last executing test programs:

51.411645524s ago: executing program 1 (id=416):
r0 = syz_open_dev$admmidi(&(0x7f0000000040), 0x20, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, 0x0)

51.318971224s ago: executing program 1 (id=418):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000006000000000a0000000800", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000001d000000000000007f0000000000000000000000000000000000000000000000dd02000000000000000000000000000000010002"], 0x23c}}, 0x0)

51.264064214s ago: executing program 1 (id=419):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'geneve0\x00', 0x1})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})

51.26362486s ago: executing program 1 (id=421):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

51.082636158s ago: executing program 1 (id=424):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000080)={0x5, 0xf900, "321edb0e863222ffad3b7687f96f903ea76a073129e0d39d", {0x5990fe99, 0x3ff}, 0x6})

50.773248313s ago: executing program 1 (id=434):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@mcast1}, 0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'hsr0\x00', <r2=>0x0})
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840)

50.503745866s ago: executing program 32 (id=434):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@mcast1}, 0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'hsr0\x00', <r2=>0x0})
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840)

2.685764924s ago: executing program 3 (id=999):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0x8005, @local, 0x79d}}, 0xff, 0x7f}, 0x90)

2.685590411s ago: executing program 3 (id=1000):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

2.665206337s ago: executing program 0 (id=1001):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2b}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90)

2.664621391s ago: executing program 3 (id=1002):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0xbcb8, 0x0, 0x1, 0x1000}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r0, 0x0})
io_uring_enter(r1, 0x3516, 0x3e44, 0x8, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]})
socket$inet6(0x10, 0x3, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

2.570578773s ago: executing program 0 (id=1005):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10)

2.501633499s ago: executing program 0 (id=1006):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))

2.417711203s ago: executing program 0 (id=1008):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x3000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}}, 0x88)

2.417271026s ago: executing program 0 (id=1009):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x800, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x97a3}, 0x18)
ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x4b67, &(0x7f0000000180))
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x2218804, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12)
write(r2, &(0x7f00000008c0)="3bf58d7d45d3", 0x6)
sendfile(r2, r1, 0x0, 0x3ffff)
sendfile(r2, r1, 0x0, 0x7fffeffd)

2.301765845s ago: executing program 3 (id=1010):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1ec, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xd8}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1a4, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x18c, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x158, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x121, 0x6, "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"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

2.081277762s ago: executing program 3 (id=1011):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', <r1=>0x0})
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18)
sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee)
sendmsg$can_j1939(r2, &(0x7f00000007c0)={&(0x7f0000000600)={0x1d, 0x0, 0x1, {0x0, 0xff, 0x2}, 0xfe}, 0x18, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000)

1.651431219s ago: executing program 2 (id=1013):
syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000480)={{0x12, 0x1, 0x150, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9a, 0x3, 0x1, 0x0, 0xe0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1}, [@input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, @selector_unit={0x5}, @mixer_unit={0x8, 0x24, 0x4, 0x3, 0xf, '\x00\x00\x00'}, @processing_unit={0xc, 0x24, 0x7, 0x1, 0x5, 0x0, "c80975f907"}, @processing_unit={0xd, 0x24, 0x7, 0x1, 0x1, 0x0, '\x00\x00\x00\x00\x00\x00'}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x4, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0xff, {0x7, 0x25, 0x1, 0x81, 0xfe}}}}}}}]}}, 0x0)

1.481748s ago: executing program 0 (id=1014):
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0xc094)
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r4 = dup2(r3, r3)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10})
ioctl$BLKTRACESTART(r3, 0x1274, 0x0)
ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0)
write$proc_mixer(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e652043617074557265272030303030"], 0xb8)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xb, 0x3, 0x0, @SEQ_CONTROLLER=0xff, 0xdf, 0x4, 0x5})
r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
dup3(r6, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0xe4, 0x6, 0x8, 0x20, 0x4}, 0x0, 0x0, 0x3, [{0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="0fdbb2d15ccefbd3007a87b85f"]}, {0x0, 0x0}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x414}}]})

1.00860848s ago: executing program 2 (id=1015):
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x2, 0x1ff, 0xe, 0x202000, 0x20000})
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000280)={&(0x7f0000000240)={0xa, 0x4e1d, 0x280000, @remote, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000000000000010000000c0000002b0000000000000718"], 0x30}, 0x4004890)

930.172899ms ago: executing program 2 (id=1016):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x444f, &(0x7f0000004480)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)

441.79563ms ago: executing program 2 (id=1017):
syz_mount_image$bcachefs(&(0x7f0000000180), &(0x7f0000005900)='./file0\x00', 0x400, &(0x7f00000001c0)={[{@grpquota}, {@nocow_enabled}, {@shared_inode_numbers}, {@fsck}, {@errors_continue}, {@direct_io}, {@acl}, {@journal_flush_disabled}], [{@obj_user}]}, 0x1, 0x58e9, &(0x7f0000010c00)="$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")

197.691234ms ago: executing program 2 (id=1018):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1})
r1 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)

141.553713ms ago: executing program 2 (id=1019):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f00000002c0)={0x0, 0x3f, 0x0}, 0x44850)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$FIBMAP(r2, 0x1, &(0x7f0000000000)=0xe000000)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="500010000c0601020000000000000000030000010500010007000000090002007b79fa31000000003bff010007000d0005000100070000000900020006007a31000000000900020073797a30000000003eb471d0c0a1e9eb79fe20d2ab3f7e5243d7e05bd0ac5b7915eaf2908aad38ea0e31d0a2c5ab2a87725c32afad41a20e3c50371b6c1b32fb747eb57c734c57526f57153425451cf0d0e1fbb5aa99a8ba"], 0x50}, 0x1, 0x0, 0x0, 0x4000001}, 0x24008880)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
r5 = open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0xc4)
ftruncate(r5, 0x2007ffb)
sendfile(r5, r5, 0x0, 0x1000000201005)

0s ago: executing program 3 (id=1020):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f0000000280)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@usrquota}, {@nodiscard}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x21, 0x61b6, &(0x7f00000075c0)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jl989qBxEDI38nfwMYxISSb7NpO/EKbYsJrw1sJhEJfsF3v2iz4Da9dAo1k00CJhFFRRdtw0RYQanNTkQsuaAUoF6gVUiVoL+gNokLlIqoCCkiVaAXZas55nmdnZmdndu3x+sw5n4+U/LIzZ+acOXPm7H53850BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoNWtr5//dCPLsuY/+b+2ZtkLmv+9eWprftlrrvUWAgAAAFfqV/m/n7shXXBwDTdqWeafX/7dry0tLS1l7xv98/HPLy2lK6aybHxTluXXRU/96P2N1mWCx7LJxkjL1yN9Vj/a5/qxPteP97l+os/1m/pcP9nn+hU7YIXNxe9j8jvbmf/n1mKXZjdm4/l1O7vc6rHGppGR+LucXCO/zdL4sWwhO5HNZ7NtyxfLNvLlv3Frc11vyeK6RlrWtb15hPzs0aNxGxphH+9sW9fyfUY/eV029fOfPXr0b889e3O32Xc3tN1fsZ137Ghu5yfDJcW2NrJNaZ/E7Rxp2c7tXZ6T0bbtbOS3a/5353Y+t8btHF3ezA3V+ZxPZiP5f38v309jrb/WS/tpe7jsF7dlWXZxebM7l1mxrmwk29J2ycjy8zNZHJHN+2geSi/OxtZ1nN66huO0Oed2th+nna+J+PzfGm43tso2tD5NP/nERMvz/sulyzlOo+ajXu210nkMDvq1UpZjMB4X38sf9ONdj8Gd4fE/evvqx2DXY6fLMZged8sxuKPfMTgyMZpvc3oSGvltlo/BXW3Lj+ZrauTzmdt7H4Mz506emVn82MfvXjh55Pj88flTe3btmt2zd+/+/ftnji2cmJ8t/n2Ze7v8tmQj6TWwI+y7+Bp4VceyrYfq0pcmVpx/L/d1ONnjdbi1Y9lBvw7HOh9cY2NekCuP6eK18Z7mTp+8NJKt8hrLn587r/x1mB53y+twrOV12PV7SpfX4dgaXofNZc7cubafWcZa/um2Dat/L7iyY3BryzHY+fNI5zE46J9HynIMTobj4gd3rv69YHvY3sen1/vzyOiKYzA93HDuaV6Sft6f3J+PbsflLc0rrpvIzi/On73nkSPnzp3dlYWxIV7Scqx0Hq9bWh5TtuJ4HVn38Xpw4eWP39Ll8q1hX03e3fzX5KrPVXOZe+/p/Vzl392678+2S3dnYQzYRu/Pbt/Nm/tzIsu+8O1PPPTNR7/w+lX3ZzNvfnLmyn8WT7m05fw7vsr5N+b+54v1pbt6bHR8rHj9jqa9M952Pm5/qsbyc1cjX/dzM2s7H4+Hfzb6fHxjj/Pxto5lB30+Hu98cPF83Oj3244r0/l8Tobj5MRs7/Nxc5ltu9d7TI71PB/fFmYj7P9Xh6SQclHLsbPacZvWNTY2Hh7XWFxD+3G6p2358ZDNmut6cnf4oTBt5dqO0ztuK5YfbbldtFHH6VTHsoM+TtPvvlY7Thv9fvt2eTqfz8lwXNy4p/dx2lzm6Xuv/Ny5Of5ny7lzot8xOD460dzm8XQQ5uf7bGlzPAbvyY5mp7MT2Vx+7UR+PDXydU3ft7Zz5UT4Z6PPldt6HIN3dCw76GMwfR9b7dhrjK188APQ+XxOhuPiift6H4PNZd6wb7A/u94RLknLtPzs2vn7tdV+53VLx266WsfKWNjOb+/r/bvZ5jIn9q83Z/beT3eFS67rsp86X7+rvabmso3ZT9vCdj67f/X91Nye5jKfP7DG4+lglmUXPvJA/vve8PeVC+e//7W2v7t0+5vOhY888NMXHvun9Ww/AMPv+WJsKb7Xtfxlai1//wcAAACGQsz9I2Em8j8AAABURsz98f8KT+R/AAAAqIyY+8fCTKqQ//+4/yLb3vDswvMXstTMXwri9Wk3PFgsFzuus+HrqaVlzcsf+Mr8f//jhbVt3kiWZb988I+6Lr/twbhdhamwnU+9sf3yFb5295rWffjhC2m9rf31L4b7j49nrYdBtwrubJZl37jhs/l6pt5/KZ9PP3g4nw9dfPyx5jLPHSi+jrd/5iXF8n8Vyr8Hjx1pu/0zYT/8OMzZt3bfH/F2X7306u373ru8vni7xo7r84f9xAeK+43vk/O5x4rl435ebfu/+Zknv9pc/pFXdt/+CyPdt//JcL9fCfN/XlYs3/ocNL+Ot/tU2P64vni7e778ra7b/9Sni+XPvKlY7nCYcf13hK93vunZhdb99UjjSNvjyt5cLBfXP/v9P82vj/cX779z+ycPXWrbH53Hx9P/VtzPTMfy8fK4nugfOtbfvJ/W4zOu/8k/Ody2n/ut/6mHnnlZ8347139Xx3JnPnJnvv7l+2t/x6a//tRnu64vbs/Bvz/T9ngOviu8jsP6n/hAOB7D9f/7VHF/ne+ucPhd7eefuPwXt15oezzRW35erP+p1x7P56bJzVuue8ELr7/4iua+y7LvbSrur9/6j//N6bbt/9JNxf6I18eOfuf6VxPXf/aj06dOL55fmEt79dEb8vfOeVuxPXF7bwjn1s6vD50+98H5s1OzU7NZNlXdt9C7bF8O86fFuNh76aUVZ9A7Hw7P5y1/+Y0tt//rZ+Ll//6e4vJLby2+b70qLPe5cPnW8Pytb/0rPXHrTfnru/F02MKlle8XfCW27/yv/WtaMDz+zp8L4vF+5qUfzPdD87r8+0Z8XV/h9v9wrrifr4f9uhTemXnHTcvra10+vjfCpXcXr/cr3n/hNBef178Lz/fbf1zcf9yu+Hh/GH6O+da29vNdPD6+fmGk8/7zd/G4GM4n2cXi+rhU3N+Xnrup6+bF9yHJLt6cf/1n6X5uXtfDXM3ixxZnTiycOv/IzLn5xXMzix/7+KGTp8+fOncofy/PQx/qd/vl89OW/Pw0N7/33iw/W50uxlV2rbf/zMNH5/bN3j43f+zI+WPnHj4zf/b40cXFo/Nzi7cfOXZs/qP9br8wd/+u3Qf27Ns9fXxh7v79Bw7sOTC9cOp0czOKjepj7+yHp0+dPZTfZPH+ew/suu++e2enT56em79/3+zs9Pl+t8+/N003b/2H02fnTxw5t3Byfnpx4ePz9+86sHfv7r7vBnjyzLHFqZmz50/NnF+cPztTPJapc/nFze99/W5PNS3+R/HzbKdG8UZ82Tvv2pven7XpK59Y9a6KRTreQPTZ8F4033nRmf1r+Trm/vEwkyrkfwAAACAXc/9EmIn8DwAAAJURc/+mMBP5HwAAACoj5v7JMNP/ElCT/F+5/v+2C2tav/6//n/r/tL/r1n//91l6/8X5wv9/8G40v69/n+g/6//r/+v/6//zwCUrf8fc//mLPP3fwAAAKiomPu3hJnI/wAAAFAZMfdfF2Yi/wMAAEBlxNz/gjCTmuR//X/9f/1//X/9/+7r1/8fTvr/ven/96H/P5PVq/9/cZDbfw36/5tbv9D/p4zK1v+Puf+FYSY1yf8AAABQBzH3Xx9mIv8DAABAZcTcf0OYifwPAAAAlRFz/9Ywk5rkf/3/K+r/p86V/n/79uv/t9P/D8eD/r/+/wbQ/+9N/78P/X+f/z9c/f82+v+UUdn6/zH3vyjMpCb5HwAAAOog5v4Xh5nI/wAAAFA+Y5d3s5j7XxJmsiL/X+YKAAAAgGsu5v4bs44ieE3+/q//7/P/9f/1//X/u69/7f3/0Uz/vzz0/3vT/+9D/1//X/9f/5+BKlv/P8/92WT20jCTmuR/AAAAqIOY+28KM5H/AQAAoDJi7v9/YSbyPwAAAFRGzP3bwkxqkv/1/yvT//9F61On/6//32v9+v8+/7/K9P970//vQ/9f/1//X/+fgSpb/z/m/pvDTGqS/wEAAKAOYu6/JcxE/gcAAIDKiLn//4eZyP8AAABQGTH3bw8zqUn+1/8vef8/Nkd9/r/+v/5/Kfv/k/r/paP/35v+fx/6//r/+v/6/wxU2fr/Mfe/LMykJvkfAAAA6iDm/peHmcj/AAAAUBkx978izET+BwAAgMqIuX8qzKQm+X89/f/GRf3/1Vzlz/+fWMPn/7fR/9f/77V+/X+f/19l+v+96f/3of+v/6//r//PQJWt/x9z/61hJjXJ/wAAAFAHMffvCDOR/wEAAKAyYu6/LcxE/gcAAIDKiLl/Z5hJTfK/z/8fiv5/pv+v/6//r/+v/782+v+96f/3of+v/6//r//PQJWt/x9z/yvDTGqS/wEAAKAOYu6/PcxE/gcAAIDKiLn/VWEm8j8AAABURsz9d4SZ1CT/6//r/+v/6//r/3dfv/7/cNL/703/vw/9f/1//X/9fwaqbP3/mPtfHWZSk/wPAAAAdRBz/51hJvI/AAAAVEbM/XeFmcj/AAAAUBkx90+HmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j77w4zqUn+BwAAgDqIuf+eMBP5HwAAACoj5v6ZMBP5HwAAACoj5v7ZMJOa5H/9f/1//X/9/3X1/1+xfL/6/wX9/3LR/+9N/78P/X/9/2ve/x/X/6dSytb/j7l/V5hJTfI/AAAA1EHM/bvDTOR/AAAAqIyY+/eEmcj/AAAAUBkx998bZlKT/K//r/+v/6//7/P/u69f/3846f/3Nvj+f3yI+v/6//r/Pv9f/5+Vytb/j7n/vjCTmuR/AAAAqIOY+/eGmcj/AAAAUBkx9+8LM5H/AQAAoDJi7t8fZlKT/K//r/+v/6//r//fff36/8NJ/783n//fh/6//v8Q9/+bx5b+P2VTtv5/zP0Hwkxqkv8BAACgDmLuf02YifwPAAAAlRFz/6+Fmcj/AAAAUBkx9/96mElN8r/+v/6//r/+f9n7/xP6//r/66D/35v+fx/6//r/Q9z/9/n/lFHZ+v8x998fZlKT/A8AAAB1EHP/b4SZyP8AAABQGTH3vzbMRP4HAACAyoi5/2CYSU3yv/7/BvX/44X6//r/+v8+/1///6rS/+9N/78P/X/9f/1//X8Gqmz9/5j7XxdmUpP8DwAAAHUQc/8DYSbyPwAAAFRGzP2vDzOR/wEAAKAyYu5/Q5hJTfK//r/P/7/2/f/xtm3X/1++nf5/Qf9f/3899P970//vQ/9f/1//X/+fgSpb/z/m/jeGmdQk/wMAAEAdxNz/pjAT+R8AAAAqI+b+N4eZyP8AAABQGTH3vyXMpCb5X/9f///a9/99/r/+f0H/X/9/EPT/e9P/70P/X/9f/1//n4EqW/8/5v7fDDOpSf4HAACAOoi5/8EwE/kfAAAAKiPm/reGmcj/AAAAUBkx978tzKQm+V//X/9f/1//X/+/+/r1/4eT/n9vQ9b//9X14XL9/4L+f7m3f739/7GOr69K//9Hq/X/lzZ13l7/n6uhbP3/mPvfHmZSk/wPAAAAdRBz/zvCTOR/AAAAqIyY+98ZZiL/AwAAQGXE3P9bYSY1yf/6/83tWG4v6//r/+cX6P/r/+v/Dy39/96GrP/v8/876P+Xe/t9/r/+PyuVrf8fc/+7wkxqkv8BAACgDmLufyjMRP4HAACAyoi5/91hJvI/AAAAVEbM/e8JM6lJ/tf/9/n/+v/6//r/3dev/z+c9P970//vQ/9f/79s/f//1P9nuJWt/x9z/8NhJjXJ/wAAAFAHMfe/N8xE/gcAAIDKiLn/t8NM5H8AAACojJj73xdmUpP8r/8/LP3/Kf3/dfb/J8Jl+v/6//r/9aL/35v+fx/6//r/Zev/+/x/hlzZ+v8x978/zGTt+X9yzUsCAAAA10TM/b8TZlKTv/8DAABAHcTc/7thJvI/AAAAVEbM/b8XZlKT/K//Pyz9f5//n/n8f/3/jsej/6//383G9f/jmUf/X/9f/z/S/9f/1/+nU9n6/zH3/36YSU3yPwAAANRBzP0fCDOR/wEAAGAodPt/sjvF3H8ozET+BwAAgMqIuf9wmElN8r/+v/6//n9J+/9/seNffvDddxzepf+v/6//vy4b+vn/zRe/z//X/9f/T/T/9f/1/+lUtv5/zP1HwkyWg9/bfMA/AAAADLeY+/8gzKQmf/8HAACAOoi5/2iYifwPAAAAlRFz/1yYSU3yv/6//r/+f0n7/0P8+f9xfwxT/3960xD1/+NJV/+/qw3t/793uSeu/7/e/v9E10s7+/8N/f82+v/r3v7vZFmm/6//zzVUtv5/zP3zYSY1yf8AAABQByH3jxwr5vIV8j8AAABURsz9x8NM5H8AAACojJj7PxhmUpP8r/+v/6//r//v8/+7r7+0/X+f/9+T/n9v5en/d+fz//X/h3n79f/1/1mpbP3/mPsXwkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/4fDTOR/AAAAqIyY+0+EmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j7T4aZ1CT/AwAAQB3E3H8qzOT/2LuPJsvq847jt3FTzBQb77zwwt77JbAwa/sFeMHGC7vK5YWxjXNicI4454BtJRRQAAmhhHICJSSUhSSUc0AZSTUqmOd5Znr69LndM7e7z/0/n89CDzSMzkU1BfrRfDn2PwAAAAwjd//NcYv9DwAAAMPI3f/LcUuT/a//1/8P2///pP7/oOfr//X/I9P/z9P/r6H/1//r//X/bNTS+v/c/b8StzTZ/wAAANBB7v5fjVvsfwAAABhG7v5b4hb7HwAAAIaRu//X4pYm+/+y/n9n1bP/z4xX/z9S/+/9/wc+X/+v/x/Zyfb/tz3xZz79v/5f/x/0//p//T+XW1r/n7v/1+OWJvsfAAAAOsjd/xtxi/0PAAAAw8jd/5txi/0PAAAAw8jd/1txS5P97/3/3v+v/9f/6/+nn6//307e/z+vU/9/y8PX/9Jj9/7ofUd5vv5f/6//1/+zWUvr/3P3/3bc0mT/AwAAQAe5+38nbrH/AQAAYBi5+383brH/AQAAYAudnfxq7v7fi1ua7H/9v/5f/x/9/xn9v/5f/z8C/f+8Tv3/lTxf/6//1//r/9mspfX/uft/P25psv8BAACgg9z9fxC32P8AAACwXFP/IPaM3P23xi32PwAAAAwjd/+5uKXJ/tf/H3///339/3b0/97/r//X/w9B/z9P/7+G/l//r//X/7NRS+v/c/ffFrc02f8AAADQQe7+P4xb7H8AAAAYRu7+P4pb7H8AAAAYRu7+P45bmux//b/3/+v/9f/6/+nn6/+3k/5/nv5/Df3/1fbz1+r/9f/6fy51xP7/8Zk/bW+k/8/d/ydxS5P9DwAAAB3k7v/TuMX+BwAAgGHk7v+zuMX+BwAAgGHk7v/zuKXJ/tf/6//1//r/K+7/9//Ue5L+f5r+/2To/+ctpv/f2Z38sv5/6/t/7//X/+v/2WNp7//P3f8XcUuT/Q8AAAAd5O7/y7hlZv8f+W/mAwAAAKcqd/9fxS2+/w8AAABbL6uz3P1/Hbc02f/6f/2//l//7/3/08+f6//vu+Tz6f+XRf8/bzH9/wH0//r/bf78+n/9P/strf/P3f83cUuT/Q8AAAAd5O6/PW6x/wEAAGAYufv/Nm6x/wEAAGAYufv/Lm5psv+n+/+Lv13/fzj6/72fX/8//fNjU/1//jfq/2f7/xu9/78n/f88/f8a+n/9v/7/oP7/7Lofr/9nytL6/9z9fx+3NNn/AAAA0EHu/n+IW+x/AAAAGEbu/n+MW+x/AAAAGEbu/n+KW5rsf+//1//r/7ev//f+/wtO8/3/qxPv/3f1/4ek/5+n/19D/6//1//Pv/9/5t8CoP9nytL6/9z9/xy3NNn/AAAA0EHu/n+JW+x/AAAA2A6X/rMDl/8DpSF3/7/GLfY/AAAADCN3/7/FLePs/9l3der/9f/6f/2//n/6+cvq/73//7D0//P0/2vo/4+jn98drP+/46Afv4T+/9bj7v9n6P+Zsqf/v//i10+r/8/d/+9xyzj7HwAAANrL3f8fcYv9DwAAAMPI3f+fcYv9DwAAAMPI3f9fcUuT/X/s/f/Mv31A/6//1//r//X/+v9N0//P0/+vof/3/n/v/9f/s1F7+v9LnFb/n7v/v+OWJvsfAAAAOsjd/z9xi/0PAAAAw8jdf0fcYv8DAADAMHL3/2/c0mT/e/+//l//r//X/08/X/+/na6qv79G/1/0//p//b/+X//PBiyt/8/d/39xS5P9DwAAAB3k7v//uMX+BwAAgGHk7n9K3GL/AwAAwDBy9z81bmmy//X/x9v/59f1//r/lf5f/6//PxFt3/+/M/VXov0O6P8f/IVzP733K/p//b/+X/+v/+eQfnjmty2i/z9/8f9d5u5/WtzSZP8DAABAB7n7nx632P8AAAAwjNz9z4hb7H8AAAAYRu7+O+OWI+7/ueZhyfT/3v+v/9f/6/+nn6//305t+/9D8v7/NfT/+n/9v/6fjVpE/3/Jr+fuf2bc4vv/AAAAMIzc/c+KW+x/AAAAGEbu/mfHLfY/AAAADCN3/3Pilib7X/+v/9f/6//1/9PP1/9vJ/3/PP3/GtvU/995Ff3/7vSXT7ufv1qn/fn1//p/9lta/5+7/664pcn+BwAAgA5y9z83brH/AQAAYBi5+58Xt9j/AAAAMIzc/c+PW5rsf/2//l//r//X/08/X/+/nfT/8/T/q9Xq7pkPMNX/n79umf2/9/8v7vPr//X/7Le0/j93/wvilib7HwAAADrI3X933GL/AwAAwDBy998Tt9j/AAAAMIzc/S+MW5rsf/2//l//r//X/08/X/+/nfT/8/T/a2zT+//1/4v7/Pp//T/7La3/z93/orilyf4HAACADnL33xu32P8AAAAwjNz9L45b7H8AAAAYRu7+++KWJvtf/6//1//r//X/08/X/2+n4+v/V/p//b/+fw39v/5f/8/lltb/5+5/SdzSZP8DAABAB7n7Xxq32P8AAAAwjNz9L4tb7H8AAAAYRu7+l8ctTfa//l//r//X/+v/p5+v/99O3v8/T/+/hv5f/6//1/+zUdP9/62n1v/n7n9F3NJk/wMAAEAHufvvj1vsfwAAABhG7v5Xxi32PwAAAAwjd/+r4pYm+1//r//f2/+vVvp//b/+/4IT6P/PrPT/G6f/n6f/X0P/P2b/f81qoP7/7IE/Xv/PEi3t/f+5+18dtzTZ/wAAANBB7v7XxC32PwAAAAwjd/9r4xb7HwAAAIaRu/91cUuT/a//1/97/7/+X/8//Xzv/99O+v95+v819P9j9v/e/6//59Qsrf/P3f/6uKXJ/gcAAIAOcve/IW6x/wEAAGAYufvfGLfY/wAAADCM3P1vilua7H/9v/5f/6//1/9PP1//v530//P0/2vo//X/+n/9Pxu1tP4/d/+b45Ym+x8AAAA6yN3/QNxi/wMAAMAwcvc/GLfY/wAAADCM3P1viVua7H/9v/5f/7+d/f8Z/b/+X/8/aSn9/w03/NRD+n/9v/5f/6//1/93t7T+P3f/W+OWJvsfAAAAOsjd/7a4xf4HAACAYeTuf3vcYv8DAADAMHL3vyNuabL/9/f/164uFKoXTPX/0ajp/y+h/9/7+fX/0z8/vP9f/6//P35L6f+9///KPr/+X/+/zZ//SP3/j+//8fp/RrS0/j93/0NxS5P9DwAAAB3k7n9n3GL/AwAAwDBy978rbrH/AQAAYBi5+x+OW5rsf+//1//r//X/+v/p5+v/t5P+f57+fw39v/7f+/9v/rkf0v+zOUvr/3P3vztuabL/AQAAoIPc/e+JW+x/AAAAGEbu/vfGLfY/AAAADCN3//vilib7X/+v/9f/6//1/9PP1/9vJ/3/PP1/ufwP7YI+/f+ZqS+edj9/tU778w/T/3v/Pxu0tP4/d//745Ym+x8AAAA6yN3/gbjF/gcAAIBh5O7/YNxi/wMAAMAwcvd/KG5psv/1//r/8fv/n9X/X/Z8/b/+f2T6//wr+jT9/xp9+v9Jp93Pb/vn1//r/9lvaf1/7v5H4pYm+x8AAAA6yN3/4bjF/gcAAIBh5O7/SNxi/wMAAMAwcvd/NG5psv/1/736/51Vx/7f+//1//r/TvT/8/T/a+j/9f/6f/0/G7W0/j93/6M7uy33PwAAAGyrn/mJX3zksL/vo0/+55nVx+KWG1fnD/ltbAAAAGDhntj9O7ur1cef/DXf/wcAAIAR5e7/RNzSZP/r/3v1/z3f/6//1//r/zvR/8/T/6+h/9f/6//1/2zU0vr/3P2fjFsuGX67R/6jBAAAAJYkd/+n4pYm3/8HAACADnL3fzpu2bf//esAAQAAYFvl7v9M3NLk+//6/4X3/6tj6v/j99P/X6D/1/9PPV//v530//Ousv8/v6P/1//P0P/r//X/XG5p/X/u/s/GLU32PwAAAAxqz99RyN3/ubjF/gcAAIBh5O7/fNxi/wMAAMAwcvd/IW5psv/1/yfe/2eqfozv/z9bv+T9/837/9vPTD5f/6//H5n+f573/6+h/x+l/79O/6//ZxmW1v/n7v9i3NJk/wMAAEAHufu/FLfY/wAAADCM3P1fjlvsfwAAABhG7v6vxC1N9r/+f+Hv/7+i/v8Q7//X//fo/w94/jj9/49cf+6Bm37+nrv0/1x0kv1//lzQ/+v/9f8XLKj/9/5//T8Lsfn+f3fPF4/a/+fu/2rc0mT/AwAAQAe5+x+LW+x/AAAAGEbu/q/FLfY/AAAADCN3/9fjlib7X/+v/19K/5//W59C/3/uivv/s6vV6lT6/2yKu/f/3v+v/9/P+//n6f/X0P/r//X/+n82avP9/94vHrX/z93/jbilyf4HAACADnL3fzNuyf2/c+S/dQ8AAAAsTO7+b8Utvv8PAAAAw8jd/+24pcn+1//r/5fS/yfv/7/448Z6//9NFaf27P9/rH5J/3+89P/z9P9r6P/1//p//T8btbT+P3f/d+KWJvsfAAAAOsjd/3jcYv8DAADAMHL3fzdusf8BAABgGLn7vxe3NNn/+v9R+/8s4vX/+v+l9P/e/+/9/ydD/z9P/7+G/l//r//X/7NRS+v/c/f/IAAA//9GqnSo")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:51637' (ED25519) to the list of known hosts.
syzkaller login: [   58.179696][ T5830] cgroup: Unknown subsys name 'net'
[   58.326374][ T5830] cgroup: Unknown subsys name 'cpuset'
[   58.333196][ T5830] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.766884][ T5830] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   66.212278][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.216569][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.220107][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.224230][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.227979][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.264545][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.269038][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.273246][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.278524][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.283050][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.339468][ T5237] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.344919][ T5237] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.348451][ T5237] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.352920][ T5237] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.356000][ T5237] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.610492][ T5852] chnl_net:caif_netlink_parms(): no params data found
[   66.771111][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.775540][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.778684][ T5852] bridge_slave_0: entered allmulticast mode
[   66.783677][ T5852] bridge_slave_0: entered promiscuous mode
[   66.805523][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   66.818794][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.821755][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.824903][ T5852] bridge_slave_1: entered allmulticast mode
[   66.828725][ T5852] bridge_slave_1: entered promiscuous mode
[   66.903721][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.929291][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.981065][ T5852] team0: Port device team_slave_0 added
[   66.984659][ T5857] chnl_net:caif_netlink_parms(): no params data found
[   67.005635][ T5852] team0: Port device team_slave_1 added
[   67.060529][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.063547][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.073896][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.079497][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.083293][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.086170][ T5848] bridge_slave_0: entered allmulticast mode
[   67.089888][ T5848] bridge_slave_0: entered promiscuous mode
[   67.106864][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.109669][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.122518][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.127262][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.130111][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.135967][ T5848] bridge_slave_1: entered allmulticast mode
[   67.139888][ T5848] bridge_slave_1: entered promiscuous mode
[   67.247064][ T5852] hsr_slave_0: entered promiscuous mode
[   67.250202][ T5852] hsr_slave_1: entered promiscuous mode
[   67.276080][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.278497][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.280811][ T5857] bridge_slave_0: entered allmulticast mode
[   67.284709][ T5857] bridge_slave_0: entered promiscuous mode
[   67.289864][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.296007][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.309514][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.312841][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.315129][ T5857] bridge_slave_1: entered allmulticast mode
[   67.318036][ T5857] bridge_slave_1: entered promiscuous mode
[   67.372407][ T5848] team0: Port device team_slave_0 added
[   67.376147][ T5848] team0: Port device team_slave_1 added
[   67.401265][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.420482][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.437206][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.439765][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.448414][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.475472][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.478150][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.488495][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.500520][ T5857] team0: Port device team_slave_0 added
[   67.514921][ T5857] team0: Port device team_slave_1 added
[   67.594988][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.597973][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.609062][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.615275][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.617681][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.628029][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.636802][ T5848] hsr_slave_0: entered promiscuous mode
[   67.640109][ T5848] hsr_slave_1: entered promiscuous mode
[   67.645464][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   67.647751][ T5848] Cannot create hsr debugfs directory
[   67.732646][ T5857] hsr_slave_0: entered promiscuous mode
[   67.735820][ T5857] hsr_slave_1: entered promiscuous mode
[   67.738639][ T5857] debugfs: 'hsr0' already exists in 'hsr'
[   67.740854][ T5857] Cannot create hsr debugfs directory
[   67.796007][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.818302][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.843901][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.868989][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   68.014901][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   68.025685][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   68.031880][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   68.042223][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   68.107713][ T5857] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   68.126624][ T5857] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   68.141624][ T5857] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   68.151060][ T5857] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   68.167476][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.213147][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   68.223801][   T81] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.226126][   T81] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.239479][   T81] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.242493][   T81] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.253628][ T5237] Bluetooth: hci0: command tx timeout
[   68.309686][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.332471][ T5237] Bluetooth: hci1: command tx timeout
[   68.339846][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   68.348491][  T248] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.351137][  T248] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.363558][  T248] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.366037][  T248] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.386540][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.414013][ T5237] Bluetooth: hci2: command tx timeout
[   68.439884][ T5857] 8021q: adding VLAN 0 to HW filter on device team0
[   68.466519][ T5034] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.469373][ T5034] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.480152][ T5034] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.483062][ T5034] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.608992][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.659471][ T5852] veth0_vlan: entered promiscuous mode
[   68.665715][ T5852] veth1_vlan: entered promiscuous mode
[   68.689660][ T5852] veth0_macvtap: entered promiscuous mode
[   68.701040][ T5852] veth1_macvtap: entered promiscuous mode
[   68.724965][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.728362][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.738370][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.747919][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.770633][ T5678] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.780846][ T5678] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.797529][ T5678] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.815468][ T5678] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.854783][ T5857] veth0_vlan: entered promiscuous mode
[   68.854939][ T5034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.860548][ T5848] veth0_vlan: entered promiscuous mode
[   68.867986][ T5034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.877471][ T5857] veth1_vlan: entered promiscuous mode
[   68.897263][ T5848] veth1_vlan: entered promiscuous mode
[   68.917033][ T3988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.920571][ T3988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.947234][ T5857] veth0_macvtap: entered promiscuous mode
[   68.971396][ T5848] veth0_macvtap: entered promiscuous mode
[   68.975856][ T5857] veth1_macvtap: entered promiscuous mode
[   68.987738][ T5848] veth1_macvtap: entered promiscuous mode
[   69.006972][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.008921][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.013947][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.039501][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.052308][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.061459][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.072501][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.098260][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.103797][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.148014][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.163730][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.167333][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.172773][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.231005][ T3988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.234825][ T3988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.283748][ T3988] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.288292][ T3988] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.371355][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.376023][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.414529][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.417400][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.088745][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'.
[   70.324245][ T5953] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19'.
[   70.412210][ T5237] Bluetooth: hci1: command tx timeout
[   70.454803][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   70.466193][ T5953] Zero length message leads to an empty skb
[   70.468379][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   70.471223][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   70.490264][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   70.495362][ T5237] Bluetooth: hci2: command tx timeout
[   71.224876][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.232085][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.397195][ T5977] IPv6: Can't replace route, no match found
[   71.717517][ T5996] loop2: detected capacity change from 0 to 2048
[   71.753676][ T5996] NILFS (loop2): invalid segment: Inconsistency found
[   71.757153][ T5996] NILFS (loop2): trying rollback from an earlier position
[   71.770210][ T5996] NILFS (loop2): recovery complete
[   71.870786][ T6001] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   72.054577][ T6015] loop2: detected capacity change from 0 to 1024
[   72.098457][ T6015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.119078][ T6015] EXT4-fs warning (device loop2): ext4_rmdir:3187: inode #11: comm syz.2.45: empty directory 'file1' has too many links (111)
[   72.152426][ T5878] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   72.154662][ T5848] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.312148][ T5878] usb 2-1: Using ep0 maxpacket: 32
[   72.321429][ T5878] usb 2-1: config 0 has an invalid interface number: 225 but max is 0
[   72.325337][ T5878] usb 2-1: config 0 has no interface number 0
[   72.335081][ T5878] usb 2-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79
[   72.338206][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.341172][ T5878] usb 2-1: Product: syz
[   72.345430][ T5878] usb 2-1: Manufacturer: syz
[   72.347697][ T5878] usb 2-1: SerialNumber: syz
[   72.355307][ T5878] usb 2-1: config 0 descriptor??
[   72.492114][ T5237] Bluetooth: hci1: command tx timeout
[   72.538614][ T6038] warning: `syz.0.54' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   72.572624][ T5237] Bluetooth: hci2: command tx timeout
[   72.638735][ T6046] loop0: detected capacity change from 0 to 1024
[   72.653062][ T6046] =======================================================
[   72.653062][ T6046] WARNING: The mand mount option has been deprecated and
[   72.653062][ T6046]          and is ignored by this kernel. Remove the mand
[   72.653062][ T6046]          option from the mount to silence this warning.
[   72.653062][ T6046] =======================================================
[   72.688165][ T6046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.697172][ T6046] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   72.735712][ T5857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.974763][ T5878] mos7840 2-1:0.225: required endpoints missing
[   72.989726][ T5878] usb 2-1: USB disconnect, device number 2
[   74.396041][ T6087] loop0: detected capacity change from 0 to 4096
[   74.448151][ T6090] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   74.474168][ T6087] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0
[   74.485664][ T6087] Remounting filesystem read-only
[   74.487695][ T6087] NILFS error (device loop0): nilfs_readdir: bad page in #2
[   74.576069][ T5237] Bluetooth: hci1: command tx timeout
[   74.657103][ T5237] Bluetooth: hci2: command tx timeout
[   74.774561][ T6098] netlink: 24 bytes leftover after parsing attributes in process `syz.1.78'.
[   74.802423][ T6099] vxcan3: entered promiscuous mode
[   74.804455][ T6099] vxcan3: entered allmulticast mode
[   75.416631][ T6107] loop0: detected capacity change from 0 to 32768
[   75.424944][ T6107] XFS (loop0): sunit and swidth options incompatible with the noalign option
[   75.558221][ T6129] loop0: detected capacity change from 0 to 128
[   75.579163][ T6130] dvmrp0: entered allmulticast mode
[   75.584044][ T6129] EXT4-fs (loop0): Test dummy encryption mode enabled
[   75.607536][ T6129] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   75.615909][ T6129] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   75.665383][ T5857] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   76.158640][ T6150] loop0: detected capacity change from 0 to 4096
[   76.178000][ T6150] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[   76.193703][ T6150] ntfs3(loop0): ino=3, mi_enum_attr
[   76.613612][   T33] audit: type=1326 audit(1758790086.103:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.2.112" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deb78ec29 code=0x7ffc0000
[   76.621520][   T33] audit: type=1326 audit(1758790086.103:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.2.112" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deb78ec29 code=0x7ffc0000
[   76.642010][   T33] audit: type=1326 audit(1758790086.103:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.2.112" exe="/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f9deb78ec29 code=0x7ffc0000
[   76.642159][ T5897] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   76.659138][   T33] audit: type=1326 audit(1758790086.103:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.2.112" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deb78ec29 code=0x7ffc0000
[   76.672134][   T33] audit: type=1326 audit(1758790086.103:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.2.112" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deb78ec29 code=0x7ffc0000
[   76.680450][   T33] audit: type=1326 audit(1758790086.103:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.2.112" exe="/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f9deb78ec29 code=0x7ffc0000
[   76.688995][   T33] audit: type=1326 audit(1758790086.103:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.2.112" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deb78ec29 code=0x7ffc0000
[   76.698141][   T33] audit: type=1326 audit(1758790086.103:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6171 comm="syz.2.112" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deb78ec29 code=0x7ffc0000
[   76.770365][ T6178] netlink: 'syz.2.115': attribute type 11 has an invalid length.
[   76.779515][ T6178] netlink: 140 bytes leftover after parsing attributes in process `syz.2.115'.
[   76.815198][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[   76.815610][ T6170] loop1: detected capacity change from 0 to 32768
[   76.818999][ T5897] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[   76.836656][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[   76.840508][ T5897] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[   76.849886][ T5897] usb 1-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39
[   76.853468][ T6170] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   76.861754][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.865670][ T5897] usb 1-1: Product: syz
[   76.867671][ T5897] usb 1-1: Manufacturer: syz
[   76.869404][ T5897] usb 1-1: SerialNumber: syz
[   76.876820][ T5897] usb 1-1: config 0 descriptor??
[   76.883479][ T5897] usb 1-1: NFC: Unable to get FW version
[   76.886293][ T5897] pn533_usb 1-1:0.0: probe with driver pn533_usb failed with error -90
[   76.921656][ T6170] XFS (loop1): Ending clean mount
[   76.935152][ T6170] XFS (loop1): Quotacheck needed: Please wait.
[   76.959941][ T6170] XFS (loop1): Quotacheck: Done.
[   76.992910][ T5852] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   77.124159][ T5854] usb 1-1: USB disconnect, device number 2
[   77.216297][ T6192] loop1: detected capacity change from 0 to 128
[   77.225792][ T6192] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   77.239337][ T6192] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   77.249862][ T6192] EXT4-fs error (device loop1): ext4_validate_inode_bitmap:105: comm syz.1.118: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19
[   77.279207][ T5852] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   77.444418][ T6200] loop1: detected capacity change from 0 to 4096
[   77.453263][ T6200] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   77.500346][ T6200] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   77.510235][ T6200] ntfs3(loop1): Failed to load $Extend (-22).
[   77.516496][ T6200] ntfs3(loop1): Failed to initialize $Extend.
[   77.530496][ T6204] netlink: 68 bytes leftover after parsing attributes in process `syz.2.123'.
[   77.600453][ T6206] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   77.633816][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.801034][ T6218] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   77.944262][ T5854] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   78.104372][ T5854] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[   78.110780][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[   78.124647][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[   78.135457][ T5854] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[   78.139429][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.144019][ T5854] usb 1-1: Product: syz
[   78.145899][ T5854] usb 1-1: Manufacturer: syz
[   78.147865][ T5854] usb 1-1: SerialNumber: syz
[   78.162815][ T5854] usb 1-1: config 0 descriptor??
[   78.170021][ T5854] iguanair 1-1:0.0: probe with driver iguanair failed with error -12
[   79.006931][ T6258] netlink: 80 bytes leftover after parsing attributes in process `syz.1.147'.
[   79.366769][ T6264] loop1: detected capacity change from 0 to 32768
[   79.373397][ T6264] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.150 (6264)
[   79.391630][ T6264] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   79.395785][ T6264] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   79.500212][ T6264] BTRFS info (device loop1): enabling ssd optimizations
[   79.506228][ T6264] BTRFS info (device loop1): enabling free space tree
[   80.220631][ T5852] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   80.455192][ T6297] netlink: 'syz.1.156': attribute type 6 has an invalid length.
[   80.802544][ T5878] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   80.803632][ T5854] usb 1-1: USB disconnect, device number 3
[   80.954325][ T5878] usb 2-1: Using ep0 maxpacket: 32
[   80.960394][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.965293][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   80.969958][ T5878] usb 2-1: New USB device found, idVendor=1b96, idProduct=000c, bcdDevice= 0.00
[   80.974119][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.983896][ T5878] usb 2-1: config 0 descriptor??
[   81.444726][ T5878] ntrig 0003:1B96:000C.0001: unknown main item tag 0x7
[   81.501387][ T5878] ntrig 0003:1B96:000C.0001: hidraw0: USB HID v0.00 Device [HID 1b96:000c] on usb-dummy_hcd.1-1/input0
[   81.619241][ T5878] ntrig 0003:1B96:000C.0001: Firmware version: 0.9.1.60.3 (2481 8327)
[   81.824016][   T96] usb 2-1: USB disconnect, device number 3
[   81.965337][ T6323] 8021q: VLANs not supported on lo
[   82.262999][ T6342] Invalid source name
[   82.570245][ T6350] loop0: detected capacity change from 0 to 47
[   82.756129][ T6356] process 'syz.1.182' launched './file0' with NULL argv: empty string added
[   82.873467][ T6360] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.901135][ T6360] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.970172][ T6364] netlink: 'syz.2.186': attribute type 11 has an invalid length.
[   83.214052][ T6373] block nbd1: Attempted send on invalid socket
[   83.216672][ T6373] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[   83.446899][ T6390] loop0: detected capacity change from 0 to 1024
[   83.489902][ T6394] syz.1.199 uses obsolete (PF_INET,SOCK_PACKET)
[   83.759661][ T6406] loop1: detected capacity change from 0 to 1024
[   83.773290][ T6406] EXT4-fs: Ignoring removed nomblk_io_submit option
[   83.818851][ T6406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.863993][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.220635][ T6444] tipc: Started in network mode
[   84.224376][ T6444] tipc: Node identity 4, cluster identity 4711
[   84.226897][ T6444] tipc: Node number set to 4
[   84.362664][   T96] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   84.532036][   T96] usb 1-1: Using ep0 maxpacket: 8
[   84.537370][   T96] usb 1-1: unable to get BOS descriptor or descriptor too short
[   84.541602][   T96] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[   84.546999][   T96] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[   84.551253][   T96] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   84.556417][   T96] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1
[   84.560176][   T96] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[   84.564600][   T96] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[   84.568384][   T96] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[   84.575228][   T96] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[   84.578770][   T96] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.581880][   T96] usb 1-1: Product: syz
[   84.583698][   T96] usb 1-1: Manufacturer: syz
[   84.585509][   T96] usb 1-1: SerialNumber: syz
[   84.590789][   T96] usb 1-1: config 0 descriptor??
[   84.595589][ T6434] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   84.602961][   T96] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[   84.649772][   T96] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12
[   84.682307][ T5878] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   84.689660][ T6453] udevd[6453]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   84.816350][ T5854] usb 1-1: USB disconnect, device number 4
[   84.973931][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   84.978039][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   84.981532][ T5878] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[   84.985344][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.206940][ T5878] usb 2-1: config 0 descriptor??
[   85.709704][ T5878] steelseries 0003:1038:12B6.0002: unknown main item tag 0x0
[   85.717754][ T5878] steelseries 0003:1038:12B6.0002: unknown main item tag 0x0
[   85.720838][ T5878] steelseries 0003:1038:12B6.0002: unknown main item tag 0x0
[   85.724277][ T5878] steelseries 0003:1038:12B6.0002: unknown main item tag 0x0
[   85.732380][ T5878] steelseries 0003:1038:12B6.0002: unknown main item tag 0x0
[   85.735045][ T5878] steelseries 0003:1038:12B6.0002: unknown main item tag 0x0
[   85.737576][ T5878] steelseries 0003:1038:12B6.0002: unknown main item tag 0x0
[   85.749620][ T5878] steelseries 0003:1038:12B6.0002: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0
[   85.885581][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'.
[   86.001144][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'.
[   86.063071][   T33] audit: type=1326 audit(1758790095.553:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.0.243" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4311b8ec29 code=0x7ffc0000
[   86.075421][   T33] audit: type=1326 audit(1758790095.553:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.0.243" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4311b8ec29 code=0x7ffc0000
[   86.098629][ T5853] usb 2-1: USB disconnect, device number 4
[   86.106197][   T33] audit: type=1326 audit(1758790095.553:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.0.243" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4311b8ec29 code=0x7ffc0000
[   86.143170][   T33] audit: type=1326 audit(1758790095.553:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.0.243" exe="/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f4311b8ec29 code=0x7ffc0000
[   86.182062][   T33] audit: type=1326 audit(1758790095.553:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.0.243" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4311b8ec29 code=0x7ffc0000
[   86.189511][   T33] audit: type=1326 audit(1758790095.553:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.0.243" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4311b8ec29 code=0x7ffc0000
[   86.217934][   T33] audit: type=1326 audit(1758790095.553:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.0.243" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4311b8ec29 code=0x7ffc0000
[   86.226409][   T33] audit: type=1326 audit(1758790095.553:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.0.243" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f4311b8ec29 code=0x7ffc0000
[   86.237715][   T33] audit: type=1326 audit(1758790095.553:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.0.243" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4311b8ec29 code=0x7ffc0000
[   86.247376][ T6507] netlink: 48 bytes leftover after parsing attributes in process `syz.2.247'.
[   86.347673][ T6513] fuse: Bad value for 'fd'
[   86.368200][ T6515] netlink: 100 bytes leftover after parsing attributes in process `syz.0.251'.
[   86.424160][ T6519] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   86.503311][  T794] cfg80211: failed to load regulatory.db
[   86.667338][ T6528] loop1: detected capacity change from 0 to 512
[   86.705776][ T6528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   86.710448][ T6528] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.735678][ T6521] loop0: detected capacity change from 0 to 40427
[   86.747634][ T6521] F2FS-fs (loop0): build fault injection rate: 14
[   86.750220][ T6521] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[   86.773366][ T6521] F2FS-fs (loop0): invalid crc value
[   86.784779][    C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   86.786287][ T6535] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   86.797273][    C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[   86.866636][ T6521] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   86.871607][ T6521] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[   86.882940][ T6521] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   86.894769][ T6521] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[   86.904824][ T6521] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_get_read_data_folio+0xc1/0x7d0
[   86.930609][ T5857] syz-executor: attempt to access beyond end of device
[   86.930609][ T5857] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   86.937473][ T5857] CPU: 0 UID: 0 PID: 5857 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   86.937492][ T5857] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   86.937500][ T5857] Call Trace:
[   86.937507][ T5857]  <TASK>
[   86.937514][ T5857]  dump_stack_lvl+0x189/0x250
[   86.937548][ T5857]  ? __pfx_dump_stack_lvl+0x10/0x10
[   86.937564][ T5857]  ? __pfx_queue_work_on+0x10/0x10
[   86.937576][ T5857]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   86.937596][ T5857]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   86.937625][ T5857]  f2fs_handle_critical_error+0x37c/0x540
[   86.937651][ T5857]  f2fs_write_end_io+0x886/0xb60
[   86.937680][ T5857]  __submit_merged_bio+0x27a/0x6a0
[   86.937706][ T5857]  __submit_merged_write_cond+0x255/0x530
[   86.937732][ T5857]  f2fs_write_data_pages+0x261d/0x3000
[   86.937788][ T5857]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   86.937854][ T5857]  ? __lock_acquire+0xab9/0xd20
[   86.937879][ T5857]  ? do_raw_spin_lock+0x121/0x290
[   86.937906][ T5857]  ? do_raw_spin_unlock+0x4d/0x240
[   86.937922][ T5857]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   86.937935][ T5857]  do_writepages+0x32e/0x550
[   86.937962][ T5857]  ? do_raw_spin_unlock+0x4d/0x240
[   86.937979][ T5857]  filemap_fdatawrite+0x199/0x240
[   86.937995][ T5857]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   86.938084][ T5857]  ? do_raw_spin_unlock+0x4d/0x240
[   86.938102][ T5857]  f2fs_sync_dirty_inodes+0x31f/0x830
[   86.938126][ T5857]  f2fs_write_checkpoint+0x95a/0x1df0
[   86.938157][ T5857]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   86.938207][ T5857]  ? kill_f2fs_super+0x298/0x6c0
[   86.938226][ T5857]  kill_f2fs_super+0x2c3/0x6c0
[   86.938245][ T5857]  ? __pfx_kill_f2fs_super+0x10/0x10
[   86.938257][ T5857]  ? radix_tree_delete_item+0x2b6/0x400
[   86.938276][ T5857]  ? shrinker_free+0x2ce/0x3e0
[   86.938294][ T5857]  deactivate_locked_super+0xbc/0x130
[   86.938312][ T5857]  cleanup_mnt+0x425/0x4c0
[   86.938327][ T5857]  ? lockdep_hardirqs_on+0x9c/0x150
[   86.938344][ T5857]  task_work_run+0x1d4/0x260
[   86.938365][ T5857]  ? __pfx_task_work_run+0x10/0x10
[   86.938380][ T5857]  ? __x64_sys_umount+0x122/0x160
[   86.938402][ T5857]  ? exit_to_user_mode_loop+0x40/0x110
[   86.938424][ T5857]  exit_to_user_mode_loop+0xec/0x110
[   86.938443][ T5857]  do_syscall_64+0x2bd/0x3b0
[   86.938456][ T5857]  ? lockdep_hardirqs_on+0x9c/0x150
[   86.938469][ T5857]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.938482][ T5857]  ? exc_page_fault+0x9f/0xf0
[   86.938497][ T5857]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.938508][ T5857] RIP: 0033:0x7f4311b8ff57
[   86.938522][ T5857] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   86.938532][ T5857] RSP: 002b:00007fff78bc0cf8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   86.938546][ T5857] RAX: 0000000000000000 RBX: 00007f4311c11c2d RCX: 00007f4311b8ff57
[   86.938554][ T5857] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff78bc0db0
[   86.938562][ T5857] RBP: 00007fff78bc0db0 R08: 0000000000000000 R09: 0000000000000000
[   86.938570][ T5857] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff78bc1e40
[   86.938578][ T5857] R13: 00007f4311c11c2d R14: 0000000000015311 R15: 00007fff78bc1e80
[   86.938603][ T5857]  </TASK>
[   86.938610][ T5857] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   86.972256][ T5854] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   87.066556][    C1] Illegal XDP return value 16128 on prog  (id 23) dev lo, expect packet loss!
[   87.236497][ T5854] usb 2-1: Using ep0 maxpacket: 8
[   87.239808][ T5854] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[   87.252008][ T5854] usb 2-1: config 179 has no interface number 0
[   87.254264][ T5854] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   87.257974][ T5854] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   87.261630][ T5854] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   87.282363][ T5854] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   87.295295][ T5854] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   87.322318][ T5854] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   87.326097][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.348487][ T6528] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   87.643717][ T5854] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input5
[   87.832830][ T6528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.844965][ T6528] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.089413][   T96] usb 2-1: USB disconnect, device number 5
[   88.089425][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   88.101897][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   88.321771][ T6561] loop0: detected capacity change from 0 to 16
[   88.339678][ T6561] erofs (device loop0): mounted with root inode @ nid 36.
[   88.346859][ T6561] erofs (device loop0): readahead error at folio 6 @ nid 36
[   88.350803][ T6561] erofs (device loop0): readahead error at folio 4 @ nid 36
[   88.365525][ T6561] syz.0.269: attempt to access beyond end of device
[   88.365525][ T6561] loop0: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[   88.369913][ T6561] syz.0.269: attempt to access beyond end of device
[   88.369913][ T6561] loop0: rw=524288, sector=8, nr_sectors = 16 limit=16
[   88.383010][ T6561] syz.0.269: attempt to access beyond end of device
[   88.383010][ T6561] loop0: rw=524288, sector=376, nr_sectors = 16 limit=16
[   88.390554][ T6561] erofs (device loop0): invalid de[0].nameoff 0 @ nid 36
[   88.406052][ T6561] erofs (device loop0): invalid de[0].nameoff 0 @ nid 36
[   88.453486][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'.
[   88.457875][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'.
[   88.461543][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'.
[   88.678139][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   88.786547][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.796067][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.188224][ T6609] loop0: detected capacity change from 0 to 2048
[   89.224874][ T6609] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   89.274141][   T33] audit: type=1800 audit(1758790098.733:19): pid=6609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.281" name="file1" dev="loop0" ino=1367 res=0 errno=0
[   89.998443][ T6674] erspan0: entered promiscuous mode
[   90.056284][ T6677] loop1: detected capacity change from 0 to 512
[   90.100779][ T6677] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   90.190284][ T6683] fanotify: failed to encode fid (type=0, len=0, err=-2)
[   90.239149][ T5878] hid-generic 0005:15C2:5505.0003: unknown main item tag 0x0
[   90.262108][ T5878] hid-generic 0005:15C2:5505.0003: unknown main item tag 0x0
[   90.286322][ T5878] hid-generic 0005:15C2:5505.0003: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   90.886292][ T6709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.309'.
[   90.942532][ T5878] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   90.943647][ T6713] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   91.008733][ T6717] overlayfs: conflicting options: nfs_export=on,metacopy=on
[   91.102050][ T5878] usb 1-1: Using ep0 maxpacket: 8
[   91.187428][ T5878] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   91.191537][ T5878] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[   91.199216][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.205109][ T5878] usb 1-1: config 0 descriptor??
[   91.210413][ T5878] gspca_main: vc032x-2.14.0 probing 046d:0892
[   92.513748][ T6749] loop1: detected capacity change from 0 to 32768
[   92.536289][ T6749] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   92.556736][ T6749] XFS (loop1): Ending clean mount
[   92.598649][ T5852] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   92.767204][  T794] usb 1-1: USB disconnect, device number 5
[   92.814617][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'.
[   93.546522][ T6777] Bluetooth: MGMT ver 1.23
[   93.860197][ T6783] sock: sock_set_timeout: `syz.2.337' (pid 6783) tries to set negative timeout
[   93.968260][ T6786] netlink: 'syz.2.339': attribute type 10 has an invalid length.
[   94.006708][ T6786] 8021q: adding VLAN 0 to HW filter on device bond0
[   94.025045][ T6786] team0: Port device bond0 added
[   94.160999][ T6792] netlink: 'syz.2.342': attribute type 3 has an invalid length.
[   94.168808][ T6792] netlink: 'syz.2.342': attribute type 3 has an invalid length.
[   94.671624][   T33] kauditd_printk_skb: 1 callbacks suppressed
[   94.671637][   T33] audit: type=1326 audit(1758790104.153:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.1.351" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a78ec29 code=0x7ffc0000
[   94.699619][   T33] audit: type=1326 audit(1758790104.173:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.1.351" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a78ec29 code=0x7ffc0000
[   94.712955][   T33] audit: type=1326 audit(1758790104.173:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.1.351" exe="/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f9f4a78ec29 code=0x7ffc0000
[   94.721058][   T33] audit: type=1326 audit(1758790104.173:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.1.351" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a78ec29 code=0x7ffc0000
[   94.759511][   T33] audit: type=1326 audit(1758790104.173:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6812 comm="syz.1.351" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f4a78ec29 code=0x7ffc0000
[   94.847143][ T6820] loop1: detected capacity change from 0 to 4096
[   95.187226][ T6824] loop0: detected capacity change from 0 to 32768
[   95.273416][ T6824] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   95.385669][ T6824] XFS (loop0): Ending clean mount
[   95.397010][ T6824] XFS (loop0): Quotacheck needed: Please wait.
[   95.439133][ T6824] XFS (loop0): Quotacheck: Done.
[   95.515176][ T5857] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   96.496978][ T6870] trusted_key: syz.0.368 sent an empty control message without MSG_MORE.
[   97.052852][ T6878] loop1: detected capacity change from 0 to 32768
[   97.077969][ T6886] netlink: 'syz.2.382': attribute type 11 has an invalid length.
[   97.179883][ T6878] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   97.179908][ T6878]   allowing incompatible features above 0.0: (unknown version)
[   97.179917][ T6878]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   97.195562][ T6878] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   97.199014][ T6878] bcachefs (loop1): initializing new filesystem
[   97.208090][ T6878] bcachefs (loop1): going read-write
[   97.218689][ T6878] bcachefs (loop1): marking superblocks
[   97.228534][ T6878] bcachefs (loop1): initializing freespace
[   97.233041][ T6878] bcachefs (loop1): done initializing freespace
[   97.237540][ T6878] bcachefs (loop1): reading snapshots table
[   97.239891][ T6878] bcachefs (loop1): reading snapshots done
[   97.263897][ T6878] bcachefs (loop1): done starting filesystem
[   97.303629][ T6888] loop0: detected capacity change from 0 to 16384
[   97.327271][ T6888] bcachefs (loop0): starting version 1.13: inode_has_child_snapshots opts=metadata_checksum=none,data_checksum=none,str_hash=crc32c,norecovery,recovery_pass_last=reconstruct_snapshots,noexcl,read_only,reconstruct_alloc,version_upgrade=none
[   97.327288][ T6888]   features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   97.341297][ T6888] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[   97.344619][ T6888] bcachefs (loop0): recovering from clean shutdown, journal seq 18
[   97.348279][ T6888] bcachefs (loop0): dropping and reconstructing all alloc info
[   97.365436][ T6888] bcachefs (loop0): accounting_read... done
[   97.367909][ T6888] bcachefs (loop0): alloc_read... done
[   97.370160][ T6888] bcachefs (loop0): snapshots_read... done
[   97.400549][ T6888] bcachefs (loop0): done starting filesystem
[   97.668584][ T6878] syz.1.378 (6878) used greatest stack depth: 16984 bytes left
[   97.713977][ T5857] bcachefs (loop0): shutting down
[   97.797786][ T5852] bcachefs (loop1): shutting down
[   97.804149][ T5852] bcachefs (loop1): going read-only
[   97.806493][ T5852] bcachefs (loop1): finished waiting for writes to stop
[   97.812942][ T5857] bcachefs (loop0): shutdown complete
[   97.816865][ T5852] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[   97.865719][ T5852] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[   97.871524][ T5852] bcachefs (loop1): clean shutdown complete, journal seq 4
[   97.874661][ T5852] bcachefs (loop1): marking filesystem clean
[   97.891557][ T5852] bcachefs (loop1): shutdown complete
[   97.936295][ T6919] tipc: Failed to remove unknown binding: 66,1,1/0:3804969958/3804969959
[   98.283751][ T5854] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[   98.584429][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   98.588842][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.594201][ T5854] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00
[   98.597777][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.603988][ T5854] usb 1-1: config 0 descriptor??
[   99.146427][ T5854] uclogic 0003:2179:0053.0004: interface is invalid, ignoring
[   99.360491][   T96] usb 1-1: USB disconnect, device number 6
[   99.374188][ T6934] capability: warning: `syz.2.392' uses deprecated v2 capabilities in a way that may be insecure
[   99.477920][ T6943] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[   99.483135][ T6943] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[   99.486520][ T6943] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  100.311180][ T6965] netlink: 'syz.0.406': attribute type 28 has an invalid length.
[  100.373407][ T6967] netlink: 24 bytes leftover after parsing attributes in process `syz.0.407'.
[  100.381633][ T6968] IPVS: sync thread started: state = MASTER, mcast_ifn = ipvlan1, syncid = 4, id = 0
[  100.465508][ T6974] loop0: detected capacity change from 0 to 8
[  100.489130][ T6974] SQUASHFS error: xz decompression failed, data probably corrupt
[  100.497133][ T6974] SQUASHFS error: Failed to read block 0x108: -5
[  100.499660][ T6974] SQUASHFS error: Unable to read metadata cache entry [106]
[  100.514068][ T6974] SQUASHFS error: Unable to read inode 0x11f
[  100.529732][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'.
[  100.534674][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'.
[  100.539077][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'.
[  100.543115][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'.
[  100.659841][ T6982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.414'.
[  100.717237][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.414'.
[  100.751253][ T6990] netlink: 388 bytes leftover after parsing attributes in process `syz.1.418'.
[  100.795500][ T6992] vcan0: tx drop: invalid sa for name 0x0000000000000100
[  100.842784][ T6996] loop1: detected capacity change from 0 to 128
[  100.856189][ T6996] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  100.884205][ T6996] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  100.908007][ T6996] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05
[  100.914628][ T6996] UDF-fs: error (device loop1): udf_count_free_bitmap: udf_count_free failed
[  100.961844][ T5852] UDF-fs: error (device loop1): udf_read_inode: (ino 104) failed !bh
[  100.970520][ T5852] UDF-fs: error (device loop1): udf_read_inode: (ino 104) failed !bh
[  100.997832][ T7002] loop0: detected capacity change from 0 to 512
[  101.067893][ T7002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  101.088328][ T7002] ext4 filesystem being mounted at /124/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  101.226374][ T5857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  101.309427][ T7020] loop0: detected capacity change from 0 to 512
[  101.354535][ T7020] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  101.359971][ T7020] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  101.369327][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.386875][ T7020] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  101.394686][ T7020] EXT4-fs (loop0): 1 truncate cleaned up
[  101.399469][ T7020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  101.415268][   T33] audit: type=1800 audit(1758790110.903:26): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.432" name="file1" dev="loop0" ino=15 res=0 errno=0
[  101.468809][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.563932][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.657262][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.681640][ T5857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.709134][ T7033] loop0: detected capacity change from 0 to 512
[  101.723667][ T7033] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.438: casefold flag without casefold feature
[  101.731655][ T7033] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.438: couldn't read orphan inode 15 (err -117)
[  101.752703][ T7033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.778403][   T33] audit: type=1800 audit(1758790111.253:27): pid=7033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.438" name="file1" dev="loop0" ino=18 res=0 errno=0
[  101.855370][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  101.860757][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  101.866823][   T13] bridge_slave_1: left allmulticast mode
[  101.867407][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  101.869139][   T13] bridge_slave_1: left promiscuous mode
[  101.870048][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.874868][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  101.881710][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  101.932734][   T13] bridge_slave_0: left allmulticast mode
[  101.934963][   T13] bridge_slave_0: left promiscuous mode
[  101.948083][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.975392][ T5857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.172671][ T7055] loop0: detected capacity change from 0 to 2048
[  102.198133][ T7055] UDF-fs: warning (device loop0): udf_fill_super: No fileset found
[  102.345055][ T7067] overlayfs: failed to clone upperpath
[  102.446548][ T7073] netlink: 24 bytes leftover after parsing attributes in process `syz.0.454'.
[  102.586526][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  102.593028][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  102.599978][   T13] bond0 (unregistering): Released all slaves
[  102.700929][ T7081] loop0: detected capacity change from 0 to 512
[  102.708132][   T13] tipc: Left network mode
[  102.726771][ T7081] EXT4-fs (loop0): corrupt root inode, run e2fsck
[  102.729268][ T7081] EXT4-fs (loop0): mount failed
[  103.239498][ T7038] chnl_net:caif_netlink_parms(): no params data found
[  103.678050][   T13] hsr_slave_0: left promiscuous mode
[  103.681188][   T13] hsr_slave_1: left promiscuous mode
[  103.686449][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.690207][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.710781][   T13] veth1_macvtap: left promiscuous mode
[  103.716125][   T13] veth0_macvtap: left promiscuous mode
[  103.718576][   T13] veth1_vlan: left promiscuous mode
[  103.720795][   T13] veth0_vlan: left promiscuous mode
[  103.933318][ T5851] Bluetooth: hci1: command tx timeout
[  104.125082][   T13] team0 (unregistering): Port device team_slave_1 removed
[  104.150923][   T13] team0 (unregistering): Port device team_slave_0 removed
[  104.707225][ T7038] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.715978][ T7038] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.719640][ T7038] bridge_slave_0: entered allmulticast mode
[  104.735602][ T7038] bridge_slave_0: entered promiscuous mode
[  104.746827][ T7038] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.750657][ T7038] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.761825][ T7038] bridge_slave_1: entered allmulticast mode
[  104.767104][ T7038] bridge_slave_1: entered promiscuous mode
[  104.820403][ T7038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  104.834642][ T7038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  104.835853][ T7129] mmap: syz.0.468 (7129) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  104.897237][ T7038] team0: Port device team_slave_0 added
[  104.914348][ T7038] team0: Port device team_slave_1 added
[  104.963704][ T7134] loop0: detected capacity change from 0 to 512
[  104.997082][ T7038] batman_adv: batadv0: Adding interface: batadv_slave_0
[  104.999781][ T7038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.001708][ T7134] EXT4-fs (loop0): orphan cleanup on readonly fs
[  105.013787][ T7134] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[  105.027349][ T7038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.035005][ T7038] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.037600][ T7038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.065342][ T7038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  105.074328][ T7134] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  105.104193][ T7134] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.469: attempt to clear invalid blocks 2 len 1
[  105.140616][ T7134] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.469: invalid indirect mapped block 1819239214 (level 0)
[  105.149954][ T7134] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.469: invalid indirect mapped block 1819239214 (level 1)
[  105.179402][ T7134] EXT4-fs (loop0): 1 truncate cleaned up
[  105.186520][ T7134] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  105.206754][ T7134] EXT4-fs error (device loop0): __ext4_remount:6740: comm syz.0.469: Abort forced by user
[  105.211373][ T7038] hsr_slave_0: entered promiscuous mode
[  105.221649][ T7038] hsr_slave_1: entered promiscuous mode
[  105.225940][ T7134] EXT4-fs (loop0): Remounting filesystem read-only
[  105.229046][ T7134] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  105.236244][ T7143] netlink: 'syz.2.472': attribute type 32 has an invalid length.
[  105.291646][ T5857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.543772][ T7038] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  105.554182][ T7038] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  105.565910][ T7038] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  105.581655][ T7038] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  105.697695][ T7038] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.751465][ T7038] 8021q: adding VLAN 0 to HW filter on device team0
[  105.771989][  T255] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.774779][  T255] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.793418][  T255] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.796264][  T255] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.995736][ T7178] loop0: detected capacity change from 0 to 4096
[  106.001362][ T7038] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.004155][ T7178] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  106.012434][ T5851] Bluetooth: hci1: command tx timeout
[  106.037062][ T7178] ntfs3(loop0): try to read out of volume at offset 0x103000
[  106.040036][ T7178] ntfs3(loop0): Failed to load $Volume (-5).
[  106.046871][ T7038] veth0_vlan: entered promiscuous mode
[  106.060095][ T7038] veth1_vlan: entered promiscuous mode
[  106.088989][ T7038] veth0_macvtap: entered promiscuous mode
[  106.097060][ T7038] veth1_macvtap: entered promiscuous mode
[  106.108160][ T7038] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.125922][ T7038] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.139892][ T5910] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.150060][ T5910] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.155458][ T5910] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.158241][ T5910] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.227179][  T255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.230061][  T255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.310228][  T255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.316952][  T255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.522256][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.483'.
[  106.624836][ T7192] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  106.681405][ T7194] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  106.767310][ T7200] Process accounting resumed
[  107.458052][ T7233] loop0: detected capacity change from 0 to 2048
[  107.471641][ T7233] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  107.481312][ T7233] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  107.914342][ T7245] tmpfs: Bad value for 'nr_blocks'
[  107.923796][ T5854] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  108.085802][ T5854] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  108.093739][ T5851] Bluetooth: hci1: command tx timeout
[  108.097814][ T5854] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  108.104014][ T5854] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  108.107775][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.119464][ T7240] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  108.138302][ T5854] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  108.345557][ T5854] usb 1-1: USB disconnect, device number 7
[  110.173921][ T5851] Bluetooth: hci1: command tx timeout
[  110.342043][   T96] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  110.350036][ T7288] netlink: 56 bytes leftover after parsing attributes in process `syz.2.526'.
[  110.355725][ T7288] netlink: 16 bytes leftover after parsing attributes in process `syz.2.526'.
[  110.405327][ T7290] netlink: 36 bytes leftover after parsing attributes in process `syz.2.527'.
[  110.409766][ T7291] vivid-000: =================  START STATUS  =================
[  110.416865][ T7291] vivid-000: Test Pattern: 75% Colorbar
[  110.419251][ T7291] vivid-000: Fill Percentage of Frame: 100
[  110.421695][ T7291] vivid-000: Horizontal Movement: No Movement
[  110.427670][ T7291] vivid-000: Vertical Movement: No Movement
[  110.430030][ T7291] vivid-000: OSD Text Mode: All
[  110.438341][ T7291] vivid-000: Show Border: false
[  110.440265][ T7291] vivid-000: Show Square: false
[  110.443189][ T7291] vivid-000: Sensor Flipped Horizontally: false
[  110.445785][ T7291] vivid-000: Sensor Flipped Vertically: false
[  110.448205][ T7291] vivid-000: Insert SAV Code in Image: false
[  110.450714][ T7291] vivid-000: Insert EAV Code in Image: false
[  110.454447][ T7291] vivid-000: Insert Video Guard Band: false
[  110.456981][ T7291] vivid-000: Reduced Framerate: false
[  110.458813][ T7291] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  110.461690][ T7291] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  110.464830][ T7291] vivid-000: Enable Capture Cropping: true grabbed
[  110.467279][ T7291] vivid-000: Enable Capture Composing: true grabbed
[  110.469429][ T7291] vivid-000: Enable Capture Scaler: true grabbed
[  110.475604][ T7291] vivid-000: Timestamp Source: End of Frame
[  110.477794][ T7291] vivid-000: Colorspace: sRGB
[  110.479294][ T7291] vivid-000: Transfer Function: Default
[  110.481053][ T7291] vivid-000: Y'CbCr Encoding: Default
[  110.482964][ T7291] vivid-000: HSV Encoding: Hue 0-179
[  110.484944][ T7291] vivid-000: Quantization: Default
[  110.486950][ T7291] vivid-000: Apply Alpha To Red Only: false
[  110.489188][ T7291] vivid-000: Standard Aspect Ratio: 4x3
[  110.491127][ T7291] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  110.494821][   T96] usb 1-1: Using ep0 maxpacket: 16
[  110.496892][ T7291] vivid-000: DV Timings: 640x480p59 inactive
[  110.499147][ T7291] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  110.501527][ T7291] vivid-000: Maximum EDID Blocks: 2
[  110.503916][ T7291] vivid-000: Limited RGB Range (16-235): false
[  110.506182][ T7291] vivid-000: Rx RGB Quantization Range: Automatic
[  110.509396][ T7291] vivid-000: Power Present: 0x00000001
[  110.511394][ T7291] tpg source WxH: 320x180 (R'G'B)
[  110.513327][ T7291] tpg field: 1
[  110.515512][   T96] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.519282][   T96] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.522345][ T7291] tpg crop: (0,0)/320x180
[  110.523677][ T7291] tpg compose: (0,0)/320x180
[  110.525084][ T7291] tpg colorspace: 8
[  110.526258][ T7291] tpg transfer function: 0/2
[  110.527679][ T7291] tpg quantization: 0/1
[  110.528950][ T7291] tpg RGB range: 0/2
[  110.530232][ T7291] vivid-000: ==================  END STATUS  ==================
[  110.532671][   T96] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  110.536911][   T96] usb 1-1: config 0 interface 0 has no altsetting 0
[  110.539226][   T96] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  110.542101][   T96] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.546244][   T96] usb 1-1: config 0 descriptor??
[  110.958772][   T96] hid (null): usage index exceeded
[  110.964291][   T96] hid (null): invalid report_size 16762
[  111.168283][ T5911] usb 1-1: USB disconnect, device number 8
[  111.251476][ T7306] loop3: detected capacity change from 0 to 256
[  111.282722][ T7306] FAT-fs (loop3): Directory bread(block 64) failed
[  111.285388][ T7306] FAT-fs (loop3): Directory bread(block 65) failed
[  111.288053][ T7306] FAT-fs (loop3): Directory bread(block 66) failed
[  111.290635][ T7306] FAT-fs (loop3): Directory bread(block 67) failed
[  111.294076][ T7306] FAT-fs (loop3): Directory bread(block 68) failed
[  111.296630][ T7306] FAT-fs (loop3): Directory bread(block 69) failed
[  111.299307][ T7306] FAT-fs (loop3): Directory bread(block 70) failed
[  111.301873][ T7306] FAT-fs (loop3): Directory bread(block 71) failed
[  111.305026][ T7306] FAT-fs (loop3): Directory bread(block 72) failed
[  111.307595][ T7306] FAT-fs (loop3): Directory bread(block 73) failed
[  111.329471][   T33] audit: type=1800 audit(1758790120.813:28): pid=7306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.532" name="bus" dev="loop3" ino=1048596 res=0 errno=0
[  111.689960][ T7310] loop3: detected capacity change from 0 to 256
[  111.716897][ T7310] vfat: Unknown parameter 'shorwin95'
[  111.922904][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.536'.
[  112.045248][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.539'.
[  112.899009][ T7343] dvmrp1: entered allmulticast mode
[  112.905613][ T7343] dvmrp0: left allmulticast mode
[  112.907720][ T7343] dvmrp1: left allmulticast mode
[  113.017425][ T5854] Process accounting resumed
[  113.064823][   T10] Process accounting resumed
[  113.099572][ T7353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.553'.
[  113.393137][ T7355] loop3: detected capacity change from 0 to 32768
[  113.405019][ T7355] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.554 (7355)
[  113.419665][ T7355] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  113.432241][ T7355] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  113.478772][ T7355] BTRFS info (device loop3): enabling ssd optimizations
[  113.481564][ T7355] BTRFS info (device loop3): enabling free space tree
[  113.492049][   T96] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  113.513045][ T7383] netlink: 'syz.2.560': attribute type 1 has an invalid length.
[  113.522249][ T7038] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  113.675536][   T96] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  113.679422][   T96] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  113.692265][   T96] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  113.706724][   T96] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  113.710278][   T96] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.721995][   T96] usb 1-1: Product: syz
[  113.723812][   T96] usb 1-1: Manufacturer: syz
[  113.725751][   T96] usb 1-1: SerialNumber: syz
[  113.731218][   T96] usb 1-1: config 0 descriptor??
[  113.736800][ T7359] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  113.739770][ T7359] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  113.745185][   T96] usb 1-1: ucan: probing device on interface #0
[  113.862047][ T5911] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  114.016212][ T5911] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  114.021619][ T5911] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.028854][ T5911] usb 4-1: config 0 interface 0 has no altsetting 0
[  114.031497][ T5911] usb 4-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00
[  114.036564][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.043442][ T5911] usb 4-1: config 0 descriptor??
[  114.300914][   T33] audit: type=1326 audit(1758790123.783:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7403 comm="syz.2.570" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deb78ec29 code=0x7ffc0000
[  114.310148][   T33] audit: type=1326 audit(1758790123.793:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7403 comm="syz.2.570" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deb78ec29 code=0x7ffc0000
[  114.319953][   T33] audit: type=1326 audit(1758790123.803:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7403 comm="syz.2.570" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9deb78ec29 code=0x7ffc0000
[  114.331026][   T33] audit: type=1326 audit(1758790123.803:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7403 comm="syz.2.570" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deb78ec29 code=0x7ffc0000
[  114.341078][   T33] audit: type=1326 audit(1758790123.803:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7403 comm="syz.2.570" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deb78ec29 code=0x7ffc0000
[  114.349472][   T33] audit: type=1326 audit(1758790123.803:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7403 comm="syz.2.570" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9deb78ec29 code=0x7ffc0000
[  114.368256][   T33] audit: type=1326 audit(1758790123.803:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7403 comm="syz.2.570" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deb78ec29 code=0x7ffc0000
[  114.377767][   T96] ucan 1-1:0.0 can0: registered device
[  114.380278][   T33] audit: type=1326 audit(1758790123.803:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7403 comm="syz.2.570" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9deb78ec29 code=0x7ffc0000
[  114.392517][   T33] audit: type=1326 audit(1758790123.803:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7403 comm="syz.2.570" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9deb78ec29 code=0x7ffc0000
[  114.479423][ T5911] lenovo 0003:17EF:60EE.0006: hidraw1: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.3-1/input0
[  114.561030][   T96] ucan 1-1:0.0 can0: firmware string: unknown
[  114.565436][   T96] usb 1-1: USB disconnect, device number 9
[  114.660926][ T5911] lenovo 0003:17EF:60EE.0006: Failed to switch middle button: -71
[  114.666549][ T5911] lenovo 0003:17EF:60EE.0006: Fn-lock setting failed: -71
[  114.670506][ T5911] lenovo 0003:17EF:60EE.0006: Sensitivity setting failed: -71
[  114.679817][ T5911] usb 4-1: USB disconnect, device number 2
[  115.106437][ T7411] loop0: detected capacity change from 0 to 1024
[  115.156677][ T7411] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.193964][ T5857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.450341][ T7427] loop0: detected capacity change from 0 to 256
[  115.894908][ T7445] loop0: detected capacity change from 0 to 32768
[  115.901650][ T7445] XFS: noikeep mount option is deprecated.
[  115.936165][ T7445] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  115.975339][ T7445] XFS (loop0): Ending clean mount
[  115.981217][ T7445] XFS (loop0): Quotacheck needed: Please wait.
[  115.994219][ T7467] syz_tun: entered allmulticast mode
[  116.014992][ T7445] XFS (loop0): Quotacheck: Done.
[  116.043384][    C0] mroute: pending queue full, dropping entries
[  116.047578][ T7467] mroute: pending queue full, dropping entries
[  116.052593][ T7467] mroute: pending queue full, dropping entries
[  116.060892][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.591'.
[  116.068410][ T7466] syz_tun: left allmulticast mode
[  116.130487][ T5857] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  116.435601][ T7471] delete_channel: no stack
[  116.859398][ T7486] loop0: detected capacity change from 0 to 128
[  116.891506][ T7486] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  116.899999][ T7486] ext4 filesystem being mounted at /175/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  117.043764][ T5857] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  117.321740][ T7513] loop3: detected capacity change from 0 to 1024
[  117.340497][ T7513] EXT4-fs: Ignoring removed orlov option
[  117.361259][ T7513] EXT4-fs: Ignoring removed mblk_io_submit option
[  117.376205][ T7513] EXT4-fs: Ignoring removed i_version option
[  117.389407][ T7513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.545025][ T7038] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.766389][ T7542] loop0: detected capacity change from 0 to 256
[  117.803110][ T7542] FAT-fs (loop0): Directory bread(block 64) failed
[  117.808013][ T7542] FAT-fs (loop0): Directory bread(block 65) failed
[  117.815672][ T7542] FAT-fs (loop0): Directory bread(block 66) failed
[  117.820997][ T7542] FAT-fs (loop0): Directory bread(block 67) failed
[  117.831751][ T7542] FAT-fs (loop0): Directory bread(block 68) failed
[  117.836340][ T7542] FAT-fs (loop0): Directory bread(block 69) failed
[  117.840157][ T7542] FAT-fs (loop0): Directory bread(block 70) failed
[  117.842938][ T7542] FAT-fs (loop0): Directory bread(block 71) failed
[  117.845115][ T7542] FAT-fs (loop0): Directory bread(block 72) failed
[  117.847298][ T7542] FAT-fs (loop0): Directory bread(block 73) failed
[  117.872717][ T7548] netlink: 'syz.3.619': attribute type 1 has an invalid length.
[  118.116706][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.625'.
[  118.162553][ T5911] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  118.316279][ T5911] usb 1-1: config 0 has an invalid interface number: 133 but max is 0
[  118.319756][ T5911] usb 1-1: config 0 has no interface number 0
[  118.328239][ T5911] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  118.331581][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.334957][ T5911] usb 1-1: Product: syz
[  118.336378][ T5911] usb 1-1: Manufacturer: syz
[  118.337997][ T5911] usb 1-1: SerialNumber: syz
[  118.344427][ T5911] usb 1-1: config 0 descriptor??
[  118.603610][ T5911] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected
[  118.619953][ T5911] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81
[  118.626741][ T5911] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1
[  118.646673][ T5911] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2
[  118.660211][ T5911] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  118.704937][ T5911] usb 1-1: USB disconnect, device number 10
[  118.752885][ T6454] udevd[6454]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory
[  118.760517][ T5911] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  118.780974][ T5911] keyspan 1-1:0.133: device disconnected
[  120.810005][ T7592] netlink: 36 bytes leftover after parsing attributes in process `syz.3.638'.
[  120.814424][ T7592] netlink: 24 bytes leftover after parsing attributes in process `syz.3.638'.
[  122.078010][ T7625] IPv4: Oversized IP packet from 127.202.26.0
[  122.779809][ T7633] loop0: detected capacity change from 0 to 1024
[  123.201695][ T7660] loop3: detected capacity change from 0 to 512
[  123.240860][ T7660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.245978][ T7660] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  123.276995][ T7038] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.399216][ T7677] netlink: 'syz.3.672': attribute type 4 has an invalid length.
[  124.332534][ T7700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.682'.
[  124.451084][ T7706] loop0: detected capacity change from 0 to 2048
[  124.480760][ T7706] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  124.499339][ T7706] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 901
[  124.507525][ T7706] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 901
[  124.575215][ T7712] program syz.0.688 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  124.640226][ T7714] loop0: detected capacity change from 0 to 2048
[  124.663023][ T7714] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  124.819064][   T33] kauditd_printk_skb: 10 callbacks suppressed
[  124.819078][   T33] audit: type=1326 audit(1758790134.303:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.0.691" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4311b8ec29 code=0x7ffc0000
[  124.832072][   T33] audit: type=1326 audit(1758790134.303:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.0.691" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4311b8ec29 code=0x7ffc0000
[  124.863464][   T33] audit: type=1326 audit(1758790134.303:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.0.691" exe="/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f4311b8ec29 code=0x7ffc0000
[  124.893496][   T33] audit: type=1326 audit(1758790134.303:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.0.691" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4311b8ec29 code=0x7ffc0000
[  124.900375][   T33] audit: type=1326 audit(1758790134.303:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.0.691" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4311b8ec29 code=0x7ffc0000
[  124.906044][ T7722] loop3: detected capacity change from 0 to 2048
[  124.946905][ T6454]  loop3: p1 < > p4
[  124.951456][ T6454] loop3: p4 size 8388608 extends beyond EOD, truncated
[  124.965513][ T7722]  loop3: p1 < > p4
[  124.970229][ T7722] loop3: p4 size 8388608 extends beyond EOD, truncated
[  125.114962][ T5855] udevd[5855]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  125.128871][ T7735] netlink: 'syz.2.700': attribute type 2 has an invalid length.
[  125.130217][ T6454] udevd[6454]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  125.339505][ T7753] netlink: 'syz.0.708': attribute type 1 has an invalid length.
[  125.462698][ T7758] loop0: detected capacity change from 0 to 512
[  125.488328][ T7758] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  125.513298][ T7744] loop3: detected capacity change from 0 to 32768
[  125.520856][ T7758] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002]
[  125.521422][ T7744] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section members_v2: device 0: not enough buckets (got 5, max 64)
[  125.521422][ T7744] members_v2 (size 152):
[  125.521422][ T7744] Device:                        0
[  125.521422][ T7744]   Label:                       (none)
[  125.521422][ T7744]   UUID:                        9b24efed-6a70-49cb-9057-2c46291a785d
[  125.521422][ T7744]   Size:                        655360
[  125.521422][ T7744]   read errors:                 0
[  125.521422][ T7744]   write errors:                0
[  125.521422][ T7744]   checksum errors:             0
[  125.521422][ T7744]   seqread iops:                0
[  125.521422][ T7744]   seqwrite iops:               0
[  125.521422][ T7744]   randread iops:               0
[  125.521422][ T7744]   randwrite iops:              0
[  125.521422][ T7744]   Bucket size:                 131072
[  125.521422][ T7744]   First bucket:                0
[  125.521422][ T7744]   Buckets:                     5
[  125.521422][ T7744]   Last mount:                  1714681272
[  125.521422][ T7744]   Last superblock write:       41
[  125.521422][ T7744]   State:                       rw
[  125.521422][ T7744]   Data allowed:                journal,btree,user
[  125.521422][ T7744]   Has data:                    (none)
[  125.521422][ T7744]   Btree allocated bitmap blocksize:256
[  125.521422][ T7744]   Btree allocated bitmap:      0000000000000000000000010001000010011000000000000000000000000000
[  125.521422][ T7744]   Durability:    
[  125.526024][ T7744] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  125.549150][ T7758] System zones: 1-12
[  125.601169][ T7758] EXT4-fs (loop0): orphan cleanup on readonly fs
[  125.606057][ T7758] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.711: attempt to clear invalid blocks 1024 len 1
[  125.611836][ T7758] EXT4-fs (loop0): Remounting filesystem read-only
[  125.623384][ T7758] EXT4-fs (loop0): 1 truncate cleaned up
[  125.626805][ T7758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  125.668172][ T7761] sg_read: process 162 (syz.3.712) changed security contexts after opening file descriptor, this is not allowed.
[  125.678207][ T5857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  125.904166][ T7765] netlink: 165 bytes leftover after parsing attributes in process `syz.3.714'.
[  125.966412][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.716'.
[  125.975002][ T7769] netlink: 'syz.3.716': attribute type 5 has an invalid length.
[  125.977580][ T7769] netlink: 20 bytes leftover after parsing attributes in process `syz.3.716'.
[  126.002608][ T7769] geneve2: entered promiscuous mode
[  126.004716][ T7769] geneve2: entered allmulticast mode
[  126.016732][   T13] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  126.020225][   T13] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  126.026504][   T13] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  126.036332][   T13] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  126.283746][ T7764] loop0: detected capacity change from 0 to 131072
[  126.289708][ T7764] F2FS-fs (loop0): invalid crc value
[  126.332603][   T96] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  126.335498][ T7764] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  126.339966][ T7764] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  126.367208][   T33] audit: type=1800 audit(1758790135.853:53): pid=7764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.713" name="file1" dev="loop0" ino=7 res=0 errno=0
[  126.486321][   T96] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  126.489885][   T96] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.510225][   T96] usb 4-1: config 0 descriptor??
[  127.131783][   T96] usb 4-1: Cannot set autoneg
[  127.152137][   T96] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  127.177664][   T96] usb 4-1: USB disconnect, device number 3
[  127.952223][ T7816] loop3: detected capacity change from 0 to 256
[  127.971609][ T7816] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x467a0815, utbl_chksum : 0xe619d30d)
[  127.976203][ T7816] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  128.294822][ T7820] loop0: detected capacity change from 0 to 40427
[  128.304291][ T7820] F2FS-fs (loop0): invalid crc value
[  128.357803][ T7820] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  128.364186][ T7820] F2FS-fs (loop0): Start checkpoint disabled!
[  128.373652][ T7820] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  129.170696][   T81] kworker/u9:3: attempt to access beyond end of device
[  129.170696][   T81] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  129.180529][   T81] CPU: 1 UID: 0 PID: 81 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) 
[  129.180549][   T81] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  129.180557][   T81] Workqueue: writeback wb_workfn (flush-7:0)
[  129.180580][   T81] Call Trace:
[  129.180587][   T81]  <TASK>
[  129.180594][   T81]  dump_stack_lvl+0x189/0x250
[  129.180616][   T81]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.180631][   T81]  ? __pfx_queue_work_on+0x10/0x10
[  129.180644][   T81]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  129.180665][   T81]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  129.180695][   T81]  f2fs_handle_critical_error+0x37c/0x540
[  129.180722][   T81]  f2fs_write_end_io+0x886/0xb60
[  129.180754][   T81]  __submit_merged_bio+0x27a/0x6a0
[  129.180779][   T81]  __submit_merged_write_cond+0x255/0x530
[  129.180805][   T81]  f2fs_write_data_pages+0x261d/0x3000
[  129.180850][   T81]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.180877][   T81]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  129.180925][   T81]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  129.180944][   T81]  ? look_up_lock_class+0x74/0x170
[  129.180967][   T81]  ? trace_f2fs_writepages+0x7f/0x200
[  129.180985][   T81]  ? f2fs_write_node_pages+0x478/0x6e0
[  129.181008][   T81]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  129.181040][   T81]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.181054][   T81]  do_writepages+0x32e/0x550
[  129.181077][   T81]  ? reacquire_held_locks+0x127/0x1d0
[  129.181089][   T81]  ? writeback_sb_inodes+0x384/0x1010
[  129.181114][   T81]  __writeback_single_inode+0x145/0xff0
[  129.181131][   T81]  ? do_raw_spin_unlock+0x4d/0x240
[  129.181151][   T81]  writeback_sb_inodes+0x6c7/0x1010
[  129.181193][   T81]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  129.181257][   T81]  ? rcu_is_watching+0x15/0xb0
[  129.181281][   T81]  wb_writeback+0x43b/0xaf0
[  129.181306][   T81]  ? queue_io+0x381/0x590
[  129.181326][   T81]  ? __pfx_wb_writeback+0x10/0x10
[  129.181382][   T81]  ? _raw_spin_unlock_irq+0x23/0x50
[  129.181408][   T81]  wb_workfn+0x409/0xef0
[  129.181437][   T81]  ? __pfx_wb_workfn+0x10/0x10
[  129.181456][   T81]  ? __lock_acquire+0xab9/0xd20
[  129.181485][   T81]  ? process_scheduled_works+0x9ef/0x17b0
[  129.181505][   T81]  ? _raw_spin_unlock_irq+0x23/0x50
[  129.181523][   T81]  ? process_scheduled_works+0x9ef/0x17b0
[  129.181535][   T81]  ? process_scheduled_works+0x9ef/0x17b0
[  129.181550][   T81]  process_scheduled_works+0xae1/0x17b0
[  129.181590][   T81]  ? __pfx_process_scheduled_works+0x10/0x10
[  129.181614][   T81]  worker_thread+0x8a0/0xda0
[  129.181629][   T81]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  129.181651][   T81]  ? __kthread_parkme+0x7b/0x200
[  129.181670][   T81]  kthread+0x711/0x8a0
[  129.181686][   T81]  ? __pfx_worker_thread+0x10/0x10
[  129.181697][   T81]  ? __pfx_kthread+0x10/0x10
[  129.181713][   T81]  ? _raw_spin_unlock_irq+0x23/0x50
[  129.181728][   T81]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.181738][   T81]  ? __pfx_kthread+0x10/0x10
[  129.181752][   T81]  ret_from_fork+0x439/0x7d0
[  129.181767][   T81]  ? __pfx_ret_from_fork+0x10/0x10
[  129.181782][   T81]  ? __switch_to_asm+0x39/0x70
[  129.181796][   T81]  ? __switch_to_asm+0x33/0x70
[  129.181837][   T81]  ? __pfx_kthread+0x10/0x10
[  129.181854][   T81]  ret_from_fork_asm+0x1a/0x30
[  129.181878][   T81]  </TASK>
[  129.314513][   T81] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  129.449383][ T7860] netlink: 12 bytes leftover after parsing attributes in process `syz.2.754'.
[  129.561344][ T7863] loop3: detected capacity change from 0 to 4096
[  129.569141][ T7863] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  129.569750][   T96] IPVS: starting estimator thread 0...
[  129.682510][ T7866] IPVS: using max 34 ests per chain, 81600 per kthread
[  130.039398][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.771'.
[  130.042948][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.771'.
[  130.160702][ T7903] veth1_to_bond: entered allmulticast mode
[  130.163615][ T7903] veth1_to_bond: left allmulticast mode
[  130.235577][ T7907] loop3: detected capacity change from 0 to 512
[  130.247403][ T7907] EXT4-fs: old and new quota format mixing
[  131.919343][ T7930] loop0: detected capacity change from 0 to 2048
[  131.945822][ T7931] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  131.979683][   T33] audit: type=1800 audit(1758790141.463:54): pid=7930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.783" name="bus" dev="loop0" ino=18 res=0 errno=0
[  132.188977][ T7931] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  132.202134][ T7931] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4)
[  132.220440][ T7931] Remounting filesystem read-only
[  132.234420][ T5857] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[  132.427024][ T7926] loop3: detected capacity change from 0 to 131072
[  132.430107][ T7926] F2FS-fs (loop3): Invalid log sectorsize (67108873)
[  132.432541][ T7926] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  132.436685][ T7926] F2FS-fs (loop3): invalid crc value
[  132.484034][ T7926] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  132.493338][ T7926] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  132.496005][ T7926] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  132.504578][ T7926] F2FS-fs (loop3): inconsistent node block, node_type:2, nid:8, node_footer[nid:8,ino:8,ofs:0,cpver:5013063228981249506,blkaddr:100678662]
[  132.527102][ T7958] netlink: 'syz.0.795': attribute type 1 has an invalid length.
[  132.575953][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.577950][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.593055][ T7958] 8021q: adding VLAN 0 to HW filter on device bond1
[  132.631075][ T7958] bond1: (slave veth5): Enslaving as an active interface with a down link
[  133.685133][ T7982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.805'.
[  134.465576][ T7994] loop0: detected capacity change from 0 to 64
[  134.569530][ T8000] loop0: detected capacity change from 0 to 256
[  134.586491][   T33] audit: type=1800 audit(1758790144.073:55): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.814" name="file2" dev="loop0" ino=1048618 res=0 errno=0
[  134.596833][ T8000] exFAT-fs (loop0): error, data size is invalid(34359738378)
[  134.600494][ T8000] exFAT-fs (loop0): Filesystem has been set read-only
[  134.839791][ T8008] loop0: detected capacity change from 0 to 32768
[  134.842489][ T8008] bcachefs: bch2_fs_parse_param() Error parsing option degraded: option_value
[  134.879733][ T8012] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.820'.
[  135.301058][ T8028] loop3: detected capacity change from 0 to 128
[  135.328881][ T8028] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  135.349840][ T8028] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  135.514656][ T8028] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  135.568227][ T8028] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[  135.613491][ T8045] tipc: Started in network mode
[  135.615025][ T7038] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  135.615609][ T8045] tipc: Node identity 0e8694de3179, cluster identity 4711
[  135.624318][ T8045] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.629999][ T8045] syzkaller0: entered promiscuous mode
[  135.636044][ T8045] syzkaller0: entered allmulticast mode
[  135.661227][ T8045] tipc: Resetting bearer <eth:syzkaller0>
[  135.705526][ T8044] tipc: Resetting bearer <eth:syzkaller0>
[  135.786270][ T8044] tipc: Disabling bearer <eth:syzkaller0>
[  135.870728][ T8051] netlink: set zone limit has 4 unknown bytes
[  135.876407][ T8052] netlink: del zone limit has 4 unknown bytes
[  136.718411][ T8073] RDS: rds_bind could not find a transport for ::ffff:0.0.0.224, load rds_tcp or rds_rdma?
[  137.369523][ T8111] loop3: detected capacity change from 0 to 2048
[  137.402153][ T8115] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  137.484115][ T8119] loop3: detected capacity change from 0 to 256
[  137.486839][ T8119] exfat: Bad value for 'uid'
[  137.489438][ T8119] exfat: Bad value for 'uid'
[  137.597189][ T8126] TCP: TCP_TX_DELAY enabled
[  138.024762][ T8131] fuse: Unknown parameter 'grou00000000000000000000'
[  138.877797][ T8148] loop0: detected capacity change from 0 to 2048
[  138.906213][ T8148] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  139.173339][ T8150] Dead loop on virtual device ip6_vti0, fix it urgently!
[  139.175773][ T8150] Dead loop on virtual device ip6_vti0, fix it urgently!
[  139.178784][ T8150] Dead loop on virtual device ip6_vti0, fix it urgently!
[  139.181341][ T8150] Dead loop on virtual device ip6_vti0, fix it urgently!
[  139.185083][ T8150] Dead loop on virtual device ip6_vti0, fix it urgently!
[  139.187460][ T8150] Dead loop on virtual device ip6_vti0, fix it urgently!
[  139.355595][ T8160] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  139.631419][ T8171] loop3: detected capacity change from 0 to 32768
[  139.671535][ T8171] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  139.693931][   T33] audit: type=1800 audit(1758790149.183:56): pid=8171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.886" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  140.144105][ T8183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.890'.
[  140.152040][ T8183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.890'.
[  140.287182][ T8189] netlink: 32 bytes leftover after parsing attributes in process `syz.0.893'.
[  140.511064][ T7038] ocfs2: Unmounting device (7,3) on (node local)
[  140.657182][ T8214] loop3: detected capacity change from 0 to 256
[  140.664307][ T8214] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  142.071829][ T8237] loop0: detected capacity change from 0 to 512
[  142.083781][ T8237] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal
[  142.562931][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.922'.
[  142.568710][ T8255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.922'.
[  142.582011][ T8255] netlink: 'syz.2.922': attribute type 7 has an invalid length.
[  143.111736][ T8269] loop3: detected capacity change from 0 to 32768
[  143.115631][ T8269] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.930 (8269)
[  143.122757][ T8269] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  143.126331][ T8269] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  143.263013][ T8269] BTRFS info (device loop3): enabling ssd optimizations
[  143.267117][ T8269] BTRFS info (device loop3): enabling free space tree
[  143.338617][   T10] IPVS: starting estimator thread 0...
[  143.368162][ T7038] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  143.442466][ T8308] IPVS: using max 46 ests per chain, 110400 per kthread
[  143.759575][ T8320] loop3: detected capacity change from 0 to 4096
[  144.233276][ T8328] syzkaller1: entered promiscuous mode
[  144.235658][ T8328] syzkaller1: entered allmulticast mode
[  144.525220][ T8334] netlink: 44 bytes leftover after parsing attributes in process `syz.0.952'.
[  144.530936][ T8334] netlink: 35 bytes leftover after parsing attributes in process `syz.0.952'.
[  144.536397][ T8334] netlink: 'syz.0.952': attribute type 5 has an invalid length.
[  144.539560][ T8334] netlink: 'syz.0.952': attribute type 6 has an invalid length.
[  144.545009][ T8334] netlink: 35 bytes leftover after parsing attributes in process `syz.0.952'.
[  144.929966][ T8359] loop3: detected capacity change from 0 to 128
[  144.938141][ T8359] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  144.945622][ T8359] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  145.015569][ T6620] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  145.091240][ T8363] bridge0: port 3(syz_tun) entered blocking state
[  145.094823][ T8363] bridge0: port 3(syz_tun) entered disabled state
[  145.097759][ T8363] syz_tun: entered allmulticast mode
[  145.105017][ T8363] syz_tun: entered promiscuous mode
[  145.108807][ T8363] bridge0: port 3(syz_tun) entered blocking state
[  145.111650][ T8363] bridge0: port 3(syz_tun) entered forwarding state
[  145.120532][ T8363] netlink: 'syz.2.965': attribute type 10 has an invalid length.
[  145.124381][ T8363] bridge0: port 3(syz_tun) entered disabled state
[  145.127003][ T8363] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.138627][ T8363] bridge0: port 3(syz_tun) entered blocking state
[  145.141249][ T8363] bridge0: port 3(syz_tun) entered forwarding state
[  145.144231][ T8363] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.146996][ T8363] bridge0: port 1(bridge_slave_0) entered forwarding state
[  145.156798][ T8363] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  145.207950][ T8365] tls_set_device_offload: netdev not found
[  145.334122][ T5854] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  145.492153][ T5854] usb 4-1: Using ep0 maxpacket: 32
[  145.496225][ T5854] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  145.500327][ T5854] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.504874][ T5854] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.508732][ T5854] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 22
[  145.515564][ T5854] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40
[  145.519032][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  145.523185][ T5854] usb 4-1: SerialNumber: syz
[  145.533729][ T5854] cdc_acm 4-1:1.0: Control and data interfaces are not separated!
[  145.536976][ T5854] cdc_acm 4-1:1.0: This needs exactly 3 endpoints
[  145.539655][ T5854] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22
[  145.543562][ T5854] usbtest 4-1:1.0: Linux gadget zero
[  145.546325][ T5854] usbtest 4-1:1.0: high-speed {control in/out int-in} tests (+alt)
[  145.737184][   T96] usb 4-1: USB disconnect, device number 4
[  146.072094][ T8385] netlink: 'syz.2.976': attribute type 1 has an invalid length.
[  148.356888][ T8414] delete_channel: no stack
[  148.599428][ T8429] loop6: detected capacity change from 0 to 524288000
[  148.642873][ T8429] loop6: detected capacity change from 524288000 to 0
[  149.078890][ T8441] loop0: detected capacity change from 0 to 16
[  149.103164][ T8442] loop3: detected capacity change from 0 to 512
[  149.168685][ T8442] EXT4-fs (loop3): 1 orphan inode deleted
[  149.170926][ T8441] erofs (device loop0): mounted with root inode @ nid 36.
[  149.176387][ T8442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.180634][ T8442] ext4 filesystem being mounted at /syzcgroup/cpu/syz3/cgroup.procs supports timestamps until 2038-01-19 (0x7fffffff)
[  149.187329][   T68] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  149.192436][   T68] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u10:2: Failed to release dquot type 1
[  149.201259][   T68] EXT4-fs (loop3): Remounting filesystem read-only
[  149.206125][ T8442] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.511844][   T33] audit: type=1326 audit(1758790158.995:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8453 comm="syz.3.1002" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f632e98ec29 code=0x0
[  149.678931][ T8470] loop0: detected capacity change from 0 to 1024
[  149.683617][ T8470] EXT4-fs: Ignoring removed bh option
[  149.689298][ T8470] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  149.717589][ T8470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.782834][   T33] audit: type=1804 audit(1758790159.265:58): pid=8470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1009" name="/newroot/294/file1/bus" dev="loop0" ino=18 res=1 errno=0
[  150.565169][ T5857] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.992403][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880403ce400: rx timeout, send abort
[  151.998295][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880403cec00: rx timeout, send abort
[  152.002027][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880403ce400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  152.007785][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880403cec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  152.508002][ T8499] loop3: detected capacity change from 0 to 32768
[  152.639605][ T8499] read_mapping_page failed!
[  152.644080][ T8499] ERROR: (device loop3): txCommit: 
[  152.644080][ T8499] 
[  152.677918][  T117] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0)
[  152.680939][  T117] ------------[ cut here ]------------
[  152.683351][  T117] kernel BUG at fs/jfs/jfs_txnmgr.c:931!
[  152.695266][  T117] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  152.697697][  T117] CPU: 1 UID: 0 PID: 117 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[  152.701267][  T117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  152.705144][  T117] RIP: 0010:txUnlock+0xdaf/0xdf0
[  152.707115][  T117] Code: e4 fd 90 0f 0b e8 81 d3 7c fe 48 c7 c7 20 23 c4 8b 48 c7 c6 19 1f c4 8b ba a3 03 00 00 48 c7 c1 20 30 c4 8b e8 72 c5 e4 fd 90 <0f> 0b e8 5a d3 7c fe 48 c7 c7 20 23 c4 8b 48 c7 c6 19 1f c4 8b ba
[  152.714530][  T117] RSP: 0018:ffffc900024afbc8 EFLAGS: 00010246
[  152.716958][  T117] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 3f4cf8e2b7f4da00
[  152.720019][  T117] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  152.723140][  T117] RBP: ffffc90002002090 R08: ffffc900024af8e7 R09: 1ffff92000495f1c
[  152.726226][  T117] R10: dffffc0000000000 R11: fffff52000495f1d R12: dffffc0000000000
[  152.729217][  T117] R13: 1ffff1102423e7c7 R14: ffff8881211f3e38 R15: 0000000000000000
[  152.732235][  T117] FS:  0000000000000000(0000) GS:ffff8881a3c13000(0000) knlGS:0000000000000000
[  152.735582][  T117] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  152.738134][  T117] CR2: 000055555c1355c8 CR3: 000000011115a000 CR4: 00000000000006f0
[  152.741291][  T117] Call Trace:
[  152.742584][  T117]  <TASK>
[  152.743730][  T117]  ? lockdep_hardirqs_on+0x9c/0x150
[  152.745710][  T117]  jfs_lazycommit+0x584/0xa90
[  152.747476][  T117]  ? __pfx_jfs_lazycommit+0x10/0x10
[  152.749467][  T117]  ? __pfx_default_wake_function+0x10/0x10
[  152.751685][  T117]  ? __kthread_parkme+0x7b/0x200
[  152.753568][  T117]  ? __kthread_parkme+0x1a1/0x200
[  152.755401][  T117]  kthread+0x711/0x8a0
[  152.756927][  T117]  ? __pfx_jfs_lazycommit+0x10/0x10
[  152.758986][  T117]  ? __pfx_kthread+0x10/0x10
[  152.760860][  T117]  ? _raw_spin_unlock_irq+0x23/0x50
[  152.762803][  T117]  ? lockdep_hardirqs_on+0x9c/0x150
[  152.764877][  T117]  ? __pfx_kthread+0x10/0x10
[  152.766732][  T117]  ret_from_fork+0x439/0x7d0
[  152.768540][  T117]  ? __pfx_ret_from_fork+0x10/0x10
[  152.770534][  T117]  ? __switch_to_asm+0x39/0x70
[  152.772453][  T117]  ? __switch_to_asm+0x33/0x70
[  152.774338][  T117]  ? __pfx_kthread+0x10/0x10
[  152.776080][  T117]  ret_from_fork_asm+0x1a/0x30
[  152.777992][  T117]  </TASK>
[  152.779234][  T117] Modules linked in:
[  152.781359][  T117] ---[ end trace 0000000000000000 ]---
[  152.786692][  T117] RIP: 0010:txUnlock+0xdaf/0xdf0
[  152.788625][  T117] Code: e4 fd 90 0f 0b e8 81 d3 7c fe 48 c7 c7 20 23 c4 8b 48 c7 c6 19 1f c4 8b ba a3 03 00 00 48 c7 c1 20 30 c4 8b e8 72 c5 e4 fd 90 <0f> 0b e8 5a d3 7c fe 48 c7 c7 20 23 c4 8b 48 c7 c6 19 1f c4 8b ba
[  152.796056][  T117] RSP: 0018:ffffc900024afbc8 EFLAGS: 00010246
[  152.798413][  T117] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 3f4cf8e2b7f4da00
[  152.801479][  T117] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  152.804888][  T117] RBP: ffffc90002002090 R08: ffffc900024af8e7 R09: 1ffff92000495f1c
[  152.807636][  T117] R10: dffffc0000000000 R11: fffff52000495f1d R12: dffffc0000000000
[  152.810415][  T117] R13: 1ffff1102423e7c7 R14: ffff8881211f3e38 R15: 0000000000000000
[  152.813438][  T117] FS:  0000000000000000(0000) GS:ffff8881a3c13000(0000) knlGS:0000000000000000
[  152.816729][  T117] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  152.819154][  T117] CR2: 000055555c1355c8 CR3: 000000000df36000 CR4: 00000000000006f0
[  152.822692][  T117] Kernel panic - not syncing: Fatal exception
[  152.825520][  T117] Kernel Offset: disabled
[  152.827071][  T117] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:49:22  Registers:
info registers vcpu 0

CPU#0
RAX=1ffff92000545ecb RBX=ffffc90002a2f660 RCX=0000000000000000 RDX=0000000000000000
RSI=0000000000000004 RDI=ffffc90002a2f660 RBP=ffff888040a40fc0 RSP=ffffc90001c8f640
R8 =ffff88810a1b26d3 R9 =1ffff110214364da R10=dffffc0000000000 R11=ffffed10214364db
R12=ffff888040a40fc8 R13=dffffc0000000000 R14=ffffc90002a2f658 R15=ffff888040a40fc0
RIP=ffffffff819a8de0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f9dec6d56c0 ffffffff 00c00000
GS =0000 ffff8880b8613000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000003b9030 CR3=000000003c3ce000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=7665642f74656e01 ffffffffffffffff
XMM02=04060175a6028004 000800040075de00 XMM03=7284048010000210 000fffffffffffff
XMM04=010fffffffffffff 0403808010004080 XMM05=10000fffffffffff ff04010000000806
XMM06=0a01728404801000 0210000fffffffff XMM07=ffff04060175a602 8004000800040075
XMM08=ffffffffffffffef 08000300100020ea XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff934e3e90 RBX=00000000000003fd RCX=0000000000000265 RDX=0000000000000008
RSI=00000000000003fd RDI=ffff888021225640 RBP=ffffffff934e3e90 RSP=ffffc90006c36e40
R8 =ffffc90006c36e08 R9 =0000000000000020 R10=dffffc0000000000 R11=ffffffff819dced0
R12=ffffffff963580d8 R13=ffffffff96358148 R14=ffff888021226248 R15=0000000000000264
RIP=ffffffff819db3c4 RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555c11a500 ffffffff 00c00000
GS =0000 ffff8881a3c13000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055555c1355c8 CR3=000000011115a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000ff0000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
