last executing test programs:

3m34.549392847s ago: executing program 1 (id=1367):
unshare(0x2040600)
bpf$MAP_DELETE_ELEM(0x15, 0x0, 0x0)

3m34.50489694s ago: executing program 1 (id=1368):
r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, r0)
pipe2$watch_queue(&(0x7f00000003c0)={<r2=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x69)
r3 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x66, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x35, 0x0, 0xd, 0x65]}, &(0x7f0000000180)={0x0, "de8d0d27ca969fa15f8b3b7bae39c1b3327d4332f8c149d2d65a347d67f6db7eb90dfdad3cdebaaf421412f812305c9da91699b5a02c1295596f0fd9ec78f2fd", 0x2d}, 0x48, r0)
keyctl$KEYCTL_MOVE(0x1e, r3, r0, r1, 0x0)

3m34.448764423s ago: executing program 1 (id=1370):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="00ffff2382767a00b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

3m34.398603984s ago: executing program 1 (id=1371):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

3m34.397692297s ago: executing program 1 (id=1373):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884384dd78bb3fb7dbfc8180ca5b71d8f86836dc9adcf581", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)

3m34.269015585s ago: executing program 1 (id=1377):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r1, 0x40000000af01, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_usbip_server_init(0x3)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, &(0x7f0000000100)=""/47, 0xf000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340))
r3 = dup(r0)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3})

3m34.145207335s ago: executing program 32 (id=1377):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r1, 0x40000000af01, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_usbip_server_init(0x3)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, &(0x7f0000000100)=""/47, 0xf000})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340))
r3 = dup(r0)
ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3})

2m18.687979137s ago: executing program 0 (id=2466):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x20}}, 0x1c}}, 0x0)

2m18.618129812s ago: executing program 0 (id=2467):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000000), 0x10)
bind$can_raw(r0, &(0x7f0000000140), 0x10)

2m18.61796577s ago: executing program 0 (id=2468):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
userfaultfd(0x801)

2m16.99803343s ago: executing program 0 (id=2471):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

2m16.905869852s ago: executing program 0 (id=2473):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0)

2m16.596664313s ago: executing program 0 (id=2478):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x33, 0x301, 0x270bd26, 0x25dfdbfc, {0x3, 0x0, 0x4000}}, 0x14}, 0x1, 0x8000000000000, 0x0, 0x8040}, 0x8004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x5608, 0x3)
r5 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r5, 0x8b)
recvmsg$can_raw(r4, &(0x7f0000003200)={&(0x7f0000001080)=@alg, 0x80, &(0x7f00000031c0)}, 0x40000000)
ioctl$sock_TIOCOUTQ(r5, 0x5411, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETAF(r6, 0x5408, &(0x7f0000001040)={0x1002, 0x9, 0x0, 0xff, 0x17})
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0)

2m16.443254335s ago: executing program 33 (id=2478):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x33, 0x301, 0x270bd26, 0x25dfdbfc, {0x3, 0x0, 0x4000}}, 0x14}, 0x1, 0x8000000000000, 0x0, 0x8040}, 0x8004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x800)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0xffffffffffffffb6)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x5608, 0x3)
r5 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r5, 0x8b)
recvmsg$can_raw(r4, &(0x7f0000003200)={&(0x7f0000001080)=@alg, 0x80, &(0x7f00000031c0)}, 0x40000000)
ioctl$sock_TIOCOUTQ(r5, 0x5411, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETAF(r6, 0x5408, &(0x7f0000001040)={0x1002, 0x9, 0x0, 0xff, 0x17})
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0)

2m12.054679671s ago: executing program 3 (id=2511):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, r3, 0x25, 0x0, @val=@perf_event}, 0x18)
syz_emit_ethernet(0x3a, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x236, 0xffffffffffffff80}}}}}}, 0x0)

2m11.627832657s ago: executing program 3 (id=2512):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000400)={0x48, 0x8, r2, 0x0, 0x0, 0x55, 0x0, 0x5})

2m11.575947878s ago: executing program 3 (id=2513):
socket(0x11, 0x2, 0x0)
r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x65]}, &(0x7f0000000080)={0x0, "7fa83dab0d3366512d5be841797d7df93815e60c650932d7ec32e239af37da22bb8a299a5f539d3c7f18a266d61654fead1f5509316491a77a08835ac6cae26a"}, 0x48, 0xfffffffffffffffd)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x38e, 0x20800)
ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x8000000c96c0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x145040, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'adq12b\x00', [0x4f27, 0x5, 0x2, 0x4, 0x5, 0xcc5, 0xf, 0x1000, 0xa, 0xe8aa, 0x2, 0x1, 0xfffffffd, 0x6, 0x7fffffff, 0xff, 0x80000000, 0x1a447, 0x3, 0x42000003, 0x99, 0xcaa7, 0xfffffffe, 0x20001e58, 0x8, 0xe69, 0x3c, 0x8, 0xfffffffe, 0x0, 0xfffffff8]})
sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x10001)
keyctl$chown(0x4, r0, 0xffffffffffffffff, 0xee00)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x8100, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$TIOCMIWAIT(r3, 0x545c, 0x200000000000000)

2m11.481431232s ago: executing program 3 (id=2514):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)

2m11.158361255s ago: executing program 3 (id=2518):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0xa, 0x1000}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000007dbfffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))

2m10.755384819s ago: executing program 3 (id=2523):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x250, 0xa8, 0xfeffffff, 0x250, 0x1a8, 0x2f8, 0x2f8, 0xffffffff, 0x2f8, 0x2f8, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @private=0xa010102, @rand_addr=0x640100ff, @gre_key=0x4, @icmp_id=0x68}}}}, {{@ip={@private=0xa010101, @multicast2, 0xffffff00, 0xffffffff, 'vxcan1\x00', 'veth1_to_team\x00', {0xff}, {}, 0x34, 0x2, 0x20}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @private=0xa010100, @empty, @port=0x4e24, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @multicast2, @icmp_id=0x68, @icmp_id=0x66}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x27}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth0_macvtap\x00', {}, {}, 0x8, 0x1, 0x10}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @port=0x9, @gre_key=0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0)

2m10.502600537s ago: executing program 34 (id=2523):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000000c0)=@nat={'nat\x00', 0x670, 0x5, 0x338, 0x250, 0xa8, 0xfeffffff, 0x250, 0x1a8, 0x2f8, 0x2f8, 0xffffffff, 0x2f8, 0x2f8, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @private=0xa010102, @rand_addr=0x640100ff, @gre_key=0x4, @icmp_id=0x68}}}}, {{@ip={@private=0xa010101, @multicast2, 0xffffff00, 0xffffffff, 'vxcan1\x00', 'veth1_to_team\x00', {0xff}, {}, 0x34, 0x2, 0x20}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x7}}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @private=0xa010100, @empty, @port=0x4e24, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @multicast2, @icmp_id=0x68, @icmp_id=0x66}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x27}, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth0_macvtap\x00', {}, {}, 0x8, 0x1, 0x10}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xe, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @port=0x9, @gre_key=0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0)

7.342023481s ago: executing program 4 (id=3982):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a0682)
write$sndseq(r0, &(0x7f0000000680)=[{0x5, 0xd2, 0x3, 0xfd, @time={0x18, 0xfff}, {0x1, 0x1}, {0x6b}, @note={0x6, 0x3, 0x5, 0xfc, 0xcde}}], 0x1c)

7.341767521s ago: executing program 4 (id=3983):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$pokeuser(0x6, r3, 0x358, 0x0)
r4 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e)
ftruncate(0xffffffffffffffff, 0x2007ffb)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x124)
ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", "037ec42b", '\x00', "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386a7a0236a9cc1f0", "cf6cce2296b3f853e224c4e0"]})
ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000100)={0x9, 0x0, 0x9, 0xffffffff, 0x0, 0x4, "0ff8000000000000c5c6ff0717c3a86d", 0x4, 0x2, 0x5, 0xff, 0x0, 0x1, 0xff})
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1d4, &(0x7f00000006c0)="$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")

6.416750412s ago: executing program 4 (id=3991):
syz_io_uring_setup(0x2, 0x0, 0x0, 0x0)
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c0000904000002070101000905010200"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0)

6.294481179s ago: executing program 2 (id=3993):
r0 = io_uring_setup(0x60b6, &(0x7f0000000080))
io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x16, 0xffffffffffffffff, 0x1)

6.210196306s ago: executing program 2 (id=3994):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0)

6.209928541s ago: executing program 2 (id=3995):
syz_usb_connect(0x0, 0x5d, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0)

5.643086985s ago: executing program 2 (id=3997):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x200008, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1, 0x5511, &(0x7f00000079c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10)
statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, 0x0)

5.235970866s ago: executing program 2 (id=3998):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
chdir(0x0)
sched_setaffinity(0x0, 0xffffffffffffff64, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="02"], 0x50)

5.076044519s ago: executing program 2 (id=3999):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x40)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x50, r1, 0x1, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r7, 0x80044dfe, 0x0)

4.983298818s ago: executing program 35 (id=3999):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x40)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x50, r1, 0x1, 0x70bd2d, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r7, 0x80044dfe, 0x0)

3.109859071s ago: executing program 4 (id=4006):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000a80), &(0x7f0000000180)=0x8)

3.034142641s ago: executing program 4 (id=4007):
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0)

2.958425886s ago: executing program 4 (id=4008):
syz_usb_connect(0x3, 0x24, &(0x7f0000000680)={{0x12, 0x1, 0x250, 0xca, 0xda, 0x31, 0x40, 0x5ac, 0x245, 0x7d1d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x6, 0x0, 0x4, [{{0x9, 0x4, 0xe8, 0x80, 0x0, 0x3, 0xbc, 0x2, 0x4c}}]}}]}}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0})

2.246290854s ago: executing program 5 (id=4011):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4)

2.176045385s ago: executing program 5 (id=4013):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdc03, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004814)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)

2.101243327s ago: executing program 5 (id=4015):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x470d0, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0xe0000000}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000)

1.987453353s ago: executing program 5 (id=4017):
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r0, r1, 0x0, 0xc19)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x4, 0x1, 0x201}, 0x14}}, 0x0)

1.90096933s ago: executing program 6 (id=4018):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r4 = open(&(0x7f0000000280)='.\x00', 0x800, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x1000}}, './file0\x00'})

1.611429757s ago: executing program 5 (id=4019):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r3, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x3f00, &(0x7f00000001c0)={&(0x7f0000000300)={0x40, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x40}}, 0x0)

1.259265964s ago: executing program 5 (id=4020):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

885.74486ms ago: executing program 6 (id=4021):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="240000001a00010000000000ffdbdf250a00008000000005"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)

885.654089ms ago: executing program 6 (id=4022):
add_key(&(0x7f0000000600)='rxrpc\x00', 0x0, &(0x7f0000000000)="0000000000000018e26148f239b2897b3aa70e0445dc56ef601edb92bc5a1150", 0x20, 0xfffffffffffffffe)

808.238971ms ago: executing program 6 (id=4023):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a69700000000500040000ffed000900020073797a3200000000240007800c00028008000140ffffffff0c0001800800014080ffffff050014000200000005000500020000000500010006"], 0x6c}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x4044810}, 0x0)

807.888701ms ago: executing program 6 (id=4024):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002140)={'wg2\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x200}, {0x71, 0x0, 0x1}]}}]}, 0x38}}, 0x0)

0s ago: executing program 6 (id=4025):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./bus\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x1, 0x5f52, &(0x7f000000ef80)="$eJzs3V1vHFcZB/BnX7x+KU2jClUh4iJNobSU5j2B8taUCy4ACSSUaxK5bhVIASUB0SoirnKBuODlI8BNb7joFylfAfEBiBRzVQnKoLHPScbjddZp4p1dn99PcmaePTveM/l7PDuemT0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMT3vvvj072IuPzr9MDhiM/EIKIfsVzXx6KeuZifP4yII7HZHM9FxGAxol5+859nIs5FxEeHIu5t3FqtHz6zx36cP3Xz+iff/84/fvenO0d++uZPPmi3/+izZz/8/e2Iwz987cNPbj+ZdQcAAIBSVFVV9dJh/tF0fN/vulMAwFTk/X+V5MfVarVa/UTrP/Znqz/qQuumarzbzSIi1pvL1O8ZnI4HgDmzHh933QU6JP+iDSPiqa47Acy0XtcdYF/c27i12kv59pr7g2Nb7fnvlNvyX+/dv79jt+kk7WtMpvXzdScG8ewu/VmeUh9mSc6/387/8lb7KD1vv/Oflt3yH23d+lScnP+gnX/Ltvz/HBFzm39/bP6lyvkPHyX/9cEcb//yBwAAAADg4Mt//z/c8fnfxcdflT152PnfY1PqAwAAAAAAAAA8aY87/t99xv8DAACAmVUfq9f+cujBY7t9Hmh9iH+pF/F06/lAYdLNMitd9wMAAAAAAAAAAAAASjLcuob3Ui9iISKeXlmpqqr+amrXj+pxl593pa8/lKzrX/IAALDlo0Ote/l7EUsRcSl91t/CyspKVS0tr1Qr1fJifj87WlyqlhvHtXlaP7Y42sMb4uGoqr/ZUmO5pknHy5Pa29+vfq1RNdhDx6ajw8ABICK29kb37JEOmKp6Jrp+l8N8sP0fPLZ/9qLrn1MAAABg/1VVVfXSx3kfTef8+113CgCYhqW8/2+fF1Cr1Wq1Wn3w6qZqvNvNIiLWm8vU7xkMxw8Ac2Y9Pu66C3RI/kUbRsSRrjsBzLRe1x1gX9zbuLXaS/n2mvuDNL57vhZkW/7rvc3l8vLjppO0rzGZ1s/XnRjEs7v057kp9WGW5Pz77fwvb7WP0vP2O/9p2S3/ej0Pd9CfruX8B+38Ww5O/v2x+Zcq5z98pPwH8gcAAAAAgBmW//5/2PnfvMoAAAAAAAAAMHfubdxazfe95vP/nx/zvF5zzv2fB0bOv7fn/N3/e5Dk/Pvt/FsX5Awa83ffeJD/vzdurX5w81+fy9OZz39hMKpfe6HXHwzTNT/VwltxNa7FWpza8fzhtvbTO9oXtrWfmdB+dkf7qG5fzu0nYjV+EdfizfvtixMujFqa0F5NaM/5D2z/Rcr5Dxtfdf4rqb3Xmtbuvt/fsd03p+Ne5+Lf/vvizq1r+u7E4P66NdXrd7yD/mz+nzw1il/dWLt+4jdXbt68fjrSZNujZyJNnrCc/0L6yvm/9MJWe/6939xe774/euT8Z8WdGO6a/wuN+Xp9X55y37qQ8x+lr5x/3gON3/7nOf/dt/9XOugPAAAAAAAAAAAAAAAAPExVVZu3iF6MiAvp/p+u7s0EAKbqDz9IM1USarVarVarD2zdVI33erOIpe3LXIiI3477ZgDALPtfRPyz607QGfkXLH/eXz39QtedAabqxrvv/ezKtWtr12903RMAAAAAAAAA4NPK438ea4z/vHkdUGvc6G3jv74Rx+Z2/M/+aLA51nlaoefj4eN/H4+Hj/89nPB6CxPaRxPaFye0L01oH3ujR0PO//mUcc7/aFqxksZ/famD/nQt5388jfWc8/9S63nN/Ku/znP+/W35n7z5zi9P3nj3vVevvnPl7bW3135++tSFc2fPnzt7/vzJt65eWzu19W+HPd5fOf889rXrQMuS88+Zy78sOf8vplr+Zcn5v5hq+Zcl55/f78m/LDn/fOwj/7Lk/F9OtfzLkvP/cqrlX5ac/yupln9Zcv5fSbX8y5LzfzXV8i9Lzv9EquVflpz/yVTLvyw5/3yGS/5lyfnnKxvkX5ac/5lUy78sOf+zqZZ/WXL+51It/7Lk/M+nWv5lyflfSLX8y5Lz/2qq5V+WnP/XUi3/suT8X0u1/MuS8/96quVflpz/N1It/7Lk/L+ZavmXJef/rVTLvyw5/2+nWv5lyfm/nmr5l+XB5/+bmfLMf/4eMQPdMGNm3EzXv5kAAAAAAAAAAAAAgLZpXE7c9ToCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/ZwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2Lu7GLnK+wzgZ7/stSHBDYSvOLA2Bgws3l1/gUMMJgkpJW1KSUibltQ49tps4q961wkgVJZCW6IgFam9oBfNl9IoUluBokhNJRohNVJzV64ScRO1EheWCpWDkkqpAludOe/77szs7Mx6vYtnzvn9EP57Z87MvHPmzOw+az0zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1Nv00cm/7MuyLP+/9seGLLs4//u6bF/+5ezuC71CAAAA4Hy9XfvzHy9JJ+xbwoXqtvn3a/7j+3Nzc3PZ5986885fz82lM0aybGBtltXOi378q1/O1W8TPJ0N9/XXfd3f4eYHOpw/2OH8oQ7nr+lw/toO5w93OH/BDlhgXfH7mNqVban9dUOxS7PLsqHaeVtaXOrpvrX9/fF3OTV9tcvMDR3OprKj2WQ2vuAyfbX/suzlTflt3ZvF2+qvu62NWZad/fkTB+Ma+sI+3pI13FhN/WP35t3ZyFs/f+Lgd2beuKrV7LgbFqw0y7Zuztf5TJbN/7oq68vWpn0S19lft86NLdY50LDOvtrl8r83r/PsEtcZ7/dwWOerbda5MZz26HVZls1mi27T7OmsP1vfdKtpfw8XR0R+HflD+b5s8JyOk01LOE7yy7x+XeNx0nxMxv2/KeyTwUXWUP9wvPnUmgX7fbnHSX6vu+FYza/7/vxGh4frf7XacKzm2zxx/eLHQMvHrsUxkI7lumNgc6djoH/NQO0Y6J9f8+aGY2BiwWX6s77abZ25vv0xMDZz7OTY9GOP3zp17MCRySOTxyfGd+/csWvnjl27xg5PHZ0cL/48t13aQ9Zn/ekY3Bxea+IxeGPTtvWH5Nw3V+55MNwlz4P8vn/6hnxBF/dnixzj+TbPbD3/50H6vl/3PBisex60fE1t8TwYXMLzIN/m7Nalfc8crPu/1RpW67VwQ90xcCG/H+a3+dBNi78Wbgzrevbmc/1+OLDgGIh3qy889/JT0s97w7eH/bLwuLg6P+OiNdnp6clT2x49MDNzaiIL411xad1j1Xy8rK+7T9mC46X/nI+Xff/w6xuubnH6hrCvhm9p/1jl2+wcbf9Y1V7dG/fnmqzYnw2nbs/CWGHv9v5s9d0s358pS7TZn/k2z9x6/j8LplxS9/o31On1b2BosHj9G0h7Y6jh9W/hQzNQW1mWnb11aa9/Q+H/d/v177Iuef3L99VD29ofA/k2z46d6zEw2Pb177ow+8J6bgqJYbgu979TO3+2OEzrHsuOx83g4FA4bgbjLTYeNzsWXCa/tvy2t44v77jZel3jY9Xwc0sJj5t8X/3NePvjJt/mlYnzf+1YF/9a99qxptMxMDSwJl/vUDoIite7uXXxGNiWHcxOZEezQ+ky+aOc39bo9qUdA2vC/+/2a8eVXXIM5Pvqhe3tj4F8mx/tWNmfnbaGU9I2dT87Nf9+YbHMf/Xg/PU177aVzvz5Oj/2k0+m01pliHybN3aea85ov59uCadc1GI/NT9/FjumD2Xvzn66Mqzz6K72v5vKt7ls9xKPp31Zlr028Vrt913h97vfO/2T7zf83rfV75Rfm3jtvrEHfnou6wcAYPneqf05u6b4WbPuX6yX8u//AAAAQE+Iub8/zET+BwAAgNKIuX8gzET+BwAAgNKIuX8wzKQi+f+R2/e8+PaTWXo3wLkgnh93w/13FtvFjvds+Hpkbl5++ke+PfTiV55c2m33Z1n26/s+0HL7R+6M6yqcjOv8UOPpC1x57ZJu/+EH57erf/+Es3uK64/3Z6mHQewqvzy2vXa9I49N1OYr92W1+cDss08X1198Hbc/s6PY/u/Cm5bsO9zXcPmtYT1bwhwJ7ylz/775/ZDPeLkXN17zb5d+Zv724uX6Nr+3djdf+NPieuN7RD1/abF9vN+Lrf9fv/rdF/PtH72+9fqf7G+9/jPhel8P81d7i+3r9/lX6tb/52H98fbi5bZ964ct1//SFcX2L4Xj4hthNq//7r/64NutHq94O/vuKC4Xb3/8f3fWLhevL15/8/qHn5xo2B/N1//KW8X17P3SLwbqt4+nx9uJHr6j8fjuC49vQ488y7Lv/kXWsJ+zDxeX+5em9cfrO3lH6/Xf0rTOk33X1i4/f382NNyvr/399pb3N65n3z9taLg/z98T9t9bYz/Kr/fMA+F4DOf/36vF9TW/l+lL9zS+3sTtv7GheN7G6xtrWv/zTeufvTbfd53Xf+9bxfpfumttw/r3fTwcT/cWs9P6j3z9kobLf/M7xeNx6sujx09Mn546VLdX65/Ha4fXrb/o4ve895LwWtr89f4TM49MnhoZHxnPspEefMvA1V7/t8L8n2LMrvwtFH76i+K4e+4TxfetG39ZfP18OP3h8HjG749f+9uhhuO1+XGfvauY57v+m8M6luqKr/7XtUva8MznXj79z3/2RvPPBfH+nHz/cO3+vbDp8tp5fa8U5ze/XnXyn+9vfF7/bHC8Nn8Q9utceGfmzZcXt9d8/fG9SZ77VPH8jT/JxctnTe8nsmGg8X6c7/p/Fn6O+eGVja9/8fj4wZNN7+a8IevLlzAbXh+y2eL8uFXc38+dvbzl7cX34clmrzqXZS5q+rHpsaNTx08/OjYzOT0zNv3Y4/uPnTh9fGZ/7b1L93+h0+Xnn9/ra8/vQ5O7d2a1Z/uJYqyyC73+kw8ePHTb+A2HJg8fOH145sGTk6eOHJyePjh5aPqGA4cPT3650+WnDu2d2L5nx23bR49MHdp7+549O/aMTh0/kS+jWFQHu8e/OHr81P7aRab37twzsWvXzvHRYycOTe69bXx89HSny9e+N43ml/7S6KnJowdmpo5Njk5PPT65d2LP7t3bO77747GTh6dHxk6dPj52enry1FhxX0Zmaifn3/s6XZ5qmD4RXu+a9IWfzj97y+70/ri5bz+16FUVmzT+eJq9Gd4LKn5/6/R1zP1DYSYVyf8AAABQBTH3hzf+nz9D/gcAAIDSiLl/bZiJ/A8AAAClEXN/kfyH08e/VyX/r1T//yn9/xr9f/3/bAX6//1116P/r/+v/9+e/r/+f6b/v2wXuj/f6+vX/9f/p7Nu6/+H3J+tyzL//g8AAAAlFXP/+jAT+R8AAABKI+b+i8JM5H8AAAAojZj7Lw4zqUj+9/n/+v/6/+36/3Fbn/+f6f93Q/9/y3/r/y+g/6//n+n/L9uF7s/3+vq7sP+/Tv+fbtNt/f+Y+98TZlKR/A8AAABVEHP/e8NM5H8AAAAojZj7Lwkzkf8BAACgNGLu3xBmUpH8r/+v/6//332f/19/Pfr/+v8+/789/X/9/0z/f9kudH++19ffhf1/n/9P1+m2/n/M/b8RZlKR/A8AAABVEHP/+8JM5H8AAAAojZj7Lw0zkf8BAACgNGLuvyzMpCL5v5r9/9ezLNP/z/T/9f+b1qn/r/+/GvT/9f/b0f/X/+/l9ev/6//TWbf1/2Puf3+YSUXyPwAAAFRBzP2Xh5nI/wAAAFAaMfdfEWYi/wMAAEBpxNx/ZZhJRfJ/Nfv/Pv9f/7+g/9+4Tv1//f/VoP+v/9+O/r/+fy+vX/9f/5/Ouq3/H3P/VWEmFcn/AAAAUAUx918dZiL/AwAAQGnE3P+BMBP5HwAAAEoj5v6NYSYVyf9N/f+39f/1//X/9f/1/wv6/yujt/r//Yueo/9f0P9vtHL9/9n5Bej/98z69f/1/+ms2/r/Mfd/MMykIvkfAAAAqiDm/mvCTOR/AAAAKI2Y+68NM5H/AQAAoDRi7h8JM6lI/vf5//r/+v/6//r/+v+rqbf6/4vT/y/o/zfy+f/6//r/+v+01239/5j7N4WZVCT/AwAAQBXE3L85zET+BwAAgNKIuf+6MBP5HwAAAEoj5v4tYSYVyf/6//r/bfv/Px7IMv1//f9A/1//fzn0//X/29H/1//v5fXr/+v/01m39f9j7r8+zKQi+R8AAACqIOb+G8JM5H8AAAAojZj7bwwzkf8BAACgNGLu3xpmUpH8r/+v/+/z/3u4/z+g/5/p/3c9/X/9/3b0//X/e3n9+v/6/3TWbf3/mPtvCjOpSP4HAACAKoi5/+YwE/kfAAAASiPm/lvCTOR/AAAAKI2Y+0fDTCqS//X/9f/1/3u4/+/z/xvWr//fnfT/9f/b0f/X/+/l9ev/6//TWbf1/2PuvzXMpCL5HwAAAKog5v5tYSbyPwAAAJRGzP1jYSbyPwAAAJRGzP3jYSYVyf/6//r/+v/6//r/+v+rSf9f/78d/X/9/15ev/6//j+ddVv/P+b+iTCTiuR/AAAAqIKY+7eHmcj/AAAAUBox9+8IM5H/AQAAoDRi7t8ZZlKR/N8j/f9tqQCl/6//r/+v/6//31P0//X/29H/1//v5fXr/+v/06i/xWnd1v+PuX9XmElF8j8AAABUQcz9u8NM5H8AAAAojZj7bwszkf8BAACgNGLuvz3MpCL5v0f6/z7/X/9f/7+O/r/+fy/R/9f/b2cF+v+1H970/5fnQvfne339+v/6/3TWbf3/mPv3hJlUJP8DAABAFcTc/6EwE/kfAAAASiPm/jvCTOR/AAAA6CmtPocwirn/w2EmFcn/+v9l7//PrdX/1//X/2+/fv3/1aX/r//fjs//1//v5fXr/+v/01m39f9j7t8bZlKR/A8AAABVEHP/nWEm8j8AAACURsz9d4WZyP8AAABQGjH37wszqUj+1/8ve//f5//r/+v/d1q//v/q0v/X/29H/783+//hxxb9/y7q/+fHkP4/3ajb+v8x998dZlKR/A8AAABVEHP/R8JM5H8AAAAojZj7PxpmIv8DAABAacTc/7Ewk4rkf/1//X/9f/1//X/9/9Wk/79q/f/aS6H+f0H/f3kudH++19ffTf1/n/9Pt+q2/n/M/feEmVQk/wMAAEAVxNz/8TAT+R8AAABKI+b+3wwzkf8BAACgNGLuvzfMpCL5X/9f/1//X/9f/1//fzXp//v8/3b0//X/e3n9+v/6/3TWbf3/mPt/K8ykIvkfAAAAqiDm/vvCTOR/AAAAKI2Y+z8RZiL/AwAAQI9Zs+g5Mff/dphJRfJ/7/X/R3qy/9+frl//X/9f/1//X/9/Jen/6/9n+v/LdqH7872+fv1//X8667b+f8z9vxNmUpH8DwAAAFUQc/8nw0zkfwAAACiNmPt/N8xE/gcAAIDSiLn//jCTiuT/le7/N1++HZ//r/+f6f/r/+v/6/+fJ/1//f9M/3/ZLnR/vtfXr/+v/09n3db/j7n/98JMKpL/AQAAoApi7n8gzET+BwAAgC71yDlfIub+T4WZyP8AAABQGjH3fzrMpCL5v/c+/1//X/9f/1//X/+/l+j/6/+3o/+v/9/L69f/1/+ns27r/8fc/2CYSUXyPwAAAFRBzP2fCTOR/wEAAKA0Yu7//TAT+R8AAABKI+b+PwgzqUj+1//X/9f/1//X/9f/X036/wv7//lrmP5/Qf9f/7+X16//r/9PZ93W/4+5/7NhJhXJ/wAAAFAFMff/YZiJ/A8AAAClEXP/H4WZyP8AAABQGjH3PxRmUpH8r/+v/6//r/+v/6//v5r0/33+fzv6//r/vbx+/X/9fzrrtv5/zP2fCzOpSP4HAACAKoi5/4/DTOR/AAAAKI2Y+/eHmcj/AAAAUBox9z8cZlKR/K//v7T+f3NfuJn+f+v16//r/+v/6//r/+v/t6P/r//fy+vX/9f/p7Nu6//H3H8gzGRf480AAAAAvSvm/s+HmVTk3/8BAACgCmLuPxhmIv8DAABAacTcfyjMpCL5X//f5//r/+v/6//r/68m/X/9/3b0//X/e3n9+v/6/3TWbf3/mPsnw0wqkv8BAACgCmLuPxxmIv8DAABAacTcfyTMRP4HAACA0oi5/5Ewk4rkf/1//X/9/8r2/1/9XtM69f/1/1eD/r/+fzv6//r/vbx+/X/9fzrrtv5/zP1TYSYVyf8AAABQBTH3fyHMRP4HAACA0oi5/4thJvI/AAAAlEbM/UfDTCqS//X/9f/1/yvb/1/a5/+vm79d/X/9/+XQ/9f/b0f/X/+/l9ev/6//T2fd1v+Puf9YmElF8j8AAABUQcz9x8NM5H8AAAAojZj7T4SZyP8AAABQGjH3nwwzqUj+1/8/t/5/3yLdwKX0/78+pP+v/9+D/f86+v/6/8uh/6//347+v/5/L69f/1//n866rf8fc/+fhJlUJP8DAABAFcTcfyrMRP4HAACA0oi5fzrMRP4HAACA0oi5fybMpCL5X//f5//r/+v/6//r/68m/X/9/3b0//X/e3n9+v/6/3T2/+zd545eVxXH4RcHQyLEPeQWuAIugWtA4hboLaGHDqH3FnoLHULvvffeeyD0KoEyXmsFD55zxva8nn32ep4PWTBGyo5iPvyV/HRG6/9z9983bmmy/wEAAKCD3P33i1vsfwAAAJhG7v77xy32PwAAAEwjd/8D4pYm+1//r//X/+v/9f/6/33S/+v/l+j/9f9bfr/+X//PutH6/9z9D4xbmux/AAAA6CB3/4PiFvsfAAAAppG7/8Fxi/0PAAAA08jd/5C4pcn+1//r//X/+n/9v/5/n/T/+v8l+n/9/5bfr//X/7NutP4/d/9D45Ym+x8AAAA6yN3/sLjF/gcAAIBp5O5/eNxi/wMAAMA0cvdfF7c02f/6f/2//n+D/f+d9f/6/+3Q/+v/l+j/9f9bfr/+X//PutH6/9z918ctTfY/AAAAdJC7/xFxi/0PAAAA08jd/8i4xf4HAACAaeTuf1Tc0mT/6//1//r/Dfb/vv+v/98Q/b/+f4n+X/+/5ffr//X/rBut/8/d/+i4pcn+BwAAgA5y9z8mbrH/AQAAYBq5+x8bt9j/AAAAMI3c/Y+LW5rsf/2//l//r//X/+v/90n/r/9fov/X/2/5/fp//T/r9t7/3+uGg3vc/j93/w1xS5P9DwAAAB3k7n983GL/AwAAwDRy9z8hbrH/AQAAYBq5+58YtzTZ//p//f8d/f9/7qT/1//r/+/4uf7/ZOj/9f9L9P/6/y2/X/+v/2fd3vv/ld7/8H/P3f+kuKXJ/gcAAIAOcvc/OW6x/wEAAGAaufufErfY/wAAADCN3P1PjVua7H/9v/7f9//1//p//f8+6f+H7f8P/1/vfPr/Y9H/6/+P6v/veYz36//pYLT+P3f/0+KWJvsfAAAAOsjd//S4xf4HAACAaeTuvzFusf8BAABgGrn7nxG3NNn/+n/9v/5f/39+/3+mZf9/+8/0//uh/x+2/1+m/z8W/b/+3/f/9f8sG63/z93/zLilyf4HAACADnL3Pytusf8BAABgGrn7nx232P8AAAAwjdz9z4lbmux//b/+X/+v/7+s7/9fNUf/7/v/+6P/1/8v0f/r/7f8fv2//p91o/X/ufufG7c02f8AAAAwvTO72v3Pi1vsfwAAAJhG7v7nxy32PwAAAEwjd/8L4pYm+1//r//X/+v/L6v/n+T7//r//dH/6/+XHLf/3+n/669F/z/O+/X/+n/Wjdb/5+5/YdzSZP8DAABAB7n7XxS32P8AAAAwjdz9L45b7H8AAACYRu7+l8QtTfa//l//r//X/+v/9f/7pP/X/y/x/X/9/5bfr//X/7NutP4/d/9L45Ym+x8AAAA6yN3/srjF/gcAAIBp5O5/edxi/wMAAMA0cve/Im45vP/PXMlXXTn6f/2//l//r//X/++T/l//v0T/f+H+/+oj/nz6/7Her//X/7NutP4/d/9NcYt//g8AAADTyN3/yrjF/gcAAIBp5O5/Vdxi/wMAAMA0cve/Om5psv+P6v9vu9u5X9f/H4/+/8Lv1//r//X/+n/9v/5/if7f9/+3/H79v/6fdaP1/7n7XxO3NNn/AAAA0EHu/tfGLfY/AAAATCN3/+viFvsfAAAAppG7//VxS5P9f/Lf/79W/6//1//H1f/r//X/+n/9/zL9v/5/y+/X/+v/WTda/5+7/w1xS5P9DwAAAB3k7n9j3GL/AwAAwDRy978pbrH/AQAAYBq5+98ctzTZ/yff//v+v/7/Ivv/M/r/pP+Pv6/6f/3/RdD/6/93+v9Ldtr9/Nbfr//X/7NutP4/d//NB1Ov3/4HAACADm4++OPVu7fELfY/AAAATCN3/1vjFvsfAAAAppG7/21xS5P9r//X/596/+/7/0X/H39f9f/6/4ug/9f/7/T/l+y0+/mtv1//r/9n3Wj9f+7+t8ctTfY/AAAAdJC7/x1xi/0PAAAA04jdf+5ffrf/AQAAYErvPPjj1bt3xS1N9n/j/v/ay+3/r/mf/6z/v/D79f8n0v/ffPj3nv5f/78l+n/9/xL9v/5/y+8fp/+PH1yn/2c8o/X/ufvfHbc02f8AAADQQe7+98Qt9j8AAABMI3f/LXGL/Q8AAADTyN3/3rilyf5v3P9P8v3/e98aL9D/z9v/+/5/XP2//v9C9P/6/53+/5Kddj+/9feP0//7/j/jGq3/z93/vrilyf4HAACADnL3vz9usf8BAABgGrn7PxC32P8AAAAwjdz9H4xbmux//f/W+3/f/9f/6//1/2PT/+v/l+j/9f9bfr/+X//PutH6/9z9H4pbmux/AAAA6CB3/4fjFvsfAAAAppG7/yNxi/0PAAAA08jd/9G4pcn+1//r//fV/9/+J9H/N+n/r9f/7/T/R9L/6/+X6P/1/1t+v/5f/8+60fr/3P0fi1ua7H8AAADoIHf/x+MW+x8AAACmkbv/E3GL/Q8AAADTyN3/ybjhHnc/vSedrLNH/Dx6c/2//t/3//X/vv+v/98n/b/+f4n+X/+/5ffr//X/rBut/8/d/6m4xT//BwAAgGnk7v903GL/AwAAwDRy938mbrH/AQAAYBq5+z8btzTZ//p//b/+f7P9/zX6//Pfr/8fk/5f/79E/6//3/L79f/6f9aN1v/n7v9c3NJk/wMAAEAHufs/H7fY/wAAADCN3P1fiFvsfwAAAJhG7v4vxi1N9r/+X/+v/99s/+/7/4fer/8fk/5f/79E/6//3/L79f/6f9aN1v/n7v9S3NJk/wMAAEAHufu/HLfY/wAAADCN3P1fiVvsfwAAAJhG7v6vxi1N9r/+X/+v/9f/6//1//uk/9f/L9H/6/+3/H79v/6fdaP1/7n7vxa3NNn/AAAA0EHu/q/HLfY/AAAATCN3/zfiFvsfAAAAppG7/5txS5P9P3P/v/Q/0/+fo//X/+/0//r/PdP/6/+X6P/1/1t+v/5f/8+60fr/3P3filua7H8AAADoIHf/t+MW+x8AAACmkbv/O3GL/Q8AAADTyN3/3bilyf6fuf9fov8/R/+v/9/p//X/e6b/1/8v0f/r/7f8fv2//p91p9T/n90d0f/n7v9e3NJk/wMAAEAHufu/H7fY/wAAADCN3P0/iFvsfwAAAJhG7v4fxi3z7P/73LLwi/r/E+//D34T6f/1/zv9v/5f/39A/6//X6L/1/9v+f36f/0/60b7/n/u/h/FLfPsfwAAAGgvd/+P4xb7HwAAAKaRu/8ncYv9DwAAANPI3f/TuKXJ/r+S/f/h5nbS/t/3//X/I/f/V+30//r/K0z/r/9fov/X/2/5/fp//T/rRuv/c/f/LG5psv8BAACgg9z9P49b7H8AAACYRu7+X8Qt9j8AAABMI3f/L+OWJvvf9//1//r/Vv2/7//r/684/b/+f4n+X/+/5fdn/5+/7/T/+n/+32j9f+7+X8UtTfY/AAAAdJC7/9dxi/0PAAAA08jd/5u4xf4HAACAaeTu/23c0mT/6//1//p//b/+X/+/T/p//f8S/b/+f8vv9/1//T/rRuv/c/ffGrc02f8AAADQQe7+38Ut9j8AAABMI3f/7+MW+x8AAACmkbv/trilyf7X/+v/p+z/76r/1//r/0eh/9f/L9H/6/+3/H79v/6fdaP1/7n7/xC3NNn/AAAA0EHu/j/GLfY/AAAATCN3/5/iFvsfAAAAppG7/89xS5P9r//X/198/3+2/rqH7f99/1//r/8fxrz9/130//r/y+7/b7zp3I/1/9t8v/5f/8+60fr/3P1/iVua7H8AAADoIHf/X+MW+x8AAACmkbv/b3GL/Q8AAADTyN3/97ilyf7X/+v/p/z+v/5f/6//H8a8/b/v/+v/ff9f/6//1/+zZrT+P3f/P+KWJvsfAAAAZnF24ddy9/8zbrH/AQAAYBq5+/8Vt9j/AAAAMI3c/f+OW5rsf/2//l//r//X/+v/90n/r/9fov/X/2/5/fp//T/rRuv/c/f/NwAA//81KzOQ")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x42266d2303ad0bf6, 0x0, 0x0, 0x0, &(0x7f0000000240))
chdir(&(0x7f0000000700)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00')

kernel console output (not intermixed with test programs):

_xtp_rx_abort_one: 0xffff888039420c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  275.240284][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811100e400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  275.249828][T12533] loop4: detected capacity change from 0 to 256
[  275.260429][T12533] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  275.768120][T12553] loop4: detected capacity change from 0 to 256
[  275.901104][T12553] FAT-fs (loop4): Directory bread(block 64) failed
[  275.913104][T12553] FAT-fs (loop4): Directory bread(block 65) failed
[  275.916401][T12553] FAT-fs (loop4): Directory bread(block 66) failed
[  275.920212][T12553] FAT-fs (loop4): Directory bread(block 67) failed
[  275.924390][T12553] FAT-fs (loop4): Directory bread(block 68) failed
[  275.927647][T12553] FAT-fs (loop4): Directory bread(block 69) failed
[  275.933658][T12553] FAT-fs (loop4): Directory bread(block 70) failed
[  275.938891][T12553] FAT-fs (loop4): Directory bread(block 71) failed
[  275.941311][T12553] FAT-fs (loop4): Directory bread(block 72) failed
[  275.943929][T12553] FAT-fs (loop4): Directory bread(block 73) failed
[  276.039615][   T33] audit: type=1800 audit(275.908:88): pid=12553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2659" name="file2" dev="loop4" ino=1048649 res=0 errno=0
[  276.907871][T12569] loop5: detected capacity change from 0 to 512
[  276.923959][T12569] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  276.928170][T12569] EXT4-fs (loop5): orphan cleanup on readonly fs
[  276.931062][T12569] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  276.943633][T12569] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  276.947042][T12569] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #16: comm syz.5.2664: invalid fast symlink length 9000
[  276.955303][T12569] EXT4-fs (loop5): Remounting filesystem read-only
[  276.959575][T12569] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  276.991591][T12090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.563706][T12098] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  277.761337][T12603] loop4: detected capacity change from 0 to 8
[  277.790184][T12603] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  277.965838][T12603] cramfs: Error -5 while decompressing!
[  277.969475][T12603] cramfs: ffffffff99beb628(26)->ffff88811c8a8000(4096)
[  277.975013][T12603] cramfs: Error -3 while decompressing!
[  277.977603][T12603] cramfs: ffffffff99beb642(26)->ffff8881127ef000(4096)
[  277.980838][T12603] cramfs: Error -3 while decompressing!
[  277.985686][T12603] cramfs: ffffffff99beb65c(16)->ffff888121b6e000(4096)
[  277.989048][T12603] cramfs: Error -5 while decompressing!
[  277.994695][T12603] cramfs: ffffffff99beb628(26)->ffff88811c8a8000(4096)
[  278.042035][T12098] usb 6-1: Using ep0 maxpacket: 8
[  278.070064][T12098] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  278.084789][T12098] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping
[  278.090253][T12098] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  278.134897][T12098] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  278.139606][T12098] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.144400][T12098] usb 6-1: Product: syz
[  278.147701][T12098] usb 6-1: Manufacturer: syz
[  278.150142][T12098] usb 6-1: SerialNumber: syz
[  278.170960][T12098] usb 6-1: config 0 descriptor??
[  278.195944][T12098] imon_raw 6-1:0.0: IR endpoint missing
[  278.458683][ T5985] usb 6-1: USB disconnect, device number 2
[  279.233453][T12620] loop4: detected capacity change from 0 to 512
[  279.253190][T12620] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2681: casefold flag without casefold feature
[  279.265358][T12620] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2681: couldn't read orphan inode 15 (err -117)
[  279.306910][T12620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  279.324582][T12620] EXT4-fs error (device loop4): htree_dirblock_to_tree:1051: inode #2: comm syz.4.2681: Directory hole found for htree leaf block 0
[  279.376195][T11942] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.579566][ T5938] Bluetooth: hci0: unexpected subevent 0x01 length: 78 > 18
[  279.596408][T12651] loop4: detected capacity change from 0 to 1024
[  279.621576][T12651] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  279.742803][T12098] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  279.897090][T12098] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  279.903830][T12098] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  279.908331][T12098] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  279.915456][T12098] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  279.919556][T12098] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.928252][T12098] usb 6-1: config 0 descriptor??
[  280.364790][T12098] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  280.695544][T12710] wg1 speed is unknown, defaulting to 1000
[  280.711106][T12098] IPVS: starting estimator thread 0...
[  280.802240][T12713] IPVS: using max 49 ests per chain, 117600 per kthread
[  280.954154][T12728] loop4: detected capacity change from 0 to 1024
[  280.978905][T12728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  280.997149][T12728] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.2708: lblock 0 mapped to illegal pblock 0 (length 1)
[  281.022789][T12728] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  281.031281][T12728] EXT4-fs (loop4): This should not happen!! Data will be lost
[  281.031281][T12728] 
[  281.031596][ T5858] usb 6-1: USB disconnect, device number 3
[  281.056221][T12734] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: comm syz.4.2708: lblock 0 mapped to illegal pblock 0 (length 1)
[  281.067736][   T33] audit: type=1800 audit(280.938:89): pid=12734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2708" name="file1" dev="loop4" ino=15 res=0 errno=0
[  281.116222][T11942] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  281.775603][T12746] loop5: detected capacity change from 0 to 256
[  281.810232][T12746] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d)
[  282.642860][T12782] netlink: 'syz.2.2725': attribute type 2 has an invalid length.
[  282.649277][T12782] netlink: 'syz.2.2725': attribute type 1 has an invalid length.
[  283.613922][T12803] netlink: 'syz.5.2730': attribute type 6 has an invalid length.
[  283.617293][T12803] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2730'.
[  284.433336][T12824] loop5: detected capacity change from 0 to 4096
[  284.438000][T12824] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  284.489755][T12824] ntfs3(loop5): ino=19, mi_enum_attr
[  284.500142][T12824] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  284.520952][T12824] ntfs3(loop5): failed to convert "c46c" to iso8859-13
[  284.546496][T12824] ntfs3(loop5): ino=20, mi_enum_attr
[  285.446427][T12839] loop5: detected capacity change from 0 to 32768
[  285.477989][T12839] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2739 (12839)
[  285.580739][T12839] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  285.590912][T12839] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  285.622173][T12839] BTRFS info (device loop5): using free-space-tree
[  285.825799][T12853] loop4: detected capacity change from 0 to 32768
[  285.846748][T12090] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  285.893863][   T33] audit: type=1800 audit(285.748:90): pid=12853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2743" name="file1" dev="loop4" ino=4 res=0 errno=0
[  285.899029][T12853] ERROR: (device loop4): diWrite: ixpxd invalid
[  285.899029][T12853] 
[  285.932428][T12853] ERROR: (device loop4): remounting filesystem as read-only
[  285.941952][T12853] ERROR: (device loop4): txCommit: 
[  285.941952][T12853] 
[  287.125421][T12909] loop5: detected capacity change from 0 to 2048
[  287.134111][T12909] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  287.143561][ T5936] udevd[5936]: incorrect nilfs2 checksum on /dev/loop5
[  287.147348][T12910] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  287.227214][T12912] loop5: detected capacity change from 0 to 256
[  287.322985][  T124] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  287.472914][  T124] usb 5-1: Using ep0 maxpacket: 32
[  287.476897][  T124] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  287.480210][  T124] usb 5-1: config 0 has no interface number 0
[  287.487318][  T124] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  287.503890][T12923] loop5: detected capacity change from 0 to 512
[  287.506037][  T124] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.510227][  T124] usb 5-1: Product: syz
[  287.513750][T12923] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  287.523658][T12923] EXT4-fs (loop5): orphan cleanup on readonly fs
[  287.526036][T12923] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.2763: bad orphan inode 15
[  287.529369][  T124] usb 5-1: Manufacturer: syz
[  287.530541][T12923] ext4_test_bit(bit=14, block=18) = 1
[  287.531548][  T124] usb 5-1: SerialNumber: syz
[  287.535089][T12923] is_bad_inode(inode)=0
[  287.537132][T12923] NEXT_ORPHAN(inode)=1023
[  287.538711][T12923] max_ino=32
[  287.539958][T12923] i_nlink=0
[  287.543962][T12923] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2962: inode #15: comm syz.5.2763: corrupted xattr block 19: e_value size too large
[  287.549861][T12923] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117)
[  287.557387][T12923] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  287.566639][  T124] usb 5-1: config 0 descriptor??
[  287.589206][  T124] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  287.599234][T12090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.759307][T12934] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2767'.
[  287.773392][T12934] bridge0: entered promiscuous mode
[  287.776044][T12934] macvlan2: entered allmulticast mode
[  287.777923][T12934] bridge0: entered allmulticast mode
[  287.781430][T12934] bridge0: port 3(macvlan2) entered blocking state
[  287.784273][T12934] bridge0: port 3(macvlan2) entered disabled state
[  287.793488][T12934] bridge0: left allmulticast mode
[  287.795864][T12934] bridge0: left promiscuous mode
[  287.805318][   T33] audit: type=1326 audit(287.678:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12935 comm="syz.2.2769" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f0f8ebe9 code=0x7ffc0000
[  287.822873][   T33] audit: type=1326 audit(287.678:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12935 comm="syz.2.2769" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f0f8ebe9 code=0x7ffc0000
[  287.829014][  T124] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  287.841024][  T124] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  287.844641][   T33] audit: type=1326 audit(287.678:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12935 comm="syz.2.2769" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f38f0f8ebe9 code=0x7ffc0000
[  287.871897][   T33] audit: type=1326 audit(287.678:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12935 comm="syz.2.2769" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f0f8ebe9 code=0x7ffc0000
[  287.894356][   T33] audit: type=1326 audit(287.678:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12935 comm="syz.2.2769" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f0f8ebe9 code=0x7ffc0000
[  287.981641][T12942] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2772'.
[  287.988707][T12942] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  288.021701][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 97
[  288.224891][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  288.228749][T12256] usb 5-1: USB disconnect, device number 4
[  288.240372][T12256] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  288.250616][T12256] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  288.256292][T12256] quatech2 5-1:0.51: device disconnected
[  288.292141][  T124] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  288.445083][  T124] usb 6-1: config 0 has an invalid interface number: 255 but max is 0
[  288.448310][  T124] usb 6-1: config 0 has no interface number 0
[  288.450761][  T124] usb 6-1: config 0 interface 255 has no altsetting 0
[  288.454620][  T124] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  288.458212][  T124] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.465030][  T124] usb 6-1: config 0 descriptor??
[  288.468800][  T124] cp210x 6-1:0.255: cp210x converter detected
[  288.967272][  T124] cp210x 6-1:0.255: failed to get vendor val 0x000e size 3: -32
[  289.171783][  T124] cp210x 6-1:0.255: GPIO initialisation failed: -19
[  289.178517][  T124] usb 6-1: cp210x converter now attached to ttyUSB0
[  289.314646][T12957] loop4: detected capacity change from 0 to 40427
[  289.390725][T12957] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  289.397395][T12957] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  289.419118][   T33] audit: type=1800 audit(289.288:96): pid=12957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2778" name="file1" dev="loop4" ino=10 res=0 errno=0
[  289.449249][T11942] syz-executor: attempt to access beyond end of device
[  289.449249][T11942] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  289.457067][ T6001] usb 6-1: USB disconnect, device number 4
[  289.469010][ T6001] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  289.472920][T11942] CPU: 0 UID: 0 PID: 11942 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  289.472941][T11942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  289.472948][T11942] Call Trace:
[  289.472952][T11942]  <TASK>
[  289.472957][T11942]  dump_stack_lvl+0x189/0x250
[  289.472977][T11942]  ? __pfx_dump_stack_lvl+0x10/0x10
[  289.472989][T11942]  ? __pfx_queue_work_on+0x10/0x10
[  289.473000][T11942]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  289.473014][T11942]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  289.473033][T11942]  f2fs_handle_critical_error+0x37c/0x540
[  289.473052][T11942]  f2fs_write_end_io+0x886/0xb60
[  289.473074][T11942]  __submit_merged_bio+0x27a/0x6a0
[  289.473092][T11942]  __submit_merged_write_cond+0x255/0x530
[  289.473109][T11942]  f2fs_write_data_pages+0x261d/0x3000
[  289.473144][T11942]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  289.473192][T11942]  ? __pfx_call_rcu+0x10/0x10
[  289.473202][T11942]  ? put_task_stack+0x180/0x210
[  289.473220][T11942]  ? __lock_acquire+0xab9/0xd20
[  289.473240][T11942]  ? do_raw_spin_lock+0x121/0x290
[  289.473259][T11942]  ? do_raw_spin_unlock+0x4d/0x240
[  289.473271][T11942]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  289.473306][T11942]  do_writepages+0x32e/0x550
[  289.473327][T11942]  ? do_raw_spin_unlock+0x4d/0x240
[  289.473341][T11942]  filemap_fdatawrite+0x199/0x240
[  289.473355][T11942]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  289.473367][T11942]  ? preempt_schedule_irq+0xde/0x150
[  289.473407][T11942]  ? do_raw_spin_unlock+0x4d/0x240
[  289.473422][T11942]  f2fs_sync_dirty_inodes+0x31f/0x830
[  289.473441][T11942]  f2fs_write_checkpoint+0x95a/0x1df0
[  289.473466][T11942]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  289.473505][T11942]  ? kill_f2fs_super+0x298/0x6c0
[  289.473519][T11942]  kill_f2fs_super+0x2c3/0x6c0
[  289.473532][T11942]  ? __pfx_kill_f2fs_super+0x10/0x10
[  289.473540][T11942]  ? radix_tree_delete_item+0x2b6/0x400
[  289.473557][T11942]  ? shrinker_free+0x2ce/0x3e0
[  289.473597][T11942]  deactivate_locked_super+0xbc/0x130
[  289.473611][T11942]  cleanup_mnt+0x425/0x4c0
[  289.473623][T11942]  ? lockdep_hardirqs_on+0x9c/0x150
[  289.473638][T11942]  task_work_run+0x1d4/0x260
[  289.473654][T11942]  ? __pfx_task_work_run+0x10/0x10
[  289.473665][T11942]  ? __x64_sys_umount+0x122/0x160
[  289.473681][T11942]  ? exit_to_user_mode_loop+0x40/0x110
[  289.473698][T11942]  exit_to_user_mode_loop+0xec/0x110
[  289.473711][T11942]  do_syscall_64+0x2bd/0x3b0
[  289.473724][T11942]  ? lockdep_hardirqs_on+0x9c/0x150
[  289.473736][T11942]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.473746][T11942]  ? exc_page_fault+0x9f/0xf0
[  289.473759][T11942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.473768][T11942] RIP: 0033:0x7f546418ff17
[  289.473779][T11942] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  289.473788][T11942] RSP: 002b:00007ffe091fbbd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  289.473801][T11942] RAX: 0000000000000000 RBX: 00007f5464211c05 RCX: 00007f546418ff17
[  289.473808][T11942] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe091fbc90
[  289.473814][T11942] RBP: 00007ffe091fbc90 R08: 0000000000000000 R09: 0000000000000000
[  289.473820][T11942] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe091fcd20
[  289.473826][T11942] R13: 00007f5464211c05 R14: 0000000000046a1b R15: 00007ffe091fcd60
[  289.473844][T11942]  </TASK>
[  289.473937][T11942] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  289.620392][ T6001] cp210x 6-1:0.255: device disconnected
[  290.493316][T12973] loop4: detected capacity change from 0 to 32768
[  290.541360][T12973] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  290.604637][T12973] XFS (loop4): Ending clean mount
[  290.718125][T11942] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  290.760637][T12999] loop5: detected capacity change from 0 to 4096
[  290.772098][T12999] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  290.833284][T12999] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  290.845407][T12999] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[  290.847881][T12999] ntfs3(loop5): ino=5, mi_enum_attr
[  291.205159][T13012] overlayfs: failed to clone upperpath
[  291.397094][T13014] loop4: detected capacity change from 0 to 2048
[  291.421094][T13017] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  291.457324][T13017] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  291.462253][T13017] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  291.467599][T13017] Remounting filesystem read-only
[  291.471130][T11942] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  291.741849][ T6001] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  291.893522][ T6001] usb 5-1: Using ep0 maxpacket: 16
[  291.897616][ T6001] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  291.898334][T13043] max out of range
[  291.908322][ T6001] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  291.920573][ T6001] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  291.927486][ T6001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.936290][ T6001] usb 5-1: Product: syz
[  291.941897][ T6001] usb 5-1: Manufacturer: syz
[  291.943939][ T6001] usb 5-1: SerialNumber: syz
[  291.959600][ T6001] usb 5-1: config 0 descriptor??
[  291.969897][ T6001] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  291.982299][ T6001] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  292.038950][T13052] loop5: detected capacity change from 0 to 65
[  292.057744][T13052] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway
[  292.256658][   T33] audit: type=1326 audit(292.128:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13063 comm="syz.2.2818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f0f8ebe9 code=0x50000
[  292.266298][   T33] audit: type=1326 audit(292.128:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13063 comm="syz.2.2818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f0f8ebe9 code=0x50000
[  292.276494][   T33] audit: type=1326 audit(292.128:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13063 comm="syz.2.2818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f0f8ebe9 code=0x50000
[  292.292073][   T33] audit: type=1326 audit(292.128:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13063 comm="syz.2.2818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f0f8ebe9 code=0x50000
[  292.580911][ T6001] em28xx 5-1:0.0: chip ID is em2710/2820
[  292.697004][T13072] loop5: detected capacity change from 0 to 1024
[  292.725323][T13072] hfsplus: bad catalog entry type
[  292.782503][ T6001] em28xx 5-1:0.0: Config register raw data: 0xfffffffb
[  292.786337][ T6001] em28xx 5-1:0.0: AC97 chip type couldn't be determined
[  292.789247][ T6001] em28xx 5-1:0.0: No AC97 audio processor
[  292.816509][ T6001] usb 5-1: USB disconnect, device number 5
[  292.825454][ T6001] em28xx 5-1:0.0: Disconnecting em28xx
[  292.839816][   T33] kauditd_printk_skb: 2510 callbacks suppressed
[  292.839832][   T33] audit: type=1326 audit(292.708:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13063 comm="syz.2.2818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f0f8ebe9 code=0x50000
[  292.846643][ T6001] em28xx 5-1:0.0: Freeing device
[  292.858133][   T33] audit: type=1326 audit(292.708:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13063 comm="syz.2.2818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f0f8ebe9 code=0x50000
[  292.879556][   T33] audit: type=1326 audit(292.708:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13063 comm="syz.2.2818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f0f8ebe9 code=0x50000
[  292.890454][   T33] audit: type=1326 audit(292.708:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13063 comm="syz.2.2818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f0f8ebe9 code=0x50000
[  292.902643][   T33] audit: type=1326 audit(292.708:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13063 comm="syz.2.2818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f0f8ebe9 code=0x50000
[  292.915559][   T33] audit: type=1326 audit(292.708:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13063 comm="syz.2.2818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f0f8ebe9 code=0x50000
[  292.925260][   T33] audit: type=1326 audit(292.708:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13063 comm="syz.2.2818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f0f8ebe9 code=0x50000
[  292.932303][T13074] loop5: detected capacity change from 0 to 4096
[  292.935492][   T33] audit: type=1326 audit(292.708:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13063 comm="syz.2.2818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f0f8ebe9 code=0x50000
[  292.959917][T13074] ntfs3(loop5): ino=1a, mi_enum_attr
[  292.965961][   T33] audit: type=1326 audit(292.708:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13063 comm="syz.2.2818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f0f8ebe9 code=0x50000
[  292.966878][T13074] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  293.001234][   T33] audit: type=1326 audit(292.708:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13063 comm="syz.2.2818" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f0f8ebe9 code=0x50000
[  293.104129][   T26] ntfs3(loop5): ino=5, mi_enum_attr
[  293.627863][T13087] loop4: detected capacity change from 0 to 256
[  293.634589][T13087] exfat: Deprecated parameter 'namecase'
[  293.655610][T13087] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  293.742039][T13089] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2830'.
[  293.751090][T13089] unsupported nla_type 65024
[  294.697820][T13112] dlm: no locking on control device
[  294.931341][T13126] loop4: detected capacity change from 0 to 512
[  294.946264][T13126] EXT4-fs: Ignoring removed oldalloc option
[  294.972577][ T5858] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  294.991074][T13126] EXT4-fs error (device loop4): ext4_orphan_get:1392: comm syz.4.2847: inode #13: comm syz.4.2847: iget: illegal inode #
[  295.004755][T13126] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2847: couldn't read orphan inode 13 (err -117)
[  295.025963][T13126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  295.035173][T13126] EXT4-fs error (device loop4): ext4_resize_begin:60: comm syz.4.2847: resize_inode disabled but reserved GDT blocks non-zero
[  295.090364][T11942] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.132311][ T5858] usb 6-1: Using ep0 maxpacket: 32
[  295.143918][ T5858] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  295.147897][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.174306][ T5858] usb 6-1: config 0 descriptor??
[  295.199212][ T5858] as10x_usb: device has been detected
[  295.205240][ T5858] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  295.231643][ T5858] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  295.280284][ T5858] as10x_usb: error during firmware upload part1
[  295.292821][ T5858] Registered device nBox DVB-T Dongle
[  295.390184][T13132] loop4: detected capacity change from 0 to 32768
[  295.399747][T13132] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2849 (13132)
[  295.413962][ T5858] usb 6-1: USB disconnect, device number 5
[  295.453912][T13132] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  295.454549][ T5858] Unregistered device nBox DVB-T Dongle
[  295.457919][T13132] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  295.468802][ T5858] as10x_usb: device has been disconnected
[  295.477696][T13132] BTRFS info (device loop4): using free-space-tree
[  295.623215][T11942] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  295.967575][T13166] ieee802154 phy0 wpan0: encryption failed: -22
[  296.218606][T13179] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  296.234894][T13179] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  296.733952][T13182] loop5: detected capacity change from 0 to 32768
[  296.738357][T13182] bcachefs (/dev/loop5): error reading default superblock: Unsupported superblock version 0.0: (unknown version) (min 0.9: (unknown version), max 1.28: inode_has_case_insensitive)
[  296.752737][T13182] bcachefs (/dev/loop5): error validating superblock: Bad number of member devices 126 (max 64)
[  296.761872][T13182] bcachefs: bch2_fs_get_tree() error: invalid_sb_too_many_members
[  296.822229][T13188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2867'.
[  296.917171][T13192] loop5: detected capacity change from 0 to 256
[  297.005439][T13192] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d)
[  297.523505][T13219] loop5: detected capacity change from 0 to 512
[  297.544401][T13219] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2881: Failed to acquire dquot type 1
[  297.549067][T13219] EXT4-fs (loop5): 1 truncate cleaned up
[  297.552299][T13219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  297.582202][T12090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.900687][T13232] CIFS mount error: No usable UNC path provided in device string!
[  297.900687][T13232] 
[  297.905604][T13232] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  298.033475][   T33] kauditd_printk_skb: 10822 callbacks suppressed
[  298.033493][   T33] audit: type=1326 audit(297.908:13441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13233 comm="syz.4.2886" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f546418ebe9 code=0x0
[  298.293526][T13248] netlink: 182 bytes leftover after parsing attributes in process `syz.2.2892'.
[  298.807998][T13267] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2901'.
[  299.003591][ T6001] hid-generic 0005:15C2:3010.0006: item fetching failed at offset 0/1
[  299.006866][ T6001] hid-generic 0005:15C2:3010.0006: probe with driver hid-generic failed with error -22
[  299.068928][T13289] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2911'.
[  299.869197][T13305] tmpfs: Bad value for 'mpol'
[  301.329931][   T33] audit: type=1326 audit(301.198:13442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13335 comm="syz.5.2933" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1446b8ebe9 code=0x7ffc0000
[  301.350641][   T33] audit: type=1326 audit(301.198:13443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13335 comm="syz.5.2933" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1446b8ebe9 code=0x7ffc0000
[  301.359938][   T33] audit: type=1326 audit(301.198:13444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13335 comm="syz.5.2933" exe="/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f1446b8ebe9 code=0x7ffc0000
[  301.369344][   T33] audit: type=1326 audit(301.198:13445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13335 comm="syz.5.2933" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1446b8ebe9 code=0x7ffc0000
[  301.379718][   T33] audit: type=1326 audit(301.198:13446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13335 comm="syz.5.2933" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1446b8ebe9 code=0x7ffc0000
[  301.613597][T13340] loop5: detected capacity change from 0 to 32768
[  303.414583][T13367] loop4: detected capacity change from 0 to 1024
[  303.475622][ T3562] hfsplus: b-tree write err: -5, ino 4
[  303.563062][T13363] loop5: detected capacity change from 0 to 32768
[  303.585288][T13363] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  303.653562][T12090] ocfs2: Unmounting device (7,5) on (node local)
[  303.746721][T13377] loop5: detected capacity change from 0 to 1024
[  303.887824][T13386] loop5: detected capacity change from 0 to 2048
[  303.906731][T13387] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  304.651658][T13436] loop4: detected capacity change from 0 to 4096
[  304.655634][T13436] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  304.659615][T13436] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096)
[  304.664141][T13436] NILFS (loop4): mounting unchecked fs
[  304.669547][T13436] NILFS (loop4): invalid segment: Checksum error in segment payload
[  304.670269][ T5936] udevd[5936]: incorrect nilfs2 checksum on /dev/loop4
[  304.672513][T13436] NILFS (loop4): unable to fall back to spare super block
[  304.672531][T13436] NILFS (loop4): error -22 while searching super root
[  304.917461][T13447] netlink: 'syz.4.2983': attribute type 1 has an invalid length.
[  305.281906][ T6001] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  305.432643][ T6001] usb 5-1: Using ep0 maxpacket: 32
[  305.437077][ T6001] usb 5-1: config 8 has an invalid interface number: 203 but max is 0
[  305.440720][ T6001] usb 5-1: config 8 has no interface number 0
[  305.443543][ T6001] usb 5-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023
[  305.447893][ T6001] usb 5-1: config 8 interface 203 has no altsetting 0
[  305.453764][ T6001] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a
[  305.457722][ T6001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.461259][ T6001] usb 5-1: Product: syz
[  305.463262][ T6001] usb 5-1: Manufacturer: syz
[  305.465419][ T6001] usb 5-1: SerialNumber: syz
[  305.470499][T13456] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  305.684407][ T6001] port100 5-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint
[  305.692818][ T6001] usb 5-1: USB disconnect, device number 6
[  305.800041][T13468] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2993'.
[  305.815841][T13468] loop5: detected capacity change from 0 to 512
[  305.841440][T13468] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  305.874234][T12090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  306.731149][T13508] bond0: (slave bond_slave_1): Releasing backup interface
[  306.788068][T13511] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3010'.
[  307.106670][T13526] loop5: detected capacity change from 0 to 2048
[  307.154932][T13531] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  307.161382][T13530] netlink: 'syz.2.3019': attribute type 10 has an invalid length.
[  307.166773][T13530] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3019'.
[  307.203946][T13530] team0: Port device geneve0 added
[  307.218260][T13526] NILFS (loop5): error -2 truncating bmap (ino=16)
[  307.301148][T13539] loop4: detected capacity change from 0 to 1024
[  307.717123][   T90] hfsplus: b-tree write err: -5, ino 4
[  308.885848][T13554] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3027'.
[  308.915432][T13554] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[  308.919631][T13554] macvtap1: entered allmulticast mode
[  308.922232][T13554] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode
[  308.972768][T13554] loop5: detected capacity change from 0 to 512
[  309.266663][T13570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3032'.
[  309.271107][T13570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3032'.
[  309.279937][T13570] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3032'.
[  309.355403][T13566] loop5: detected capacity change from 0 to 32768
[  309.359115][T13566] XFS: noikeep mount option is deprecated.
[  309.424857][T13566] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  309.457779][T13566] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  309.467927][T13566] XFS (loop5): Starting recovery (logdev: internal)
[  309.497319][T13566] XFS (loop5): Ending recovery (logdev: internal)
[  309.514134][T13566] XFS (loop5): Metadata corruption detected at xfs_inobt_verify+0x9e/0x1f0, xfs_finobt block 0x8 
[  309.518565][T13566] XFS (loop5): Unmount and run xfs_repair
[  309.520826][T13566] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  309.523958][T13566] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  309.527738][T13566] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  309.531448][T13566] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  309.535611][T13566] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02  ......1....N....
[  309.539281][T13566] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  309.542995][T13566] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  309.546681][T13566] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  309.550192][T13566] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  309.553995][T13566] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x8 len 8 error 117
[  309.569411][T13589] openvswitch: netlink: Tunnel attr 5 has unexpected len 4 expected 0
[  309.578343][T12090] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  309.587573][T12090] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair.
[  309.735101][T13593] loop4: detected capacity change from 0 to 2048
[  309.785669][T13593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  309.840405][T11942] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.249807][T13613] program syz.5.3047 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  310.507686][T13627] sctp: [Deprecated]: syz.5.3053 (pid 13627) Use of int in max_burst socket option deprecated.
[  310.507686][T13627] Use struct sctp_assoc_value instead
[  310.598971][T13633] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3056'.
[  310.602668][T13633] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3056'.
[  310.860356][T13642] could not allocate digest TFM handle sm3
[  311.138366][T13663] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3067'.
[  311.230376][T13660] loop4: detected capacity change from 0 to 4096
[  311.233755][T13666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3070'.
[  311.365846][T13671] usb usb8: usbfs: process 13671 (syz.4.3073) did not claim interface 0 before use
[  312.445316][T13698] loop5: detected capacity change from 0 to 8192
[  312.514390][T13698]  loop5: p1 p2 p3
[  312.516149][T13698] loop5: partition table partially beyond EOD, truncated
[  312.519768][T13698] loop5: p1 start 51379968 is beyond EOD, truncated
[  312.526884][T13698] loop5: p3 size 100663552 extends beyond EOD, truncated
[  312.802419][T13708] loop5: detected capacity change from 0 to 8
[  312.818087][T13708] SQUASHFS error: zlib decompression failed, data probably corrupt
[  312.825044][T13708] SQUASHFS error: Failed to read block 0x13e: -5
[  312.827879][T13708] SQUASHFS error: Unable to read metadata cache entry [13c]
[  312.831006][T13708] SQUASHFS error: Unable to read directory block [13c:26]
[  313.999766][T13733] Bluetooth: MGMT ver 1.23
[  315.021341][T13749] loop5: detected capacity change from 0 to 512
[  315.060679][T13749] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  315.284601][T12090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.083635][ T5238] Bluetooth: hci0: Opcode 0x0401 failed: -110
[  316.091003][ T5238] Bluetooth: hci0: command 0x0401 tx timeout
[  316.255339][T13782] loop4: detected capacity change from 0 to 512
[  316.319973][T13782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  316.443052][T11942] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.744738][T13811] binder: BINDER_SET_CONTEXT_MGR already set
[  316.747632][T13811] binder: 13810:13811 ioctl 4018620d 200000000040 returned -16
[  316.779659][T13811] binder: 13810:13811 ioctl c0306201 2000000003c0 returned -14
[  316.803218][T13815] loop5: detected capacity change from 0 to 512
[  316.839235][T13815] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  316.868368][T13819] netlink: 'syz.4.3134': attribute type 64 has an invalid length.
[  316.871085][T13819] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3134'.
[  316.878086][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  316.899281][T13815] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  316.934791][T13815] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  316.989052][T12090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.017482][T13834] loop4: detected capacity change from 0 to 512
[  317.020346][T13834] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  317.140838][T13842] tap0: tun_chr_ioctl cmd 1074025675
[  317.143265][T13842] tap0: persist enabled
[  317.145434][T13842] tap0: tun_chr_ioctl cmd 1074025675
[  317.147330][T13842] tap0: persist enabled
[  317.291862][ T5985] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  317.426626][T13863] netlink: 'syz.2.3153': attribute type 1 has an invalid length.
[  317.429319][T13863] netlink: 'syz.2.3153': attribute type 2 has an invalid length.
[  317.452551][ T5985] usb 6-1: Using ep0 maxpacket: 8
[  317.457578][ T5985] usb 6-1: config 162 has an invalid interface number: 45 but max is 1
[  317.466071][ T5985] usb 6-1: config 162 has an invalid interface number: 87 but max is 1
[  317.469491][ T5985] usb 6-1: config 162 has no interface number 0
[  317.472652][ T5985] usb 6-1: config 162 has no interface number 1
[  317.475392][ T5985] usb 6-1: config 162 interface 45 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  317.480875][ T5985] usb 6-1: config 162 interface 87 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  317.488046][ T5985] usb 6-1: config 162 interface 87 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  317.493110][ T5985] usb 6-1: config 162 interface 87 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  317.499065][ T5985] usb 6-1: config 162 interface 87 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  317.503685][ T5985] usb 6-1: config 162 interface 87 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  317.509488][ T5985] usb 6-1: config 162 interface 45 has no altsetting 0
[  317.513012][ T5985] usb 6-1: config 162 interface 87 has no altsetting 0
[  317.520835][ T5985] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=32.4e
[  317.524806][ T5985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.528128][ T5985] usb 6-1: Product: syz
[  317.531545][ T5985] usb 6-1: Manufacturer: syz
[  317.533827][ T5985] usb 6-1: SerialNumber: syz
[  317.746419][ T5985] pl2303 6-1:162.45: required endpoints missing
[  317.751971][ T5985] pl2303 6-1:162.87: required interrupt-in endpoint missing
[  317.761526][ T5985] usb 6-1: USB disconnect, device number 6
[  319.221610][T13908] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3170'.
[  319.281955][T13912] netlink: 'syz.2.3172': attribute type 12 has an invalid length.
[  319.284981][T13912] netlink: 'syz.2.3172': attribute type 29 has an invalid length.
[  319.287702][T13912] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3172'.
[  319.290836][T13912] netlink: 'syz.2.3172': attribute type 2 has an invalid length.
[  319.296390][T13912] netlink: 'syz.2.3172': attribute type 3 has an invalid length.
[  319.347378][T13920] veth0_to_bridge: entered promiscuous mode
[  319.366480][T13919] veth0_to_bridge: left promiscuous mode
[  319.486682][T13925] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3178'.
[  319.490873][T13925] unsupported nlmsg_type 40
[  320.018263][T13952] netlink: 'syz.4.3188': attribute type 1 has an invalid length.
[  320.294531][T13975] loop5: detected capacity change from 0 to 128
[  320.308707][T13975] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  320.340841][T12090] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  320.448311][T13988] loop4: detected capacity change from 0 to 16
[  320.459581][T13988] erofs (device loop4): mounted with root inode @ nid 36.
[  320.472014][   T33] audit: type=1800 audit(320.338:13447): pid=13988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3202" name="file1" dev="loop4" ino=86 res=0 errno=0
[  320.594194][T13994] tipc: Started in network mode
[  320.596405][T13994] tipc: Node identity 7, cluster identity 4711
[  320.599079][T13994] tipc: Node number set to 7
[  320.710952][T14000] 8021q: adding VLAN 0 to HW filter on device bond1
[  320.820927][T14007] Invalid ELF header magic: != ELF
[  320.852400][T14009] loop4: detected capacity change from 0 to 256
[  320.856167][T14009] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  320.860017][T14009] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  320.866526][T14009] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  320.903419][ T5985] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  320.913029][T14011] loop4: detected capacity change from 0 to 2048
[  320.916276][T14011] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  320.919788][ T5936] udevd[5936]: incorrect nilfs2 checksum on /dev/loop4
[  320.920838][T14011] NILFS (loop4): mounting unchecked fs
[  320.930523][ T5936] udevd[5936]: incorrect nilfs2 checksum on /dev/loop4
[  320.937032][T14011] NILFS (loop4): recovery complete
[  320.940297][T14012] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  321.082433][ T5985] usb 6-1: Using ep0 maxpacket: 16
[  321.093666][ T5985] usb 6-1: config 0 has an invalid interface number: 147 but max is 0
[  321.097197][ T5985] usb 6-1: config 0 has no interface number 0
[  321.099807][ T5985] usb 6-1: config 0 interface 147 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32
[  321.103762][ T5985] usb 6-1: config 0 interface 147 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024
[  321.110467][ T5985] usb 6-1: config 0 interface 147 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  321.125853][ T5985] usb 6-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=5b.44
[  321.129805][ T5985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.134662][ T5985] usb 6-1: Product: syz
[  321.139967][ T5985] usb 6-1: Manufacturer: syz
[  321.142218][ T5985] usb 6-1: SerialNumber: syz
[  321.148710][ T5985] usb 6-1: config 0 descriptor??
[  321.152636][T13998] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  321.155450][T13998] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  321.361628][ T5985] net1080 6-1:0.147: probe with driver net1080 failed with error -71
[  321.378745][ T5985] usb 6-1: USB disconnect, device number 7
[  321.418812][T14043] loop4: detected capacity change from 0 to 164
[  321.510422][T14047] loop4: detected capacity change from 0 to 256
[  321.513986][T14047] exfat: Deprecated parameter 'utf8'
[  321.516012][T14047] exfat: Deprecated parameter 'utf8'
[  321.518073][T14047] exfat: Deprecated parameter 'utf8'
[  321.519943][T14047] exfat: Deprecated parameter 'utf8'
[  321.528566][T14047] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xac5c0b1f, utbl_chksum : 0xe619d30d)
[  322.031161][T14077] loop5: detected capacity change from 0 to 512
[  322.050798][T14080] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3247'.
[  322.058254][T14077] EXT4-fs (loop5): 1 truncate cleaned up
[  322.064690][T14077] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  322.090528][T14077] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3245: invalid indirect mapped block 234881024 (level 0)
[  322.113475][T12090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.286114][T14093] netlink: 'syz.4.3251': attribute type 15 has an invalid length.
[  322.429010][T14096] loop5: detected capacity change from 0 to 8
[  322.821625][T14104] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  323.069816][T14108] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3259'.
[  323.076774][T14108] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3259'.
[  323.650920][T14123] loop4: detected capacity change from 0 to 512
[  323.684450][T14123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  323.763600][T11942] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.787793][   T33] audit: type=1800 audit(323.658:13448): pid=14130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3270" name="nullb0" dev="tmpfs" ino=6152 res=0 errno=0
[  323.925413][T14138] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3273'.
[  323.932798][T14136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3272'.
[  323.960445][T14140] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3274'.
[  323.967164][T14140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3274'.
[  323.975653][T14140] netlink: 31 bytes leftover after parsing attributes in process `syz.4.3274'.
[  323.979322][T14140] netlink: 'syz.4.3274': attribute type 3 has an invalid length.
[  323.982584][T14140] netlink: 'syz.4.3274': attribute type 2 has an invalid length.
[  323.985920][T14140] netlink: 31 bytes leftover after parsing attributes in process `syz.4.3274'.
[  323.990982][T14116] loop5: detected capacity change from 0 to 40427
[  324.013237][T14116] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  324.027094][T14116] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  324.036592][T14116] F2FS-fs (loop5): invalid crc value
[  324.133686][T14116] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  324.140317][T14116] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  324.145093][T14116] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  324.175763][T14116] F2FS-fs (loop5): inconsistent node block, node_type:1, nid:12, node_footer[nid:12,ino:3,ofs:249659,cpver:0,blkaddr:0]
[  324.216633][T12090] syz-executor: attempt to access beyond end of device
[  324.216633][T12090] loop5: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  324.227557][T12090] CPU: 0 UID: 0 PID: 12090 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  324.227582][T12090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  324.227591][T12090] Call Trace:
[  324.227596][T12090]  <TASK>
[  324.227602][T12090]  dump_stack_lvl+0x189/0x250
[  324.227624][T12090]  ? __pfx_dump_stack_lvl+0x10/0x10
[  324.227638][T12090]  ? __pfx_queue_work_on+0x10/0x10
[  324.227649][T12090]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  324.227686][T12090]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  324.227709][T12090]  f2fs_handle_critical_error+0x37c/0x540
[  324.227732][T12090]  f2fs_write_end_io+0x886/0xb60
[  324.227756][T12090]  __submit_merged_bio+0x27a/0x6a0
[  324.227772][T12090]  ? up_write+0x1c4/0x420
[  324.227789][T12090]  __submit_merged_write_cond+0x44c/0x530
[  324.227809][T12090]  f2fs_sync_node_pages+0x1479/0x15e0
[  324.227840][T12090]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  324.227876][T12090]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  324.227891][T12090]  ? up_write+0x1c4/0x420
[  324.227902][T12090]  ? do_raw_spin_unlock+0x4d/0x240
[  324.227919][T12090]  f2fs_write_checkpoint+0xe6f/0x1df0
[  324.227949][T12090]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  324.227994][T12090]  ? kill_f2fs_super+0x298/0x6c0
[  324.228010][T12090]  kill_f2fs_super+0x2c3/0x6c0
[  324.228027][T12090]  ? __pfx_kill_f2fs_super+0x10/0x10
[  324.228062][T12090]  ? radix_tree_delete_item+0x2b6/0x400
[  324.228084][T12090]  ? shrinker_free+0x2ce/0x3e0
[  324.228100][T12090]  deactivate_locked_super+0xbc/0x130
[  324.228116][T12090]  cleanup_mnt+0x425/0x4c0
[  324.228129][T12090]  ? lockdep_hardirqs_on+0x9c/0x150
[  324.228146][T12090]  task_work_run+0x1d4/0x260
[  324.228166][T12090]  ? __pfx_task_work_run+0x10/0x10
[  324.228179][T12090]  ? __x64_sys_umount+0x122/0x160
[  324.228198][T12090]  ? exit_to_user_mode_loop+0x40/0x110
[  324.228218][T12090]  exit_to_user_mode_loop+0xec/0x110
[  324.228235][T12090]  do_syscall_64+0x2bd/0x3b0
[  324.228250][T12090]  ? lockdep_hardirqs_on+0x9c/0x150
[  324.228264][T12090]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.228275][T12090]  ? exc_page_fault+0x9f/0xf0
[  324.228291][T12090]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.228301][T12090] RIP: 0033:0x7f1446b8ff17
[  324.228313][T12090] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  324.228321][T12090] RSP: 002b:00007ffe6a93ff68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  324.228335][T12090] RAX: 0000000000000000 RBX: 00007f1446c11c05 RCX: 00007f1446b8ff17
[  324.228344][T12090] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe6a940020
[  324.228350][T12090] RBP: 00007ffe6a940020 R08: 0000000000000000 R09: 0000000000000000
[  324.228357][T12090] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe6a9410b0
[  324.228364][T12090] R13: 00007f1446c11c05 R14: 000000000004f1dc R15: 00007ffe6a9410f0
[  324.228384][T12090]  </TASK>
[  324.228486][T12090] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  324.359208][T12090] CPU: 0 UID: 0 PID: 12090 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  324.359222][T12090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  324.359227][T12090] Call Trace:
[  324.359231][T12090]  <TASK>
[  324.359237][T12090]  dump_stack_lvl+0x189/0x250
[  324.359260][T12090]  ? __pfx_dump_stack_lvl+0x10/0x10
[  324.359273][T12090]  ? __pfx_queue_work_on+0x10/0x10
[  324.359285][T12090]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  324.359300][T12090]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  324.359323][T12090]  f2fs_handle_critical_error+0x37c/0x540
[  324.359338][T12090]  f2fs_write_end_io+0x886/0xb60
[  324.359363][T12090]  __submit_merged_bio+0x27a/0x6a0
[  324.359378][T12090]  ? up_write+0x1c4/0x420
[  324.359393][T12090]  __submit_merged_write_cond+0x44c/0x530
[  324.359406][T12090]  f2fs_sync_node_pages+0x1479/0x15e0
[  324.359425][T12090]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  324.359469][T12090]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  324.359484][T12090]  ? up_write+0x1c4/0x420
[  324.359494][T12090]  ? do_raw_spin_unlock+0x4d/0x240
[  324.359512][T12090]  f2fs_write_checkpoint+0xe6f/0x1df0
[  324.359544][T12090]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  324.359594][T12090]  ? kill_f2fs_super+0x298/0x6c0
[  324.359610][T12090]  kill_f2fs_super+0x2c3/0x6c0
[  324.359626][T12090]  ? __pfx_kill_f2fs_super+0x10/0x10
[  324.359634][T12090]  ? radix_tree_delete_item+0x2b6/0x400
[  324.359656][T12090]  ? shrinker_free+0x2ce/0x3e0
[  324.359672][T12090]  deactivate_locked_super+0xbc/0x130
[  324.359688][T12090]  cleanup_mnt+0x425/0x4c0
[  324.359702][T12090]  ? lockdep_hardirqs_on+0x9c/0x150
[  324.359718][T12090]  task_work_run+0x1d4/0x260
[  324.359737][T12090]  ? __pfx_task_work_run+0x10/0x10
[  324.359749][T12090]  ? __x64_sys_umount+0x122/0x160
[  324.359769][T12090]  ? exit_to_user_mode_loop+0x40/0x110
[  324.359789][T12090]  exit_to_user_mode_loop+0xec/0x110
[  324.359804][T12090]  do_syscall_64+0x2bd/0x3b0
[  324.359815][T12090]  ? lockdep_hardirqs_on+0x9c/0x150
[  324.359823][T12090]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.359830][T12090]  ? exc_page_fault+0x9f/0xf0
[  324.359839][T12090]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.359846][T12090] RIP: 0033:0x7f1446b8ff17
[  324.359855][T12090] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  324.359861][T12090] RSP: 002b:00007ffe6a93ff68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  324.359870][T12090] RAX: 0000000000000000 RBX: 00007f1446c11c05 RCX: 00007f1446b8ff17
[  324.359875][T12090] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe6a940020
[  324.359879][T12090] RBP: 00007ffe6a940020 R08: 0000000000000000 R09: 0000000000000000
[  324.359883][T12090] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe6a9410b0
[  324.359888][T12090] R13: 00007f1446c11c05 R14: 000000000004f1dc R15: 00007ffe6a9410f0
[  324.359901][T12090]  </TASK>
[  324.359904][T12090] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  324.483872][T12090] CPU: 0 UID: 0 PID: 12090 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  324.483894][T12090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  324.483902][T12090] Call Trace:
[  324.483908][T12090]  <TASK>
[  324.483914][T12090]  dump_stack_lvl+0x189/0x250
[  324.483939][T12090]  ? __pfx_dump_stack_lvl+0x10/0x10
[  324.483955][T12090]  ? __pfx_queue_work_on+0x10/0x10
[  324.483967][T12090]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  324.483985][T12090]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  324.484012][T12090]  f2fs_handle_critical_error+0x37c/0x540
[  324.484064][T12090]  f2fs_write_end_io+0x886/0xb60
[  324.484095][T12090]  __submit_merged_bio+0x27a/0x6a0
[  324.484110][T12090]  ? up_write+0x1c4/0x420
[  324.484128][T12090]  __submit_merged_write_cond+0x44c/0x530
[  324.484150][T12090]  f2fs_sync_node_pages+0x1479/0x15e0
[  324.484183][T12090]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  324.484225][T12090]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  324.484242][T12090]  ? up_write+0x1c4/0x420
[  324.484270][T12090]  ? do_raw_spin_unlock+0x4d/0x240
[  324.484288][T12090]  f2fs_write_checkpoint+0xe6f/0x1df0
[  324.484320][T12090]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  324.484374][T12090]  ? kill_f2fs_super+0x298/0x6c0
[  324.484391][T12090]  kill_f2fs_super+0x2c3/0x6c0
[  324.484408][T12090]  ? __pfx_kill_f2fs_super+0x10/0x10
[  324.484418][T12090]  ? radix_tree_delete_item+0x2b6/0x400
[  324.484441][T12090]  ? shrinker_free+0x2ce/0x3e0
[  324.484459][T12090]  deactivate_locked_super+0xbc/0x130
[  324.484476][T12090]  cleanup_mnt+0x425/0x4c0
[  324.484490][T12090]  ? lockdep_hardirqs_on+0x9c/0x150
[  324.484509][T12090]  task_work_run+0x1d4/0x260
[  324.484529][T12090]  ? __pfx_task_work_run+0x10/0x10
[  324.484542][T12090]  ? __x64_sys_umount+0x122/0x160
[  324.484563][T12090]  ? exit_to_user_mode_loop+0x40/0x110
[  324.484584][T12090]  exit_to_user_mode_loop+0xec/0x110
[  324.484602][T12090]  do_syscall_64+0x2bd/0x3b0
[  324.484617][T12090]  ? lockdep_hardirqs_on+0x9c/0x150
[  324.484630][T12090]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.484642][T12090]  ? exc_page_fault+0x9f/0xf0
[  324.484659][T12090]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.484671][T12090] RIP: 0033:0x7f1446b8ff17
[  324.484690][T12090] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  324.484700][T12090] RSP: 002b:00007ffe6a93ff68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  324.484714][T12090] RAX: 0000000000000000 RBX: 00007f1446c11c05 RCX: 00007f1446b8ff17
[  324.484723][T12090] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe6a940020
[  324.484729][T12090] RBP: 00007ffe6a940020 R08: 0000000000000000 R09: 0000000000000000
[  324.484735][T12090] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe6a9410b0
[  324.484744][T12090] R13: 00007f1446c11c05 R14: 000000000004f1dc R15: 00007ffe6a9410f0
[  324.484766][T12090]  </TASK>
[  324.484773][T12090] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  324.628912][T12090] CPU: 0 UID: 0 PID: 12090 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  324.628936][T12090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  324.628943][T12090] Call Trace:
[  324.628949][T12090]  <TASK>
[  324.628955][T12090]  dump_stack_lvl+0x189/0x250
[  324.628980][T12090]  ? __pfx_dump_stack_lvl+0x10/0x10
[  324.628995][T12090]  ? __pfx_queue_work_on+0x10/0x10
[  324.629007][T12090]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  324.629024][T12090]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  324.629082][T12090]  f2fs_handle_critical_error+0x37c/0x540
[  324.629107][T12090]  f2fs_write_end_io+0x886/0xb60
[  324.629134][T12090]  __submit_merged_bio+0x27a/0x6a0
[  324.629149][T12090]  ? up_write+0x1c4/0x420
[  324.629169][T12090]  __submit_merged_write_cond+0x44c/0x530
[  324.629190][T12090]  f2fs_sync_node_pages+0x1479/0x15e0
[  324.629223][T12090]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  324.629265][T12090]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  324.629281][T12090]  ? up_write+0x1c4/0x420
[  324.629293][T12090]  ? do_raw_spin_unlock+0x4d/0x240
[  324.629312][T12090]  f2fs_write_checkpoint+0xe6f/0x1df0
[  324.629346][T12090]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  324.629400][T12090]  ? kill_f2fs_super+0x298/0x6c0
[  324.629425][T12090]  kill_f2fs_super+0x2c3/0x6c0
[  324.629444][T12090]  ? __pfx_kill_f2fs_super+0x10/0x10
[  324.629454][T12090]  ? radix_tree_delete_item+0x2b6/0x400
[  324.629478][T12090]  ? shrinker_free+0x2ce/0x3e0
[  324.629495][T12090]  deactivate_locked_super+0xbc/0x130
[  324.629512][T12090]  cleanup_mnt+0x425/0x4c0
[  324.629528][T12090]  ? lockdep_hardirqs_on+0x9c/0x150
[  324.629546][T12090]  task_work_run+0x1d4/0x260
[  324.629564][T12090]  ? __pfx_task_work_run+0x10/0x10
[  324.629576][T12090]  ? __x64_sys_umount+0x122/0x160
[  324.629596][T12090]  ? exit_to_user_mode_loop+0x40/0x110
[  324.629615][T12090]  exit_to_user_mode_loop+0xec/0x110
[  324.629631][T12090]  do_syscall_64+0x2bd/0x3b0
[  324.629645][T12090]  ? lockdep_hardirqs_on+0x9c/0x150
[  324.629659][T12090]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.629670][T12090]  ? exc_page_fault+0x9f/0xf0
[  324.629687][T12090]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  324.629698][T12090] RIP: 0033:0x7f1446b8ff17
[  324.629711][T12090] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  324.629721][T12090] RSP: 002b:00007ffe6a93ff68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  324.629736][T12090] RAX: 0000000000000000 RBX: 00007f1446c11c05 RCX: 00007f1446b8ff17
[  324.629744][T12090] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe6a940020
[  324.629750][T12090] RBP: 00007ffe6a940020 R08: 0000000000000000 R09: 0000000000000000
[  324.629758][T12090] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe6a9410b0
[  324.629765][T12090] R13: 00007f1446c11c05 R14: 000000000004f1dc R15: 00007ffe6a9410f0
[  324.629790][T12090]  </TASK>
[  324.629796][T12090] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  325.355568][T14187] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3285'.
[  325.502704][ T5985] IPVS: starting estimator thread 0...
[  325.602766][T14188] IPVS: using max 38 ests per chain, 91200 per kthread
[  325.839749][T14201] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[  326.137643][T14219] overlayfs: failed to clone upperpath
[  326.303483][T14233] Process accounting resumed
[  327.071256][T14250] loop4: detected capacity change from 0 to 256
[  327.108638][T14250] FAT-fs (loop4): Directory bread(block 64) failed
[  327.111920][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  327.115233][T14250] FAT-fs (loop4): Directory bread(block 65) failed
[  327.133736][T14250] FAT-fs (loop4): Directory bread(block 66) failed
[  327.145024][T14250] FAT-fs (loop4): Directory bread(block 67) failed
[  327.152666][T14250] FAT-fs (loop4): Directory bread(block 68) failed
[  327.155535][T14250] FAT-fs (loop4): Directory bread(block 69) failed
[  327.158476][T14250] FAT-fs (loop4): Directory bread(block 70) failed
[  327.161379][T14250] FAT-fs (loop4): Directory bread(block 71) failed
[  327.166356][T14250] FAT-fs (loop4): Directory bread(block 72) failed
[  327.169285][T14250] FAT-fs (loop4): Directory bread(block 73) failed
[  327.208560][T14250] syz.4.3313: attempt to access beyond end of device
[  327.208560][T14250] loop4: rw=1, sector=1224, nr_sectors = 64 limit=256
[  327.216293][T14250] syz.4.3313: attempt to access beyond end of device
[  327.216293][T14250] loop4: rw=1, sector=1320, nr_sectors = 36 limit=256
[  327.433721][T14258] loop5: detected capacity change from 0 to 4096
[  327.441937][T14258] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  327.451950][T14258] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  327.458819][T14258] ntfs3(loop5): Failed to load $LogFile (-22).
[  327.565293][T14260] __nla_validate_parse: 1 callbacks suppressed
[  327.565305][T14260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3318'.
[  327.594659][T14265] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3318'.
[  327.811824][T12098] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  327.962090][T12098] usb 6-1: Using ep0 maxpacket: 16
[  327.967520][T12098] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[  327.970808][T12098] usb 6-1: config 0 has no interface number 0
[  327.973441][T12098] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  327.978166][T12098] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  327.985792][T12098] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  327.989248][T12098] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  327.995003][T12098] usb 6-1: Product: syz
[  327.996743][T12098] usb 6-1: SerialNumber: syz
[  328.001016][T12098] usb 6-1: config 0 descriptor??
[  328.014500][T12098] cm109 6-1:0.8: invalid payload size 0, expected 4
[  328.024155][T12098] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input15
[  328.300451][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  328.484801][T14288] loop4: detected capacity change from 0 to 128
[  328.498219][T14288] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  328.505934][T12256] usb 6-1: USB disconnect, device number 8
[  328.525451][T12256] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  328.567057][T11942] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  328.979778][T14307] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  329.280138][T14331] netlink: 'syz.5.3349': attribute type 1 has an invalid length.
[  329.316550][T14331] bond1: entered promiscuous mode
[  329.318861][T14331] bond1: entered allmulticast mode
[  329.329340][T14331] 8021q: adding VLAN 0 to HW filter on device bond1
[  329.345396][T14331] bridge1: entered promiscuous mode
[  329.347693][T14331] bridge1: entered allmulticast mode
[  329.350470][T14331] bond1: (slave bridge1): Enslaving as a backup interface with an up link
[  329.436910][ T5946] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  329.573013][ T5946] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  329.770258][T14343] loop5: detected capacity change from 0 to 32768
[  329.809678][T14343] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  329.836481][T14343] XFS (loop5): Ending clean mount
[  329.891925][T12090] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  330.252427][T14361] evm: overlay not supported
[  330.457058][T14371] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3361'.
[  330.583404][T14385] netlink: 'syz.2.3368': attribute type 5 has an invalid length.
[  333.810464][T14444] loop4: detected capacity change from 0 to 40427
[  333.815681][T14444] F2FS-fs (loop4): build fault injection rate: 771
[  333.823880][T14444] F2FS-fs (loop4): invalid crc value
[  333.880144][T14444] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  333.885668][T14444] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  333.911549][T14444] F2FS-fs (loop4): access invalid blkaddr:2816
[  333.916938][T14444] CPU: 0 UID: 0 PID: 14444 Comm: syz.4.3390 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  333.916958][T14444] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  333.916966][T14444] Call Trace:
[  333.916971][T14444]  <TASK>
[  333.916978][T14444]  dump_stack_lvl+0x189/0x250
[  333.917003][T14444]  ? __pfx_dump_stack_lvl+0x10/0x10
[  333.917018][T14444]  ? __pfx_f2fs_get_dnode_of_data+0x10/0x10
[  333.917045][T14444]  __f2fs_is_valid_blkaddr+0xe52/0x14f0
[  333.917071][T14444]  f2fs_map_blocks+0xd84/0x4130
[  333.917099][T14444]  ? __page_table_check_zero+0x3c0/0x530
[  333.917136][T14444]  ? __pfx_f2fs_map_blocks+0x10/0x10
[  333.917154][T14444]  ? xa_load+0x60/0x210
[  333.917184][T14444]  ? xa_load+0x1ea/0x210
[  333.917209][T14444]  f2fs_mpage_readpages+0xcb2/0x1ac0
[  333.917261][T14444]  ? __pfx_f2fs_mpage_readpages+0x10/0x10
[  333.917279][T14444]  ? __folio_batch_add_and_move+0x20a/0xd20
[  333.917308][T14444]  ? f2fs_readahead+0x177/0x330
[  333.917330][T14444]  read_pages+0x17a/0x580
[  333.917353][T14444]  ? __pfx_read_pages+0x10/0x10
[  333.917378][T14444]  ? filemap_add_folio+0x1af/0x270
[  333.917400][T14444]  page_cache_ra_unbounded+0x6b0/0x7b0
[  333.917433][T14444]  f2fs_readdir+0x49b/0xa60
[  333.917461][T14444]  ? __pfx_f2fs_readdir+0x10/0x10
[  333.917484][T14444]  ? down_read_killable+0x1d1/0x350
[  333.917504][T14444]  iterate_dir+0x399/0x570
[  333.917524][T14444]  __se_sys_getdents64+0xe4/0x260
[  333.917539][T14444]  ? __pfx___se_sys_getdents64+0x10/0x10
[  333.917554][T14444]  ? __pfx_filldir64+0x10/0x10
[  333.917568][T14444]  ? rcu_is_watching+0x15/0xb0
[  333.917585][T14444]  ? do_syscall_64+0xbe/0x3b0
[  333.917605][T14444]  do_syscall_64+0xfa/0x3b0
[  333.917616][T14444]  ? lockdep_hardirqs_on+0x9c/0x150
[  333.917631][T14444]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.917643][T14444]  ? exc_page_fault+0x9f/0xf0
[  333.917659][T14444]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  333.917669][T14444] RIP: 0033:0x7f546418ebe9
[  333.917682][T14444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  333.917693][T14444] RSP: 002b:00007f546509c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  333.917708][T14444] RAX: ffffffffffffffda RBX: 00007f54643b5fa0 RCX: 00007f546418ebe9
[  333.917717][T14444] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  333.917724][T14444] RBP: 00007f5464211e19 R08: 0000000000000000 R09: 0000000000000000
[  333.917731][T14444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  333.917738][T14444] R13: 00007f54643b6038 R14: 00007f54643b5fa0 R15: 00007ffe091fc948
[  333.917759][T14444]  </TASK>
[  334.032668][T14444] F2FS-fs (loop4): access invalid blkaddr:2816
[  334.035496][T14444] CPU: 1 UID: 0 PID: 14444 Comm: syz.4.3390 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  334.035513][T14444] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  334.035521][T14444] Call Trace:
[  334.035526][T14444]  <TASK>
[  334.035533][T14444]  dump_stack_lvl+0x189/0x250
[  334.035558][T14444]  ? __pfx_dump_stack_lvl+0x10/0x10
[  334.035573][T14444]  ? __pfx_f2fs_get_dnode_of_data+0x10/0x10
[  334.035589][T14444]  ? __f2fs_is_valid_blkaddr+0xe5f/0x14f0
[  334.035619][T14444]  __f2fs_is_valid_blkaddr+0xe52/0x14f0
[  334.035642][T14444]  f2fs_map_blocks+0xd84/0x4130
[  334.035669][T14444]  ? __page_table_check_zero+0x3c0/0x530
[  334.035705][T14444]  ? __pfx_f2fs_map_blocks+0x10/0x10
[  334.035723][T14444]  ? xa_load+0x60/0x210
[  334.035751][T14444]  ? xa_load+0x1ea/0x210
[  334.035774][T14444]  f2fs_mpage_readpages+0xcb2/0x1ac0
[  334.035805][T14444]  ? __pfx_f2fs_mpage_readpages+0x10/0x10
[  334.035822][T14444]  ? __folio_batch_add_and_move+0x20a/0xd20
[  334.035850][T14444]  ? f2fs_readahead+0x177/0x330
[  334.035869][T14444]  read_pages+0x17a/0x580
[  334.035921][T14444]  ? __pfx_read_pages+0x10/0x10
[  334.035949][T14444]  ? filemap_add_folio+0x1af/0x270
[  334.035971][T14444]  page_cache_ra_unbounded+0x6b0/0x7b0
[  334.036005][T14444]  f2fs_readdir+0x49b/0xa60
[  334.036034][T14444]  ? __pfx_f2fs_readdir+0x10/0x10
[  334.036060][T14444]  ? down_read_killable+0x1d1/0x350
[  334.036083][T14444]  iterate_dir+0x399/0x570
[  334.036103][T14444]  __se_sys_getdents64+0xe4/0x260
[  334.036124][T14444]  ? __pfx___se_sys_getdents64+0x10/0x10
[  334.036140][T14444]  ? __pfx_filldir64+0x10/0x10
[  334.036160][T14444]  ? rcu_is_watching+0x15/0xb0
[  334.036177][T14444]  ? do_syscall_64+0xbe/0x3b0
[  334.036196][T14444]  do_syscall_64+0xfa/0x3b0
[  334.036212][T14444]  ? lockdep_hardirqs_on+0x9c/0x150
[  334.036227][T14444]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.036240][T14444]  ? exc_page_fault+0x9f/0xf0
[  334.036257][T14444]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.036277][T14444] RIP: 0033:0x7f546418ebe9
[  334.036291][T14444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  334.036302][T14444] RSP: 002b:00007f546509c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  334.036318][T14444] RAX: ffffffffffffffda RBX: 00007f54643b5fa0 RCX: 00007f546418ebe9
[  334.036328][T14444] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
[  334.036336][T14444] RBP: 00007f5464211e19 R08: 0000000000000000 R09: 0000000000000000
[  334.036344][T14444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  334.036352][T14444] R13: 00007f54643b6038 R14: 00007f54643b5fa0 R15: 00007ffe091fc948
[  334.036373][T14444]  </TASK>
[  334.037763][T14444] syz.4.3390: attempt to access beyond end of device
[  334.037763][T14444] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  334.184049][T11942] syz-executor: attempt to access beyond end of device
[  334.184049][T11942] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  334.190057][T11942] CPU: 1 UID: 0 PID: 11942 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  334.190077][T11942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  334.190085][T11942] Call Trace:
[  334.190091][T11942]  <TASK>
[  334.190097][T11942]  dump_stack_lvl+0x189/0x250
[  334.190120][T11942]  ? __pfx_dump_stack_lvl+0x10/0x10
[  334.190136][T11942]  ? __pfx_queue_work_on+0x10/0x10
[  334.190148][T11942]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  334.190165][T11942]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  334.190190][T11942]  f2fs_handle_critical_error+0x37c/0x540
[  334.190235][T11942]  f2fs_write_end_io+0x886/0xb60
[  334.190271][T11942]  __submit_merged_bio+0x27a/0x6a0
[  334.190293][T11942]  __submit_merged_write_cond+0x255/0x530
[  334.190316][T11942]  f2fs_write_data_pages+0x261d/0x3000
[  334.190362][T11942]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  334.190391][T11942]  ? kernel_text_address+0xa5/0xe0
[  334.190434][T11942]  ? stack_depot_save_flags+0x40/0x860
[  334.190471][T11942]  ? __lock_acquire+0xab9/0xd20
[  334.190496][T11942]  ? do_raw_spin_lock+0x121/0x290
[  334.190520][T11942]  ? do_raw_spin_unlock+0x4d/0x240
[  334.190535][T11942]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  334.190553][T11942]  do_writepages+0x32e/0x550
[  334.190581][T11942]  ? do_raw_spin_unlock+0x4d/0x240
[  334.190599][T11942]  filemap_fdatawrite+0x199/0x240
[  334.190617][T11942]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  334.190674][T11942]  ? do_raw_spin_unlock+0x4d/0x240
[  334.190692][T11942]  f2fs_sync_dirty_inodes+0x31f/0x830
[  334.190719][T11942]  f2fs_write_checkpoint+0x95a/0x1df0
[  334.190752][T11942]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  334.190801][T11942]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  334.190813][T11942]  ? kfree+0x18e/0x440
[  334.190829][T11942]  ? kill_f2fs_super+0x298/0x6c0
[  334.190846][T11942]  kill_f2fs_super+0x2c3/0x6c0
[  334.190864][T11942]  ? __pfx_kill_f2fs_super+0x10/0x10
[  334.190874][T11942]  ? radix_tree_delete_item+0x2b6/0x400
[  334.190922][T11942]  ? shrinker_free+0x2ce/0x3e0
[  334.190939][T11942]  deactivate_locked_super+0xbc/0x130
[  334.190957][T11942]  cleanup_mnt+0x425/0x4c0
[  334.190973][T11942]  ? lockdep_hardirqs_on+0x9c/0x150
[  334.190989][T11942]  task_work_run+0x1d4/0x260
[  334.191005][T11942]  ? __pfx_task_work_run+0x10/0x10
[  334.191017][T11942]  ? __x64_sys_umount+0x122/0x160
[  334.191038][T11942]  ? exit_to_user_mode_loop+0x40/0x110
[  334.191059][T11942]  exit_to_user_mode_loop+0xec/0x110
[  334.191075][T11942]  do_syscall_64+0x2bd/0x3b0
[  334.191092][T11942]  ? lockdep_hardirqs_on+0x9c/0x150
[  334.191106][T11942]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.191118][T11942]  ? exc_page_fault+0x9f/0xf0
[  334.191135][T11942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.191147][T11942] RIP: 0033:0x7f546418ff17
[  334.191160][T11942] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  334.191170][T11942] RSP: 002b:00007ffe091fbbd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  334.191185][T11942] RAX: 0000000000000000 RBX: 00007f5464211c05 RCX: 00007f546418ff17
[  334.191193][T11942] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe091fbc90
[  334.191200][T11942] RBP: 00007ffe091fbc90 R08: 0000000000000000 R09: 0000000000000000
[  334.191207][T11942] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe091fcd20
[  334.191214][T11942] R13: 00007f5464211c05 R14: 00000000000518d1 R15: 00007ffe091fcd60
[  334.191238][T11942]  </TASK>
[  334.205374][T11942] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  335.545604][T14473] loop4: detected capacity change from 0 to 1024
[  335.593181][ T3562] hfsplus: b-tree write err: -5, ino 4
[  335.780709][T14479] syz.2.3401: attempt to access beyond end of device
[  335.780709][T14479] loop5: rw=0, sector=0, nr_sectors = 1 limit=0
[  335.786941][T14479] FAT-fs (loop5): unable to read boot sector
[  336.568592][T14509] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3416'.
[  337.504443][T14529] loop5: detected capacity change from 0 to 256
[  337.877272][T14545] loop5: detected capacity change from 0 to 256
[  339.974767][T14578] loop4: detected capacity change from 0 to 32768
[  339.978383][T14578] XFS: noikeep mount option is deprecated.
[  340.048910][T14578] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  340.055344][T14594] tipc: Failed to remove unknown binding: 66,1,1/7:3432253177/3432253179
[  340.059397][T14594] tipc: Failed to remove unknown binding: 66,1,1/7:3432253177/3432253179
[  340.352280][T14578] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  340.441145][T14578] XFS (loop4): Starting recovery (logdev: internal)
[  340.462000][T14578] XFS (loop4): Ending recovery (logdev: internal)
[  340.550242][T11942] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  340.577644][T14606] netlink: 'syz.5.3456': attribute type 1 has an invalid length.
[  340.581130][T14606] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  341.052056][    T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  341.221986][    T9] usb 6-1: Using ep0 maxpacket: 8
[  341.281320][    T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  341.286559][    T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  341.290768][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  341.294840][    T9] usb 6-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[  341.298824][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.307480][    T9] usb 6-1: config 0 descriptor??
[  341.764010][    T9] a4tech 0003:09DA:000A.0007: unbalanced collection at end of report description
[  341.768270][    T9] a4tech 0003:09DA:000A.0007: parse failed
[  341.770924][    T9] a4tech 0003:09DA:000A.0007: probe with driver a4tech failed with error -22
[  342.014930][T12256] usb 6-1: USB disconnect, device number 9
[  342.119099][T14630] loop4: detected capacity change from 0 to 32768
[  342.124614][T14630] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3466 (14630)
[  342.132623][T14630] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  342.136688][T14630] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  342.139655][T14630] BTRFS info (device loop4): using free-space-tree
[  342.223614][T11942] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  342.318610][T14652] netlink: 'syz.4.3467': attribute type 11 has an invalid length.
[  342.324740][T14652] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3467'.
[  342.631133][T14659] netlink: 'syz.5.3470': attribute type 2 has an invalid length.
[  342.663619][T14654] loop4: detected capacity change from 0 to 32768
[  342.723423][T14654]  loop4: p1 p3 < >
[  343.004356][T14682] openvswitch: netlink: IP tunnel dst address not specified
[  343.064291][T14684] loop4: detected capacity change from 0 to 1024
[  343.068429][T14684] hfsplus: Unknown parameter ''
[  343.086966][ T5936] udevd[5936]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  343.107515][ T5940] udevd[5940]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  343.166457][T14687] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[  344.589646][T14701] loop4: detected capacity change from 0 to 1024
[  344.597335][T14701] EXT4-fs: Ignoring removed orlov option
[  344.635718][T14701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  344.660054][T11942] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.997837][T14726] loop4: detected capacity change from 0 to 1024
[  345.016750][T14726] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  345.947783][T14740] loop4: detected capacity change from 0 to 40427
[  345.958257][T14740] F2FS-fs (loop4): build fault injection rate: 771
[  345.963985][T14740] F2FS-fs (loop4): invalid crc value
[  345.990696][T14740] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  345.995186][T14740] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  346.017365][T11942] syz-executor: attempt to access beyond end of device
[  346.017365][T11942] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  346.023201][T11942] CPU: 1 UID: 0 PID: 11942 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  346.023213][T11942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  346.023218][T11942] Call Trace:
[  346.023221][T11942]  <TASK>
[  346.023224][T11942]  dump_stack_lvl+0x189/0x250
[  346.023240][T11942]  ? __pfx_dump_stack_lvl+0x10/0x10
[  346.023249][T11942]  ? __pfx_queue_work_on+0x10/0x10
[  346.023257][T11942]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  346.023267][T11942]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  346.023279][T11942]  f2fs_handle_critical_error+0x37c/0x540
[  346.023293][T11942]  f2fs_write_end_io+0x886/0xb60
[  346.023323][T11942]  __submit_merged_bio+0x27a/0x6a0
[  346.023337][T11942]  __submit_merged_write_cond+0x255/0x530
[  346.023349][T11942]  f2fs_write_data_pages+0x261d/0x3000
[  346.023372][T11942]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  346.023400][T11942]  ? __lock_acquire+0xab9/0xd20
[  346.023413][T11942]  ? css_rstat_updated+0x23a/0x4f0
[  346.023425][T11942]  ? rcu_read_lock_sched_held+0x89/0x100
[  346.023436][T11942]  ? __lock_acquire+0xab9/0xd20
[  346.023452][T11942]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  346.023461][T11942]  do_writepages+0x32e/0x550
[  346.023477][T11942]  ? do_raw_spin_unlock+0x4d/0x240
[  346.023487][T11942]  filemap_fdatawrite+0x199/0x240
[  346.023497][T11942]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  346.023525][T11942]  ? do_raw_spin_unlock+0x4d/0x240
[  346.023534][T11942]  f2fs_sync_dirty_inodes+0x31f/0x830
[  346.023547][T11942]  f2fs_write_checkpoint+0x95a/0x1df0
[  346.023563][T11942]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  346.023586][T11942]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  346.023593][T11942]  ? kfree+0x18e/0x440
[  346.023602][T11942]  ? kill_f2fs_super+0x298/0x6c0
[  346.023611][T11942]  kill_f2fs_super+0x2c3/0x6c0
[  346.023620][T11942]  ? __pfx_kill_f2fs_super+0x10/0x10
[  346.023626][T11942]  ? radix_tree_delete_item+0x2b6/0x400
[  346.023639][T11942]  ? shrinker_free+0x2ce/0x3e0
[  346.023647][T11942]  deactivate_locked_super+0xbc/0x130
[  346.023657][T11942]  cleanup_mnt+0x425/0x4c0
[  346.023665][T11942]  ? lockdep_hardirqs_on+0x9c/0x150
[  346.023676][T11942]  task_work_run+0x1d4/0x260
[  346.023687][T11942]  ? __pfx_task_work_run+0x10/0x10
[  346.023695][T11942]  ? __x64_sys_umount+0x122/0x160
[  346.023738][T11942]  ? exit_to_user_mode_loop+0x40/0x110
[  346.023755][T11942]  exit_to_user_mode_loop+0xec/0x110
[  346.023771][T11942]  do_syscall_64+0x2bd/0x3b0
[  346.023786][T11942]  ? lockdep_hardirqs_on+0x9c/0x150
[  346.023799][T11942]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.023810][T11942]  ? exc_page_fault+0x9f/0xf0
[  346.023826][T11942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.023835][T11942] RIP: 0033:0x7f546418ff17
[  346.023847][T11942] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  346.023857][T11942] RSP: 002b:00007ffe091fbbd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  346.023870][T11942] RAX: 0000000000000000 RBX: 00007f5464211c05 RCX: 00007f546418ff17
[  346.023885][T11942] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe091fbc90
[  346.023891][T11942] RBP: 00007ffe091fbc90 R08: 0000000000000000 R09: 0000000000000000
[  346.023897][T11942] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe091fcd20
[  346.023904][T11942] R13: 00007f5464211c05 R14: 0000000000054716 R15: 00007ffe091fcd60
[  346.023933][T11942]  </TASK>
[  346.024497][T11942] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  346.171005][T12256] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  346.346096][T14756] netlink: 'syz.4.3505': attribute type 21 has an invalid length.
[  346.352076][T14756] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3505'.
[  346.369542][T12256] usb 6-1: config 0 has an invalid interface number: 73 but max is 0
[  346.374608][T12256] usb 6-1: config 0 has no interface number 0
[  346.381317][T12256] usb 6-1: New USB device found, idVendor=06f8, idProduct=300c, bcdDevice=39.64
[  346.386086][T12256] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.389744][T12256] usb 6-1: Product: syz
[  346.391594][T12256] usb 6-1: Manufacturer: syz
[  346.395742][T12256] usb 6-1: SerialNumber: syz
[  346.400305][T12256] usb 6-1: config 0 descriptor??
[  346.609112][T12256] uvcvideo 6-1:0.73: probe with driver uvcvideo failed with error -22
[  346.624992][T12256] usb 6-1: USB disconnect, device number 10
[  346.700678][T14764] overlayfs: failed to clone upperpath
[  347.164420][T14779] loop5: detected capacity change from 0 to 1024
[  347.172935][T14779] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  347.212986][T14782] overlay: filesystem on ./bus is read-only
[  347.699645][T14815] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  348.303780][T14870] tmpfs: Bad value for 'nr_inodes'
[  348.385392][T14874] netlink: 'syz.5.3538': attribute type 11 has an invalid length.
[  348.508174][T14884] syz.2.3542: attempt to access beyond end of device
[  348.508174][T14884] loop5: rw=4096, sector=2, nr_sectors = 2 limit=0
[  348.518111][T14884] EXT4-fs (loop5): unable to read superblock
[  349.683125][T14937] new mount options do not match the existing superblock, will be ignored
[  350.194562][T14944] loop5: detected capacity change from 0 to 32768
[  350.208755][T14944] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  350.226492][T14944] XFS (loop5): Ending clean mount
[  350.234735][T14944] XFS (loop5): Quotacheck needed: Please wait.
[  350.287898][T14944] XFS (loop5): Quotacheck: Done.
[  350.387359][T12090] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  350.424742][T14953] loop4: detected capacity change from 0 to 40427
[  350.434038][T14953] F2FS-fs (loop4): build fault injection rate: 19
[  350.436941][T14953] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  350.488157][T14953] F2FS-fs (loop4): invalid crc value
[  350.520070][T14953] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  350.585032][T14953] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[  350.595499][T14953] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  350.602286][T14953] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  350.613381][T14953] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  350.632553][T14953] F2FS-fs (loop4): inject dquot initialize in f2fs_dquot_initialize of f2fs_convert_inline_inode+0x677/0x880
[  350.741250][T11942] syz-executor: attempt to access beyond end of device
[  350.741250][T11942] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  350.747430][T11942] CPU: 0 UID: 0 PID: 11942 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  350.747449][T11942] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  350.747455][T11942] Call Trace:
[  350.747460][T11942]  <TASK>
[  350.747465][T11942]  dump_stack_lvl+0x189/0x250
[  350.747486][T11942]  ? __pfx_dump_stack_lvl+0x10/0x10
[  350.747499][T11942]  ? __pfx_queue_work_on+0x10/0x10
[  350.747511][T11942]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  350.747527][T11942]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  350.747548][T11942]  f2fs_handle_critical_error+0x37c/0x540
[  350.747571][T11942]  f2fs_write_end_io+0x886/0xb60
[  350.747597][T11942]  __submit_merged_bio+0x27a/0x6a0
[  350.747620][T11942]  __submit_merged_write_cond+0x255/0x530
[  350.747690][T11942]  f2fs_write_data_pages+0x261d/0x3000
[  350.747734][T11942]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  350.747749][T11942]  ? is_bpf_text_address+0x26/0x2b0
[  350.747801][T11942]  ? lockdep_hardirqs_on+0x9c/0x150
[  350.747821][T11942]  ? __lock_acquire+0xab9/0xd20
[  350.747849][T11942]  ? __lock_acquire+0xab9/0xd20
[  350.747871][T11942]  ? do_raw_spin_lock+0x121/0x290
[  350.747894][T11942]  ? do_raw_spin_unlock+0x4d/0x240
[  350.747909][T11942]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  350.747926][T11942]  do_writepages+0x32e/0x550
[  350.747952][T11942]  ? do_raw_spin_unlock+0x4d/0x240
[  350.747969][T11942]  filemap_fdatawrite+0x199/0x240
[  350.747986][T11942]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  350.748038][T11942]  ? do_raw_spin_unlock+0x4d/0x240
[  350.748056][T11942]  f2fs_sync_dirty_inodes+0x31f/0x830
[  350.748079][T11942]  f2fs_write_checkpoint+0x95a/0x1df0
[  350.748110][T11942]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  350.748161][T11942]  ? kill_f2fs_super+0x298/0x6c0
[  350.748177][T11942]  kill_f2fs_super+0x2c3/0x6c0
[  350.748194][T11942]  ? __pfx_kill_f2fs_super+0x10/0x10
[  350.748204][T11942]  ? radix_tree_delete_item+0x2b6/0x400
[  350.748226][T11942]  ? shrinker_free+0x2ce/0x3e0
[  350.748243][T11942]  deactivate_locked_super+0xbc/0x130
[  350.748260][T11942]  cleanup_mnt+0x425/0x4c0
[  350.748274][T11942]  ? lockdep_hardirqs_on+0x9c/0x150
[  350.748291][T11942]  task_work_run+0x1d4/0x260
[  350.748310][T11942]  ? __pfx_task_work_run+0x10/0x10
[  350.748323][T11942]  ? __x64_sys_umount+0x122/0x160
[  350.748342][T11942]  ? exit_to_user_mode_loop+0x40/0x110
[  350.748362][T11942]  exit_to_user_mode_loop+0xec/0x110
[  350.748379][T11942]  do_syscall_64+0x2bd/0x3b0
[  350.748394][T11942]  ? lockdep_hardirqs_on+0x9c/0x150
[  350.748407][T11942]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.748419][T11942]  ? exc_page_fault+0x9f/0xf0
[  350.748436][T11942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  350.748447][T11942] RIP: 0033:0x7f546418ff17
[  350.748460][T11942] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  350.748470][T11942] RSP: 002b:00007ffe091fbbd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  350.748483][T11942] RAX: 0000000000000000 RBX: 00007f5464211c05 RCX: 00007f546418ff17
[  350.748491][T11942] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe091fbc90
[  350.748498][T11942] RBP: 00007ffe091fbc90 R08: 0000000000000000 R09: 0000000000000000
[  350.748505][T11942] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe091fcd20
[  350.748513][T11942] R13: 00007f5464211c05 R14: 000000000005592e R15: 00007ffe091fcd60
[  350.748537][T11942]  </TASK>
[  350.878863][T11942] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  350.898480][T14976] loop5: detected capacity change from 0 to 512
[  350.910604][T14976] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  351.006393][T14978] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  351.694962][  T124] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  351.715156][T15000] syz.5.3588: attempt to access beyond end of device
[  351.715156][T15000] loop5: rw=0, sector=0, nr_sectors = 1 limit=0
[  351.725660][  T124] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  351.734580][T15000] exFAT-fs (loop5): unable to read boot sector
[  351.737555][T15000] exFAT-fs (loop5): failed to read boot sector
[  351.742641][T15000] exFAT-fs (loop5): failed to recognize exfat type
[  352.056345][T15002] loop5: detected capacity change from 0 to 32768
[  352.068742][T15002] OCFS2: ERROR (device loop5): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #70: OCFS2_VALID_FL not set
[  352.091933][T15002] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  352.096400][T15002] OCFS2: File system is now read-only.
[  352.099270][T15002] (syz.5.3589,15002,0):ocfs2_read_locked_inode:597 ERROR: status = -30
[  352.106088][T15002] (syz.5.3589,15002,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  352.110455][T15002] (syz.5.3589,15002,0):ocfs2_init_global_system_inodes:465 ERROR: status = -30
[  352.114588][T15002] (syz.5.3589,15002,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 3, possibly corrupt fs?
[  352.114637][T15002] (syz.5.3589,15002,0):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  352.126081][T15002] (syz.5.3589,15002,0):ocfs2_initialize_super:2198 ERROR: status = -30
[  352.130112][T15002] (syz.5.3589,15002,0):ocfs2_fill_super:1177 ERROR: status = -30
[  353.688879][ T5985] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  353.839086][ T5985] usb 6-1: Using ep0 maxpacket: 16
[  353.844870][ T5985] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  353.850926][ T5985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.854238][ T5985] usb 6-1: Product: syz
[  353.855941][ T5985] usb 6-1: Manufacturer: syz
[  353.857936][ T5985] usb 6-1: SerialNumber: syz
[  353.864271][ T5985] r8152-cfgselector 6-1: Unknown version 0x0000
[  353.866976][ T5985] r8152-cfgselector 6-1: config 0 descriptor??
[  354.033065][T15065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3617'.
[  354.287256][  T124] r8152-cfgselector 6-1: USB disconnect, device number 11
[  354.383742][T15074] loop4: detected capacity change from 0 to 32768
[  354.387735][T15074] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3621 (15074)
[  354.412214][T15074] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  354.416675][T15074] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  354.423959][T15074] BTRFS info (device loop4): disk space caching is enabled
[  354.427081][T15074] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  354.451489][T15074] BTRFS info (device loop4): rebuilding free space tree
[  354.461349][T15074] BTRFS info (device loop4): disabling free space tree
[  354.464242][T15074] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  354.468069][T15074] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  354.503608][T15074] BTRFS info (device loop4): balance: start -f
[  354.506523][T15074] BTRFS info (device loop4): balance: ended with status: 0
[  354.539561][T11942] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  355.140391][  T124] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  355.287935][  T124] usb 6-1: Using ep0 maxpacket: 16
[  355.292062][  T124] usb 6-1: config 3 has an invalid interface number: 201 but max is 0
[  355.295747][  T124] usb 6-1: config 3 has no interface number 0
[  355.300264][  T124] usb 6-1: config 3 interface 201 has no altsetting 0
[  355.305484][  T124] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice=a4.e0
[  355.316288][  T124] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  355.319602][  T124] usb 6-1: Product: syz
[  355.320845][T15119] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3635'.
[  355.321228][  T124] usb 6-1: Manufacturer: syz
[  355.326117][  T124] usb 6-1: SerialNumber: syz
[  355.536618][  T124] option 6-1:3.201: GSM modem (1-port) converter detected
[  355.545984][  T124] usb 6-1: USB disconnect, device number 12
[  355.550605][  T124] option 6-1:3.201: device disconnected
[  356.647314][T12256] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  356.808529][T12256] usb 6-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  356.813260][T12256] usb 6-1: config 1 interface 0 has no altsetting 0
[  356.817648][T12256] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  356.821422][T12256] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  356.824491][T12256] usb 6-1: SerialNumber: syz
[  357.046198][T15148] loop5: detected capacity change from 0 to 1024
[  357.062924][T15148] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  357.264085][T12256] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71
[  357.323613][T12256] usb 6-1: USB disconnect, device number 13
[  357.881724][T12090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  357.922045][T15178] netlink: 'syz.2.3658': attribute type 4 has an invalid length.
[  357.927312][T15178] netlink: 'syz.2.3658': attribute type 4 has an invalid length.
[  357.960184][T15180] loop4: detected capacity change from 0 to 512
[  357.984702][T15183] openvswitch: netlink: IP tunnel dst address not specified
[  358.000563][T15180] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  358.015439][T15186] CIFS mount error: No usable UNC path provided in device string!
[  358.015439][T15186] 
[  358.029085][T15186] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  358.105789][T15192] loop4: detected capacity change from 0 to 512
[  358.161712][T15192] EXT4-fs (loop4): orphan cleanup on readonly fs
[  358.167704][T15192] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.3664: corrupted in-inode xattr: overlapping e_value 
[  358.177189][T15192] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3664: couldn't read orphan inode 15 (err -117)
[  358.194193][T15192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  358.234022][T11942] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.736157][T12256] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  358.898183][T12256] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  358.902079][T12256] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.908384][T12256] usb 6-1: config 0 descriptor??
[  359.322975][T12256] hackrf 6-1:0.0: Board ID: 00
[  359.325123][T12256] hackrf 6-1:0.0: Firmware version: 
[  359.335062][T12256] hackrf 6-1:0.0: Registered as swradio24
[  359.340166][T12256] videodev: could not get a free minor
[  359.342557][T12256] hackrf 6-1:0.0: Failed to register as video device (-23)
[  359.355167][T12256] hackrf 6-1:0.0: probe with driver hackrf failed with error -23
[  359.528631][ T5985] usb 6-1: USB disconnect, device number 14
[  361.371823][T15257] loop5: detected capacity change from 0 to 1024
[  361.389134][T15257] EXT4-fs: Ignoring removed orlov option
[  361.409191][T15257] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  361.421044][T15259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3691'.
[  361.437321][T15257] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  361.459996][   T33] audit: type=1800 audit(617.332:13449): pid=15257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3690" name="file1" dev="loop5" ino=15 res=0 errno=0
[  361.511001][T12090] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.074024][T15302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3710'.
[  362.383349][ T5938] Bluetooth: hci0: unexpected event for opcode 0x041b
[  362.825294][T15321] loop5: detected capacity change from 0 to 2048
[  362.869247][T15321] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  363.129685][T15323] netlink: 'syz.5.3719': attribute type 1 has an invalid length.
[  363.409172][T15331] netlink: 202368 bytes leftover after parsing attributes in process `syz.5.3722'.
[  363.791065][T15349] loop5: detected capacity change from 0 to 16
[  363.800797][T15349] erofs (device loop5): bogus i_mode (6) @ nid 36
[  364.043895][    C1] wlan0: beacon TX faster than countdown (channel/color switch) completion
[  364.184295][T15357] netlink: 'syz.5.3733': attribute type 1 has an invalid length.
[  364.355223][T15366] loop5: detected capacity change from 0 to 8
[  364.361877][T15366] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  364.759900][T15367] cramfs: Error -3 while decompressing!
[  364.762339][T15367] cramfs: ffffffff99bef628(26)->ffff88802c129000(4096)
[  364.765447][T15367] cramfs: Error -3 while decompressing!
[  364.767829][T15367] cramfs: ffffffff99bef642(26)->ffff88802c12a000(4096)
[  364.770795][T15367] cramfs: Error -3 while decompressing!
[  364.773155][T15367] cramfs: ffffffff99bef65c(16)->ffff88802c12b000(4096)
[  364.776114][T15367] cramfs: Error -3 while decompressing!
[  364.778456][T15367] cramfs: ffffffff99bef628(26)->ffff88802c129000(4096)
[  366.157799][T15418] syz.2.3759(15418): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  366.576378][T15424] loop5: detected capacity change from 0 to 40427
[  366.580715][T15424] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  366.583833][T15424] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  366.587939][T15424] F2FS-fs (loop5): invalid crc value
[  366.632173][T15424] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  366.638234][T15424] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  366.641273][T15424] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  366.952308][T15434] loop5: detected capacity change from 0 to 40427
[  367.010594][T15434] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  367.015705][T15434] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  367.281920][T15440] syz.5.3763: attempt to access beyond end of device
[  367.281920][T15440] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  367.740306][T12090] syz-executor: attempt to access beyond end of device
[  367.740306][T12090] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  367.747537][T12090] CPU: 1 UID: 0 PID: 12090 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  367.747548][T12090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  367.747553][T12090] Call Trace:
[  367.747556][T12090]  <TASK>
[  367.747559][T12090]  dump_stack_lvl+0x189/0x250
[  367.747573][T12090]  ? __pfx_dump_stack_lvl+0x10/0x10
[  367.747582][T12090]  ? __pfx_queue_work_on+0x10/0x10
[  367.747590][T12090]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  367.747599][T12090]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  367.747619][T12090]  f2fs_handle_critical_error+0x37c/0x540
[  367.747632][T12090]  f2fs_write_end_io+0x886/0xb60
[  367.747647][T12090]  __submit_merged_bio+0x27a/0x6a0
[  367.747660][T12090]  __submit_merged_write_cond+0x255/0x530
[  367.747672][T12090]  f2fs_write_data_pages+0x261d/0x3000
[  367.747697][T12090]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  367.747712][T12090]  ? arch_stack_walk+0xfc/0x150
[  367.747733][T12090]  ? __mod_zone_page_state+0xd7/0x140
[  367.747747][T12090]  ? folios_put_refs+0x560/0x640
[  367.747760][T12090]  ? __pfx_folios_put_refs+0x10/0x10
[  367.747766][T12090]  ? rcu_is_watching+0x15/0xb0
[  367.747778][T12090]  ? __lock_acquire+0xab9/0xd20
[  367.747795][T12090]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  367.747805][T12090]  do_writepages+0x32e/0x550
[  367.747818][T12090]  ? do_raw_spin_unlock+0x4d/0x240
[  367.747829][T12090]  filemap_fdatawrite+0x199/0x240
[  367.747838][T12090]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  367.747868][T12090]  ? do_raw_spin_unlock+0x4d/0x240
[  367.747878][T12090]  f2fs_sync_dirty_inodes+0x31f/0x830
[  367.747892][T12090]  f2fs_write_checkpoint+0x95a/0x1df0
[  367.747910][T12090]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  367.747938][T12090]  ? kill_f2fs_super+0x298/0x6c0
[  367.747947][T12090]  kill_f2fs_super+0x2c3/0x6c0
[  367.747957][T12090]  ? __pfx_kill_f2fs_super+0x10/0x10
[  367.747963][T12090]  ? radix_tree_delete_item+0x2b6/0x400
[  367.747975][T12090]  ? shrinker_free+0x2ce/0x3e0
[  367.747983][T12090]  deactivate_locked_super+0xbc/0x130
[  367.747993][T12090]  cleanup_mnt+0x425/0x4c0
[  367.748001][T12090]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.748012][T12090]  task_work_run+0x1d4/0x260
[  367.748023][T12090]  ? __pfx_task_work_run+0x10/0x10
[  367.748030][T12090]  ? __x64_sys_umount+0x122/0x160
[  367.748041][T12090]  ? exit_to_user_mode_loop+0x40/0x110
[  367.748052][T12090]  exit_to_user_mode_loop+0xec/0x110
[  367.748061][T12090]  do_syscall_64+0x2bd/0x3b0
[  367.748069][T12090]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.748077][T12090]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.748084][T12090]  ? exc_page_fault+0x9f/0xf0
[  367.748093][T12090]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.748099][T12090] RIP: 0033:0x7f1446b8ff17
[  367.748107][T12090] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  367.748112][T12090] RSP: 002b:00007ffe6a93ff68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  367.748121][T12090] RAX: 0000000000000000 RBX: 00007f1446c11c05 RCX: 00007f1446b8ff17
[  367.748125][T12090] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe6a940020
[  367.748129][T12090] RBP: 00007ffe6a940020 R08: 0000000000000000 R09: 0000000000000000
[  367.748133][T12090] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe6a9410b0
[  367.748137][T12090] R13: 00007f1446c11c05 R14: 0000000000059bb3 R15: 00007ffe6a9410f0
[  367.748150][T12090]  </TASK>
[  367.748153][T12090] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  368.178507][T15481] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (15)
[  369.487500][T15506] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  369.531907][T15508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3794'.
[  370.519903][T15525] loop5: detected capacity change from 0 to 32768
[  370.530543][T15525] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3802 (15525)
[  370.551649][T15525] BTRFS info (device loop5): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  370.558824][T15525] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  370.562396][T15525] BTRFS info (device loop5): using free-space-tree
[  370.802369][T12090] BTRFS info (device loop5): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  371.330930][T15569] loop4: detected capacity change from 0 to 256
[  371.337948][T15569] exfat: Deprecated parameter 'namecase'
[  371.344061][T15569] exfat: Deprecated parameter 'utf8'
[  371.365686][T15569] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  371.974386][T15593] loop4: detected capacity change from 0 to 1024
[  372.007426][T15593] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  372.138159][T15601] loop4: detected capacity change from 0 to 1764
[  372.216946][T15608] netlink: 'syz.2.3833': attribute type 1 has an invalid length.
[  372.349281][T15619] loop5: detected capacity change from 0 to 256
[  372.354179][T15619] exfat: Deprecated parameter 'utf8'
[  372.361522][T15619] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  372.629693][T15633] vivid-001: disconnect
[  372.640779][T15631] vivid-001: reconnect
[  373.534877][T15637] Process accounting resumed
[  373.676405][T15663] can0: slcan on ptm0.
[  373.744181][T15662] can0 (unregistered): slcan off ptm0.
[  373.956972][T15674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3861'.
[  374.161111][T15682] loop5: detected capacity change from 0 to 256
[  374.178844][T15682] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d)
[  374.198931][   T33] audit: type=1800 audit(886.069:13450): pid=15682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3865" name="file2" dev="loop5" ino=1048668 res=0 errno=0
[  374.320019][T15686] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3867'.
[  374.323804][T15686] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3867'.
[  374.327050][T15686] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3867'.
[  374.443606][T15689] netlink: 'syz.2.3868': attribute type 10 has an invalid length.
[  374.466487][T15689] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  375.808319][T15743] 9pnet: p9_errstr2errno: server reported unknown error @cF	S+
[  376.021662][T15751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3894'.
[  376.531367][T15760] loop4: detected capacity change from 0 to 2048
[  376.547318][T15760] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  378.327472][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  378.557068][T12098] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  378.577152][T15801] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.3915'.
[  378.756868][T12098] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  378.760719][T12098] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.763966][T12098] usb 6-1: Product: syz
[  378.765700][T12098] usb 6-1: Manufacturer: syz
[  378.767624][T12098] usb 6-1: SerialNumber: syz
[  378.773519][T12098] usb 6-1: config 0 descriptor??
[  378.782535][T12098] gspca_main: sunplus-2.14.0 probing 055f:c230
[  379.262016][T15799] Bluetooth: hci2: command tx timeout
[  379.867739][T12098] usb 6-1: USB disconnect, device number 15
[  380.583322][T15799] Bluetooth: hci0: command 0x0401 tx timeout
[  381.385812][T15847] loop5: detected capacity change from 0 to 164
[  381.399302][T15847] Unsupported NM flag settings (8)
[  381.679720][T15867] loop4: detected capacity change from 0 to 128
[  381.703351][T15867] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  381.709543][T15867] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  381.826964][T15869] fuse: root generation should be zero
[  382.283491][T15894] loop5: detected capacity change from 0 to 4096
[  382.295503][T15894] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  382.327906][T15894] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  382.332624][T15894] ntfs3(loop5): Failed to load $BadClus (-22).
[  382.807470][T15935] loop4: detected capacity change from 0 to 1024
[  383.186995][T15953] loop4: detected capacity change from 0 to 64
[  384.991488][T12098] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  385.169217][ T7160] bond0: (slave syz_tun): Releasing backup interface
[  385.171372][T12098] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  385.179521][T12098] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  385.186045][T12098] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  385.189210][T12098] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  385.192245][T12098] usb 6-1: SerialNumber: syz
[  385.296577][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  385.304243][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.406536][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  385.412403][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.434532][T12098] usb 6-1: 0:2 : does not exist
[  385.455620][T12098] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  385.478249][T12098] usb 6-1: USB disconnect, device number 16
[  385.501148][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  385.518476][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  385.523211][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.607405][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  385.613435][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.676044][T15799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  385.689544][T15799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  385.698399][T15799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  385.705360][T15799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  385.710317][T15799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  385.782248][   T12] bridge_slave_1: left allmulticast mode
[  385.785697][   T12] bridge_slave_1: left promiscuous mode
[  385.787627][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.792797][   T12] bridge_slave_0: left allmulticast mode
[  385.795586][   T12] bridge_slave_0: left promiscuous mode
[  385.797647][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.871605][   T12] bond1 (unregistering): (slave ip6erspan0): Releasing active interface
[  386.001895][   T12] erspan0 (unregistering): left promiscuous mode
[  386.025807][   T12] gretap0 (unregistering): left promiscuous mode
[  386.124292][   T12] team0: Port device geneve0 removed
[  386.303511][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  386.309509][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  386.315029][   T12] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  386.322930][   T12] bond0 (unregistering): Released all slaves
[  386.444820][   T12] bond1 (unregistering): Released all slaves
[  386.455604][T15986] wg1 speed is unknown, defaulting to 1000
[  386.461834][T15993] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  386.465241][T15993] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  386.484702][ T5985] wg1 speed is unknown, defaulting to 1000
[  386.487255][ T5985] syz0: Port: 1 Link DOWN
[  386.675587][T15986] chnl_net:caif_netlink_parms(): no params data found
[  386.729816][T15986] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.732684][T15986] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.735818][T15986] bridge_slave_0: entered allmulticast mode
[  386.738984][T15986] bridge_slave_0: entered promiscuous mode
[  386.749861][T15986] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.753563][T15986] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.756768][T15986] bridge_slave_1: entered allmulticast mode
[  386.760362][T15986] bridge_slave_1: entered promiscuous mode
[  386.789473][T15986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  386.795043][T15986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  386.814357][T15986] team0: Port device team_slave_0 added
[  386.817622][T15986] team0: Port device team_slave_1 added
[  386.836962][T15986] batman_adv: batadv0: Adding interface: batadv_slave_0
[  386.839985][T15986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  386.851604][T15986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  386.856123][T15986] batman_adv: batadv0: Adding interface: batadv_slave_1
[  386.856189][ T5985] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  386.858810][T15986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  386.858831][T15986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  386.913414][T15986] hsr_slave_0: entered promiscuous mode
[  386.918796][T15986] hsr_slave_1: entered promiscuous mode
[  386.922269][T15986] debugfs: 'hsr0' already exists in 'hsr'
[  386.924859][T15986] Cannot create hsr debugfs directory
[  387.046428][ T5985] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  387.061474][ T5985] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  387.069641][ T5985] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  387.073518][ T5985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  387.078816][ T5985] usb 6-1: SerialNumber: syz
[  387.139389][T15986] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  387.150864][T15986] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  387.157002][T15986] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  387.164938][T15986] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  387.223486][T15986] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.226669][T15986] bridge0: port 2(bridge_slave_1) entered forwarding state
[  387.230129][T15986] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.232516][T15986] bridge0: port 1(bridge_slave_0) entered forwarding state
[  387.313980][ T5985] usb 6-1: 0:2 : does not exist
[  387.350587][ T5985] usb 6-1: USB disconnect, device number 17
[  387.372936][T15986] 8021q: adding VLAN 0 to HW filter on device bond0
[  387.412836][ T5936] udevd[5936]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  387.432593][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.438153][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.452609][T15986] 8021q: adding VLAN 0 to HW filter on device team0
[  387.463866][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.466891][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  387.477026][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.480044][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  387.586851][T15986] 8021q: adding VLAN 0 to HW filter on device batadv0
[  387.746976][T15986] veth0_vlan: entered promiscuous mode
[  387.753416][T15986] veth1_vlan: entered promiscuous mode
[  387.773625][T15986] veth0_macvtap: entered promiscuous mode
[  387.778896][T15986] veth1_macvtap: entered promiscuous mode
[  387.791556][T15986] batman_adv: batadv0: Interface activated: batadv_slave_0
[  387.802332][T15986] batman_adv: batadv0: Interface activated: batadv_slave_1
[  387.822034][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  387.827167][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  387.832851][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  387.837439][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  387.900133][T15799] Bluetooth: hci1: command tx timeout
[  387.932366][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.936454][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.977116][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.980502][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  388.010851][T16059] loop5: detected capacity change from 0 to 8
[  388.014179][T16059] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  389.144086][   T12] hsr_slave_0: left promiscuous mode
[  389.146940][   T12] hsr_slave_1: left promiscuous mode
[  389.153043][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  389.156727][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  389.159844][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  389.174859][   T12] veth1_macvtap: left promiscuous mode
[  389.177221][   T12] veth0_macvtap: left promiscuous mode
[  389.179633][   T12] veth1_vlan: left promiscuous mode
[  389.182937][   T12] veth0_vlan: left promiscuous mode
[  389.353624][    T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  389.526184][    T9] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  389.530662][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.555228][    T9] usb 6-1: config 0 descriptor??
[  389.567835][    T9] cp210x 6-1:0.0: cp210x converter detected
[  389.579802][   T12] team0 (unregistering): Port device vlan0 removed
[  389.829132][   T12] team0 (unregistering): Port device team_slave_1 removed
[  389.864247][   T12] team0 (unregistering): Port device team_slave_0 removed
[  390.133281][T15799] Bluetooth: hci1: command tx timeout
[  390.228714][    T9] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71
[  390.232505][    T9] cp210x 6-1:0.0: GPIO initialisation failed: -71
[  390.244529][    T9] usb 6-1: cp210x converter now attached to ttyUSB0
[  390.255903][    T9] usb 6-1: USB disconnect, device number 18
[  390.270258][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  390.280762][    T9] cp210x 6-1:0.0: device disconnected
[  390.508578][T16113] loop6: detected capacity change from 0 to 32768
[  390.572142][   T12] IPVS: stop unused estimator thread 0...
[  390.587084][   T12] ------------[ cut here ]------------
[  390.589634][   T12] WARNING: CPU: 0 PID: 12 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[  390.593923][   T12] Modules linked in:
[  390.595984][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  390.601862][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  390.605792][   T12] Workqueue: netns cleanup_net
[  390.607620][   T12] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  390.609590][   T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 f8 30 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b6 f1 e1 f7 e8 91 c7 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 83 c7 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  390.616802][   T12] RSP: 0018:ffffc900000f7898 EFLAGS: 00010293
[  390.619136][   T12] RAX: ffffffff8a21e3ff RBX: ffff8880231bc880 RCX: ffff88801c2dd640
[  390.622195][   T12] RDX: 0000000000000000 RSI: ffffffff8dba6026 RDI: ffff88801c2dd640
[  390.625162][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  390.627852][   T12] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffffffff8f630aa0
[  390.631405][   T12] R13: 1ffff9200001ef40 R14: ffff8880231bdd00 R15: dffffc0000000000
[  390.634853][   T12] FS:  0000000000000000(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  390.638931][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  390.641841][   T12] CR2: 00007fcc78e553b0 CR3: 000000010f524000 CR4: 00000000000006f0
[  390.645339][   T12] Call Trace:
[  390.647001][   T12]  <TASK>
[  390.648307][   T12]  xfrm_net_exit+0x2d/0x70
[  390.650221][   T12]  ops_undo_list+0x49a/0x990
[  390.652290][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  390.654549][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  390.656975][   T12]  cleanup_net+0x4c5/0x800
[  390.658953][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  390.661064][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  390.663581][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  390.665964][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  390.667962][   T12]  process_scheduled_works+0xae1/0x17b0
[  390.669806][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  390.671825][   T12]  worker_thread+0x8a0/0xda0
[  390.673359][   T12]  kthread+0x711/0x8a0
[  390.674751][   T12]  ? __pfx_worker_thread+0x10/0x10
[  390.676534][   T12]  ? __pfx_kthread+0x10/0x10
[  390.678303][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  390.680048][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  390.681782][   T12]  ? __pfx_kthread+0x10/0x10
[  390.683349][   T12]  ret_from_fork+0x3fc/0x770
[  390.684883][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  390.686619][   T12]  ? __switch_to_asm+0x39/0x70
[  390.688330][   T12]  ? __switch_to_asm+0x33/0x70
[  390.690052][   T12]  ? __pfx_kthread+0x10/0x10
[  390.691678][   T12]  ret_from_fork_asm+0x1a/0x30
[  390.693220][   T12]  </TASK>
[  390.694261][   T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  390.696705][   T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  390.701972][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  390.705320][   T12] Workqueue: netns cleanup_net
[  390.706956][   T12] Call Trace:
[  390.708158][   T12]  <TASK>
[  390.709173][   T12]  dump_stack_lvl+0x99/0x250
[  390.710751][   T12]  ? __asan_memcpy+0x40/0x70
[  390.712345][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  390.714133][   T12]  ? __pfx__printk+0x10/0x10
[  390.715739][   T12]  vpanic+0x281/0x750
[  390.717165][   T12]  ? __pfx__printk+0x10/0x10
[  390.718792][   T12]  ? __pfx_vpanic+0x10/0x10
[  390.720345][   T12]  ? is_bpf_text_address+0x292/0x2b0
[  390.722324][   T12]  panic+0xb9/0xc0
[  390.723681][   T12]  ? __pfx_panic+0x10/0x10
[  390.725250][   T12]  __warn+0x31b/0x4b0
[  390.726859][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  390.728787][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  390.730493][   T12]  report_bug+0x2be/0x4f0
[  390.731935][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  390.733607][   T12]  ? xfrm_state_fini+0x270/0x2f0
[  390.735295][   T12]  ? xfrm_state_fini+0x272/0x2f0
[  390.736918][   T12]  handle_bug+0x84/0x160
[  390.738316][   T12]  exc_invalid_op+0x1a/0x50
[  390.739833][   T12]  asm_exc_invalid_op+0x1a/0x20
[  390.741963][   T12] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  390.744443][   T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 f8 30 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b6 f1 e1 f7 e8 91 c7 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 83 c7 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  390.751241][   T12] RSP: 0018:ffffc900000f7898 EFLAGS: 00010293
[  390.753483][   T12] RAX: ffffffff8a21e3ff RBX: ffff8880231bc880 RCX: ffff88801c2dd640
[  390.756137][   T12] RDX: 0000000000000000 RSI: ffffffff8dba6026 RDI: ffff88801c2dd640
[  390.759421][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6
[  390.762661][   T12] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: ffffffff8f630aa0
[  390.765824][   T12] R13: 1ffff9200001ef40 R14: ffff8880231bdd00 R15: dffffc0000000000
[  390.769142][   T12]  ? xfrm_state_fini+0x26f/0x2f0
[  390.771243][   T12]  ? xfrm_state_fini+0x26f/0x2f0
[  390.773341][   T12]  xfrm_net_exit+0x2d/0x70
[  390.775216][   T12]  ops_undo_list+0x49a/0x990
[  390.776996][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  390.778951][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  390.781179][   T12]  cleanup_net+0x4c5/0x800
[  390.783199][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  390.785449][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  390.787745][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  390.790287][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  390.792744][   T12]  process_scheduled_works+0xae1/0x17b0
[  390.795154][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  390.797719][   T12]  worker_thread+0x8a0/0xda0
[  390.799726][   T12]  kthread+0x711/0x8a0
[  390.801503][   T12]  ? __pfx_worker_thread+0x10/0x10
[  390.803773][   T12]  ? __pfx_kthread+0x10/0x10
[  390.805819][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  390.808124][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  390.810404][   T12]  ? __pfx_kthread+0x10/0x10
[  390.812477][   T12]  ret_from_fork+0x3fc/0x770
[  390.814551][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  390.816809][   T12]  ? __switch_to_asm+0x39/0x70
[  390.818923][   T12]  ? __switch_to_asm+0x33/0x70
[  390.821012][   T12]  ? __pfx_kthread+0x10/0x10
[  390.823011][   T12]  ret_from_fork_asm+0x1a/0x30
[  390.825179][   T12]  </TASK>
[  390.827371][   T12] Kernel Offset: disabled
[  390.829268][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:32:48  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f7030
R8 =ffff888021648237 R9 =1ffff110042c9046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98d1 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fcc78e553b0 CR3=000000010f524000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000000 000000000000302e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffffff ffffffffffff0000 XMM09=0000000000000021 000000000000302e
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b44d4b RBX=1ffff11009608341 RCX=ffff88810c625640 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000370f700 RSP=ffffc9000370f580
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44d33 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055852e81fa18 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f XMM01=0000000000000000 0000000000000000
XMM02=ffffffffffffffff ffffffffffffff00 XMM03=00000000000000ff 000000000000ff00
XMM04=0000000000ff0000 0000ff0000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
