last executing test programs:

1m54.759645813s ago: executing program 1 (id=452):
r0 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)=""/232, 0xe8}], 0x1, &(0x7f0000000080)=""/19, 0x13}, 0x40012022)

1m54.694378752s ago: executing program 1 (id=455):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000000240)=ANY=[@ANYBLOB="18000000100a01"], 0x18}, 0x1, 0x0, 0x0, 0x20000880}, 0x0)

1m54.566950144s ago: executing program 1 (id=456):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x9}, @local=@item_012={0x2, 0x2, 0x4, "c1a1"}, @main=@item_4={0x3, 0x0, 0x9, "5aa8257f"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0xb, "af45cee1"}]}}, 0x0}, 0x0)
r2 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m52.531993041s ago: executing program 1 (id=475):
request_key(0x0, 0x0, &(0x7f0000000440)='y\xa9rust\xe3c*s\xb8de\x00\x00\xda_^\xb6\xd19\x1d\f\xee\xe5]\x7f_\xf6\xd3\xe5\xc1\xbd\x01\x02\xb5W1\x19\fU\xfb@Rb^\x93\x84\x8e\n\xd8#\xe0r\xf9\xb0\xc2\x8b8\xecN\xeb\xee\xe2K\xda\xc9\"\xaa\x10\xc8\x16_\xe2&1\x80\x95\x01|\x90cC\xd5A\xc5\xe3S&\x92^\xa7\xd3\x96\x9c\x10f\xe8\xdaZ!\xa5\xd2\xcc\x9a\xa2\xfd\xa3\xd9\xc7\xc0\xc3.\xc9\xc04a\bmD', 0xfffffffffffffffa)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, r0)
socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000092000/0x400000)=nil, 0x400000, 0x9)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x28000)

1m51.218578797s ago: executing program 1 (id=482):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8000, 0x2)

1m51.155784963s ago: executing program 1 (id=484):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x2}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000200), &(0x7f0000000300)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)

1m34.842053536s ago: executing program 32 (id=484):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x2}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000200), &(0x7f0000000300)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)

7.808759919s ago: executing program 0 (id=1661):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000380)=ANY=[], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x1}, 0x8)

7.743524069s ago: executing program 0 (id=1663):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x2204080, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f646f74732c73686f77657865632c6e6f646f74732c6e66733d6e6f7374616c655f726f2c0030a66d3a1127e03fc4ec7721f7c77d616ce2d9a9b0ef6cf77d486df06aac6920f6f13474bc77836cb851c86e0cc5dc8611db21e0dafe4caa2c5b34"], 0x1, 0x28d, &(0x7f0000000640)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00r'], 0x92280)

7.69041889s ago: executing program 0 (id=1665):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090)

7.627240197s ago: executing program 0 (id=1667):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0), 0x1, 0x553, &(0x7f0000000800)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)

7.403022128s ago: executing program 0 (id=1669):
r0 = creat(&(0x7f0000000580)='./file1\x00', 0x0)
accept4$alg(r0, 0x0, 0x0, 0x80800)

6.984548911s ago: executing program 0 (id=1673):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtaction={0x74, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x1, 0xac, 0x5}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x486}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x9a8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

6.842813681s ago: executing program 33 (id=1673):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newtaction={0x74, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x1, 0xac, 0x5}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x486}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x9a8}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

2.292593671s ago: executing program 4 (id=1674):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000001d711867000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.153206641s ago: executing program 4 (id=1703):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010000104fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b0001006272696467650000280002800c00230007000040000000000600060037070000080005000000000005002a"], 0x58}}, 0x0)

2.043566808s ago: executing program 4 (id=1706):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001dc00)=""/102392, 0x18ff8)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003)
r2 = dup2(r1, r1)
read$FUSE(r2, &(0x7f0000002080)={0x2020}, 0x203a)
syz_usb_connect(0x1, 0x2d, 0x0, 0x0)

1.597380923s ago: executing program 2 (id=1710):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x67, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0xffff, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1000}}}}}}, 0x0)

1.487573211s ago: executing program 3 (id=1711):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00')
setresuid(0xee00, 0xee01, 0x0)
fchown(r0, 0x0, 0x0)

1.487000196s ago: executing program 2 (id=1712):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1.35119567s ago: executing program 2 (id=1713):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003680), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000036c0)={0x20, r1, 0x101, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048010}, 0x800)

1.350708872s ago: executing program 3 (id=1714):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, 0x0)

1.350228754s ago: executing program 2 (id=1715):
syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f00000040c0)=""/4096, 0x6c, 0x1000, 0x0, 0x991b}, 0x28)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c)
shutdown(r3, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e21, @local}, {0x2, 0x4e21, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='batadv_slave_0\x00', 0x30000000000, 0x3, 0x8})
recvmmsg(r3, &(0x7f0000000840), 0x0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r5 = socket$caif_stream(0x25, 0x1, 0x5)
fcntl$setownex(r5, 0xf, &(0x7f0000000180))
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="01002cbd7000ffdbdf25010000000800010000000000080002000200000008"], 0x3c}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000)
close_range(r0, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x5, 0x0)

1.149072303s ago: executing program 3 (id=1716):
syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x2008803, &(0x7f0000000080), 0x1, 0x648, &(0x7f0000000100)="$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")
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @rand_addr=' \x01\x00', {[@dstopts={0x84}]}}}}}, 0x0)

879.603627ms ago: executing program 3 (id=1717):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c000000100003052cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0503020000000000240012800b0001006d616373656300001400028005000b00010000000500090001"], 0x4c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)

750.732254ms ago: executing program 3 (id=1718):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x14, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4400}, 0x24008050)

488.605177ms ago: executing program 3 (id=1719):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x2800000, &(0x7f0000000000)=ANY=[], 0xfd, 0x5a7a, &(0x7f0000006680)="$eJzs3WuQXNV9IPBzu3s0Lz1GAgcZzGiQ0Ybg2BrxKj9SsZJN7BQQSi5SDmJlw4BGRLYkVHoEECSILHhRAS6cIpXg5ANxYXYxiosq2BiFMuGxEmtjq9h4qS1MrZ3F/uAtwqIKoKVcXs/W9NzT032779yenh4hid+vYG7fM6f/99xzT9++/9NX0wEAAID3hEN37Dx62em/+90/G3/71t/7h623hcFytbwvVhhKlze+Wy3kWOqtLK8us+PiV2/+xk9Hrv3t7zw68PV3Dm48a9MPf+eUa5/8wsUH7v/rZ95a9PgvXy2KG8fTudPryetJCH3fPvIXXzr4wmmTZcniyZ+lvSEsTZY9szQJ4fb6EKM/DyFsTFeWZ+I/9vb5myaXt93V21C+JFPPeH9vmzzOSQhhz9EbPhR+9Fvrb//+im/+Xc/+1/ZOV0n66sZTCIuvrn9+TwihP/1/UhxtcTwm6XJdCGGg7nkfLWjXB9to96TVmfK4fka6XJAuBwvixd+vzKyXMvWy61FPZjlQsL25ymtHp/WKLMysJ12KG+W1M5YvTZffSpfnzjJ+Od2HchJKSajUmr8lmR4joe64JSGpHsu+2nqpdmxDuv+Z9SSzXsqsl3sy+1XdbjrQyknSWB7rZcrj6biSlp9Vf65u4fK6x/X13h/L0hfqO9k6maCDTQ9q+1UV23VkhrYcC6W6c1Cr8tqBTw/GYFo2mCxres5EC/F3B9ffvaq84dlDQzntSB5N0vhJR/H3fG/pws8/sm939n29Fv/qUhq/1FH8H19y+I0r933tq7nx743xyx3FP++pgdcvee6Olbn9cyT2T6Wj+GOvPn/PilOv2Z/b/gdi/L6O4q89cLh30dGnns5t/2jsn/6O4r/yiU/95OGXnngtN36I8Qc6ir/hwPYv9w4fPSc3/tOxfwY7Gz9v7r/o5eHhn43kxX8xxl/UUfyH9vZ+/MEld12ce3zXxf4Z6ij+pWc/efvCo0+cmXfuTB7o1jsnwHvTKek11p3peqd55lzV5Qt/NVKZuuZbmP6/qJsbylx8ZvMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiG933ov376f3126PVKut6bPnilNLWM5QtCSPpDCDt3je3YtXnbdSNfuH73jm1jW0bGdo2Mb9u146aRC359ZMf49i1jN03+dvTD5089b1lIppbJmU3b7p2YmCgNNZbF7f3bs/f/aNVH//e/hDD6vh8MV3Lbv/r+rQ+e2uJnRrJ24pNbd1/2gwv/Nt2vobRdQy3aNTExMRFy2vV/rvjFg39+5KfnhDD6KzO16/lXfvMfGxpULZiOkyr1hqkG9SYDLdtRa3XanthflU2bt4yPzty/k88v5+zHv7v5tZ9vuvErv5jq377c/Wizf/vXTmwp/eX6S//fX94yVVDUrnfruE/2dzkn5mS74l7E9sX+60v7e3G6X4tz9quSs193fP/pl759+r639obRypsrmo910X71pAOgJ3l/W9uNWxhIljaU96X14xGPz1u9a+v21Ttv2vPhzVvHrhu/bnzbx9ZcsOai0QsvunB1dc9Xd3n/4/b/TZv7f2zG05I/3vut+LO98dTYrgWz7o/JdhX3R32L8l5/A5d/6b6P3f/cZVMFReeVWLt2PkmXA5PHeU2oG2/NfdVqv4qOTwhhpFU/vPHWxeG0/7H59qLzUP2Rqf+ZkaydeGHlv/7tR/9m+W9MFRyT83x9gzo8z9daPd2ean/1pcdj4jjt3970bNqbDLZs15oXnuu5+9C//EmtfQsWhBvHdu3asWbq58K0pQuTM1q2K1sa92tF9Wc5pN0SasO0xXid1BOm2pc9f8bq2V4dTH83mCxruV9Z8XcH19+9qrzh2UN5PZ08OrXF/rBoapl8IKfmlswTy7UGt9r+8fr6Kxofw5/+m8c/+/jfX9A0Ps6b+lm0X0nOfn3zpYfu+/pX/sPfd2+/Pv2bh4f+9X/+0aqpgmNwXglzOq+UpxpSa3XanqT+vHJeCEWvvxWh9X7kvv5Krfen6PWX3c50/dbxRjLrg6Hc0ev1vKcGXr/kuTtW5r5ej8z0eq3f2VsanlcueL0eL+9L2ddXUmlsx/y9vhoGSrJ24jt3nrL3mVvXnT5VUPR+Wavdalyf30b+kbNf/3jly8PXj/z7/96988Y3fv2xq344tvZPpwo6P+6xLd057n1p//bl9G+t1THvrO/fj1x7/ZaNU+VF/fzuXf+my4L8J55Kdt6054tjW7aM79jZ3n61+34at5Pt5U7fT+PZbVnBfpWa9mv+HrTTX+2+3mL7N3bcX42vt8GQdPS+sOd7Sxd+/pF9u4eanpVu6OpSGr/UUfwfX3L4jSv3fe2rufHvjfErHcUfe/X5e1aces3+3PgPJGn8vuL4i0NT/LUHDvcuOvrU07nxR2P7+ztq/yuf+NRPHn7piddy44cYf7Cz/n9z/0UvDw//LDf+i0m6nclrpBAee/v8TVPrSehJX2+xHT0N7QrZ9SSzXsqsl+vXS3EWId1AOUkay2O9tPysura08oc55fEqrG/51PKduB6yD2YuP96U6s79rcqLrlMBAE528fP/eA0aP/8fTy+U8mcaYNpc87DlOXFjHjY9n9P4GevyNH58fpwHHP5IGJ1c3jYydaE/288R4ushO88Zt3POBxtjtJyfOFC/ker2m+Y5i+bfV2bWY7um5ssrdXloqjmvqYQ25t+btzPz/Htm94s/zxq5s6lZI3XzVtnj15POmLW63yHT3spkhLzxkZ0Xi/dzDC8O66rba3N8ZO+jicchex9N3M7pmRNnp/fR5I2PoeZ+aGhXHB+x3gzjo9rk4s8jm49fmKF/p49f62jZ4zeL4903WX++P5/twrxhy1PasZs3nN/Pw46LeckW8Y/xvOTCpvjpC+x4nzeM5bGfKm3OJ342p7xb84nxdBHbdWSGthwL5hOBk1XM/+N7xGT+P3kB/n8z9YrylOxVY4yXe59Qzk3YRXlH8316Ax29j284sP3LvcNHz8m9znm63fv0tjesDRTc91PUj6sy64X9mDNBU5TvZbdT1O/Z+zIGw6KO+v2hvfd//MEld12c2+/rpt5Ii/v9voa1RQX9fgLkC63jyxdOpnyhOX6X7mMomj/Lz0fKtXbMSz6S3vg0X/nIH+SUzzYfGWh6UNuvquM3H5l+I23IR3qObbsAgBNHzP9rn5+l+f8/xwuL9DqiKG89N7Me4+XmrTnXJ3l56++nyxsz9QfTf1Ex2+vmS89+8vaFR584MzdveaDdPPQ/NawNFeahc8ubc/OIdd25Xzw3j6jlWXPLE3PbX8sT55an53xMW5enzy2Pzu2fWh7dOA9w3+HpTGOm+HEeIDd+bR6gi3nuL6crHbs8t2C+LrOxuNrufN2xzqMnS3oWN+5nY1480J08Ov3ns/OVR1+eUz7bPHqw6UFtv6qO3zy6sVweDQCcrGL+Hy/jqvl/bwjPxQr98cHcPmfPzQu6dN2e/XsgtfgvzkteOR2/S5//Fud98523zndeP9/zEif657/zPS80VP0DnvM1T/au3e86L3nxP9cetZ0XpxuVFwMAcDyL+X9M8+Pn/89l6s01P2nK33qmLiGn85MTLz+vr3cC5+dXhGOVn/eeyPn5iT7/Nb/3yZxc+f+0Dj8Xf2fiJM7/q22W/wMAnJBi/h//2WP8+3//JV3P/t36NvP0B7K38/oc3efoQZ7eRp7e5Xm2GL/+PoATeB6gPPd5gP5jfn98/3T9k2keoKonmAwAADgB9FQzpeZ/Z/+5dJn9d/Z5/y7/ypz67aqkl8fX7NoxPn7V7u0bx3aNX7Xt+o3jO6+6YcfmXbvGa9fOc8sbc/OWNG/sCZW0P1rXy+ZtS9K/h7Ak5+8hZOvHsGdUHzT/PYTsZvsL/o7A9PFrr715x680Q/1W4yPveOfF/8Oc+lHt+F/7R+ddtWnnVZu3bd61eWzL5j3jjfWGqv+Suv3vzYyfU87q+1IzP5qUZv/9nfHwzK0dpaZ29KT9kff97EmmHUvTlizN+/6DnHZ/97/9+R+fPfGLh0MYfV/5A3Pqv2TtxH++Yvz3dx36wfbJ9pdmbH+tZtquou8rzdaP+1PZcv3OXR/adP3ubdlvlOxMnM8o1dbn6b6G9OVfbnN+YkNO+Wz//X656cHxqe35CQAAGsTP/+P1bPz88CvpBVQsL8zTt03Vm+vnx7l5+mh7eXr2e8mK8vRs/bi/7ebpfXPM07PbL8rTW9Vvlafn5d158f8gp/5stT9OOrjPo5L2wyP7dueOk6vbGyfZ7zMoGifZ+rMdJ8kcx0l2+0XjpFX9VuMk77jnxf9MTv08ReOhUhsPc7svJ3c83NveePi1zHrReMjWn+14KM1xPGS3XzQeWtVvNR7yjm9z/MYJgu7M/04OjOq4GL/qhut3fLGu3nx//0VoviWjnfYtmH7u/H7/R6fa79/5ve9r7u0PYW21JK/98fOBBbNqf7v3lc29/UX9P4v7yhaHpvvKctv/4txmwtpv/6zuS7wt/q7d73fJyKve/PxjNV+bDrui+8+K5nHX55TPdh53QdOD45N5XHj3xPw/Xs3F/P+udNntj4FO/O9J6+D++3gO9j1m+f3f5nXMe+79PPuRu/dzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJNCb2V5dXnojp1HLzv9d7/7Z+Nv3/p7/7D1tl+9+Rs/Hbn2t7/z6MDX3zm48axNP/ydU6598gsXH7j/r595a9Hjv3y1MPBQ9Wfl3HS1L4Tk9SSEvm8f+YsvHXzhtMmyJIRQTob2hrA0WfbM0iQTYfTnIYSNtXY2/vKxt8/fNLm87a7ehvIlmSDZ/QqD5die+naGcGPhHnEC6kvH2Z6jN3wo/Oi31t/+/RXf/Lue/a/tna6S9NWNpxAWX13//J4QQn/6/6Q42pbHJ6fLdSGEgbrnfbSgXR9ss/2rc9bPSJcL0uVgQZz4+5WZ9VKmXnY96sks6/a1v2DTHclrR6f1iizMrGdPRnOV185YvjRdfitdnjvL+OX4fxJKSajUmr8lmR4joe64JSGpHsu+2nqpdmxDuv+Z9SSzXsqsl3sy+1XdbjrQyknSWB7rZcrj6biSlp9Vf65u4fKc8veny770hfpOXA/ZB1MGmx7U9qsqtuvIDG1J/cfWxZXiZ7ahVHcOalVeO/DpwRhMywaTZU3PmWgh/u7g+rtXlTc8e2gopx3Jo0kaP+ko/p7vLV34+Uf27V6eF//qUhq/1FH8H19y+I0r933tq7nx743xyx3FP++pgdcvee6Olbn9cyT2T6Wj+GOvPn/PilOv2Z/b/gdi/L6O4q89cLh30dGnns5t/2jsn/6O4r/yiU/95OGXnngtN36I8Qc6ir/hwPYv9w4fPSc3/tOxfwY7Gz9v7r/o5eHhn43kxX8xxl/UUfyH9t7/8QeX3HVx7vFdF/tnqKP4l5795O0Ljz5xZt65M3mgW++cAO9Np6TXWHem653mmXNVly/81Uhl6ppvYfr/om5uKGNyO4vnMT4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACenf7rlgs9d8cnPrK8kISQ5dSZaiL8rL1i7dqSD7Y69+vw9K069Zn992fIO4gAAAADFYh5eqpX0heXhhqQ/nNGyfpwjOCOuJY3l2TmEGCc7R9BpnFKLOKUO4pS71J5Kl+L0dCnOgi7F6e1SnL6COH2hvTj9M8SpTI6ANtszMGN72o8z2KU4C7sUZ1EmRKdxFnepPUu6FGdoxjjtj8OlXYqzrEtxTulSnFO7FOd9XYrzK12Kc1qX4mTnlGc7DhelNU/Pi1N9UC6MU0nKtV+0mk8/Ld3OmXPczmDBdhYVvR+3uZ3+NrfzwczzSrPcTl+b27lgjttJ2tzOr81xO6WC7cRxe2O2fXE7ca3N8X9Tl+Ls6VKcm7sU55YuxfmTLsX50y7FuTU0XpzONg5Au2L+P53vDYXeym+EgfSMk50FiPnuiurP5ve7vBNSjPeBTPmConjZRD0Tb8Vs25edQMjEW5kp72mIV6nlIzPE66uPtyrzy5n29xNrW7etPt65mfLeGeI17AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAP/dMsFn7vik59ZH5Iw+V9LEy3E35UXrF070sF2D66/e1V5w7OH6st6Kx0EAgAAAArFPLynVtIXeitrQm+yoKFeXzoP0Jeul4emlsOLw7rJZTJSqq4PJEtnfF4lfd7qXVu3r955054Pb946dt34dePbPrbmgjUXjV540YWrN23eMj469TOE3oJ4IYTq9MPOm/Z8cWzLlvEdO6cKs+1fnj5vebqepM8b/kgYnVzelrZ/WcH2Sk3bm78HxUcPAAAAAAAAAAAAAAAAAAAAAAD+P7v2GyJpXQcA/PvMzM6Mq5cb/hsP7xzOU6ys9FpDS9wHggT/HC5CzFqbHHmStHqH3onZpAepKUWgHBwXvujCJE1645+UyD8cGGYJ7XWESvmiXhRahoovQpnY3Xnm38442yS35/X5vJjnme/v+/t9f7+H4+D7zAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABxa8/XJ2drU9Mx4EpEMyGn0kY3li2laHaHuV57c/oPS+nfO7IyVCiMsBAAAAAyV9eFjrUg5SoV85OPkxW8bomMg2n0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw/2e+Pjlbm5qeOTqJSAbkNPrIxvLFNK2OUPfVtx7+7Evr1/+tM1YZYR0AAABguKwPz7Ui5ajEaTGWnLzQ+bei2buBtT3zl/LasnXWrTCv993BoLzTVph3xgrzPjYkb3PzenMAAADAh1/W/xdakYkoFdYs64ez/n9YX5/lndqTl29eq51J76u4kiQAAABgBbL+v9SKVKJUqLT69ZX2+xvaocWfzrP5w363z+af3pOXzR/2e/5lzavf6QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgw2O+Pjlbm5qeyScRyYCcRh/ZWL6YptUR6m56avwfl+y/Y0NnrFQYYSEAAABgqKwPb7fe5SgVxmMsjl7s+9dfdN+jX3r08cmIWGrzi8W4ecuOHTdsWviMTVneOS/sH/v+c69/e1neOUufq3ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgAzNfn5ytTU3PHJVEJANyGn1kY/limlZHqPvK57/4lwcPPvFaZ6wywjoAAADAcFkf3u79y1GJYhTjxMVvnb3+glzP/EHvDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAjx43fvOUbW+bmtt7gZnVuGvmIw2Ab/+NN9s/pcNnPh/+mvNrbWN3/lwAAgA/eqZFE47900uWrvWsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBwMF+fnK1NTc+Uk4hkQE4jU2oHsrF8MU2rI9RNn3yxtOadp57pjFVGWAcAAAAYLuvD271/OSoxFmNxwuK3fu8EGgv9/8Qh3CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwWJmvT87WpqZn1iQRyYCcRh/ZWL6YptUR6j6wa+/n7j/2exd3xkqFERYCAAAAhsr68GIrUo5S4eNRilOa3+e6JyT55rX/e4H2vO1d08ZXPK/eNS//fvOSQkRr3l09Jys0T7M0r5ytN7F0bdWrtuflmvOqHfMq0Spfbc1bfFi7u6qtGXK+5U8eAAAADp2s/y+1IhNRKpQ6+v+fNq9HNa+D+tzcod04AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDYma9PztampmeSJCIZkNPoIxvLF9O0OkLdW3770WO++rO7d3bGKiOsAwAAAAyX9eHt3r8clVgXH4l1i31/THTnZ3n/rL17/73/+uuZEWefeGB9oXfZH2U3v37lwqd7PyJy3dm5iGOb9ZIB9X7z+3tv2th498GIs0/In7KsXrx/ve4l08Zjta2X7XjuwPYhDwcAAACOEFn/P9aKTESpcP3A/j/rvIf0/y2LDfixN+36xfHNz2ZH3jMjN9GslxtQ7wsbH/7z6ef9/fWF/n95vU+27j6997r7j+8quBTpkaSNqet2bj5w7r5cduql+vme+tlz+fK3Xvv3NTff8+5S/XKUm/G1PVtZqrb8s6d8pI253J6ZS9/bU++uXxhw/jt+98zBX629++2F+m+dOt6qf0b0q7908sLA+nFU2hi/4s7d5+/dv7m7fkRU+9V/4+2L46Q/Xnt77/nH42DXwp1PvvOz9wGkjRc2vLnvvPsqF3TXT3rqZ8//5wcf2P2Te777eFY/+1uRM0+LFdbP9dR//q7jdj172+Vru+vnBpz/6StfWr+t+p0/9J7/6q5VCwN3sfz8D531yFUvb0lv7R0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4sszXJ2drU9MzuSQiGZDT6CMbyxfTtDpC3VcvefGNK+/+8Q87Y5UR1gEAAACGy/rwdu9fjkoUoxjji33/Y7Wtl+147sD2mFgaTZrXwty2G3d84pptO6+/epV2DgAAAKzUq5cki/1/oRWZiFJhY4w1+/+p63ZuPnDuvlzW/+cWrklEXHPt3Nazo5X3/F3H7Xr2tsvXtt4TRCz+WUB5Ie8z7byLLnxx4s0/ff30vnmb2nkvbHhz33n3VS7I8qIz75xovZ946KxHrnp5S3pra3+deZ/62ra55uuJbN3xK+7cff7e/Ztz2XuM5nW8uW6WN5fbM3Ppe3vquYkoLYznm3nl5rkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOXm65OztanpmchHJANyGp2agWwsX0zT6gh1L934y9uPeeeJdZ2xUmGEhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+wAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhf36CY2j7OMA/jy7yZtNNmmT9gWjYppWRamHFgURvaioSCtS8FQpUm3tQRQEEaUeTKUVS1W8CFYvRVRQoxQq2FgsrZKK/4oXDyooVA9CKQY0S/Ggks0zm81kpxs3KiifDyxPnmdmvvObmWefzQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL9KT9dwvT2x56Ha7Rfc/MkT904/fut7D+y67LE3fhjdduPHB/tePTu5ffWOr29aue3IfRsm9r90/JeBd3471Tb40dlmbepWQohnYgiV96eef3Ly0/NmxmIIoRwHx0IYiiuOD8VcwvpfQwjbG3XO33ho+qodM+2ufT3zxpfnQvLXFarlrJ5Zg/Pr5b+lkubZztojV4Rvb9i8+/NVb7/VPX56bG6XOLNPOc2nEJZtbT6+O4TQmz4zstk2nB2c2k0hhL6m465pU9fFi6x/XQi1XL/uwtT+L7XVNjnZ9jW5fim3X76f6c61fW3Ot1RFdbTdr7ez8/Xn+vnFaKkada5rPT6U2ndTu/ZP5pezTwylGLoa5d8f5+ZIaHpuMcT6s6w0+qXGsw3p+nP9mOuXcv1yd+666udNE60c4/zxbL/ceLYcd6Xx1c1rdQt3FIyfn9pK+qKezfoh/8es6oI/GtdVl9U1dY5a/gmlpjWo1XjjwaeHUU1j1bhiwTG/t5Btm9z89KXlLR+cGCyoIx6MKT92lL/zs6H+u97c+/BwUf7WUsovdZT/3caTP9259+UXC/Ofy/LLHeVfebTvzMYP96wpvD9TcyvIYvJj6mfb7j710TOr/n/PeKtnXc88kN3/Skf1Xz9xsmegdvRYYf3rs/vT21H+N9fd8v3rXx4+XZgfsvy+jvK3TDz4bM9I7fLC/GOzX4VqfYZ2MH9+Hr/6q5GRH0eL8r/I7v9Ai/zYNv+1sf3XvrJ834bC+bkpuz+DKX/hD9u58m+75Mju/trhi4rWznhgsb+wALSyMv2P9VTqt3vPPDRdavmeuVRN7wsvjHbN/gL1p8/AX3minJnzLPsb8wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD/YgQMSAAAAAEH/X7cjUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgqAAD//0wFDK4=")
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
ioctl$I2C_TIMEOUT(0xffffffffffffffff, 0x705, 0xfffffffffffffffb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4173000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
fanotify_init(0xf00, 0x1000)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
ioctl$BLKGETNRZONES(r3, 0x80041285, &(0x7f0000000200)=0x401)
setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000340)=@assoc_value, 0x8)
syz_emit_ethernet(0x3a, &(0x7f0000000200)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x2, 0x23, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote, {[@generic={0x0, 0x2}]}}, {{0x4e2a, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe7}}}}}}, 0x0)

103.032095ms ago: executing program 2 (id=1720):
syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000100)='./file1\x00', 0x208010, &(0x7f0000000040)=ANY=[], 0x4, 0x67b, &(0x7f00000010c0)="$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")
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000180)={0x4000, r0}, 0x0)
landlock_restrict_self(r1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1, 0x0)
truncate(&(0x7f0000000280)='./file1\x00', 0x1)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={<r3=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000380)={r3, 0x2, r1, 0xa, 0x80000})
r4 = open$dir(&(0x7f00000003c0)='./file1\x00', 0xa0000, 0x8)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000400)={@desc={0x1, 0x0, @desc2}})
listxattr(&(0x7f0000000180)='./file1\x00', 0x0, 0x0)

0s ago: executing program 2 (id=1721):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x2, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x25, 0x3}})

kernel console output (not intermixed with test programs):

4lazyinit: bg 0: block 13: invalid block bitmap
[  102.703133][   T51] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  102.743251][ T6828] netlink: 260 bytes leftover after parsing attributes in process `syz.1.338'.
[  102.860561][   T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.866407][   T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.870781][   T51] usb 3-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00
[  102.875434][   T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.881003][   T51] usb 3-1: config 0 descriptor??
[  102.979317][   T33] audit: type=1326 audit(1758861494.190:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.1.344" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee1bd8ec29 code=0x0
[  103.090158][ T5853] Bluetooth: hci1: unknown advertising packet type: 0x21
[  103.090206][ T5853] Bluetooth: hci1: unknown advertising packet type: 0x1c
[  103.093709][ T5853] Bluetooth: hci1: unknown advertising packet type: 0x20
[  103.096709][ T5853] Bluetooth: hci1: unknown advertising packet type: 0x34
[  103.096870][   T51] usbhid 3-1:0.0: can't add hid device: -71
[  103.099796][ T5853] Bluetooth: hci1: unknown advertising packet type: 0x3a
[  103.103338][   T51] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  103.106296][ T5853] Bluetooth: hci1: unknown advertising packet type: 0xb1
[  103.111179][   T51] usb 3-1: USB disconnect, device number 5
[  103.111920][ T5853] Bluetooth: hci1: unknown advertising packet type: 0xbc
[  103.111940][ T5853] Bluetooth: hci1: unknown advertising packet type: 0xe6
[  103.424877][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.475170][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.345'.
[  105.014429][ T6903] loop0: detected capacity change from 0 to 4096
[  105.018793][ T6900] loop2: detected capacity change from 0 to 4096
[  105.024388][ T6900] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  105.029202][ T6904] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  105.046763][ T6900] ntfs3(loop2): ino=1a, mi_enum_attr
[  105.049184][ T6900] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  105.054480][ T6900] ntfs3(loop2): ino=1a, mi_enum_attr
[  105.060891][ T6900] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[  105.247166][ T6917] sg_write: data in/out 16514940/4 bytes for SCSI command 0x1c-- guessing data in;
[  105.247166][ T6917]    program syz.0.371 not setting count and/or reply_len properly
[  105.822352][ T6942] program syz.1.383 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  105.899458][ T6946] vlan2: entered promiscuous mode
[  105.901600][ T6946] macvtap0: entered promiscuous mode
[  106.090227][ T6955] IPv6: addrconf: prefix option has invalid lifetime
[  106.163827][ T5909] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  106.313780][ T5909] usb 1-1: Using ep0 maxpacket: 32
[  106.318108][ T5909] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d
[  106.323094][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.328926][ T5909] usb 1-1: config 0 descriptor??
[  106.334934][ T5909] cx82310_eth 1-1:0.0: probe with driver cx82310_eth failed with error -22
[  106.340660][ T5909] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[  106.541894][    T9] usb 1-1: USB disconnect, device number 6
[  106.640975][ T6976] loop2: detected capacity change from 0 to 512
[  106.649525][ T6976] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.726893][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.808633][ T6988] loop1: detected capacity change from 0 to 512
[  106.813467][ T6988] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  106.818926][ T6988] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  106.822583][ T6988] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.404: corrupted in-inode xattr: e_value size too large
[  106.829932][ T6988] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.404: couldn't read orphan inode 15 (err -117)
[  106.838838][ T6988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.849683][   T33] audit: type=1800 audit(1758861498.070:14): pid=6988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.404" name="bus" dev="loop1" ino=18 res=0 errno=0
[  106.880597][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.948425][ T6995] netlink: 28 bytes leftover after parsing attributes in process `syz.1.407'.
[  106.951487][ T6995] netlink: 28 bytes leftover after parsing attributes in process `syz.1.407'.
[  107.105654][   T33] audit: type=1326 audit(1758861498.310:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.1.408" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1bd8ec29 code=0x7ffc0000
[  107.123404][   T33] audit: type=1326 audit(1758861498.310:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.1.408" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1bd8ec29 code=0x7ffc0000
[  107.144194][   T33] audit: type=1326 audit(1758861498.320:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.1.408" exe="/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fee1bd8ec29 code=0x7ffc0000
[  107.152523][   T33] audit: type=1326 audit(1758861498.320:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.1.408" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1bd8ec29 code=0x7ffc0000
[  107.173819][   T33] audit: type=1326 audit(1758861498.320:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.1.408" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1bd8ec29 code=0x7ffc0000
[  107.192882][   T33] audit: type=1326 audit(1758861498.320:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.1.408" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fee1bd8ec29 code=0x7ffc0000
[  107.212900][   T33] audit: type=1326 audit(1758861498.320:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.1.408" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1bd8ec29 code=0x7ffc0000
[  107.233670][   T33] audit: type=1326 audit(1758861498.320:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.1.408" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fee1bd8ec29 code=0x7ffc0000
[  107.244223][   T33] audit: type=1326 audit(1758861498.320:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6996 comm="syz.1.408" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1bd8ec29 code=0x7ffc0000
[  107.317318][ T7004] sctp: [Deprecated]: syz.0.410 (pid 7004) Use of int in max_burst socket option deprecated.
[  107.317318][ T7004] Use struct sctp_assoc_value instead
[  108.025077][ T5313] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  108.185432][ T5313] usb 3-1: Using ep0 maxpacket: 32
[  108.192732][ T5313] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  108.205673][ T5313] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=d4.09
[  108.211328][ T5313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.214942][ T5313] usb 3-1: Product: syz
[  108.217298][ T5313] usb 3-1: Manufacturer: syz
[  108.224017][ T5313] usb 3-1: SerialNumber: syz
[  108.246797][ T5313] usb 3-1: config 0 descriptor??
[  108.320576][ T5313] peak_usb 3-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22
[  108.326165][ T5313] peak_usb 3-1:0.0: unable to read PCAN-USB serial number (err -22)
[  108.376721][ T7023] loop1: detected capacity change from 0 to 256
[  108.380263][ T5313] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22
[  108.380728][ T7023] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  108.478020][ T5313] usb 3-1: USB disconnect, device number 6
[  108.732713][ T7030] libceph: resolve '4..' (ret=-3): failed
[  109.085382][ T7038] loop0: detected capacity change from 0 to 128
[  109.090504][ T7038] qnx6: superblock #1 checksum error
[  109.174901][ T7043] loop1: detected capacity change from 0 to 512
[  109.177943][ T7043] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  109.183727][ T7043] EXT4-fs (loop1): 1 truncate cleaned up
[  109.187132][ T7043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.207284][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.282145][ T7053] tipc: Can't bind to reserved service type 0
[  109.829656][ T7077] netlink: 148 bytes leftover after parsing attributes in process `syz.1.440'.
[  110.133620][ T7085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.444'.
[  110.173056][ T7083] loop1: detected capacity change from 0 to 32768
[  110.193239][ T7083] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  110.237771][ T7083] XFS (loop1): Ending clean mount
[  110.245547][ T7083] XFS (loop1): Quotacheck needed: Please wait.
[  110.273817][ T7083] XFS (loop1): Quotacheck: Done.
[  110.298625][ T5852] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  110.532697][ T7114] loop0: detected capacity change from 0 to 256
[  110.560332][ T7114] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF
[  110.563792][ T7114] FAT-fs (loop0): Filesystem has been set read-only
[  110.617104][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.455'.
[  110.886155][ T7126] loop0: detected capacity change from 0 to 128
[  111.178944][  T794] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  111.374422][  T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.384436][  T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.388839][  T794] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  111.394927][  T794] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  111.404694][  T794] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.415300][  T794] usb 2-1: config 0 descriptor??
[  111.870470][  T794] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  112.235752][ T5909] usb 2-1: USB disconnect, device number 6
[  112.464353][ T7154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'.
[  114.188675][ T7188] loop0: detected capacity change from 0 to 1024
[  114.206032][ T7188] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  114.211054][ T7188] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869)
[  114.217016][ T7188] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  114.228141][ T7188] EXT4-fs (loop0): invalid journal inode
[  114.832450][ T7200] loop0: detected capacity change from 0 to 1024
[  114.870604][ T7200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.778156][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.919890][ T7220] loop0: detected capacity change from 0 to 512
[  115.940225][ T7220] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  115.943853][ T7220] EXT4-fs (loop0): orphan cleanup on readonly fs
[  115.947053][ T7220] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.496: iget: bad i_size value: 38620345925642
[  115.953577][ T7220] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.496: couldn't read orphan inode 15 (err -117)
[  115.961089][ T7220] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  115.985068][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.024463][    T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  116.069320][ T7225] tmpfs: Cannot enable swap on remount if it was disabled on first mount
[  116.197484][    T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  116.201280][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.205912][    T9] usb 3-1: Product: syz
[  116.207791][    T9] usb 3-1: Manufacturer: syz
[  116.209770][    T9] usb 3-1: SerialNumber: syz
[  116.216477][    T9] r8152-cfgselector 3-1: Unknown version 0x0000
[  116.219238][    T9] r8152-cfgselector 3-1: config 0 descriptor??
[  116.495684][ T7231] loop0: detected capacity change from 0 to 32768
[  116.500517][ T7231] XFS (loop0): Cannot mount filesystem with identical rtdev and ddev/logdev.
[  116.661730][    T9] r8152-cfgselector 3-1: USB disconnect, device number 7
[  116.690295][   T13] tipc: Subscription rejected, illegal request
[  116.919605][ T7240] loop0: detected capacity change from 0 to 32768
[  116.923822][ T7240] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section members_v2: device 0: bucket size 0 smaller than block size 8
[  116.923822][ T7240] members_v2 (size 152):
[  116.923822][ T7240] Device:                        0
[  116.923822][ T7240]   Label:                       (none)
[  116.923822][ T7240]   UUID:                        7af6772b-00de-4159-84cd-1faead05aceb
[  116.923822][ T7240]   Size:                        0
[  116.923822][ T7240]   read errors:                 0
[  116.923822][ T7240]   write errors:                0
[  116.923822][ T7240]   checksum errors:             0
[  116.923822][ T7240]   seqread iops:                0
[  116.923822][ T7240]   seqwrite iops:               0
[  116.923822][ T7240]   randread iops:               0
[  116.923822][ T7240]   randwrite iops:              0
[  116.923822][ T7240]   Bucket size:                 0
[  116.923822][ T7240]   First bucket:                0
[  116.923822][ T7240]   Buckets:                     128
[  116.923822][ T7240]   Last mount:                  1714681267
[  116.923822][ T7240]   Last superblock write:       42
[  116.923822][ T7240]   State:                       rw
[  116.923822][ T7240]   Data allowed:                journal,btree,user
[  116.923822][ T7240]   Has data:                    btree
[  116.923822][ T7240]   Btree allocated bitmap blocksize:128
[  116.923822][ T7240]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[  116.923822][ T7240]   Durability:        
[  116.923942][ T7240] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  117.180583][ T7252] netlink: 2 bytes leftover after parsing attributes in process `syz.0.511'.
[  118.323989][ T7273] loop2: detected capacity change from 0 to 256
[  118.327209][ T7273] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  118.331555][ T7273] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  118.337401][ T7273] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  118.343611][ T7273] exFAT-fs (loop2): failed to load alloc-bitmap
[  118.345774][ T7273] exFAT-fs (loop2): failed to recognize exfat type
[  118.639421][ T7279] loop2: detected capacity change from 0 to 32768
[  118.674916][ T7279] MetaData crosses page boundary!!
[  118.677026][ T7279] lblock = 610061, size  = 269877248
[  118.678923][ T7279] CPU: 0 UID: 0 PID: 7279 Comm: syz.2.523 Not tainted syzkaller #0 PREEMPT(full) 
[  118.678936][ T7279] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  118.678942][ T7279] Call Trace:
[  118.678947][ T7279]  <TASK>
[  118.678952][ T7279]  dump_stack_lvl+0x189/0x250
[  118.678969][ T7279]  ? __pfx_dump_stack_lvl+0x10/0x10
[  118.678995][ T7279]  ? __pfx__printk+0x10/0x10
[  118.679012][ T7279]  ? folio_unlock+0x101/0x160
[  118.679030][ T7279]  __get_metapage+0x9ea/0xde0
[  118.679052][ T7279]  dtSearch+0x591/0x21b0
[  118.679085][ T7279]  dtDelete+0xe6/0x2c60
[  118.679113][ T7279]  ? __pfx_dtDelete+0x10/0x10
[  118.679125][ T7279]  ? dtSearch+0x1d29/0x21b0
[  118.679156][ T7279]  ? inc_nlink+0x4d/0x150
[  118.679173][ T7279]  jfs_rename+0xb15/0x1610
[  118.679187][ T7279]  ? __lock_acquire+0xab9/0xd20
[  118.679207][ T7279]  ? __pfx_jfs_rename+0x10/0x10
[  118.679232][ T7279]  ? __lock_acquire+0xab9/0xd20
[  118.679251][ T7279]  ? do_raw_spin_lock+0x121/0x290
[  118.679271][ T7279]  ? do_raw_spin_unlock+0x4d/0x240
[  118.679286][ T7279]  ? __pfx_jfs_rename+0x10/0x10
[  118.679302][ T7279]  vfs_rename+0xbda/0xf00
[  118.679321][ T7279]  ? __pfx_vfs_rename+0x10/0x10
[  118.679333][ T7279]  ? bpf_lsm_path_rename+0x9/0x20
[  118.679341][ T7279]  ? security_path_rename+0x17d/0x490
[  118.679351][ T7279]  do_renameat2+0x6ce/0xa80
[  118.679367][ T7279]  ? __pfx_do_renameat2+0x10/0x10
[  118.679381][ T7279]  ? getname_flags+0x1e5/0x540
[  118.679392][ T7279]  __x64_sys_rename+0x82/0x90
[  118.679401][ T7279]  do_syscall_64+0xfa/0xfa0
[  118.679413][ T7279]  ? lockdep_hardirqs_on+0x9c/0x150
[  118.679423][ T7279]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.679430][ T7279]  ? exc_page_fault+0xab/0x100
[  118.679440][ T7279]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.679448][ T7279] RIP: 0033:0x7fe814f8ec29
[  118.679457][ T7279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.679463][ T7279] RSP: 002b:00007fe815e55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  118.679474][ T7279] RAX: ffffffffffffffda RBX: 00007fe8151d5fa0 RCX: 00007fe814f8ec29
[  118.679479][ T7279] RDX: 0000000000000000 RSI: 0000200000000f40 RDI: 0000200000000300
[  118.679484][ T7279] RBP: 00007fe815011e41 R08: 0000000000000000 R09: 0000000000000000
[  118.679488][ T7279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  118.679493][ T7279] R13: 00007fe8151d6038 R14: 00007fe8151d5fa0 R15: 00007ffd327933b8
[  118.679505][ T7279]  </TASK>
[  118.680712][ T7279] bread failed!
[  118.779623][ T7279] jfs_rename did not expect dtDelete to return rc = -5
[  118.782245][ T7279] ERROR: (device loop2): jfs_rename: 
[  118.782245][ T7279] 
[  118.785405][ T7279] ERROR: (device loop2): remounting filesystem as read-only
[  119.391556][ T7302] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  119.462832][ T7304] netlink: 176 bytes leftover after parsing attributes in process `syz.0.535'.
[  119.675080][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.536'.
[  119.717430][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  119.721316][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  119.725535][ T7307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.536'.
[  119.732044][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  119.738178][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  119.883584][ T7309] binder: 7308:7309 ioctl c018620c 200000000100 returned -1
[  120.326665][ T7315] (syz.0.540,7315,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory.
[  120.660980][ T5313] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  120.842721][ T5313] usb 1-1: Using ep0 maxpacket: 32
[  120.849357][ T5313] usb 1-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=ea.fe
[  120.854611][ T5313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.857684][ T5313] usb 1-1: Product: syz
[  120.859303][ T5313] usb 1-1: Manufacturer: syz
[  120.861098][ T5313] usb 1-1: SerialNumber: syz
[  120.873769][ T5313] usb 1-1: config 0 descriptor??
[  121.109293][ T5313] usb 1-1: USB disconnect, device number 7
[  121.733371][   T33] kauditd_printk_skb: 36 callbacks suppressed
[  121.733385][   T33] audit: type=1326 audit(1758861512.063:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.555" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc50998ec29 code=0x0
[  122.225467][ T7351] loop2: detected capacity change from 0 to 2048
[  122.229509][ T7351] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=26504, location=26504
[  122.238276][ T7351] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  122.670821][    T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  122.757114][ T7365] usb usb8: usbfs: process 7365 (syz.0.563) did not claim interface 0 before use
[  122.844644][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  122.852886][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  122.857486][    T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  122.862684][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  122.867100][    T9] usb 3-1: SerialNumber: syz
[  123.089002][    T9] usb 3-1: 0:2 : does not exist
[  123.097789][    T9] usb 3-1: USB disconnect, device number 8
[  123.170540][ T7382] loop0: detected capacity change from 0 to 64
[  123.473090][   T10] usb 1-1: new low-speed USB device number 8 using dummy_hcd
[  123.645717][   T10] usb 1-1: config 1 interface 0 has no altsetting 0
[  123.664442][   T10] usb 1-1: New USB device found, idVendor=07ca, idProduct=1871, bcdDevice= 1.d1
[  123.675659][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.965769][   T10] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  123.970921][   T10] dvb_usb_af9035 1-1:1.0: probe with driver dvb_usb_af9035 failed with error -22
[  123.981596][   T10] usb 1-1: USB disconnect, device number 8
[  125.163733][ T7400] netlink: 'syz.2.577': attribute type 3 has an invalid length.
[  125.812184][ T7419] loop0: detected capacity change from 0 to 1024
[  125.818370][ T7419] EXT4-fs: Ignoring removed nomblk_io_submit option
[  125.821560][ T7419] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  125.832008][ T7419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.852684][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.117005][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.591'.
[  126.325168][ T7440] loop0: detected capacity change from 0 to 4096
[  126.337654][   T33] audit: type=1400 audit(1758861516.366:61): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7441 comm="syz.2.596"
[  126.345317][ T7440] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  126.496969][ T7451] ALSA: mixer_oss: invalid OSS volume ''
[  126.936404][   T51] IPVS: starting estimator thread 0...
[  127.032631][ T7469] IPVS: using max 82 ests per chain, 196800 per kthread
[  127.066982][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.608'.
[  127.815013][ T7483] Process accounting resumed
[  127.936375][ T7489] loop2: detected capacity change from 0 to 1024
[  127.996221][ T7493] tipc: Enabled bearer <udp:syz2>, priority 10
[  128.062530][ T1092] hfsplus: b-tree write err: -5, ino 3
[  128.250111][ T7509] netlink: 'syz.2.623': attribute type 3 has an invalid length.
[  128.256082][ T7509] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.623'.
[  128.389628][ T7517] netlink: 'syz.0.627': attribute type 11 has an invalid length.
[  128.400898][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'.
[  128.586040][ T7526] netlink: 16 bytes leftover after parsing attributes in process `syz.2.631'.
[  128.711252][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  128.871448][   T10] usb 1-1: Using ep0 maxpacket: 32
[  128.887104][ T7537] loop2: detected capacity change from 0 to 32768
[  128.887517][   T10] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  128.890827][ T7537] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.636 (7537)
[  128.903706][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.910120][   T10] usb 1-1: config 0 descriptor??
[  128.910296][ T7537] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  128.916604][ T7537] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  128.942149][ T7537] BTRFS info (device loop2): enabling ssd optimizations
[  128.944558][ T7537] BTRFS info (device loop2): enabling free space tree
[  129.029621][ T5850] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  129.135258][   T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  129.154454][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  129.177466][   T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  129.180464][   T10] usb 1-1: media controller created
[  129.207472][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  129.913500][   T10] az6027: usb out operation failed. (-71)
[  129.929195][   T10] az6027: usb out operation failed. (-71)
[  129.932053][   T10] stb0899_attach: Driver disabled by Kconfig
[  129.934546][   T10] az6027: no front-end attached
[  129.934546][   T10] 
[  129.941670][   T10] az6027: usb out operation failed. (-71)
[  129.944189][   T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  129.948848][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6
[  129.965556][   T10] dvb-usb: schedule remote query interval to 400 msecs.
[  129.968968][   T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  129.975055][   T10] usb 1-1: USB disconnect, device number 9
[  130.031310][   T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  130.797614][ T7571] loop2: detected capacity change from 0 to 512
[  130.803855][ T7571] EXT4-fs: Ignoring removed mblk_io_submit option
[  130.810223][ T7571] EXT4-fs: inline encryption not supported
[  130.813543][ T7571] EXT4-fs: Ignoring removed mblk_io_submit option
[  130.821966][ T7571] EXT4-fs (loop2): Test dummy encryption mode enabled
[  130.825358][ T7571] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  130.860164][ T7571] EXT4-fs (loop2): 1 truncate cleaned up
[  130.884535][ T7571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.003375][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  131.011070][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  131.012599][   T13] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.022485][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  131.031722][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.043492][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  131.048860][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  131.096137][   T13] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.101895][ T7577] loop2: detected capacity change from 0 to 512
[  131.105469][ T7577] EXT4-fs: Ignoring removed orlov option
[  131.109247][ T7577] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  131.133347][ T7577] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  131.139889][ T7577] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.645: corrupted in-inode xattr: e_value size too large
[  131.143924][ T7574] lo speed is unknown, defaulting to 1000
[  131.146275][ T7577] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.645: couldn't read orphan inode 15 (err -117)
[  131.158631][   T13] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.166089][ T7577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.261824][   T13] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.324497][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.691212][   T13] bridge_slave_1: left allmulticast mode
[  131.695739][   T13] bridge_slave_1: left promiscuous mode
[  131.701926][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.723549][   T13] bridge_slave_0: left allmulticast mode
[  131.727790][   T13] bridge_slave_0: left promiscuous mode
[  131.730089][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.750688][   T33] audit: type=1326 audit(1758861521.436:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.0.649" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50998ec29 code=0x7ffc0000
[  131.768475][   T33] audit: type=1326 audit(1758861521.436:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.0.649" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50998ec29 code=0x7ffc0000
[  131.787778][   T33] audit: type=1326 audit(1758861521.445:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.0.649" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc50998ec29 code=0x7ffc0000
[  131.804167][   T33] audit: type=1326 audit(1758861521.445:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.0.649" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50998ec29 code=0x7ffc0000
[  131.825069][   T33] audit: type=1326 audit(1758861521.445:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.0.649" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50998ec29 code=0x7ffc0000
[  131.833054][   T33] audit: type=1326 audit(1758861521.445:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.0.649" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc50998ec29 code=0x7ffc0000
[  131.841104][   T33] audit: type=1326 audit(1758861521.445:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.0.649" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50998ec29 code=0x7ffc0000
[  131.851386][   T51] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  131.857450][   T33] audit: type=1326 audit(1758861521.445:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.0.649" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc50998ec29 code=0x7ffc0000
[  131.867341][   T33] audit: type=1326 audit(1758861521.445:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.0.649" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50998ec29 code=0x7ffc0000
[  131.876400][   T33] audit: type=1326 audit(1758861521.445:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.0.649" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc509985be7 code=0x7ffc0000
[  132.025343][   T51] usb 3-1: Using ep0 maxpacket: 8
[  132.030280][   T51] usb 3-1: config 2 has an invalid interface number: 31 but max is 0
[  132.033812][   T51] usb 3-1: config 2 has no interface number 0
[  132.037282][   T51] usb 3-1: config 2 interface 31 has no altsetting 0
[  132.044170][   T51] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  132.048324][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.051770][   T51] usb 3-1: Product: syz
[  132.053558][   T51] usb 3-1: Manufacturer: syz
[  132.055540][   T51] usb 3-1: SerialNumber: syz
[  132.148182][ T7593] loop0: detected capacity change from 0 to 40427
[  132.166921][ T7593] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  132.170480][ T7593] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  132.176657][ T7593] F2FS-fs (loop0): invalid crc value
[  132.273497][ T7593] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  132.294896][   T51] ch9200 3-1:2.31: probe with driver ch9200 failed with error -71
[  132.298618][ T7593] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  132.301407][   T51] usb 3-1: USB disconnect, device number 9
[  132.301623][ T7593] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  132.350701][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  132.365073][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.372238][   T13] bond0 (unregistering): Released all slaves
[  132.410859][ T7574] chnl_net:caif_netlink_parms(): no params data found
[  132.549487][ T7574] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.552506][ T7574] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.555561][ T7574] bridge_slave_0: entered allmulticast mode
[  132.559433][ T7574] bridge_slave_0: entered promiscuous mode
[  132.568741][ T7574] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.572260][ T7574] bridge0: port 2(bridge_slave_1) entered disabled state
[  132.575297][ T7574] bridge_slave_1: entered allmulticast mode
[  132.579262][ T7574] bridge_slave_1: entered promiscuous mode
[  132.661366][ T7574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  132.668225][ T7574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  132.695006][   T13] hsr_slave_0: left promiscuous mode
[  132.698976][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.701730][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.707622][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.713436][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.729282][   T13] veth1_macvtap: left promiscuous mode
[  132.732686][   T13] veth0_macvtap: left promiscuous mode
[  132.735274][   T13] veth1_vlan: left promiscuous mode
[  132.737864][   T13] veth0_vlan: left promiscuous mode
[  133.265626][ T5853] Bluetooth: hci2: command tx timeout
[  133.286121][   T13] team0 (unregistering): Port device team_slave_1 removed
[  133.352490][   T13] team0 (unregistering): Port device team_slave_0 removed
[  134.078519][ T7574] team0: Port device team_slave_0 added
[  134.085257][   T51] lo speed is unknown, defaulting to 1000
[  134.088143][   T51] syz0: Port: 1 Link DOWN
[  134.133219][ T7574] team0: Port device team_slave_1 added
[  134.248196][ T7574] batman_adv: batadv0: Adding interface: batadv_slave_0
[  134.251044][ T7574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  134.260848][ T7574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  134.272615][ T7574] batman_adv: batadv0: Adding interface: batadv_slave_1
[  134.275423][ T7574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  134.284395][ T7574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  134.313644][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  134.317081][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  134.358188][ T7574] hsr_slave_0: entered promiscuous mode
[  134.362722][ T7574] hsr_slave_1: entered promiscuous mode
[  134.366807][ T7574] debugfs: 'hsr0' already exists in 'hsr'
[  134.369108][ T7574] Cannot create hsr debugfs directory
[  134.882273][ T7574] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  134.892451][ T7574] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  134.909865][ T7574] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  134.930341][ T7574] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  135.027981][ T7574] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.050240][ T7574] 8021q: adding VLAN 0 to HW filter on device team0
[  135.058707][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.061830][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.075837][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.079076][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.244889][ T7574] 8021q: adding VLAN 0 to HW filter on device batadv0
[  135.300809][ T7574] veth0_vlan: entered promiscuous mode
[  135.310538][ T7574] veth1_vlan: entered promiscuous mode
[  135.344408][ T7574] veth0_macvtap: entered promiscuous mode
[  135.352859][ T7574] veth1_macvtap: entered promiscuous mode
[  135.372412][ T7574] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.384801][ T7574] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.394594][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.398537][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.402875][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.423244][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.488995][ T5853] Bluetooth: hci2: command tx timeout
[  135.510563][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.519991][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.553582][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.557932][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.799277][ T7663] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  135.855878][ T7667] loop3: detected capacity change from 0 to 1024
[  135.898991][ T7667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.918415][ T7667] EXT4-fs warning (device loop3): ext4_empty_dir:3099: inode #11: comm syz.3.673: directory missing '..'
[  135.990736][ T7574] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.993498][ T7673] netlink: 40 bytes leftover after parsing attributes in process `syz.0.674'.
[  136.078514][ T7675] loop3: detected capacity change from 0 to 16
[  136.091450][ T7675] erofs (device loop3): mounted with root inode @ nid 36.
[  136.112068][ T7675] erofs (device loop3): corrupted dir block 8200 @ nid 36
[  136.236785][ T7677] loop3: detected capacity change from 0 to 16
[  136.255493][ T7677] erofs (device loop3): mounted with root inode @ nid 36.
[  136.690821][ T7683] loop3: detected capacity change from 0 to 512
[  136.729701][ T7683] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  136.733444][ T7683] EXT4-fs (loop3): group descriptors corrupted!
[  137.370385][ T5895] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  137.562927][ T5895] usb 4-1: Using ep0 maxpacket: 32
[  137.569848][ T5895] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  137.574735][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  137.579389][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  137.584613][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  137.589499][ T5895] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  137.594200][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  137.598621][ T5895] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  137.607835][ T5895] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf
[  137.611909][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.615401][ T5895] usb 4-1: Product: syz
[  137.617437][ T5895] usb 4-1: Manufacturer: syz
[  137.619572][ T5895] usb 4-1: SerialNumber: syz
[  137.665546][ T5895] usb 4-1: config 0 descriptor??
[  137.687390][ T7687] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  137.694092][ T5895] usb 4-1: NFC: Reader power on cmd error -90
[  137.696814][ T5895] pn533_usb 4-1:0.0: NFC: Couldn't poweron the reader (error -90)
[  137.700172][ T5895] pn533_usb 4-1:0.0: probe with driver pn533_usb failed with error -90
[  137.724429][ T5853] Bluetooth: hci2: command tx timeout
[  137.813398][ T7699] netlink: 'syz.0.686': attribute type 46 has an invalid length.
[  137.816294][ T7699] netlink: 'syz.0.686': attribute type 19 has an invalid length.
[  137.842310][ T7701] nbd: must specify an index to disconnect
[  137.920583][  T794] usb 4-1: USB disconnect, device number 2
[  138.022520][ T5895] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  138.193527][ T5895] usb 3-1: Using ep0 maxpacket: 32
[  138.199652][ T5895] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  138.202869][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.205701][ T5895] usb 3-1: Product: syz
[  138.207199][ T5895] usb 3-1: Manufacturer: syz
[  138.208951][ T5895] usb 3-1: SerialNumber: syz
[  138.211782][ T5895] usb 3-1: config 0 descriptor??
[  138.647383][ T5895] airspy 3-1:0.0: Board ID: 00
[  138.649811][ T5895] airspy 3-1:0.0: Firmware version: 
[  138.788041][ T7707] netlink: 216 bytes leftover after parsing attributes in process `syz.0.690'.
[  138.791851][ T7707] netlink: 24 bytes leftover after parsing attributes in process `syz.0.690'.
[  138.795376][ T7707] netlink: 16 bytes leftover after parsing attributes in process `syz.0.690'.
[  138.883999][ T7709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'.
[  139.062470][ T7719] tmpfs: Bad value for 'mpol'
[  139.210751][ T7717] loop3: detected capacity change from 0 to 32768
[  139.224342][ T7717] XFS (loop3): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[  139.258437][ T7574] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  139.297296][ T5895] airspy 3-1:0.0: usb_control_msg() failed -71 request 12
[  139.308502][ T5895] airspy 3-1:0.0: Registered as swradio24
[  139.310874][ T5895] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  139.316975][ T5895] usb 3-1: USB disconnect, device number 10
[  139.383755][ T7736] netdevsim netdevsim3: Direct firmware load for .. failed with error -2
[  139.388270][ T7736] netdevsim netdevsim3: Falling back to sysfs fallback for: ..
[  139.936561][   T55] Bluetooth: hci2: command tx timeout
[  140.104912][ T7744] tmpfs: Bad value for 'mpol'
[  141.736949][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'.
[  141.740827][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'.
[  141.745087][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'.
[  141.749059][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'.
[  141.753142][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'.
[  141.757204][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'.
[  141.761136][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'.
[  141.766466][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'.
[  141.770814][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'.
[  141.776244][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.721'.
[  141.785851][    T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  141.903925][ T7799] loop3: detected capacity change from 0 to 1024
[  141.942699][ T3601] hfsplus: b-tree write err: -5, ino 8
[  141.947461][    T9] usb 1-1: Using ep0 maxpacket: 32
[  141.958749][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.963337][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.979268][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  141.983192][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.992259][    T9] usb 1-1: config 0 descriptor??
[  141.996809][    T9] hub 1-1:0.0: USB hub found
[  142.064106][ T7807] loop3: detected capacity change from 0 to 4096
[  142.078466][ T7807] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  142.093793][ T7807] ntfs3(loop3): ino=0, "file0" The size of extended attributes must not exceed 64KiB
[  142.221892][    T9] hub 1-1:0.0: 1 port detected
[  142.237960][ T5909] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  142.405759][ T5909] usb 3-1: Using ep0 maxpacket: 8
[  142.413383][ T5909] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  142.417211][ T5909] usb 3-1: config 0 has no interface number 0
[  142.424241][ T5909] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  142.429034][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.432402][ T5909] usb 3-1: Product: syz
[  142.434209][ T5909] usb 3-1: Manufacturer: syz
[  142.436072][ T5909] usb 3-1: SerialNumber: syz
[  142.447898][ T5909] usb 3-1: config 0 descriptor??
[  142.666439][    T9] usb 1-1: USB disconnect, device number 10
[  142.674171][ T5909] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  142.682909][ T5909] uvcvideo 3-1:0.31: Failed to initialize entity for entity 6
[  142.693172][ T5909] uvcvideo 3-1:0.31: Failed to register entities (-22).
[  142.901336][ T5895] usb 3-1: USB disconnect, device number 11
[  143.496537][ T7836] loop2: detected capacity change from 0 to 128
[  143.503445][   T33] kauditd_printk_skb: 45 callbacks suppressed
[  143.503456][   T33] audit: type=1800 audit(1758861532.427:117): pid=7836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.742" name="bus" dev="loop2" ino=1048617 res=0 errno=0
[  143.559889][ T7845] tmpfs: Bad value for 'mpol'
[  143.669761][ T7851] loop0: detected capacity change from 0 to 4096
[  143.684498][ T7851] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  143.705494][ T7851] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  143.729912][ T7851] ntfs3(loop0): ino=5, mi_enum_attr
[  143.912103][ T7871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  143.945136][   T51] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  144.105530][   T51] usb 4-1: Using ep0 maxpacket: 32
[  144.118690][   T51] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  144.123015][   T51] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  144.133772][   T51] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  144.139494][   T51] usb 4-1: config 0 interface 0 has no altsetting 1
[  144.144972][   T51] usb 4-1: New USB device found, idVendor=0582, idProduct=0012, bcdDevice=8e.57
[  144.149379][   T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.154713][   T51] usb 4-1: Product: syz
[  144.156958][   T51] usb 4-1: Manufacturer: syz
[  144.159244][   T51] usb 4-1: SerialNumber: syz
[  144.164838][   T51] usb 4-1: config 0 descriptor??
[  144.175091][   T51] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  144.180359][   T51] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  144.273083][   T51] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2
[  144.431390][    T9] usb 4-1: USB disconnect, device number 3
[  144.761799][ T7892] loop2: detected capacity change from 0 to 40427
[  144.765745][ T7892] F2FS-fs (loop2): build fault injection rate: 690
[  144.770835][ T7892] F2FS-fs (loop2): invalid crc value
[  144.804467][ T7892] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  144.810365][ T7892] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  144.995563][ T7897] delete_channel: no stack
[  145.029877][ T7899] loop3: detected capacity change from 0 to 764
[  146.054261][ T7923] loop3: detected capacity change from 0 to 256
[  146.079659][ T7923] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001)
[  146.189209][ T7925] macvlan2: entered promiscuous mode
[  146.191412][ T7925] macvlan2: entered allmulticast mode
[  146.345263][   T33] audit: type=1326 audit(1758861535.083:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.3.782" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5800f8ec29 code=0x0
[  146.831640][   T51] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  146.994048][   T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.998798][   T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  147.002953][   T51] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  147.007710][   T51] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  147.010583][   T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.014505][   T51] usb 3-1: config 0 descriptor??
[  147.362851][ T7948] loop3: detected capacity change from 0 to 1024
[  147.366752][ T7948] EXT4-fs: mb_optimize_scan should be set to 0 or 1.
[  147.460942][   T51] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  147.590619][ T5909] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  147.773046][ T5909] usb 1-1: Using ep0 maxpacket: 16
[  147.817804][ T5909] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  147.822956][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.826822][ T5909] usb 1-1: Product: syz
[  147.828962][ T5909] usb 1-1: Manufacturer: syz
[  147.831250][ T5909] usb 1-1: SerialNumber: syz
[  147.899320][ T5909] r8152-cfgselector 1-1: Unknown version 0x0000
[  147.903696][ T5909] r8152-cfgselector 1-1: config 0 descriptor??
[  148.352642][   T51] r8152-cfgselector 1-1: USB disconnect, device number 11
[  150.293529][    T9] usb 3-1: USB disconnect, device number 12
[  150.358358][ T8000] __nla_validate_parse: 66 callbacks suppressed
[  150.358373][ T8000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.812'.
[  150.380064][ T8002] netlink: 20 bytes leftover after parsing attributes in process `syz.3.813'.
[  151.150728][  T794] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  151.316819][  T794] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[  151.319983][  T794] usb 1-1: config 0 has no interface number 0
[  151.322608][  T794] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  151.327121][  T794] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64
[  151.339602][  T794] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  151.344105][  T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.347879][  T794] usb 1-1: Product: syz
[  151.349855][  T794] usb 1-1: Manufacturer: syz
[  151.352051][  T794] usb 1-1: SerialNumber: syz
[  151.370042][  T794] usb 1-1: config 0 descriptor??
[  151.374064][ T8021] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  151.810938][  T794] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0
[  151.822107][  T794] usb 1-1: USB disconnect, device number 12
[  151.834278][  T794] yurex 1-1:0.50: USB YUREX #0 now disconnected
[  152.743564][  T794] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  152.927567][  T794] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  152.932015][  T794] usb 1-1: config 0 interface 0 has no altsetting 0
[  152.935014][  T794] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  152.940555][  T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.946313][  T794] usb 1-1: config 0 descriptor??
[  152.953692][  T794] usb 1-1: selecting invalid altsetting 0
[  153.177863][ T5909] usb 1-1: USB disconnect, device number 13
[  153.531400][ T8069] netlink: 'syz.3.840': attribute type 1 has an invalid length.
[  153.538593][ T8069] netlink: 'syz.3.840': attribute type 4 has an invalid length.
[  153.542041][ T8069] netlink: 15586 bytes leftover after parsing attributes in process `syz.3.840'.
[  154.071373][ T8092] netlink: 'syz.0.849': attribute type 21 has an invalid length.
[  154.209289][ T8096] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  154.212725][ T8096] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  154.463473][ T8101] netlink: 'syz.2.852': attribute type 1 has an invalid length.
[  154.467839][ T8101] netlink: 184 bytes leftover after parsing attributes in process `syz.2.852'.
[  155.563507][ T8122] netlink: 'syz.2.860': attribute type 16 has an invalid length.
[  155.566994][ T8122] netlink: 'syz.2.860': attribute type 17 has an invalid length.
[  155.695518][ T8124] loop2: detected capacity change from 0 to 1024
[  155.710015][ T8124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.909159][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.181358][ T8143] loop0: detected capacity change from 0 to 512
[  156.184219][ T8143] EXT4-fs: Ignoring removed mblk_io_submit option
[  156.188374][ T8143] EXT4-fs: inline encryption not supported
[  156.190767][ T8143] EXT4-fs: Ignoring removed mblk_io_submit option
[  156.193276][ T8143] EXT4-fs (loop0): Test dummy encryption mode enabled
[  156.195937][ T8143] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  156.201814][ T8143] EXT4-fs (loop0): 1 truncate cleaned up
[  156.204636][ T8143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.234414][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.260774][ T5909] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  156.543142][ T5909] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  156.547121][ T5909] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  156.554201][ T5909] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  156.558132][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.564022][ T5909] usb 3-1: config 0 descriptor??
[  156.569318][ T5909] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  156.575085][ T5909] dvb-usb: bulk message failed: -22 (3/0)
[  156.579805][ T5909] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  156.584369][ T5909] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  156.587605][ T5909] usb 3-1: media controller created
[  157.102312][ T5909] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  157.543267][ T5909] dvb-usb: bulk message failed: -22 (6/0)
[  157.546474][ T5909] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  157.556594][ T5909] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7
[  157.568889][ T5909] dvb-usb: schedule remote query interval to 150 msecs.
[  157.571882][ T5909] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  157.577586][ T5909] usb 3-1: USB disconnect, device number 13
[  157.616335][ T5909] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  157.794680][ T8176] loop2: detected capacity change from 0 to 512
[  157.821525][ T8176] EXT4-fs: Ignoring removed mblk_io_submit option
[  157.831501][ T8176] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  157.847243][ T8176] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal
[  157.934711][ T8166] loop0: detected capacity change from 0 to 40427
[  157.942618][ T8166] F2FS-fs (loop0): invalid crc value
[  158.002041][ T8166] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  158.007346][ T8166] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  158.048230][   T33] audit: type=1800 audit(1758861546.037:119): pid=8166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.877" name="file1" dev="loop0" ino=10 res=0 errno=0
[  158.092405][ T5845] syz-executor: attempt to access beyond end of device
[  158.092405][ T5845] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  158.110241][ T5845] CPU: 0 UID: 0 PID: 5845 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  158.110266][ T5845] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  158.110275][ T5845] Call Trace:
[  158.110283][ T5845]  <TASK>
[  158.110290][ T5845]  dump_stack_lvl+0x189/0x250
[  158.110315][ T5845]  ? __pfx_dump_stack_lvl+0x10/0x10
[  158.110350][ T5845]  ? __pfx_queue_work_on+0x10/0x10
[  158.110388][ T5845]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  158.110405][ T5845]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  158.110428][ T5845]  f2fs_handle_critical_error+0x37c/0x540
[  158.110450][ T5845]  f2fs_write_end_io+0x886/0xb60
[  158.110480][ T5845]  __submit_merged_bio+0x27a/0x6a0
[  158.110501][ T5845]  __submit_merged_write_cond+0x255/0x530
[  158.110521][ T5845]  f2fs_write_data_pages+0x261d/0x3000
[  158.110561][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  158.110587][ T5845]  ? is_bpf_text_address+0x292/0x2b0
[  158.110605][ T5845]  ? is_bpf_text_address+0x26/0x2b0
[  158.110656][ T5845]  ? __lock_acquire+0xab9/0xd20
[  158.110679][ T5845]  ? do_raw_spin_lock+0x121/0x290
[  158.110701][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[  158.110716][ T5845]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  158.110733][ T5845]  do_writepages+0x32e/0x550
[  158.110760][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[  158.110776][ T5845]  filemap_fdatawrite+0x199/0x240
[  158.110797][ T5845]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  158.110853][ T5845]  ? do_raw_spin_unlock+0x4d/0x240
[  158.110871][ T5845]  f2fs_sync_dirty_inodes+0x31f/0x830
[  158.110900][ T5845]  f2fs_write_checkpoint+0x93e/0x2440
[  158.110919][ T5845]  ? __lock_acquire+0xab9/0xd20
[  158.110952][ T5845]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  158.111007][ T5845]  kill_f2fs_super+0x2cc/0x6d0
[  158.111030][ T5845]  ? __pfx_kill_f2fs_super+0x10/0x10
[  158.111058][ T5845]  ? shrinker_free+0x2ce/0x3e0
[  158.111078][ T5845]  deactivate_locked_super+0xbc/0x130
[  158.111099][ T5845]  cleanup_mnt+0x425/0x4c0
[  158.111116][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[  158.111134][ T5845]  task_work_run+0x1d4/0x260
[  158.111154][ T5845]  ? __pfx_task_work_run+0x10/0x10
[  158.111166][ T5845]  ? __x64_sys_umount+0x122/0x160
[  158.111181][ T5845]  ? exit_to_user_mode_loop+0x40/0x130
[  158.111201][ T5845]  exit_to_user_mode_loop+0xe9/0x130
[  158.111216][ T5845]  do_syscall_64+0x2bd/0xfa0
[  158.111235][ T5845]  ? lockdep_hardirqs_on+0x9c/0x150
[  158.111249][ T5845]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.111262][ T5845]  ? exc_page_fault+0xab/0x100
[  158.111279][ T5845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.111290][ T5845] RIP: 0033:0x7fc50998ff57
[  158.111303][ T5845] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  158.111313][ T5845] RSP: 002b:00007fff700780a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  158.111330][ T5845] RAX: 0000000000000000 RBX: 00007fc509a11c2d RCX: 00007fc50998ff57
[  158.111337][ T5845] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff70078160
[  158.111344][ T5845] RBP: 00007fff70078160 R08: 0000000000000000 R09: 0000000000000000
[  158.111351][ T5845] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff700791f0
[  158.111382][ T5845] R13: 00007fc509a11c2d R14: 0000000000025c61 R15: 00007fff70079230
[  158.111405][ T5845]  </TASK>
[  158.111442][ T5845] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  158.260097][  T795] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  158.426994][  T795] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  158.431443][  T795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.435394][  T795] usb 4-1: Product: syz
[  158.441837][  T795] usb 4-1: Manufacturer: syz
[  158.443913][  T795] usb 4-1: SerialNumber: syz
[  158.767935][ T8203] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.772636][ T8203] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.890379][ T8203] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.899419][ T8203] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.033653][   T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  159.037474][   T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.042653][   T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  159.049419][   T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.061063][   T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  159.067601][   T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.071556][   T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  159.083219][   T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  159.358282][  T795] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  159.373418][  T795] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  159.378269][  T795] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  159.394647][  T795] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  159.404055][ T5313] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  159.414112][  T795] usb 4-1: USB disconnect, device number 4
[  159.564375][    T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  159.575014][ T5313] usb 3-1: Using ep0 maxpacket: 8
[  159.579151][ T5313] usb 3-1: config 0 has an invalid interface number: 145 but max is 0
[  159.582890][ T5313] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  159.587538][ T5313] usb 3-1: config 0 has no interface number 0
[  159.590137][ T5313] usb 3-1: config 0 interface 145 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11
[  159.598150][ T5313] usb 3-1: New USB device found, idVendor=7d72, idProduct=445f, bcdDevice=98.21
[  159.601938][ T5313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.605367][ T5313] usb 3-1: Product: syz
[  159.607612][ T5313] usb 3-1: Manufacturer: syz
[  159.609579][ T5313] usb 3-1: SerialNumber: syz
[  159.613717][ T5313] usb 3-1: config 0 descriptor??
[  159.618149][ T5313] usb 3-1: bad CDC descriptors
[  159.724622][    T9] usb 1-1: Using ep0 maxpacket: 32
[  159.728636][    T9] usb 1-1: config 0 has an invalid interface number: 47 but max is 0
[  159.732046][    T9] usb 1-1: config 0 has no interface number 0
[  159.734724][    T9] usb 1-1: config 0 interface 47 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  159.739083][    T9] usb 1-1: config 0 interface 47 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  159.745784][    T9] usb 1-1: New USB device found, idVendor=08dd, idProduct=90ff, bcdDevice=7b.76
[  159.749673][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.752459][    T9] usb 1-1: Product: syz
[  159.754119][    T9] usb 1-1: Manufacturer: syz
[  159.756102][    T9] usb 1-1: SerialNumber: syz
[  159.760609][    T9] usb 1-1: config 0 descriptor??
[  159.763468][ T8214] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  159.766309][ T8214] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  159.837219][ T5313] usb 3-1: USB disconnect, device number 14
[  160.206465][ T8214] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  160.209764][ T8214] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  160.428295][    T9] asix 1-1:0.47 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  160.440869][    T9] asix 1-1:0.47: probe with driver asix failed with error -71
[  160.454976][    T9] usb 1-1: USB disconnect, device number 14
[  160.556219][ T8234] netlink: 288 bytes leftover after parsing attributes in process `syz.2.907'.
[  160.625299][ T8240] binder: 8239:8240 ioctl c0306201 200000000640 returned -22
[  160.769437][ T8247] loop3: detected capacity change from 0 to 256
[  160.792218][ T8247] FAT-fs (loop3): Directory bread(block 64) failed
[  160.802187][ T8247] FAT-fs (loop3): Directory bread(block 65) failed
[  160.805927][ T8247] FAT-fs (loop3): Directory bread(block 66) failed
[  160.808912][ T8247] FAT-fs (loop3): Directory bread(block 67) failed
[  160.812469][ T8247] FAT-fs (loop3): Directory bread(block 68) failed
[  160.815521][ T8247] FAT-fs (loop3): Directory bread(block 69) failed
[  160.818807][ T8247] FAT-fs (loop3): Directory bread(block 70) failed
[  160.821663][ T8247] FAT-fs (loop3): Directory bread(block 71) failed
[  160.825092][ T8247] FAT-fs (loop3): Directory bread(block 72) failed
[  160.828002][ T8247] FAT-fs (loop3): Directory bread(block 73) failed
[  161.350780][ T8267] loop3: detected capacity change from 0 to 128
[  161.356644][ T8267] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  161.367751][ T8267] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  161.391509][ T8267] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (30846!=65535)
[  161.417388][ T7574] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  161.563703][ T8274] syz_tun: entered allmulticast mode
[  161.931801][   T33] audit: type=1326 audit(1758861549.666:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.3.928" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5800f8ec29 code=0x7ffc0000
[  161.940710][   T33] audit: type=1326 audit(1758861549.666:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.3.928" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5800f8ec29 code=0x7ffc0000
[  161.948213][   T33] audit: type=1326 audit(1758861549.666:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.3.928" exe="/syz-executor" sig=0 arch=c000003e syscall=172 compat=0 ip=0x7f5800f8ec29 code=0x7ffc0000
[  161.955886][   T33] audit: type=1326 audit(1758861549.666:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.3.928" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5800f8ec29 code=0x7ffc0000
[  161.969080][   T33] audit: type=1326 audit(1758861549.666:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.3.928" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5800f8ec29 code=0x7ffc0000
[  162.341721][   T33] audit: type=1326 audit(1758861550.050:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8305 comm="syz.3.939" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5800f8ec29 code=0x7ffc0000
[  162.362490][   T33] audit: type=1326 audit(1758861550.059:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8305 comm="syz.3.939" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5800f8ec29 code=0x7ffc0000
[  162.393847][   T33] audit: type=1326 audit(1758861550.059:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8305 comm="syz.3.939" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5800f8ec29 code=0x7ffc0000
[  162.418455][   T33] audit: type=1326 audit(1758861550.059:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8305 comm="syz.3.939" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5800f8ec29 code=0x7ffc0000
[  162.434089][ T8310] loop0: detected capacity change from 0 to 256
[  162.455252][ T8310] FAT-fs (loop0): Directory bread(block 64) failed
[  162.458141][ T8310] FAT-fs (loop0): Directory bread(block 65) failed
[  162.461086][ T8310] FAT-fs (loop0): Directory bread(block 66) failed
[  162.464359][ T8310] FAT-fs (loop0): Directory bread(block 67) failed
[  162.474976][ T8310] FAT-fs (loop0): Directory bread(block 68) failed
[  162.477887][ T8310] FAT-fs (loop0): Directory bread(block 69) failed
[  162.480827][ T8310] FAT-fs (loop0): Directory bread(block 70) failed
[  162.491417][ T8310] FAT-fs (loop0): Directory bread(block 71) failed
[  162.498790][ T8310] FAT-fs (loop0): Directory bread(block 72) failed
[  162.501686][ T8310] FAT-fs (loop0): Directory bread(block 73) failed
[  162.540909][ T8298] loop2: detected capacity change from 0 to 32768
[  162.558573][ T8298] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.935 (8298)
[  162.575067][ T8298] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  162.583095][ T8298] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  162.622338][ T8298] BTRFS info (device loop2): enabling ssd optimizations
[  162.633127][ T8298] BTRFS info (device loop2): enabling free space tree
[  162.672639][ T5850] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  162.881091][ T8349] gfs2: path_lookup on tmpfs returned error -2
[  164.088977][ T8369] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode
[  164.092485][ T8369] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode
[  164.801977][ T8373] loop2: detected capacity change from 0 to 32768
[  165.455015][ T8398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.972'.
[  165.459223][ T8398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.972'.
[  166.632322][ T5909] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  166.801749][ T5909] usb 3-1: Using ep0 maxpacket: 32
[  166.806768][ T5909] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  166.810132][ T5909] usb 3-1: config 0 has no interface number 0
[  166.821499][ T5909] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  166.825609][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.829191][ T5909] usb 3-1: Product: syz
[  166.831124][ T5909] usb 3-1: Manufacturer: syz
[  166.833355][ T5909] usb 3-1: SerialNumber: syz
[  166.839404][ T5909] usb 3-1: config 0 descriptor??
[  166.853145][ T5909] smsc95xx v2.0.0
[  167.282083][ T5909] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  167.286956][ T5909] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  168.078746][   T33] audit: type=1326 audit(1758861555.419:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.3.995" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5800f8ec29 code=0x0
[  168.330932][   T51] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  168.503884][   T51] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  168.508169][   T51] usb 1-1: config 0 interface 0 has no altsetting 0
[  168.510470][   T51] usb 1-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00
[  168.513869][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.518565][   T51] usb 1-1: config 0 descriptor??
[  168.796715][ T5909] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71
[  168.800998][ T5909] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  168.805811][ T5909] usb 3-1: USB disconnect, device number 15
[  168.957657][   T51] holtek_mouse 0003:04D9:A072.0005: unknown main item tag 0x0
[  168.960473][   T51] holtek_mouse 0003:04D9:A072.0005: unknown main item tag 0x0
[  168.964201][   T51] holtek_mouse 0003:04D9:A072.0005: unknown main item tag 0x0
[  168.966846][   T51] holtek_mouse 0003:04D9:A072.0005: unknown main item tag 0x0
[  168.969854][   T51] holtek_mouse 0003:04D9:A072.0005: unknown main item tag 0x0
[  168.973273][   T51] holtek_mouse 0003:04D9:A072.0005: unknown main item tag 0x0
[  168.976426][   T51] holtek_mouse 0003:04D9:A072.0005: unknown main item tag 0x0
[  168.983114][   T51] holtek_mouse 0003:04D9:A072.0005: hidraw0: USB HID v0.00 Device [HID 04d9:a072] on usb-dummy_hcd.0-1/input0
[  169.172268][   T51] usb 1-1: USB disconnect, device number 15
[  169.349621][ T8460] overlayfs: failed to clone upperpath
[  169.365721][ T8460] overlayfs: failed to clone upperpath
[  169.714160][ T8485] loop2: detected capacity change from 0 to 256
[  169.740488][   T33] audit: type=1800 audit(1758861556.963:130): pid=8485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1013" name="file1" dev="loop2" ino=1048620 res=0 errno=0
[  170.002025][   T33] audit: type=1326 audit(1758861557.215:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8498 comm="syz.0.1020" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc50998ec29 code=0x0
[  170.186595][ T8506] loop2: detected capacity change from 0 to 256
[  170.196340][ T8506] exfat: Deprecated parameter 'utf8'
[  170.198557][ T8506] exfat: Deprecated parameter 'utf8'
[  170.201502][ T8506] exfat: Deprecated parameter 'utf8'
[  170.211561][ T8506] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  170.488504][ T8516] loop2: detected capacity change from 0 to 4096
[  170.491953][ T8516] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  170.495545][ T8516] ntfs3(loop2): ino=3, mi_enum_attr
[  170.568363][  T795] IPVS: starting estimator thread 0...
[  170.640489][ T8529] trusted_key: syz.3.1034 sent an empty control message without MSG_MORE.
[  170.664231][ T8520] IPVS: using max 82 ests per chain, 196800 per kthread
[  170.928357][  T795] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  171.337064][  T795] usb 3-1: config 2 has an invalid interface number: 183 but max is 0
[  171.340633][  T795] usb 3-1: config 2 has no interface number 0
[  171.343555][  T795] usb 3-1: config 2 interface 183 has no altsetting 0
[  171.351412][  T795] usb 3-1: New USB device found, idVendor=0d49, idProduct=7310, bcdDevice=58.ae
[  171.355641][  T795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.359699][  T795] usb 3-1: Product: syz
[  171.361537][  T795] usb 3-1: Manufacturer: syz
[  171.363496][  T795] usb 3-1: SerialNumber: syz
[  171.823527][  T795] usb-storage 3-1:2.183: USB Mass Storage device detected
[  171.847947][  T795] usb-storage 3-1:2.183: Quirks match for vid 0d49 pid 7310: 8000
[  171.931892][  T795] usb 3-1: USB disconnect, device number 16
[  172.064683][   T33] audit: type=1326 audit(1758861559.142:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8566 comm="syz.3.1050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5800f8ec29 code=0x7ffc0000
[  172.073779][   T33] audit: type=1326 audit(1758861559.142:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8566 comm="syz.3.1050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5800f8ec29 code=0x7ffc0000
[  172.083488][   T33] audit: type=1326 audit(1758861559.142:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8566 comm="syz.3.1050" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5800f8ec29 code=0x7ffc0000
[  172.095229][   T33] audit: type=1326 audit(1758861559.142:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8566 comm="syz.3.1050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5800f8ec29 code=0x7ffc0000
[  172.104566][   T33] audit: type=1326 audit(1758861559.142:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8566 comm="syz.3.1050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5800f8ec29 code=0x7ffc0000
[  172.116235][   T33] audit: type=1326 audit(1758861559.142:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8566 comm="syz.3.1050" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5800f8ec29 code=0x7ffc0000
[  172.128256][   T33] audit: type=1326 audit(1758861559.142:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8566 comm="syz.3.1050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5800f8ec29 code=0x7ffc0000
[  172.375542][ T8583] loop0: detected capacity change from 0 to 764
[  172.459727][ T8586] Symlink component flag not implemented
[  172.462668][ T8586] Symlink component flag not implemented (116)
[  172.478545][  T795] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  172.673935][  T795] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02
[  172.678488][  T795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.682225][  T795] usb 3-1: Product: syz
[  172.684282][  T795] usb 3-1: Manufacturer: syz
[  172.686594][  T795] usb 3-1: SerialNumber: syz
[  172.696845][  T795] usb 3-1: config 0 descriptor??
[  172.941703][  T795] hso 3-1:0.0: Failed to find BULK IN ep
[  173.154842][   T51] usb 3-1: USB disconnect, device number 17
[  173.743413][ T8602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1067'.
[  173.747197][ T8602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1067'.
[  173.796989][ T8606] loop0: detected capacity change from 0 to 512
[  173.817596][ T8606] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  173.821030][ T8606] System zones: 1-12
[  173.827918][ T8606] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1069: invalid indirect mapped block 8 (level 2)
[  173.828227][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1070'.
[  173.838738][ T8606] EXT4-fs (loop0): 1 truncate cleaned up
[  173.842366][ T8606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.865806][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1070'.
[  173.880238][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1070'.
[  173.889962][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.321612][ T8632] loop2: detected capacity change from 0 to 32768
[  174.322721][ T8636] loop0: detected capacity change from 0 to 2048
[  174.326270][ T8632] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1082 (8632)
[  174.334759][ T8632] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  174.339282][ T8632] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  174.428578][ T8651] loop0: detected capacity change from 0 to 256
[  174.430560][ T8632] BTRFS info (device loop2): enabling ssd optimizations
[  174.434282][ T8632] BTRFS info (device loop2): enabling free space tree
[  175.059103][ T8656] syz.2.1082 (8656) used greatest stack depth: 19544 bytes left
[  175.090059][ T8655] loop0: detected capacity change from 0 to 32768
[  175.134101][ T8655] (syz.0.1085,8655,0):ocfs2_verify_heartbeat:830 ERROR: Mismatching o2cb heartbeat modes
[  175.139999][ T8655] (syz.0.1085,8655,0):ocfs2_fill_super:1177 ERROR: status = -22
[  175.917461][ T5850] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  177.096787][  T795] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  177.272740][  T795] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  177.276609][  T795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.290341][  T795] usb 3-1: Product: syz
[  177.292310][  T795] usb 3-1: Manufacturer: syz
[  177.294467][  T795] usb 3-1: SerialNumber: syz
[  177.523552][  T795] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  177.529716][  T795] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  177.537215][  T795] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  177.547705][  T795] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  177.560661][ T8724] overlayfs: failed to clone upperpath
[  177.563042][  T795] usb 3-1: USB disconnect, device number 18
[  177.590225][ T8720] loop0: detected capacity change from 0 to 32768
[  177.594421][ T8720] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1116 (8720)
[  177.603884][ T8720] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  177.608657][ T8720] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  177.613154][ T8726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1119'.
[  177.651936][ T8720] BTRFS info (device loop0): enabling ssd optimizations
[  177.655210][ T8720] BTRFS info (device loop0): enabling free space tree
[  177.698534][   T13] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  177.759749][ T8720] syz.0.1116 (8720) used greatest stack depth: 17880 bytes left
[  177.788167][ T5845] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  177.937126][ T8745] loop0: detected capacity change from 0 to 128
[  177.946863][ T8745] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  177.954911][ T8745] hpfs: filesystem error: improperly stopped
[  177.957739][ T8745] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  177.960985][ T8745] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[  177.966048][ T8745] hpfs: You really don't want any checks? You are crazy...
[  177.969567][ T8745] hpfs: hpfs_map_sector(): read error
[  177.971848][ T8745] hpfs: code page support is disabled
[  177.976284][ T8745] hpfs: hpfs_map_4sectors(): unaligned read
[  177.979197][ T8745] hpfs: hpfs_map_4sectors(): unaligned read
[  177.981884][ T8745] hpfs: filesystem error: unable to find root dir
[  178.177852][ T8759] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1128'.
[  178.998000][ T8789] netlink: 'syz.3.1141': attribute type 2 has an invalid length.
[  179.001178][ T8789] netlink: 'syz.3.1141': attribute type 2 has an invalid length.
[  179.538558][ T8801] loop0: detected capacity change from 0 to 4096
[  179.541562][ T8801] ntfs3: Unknown parameter 'nohide_dot_files'
[  180.038483][ T8823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1157'.
[  180.042747][ T8823] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1157'.
[  180.260046][ T8833] netlink: 'syz.3.1162': attribute type 1 has an invalid length.
[  180.301430][ T8833] vlan2: entered allmulticast mode
[  180.303749][ T8833] bridge0: entered allmulticast mode
[  180.321990][ T8833] bond1: (slave vlan2): making interface the new active one
[  180.327086][ T8833] bond1: (slave vlan2): Enslaving as an active interface with an up link
[  180.496850][  T795] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  180.661200][  T795] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  180.666006][  T795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  180.670916][  T795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  180.675889][  T795] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  180.681642][  T795] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  180.685579][  T795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.693122][  T795] usb 1-1: config 0 descriptor??
[  180.695995][ T8831] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  180.817327][  T794] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  180.977443][  T794] usb 3-1: Using ep0 maxpacket: 16
[  180.984032][  T794] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  180.990801][  T794] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  180.998385][  T794] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  181.002647][  T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.006983][  T794] usb 3-1: Product: syz
[  181.008926][  T794] usb 3-1: Manufacturer: syz
[  181.011868][  T794] usb 3-1: SerialNumber: syz
[  181.134737][  T795] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd
[  181.141085][  T795] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  181.238913][  T794] usb 3-1: 0:2 : does not exist
[  181.250706][  T794] usb 3-1: USB disconnect, device number 19
[  181.428382][ T5895] usb 1-1: USB disconnect, device number 16
[  182.213581][ T8919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1202'.
[  182.262364][ T8925] netlink: 'syz.3.1204': attribute type 2 has an invalid length.
[  182.268593][ T8925] netlink: 'syz.3.1204': attribute type 1 has an invalid length.
[  182.276264][ T8925] netlink: 'syz.3.1204': attribute type 1 has an invalid length.
[  182.635268][ T8944] loop2: detected capacity change from 0 to 4096
[  182.665088][ T8944] ntfs3(loop2): ino=19, mi_enum_attr
[  182.667317][ T8944] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  182.963233][ T8968] loop0: detected capacity change from 0 to 1024
[  183.910580][   T28] hfsplus: b-tree write err: -5, ino 4
[  183.942763][ T8972] loop0: detected capacity change from 0 to 512
[  183.945832][ T8972] EXT4-fs: Ignoring removed mblk_io_submit option
[  183.948746][ T8972] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  183.955835][ T8972] EXT4-fs (loop0): 1 truncate cleaned up
[  183.959465][ T8972] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.996292][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.543734][ T8991] .4XT: renamed from wg2 (while UP)
[  185.790952][ T9017] new mount options do not match the existing superblock, will be ignored
[  186.076931][ T5909] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  186.258560][ T5909] usb 1-1: Using ep0 maxpacket: 16
[  186.263106][ T5909] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  186.267889][ T5909] usb 1-1: config 0 interface 0 has no altsetting 0
[  186.270978][ T5909] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  186.275061][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.281630][ T5909] usb 1-1: config 0 descriptor??
[  186.478496][ T9019] netlink: 750 bytes leftover after parsing attributes in process `syz.3.1246'.
[  186.678274][ T9031] loop2: detected capacity change from 0 to 1024
[  186.736385][ T5909] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0
[  186.786962][ T9037] all: renamed from lo (while UP)
[  187.134683][ T9050] netlink: 'syz.3.1260': attribute type 1 has an invalid length.
[  187.165825][ T5895] usb 1-1: USB disconnect, device number 17
[  187.984942][ T9056] loop0: detected capacity change from 0 to 40427
[  187.988955][ T9056] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  187.993032][ T9056] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  188.000126][ T9056] F2FS-fs (loop0): invalid crc value
[  188.056338][ T9056] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  188.061833][ T9056] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  188.064984][ T9056] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  188.867061][ T9080] loop2: detected capacity change from 0 to 164
[  188.880338][ T9080] iso9660: Corrupted directory entry in block 2 of inode 1920
[  189.622749][ T9135] loop2: detected capacity change from 0 to 1024
[  190.140780][ T9146] netlink: 'syz.2.1302': attribute type 1 has an invalid length.
[  190.150665][ T9146] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1302'.
[  190.161507][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1302'.
[  190.409104][ T9153] loop2: detected capacity change from 0 to 2048
[  190.433569][ T9153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.467220][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.049212][ T9174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1312'.
[  191.099587][ T9179] netlink: 'syz.0.1314': attribute type 1 has an invalid length.
[  191.104312][ T9179] netlink: 'syz.0.1314': attribute type 1 has an invalid length.
[  192.070729][ T9217] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1329'.
[  192.522710][ T9236] loop2: detected capacity change from 0 to 2048
[  192.531775][ T9236] NILFS (loop2): invalid segment: Magic number mismatch
[  192.535513][ T9236] NILFS (loop2): trying rollback from an earlier position
[  192.549443][ T9236] NILFS (loop2): recovery complete
[  192.574290][ T9237] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  192.785522][ T9232] loop0: detected capacity change from 0 to 32768
[  192.841811][ T9232] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  192.905660][ T9232] XFS (loop0): Ending clean mount
[  192.918058][ T9232] XFS (loop0): Quotacheck needed: Please wait.
[  192.981176][ T9232] XFS (loop0): Quotacheck: Done.
[  193.065111][ T9263] sctp: [Deprecated]: syz.2.1346 (pid 9263) Use of struct sctp_assoc_value in delayed_ack socket option.
[  193.065111][ T9263] Use struct sctp_sack_info instead
[  193.066842][ T5845] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  193.238551][ T9269] loop0: detected capacity change from 0 to 512
[  193.243602][ T9269] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  193.251838][ T9269] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1347: iget: bad i_size value: 38620345925642
[  193.268776][ T9269] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1347: couldn't read orphan inode 15 (err -117)
[  193.275877][ T9269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.741268][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.825146][ T9310] loop2: detected capacity change from 0 to 64
[  194.911630][ T9322] Bluetooth: MGMT ver 1.23
[  195.564265][ T9371] loop2: detected capacity change from 0 to 32768
[  195.567804][ T9371] btrfs: Unknown parameter 'ref_verify'
[  196.140977][ T9397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1406'.
[  196.355200][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1412'.
[  196.424143][ T9411] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1413'.
[  196.493383][ T9415] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1415'.
[  196.540339][ T9417] loop0: detected capacity change from 0 to 1024
[  196.565349][ T9417] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.570517][ T9417] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.731640][ T5853] Bluetooth: hci0: command 0x0406 tx timeout
[  196.734464][ T5853] Bluetooth: hci1: command 0x0406 tx timeout
[  196.830412][ T9429] erspan1: entered allmulticast mode
[  198.299696][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.482737][ T9493] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode
[  198.486550][ T9493] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode
[  198.706241][ T9496] ptrace attach of "/syz-executor exec"[9498] was attempted by "/syz-executor exec"[9496]
[  199.357014][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  199.357033][   T33] audit: type=1326 audit(1758861584.678:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9518 comm="syz.0.1460" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50998ec29 code=0x7ffc0000
[  199.385337][   T33] audit: type=1326 audit(1758861584.688:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9518 comm="syz.0.1460" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50998ec29 code=0x7ffc0000
[  199.423663][   T33] audit: type=1326 audit(1758861584.688:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9518 comm="syz.0.1460" exe="/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fc50998ec29 code=0x7ffc0000
[  199.456849][   T33] audit: type=1326 audit(1758861584.688:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9518 comm="syz.0.1460" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50998ec29 code=0x7ffc0000
[  199.501465][   T33] audit: type=1326 audit(1758861584.688:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9518 comm="syz.0.1460" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50998ec29 code=0x7ffc0000
[  199.531012][   T33] audit: type=1326 audit(1758861584.688:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9518 comm="syz.0.1460" exe="/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7fc50998ec29 code=0x7ffc0000
[  199.557085][   T33] audit: type=1326 audit(1758861584.688:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9518 comm="syz.0.1460" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50998ec29 code=0x7ffc0000
[  199.585614][   T33] audit: type=1326 audit(1758861584.688:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9518 comm="syz.0.1460" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc50998ec29 code=0x7ffc0000
[  199.847837][ T5895] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  199.964691][ T9550] loop2: detected capacity change from 0 to 2048
[  199.968461][ T9550] nilfs2: Bad value for 'cp'
[  199.981717][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  199.984576][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  200.040991][ T5895] usb 1-1: config 32 has an invalid interface number: 251 but max is 0
[  200.048064][ T5895] usb 1-1: config 32 has no interface number 0
[  200.065987][ T5895] usb 1-1: config 32 interface 251 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024
[  200.073079][ T5895] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=6f.ea
[  200.084680][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.088169][ T5895] usb 1-1: Product: syz
[  200.090550][ T5895] usb 1-1: Manufacturer: syz
[  200.093571][ T5895] usb 1-1: SerialNumber: syz
[  200.104245][ T9526] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  200.109623][ T5895] iowarrior 1-1:32.251: no interrupt-in endpoint found
[  200.303889][ T9561] veth0_to_bridge: entered promiscuous mode
[  200.331932][ T5895] usb 1-1: USB disconnect, device number 18
[  201.255531][ T9558] veth0_to_bridge: left promiscuous mode
[  202.355520][ T9592] kAFS: unable to lookup cell '.,'
[  202.408593][ T9582] loop0: detected capacity change from 0 to 32768
[  202.414508][ T9582] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section members_v2: device 0: not enough buckets (got 0, max 64)
[  202.414508][ T9582] members_v2 (size 152):
[  202.414508][ T9582] nr_devices mismatch: have 17 entries, should be 1Device:0
[  202.414508][ T9582]   Label:                       (none)
[  202.414508][ T9582]   UUID:                        7af6772b-00de-4159-0000-000000000000
[  202.414508][ T9582]   Size:                        0
[  202.414508][ T9582]   read errors:                 0
[  202.414508][ T9582]   write errors:                0
[  202.414508][ T9582]   checksum errors:             0
[  202.414508][ T9582]   seqread iops:                0
[  202.414508][ T9582]   seqwrite iops:               0
[  202.414508][ T9582]   randread iops:               0
[  202.414508][ T9582]   randwrite iops:              0
[  202.414508][ T9582]   Bucket size:                 0
[  202.414508][ T9582]   First bucket:                0
[  202.414508][ T9582]   Buckets:                     0
[  202.414508][ T9582]   Last mount:                  (never)
[  202.414508][ T9582]   Last superblock write:       0
[  202.414508][ T9582]   State:                       rw
[  202.414508][ T9582]   Data allowed:                (none)
[  202.414508][ T9582]   Has data:                    btree,user
[  202.414508][ T9582]   Btree allocated bitmap blocksize:1
[  202.414508][ T9582]   Btree allocated bitmap:      0000000000000000000000000000000000000000000000000000000000000000
[  202.414508][ T9582]   Durability:   
[  202.414600][ T9582] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  203.063920][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1501'.
[  203.427041][ T9633] ieee802154 phy0 wpan0: encryption failed: -22
[  204.105576][ T9643] loop2: detected capacity change from 0 to 32768
[  204.108642][ T9643] xfs: Unknown parameter 'ikeep'
[  205.381050][ T9662] loop2: detected capacity change from 0 to 128
[  205.390507][ T9662] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  205.397574][ T9662] ext4 filesystem being mounted at /517/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  205.508746][ T5850] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  206.145546][   T51] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  206.314301][   T51] usb 3-1: Using ep0 maxpacket: 8
[  206.318444][   T51] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  206.322188][   T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.327505][   T51] usb 3-1: config 0 descriptor??
[  206.331970][   T51] uvcvideo 3-1:0.0: probe with driver uvcvideo failed with error -22
[  206.454380][  T795] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  206.537592][ T9701] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1536'.
[  206.555767][ T5909] usb 3-1: USB disconnect, device number 20
[  206.626021][  T795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.633519][  T795] usb 1-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[  206.637508][  T795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.643153][  T795] usb 1-1: config 0 descriptor??
[  206.787109][ T9711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1541'.
[  207.094125][  T795] hid_mf 0003:0079:1846.0008: unknown main item tag 0x4
[  207.104944][  T795] hid_mf 0003:0079:1846.0008: item fetching failed at offset 6/7
[  207.108061][  T795] hid_mf 0003:0079:1846.0008: HID parse failed.
[  207.110577][  T795] hid_mf 0003:0079:1846.0008: probe with driver hid_mf failed with error -22
[  207.306846][   T51] usb 1-1: USB disconnect, device number 19
[  207.416288][  T795] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  207.578092][  T795] usb 3-1: not running at top speed; connect to a high speed hub
[  207.582335][  T795] usb 3-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  207.587158][  T795] usb 3-1: config 1 interface 0 has no altsetting 0
[  207.591618][  T795] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40
[  207.595109][  T795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.598575][  T795] usb 3-1: Product: syz
[  207.600279][  T795] usb 3-1: Manufacturer: syz
[  207.601864][  T795] usb 3-1: SerialNumber: syz
[  207.825813][  T795] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input9
[  207.835768][ T5280] bcm5974 3-1:1.0: could not read from device
[  207.841009][ T5280] bcm5974 3-1:1.0: could not read from device
[  207.842161][  T795] usb 3-1: USB disconnect, device number 21
[  208.170502][ T9741] Invalid source name
[  208.300579][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1562'.
[  209.286837][ T5909] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  209.446583][ T5909] usb 1-1: Using ep0 maxpacket: 16
[  209.452286][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  209.461650][ T5909] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  209.465271][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.475031][ T5909] usb 1-1: config 0 descriptor??
[  209.546565][ T9801] loop2: detected capacity change from 0 to 256
[  209.557374][ T9801] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  209.561715][ T9801] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  209.570520][ T9801] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  209.578947][ T9801] exFAT-fs (loop2): failed to load alloc-bitmap
[  209.581808][ T9801] exFAT-fs (loop2): failed to recognize exfat type
[  209.679838][ T9802] loop2: detected capacity change from 0 to 64
[  209.940364][ T5909] kye 0003:0458:5016.0009: control desc unexpectedly large
[  209.948658][ T5909] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0009/input/input10
[  209.962829][ T5909] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0009/input/input11
[  210.045374][ T5909] kye 0003:0458:5016.0009: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0
[  210.152057][   T51] usb 1-1: USB disconnect, device number 20
[  210.251853][ T9808] overlayfs: failed to clone upperpath
[  211.477825][   T51] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[  211.611613][ T9833] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[  211.641233][   T51] usb 1-1: config 75 has an invalid interface number: 204 but max is 5
[  211.644965][   T51] usb 1-1: config 75 has an invalid descriptor of length 0, skipping remainder of the config
[  211.649468][   T51] usb 1-1: config 75 has 1 interface, different from the descriptor's value: 6
[  211.653137][   T51] usb 1-1: config 75 has no interface number 0
[  211.655856][   T51] usb 1-1: config 75 interface 204 has no altsetting 0
[  211.668347][   T51] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  211.672386][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.675725][   T51] usb 1-1: Product: syz
[  211.677629][   T51] usb 1-1: Manufacturer: syz
[  211.679569][   T51] usb 1-1: SerialNumber: syz
[  211.913556][   T51] xr_serial 1-1:75.204: skipping garbage
[  211.917921][   T51] usb 1-1: USB disconnect, device number 21
[  212.329349][ T9839] loop2: detected capacity change from 0 to 40427
[  212.385740][ T9839] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  212.396404][ T9839] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  212.665245][ T9854] syz.2.1600: attempt to access beyond end of device
[  212.665245][ T9854] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  212.683409][ T9854] F2FS-fs (loop2): access invalid blkaddr:2048
[  212.686155][ T9854] CPU: 0 UID: 0 PID: 9854 Comm: syz.2.1600 Not tainted syzkaller #0 PREEMPT(full) 
[  212.686170][ T9854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  212.686191][ T9854] Call Trace:
[  212.686196][ T9854]  <TASK>
[  212.686201][ T9854]  dump_stack_lvl+0x189/0x250
[  212.686220][ T9854]  ? __pfx_dump_stack_lvl+0x10/0x10
[  212.686231][ T9854]  ? __pfx_f2fs_get_dnode_of_data+0x10/0x10
[  212.686243][ T9854]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  212.686254][ T9854]  ? lockdep_hardirqs_on+0x9c/0x150
[  212.686265][ T9854]  __f2fs_is_valid_blkaddr+0xe52/0x14f0
[  212.686281][ T9854]  f2fs_map_blocks+0xd84/0x4130
[  212.686309][ T9854]  ? __pfx_f2fs_map_blocks+0x10/0x10
[  212.686328][ T9854]  ? xa_load+0x1ea/0x210
[  212.686345][ T9854]  f2fs_mpage_readpages+0xc1b/0x1ba0
[  212.686367][ T9854]  ? __pfx_f2fs_mpage_readpages+0x10/0x10
[  212.686383][ T9854]  ? __folio_batch_add_and_move+0x192/0xc60
[  212.686401][ T9854]  ? f2fs_readahead+0x177/0x330
[  212.686412][ T9854]  read_pages+0x17a/0x580
[  212.686422][ T9854]  ? __pfx_read_pages+0x10/0x10
[  212.686432][ T9854]  ? filemap_add_folio+0x35f/0x540
[  212.686443][ T9854]  page_cache_ra_unbounded+0x75e/0x9a0
[  212.686460][ T9854]  f2fs_readdir+0x49b/0xa60
[  212.686479][ T9854]  ? __pfx_f2fs_readdir+0x10/0x10
[  212.686488][ T9854]  ? lock_acquire+0x175/0x360
[  212.686506][ T9854]  ? down_read_killable+0x1d1/0x350
[  212.686519][ T9854]  iterate_dir+0x399/0x570
[  212.686533][ T9854]  __se_sys_getdents+0xe4/0x250
[  212.686545][ T9854]  ? __pfx___se_sys_getdents+0x10/0x10
[  212.686555][ T9854]  ? __pfx_filldir+0x10/0x10
[  212.686565][ T9854]  ? do_syscall_64+0xbe/0xfa0
[  212.686576][ T9854]  do_syscall_64+0xfa/0xfa0
[  212.686586][ T9854]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.686593][ T9854]  ? asm_sysvec_call_function_single+0x1a/0x20
[  212.686603][ T9854]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  212.686610][ T9854] RIP: 0033:0x7fe814f8ec29
[  212.686619][ T9854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  212.686662][ T9854] RSP: 002b:00007fe815e13038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  212.686673][ T9854] RAX: ffffffffffffffda RBX: 00007fe8151d6180 RCX: 00007fe814f8ec29
[  212.686680][ T9854] RDX: 00000000000000b8 RSI: 0000200000001fc0 RDI: 0000000000000009
[  212.686686][ T9854] RBP: 00007fe815011e41 R08: 0000000000000000 R09: 0000000000000000
[  212.686691][ T9854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  212.686696][ T9854] R13: 00007fe8151d6218 R14: 00007fe8151d6180 R15: 00007ffd327933b8
[  212.686710][ T9854]  </TASK>
[  213.315740][ T9854] syz.2.1600: attempt to access beyond end of device
[  213.315740][ T9854] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  213.322684][ T9854] syz.2.1600: attempt to access beyond end of device
[  213.322684][ T9854] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  213.405552][ T5850] syz-executor: attempt to access beyond end of device
[  213.405552][ T5850] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  213.420487][ T5850] CPU: 1 UID: 0 PID: 5850 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  213.420505][ T5850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.420510][ T5850] Call Trace:
[  213.420514][ T5850]  <TASK>
[  213.420518][ T5850]  dump_stack_lvl+0x189/0x250
[  213.420535][ T5850]  ? __pfx_dump_stack_lvl+0x10/0x10
[  213.420544][ T5850]  ? __pfx_queue_work_on+0x10/0x10
[  213.420552][ T5850]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  213.420564][ T5850]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  213.420577][ T5850]  f2fs_handle_critical_error+0x37c/0x540
[  213.420591][ T5850]  f2fs_write_end_io+0x886/0xb60
[  213.420610][ T5850]  __submit_merged_bio+0x27a/0x6a0
[  213.420654][ T5850]  __submit_merged_write_cond+0x255/0x530
[  213.420666][ T5850]  f2fs_write_data_pages+0x261d/0x3000
[  213.420690][ T5850]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  213.420717][ T5850]  ? stack_trace_save+0x9c/0xe0
[  213.420726][ T5850]  ? __pfx_stack_trace_save+0x10/0x10
[  213.420740][ T5850]  ? kasan_save_stack+0x4d/0x60
[  213.420748][ T5850]  ? kasan_save_stack+0x3e/0x60
[  213.420754][ T5850]  ? kasan_record_aux_stack+0xbd/0xd0
[  213.420768][ T5850]  ? __lock_acquire+0xab9/0xd20
[  213.420784][ T5850]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  213.420795][ T5850]  do_writepages+0x32e/0x550
[  213.420812][ T5850]  ? do_raw_spin_unlock+0x4d/0x240
[  213.420822][ T5850]  filemap_fdatawrite+0x199/0x240
[  213.420835][ T5850]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  213.420862][ T5850]  ? do_raw_spin_unlock+0x4d/0x240
[  213.420872][ T5850]  f2fs_sync_dirty_inodes+0x31f/0x830
[  213.420890][ T5850]  f2fs_write_checkpoint+0x93e/0x2440
[  213.420900][ T5850]  ? __lock_acquire+0xab9/0xd20
[  213.420919][ T5850]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  213.420950][ T5850]  kill_f2fs_super+0x2cc/0x6d0
[  213.420964][ T5850]  ? __pfx_kill_f2fs_super+0x10/0x10
[  213.420981][ T5850]  ? shrinker_free+0x2ce/0x3e0
[  213.420993][ T5850]  deactivate_locked_super+0xbc/0x130
[  213.421006][ T5850]  cleanup_mnt+0x425/0x4c0
[  213.421017][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.421036][ T5850]  task_work_run+0x1d4/0x260
[  213.421047][ T5850]  ? __pfx_task_work_run+0x10/0x10
[  213.421055][ T5850]  ? __x64_sys_umount+0x122/0x160
[  213.421063][ T5850]  ? exit_to_user_mode_loop+0x40/0x130
[  213.421075][ T5850]  exit_to_user_mode_loop+0xe9/0x130
[  213.421085][ T5850]  do_syscall_64+0x2bd/0xfa0
[  213.421096][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.421105][ T5850]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.421112][ T5850]  ? exc_page_fault+0xab/0x100
[  213.421122][ T5850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  213.421130][ T5850] RIP: 0033:0x7fe814f8ff57
[  213.421138][ T5850] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  213.421145][ T5850] RSP: 002b:00007ffd32792648 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  213.421155][ T5850] RAX: 0000000000000000 RBX: 00007fe815011c2d RCX: 00007fe814f8ff57
[  213.421160][ T5850] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd32792700
[  213.421164][ T5850] RBP: 00007ffd32792700 R08: 0000000000000000 R09: 0000000000000000
[  213.421169][ T5850] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd32793790
[  213.421173][ T5850] R13: 00007fe815011c2d R14: 000000000003256e R15: 00007ffd327937d0
[  213.421186][ T5850]  </TASK>
[  213.421190][ T5850] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  213.811527][ T9864] binder: 9858:9864 ioctl c0306201 200000000780 returned -11
[  213.829733][ T9864] loop0: detected capacity change from 0 to 128
[  213.891530][ T9864] virtio-fs: tag </dev/md0> not found
[  214.196737][   T33] audit: type=1326 audit(1758861598.560:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.3.1610" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5800f8ec29 code=0x0
[  215.268013][ T9884] loop0: detected capacity change from 0 to 1024
[  215.271798][ T9884] EXT4-fs: Ignoring removed orlov option
[  215.290774][ T9884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  215.297324][ T9884] ext4 filesystem being mounted at /517/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.314164][   T33] audit: type=1800 audit(1758861599.598:149): pid=9884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1614" name="file1" dev="loop0" ino=15 res=0 errno=0
[  215.325979][ T9884] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.1614: lblock 0 mapped to illegal pblock 0 (length 1)
[  215.327100][   T33] audit: type=1800 audit(1758861599.598:150): pid=9884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1614" name="file1" dev="loop0" ino=15 res=0 errno=0
[  215.336080][ T9884] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  215.344206][ T9884] EXT4-fs (loop0): This should not happen!! Data will be lost
[  215.344206][ T9884] 
[  215.350327][ T9884] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.1614: lblock 0 mapped to illegal pblock 0 (length 1)
[  215.363495][ T9884] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  215.368805][ T9884] EXT4-fs (loop0): This should not happen!! Data will be lost
[  215.368805][ T9884] 
[  215.404013][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  216.096241][  T795] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  216.258010][  T795] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  216.262236][  T795] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  216.266432][  T795] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  216.270345][  T795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.275760][ T9930] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  216.280277][  T795] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  216.503606][   T51] usb 1-1: USB disconnect, device number 22
[  216.786200][ T9948] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  217.014992][ T9962] netlink: 'syz.2.1650': attribute type 10 has an invalid length.
[  217.040929][ T9964] raw_sendmsg: syz.3.1651 forgot to set AF_INET. Fix it!
[  217.098224][ T9968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1653'.
[  217.258172][ T9980] loop0: detected capacity change from 0 to 1024
[  217.290711][ T9980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.304199][ T9980] ext4 filesystem being mounted at /528/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  217.324693][ T9980] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1658: bg 0: block 393: padding at end of block bitmap is not set
[  217.333202][ T9980] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117
[  217.340588][ T9980] EXT4-fs (loop0): This should not happen!! Data will be lost
[  217.340588][ T9980] 
[  217.372705][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.443985][ T9985] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1659'.
[  217.447870][ T9985] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1659'.
[  217.560460][ T9993] loop0: detected capacity change from 0 to 512
[  217.677884][T10003] loop0: detected capacity change from 0 to 1024
[  217.705961][T10003] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.806166][   T33] audit: type=1800 audit(1758861601.918:151): pid=10006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1667" name="file1" dev="loop0" ino=15 res=0 errno=0
[  217.849924][T10003] loop0: detected capacity change from 1024 to 64
[  217.871322][ T5845] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  217.877524][ T5845] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  217.883802][ T5845] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  217.898132][ T5845] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  217.907532][ T5845] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  217.916519][ T5845] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  217.924921][ T5845] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  217.936434][ T5845] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  217.976762][ T5845] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  217.983997][ T5845] EXT4-fs warning (device loop0): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  218.214069][ T7109] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.233401][T10004] kmmpd-loop0: attempt to access beyond end of device
[  218.233401][T10004] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64
[  218.240402][T10004] Buffer I/O error on dev loop0, logical block 64, lost sync page write
[  218.650433][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  218.654282][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  218.658121][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  218.661931][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  218.664677][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  218.711714][T10028] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1679'.
[  218.741332][   T13] bridge_slave_1: left allmulticast mode
[  218.744650][   T13] bridge_slave_1: left promiscuous mode
[  218.746504][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.753823][   T13] bridge_slave_0: left allmulticast mode
[  218.755941][   T13] bridge_slave_0: left promiscuous mode
[  218.759849][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.001778][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  219.007062][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  219.011608][   T13] bond0 (unregistering): Released all slaves
[  219.080955][   T13] tipc: Disabling bearer <udp:s>
[  219.100891][   T13] tipc: Disabling bearer <udp:syz2>
[  219.104009][   T13] tipc: Left network mode
[  219.340751][T10050] macvlan1: entered promiscuous mode
[  219.347210][T10050] bond_slave_1: entered promiscuous mode
[  219.349797][T10050] bond_slave_1: left promiscuous mode
[  219.352518][T10050] macvlan1: left promiscuous mode
[  219.366682][T10023] chnl_net:caif_netlink_parms(): no params data found
[  219.452476][T10023] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.456269][T10023] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.459245][T10023] bridge_slave_0: entered allmulticast mode
[  219.462741][T10023] bridge_slave_0: entered promiscuous mode
[  219.467924][T10023] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.470896][T10023] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.473565][T10023] bridge_slave_1: entered allmulticast mode
[  219.479000][T10023] bridge_slave_1: entered promiscuous mode
[  219.495105][   T13] hsr_slave_0: left promiscuous mode
[  219.500632][   T13] hsr_slave_1: left promiscuous mode
[  219.503679][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  219.510057][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  219.911232][   T13] team0 (unregistering): Port device team_slave_1 removed
[  219.950331][   T13] team0 (unregistering): Port device team_slave_0 removed
[  220.844578][ T5848] Bluetooth: hci0: command tx timeout
[  220.971843][T10023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  220.981486][T10023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  221.000322][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1691'.
[  221.017965][T10069] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  221.021324][T10069] macsec1: entered allmulticast mode
[  221.023320][T10069] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  221.030198][T10023] team0: Port device team_slave_0 added
[  221.036499][T10023] team0: Port device team_slave_1 added
[  221.094438][T10023] batman_adv: batadv0: Adding interface: batadv_slave_0
[  221.097425][T10023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  221.107351][T10023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  221.121365][T10023] batman_adv: batadv0: Adding interface: batadv_slave_1
[  221.123690][T10023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  221.135475][T10023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  221.448988][T10023] hsr_slave_0: entered promiscuous mode
[  221.452812][T10023] hsr_slave_1: entered promiscuous mode
[  221.641394][   T13] IPVS: stop unused estimator thread 0...
[  221.736737][T10023] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  221.746833][T10023] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  221.756833][T10023] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  221.766949][T10023] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  221.915128][T10023] 8021q: adding VLAN 0 to HW filter on device bond0
[  221.978735][T10023] 8021q: adding VLAN 0 to HW filter on device team0
[  222.003387][  T187] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.006585][  T187] bridge0: port 1(bridge_slave_0) entered forwarding state
[  222.022291][  T187] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.025678][  T187] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.313056][T10023] 8021q: adding VLAN 0 to HW filter on device batadv0
[  222.594966][T10023] veth0_vlan: entered promiscuous mode
[  222.609167][T10023] veth1_vlan: entered promiscuous mode
[  222.661143][T10023] veth0_macvtap: entered promiscuous mode
[  222.675161][T10023] veth1_macvtap: entered promiscuous mode
[  222.687909][T10104] loop2: detected capacity change from 0 to 32768
[  222.702028][T10023] batman_adv: batadv0: Interface activated: batadv_slave_0
[  222.716182][T10104] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  222.723902][T10023] batman_adv: batadv0: Interface activated: batadv_slave_1
[  222.756016][ T7605] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  222.762274][T10104] XFS (loop2): Ending clean mount
[  222.767113][ T7605] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  222.772754][T10104] XFS (loop2): Quotacheck needed: Please wait.
[  222.787288][ T7605] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  222.824055][T10104] XFS (loop2): Quotacheck: Done.
[  222.832466][ T7605] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  222.902194][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.905673][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.952820][  T729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.956174][  T729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.987726][ T5850] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  223.066566][ T5848] Bluetooth: hci0: command tx timeout
[  223.092687][T10120] netlink: 'syz.3.1702': attribute type 5 has an invalid length.
[  223.190060][T10124] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  223.210683][T10128] blkio.reset_stats is deprecated
[  224.487438][T10156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1717'.
[  225.267636][T10164] loop2: detected capacity change from 0 to 1024
[  225.285215][T10164] hfsplus: keylen 65060 too large
[  225.287964][T10164] hfsplus: xattr searching failed
[  225.290351][ T5848] Bluetooth: hci0: command tx timeout
[  225.296222][   T33] audit: type=1804 audit(1758861608.933:152): pid=10164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1720" name="/newroot/580/file1/file1" dev="loop2" ino=20 res=1 errno=0
[  225.301172][T10164] hfsplus: keylen 65060 too large
[  225.306012][T10164] hfsplus: xattr searching failed
[  225.314655][T10164] hfsplus: keylen 65060 too large
[  225.332528][ T5850] BUG: sleeping function called from invalid context at fs/inode.c:1928
[  225.336585][ T5850] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5850, name: syz-executor
[  225.341425][ T5850] preempt_count: 1, expected: 0
[  225.343100][ T5850] RCU nest depth: 0, expected: 0
[  225.345031][ T5850] 2 locks held by syz-executor/5850:
[  225.346940][ T5850]  #0: ffff88802cb120e0 (&type->s_umount_key#95){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0
[  225.350963][ T5850]  #1: ffff88802cb12998 (&s->s_inode_list_lock){+.+.}-{3:3}, at: hook_sb_delete+0xae/0xbd0
[  225.355067][ T5850] Preemption disabled at:
SYZFAIL: failed to recv rpc
[  225.355072][ T5850] [<0000000000000000>] 0x0
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  225.358658][ T5850] CPU: 0 UID: 0 PID: 5850 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  225.358671][ T5850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  225.358676][ T5850] Call Trace:
[  225.358703][ T5850]  <TASK>
[  225.358707][ T5850]  dump_stack_lvl+0x189/0x250
[  225.358720][ T5850]  ? __pfx_dump_stack_lvl+0x10/0x10
[  225.358728][ T5850]  ? __pfx__printk+0x10/0x10
[  225.358740][ T5850]  ? print_lock_name+0xde/0x100
[  225.358751][ T5850]  __might_resched+0x495/0x610
[  225.358764][ T5850]  ? __pfx___might_resched+0x10/0x10
[  225.358773][ T5850]  ? __lock_acquire+0xab9/0xd20
[  225.358790][ T5850]  iput+0x2b/0xc50
[  225.358801][ T5850]  ? hook_sb_delete+0x1a8/0xbd0
[  225.358812][ T5850]  hook_sb_delete+0x6b5/0xbd0
[  225.358821][ T5850]  ? hook_sb_delete+0x1a8/0xbd0
[  225.358832][ T5850]  ? __pfx_hook_sb_delete+0x10/0x10
[  225.358841][ T5850]  ? __pfx_fsnotify_sb_delete+0x10/0x10
[  225.358849][ T5850]  ? evict_inodes+0x67d/0x6d0
[  225.358858][ T5850]  ? __pfx_evict_inodes+0x10/0x10
[  225.358869][ T5850]  security_sb_delete+0x80/0x150
[  225.358880][ T5850]  generic_shutdown_super+0xaa/0x2c0
[  225.358892][ T5850]  kill_block_super+0x44/0x90
[  225.358900][ T5850]  deactivate_locked_super+0xbc/0x130
[  225.358911][ T5850]  cleanup_mnt+0x425/0x4c0
[  225.358921][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.358933][ T5850]  task_work_run+0x1d4/0x260
[  225.358944][ T5850]  ? __pfx_task_work_run+0x10/0x10
[  225.358952][ T5850]  ? __x64_sys_umount+0x122/0x160
[  225.358960][ T5850]  ? exit_to_user_mode_loop+0x40/0x130
[  225.358971][ T5850]  exit_to_user_mode_loop+0xe9/0x130
[  225.358980][ T5850]  do_syscall_64+0x2bd/0xfa0
[  225.358990][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.358999][ T5850]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.359007][ T5850]  ? exc_page_fault+0xab/0x100
[  225.359034][ T5850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  225.359042][ T5850] RIP: 0033:0x7fe814f8ff57
[  225.359050][ T5850] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  225.359057][ T5850] RSP: 002b:00007ffd32792648 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  225.359066][ T5850] RAX: 0000000000000000 RBX: 00007fe815011c2d RCX: 00007fe814f8ff57
[  225.359071][ T5850] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd32792700
[  225.359075][ T5850] RBP: 00007ffd32792700 R08: 0000000000000000 R09: 0000000000000000
[  225.359079][ T5850] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd32793790
[  225.359084][ T5850] R13: 00007fe815011c2d R14: 000000000003521a R15: 00007ffd327937d0
[  225.359095][ T5850]  </TASK>
[  225.901480][T10166] syz_tun (unregistering): left allmulticast mode
[  225.949490][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.061775][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.117911][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.227568][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode
[  226.259094][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.368675][   T13] bridge_slave_1: left allmulticast mode
[  226.373295][   T13] bridge_slave_1: left promiscuous mode
[  226.375937][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.382025][   T13] bridge_slave_0: left allmulticast mode
[  226.384511][   T13] bridge_slave_0: left promiscuous mode
[  226.387082][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.688258][   T13] bond1 (unregistering): (slave vlan2): Releasing active interface
[  226.891116][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  226.897461][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  226.902497][   T13] bond0 (unregistering): Released all slaves
[  226.914256][   T13] bond1 (unregistering): Released all slaves
[  227.186903][   T13] hsr_slave_0: left promiscuous mode
[  227.189804][   T13] hsr_slave_1: left promiscuous mode
[  227.192725][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  227.195944][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  227.199750][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  227.202847][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  227.218348][   T13] veth1_macvtap: left promiscuous mode
[  227.220736][   T13] veth0_macvtap: left promiscuous mode
[  227.223102][   T13] veth1_vlan: left promiscuous mode
[  227.228341][   T13] veth0_vlan: left promiscuous mode
[  227.691028][   T13] team0 (unregistering): Port device team_slave_1 removed
[  227.727038][   T13] team0 (unregistering): Port device team_slave_0 removed
[  228.336798][   T13] IPVS: stop unused estimator thread 0...
[  228.409891][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.477232][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.537766][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.608334][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.742283][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.836697][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.903585][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  228.953354][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  229.020797][   T13] bridge_slave_1: left allmulticast mode
[  229.022926][   T13] bridge_slave_1: left promiscuous mode
[  229.024976][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.029973][   T13] bridge_slave_0: left allmulticast mode
[  229.032217][   T13] bridge_slave_0: left promiscuous mode
[  229.034857][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.040219][   T13] bridge_slave_1: left allmulticast mode
[  229.042157][   T13] bridge_slave_1: left promiscuous mode
[  229.044375][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.049484][   T13] bridge_slave_0: left allmulticast mode
[  229.051529][   T13] bridge_slave_0: left promiscuous mode
[  229.054127][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.398111][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  229.404483][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  229.410837][   T13] bond0 (unregistering): Released all slaves
[  229.736543][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  229.742657][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  229.747448][   T13] bond0 (unregistering): Released all slaves
[  230.275903][   T13] hsr_slave_0: left promiscuous mode
[  230.278748][   T13] hsr_slave_1: left promiscuous mode
[  230.281546][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.284749][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  230.287839][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  230.290471][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  230.296159][   T13] hsr_slave_0: left promiscuous mode
[  230.299296][   T13] hsr_slave_1: left promiscuous mode
[  230.302293][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.308431][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  230.312464][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  230.316003][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  230.333513][   T13] veth1_macvtap: left promiscuous mode
[  230.336620][   T13] veth0_macvtap: left promiscuous mode
[  230.339460][   T13] veth1_vlan: left promiscuous mode
[  230.341801][   T13] veth0_vlan: left promiscuous mode
[  230.346128][   T13] veth1_macvtap: left promiscuous mode
[  230.349028][   T13] veth0_macvtap: left promiscuous mode
[  230.934094][   T13] team0 (unregistering): Port device team_slave_1 removed
[  230.984735][   T13] team0 (unregistering): Port device team_slave_0 removed
[  232.001910][   T13] team0 (unregistering): Port device team_slave_1 removed
[  232.051934][   T13] team0 (unregistering): Port device team_slave_0 removed
[  233.370695][   T13] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
04:40:16  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900033ff3f0
R8 =ffff888021200237 R9 =1ffff11004240046 R10=dffffc0000000000 R11=ffffffff855579a0
R12=dffffc0000000000 R13=ffffffff99d0b930 R14=ffffffff9a001520 R15=0000000000000000
RIP=ffffffff85557a1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555571969500 ffffffff 00c00000
GS =0000 ffff8880b840a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd32791e98 CR3=0000000120bc2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f58011a7498 00007f58011a7470 XMM03=00007f58011a74a8 00007f58011a74a0
XMM04=00007f5801d0d100 00007f58011a7460 XMM05=00007f58011a7478 00007f58011a74c0
XMM06=00007f58011a74b8 00007f58011a74b0 XMM07=00007f58011a74a8 00007f58011a74a0
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f5801012fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1b0c727d03c71700 RBX=ffffffff819721d7 RCX=1b0c727d03c71700 RDX=0000000000000001
RSI=ffffffff8db9af17 RDI=ffffffff8c03bf60 RBP=ffffc90000177f10 RSP=ffffc90000177de0
R8 =ffff888136632fdb R9 =1ffff11026cc65fb R10=dffffc0000000000 R11=ffffed1026cc65fc
R12=ffffffff8fc30870 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d5000
RIP=ffffffff8b7dcdd3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3a0a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2f21aff8 CR3=000000000e138000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f58011a7498 00007f58011a7470 XMM03=00007f58011a74a8 00007f58011a74a0
XMM04=00007f5801d0d100 00007f58011a7460 XMM05=00007f58011a7478 00007f58011a74c0
XMM06=00007f58011a74b8 00007f58011a74b0 XMM07=00007f58011a74a8 00007f58011a74a0
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f5801012fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
