1089] kworker/u9:4: attempt to access beyond end of device
[  339.872226][ T1089] loop7: rw=1, sector=209, nr_sectors = 8 limit=128
[  339.890484][ T1089] kworker/u9:4: attempt to access beyond end of device
[  339.890484][ T1089] loop7: rw=1, sector=225, nr_sectors = 8 limit=128
[  339.910113][ T1089] kworker/u9:4: attempt to access beyond end of device
[  339.910113][ T1089] loop7: rw=1, sector=241, nr_sectors = 8 limit=128
[  339.927146][ T1089] kworker/u9:4: attempt to access beyond end of device
[  339.927146][ T1089] loop7: rw=1, sector=257, nr_sectors = 8 limit=128
[  339.932792][T13250] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2633'.
[  339.937757][ T1089] kworker/u9:4: attempt to access beyond end of device
[  339.937757][ T1089] loop7: rw=1, sector=273, nr_sectors = 8 limit=128
[  339.952042][ T1089] kworker/u9:4: attempt to access beyond end of device
[  339.952042][ T1089] loop7: rw=1, sector=289, nr_sectors = 8 limit=128
[  340.159587][T13252] loop8: detected capacity change from 0 to 32768
[  340.338812][T13252] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  340.338824][T13252]   allowing incompatible features above 0.0: (unknown version)
[  340.338829][T13252]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  340.352279][T13252] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0
[  340.355052][T13252] bcachefs (loop8): initializing new filesystem
[  340.363349][T13252] bcachefs (loop8): going read-write
[  340.370088][T13252] bcachefs (loop8): marking superblocks
[  340.377030][T13252] bcachefs (loop8): initializing freespace
[  340.381472][T13252] bcachefs (loop8): done initializing freespace
[  340.387608][T13252] bcachefs (loop8): reading snapshots table
[  340.390308][T13252] bcachefs (loop8): reading snapshots done
[  340.438500][T13252] bcachefs (loop8): done starting filesystem
[  340.567870][   T33] audit: type=1800 audit(1755269424.327:52): pid=13252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2634" name="file1" dev="loop8" ino=4098 res=0 errno=0
[  340.684007][   T33] audit: type=1800 audit(1755269424.437:53): pid=13265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2634" name="file1" dev="loop8" ino=4098 res=0 errno=0
[  340.721460][T13255] loop7: detected capacity change from 0 to 32768
[  340.759431][T13268] loop5: detected capacity change from 0 to 1024
[  340.812007][T12781] hfsplus: b-tree write err: -5, ino 4
[  340.884502][T13277] loop5: detected capacity change from 0 to 64
[  340.892741][T13255] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  340.892752][T13255]   allowing incompatible features above 0.0: (unknown version)
[  340.892757][T13255]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  340.892798][T13277] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing
[  340.943086][T13255] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[  340.997149][T13255] bcachefs (loop7): initializing new filesystem
[  341.027299][T13255] bcachefs (loop7): going read-write
[  341.045078][T13255] bcachefs (loop7): marking superblocks
[  341.073225][T13255] bcachefs (loop7): initializing freespace
[  341.103109][T13255] bcachefs (loop7): done initializing freespace
[  341.110444][T13255] bcachefs (loop7): reading snapshots table
[  341.113028][T13255] bcachefs (loop7): reading snapshots done
[  341.116192][T12510] bcachefs (loop8): shutting down
[  341.118371][T12510] bcachefs (loop8): going read-only
[  341.120627][T12510] bcachefs (loop8): finished waiting for writes to stop
[  341.164119][T12510] bcachefs (loop8): flushing journal and stopping allocators, journal seq 193
[  341.169936][T13255] bcachefs (loop7): done starting filesystem
[  341.230891][T12510] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 195
[  341.245342][T12510] bcachefs (loop8): clean shutdown complete, journal seq 196
[  341.249232][T12510] bcachefs (loop8): marking filesystem clean
[  341.301053][T12510] bcachefs (loop8): shutdown complete
[  341.331356][T11202] bcachefs (loop7): shutting down
[  341.333419][T11202] bcachefs (loop7): going read-only
[  341.345244][T11202] bcachefs (loop7): finished waiting for writes to stop
[  341.358341][T11202] bcachefs (loop7): flushing journal and stopping allocators, journal seq 2
[  341.394308][T13288] cgroup: Bad value for 'name'
[  341.418559][T11202] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 3
[  341.432797][T11202] bcachefs (loop7): clean shutdown complete, journal seq 4
[  341.439183][T11202] bcachefs (loop7): marking filesystem clean
[  341.499094][T11202] bcachefs (loop7): shutdown complete
[  341.633305][T13294] loop8: detected capacity change from 0 to 128
[  341.833590][T13292] loop5: detected capacity change from 0 to 32768
[  341.851181][T13292] (syz.5.2644,13292,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  341.868113][T13292] (syz.5.2644,13292,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  341.886668][T13292] JBD2: Ignoring recovery information on journal
[  341.913427][T13292] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  342.040330][ T5404] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[  342.068884][ T9358] ocfs2: Unmounting device (7,5) on (node local)
[  342.199576][ T5404] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  342.205656][ T5404] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  342.210495][ T5404] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  342.219000][ T5404] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  342.223100][ T5404] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  342.238806][ T5404] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  342.242658][ T5404] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  342.246216][ T5404] usb 9-1: Product: syz
[  342.247984][ T5404] usb 9-1: Manufacturer: syz
[  342.249984][ T5404] usb 9-1: SerialNumber: syz
[  342.260418][ T5404] usb 9-1: config 0 descriptor??
[  342.478568][ T5404] radio-si470x 9-1:0.0: DeviceID=0x51b4 ChipID=0x426b
[  342.540147][T13311] loop5: detected capacity change from 0 to 256
[  342.542745][T13311] exfat: Deprecated parameter 'namecase'
[  342.563596][T13311] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb2d6c, utbl_chksum : 0xe619d30d)
[  342.690237][ T5404] radio-si470x 9-1:0.0: software version 81, hardware version 180
[  342.880364][ T5404] radio-si470x 9-1:0.0: si470x_set_report: usb_control_msg returned -71
[  342.883919][ T5404] radio-si470x 9-1:0.0: submitting int urb failed (-90)
[  342.893239][ T5404] radio-si470x 9-1:0.0: si470x_set_report: usb_control_msg returned -71
[  342.897613][ T5404] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -22
[  342.916369][ T5404] usb 9-1: USB disconnect, device number 4
[  342.997300][   T24] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  343.154969][   T24] usb 6-1: Using ep0 maxpacket: 8
[  343.158902][   T24] usb 6-1: config 251 has an invalid interface number: 243 but max is 0
[  343.161816][   T24] usb 6-1: config 251 has no interface number 0
[  343.163939][   T24] usb 6-1: config 251 interface 243 altsetting 5 bulk endpoint 0x5 has invalid maxpacket 32
[  343.167293][   T24] usb 6-1: config 251 interface 243 altsetting 5 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  343.170800][   T24] usb 6-1: config 251 interface 243 has no altsetting 0
[  343.176327][   T24] usb 6-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=28.9a
[  343.179281][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.181810][   T24] usb 6-1: Product: syz
[  343.183185][   T24] usb 6-1: Manufacturer: syz
[  343.184692][   T24] usb 6-1: SerialNumber: syz
[  343.191721][T13318] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  343.420289][   T24] esd_usb 6-1:251.243: sending version message failed
[  343.423245][   T24] esd_usb 6-1:251.243: probe with driver esd_usb failed with error -8
[  343.449220][   T24] usb 6-1: USB disconnect, device number 27
[  344.203309][T13330] loop8: detected capacity change from 0 to 8192
[  344.220257][T13330] FAT-fs (loop8): bogus logical sector size 0
[  344.222855][T13330] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  344.227541][T13330] FAT-fs (loop8): Can't find a valid FAT filesystem
[  344.574205][T13345] loop7: detected capacity change from 0 to 1024
[  344.863292][   T26] hfsplus: b-tree write err: -5, ino 4
[  345.467354][T13364] tmpfs: Bad value for 'size'
[  345.992344][T13376] loop5: detected capacity change from 0 to 8192
[  346.009029][T13376] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  346.039214][T13372] loop8: detected capacity change from 0 to 32768
[  346.044786][T13372] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2677 (13372)
[  346.057979][T13372] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  346.061461][T13372] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[  346.064358][T13372] BTRFS info (device loop8): disk space caching is enabled
[  346.068551][T13372] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  346.381166][T13376] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  346.421320][T13376] FAT-fs (loop5): Filesystem has been set read-only
[  346.446982][   T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.465800][T13376] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  346.468802][T13376] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1052)
[  346.527828][T13372] BTRFS info (device loop8): rebuilding free space tree
[  346.548492][T13372] BTRFS info (device loop8): disabling free space tree
[  346.551867][T13372] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  346.560484][T13372] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  346.598634][   T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.628402][   T33] audit: type=1800 audit(1755269430.387:54): pid=13372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2677" name="file1" dev="loop8" ino=260 res=0 errno=0
[  346.714372][   T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.739013][T12510] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  346.836015][   T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.000657][ T5926] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  347.026017][ T5926] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  347.034252][ T5926] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  347.044347][ T5926] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  347.051382][ T5926] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  347.055665][T13400] loop8: detected capacity change from 0 to 128
[  347.378384][   T12] bridge_slave_1: left allmulticast mode
[  347.398128][   T12] bridge_slave_1: left promiscuous mode
[  347.411357][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.518249][   T12] bridge_slave_0: left allmulticast mode
[  347.525346][   T12] bridge_slave_0: left promiscuous mode
[  347.527889][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.794368][T13418] netlink: 108 bytes leftover after parsing attributes in process `syz.5.2688'.
[  347.804204][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2688'.
[  347.838527][T13420] loop5: detected capacity change from 0 to 16
[  347.858205][T13420] erofs (device loop5): unsupported datalayout 5 of nid 36
[  348.002469][T13426] loop8: detected capacity change from 0 to 128
[  348.031477][T13426] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  348.039727][T13426] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  348.334758][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  348.344635][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  348.352706][   T12] bond0 (unregistering): Released all slaves
[  348.519428][   T12] tipc: Disabling bearer <udp:s>
[  348.536459][   T12] tipc: Left network mode
[  348.677373][T13397] chnl_net:caif_netlink_parms(): no params data found
[  348.860441][T13437] loop8: detected capacity change from 0 to 32768
[  348.896827][T13437] ocfs2: Slot 0 on device (7,8) was already allocated to this node!
[  348.913779][T13437] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  349.000482][T13461] loop5: detected capacity change from 0 to 128
[  349.021356][T13461] EXT4-fs (loop5): Test dummy encryption mode enabled
[  349.030359][T13461] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  349.044160][T13461] ext4 filesystem being mounted at /463/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  349.100437][T13397] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.103834][T13397] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.108556][T13397] bridge_slave_0: entered allmulticast mode
[  349.111961][T13397] bridge_slave_0: entered promiscuous mode
[  349.114490][T12510] ocfs2: Unmounting device (7,8) on (node local)
[  349.123753][T13397] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.127067][T13397] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.129638][T13397] bridge_slave_1: entered allmulticast mode
[  349.145833][ T5926] Bluetooth: hci1: command tx timeout
[  349.152190][T13397] bridge_slave_1: entered promiscuous mode
[  349.154371][ T9358] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  349.197224][   T12] hsr_slave_0: left promiscuous mode
[  349.206761][   T12] hsr_slave_1: left promiscuous mode
[  349.209488][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  349.212516][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  349.223513][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  349.231099][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  349.313710][   T12] veth1_vlan: left promiscuous mode
[  349.348853][   T12] veth0_vlan: left promiscuous mode
[  349.721059][T13474] loop8: detected capacity change from 0 to 256
[  349.729269][T13474] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  349.739411][T13474] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[  349.753138][T13474] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  350.492409][   T12] team0 (unregistering): Port device team_slave_1 removed
[  350.529530][   T12] team0 (unregistering): Port device team_slave_0 removed
[  350.702612][T13478] loop8: detected capacity change from 0 to 8
[  350.728667][T13478] SQUASHFS error: Unable to read inode 0x127
[  351.226948][ T5926] Bluetooth: hci1: command tx timeout
[  351.321307][T13469] lo speed is unknown, defaulting to 1000
[  351.323941][T13469] lo speed is unknown, defaulting to 1000
[  351.394541][T13469] lo speed is unknown, defaulting to 1000
[  351.401998][T13397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  351.406870][T13469] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  351.408773][T13397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  351.466325][T13469] lo speed is unknown, defaulting to 1000
[  351.473496][T13469] lo speed is unknown, defaulting to 1000
[  351.480426][T13469] lo speed is unknown, defaulting to 1000
[  351.489437][T13469] lo speed is unknown, defaulting to 1000
[  351.496999][T13469] lo speed is unknown, defaulting to 1000
[  351.697769][T13397] team0: Port device team_slave_0 added
[  351.720277][T13397] team0: Port device team_slave_1 added
[  351.851594][T13397] batman_adv: batadv0: Adding interface: batadv_slave_0
[  351.854567][T13397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  351.887989][T13397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  351.905754][T13397] batman_adv: batadv0: Adding interface: batadv_slave_1
[  351.914958][T13397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  351.945123][T13397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  351.968465][   T12] IPVS: stop unused estimator thread 0...
[  352.078064][T13486] loop5: detected capacity change from 0 to 8192
[  352.152435][T13397] hsr_slave_0: entered promiscuous mode
[  352.153922][ T5928]  loop5: p1 p2 < > p3 p4 < p5 >
[  352.155946][T13397] hsr_slave_1: entered promiscuous mode
[  352.160813][ T5928] loop5: partition table partially beyond EOD, truncated
[  352.176172][ T5928] loop5: p1 size 100663296 extends beyond EOD, truncated
[  352.202613][ T5928] loop5: p2 start 591104 is beyond EOD, truncated
[  352.220793][ T5928] loop5: p3 start 33572980 is beyond EOD, truncated
[  352.230332][ T5928] loop5: p5 size 100663296 extends beyond EOD, truncated
[  352.293562][T13486]  loop5: p1 p2 < > p3 p4 < p5 >
[  352.305712][T13486] loop5: partition table partially beyond EOD, truncated
[  352.308462][T13486] loop5: p1 size 100663296 extends beyond EOD, truncated
[  352.326941][T13486] loop5: p2 start 591104 is beyond EOD, truncated
[  352.339083][T13486] loop5: p3 start 33572980 is beyond EOD, truncated
[  352.351338][T13486] loop5: p5 size 100663296 extends beyond EOD, truncated
[  352.691960][ T6202] udevd[6202]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  352.712007][ T5928] udevd[5928]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  352.715792][T11401] udevd[11401]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory
[  352.773228][ T5928] udevd[5928]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  352.781145][T11401] udevd[11401]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory
[  352.792480][ T6202] udevd[6202]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory
[  352.892565][T13397] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  352.901064][T13397] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  352.913388][T13397] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  352.921916][T13397] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  353.061254][T13397] 8021q: adding VLAN 0 to HW filter on device bond0
[  353.089494][T13397] 8021q: adding VLAN 0 to HW filter on device team0
[  353.109056][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.111974][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  353.146832][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.149832][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  353.223630][T13523] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  353.305212][ T5926] Bluetooth: hci1: command tx timeout
[  353.399066][   T47] IPVS: starting estimator thread 0...
[  353.420336][T13397] 8021q: adding VLAN 0 to HW filter on device batadv0
[  353.507616][T13532] IPVS: using max 80 ests per chain, 192000 per kthread
[  353.677373][T13397] veth0_vlan: entered promiscuous mode
[  353.686432][T13397] veth1_vlan: entered promiscuous mode
[  353.727305][T13397] veth0_macvtap: entered promiscuous mode
[  353.733162][T13397] veth1_macvtap: entered promiscuous mode
[  353.762026][T13397] batman_adv: batadv0: Interface activated: batadv_slave_0
[  353.784268][T13397] batman_adv: batadv0: Interface activated: batadv_slave_1
[  353.797954][ T5918] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  353.801680][ T5918] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  353.819659][ T5918] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  353.823238][ T5918] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  353.889307][   T47] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  353.950579][T12781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.953611][T12781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.961548][T13577] smb3: Unexpected value for 'rdma'
[  353.997905][T12781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.001191][T12781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.056778][   T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  354.061389][   T47] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  354.099616][   T47] usb 6-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00
[  354.103253][   T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.124775][   T47] usb 6-1: config 0 descriptor??
[  354.515187][ T6624] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  354.547541][   T47] hid_parser_main: 5 callbacks suppressed
[  354.547558][   T47] ortek 0003:1223:3F07.001B: unknown main item tag 0x6
[  354.552802][   T47] ortek 0003:1223:3F07.001B: report_id 29495 is invalid
[  354.556659][   T47] ortek 0003:1223:3F07.001B: item 0 2 1 8 parsing failed
[  354.560116][   T47] ortek 0003:1223:3F07.001B: probe with driver ortek failed with error -22
[  354.675770][ T6624] usb 10-1: unable to get BOS descriptor or descriptor too short
[  354.679450][ T6624] usb 10-1: not running at top speed; connect to a high speed hub
[  354.683800][ T6624] usb 10-1: config 188 has an invalid interface number: 3 but max is 1
[  354.687672][ T6624] usb 10-1: config 188 has an invalid interface number: 9 but max is 1
[  354.691024][ T6624] usb 10-1: config 188 has no interface number 0
[  354.693530][ T6624] usb 10-1: config 188 has no interface number 1
[  354.700375][ T6624] usb 10-1: config 188 interface 3 has no altsetting 0
[  354.703226][ T6624] usb 10-1: config 188 interface 9 has no altsetting 0
[  354.708997][ T6624] usb 10-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=86.a0
[  354.712672][ T6624] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.716817][ T6624] usb 10-1: Product: syz
[  354.718591][ T6624] usb 10-1: Manufacturer: syz
[  354.720570][ T6624] usb 10-1: SerialNumber: syz
[  354.750986][ T5404] usb 6-1: USB disconnect, device number 28
[  354.944366][ T6624] usb 10-1: unknown number of interfaces: 2
[  354.950987][ T6624] usb 10-1: USB disconnect, device number 2
[  355.475324][ T5926] Bluetooth: hci1: command tx timeout
[  357.038682][T13667] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2756'.
[  357.042715][T13667] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  357.105178][  T793] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  357.265284][  T793] usb 10-1: Using ep0 maxpacket: 16
[  357.276968][  T793] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  357.285072][  T793] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  357.289702][  T793] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  357.307173][  T793] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  357.314694][  T793] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  357.338311][  T793] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  357.342176][  T793] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  357.354283][  T793] usb 10-1: Manufacturer: syz
[  357.363919][  T793] usb 10-1: config 0 descriptor??
[  357.637669][  T793] rc_core: IR keymap rc-hauppauge not found
[  357.640228][  T793] Registered IR keymap rc-empty
[  357.645899][  T793] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  357.665919][  T793] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  357.686820][  T793] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[  357.693820][  T793] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input24
[  357.704744][  T793] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  357.735334][  T793] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  357.750351][T13669] loop5: detected capacity change from 0 to 131072
[  357.754656][T13669] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0)
[  357.758021][T13669] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  357.763463][T13669] F2FS-fs (loop5): invalid crc value
[  357.769530][  T793] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  357.805259][  T793] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  357.822100][T13669] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  357.830560][T13669] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  357.832887][T13669] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  357.840465][  T793] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  357.868130][  T793] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  357.890231][  T793] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  357.915120][  T793] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  357.935542][  T793] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  357.956711][  T793] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  357.979293][  T793] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  357.983332][  T793] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  358.070542][  T793] usb 10-1: USB disconnect, device number 3
[  359.482969][T13718] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  360.338725][T13729] binder: 13728:13729 unknown command 24
[  360.340723][T13729] binder: 13728:13729 ioctl c0306201 200000000280 returned -22
[  361.242311][T13779] mkiss: ax0: crc mode is auto.
[  361.722421][   T33] audit: type=1326 audit(1755269445.077:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13770 comm="syz.8.2795" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2865f8ebe9 code=0x7ffc0000
[  361.736709][   T33] audit: type=1326 audit(1755269445.087:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13770 comm="syz.8.2795" exe="/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f2865f8ebe9 code=0x7ffc0000
[  361.772727][   T33] audit: type=1326 audit(1755269445.087:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13770 comm="syz.8.2795" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2865f8ebe9 code=0x7ffc0000
[  361.782741][T13783] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  361.802944][   T33] audit: type=1326 audit(1755269445.087:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13770 comm="syz.8.2795" exe="/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2865f8ebe9 code=0x7ffc0000
[  361.841678][   T33] audit: type=1326 audit(1755269445.087:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13770 comm="syz.8.2795" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2865f8ebe9 code=0x7ffc0000
[  361.856236][   T33] audit: type=1326 audit(1755269445.087:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13770 comm="syz.8.2795" exe="/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f2865f8ebe9 code=0x7ffc0000
[  361.864609][   T33] audit: type=1326 audit(1755269445.087:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13770 comm="syz.8.2795" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2865f8ebe9 code=0x7ffc0000
[  361.874763][   T33] audit: type=1326 audit(1755269445.087:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13770 comm="syz.8.2795" exe="/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f2865f8ebe9 code=0x7ffc0000
[  361.883234][   T33] audit: type=1326 audit(1755269445.087:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13770 comm="syz.8.2795" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2865f8ebe9 code=0x7ffc0000
[  361.891409][   T33] audit: type=1326 audit(1755269445.087:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13770 comm="syz.8.2795" exe="/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f2865f8ebe9 code=0x7ffc0000
[  361.902548][T13787] loop5: detected capacity change from 0 to 1024
[  361.905536][T13787] EXT4-fs: Ignoring removed nobh option
[  361.907260][T13787] EXT4-fs: inline encryption not supported
[  361.936086][T13787] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  361.982502][T13787] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[  362.098115][ T9358] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.148326][T13801] loop5: detected capacity change from 0 to 128
[  362.174392][T13801] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  362.190287][T13801] ext4 filesystem being mounted at /484/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  362.247263][ T9358] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  362.604129][T13836] openvswitch: netlink: Flow actions attr not present in new flow.
[  362.644030][T13840] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  362.724968][   T24] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  362.876653][   T24] usb 6-1: Using ep0 maxpacket: 16
[  362.883183][   T24] usb 6-1: New USB device found, idVendor=5752, idProduct=75b9, bcdDevice=ae.00
[  362.892822][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.899664][   T24] usb 6-1: Product: syz
[  362.901513][   T24] usb 6-1: Manufacturer: syz
[  362.912082][   T24] usb 6-1: SerialNumber: syz
[  362.922592][   T24] usb 6-1: config 0 descriptor??
[  362.928098][   T24] usb-storage 6-1:0.0: USB Mass Storage device detected
[  362.948819][    T9] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  363.115023][    T9] usb 10-1: Using ep0 maxpacket: 32
[  363.119089][    T9] usb 10-1: config 0 has an invalid interface number: 35 but max is 0
[  363.121820][    T9] usb 10-1: config 0 has no interface number 0
[  363.126060][    T9] usb 10-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  363.130166][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.133540][    T9] usb 10-1: Product: syz
[  363.136916][    T9] usb 10-1: Manufacturer: syz
[  363.139200][    T9] usb 10-1: SerialNumber: syz
[  363.139565][   T24] usb 6-1: USB disconnect, device number 29
[  363.142322][    T9] usb 10-1: config 0 descriptor??
[  363.158496][    T9] radio-si470x 10-1:0.35: could not find interrupt in endpoint
[  363.163238][    T9] radio-si470x 10-1:0.35: probe with driver radio-si470x failed with error -5
[  363.360366][    T9] radio-raremono 10-1:0.35: this is not Thanko's Raremono.
[  363.363694][    T9] usbhid 10-1:0.35: couldn't find an input interrupt endpoint
[  363.569436][   T24] usb 10-1: USB disconnect, device number 4
[  363.805711][T13881] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2842'.
[  363.925067][ T5951] usb 6-1: new full-speed USB device number 30 using dummy_hcd
[  364.076769][ T5951] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  364.081501][ T5951] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  364.088879][ T5951] usb 6-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00
[  364.092496][ T5951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.108048][ T5951] usb 6-1: config 0 descriptor??
[  364.110964][T13873] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  364.267174][   T34] INFO: task syz-executor:6833 blocked for more than 143 seconds.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  364.276168][   T34]       Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0
[  364.280524][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  364.284068][   T34] task:syz-executor    state:D stack:18264 pid:6833  tgid:6833  ppid:1      task_flags:0x400140 flags:0x00004004
[  364.294622][   T34] Call Trace:
[  364.296439][   T34]  <TASK>
[  364.297737][   T34]  __schedule+0x1798/0x4cc0
[  364.299746][   T34]  ? do_raw_spin_lock+0x121/0x290
[  364.302021][   T34]  ? __lock_acquire+0xab9/0xd20
[  364.304146][   T34]  ? __pfx___schedule+0x10/0x10
[  364.306938][   T34]  ? schedule+0x91/0x360
[  364.308811][   T34]  schedule+0x165/0x360
[  364.310619][   T34]  v9fs_evict_inode+0x170/0x320
[  364.312773][   T34]  ? __pfx_v9fs_evict_inode+0x10/0x10
[  364.319991][   T34]  ? __pfx_var_wake_function+0x10/0x10
[  364.322304][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  364.345354][   T34]  ? __pfx_v9fs_evict_inode+0x10/0x10
[  364.347708][   T34]  evict+0x504/0x9c0
[  364.349396][   T34]  ? __pfx_evict+0x10/0x10
[  364.351335][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  364.353545][   T34]  ? _raw_spin_unlock+0x28/0x50
[  364.385756][   T34]  ? iput+0x6d8/0x9d0
[  364.387561][   T34]  __dentry_kill+0x209/0x660
[  364.389508][   T34]  ? dput+0x37/0x2b0
[  364.391109][   T34]  dput+0x19f/0x2b0
[  364.392803][   T34]  shrink_dcache_for_umount+0xa0/0x170
[  364.414975][   T34]  generic_shutdown_super+0x67/0x2c0
[  364.417287][   T34]  kill_anon_super+0x3b/0x70
[  364.419284][   T34]  v9fs_kill_super+0x4c/0x90
[  364.421180][   T34]  deactivate_locked_super+0xbc/0x130
[  364.423323][   T34]  cleanup_mnt+0x425/0x4c0
[  364.453151][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  364.456662][   T34]  task_work_run+0x1d4/0x260
[  364.458835][   T34]  ? __pfx_task_work_run+0x10/0x10
[  364.460998][   T34]  ? __x64_sys_umount+0x122/0x160
[  364.463086][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  364.466931][   T34]  exit_to_user_mode_loop+0xec/0x110
[  364.469126][   T34]  do_syscall_64+0x2bd/0x3b0
[  364.470772][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  364.472717][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.476414][   T34]  ? exc_page_fault+0x9f/0xf0
[  364.478408][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.480869][   T34] RIP: 0033:0x7f12e138ff17
[  364.482607][   T34] RSP: 002b:00007fff7c08b018 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  364.487623][   T34] RAX: 0000000000000000 RBX: 00007f12e1411c05 RCX: 00007f12e138ff17
[  364.490513][   T34] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff7c08b0d0
[  364.493135][   T34] RBP: 00007fff7c08b0d0 R08: 0000000000000000 R09: 0000000000000000
[  364.496306][   T34] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff7c08c160
[  364.499505][   T34] R13: 00007f12e1411c05 R14: 0000000000033ce2 R15: 00007fff7c08c1a0
[  364.502713][   T34]  </TASK>
[  364.504119][   T34] 
[  364.504119][   T34] Showing all locks held in the system:
[  364.510832][   T34] 1 lock held by rcu_exp_gp_kthr/18:
[  364.513003][   T34]  #0: ffff88813663a098 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  364.517205][   T34] 1 lock held by khungtaskd/34:
[  364.519272][   T34]  #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  364.523232][   T34] 2 locks held by kworker/u9:4/1089:
[  364.532498][   T34]  #0: ffff88801e79a148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  364.539512][   T34]  #1: ffffc90006e57bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  364.544177][   T34] 2 locks held by kworker/u9:5/1090:
[  364.546734][   T34]  #0: ffff88804b03a098 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  364.550588][   T34]  #1: ffff88804b024008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  364.553979][   T34] 1 lock held by klogd/5285:
[  364.555909][   T34]  #0: ffff88813663a098 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  364.559546][   T34] 2 locks held by getty/5674:
[  364.561377][   T34]  #0: ffff8881082a10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  364.565526][   T34]  #1: ffffc900029032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  364.569409][   T34] 5 locks held by kworker/1:4/5951:
[  364.571437][   T34]  #0: ffff888105233d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  364.578519][   T34]  #1: ffffc90003f9fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  364.582901][   T34]  #2: ffff888023960198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[  364.586604][   T34]  #3: ffff888122c4d198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[  364.590490][   T34]  #4: ffff88811bf40160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[  364.594324][   T34] 1 lock held by syz-executor/6833:
[  364.602851][   T34]  #0: ffff8880308980e0 (&type->s_umount_key#89){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0
[  364.609734][   T34] 3 locks held by kworker/0:5/8425:
[  364.611998][   T34]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  364.627488][   T34]  #1: ffff88804b024008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  364.631246][   T34]  #2: ffff8880303b8240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x26b/0x3180
[  364.644911][   T34] 2 locks held by syz-executor/13397:
[  364.647242][   T34] 1 lock held by syz.8.2845/13887:
[  364.649322][   T34]  #0: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  364.653664][   T34] 3 locks held by dhcpcd-run-hook/13898:
[  364.663652][   T34]  #0: ffff88804b03a098 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  364.667966][   T34]  #1: ffff88804b024008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  364.671682][   T34]  #2: ffff888025fcaeb8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: __pte_offset_map_lock+0x13e/0x210
[  364.678754][   T34] 1 lock held by dhcpcd-run-hook/13899:
[  364.681162][   T34] 
[  364.682233][   T34] =============================================
[  364.682233][   T34] 
[  364.696833][   T34] NMI backtrace for cpu 0
[  364.696849][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  364.696864][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  364.696872][   T34] Call Trace:
[  364.696877][   T34]  <TASK>
[  364.696883][   T34]  dump_stack_lvl+0x189/0x250
[  364.696903][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  364.696917][   T34]  ? __pfx__printk+0x10/0x10
[  364.696941][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  364.696957][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  364.696971][   T34]  ? __pfx__printk+0x10/0x10
[  364.696989][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  364.697008][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  364.697024][   T34]  watchdog+0xf93/0xfe0
[  364.697043][   T34]  ? watchdog+0x1de/0xfe0
[  364.697063][   T34]  kthread+0x711/0x8a0
[  364.697079][   T34]  ? __pfx_watchdog+0x10/0x10
[  364.697094][   T34]  ? __pfx_kthread+0x10/0x10
[  364.697107][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  364.697121][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  364.697135][   T34]  ? __pfx_kthread+0x10/0x10
[  364.697148][   T34]  ret_from_fork+0x3fc/0x770
[  364.697161][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  364.697177][   T34]  ? __switch_to_asm+0x39/0x70
[  364.697191][   T34]  ? __switch_to_asm+0x33/0x70
[  364.697204][   T34]  ? __pfx_kthread+0x10/0x10
[  364.697219][   T34]  ret_from_fork_asm+0x1a/0x30
[  364.697244][   T34]  </TASK>
[  364.697249][   T34] Sending NMI from CPU 0 to CPUs 1:
[  364.752729][    C1] NMI backtrace for cpu 1
[  364.752744][    C1] CPU: 1 UID: 0 PID: 13397 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  364.752758][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  364.752765][    C1] RIP: 0010:__kasan_check_byte+0x12/0x40
[  364.752809][    C1] Code: cf fe ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 41 56 53 48 89 f3 49 89 fe e8 5e 14 00 00 <84> c0 75 16 be 01 00 00 00 4c 89 f7 31 d2 48 89 d9 89 c3 e8 c6 03
[  364.752818][    C1] RSP: 0018:ffffc900001e0d48 EFLAGS: 00000093
[  364.752829][    C1] RAX: 0000000000000001 RBX: ffffffff8b7bebf7 RCX: a77e78321f91b600
[  364.752836][    C1] RDX: 0000000000000000 RSI: ffffffff8b7bebf7 RDI: 1ffff11026cc4f53
[  364.752843][    C1] RBP: ffffffff81ada3da R08: 0000000000000001 R09: 0000000000000000
[  364.752849][    C1] R10: dffffc0000000000 R11: ffffffff81ada2e0 R12: 0000000000000000
[  364.752855][    C1] R13: ffff888136627a98 R14: ffff888136627a98 R15: 0000000000000001
[  364.752862][    C1] FS:  000055557d4d2500(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  364.752871][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  364.752878][    C1] CR2: 00007ffeb0979188 CR3: 000000000df36000 CR4: 00000000000006f0
[  364.752911][    C1] Call Trace:
[  364.752917][    C1]  <IRQ>
[  364.752922][    C1]  lock_acquire+0x8d/0x360
[  364.752939][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  364.752954][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  364.752968][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  364.752981][    C1]  _raw_spin_lock_irqsave+0xa7/0xf0
[  364.752993][    C1]  ? hrtimer_interrupt+0xfa/0xaa0
[  364.753002][    C1]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  364.753014][    C1]  ? handle_softirqs+0x717/0x870
[  364.753026][    C1]  hrtimer_interrupt+0xfa/0xaa0
[  364.753034][    C1]  ? sched_clock+0x3f/0x60
[  364.753048][    C1]  ? sched_clock_cpu+0x74/0x430
[  364.753062][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  364.753077][    C1]  ? __irq_exit_rcu+0xd8/0x1f0
[  364.753086][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  364.753098][    C1]  __sysvec_apic_timer_interrupt+0x10b/0x410
[  364.753111][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  364.753125][    C1]  </IRQ>
[  364.753128][    C1]  <TASK>
[  364.753132][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  364.753143][    C1] RIP: 0010:__reset_page_owner+0x5f/0x1f0
[  364.753158][    C1] Code: b8 fa 0b 48 8d 1c 08 48 83 c3 08 48 89 d9 48 c1 e9 03 48 ba 00 00 00 00 00 fc ff df 0f b6 0c 11 84 c9 0f 85 49 01 00 00 8b 1b <48> 89 c7 e8 99 c3 01 00 bf 00 20 00 00 e8 8f 01 00 00 44 0f b7 e5
[  364.753166][    C1] RSP: 0018:ffffc90003f1fac0 EFLAGS: 00000246
[  364.753176][    C1] RAX: ffff8881021dde40 RBX: 0000000005ec0211 RCX: 0000000000000000
[  364.753183][    C1] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  364.753189][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff822e4932
[  364.753196][    C1] R10: dffffc0000000000 R11: fffff9400092fca7 R12: 0000000000000000
[  364.753203][    C1] R13: 0000000000000000 R14: ffffea000497e500 R15: 00000054ecf44de5
[  364.753213][    C1]  ? page_ext_get+0x22/0x2f0
[  364.753229][    C1]  __free_frozen_pages+0xbc4/0xd30
[  364.753248][    C1]  vfree+0x25a/0x400
[  364.753262][    C1]  ? __pfx_kcov_close+0x10/0x10
[  364.753275][    C1]  kcov_close+0x28/0x50
[  364.753286][    C1]  __fput+0x44c/0xa70
[  364.753302][    C1]  task_work_run+0x1d4/0x260
[  364.753327][    C1]  ? __pfx_task_work_run+0x10/0x10
[  364.753340][    C1]  ? kmem_cache_free+0x18f/0x400
[  364.753361][    C1]  do_exit+0x6b5/0x2300
[  364.753376][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  364.753389][    C1]  ? __pfx_do_exit+0x10/0x10
[  364.753404][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  364.753417][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  364.753432][    C1]  do_group_exit+0x21c/0x2d0
[  364.753446][    C1]  __x64_sys_exit_group+0x3f/0x40
[  364.753458][    C1]  x64_sys_call+0x21f7/0x2200
[  364.753472][    C1]  do_syscall_64+0xfa/0x3b0
[  364.753486][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  364.753498][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.753508][    C1]  ? exc_page_fault+0x9f/0xf0
[  364.753520][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.753535][    C1] RIP: 0033:0x7fb83db8ebe9
[  364.753545][    C1] Code: Unable to access opcode bytes at 0x7fb83db8ebbf.
[  364.753549][    C1] RSP: 002b:00007ffeed0d7728 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  364.753561][    C1] RAX: ffffffffffffffda RBX: 00007fb83dc13653 RCX: 00007fb83db8ebe9
[  364.753567][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043
[  364.753573][    C1] RBP: 00007fb83dc13665 R08: 00007ffeed0d54c7 R09: 00000000000927c0
[  364.753580][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  364.753588][    C1] R13: 00000000000927c0 R14: 0000000000058e68 R15: 00007ffeed0d78d0
[  364.753599][    C1]  </TASK>
[  364.933000][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  364.935685][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  364.939865][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  364.943267][   T34] Call Trace:
[  364.944521][   T34]  <TASK>
[  364.945620][   T34]  dump_stack_lvl+0x99/0x250
[  364.947305][   T34]  ? __asan_memcpy+0x40/0x70
[  364.948873][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  364.950566][   T34]  ? __pfx__printk+0x10/0x10
[  364.952062][   T34]  vpanic+0x281/0x750
[  364.953633][   T34]  ? __pfx_vpanic+0x10/0x10
[  364.955418][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  364.957620][   T34]  ? preempt_schedule+0xae/0xc0
[  364.959329][   T34]  ? preempt_schedule_common+0x83/0xd0
[  364.961144][   T34]  panic+0xb9/0xc0
[  364.962401][   T34]  ? __pfx_panic+0x10/0x10
[  364.964085][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  364.965847][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  364.967826][   T34]  watchdog+0xfd2/0xfe0
[  364.969149][   T34]  ? watchdog+0x1de/0xfe0
[  364.970615][   T34]  kthread+0x711/0x8a0
[  364.971977][   T34]  ? __pfx_watchdog+0x10/0x10
[  364.973473][   T34]  ? __pfx_kthread+0x10/0x10
[  364.975067][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  364.976814][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  364.978697][   T34]  ? __pfx_kthread+0x10/0x10
[  364.980331][   T34]  ret_from_fork+0x3fc/0x770
[  364.981974][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  364.983825][   T34]  ? __switch_to_asm+0x39/0x70
[  364.985759][   T34]  ? __switch_to_asm+0x33/0x70
[  364.987669][   T34]  ? __pfx_kthread+0x10/0x10
[  364.989462][   T34]  ret_from_fork_asm+0x1a/0x30
[  364.991383][   T34]  </TASK>
[  364.993274][   T34] Kernel Offset: disabled
[  364.994846][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
14:50:48  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000000a RBX=ffffffff8e139ee0 RCX=0000000000000007 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff88801c2f5640 RBP=0000000000000000 RSP=ffffc900000f78f0
R8 =0000000000000000 R9 =ffffffff8b46e6e2 R10=dffffc0000000000 R11=ffffffff8b46e610
R12=0000000000020000 R13=0000000000000000 R14=0000000000020000 R15=ffff88801c2f6130
RIP=ffffffff819d61c7 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffc2ecac0a8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f1331e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffffc900017ceea0 RCX=0000000000000000 RDX=0000000000000010
RSI=0000000000000000 RDI=ffffc900017ceeb8 RBP=dffffc0000000000 RSP=ffffc900017ced30
R8 =ffffc900017ceec7 R9 =1ffff920002f9dd8 R10=ffffc900017ceeb8 R11=fffff520002f9dd9
R12=ffffc900017cef00 R13=ffffc900017ceeb8 R14=ffffc900017cee68 R15=ffffc900017ceeb0
RIP=ffffffff8b797cb5 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe30c6e7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007fe30bb876c3 00007fe30bb876c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0000555558541d30 0000555558541cb0
XMM06=000055555853f8c4 000055555853f8c0 XMM07=80b808000d800301 80040880c4a88208
XMM08=0001000002080606 0119cc0880800800 XMM09=6561643030613966 666666666666660a
XMM10=5f7473696c766564 5f63666e20422030 XMM11=66666666660a6e6f 69746172656e6567
XMM12=2062203030663031 3061396666666666 XMM13=6162706f6f6c5f6b 636f73765f656874
XMM14=3031306139666666 66666666660a6b63 XMM15=706f6f6c5f6b636f 7376206220306566
