last executing test programs:

3m51.271921845s ago: executing program 1 (id=128):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000800)={[{@errors_remount}, {@noload}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@nomblk_io_submit}]}, 0x1, 0x546, &(0x7f0000000180)="$eJzs3dFrZFcZAPDv3mR2s7upmaoPtWAttrJbdSdJ47bBh6og+lRQKz4Ja0wmIWSSWZJJuwmLTfFVEES04Is++SL4BwjSF99FKNR3UVGkZvVBoe2VO3Onm0xmkhRncpfk94Oz9557Zu73nQlz5tyZu/cGcGE9GRE3ImIsIp6JiKlie1qU2OuU/HH39+8t5iWJLHvp7SSSYlt3X5eL5bXiaRMR8Y2vRnw3ORp3a2d3baHRqG8W9enWevJOlu3eXF1fWKmv1Dfm5mafm39+/tb8zFD6WY2IF77815/88JdfeeG3n33lT7f/fuN7eVr/zbJXo6cfw9TpeqX9WnSNR8TmKIKVZLzdw45bJecCAMDx8vn+hyPik+35/1SMtWdzAAAAwHmSfWEy3kkiMgAAAODcSiNiMpK0VpzvO1mcsXotIj4aV9NGc6v1meXm9sZS3hZRjUq6vNqoz8RE+9yBalSSvD5bnGPbrT/bU5+LiEcj4sdTV9r12mKzsVT2lx8AAABwQVzrOf7/91Sa1mpF417JyQEAAADDUy07AQAAAGDkHP8DAADA+VfN+tyh66h09JkAAAAAI/C1F1/MS9a9//XSyzvba82Xby7Vt9Zq69uLtcXm5p3aSrO50r5m3/pJ+2s0m3c+Fxvbd6db9a3W9NbO7u315vZG6/bqoVtgAwAAAGfo0U+88cckIvY+f6VdcpeKtkpENnbwweNlZAiMygc6p+cvo8sDOHsHP9+vlJgHcPZM6eHiqpSdAFC6k/4D0MCTd34//FwAAIDRuP6xwb//v71camrAiBW//yenugAIcK6MlZ0AUJrO73/vZR1lZwOcpcpxMwAHBXDupcP5/f+EUwkTAwoAAJRssl2StFYcB0xGmtZqEY+0bwtYSZZXG/WZiPhQRLw1Vbmc12fbz0zM5gEAAAAAAAAAAAAAAAAAAAAAAADglLIsiQwAAAA41yLSv3XvzHV96unJ3u8HLiX/mWovI+KVn73007sLrdbmbL79n+9vb71ebH+2jG8wAAAAgF7d4/TucTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADNP9/XuL97Msy/bvLZ5l3H98KSKqRfyidFrGY6K9nIhKRFz9VxLjB56XRMTYEOLvvRYRj/WLn+RpRbXI4lD8SxFpRFwZVvz4gPGjE//aEOLDRfZGPv58sd/7L40n28v+77/xovy/Bo9/6fvj39iA8e+RQTutHK4+/uavpwfGfy3i8fH+4083fpLvr0/8p07Zx+98c3d3UFv2i4jr/ca/5HCs6db6nemtnd2bq+sLK/WV+sbc3Oxz88/P35qfmV5ebdSLf/vG+NHHf/Peg9q7R/p/9Zjxt93/Aa//06fs/7tv3t3/SGe15y8Tlfh5lt14qv/f/7F88emj8buffZ8qPgfyev4apq9/q2/8J371hycG5Zb3f2lA/yd6+n+5p/83Ttn/Z77+/T+f8qEAwBnY2tldW2g06ptWDq5E9aFI4+FdyeedpaeRRBL5yluHmhbKT6yz8mrxHltodN9tQ9rz74qDo1EmX9J4BAAAjM6DSX9vS1JOQgAAAAAAAAAAAAAAAAAAAHABnXgZsEFNaUQ82PLtHxxzNbLemHvldBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Fj/CwAA//8GI9aV")
newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0, 0x5000)

3m51.093945237s ago: executing program 1 (id=132):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r1, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8})

3m50.849037678s ago: executing program 1 (id=140):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/86, 0x56}], 0x1}, 0x0)

3m50.631249253s ago: executing program 1 (id=144):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x43b, &(0x7f0000000440)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91)

3m50.451694166s ago: executing program 1 (id=149):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x8070bd2a, 0x20, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xffffffff}]}}]}, 0x38}}, 0x0)

3m50.039379983s ago: executing program 1 (id=152):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0xe, 0x81, 0x0, 0x3, 0xec, 0x7, 0x4, 0x8b, 0x2, 0xf6, 0x0, 0x28, 0x3, 0x9}, 0xe)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
r1 = dup(r0)
read$watch_queue(r1, &(0x7f0000000040)=""/20, 0x14)

3m49.884000796s ago: executing program 32 (id=152):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0xe, 0x81, 0x0, 0x3, 0xec, 0x7, 0x4, 0x8b, 0x2, 0xf6, 0x0, 0x28, 0x3, 0x9}, 0xe)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
r1 = dup(r0)
read$watch_queue(r1, &(0x7f0000000040)=""/20, 0x14)

2m37.498519985s ago: executing program 0 (id=924):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
io_setup(0x8, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0xf850, r0, 0x0, 0x0, 0x3, 0x0, 0x2}])

2m37.263848685s ago: executing program 0 (id=926):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0xc, 0x3}]}, &(0x7f0000000200)='syzkaller\x00'}, 0x94)

2m37.081092705s ago: executing program 0 (id=928):
r0 = msgget$private(0x0, 0x7fc)
msgrcv(r0, 0xffffffffffffffff, 0x0, 0x3, 0x1000)
msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x0)
msgctl$IPC_RMID(r0, 0x0)

2m36.945050654s ago: executing program 0 (id=931):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x18)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
r1 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)

2m36.779211186s ago: executing program 0 (id=934):
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8915, &(0x7f0000000280)={'dvmrp0\x00', {0x2, 0x4e23, @loopback}})

2m36.166223228s ago: executing program 0 (id=937):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xe, r1})

2m35.982501087s ago: executing program 33 (id=937):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xe, r1})

48.198448862s ago: executing program 4 (id=2242):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="660a00000000000061114c000000000085000000ac00000095"], &(0x7f00000004c0)='syzkaller\x00'}, 0x90)

48.137882348s ago: executing program 4 (id=2243):
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup_pressure(r1, &(0x7f0000000000)='memory.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000100)={'full', 0x20, 0x0, 0x20, 0x7}, 0x2f)

48.137623055s ago: executing program 4 (id=2244):
unshare(0x22020600)
r0 = socket(0x11, 0x2, 0x0)
connect$qrtr(r0, 0x0, 0x0)

48.046716647s ago: executing program 4 (id=2245):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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")
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cb19976d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc10700", "64885973ff030000000000000000d01cd3160000ffffff7f0000000000002000", [0x200]})

47.878367597s ago: executing program 4 (id=2246):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r1, 0xd3)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0)

47.558064222s ago: executing program 4 (id=2255):
r0 = syz_io_uring_setup(0x4d4d, &(0x7f0000000400)={0x0, 0x100bd7f, 0x1000, 0x0, 0x40024e}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
io_uring_enter(r0, 0x627, 0x4c1, 0x9, 0x0, 0x18)

47.489178441s ago: executing program 34 (id=2255):
r0 = syz_io_uring_setup(0x4d4d, &(0x7f0000000400)={0x0, 0x100bd7f, 0x1000, 0x0, 0x40024e}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
io_uring_enter(r0, 0x627, 0x4c1, 0x9, 0x0, 0x18)

18.054726339s ago: executing program 5 (id=2599):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
getsockname(r1, &(0x7f0000000280)=@ll={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0xb0)
sendmsg$nl_route_sched(r0, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000003b00)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x7, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x200480c4}, 0x0)

18.007065911s ago: executing program 5 (id=2601):
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x884, &(0x7f0000000540)={[{@jqfmt_vfsold}, {@delalloc}, {@sysvgroups}, {@noblock_validity}], [{@context={'context', 0x3d, 'staff_u'}}, {@subj_type={'subj_type', 0x3d, '[@.\x95}\xb0!'}}, {@dont_hash}, {@dont_measure}, {@permit_directio}, {@smackfsroot={'smackfsroot', 0x3d, 'staff_u'}}]}, 0x1, 0x24c, &(0x7f0000000900)="$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")
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$kcm(0x23, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x98, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x180, 0xffffffff, 0xffffffff, 0x180, 0xffffffff, 0x3, &(0x7f00000001c0), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xffffff00, 0x0, 'vxcan1\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0xc, 0x0, 0x29}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x932, 0x7}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x426}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228)
sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc})
r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r6, 0xffffffffffffffff, r7, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

17.2878017s ago: executing program 5 (id=2604):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70)

17.186094173s ago: executing program 5 (id=2605):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000400)={[{@force}, {@nodecompose}, {@nobarrier}, {@nls={'nls', 0x3d, 'koi8-u'}}, {@part={'part', 0x3d, 0xff}}, {}, {@nobarrier}, {@nobarrier}]}, 0x3, 0x6b3, &(0x7f0000000780)="$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")
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f00000000c0)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})

17.052346087s ago: executing program 5 (id=2607):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x1c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffff}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)

16.744750999s ago: executing program 5 (id=2612):
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020800000000000800000524050000082407000000009ef6230700000000a3a82f07070d240701060000fd800000001a4824030000000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}, 0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000020b6000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000000)={0x40, 0x10, 0x2f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000480)={0x40, 0x8, 0x2, "aa85"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

16.526652355s ago: executing program 35 (id=2612):
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020800000000000800000524050000082407000000009ef6230700000000a3a82f07070d240701060000fd800000001a4824030000000001"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}, 0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000020b6000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000000)={0x40, 0x10, 0x2f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000480)={0x40, 0x8, 0x2, "aa85"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.438157699s ago: executing program 3 (id=2715):
syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYRES64=0x0, @ANYBLOB="c3649be801cfa9d37b32e5a81bd8ef65d2d6ae7c55dce6f28d147bd4743ac27b", @ANYRES16, @ANYBLOB="91f895dd7ebcc2b83a83fb121e4e844e5d7a09e7d4a4979f3fdfe200b83e593144c1cf15b5624e3448b3b40065bc381005ed653b2e5aeafdfb38eeddb8c08b04fb2e46eba33d22f32db6a9608832f35ee976140648653030c5dd9306f90fc9f46534c6d9f2b37f945ba052c7197494046b00916b8f07b5b9f05f77f79225aa0700a01e414c5352def7a6078229384108c95320a4abf33afd65548efaf0b3dc54c4c10995d3e08a9017ae0c8828c59983d23cf29ff4ff4a16908f199ba7"], 0x1, 0x556c, &(0x7f000000b980)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008)
mknod$loop(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1)

2.431762919s ago: executing program 2 (id=2716):
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0)

2.345572973s ago: executing program 2 (id=2717):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
poll(0x0, 0x0, 0xffffffffffbffff8)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe)
listen(r0, 0x90004)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)

2.002457193s ago: executing program 3 (id=2718):
r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000380)={"00000004", 0x3, 0x5, 0x2, 0x0, 0x200, 'c\x00', '\x00\x00\x00@', "0300", "f3fd8000", ["8b090900", "c2fed600ddff9aabeab0cbc7", "000000000000001400", "0000000b0400"]})

1.744435547s ago: executing program 6 (id=2721):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x43}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x20008844)
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001988800fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f"], 0xfdef)

1.655605246s ago: executing program 3 (id=2722):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000500)={[{@dots}, {@fat=@check_normal}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@fat=@quiet}, {@fat=@nfs_nostale_ro}, {@nodots}, {@nodots}, {}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@fat=@tz_utc}, {@fat=@nfs}, {@dots}, {@dots}, {@dots}, {@fat=@flush}]}, 0xfd, 0x1bf, &(0x7f0000000840)="$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")
mount$nfs(&(0x7f0000000000)='.\xec\xbf. ', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0)

1.594495847s ago: executing program 3 (id=2723):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x1, 0x102)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x0, @local}, 0x2}}, 0x26)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000340)={0x14, r1, 0x70d, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000)
syz_open_dev$hiddev(0x0, 0x0, 0x0)

1.57991339s ago: executing program 6 (id=2724):
r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "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"})
ioctl$USBDEVFS_CONNECTINFO(r0, 0x8004550f, &(0x7f0000001980))

1.57708624s ago: executing program 3 (id=2725):
syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005e05b14021040203e8450000000109025100010000000009040900000202ff00052406000105240000000d24b8fe3f9ea3a0e8ca0800ff06241a05002a052401010305240600010524"], 0x0)

1.485310334s ago: executing program 6 (id=2726):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x3}]}}}]}, 0x3c}}, 0x0)

1.484967803s ago: executing program 2 (id=2727):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x150, 0x0, 0x0, [{{0x3, 0x0, 0x0, 0x0, 0x10000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, r2}}, {0x0, 0x0, 0x8, 0x2, 'group_id'}}, {{0x3, 0xffffffffffffffff, 0x0, 0x0, 0x746, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000}}, {0x0, 0x0, 0x8, 0x4, 'group_id'}}]}, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r3, 0x0, 0x0)

1.433758582s ago: executing program 2 (id=2728):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xd, &(0x7f00000000c0)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@ld={0x18, 0x0}, {}, {0x5}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f0000000180)='syzkaller\x00', 0x1}, 0x90)

1.433331817s ago: executing program 2 (id=2729):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14<L\x19K\xbf\xf7\x9c\xe7 \x12+4.\xa9\xa7\xdc[\xd2\xec\xbe\x1a\xa1\x04\xd3\x9e\x92\x8a\xf7\xdb\xe7f\xdeo\xc1\xa5\xb6T\r)\x1c\xbe\x12\xd1\xef\xc2S\xcci\xc8\x0e\x00]\xe6|\xccK\xc7\r\xfa \x02\xe8\x1b\xc1\x93\xce\x02%\x86\xcb\x94K\v\xe7x\xe3\x06[/\xf9\xa8\x82\x9b\xeeF\x88\xc0f\x82\xb7T\r\x04\xbb\x10\x1d3\xa6', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = gettid()
tkill(r6, 0xb)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000), 0x0)
r8 = accept4(r7, 0x0, 0x0, 0x80800)
sendmmsg$alg(r8, &(0x7f0000000040), 0x0, 0x40800)
recvmsg$unix(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/25, 0x19}], 0x1}, 0x40010062)
r9 = socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$sock_TIOCINQ(r9, 0x541b, &(0x7f0000000100))

1.29388968s ago: executing program 6 (id=2730):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x1, 0x0, {0x0, 0x0, 0x4, 0x0, 0x10100, 0x1a724}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x41}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40050814}, 0x4000044)

1.163390306s ago: executing program 6 (id=2731):
syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x1010006, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@discard_size={'discard', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@errors_remount}, {}, {@noquota}, {@quota}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-13'}}]}, 0x24, 0x628f, &(0x7f00000065c0)="$eJzs3c1vHGcdB/Df7JtfStuoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyCSgwTqAXXQ2M/jjKe7XjuJd3Yzn4/kzPzmmfE+k++Od9cz4ycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjhD358roiIK79KC05EfC76Eb2Ilapei4iVtRP1bV6IneZ4PiKGSxHV9jv/PBvxekR8/EzE9v0769Xi84fsx/f//I8//OSpH/39T8Mz//3Lrf4bk9a7ffu3//nr3YffXwAAAOiisizLIn3MPxkRg/TZHgB48uXX/zLJy9VzV2/OWX/UarVavYB1XTne3XoREZv1bar3DE7HA8CC2YxP2u4CLZJ/pw0i4qm2OwHMtaLtDnAstu/fWS9SvkX99WBttz1fC7Iv/81i7/6OSdNpmteYzOr5tRX9eG5Cf1Zm1Id5kvPvNfO/sts+Susdd/6zMin/0e6tT52T8+838294cvLvjc2/q3L+gyPl35c/AAAAAADMsfz7/xMtn/9devRdOZSDzv+uzagPAAAAAAAAAPC4HXX8v0Fj/L89xv8DAACAuVV9Vq/87pkHyyb9LbZq+eUi4unG+kDHpJtlVtvuBwAAAAAAAAAAAAB0yWD3Gt7LRcQwIp5eXS3Lsvqqa9ZH9ajbL7qu7z90Wds/5AEAYNfHzzTu5S8iliPicvpbf8PV1dWyXF5ZLVfLlaX8fna0tFyu1D7X5mm1bGl0iDfEg1FZfbPl2nZ10z4vT2tvfr/qsUZl/xAdm40WAweAiNh9Ndqe9Ir0P69Xi6ksn42W3+SwIA44/llQjn8Oo+3nKQAAAHD8yrIsi/TnvE+mc/69tjsFAMxEfv1vnhdQq9VqtVr95NV15Xh360VEbNa3qd4zGI4fABbMZnzSdhdokfw7bRARL7TdCWCuFW13gGOxff/OepHyLeqvB2l893wtyL78N4ud7fL246bTNK8xmdXzayv68dyE/jw/oz7Mk5x/r5n/ld32UVrv0fMv9/2asK1rjCblX+3niRb607acf7+Zf8NxH/+zshW9sfl3Vc5/cKT8+/IHAAAAAIA5ln//f2Kuzv+OHnZ3pjro/O/a2C2Ory8AAAAAAAAA8Lhs37+znu97zef/vzBmPfd/Pply/oX8Oynn32vk/9XGev3a/L23H+T/7/t31v9461+fz9PD5r+UZ4r0zCrSM6JIj1QM0vRR9u6ztob9UfVIw6LXH6Rrfsrhu3EtrsdGnN23bi/9fzxoP7evverpcKe97O+2n9/XPthrz9tf2Nc+TFcXlSu5/XSsx8/jeryz0161LU3Z/+Up7eWU9px/3/HfSdtpOnjw9WxVr6blRWNaufdR7zPHfX067nHeuvbF35w91j05nK3o7+1bXbV/L7XQn53/k6dG8cubGzdO375669aNc5Em+5aejzR5zPLxP0xfez//X95tzz/368frvY9GR85/XmzFYGL+L9fmq/19ZcZ9a0POf5S+cv7vpPbxx/8i5z/5+H+1hf4AAAAAAAAAAAAAAADAQcqy3LlF9K2IuJju/2nr3kwAYLby63+Z5OWzqvszfjy1esHrYs76M9P603K++qNWL2JdV473Zr2IiL/Vt6neM/x63DcDAObZpxHxz7Y7QWvk32H57/1V01NtdwaYqZsffPjTq9evb9y42XZPAAAAAAAAAICHlcf/XKuN/3yqLMu7jfX2jf/6dqw96vifgzyzN8DohIGq+0ffp4Ns9Ub9Xm248Rdj0vjfw725g8b/Hkx5vOGU9tGU9qUp7ctT2sfe6FGT83+xNt75qYg42Rh+vQvjvzbHvO+CnP9Ltedzlf9XGuvV8y9/v8j59/blf+bW+784c/ODD1+79v7V9zbe2/jZhXPnzl64ePHSpUtn3r12fePs7r8t9vh45fzz2NeuA+2WnH/OXP7dkvP/Uqrl3y05/y+nWv7dkvPP7/fk3y05//zZR/7dkvN/JdXy75ac/9dSLf9uyfm/murp+U/7jSaLJOf/9VQ7/rsl5/9aquXfLTn/06mWf7fk/M+k+pD5rxx3v5iNnH8+w+X475acf76yQf7dkvM/n2r5d0vO/0Kq5d8tOf/XUy3/bsn5fyPV8u+WnP/FVMu/W3L+30y1/Lsl538p1fLvlpz/t1It/27J+X871fLvlpz/G6mWf7fk/L+Tavl3S87/u6mWf7fk/L+Xavl3S87/zVTLv1se/P1/M2bMmMkzbf9kAgAAAAAAAAAAAACaZnE5cdv7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyfHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh7+5i5DrLO4Cf/fTaIYmBkDqpgY1jQkg22bWd+IM2xYTPhq8SCIV+YLvetVlwbOO1S6CRbBookTAqqmgbLtoCQm1uKnLBBa0A5QK1QmoF7QXtBQKhchFVAQWkSrQCtppz3vfdmdnZmV3vePfMOb+fZD/eM2fmvHPmPWfn2fV/DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzW55zdwnhrIsa/zJ/9qeZc9r/Hvr5PZ82Ss3e4QAAADAev0i//u569OCw6u4U9M6//ySb315cXFxMXv3yJ+PfWZxMd0wmWVjW7Isvy166gfvGWpeJ3gsmxgabvp6uMfmR3rcPtrj9rEet4/3uH1Lj9snety+bAcss7X4eUz+YLvzf24vdml2QzaW37a7w70eG9oyPBx/lpMbyu+zOHYim89OZXPZTMv6xbpD+fpfvaWxrTdmcVvDTdva2ZghP3n0eBzDUNjHu1u2tfSY0Y9enU3+9CePHv/b88/e1Kn23A0tj1eM8/ZdjXF+LCwpxjqUbUn7JI5zuGmcOzu8JiMt4xzK79f4d/s4n1vlOEeWhrmh2l/ziWw4//e38/002vxjvbSfdoZlP7s1y7JLS8NuX2fZtrLhbFvLkuGl12eimJGNx2hMpRdko2uap7esYp426uzu1nnafkzE1/+WcL/RFcbQ/DL96KPjTa/7zxevZJ5GjWe90rHSPgf7fayUZQ7GefHt/Ek/3nEO7g7P/9HbVp6DHedOhzmYnnfTHNzVaw4Oj4/kY04vwlB+n6U5uKdl/ZF8S0N5fea27nNw+vzDZ6cXPvyRu+YfPnZy7uTc6X179szs27//4MGD0yfmT83NFH9f4d4uv23ZcDoGdoV9F4+Bl7et2zxVFz8/vuz8e6XH4USX43B727r9Pg5H25/c0MYckMvndHFsvLOx0ycuD2crHGP563PH+o/D9LybjsPRpuOw4/eUDsfh6CqOw8Y6Z+9Y3XuW0aY/ncaw8veC9c3B7U1zsP39SPsc7Pf7kbLMwYkwL757x8rfC3aG8T4+tdb3IyPL5mB6uuHc01iS3u9PHMxLp3l5c+OGa8azCwtz5+5+5Nj58+f2ZKFsiBc2zZX2+bqt6Tlly+br8Jrn6+H5lzx+c4fl28O+mrir8dfEiq9VY5177u7+WuXf3Trvz5ale7NQ+myj92en7+aN/TmeZZ/9xkcf/Nqjn33Nivuz0W9+bHr978VTX9p0/h1b4fwb+/5fFttLD/XYyNhocfyOpL0z1nI+bn2pRvNz11C+7eemV3c+Hgt/Nvp8fEOX8/GOtnX7fT4ea39y8Xw81OunHevT/npOhHlyaqb7+bixzo69a52To13Px7eGOhT2/ytCp5D6oqa5s9K8TdsaHR0Lz2s0bqF1nu5rWX8s9GaNbT25N7wpTKNc3Ty9/dZi/ZGm+0UbNU8n29bt9zxNP/taaZ4O9frp25Vpfz0nwry4YV/3edpY5+l71n/u3Br/2XTuHO81B8dGxhtjHkuTMD/fZ4tb4xy8OzuenclOZbP5reP5fBrKtzV17+rOlePhz0afK3d0mYO3t63b7zmYvo+tNPeGRpc/+T5ofz0nwrx44t7uc7CxzmsP9Pe96+1hSVqn6b1r+8/XVvqZ181tu+lqzZXRMM5vHOj+s9nGOqcOrrXP7L6f7gxLrumwn9qP35WOqdlsY/bTjjDOZw+uvJ8a42ms85lDq5xPh7Msu/jB+/Of94bfr1y88J0vt/zepdPvdC5+8P4fX3vin9YyfgAG3y+Lsq34Xtf0m6nV/P4fAAAAGAix7x8ONdH/AwAAQGXEvj/+r/BE/w8AAACVEfv+0VCTKvT/f9x7lR2vfXb+lxezlMxfDOLtaTc8UKwXM64z4evJxSWN5fd/ce5//vHi6oY3nGXZzx/4o47r73ggjqswGcb51Otaly/z5btWte2jD11M223Or38uPH58PqudBp0iuDNZln31+k/l25l8z+W8Pv3A0bw+eOnxxxrrPHeo+Dre/5kXFuv/VQj/Hj5xrOX+z4T98MNQZ97UeX/E+33p8it2HnjX0vbi/YZ2XZc/7SfeWzxu/JycTz9WrB/380rj/9onn/xSY/1HXtZ5/BeHO4//yfC4Xwz1f19crN/8GjS+jvf7eBh/3F68391f+HrH8T/1iWL9s68v1jsaatz+7eHr3a9/dr55fz0ydKzleWVvKNaL25/5zp/mt8fHi4/fPv6JI5db9kf7/Hj634vHmW5bPy6P24n+oW37jcdpnp9x+0/+ydGW/dxr+089+MyLG4/bvv0729Y7+8E78u0vPV7rJzb99cc/1XF7cTyH//5sy/M5/PZwHIftP/HeMB/D7f/3VPF47Z+ucPTtreefuP7ntl9seT7RG39abP+pV53M65aJrduued611116aWPfZdm3txSP12v7J//mTMv4P39jsT/i7TGj3779lcTtn/vQ1OkzCxfmZ9NeffT6/LNz3lyMJ473+nBubf/6yJnz75s7NzkzOZNlk9X9CL0r9oVQf1yUS93XXlx2Br3jofB63vyXX9122799Mi7/j3cWyy+/qfi+9fKw3qfD8u3h9Vvb9pd74pYb8+N76OkwwsXlnxe8Hjt3//fBXp/vmwvPv/19QZzvZ1/0vnw/NG7Lv2/E43qd4//ebPE4Xwn7dTF8MvOuG5e217x+/GyEy+8ojvd1779wmouv69+F1/stPyweP44rPt/vhfcxX9/Rer6L8+MrF4fbHz//FI9L4XySXSpuj2vF/X35uRs7Di9+Dkl26ab86z9Lj3PTmp7mShY+vDB9av70hUemz88tnJ9e+PBHjjx85sLp80fyz/I88v5e9186P23Lz0+zc/vvyfKz1ZmiXGWbPf6zDx2fPTBz2+zciWMXTpx/6OzcuZPHFxaOz80u3HbsxIm5D/W6//zsfXv2Htp3YO/UyfnZ+w4eOrTv0NT86TONYRSD6mH/zAemTp87kt9l4b57Du259957ZqYePjM7d9+BmZmpC73un39vmmrc+w+nzs2dOnZ+/uG5qYX5j8zdt+fQ/v17e34a4MNnTyxMTp+7cHr6wsLcueniuUyezxc3vvf1uj/VtPD94v1su6Hig/iyt925P30+a8MXP7riQxWrtH2A6LPhs2i++fyzB1fzdez7x0JNqtD/AwAAALnY94+Hmuj/AQAAoDJi378l1ET/DwAAAJUR+/6JUNN/CahJ/1+5/P+Oi6vavvy//H/z/pL/r1n+/x1ly/8X5wv5//5Yb/6+Dvn/Va0o/y//L/8v/y//Tx+ULf8f+/6tWeb3/wAAAFBRse/fFmqi/wcAAIDKiH3/NaEm+n8AAACojNj3Py/UpCb9v/y//L/8v/y//H/n7cv/Dyb5/+5Klv+faF8g/7/5+f+sXvn/S/0c/ybk/7c2fyH/TxmVLf8f+/5rQ01q0v8DAABAHcS+/7pQE/0/AAAAVEbs+68PNdH/AwAAQGXEvn97qElN+n/5/3Xl/1PmanDz/8WW5f/l/+X/5f+rQv6/u5Ll/5eR/9/8/L/r/w9U/r+F/D9lVLb8f+z7nx9qUpP+HwAAAOog9v0vCDXR/wMAAED5jF7Z3WLf/8JQk2X9/xVuAAAAANh0se+/IWsLgtfk9//y/67/X9rr/4/J/8v/F8qf/x/J5P/LQ/6/O/n/HvqR/78k/y//L/8v/09Utvx/3vdnE9mLQk1q0v8DAABAHcS+/8ZQE/0/AAAAVEbs+38l1ET/DwAAAJUR+/4doSY16f/l/yuT//9Z80tXify/6//L/wflz/+7/n+ZyP93J//fg+v/y//L/8v/01cLHTulzcv/x77/plCTmvT/AAAAUAex77851ET/DwAAAJUR+/5fDTXR/wMAAEBlxL5/Z6hJTfp/+f+S5/9jcrSO1/+X/5f/D8qc/5+Q/y8d+f/u5P97kP+X/5f/l/+nrxa+X7yfbbdZ+f/Y97841KQm/T8AAADUQez7XxJqov8HAACAyoh9/0tDTfT/AAAAUBmx758MNalJ/7+W/P/QJfn/lVzl6/+Pr+L6/y3k/zcl/z8q/1+oU/4/k/8vHfn/7uT/e5D/l/+X/5f/p6/Klv+Pff8toSY16f8BAACgDmLfvyvURP8PAAAAlRH7/ltDTfT/AAAAUBmx798dalKT/t/1/wci/5/J/w9E/t/1/wP5/87k/zeG/H938v89yP/L/8v/y//TV2XL/8e+/2WhJjXp/wEAAKAOYt9/W6iJ/h8AAAAqI/b9Lw810f8DAABAZcS+//ZQk5r0//L/8v/y//L/8v+dt7/h+f9L8v/9IP/fnfx/D/L/8v/y//L/9FXZ8v+x739FqElN+n8AAACog9j33xFqov8HAACAyoh9/52hJvp/AAAAqIzY90+FmtSk/5f/l/+vZv7/P+X/u2xf/r+k+X/X/+8L+f/u5P97kP+X/+9H/n8sLJD/l/9n0/P/8f1a/Dr2/XeFmtSk/wcAAIA6iH3/3aEm+n8AAACojNj3T4ea6P8BAACgMmLfPxNqUpP+X/5f/r+a+X/X/++2/XXl/1+69Ljy/wX5/3KR/+9O/r+Hfub/t8j/1zb/v67r/4/J/1Mpm53/b/869v17Qk1q0v8DAABAHcS+f2+oif4fAAAAKiP2/ftCTfT/AAAAUBmx778n1KQm/b/8v/y//L/8v+v/d96+/P9gkv/vrv/5//gU5f9d/1/+vz/5f9f/p1rKlv+Pff+9oSY16f8BAACgDmLfvz/URP8PAAAAlRH7/gOhJvp/AAAAqIzY9x8MNalJ/y//L/8v/y//L//fefvy/4NJ/r871//vQf5f/n+A8/+NuSX/T9mULf8f+/5DoSY16f8BAACgDmLf/8pQE/0/AAAAVEbs+38t1ET/DwAAAJUR+/5fDzWpSf8v/y//L/8v/7/J+f+xXvn/cfl/+f81kP/vTv6/B/l/+f8Bzv+vcP3/a8PN8v9sirLl/2Pff1+oSU36fwAAAKiD2Pf/RqiJ/h8AAAAqI/b9rwo10f8DAABAZcS+/3CoSU36f/n/Dcr/x4Xy//L/8v+u/y//f1XJ/3cn/9+D/L/8f/Xy//2+/n/7t+lE/p9Oypb/j33/q0NNatL/AwAAQB3Evv/+UBP9PwAAAFRG7PtfE2qi/wcAAIDKiH3/a0NNatL/y/+7/v/m5//HWsYu/790P/n/gvy//P9ayP93J//fg/y//L/8v+v/01dly//Hvv91oSY16f8BAACgDmLf//pQE/0/AAAAVEbs+98QaqL/BwAAgMqIff8bQ01q0v/L/8v/b37+3/X/5f8L8v/y//0g/9+d/H8P8v/y//L/8v/0Vdny/7Hv/81Qk5r0/wAAAFAHse9/INRE/w8AAACVEfv+N4Wa6P8BAACgMmLf/+ZQk5r0//L/8v/y//L/8v+dty//P5jk/7sbsPz/L64Ly+X/C/L/5R7/WvP/o21fX5X8/w9Wyv8vbmm/v/w/V0PZ8v+x739LqElN+n8AAACog9j3vzXURP8PAAAAlRH7/reFmuj/AQAAoDJi3/9boSY16f/l/xvjWEovy//L/+cL5P/l/+X/B5b8f3cDlv93/f828v/lHr/r/8v/s1zZ8v+x7397qElN+n8AAACog9j3Pxhqov8HAACAyoh9/ztCTfT/AAAAUBmx739nqElN+n/5f9f/l/+X/5f/77x9+f/BJP/fnfx/D/L/8v9ly///l/w/g61s+f/Y9z8UalKT/h8AAADqIPb97wo10f8DAABAZcS+/7dDTfT/AAAAUBmx7393qElN+n/5/0HJ/0/K/68x/z8elsn/y//L/9eL/H938v89yP/L/5ct/+/6/wy4suX/Y9//nlCT1ff/E6teEwAAALia2n+dlMS+/3dCTWry+38AAACog9j3/26oif4fAAAAKiP2/b8XalKT/l/+f1Dy/67/n7n+v/x/2/OR/5f/72Tj8v/xzLOm/P+WXtuX/5f/l/8f3PHL/8v/s1zZ8v+x7//9UJOa9P8AAABQB7Hvf2+oif4fAAAABkKn/5PdLvb9R0JN9P8AAABQGbHvPxpqUpP+X/5f/l/+v6T5/7/Y9S/f/dZbj+6R/5f/l/9fkw29/n/j4Hf9f/l/+f9E/l/+X/6fdmXL/8e+/1ioyVLj92YX+AcAAIDBFvv+Pwg1qcnv/wEAAKAOYt9/PNRE/w8AAACVEfv+2VCTmvT/8v+bmP8fzbJM/l/+v4LX/4/7Y5Dy/1NbBij/H0+68v8dbWj+/11LOXH5/7Xm/8c7Lm3P/w/J/7eQ/1/z+L+ZZdmGjf/iv8r/y//Trmz5/9j3z4Wa1KT/BwAAgDoIff/wiaIu3aD/BwAAgMqIff/JUBP9PwAAAFRG7PvfF2pSk/5f/t/1/+X/5f9d/7/z9kub/3f9/67k/7srT/6/M9f/l/8f5PG7/r/8P8uVLf8f+/75UJOa9P8AAABQB7Hvf3+oif4fAAAAKiP2/R8INdH/AwAA/8/efTxZXpd7HD8NTc1MUbfq7u7iLu7du3LNQlYu9A9wwYaFlqEUVMyJwRwx54CWihgwgCImzAlMKGJExSxiwoSojMX08zzTPf3r3+meOd3nd77f12vhIy3jaS0EPoxvvkAzcvc/PG7pZP/r//X/Tfb/h/T/Y5+v/9f/t0z/P07/P4f+X/+v/9f/s1BT6/9z9z8ibulk/wMAAEAPcvdfELfY/wAAANCM3P0Xxi32PwAAADQjd/8j45ZO9r/+X//fZP9/39sfevd99P87fb7+X//fMv3/OP3/HPp//b/+X//PQk2t/8/d/6i4pZP9DwAAAD3I3f/ouMX+BwAAgGbk7r8obrH/AQAAoBm5+x8Tt3Sy/0/q/9dmffb/mfHq/1vq/73/v+Pn6//1/y072P7/knt+z6f/1//r/4P+X/+v/+dkU+v/c/c/Nm7pZP8DAABAD3L3Py5usf8BAACgGbn7Hx+32P8AAADQjNz9T4hbOtn/3v/3/r/+X/+v/x/+fP3/avL+/7ie+v+Lbjr7gjuu+d9r9/L5+n/9v/5f/89iTa3/z93/xLilk/0PAAAAPcjd/6S4xf4HAACAZuTuf3LcYv8DAADACjoy+NXc/U+JWzrZ//p//b/+P/r/w/p//b/+vwX6/3E99f+n8vn6f/2//l//z2JNrf/P3f/UuKWT/Q8AAAA9yN3/tLjF/gcAAIDpGvo/Yo/I3X9x3GL/AwAAQDNy9x+NWzrZ//r//e///63/X43+3/v/+n/9fxP0/+P0/3Po//X/+n/9Pws1tf4/d/8lcUsn+x8AAAB6kLv/6XGL/Q8AAADNyN3/jLjF/gcAAIBm5O5/ZtzSyf7X/3v/X/+v/z/4/n/jd7b6/xP/rer/F0f/P07/P4f+/3T7+bP0//p//T+b7bH/v2vkd9sL6f9z9z8rbulk/wMAAEAPcvc/O26x/wEAAKAZufufE7fY/wAAANCM3P3PjVs62f/6f/2//l//f8r9//bf9I7z/v8w/f/B0P+Pm0z/v7Y++GX9/8r3/97/1//r/9liau//5+5/XtzSyf4HAACAHuTuf37cMrL/9/wX8wEAAIClyt3/grjFz/8DAADAysvqLHf/C+OWTva//l//r//X/x/8+/+r3/9fu+n70/9Pi/5/3GT6/x3o//X/q/z96//1/2w3tf4/d/+L4pZO9j8AAAD0IHf/pXGL/Q8AAADNyN3/4rjF/gcAAIBm5O5/SdzSyf4f7v9P/OuT7v9PjoRn+v+k/2+7/89/R/3/aP9/rvf/+6T/H6f/n0P/r//X/+/U/x+Z9+P1/wyZWv+fu/+lcUsn+x8AAAB6kLv/ZXGL/Q8AAADNyN3/8rjF/gcAAIBm5O5/RdzSyf73/r/+X/+/ev2/9/83LPP9/9mB9//r+v9dWm7/v3Z3/hFU/39q37/+X/+/yt9/k/3/WbOt7/+P/F0A9P8MmVr/n7v/lXFLJ/sfAAAAepC7/1Vxi/0PAAAAq2Hz/3dg6K242ax2/6vjFvsfAAAAmpG7/zVxSzv7f/StTv2//l//r//X/w9//oMvW59Np//3/v9uef9/nP5/Dv3/fvTz6431/5ft9OOn0P9fvH/v/9973o/X/zNkS/9/3YmvL6v/z93/2rilnf0PAAAA3cvd/7q4xf4HAACAZuTuf33cYv8DAABAM3L3vyFu6WT/73v/P/J3H9D/6//1//r/aff/U3r/X/+/W/r/cfr/OfT/3v/3/r/+n9O36U8Zt/T/myyr/8/d/8a4pZP9DwAAAD3I3f+muMX+BwAAgGbk7r8sbrH/AQAAoBm5+98ct3Sy/73/r//X/+v/9f/Dn6//X02n1d+fof8v+n/9v/5f/6//ZwGm1v9v3f397X8AAADowVuO/+Ph+Ov19j8AAAC0KHf/W+MW+x8AAACakbv/bXFLJ/tf/7+//X9+Xf+v/5/p//X/+v8D0e37/2tDfyTabof+/4aHHL3/1q/o//X/+n/9v/6fXfrvkX9tEv3/sRN/dpm7/+1xSyf7HwAAAHqQu//yuMX+BwAAgGbk7n9H3GL/AwAAQDNy918Rt+xx/481D1Om//f+v/5f/6//H/58/f9q6rb/3yXv/8+h/9f/6//1/yzUJPr/Tb+cu/+dcYuf/wcAAIBm5O5/V9xi/wMAAEAzcve/O26x/wEAAKAZufvfE7d0sv/1//p//b/+X/8//Pn6/9Wk/x+n/59jlfr/K06j/18f/vKy+/nTtezvX/+v/2e7qfX/ufuvjFs62f8AAADQg9z9741b7H8AAABoRu7+98Ut9j8AAAA0I3f/++OWTva//l//r//X/+v/hz9f/7+a9P/j9P+z2eyqkW9gqP8/dmia/b/3/yf3/ev/9f9sN7X+P3f/B+KWTvY/AAAA9CB3/1Vxi/0PAAAAzcjdf3XcYv8DAABAM3L3fzBu6WT/6//1//p//b/+f/jz9f+rSf8/Tv8/xyq9/6//n9z3r//X/7Pd1Pr/3P0fils62f8AAADQg9z918Qt9j8AAAA0I3f/h+MW+x8AAACakbv/2rilk/2v/9f/6//1/wP9//H/qev/9f+raP/6/5n+X/+v/59D/6//1/9zsqn1/7n7PxK3dLL/AQAAoAe5+z8at9j/AAAA0Izc/R+LW+x/AAAAaEbu/o/HLZ3sf/2//l//r//3/v/w5+v/V5P3/8fp/+fQ/+v/9f/6fxZquP+/eGn9f+7+T8Qtnex/AAAA6EHu/uviFvsfAAAAmpG7/5Nxi/0PAAAAzcjd/6m4pZP9r//X/2/t/2cz/b/+X/+/YaD/v/nOy/+rfnkB/f/hmf5/4fT/4/T/c+j/2+z/z5g11P8f2fHH6/+Zoqm9/5+7/9NxSyf7HwAAAHqQu/8zcYv9DwAAAM3I3f/ZuMX+BwAAgGbk7v9c3NLJ/tf/6/8X/P7/becPfB/6/w36/5Xv/73/vwL0/+P0/3Po/9vs/73/r/9naabW/+fu/3zc0sn+BwAAgB7k7v9C3GL/AwAAQDNy938xbrH/AQAAoBm5+78Ut3Sy//X/+v8F9//e/9f/6/93oP8/GPr/cfr/OfT/zfX/+Wf3+n/9P8sxtf4/d/+X45ZO9j8AAAD0IHf/9XGL/Q8AAADNyN1/Q9xi/wMAAEAzcvd/JW7pZP/r//X/+v/V7P8Pb+n/z5zp/0/8+vr/vk2l/z/nnPvdqP/X/+v/l9//e/9f/89yTa3/z93/1bilk/0PAAAAPcjd/7W4xf4HAACAZuTu/3rcYv8DAABAM3L3fyNu6WT/b+//z5ptFKobhvr/aNT0/5vo/7d+//r/4d8+vP+v/9f/77+p9P/e/z+171//r/9f5e9/T/3//2//8fp/WjS1/j93/41xSyf7HwAAAHqQu/+bcYv9DwAAAM3I3f+tuMX+BwAAgGbk7r8pbulk/3v/X/+v/9f/6/+HP1//v5r0/+P0/3Po//X/3v+/8IFn6v9ZnKn1/7n7vx23dLL/AQAAoAe5+2+OW+x/AAAAaEbu/u/ELfY/AAAANCN3/3fjlk72v/5f/6//1//r/4c/X/+/mvT/4/T/5eT/aBv66f8PD31x2f386Vr2999M/+/9fxZoav1/7v7vxS2d7H8AAADoQe7+78ct9j8AAAA0I3f/D+IW+x8AAACakbv/h3FLJ/tf/6//b7//P1//f9Ln6//1/y3T/+cf0Yfp/+fop/8ftOx+ftW/f/2//p/tptb/5+6/JW7pZP8DAABAD3L3/yhusf8BAACgGbn7fxy32P8AAADQjNz9P4lbOtn/+v+++v+1WY/9v/f/9f/6/57o/8fp/+fQ/+v/9f/6fxZqav1/7v5b19a73P8AAACwqh5wr4fdsttf99bj/3h49tO45dzZsV3+NDYAAAAwcffs/rX12exnx3/Jz/8DAABAi3L3/zxu6WT/6//76v/7fP9f/6//1//3RP8/Tv8/h/5f/6//1/+zUFPr/3P3/yJu2TT81vf8nxIAAACYktz9v4xbOvn5fwAAAOhB7v5fxS3b9r+/HSAAAACsqtz9v45bOvn5f/3/xPv/2T71//Hr6f836P/1/0Ofr/9fTfr/cafZ/x9b0//r/0fo//X/+n9ONrX+P3f/b+KWTvY/AAAANGrLX1HI3X9b3GL/AwAAQDNy9/82brH/AQAAoBm5+2+PWzrZ//r/A+//M1Xfx/f/j9Q/8/5/5/3/pYcHP1//r/9vmf5/nPf/59D/t9L/H9L/6/+Zhqn1/7n7fxe3dLL/AQAAoAe5+38ft9j/AAAA0Izc/X+IW+x/AAAAaEbu/j/GLZ3sf/3/xN//P6X+fxfv/+v/++j/d/j8dvr//zn76PXnPejqK/X/nHCQ/X/+tnDA/f+hvf57bqb/n0P/30r/7/1//T8Tsfj+f33LF/fa/+fu/1Pc0sn+BwAAgB7k7r8jbrH/AQAAoBm5+/8ct9j/AAAA0Izc/X+JWzrZ//p//f9U+v/873oJ/f/RU+7/j8xms6X0/9kU997/e/9f/7+d9//H6f/n0P/r//X/+n8WavH9/9Yv7rX/z93/17ilk/0PAAAAPcjd/7e4Jff/2p7/0j0AAAAwMbn7/x63+Pl/AAAAaEbu/jvjlk72v/5f/z+V/j95///Ej2vr/f/zKk7ts///v/pn+v/9pf8fp/+fQ/+v/9f/6/9ZqKn1/7n7/xG3dLL/AQAAoAe5+++KW+x/AAAAaEbu/n/GLfY/AAAANCN3/7/ilk72v/6/1f4/i3j9v/5/Kv2/9/+9/38w9P/j9P9z6P/1//p//T8LNbX+P3f/fwIAAP//krZdRQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f00000001c0)=""/202, 0xff4)

480.006265ms ago: executing program 6 (id=2732):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2)
ioctl$TCFLSH(r0, 0x40087101, 0x8000020001100)

405.069815ms ago: executing program 2 (id=2733):
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x2, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)

0s ago: executing program 3 (id=2734):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100088}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
dup3(r1, r0, 0x0)

kernel console output (not intermixed with test programs):

n0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  177.851742][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  177.854753][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  177.866314][ T8278] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.868740][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  177.872854][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  177.876346][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  177.879763][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  177.882944][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  177.886224][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  177.889518][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  177.892626][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  177.896114][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  177.899645][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  177.902918][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  177.905986][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  177.909301][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  177.912627][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  177.916073][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  177.919401][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  177.922566][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  177.925676][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  177.929112][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  177.932397][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  177.935717][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  177.938912][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  177.942095][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  177.945221][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  177.948620][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  177.951722][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  177.954942][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  177.958262][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  177.961568][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  177.964714][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  177.968025][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  177.971334][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  177.974699][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  177.978027][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  177.981265][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  177.984475][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  177.988025][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  177.991257][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  177.994443][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  177.997672][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  178.000922][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  178.004121][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  178.007405][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  178.010566][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  178.013902][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  178.017252][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  178.020479][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  178.023548][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  178.026982][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  178.030328][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  178.033653][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  178.036996][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  178.040255][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  178.043545][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  178.046777][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  178.050032][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  178.053190][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  178.056290][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  178.059689][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  178.062933][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  178.066297][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  178.069642][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  178.072811][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  178.075970][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  178.079405][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  178.082584][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  178.085762][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  178.089113][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  178.092473][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  178.095558][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  178.098804][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  178.101971][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  178.105254][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  178.108305][    C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  178.120131][ T5999] usb 4-1: Using ep0 maxpacket: 32
[  178.131736][ T5999] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  178.134618][ T5999] usb 4-1: config 0 has no interface number 0
[  178.137017][ T5999] usb 4-1: config 0 interface 184 has no altsetting 0
[  178.141613][ T5999] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  178.144534][ T5999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.152083][ T5999] usb 4-1: Product: syz
[  178.153564][ T5999] usb 4-1: Manufacturer: syz
[  178.155133][ T5999] usb 4-1: SerialNumber: syz
[  178.171465][ T5999] usb 4-1: config 0 descriptor??
[  178.200860][ T5999] smsc75xx v1.0.0
[  178.879401][ T5999] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  178.883625][ T5999] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  179.090980][ T5999] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[  179.101005][ T5999] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[  179.103983][ T5999] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  179.110024][ T5999] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  179.122354][ T5999] usb 4-1: USB disconnect, device number 17
[  179.161882][ T6012] kernel write not supported for file /amidi2 (pid: 6012 comm: kworker/1:5)
[  181.217847][ T5998] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  181.377707][ T5998] usb 4-1: Using ep0 maxpacket: 16
[  181.383183][ T5998] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  181.386553][ T5998] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  181.392647][ T5998] usb 4-1: config 0 has no interface number 0
[  181.399605][ T5998] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  181.403580][ T5998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.407545][ T5998] usb 4-1: Product: syz
[  181.409534][ T5998] usb 4-1: Manufacturer: syz
[  181.414508][ T5998] usb 4-1: SerialNumber: syz
[  181.424772][ T5998] usb 4-1: config 0 descriptor??
[  181.437869][ T5998] usb 4-1: Found UVC 0.00 device syz (046d:08f3)
[  181.440666][ T5998] usb 4-1: No valid video chain found.
[  181.642756][ T6012] usb 4-1: USB disconnect, device number 18
[  182.238173][ T9073] sctp: [Deprecated]: syz.2.1228 (pid 9073) Use of int in max_burst socket option.
[  182.238173][ T9073] Use struct sctp_assoc_value instead
[  182.691849][ T9096] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  183.709166][ T9119] loop4: detected capacity change from 0 to 128
[  183.714972][ T9119] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  183.724369][ T9119] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  183.822683][ T9113] loop3: detected capacity change from 0 to 40427
[  183.836266][ T9113] F2FS-fs (loop3): build fault injection rate: 690
[  183.869102][ T9113] F2FS-fs (loop3): invalid crc value
[  184.315800][ T9129] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1252'.
[  184.329996][ T9113] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  184.338363][ T9113] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  184.387106][ T9132] loop4: detected capacity change from 0 to 512
[  184.390232][ T9113] syz.3.1246: attempt to access beyond end of device
[  184.390232][ T9113] loop3: rw=34817, sector=77824, nr_sectors = 880 limit=40427
[  184.396760][ T9132] EXT4-fs (loop4): Test dummy encryption mode enabled
[  184.411069][ T9132] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  184.425238][ T6197] syz-executor: attempt to access beyond end of device
[  184.425238][ T6197] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  184.433749][ T6197] CPU: 0 UID: 0 PID: 6197 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  184.433770][ T6197] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  184.433780][ T6197] Call Trace:
[  184.433787][ T6197]  <TASK>
[  184.433794][ T6197]  dump_stack_lvl+0x189/0x250
[  184.433822][ T6197]  ? __pfx_dump_stack_lvl+0x10/0x10
[  184.433838][ T6197]  ? __pfx_queue_work_on+0x10/0x10
[  184.433853][ T6197]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  184.433867][ T6197]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  184.433913][ T6197]  f2fs_handle_critical_error+0x37c/0x540
[  184.433933][ T6197]  f2fs_write_end_io+0x886/0xb60
[  184.433957][ T6197]  __submit_merged_bio+0x27a/0x6a0
[  184.433971][ T6197]  __submit_merged_write_cond+0x255/0x530
[  184.433985][ T6197]  f2fs_write_data_pages+0x261d/0x3000
[  184.434017][ T6197]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  184.434056][ T6197]  ? __lock_acquire+0xab9/0xd20
[  184.434072][ T6197]  ? css_rstat_updated+0x23a/0x4f0
[  184.434089][ T6197]  ? __lock_acquire+0xab9/0xd20
[  184.434105][ T6197]  ? do_raw_spin_lock+0x121/0x290
[  184.434122][ T6197]  ? do_raw_spin_unlock+0x4d/0x240
[  184.434132][ T6197]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  184.434144][ T6197]  do_writepages+0x32e/0x550
[  184.434162][ T6197]  ? do_raw_spin_unlock+0x4d/0x240
[  184.434179][ T6197]  filemap_fdatawrite+0x199/0x240
[  184.434192][ T6197]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  184.434238][ T6197]  ? do_raw_spin_unlock+0x4d/0x240
[  184.434256][ T6197]  f2fs_sync_dirty_inodes+0x31f/0x830
[  184.434291][ T6197]  f2fs_write_checkpoint+0x95a/0x1df0
[  184.434329][ T6197]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  184.434371][ T6197]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  184.434383][ T6197]  ? kfree+0x18e/0x440
[  184.434396][ T6197]  ? kill_f2fs_super+0x298/0x6c0
[  184.434412][ T6197]  kill_f2fs_super+0x2c3/0x6c0
[  184.434428][ T6197]  ? __pfx_kill_f2fs_super+0x10/0x10
[  184.434438][ T6197]  ? radix_tree_delete_item+0x2b6/0x400
[  184.434453][ T6197]  ? shrinker_free+0x2ce/0x3e0
[  184.434465][ T6197]  deactivate_locked_super+0xbc/0x130
[  184.434478][ T6197]  cleanup_mnt+0x425/0x4c0
[  184.434489][ T6197]  ? lockdep_hardirqs_on+0x9c/0x150
[  184.434502][ T6197]  task_work_run+0x1d4/0x260
[  184.434535][ T6197]  ? __pfx_task_work_run+0x10/0x10
[  184.434544][ T6197]  ? __x64_sys_umount+0x122/0x160
[  184.434559][ T6197]  ? exit_to_user_mode_loop+0x40/0x110
[  184.434575][ T6197]  exit_to_user_mode_loop+0xec/0x110
[  184.434587][ T6197]  do_syscall_64+0x2bd/0x3b0
[  184.434602][ T6197]  ? lockdep_hardirqs_on+0x9c/0x150
[  184.434612][ T6197]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.434621][ T6197]  ? exc_page_fault+0x9f/0xf0
[  184.434632][ T6197]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  184.434641][ T6197] RIP: 0033:0x7faec158ff17
[  184.434652][ T6197] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  184.434660][ T6197] RSP: 002b:00007ffddac56888 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  184.434672][ T6197] RAX: 0000000000000000 RBX: 00007faec1611c05 RCX: 00007faec158ff17
[  184.434678][ T6197] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffddac56940
[  184.434683][ T6197] RBP: 00007ffddac56940 R08: 0000000000000000 R09: 0000000000000000
[  184.434688][ T6197] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffddac579d0
[  184.434694][ T6197] R13: 00007faec1611c05 R14: 000000000002cfd0 R15: 00007ffddac57a10
[  184.434730][ T6197]  </TASK>
[  184.465865][ T6197] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  184.484245][ T9132] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1253: bad orphan inode 131083
[  184.559498][ T9132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.720417][ T8278] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.767549][ T9138] veth0_to_bridge: entered promiscuous mode
[  184.773716][ T9137] veth0_to_bridge: left promiscuous mode
[  185.392749][ T9159] loop3: detected capacity change from 0 to 2048
[  185.405577][ T9159] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  185.411767][ T9159] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  185.414541][ T9159] UDF-fs: Scanning with blocksize 512 failed
[  185.426207][ T9159] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  185.570711][ T9170] overlayfs: failed to clone upperpath
[  185.749870][  T794] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  185.928874][  T794] usb 4-1: unable to get BOS descriptor or descriptor too short
[  185.932703][  T794] usb 4-1: config 4 has an invalid interface number: 214 but max is 0
[  185.935676][  T794] usb 4-1: config 4 has no interface number 0
[  185.939576][  T794] usb 4-1: config 4 interface 214 has no altsetting 0
[  185.944344][  T794] usb 4-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice=87.6e
[  185.950410][  T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.953105][  T794] usb 4-1: Product: syz
[  185.954483][  T794] usb 4-1: Manufacturer: syz
[  185.956059][  T794] usb 4-1: SerialNumber: syz
[  186.004469][ T9191] netlink: zone id is out of range
[  186.030642][ T9191] netlink: set zone limit has 4 unknown bytes
[  186.047487][ T9191] netlink: del zone limit has 4 unknown bytes
[  186.413699][  T794] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.214/input/input7
[  186.429825][ T5280] bcm5974 4-1:4.214: could not read from device
[  186.457181][ T5280] bcm5974 4-1:4.214: could not read from device
[  186.459157][  T794] usb 4-1: USB disconnect, device number 19
[  186.469805][ T5280] bcm5974 4-1:4.214: could not read from device
[  186.635228][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1287'.
[  186.646034][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1287'.
[  186.651602][ T9207] netlink: 'syz.4.1287': attribute type 12 has an invalid length.
[  186.654957][ T9207] netlink: 'syz.4.1287': attribute type 11 has an invalid length.
[  187.802539][ T9235] netfs: Couldn't get user pages (rc=-14)
[  188.171322][ T9243] netlink: 'syz.4.1302': attribute type 32 has an invalid length.
[  188.173727][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1302'.
[  188.176674][ T9243] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  188.305222][ T9246] loop4: detected capacity change from 0 to 2048
[  188.326294][ T9246] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  188.350206][ T9247] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  188.380866][ T9246] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=5
[  188.391527][ T9246] Remounting filesystem read-only
[  188.924210][ T9263] tipc: Started in network mode
[  188.928954][ T9263] tipc: Node identity -, cluster identity 4711
[  189.144753][ T9275] 9pnet_fd: Insufficient options for proto=fd
[  190.005448][ T9300] loop4: detected capacity change from 0 to 256
[  190.022171][ T9300] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  190.604768][ T9333] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1343'.
[  190.855786][ T9346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1349'.
[  191.030682][ T9349] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  191.270256][ T9355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1352'.
[  191.285172][ T9356] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  192.587842][ T9375] loop3: detected capacity change from 0 to 4096
[  192.607917][ T9375] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  192.641024][ T9375] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  192.703834][ T9375] ntfs3(loop3): ino=1f, "file2" failed to open parent directory r=5 to update
[  192.729555][   T27] ntfs3(loop3): ino=1f, failed to open parent directory r=5 to update
[  192.826642][ T9388] loop3: detected capacity change from 0 to 1024
[  192.886607][ T9388] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  192.953541][ T9388] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.1365: Allocating blocks 497-513 which overlap fs metadata
[  192.997460][ T9384] loop4: detected capacity change from 0 to 32768
[  193.005852][ T9384] bcachefs (/dev/loop4): error validating superblock: Not a bcachefs superblock layout
[  193.010386][ T6197] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.022041][ T9384] bcachefs: bch2_fs_get_tree() error: invalid_sb_layout
[  193.043285][   T33] audit: type=1326 audit(1755040661.188:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.3.1369" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec158ebe9 code=0x7ffc0000
[  193.064941][   T33] audit: type=1326 audit(1755040661.188:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.3.1369" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec158ebe9 code=0x7ffc0000
[  193.096214][   T33] audit: type=1326 audit(1755040661.198:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.3.1369" exe="/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7faec158ebe9 code=0x7ffc0000
[  193.115135][   T33] audit: type=1326 audit(1755040661.198:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9399 comm="syz.3.1369" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec158ebe9 code=0x7ffc0000
[  193.298835][ T9407] netlink: 'syz.4.1372': attribute type 9 has an invalid length.
[  193.681341][ T9419] IPVS: stopping backup sync thread 9356 ...
[  193.799504][ T9429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1382'.
[  193.803677][ T9429] netlink: 'syz.2.1382': attribute type 2 has an invalid length.
[  193.994991][ T9441] loop4: detected capacity change from 0 to 8
[  194.172574][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.174749][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.233949][ T9443] veth5: entered promiscuous mode
[  195.602420][ T9465] loop3: detected capacity change from 0 to 32768
[  195.610556][ T9465] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1399 (9465)
[  195.662525][ T9465] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  195.674937][ T9465] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  195.831674][   T26] BTRFS warning (device loop3): checksum verify failed on logical 5267456 mirror 1 wanted 0xb8512a1d2916df35de1eb979e5409d57680a9623aa14e80f6c4e3536403d44d6 found 0x6fc812b96c4b111b3c2dea23d215f88791d82c68a8d551c19a2c275913556555 level 0
[  195.845554][ T9465] BTRFS warning (device loop3): failed to read fs tree: -5
[  195.898524][ T9465] BTRFS error (device loop3): open_ctree failed: -5
[  196.377602][ T6012] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  196.547139][ T6012] usb 4-1: Using ep0 maxpacket: 32
[  196.553342][ T6012] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.558738][ T6012] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.562560][ T6012] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  196.577444][ T6012] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.590785][ T6012] usb 4-1: config 0 descriptor??
[  196.608932][ T6012] hub 4-1:0.0: USB hub found
[  197.172317][ T6012] hub 4-1:0.0: 1 port detected
[  197.621013][ T9542] loop4: detected capacity change from 0 to 4096
[  197.735516][ T9542] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  197.752730][ T9542] ntfs3(loop4): Failed to load $Extend (-22).
[  197.756096][ T9542] ntfs3(loop4): Failed to initialize $Extend.
[  197.940212][ T6012] hub 4-1:0.0: activate --> -90
[  198.239653][ T6012] usb 4-1-port1: cannot disable (err = -71)
[  198.246228][ T5985] usb 4-1: USB disconnect, device number 20
[  198.248099][ T6012] usb 4-1: Failed to suspend device, error -19
[  198.274773][ T9568] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1442'.
[  198.331850][ T9574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1443'.
[  198.363610][ T9574] erspan0: entered promiscuous mode
[  198.367744][ T9574] macvtap1: entered promiscuous mode
[  198.370028][ T9574] macvtap1: entered allmulticast mode
[  198.372208][ T9574] erspan0: entered allmulticast mode
[  198.392070][ T9574] erspan0: left allmulticast mode
[  198.394463][ T9574] erspan0: left promiscuous mode
[  198.572064][ T9588] loop4: detected capacity change from 0 to 256
[  198.610025][ T9588] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  198.613438][ T9588] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  198.620853][ T9588] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  198.684232][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1453'.
[  198.929485][   T33] audit: type=1800 audit(1755040667.068:39): pid=9600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1450" name="file1" dev="loop4" ino=1048683 res=0 errno=0
[  199.595614][ T9621] netlink: zone id is out of range
[  199.604077][ T9621] netlink: zone id is out of range
[  199.607940][ T9621] netlink: zone id is out of range
[  199.610077][ T9621] netlink: zone id is out of range
[  199.611905][ T9621] netlink: zone id is out of range
[  199.613604][ T9621] netlink: zone id is out of range
[  199.615878][ T9621] netlink: zone id is out of range
[  199.631363][ T9623] kAFS: unparsable volume name
[  199.643722][ T9621] netlink: zone id is out of range
[  199.651093][ T9621] netlink: zone id is out of range
[  199.653400][ T9621] netlink: zone id is out of range
[  200.853575][ T9636] loop4: detected capacity change from 0 to 32768
[  200.880179][ T9636] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section replicas_v0: invalid device 1 in entry user: 1/253 [0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 2 2 2 2 2 2 3 3 4 5 5 5 5 5 5 6 6 6 6 8 8 10 11 16 33 83 108 255 255 255]
[  200.880179][ T9636] replicas_v0 (size 24):
[  200.880179][ T9636] btree: 1 [0] journal: 1 [0] user: 253 [255 255 255 0 0 0 0 0 108 1 0 0 6 0 0 0 0 0 0 0 0 0 0 0 10 0 0 0 0 0 0 0 1 0 1 0 5 0 0 0 8 0 0 0 0 0 0 0 1 0 2 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 2 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 3 5 0 0 0 0 0 0 0 0 0 0 0 2 0 0 0 6 0 0 0 0 11 0 0 0 0 0 0 3 1 1 0 0 
[  200.880287][ T9636] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  201.294911][ T9654] loop3: detected capacity change from 0 to 32768
[  201.309002][ T9654] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1482 (9654)
[  201.330516][ T9654] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  201.333948][ T9654] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  201.349077][ T9654] BTRFS info (device loop3): disk space caching is enabled
[  201.352117][ T9654] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  201.436190][ T9654] BTRFS info (device loop3): rebuilding free space tree
[  201.471627][ T9654] BTRFS info (device loop3): disabling free space tree
[  201.473960][ T9654] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  201.487813][ T9654] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  201.687263][ T6197] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  201.964005][ T9687] loop3: detected capacity change from 0 to 1024
[  201.981074][ T9687] EXT4-fs (loop3): Test dummy encryption mode enabled
[  201.983936][ T9687] EXT4-fs (loop3): stripe (9) is not aligned with cluster size (16), stripe is disabled
[  202.012558][ T9687] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.063071][ T6197] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.283254][ T9701] Bluetooth: MGMT ver 1.23
[  202.651861][ T9713] loop4: detected capacity change from 0 to 1024
[  202.655467][ T9713] EXT4-fs: Ignoring removed bh option
[  202.680296][ T9713] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal
[  203.772229][ T9728] loop3: detected capacity change from 0 to 32768
[  203.776452][ T9728] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1506 (9728)
[  203.789946][ T9728] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  203.794994][ T9728] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  203.798759][ T9728] BTRFS info (device loop3): using free-space-tree
[  204.067339][ T6197] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  204.540800][ T9751] loop4: detected capacity change from 0 to 32768
[  205.849101][ T9786] net_ratelimit: 17 callbacks suppressed
[  205.849117][ T9786] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  206.835584][ T9806] loop3: detected capacity change from 0 to 128
[  206.857653][   T33] audit: type=1804 audit(1755040674.998:40): pid=9806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1531" name="/newroot/392/file0/bus" dev="loop3" ino=1048684 res=1 errno=0
[  206.872358][ T9806] Invalid ELF header magic: != ELF
[  206.880402][   T33] audit: type=1800 audit(1755040675.008:41): pid=9806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1531" name="bus" dev="loop3" ino=1048684 res=0 errno=0
[  207.467397][ T9812] loop3: detected capacity change from 0 to 32768
[  207.489772][ T9812] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  207.524087][ T9812] XFS (loop3): Ending clean mount
[  207.533105][ T9812] XFS (loop3): Quotacheck needed: Please wait.
[  207.581045][ T9812] XFS (loop3): Quotacheck: Done.
[  207.621570][ T6197] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  208.946622][ T9847] geneve2: entered promiscuous mode
[  209.247749][ T9851] loop4: detected capacity change from 0 to 256
[  209.298135][ T9849] loop3: detected capacity change from 0 to 32768
[  209.317573][ T9851] FAT-fs (loop4): Directory bread(block 64) failed
[  209.320202][ T9851] FAT-fs (loop4): Directory bread(block 65) failed
[  209.359183][ T9851] FAT-fs (loop4): Directory bread(block 66) failed
[  209.387049][ T9851] FAT-fs (loop4): Directory bread(block 67) failed
[  209.397474][ T9851] FAT-fs (loop4): Directory bread(block 68) failed
[  209.400983][ T9851] FAT-fs (loop4): Directory bread(block 69) failed
[  209.403744][ T9851] FAT-fs (loop4): Directory bread(block 70) failed
[  209.406392][ T9851] FAT-fs (loop4): Directory bread(block 71) failed
[  209.480180][ T9851] FAT-fs (loop4): Directory bread(block 72) failed
[  209.482866][ T9851] FAT-fs (loop4): Directory bread(block 73) failed
[  209.779464][ T9855] loop3: detected capacity change from 0 to 32768
[  209.785256][ T9855] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1551 (9855)
[  209.794418][ T9855] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  209.798779][ T9855] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  209.802348][ T9855] BTRFS info (device loop3): using free-space-tree
[  209.910046][ T9864] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20003
[  210.526479][ T9877] loop4: detected capacity change from 0 to 2048
[  210.614118][ T9877] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  210.659457][ T6197] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  210.927512][ T9894] loop3: detected capacity change from 0 to 1024
[  210.930848][ T9894] EXT4-fs: Ignoring removed nobh option
[  210.934038][ T9894] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  210.957531][ T9894] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.1555: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  210.965140][ T9894] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1555: couldn't read orphan inode 11 (err -117)
[  210.971798][ T9894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.002912][ T9891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  211.004509][ T9894] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1555: Invalid block bitmap block 0 in block_group 0
[  211.038922][ T9894] Quota error (device loop3): write_blk: dquota write failed
[  211.047351][ T9894] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  211.061218][ T9894] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1555: Failed to acquire dquot type 0
[  211.093429][ T9900] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  211.138325][ T6197] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.146393][ T9904] loop4: detected capacity change from 0 to 256
[  211.162059][ T9904] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  211.169009][ T9904] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  211.247088][ T9906] sp0: Synchronizing with TNC
[  211.309943][ T9906] Falling back ldisc for ttyS3.
[  211.697131][  T794] usb 4-1: new low-speed USB device number 21 using dummy_hcd
[  211.849603][  T794] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  211.852777][  T794] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  211.859642][  T794] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  211.864504][  T794] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  211.875022][  T794] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  211.885222][  T794] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  211.887996][  T794] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  211.891715][  T794] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  211.901164][  T794] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  211.909388][  T794] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  211.915023][  T794] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  211.921391][  T794] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  211.925645][  T794] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  211.934542][  T794] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  211.942248][  T794] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  211.952988][  T794] usb 4-1: string descriptor 0 read error: -22
[  211.955391][  T794] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  211.966539][  T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.981466][  T794] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  212.211638][ T6012] usb 4-1: USB disconnect, device number 21
[  212.821289][ T9939] option changes via remount are deprecated (pid=9938 comm=syz.4.1578)
[  214.738514][T10005] input: syz1 as /devices/virtual/input/input9
[  215.024772][T10016] loop3: detected capacity change from 0 to 2048
[  215.040957][T10016] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  215.337044][  T794] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  215.372948][T10022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1617'.
[  215.510433][  T794] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.514152][  T794] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  215.520773][  T794] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  215.523825][  T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.526178][  T794] usb 4-1: Product: syz
[  215.527679][  T794] usb 4-1: Manufacturer: syz
[  215.529181][  T794] usb 4-1: SerialNumber: syz
[  215.540444][  T794] cdc_mbim 4-1:1.0: skipping garbage
[  215.746514][T10018] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  216.642030][T10018] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  216.646843][  T794] cdc_mbim 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  216.650471][  T794] cdc_mbim 4-1:1.0: setting rx_max = 2048
[  216.717239][   T55] Bluetooth: hci1: command 0x040f tx timeout
[  216.849209][  T794] cdc_mbim 4-1:1.0: setting tx_max = 184
[  216.856219][  T794] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device
[  216.915931][  T794] wwan wwan0: port wwan0mbim0 attached
[  216.932096][  T794] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 9a:44:98:7c:19:cc
[  216.949300][  T794] usb 4-1: USB disconnect, device number 22
[  216.957840][  T794] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM
[  217.039439][  T794] wwan wwan0: port wwan0mbim0 disconnected
[  217.207152][ T5985] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  217.358821][ T5985] usb 5-1: Using ep0 maxpacket: 8
[  217.387414][ T5985] usb 5-1: config 0 has an invalid interface number: 186 but max is 0
[  217.399341][ T5985] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  217.407503][ T5985] usb 5-1: config 0 has no interface number 0
[  217.413948][ T5985] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  217.427377][ T5985] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  217.434156][ T5985] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  217.441357][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.445799][ T5985] usb 5-1: Product: syz
[  217.454401][ T5985] usb 5-1: Manufacturer: syz
[  217.456401][ T5985] usb 5-1: SerialNumber: syz
[  217.465180][ T5985] usb 5-1: config 0 descriptor??
[  217.476199][ T5985] iowarrior 5-1:0.186: no interrupt-in endpoint found
[  218.082201][  T794] usb 5-1: USB disconnect, device number 4
[  218.718383][T10090] loop3: detected capacity change from 0 to 32768
[  218.831400][T10090] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  218.851255][ T5977] (kworker/u8:4,5977,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[  219.055485][ T6197] ocfs2: Unmounting device (7,3) on (node local)
[  220.215019][T10109] loop3: detected capacity change from 0 to 32768
[  220.318496][T10111] loop4: detected capacity change from 0 to 32768
[  220.438959][T10111] JBD2: Ignoring recovery information on journal
[  220.597689][T10111] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  220.723783][T10126] loop3: detected capacity change from 0 to 32768
[  220.727595][T10126] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1657 (10126)
[  220.783338][T10126] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  220.788061][T10126] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  220.792660][T10126] BTRFS info (device loop3): using free-space-tree
[  220.826326][ T8278] ocfs2: Unmounting device (7,4) on (node local)
[  220.934543][   T40] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0x97a0a7bc486d7a3e1720cc6a28becfe3e6d8a24585525d9cb3509a2012c5a959 level 0
[  220.971463][T10126] BTRFS warning (device loop3): couldn't read tree root
[  221.050167][T10126] BTRFS error (device loop3): open_ctree failed: -5
[  221.665258][T10157] loop4: detected capacity change from 0 to 4096
[  221.668882][T10157] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  221.718684][T10157] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  222.069777][    C1] hrtimer: interrupt took 739949 ns
[  222.441106][T10183] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1676'.
[  222.725773][T10177] loop4: detected capacity change from 0 to 32768
[  222.776195][T10177] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  223.100671][ T8278] ocfs2: Unmounting device (7,4) on (node local)
[  223.536555][T10199] loop4: detected capacity change from 0 to 32768
[  223.603163][   T33] audit: type=1800 audit(1755040691.748:42): pid=10199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1681" name="file1" dev="loop4" ino=4 res=0 errno=0
[  223.674336][T10211] loop3: detected capacity change from 0 to 512
[  223.680795][T10211] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  223.743963][T10211] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 546, start 22000003)
[  223.761782][T10211] FAT-fs (loop3): Filesystem has been set read-only
[  223.780769][T10211] FAT-fs (loop3): error, invalid access to FAT (entry 0x22000003)
[  223.953945][T10222] loop3: detected capacity change from 0 to 256
[  223.973337][T10222] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  223.987348][T10222] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  224.005970][T10222] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  224.107129][T10226] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  224.110355][T10226] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  224.507274][   T52] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  224.657151][   T52] usb 5-1: Using ep0 maxpacket: 32
[  224.663910][   T52] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[  224.668096][   T52] usb 5-1: config 0 has no interface number 0
[  224.670748][   T52] usb 5-1: config 0 interface 89 has no altsetting 0
[  224.676769][   T52] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  224.684728][   T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.688599][   T52] usb 5-1: Product: syz
[  224.690630][   T52] usb 5-1: Manufacturer: syz
[  224.692815][   T52] usb 5-1: SerialNumber: syz
[  224.700527][   T52] usb 5-1: config 0 descriptor??
[  224.714126][   T52] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  224.719784][   T52] em28xx 5-1:0.89: Video interface 89 found: bulk
[  225.023107][   T33] audit: type=1326 audit(1755040693.168:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10242 comm="syz.2.1702" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e2818ebe9 code=0x0
[  225.032725][   T33] audit: type=1326 audit(1755040693.168:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10227 comm="syz.3.1695" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec158ebe9 code=0x7fc00000
[  225.042089][   T33] audit: type=1326 audit(1755040693.168:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10227 comm="syz.3.1695" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faec158ebe9 code=0x7fc00000
[  225.051395][   T33] audit: type=1326 audit(1755040693.168:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10227 comm="syz.3.1695" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec158ebe9 code=0x7fc00000
[  225.060460][   T33] audit: type=1326 audit(1755040693.168:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10227 comm="syz.3.1695" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec158ebe9 code=0x7fc00000
[  225.070312][   T33] audit: type=1326 audit(1755040693.168:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10227 comm="syz.3.1695" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec158ebe9 code=0x7fc00000
[  225.081768][   T33] audit: type=1326 audit(1755040693.168:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10227 comm="syz.3.1695" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec158ebe9 code=0x7fc00000
[  225.096850][   T33] audit: type=1326 audit(1755040693.168:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10227 comm="syz.3.1695" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec158ebe9 code=0x7fc00000
[  225.117380][   T33] audit: type=1326 audit(1755040693.168:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10227 comm="syz.3.1695" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec158ebe9 code=0x7fc00000
[  225.206557][T10248] loop3: detected capacity change from 0 to 1024
[  225.211021][T10248] EXT4-fs: Ignoring removed bh option
[  225.214099][T10248] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  225.235315][T10248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.280695][T10248] evm: overlay not supported
[  225.314711][T10248] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #12: block 7: comm syz.3.1704: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  225.333321][T10248] EXT4-fs (loop3): Remounting filesystem read-only
[  225.339588][   T52] em28xx 5-1:0.89: unknown em28xx chip ID (0)
[  225.415559][ T6197] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.104394][   T52] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  226.108315][   T52] em28xx 5-1:0.89: board has no eeprom
[  226.167156][   T52] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67)
[  226.170201][   T52] em28xx 5-1:0.89: analog set to bulk mode.
[  226.178994][  T794] em28xx 5-1:0.89: Registering V4L2 extension
[  226.492625][   T52] usb 5-1: USB disconnect, device number 5
[  226.498706][  T794] em28xx 5-1:0.89: reading from i2c device at 0x4a failed (error=-5)
[  226.508066][   T52] em28xx 5-1:0.89: Disconnecting em28xx
[  226.510439][  T794] em28xx 5-1:0.89: Config register raw data: 0xffffffed
[  226.516366][  T794] em28xx 5-1:0.89: AC97 chip type couldn't be determined
[  226.530045][  T794] em28xx 5-1:0.89: No AC97 audio processor
[  226.553108][  T794] usb 5-1: Decoder not found
[  226.555877][  T794] em28xx 5-1:0.89: failed to create media graph
[  226.559620][  T794] em28xx 5-1:0.89: V4L2 device video103 deregistered
[  226.584914][  T794] em28xx 5-1:0.89: Registering snapshot button...
[  226.593035][  T794] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input10
[  226.606219][  T794] em28xx 5-1:0.89: Remote control support is not available for this card.
[  226.610149][   T52] em28xx 5-1:0.89: Closing input extension
[  226.622461][   T52] em28xx 5-1:0.89: Deregistering snapshot button
[  226.662024][   T52] em28xx 5-1:0.89: Freeing device
[  226.912622][T10298] netlink: 964 bytes leftover after parsing attributes in process `syz.3.1719'.
[  227.262543][T10303] netlink: 'syz.4.1720': attribute type 5 has an invalid length.
[  227.694886][T10345] loop4: detected capacity change from 0 to 512
[  227.775922][T10345] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1739: bg 0: block 16: invalid block bitmap
[  227.791260][T10345] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  227.805873][T10345] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.1739: attempt to clear invalid blocks 1669132790 len 1
[  227.814391][T10345] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1739: invalid indirect mapped block 4294967295 (level 1)
[  227.826295][T10345] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1739: invalid indirect mapped block 4294967295 (level 2)
[  227.846533][T10345] EXT4-fs (loop4): 1 truncate cleaned up
[  227.906146][T10345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.106680][ T8278] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.182126][T10384] loop4: detected capacity change from 0 to 8
[  229.210173][T10384] SQUASHFS error: Unable to read inode 0x127
[  229.247221][ T6012] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  229.394371][T10394] tmpfs: Bad value for 'mpol'
[  229.433479][ T6012] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  229.438300][ T6012] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  229.442197][ T6012] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  229.446632][ T6012] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  229.452768][ T6012] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  229.455793][ T6012] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  229.459490][ T6012] usb 4-1: Manufacturer: syz
[  229.463396][ T6012] usb 4-1: config 0 descriptor??
[  229.874867][ T6012] appleir 0003:05AC:8243.0008: unknown main item tag 0x0
[  229.881293][ T6012] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0
[  230.455766][ T5985] usb 4-1: USB disconnect, device number 23
[  230.707141][T10437] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1782'.
[  230.854957][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1785'.
[  230.947342][T10446] netlink: 'syz.2.1786': attribute type 9 has an invalid length.
[  231.429318][T10468] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  231.432614][T10468] batadv_slave_0: entered promiscuous mode
[  231.608331][T10478] netlink: 'syz.2.1801': attribute type 21 has an invalid length.
[  231.611000][T10478] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1801'.
[  231.657141][T10482] netlink: 'syz.3.1803': attribute type 1 has an invalid length.
[  231.794971][T10487] loop3: detected capacity change from 0 to 4096
[  232.740595][T10528] loop4: detected capacity change from 0 to 512
[  232.801698][T10530] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  235.600545][T10604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1855'.
[  235.606402][T10604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1855'.
[  235.836336][T10617] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1861'.
[  235.851483][T10617] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1861'.
[  235.867925][T10617] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1861'.
[  236.003418][T10626] netlink: 'syz.4.1865': attribute type 21 has an invalid length.
[  236.024666][T10626] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1865'.
[  236.043818][   T52] libceph: connect (1)[c::]:6789 error -97
[  236.045797][   T52] libceph: mon0 (1)[c::]:6789 connect error
[  236.049847][T10626] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1865'.
[  236.061318][T10634] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  236.064971][T10634] syz.3.1868: attempt to access beyond end of device
[  236.064971][T10634] loop3: rw=0, sector=0, nr_sectors = 2 limit=0
[  236.131040][T10638] loop3: detected capacity change from 0 to 1024
[  236.134877][T10638] EXT4-fs: Ignoring removed orlov option
[  236.139378][T10638] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  236.157111][T10638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.170057][T10638] EXT4-fs error (device loop3): ext4_check_all_de:659: inode #12: block 7: comm syz.3.1870: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0
[  236.181880][T10636] loop4: detected capacity change from 0 to 8192
[  236.231032][ T6197] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.321709][   T52] libceph: connect (1)[c::]:6789 error -97
[  236.324309][   T52] libceph: mon0 (1)[c::]:6789 connect error
[  236.591930][T10661] loop3: detected capacity change from 0 to 256
[  236.605277][T10661] FAT-fs (loop3): Directory bread(block 64) failed
[  236.607813][T10661] FAT-fs (loop3): Directory bread(block 65) failed
[  236.610334][T10661] FAT-fs (loop3): Directory bread(block 66) failed
[  236.612748][T10661] FAT-fs (loop3): Directory bread(block 67) failed
[  236.615265][T10661] FAT-fs (loop3): Directory bread(block 68) failed
[  236.619743][T10661] FAT-fs (loop3): Directory bread(block 69) failed
[  236.622463][T10661] FAT-fs (loop3): Directory bread(block 70) failed
[  236.624869][T10661] FAT-fs (loop3): Directory bread(block 71) failed
[  236.628553][T10661] FAT-fs (loop3): Directory bread(block 72) failed
[  236.631087][T10661] FAT-fs (loop3): Directory bread(block 73) failed
[  236.835694][T10630] ceph: No mds server is up or the cluster is laggy
[  236.844163][   T52] libceph: connect (1)[c::]:6789 error -97
[  236.846684][   T52] libceph: mon0 (1)[c::]:6789 connect error
[  237.148580][   T33] kauditd_printk_skb: 34 callbacks suppressed
[  237.148591][   T33] audit: type=1326 audit(1755040705.238:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.2.1879" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2818ebe9 code=0x7ffc0000
[  237.173749][   T33] audit: type=1326 audit(1755040705.238:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.2.1879" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2818ebe9 code=0x7ffc0000
[  237.213888][   T33] audit: type=1326 audit(1755040705.238:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.2.1879" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5e2818ebe9 code=0x7ffc0000
[  237.244909][   T33] audit: type=1326 audit(1755040705.248:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.2.1879" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2818ebe9 code=0x7ffc0000
[  237.316938][   T33] audit: type=1326 audit(1755040705.248:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.2.1879" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2818ebe9 code=0x7ffc0000
[  237.375069][   T33] audit: type=1326 audit(1755040705.248:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10673 comm="syz.2.1879" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5e281c14a5 code=0x7ffc0000
[  237.387657][   T33] audit: type=1326 audit(1755040705.268:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.2.1879" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5e2818ebe9 code=0x7ffc0000
[  237.395292][   T33] audit: type=1326 audit(1755040705.268:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.2.1879" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2818ebe9 code=0x7ffc0000
[  237.405850][T10668] loop3: detected capacity change from 0 to 32768
[  237.407286][   T33] audit: type=1326 audit(1755040705.268:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.2.1879" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2818ebe9 code=0x7ffc0000
[  237.428476][   T33] audit: type=1326 audit(1755040705.268:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10669 comm="syz.2.1879" exe="/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f5e2818ebe9 code=0x7ffc0000
[  238.132020][T10678] loop4: detected capacity change from 0 to 32768
[  238.593345][T10697] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1890'.
[  238.741746][   T55] Bluetooth: hci1: unexpected event for opcode 0x0c1c
[  238.957389][T10707] loop4: detected capacity change from 0 to 40427
[  239.022899][T10707] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  239.026499][T10707] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  239.045773][ T8278] syz-executor: attempt to access beyond end of device
[  239.045773][ T8278] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  239.050140][ T8278] CPU: 0 UID: 0 PID: 8278 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  239.050153][ T8278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  239.050159][ T8278] Call Trace:
[  239.050163][ T8278]  <TASK>
[  239.050167][ T8278]  dump_stack_lvl+0x189/0x250
[  239.050186][ T8278]  ? __pfx_dump_stack_lvl+0x10/0x10
[  239.050196][ T8278]  ? __pfx_queue_work_on+0x10/0x10
[  239.050206][ T8278]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  239.050217][ T8278]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  239.050232][ T8278]  f2fs_handle_critical_error+0x37c/0x540
[  239.050249][ T8278]  f2fs_write_end_io+0x886/0xb60
[  239.050271][ T8278]  __submit_merged_bio+0x27a/0x6a0
[  239.050284][ T8278]  __submit_merged_write_cond+0x255/0x530
[  239.050297][ T8278]  f2fs_write_data_pages+0x261d/0x3000
[  239.050326][ T8278]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  239.050343][ T8278]  ? arch_stack_walk+0xfc/0x150
[  239.050367][ T8278]  ? __mod_zone_page_state+0xd7/0x140
[  239.050383][ T8278]  ? unwind_next_frame+0xa5/0x2390
[  239.050392][ T8278]  ? rcu_is_watching+0x15/0xb0
[  239.050399][ T8278]  ? __kasan_check_byte+0x12/0x40
[  239.050416][ T8278]  ? is_bpf_text_address+0x26/0x2b0
[  239.050427][ T8278]  ? rcu_is_watching+0x15/0xb0
[  239.050436][ T8278]  ? rcu_is_watching+0x15/0xb0
[  239.050444][ T8278]  ? lock_release+0x4b/0x3e0
[  239.050456][ T8278]  ? lock_release+0x4b/0x3e0
[  239.050475][ T8278]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  239.050486][ T8278]  do_writepages+0x32e/0x550
[  239.050505][ T8278]  ? do_raw_spin_unlock+0x4d/0x240
[  239.050517][ T8278]  filemap_fdatawrite+0x199/0x240
[  239.050529][ T8278]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  239.050538][ T8278]  ? __pfx_SOFTIRQ_verbose+0x10/0x10
[  239.050571][ T8278]  ? do_raw_spin_unlock+0x4d/0x240
[  239.050583][ T8278]  f2fs_sync_dirty_inodes+0x31f/0x830
[  239.050620][ T8278]  f2fs_write_checkpoint+0x95a/0x1df0
[  239.050644][ T8278]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  239.050680][ T8278]  ? kill_f2fs_super+0x298/0x6c0
[  239.050696][ T8278]  kill_f2fs_super+0x2c3/0x6c0
[  239.050710][ T8278]  ? __pfx_kill_f2fs_super+0x10/0x10
[  239.050720][ T8278]  ? radix_tree_delete_item+0x2b6/0x400
[  239.050739][ T8278]  ? shrinker_free+0x2ce/0x3e0
[  239.050751][ T8278]  deactivate_locked_super+0xbc/0x130
[  239.050762][ T8278]  cleanup_mnt+0x425/0x4c0
[  239.050773][ T8278]  ? lockdep_hardirqs_on+0x9c/0x150
[  239.050785][ T8278]  task_work_run+0x1d4/0x260
[  239.050799][ T8278]  ? __pfx_task_work_run+0x10/0x10
[  239.050807][ T8278]  ? __x64_sys_umount+0x122/0x160
[  239.050821][ T8278]  ? exit_to_user_mode_loop+0x40/0x110
[  239.050837][ T8278]  exit_to_user_mode_loop+0xec/0x110
[  239.050848][ T8278]  do_syscall_64+0x2bd/0x3b0
[  239.050857][ T8278]  ? lockdep_hardirqs_on+0x9c/0x150
[  239.050866][ T8278]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.050875][ T8278]  ? exc_page_fault+0x9f/0xf0
[  239.050885][ T8278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.050893][ T8278] RIP: 0033:0x7f22ea18ff17
[  239.050902][ T8278] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  239.050910][ T8278] RSP: 002b:00007fff46a19dd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  239.050920][ T8278] RAX: 0000000000000000 RBX: 00007f22ea211c05 RCX: 00007f22ea18ff17
[  239.050925][ T8278] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff46a19e90
[  239.050930][ T8278] RBP: 00007fff46a19e90 R08: 0000000000000000 R09: 0000000000000000
[  239.050934][ T8278] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff46a1af20
[  239.050939][ T8278] R13: 00007f22ea211c05 R14: 000000000003a532 R15: 00007fff46a1af60
[  239.050954][ T8278]  </TASK>
[  239.050978][ T8278] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  239.628580][  T141] Bluetooth: hci3: Frame reassembly failed (-84)
[  239.634536][T10729] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  239.984936][T10737] loop4: detected capacity change from 0 to 32768
[  239.999240][T10737] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1907 (10737)
[  240.024784][T10737] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  240.029734][T10737] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  240.032980][T10737] BTRFS info (device loop4): using free-space-tree
[  240.062472][T10756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1915'.
[  240.132299][T10737] BTRFS info (device loop4): rebuilding free space tree
[  240.214866][ T8278] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  241.766129][   T55] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  241.772258][ T5950] Bluetooth: hci3: command 0x1003 tx timeout
[  241.788942][   T53] Bluetooth: hci4: Frame reassembly failed (-84)
[  243.838693][   T55] Bluetooth: hci4: command 0x1003 tx timeout
[  243.841142][ T5948] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  245.599381][T10869] loop4: detected capacity change from 0 to 512
[  245.608482][T10869] EXT4-fs: Ignoring removed mblk_io_submit option
[  245.619530][T10869] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  245.625528][T10869] EXT4-fs (loop4): can't mount with journal_async_commit, fs mounted w/o journal
[  245.937346][T10886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1965'.
[  246.100858][T10882] loop4: detected capacity change from 0 to 32768
[  246.157512][T10882] (syz.4.1963,10882,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0xb6731743. Applying ECC.
[  246.200508][T10882] (syz.4.1963,10882,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  246.206294][T10882] (syz.4.1963,10882,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  246.215666][T10882] (syz.4.1963,10882,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0xa7efa3e4. Applying ECC.
[  246.261799][T10882] (syz.4.1963,10882,0):ocfs2_verify_heartbeat:818 ERROR: Cannot heartbeat on a locally mounted device.
[  246.272536][T10882] (syz.4.1963,10882,0):ocfs2_fill_super:1177 ERROR: status = -22
[  246.388380][T10898] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  246.397214][T10897] IPVS: stopping master sync thread 10898 ...
[  246.468522][T10900] syz_tun: entered promiscuous mode
[  246.472004][T10900] batadv_slave_0: entered promiscuous mode
[  246.475369][T10900] hsr1: entered allmulticast mode
[  246.478235][T10900] syz_tun: entered allmulticast mode
[  246.480335][T10900] batadv_slave_0: entered allmulticast mode
[  246.650308][T10908] openvswitch: netlink: Message has 16 unknown bytes.
[  246.930508][T10923] netlink: 'syz.3.1982': attribute type 4 has an invalid length.
[  246.966617][T10923] netlink: 'syz.3.1982': attribute type 4 has an invalid length.
[  247.188726][T10935] loop3: detected capacity change from 0 to 256
[  247.260754][T10939] loop4: detected capacity change from 0 to 256
[  247.510738][T10958] netlink: 'syz.2.1999': attribute type 6 has an invalid length.
[  247.514299][T10958] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1999'.
[  247.686160][T10969] loop3: detected capacity change from 0 to 128
[  247.807765][T10973] loop4: detected capacity change from 0 to 8192
[  247.986293][T10983] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2012'.
[  248.482577][T11006] gfs2: not a GFS2 filesystem
[  248.487914][T11005] netlink: 'syz.2.2022': attribute type 6 has an invalid length.
[  248.552802][T11011] Invalid option length (65058) for dns_resolver key
[  248.625315][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2026'.
[  248.748665][T11024] loop4: detected capacity change from 0 to 65
[  248.759604][T11024] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway
[  249.769745][T11043] team0: entered promiscuous mode
[  249.772536][T11043] team_slave_0: entered promiscuous mode
[  249.774842][T11043] team_slave_1: entered promiscuous mode
[  249.780171][T11042] team0: left promiscuous mode
[  249.782155][T11042] team_slave_0: left promiscuous mode
[  249.784455][T11042] team_slave_1: left promiscuous mode
[  249.872800][T11045] loop4: detected capacity change from 0 to 1024
[  249.952249][T11045] hfsplus: failed to load root directory
[  250.114245][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88810d5f3400: rx timeout, send abort
[  250.145208][T11057] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2043'.
[  250.308282][T11061] loop4: detected capacity change from 0 to 1024
[  250.311844][T11061] EXT4-fs: Ignoring removed oldalloc option
[  250.328682][T11061] EXT4-fs: Ignoring removed bh option
[  250.396588][T11061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.515527][T11061] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.2046: Allocating blocks 497-513 which overlap fs metadata
[  250.535090][T11061] EXT4-fs (loop4): pa ffff8881035a2570: logic 1, phys. 449, len 4
[  250.539100][T11061] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 2, pa_free 3
[  250.591522][ T8278] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.618005][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88810d5f3400: abort rx timeout. Force session deactivation
[  251.457353][   T10] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  251.619985][   T10] usb 4-1: config 54 has an invalid interface number: 154 but max is 0
[  251.623268][   T10] usb 4-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config
[  251.626828][   T10] usb 4-1: config 54 has no interface number 0
[  251.631240][   T10] usb 4-1: too many endpoints for config 54 interface 154 altsetting 0: 146, using maximum allowed: 30
[  251.635255][   T10] usb 4-1: config 54 interface 154 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 146
[  251.647383][   T10] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec
[  251.650456][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.653274][   T10] usb 4-1: Product: syz
[  251.654906][   T10] usb 4-1: Manufacturer: syz
[  251.656772][   T10] usb 4-1: SerialNumber: syz
[  251.664764][   T10] hub 4-1:54.154: bad descriptor, ignoring hub
[  251.667643][   T10] hub 4-1:54.154: probe with driver hub failed with error -5
[  251.991438][   T10] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  251.999490][ T5977] usb 4-1: Failed to submit usb control message: -71
[  252.006716][ T5977] usb 4-1: unable to send the bmi data to the device: -71
[  252.012889][ T5977] usb 4-1: unable to get target info from device
[  252.018337][ T5977] usb 4-1: could not get target info (-71)
[  252.022646][ T5977] usb 4-1: could not probe fw (-71)
[  252.024795][   T10] usb 4-1: USB disconnect, device number 24
[  252.677667][T11129] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000007
[  253.321740][T11158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2088'.
[  253.856319][T11170] IPVS: Unknown mcast interface: vcan0
[  253.928368][T11151] loop3: detected capacity change from 0 to 40427
[  253.932884][T11151] F2FS-fs (loop3): build fault injection rate: 14
[  253.935434][T11151] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  253.946330][T11151] F2FS-fs (loop3): invalid crc value
[  253.952223][    C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  253.964075][    C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  254.017015][T11151] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  254.020553][T11151] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  254.026133][T11151] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  254.042585][T11151] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  254.053109][T11151] F2FS-fs (loop3): inject dquot initialize in f2fs_dquot_initialize of f2fs_mknod+0x155/0x5d0
[  254.059478][T11151] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  254.091126][ T6197] F2FS-fs (loop3): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xab1/0x1cf0
[  254.098677][ T6197] F2FS-fs (loop3): inconsistent node block, node_type:0, nid:15, node_footer[nid:15,ino:3,ofs:521732,cpver:0,blkaddr:0]
[  254.109288][ T6197] syz-executor: attempt to access beyond end of device
[  254.109288][ T6197] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  254.114655][ T6197] CPU: 1 UID: 0 PID: 6197 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  254.114674][ T6197] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  254.114682][ T6197] Call Trace:
[  254.114688][ T6197]  <TASK>
[  254.114694][ T6197]  dump_stack_lvl+0x189/0x250
[  254.114717][ T6197]  ? __pfx_dump_stack_lvl+0x10/0x10
[  254.114733][ T6197]  ? __pfx_queue_work_on+0x10/0x10
[  254.114746][ T6197]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  254.114762][ T6197]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  254.114787][ T6197]  f2fs_handle_critical_error+0x37c/0x540
[  254.114810][ T6197]  f2fs_write_end_io+0x886/0xb60
[  254.114844][ T6197]  __submit_merged_bio+0x27a/0x6a0
[  254.114866][ T6197]  __submit_merged_write_cond+0x255/0x530
[  254.114924][ T6197]  f2fs_write_data_pages+0x261d/0x3000
[  254.114974][ T6197]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  254.115042][ T6197]  ? folios_put_refs+0x559/0x640
[  254.115068][ T6197]  ? __lock_acquire+0xab9/0xd20
[  254.115096][ T6197]  ? do_raw_spin_lock+0x121/0x290
[  254.115121][ T6197]  ? do_raw_spin_unlock+0x4d/0x240
[  254.115137][ T6197]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  254.115156][ T6197]  do_writepages+0x32e/0x550
[  254.115183][ T6197]  ? do_raw_spin_unlock+0x4d/0x240
[  254.115203][ T6197]  filemap_fdatawrite+0x199/0x240
[  254.115220][ T6197]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  254.115281][ T6197]  ? do_raw_spin_unlock+0x4d/0x240
[  254.115300][ T6197]  f2fs_sync_dirty_inodes+0x31f/0x830
[  254.115333][ T6197]  f2fs_write_checkpoint+0x95a/0x1df0
[  254.115373][ T6197]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  254.115435][ T6197]  ? kill_f2fs_super+0x298/0x6c0
[  254.115458][ T6197]  kill_f2fs_super+0x2c3/0x6c0
[  254.115481][ T6197]  ? __pfx_kill_f2fs_super+0x10/0x10
[  254.115497][ T6197]  ? radix_tree_delete_item+0x2b6/0x400
[  254.115519][ T6197]  ? shrinker_free+0x2ce/0x3e0
[  254.115536][ T6197]  deactivate_locked_super+0xbc/0x130
[  254.115554][ T6197]  cleanup_mnt+0x425/0x4c0
[  254.115568][ T6197]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.115602][ T6197]  task_work_run+0x1d4/0x260
[  254.115624][ T6197]  ? __pfx_task_work_run+0x10/0x10
[  254.115639][ T6197]  ? __x64_sys_umount+0x122/0x160
[  254.115660][ T6197]  ? exit_to_user_mode_loop+0x40/0x110
[  254.115683][ T6197]  exit_to_user_mode_loop+0xec/0x110
[  254.115701][ T6197]  do_syscall_64+0x2bd/0x3b0
[  254.115716][ T6197]  ? lockdep_hardirqs_on+0x9c/0x150
[  254.115730][ T6197]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.115743][ T6197]  ? exc_page_fault+0x9f/0xf0
[  254.115760][ T6197]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  254.115773][ T6197] RIP: 0033:0x7faec158ff17
[  254.115786][ T6197] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  254.115798][ T6197] RSP: 002b:00007ffddac56888 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  254.115812][ T6197] RAX: 0000000000000000 RBX: 00007faec1611c05 RCX: 00007faec158ff17
[  254.115821][ T6197] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffddac56940
[  254.115829][ T6197] RBP: 00007ffddac56940 R08: 0000000000000000 R09: 0000000000000000
[  254.115837][ T6197] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffddac579d0
[  254.115846][ T6197] R13: 00007faec1611c05 R14: 000000000003dff2 R15: 00007ffddac57a10
[  254.115871][ T6197]  </TASK>
[  254.116717][ T6197] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  254.711913][T11185] mmap: syz.3.2097 (11185): VmData 45854720 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  255.083295][T11214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2111'.
[  255.610074][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.616993][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  255.790721][T11247] netlink: 'syz.3.2123': attribute type 5 has an invalid length.
[  255.979454][T11257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2128'.
[  256.044687][T11261] loop4: detected capacity change from 0 to 1024
[  256.081249][  T717] hfsplus: b-tree write err: -5, ino 4
[  256.174119][T11267] netlink: 'syz.4.2133': attribute type 11 has an invalid length.
[  256.226706][    T9] usb 4-1: new low-speed USB device number 25 using dummy_hcd
[  256.375112][T11271] veth1_macvtap: left promiscuous mode
[  256.377404][T11271] macsec0: entered promiscuous mode
[  256.559859][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  256.565786][    T9] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  256.575091][    T9] usb 4-1: string descriptor 0 read error: -22
[  256.580321][    T9] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0
[  256.584022][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.077634][   T10] usb 4-1: USB disconnect, device number 25
[  257.725309][T11301] netlink: 'syz.3.2147': attribute type 6 has an invalid length.
[  257.733422][T11301] netlink: 'syz.3.2147': attribute type 6 has an invalid length.
[  257.788609][T11305] loop4: detected capacity change from 0 to 1024
[  257.804395][T11305] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  257.812101][T11305] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  257.815808][T11305] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: inode #32: comm syz.4.2148: iget: special inode unallocated
[  257.827377][T11305] EXT4-fs (loop4): no journal found
[  257.829080][T11305] EXT4-fs (loop4): can't get journal size
[  257.833711][T11305] EXT4-fs error (device loop4): ext4_protect_reserved_inode:160: inode #32: comm syz.4.2148: iget: special inode unallocated
[  257.841273][T11305] EXT4-fs (loop4): failed to initialize system zone (-117)
[  257.843780][T11305] EXT4-fs (loop4): mount failed
[  257.980282][T11318] loop3: detected capacity change from 0 to 512
[  257.983116][T11318] EXT4-fs: Ignoring removed mblk_io_submit option
[  257.985552][T11318] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  257.995397][T11318] EXT4-fs (loop3): 1 truncate cleaned up
[  257.999535][T11318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.030388][ T6197] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.197130][ T5999] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  258.347621][ T5999] usb 5-1: Using ep0 maxpacket: 8
[  258.351276][ T5999] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  258.359307][ T5999] usb 5-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68
[  258.362276][ T5999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.372742][ T5999] usb 5-1: Product: syz
[  258.374320][ T5999] usb 5-1: Manufacturer: syz
[  258.376021][ T5999] usb 5-1: SerialNumber: syz
[  258.380969][ T5999] usb 5-1: config 0 descriptor??
[  258.390683][ T5999] redrat3 5-1:0.0: Couldn't find all endpoints
[  258.491533][T11333] loop3: detected capacity change from 0 to 32768
[  258.496264][T11333] (syz.3.2161,11333,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  258.501700][T11333] (syz.3.2161,11333,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  258.511269][T11333] JBD2: Ignoring recovery information on journal
[  258.538835][T11333] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  258.548494][T11333] (syz.3.2161,11333,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xf53e8faf, computed 0xf6557595. Applying ECC.
[  258.589110][ T6197] ocfs2: Unmounting device (7,3) on (node local)
[  258.617394][ T5999] usb 5-1: USB disconnect, device number 6
[  258.770293][T11343] loop3: detected capacity change from 0 to 512
[  258.780599][T11343] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  258.791229][T11343] EXT4-fs (loop3): 1 truncate cleaned up
[  258.794960][T11343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.805879][   T33] kauditd_printk_skb: 48 callbacks suppressed
[  258.805893][   T33] audit: type=1800 audit(1755040726.948:144): pid=11343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2165" name="bus" dev="loop3" ino=18 res=0 errno=0
[  258.831144][ T6197] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.286822][T11348] loop3: detected capacity change from 0 to 32768
[  259.319817][T11348] XFS: ikeep mount option is deprecated.
[  259.332965][T11348] XFS: ikeep mount option is deprecated.
[  259.487017][T11348] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  259.531234][T11348] XFS (loop3): Ending clean mount
[  259.559299][ T6197] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  259.737113][   T52] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  259.888872][   T52] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  259.892028][   T52] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  259.895740][   T52] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  259.901410][   T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.905353][   T52] usb 5-1: config 0 descriptor??
[  259.915115][   T52] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  259.920313][   T52] dvb-usb: bulk message failed: -22 (3/0)
[  259.933080][   T52] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  259.939220][   T52] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  259.941769][   T52] usb 5-1: media controller created
[  259.946314][   T52] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  259.971849][   T52] dvb-usb: bulk message failed: -22 (6/0)
[  260.016598][   T52] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  260.022252][   T52] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11
[  260.039756][   T52] dvb-usb: schedule remote query interval to 150 msecs.
[  260.042581][   T52] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  260.200398][   T52] dvb-usb: bulk message failed: -22 (1/0)
[  260.203410][   T52] dvb-usb: error while querying for an remote control event.
[  260.358889][   T52] dvb-usb: bulk message failed: -22 (1/0)
[  260.362870][   T52] dvb-usb: error while querying for an remote control event.
[  260.439485][   T52] usb 5-1: USB disconnect, device number 7
[  260.494554][   T52] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  260.610926][T11424] loop3: detected capacity change from 0 to 256
[  260.671109][T11426] loop3: detected capacity change from 0 to 4096
[  260.683675][T11426] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  260.686638][T11426] ntfs3(loop3): Failed to load $UpCase (-22).
[  261.746738][T11443] loop3: detected capacity change from 0 to 1024
[  262.099708][T11457] syz.3.2211 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  262.720233][T11463] loop4: detected capacity change from 0 to 40427
[  262.723436][T11463] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  262.725881][T11463] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  262.790246][T11463] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  262.793462][T11463] F2FS-fs (loop4): Try to recover 1th superblock, ret: -30
[  262.805969][T11463] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  263.520179][T11489] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2225'.
[  263.610784][T11494] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  263.804413][T11501] loop4: detected capacity change from 0 to 64
[  263.840614][T11501] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  264.280040][T11506] loop3: detected capacity change from 0 to 32768
[  264.507748][T11528] loop4: detected capacity change from 0 to 512
[  264.543125][T11528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.548446][T11528] ext4 filesystem being mounted at /388/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  264.654252][ T8278] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  264.660406][ T8278] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816
[  264.720690][ T8545] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.012696][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.076813][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.150539][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.235787][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.249029][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  265.254350][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  265.260054][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  265.265884][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  265.270122][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  265.404603][   T12] bridge_slave_1: left allmulticast mode
[  265.411644][   T12] bridge_slave_1: left promiscuous mode
[  265.416660][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  265.425271][   T12] bridge_slave_0: left allmulticast mode
[  265.429854][   T12] bridge_slave_0: left promiscuous mode
[  265.433721][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  265.912148][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  265.916571][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  265.921102][   T12] bond0 (unregistering): Released all slaves
[  265.933706][   T12] bond1 (unregistering): Released all slaves
[  265.948400][T11555] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2257'.
[  266.150069][T11551] chnl_net:caif_netlink_parms(): no params data found
[  266.452060][T11551] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.454313][T11551] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.456525][T11551] bridge_slave_0: entered allmulticast mode
[  266.462049][T11551] bridge_slave_0: entered promiscuous mode
[  266.559597][T11551] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.567262][T11551] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.570095][T11551] bridge_slave_1: entered allmulticast mode
[  266.573633][T11551] bridge_slave_1: entered promiscuous mode
[  266.583415][T11568] loop3: detected capacity change from 0 to 32768
[  266.609300][T11568] XFS: attr2 mount option is deprecated.
[  266.627414][T11568] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  266.640926][T11568] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  266.678832][T11568] XFS (loop3): Ending clean mount
[  266.690467][T11551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  266.695264][T11551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  266.703712][T11568] XFS (loop3): Quotacheck needed: Please wait.
[  266.763650][   T12] hsr_slave_0: left promiscuous mode
[  266.764397][T11568] XFS (loop3): Quotacheck: Done.
[  266.771495][   T12] hsr_slave_1: left promiscuous mode
[  266.774232][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  266.788391][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  266.794610][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  266.811278][ T6197] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  266.811296][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  266.849541][   T12] veth1_macvtap: left promiscuous mode
[  266.851806][   T12] veth0_macvtap: left promiscuous mode
[  266.854173][   T12] veth1_vlan: left promiscuous mode
[  266.856283][   T12] veth0_vlan: left promiscuous mode
[  267.277169][ T5948] Bluetooth: hci0: command tx timeout
[  267.429959][   T12] team0 (unregistering): Port device team_slave_1 removed
[  267.503188][   T12] team0 (unregistering): Port device team_slave_0 removed
[  267.544648][T11611] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2275'.
[  268.083742][T11551] team0: Port device team_slave_0 added
[  268.104342][T11551] team0: Port device team_slave_1 added
[  268.214470][T11551] batman_adv: batadv0: Adding interface: batadv_slave_0
[  268.219560][T11551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.230570][T11551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  268.236200][T11551] batman_adv: batadv0: Adding interface: batadv_slave_1
[  268.242637][T11551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  268.252580][T11551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  268.405910][T11551] hsr_slave_0: entered promiscuous mode
[  268.413378][T11551] hsr_slave_1: entered promiscuous mode
[  268.541775][T11622] loop3: detected capacity change from 0 to 32768
[  268.546221][T11622] (syz.3.2279,11622,1):ocfs2_verify_volume:2316 ERROR: bad system_dir_blkno: 0
[  268.550029][T11622] (syz.3.2279,11622,1):ocfs2_verify_volume:2331 ERROR: status = -22
[  268.552457][T11622] (syz.3.2279,11622,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  268.555231][T11622] (syz.3.2279,11622,1):ocfs2_fill_super:1177 ERROR: status = -22
[  268.561367][   T12] IPVS: stop unused estimator thread 0...
[  268.924954][T11551] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  268.955649][T11551] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  268.962849][T11551] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  268.974516][T11551] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  269.165897][T11551] 8021q: adding VLAN 0 to HW filter on device bond0
[  269.184768][T11551] 8021q: adding VLAN 0 to HW filter on device team0
[  269.196638][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.199742][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  269.214540][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.217504][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  269.359480][ T5948] Bluetooth: hci0: command tx timeout
[  269.461170][T11675] loop3: detected capacity change from 0 to 1024
[  269.695504][T11685] loop3: detected capacity change from 0 to 256
[  269.701325][T11551] 8021q: adding VLAN 0 to HW filter on device batadv0
[  269.719819][T11685] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  269.724037][T11685] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  269.748885][T11685] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x2d0d25cc, utbl_chksum : 0xe619d30d)
[  270.050387][T11551] veth0_vlan: entered promiscuous mode
[  270.061538][T11551] veth1_vlan: entered promiscuous mode
[  270.090359][T11551] veth0_macvtap: entered promiscuous mode
[  270.096230][T11551] veth1_macvtap: entered promiscuous mode
[  270.135525][T11551] batman_adv: batadv0: Interface activated: batadv_slave_0
[  270.145239][T11551] batman_adv: batadv0: Interface activated: batadv_slave_1
[  270.166679][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  270.176215][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  270.366377][T11708] overlayfs: failed to clone upperpath
[  270.555527][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  270.559426][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  270.670997][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.673605][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.702598][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.705666][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.874792][T11715] loop5: detected capacity change from 0 to 8192
[  270.909929][T11715] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  271.034627][T11727] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  271.190512][T11735] tipc: Failed to remove unknown binding: 66,1,1/0:2429080254/2429080256
[  271.291882][T11744] netlink: 284 bytes leftover after parsing attributes in process `syz.5.2307'.
[  271.440865][ T5948] Bluetooth: hci0: command tx timeout
[  271.846259][ T5948] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  271.850268][ T5948] CPU: 0 UID: 0 PID: 5948 Comm: kworker/u11:2 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  271.850282][ T5948] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  271.850288][ T5948] Workqueue: hci1 hci_rx_work
[  271.850301][ T5948] Call Trace:
[  271.850305][ T5948]  <TASK>
[  271.850310][ T5948]  dump_stack_lvl+0x189/0x250
[  271.850324][ T5948]  ? __pfx_dump_stack_lvl+0x10/0x10
[  271.850334][ T5948]  ? __pfx__printk+0x10/0x10
[  271.850350][ T5948]  ? kernfs_path_from_node+0x250/0x290
[  271.850359][ T5948]  ? kernfs_path_from_node+0x2f/0x290
[  271.850370][ T5948]  sysfs_create_dir_ns+0x259/0x280
[  271.850380][ T5948]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  271.850390][ T5948]  ? do_raw_spin_unlock+0x4d/0x240
[  271.850402][ T5948]  kobject_add_internal+0x59f/0xb40
[  271.850417][ T5948]  kobject_add+0x155/0x220
[  271.850430][ T5948]  ? __pfx_kobject_add+0x10/0x10
[  271.850440][ T5948]  ? _raw_spin_unlock+0x28/0x50
[  271.850451][ T5948]  ? get_device_parent+0x366/0x3a0
[  271.850474][ T5948]  device_add+0x408/0xb50
[  271.850488][ T5948]  hci_conn_add_sysfs+0xd5/0x1e0
[  271.850502][ T5948]  le_conn_complete_evt+0xc3a/0x1220
[  271.850519][ T5948]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  271.850530][ T5948]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  271.850539][ T5948]  ? __asan_memcpy+0x40/0x70
[  271.850552][ T5948]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  271.850561][ T5948]  ? skb_pull_data+0xfb/0x200
[  271.850571][ T5948]  hci_le_conn_complete_evt+0x187/0x450
[  271.850584][ T5948]  hci_event_packet+0x78f/0x1200
[  271.850598][ T5948]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  271.850637][ T5948]  ? __pfx_hci_event_packet+0x10/0x10
[  271.850651][ T5948]  ? kcov_remote_start+0x4d3/0x7f0
[  271.850662][ T5948]  ? lockdep_hardirqs_on+0x90/0x150
[  271.850675][ T5948]  ? hci_send_to_monitor+0xe2/0x570
[  271.850686][ T5948]  hci_rx_work+0x46a/0xe80
[  271.850699][ T5948]  ? process_scheduled_works+0x9ef/0x17b0
[  271.850708][ T5948]  process_scheduled_works+0xae1/0x17b0
[  271.850730][ T5948]  ? __pfx_process_scheduled_works+0x10/0x10
[  271.850750][ T5948]  worker_thread+0x8a0/0xda0
[  271.850771][ T5948]  kthread+0x711/0x8a0
[  271.850783][ T5948]  ? __pfx_worker_thread+0x10/0x10
[  271.850790][ T5948]  ? __pfx_kthread+0x10/0x10
[  271.850800][ T5948]  ? _raw_spin_unlock_irq+0x23/0x50
[  271.850808][ T5948]  ? lockdep_hardirqs_on+0x9c/0x150
[  271.850816][ T5948]  ? __pfx_kthread+0x10/0x10
[  271.850826][ T5948]  ret_from_fork+0x3fc/0x770
[  271.850836][ T5948]  ? __pfx_ret_from_fork+0x10/0x10
[  271.850847][ T5948]  ? __switch_to_asm+0x39/0x70
[  271.850857][ T5948]  ? __switch_to_asm+0x33/0x70
[  271.850866][ T5948]  ? __pfx_kthread+0x10/0x10
[  271.850876][ T5948]  ret_from_fork_asm+0x1a/0x30
[  271.850894][ T5948]  </TASK>
[  271.850912][ T5948] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  271.951934][ T5948] Bluetooth: hci1: failed to register connection device
[  273.763122][ T5948] Bluetooth: hci0: command tx timeout
[  274.015213][   T33] audit: type=1326 audit(1755040742.158:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11839 comm="syz.2.2336" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2818ebe9 code=0x7ffc0000
[  274.028319][   T33] audit: type=1326 audit(1755040742.168:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11839 comm="syz.2.2336" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2818ebe9 code=0x7ffc0000
[  274.035429][   T33] audit: type=1326 audit(1755040742.168:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11839 comm="syz.2.2336" exe="/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f5e2818ebe9 code=0x7ffc0000
[  274.047498][   T33] audit: type=1326 audit(1755040742.168:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11839 comm="syz.2.2336" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2818ebe9 code=0x7ffc0000
[  274.066783][   T33] audit: type=1326 audit(1755040742.168:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11839 comm="syz.2.2336" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e2818ebe9 code=0x7ffc0000
[  274.147141][ T5998] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  274.327130][ T5998] usb 6-1: Using ep0 maxpacket: 32
[  274.333620][ T5998] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  274.336480][ T5998] usb 6-1: config 0 has no interface number 0
[  274.338854][ T5998] usb 6-1: config 0 interface 184 has no altsetting 0
[  274.354584][ T5998] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  274.367738][ T5998] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.371074][ T5998] usb 6-1: Product: syz
[  274.372746][ T5998] usb 6-1: Manufacturer: syz
[  274.374417][ T5998] usb 6-1: SerialNumber: syz
[  274.386320][ T5998] usb 6-1: config 0 descriptor??
[  274.400190][ T5998] smsc75xx v1.0.0
[  275.045302][ T5998] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  275.052051][ T5998] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  275.263437][ T5998] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  275.272628][ T5998] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  275.275801][ T5998] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  275.280802][ T5998] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  275.284594][ T5998] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71
[  275.292900][ T5998] usb 6-1: USB disconnect, device number 2
[  275.521167][T11859] loop3: detected capacity change from 0 to 2048
[  275.545270][T11859] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  275.610520][   T33] audit: type=1326 audit(1755040743.758:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11860 comm="syz.3.2344" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faec158ebe9 code=0x0
[  275.790934][T11866] netlink: 'syz.3.2346': attribute type 2 has an invalid length.
[  275.801162][T11866] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2346'.
[  276.157133][   T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  276.297032][ T5998] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  276.307149][   T10] usb 6-1: Using ep0 maxpacket: 8
[  276.314193][   T10] usb 6-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab
[  276.318097][   T10] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  276.321709][   T10] usb 6-1: Product: syz
[  276.323594][   T10] usb 6-1: Manufacturer: syz
[  276.325603][   T10] usb 6-1: SerialNumber: syz
[  276.330952][   T10] usb 6-1: config 0 descriptor??
[  276.471780][ T5998] usb 4-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  276.477336][ T5998] usb 4-1: config 1 interface 0 has no altsetting 0
[  276.483139][ T5998] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  276.487215][ T5998] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  276.490621][ T5998] usb 4-1: SerialNumber: syz
[  276.682340][   T10] usb 6-1: USB disconnect, device number 3
[  276.728628][ T5998] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71
[  277.723975][ T5998] usb 4-1: USB disconnect, device number 26
[  277.782315][ T6416] udevd[6416]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  278.120682][   T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  278.269554][   T10] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  278.276172][   T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  278.281811][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  278.284931][   T10] usb 6-1: SerialNumber: syz
[  278.463418][T11929] loop7: detected capacity change from 0 to 16384
[  278.505249][T11912] loop5: detected capacity change from 0 to 1024
[  278.517574][T11912] EXT4-fs: Ignoring removed bh option
[  278.547912][T11912] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  278.644949][T11939] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.2364: corrupted in-inode xattr: e_value out of bounds
[  278.706002][   T10] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71
[  278.736432][   T10] usb 6-1: USB disconnect, device number 4
[  278.757944][T11930] loop7: detected capacity change from 16384 to 0
[  278.758374][    C0] I/O error, dev loop7, sector 12800 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0
[  278.966761][T11951] netlink: 'syz.3.2378': attribute type 21 has an invalid length.
[  278.971429][T11951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2378'.
[  279.233104][T11963] openvswitch: netlink: Message has 8 unknown bytes.
[  279.235360][T11963] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  279.253515][T11551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  280.403747][T11996] loop5: detected capacity change from 0 to 512
[  280.429942][T11996] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.2397: corrupted in-inode xattr: invalid ea_ino
[  280.436021][T11996] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2397: couldn't read orphan inode 15 (err -117)
[  280.443312][T11996] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  280.475488][T11551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.224095][T12077] loop5: detected capacity change from 0 to 1024
[  282.308714][T12083] loop3: detected capacity change from 0 to 16
[  282.312361][T12083] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  282.927336][ T5569] usb 4-1: new full-speed USB device number 27 using dummy_hcd
[  283.122038][ T5569] usb 4-1: config 150 has an invalid interface number: 204 but max is 1
[  283.138212][ T5569] usb 4-1: config 150 has no interface number 0
[  283.140937][ T5569] usb 4-1: config 150 interface 204 has no altsetting 0
[  283.151130][ T5569] usb 4-1: config 150 interface 1 has no altsetting 0
[  283.164641][T12104] Driver unsupported XDP return value 0 on prog  (id 198) dev N/A, expect packet loss!
[  283.171712][ T5569] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  283.177760][ T5569] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.180586][ T5569] usb 4-1: Product: syz
[  283.185768][ T5569] usb 4-1: Manufacturer: syz
[  283.190574][ T5569] usb 4-1: SerialNumber: syz
[  283.507099][   T33] audit: type=1326 audit(1755040751.648:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.2.2439" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e2818ebe9 code=0x0
[  283.508322][ T5569] xr_serial 4-1:150.204: xr_serial converter detected
[  284.104429][T12128] loop5: detected capacity change from 0 to 1024
[  284.112126][T12128] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  284.181852][T12128] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.2443: Invalid block bitmap block 0 in block_group 0
[  284.221873][T12128] Quota error (device loop5): write_blk: dquota write failed
[  284.225383][T12128] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  284.249935][T12128] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2443: Failed to acquire dquot type 0
[  284.256135][T12128] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.2443: Freeing blocks not in datazone - block = 0, count = 4096
[  284.296116][T12128] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.2443: Invalid inode bitmap blk 0 in block_group 0
[  284.313688][ T5569] usb 4-1: xr_serial converter now attached to ttyUSB0
[  284.314926][ T1091] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-8
[  284.338905][T12128] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem
[  284.346030][ T1091] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u9:5: Failed to release dquot type 0
[  284.379658][T12128] EXT4-fs (loop5): 1 orphan inode deleted
[  284.403497][T12128] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  284.476353][T11551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.542664][ T5569] usb 4-1: USB disconnect, device number 27
[  284.569261][T12144] 9pnet_fd: Insufficient options for proto=fd
[  284.571246][ T5569] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0
[  284.575228][ T5569] xr_serial 4-1:150.204: device disconnected
[  284.803920][T12157] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2449'.
[  285.633731][T12183] futex_wake_op: syz.2.2457 tries to shift op by -1; fix this program
[  285.847736][T12193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2462'.
[  285.851273][T12193] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2462'.
[  286.198742][T12199] ip6gre1: entered promiscuous mode
[  287.068301][T12238] tipc: New replicast peer: 255.255.255.255
[  287.071001][T12238] tipc: Enabled bearer <udp:syz2>, priority 10
[  287.247063][  T794] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  287.418697][  T794] usb 4-1: Using ep0 maxpacket: 32
[  287.423068][  T794] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  287.430605][  T794] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  287.433825][  T794] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  287.436638][  T794] usb 4-1: Product: syz
[  287.443522][  T794] usb 4-1: Manufacturer: syz
[  287.445365][  T794] usb 4-1: SerialNumber: syz
[  287.472961][  T794] usb 4-1: config 0 descriptor??
[  287.477138][T12236] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  287.711062][ T5998] usb 4-1: USB disconnect, device number 28
[  287.754411][T12257] loop5: detected capacity change from 0 to 1024
[  287.797536][T12257] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  287.837202][T12257] EXT4-fs error (device loop5): __ext4_remount:6736: comm syz.5.2493: Abort forced by user
[  287.845354][T12257] EXT4-fs (loop5): Remounting filesystem read-only
[  287.852045][T12257] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000.
[  287.930517][T11551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.019702][T12267] loop5: detected capacity change from 0 to 2048
[  288.034954][T12269] netlink: 39 bytes leftover after parsing attributes in process `syz.2.2498'.
[  288.051538][ T6416]  loop5: p1 p2 < > p3 p4 < p5 >
[  288.053769][ T6416] loop5: partition table partially beyond EOD, truncated
[  288.067740][ T6416] loop5: p2 start 4294934784 is beyond EOD, truncated
[  288.070801][ T6416] loop5: p3 start 3724543488 is beyond EOD, truncated
[  288.089958][T12267]  loop5: p1 p2 < > p3 p4 < p5 >
[  288.092014][T12267] loop5: partition table partially beyond EOD, truncated
[  288.095868][T12267] loop5: p2 start 4294934784 is beyond EOD, truncated
[  288.107576][T12267] loop5: p3 start 3724543488 is beyond EOD, truncated
[  288.174389][T12273] netlink: 'syz.2.2500': attribute type 9 has an invalid length.
[  288.201727][  T794] tipc: Node number set to 757989376
[  288.605444][T12288] loop5: detected capacity change from 0 to 256
[  288.609170][T12288] exfat: Deprecated parameter 'namecase'
[  288.611222][T12288] exfat: Bad value for 'uid'
[  288.612791][T12288] exfat: Bad value for 'uid'
[  289.002624][T12306] loop3: detected capacity change from 0 to 164
[  289.353223][T12321] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  289.923488][T12341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2532'.
[  289.930457][T12341] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2532'.
[  290.062109][T12352] loop3: detected capacity change from 0 to 512
[  290.091379][T12352] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.2537: bad orphan inode 17
[  290.101697][T12352] ext4_test_bit(bit=16, block=4) = 1
[  290.103859][T12352] is_bad_inode(inode)=0
[  290.105816][T12352] NEXT_ORPHAN(inode)=0
[  290.108129][T12352] max_ino=32
[  290.109932][T12352] i_nlink=1
[  290.112537][T12352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.161095][ T6197] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.299575][T12368] netlink: 'syz.2.2544': attribute type 1 has an invalid length.
[  291.436499][T12401] loop5: detected capacity change from 0 to 1024
[  291.474996][T12401] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  291.516118][T11551] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  291.526548][T12410] loop3: detected capacity change from 0 to 4096
[  291.546000][T12410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.619566][T12410] Quota error (device loop3): do_check_range: Getting block 7 out of range 1-5
[  291.635268][T12410] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  291.640247][T12410] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2563: Failed to acquire dquot type 1
[  291.695620][ T6197] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.428329][ T5998] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  292.587201][ T5998] usb 4-1: Using ep0 maxpacket: 16
[  292.627147][ T5998] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  292.638269][ T5998] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  292.659277][ T5998] usb 4-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00
[  292.663611][ T5998] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.693794][ T5998] usb 4-1: config 0 descriptor??
[  293.172142][ T5998] uclogic 0003:28BD:0074.0009: interface is invalid, ignoring
[  293.378301][ T5998] usb 4-1: USB disconnect, device number 29
[  294.379136][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2595'.
[  294.384128][T12487] netlink: 336 bytes leftover after parsing attributes in process `syz.5.2595'.
[  294.575910][T12499] loop5: detected capacity change from 0 to 128
[  294.582737][T12499] ext2: Unknown parameter 'context'
[  295.396186][T12509] loop5: detected capacity change from 0 to 1024
[  295.461736][T11551] hfsplus: bad catalog entry type
[  295.760805][   T36] hfsplus: b-tree write err: -5, ino 4
[  295.933403][ T5978] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.048863][ T5978] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.192659][ T5978] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.428144][ T5978] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.809276][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  296.817142][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  296.824566][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  296.842879][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  296.851038][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  296.996054][ T5978] bridge_slave_1: left allmulticast mode
[  297.001734][ T5978] bridge_slave_1: left promiscuous mode
[  297.007836][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.020891][ T5978] bridge_slave_0: left allmulticast mode
[  297.023503][ T5978] bridge_slave_0: left promiscuous mode
[  297.026119][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.520240][T12543] netlink: 'syz.3.2621': attribute type 10 has an invalid length.
[  297.870527][ T5978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  297.876818][ T5978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  297.883017][ T5978] bond0 (unregistering): Released all slaves
[  297.917494][T12543] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  298.494036][ T5978] hsr_slave_0: left promiscuous mode
[  298.508746][ T5978] hsr_slave_1: left promiscuous mode
[  298.519204][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  298.522308][ T5978] batman_adv: batadv0: Removing interface: batadv_slave_0
[  298.528635][T12567] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  298.534060][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  298.539350][ T5978] batman_adv: batadv0: Removing interface: batadv_slave_1
[  298.594836][ T5978] veth1_macvtap: left promiscuous mode
[  298.599288][ T5978] veth0_macvtap: left promiscuous mode
[  298.602293][ T5978] veth1_vlan: left promiscuous mode
[  298.604669][ T5978] veth0_vlan: left promiscuous mode
[  298.960947][ T5948] Bluetooth: hci0: command tx timeout
[  299.599342][T12577] loop3: detected capacity change from 0 to 128
[  299.649218][T12577] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  299.657677][T12577] ext4 filesystem being mounted at /741/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  299.915383][ T6197] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  300.149634][ T5978] team0 (unregistering): Port device team_slave_1 removed
[  300.298258][ T5978] team0 (unregistering): Port device team_slave_0 removed
[  300.806119][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2636'.
[  301.039079][ T5948] Bluetooth: hci0: command tx timeout
[  301.109166][    C1] vkms_vblank_simulate: vblank timer overrun
[  301.890416][T12599] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  301.900308][T12599] CIFS mount error: No usable UNC path provided in device string!
[  301.900308][T12599] 
[  301.929565][T12599] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  301.983472][T12532] chnl_net:caif_netlink_parms(): no params data found
[  302.216563][T12532] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.219330][T12532] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.222140][T12532] bridge_slave_0: entered allmulticast mode
[  302.225071][T12532] bridge_slave_0: entered promiscuous mode
[  302.231873][T12532] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.234238][T12532] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.236775][T12532] bridge_slave_1: entered allmulticast mode
[  302.256696][T12532] bridge_slave_1: entered promiscuous mode
[  302.292533][T12532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  302.344470][T12532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  302.371808][T12615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2641'.
[  302.442768][T12532] team0: Port device team_slave_0 added
[  302.453564][T12532] team0: Port device team_slave_1 added
[  302.510969][T12532] batman_adv: batadv0: Adding interface: batadv_slave_0
[  302.516713][T12532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  302.548505][T12532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  302.554884][T12532] batman_adv: batadv0: Adding interface: batadv_slave_1
[  302.578489][T12532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  302.593440][T12532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  302.616232][T12626] loop3: detected capacity change from 0 to 4096
[  302.688358][T12532] hsr_slave_0: entered promiscuous mode
[  302.691037][T12532] hsr_slave_1: entered promiscuous mode
[  302.977621][T12532] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  302.986505][T12532] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  302.994184][T12532] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  303.006980][  T793] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  303.020199][T12532] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  303.116154][T12532] 8021q: adding VLAN 0 to HW filter on device bond0
[  303.119136][ T5948] Bluetooth: hci0: command tx timeout
[  303.141238][T12532] 8021q: adding VLAN 0 to HW filter on device team0
[  303.164423][  T793] usb 4-1: Using ep0 maxpacket: 32
[  303.169705][  T793] usb 4-1: config 0 has an invalid interface number: 30 but max is 0
[  303.173313][  T793] usb 4-1: config 0 has no interface number 0
[  303.218014][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.220950][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  303.228721][  T793] usb 4-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=fc.f0
[  303.232592][  T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.235854][  T793] usb 4-1: Product: syz
[  303.242256][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.245198][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  303.257546][  T793] usb 4-1: Manufacturer: syz
[  303.259477][  T793] usb 4-1: SerialNumber: syz
[  303.276662][  T793] usb 4-1: config 0 descriptor??
[  303.286390][  T793] quatech2 4-1:0.30: Quatech 2nd gen USB to Serial Driver converter detected
[  303.499799][  T793] usb 4-1: qt2_attach - failed to power on unit: -71
[  303.502867][  T793] quatech2 4-1:0.30: probe with driver quatech2 failed with error -71
[  303.522493][  T793] usb 4-1: USB disconnect, device number 30
[  303.626460][T12532] 8021q: adding VLAN 0 to HW filter on device batadv0
[  303.949232][T12532] veth0_vlan: entered promiscuous mode
[  303.965203][T12532] veth1_vlan: entered promiscuous mode
[  304.029746][T12532] veth0_macvtap: entered promiscuous mode
[  304.050537][T12532] veth1_macvtap: entered promiscuous mode
[  304.091509][T12532] batman_adv: batadv0: Interface activated: batadv_slave_0
[  304.102877][T12696] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[  304.133732][T12532] batman_adv: batadv0: Interface activated: batadv_slave_1
[  304.170530][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  304.214453][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  304.219944][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  304.236755][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  304.395331][  T717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.403196][  T717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.443923][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.446598][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.537861][T12712] loop3: detected capacity change from 0 to 1024
[  304.616142][   T33] audit: type=1800 audit(1755040772.758:152): pid=12712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2665" name="file1" dev="loop3" ino=20 res=0 errno=0
[  304.636361][T12712] syz.3.2665: attempt to access beyond end of device
[  304.636361][T12712] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  305.022334][T12731] !: renamed from dummy0 (while UP)
[  305.197873][ T5948] Bluetooth: hci0: command tx timeout
[  305.387093][  T793] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  305.537551][  T793] usb 4-1: Using ep0 maxpacket: 8
[  305.562719][  T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  305.582764][  T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  305.586581][  T793] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  305.591896][  T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  305.596355][  T793] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  305.603026][  T793] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  305.609571][  T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.615208][  T793] usb 4-1: config 0 descriptor??
[  305.644903][ T5948] Bluetooth: hci3: urb ffff88802a675400 submission failed (90)
[  305.841718][ T5569] usb 4-1: USB disconnect, device number 31
[  306.692289][T12755] capability: warning: `syz.3.2674' uses 32-bit capabilities (legacy support in use)
[  306.848930][T12761] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2677'.
[  307.490442][T12771] loop6: detected capacity change from 0 to 8
[  307.550174][T12771] SQUASHFS error: Failed to read block 0x2fc: -5
[  307.556774][T12771] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  307.563131][T12771] SQUASHFS error: Unable to read directory block [247:26]
[  307.574561][T12758] loop3: detected capacity change from 0 to 32768
[  307.579196][T12758] XFS: noikeep mount option is deprecated.
[  307.631112][T12758] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  307.727666][T12758] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  307.782914][T12758] XFS (loop3): Starting recovery (logdev: internal)
[  307.851680][T12787] overlayfs: failed to clone upperpath
[  307.856601][T12758] XFS (loop3): Ending recovery (logdev: internal)
[  307.932918][T12793] loop6: detected capacity change from 0 to 256
[  307.935602][ T6197] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  308.159508][T12797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2689'.
[  308.163343][T12797] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2689'.
[  308.222933][T12799] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2690'.
[  308.340514][T12807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2693'.
[  308.349315][T12809] loop6: detected capacity change from 0 to 256
[  308.434949][T12811] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3946
[  308.585840][T12819] mkiss: ax0: crc mode is auto.
[  309.391368][T12843] autofs: Unknown parameter '00000000000000000000'
[  309.961970][ T6012] IPVS: starting estimator thread 0...
[  309.971985][T12853] Bluetooth: MGMT ver 1.23
[  310.057148][T12854] IPVS: using max 62 ests per chain, 148800 per kthread
[  310.365026][T12860] loop3: detected capacity change from 0 to 40427
[  310.370887][T12860] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  310.376675][T12860] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  310.441763][T12860] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  310.453739][T12860] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  310.456247][T12860] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  310.701906][T12872] loop6: detected capacity change from 0 to 256
[  310.713168][T12872] FAT-fs (loop6): Directory bread(block 64) failed
[  310.715222][T12872] FAT-fs (loop6): Directory bread(block 65) failed
[  310.720526][T12872] FAT-fs (loop6): Directory bread(block 66) failed
[  310.722560][T12872] FAT-fs (loop6): Directory bread(block 67) failed
[  310.724635][T12872] FAT-fs (loop6): Directory bread(block 68) failed
[  310.726703][T12872] FAT-fs (loop6): Directory bread(block 69) failed
[  310.737929][T12872] FAT-fs (loop6): Directory bread(block 70) failed
[  310.747845][T12872] FAT-fs (loop6): Directory bread(block 71) failed
[  310.749913][T12872] FAT-fs (loop6): Directory bread(block 72) failed
[  310.751947][T12872] FAT-fs (loop6): Directory bread(block 73) failed
[  310.806136][T12874] netlink: 'syz.6.2720': attribute type 11 has an invalid length.
[  310.810127][T12874] netlink: 228 bytes leftover after parsing attributes in process `syz.6.2720'.
[  310.899647][T12881] loop3: detected capacity change from 0 to 256
[  311.337116][    T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  311.342854][T12901] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (65)
[  311.740351][    T9] usb 4-1: config 0 has an invalid interface number: 9 but max is 0
[  311.745253][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  311.757503][    T9] usb 4-1: config 0 has no interface number 0
[  311.759905][    T9] usb 4-1: New USB device found, idVendor=0421, idProduct=0302, bcdDevice=45.e8
[  311.772442][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.781501][    T9] usb 4-1: config 0 descriptor??
[  311.798150][    T9] rndis_host 4-1:0.9: More than one union descriptor, skipping ...
[  311.801169][    T9] usb 4-1: bad CDC descriptors
[  311.803525][    T9] cdc_acm 4-1:0.9: More than one union descriptor, skipping ...
[  311.992107][    T9] usb 4-1: USB disconnect, device number 32
[  312.002079][T12902] ceph: No mds server is up or the cluster is laggy
[  312.048073][T12910] loop6: detected capacity change from 0 to 32768
[  312.553175][T12917] tipc: Failed to remove unknown binding: 66,1,1/0:2933962345/2933962347
[  312.556481][T12917] tipc: Failed to remove unknown binding: 66,1,1/0:2933962345/2933962347
[  312.604183][T12919] comedi comedi1: pcl818: I/O port conflict (0x2f00,16)
[  312.609130][T12919] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI
[  312.613757][T12919] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[  312.617658][T12919] CPU: 0 UID: 0 PID: 12919 Comm: syz.3.2735 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  312.622840][T12919] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  312.626773][T12919] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  312.628892][T12919] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 29 02 37 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 08 02 37 f9 4d 8b 24 24 48 83 c3
[  312.636231][T12919] RSP: 0018:ffffc90002d7f9f8 EFLAGS: 00010206
[  312.638849][T12919] RAX: 0000000000000005 RBX: ffff88810973a880 RCX: 0000000000080000
[  312.641959][T12919] RDX: ffffc9000f6e9000 RSI: 0000000000000979 RDI: 000000000000097a
[  312.645039][T12919] RBP: 0000000000000001 R08: ffff8881050db12f R09: 1ffff11020a1b625
[  312.648038][T12919] R10: dffffc0000000000 R11: ffffffff88ebee90 R12: 0000000000000028
[  312.651016][T12919] R13: dffffc0000000000 R14: ffff8881050db000 R15: dffffc0000000000
[  312.654234][T12919] FS:  00007faec23356c0(0000) GS:ffff8880b8624000(0000) knlGS:0000000000000000
[  312.657912][T12919] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  312.660449][T12919] CR2: 0000001b2fd23ffc CR3: 0000000029b42000 CR4: 00000000000006f0
[  312.663508][T12919] Call Trace:
[  312.664841][T12919]  <TASK>
[  312.666012][T12919]  pcl818_detach+0x66/0xd0
[  312.667767][T12919]  comedi_device_detach_locked+0x178/0x750
[  312.670002][T12919]  comedi_device_attach+0x5d4/0x720
[  312.672027][T12919]  comedi_unlocked_ioctl+0x5ff/0x1020
[  312.674256][T12919]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  312.676729][T12919]  ? __lock_acquire+0xab9/0xd20
[  312.678806][T12919]  ? __fget_files+0x2a/0x420
[  312.680624][T12919]  ? __fget_files+0x2a/0x420
[  312.682407][T12919]  ? __fget_files+0x3a0/0x420
[  312.684207][T12919]  ? __fget_files+0x2a/0x420
[  312.686005][T12919]  ? bpf_lsm_file_ioctl+0x9/0x20
[  312.687883][T12919]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  312.690130][T12919]  __se_sys_ioctl+0xfc/0x170
[  312.691921][T12919]  do_syscall_64+0xfa/0x3b0
[  312.693749][T12919]  ? lockdep_hardirqs_on+0x9c/0x150
[  312.695867][T12919]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.698324][T12919]  ? exc_page_fault+0x9f/0xf0
[  312.700222][T12919]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.702481][T12919] RIP: 0033:0x7faec158ebe9
[  312.704177][T12919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  312.711529][T12919] RSP: 002b:00007faec2335038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  312.714804][T12919] RAX: ffffffffffffffda RBX: 00007faec17b5fa0 RCX: 00007faec158ebe9
[  312.717912][T12919] RDX: 0000200000000300 RSI: 0000000040946400 RDI: 0000000000000003
[  312.720907][T12919] RBP: 00007faec1611e19 R08: 0000000000000000 R09: 0000000000000000
[  312.723834][T12919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  312.726847][T12919] R13: 00007faec17b6038 R14: 00007faec17b5fa0 R15: 00007ffddac575f8
[  312.729846][T12919]  </TASK>
[  312.731026][T12919] Modules linked in:
[  312.733262][T12919] ---[ end trace 0000000000000000 ]---
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  312.775062][T12919] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  312.823989][T12919] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 29 02 37 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 08 02 37 f9 4d 8b 24 24 48 83 c3
[  312.846638][T12919] RSP: 0018:ffffc90002d7f9f8 EFLAGS: 00010206
[  312.850425][T12919] RAX: 0000000000000005 RBX: ffff88810973a880 RCX: 0000000000080000
[  312.853452][T12919] RDX: ffffc9000f6e9000 RSI: 0000000000000979 RDI: 000000000000097a
[  312.856526][T12919] RBP: 0000000000000001 R08: ffff8881050db12f R09: 1ffff11020a1b625
[  312.907225][T12919] R10: dffffc0000000000 R11: ffffffff88ebee90 R12: 0000000000000028
[  312.910358][T12919] R13: dffffc0000000000 R14: ffff8881050db000 R15: dffffc0000000000
[  312.913492][T12919] FS:  00007faec23356c0(0000) GS:ffff8880b8624000(0000) knlGS:0000000000000000
[  312.919218][T12919] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  312.921769][T12919] CR2: 00007f5e28ee7d60 CR3: 0000000029b42000 CR4: 00000000000006f0
[  312.924898][T12919] Kernel panic - not syncing: Fatal exception
[  312.928067][T12919] Kernel Offset: disabled
[  312.929735][T12919] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:19:40  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000159e RDI=000000000000159f RBP=00000000000003f8 RSP=ffffc90002d7f230
R8 =ffff888020d78237 R9 =1ffff110041af046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af1911 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007faec23356c0 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2fd23ffc CR3=0000000029b42000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007faec1612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=1ffff11009608341 RCX=ffff8881081b3980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90007d477e0 RSP=ffffc90007d47660
R8 =ffffffff8fa34237 R9 =1ffffffff1f46846 R10=dffffc0000000000 R11=fffffbfff1f46847
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44d58 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555580d5e608 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffff00ff00000000 XMM05=000000000000006d 0000000000000033
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffffff00 XMM09=2e6364755f796d6d 75642f6364752f33
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
