last executing test programs:

6m33.636291127s ago: executing program 32 (id=1228):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0)
write$dsp(r0, &(0x7f00000004c0)='\x00', 0x1)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000000))

5m21.672389059s ago: executing program 2 (id=1971):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb], [0x10000], [0x6, 0x0, 0x0, 0x4]], '\x00', [{}, {0x0, 0xfffffffe}, {}, {0x0, 0xffffffff, 0x0, 0x1, 0x1}, {0x0, 0x6, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {0x0, 0x3}, {}, {}, {0x0, 0x2000000}, {0x7}], '\x00', 0x1000})

5m21.303258247s ago: executing program 2 (id=1972):
r0 = socket(0x18, 0x3, 0x1)
getsockopt(r0, 0x29, 0x66, 0x0, 0x0)

5m21.303058024s ago: executing program 2 (id=1973):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10)
listen(r0, 0xfffffffe)
accept4$unix(r0, 0x0, 0x0, 0x0)

5m21.248540157s ago: executing program 2 (id=1974):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x281445c, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0x2, 0x269, &(0x7f0000000780)="$eJzs3T9oJFUcB/Df7B/jJotEbQRRBBHRQIidYBMbhYCEICKoEBGxkkSICXZZKxsLrVUCgk0QO6Ol2AQbj4Orcncpcs3BXbjiwhV3xR67s3tskg25239z7Hw+MMyf9968N2G+b0JgJgHk1nREzEdEMSJmIqIcEUlnhZfSZbq1u1XZXY6o19+/lTTrpfupdrupiKhFxJsRpXbZxs7HB3f23n31+/XyK7/tfFQZ1fV1OjzYf+/ol8Xv/lx4Y+PCpRuLScxHtVXWeR2DlHQ5VkoinhlGZ4+JpJT1CHgYS9/8cbmR+2cj4uVm/stRaEX2h7Un/i3H6z+f1fbHmxefH+VYgcGr18uNZ2CtDuROISKqkRRmIyLdLhRmZ9Pf4a8UJwtfrq59PfPF6vrK51nPVMCgVCPZf+fvib+mTuT/ejHNPzC+qhH7HyxtX21sHxWzHg0wNJ1/bX8hXTXyP/Pp5msh/5A78g/5Jf+QX/IPY6DH7Mo/5MT06UP95P/JQY0LyITnP4yxcnuj1rVY/iG/5B/G1K/d3jo9Tv4hvzrzDwDkS30i6zeQgaxkPf8AAAAAAAAAAAAAAAAAAACnbVV2l9vLqPr876eIw7cjotSt/2Lz/xG3vzY+eTtpVHsgSZv15ZPzP5M2VL8P7O3rSk+tnro2qP578/+Lwznvt8d3z/zhbK5E1BqV50ql0/df0rr/evf0OeXlz/rs4BGdvN3f+nC0/Z90bzvb/hf2Iv5pzD9z3eafQjzXXHeff6qdn1ju0Vd3+zwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI3M/AAD//xF4bdk=")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10)

5m21.242015472s ago: executing program 2 (id=1976):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e0001002bbd70000000000007000000", @ANYRES32, @ANYBLOB="000004000a0005"], 0x28}}, 0x0)

5m20.870918547s ago: executing program 2 (id=1980):
r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x1000001000001, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8})

5m20.728207596s ago: executing program 33 (id=1980):
r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x1000001000001, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8})

3m55.060673838s ago: executing program 4 (id=2987):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffc, 0x4, @mcast2, 0xc}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000006980)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000007c00)='AA', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000000940)="2eaa", 0x2}], 0x1}}], 0x2, 0x4400c800)

3m55.060542868s ago: executing program 4 (id=2988):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='.\x00', 0x10140c0, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}}, 0x1, 0x0, 0x0)

3m55.003479349s ago: executing program 4 (id=2989):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r1=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r5, 0x301, 0x0, 0xffffffff, {{0x11}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

3m54.038870681s ago: executing program 4 (id=2999):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

3m53.835105443s ago: executing program 4 (id=3002):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=maccroatian,umask=00000000000000000000006,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB=',fmask=00000000000000000000010,discard,fmask=00000000000000000000007,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d636f6e74696e75652c616c6c6f775f7574696d653d30303030303030303030303030300235c6b6bfd905ecd26f3030303134373237302c006c8455dde900fe549d082f5efab4565df7f856f64e9bdae3ee8d93c0d8436a59aca30c4c85130ecbe953c725570c89fbbc378dd7090f7fdfd1589479dae0f3838b7591e1721dbe58c8b10f6366df8f0953b2c7543248c3b4863b"], 0x1, 0x1528, &(0x7f00000037c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
chdir(&(0x7f00000000c0)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x60)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
getdents(r0, &(0x7f0000000140)=""/194, 0xc2)

3m53.468446577s ago: executing program 4 (id=3003):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0xfd, 0x2c7, &(0x7f0000000480)="$eJzs3U1rE1sYwPGnadMmKW2yuFy4F6QPutHN0MZPEKQFMaDUpqgLYWonGjImJRMjEbHduXXndygu3QnWL9CNO/fipgiCmy6kI53JmGk7fTVp0vb/g3JO55wn58wL5Zmhc7Jx783TctEximZdYgmVmCRWZFMkIzEJLLfK7S0DMixhK3Jt9OeXS3fvP7iVy+enZ1VncnPXs6o6PvHx+ct3lz/VR+ffj38YkfXMw40f2a/r/67/t7E1F3x6ta6mLlSrdXPBtnSx5JQN1Tu2ZTqWliqOVdvRXrSrS0tNNSuLY6mlmuU4alaaWraaWq9qvdZU87FZqqhhGDqWkotm8KDGZNTGwursrJk71iCxY04KpynyLNdqOXMwsrGwehqTAgAA/WVv/i978v+BVtnJ/P9JydGSo5XD8v+YkP93j5f/b0UmjTgf4ts3ADkzFXnrRv4PAAAAAAAAAAAAAAAAAAAAAMBZsOm6add100EZ/IyISEK2En4vN93reaI7Dj7/IsHvoZCBHk4XHRZ6cS8hYr9uFBoFv/Tbc0UpiS2WTMZFfnnXQ4tfn7mZn55UT0bW7OVWvPeS4EgQH8hEx0/58RqKX24U4pIKj5+VtPwTHZ/dFR8XkUZhWK5eCcUbkpbPj6Qqtix613U7/tWU6o3b+V3jJ71+AAAAAACcB4b+kdl5/+uvJmkYGiwbsqvd39h+PiDpQ54PqKwNSzt+SP4f6t1+AwAAAABwkTjNF2XTtq3aySsT838V3geVpBw/qiOH7oxVjNa/gx3Y2XVd7wtjjvjJb5Mi+zTFZN+mble+i0gfHPBOV74980/gUTr38q8SAAAAgG5oJ/29ngkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfXURcPC/qfZO2x0HCDvdlLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoD/8DgAA//8uWRWa")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x26)
lgetxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="aeb6a9f98a7f42a46dd40eab7d1f02a2"}})

3m53.295660002s ago: executing program 34 (id=3003):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0xfd, 0x2c7, &(0x7f0000000480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x26)
lgetxattr(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @auto="aeb6a9f98a7f42a46dd40eab7d1f02a2"}})

2m12.174893253s ago: executing program 3 (id=3980):
syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x56, 0x54, 0x48, 0x20, 0x5e1, 0x408, 0x2511, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2e, 0xc2, 0x5d, 0x0, [], [{{0x9, 0x5, 0x2}}, {{0x9, 0x5, 0x3, 0x1}}]}}]}}]}}, 0x0)

2m10.972643518s ago: executing program 3 (id=3992):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x449, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}}, 0x0)

2m10.970530267s ago: executing program 3 (id=3993):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x12000000f})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000000c0)={0x2000})

2m10.898369473s ago: executing program 3 (id=3994):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a3200"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xfffffffffffffffd)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000340)=ANY=[@ANYBLOB="726f6469722c756e695f786c6174653d312c726f6469722c756e695f786c6174653d302c636865636b3d72656c617865642c73686f72746e616d653d77696e6e742c6e6f636173652c73686f72746e616d653d6c6f7765722c747a3d5554432c756e695f786c6174653d312c73686f77657865632c6e6f6e756d7461696c00002c007d88658bba9f86c7bbf19329c9a2a1c1511e3af2126ad5803a0f4e3d8521dd3f1b515a0673be6fb14db7c6534edf0e5e1d29e4f05d5c82fd3e0372c644e7ba7ccec22efc923b0beac1490e"], 0x0, 0x29f, &(0x7f0000000580)="$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")
r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r1, &(0x7f0000002c00)={0x2020}, 0x2020)
socket$nl_route(0x10, 0x3, 0x0)

2m10.861701243s ago: executing program 3 (id=3996):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r1, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9)

2m10.406399222s ago: executing program 3 (id=4003):
r0 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000400d240f0100000000000000000006241a0000000905810340000000400904010000020d00000904010102020d000009058202000000fd0009050301ec02000000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x80, 0x1c, {0xe, 0x1, 0x1, 0xf007, 0x9, 0x2, 0x8, 0x0, 0x2, 0x1, 0xa, 0x6}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

2m9.997184259s ago: executing program 35 (id=4003):
r0 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000400d240f0100000000000000000006241a0000000905810340000000400904010000020d00000904010102020d000009058202000000fd0009050301ec02000000"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x80, 0x1c, {0xe, 0x1, 0x1, 0xf007, 0x9, 0x2, 0x8, 0x0, 0x2, 0x1, 0xa, 0x6}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

58.70254443s ago: executing program 6 (id=4771):
syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @void, {@arp={0x806, @generic={0x102, 0x805, 0x6, 0x0, 0xe9da94bda0ef4554, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, "", @remote}}}}, 0x0)

58.702389022s ago: executing program 6 (id=4772):
syz_usb_connect(0x2, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0xe1, 0x47, 0x5e, 0x40, 0xab4, 0x11, 0xc67f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x78, 0x0, 0x0, 0xe9, 0x94, 0x95}}]}}]}}, 0x0)

57.528489924s ago: executing program 6 (id=4776):
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0040d07, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0x80044dfe, &(0x7f0000000180))

57.451133139s ago: executing program 6 (id=4777):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@nobarrier}]}, 0xff, 0x257, &(0x7f0000000500)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))

57.133947616s ago: executing program 6 (id=4780):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1", 0x79}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d56a03be6caa272b3505e304463179c4d7768d9c3e5c21f3a9963ffde6682e5ecfe30b771e51c8d", 0x47}], 0x2, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x7fff}], 0x1, 0x2101, 0x0)

56.470680669s ago: executing program 6 (id=4790):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x100000}, 0x10)
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe000000000a0000", 0x1c)

56.316093608s ago: executing program 36 (id=4790):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x100000}, 0x10)
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe000000000a0000", 0x1c)

33.195121869s ago: executing program 5 (id=5035):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r0)
sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x80c4)

33.092705912s ago: executing program 5 (id=5037):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001600010a2dbd700003000000fd0000ba"], 0x1c}}, 0x40040)

33.03196197s ago: executing program 5 (id=5038):
syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x1d}, {0x2, [{@any, 0x0, 0x1, "af88b3", 0x7, 0x80}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x6d, 0x8a, "638394", 0x87f, 0xd}]}}}, 0x20)

32.919176805s ago: executing program 5 (id=5039):
syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000240)={[{@map_off}, {@check_strict}, {@cruft}, {@dmode={'dmode', 0x3d, 0x4}}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0xff, 0x544, &(0x7f0000001000)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00')
r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00')

32.74441249s ago: executing program 5 (id=5040):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
syz_mount_image$udf(&(0x7f0000000040), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRES8, @ANYBLOB="cb1d7f17122d252aec49067e56ca8a751e3baab8a0957bab817362c5276347a7e9e9307ccd2e12fba7eec01a5954f417646b81a31b2dfee6e9637b70"], 0x11, 0x489, &(0x7f0000000a40)="$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")
link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

32.328299419s ago: executing program 5 (id=5044):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)

31.877521519s ago: executing program 37 (id=5044):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)

29.26103514s ago: executing program 7 (id=5076):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0)
close(0x3)

29.207180776s ago: executing program 7 (id=5078):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4)
sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x20040054)

29.206877524s ago: executing program 7 (id=5079):
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x2, 0xc}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}}, 0x0)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001500190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f0000000000)=0x100000001, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x6800)
r6 = socket$nl_route(0x10, 0x3, 0x0)
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c000000100039042bbd7000e2ffffff000003e4", @ANYRES32=0x0, @ANYBLOB="431c0000cb1507001c0012800800010067726500100002800400120008000700e0"], 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040)

28.690246162s ago: executing program 8 (id=5082):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x1000)
setsockopt(r0, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000240)=0x8)

28.623345165s ago: executing program 8 (id=5083):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
close_range(r0, 0xffffffffffffffff, 0x0)

28.623025914s ago: executing program 8 (id=5084):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0x1, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800)

28.518844524s ago: executing program 8 (id=5085):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000140)={[{@nodecompose}, {@nobarrier}, {@nodecompose}, {@force}, {@nobarrier}, {@type={'type', 0x3d, "aff0aae8"}}, {@nls={'nls', 0x3d, 'iso8859-9'}}]}, 0x44, 0x6ff, &(0x7f0000000500)="$eJzs3U1sHGf5APBn1uu1N5XcbZu0/f+FFKsRETSQ2F5KgoREqBDyoUKRuPS6JE5jee1GtoucCBEXKBzhhHLooQiZQ0+oB6QiDohyRkLiinKPxD3iwKKZnVnvh73ebfyRhN9Pmp13Zt6PZ57OvN6dbbQB/M9afDsmtyOJxQtvbaXbD3bqzQc79dWiHBFTEVGKKLdXkaxFJJ9FXI32Ev+X7sy7S/Yb542Hn354/v7H9fZWOV+y+qVh7Xa1hoywnS8xGxET+XpM5f36ux5vDvR3b6yuk07cacLOFYmDk9YasD1O8xHuW+BJdy9iYnKP/bWIUxExnb8PiHx2KB1zeIdurFkOAAAAnkwTB1V4/lE8iq2YOZ5wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NmQtH8zMMmXUlGejaT4/f9Kvi9VqZxwvMN95YDjH9w8pkAAAAAAAAAA4Eh8kn9xf/ZRPIqtmCn2t5LsO//Xso3T2etz8V5sxFKsx8XYikZsxmasx3zE5ExXh5Wtxubm+vxgy19H2rLVat3LWy5ERG2g5cI+gZYO+cQBAAAAAAAA4Nn0k1iMmZMOAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuiURE+1VtpwuyrUolSNiOiIqab3tiD8V5afZn086AAAAADh61Xw9k/ynXWgl2Wf+l7PP/dPxXqzFZizHZjRjKW5kzwLan/pLf9+uNx/s1FfTZbDjb/9rrDiyHiNiIt7fZ+S5rMaZTovF+G58Py7EbFyL9ViOH0YjNmMpZqOankQ0Iolatf30olbEuXe8V3u2rvXHdrZv+9UskmrcjOUstotxvRLtxybZOaRjvto12h8qEX0jvp9mJ/lWbsQc3ej67/Wr/LlMrvX8iH0cjVp25pOdjMyluc+z8cLw3I95nfSPNB+lzjOo07ujpJv9IxU5/8E4OT/VXk2nLz/vzflhG/NRWn8mFqKUX30RL/fm/PYX77/Y2/jL//jLtVultZVbNzcuHOEpPY7ZgypMFoX+TNS7MvHK8Ksvz0QzzcT26JmY7N8xPWrLo1XJs5FNRSPOlt/JSo14resSfDduxFJcjrmYjysxF9+Ihah3rrB0OdOT13J9tTcn2b1WGpzfqkOCP/elrkq/OKDy8Urz8kJXXrtnulp2LN9z9Zcx13X1vTj86hv7r0A6/v/n5XSMn3b+4jwJejKRz81FdC8Nz8RvWunrRnNtZf1W4/aI453P1+lt+0Hv3Pzb0aPu/+t+GNLrJZ1xy9lWlpNqcb2kx17qRNubr0r+jUu7XWng2JnOsVrMxHJ8b987tZK/hxvsqX3sle5j/9ydOSv5+5viWM+7nHg3mtm7kD4HTtUAHLNTr5+qVB9W/1b9qPqz6q3qW9NvTl2Z+kIlJv9a/uPE70u/K30zeT0+ih/HzElHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz4KNO3dXGs3m0nqnENP9ex63UNl3rOGFKB1YZ+e50TqMWsTwsZK8UDncc38aC9Xo21P8wtLj9vxJRAypU3ns4JOxr7GxC2keDqXDVqud1GxPa2KM5uWi1d51yrExHSuNpLzHHTe1exdEbaXR/Herp3k1um4Z4Bl3aXP19qWNO3e/urzaeGfpnaW1hSuXr1yuf33+a5duLjeX5tqvJx0lcBQ27tyd2GP3wC/dAgAAAAAAAAAAAE+O/P/+3/zc/5ihfECdyvrG3iOfPe5TBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5Si2/H5HYkMT93cS7dfrBTb6ZLUd6tWY6IUkQkP4pIPou4Gu0lal3dJfuN88bDTz88f//j+m5f5aJ+aVi70WznS8xGxES+PtjUHt0M9ne9q7/tzxVe0jnDNGHnisTBSftvAAAA//9u//cB")
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='tracefs\x00', 0x800, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x5006d, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1002c, &(0x7f0000000200)={[{@mode={'mode', 0x3d, 0xf18c}}]})

28.44841767s ago: executing program 8 (id=5086):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000680), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20000804)

28.261297388s ago: executing program 7 (id=5087):
syz_mount_image$jfs(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x101c002, &(0x7f0000000a00)=ANY=[@ANYBLOB='discard,discard=0x0000000000020001,discard,iocharset=cp857,errors=remount-ro,iocharset=iso8859-2,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c6572726f72733d72656d6f756e742d726f2c696f636861727365743d69736f383835392d342c00fb8602bc827d678ff4d12dba8652b9d39b4b4ff5657dd6ec1c923fb62ce2b91d41de0069a0e4d9cc00c46db0687686104197b53eeedda4d051ba690ba658ce6beb"], 0x23, 0x61c3, &(0x7f000000c9c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x187842, 0x0)

28.032988193s ago: executing program 7 (id=5088):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xc, 0xac, &(0x7f0000000100)="$eJzs0jFqwzAUBuBnY7cdu3foDXwHn6BnMB3tzZNLJ9+nlyh07RFygwxZsygYyUP2QAh8H0hPP/8ikP7PP2+xRryvESmlJu2aSPPyNQ7TvLTjMEVEG3+RVWU+Bw+uLs/ZR/4DWz72uatKfzh9f+4rNx+/eT7d7+IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEPV63Wuo+vK8WXbLgEAAP//2Bwh+A==")
creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)

27.536135999s ago: executing program 7 (id=5089):
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
pselect6(0x40, &(0x7f0000000340)={0xd, 0xa3cd, 0x6, 0x7, 0x9, 0x9, 0x5, 0x1}, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x3938700}, 0x0)

27.459383094s ago: executing program 38 (id=5089):
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
pselect6(0x40, &(0x7f0000000340)={0xd, 0xa3cd, 0x6, 0x7, 0x9, 0x9, 0x5, 0x1}, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x3938700}, 0x0)

27.356817534s ago: executing program 8 (id=5091):
r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
fchdir(r1)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0)
close(0x3)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)

27.189268519s ago: executing program 39 (id=5091):
r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
fchdir(r1)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0)
close(0x3)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)

4.602700943s ago: executing program 0 (id=5300):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000000400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x4d008}, 0x2000c000)

4.497861489s ago: executing program 0 (id=5301):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_io_uring_setup(0x3b, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0, 0xe3d08660d3cd4e84})
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000040)={'filter\x00', 0x104, 0x4, 0x3e0, 0x1f8, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110, 0x0, {0x0, 0xd2030000}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local, @remote, @multicast1}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'vlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430)
io_uring_enter(r3, 0x92, 0x0, 0x0, 0x0, 0x0)

3.588279912s ago: executing program 0 (id=5308):
r0 = socket(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x6)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x9)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1)

3.463604648s ago: executing program 0 (id=5313):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810754, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@errors_continue}, {@delalloc}, {@prjquota}, {@usrquota}, {@resuid={'resuid', 0x3d, 0xee00}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xfffffffc}}, {@nodiscard}, {@test_dummy_encryption}]}, 0xff, 0x46e, &(0x7f0000000e40)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000380), 0x24, 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000040)='./bus\x00', 0x800, 0x0, 0x0, 0x0, &(0x7f0000000000))

3.322624055s ago: executing program 0 (id=5317):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0)
write$binfmt_elf64(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c460e02f9b7ff7f00000000000002000300fffeffffdf020000000000004000000083c10000030300000007000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000000005000000000000000204"], 0x78)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101)

2.043163918s ago: executing program 0 (id=5332):
syz_usb_connect(0x0, 0x89, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x49, 0xde, 0x32, 0x8, 0xc72, 0x11, 0x3b0d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x2, 0xb, 0x0, 0xc0, 0x6, [{{0x9, 0x4, 0x9e, 0x51, 0x2, 0x35, 0x2c, 0x84, 0xf8, [@uac_control={{0xa, 0x24, 0x1, 0xda9, 0x6c}, [@selector_unit={0x5, 0x24, 0x5, 0x1, 0x5}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x8, 0x2, "fa"}]}], [{{0x9, 0x5, 0xe, 0x4, 0x200, 0x0, 0x6, 0x36, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x3}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x7, 0x4, 0x5}}]}}, {{0x9, 0x4, 0xa4, 0x6, 0x5, 0x80, 0xd2, 0xa9, 0x80, [], [{{0x9, 0x5, 0xf, 0x10, 0x8, 0x20, 0x6, 0x24}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x8, 0x1, 0x8}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x5, 0x6, 0x1}}, {{0x9, 0x5, 0xf, 0x3, 0x200, 0xb3, 0x54, 0x7}}, {{0x9, 0x5, 0x0, 0x3, 0x40, 0x6, 0x7, 0xa}}]}}]}}]}}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0})

1.587434959s ago: executing program 9 (id=5341):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x462, &(0x7f0000000d80)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2)
truncate(&(0x7f0000000100)='./file0\x00', 0x8000000)

1.488185712s ago: executing program 9 (id=5344):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0x14, 0x3, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0xc0000}, 0x4)

1.43809507s ago: executing program 1 (id=5346):
r0 = landlock_create_ruleset(&(0x7f0000000140)={0x1018, 0x2, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x1)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00')

1.386126227s ago: executing program 9 (id=5347):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000001c0)={0x3b, {0x9, 0x5a64, 0x10001, 0x174, 0x10000, 0x5}})

1.385768744s ago: executing program 1 (id=5348):
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9d, 0x8b, 0xf5, 0x40, 0x46d, 0x8b8, 0xfbbc, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x5, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x0, 0xdb, 0xc0, 0x2d, 0x40}}]}}]}}, 0x0)

1.326248848s ago: executing program 9 (id=5349):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000)

1.325802658s ago: executing program 9 (id=5350):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="8893234d2d30ec065fa4972940dd2151bb2889e1519c77267b721bb9421eda90f8185827096f2dc855fc0b8c84bfe2d36fba7b74a5f7f6243d4fc1b4596230cd8c01b4cb8cfa1d7c9a10d6670af8b38451b98bfd5f5ee4d3cf3a4c220306a81e5cd2d005e0f8a2ecbcde7415198751367222dbfeef6c1a2bcfa21439372423a82c2acfb32af4ea24ed9c5d0c8a55c78f312979feec3b876921eb800df382573bfec918d416316511670c7182f776363ee52088d10070918b5df39a501c5ef3e9fb752dac006f5a52"})
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1)
removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000001c00)=ANY=[])
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bind$unix(0xffffffffffffffff, &(0x7f0000002180)=@file={0x1, './file0\x00'}, 0x6e)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x10)
ftruncate(r1, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001c40)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r1)
recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000001b80)=""/112, 0x70}], 0x1}}], 0x1, 0x700, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg$inet6(r1, 0x0, 0x0, 0x4010)
sendfile(r2, r1, 0x0, 0x578410eb)
process_vm_readv(0x0, &(0x7f0000008400), 0x0, &(0x7f0000008640), 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r4, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000780)=""/242, 0xf2}, {&(0x7f0000002200)=""/4110, 0x1000}], 0x2, 0x0, 0x64}, 0x60}], 0x1, 0x42, 0x0)
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x641, 0x101001)
write$evdev(r5, &(0x7f0000000300)=[{{0x77359400}, 0x2, 0x10, 0xb}, {{}, 0x0, 0x97, 0x10}, {{0x0, 0xea60}, 0x14, 0xa, 0x2eca}], 0xfed1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x200, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000100))
socket$nl_netfilter(0x10, 0x3, 0xc)

230.469187ms ago: executing program 1 (id=5351):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2})
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)=@multiplanar_userptr={0x20, 0xa, 0x4, 0x400, 0x4, {0x0, 0xea60}, {0x1, 0x8, 0x7, 0x82, 0xe, 0x0, "bc8feb13"}, 0x8, 0x2, {&(0x7f0000000440)=[{0x8001, 0x7fffffff, {0x0}, 0x1000}, {0x3, 0xdf9, {0x0}, 0xd90b}]}, 0x6})

180.183435ms ago: executing program 1 (id=5352):
r0 = socket$inet6(0xa, 0x3, 0xe)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000300)=0x9, 0x4)

178.561429ms ago: executing program 1 (id=5353):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_RULE_COMPAT_FLAGS={0x8}]}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

428.954µs ago: executing program 1 (id=5354):
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x1, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESOCT=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$video4linux(0x0, 0x0, 0x82080)
ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0445624, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chroot(&(0x7f0000000a40)='./file0\x00')
syz_open_dev$tty20(0xc, 0x4, 0x1)
syz_open_dev$tty20(0xc, 0x4, 0x1)

0s ago: executing program 9 (id=5355):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f00000002c0)={[{@quota}, {@noquota}, {@nointegrity}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@noquota}, {@gid}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jl989qBxEDI38nfwMYxISSb7NpO/EKbYsJrw1sJhEJfsF3v2iz4Da9dAo1k00CJhFFRRdtw0RYQanNTkQsuaAUoF6gVUiVoL+gNokLlIqoCCkiVaAXZas55nmdnZmdndu3x+sw5n4+U/LIzZ+acOXPm7H53850BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoNWtr5//dCPLsuY/+b+2ZtkLmv+9eWprftlrrvUWAgAAAFfqV/m/n7shXXBwDTdqWeafX/7dry0tLS1l7xv98/HPLy2lK6aybHxTluXXRU/96P2N1mWCx7LJxkjL1yN9Vj/a5/qxPteP97l+os/1m/pcP9nn+hU7YIXNxe9j8jvbmf/n1mKXZjdm4/l1O7vc6rHGppGR+LucXCO/zdL4sWwhO5HNZ7NtyxfLNvLlv3Frc11vyeK6RlrWtb15hPzs0aNxGxphH+9sW9fyfUY/eV029fOfPXr0b889e3O32Xc3tN1fsZ137Ghu5yfDJcW2NrJNaZ/E7Rxp2c7tXZ6T0bbtbOS3a/5353Y+t8btHF3ezA3V+ZxPZiP5f38v309jrb/WS/tpe7jsF7dlWXZxebM7l1mxrmwk29J2ycjy8zNZHJHN+2geSi/OxtZ1nN66huO0Oed2th+nna+J+PzfGm43tso2tD5NP/nERMvz/sulyzlOo+ajXu210nkMDvq1UpZjMB4X38sf9ONdj8Gd4fE/evvqx2DXY6fLMZged8sxuKPfMTgyMZpvc3oSGvltlo/BXW3Lj+ZrauTzmdt7H4Mz506emVn82MfvXjh55Pj88flTe3btmt2zd+/+/ftnji2cmJ8t/n2Ze7v8tmQj6TWwI+y7+Bp4VceyrYfq0pcmVpx/L/d1ONnjdbi1Y9lBvw7HOh9cY2NekCuP6eK18Z7mTp+8NJKt8hrLn587r/x1mB53y+twrOV12PV7SpfX4dgaXofNZc7cubafWcZa/um2Dat/L7iyY3BryzHY+fNI5zE46J9HynIMTobj4gd3rv69YHvY3sen1/vzyOiKYzA93HDuaV6Sft6f3J+PbsflLc0rrpvIzi/On73nkSPnzp3dlYWxIV7Scqx0Hq9bWh5TtuJ4HVn38Xpw4eWP39Ll8q1hX03e3fzX5KrPVXOZe+/p/Vzl392678+2S3dnYQzYRu/Pbt/Nm/tzIsu+8O1PPPTNR7/w+lX3ZzNvfnLmyn8WT7m05fw7vsr5N+b+54v1pbt6bHR8rHj9jqa9M952Pm5/qsbyc1cjX/dzM2s7H4+Hfzb6fHxjj/Pxto5lB30+Hu98cPF83Oj3244r0/l8Tobj5MRs7/Nxc5ltu9d7TI71PB/fFmYj7P9Xh6SQclHLsbPacZvWNTY2Hh7XWFxD+3G6p2358ZDNmut6cnf4oTBt5dqO0ztuK5YfbbldtFHH6VTHsoM+TtPvvlY7Thv9fvt2eTqfz8lwXNy4p/dx2lzm6Xuv/Ny5Of5ny7lzot8xOD460dzm8XQQ5uf7bGlzPAbvyY5mp7MT2Vx+7UR+PDXydU3ft7Zz5UT4Z6PPldt6HIN3dCw76GMwfR9b7dhrjK188APQ+XxOhuPiift6H4PNZd6wb7A/u94RLknLtPzs2vn7tdV+53VLx266WsfKWNjOb+/r/bvZ5jIn9q83Z/beT3eFS67rsp86X7+rvabmso3ZT9vCdj67f/X91Nye5jKfP7DG4+lglmUXPvJA/vve8PeVC+e//7W2v7t0+5vOhY888NMXHvun9Ww/AMPv+WJsKb7Xtfxlai1//wcAAACGQsz9I2Em8j8AAABURsz98f8KT+R/AAAAqIyY+8fCTKqQ//+4/yLb3vDswvMXstTMXwri9Wk3PFgsFzuus+HrqaVlzcsf+Mr8f//jhbVt3kiWZb988I+6Lr/twbhdhamwnU+9sf3yFb5295rWffjhC2m9rf31L4b7j49nrYdBtwrubJZl37jhs/l6pt5/KZ9PP3g4nw9dfPyx5jLPHSi+jrd/5iXF8n8Vyr8Hjx1pu/0zYT/8OMzZt3bfH/F2X7306u373ru8vni7xo7r84f9xAeK+43vk/O5x4rl435ebfu/+Zknv9pc/pFXdt/+CyPdt//JcL9fCfN/XlYs3/ocNL+Ot/tU2P64vni7e778ra7b/9Sni+XPvKlY7nCYcf13hK93vunZhdb99UjjSNvjyt5cLBfXP/v9P82vj/cX779z+ycPXWrbH53Hx9P/VtzPTMfy8fK4nugfOtbfvJ/W4zOu/8k/Ody2n/ut/6mHnnlZ8347139Xx3JnPnJnvv7l+2t/x6a//tRnu64vbs/Bvz/T9ngOviu8jsP6n/hAOB7D9f/7VHF/ne+ucPhd7eefuPwXt15oezzRW35erP+p1x7P56bJzVuue8ELr7/4iua+y7LvbSrur9/6j//N6bbt/9JNxf6I18eOfuf6VxPXf/aj06dOL55fmEt79dEb8vfOeVuxPXF7bwjn1s6vD50+98H5s1OzU7NZNlXdt9C7bF8O86fFuNh76aUVZ9A7Hw7P5y1/+Y0tt//rZ+Ll//6e4vJLby2+b70qLPe5cPnW8Pytb/0rPXHrTfnru/F02MKlle8XfCW27/yv/WtaMDz+zp8L4vF+5qUfzPdD87r8+0Z8XV/h9v9wrrifr4f9uhTemXnHTcvra10+vjfCpXcXr/cr3n/hNBef178Lz/fbf1zcf9yu+Hh/GH6O+da29vNdPD6+fmGk8/7zd/G4GM4n2cXi+rhU3N+Xnrup6+bF9yHJLt6cf/1n6X5uXtfDXM3ixxZnTiycOv/IzLn5xXMzix/7+KGTp8+fOncofy/PQx/qd/vl89OW/Pw0N7/33iw/W50uxlV2rbf/zMNH5/bN3j43f+zI+WPnHj4zf/b40cXFo/Nzi7cfOXZs/qP9br8wd/+u3Qf27Ns9fXxh7v79Bw7sOTC9cOp0czOKjepj7+yHp0+dPZTfZPH+ew/suu++e2enT56em79/3+zs9Pl+t8+/N003b/2H02fnTxw5t3Byfnpx4ePz9+86sHfv7r7vBnjyzLHFqZmz50/NnF+cPztTPJapc/nFze99/W5PNS3+R/HzbKdG8UZ82Tvv2pven7XpK59Y9a6KRTreQPTZ8F4033nRmf1r+Trm/vEwkyrkfwAAACAXc/9EmIn8DwAAAJURc/+mMBP5HwAAACoj5v7JMNP/ElCT/F+5/v+2C2tav/6//n/r/tL/r1n//91l6/8X5wv9/8G40v69/n+g/6//r/+v/6//zwCUrf8fc//mLPP3fwAAAKiomPu3hJnI/wAAAFAZMfdfF2Yi/wMAAEBlxNz/gjCTmuR//X/9f/1//X/9/+7r1/8fTvr/ven/96H/P5PVq/9/cZDbfw36/5tbv9D/p4zK1v+Puf+FYSY1yf8AAABQBzH3Xx9mIv8DAABAZcTcf0OYifwPAAAAlRFz/9Ywk5rkf/3/K+r/p86V/n/79uv/t9P/D8eD/r/+/wbQ/+9N/78P/X+f/z9c/f82+v+UUdn6/zH3vyjMpCb5HwAAAOog5v4Xh5nI/wAAAFA+Y5d3s5j7XxJmsiL/X+YKAAAAgGsu5v4bs44ieE3+/q//7/P/9f/1//X/u69/7f3/0Uz/vzz0/3vT/+9D/1//X/9f/5+BKlv/P8/92WT20jCTmuR/AAAAqIOY+28KM5H/AQAAoDJi7v9/YSbyPwAAAFRGzP3bwkxqkv/1/yvT//9F61On/6//32v9+v8+/7/K9P970//vQ/9f/1//X/+fgSpb/z/m/pvDTGqS/wEAAKAOYu6/JcxE/gcAAIDKiLn//4eZyP8AAABQGTH3bw8zqUn+1/8vef8/Nkd9/r/+v/5/Kfv/k/r/paP/35v+fx/6//r/+v/6/wxU2fr/Mfe/LMykJvkfAAAA6iDm/peHmcj/AAAAUBkx978izET+BwAAgMqIuX8qzKQm+X89/f/GRf3/1Vzlz/+fWMPn/7fR/9f/77V+/X+f/19l+v+96f/3of+v/6//r//PQJWt/x9z/61hJjXJ/wAAAFAHMffvCDOR/wEAAKAyYu6/LcxE/gcAAIDKiLl/Z5hJTfK/z/8fiv5/pv+v/6//r/+v/782+v+96f/3of+v/6//r//PQJWt/x9z/yvDTGqS/wEAAKAOYu6/PcxE/gcAAIDKiLn/VWEm8j8AAABURsz9d4SZ1CT/6//r/+v/6//r/3dfv/7/cNL/703/vw/9f/1//X/9fwaqbP3/mPtfHWZSk/wPAAAAdRBz/51hJvI/AAAAVEbM/XeFmcj/AAAAUBkx90+HmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j77w4zqUn+BwAAgDqIuf+eMBP5HwAAACoj5v6ZMBP5HwAAACoj5v7ZMJOa5H/9f/1//X/9/3X1/1+xfL/6/wX9/3LR/+9N/78P/X/9/2ve/x/X/6dSytb/j7l/V5hJTfI/AAAA1EHM/bvDTOR/AAAAqIyY+/eEmcj/AAAAUBkx998bZlKT/K//r/+v/6//7/P/u69f/3846f/3Nvj+f3yI+v/6//r/Pv9f/5+Vytb/j7n/vjCTmuR/AAAAqIOY+/eGmcj/AAAAUBkx9+8LM5H/AQAAoDJi7t8fZlKT/K//r/+v/6//r//fff36/8NJ/783n//fh/6//v8Q9/+bx5b+P2VTtv5/zP0Hwkxqkv8BAACgDmLuf02YifwPAAAAlRFz/6+Fmcj/AAAAUBkx9/96mElN8r/+v/6//r/+f9n7/xP6//r/66D/35v+fx/6//r/Q9z/9/n/lFHZ+v8x998fZlKT/A8AAAB1EHP/b4SZyP8AAABQGTH3vzbMRP4HAACAyoi5/2CYSU3yv/7/BvX/44X6//r/+v8+/1///6rS/+9N/78P/X/9f/1//X8Gqmz9/5j7XxdmUpP8DwAAAHUQc/8DYSbyPwAAAFRGzP2vDzOR/wEAAKAyYu5/Q5hJTfK//r/P/7/2/f/xtm3X/1++nf5/Qf9f/3899P970//vQ/9f/1//X/+fgSpb/z/m/jeGmdQk/wMAAEAdxNz/pjAT+R8AAAAqI+b+N4eZyP8AAABQGTH3vyXMpCb5X/9f///a9/99/r/+f0H/X/9/EPT/e9P/70P/X/9f/1//n4EqW/8/5v7fDDOpSf4HAACAOoi5/8EwE/kfAAAAKiPm/reGmcj/AAAAUBkx978tzKQm+V//X/9f/1//X/+/+/r1/4eT/n9vQ9b//9X14XL9/4L+f7m3f739/7GOr69K//9Hq/X/lzZ13l7/n6uhbP3/mPvfHmZSk/wPAAAAdRBz/zvCTOR/AAAAqIyY+98ZZiL/AwAAQGXE3P9bYSY1yf/6/83tWG4v6//r/+cX6P/r/+v/Dy39/96GrP/v8/876P+Xe/t9/r/+PyuVrf8fc/+7wkxqkv8BAACgDmLufyjMRP4HAACAyoi5/91hJvI/AAAAVEbM/e8JM6lJ/tf/9/n/+v/6//r/3dev/z+c9P970//vQ/9f/79s/f//1P9nuJWt/x9z/8NhJjXJ/wAAAFAHMfe/N8xE/gcAAIDKiLn/t8NM5H8AAACojJj73xdmUpP8r/8/LP3/Kf3/dfb/J8Jl+v/6//r/9aL/35v+fx/6//r/Zev/+/x/hlzZ+v8x978/zGTt+X9yzUsCAAAA10TM/b8TZlKTv/8DAABAHcTc/7thJvI/AAAAVEbM/b8XZlKT/K//Pyz9f5//n/n8f/3/jsej/6//383G9f/jmUf/X/9f/z/S/9f/1/+nU9n6/zH3/36YSU3yPwAAANRBzP0fCDOR/wEAAGAodPt/sjvF3H8ozET+BwAAgMqIuf9wmElN8r/+v/6//n9J+/9/seNffvDddxzepf+v/6//vy4b+vn/zRe/z//X/9f/T/T/9f/1/+lUtv5/zP1HwkyWg9/bfMA/AAAADLeY+/8gzKQmf/8HAACAOoi5/2iYifwPAAAAlRFz/1yYSU3yv/6//r/+f0n7/0P8+f9xfwxT/3960xD1/+NJV/+/qw3t/793uSeu/7/e/v9E10s7+/8N/f82+v/r3v7vZFmm/6//zzVUtv5/zP3zYSY1yf8AAABQByH3jxwr5vIV8j8AAABURsz9x8NM5H8AAACojJj7PxhmUpP8r/+v/6//r//v8/+7r7+0/X+f/9+T/n9v5en/d+fz//X/h3n79f/1/1mpbP3/mPsXwkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/4fDTOR/AAAAqIyY+0+EmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j7T4aZ1CT/AwAAQB3E3H8qzOT/2LuPJsvq847jt3FTzBQb77zwwt77JbAwa/sFeMHGC7vK5YWxjXNicI4454BtJRRQAAmhhHICJSSUhSSUc0AZSTUqmOd5Znr69LndM7e7z/0/n89CDzSMzkU1BfrRfDn2PwAAAAwjd//NcYv9DwAAAMPI3f/LcUuT/a//1/8P2///pP7/oOfr//X/I9P/z9P/r6H/1//r//X/bNTS+v/c/b8StzTZ/wAAANBB7v5fjVvsfwAAABhG7v5b4hb7HwAAAIaRu//X4pYm+/+y/n9n1bP/z4xX/z9S/+/9/wc+X/+v/x/Zyfb/tz3xZz79v/5f/x/0//p//T+XW1r/n7v/1+OWJvsfAAAAOsjd/xtxi/0PAAAAw8jd/5txi/0PAAAAw8jd/1txS5P97/3/3v+v/9f/6/+nn6//307e/z+vU/9/y8PX/9Jj9/7ofUd5vv5f/6//1/+zWUvr/3P3/3bc0mT/AwAAQAe5+38nbrH/AQAAYBi5+383brH/AQAAYAudnfxq7v7fi1ua7H/9v/5f/x/9/xn9v/5f/z8C/f+8Tv3/lTxf/6//1//r/9mspfX/uft/P25psv8BAACgg9z9fxC32P8AAACwXFP/IPaM3P23xi32PwAAAAwjd/+5uKXJ/tf/H3///339/3b0/97/r//X/w9B/z9P/7+G/l//r//X/7NRS+v/c/ffFrc02f8AAADQQe7+P4xb7H8AAAAYRu7+P4pb7H8AAAAYRu7+P45bmux//b/3/+v/9f/6/+nn6/+3k/5/nv5/Df3/1fbz1+r/9f/6fy51xP7/8Zk/bW+k/8/d/ydxS5P9DwAAAB3k7v/TuMX+BwAAgGHk7v+zuMX+BwAAgGHk7v/zuKXJ/tf/6//1//r/K+7/9//Ue5L+f5r+/2To/+ctpv/f2Z38sv5/6/t/7//X/+v/2WNp7//P3f8XcUuT/Q8AAAAd5O7/y7hlZv8f+W/mAwAAAKcqd/9fxS2+/w8AAABbL6uz3P1/Hbc02f/6f/2//l//7/3/08+f6//vu+Tz6f+XRf8/bzH9/wH0//r/bf78+n/9P/strf/P3f83cUuT/Q8AAAAd5O6/PW6x/wEAAGAYufv/Nm6x/wEAAGAYufv/Lm5psv+n+/+Lv13/fzj6/72fX/8//fNjU/1//jfq/2f7/xu9/78n/f88/f8a+n/9v/7/oP7/7Lofr/9nytL6/9z9fx+3NNn/AAAA0EHu/n+IW+x/AAAAGEbu/n+MW+x/AAAAGEbu/n+KW5rsf+//1//r/7ev//f+/wtO8/3/qxPv/3f1/4ek/5+n/19D/6//1//Pv/9/5t8CoP9nytL6/9z9/xy3NNn/AAAA0EHu/n+JW+x/AAAA2A6X/rMDl/8DpSF3/7/GLfY/AAAADCN3/7/FLePs/9l3der/9f/6f/2//n/6+cvq/73//7D0//P0/2vo/4+jn98drP+/46Afv4T+/9bj7v9n6P+Zsqf/v//i10+r/8/d/+9xyzj7HwAAANrL3f8fcYv9DwAAAMPI3f+fcYv9DwAAAMPI3f9fcUuT/X/s/f/Mv31A/6//1//r//X/+v9N0//P0/+vof/3/n/v/9f/s1F7+v9LnFb/n7v/v+OWJvsfAAAAOsjd/z9xi/0PAAAAw8jdf0fcYv8DAADAMHL3/2/c0mT/e/+//l//r//X/08/X/+/na6qv79G/1/0//p//b/+X//PBiyt/8/d/39xS5P9DwAAAB3k7v//uMX+BwAAgGHk7n9K3GL/AwAAwDBy9z81bmmy//X/x9v/59f1//r/lf5f/6//PxFt3/+/M/VXov0O6P8f/IVzP733K/p//b/+X/+v/+eQfnjmty2i/z9/8f9d5u5/WtzSZP8DAABAB7n7nx632P8AAAAwjNz9z4hb7H8AAAAYRu7+O+OWI+7/ueZhyfT/3v+v/9f/6/+nn6//305t+/9D8v7/NfT/+n/9v/6fjVpE/3/Jr+fuf2bc4vv/AAAAMIzc/c+KW+x/AAAAGEbu/mfHLfY/AAAADCN3/3Pilib7X/+v/9f/6//1/9PP1/9vJ/3/PP3/GtvU/995Ff3/7vSXT7ufv1qn/fn1//p/9lta/5+7/664pcn+BwAAgA5y9z83brH/AQAAYBi5+58Xt9j/AAAAMIzc/c+PW5rsf/2//l//r//X/08/X/+/nfT/8/T/q9Xq7pkPMNX/n79umf2/9/8v7vPr//X/7Le0/j93/wvilib7HwAAADrI3X933GL/AwAAwDBy998Tt9j/AAAAMIzc/S+MW5rsf/2//l//r//X/08/X/+/nfT/8/T/a2zT+//1/4v7/Pp//T/7La3/z93/orilyf4HAACADnL33xu32P8AAAAwjNz9L45b7H8AAAAYRu7+++KWJvtf/6//1//r//X/08/X/2+n4+v/V/p//b/+fw39v/5f/8/lltb/5+5/SdzSZP8DAABAB7n7Xxq32P8AAAAwjNz9L4tb7H8AAAAYRu7+l8ctTfa//l//r//X/+v/p5+v/99O3v8/T/+/hv5f/6//1/+zUdP9/62n1v/n7n9F3NJk/wMAAEAHufvvj1vsfwAAABhG7v5Xxi32PwAAAAwjd/+r4pYm+1//r//f2/+vVvp//b/+/4IT6P/PrPT/G6f/n6f/X0P/P2b/f81qoP7/7IE/Xv/PEi3t/f+5+18dtzTZ/wAAANBB7v7XxC32PwAAAAwjd/9r4xb7HwAAAIaRu/91cUuT/a//1/97/7/+X/8//Xzv/99O+v95+v819P9j9v/e/6//59Qsrf/P3f/6uKXJ/gcAAIAOcve/IW6x/wEAAGAYufvfGLfY/wAAADCM3P1vilua7H/9v/5f/6//1/9PP1//v530//P0/2vo//X/+n/9Pxu1tP4/d/+b45Ym+x8AAAA6yN3/QNxi/wMAAMAwcvc/GLfY/wAAADCM3P1viVua7H/9v/5f/7+d/f8Z/b/+X/8/aSn9/w03/NRD+n/9v/5f/6//1/93t7T+P3f/W+OWJvsfAAAAOsjd/7a4xf4HAACAYeTuf3vcYv8DAADAMHL3vyNuabL/9/f/164uFKoXTPX/0ajp/y+h/9/7+fX/0z8/vP9f/6//P35L6f+9///KPr/+X/+/zZ//SP3/j+//8fp/RrS0/j93/0NxS5P9DwAAAB3k7n9n3GL/AwAAwDBy978rbrH/AQAAYBi5+x+OW5rsf+//1//r//X/+v/p5+v/t5P+f57+fw39v/7f+/9v/rkf0v+zOUvr/3P3vztuabL/AQAAoIPc/e+JW+x/AAAAGEbu/vfGLfY/AAAADCN3//vilib7X/+v/9f/6//1/9PP1/9vJ/3/PP1/ufwP7YI+/f+ZqS+edj9/tU778w/T/3v/Pxu0tP4/d//745Ym+x8AAAA6yN3/gbjF/gcAAIBh5O7/YNxi/wMAAMAwcvd/KG5psv/1//r/8fv/n9X/X/Z8/b/+f2T6//wr+jT9/xp9+v9Jp93Pb/vn1//r/9lvaf1/7v5H4pYm+x8AAAA6yN3/4bjF/gcAAIBh5O7/SNxi/wMAAMAwcvd/NG5psv/1/736/51Vx/7f+//1//r/TvT/8/T/a+j/9f/6f/0/G7W0/j93/6M7uy33PwAAAGyrn/mJX3zksL/vo0/+55nVx+KWG1fnD/ltbAAAAGDhntj9O7ur1cef/DXf/wcAAIAR5e7/RNzSZP/r/3v1/z3f/6//1//r/zvR/8/T/6+h/9f/6//1/2zU0vr/3P2fjFsuGX67R/6jBAAAAJYkd/+n4pYm3/8HAACADnL3fzpu2bf//esAAQAAYFvl7v9M3NLk+//6/4X3/6tj6v/j99P/X6D/1/9PPV//v530//Ousv8/v6P/1//P0P/r//X/XG5p/X/u/s/GLU32PwAAAAxqz99RyN3/ubjF/gcAAIBh5O7/fNxi/wMAAMAwcvd/IW5psv/1/yfe/2eqfozv/z9bv+T9/837/9vPTD5f/6//H5n+f573/6+h/x+l/79O/6//ZxmW1v/n7v9i3NJk/wMAAEAHufu/FLfY/wAAADCM3P1fjlvsfwAAABhG7v6vxC1N9r/+f+Hv/7+i/v8Q7//X//fo/w94/jj9/49cf+6Bm37+nrv0/1x0kv1//lzQ/+v/9f8XLKj/9/5//T8Lsfn+f3fPF4/a/+fu/2rc0mT/AwAAQAe5+x+LW+x/AAAAGEbu/q/FLfY/AAAADCN3/9fjlib7X/+v/19K/5//W59C/3/uivv/s6vV6lT6/2yKu/f/3v+v/9/P+//n6f/X0P/r//X/+n82avP9/94vHrX/z93/jbilyf4HAACADnL3fzNuyf2/c+S/dQ8AAAAsTO7+b8Utvv8PAAAAw8jd/+24pcn+1//r/5fS/yfv/7/448Z6//9NFaf27P9/rH5J/3+89P/z9P9r6P/1//p//T8btbT+P3f/d+KWJvsfAAAAOsjd/3jcYv8DAADAMHL3fzdusf8BAABgGLn7vxe3NNn/+v9R+/8s4vX/+v+l9P/e/+/9/ydD/z9P/7+G/l//r//X/7NRS+v/c/f/IAAA//9GqnSo")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00')

kernel console output (not intermixed with test programs):

6] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  475.073187][ T9143] usb 6-1: config 0 descriptor??
[  475.080782][ T5824] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  475.314237][T15585] Bluetooth: hci2: unknown advertising packet type: 0x82
[  475.322160][ T5851] usb 6-1: USB disconnect, device number 18
[  475.324611][T15585] Bluetooth: hci2: Malformed LE Event: 0x02
[  476.099273][   T33] audit: type=1326 audit(1759219723.228:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17276 comm="syz.5.4383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa058ec29 code=0x7ffc0000
[  476.131269][   T33] audit: type=1326 audit(1759219723.249:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17276 comm="syz.5.4383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa058ec29 code=0x7ffc0000
[  476.161816][   T33] audit: type=1326 audit(1759219723.249:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17276 comm="syz.5.4383" exe="/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9aa058ec29 code=0x7ffc0000
[  476.178353][   T33] audit: type=1326 audit(1759219723.249:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17276 comm="syz.5.4383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa058ec29 code=0x7ffc0000
[  476.191103][   T33] audit: type=1326 audit(1759219723.249:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17276 comm="syz.5.4383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa058ec29 code=0x7ffc0000
[  476.208083][   T33] audit: type=1326 audit(1759219723.249:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17276 comm="syz.5.4383" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9aa058ec29 code=0x7ffc0000
[  476.218299][   T33] audit: type=1326 audit(1759219723.249:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17276 comm="syz.5.4383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa058ec29 code=0x7ffc0000
[  476.233321][T17282] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4384'.
[  476.248288][   T33] audit: type=1326 audit(1759219723.249:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17276 comm="syz.5.4383" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa058ec29 code=0x7ffc0000
[  476.275641][   T33] audit: type=1326 audit(1759219723.260:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17276 comm="syz.5.4383" exe="/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f9aa058ec29 code=0x7ffc0000
[  476.471692][T17286] loop0: detected capacity change from 0 to 32768
[  476.614735][ T9143] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  476.757685][ T9143] usb 6-1: Using ep0 maxpacket: 8
[  476.764150][ T9143] usb 6-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  476.768940][ T9143] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.772394][ T9143] usb 6-1: Product: syz
[  476.774177][ T9143] usb 6-1: Manufacturer: syz
[  476.776131][ T9143] usb 6-1: SerialNumber: syz
[  476.781447][ T9143] usb 6-1: config 0 descriptor??
[  476.789048][ T9143] usb 6-1: selecting invalid altsetting 3
[  476.791726][ T9143] comedi comedi5: could not set alternate setting 3 in high speed
[  476.795068][ T9143] usbdux 6-1:0.0: driver 'usbdux' failed to auto-configure device.
[  476.806688][ T9143] usbdux 6-1:0.0: probe with driver usbdux failed with error -22
[  477.007990][  T974] usb 6-1: USB disconnect, device number 19
[  477.516864][T17328] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  477.647592][T17334] loop5: detected capacity change from 0 to 1024
[  477.663799][T17334] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  477.711212][T13502] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  477.965920][T17326] loop0: detected capacity change from 0 to 32768
[  477.970150][T17326] xfs: Unknown parameter 'attr2'
[  478.261624][T17348] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  478.723773][T17353] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  478.727705][T17353] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  478.731453][T17353] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  478.792144][T17355] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  478.796428][T17355] syzkaller0: entered promiscuous mode
[  478.798892][T17355] syzkaller0: entered allmulticast mode
[  478.828355][T17355] tipc: Resetting bearer <eth:syzkaller0>
[  478.836949][T17354] tipc: Resetting bearer <eth:syzkaller0>
[  478.866283][T17354] tipc: Disabling bearer <eth:syzkaller0>
[  479.460331][T17357] loop0: detected capacity change from 0 to 32768
[  479.475906][T17357] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  479.487316][T17357] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  479.555774][ T5824] ocfs2: Unmounting device (7,0) on (node local)
[  479.862353][T17375] block nbd0: server does not support multiple connections per device.
[  479.866050][T17375] block nbd0: shutting down sockets
[  479.917318][T17381] loop5: detected capacity change from 0 to 128
[  479.927419][T17381] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  479.937448][T17381] hpfs: filesystem error: improperly stopped
[  479.941932][T17381] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  479.945245][T17381] hpfs: You really don't want any checks? You are crazy...
[  479.949633][T17381] hpfs: hpfs_map_sector(): read error
[  479.951947][T17381] hpfs: code page support is disabled
[  479.956093][T17381] hpfs: hpfs_map_4sectors(): unaligned read
[  479.964229][T17381] hpfs: hpfs_map_4sectors(): unaligned read
[  479.969012][T17381] hpfs: filesystem error: unable to find root dir
[  479.988156][T17381] hpfs: hpfs_map_4sectors(): unaligned read
[  480.034065][T17389] netlink: 1319 bytes leftover after parsing attributes in process `syz.0.4429'.
[  480.192232][T17399] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  480.201940][T17399] CIFS: Unable to determine destination address
[  480.318623][T17405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4436'.
[  481.526427][T17432] loop6: detected capacity change from 0 to 1024
[  481.678627][T17438] loop0: detected capacity change from 0 to 8192
[  482.724485][T17475] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4465'.
[  483.651655][T17496] loop0: detected capacity change from 0 to 128
[  483.662394][T17496] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  483.669812][T17496] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  483.690973][   T33] kauditd_printk_skb: 42 callbacks suppressed
[  483.690985][   T33] audit: type=1804 audit(1759219731.197:357): pid=17496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4472" name="/newroot/1434/file0/bus" dev="loop0" ino=115 res=1 errno=0
[  483.745549][T15585] Bluetooth: hci2: command 0x0401 tx timeout
[  483.957557][T17507] loop5: detected capacity change from 0 to 512
[  483.996314][T17507] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  484.012724][T17507] ext4 filesystem being mounted at /499/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  484.077872][T13502] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  484.292003][T17517] loop5: detected capacity change from 0 to 512
[  484.303734][T17517] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  484.325975][T17517] EXT4-fs (loop5): 1 truncate cleaned up
[  484.334798][T17517] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  484.347229][T17517] EXT4-fs error (device loop5): ext4_get_verity_descriptor_location:298: inode #15: comm syz.5.4480: verity file has no extents
[  484.352631][T17517] EXT4-fs (loop5): Remounting filesystem read-only
[  484.355251][T17517] fs-verity (loop5, inode 15): Error -117 getting verity descriptor size
[  484.379964][T13502] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  484.729353][T17525] loop5: detected capacity change from 0 to 16
[  484.739781][T17525] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  484.854193][T17529] [U] 2
[  484.861137][T17528] [U] 2
[  484.939387][T17537] loop5: detected capacity change from 0 to 128
[  484.946303][T17537] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  485.148235][T17543] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4486'.
[  485.225253][T17543] veth1_macvtap: left promiscuous mode
[  485.539490][T17559] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4498'.
[  485.916893][   T33] audit: type=1326 audit(1759219733.538:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17574 comm="syz.0.4505" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715e18ec29 code=0x7ffc0000
[  485.926886][   T33] audit: type=1326 audit(1759219733.538:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17574 comm="syz.0.4505" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715e18ec29 code=0x7ffc0000
[  485.935630][   T33] audit: type=1326 audit(1759219733.549:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17574 comm="syz.0.4505" exe="/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f715e18ec29 code=0x7ffc0000
[  485.948098][   T33] audit: type=1326 audit(1759219733.549:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17574 comm="syz.0.4505" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715e18ec29 code=0x7ffc0000
[  485.967080][   T33] audit: type=1326 audit(1759219733.549:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17574 comm="syz.0.4505" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715e18ec29 code=0x7ffc0000
[  486.000567][T17579] loop0: detected capacity change from 0 to 512
[  486.015419][T17579] EXT4-fs (loop0): external journal device major/minor numbers have changed
[  486.022094][T17579] EXT4-fs (loop0): failed to open journal device unknown-block(8,1) -16
[  486.085198][T17583] ieee802154 phy0 wpan0: encryption failed: -22
[  486.291601][ T5290] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  486.419313][T17605] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  486.450770][ T5290] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[  486.457241][ T5290] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  486.461555][ T5290] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  486.473573][ T5290] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  486.478916][ T5290] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  486.500589][ T5290] usb 1-1: config 0 descriptor??
[  486.515756][ T5290] usb-storage 1-1:0.0: USB Mass Storage device detected
[  486.524276][ T5290] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  486.719244][  T791] usb 1-1: USB disconnect, device number 66
[  486.777765][  T974] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  486.931112][  T974] usb 7-1: Using ep0 maxpacket: 32
[  486.934552][  T974] usb 7-1: config 0 has an invalid interface number: 13 but max is 0
[  486.937614][  T974] usb 7-1: config 0 has no interface number 0
[  486.941285][  T974] usb 7-1: config 0 interface 13 has no altsetting 0
[  486.946078][  T974] usb 7-1: New USB device found, idVendor=54d5, idProduct=953f, bcdDevice=82.82
[  486.949249][  T974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.952035][  T974] usb 7-1: Product: syz
[  486.953557][  T974] usb 7-1: Manufacturer: syz
[  486.955197][  T974] usb 7-1: SerialNumber: syz
[  486.961534][  T974] usb 7-1: config 0 descriptor??
[  486.964735][  T974] usb-storage 7-1:0.13: USB Mass Storage device detected
[  487.085883][T17639] loop5: detected capacity change from 0 to 32768
[  487.089239][T17639] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4535 (17639)
[  487.101481][T17639] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  487.105255][T17639] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  487.148476][T17639] BTRFS info (device loop5): enabling ssd optimizations
[  487.152033][T17639] BTRFS info (device loop5): enabling free space tree
[  487.159845][  T791] usb 7-1: USB disconnect, device number 5
[  487.180172][T13502] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  487.524955][T17672] loop0: detected capacity change from 0 to 512
[  487.525661][T17673] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4543'.
[  487.532852][T17672] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  487.542860][T17672] EXT4-fs (loop0): 1 truncate cleaned up
[  487.544459][T17673] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4543'.
[  487.548864][T17672] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  487.559865][T17672] EXT4-fs error (device loop0): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.0.4544: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  487.579721][T17672] EXT4-fs error (device loop0) in ext4_delete_entry:2739: Corrupt filesystem
[  487.605891][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  487.811883][T17688] usb usb1: check_ctrlrecip: process 17688 (syz.5.4551) requesting ep 01 but needs 81
[  487.828968][T17692] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard
[  487.846622][T17692] exFAT-fs (nullb0): invalid boot record signature
[  487.848831][T17692] exFAT-fs (nullb0): failed to read boot sector
[  487.851075][T17692] exFAT-fs (nullb0): failed to recognize exfat type
[  487.937428][T17699] loop0: detected capacity change from 0 to 4096
[  487.943090][T17699] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  488.260105][T17723] dlm: no locking on control device
[  488.299055][T17725] loop0: detected capacity change from 0 to 256
[  488.334642][T17725] FAT-fs (loop0): Directory bread(block 64) failed
[  488.337526][T17725] FAT-fs (loop0): Directory bread(block 65) failed
[  488.341249][T17725] FAT-fs (loop0): Directory bread(block 66) failed
[  488.344145][T17725] FAT-fs (loop0): Directory bread(block 67) failed
[  488.346418][T17725] FAT-fs (loop0): Directory bread(block 68) failed
[  488.350138][T17725] FAT-fs (loop0): Directory bread(block 69) failed
[  488.352881][T17725] FAT-fs (loop0): Directory bread(block 70) failed
[  488.355399][T17725] FAT-fs (loop0): Directory bread(block 71) failed
[  488.357662][T17725] FAT-fs (loop0): Directory bread(block 72) failed
[  488.360762][T17725] FAT-fs (loop0): Directory bread(block 73) failed
[  488.401642][T17727] loop0: detected capacity change from 0 to 512
[  488.405251][T17727] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  488.411555][T17727] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.4570: Invalid block bitmap block 0 in block_group 0
[  488.418611][T17727] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  488.422332][T17727] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.4570: attempt to clear invalid blocks 983261 len 1
[  488.430064][T17727] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.4570: Invalid inode table block 0 in block_group 0
[  488.436570][T17727] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  488.441022][T17727] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  488.445528][T17727] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.4570: Invalid inode table block 0 in block_group 0
[  488.452039][T17727] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  488.456585][T17727] EXT4-fs error (device loop0): ext4_truncate:4666: inode #11: comm syz.0.4570: mark_inode_dirty error
[  488.460669][T17727] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  488.464377][T17727] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.4570: Invalid inode table block 0 in block_group 0
[  488.469068][T17727] EXT4-fs (loop0): 1 truncate cleaned up
[  488.472619][T17727] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  488.487108][T17727] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  488.499155][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  488.562908][T17731] netlink: 'syz.0.4571': attribute type 29 has an invalid length.
[  488.810545][T17741] loop6: detected capacity change from 0 to 1764
[  489.418752][T17759] netlink: 'syz.0.4582': attribute type 4 has an invalid length.
[  489.422058][T17759] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4582'.
[  489.452400][T17752] loop6: detected capacity change from 0 to 32768
[  489.525058][T17752] (syz.6.4580,17752,0):ocfs2_load_local_alloc:339 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2!
[  489.525058][T17752] found = 0, set = 0, taken = 0, off = 1280
[  489.538029][T17759] : renamed from bond0 (while UP)
[  489.560553][T17752] (syz.6.4580,17752,0):ocfs2_load_local_alloc:356 ERROR: status = -22
[  489.570821][T17752] (syz.6.4580,17752,0):ocfs2_check_volume:2404 ERROR: status = -22
[  489.578613][T17752] (syz.6.4580,17752,0):ocfs2_check_volume:2432 ERROR: status = -22
[  489.587451][T17752] (syz.6.4580,17752,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  489.608500][T17747] loop5: detected capacity change from 0 to 131072
[  489.613935][T17752] (syz.6.4580,17752,1):ocfs2_fill_super:1177 ERROR: status = -22
[  489.635658][T17747] F2FS-fs (loop5): invalid crc value
[  489.701043][T17747] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  489.705845][T17747] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  490.219055][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  490.226265][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  490.582806][T17779] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4583'.
[  490.908151][T17797] loop5: detected capacity change from 0 to 1764
[  491.502583][  T791] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  491.645938][  T791] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  491.649047][  T791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.653395][  T791] usb 6-1: config 0 descriptor??
[  491.863523][  T791] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  492.055346][  T791] [drm:udl_init] *ERROR* Selecting channel failed
[  492.079826][  T791] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 3
[  492.083083][  T791] [drm] Initialized udl on minor 3
[  492.090643][  T791] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  492.102705][  T791] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  492.114969][ T5872] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  492.128255][ T5872] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  492.134241][  T791] usb 6-1: USB disconnect, device number 20
[  492.139995][ T5872] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  492.258193][T17813] loop6: detected capacity change from 0 to 32768
[  492.317538][T17813] JBD2: Ignoring recovery information on journal
[  492.371143][T17813] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  492.410022][T16176] ocfs2: Unmounting device (7,6) on (node local)
[  492.595421][T17834] loop5: detected capacity change from 0 to 256
[  492.714036][T17842] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.4617'.
[  492.930913][T17837] loop6: detected capacity change from 0 to 32768
[  492.950398][T17837] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  492.987342][T17837] XFS (loop6): Ending clean mount
[  492.992693][T17837] XFS (loop6): Quotacheck needed: Please wait.
[  493.028653][T17837] XFS (loop6): Quotacheck: Done.
[  493.054793][ T5290] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  493.060078][T16176] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  493.215954][ T5290] usb 6-1: Using ep0 maxpacket: 16
[  493.221702][ T5290] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  493.233713][ T5290] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  493.242097][ T5290] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  493.247663][ T5290] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.250520][ T5290] usb 6-1: Product: syz
[  493.251954][ T5290] usb 6-1: Manufacturer: syz
[  493.253731][ T5290] usb 6-1: SerialNumber: syz
[  493.647954][ T5290] usb 6-1: 0:2 : does not exist
[  493.657798][ T5290] usb 6-1: USB disconnect, device number 21
[  493.674473][T17308] udevd[17308]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  494.313023][T17886] loop5: detected capacity change from 0 to 256
[  494.329988][T17886] FAT-fs (loop5): Directory bread(block 64) failed
[  494.334253][T17886] FAT-fs (loop5): Directory bread(block 65) failed
[  494.337137][T17886] FAT-fs (loop5): Directory bread(block 66) failed
[  494.339547][T17886] FAT-fs (loop5): Directory bread(block 67) failed
[  494.350292][T17886] FAT-fs (loop5): Directory bread(block 68) failed
[  494.352688][T17886] FAT-fs (loop5): Directory bread(block 69) failed
[  494.355041][T17886] FAT-fs (loop5): Directory bread(block 70) failed
[  494.364383][T17886] FAT-fs (loop5): Directory bread(block 71) failed
[  494.367552][T17886] FAT-fs (loop5): Directory bread(block 72) failed
[  494.370025][T17886] FAT-fs (loop5): Directory bread(block 73) failed
[  494.453171][T17894] vim2m vim2m.0: Fourcc format (0x47524247) invalid.
[  494.497048][T17898] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  494.608207][   T33] audit: type=1326 audit(1759219742.673:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.5.4644" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa058ec29 code=0x7ffc0000
[  494.617980][   T33] audit: type=1326 audit(1759219742.673:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.5.4644" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa058ec29 code=0x7ffc0000
[  494.626080][   T33] audit: type=1326 audit(1759219742.673:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.5.4644" exe="/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f9aa058ec29 code=0x7ffc0000
[  494.633686][   T33] audit: type=1326 audit(1759219742.673:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.5.4644" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa058ec29 code=0x7ffc0000
[  494.647532][   T33] audit: type=1326 audit(1759219742.673:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17905 comm="syz.5.4644" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aa058ec29 code=0x7ffc0000
[  494.714269][T17911] loop5: detected capacity change from 0 to 64
[  494.825617][ T5851] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  494.979159][ T5851] usb 7-1: Using ep0 maxpacket: 32
[  494.989444][ T5851] usb 7-1: config 0 has an invalid interface number: 12 but max is 0
[  494.992843][ T5851] usb 7-1: config 0 has no interface number 0
[  494.995452][ T5851] usb 7-1: config 0 interface 12 has no altsetting 0
[  495.002538][ T5851] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  495.006704][ T5851] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  495.010007][ T5851] usb 7-1: Product: syz
[  495.011715][ T5851] usb 7-1: Manufacturer: syz
[  495.013667][ T5851] usb 7-1: SerialNumber: syz
[  495.020377][ T5851] usb 7-1: config 0 descriptor??
[  495.871934][T17930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4654'.
[  496.020668][ T5851] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  496.023954][ T5851] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71
[  496.445166][ T5851] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  496.447882][ T5851] f81534 7-1:0.12: probe with driver f81534 failed with error -71
[  496.455032][ T5851] usb 7-1: USB disconnect, device number 6
[  496.861166][T17942] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4658'.
[  496.869101][T17942] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4658'.
[  497.355048][T17963] loop5: detected capacity change from 0 to 32768
[  497.364057][T17963] xfs: Unknown parameter 'attr2'
[  497.638418][T17985] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4678'.
[  497.682815][ T5851] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  497.837981][ T5851] usb 7-1: Using ep0 maxpacket: 8
[  497.850526][ T5851] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  497.854145][ T5851] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  497.858594][ T5851] usb 7-1: config 0 has no interface number 0
[  497.861227][ T5851] usb 7-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75
[  497.865383][ T5851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.871942][ T5851] usb 7-1: config 0 descriptor??
[  498.383364][ T5872] usb 7-1: USB disconnect, device number 7
[  500.254412][ T5290] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  500.372363][ T5872] kernel write not supported for file /vcsa1 (pid: 5872 comm: kworker/0:3)
[  500.397158][ T5290] usb 6-1: Using ep0 maxpacket: 8
[  500.401415][ T5290] usb 6-1: config 0 has no interfaces?
[  500.406810][ T5290] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  500.410473][ T5290] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.413746][ T5290] usb 6-1: Product: syz
[  500.415574][ T5290] usb 6-1: Manufacturer: syz
[  500.419157][ T5290] usb 6-1: SerialNumber: syz
[  500.423119][ T5290] usb 6-1: config 0 descriptor??
[  501.116148][  T791] usb 6-1: USB disconnect, device number 22
[  501.313016][T18054] loop6: detected capacity change from 0 to 4096
[  501.317040][T18054] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  501.330393][T18054] ntfs3(loop6): ino=3, ntfs_set_state failed, -22.
[  501.333350][T18054] ntfs3(loop6): Failed to initialize $Extend/$Reparse.
[  501.365031][ T1089] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22.
[  501.367984][T16176] ntfs3(loop6): ino=3, ntfs_set_state failed, -22.
[  501.371231][T16176] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  501.374582][T16176] ntfs3(loop6): ino=3, ntfs_set_state failed, -22.
[  501.385077][T11847] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22.
[  501.460918][T18058] loop6: detected capacity change from 0 to 256
[  501.466856][T18058] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  501.471653][T18058] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  501.484137][T18058] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  501.521642][  T791] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  501.667448][  T791] usb 6-1: Using ep0 maxpacket: 32
[  501.682097][  T791] usb 6-1: config 0 has no interfaces?
[  501.684798][  T791] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  501.691094][  T791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  501.709185][  T791] usb 6-1: config 0 descriptor??
[  501.922998][  T791] usb 6-1: USB disconnect, device number 23
[  502.390013][   T33] audit: type=1326 audit(1759219750.841:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18066 comm="syz.6.4713" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d9b8ec29 code=0x7ffc0000
[  502.410339][   T33] audit: type=1326 audit(1759219750.841:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18066 comm="syz.6.4713" exe="/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7ff0d9b8ec29 code=0x7ffc0000
[  502.434288][   T33] audit: type=1326 audit(1759219750.841:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18066 comm="syz.6.4713" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d9b8ec29 code=0x7ffc0000
[  502.447197][   T33] audit: type=1326 audit(1759219750.841:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18066 comm="syz.6.4713" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0d9b8ec29 code=0x7ffc0000
[  502.448501][T18069] openvswitch: netlink: EtherType 0 is less than min 600
[  502.577024][T18073] loop6: detected capacity change from 0 to 4096
[  502.750528][T18081] program syz.6.4720 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  503.608574][T18109] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4732'.
[  505.262038][T18153] input: syz1 as /devices/virtual/input/input45
[  505.389092][ T9143] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  505.543344][ T9143] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  505.546937][ T9143] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  505.550856][ T9143] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.557031][ T9143] usb 6-1: config 0 descriptor??
[  505.565237][ T9143] pwc: Askey VC010 type 2 USB webcam detected.
[  505.947068][ T9143] pwc: recv_control_msg error -32 req 02 val 2b00
[  505.950481][ T9143] pwc: recv_control_msg error -32 req 02 val 2700
[  505.953553][ T9143] pwc: recv_control_msg error -32 req 02 val 2c00
[  506.152395][ T9143] pwc: recv_control_msg error -32 req 04 val 1300
[  506.159391][ T9143] pwc: recv_control_msg error -32 req 04 val 1400
[  506.162925][ T9143] pwc: recv_control_msg error -32 req 02 val 2000
[  506.171570][ T9143] pwc: recv_control_msg error -32 req 02 val 2100
[  506.183451][ T9143] pwc: recv_control_msg error -71 req 04 val 1500
[  506.192874][ T9143] pwc: recv_control_msg error -71 req 02 val 2500
[  506.206990][ T9143] pwc: recv_control_msg error -71 req 02 val 2400
[  506.215266][ T9143] pwc: recv_control_msg error -71 req 02 val 2600
[  506.219436][ T9143] pwc: recv_control_msg error -71 req 02 val 2900
[  506.225728][ T9143] pwc: recv_control_msg error -71 req 02 val 2800
[  506.241288][ T9143] pwc: recv_control_msg error -71 req 04 val 1100
[  506.246776][ T9143] pwc: recv_control_msg error -71 req 04 val 1200
[  506.264354][ T9143] pwc: Registered as video103.
[  506.272169][ T9143] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input46
[  506.288628][ T9143] usb 6-1: USB disconnect, device number 24
[  507.007461][T18180] loop5: detected capacity change from 0 to 8192
[  507.013767][T18180] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  507.032119][T18180] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  507.036455][T18180] ntfs3(loop5): Failed to load $Extend (-2).
[  507.039205][T18180] ntfs3(loop5): Failed to initialize $Extend.
[  507.358466][T18190] loop6: detected capacity change from 0 to 64
[  507.364224][T18190] BFS-fs: bfs_fill_super(): Last block not available on loop6: 163903
[  507.569383][ T5851] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  507.721970][ T5851] usb 6-1: Using ep0 maxpacket: 16
[  507.726479][ T5851] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  507.731580][ T5851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  507.738411][ T5851] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  507.742485][   T24] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[  507.745710][ T5851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.749300][ T5851] usb 6-1: Product: syz
[  507.751304][ T5851] usb 6-1: Manufacturer: syz
[  507.753300][ T5851] usb 6-1: SerialNumber: syz
[  507.759444][ T5851] usb 6-1: config 0 descriptor??
[  507.914743][   T24] usb 7-1: config 0 has an invalid interface number: 120 but max is 0
[  507.918665][   T24] usb 7-1: config 0 has no interface number 0
[  507.925086][   T24] usb 7-1: New USB device found, idVendor=0ab4, idProduct=0011, bcdDevice=c6.7f
[  507.929066][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.932889][   T24] usb 7-1: Product: syz
[  507.934659][   T24] usb 7-1: Manufacturer: syz
[  507.936662][   T24] usb 7-1: SerialNumber: syz
[  507.944286][   T24] usb 7-1: config 0 descriptor??
[  507.949175][   T24] esd_usb 7-1:0.120: sending version message failed
[  507.952728][   T24] esd_usb 7-1:0.120: probe with driver esd_usb failed with error -22
[  508.026628][ T5851] appledisplay 6-1:0.0: Error while getting initial brightness: -110
[  508.032050][ T5851] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -110
[  508.147647][  T791] usb 7-1: USB disconnect, device number 8
[  508.465146][  T791] usb 6-1: USB disconnect, device number 25
[  508.673761][T18204] loop5: detected capacity change from 0 to 2048
[  508.734118][T17308] Alternate GPT is invalid, using primary GPT.
[  508.736826][T17308]  loop5: p1 p2 p3
[  508.750138][T18208] loop6: detected capacity change from 0 to 128
[  508.773526][T18204] Alternate GPT is invalid, using primary GPT.
[  508.776384][T18204]  loop5: p1 p2 p3
[  508.781996][T18208] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  508.795143][T18208] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  508.855378][T18208] loop6: detected capacity change from 128 to 64
[  508.868619][ T5825] udevd[5825]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  508.878866][ T5926] udevd[5926]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  508.880181][T17308] udevd[17308]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  508.894644][T18208] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Out of memory
[  508.899873][T18208] EXT4-fs error (device loop6): ext4_ext_tree_init:883: inode #13: comm syz.6.4777: mark_inode_dirty error
[  508.908508][T18208] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Out of memory
[  508.912863][T18208] EXT4-fs error (device loop6): __ext4_new_inode:1342: inode #13: comm syz.6.4777: mark_inode_dirty error
[  508.918000][T18208] EXT4-fs error (device loop6) in __ext4_new_inode:1344: Out of memory
[  508.925077][ T6065] udevd[6065]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory
[  508.925517][ T5825] udevd[5825]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  508.942851][T18208] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Out of memory
[  508.946815][T18208] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #13: comm syz.6.4777: mark_inode_dirty error
[  508.947309][T17308] udevd[17308]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory
[  508.958267][T18208] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -12)
[  508.983063][T18214] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4779'.
[  508.987291][T18214] 0X: renamed from caif0
[  509.006411][T18214] 0X: entered allmulticast mode
[  509.009124][T18214] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  509.081378][T18218] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4782'.
[  509.362335][T18224] loop5: detected capacity change from 0 to 4096
[  509.384392][T18224] /dev/loop5: Can't open blockdev
[  509.462460][T17771] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  509.476881][T18226] loop5: detected capacity change from 0 to 4096
[  509.780834][ T5833] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.869540][ T5833] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  509.923959][ T5833] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.009544][ T5833] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.102987][T15585] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  510.115035][T15585] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  510.120216][T15585] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  510.126269][T15585] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  510.131933][T15585] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  510.189026][ T5833] bridge_slave_1: left allmulticast mode
[  510.190936][ T5833] bridge_slave_1: left promiscuous mode
[  510.193633][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[  510.199313][ T5833] bridge_slave_0: left allmulticast mode
[  510.201152][ T5833] bridge_slave_0: left promiscuous mode
[  510.203119][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[  510.299802][T18240] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.4793'.
[  510.304989][T18240] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  510.308645][T18240] openvswitch: netlink: Duplicate key (type 0).
[  510.422880][T18246] netlink: 'syz.0.4796': attribute type 1 has an invalid length.
[  510.426162][T18246] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4796'.
[  510.724544][ T5833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  510.733870][ T5833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  510.741376][ T5833] bond0 (unregistering): Released all slaves
[  510.867471][ T5833] tipc: Disabling bearer <udp:syz0>
[  510.873117][ T5833] tipc: Left network mode
[  511.440947][ T5833] hsr_slave_0: left promiscuous mode
[  511.446902][ T5833] hsr_slave_1: left promiscuous mode
[  511.454332][ T5833] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  511.465601][ T5833] batman_adv: batadv0: Removing interface: batadv_slave_0
[  511.469800][ T5833] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  511.472902][ T5833] batman_adv: batadv0: Removing interface: batadv_slave_1
[  511.493152][ T5833] veth0_macvtap: left promiscuous mode
[  511.500395][ T5833] veth1_vlan: left promiscuous mode
[  511.502693][ T5833] veth0_vlan: left promiscuous mode
[  512.074858][ T5213] Bluetooth: hci0: command tx timeout
[  512.530185][T18309] loop5: detected capacity change from 0 to 32768
[  512.678293][ T5833] team0 (unregistering): Port device team_slave_1 removed
[  512.718242][ T5833] team0 (unregistering): Port device team_slave_0 removed
[  512.764339][T18313] binder: 18312:18313 unknown command 0
[  512.766434][T18313] binder: 18312:18313 ioctl c0306201 200000000080 returned -22
[  513.200997][T18237] chnl_net:caif_netlink_parms(): no params data found
[  513.345002][T18237] bridge0: port 1(bridge_slave_0) entered blocking state
[  513.356925][T18237] bridge0: port 1(bridge_slave_0) entered disabled state
[  513.363458][T18237] bridge_slave_0: entered allmulticast mode
[  513.371243][T18323] input: syz0 as /devices/virtual/input/input47
[  513.376323][ T1089] Bluetooth: hci3: Frame reassembly failed (-84)
[  513.376562][T18237] bridge_slave_0: entered promiscuous mode
[  513.407336][T18237] bridge0: port 2(bridge_slave_1) entered blocking state
[  513.425328][T18237] bridge0: port 2(bridge_slave_1) entered disabled state
[  513.429251][T18237] bridge_slave_1: entered allmulticast mode
[  513.437463][T18237] bridge_slave_1: entered promiscuous mode
[  513.508169][T18237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  513.515048][T18237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  513.538254][ T5833] IPVS: stop unused estimator thread 0...
[  513.542135][T18237] team0: Port device team_slave_0 added
[  513.545752][T18237] team0: Port device team_slave_1 added
[  513.568452][T18237] batman_adv: batadv0: Adding interface: batadv_slave_0
[  513.574006][T18237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  513.583477][T18237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  513.587944][T18237] batman_adv: batadv0: Adding interface: batadv_slave_1
[  513.591655][T18237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  513.600528][T18237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  513.645286][T18237] hsr_slave_0: entered promiscuous mode
[  513.657701][T18237] hsr_slave_1: entered promiscuous mode
[  513.676888][T18237] debugfs: 'hsr0' already exists in 'hsr'
[  513.678904][T18237] Cannot create hsr debugfs directory
[  513.923960][T18237] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  513.928607][T18237] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  513.933732][T18237] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  513.939559][T18237] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  513.959904][T18237] bridge0: port 2(bridge_slave_1) entered blocking state
[  513.962521][T18237] bridge0: port 2(bridge_slave_1) entered forwarding state
[  513.965604][T18237] bridge0: port 1(bridge_slave_0) entered blocking state
[  513.968266][T18237] bridge0: port 1(bridge_slave_0) entered forwarding state
[  514.007911][T18237] 8021q: adding VLAN 0 to HW filter on device bond0
[  514.030508][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.040512][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.052309][T18237] 8021q: adding VLAN 0 to HW filter on device team0
[  514.055429][T15585] Bluetooth: hci0: command tx timeout
[  514.068771][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.071309][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  514.078282][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.080553][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  514.122011][T18237] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  514.129503][T18237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  514.219817][T18237] 8021q: adding VLAN 0 to HW filter on device batadv0
[  514.350792][ T5884] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  514.363694][T18237] veth0_vlan: entered promiscuous mode
[  514.375320][T18237] veth1_vlan: entered promiscuous mode
[  514.401521][T18237] veth0_macvtap: entered promiscuous mode
[  514.407038][T18237] veth1_macvtap: entered promiscuous mode
[  514.422037][T18237] batman_adv: batadv0: Interface activated: batadv_slave_0
[  514.429023][T18237] batman_adv: batadv0: Interface activated: batadv_slave_1
[  514.435479][ T5833] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  514.441431][ T5833] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  514.445324][ T5833] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  514.450487][ T5833] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  514.511793][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  514.522838][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  514.526785][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  514.545376][ T5884] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  514.545777][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  514.549678][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.549696][ T5884] usb 6-1: Product: syz
[  514.549706][ T5884] usb 6-1: Manufacturer: syz
[  514.549716][ T5884] usb 6-1: SerialNumber: syz
[  514.560749][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  514.562397][ T5884] usb 6-1: config 0 descriptor??
[  514.584382][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  514.586795][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  514.770457][ T5884] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  514.935956][T18383] loop7: detected capacity change from 0 to 512
[  514.960103][T18383] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.4835: bad orphan inode 11
[  514.965322][T18383] ext4_test_bit(bit=10, block=4) = 1
[  514.967601][T18383] is_bad_inode(inode)=0
[  514.969256][T18383] NEXT_ORPHAN(inode)=2080374784
[  514.971599][T18383] max_ino=32
[  514.973010][T18383] i_nlink=0
[  514.974451][T18383] EXT4-fs (loop7): 1 truncate cleaned up
[  514.978286][T18383] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  515.030340][T18237] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  515.037901][ T5851] usb 6-1: USB disconnect, device number 26
[  515.088246][T18388] macvlan0: entered promiscuous mode
[  515.092962][T18388] netlink: 'syz.7.4836': attribute type 2 has an invalid length.
[  515.274701][ T5213] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  516.037773][ T5213] Bluetooth: hci0: command tx timeout
[  516.167219][T18429] loop0: detected capacity change from 0 to 128
[  516.246529][T18433] IPv6: addrconf: prefix option has invalid lifetime
[  516.286121][T18433] IPv6: addrconf: prefix option has invalid lifetime
[  516.349266][T18439] loop5: detected capacity change from 0 to 512
[  516.356180][T18439] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13
[  516.359656][T18439] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #13: comm syz.5.4858: iget: bad i_size value: 12154757448730
[  516.365552][T18439] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4858: couldn't read orphan inode 13 (err -117)
[  516.380089][T18439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  516.421436][T13502] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.558345][T18452] loop5: detected capacity change from 0 to 1024
[  516.622378][ T1090] hfsplus: b-tree write err: -5, ino 4
[  516.729073][T18435] loop0: detected capacity change from 0 to 32768
[  516.743009][T18435] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4856 (18435)
[  516.760857][T18462] loop5: detected capacity change from 0 to 256
[  516.762082][T18435] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  516.767129][T18435] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  516.863717][T18435] BTRFS info (device loop0): enabling ssd optimizations
[  516.872922][T18435] BTRFS info (device loop0): enabling free space tree
[  516.927764][T18480] loop5: detected capacity change from 0 to 2048
[  516.935085][ T5824] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  516.942136][ T5884] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  516.999748][T18480] Dev loop5: RDB in block 1 has bad checksum
[  517.113009][ T5884] usb 8-1: Using ep0 maxpacket: 32
[  517.125962][ T5884] usb 8-1: config 0 has an invalid interface number: 125 but max is 0
[  517.136586][ T5884] usb 8-1: config 0 has no interface number 0
[  517.138997][ T5884] usb 8-1: config 0 interface 125 has no altsetting 0
[  517.162182][ T5884] usb 8-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7
[  517.165986][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.169217][ T5884] usb 8-1: Product: syz
[  517.199719][ T5884] usb 8-1: Manufacturer: syz
[  517.201607][ T5884] usb 8-1: SerialNumber: syz
[  517.216598][ T5884] usb 8-1: config 0 descriptor??
[  517.428927][ T5884] usb 8-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II
[  517.912597][T18511] trusted_key: encrypted_key: master key parameter 'user:' is invalid
[  518.020852][ T5213] Bluetooth: hci0: command tx timeout
[  518.182105][ T5884] usb 8-1: reset high-speed USB device number 2 using dummy_hcd
[  518.198853][T18525] loop0: detected capacity change from 0 to 2048
[  518.278238][T18525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  518.291213][T18525] EXT4-fs error (device loop0): ext4_ext_precache:649: inode #2: comm syz.0.4890: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  518.328394][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  518.350733][ T5884] usb 8-1: device firmware changed
[  518.357315][ T5884] ueagle-atm 8-1:0.125: usbatm_usb_probe: bind failed: -19!
[  518.365597][ T5884] usb 8-1: USB disconnect, device number 2
[  518.465935][T16326] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  518.504151][ T5884] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  518.608730][T16326] usb 6-1: Using ep0 maxpacket: 8
[  518.619681][T16326] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  518.623732][T16326] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  518.630227][T16326] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  518.634261][T16326] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  518.638080][T16326] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  518.646035][T16326] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  518.650302][ T5884] usb 8-1: Using ep0 maxpacket: 32
[  518.652485][T16326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  518.656013][T16326] usb 6-1: Product: syz
[  518.658293][T16326] usb 6-1: Manufacturer: syz
[  518.660722][T16326] usb 6-1: SerialNumber: syz
[  518.662985][ T5884] usb 8-1: config 0 has an invalid interface number: 125 but max is 0
[  518.674555][ T5884] usb 8-1: config 0 has no interface number 0
[  518.677695][T16326] usb 6-1: config 0 descriptor??
[  518.680432][ T5884] usb 8-1: config 0 interface 125 has no altsetting 0
[  518.692379][ T5884] usb 8-1: string descriptor 0 read error: -22
[  518.695170][ T5884] usb 8-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7
[  518.698277][ T5884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  518.714303][ T5884] usb 8-1: config 0 descriptor??
[  518.723339][ T5884] usb 8-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II
[  518.727612][T18542] loop0: detected capacity change from 0 to 32768
[  518.730839][T18542] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 0 transid 8 /dev/loop0 (7:0) scanned by syz.0.4897 (18542)
[  518.761975][T17308] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 0 transid 8 /dev/loop0 (7:0) scanned by udevd (17308)
[  518.868134][ T5884] usb 8-1: reset high-speed USB device number 3 using dummy_hcd
[  518.889891][T16326] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  518.892585][T16326] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  519.078417][T16326] radio-si470x 6-1:0.0: software version 0, hardware version 0
[  519.081267][T16326] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  519.085710][T16326] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  519.269885][T16326] radio-si470x 6-1:0.0: submitting int urb failed (-90)
[  519.273423][T18566] netlink: 'syz.0.4907': attribute type 23 has an invalid length.
[  519.462633][T18574] loop7: detected capacity change from 0 to 64
[  519.469573][T18574] BFS-fs: bfs_fill_super(): loop7 is unclean, continuing
[  519.559644][T18578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4913'.
[  519.593870][T18578] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  519.620371][T18580] loop7: detected capacity change from 0 to 4096
[  519.641658][T18580] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  519.659294][T18580] ntfs3(loop7): $Volume is corrupted.
[  519.660510][T16326] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71
[  519.664202][T16326] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22
[  519.689499][ T5884] ueagle-atm 8-1:0.125: usbatm_usb_probe: bind failed: -19!
[  519.694481][T16326] usb 6-1: USB disconnect, device number 27
[  519.706602][ T5884] usb 8-1: USB disconnect, device number 3
[  519.736393][T18584] loop0: detected capacity change from 0 to 256
[  520.118986][T18611] loop0: detected capacity change from 0 to 128
[  520.134113][T18611] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  520.139318][T18611] ext4 filesystem being mounted at /1564/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  520.194990][ T5824] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  520.242401][T18617] vivid-000: disconnect
[  520.255627][T18614] vivid-000: reconnect
[  521.295231][T18629] loop5: detected capacity change from 0 to 32768
[  521.355470][T18629] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  521.385819][T18629] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  521.395800][T18629] XFS (loop5): Starting recovery (logdev: internal)
[  521.454342][T18629] XFS (loop5): Ending recovery (logdev: internal)
[  521.563832][T13502] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  522.027728][ T5884] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  522.173304][ T5884] usb 6-1: unable to get BOS descriptor or descriptor too short
[  522.177261][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  522.181962][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  522.187288][ T5884] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39
[  522.191433][ T5884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.194778][ T5884] usb 6-1: Product: syz
[  522.196392][ T5884] usb 6-1: Manufacturer: syz
[  522.197905][ T5884] usb 6-1: SerialNumber: syz
[  522.202250][ T5884] usb 6-1: config 0 descriptor??
[  522.205839][ T5884] pn533_usb 6-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  522.406446][ T5884] usb 6-1: USB disconnect, device number 28
[  522.650275][T18645] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.718500][T18645] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.760813][T18643] loop0: detected capacity change from 0 to 32768
[  522.788098][T18643] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  522.788189][T18645] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.812595][T18643] XFS (loop0): Ending clean mount
[  522.816192][T18643] XFS (loop0): Quotacheck needed: Please wait.
[  522.845849][T18645] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.861504][T18643] XFS (loop0): Quotacheck: Done.
[  522.885298][ T5824] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  523.023362][ T5833] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  523.034257][ T5833] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  523.045028][ T5833] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  523.060551][ T5833] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  523.075530][T18655] loop5: detected capacity change from 0 to 40427
[  523.085836][T18655] F2FS-fs (loop5): invalid crc value
[  523.117671][T18655] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  523.121695][T18655] F2FS-fs (loop5): Start checkpoint disabled!
[  523.130972][T18655] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  523.195195][   T33] audit: type=1800 audit(1759219772.679:372): pid=18655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4940" name="file1" dev="loop5" ino=10 res=0 errno=0
[  523.318833][T18663] netlink: 'syz.7.4941': attribute type 9 has an invalid length.
[  523.321702][T18663] netlink: 'syz.7.4941': attribute type 7 has an invalid length.
[  523.325182][T18663] netlink: 'syz.7.4941': attribute type 8 has an invalid length.
[  523.519539][T18665] netlink: 348 bytes leftover after parsing attributes in process `syz.5.4940'.
[  523.523912][T18665] netlink: 348 bytes leftover after parsing attributes in process `syz.5.4940'.
[  523.527939][T18665] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4940'.
[  523.833874][   T26] kworker/u9:0: attempt to access beyond end of device
[  523.833874][   T26] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  523.847248][   T26] CPU: 1 UID: 0 PID: 26 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) 
[  523.847267][   T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  523.847276][   T26] Workqueue: writeback wb_workfn (flush-7:5)
[  523.847300][   T26] Call Trace:
[  523.847306][   T26]  <TASK>
[  523.847318][   T26]  dump_stack_lvl+0x189/0x250
[  523.847339][   T26]  ? __pfx_dump_stack_lvl+0x10/0x10
[  523.847354][   T26]  ? __pfx_queue_work_on+0x10/0x10
[  523.847366][   T26]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  523.847380][   T26]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  523.847400][   T26]  f2fs_handle_critical_error+0x37c/0x540
[  523.847419][   T26]  f2fs_write_end_io+0x886/0xb60
[  523.847446][   T26]  __submit_merged_bio+0x27a/0x6a0
[  523.847464][   T26]  __submit_merged_write_cond+0x255/0x530
[  523.847488][   T26]  f2fs_write_data_pages+0x261d/0x3000
[  523.847526][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  523.847550][   T26]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  523.847590][   T26]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  523.847603][   T26]  ? look_up_lock_class+0x74/0x170
[  523.847624][   T26]  ? trace_f2fs_writepages+0x7f/0x200
[  523.847637][   T26]  ? f2fs_write_node_pages+0x478/0x6e0
[  523.847653][   T26]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  523.847675][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  523.847690][   T26]  do_writepages+0x32e/0x550
[  523.847711][   T26]  ? reacquire_held_locks+0x127/0x1d0
[  523.847724][   T26]  ? writeback_sb_inodes+0x384/0x1010
[  523.847746][   T26]  __writeback_single_inode+0x145/0xff0
[  523.847762][   T26]  ? do_raw_spin_unlock+0x4d/0x240
[  523.847780][   T26]  writeback_sb_inodes+0x6c7/0x1010
[  523.847815][   T26]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  523.847861][   T26]  ? rcu_is_watching+0x15/0xb0
[  523.847882][   T26]  wb_writeback+0x43b/0xaf0
[  523.847903][   T26]  ? queue_io+0x311/0x590
[  523.847921][   T26]  ? __pfx_wb_writeback+0x10/0x10
[  523.847943][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  523.847958][   T26]  wb_workfn+0x409/0xef0
[  523.847982][   T26]  ? __pfx_wb_workfn+0x10/0x10
[  523.848000][   T26]  ? __lock_acquire+0xab9/0xd20
[  523.848018][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  523.848036][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  523.848047][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  523.848058][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  523.848070][   T26]  process_scheduled_works+0xae1/0x17b0
[  523.848104][   T26]  ? __pfx_process_scheduled_works+0x10/0x10
[  523.848128][   T26]  worker_thread+0x8a0/0xda0
[  523.848182][   T26]  kthread+0x711/0x8a0
[  523.848202][   T26]  ? __pfx_worker_thread+0x10/0x10
[  523.848214][   T26]  ? __pfx_kthread+0x10/0x10
[  523.848230][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  523.848241][   T26]  ? lockdep_hardirqs_on+0x9c/0x150
[  523.848252][   T26]  ? __pfx_kthread+0x10/0x10
[  523.848268][   T26]  ret_from_fork+0x439/0x7d0
[  523.848283][   T26]  ? __pfx_ret_from_fork+0x10/0x10
[  523.848301][   T26]  ? __switch_to_asm+0x39/0x70
[  523.848320][   T26]  ? __switch_to_asm+0x33/0x70
[  523.848334][   T26]  ? __pfx_kthread+0x10/0x10
[  523.848350][   T26]  ret_from_fork_asm+0x1a/0x30
[  523.848377][   T26]  </TASK>
[  523.848383][   T26] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  524.099377][T18678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4947'.
[  524.208081][T18683] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  524.288795][T18687] loop5: detected capacity change from 0 to 512
[  524.298617][T18687] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  524.328546][T18687] EXT4-fs (loop5): 1 truncate cleaned up
[  524.331077][T18687] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  524.459347][T13502] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.533671][T18701] loop5: detected capacity change from 0 to 1024
[  524.584548][T18701] hfsplus: request for non-existent node 33423360 in B*Tree
[  524.587843][T18701] hfsplus: request for non-existent node 33423360 in B*Tree
[  524.839781][T18725] vcan0: tx drop: invalid da for name 0xfffffffffffffffe
[  524.971268][    T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  525.046135][T18742] loop5: detected capacity change from 0 to 1024
[  525.096219][ T3887] hfsplus: b-tree write err: -5, ino 4
[  525.117521][    T9] usb 8-1: Using ep0 maxpacket: 8
[  525.124559][    T9] usb 8-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30
[  525.142894][    T9] usb 8-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  525.148323][    T9] usb 8-1: config 0 interface 0 has no altsetting 0
[  525.164468][    T9] usb 8-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  525.168335][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.184779][    T9] usb 8-1: config 0 descriptor??
[  525.192277][T18748] IPv6: sit1: Disabled Multicast RS
[  525.194831][T18748] sit1: entered allmulticast mode
[  525.514793][ T9143] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  525.588452][    T9] gt683r_led 0003:1770:FF00.0016: hidraw0: USB HID vf4.f6 Device [HID 1770:ff00] on usb-dummy_hcd.7-1/input0
[  525.656856][ T9143] usb 6-1: Using ep0 maxpacket: 8
[  525.660958][ T9143] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  525.664840][ T9143] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  525.669361][ T9143] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  525.673363][ T9143] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  525.678082][ T9143] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  525.683341][ T9143] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  525.687253][ T9143] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.773635][ T5885] usb 8-1: USB disconnect, device number 4
[  525.779948][ T5290] gt683r_led 0003:1770:FF00.0016: failed to send set report request: -19
[  525.888577][ T9143] usb 6-1: GET_CAPABILITIES returned 0
[  525.890936][ T9143] usbtmc 6-1:16.0: can't read capabilities
[  526.194983][T18754] usbtmc 6-1:16.0: usb_control_msg returned -71
[  526.196888][ T5870] usb 6-1: USB disconnect, device number 29
[  526.514329][ T9143] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  526.670936][ T9143] usb 8-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  526.674647][ T9143] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.681562][ T9143] usb 8-1: Product: syz
[  526.683355][ T9143] usb 8-1: Manufacturer: syz
[  526.685645][ T9143] usb 8-1: SerialNumber: syz
[  526.689809][ T9143] usb 8-1: config 0 descriptor??
[  526.699299][ T9143] gspca_main: sunplus-2.14.0 probing 055f:c230
[  527.873725][ T9143] usb 8-1: USB disconnect, device number 5
[  528.276117][T18790] loop0: detected capacity change from 0 to 512
[  528.297452][T18790] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  528.312794][T18790] EXT4-fs (loop0): orphan cleanup on readonly fs
[  528.326024][T18790] Quota error (device loop0): do_check_range: Getting block 196613 out of range 1-5
[  528.329919][T18790] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  528.336094][T18790] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.4986: Failed to acquire dquot type 1
[  528.354888][T18790] EXT4-fs (loop0): 1 truncate cleaned up
[  528.357607][T18790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  528.387035][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  528.471608][T18801] loop5: detected capacity change from 0 to 128
[  528.588398][   T33] audit: type=1326 audit(1759219778.338:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18810 comm="syz.7.4995" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c1f98ec29 code=0x7ffc0000
[  528.602931][   T33] audit: type=1326 audit(1759219778.338:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18810 comm="syz.7.4995" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c1f98ec29 code=0x7ffc0000
[  528.616000][   T33] audit: type=1326 audit(1759219778.349:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18810 comm="syz.7.4995" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c1f98ec29 code=0x7ffc0000
[  528.626757][   T33] audit: type=1326 audit(1759219778.349:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18810 comm="syz.7.4995" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c1f98ec29 code=0x7ffc0000
[  528.635625][   T33] audit: type=1326 audit(1759219778.349:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18810 comm="syz.7.4995" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c1f98ec29 code=0x7ffc0000
[  528.647917][   T33] audit: type=1326 audit(1759219778.349:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18810 comm="syz.7.4995" exe="/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f7c1f98ec29 code=0x7ffc0000
[  528.668254][   T33] audit: type=1326 audit(1759219778.359:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18810 comm="syz.7.4995" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c1f98ec29 code=0x7ffc0000
[  528.682376][   T33] audit: type=1326 audit(1759219778.370:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18810 comm="syz.7.4995" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c1f98ec29 code=0x7ffc0000
[  529.205091][T18819] loop0: detected capacity change from 0 to 40427
[  529.210100][T18819] F2FS-fs (loop0): invalid crc value
[  529.247684][T18819] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  529.251782][T18819] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  529.293090][ T5824] syz-executor: attempt to access beyond end of device
[  529.293090][ T5824] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  529.299541][ T5824] CPU: 1 UID: 0 PID: 5824 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  529.299560][ T5824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  529.299566][ T5824] Call Trace:
[  529.299572][ T5824]  <TASK>
[  529.299578][ T5824]  dump_stack_lvl+0x189/0x250
[  529.299600][ T5824]  ? __pfx_dump_stack_lvl+0x10/0x10
[  529.299614][ T5824]  ? __pfx_queue_work_on+0x10/0x10
[  529.299627][ T5824]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  529.299640][ T5824]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  529.299660][ T5824]  f2fs_handle_critical_error+0x37c/0x540
[  529.299679][ T5824]  f2fs_write_end_io+0x886/0xb60
[  529.299708][ T5824]  __submit_merged_bio+0x27a/0x6a0
[  529.299726][ T5824]  __submit_merged_write_cond+0x255/0x530
[  529.299751][ T5824]  f2fs_write_data_pages+0x261d/0x3000
[  529.299792][ T5824]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  529.299837][ T5824]  ? is_bpf_text_address+0x26/0x2b0
[  529.299871][ T5824]  ? kernel_text_address+0xa5/0xe0
[  529.299887][ T5824]  ? __kernel_text_address+0xd/0x40
[  529.299903][ T5824]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  529.299932][ T5824]  ? stack_trace_save+0x9c/0xe0
[  529.299954][ T5824]  ? __lock_acquire+0xab9/0xd20
[  529.299978][ T5824]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  529.299993][ T5824]  do_writepages+0x32e/0x550
[  529.300019][ T5824]  ? do_raw_spin_unlock+0x4d/0x240
[  529.300038][ T5824]  filemap_fdatawrite+0x199/0x240
[  529.300054][ T5824]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  529.300105][ T5824]  ? do_raw_spin_unlock+0x4d/0x240
[  529.300149][ T5824]  f2fs_sync_dirty_inodes+0x31f/0x830
[  529.300179][ T5824]  f2fs_write_checkpoint+0x95a/0x1df0
[  529.300213][ T5824]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  529.300265][ T5824]  ? kill_f2fs_super+0x298/0x6c0
[  529.300286][ T5824]  kill_f2fs_super+0x2c3/0x6c0
[  529.300312][ T5824]  ? __pfx_kill_f2fs_super+0x10/0x10
[  529.300323][ T5824]  ? radix_tree_delete_item+0x2b6/0x400
[  529.300342][ T5824]  ? shrinker_free+0x2ce/0x3e0
[  529.300358][ T5824]  deactivate_locked_super+0xbc/0x130
[  529.300375][ T5824]  cleanup_mnt+0x425/0x4c0
[  529.300389][ T5824]  ? lockdep_hardirqs_on+0x9c/0x150
[  529.300405][ T5824]  task_work_run+0x1d4/0x260
[  529.300423][ T5824]  ? __pfx_task_work_run+0x10/0x10
[  529.300437][ T5824]  ? __x64_sys_umount+0x122/0x160
[  529.300457][ T5824]  ? exit_to_user_mode_loop+0x40/0x110
[  529.300477][ T5824]  exit_to_user_mode_loop+0xec/0x110
[  529.300494][ T5824]  do_syscall_64+0x2bd/0x3b0
[  529.300506][ T5824]  ? lockdep_hardirqs_on+0x9c/0x150
[  529.300517][ T5824]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.300529][ T5824]  ? exc_page_fault+0x9f/0xf0
[  529.300543][ T5824]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.300553][ T5824] RIP: 0033:0x7f715e18ff57
[  529.300564][ T5824] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  529.300574][ T5824] RSP: 002b:00007ffcc9388bf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  529.300587][ T5824] RAX: 0000000000000000 RBX: 00007f715e211c2d RCX: 00007f715e18ff57
[  529.300594][ T5824] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcc9388cb0
[  529.300600][ T5824] RBP: 00007ffcc9388cb0 R08: 0000000000000000 R09: 0000000000000000
[  529.300606][ T5824] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcc9389d40
[  529.300613][ T5824] R13: 00007f715e211c2d R14: 00000000000845cc R15: 00007ffcc9389d80
[  529.300635][ T5824]  </TASK>
[  529.304240][ T5824] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  529.965311][T18833] loop7: detected capacity change from 0 to 32768
[  530.013683][T18833] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  530.016204][T18851] loop0: detected capacity change from 0 to 64
[  530.039424][T18851] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  530.054745][T18833] XFS (loop7): Ending clean mount
[  530.060634][T18833] XFS (loop7): Quotacheck needed: Please wait.
[  530.064766][T18851] minix_free_inode: bit 5 already cleared
[  530.123591][T18856] loop5: detected capacity change from 0 to 1024
[  530.133927][T18856] hfsplus: failed to load extents file
[  530.145475][T18833] XFS (loop7): Quotacheck: Done.
[  530.288764][T18237] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  530.701508][T18881] loop0: detected capacity change from 0 to 16
[  530.713036][T18881] erofs (device loop0): mounted with root inode @ nid 36.
[  531.968706][T18896] netlink: 'syz.0.5024': attribute type 11 has an invalid length.
[  531.973749][T18898] loop7: detected capacity change from 0 to 8
[  531.989739][T18898] SQUASHFS error: zlib decompression failed, data probably corrupt
[  531.994940][T18896] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5024'.
[  531.995365][T18898] SQUASHFS error: Failed to read block 0x9b: -5
[  532.004392][T18898] SQUASHFS error: Unable to read metadata cache entry [99]
[  532.007642][T18898] SQUASHFS error: Unable to read inode 0x104
[  532.266802][ T9143] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[  532.830418][ T9143] usb 8-1: config 0 has an invalid interface number: 2 but max is 0
[  532.833742][ T9143] usb 8-1: config 0 has no interface number 0
[  532.836663][ T9143] usb 8-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  532.842060][ T9143] usb 8-1: config 0 interface 2 altsetting 2 has an endpoint descriptor with address 0x6D, changing to 0xD
[  532.846845][ T9143] usb 8-1: config 0 interface 2 altsetting 2 endpoint 0xD has invalid maxpacket 14309, setting to 64
[  532.853317][ T9143] usb 8-1: config 0 interface 2 has no altsetting 0
[  532.865520][ T9143] usb 8-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  532.870284][ T9143] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.873666][ T9143] usb 8-1: Product: syz
[  532.875508][ T9143] usb 8-1: Manufacturer: syz
[  532.882020][ T9143] usb 8-1: SerialNumber: syz
[  532.887071][ T9143] usb 8-1: config 0 descriptor??
[  532.890365][T18898] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  532.896049][T18898] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  532.973662][T18915] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5034'.
[  532.979897][T18915] IPVS: Error connecting to the multicast addr
[  533.095427][ T9143] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  533.104216][ T9143] usb 8-1: invalid MIDI in EP 0
[  533.195196][T18922] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  533.215863][ T9143] snd-usb-audio 8-1:0.2: probe with driver snd-usb-audio failed with error -22
[  533.222549][ T9143] usb 8-1: USB disconnect, device number 6
[  533.285825][T18926] loop5: detected capacity change from 0 to 164
[  533.295233][ T6213] udevd[6213]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  533.449061][T13502] iso9660: Corrupted directory entry in block 2 of inode 1920
[  533.453998][T13502] iso9660: Corrupted directory entry in block 2 of inode 1920
[  533.464369][T13502] ISOFS: unable to read i-node block
[  533.470178][T13502] ISOFS: unable to read i-node block
[  533.911044][T18934] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5045'.
[  533.914231][T18934] netem: invalid attributes len -15
[  533.918217][T18934] netem: change failed
[  534.673243][T15585] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  534.677963][T15585] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  534.688056][T15585] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  534.694466][T15585] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  534.698381][T15585] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  534.976717][T18948] chnl_net:caif_netlink_parms(): no params data found
[  535.099418][T18948] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.102478][T18948] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.109289][T18948] bridge_slave_0: entered allmulticast mode
[  535.113344][T18948] bridge_slave_0: entered promiscuous mode
[  535.120655][T18948] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.124732][T18948] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.127752][T18948] bridge_slave_1: entered allmulticast mode
[  535.131734][T18948] bridge_slave_1: entered promiscuous mode
[  535.188506][T18948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  535.195306][T18960] loop0: detected capacity change from 0 to 4096
[  535.197380][T18948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  535.227326][T18960] ntfs3(loop0): ino=19, mi_enum_attr
[  535.233030][T18960] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  535.267419][T18948] team0: Port device team_slave_0 added
[  535.273147][T18948] team0: Port device team_slave_1 added
[  535.326794][T18948] batman_adv: batadv0: Adding interface: batadv_slave_0
[  535.329913][T18948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  535.341371][T18948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  535.347929][T18948] batman_adv: batadv0: Adding interface: batadv_slave_1
[  535.350431][T18948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  535.360685][T18948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  535.401934][T18948] hsr_slave_0: entered promiscuous mode
[  535.406532][T18948] hsr_slave_1: entered promiscuous mode
[  535.410876][T18948] debugfs: 'hsr0' already exists in 'hsr'
[  535.412799][T18948] Cannot create hsr debugfs directory
[  535.468971][T18968] openvswitch: netlink: IP tunnel dst address not specified
[  535.685332][T18948] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  535.695269][T18948] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  535.701511][T18948] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  535.709432][T18948] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  535.761113][T18985] loop0: detected capacity change from 0 to 8
[  535.764066][T18948] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.767235][T18948] bridge0: port 2(bridge_slave_1) entered forwarding state
[  535.772051][T18948] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.774842][T18948] bridge0: port 1(bridge_slave_0) entered forwarding state
[  535.871426][T18948] 8021q: adding VLAN 0 to HW filter on device bond0
[  535.876518][T18989] loop0: detected capacity change from 0 to 2048
[  535.882841][T18989] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  535.902533][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.918350][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.942177][T18948] 8021q: adding VLAN 0 to HW filter on device team0
[  535.958116][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.961059][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  535.985638][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.988727][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  536.137138][T18948] 8021q: adding VLAN 0 to HW filter on device batadv0
[  536.509813][T18948] veth0_vlan: entered promiscuous mode
[  536.547921][T18948] veth1_vlan: entered promiscuous mode
[  536.591799][T18948] veth0_macvtap: entered promiscuous mode
[  536.597063][T18948] veth1_macvtap: entered promiscuous mode
[  536.610953][T18948] batman_adv: batadv0: Interface activated: batadv_slave_0
[  536.619021][T18948] batman_adv: batadv0: Interface activated: batadv_slave_1
[  536.627388][   T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  536.635315][   T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  536.647292][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  536.657790][   T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  536.686209][ T5213] Bluetooth: hci2: command tx timeout
[  536.775993][T19019] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5074'.
[  536.780707][ T3887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  536.786890][ T3887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  536.816529][ T3887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  536.820856][ T3887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  536.978479][T19027] loop8: detected capacity change from 0 to 512
[  537.020552][T19027] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  537.110870][T19033] loop8: detected capacity change from 0 to 8
[  537.671287][T19045] loop8: detected capacity change from 0 to 1024
[  537.711205][T18948] hfsplus: bad catalog entry type
[  538.102338][T19047] loop7: detected capacity change from 0 to 32768
[  538.131177][T18237] read_mapping_page failed!
[  538.133214][T18237] ERROR: (device loop7): txCommit: 
[  538.133214][T18237] 
[  538.141925][T18237] ERROR: (device loop7): remounting filesystem as read-only
[  538.357248][   T12] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.417046][   T12] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.466016][   T12] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.520424][   T12] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.674341][   T12] bridge_slave_1: left allmulticast mode
[  538.680094][   T12] bridge_slave_1: left promiscuous mode
[  538.682587][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.694388][   T12] bridge_slave_0: left allmulticast mode
[  538.698530][   T12] bridge_slave_0: left promiscuous mode
[  538.701100][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  538.816302][   T26] hfsplus: b-tree write err: -5, ino 4
[  538.930846][T15585] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  538.938455][T15585] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  538.942530][T15585] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  538.947896][T15585] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  538.952181][T15585] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  539.259499][T15585] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  539.274003][T15585] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  539.282630][T15585] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  539.286573][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  539.290843][T15585] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  539.294401][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  539.299534][T15585] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  539.315407][   T12] bond0 (unregistering): Released all slaves
[  539.714730][T19068] loop0: detected capacity change from 0 to 4096
[  540.092891][T19049] chnl_net:caif_netlink_parms(): no params data found
[  540.104393][   T12] hsr_slave_0: left promiscuous mode
[  540.109410][   T12] hsr_slave_1: left promiscuous mode
[  540.112303][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  540.120104][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  540.123966][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  540.128726][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  540.147191][   T12] veth1_macvtap: left promiscuous mode
[  540.149473][   T12] veth0_macvtap: left promiscuous mode
[  540.151772][   T12] veth1_vlan: left promiscuous mode
[  540.157237][   T12] veth0_vlan: left promiscuous mode
[  540.612677][   T12] team0 (unregistering): Port device team_slave_1 removed
[  540.652470][   T12] team0 (unregistering): Port device team_slave_0 removed
[  540.956194][ T5213] Bluetooth: hci0: command tx timeout
[  541.261003][ T5213] Bluetooth: hci2: command tx timeout
[  541.368992][T19093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5102'.
[  541.488090][T19049] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.491135][T19049] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.494223][T19049] bridge_slave_0: entered allmulticast mode
[  541.510350][T19049] bridge_slave_0: entered promiscuous mode
[  541.520225][T19049] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.522952][T19049] bridge0: port 2(bridge_slave_1) entered disabled state
[  541.527489][T19049] bridge_slave_1: entered allmulticast mode
[  541.531471][T19049] bridge_slave_1: entered promiscuous mode
[  541.570734][T19052] chnl_net:caif_netlink_parms(): no params data found
[  541.614891][T19049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  541.634777][T19049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  541.710386][T19049] team0: Port device team_slave_0 added
[  541.717515][T19049] team0: Port device team_slave_1 added
[  541.807297][T19052] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.810844][T19052] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.816164][T19052] bridge_slave_0: entered allmulticast mode
[  541.821167][T19052] bridge_slave_0: entered promiscuous mode
[  541.825526][T19049] batman_adv: batadv0: Adding interface: batadv_slave_0
[  541.838612][T19049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  541.856201][T19049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  541.860960][T19052] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.864166][T19052] bridge0: port 2(bridge_slave_1) entered disabled state
[  541.867234][T19052] bridge_slave_1: entered allmulticast mode
[  541.872901][T19052] bridge_slave_1: entered promiscuous mode
[  541.880948][T19049] batman_adv: batadv0: Adding interface: batadv_slave_1
[  541.883502][T19049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  541.892804][T19049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  541.959684][   T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.976163][T19052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  541.981454][T19052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  542.024020][T19049] hsr_slave_0: entered promiscuous mode
[  542.026939][T19049] hsr_slave_1: entered promiscuous mode
[  542.030650][T19049] debugfs: 'hsr0' already exists in 'hsr'
[  542.032955][T19049] Cannot create hsr debugfs directory
[  542.036395][T19052] team0: Port device team_slave_0 added
[  542.059307][   T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.069865][T19052] team0: Port device team_slave_1 added
[  542.119207][T19052] batman_adv: batadv0: Adding interface: batadv_slave_0
[  542.121889][T19052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  542.136397][T19052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  542.178173][   T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.187437][T19052] batman_adv: batadv0: Adding interface: batadv_slave_1
[  542.189703][T19052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  542.199017][T19052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  542.266183][   T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  542.325701][T19052] hsr_slave_0: entered promiscuous mode
[  542.328840][T19052] hsr_slave_1: entered promiscuous mode
[  542.331614][T19052] debugfs: 'hsr0' already exists in 'hsr'
[  542.335493][T19052] Cannot create hsr debugfs directory
[  542.527973][   T12] bridge_slave_1: left allmulticast mode
[  542.530414][   T12] bridge_slave_1: left promiscuous mode
[  542.532931][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.540232][   T12] bridge_slave_0: left allmulticast mode
[  542.541993][   T12] bridge_slave_0: left promiscuous mode
[  542.543903][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.903437][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  542.909809][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  542.914709][   T12] bond0 (unregistering): Released all slaves
[  542.934320][ T5213] Bluetooth: hci0: command tx timeout
[  542.992582][T19049] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  543.011016][T19049] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  543.039670][T19049] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  543.044374][T19049] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  543.239276][ T5213] Bluetooth: hci2: command tx timeout
[  543.290527][T19049] 8021q: adding VLAN 0 to HW filter on device bond0
[  543.302530][T19049] 8021q: adding VLAN 0 to HW filter on device team0
[  543.309286][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  543.311692][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  543.327142][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  543.329714][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  543.480789][   T12] hsr_slave_0: left promiscuous mode
[  543.493308][   T12] hsr_slave_1: left promiscuous mode
[  543.495611][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  543.500638][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  543.503447][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  543.506425][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  543.530139][   T12] veth1_macvtap: left promiscuous mode
[  543.532033][   T12] veth0_macvtap: left promiscuous mode
[  543.533956][   T12] veth1_vlan: left promiscuous mode
[  543.536436][   T12] veth0_vlan: left promiscuous mode
[  543.942936][   T12] team0 (unregistering): Port device team_slave_1 removed
[  543.983774][   T12] team0 (unregistering): Port device team_slave_0 removed
[  544.510624][T19049] 8021q: adding VLAN 0 to HW filter on device batadv0
[  544.759666][T19049] veth0_vlan: entered promiscuous mode
[  544.794537][T19049] veth1_vlan: entered promiscuous mode
[  544.903731][T19049] veth0_macvtap: entered promiscuous mode
[  544.917183][T19049] veth1_macvtap: entered promiscuous mode
[  544.917761][ T5213] Bluetooth: hci0: command tx timeout
[  544.981147][T19049] batman_adv: batadv0: Interface activated: batadv_slave_0
[  544.991104][T19049] batman_adv: batadv0: Interface activated: batadv_slave_1
[  545.059466][ T5833] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  545.063184][ T5833] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  545.066343][ T5833] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  545.075519][ T5833] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  545.146244][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  545.148841][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  545.203803][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  545.207599][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  545.220652][ T5213] Bluetooth: hci2: command tx timeout
[  545.256074][T19169] loop0: detected capacity change from 0 to 40427
[  545.261682][T19052] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  545.269535][T19169] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  545.272798][T19169] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  545.279986][T19052] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  545.292265][T19169] F2FS-fs (loop0): invalid crc_offset: 33558524
[  545.298605][T19052] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  545.315584][T19052] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  545.358449][T19169] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  545.370580][T19169] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  545.381538][T19169] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  545.453270][T19052] 8021q: adding VLAN 0 to HW filter on device bond0
[  545.500555][T19052] 8021q: adding VLAN 0 to HW filter on device team0
[  545.517582][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  545.520465][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  545.548906][ T3887] bridge0: port 2(bridge_slave_1) entered blocking state
[  545.551296][ T3887] bridge0: port 2(bridge_slave_1) entered forwarding state
[  545.578632][T19052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  545.740771][T19052] 8021q: adding VLAN 0 to HW filter on device batadv0
[  545.787023][T19052] veth0_vlan: entered promiscuous mode
[  545.795574][T19052] veth1_vlan: entered promiscuous mode
[  545.835258][T19052] veth0_macvtap: entered promiscuous mode
[  545.853334][T19052] veth1_macvtap: entered promiscuous mode
[  545.862676][T19052] batman_adv: batadv0: Interface activated: batadv_slave_0
[  545.873112][T19052] batman_adv: batadv0: Interface activated: batadv_slave_1
[  545.883874][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  545.909905][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  545.917406][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  545.928443][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  546.008559][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  546.018961][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  546.059067][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  546.067606][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  546.202912][T19235] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5123'.
[  546.214144][T19235] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check.
[  546.534751][T19262] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input49
[  546.649063][ T5290] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  546.692575][T19274] netlink: zone id is out of range
[  546.694795][T19274] netlink: set zone limit has 4 unknown bytes
[  546.825459][T19287] loop1: detected capacity change from 0 to 256
[  546.835675][ T5290] usb 10-1: unable to get BOS descriptor or descriptor too short
[  546.838364][T19287] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  546.839238][ T5290] usb 10-1: not running at top speed; connect to a high speed hub
[  546.843437][T19287] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  546.848374][T19287] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  546.855446][T19287] UDF-fs: Scanning with blocksize 512 failed
[  546.857712][ T5290] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  546.866358][ T5290] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  546.873363][ T5290] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  546.876356][ T5290] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.891123][ T5290] usb 10-1: Product: syz
[  546.895565][T19287] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  546.897128][ T5213] Bluetooth: hci0: command tx timeout
[  546.903370][ T5290] usb 10-1: Manufacturer: syz
[  546.904979][ T5290] usb 10-1: SerialNumber: syz
[  546.911152][T19287] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  547.120920][ T5290] usb 10-1: 0:2 : does not exist
[  547.157127][ T5290] usb 10-1: USB disconnect, device number 2
[  547.181681][T17308] udevd[17308]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  547.202333][ T5213] Bluetooth: hci2: command tx timeout
[  547.206656][T19295] loop0: detected capacity change from 0 to 32768
[  547.252518][T19295] jbd2_journal_init_inode: Cannot locate journal superblock
[  547.254987][T19295] (syz.0.5142,19295,1):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  547.258055][T19295] (syz.0.5142,19295,1):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  547.278992][T19295] (syz.0.5142,19295,0):ocfs2_check_volume:2432 ERROR: status = -22
[  547.281691][T19295] (syz.0.5142,19295,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  547.302415][T19295] (syz.0.5142,19295,0):ocfs2_fill_super:1177 ERROR: status = -22
[  547.583445][  T791] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  547.636003][T19334] loop9: detected capacity change from 0 to 16
[  547.656094][T19334] erofs (device loop9): mounted with root inode @ nid 36.
[  547.666768][T19336] openvswitch: netlink: nsh attr 7 is out of range max 3
[  547.671702][T19336] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  547.675229][T19334] erofs (device loop9): bogus lookback distance 1388 @ lcn 42 of nid 36
[  547.684265][T19334] erofs (device loop9): failed to decompress -23 in[64, 4032] out[1851]
[  547.687535][T19334] erofs (device loop9): read error -117 @ 43 of nid 36
[  547.726097][T19340] loop0: detected capacity change from 0 to 22
[  547.727549][  T791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  547.728570][T19340] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  547.731332][  T791] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[  547.758656][  T791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  547.780925][  T791] usb 2-1: config 0 descriptor??
[  547.784899][T19340] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  548.185905][  T791] hid (null): global environment stack underflow
[  548.189681][  T791] itetech 0003:258A:6A88.0017: global environment stack underflow
[  548.203756][  T791] itetech 0003:258A:6A88.0017: item 0 4 1 11 parsing failed
[  548.212189][  T791] itetech 0003:258A:6A88.0017: probe with driver itetech failed with error -22
[  548.297902][T19348] loop0: detected capacity change from 0 to 40427
[  548.310181][T19348] F2FS-fs (loop0): invalid crc value
[  548.364345][T19348] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  548.369103][T19348] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  548.390229][  T791] usb 2-1: USB disconnect, device number 23
[  548.464007][T19374] syz.0.5156: attempt to access beyond end of device
[  548.464007][T19374] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  548.473205][T19374] CPU: 1 UID: 0 PID: 19374 Comm: syz.0.5156 Not tainted syzkaller #0 PREEMPT(full) 
[  548.473226][T19374] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  548.473235][T19374] Call Trace:
[  548.473242][T19374]  <TASK>
[  548.473249][T19374]  dump_stack_lvl+0x189/0x250
[  548.473275][T19374]  ? __pfx_dump_stack_lvl+0x10/0x10
[  548.473294][T19374]  ? __pfx_queue_work_on+0x10/0x10
[  548.473309][T19374]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  548.473323][T19374]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  548.473345][T19374]  f2fs_handle_critical_error+0x37c/0x540
[  548.473366][T19374]  f2fs_write_end_io+0x886/0xb60
[  548.473399][T19374]  __submit_merged_bio+0x27a/0x6a0
[  548.473421][T19374]  __submit_merged_write_cond+0x255/0x530
[  548.473449][T19374]  f2fs_write_data_pages+0x261d/0x3000
[  548.473462][T19374]  ? __lock_acquire+0xab9/0xd20
[  548.473504][T19374]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  548.473583][T19374]  ? __lock_acquire+0xab9/0xd20
[  548.473603][T19374]  ? do_raw_spin_lock+0x121/0x290
[  548.473630][T19374]  ? do_raw_spin_unlock+0x4d/0x240
[  548.473646][T19374]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  548.473662][T19374]  do_writepages+0x32e/0x550
[  548.473691][T19374]  ? do_raw_spin_unlock+0x4d/0x240
[  548.473711][T19374]  filemap_fdatawrite+0x199/0x240
[  548.473729][T19374]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  548.473791][T19374]  ? do_raw_spin_unlock+0x4d/0x240
[  548.473813][T19374]  f2fs_sync_dirty_inodes+0x31f/0x830
[  548.473845][T19374]  f2fs_write_checkpoint+0x95a/0x1df0
[  548.473883][T19374]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  548.473956][T19374]  f2fs_gc+0x941/0x2590
[  548.474006][T19374]  ? __pfx_f2fs_gc+0x10/0x10
[  548.474051][T19374]  ? set_normalized_timespec64+0xf0/0x1a0
[  548.474098][T19374]  f2fs_balance_fs+0x5f7/0x7f0
[  548.474115][T19374]  ? f2fs_setattr+0x1169/0x15f0
[  548.474130][T19374]  ? __pfx_f2fs_balance_fs+0x10/0x10
[  548.474142][T19374]  ? _raw_spin_unlock+0x28/0x50
[  548.474152][T19374]  ? f2fs_inode_dirtied+0x328/0x3c0
[  548.474175][T19374]  ? f2fs_mark_inode_dirty_sync+0x120/0x1f0
[  548.474191][T19374]  f2fs_setattr+0x1169/0x15f0
[  548.474212][T19374]  ? __pfx_f2fs_setattr+0x10/0x10
[  548.474229][T19374]  notify_change+0xb36/0xe40
[  548.474253][T19374]  do_truncate+0x1a4/0x220
[  548.474271][T19374]  ? __pfx_do_truncate+0x10/0x10
[  548.474284][T19374]  ? apparmor_path_truncate+0x238/0x2d0
[  548.474304][T19374]  ? mnt_get_write_access+0x223/0x2a0
[  548.474328][T19374]  vfs_truncate+0x493/0x520
[  548.474343][T19374]  ? lockdep_hardirqs_on+0x9c/0x150
[  548.474360][T19374]  ? __pfx_vfs_truncate+0x10/0x10
[  548.474374][T19374]  ? user_path_at+0x44/0x60
[  548.474397][T19374]  do_sys_truncate+0xdb/0x190
[  548.474412][T19374]  ? __pfx_do_sys_truncate+0x10/0x10
[  548.474436][T19374]  __x64_sys_truncate+0x5b/0x70
[  548.474452][T19374]  do_syscall_64+0xfa/0x3b0
[  548.474464][T19374]  ? lockdep_hardirqs_on+0x9c/0x150
[  548.474477][T19374]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.474487][T19374]  ? exc_page_fault+0x9f/0xf0
[  548.474502][T19374]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.474515][T19374] RIP: 0033:0x7f715e18ec29
[  548.474528][T19374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  548.474537][T19374] RSP: 002b:00007f715f089038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c
[  548.474552][T19374] RAX: ffffffffffffffda RBX: 00007f715e3d6090 RCX: 00007f715e18ec29
[  548.474560][T19374] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040
[  548.474567][T19374] RBP: 00007f715e211e41 R08: 0000000000000000 R09: 0000000000000000
[  548.474574][T19374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  548.474581][T19374] R13: 00007f715e3d6128 R14: 00007f715e3d6090 R15: 00007ffcc9389968
[  548.474602][T19374]  </TASK>
[  548.474606][T19374] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  548.518715][T19369] loop9: detected capacity change from 0 to 40427
[  548.627883][T19369] F2FS-fs (loop9): Wrong SSA boundary, start(3584) end(4096) blocks(3072)
[  548.640678][T19369] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  548.651062][T19369] F2FS-fs (loop9): invalid crc value
[  548.686076][T19369] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  548.690109][T19369] F2FS-fs (loop9): Try to recover 1th superblock, ret: -30
[  548.692715][T19369] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  548.712363][T19369] F2FS-fs (loop9): Try to recover all the superblocks, ret: 0
[  548.736309][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  548.809664][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.933944][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.997396][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.060454][   T13] : (slave netdevsim0): Releasing backup interface
[  549.066965][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.183920][  T791] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  549.238690][   T13] bridge_slave_1: left allmulticast mode
[  549.240944][ T5872] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  549.243849][   T13] bridge_slave_1: left promiscuous mode
[  549.247115][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  549.254639][   T13] bridge_slave_0: left allmulticast mode
[  549.256699][   T13] bridge_slave_0: left promiscuous mode
[  549.259638][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  549.330228][  T791] usb 2-1: Using ep0 maxpacket: 8
[  549.345265][  T791] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  549.371808][  T791] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  549.382321][ T5872] usb 10-1: Using ep0 maxpacket: 16
[  549.391184][ T5872] usb 10-1: config 0 has an invalid interface number: 8 but max is 0
[  549.467689][  T791] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  549.475930][ T5872] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  549.494335][  T791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.498655][ T5872] usb 10-1: config 0 has no interface number 0
[  549.510605][ T5872] usb 10-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  549.517095][  T791] usb 2-1: Product: syz
[  549.523032][  T791] usb 2-1: Manufacturer: syz
[  549.538487][  T791] usb 2-1: SerialNumber: syz
[  549.576250][ T5872] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  549.583457][ T5872] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  549.588297][ T5872] usb 10-1: Product: syz
[  549.606157][  T791] usb 2-1: config 0 descriptor??
[  549.611834][ T5872] usb 10-1: SerialNumber: syz
[  549.652687][ T5872] usb 10-1: config 0 descriptor??
[  549.661879][ T5872] usbhid 10-1:0.8: couldn't find an input interrupt endpoint
[  549.868754][  T791] usb 10-1: USB disconnect, device number 3
[  549.977405][   T13]  (unregistering): (slave bond_slave_0): Releasing backup interface
[  549.986223][   T13]  (unregistering): (slave bond_slave_1): Releasing backup interface
[  549.991403][   T13]  (unregistering): Released all slaves
[  550.019271][ T5872] usb 2-1: USB disconnect, device number 24
[  550.042312][   T13] bond0 (unregistering): Released all slaves
[  550.047981][T19400] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5171'.
[  550.713647][   T13] hsr_slave_0: left promiscuous mode
[  550.732990][   T13] hsr_slave_1: left promiscuous mode
[  550.736900][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  550.746806][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  550.775295][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  550.780671][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  550.823993][   T13] veth1_macvtap: left promiscuous mode
[  550.838983][   T13] veth0_macvtap: left promiscuous mode
[  550.841754][   T13] veth1_vlan: left promiscuous mode
[  550.844158][   T13] veth0_vlan: left promiscuous mode
[  551.093183][T19443] loop0: detected capacity change from 0 to 32768
[  551.105382][T19443] (syz.0.5179,19443,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  551.126736][T19443] (syz.0.5179,19443,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  551.150301][T19443] JBD2: Ignoring recovery information on journal
[  551.181040][T19443] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  551.301231][ T5824] ocfs2: Unmounting device (7,0) on (node local)
[  551.557290][   T13] team0 (unregistering): Port device team_slave_1 removed
[  551.600226][   T13] team0 (unregistering): Port device team_slave_0 removed
[  551.880857][   T13] team0 (unregistering): Port device dummy0 removed
[  552.151681][T19459] loop0: detected capacity change from 0 to 512
[  552.186497][T19459] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  552.189858][T19459] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  552.206193][T19459] System zones: 0-1, 15-15, 18-18, 34-34
[  552.208816][T19459] EXT4-fs (loop0): orphan cleanup on readonly fs
[  552.228221][T19459] __quota_error: 9 callbacks suppressed
[  552.228231][T19459] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0
[  552.264931][T19459] EXT4-fs warning (device loop0): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  552.274712][T19459] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  552.327460][T19459] EXT4-fs (loop0): 1 truncate cleaned up
[  552.333857][T19459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  552.411912][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  552.592848][   T13] IPVS: stop unused estimator thread 0...
[  552.858851][ T5872] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  552.886343][T19469] loop1: detected capacity change from 0 to 40427
[  552.899769][T19469] F2FS-fs (loop1): build fault injection rate: 25
[  552.905698][T19469] F2FS-fs (loop1): build fault injection type: 0x7698c
[  552.918079][T19469] F2FS-fs (loop1): invalid crc value
[  552.936837][T19469] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1cb/0x970
[  552.949139][T19469] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  552.997218][T19469] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  553.001883][T19469] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  553.005026][ T5872] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  553.009362][ T5872] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  553.027213][ T5872] usb 10-1: New USB device found, idVendor=061c, idProduct=c084, bcdDevice=f5.fc
[  553.039870][ T5872] usb 10-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3
[  553.045037][ T5872] usb 10-1: Product: syz
[  553.048554][ T5872] usb 10-1: Manufacturer: syz
[  553.051121][ T5872] usb 10-1: SerialNumber: syz
[  553.052800][T19052] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_grab_meta_folio+0x6a/0x1d0
[  553.054444][ T5872] usb 10-1: config 0 descriptor??
[  553.073880][T19052] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x585/0x21b0
[  553.079130][T19052] F2FS-fs (loop1): invalid blkaddr: 515, type: 10, run fsck to fix.
[  553.270625][T19501] delete_channel: no stack
[  553.327794][T19503] sctp: [Deprecated]: syz.1.5197 (pid 19503) Use of struct sctp_assoc_value in delayed_ack socket option.
[  553.327794][T19503] Use struct sctp_sack_info instead
[  553.485305][T19510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  553.489233][T19510] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  553.757789][T19518] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5203'.
[  553.982337][T19526] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  554.174465][T19539] loop0: detected capacity change from 0 to 4096
[  554.310150][T19543] can0: slcan on ttyS3.
[  554.354786][T19543] can0 (unregistered): slcan off ttyS3.
[  554.518511][T19545] loop0: detected capacity change from 0 to 32768
[  554.651493][T19550] loop1: detected capacity change from 0 to 512
[  554.666520][T19550] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  554.670644][T19550] EXT4-fs (loop1): orphan cleanup on readonly fs
[  554.674171][T19550] Quota error (device loop1): dq_insert_tree: Quota tree root isn't allocated!
[  554.680755][T19550] Quota error (device loop1): qtree_write_dquot: Error -5 occurred while creating quota
[  554.685414][T19550] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.5218: Failed to acquire dquot type 1
[  554.691407][T19550] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5218: bg 0: block 40: padding at end of block bitmap is not set
[  554.701280][T19550] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  554.705321][T19550] EXT4-fs (loop1): 1 truncate cleaned up
[  554.718211][T19550] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  554.738235][T19052] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  554.823894][T19557] loop0: detected capacity change from 0 to 4096
[  555.090947][T19569] loop1: detected capacity change from 0 to 1024
[  555.128409][T19569] hfsplus: invalid extent btree flag
[  555.147104][T19569] hfsplus: failed to load extents file
[  555.283403][T19574] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  555.348688][T19576] loop1: detected capacity change from 0 to 128
[  555.532883][   T10] usb 10-1: USB disconnect, device number 4
[  556.193487][T19611] loop9: detected capacity change from 0 to 8192
[  556.217818][T19611] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  556.571246][T19628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5242'.
[  556.747232][T19628] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5242'.
[  556.807181][T19628] team0: entered promiscuous mode
[  556.808950][T19628] team_slave_0: entered promiscuous mode
[  556.811091][T19628] team_slave_1: entered promiscuous mode
[  556.826895][T19628] gretap0: entered promiscuous mode
[  556.833027][T19628] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network
[  556.889158][T19637] binder: 19636:19637 ioctl c018620c 200000000100 returned -1
[  557.505107][T19650] loop9: detected capacity change from 0 to 131072
[  557.513702][T19650] F2FS-fs (loop9): Wrong CP boundary, start(512) end(1536) blocks(0)
[  557.517179][T19650] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  557.522206][T19650] F2FS-fs (loop9): invalid crc value
[  557.557993][T19650] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  557.567488][T19650] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  557.569866][T19650] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  558.006518][T19678] netlink: 212376 bytes leftover after parsing attributes in process `syz.9.5254'.
[  558.198458][T19693] loop9: detected capacity change from 0 to 1024
[  558.233192][T19695] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  558.347486][T19703] loop0: detected capacity change from 0 to 1764
[  558.350591][T19703] iso9660: Bad value for 'session'
[  558.359198][T19703]  nullb0: [CUMANA/ADFS] p1 [Linux] p2 < >
[  558.388542][T19705] 9pnet_fd: p9_fd_create_tcp (19705): problem connecting socket to 127.0.0.1
[  558.592326][T19725] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay'
[  559.030674][ T5872] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  559.177935][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  559.181658][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  559.185086][ T5872] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  559.188095][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  559.192077][ T5872] usb 2-1: config 0 descriptor??
[  559.319429][T19738] : renamed from team_slave_1 (while UP)
[  559.587597][ T5872] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0
[  559.590636][ T5872] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0
[  559.593770][ T5872] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0
[  559.596770][ T5872] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0
[  559.599701][ T5872] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0
[  559.602652][T18749] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  559.606986][ T5872] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0
[  559.610148][ T5872] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0
[  559.621011][ T5872] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[  559.776723][ T5872] cp2112 0003:10C4:EA90.0018: error requesting version
[  559.783762][ T5872] cp2112 0003:10C4:EA90.0018: probe with driver cp2112 failed with error -32
[  559.791450][T18749] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  559.797464][T18749] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  559.803424][ T5872] usb 2-1: USB disconnect, device number 25
[  559.806241][T18749] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  559.812575][T18749] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  559.822190][T18749] usb 10-1: config 0 descriptor??
[  560.215613][T18749] pyra 0003:1E7D:2CF6.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.9-1/input0
[  560.750803][T18749] pyra 0003:1E7D:2CF6.0019: couldn't init struct pyra_device
[  560.754140][T18749] pyra 0003:1E7D:2CF6.0019: couldn't install mouse
[  560.760533][T18749] pyra 0003:1E7D:2CF6.0019: probe with driver pyra failed with error -71
[  560.765876][T18749] usb 10-1: USB disconnect, device number 5
[  561.387706][T19784] netlink: 'syz.9.5296': attribute type 3 has an invalid length.
[  561.391370][T19784] netlink: 236 bytes leftover after parsing attributes in process `syz.9.5296'.
[  561.564193][T19791] loop9: detected capacity change from 0 to 1024
[  562.293053][T19805] loop9: detected capacity change from 0 to 2048
[  562.323349][T19805] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  562.329072][T19805] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  562.362403][T19805] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5304: bg 0: block 345: padding at end of block bitmap is not set
[  562.392182][ T3887] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 79 with max blocks 1 with error 28
[  562.398988][ T3887] EXT4-fs (loop9): This should not happen!! Data will be lost
[  562.398988][ T3887] 
[  562.404622][ T3887] EXT4-fs (loop9): Total free blocks count 0
[  562.407358][ T3887] EXT4-fs (loop9): Free/Dirty block details
[  562.409981][ T3887] EXT4-fs (loop9): free_blocks=0
[  562.412396][ T3887] EXT4-fs (loop9): dirty_blocks=16
[  562.414938][ T3887] EXT4-fs (loop9): Block reservation details
[  562.419219][ T3887] EXT4-fs (loop9): i_reserved_data_blocks=1
[  562.426474][T19049] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  562.731123][T19826] loop0: detected capacity change from 0 to 512
[  562.735313][T19826] EXT4-fs (loop0): Test dummy encryption mode enabled
[  562.763733][T19826] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  562.769902][T19826] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[  562.788708][T19826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  562.822663][T19826] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters
[  562.842766][T19831] loop1: detected capacity change from 0 to 512
[  562.874235][T19831] EXT4-fs (loop1): Test dummy encryption mode enabled
[  562.889225][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  562.896165][T19831] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  563.000605][T19052] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  563.139815][T19849] netlink: 'syz.1.5320': attribute type 9 has an invalid length.
[  563.591992][T19868] loop9: detected capacity change from 0 to 2048
[  563.610719][T19868] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  563.822876][T19874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5327'.
[  563.839144][T19874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5327'.
[  563.863784][T19874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5327'.
[  563.990107][T19882] loop1: detected capacity change from 0 to 1024
[  564.020237][T19882] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  564.037771][T19882] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  564.044012][T19882] EXT4-fs error (device loop1): ext4_get_journal_inode:5806: inode #32: comm syz.1.5329: iget: special inode unallocated
[  564.065194][T19882] EXT4-fs (loop1): Remounting filesystem read-only
[  564.068893][T19882] EXT4-fs (loop1): no journal found
[  564.084992][T19882] EXT4-fs (loop1): can't get journal size
[  564.105280][T19882] EXT4-fs (loop1): filesystem is read-only
[  564.151879][T19882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  564.268912][T19052] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  564.451083][T19908] loop1: detected capacity change from 0 to 128
[  564.601121][T19914] loop9: detected capacity change from 0 to 512
[  564.608400][T19914] EXT4-fs: Ignoring removed bh option
[  564.611363][T19914] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[  564.627260][T19914] EXT4-fs (loop9): 1 truncate cleaned up
[  564.638605][T19914] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  564.695008][T19049] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  565.050569][ T5290] usb 2-1: new full-speed USB device number 26 using dummy_hcd
[  565.196558][ T5290] usb 2-1: config 8 interface 0 has no altsetting 0
[  565.199302][ T5290] usb 2-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=fb.bc
[  565.203392][ T5290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  565.414468][ T5290] usb 2-1: string descriptor 0 read error: -71
[  565.423498][ T5290] pwc: Logitech QuickCam detected (reserved ID).
[  565.427038][ T5290] pwc: Failed to set LED on/off time (-71)
[  565.429534][ T5290] pwc: send_video_command error -71
[  565.431991][ T5290] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  565.435298][ T5290] Philips webcam 2-1:8.0: probe with driver Philips webcam failed with error -71
[  565.440866][ T5290] usb 2-1: USB disconnect, device number 26
[  566.600119][T19945] loop9: detected capacity change from 0 to 32768
[  566.630889][T19945] read_mapping_page failed!
[  566.633831][T19945] ERROR: (device loop9): txCommit: 
[  566.633831][T19945] 
[  566.662595][  T116] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0)
[  566.667572][  T116] ------------[ cut here ]------------
[  566.670217][  T116] kernel BUG at fs/jfs/jfs_txnmgr.c:931!
[  566.674252][  T116] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  566.677902][  T116] CPU: 1 UID: 0 PID: 116 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[  566.681518][  T116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  566.685830][  T116] RIP: 0010:txUnlock+0xdaf/0xdf0
[  566.687971][  T116] Code: e5 fd 90 0f 0b e8 21 d2 7b fe 48 c7 c7 20 56 84 8b 48 c7 c6 19 52 84 8b ba a3 03 00 00 48 c7 c1 20 63 84 8b e8 c2 44 e5 fd 90 <0f> 0b e8 fa d1 7b fe 48 c7 c7 20 56 84 8b 48 c7 c6 19 52 84 8b ba
[  566.696180][  T116] RSP: 0018:ffffc9000249fbc8 EFLAGS: 00010246
[  566.698803][  T116] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 7aaf220530847e00
[  566.702230][  T116] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  566.705603][  T116] RBP: ffffc90001ff25a0 R08: ffffc9000249f8e7 R09: 1ffff92000493f1c
[  566.708916][  T116] R10: dffffc0000000000 R11: fffff52000493f1d R12: dffffc0000000000
[  566.712200][  T116] R13: 1ffff1100450f4b0 R14: ffff88802287a580 R15: 0000000000000000
[  566.715482][  T116] FS:  0000000000000000(0000) GS:ffff8881a417e000(0000) knlGS:0000000000000000
[  566.719218][  T116] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  566.722033][  T116] CR2: 00005555823655c8 CR3: 000000012037c000 CR4: 00000000000006f0
[  566.725417][  T116] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  566.728826][  T116] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  566.732269][  T116] Call Trace:
[  566.733725][  T116]  <TASK>
[  566.735053][  T116]  ? lockdep_hardirqs_on+0x9c/0x150
[  566.737302][  T116]  jfs_lazycommit+0x584/0xa90
[  566.739346][  T116]  ? __pfx_jfs_lazycommit+0x10/0x10
[  566.741574][  T116]  ? __pfx_default_wake_function+0x10/0x10
[  566.744004][  T116]  ? __kthread_parkme+0x7b/0x200
[  566.746102][  T116]  ? __kthread_parkme+0x1a1/0x200
[  566.748183][  T116]  kthread+0x711/0x8a0
[  566.749891][  T116]  ? __pfx_jfs_lazycommit+0x10/0x10
[  566.752109][  T116]  ? __pfx_kthread+0x10/0x10
[  566.754033][  T116]  ? _raw_spin_unlock_irq+0x23/0x50
[  566.756203][  T116]  ? lockdep_hardirqs_on+0x9c/0x150
[  566.758456][  T116]  ? __pfx_kthread+0x10/0x10
[  566.760441][  T116]  ret_from_fork+0x439/0x7d0
[  566.762418][  T116]  ? __pfx_ret_from_fork+0x10/0x10
[  566.764596][  T116]  ? __switch_to_asm+0x39/0x70
[  566.766664][  T116]  ? __switch_to_asm+0x33/0x70
[  566.768639][  T116]  ? __pfx_kthread+0x10/0x10
[  566.770612][  T116]  ret_from_fork_asm+0x1a/0x30
[  566.772690][  T116]  </TASK>
[  566.773886][  T116] Modules linked in:
[  566.775305][    C1] vkms_vblank_simulate: vblank timer overrun
[  566.777971][  T116] ---[ end trace 0000000000000000 ]---
[  566.782170][  T116] RIP: 0010:txUnlock+0xdaf/0xdf0
[  566.784612][  T116] Code: e5 fd 90 0f 0b e8 21 d2 7b fe 48 c7 c7 20 56 84 8b 48 c7 c6 19 52 84 8b ba a3 03 00 00 48 c7 c1 20 63 84 8b e8 c2 44 e5 fd 90 <0f> 0b e8 fa d1 7b fe 48 c7 c7 20 56 84 8b 48 c7 c6 19 52 84 8b ba
[  566.792820][  T116] RSP: 0018:ffffc9000249fbc8 EFLAGS: 00010246
[  566.796081][  T116] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 7aaf220530847e00
[  566.799429][  T116] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  566.803699][  T116] RBP: ffffc90001ff25a0 R08: ffffc9000249f8e7 R09: 1ffff92000493f1c
[  566.807130][  T116] R10: dffffc0000000000 R11: fffff52000493f1d R12: dffffc0000000000
[  566.810465][  T116] R13: 1ffff1100450f4b0 R14: ffff88802287a580 R15: 0000000000000000
[  566.814701][  T116] FS:  0000000000000000(0000) GS:ffff8881a417e000(0000) knlGS:0000000000000000
[  566.818494][  T116] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  566.822322][  T116] CR2: 00005555823655c8 CR3: 0000000026a88000 CR4: 00000000000006f0
[  566.825688][  T116] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  566.829108][  T116] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  566.832849][  T116] Kernel panic - not syncing: Fatal exception
[  566.836370][  T116] Kernel Offset: disabled
[  566.838266][  T116] Rebooting in 86400 seconds..

VM DIAGNOSIS:
07:57:15  Registers:
info registers vcpu 0

CPU#0
RAX=ef5d0fe42cfc0400 RBX=ffffffff9980ec08 RCX=ffffffff99556303 RDX=0000000000000000
RSI=ffffffff8b9e6fc0 RDI=ffff888123c78230 RBP=ffffffff9980ec00 RSP=ffffc900027ffc78
R8 =ffffffff8f5cac37 R9 =1ffffffff1eb9586 R10=dffffc0000000000 R11=fffffbfff1eb9587
R12=1ffff1102478f047 R13=dead000000000122 R14=dffffc0000000000 R15=ffff888123c78230
RIP=ffffffff848c7320 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555569b37500 ffffffff 00c00000
GS =0000 ffff8880b8d7e000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056544cca57e8 CR3=0000000115956000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000249f310
R8 =ffff888020350237 R9 =1ffff1100406a046 R10=dffffc0000000000 R11=ffffffff850b3ff0
R12=dffffc0000000000 R13=ffffffff995968f2 R14=ffffffff99889380 R15=0000000000000000
RIP=ffffffff850b406c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a417e000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555823655c8 CR3=000000012037c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f715e212fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
