last executing test programs:

54.298155174s ago: executing program 2 (id=656):
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x40000042, 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
setpriority(0x0, 0x0, 0xacf0165)
getgroups(0x6, &(0x7f0000000040)=[0xee00, <r0=>0xffffffffffffffff, 0xee01, <r1=>0x0, 0xee01, 0xee01])
setfsgid(r0)
setresgid(0x0, 0x0, r1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x6, 0x9, &(0x7f0000000080)={{0x67, @rand_addr, 0x0, 0x0, 'wrr\x00', 0x0, 0xffffffff}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xfffd, 0x2}}, 0x44)
r3 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = gettid()
kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, 0xffffffffffffffff, &(0x7f0000001b40)={0xffffffffffffffff, 0xffffffffffffffff, 0xdc})
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x2008480, &(0x7f0000000180)={[{@nouid32}, {@acl}, {@noquota}]}, 0x0, 0x4d4, &(0x7f0000000e00)="$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")

54.188120438s ago: executing program 2 (id=659):
r0 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @local}, 0x64)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'veth0_to_bridge\x00'}, 0x18)

54.10842923s ago: executing program 2 (id=661):
syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x200)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0), 0x2000, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$igmp(0x2, 0x3, 0x2)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_io_uring_setup(0x460, &(0x7f0000000280)={0x0, 0x4000001c, 0x10, 0x2, 0x8, 0x0, r0}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x20, 0x0, {0x2}})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x3d, 0x0, @fd, 0x0, 0x0, 0xffff, 0x0, 0x1})
io_uring_enter(r2, 0x47bc, 0x0, 0x8, 0x0, 0xfffffffffffffe25)

53.996038743s ago: executing program 2 (id=662):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000c00)='./bus\x00', 0xa00400, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

53.901369643s ago: executing program 2 (id=663):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, 0x0, 0x0)

53.553139401s ago: executing program 2 (id=664):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0xffffffffffffff07}}, 0x80}}, 0x0)

53.313820781s ago: executing program 32 (id=664):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0xffffffffffffff07}}, 0x80}}, 0x0)

38.065519177s ago: executing program 1 (id=781):
socket$inet6(0xa, 0x80003, 0x10)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x12042)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="181700003e000701fefffffffcffffff017c000008004280040008000c00018006000600800a0000f0160280ec1617"], 0x1718}, 0x1, 0x0, 0x0, 0xa6fdace091686b28}, 0xc000)

37.956814258s ago: executing program 1 (id=783):
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
fsetxattr(r0, &(0x7f00000000c0)=@known='system.posix_acl_default\x00', &(0x7f0000000180)='\x00', 0x1, 0x3)

37.830690995s ago: executing program 1 (id=787):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
sendmsg$netlink(r0, &(0x7f0000000280)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbff, 0x20}, 0xc, &(0x7f0000002080)=[{&(0x7f0000000600)={0x154, 0x26, 0x100, 0x70bd27, 0x25dfdbfb, "", [@nested={0x4, 0x1}, @nested={0x65, 0x12c, 0x0, 0x1, [@generic="53945f1a3c2c37442bceb23a4aebe27740bb8dd0fe640d8895dd08ca49d515123ffe57bd819fec7dd3c1d0b7d590a9396278ea968244465c9102f55de56960e299ba358e32f68e5bd6295011f58355fea6", @nested={0x4, 0xf6}, @nested={0x4, 0x102}, @typed={0x8, 0x53, 0x0, 0x0, @uid}]}, @typed={0x4, 0xec, 0x0, 0x0, @binary}, @generic="a163a62e084f99ffb4892b07a51593a5a66ca915f1b136522742f06aa6b3d74d0bd6e2bba03f9f49d002788ed64a85ee049a8e2ff92cb4d073fca9d90ac9f800ed6e822f8bc57223f33d7640bfa7bbe6c2bddf4eee04af383c6c1f7282db0ec4d1a9a8186171f9700996d527a2c4e03fd4c3c0dae19654578bd33895bb87ddc87da142b51c9f696b8ab5f3dff6a0d6750165df014ac3a205f5a1b54cf8b056130f5a5d33317e206e1230f9431e1eff4827bb894678c9fcfae516453e7c22230b4493075da88e2d97d5", @typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}]}, 0x154}, {&(0x7f0000000a80)={0xbc, 0x36, 0x10, 0x70bd2a, 0x25dfdbfe, "", [@generic="16b23b5e8867f645385ba537c2e38f2d937b833430ee4fe6344865885faa5fced2d32a1bbe7c55eb156f2e97e122483484d9928f43e4c78e880561c069c96a3067972c5e618c174d6fcaaccd9cfdf3b19b133983e348003e6d5f5755db98d67b94af76e4666f67d5fbfb6d0e1aa1fb7a251e54ffc8ddf4a72e7672d4fdf285daf3df5d4c45f29487b01955348615bbef31c7ed7087b7a660e96b6714342f47d4c2f95d9d72", @typed={0x4, 0x107}]}, 0xbc}, {&(0x7f0000000140)={0x18, 0x26, 0x1, 0x70bd28, 0x25dfdbfb, "", [@typed={0x7, 0x7f, 0x0, 0x0, @str='*@\x00'}]}, 0x18}, {&(0x7f0000000bc0)={0x4c, 0x16, 0x20, 0x70bd25, 0x25dfdbfb, "", [@nested={0x19, 0x2d, 0x0, 0x1, [@generic="721318f68c884632a82d24b14d853b7597945ebd2c"]}, @typed={0x8, 0x41, 0x0, 0x0, @pid}, @typed={0x4, 0x14b, 0x0, 0x0, @binary}, @typed={0x14, 0xfb, 0x0, 0x0, @ipv6=@local}]}, 0x4c}, {&(0x7f00000038c0)={0x18, 0x36, 0x800, 0x70bd25, 0x25dfdbfd, "", [@typed={0x8, 0xf5, 0x0, 0x0, @u32=0x8}]}, 0x18}, {&(0x7f0000001e40)={0x14, 0x24, 0x120, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x4, 0x9b}]}, 0x14}, {&(0x7f0000002640)={0x38, 0x1f, 0x300, 0x70bd2c, 0x25dfdbfb, "", [@nested={0x28, 0x142, 0x0, 0x1, [@typed={0xc, 0x128, 0x0, 0x0, @u64=0x1ff}, @nested={0x4, 0x141}, @typed={0x4, 0xa9}, @nested={0x4, 0x94}, @typed={0x8, 0x59, 0x0, 0x0, @pid}, @nested={0x4, 0x91}]}]}, 0x38}], 0x7, 0x0, 0x0, 0x4}, 0x4000814)

37.663666813s ago: executing program 1 (id=789):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000400), 0x0, 0x29f, &(0x7f0000000580)="$eJzs3UFrE1sYxvGnSdukKW2yKBfuhct9uW50M7TxEwRpQQwotRF1IUztREPGpGRiJCK2O7d+juLSlYL6Bbpx517cFEFw04UYaZKxaRswra1Tzf8HYU7OOe/MmZyZ8M5AJlvXn94rFwOn6NYVS5pi0rq2pcxOqWuku4y1y+Pqta5zk5/f/Xv1xs1LuXx+ftFsIbd0Pmtm0/+9evDo2f9v6pPXnk+/TGgzc2vrU/b95l+bf299XQrXXpVcW65W6+6y79lKKSg7Zld8zw08K1UCr1a3nvaiX11dbZpbWZlKrda8IDC30rSy17R61eq1prl33FLFHMexqZSGTfzQEYWNxUU3dyKDQRQm+lXWajk33rexsPErBgUAAE6XqPL/u6XASoFVqnvy+4P5f0yHyP+loc7/D4/8fxjs5P+p7vm7F/k/AAAAAAAAAAAAAAAAAAAAAAC/g+1WK91qtdLhMnwlJCUlhe+jHidOBvM/3Hp+uJeU/CeNQqPQWXbac0WV5MvT7Jj0pX08dHXKCxfz87PWltFrf60bv9YoxJUI40OZ/vFznXjrjV/TmFK9288qrZn+8dk+8Y3CuM6eaSW6W/bkKK23t1WVr5X2cb0b/3jO7MLl/L74iXY/AAAAAAD+BI59d+D6vd3uWPjYkH3tncrd+wNK/+D+wL7r61H9MxrdfgMAAAAAMEyC5sOy6/tebQgK4f8fHMsKo//okoN2HpXUrXlxWuZikEJM0lHD4z83yx8l7amZiXy6j6Pw4X7nDBikc5TfSgAAAABOQpj0j0Q9EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhtigDw8L+x/l2WM9m4tHs5cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA6fAtAAD//2kbF4o=")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

37.577719246s ago: executing program 1 (id=791):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1e, 0x9, @mcast1, 0xfffffffe}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x6e20, @broadcast}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000001480)={@random="cd030aa99a7a", @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x800, 0x0, 0x4, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

37.263537531s ago: executing program 1 (id=798):
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, 0x0, 0x0)

37.022516584s ago: executing program 33 (id=798):
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, 0x0, 0x0)

1.800296855s ago: executing program 0 (id=1041):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.686035414s ago: executing program 0 (id=1042):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1551], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

1.560300132s ago: executing program 0 (id=1044):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f0000000100), 0x2)

1.508429484s ago: executing program 3 (id=1045):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x1, @remote, 0x5}, 0x1c)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

1.399736648s ago: executing program 3 (id=1046):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x103c}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}], 0x6}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0)

1.328977298s ago: executing program 4 (id=1047):
socket$isdn(0x22, 0x3, 0x1)

1.328425606s ago: executing program 3 (id=1048):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x1, &(0x7f0000000180)={[{@rescan_uuid_tree}, {@discard_sync}]}, 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f00000001c0)={{r0}, "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"})

1.278458646s ago: executing program 4 (id=1049):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4)
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), 0x4)

1.020468891s ago: executing program 0 (id=1050):
socket$kcm(0xa, 0x3, 0x87)
syz_emit_ethernet(0x4e, &(0x7f0000000300)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x18, 0x87, 0xff, @rand_addr=' \x01\x00', @mcast2, {[@routing={0x16, 0x2, 0x3, 0x0, 0x0, [@local]}]}}}}}, 0x0)

969.534025ms ago: executing program 0 (id=1051):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)

904.569409ms ago: executing program 3 (id=1052):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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")
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

577.268494ms ago: executing program 3 (id=1053):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x1, 0x0, {}, {0x0, 0x2710}, {}, 0x2}, 0x48}, 0x300}, 0x20000000)

417.874797ms ago: executing program 3 (id=1054):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x28108c0, &(0x7f0000006980)=ANY=[@ANYBLOB="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"], 0xfe, 0x61f6, &(0x7f0000012fc0)="$eJzs3c1vHGcdB/DfvvolNLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKCeGDTe54lnN7tdp7Z31p7PR3JmfvPMep/Jd189L08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPH97/1grRURN36eFqxEfCY6Ee2IpbJejYil1ZW8fjcinou95ng2InoLEeXt9/55OuLViPjobMTO7uZ6ufjyAfvx3T/+/Xc/PPPW3/7Qu/jfP93rvDZpvfv3f/WfPz843DYDAABA0xRFUbTS1/xz6ft9u+5OAQAzkd//iyQvP/X1r//51l/mqT/qRtcRl/YWzkt/1Gr16a2rivEeVIuI2KrepvzMYHc8AJwwW/Fx3V2gRvJvtG5EnKm7E8Bca9XdAY7Fzu7meivl26q+H6wO2vOxIEP5b7Uend8xaTrN6DEms3p8bUcnnpnQn6UZ9WGe5Pzbo/nfGLT303rHnf+sTMq/Pzj1qXFy/p3R/Eccaf4LdebfHpt/U+X8u0+Uf+cEP//lDwAAAADA6Zf//r9S8/7fhcNvyoF80v7f1Rn1AQAAAAAAAACO2mHH/3vE+H8AAAAwt8rv6qXfnN1fNulabOXy662Ip0bWBxomnSyzXHc/AAAAAAAAAAAAAKBJuoNjeK+3InoR8dTyclEU5U/VaP2kDnv7k67p2w9NVveLPAAADHx0duRc/lbEYkRcT9f66y0vLxfF4tJysVwsLeTPs/2FxWKp8r02T8tlC/0DfCDu9ovyly1Wblc17fvytPbR31feV7/oHKBjR6SX/jcnNNcUNgAkg3ejHe9Ip0xRPD3pwwcM8fw/hVZipe7HFfOv7ocpAAAAcPyKoiha6XLe59I+/3bdnQIAZiK//4/uFzhU3Z7QHnE0v1+tVqvVavWnqquK8R5Ui4jYqt6m/MxgOH4AOGG24uO6u0CN5N9o3Yh4ru5OAHOtVXcHOBY7u5vrrZRvq/p+kMZ3z8eCDOW/1dq7Xb79uOk0o8eYzOrxtR2deGZCf56dUR/mSc6/PZr/jUF7P6133PnPyqT8+3unzDVPzr8zmv+I05N/e2z+TZXz7z5R/h35AwAAAADAHMt//1+x/zdvMgAAAAAAAACcODu7m+v5vNe8//9zY9Zz/ufplPNvPWn+S2le/idazr89kv+XR9brVOYfvrn//P/37ub67+/967N5etD8F/JMKz2yWukR0Ur31Oqm6WG27nHbvU6/vKdeq93ppmN+it47cStux0ZcGlq3nf4/9tvXhtrLnvaG2i8PtXcfa78y1N5L1x0olnL7hViPn8TteHuvvWxbmLL9i1PaiyntOf+O1/9Gyvl3Kz9l/supvTUyLT38sP3Y8746HXc/b9z6/C8vHf/mTDHpyseD7Ts/6+5EDF5xzvTjZ3c37ly4f/PevTtrkSZDSy9HmhyxnH9v72dh//X/hUF7ft2vPl8ffth/4vznxXZ0Hz22q8r8X6jMl9v70oz7Voecfz/95PzfTu3jn/8nOf/OxPxfrqE/AAAAAAAAAAAAAAAA8EmKotg7RfSNiLiazv+p69xMAGC28vt/keTlarVarVarT19dVYz3erWIiL9Wb1N+ZvjFuF8GAMyz/0XEP+ruBLWRf4Pl6/2V0xfr7gwwU3ff/+BHN2/f3rhzt+6eAAAAAAAAAACfVh7/c7Uy/vOLEbEyst7Q+K9vxuphx//s5plHA4we8UDfE2y3+512Zbjx52NvfO4Lk8b/Ph+Pj/+dx8TtVLdjgt6U9v6U9oUp7Ytjl+6nNfZEj4qc//OV8c7L/M+NDL/ehPFfR8e8b4Kc//nK47nM/0sj61XzL347d/lvHXTF7WgP5X/x3ns/vXj3/Q9eufXezXc33t348ZW1tUtXrl69du3axXdu3d64NPj3eHo9B3L+eexrx4E2S84/Zy7/Zsn5fyHV8m+WnP8XUy3/Zsn558978m+WnH/+7iP/Zsn5v5Rq+TdLzv8rqZZ/s+zsbi6U+b+cavk3S37+fzXV8m+WnP8rqZZ/s+T8L6Ra/s2S87+Y6gPk7/Lwp0jOP+/h8vxvlpz/Wqrl3yw5/8upln+z5PyvpFr+zZLzfzXV8m+WnP/XUi3/Zsn5X021/Jsl5//1VMu/WXL+11It/2bJ+X8j1fJvlpz/N1Mt/2bJ+b+Wavk3S87/W6mWf7Pk/L+davk3S87/O6mWf7Pk/F9PtfybZf/6/2bMmDGTZ+p+ZQIAAAAAAAAAAAAARs3icOK6txEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+zw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsHdvMXLd9R3Az+zF3nUIMRCCkxrYJCaEZMmu7cQX2jQmXBugFEgo9ILtetdmwTe8dgkUyaaBEgmjooqq6UNbQKiNVFVYFQ+0ojQPVS9PpX2gLxVVJaRGVUABFamtKFvNnP//vzOzszOz3vF69vw/Hyn57c6cmXPmzJnZ/e76uwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJrd/ob5z9SKoqj/1/jf9qJ4Qf3jyantjcted723EAAAAFiv/2v8//mb0gWH+rhR0zJ/94p//NrS0tJS8b7R3x3/wtJSumKqKMa3FkXjuujKv7+/1rxM8EQxURtp+nykx+pHe1w/1uP68R7Xb+lx/dYe10/0uH7FDlhhsvx5TOPOdjU+3F7u0uLmYrxx3a4Ot3qitnVkJP4sp6HWuM3S+PFioThZzBezLcuXy9Yay3/j9vq63lrEdY00rWtn/Qj5wSeOxW2ohX28q2Vdy/cZfe/1xdQPf/CJY398/rlbO82eu6Hl/srtvPuO+nZ+KlxSbmut2Jr2SdzOkabt3NnhORlt2c5a43b1j9u38/k+t3N0eTM3VPtzPlGMND7+VmM/jTX/WC/tp53hsv++syiKS8ub3b7MinUVI8W2lktGlp+fifKIrN9H/VB6cTG2puP09j6O0/qc29V6nLa/JuLzf3u43dgq29D8NH3vk1tWPO9rPU6j+qNe7bXSfgwO+rUyLMdgPC6+1XjQT3Y8BneFx/+Ju1Y/BjseOx2OwfS4m47BO3odgyNbRhvbnJ6EWuM2y8fg7pblRxtrqjXms3d1PwZnzp86O7P4sY+/duHU0RPzJ+ZP7929e3bvvn0HDhyYOb5wcn62/P9V7u3ht60YSa+BO8K+i6+BV7ct23yoLn1pcK/DiS6vw+1tyw76dTjW/uBqG/OCXHlMl6+NR+s7feLySLHKa6zx/Nyz/tdhetxNr8Oxptdhx68pHV6HY328DuvLnL2nv+9Zxpr+67QN1+prwfamY7D9+5H2Y3DQ348MyzE4EY6Lf71n9a8FO8P2Pjm91u9HRlccg+nhhvee+iXp+/2JA43R6bi8rX7FDVuKC4vz5+57/Oj58+d2F2FsiJc0HSvtx+u2psdUrDheR9Z8vB5aeMWTt3W4fHvYVxOvrf9vYtXnqr7M/fd1f64aX90678+WS/cUYQzYRu/PTl/N6/szZcku+7O+zKdm1v+9eMqlTe+/46u8/8bc/5NyfemunhgdHytfv6Np74y3vB+3PlVjjfeuWmPdz8/09348Hv7b6Pfjm7u8H+9oW3bQ78fj7Q8uvh/Xev20Y33an8+JcJycnO3+flxfZseetR6TY13fj+8Msxb2/2tCUki5qOnYWe24TesaGxsPj2ssrqH1ON3bsvx4yGb1dT295+qO07vvLO9rND26ZRt1nE61LTvo4zS9X612nNZ6/fTt6rQ/nxPhuLh5b/fjtL7MM/ev/71zMn7Y9N65pdcxOD66pb7N4+kgLN/vlybjMXhfcaw4U5ws5hrXbmkcT7XGuqYf6O8Y3BL+2+j3yh1djsG725Yd9DGYvo6tduzVxpbfSAao/fmcCMfFUw90Pwbry7xx/2C/d707XJKWafretf3na6v9zOu2seX7K67xz7zq2/k3+7v/bLa+zMkDa82Z3ffTveGSGzrsp/bX72qvqbliY/bTjrCdzx1YfT/Vt6e+zBcO9nk8HSqK4uJHHm78vDf8fuXPL3z7ay2/d+n0O52LH3n4+zce/9u1bD8Am99PyrGt/FrX9Jupfn7/DwAAAGwKMfePhJnI/wAAAFAZMffHfxWeyP8AAABQGTH3j4WZZJL/d7zxuYWfXCxSM38piNen3fBIuVzsuM6Gz6eWltUvf/gr8z/6y4v9rXukKIofP/IbHZff8UjcrtJU2M4rb2q9fOUNL/a1/iOPLS/X3F//Yrj/+Hj6PQw6VXBni6L4xk2fa6xn6v2XG/OZR4405rsvPflEfZnnD5afx9s/+5Jy+T8I5d9Dx4+23P7ZsB++G+bs2zrvj3i7r15+zc79711eX7xd7Y4XNh72Ux8o7zf+nZzPP1EuH/fzatv/V599+qv15R9/VeftvzjSefufDvf7lTD/5+Xl8s3PQf3zeLtPh+2P64u3u+/L3+y4/Vc+Uy5/9s3lckfCjOu/O3y+683PLTTvr8drR1seV/GWcrm4/tlv/3bj+nh/8f7bt3/i8OWW/dF+fDzzz+X9zLQtHy+P64n+om399ftpPj7j+p/+rSMt+7nX+q+8+9mX1++3ff33ti032nb79r/Y9Ief/lzH9cXtOfRnZ1sez6F3hddxWP9THwjHY7j+f698rmW90ZF3tb7/xOW/uP1iy+OJ3vrDcv1XHjrRmP8x9aPfv+EFN77w0ivr+64ovvWe8v56rf/EH51p2f4v3XJP4/mI18eOfvv6VxPXf+6j06fPLF5YmGvaq42/nfP2cnu2Tkxuq2/vTeG9tf3zw2fOf3D+3NTs1GxRTFX3T+hdtS+H+f1yXFrr7e95LDyft/3eN7bd9U+fjZf/y6Pl5ZffVn7denVY7vPh8u3l87dUW+f6n7r9lsbru/ZM+XlLj30Adu76zwN9LRgef/v3BfF4P/vSDzb2Q/26xteN+Lpe5/Z/Z668n6+H/boU/jLzHbcsr695+fi3ES6/p3y9r3v/hbe5+Lz+SXi+3/Hd8v7jdsXH+53wfcw3d7S+38Xj4+sXR9rvv/FXPC6F95PiUnl9XCru78vP39Jx8+LfISku3dr4/HfS/dy6poe5msWPLc6cXDh94fGZ8/OL52cWP/bxw6fOXDh9/nDjb3ke/lCv2y+/P21rvD/Nze+7v5idLIriTDG7AW9Y12b76x/1t/1nHzs2t3/2rrn540cvHD//2Nn5cyeOLS4em59bvOvo8ePzH+11+4W5B3fvObh3/57pEwtzDx44eHDvwemF02fqm1FuVA/7Zj88ffrc4cZNFh+8/+DuBx64f3b61Jm5+Qf3z85OX+h1+8bXpun6rX99+tz8yaPnF07NTy8ufHz+wd0H9+3b0/OvAZ46e3xxaubchdMzFxbnz82Uj2XqfOPi+te+Xrenmhb/rfx+tl2t/EN8xTvv3Zf+PmvdVz656l2Vi7T9AdHnwt+i+YcXnT3Qz+cx94+HmWSS/wEAACAHMfdvCTOR/wEAAKAyYu7fGmYi/wMAAEBlxNw/EWaSSf7X/9f/76//X16v/59X///sR8pe6Wbv/8f+vP5/Hq5z/3/d69f/1/+vXv+///78Zt9+/X/9f1Yatv5/zP2TRZFl/gcAAIAcxNy/LcxE/gcAAIDKiLn/hjAT+R8AAAAqI+b+F4SZZJL/9f/76v/v6VW4qn7/3/n/9f+Lzdn/j0+O/n821ty/f++jLZ/q/wf6//r/+v/6//r/rNv4qtdcr/5/zP03hplkkv8BAAAgBzH3vzDMRP4HAACAyoi5/6YwE/kfAAAAKiPm/u1hJpnkf/1/5//X/9f/r3T/f73n/2/aGP3/zcH5/7vT/+/hqvv/E/r/m7H/Pz7Y7R/u/n/Pzdf/55oYtvP/x9z/ojCTTPI/AAAA5CDm/heHmcj/AAAAUBkx978kzET+BwAAgMqIuf/mMJNM8r/+v/6//r/+v/5/5/X3Pv9/+ZH+/3DR/+9O/78H5//Pq/8/4O0f7v7/oM//P/6m9tvr/9PJsPX/Y+5/aZhJJvkfAAAAchBz/y1hJvI/AAAAVEbM/S8LM5H/AQAAoDJi7t8RZpJJ/tf/1//X/9f/1//vvP7e/f+S/v9w0f/vTv+/B/1//X/9//76/x2++dX/p5Nh6//H3H9rmEkm+R8AAAByEHP/bWEm8j8AAABURsz9PxVmIv8DAABAZcTcvzPMJJP8r/+v/6//n1f//94t+v/6/9Wm/9+d/n8P+v/6//r/fZ7/f6W19P+39rozKmPY+v8x9788zCST/A8AAAA5iLn/FWEm8j8AAABURsz9rwwzkf8BAACgMmLunwozyST/6/9Xq///p3/91CsL/X/9/x7rH0T/vxYuHaL+fzwMhr7//5D+/zWl/9+d/n8P+v/6//r/G9L/Jx/D1v+Puf/2MJNM8j8AAADkIOb+O8JM5H8AAACojJj77wwzkf8BAACgMmLu3xVmkkn+1/+vVv8/0v/X/++2/o06//9YeD7Tcen8/87/vwH0/ztoepHq//eg/6//n33/P373q//PYAxb/z/m/leFmWSS/wEAACAHMfffVbT9Elf+BwAAgMpo5P5ionh1mIn8DwAAAJURc//dYSaZ5H/9/6vv/483faz/37r9+v+tcu3/b/D5/xP9/7zp/3e31v7/Fv1//X/9/8z6/+s7//9k+Fj/n2jY+v8x978mzCST/A8AAAA5iLn/njAT+R8AAAAqI/77zfLfvcr/AAAAUEUx90+HmWSS//X/nf8/p/5/Tf9/QP3/+Ij1/wv9/6Gj/9+d8//3oP+v/6//v67+v/P/027Y+v8x9782zCST/A8AAAA5iLn/vjAT+R8AAAAqI+b+mTAT+R8AAAAqI+b+2TCTTPK//r/+f079f+f/d/5//f/q0//vTv+/B/1//f+q9f+LQv+f62rY+v8x9+8OM8kk/wMAAEAOYu7fE2Yi/wMAAEBlxNy/N8xE/gcAAIDKiLn//jCTTPK//r/+v/6//r/+f+f16/9vTvr/3en/96D/r/9ftf6/8/9znQ1b/z/m/gfCTDLJ/wAAAJCDmPv3hZnI/wAAAFAZMffvDzMJ+b/Tv+sGAAAANpeY+w+EmWTy+3/9/4r0/3/z71vWrf+v/99t/YPp/0/q/4ep/z9cKtr/b39ZXDX9/x70//X/9f/1/xmoYev/x9x/MMwkk/wPAAAAOYi5/3VhJvI/AAAAVEbM/T8dZiL/AwAAQGXE3P8zYSaZ5P/B9v8n9f+bZHX+/8nW7df/73x8VKv/7/z/+v/DqaL9/4GpVP9/RP9f/3+4tl//X/+fla59/z9+1F//P+b+B8NMMsn/AAAAkIOY+382zET+BwAAgMqIuf+hMBP5HwAAACoj5v5DYSaZ5H/n/9f/d/5//f9r0/9/qGg3jP3/+sGj/18t+v/dVar/7/z/+v9Dtv36//r/rDRs5/+Puf/1YSaZ5H8AAADIQcz9D4eZyP8AAABQGTH3vyHMRP4HAACAyoi5/41hJpnkf/1//X/9f/1/5//vvH79/81J/787/f8e9P/1//X/9f8ZqGHr/8fc/6Ywk0zyPwAAAOQg5v43h5nI/wAAAFAZMfe/JcxE/gcAAIDKiLn/rWEmmeR//X/9f/1//X/9/87r1//fnPT/u9P/70H/X/9f/1//n4Eatv5/zP0/F2aSSf4HAACAHMTc/0iYifwPAAAAlRFz/9vCTOR/AAAAqIyY+98eZpJJ/tf/38T9/zH9f/1//X/9/97rzY3+f3f6/z3o/+v/6//r/zNQw9b/j7n/HWEmmeR/AAAAyEHM/T8fZiL/AwAAQGXE3P/OMBP5HwAAACoj5v5fCDPJJP/r/2/i/n8lz/+/dLH5dhXr/9cX0/+/Xv3/+o30/7Og/9+d/n8PHfr/W/X/8+r/L4V3ef1//X8GYtj6/zH3vyvMJJP8DwAAADmIuf/dYSbyPwAAAFRGzP3vCTOR/wEAAKAyYu5/NMwkk/yv/59l/z895OHr/692/v/JxnWbvP/v/P/O/6//vwGq2/9f8111pP/fg/P/6/87/7/+PwM1bP3/mPsfCzPJJP8DAABADmLuf2+YifwPAAAAlRFz/y+Gmcj/AAAAUBkx978vzCST/K//n2X/f4jP/79a/3+znv9/rCgml9eTU/9/oun5TMel/r/+/waobv9/MPT/e9D/1/8f5v5/OJonV7m9/j/DaNj6/zH3vz/MJJP8DwAAADmIuf+XwkzkfwAAAKiMmPt/OcxE/gcAAIDKiLn/V8JMMsn/+v/6//r/zv/v/P+d16//vznp/3en/9+D/r/+/zD3/3vQ/2cYDVv/P+b+Xw0zWTX4ff+/+niYAAAAwBCJuf8DYSaZ/P4fAAAAchBz/+EwE/kfAAAAKiPm/iNhJpnkf/3/9v5/PKOq/r/+v/6//r/+/2Y0uP7/y24sCv3/yvT/J/rcAP1//X/9f/1/BmrY+v8x9x8NM8kk/wMAAEAOYu7/tTAT+R8AAAAqI+b+Y2Em8j8AAABURsz9c2EmmeT/69j/Hx/O/r/z/19t///H+v/6/4H+f2f6/xvD+f+7y7b/3y/9f/1//X/9fwZq2Pr/MffPh5lkkv8BAACgwtKPg2PuPx5mIv8DAABAZcTcfyLMRP4HAACAyoi5/4NhJpnkf+f/1/93/v/r0f8fa1le/7+k/6//Pwj6/93p//eg/6//r/+v/89ADVv/P+b+hTCTTPI/AAAA5CDm/g+Fmcj/AAAAUBkx9384zET+BwAAgMqIuf9kmEkm+V//X/8/9/5/rSguOf+//n+n9ev/b076/93p//eg/6//r/+v/89ADVv/P+b+U//P3n002XVWexw+9pUVbtWty0fwmBFDGJmPwJQZVYzJJgdZ5Awm52CyyTmDyTnnbHKOJhqqRLm11pK6z+m9JfXuPnu/7/NM1m2V+p7TVlvwp+tXO27pZP8DAABAD3L33zNusf8BAACgGbn77xW32P8AAADQjNz9945bOtn/+n/9f+/9/2orz//f/fv1/+fo//X/U1jr749t/n37ReH79v93uOO1d9P/6//1/4P0//p//T97za3/z91/n7ilk/0PAAAAPcjdf9+4xf4HAACAZuTuv1/cYv8DAABAM3L3Xxu3dLL/9f/6f/2//n9X/3+T/l//v2ye/z9M/z9C/6//1//r/5nU3Pr/3P33j1s62f8AAADQg9z9D4hb7H8AAABoRu7+B8Yt9j8AAAA0I3f/g+KWTva//l//r/9fSv9/3PP/93w9+n/9/yb6/2H6/xH6f/2//l//z6Tm1v/n7n9w3NLJ/gcAAIAe5O5/SNxi/wMAAEAzcvc/NG6x/wEAAKAZufsfFrd0sv/1//p//f9S+v8jev6//l//v3A3rM7/naD/X6f/HzHS/69W+v8hF93Pb/7ylvP+96H/1/+zbm79f+7+h8ctd16tjl/uFwkAAADMSu7+R8Qtnfz8HwAAAHqQu/903GL/AwAAQDNy918Xt3Sy//X/+n/9v/5f/7/59fX/y+T5/8MO3v/f/nb3uHu//X8zz/8/u+m/uWy/nz+obb//6fv/274z9P8s29z6/9z9Z+KWTvY/AAAA9CB3/yPjFvsfAAAAmpG7/1Fxi/0PAAAAzcjd/+i4pZP9r/9vrf//n12fd0H/v1O76P/1//p//X/r9P/DPP9/xM5fc6fqw2b7/31su59f+vv3/H/9P+vm1v/n7n9M3NLJ/gcAAIAe5O5/bNxi/wMAAEAzcvc/Lm6x/wEAAKAZufsfH7d0sv/1/631/7s/z/P/9f+bXl//r/9vmf5/mP5/RCvP/7/M75pt9/MHte33r//X/7Nubv1/7v4nxC2d7H8AAADoQe7+J8Yt9j8AAAA0I3f/k+IW+x8AAACakbv/yXFLJ/tf/6//X0b/n6+g/9f/H37/n/T/y/O/+v9R+v8RrfT/l2nb/fzS37/+X//Purn1/7n7nxK3dLL/AQAAoAe5+58at9j/AAAA0Izc/U+LW+x/AAAAaEbu/qfHLZ3sf/2//n8Z/b/n/+v/Pf9f/39x9P/D9P8j9P/6f/2//p9Jza3/z91/fdzSyf4HAACAHuTuf0bcYv8DAABAM3L3PzNusf8BAACgGbn7nxW3dLL/9f/6f/2//l//v/n19f/LpP8fpv8fof/X/+v/9f9Makb9/wWfdXL17Lilk/0PAAAAPcjd/5y4xf4HAACAZuTuf27cYv8DAABAM3L3Py9u6WT/6/9n0//v5Hxt9f+nVquV/n/Vaf9/6oI/z/q+1P/r/4+A/n+Y/n+E/l//r//X/zOpGfX/Ox/n7n9+3NLJ/gcAAIAe5O5/Qdxi/wMAAEAzcve/MG6x/wEAAKAZuftfFLd0sv/1/7Pp/3e01f97/v/e74+e+n/P/1+n/z8a+v9h+v8R+n/9v/5f/8+k5tb/5+5/cdx0/KrL/hIBAACAmcnd/5K4pZOf/wMAAEAPcve/NG6x/wEAAGChrl/7ldz9L4tbOtn/+v9p+//jF/ya/l//v/f7Q/+v/9f/Hz79/zD9/wj9v/5f/6//Z1Jz6/9z9788bulk/wMAAEAPcvffELfY/wAAANCM3P2viFvsfwAAAGhG7v5Xxi2d7H/9v+f/6//1//r/za+v/18m/f8w/f8I/b/+f7v9/4nz/6f+nzZcQv9/9uzZ04fe/+fuf1Xc0sn+BwAAgCbt+Vlp7v5Xxy32PwAAADQjd/9r4hb7HwAAAJqRu/+1cUsn+1//32n/n9/qy+r/r1ut9P/6f/2//n+Y/n+Y/n+E/l//7/n/+n8mNbfn/+fuf13c0sn+BwAAgB7k7r8xbrH/AQAAoBm5+18ft9j/AAAA0Izc/W+IWzrZ//r/Tvt/z//X/+v/j7r/v3Wl/z8Si+j/T+3/+nPv/8/o//X/A7rr/+9yp10f6v/1/6ybW/+fu/+NcUsn+x8AAAB6kLv/TXGL/Q8AAADNyN3/5rjF/gcAAIBm5O5/S9x0rJP9r//X/+v/9f/6/82vf8TP/z++Wq30/xNYRP8/YO79/zTP/9/7b/l5+n/9/5Lfv/5f/8+6ufX/ufvfGrd0sv8BAACgB7n73xa32P8AAADQjNz9b49b7H8AAABoRu7+d8Qtnex//b/+X/+v/59V/3/FIfT/ZxbR/3v+/0T0/8Pm0f/vT/+v/1/y+9f/6/+5eNvq/3P3vzNu6WT/AwAAQA9y978rbrH/AQAAoBm5+98dt9j/AAAA0Izc/e+JWzrZ//p//f+l9P/5Pnvr/0/F72u1/z8xp/5/5++Zk7v+/3Xy/H/9/0T0/8P0/yP0//p//f/1+n+mNLfn/+fuf2/c0sn+BwAAgB7k7n9f3Pqfbu1/AAAAaEbu/vfHLfY/AAAANCN3/wfilk72v/5f/+/5/57/P6vn/58+hOf/6/+7ov8fpv8fof/X/+v/Pf+fSc2t/8/d/8G4pZP9DwAAAD3I3f+huMX+BwAAgGbk7v9w3GL/AwAAQDNy998Ut3Sy//X/+n/9v/5f/3/uz1D/3wb9/7Cj6f9P6f/1/9XPXxH/Fuj/9f9jn0+b5tb/5+7/SNzSyf4HAACAHuTu/2jcYv8DAABAM3L3fyxusf8BAABgkY5t+LXc/R+PWzrZ//p//b/+f8L+/8qV/n+h/f+m19f/L9NW+v/8ptD/e/5/6Kf/v3rXR9t+/v+xS3z/e//zaxv9/wXrQ/9Pk+bW/+fu/0Tc0sn+BwAAgB7k7v9k3GL/AwAAQDNy938qbrH/AQAAoBm5+z8dt/Sw//9P/7/S/x+k/z+j//f8f/2//n9uPP9/mP5/hP5/q8/PX/r79/x//T/r5tb/5+7/TNzSw/4HAACATuTu/2zcYv8DAABAM3L3fy5usf8BAACgGTu7P+OyDve//l//7/n/+n/9/+bX1/8vk/5/mP5/hP5f/6//1/8zqbn1/5/f+ayTqy/ELZ3sfwAAAOhB7v4vxi32PwAAADQjd/+X4hb7HwAAAJqRu//LcUsn+1//r/9fRv9/9uzZ0/p//f/ur+d8/3+z/p+i/x+m/x+h/9f/6//1/0xqbv1/7v6vxC2d7H8AAADoQe7+r8Yt9j8AAAA0I3f/1+IW+x8AAACakbv/63FLJ/tf/z+D/v+k/t/z//X/K8//1/9PRP8/TP8/osX+/+TFf/nb7ucPatvvX/+v/2fd3Pr/3P3fiFs62f8AAADQg9z934xb7H8AAABoRu7+b8Ut9j8AAAA0I3f/t+OWTva//v/o+v/b/tn18vz/U6vN71//r//X/+v/D5v+f5j+f0SL/f8l2HY/v/T3r//X/7Nubv1/7v7vxC27h99Vl/ZVAgAAAHOSu/+7cUsnP/8HAACAHuTu/17cYv8DAABAM3L3fz9u6WT/6/9n8Pz/Bvt/z//f/P2h/591/3+l/r8N+v9h+v8R+n/9v/5/ov4/v5v1/72bW/+fu/8HcUsn+x8AAAB6kLv/h3GL/Q8AAADNyN3/o7jF/gcAAIBm5O6/OW65YP9vartbof/X/+v/9f/6/82vr/9fJv3/sIvt/0+sDtb/J/2//l//32v/7/n/nDO3/j93/4/jFj//BwAAgMW5ap9fz93/k7jF/gcAAIBm5O7/adxi/wMAAEAzcvf/LG655cptvaUjpf/X/+v/9f/6/82vr/9fJv3/MM//H6H/n6Kfv0b/30b/v1rp/zm4ufX/uft/Hrf4+T8AAAA0I3f/L+IW+x8AAACakbv/l3GL/Q8AAADNyN3/q7ilk/2v/9f/H7D/30kz9f/n6P/P0f9vpv8/Gvr/Yfr/Efp/z//X/3v+P5OaW/+fu//XcUsn+x8AAAB6kLv/N3GL/Q8AAADNyN3/27jF/gcAAIBm5O7/XdzSyf6ftP+/MSrsi+n/4x+1/n/x/b/n/+v/9f/6/1nR/w/T/4/Q/+v/9f/6fyY1t/4/d//v45ZO9j8AAAD0IHf/H+IW+x8AAACakbv/j3GL/Q8AAADNyN3/p7ilk/3v+f/6f/2//l//v/n19f/LpP8fpv/frP6g9P/6f/2//p9Jza3/z93/57ilk/0PAAAAPcjd/5e4xf4HAACAZuTuvyVusf8BAACgGbn7/xq3dLL/9f/6f/2//l//v/n19f/LNKv+/5j+/8LPvev/j7+s5/9vvf/Pt6D/1//r/5nE3Pr/3P1/i1s62f8AAADQg9z9f49b7H8AAABoRu7+f8Qt9j8AAAA0I3f/P+OWTvb/SP9/on6j/n+Q/n/3+9f/b/7+0P/r//X/h29W/b/n/y/m+f9F/+/5//p//T+Tmlv/n7v/X3FLJ/sfAAAAepC7/9a4xf4HAACAZuTu/3fcYv8DAABAM3L3/ydu6WT/e/7/kvr/a/T/+n/9v/5f/z9C/z9M/z9C/6//v4T3f/Wej/X/+n/Wza3/z93/3wAAAP//tmNCRw==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x40)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc2000, 0x1e1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r1, 0x0)

417.476196ms ago: executing program 4 (id=1055):
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x159, &(0x7f0000000840)="$eJzs27GKE0EcBvB/TKJRm9RisWBjFdQnUCSCuKAoKbRSiDaJBEyz2phH8QUFSZVuRPdI7nLJkRzs7ZH8fk0++GZgpsgOs7Af738dDSfTL5M38+g0GtF6GlksGtGNG9GM0iwAgEOySCn+pJTSrVnc/hUppXNDftayMACgMjuc/wDAgXH+A8Dxcf4DwPF59/7Dq2d53n+bZZ2I37NiUAzK37J/8TLvP8r+665mzYti0Fz2j8s+O9u3485J/2RjfzMePij7f93z1/lafzeG1W8fAAAAjkIvW9p4v+/1tvVlOvV+YO3+3op7rSvbBgCwh+n3H6NP4/Hnb3uFiMvMOojQjohrsAxBqDbU/WQCqrb609e9EgAAAAAAAAAAAAAAYJudvwfqXDx4kbZPr3uPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsO5vAAAA//9XS09N")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0xfffffffb)

190.09319ms ago: executing program 4 (id=1056):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)

88.778356ms ago: executing program 4 (id=1057):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000000))

15.093423ms ago: executing program 4 (id=1058):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4)

0s ago: executing program 0 (id=1059):
r0 = socket$inet(0x2, 0x2, 0x1)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x9, 0x4)
sendmsg$inet(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)="0800c362ca0126e8dc", 0x9}], 0x1, 0x0, 0x0, 0xe0000000}, 0x810)

kernel console output (not intermixed with test programs):

se check.
[  115.840705][ T6687] loop0: detected capacity change from 0 to 4096
[  115.849470][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.350'.
[  115.868209][ T6692] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  116.074204][ T6703] vcan0: tx drop: invalid sa for name 0x0000000000000100
[  116.233158][ T6708] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  116.238214][ T6708] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[  116.808121][ T6716] loop1: detected capacity change from 0 to 32768
[  116.812643][ T6716] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section members_v2: device 0: too many buckets (got 1099511627775, max 2147483583)
[  116.812643][ T6716] members_v2 (size 152):
[  116.812643][ T6716] Device:                        0
[  116.812643][ T6716]   Label:                       (none)
[  116.812643][ T6716]   UUID:                        7af6772b-00de-4159-84cd-1faeadf8ffff
[  116.812643][ T6716]   Size:                        144115188075724800
[  116.812643][ T6716]   read errors:                 0
[  116.812643][ T6716]   write errors:                0
[  116.812643][ T6716]   checksum errors:             150994944
[  116.812643][ T6716]   seqread iops:                0
[  116.812643][ T6716]   seqwrite iops:               0
[  116.812643][ T6716]   randread iops:               0
[  116.812643][ T6716]   randwrite iops:              0
[  116.812643][ T6716]   Bucket size:                 131072
[  116.812643][ T6716]   First bucket:                0
[  116.812643][ T6716]   Buckets:                     1099511627775
[  116.812643][ T6716]   Last mount:                  1714681267
[  116.812643][ T6716]   Last superblock write:       42
[  116.812643][ T6716]   State:                       rw
[  116.812643][ T6716]   Data allowed:                journal,btree,user
[  116.812643][ T6716]   Has data:                    (none)
[  116.812643][ T6716]   Btree allocated bitmap blocksize:256
[  116.812643][ T6716]   Btree allocated bitmap:      00000000000000000000010000100000
[  116.812734][ T6716] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  116.924049][ T6720] loop1: detected capacity change from 0 to 256
[  116.927122][ T6720] exfat: Deprecated parameter 'utf8'
[  116.945939][ T6720] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf83a9f, utbl_chksum : 0xe619d30d)
[  117.475478][ T6728] loop0: detected capacity change from 0 to 32768
[  117.481106][ T6728] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.366 (6728)
[  117.542371][ T6728] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  117.549899][ T6728] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  117.601314][ T6728] BTRFS info (device loop0): rebuilding free space tree
[  117.647540][ T6728] BTRFS info (device loop0): enabling ssd optimizations
[  117.650601][ T6728] BTRFS info (device loop0): turning on sync discard
[  117.655972][ T6728] BTRFS info (device loop0): enabling free space tree
[  117.661268][ T6728] BTRFS info (device loop0): force clearing of disk cache
[  117.664463][ T6728] BTRFS info (device loop0): enabling auto defrag
[  117.667200][ T6728] BTRFS info (device loop0): max_inline set to 0
[  117.815118][ T5928] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  117.984580][ T6764] netlink: 'syz.2.376': attribute type 1 has an invalid length.
[  117.991929][ T6764] netlink: 244 bytes leftover after parsing attributes in process `syz.2.376'.
[  118.107466][ T6767] loop0: detected capacity change from 0 to 256
[  118.146022][ T6767] FAT-fs (loop0): Directory bread(block 64) failed
[  118.149177][ T6767] FAT-fs (loop0): Directory bread(block 65) failed
[  118.153906][ T6767] FAT-fs (loop0): Directory bread(block 66) failed
[  118.156240][ T6767] FAT-fs (loop0): Directory bread(block 67) failed
[  118.158660][ T6767] FAT-fs (loop0): Directory bread(block 68) failed
[  118.160976][ T6767] FAT-fs (loop0): Directory bread(block 69) failed
[  118.164153][ T6767] FAT-fs (loop0): Directory bread(block 70) failed
[  118.166564][ T6767] FAT-fs (loop0): Directory bread(block 71) failed
[  118.169261][ T6767] FAT-fs (loop0): Directory bread(block 72) failed
[  118.173412][ T6767] FAT-fs (loop0): Directory bread(block 73) failed
[  118.332522][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  118.519287][    T9] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  118.528148][    T9] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  118.531454][    T9] usb 3-1: Product: syz
[  118.535136][    T9] usb 3-1: Manufacturer: syz
[  118.537059][    T9] usb 3-1: SerialNumber: syz
[  118.546748][    T9] usb 3-1: config 0 descriptor??
[  118.555106][    T9] ch341 3-1:0.0: ch341-uart converter detected
[  118.588501][ T6776] loop1: detected capacity change from 0 to 32768
[  118.751792][   T47] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  118.903641][   T47] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  118.908084][   T47] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  118.916932][   T47] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  118.920629][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.937337][ T6791] Zero length message leads to an empty skb
[  118.941436][   T47] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  118.948675][   T47] usb 1-1: invalid MIDI out EP 0
[  119.044448][ T5933] udevd[5933]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  119.068277][   T47] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22
[  119.148104][   T47] usb 1-1: USB disconnect, device number 6
[  119.363114][ T5930] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  119.535209][ T5930] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  119.538599][ T5930] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  119.542639][ T5930] usb 2-1: config 1 interface 1 has no altsetting 1
[  119.551053][ T5930] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  119.555765][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.559146][ T5930] usb 2-1: Product: syz
[  119.560903][ T5930] usb 2-1: Manufacturer: syz
[  119.562982][ T5930] usb 2-1: SerialNumber: syz
[  119.576190][    T9] ch341-uart ttyUSB0: failed to read break control: -71
[  119.582857][    T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  119.594465][    T9] usb 3-1: USB disconnect, device number 6
[  119.600289][    T9] ch341 3-1:0.0: device disconnected
[  119.800221][ T5930] usb 2-1: selecting invalid altsetting 1
[  119.809523][ T5930] cdc_ncm 2-1:1.0: bind() failure
[  119.823600][ T5930] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  119.826476][ T5930] cdc_ncm 2-1:1.1: bind() failure
[  119.843791][ T5930] usb 2-1: USB disconnect, device number 5
[  120.207052][   T33] audit: type=1326 audit(1757507441.777:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.2.394" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff972d8eba9 code=0x0
[  120.870294][ T6812] loop1: detected capacity change from 0 to 2048
[  120.886165][ T6812] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  120.923781][ T6393] udevd[6393]: incorrect nilfs2 checksum on /dev/loop1
[  120.935550][ T6812] NILFS (loop1): mounting unchecked fs
[  120.995712][ T6812] NILFS (loop1): recovery complete
[  121.038434][ T6813] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  121.044484][ T6393] udevd[6393]: incorrect nilfs2 checksum on /dev/loop1
[  121.227947][   T57] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  121.234639][   T57] CPU: 1 UID: 0 PID: 57 Comm: kworker/u11:0 Not tainted syzkaller #0 PREEMPT(full) 
[  121.234653][   T57] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  121.234660][   T57] Workqueue: hci0 hci_rx_work
[  121.234676][   T57] Call Trace:
[  121.234680][   T57]  <TASK>
[  121.234687][   T57]  dump_stack_lvl+0x189/0x250
[  121.234701][   T57]  ? __pfx_dump_stack_lvl+0x10/0x10
[  121.234710][   T57]  ? __pfx__printk+0x10/0x10
[  121.234725][   T57]  ? kernfs_path_from_node+0x250/0x290
[  121.234734][   T57]  ? kernfs_path_from_node+0x2f/0x290
[  121.234743][   T57]  sysfs_create_dir_ns+0x259/0x280
[  121.234757][   T57]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  121.234771][   T57]  ? do_raw_spin_unlock+0x4d/0x240
[  121.234782][   T57]  kobject_add_internal+0x59f/0xb40
[  121.234796][   T57]  kobject_add+0x155/0x220
[  121.234806][   T57]  ? __pfx_kobject_add+0x10/0x10
[  121.234814][   T57]  ? _raw_spin_unlock+0x28/0x50
[  121.234827][   T57]  ? get_device_parent+0x366/0x3a0
[  121.234842][   T57]  device_add+0x408/0xb50
[  121.234856][   T57]  hci_conn_add_sysfs+0xd5/0x1e0
[  121.234867][   T57]  le_conn_complete_evt+0xc3a/0x1220
[  121.234881][   T57]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  121.234889][   T57]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  121.234896][   T57]  ? __asan_memcpy+0x40/0x70
[  121.234907][   T57]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  121.234914][   T57]  ? skb_pull_data+0xfb/0x200
[  121.234926][   T57]  hci_le_conn_complete_evt+0x187/0x450
[  121.234941][   T57]  hci_event_packet+0x78f/0x1200
[  121.234953][   T57]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  121.234966][   T57]  ? __pfx_hci_event_packet+0x10/0x10
[  121.234977][   T57]  ? kcov_remote_start+0x4d3/0x7f0
[  121.234987][   T57]  ? local_clock_noinstr+0xe0/0xe0
[  121.235000][   T57]  ? hci_send_to_monitor+0xe2/0x570
[  121.235009][   T57]  hci_rx_work+0x46a/0xe80
[  121.235022][   T57]  ? process_scheduled_works+0x9ef/0x17b0
[  121.235035][   T57]  process_scheduled_works+0xae1/0x17b0
[  121.235082][   T57]  ? __pfx_process_scheduled_works+0x10/0x10
[  121.235109][   T57]  worker_thread+0x8a0/0xda0
[  121.235145][   T57]  kthread+0x711/0x8a0
[  121.235159][   T57]  ? __pfx_worker_thread+0x10/0x10
[  121.235170][   T57]  ? __pfx_kthread+0x10/0x10
[  121.235180][   T57]  ? _raw_spin_unlock_irq+0x23/0x50
[  121.235191][   T57]  ? lockdep_hardirqs_on+0x9c/0x150
[  121.235203][   T57]  ? __pfx_kthread+0x10/0x10
[  121.235212][   T57]  ret_from_fork+0x47f/0x820
[  121.235226][   T57]  ? __pfx_ret_from_fork+0x10/0x10
[  121.235241][   T57]  ? __switch_to_asm+0x39/0x70
[  121.235250][   T57]  ? __switch_to_asm+0x33/0x70
[  121.235259][   T57]  ? __pfx_kthread+0x10/0x10
[  121.235268][   T57]  ret_from_fork_asm+0x1a/0x30
[  121.235285][   T57]  </TASK>
[  121.235314][   T57] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  121.268550][ T6817] netlink: 'syz.1.400': attribute type 1 has an invalid length.
[  121.272701][   T57] Bluetooth: hci0: failed to register connection device
[  121.348747][ T6817] netlink: 'syz.1.400': attribute type 2 has an invalid length.
[  121.423903][   T47] kernel write not supported for file /dsp1 (pid: 47 comm: kworker/1:1)
[  121.674306][ T6824] loop0: detected capacity change from 0 to 32768
[  121.684768][ T6824] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.403 (6824)
[  121.715390][ T6824] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  121.722392][ T6824] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  121.793216][ T6826] loop1: detected capacity change from 0 to 32768
[  121.802988][ T6826] xfs: Unknown parameter 'attr2'
[  121.810176][ T6824] BTRFS info (device loop0): enabling ssd optimizations
[  121.812602][ T6824] BTRFS info (device loop0): enabling free space tree
[  121.861638][ T5930] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  121.883167][ T5928] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  122.031948][ T5930] usb 3-1: Using ep0 maxpacket: 8
[  122.043304][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  122.047082][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  122.054218][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  122.094211][ T5930] usb 3-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f
[  122.102214][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.105441][ T5930] usb 3-1: Product: syz
[  122.121919][ T5930] usb 3-1: Manufacturer: syz
[  122.123773][ T5930] usb 3-1: SerialNumber: syz
[  122.133746][ T5930] usb 3-1: config 0 descriptor??
[  122.169840][ T5930] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -8
[  122.310286][ T6856] loop1: detected capacity change from 0 to 1024
[  122.348674][ T6856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.385817][    T9] usb 3-1: USB disconnect, device number 7
[  122.419939][ T5936] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.603952][ T6865] program syz.1.414 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  122.680143][ T6869] netlink: 40 bytes leftover after parsing attributes in process `syz.1.416'.
[  122.746002][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.417'.
[  122.751124][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.417'.
[  123.017964][ T6882] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  123.068344][ T6884] syz.1.423 uses obsolete (PF_INET,SOCK_PACKET)
[  123.125403][ T6886] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  123.196123][ T6890] netlink: 'syz.1.426': attribute type 10 has an invalid length.
[  123.200643][ T6890] netlink: 40 bytes leftover after parsing attributes in process `syz.1.426'.
[  123.213548][    T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  123.217497][ T6890] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  123.223939][ T6890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  123.374164][    T9] usb 3-1: Using ep0 maxpacket: 8
[  123.383207][    T9] usb 3-1: config 0 has no interfaces?
[  123.385454][    T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  123.389039][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.414511][    T9] usb 3-1: config 0 descriptor??
[  123.646661][ T6898] loop1: detected capacity change from 0 to 32768
[  123.751632][ T6898] XFS (loop1): Metadata CRC error detected at xfs_sb_read_verify+0x2ec/0x400, xfs_sb block 0x0 
[  123.763479][ T6898] XFS (loop1): Unmount and run xfs_repair
[  123.765847][ T6898] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  123.768612][ T6898] 00000000: 58 46 53 42 00 00 08 00 00 00 00 00 00 00 20 00  XFSB.......... .
[  123.781788][ T6898] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  123.785023][ T6898] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  123.787873][ T6898] 00000030: 00 00 00 00 00 00 00 20 00 00 00 00 00 00 24 40  ....... ......$@
[  123.790488][ T6898] 00000040: 00 00 00 00 00 00 24 41 00 00 00 00 00 00 24 42  ......$A......$B
[  123.799991][ T6898] 00000050: 00 00 00 02 00 00 20 00 00 00 00 01 00 00 00 00  ...... .........
[  123.803657][ T6898] 00000060: 00 00 12 00 b4 b5 02 00 04 00 00 02 00 00 00 00  ................
[  123.807101][ T6902] loop0: detected capacity change from 0 to 32768
[  123.807288][  T794] usb 3-1: USB disconnect, device number 8
[  123.814262][ T6902] xfs: Unknown parameter 'attr2'
[  123.841997][ T6898] 00000070: 00 00 00 00 00 00 00 00 0b 09 0a 01 0d 00 00 32  ...............2
[  123.845949][ T6898] XFS (loop1): SB validate failed with error -74.
[  124.232233][ T6921] netlink: 'syz.0.439': attribute type 10 has an invalid length.
[  124.235433][ T6921] netlink: 2 bytes leftover after parsing attributes in process `syz.0.439'.
[  124.239113][ T6921] team0: entered promiscuous mode
[  124.241122][ T6921] team_slave_0: entered promiscuous mode
[  124.243768][ T6921] team_slave_1: entered promiscuous mode
[  124.245976][ T6921] bridge0: port 3(team0) entered blocking state
[  124.247989][ T6921] bridge0: port 3(team0) entered disabled state
[  124.250486][ T6921] team0: entered allmulticast mode
[  124.254618][ T6921] team_slave_0: entered allmulticast mode
[  124.257184][ T6921] team_slave_1: entered allmulticast mode
[  124.261102][ T6921] bridge0: port 3(team0) entered blocking state
[  124.263905][ T6921] bridge0: port 3(team0) entered forwarding state
[  124.415381][ T6925] loop2: detected capacity change from 0 to 128
[  124.429030][ T6925] FAT-fs (loop2): bogus number of reserved sectors
[  124.434105][ T6925] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  124.438184][ T6925] FAT-fs (loop2): Can't find a valid FAT filesystem
[  124.604138][  T794] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  124.762322][  T794] usb 2-1: Using ep0 maxpacket: 32
[  124.872960][  T794] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  124.877468][ T6928] loop2: detected capacity change from 0 to 1024
[  124.880458][  T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.883392][ T6928] EXT4-fs: Ignoring removed i_version option
[  124.886096][ T6928] EXT4-fs: Ignoring removed nobh option
[  124.891940][  T794] usb 2-1: Product: syz
[  124.897684][  T794] usb 2-1: Manufacturer: syz
[  124.901071][  T794] usb 2-1: SerialNumber: syz
[  124.903820][ T6928] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.909392][  T794] usb 2-1: config 0 descriptor??
[  124.969366][ T5934] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.340341][ T6919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  125.350421][ T6919] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  125.356307][  T794] airspy 2-1:0.0: usb_control_msg() failed -71 request 09
[  125.359204][  T794] airspy 2-1:0.0: Could not detect board
[  125.366498][  T794] airspy 2-1:0.0: probe with driver airspy failed with error -71
[  125.375514][ T6950] loop0: detected capacity change from 0 to 1024
[  125.376247][  T794] usb 2-1: USB disconnect, device number 6
[  125.400519][ T6950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.437508][ T5928] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.569943][ T5959] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  125.728689][ T5959] usb 3-1: too many endpoints for config 4 interface 0 altsetting 0: 79, using maximum allowed: 30
[  125.733604][ T5959] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2
[  125.738373][ T5959] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 91
[  125.743556][ T5959] usb 3-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 79
[  125.749043][ T5959] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  125.753586][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.760812][ T6948] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  125.819817][  T794] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  125.972078][ T5959] ath6kl: Failed to submit usb control message: -71
[  125.974195][ T5959] ath6kl: unable to send the bmi data to the device: -71
[  125.978481][ T5959] ath6kl: Unable to send get target info: -71
[  125.984846][ T5959] ath6kl: Failed to init ath6kl core: -71
[  125.991289][ T5959] ath6kl_usb 3-1:4.0: probe with driver ath6kl_usb failed with error -71
[  126.003304][  T794] usb 1-1: unable to get BOS descriptor or descriptor too short
[  126.008499][  T794] usb 1-1: not running at top speed; connect to a high speed hub
[  126.014169][ T5959] usb 3-1: USB disconnect, device number 9
[  126.014676][  T794] usb 1-1: config 7 has an invalid interface number: 1 but max is 0
[  126.024723][  T794] usb 1-1: config 7 has no interface number 0
[  126.028866][  T794] usb 1-1: config 7 interface 1 has no altsetting 0
[  126.034793][  T794] usb 1-1: New USB device found, idVendor=19d2, idProduct=0199, bcdDevice=30.0f
[  126.037957][  T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.041531][  T794] usb 1-1: Product: syz
[  126.045515][  T794] usb 1-1: Manufacturer: syz
[  126.047010][  T794] usb 1-1: SerialNumber: syz
[  126.261308][  T794] qmi_wwan 1-1:7.1: probe with driver qmi_wwan failed with error -22
[  126.269335][  T794] usb 1-1: USB disconnect, device number 7
[  126.274532][ T6393] udevd[6393]: setting owner of /dev/bus/usb/001/007 to uid=0, gid=0 failed: No such file or directory
[  126.315661][   T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  126.459825][   T10] usb 2-1: Using ep0 maxpacket: 8
[  126.463959][   T10] usb 2-1: config index 0 descriptor too short (expected 30, got 18)
[  126.469425][   T10] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  126.473102][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.476165][   T10] usb 2-1: Product: syz
[  126.477844][   T10] usb 2-1: Manufacturer: syz
[  126.489049][   T10] usb 2-1: SerialNumber: syz
[  126.493612][   T10] usb 2-1: config 0 descriptor??
[  126.503148][   T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  126.523612][   T10] usb 2-1: setting power ON
[  126.526042][   T10] dvb-usb: bulk message failed: -22 (2/0)
[  126.540955][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  126.545422][   T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  126.549652][   T10] usb 2-1: media controller created
[  126.586825][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  126.610178][   T10] usb 2-1: selecting invalid altsetting 6
[  126.612794][   T10] usb 2-1: digital interface selection failed (-22)
[  126.616423][   T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  126.626281][   T10] usb 2-1: setting power OFF
[  126.628607][   T10] dvb-usb: bulk message failed: -22 (2/0)
[  126.631141][   T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  126.640748][   T10] (NULL device *): no alternate interface
[  126.681177][   T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  126.746072][  T794] usb 2-1: USB disconnect, device number 7
[  126.946844][ T6986] netlink: 'syz.0.467': attribute type 10 has an invalid length.
[  126.958587][ T6986] bridge0: port 3(team0) entered disabled state
[  126.962638][ T6986] team0: left allmulticast mode
[  126.965207][ T6986] team_slave_0: left allmulticast mode
[  126.967385][ T6986] team_slave_1: left allmulticast mode
[  126.969499][ T6986] team0: left promiscuous mode
[  126.971370][ T6986] team_slave_0: left promiscuous mode
[  126.973772][ T6986] team_slave_1: left promiscuous mode
[  126.978229][ T6986] bridge0: port 3(team0) entered disabled state
[  126.985864][ T6986] 8021q: adding VLAN 0 to HW filter on device team0
[  126.990975][ T6986] bond0: (slave team0): Enslaving as an active interface with an up link
[  127.433204][   T57] Bluetooth: hci0: command 0x0406 tx timeout
[  127.515968][ T6984] loop2: detected capacity change from 0 to 40427
[  127.533822][ T6984] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  127.556697][ T6984] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  127.611533][ T6984] F2FS-fs (loop2): invalid crc value
[  127.813270][ T6984] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  127.827046][ T6984] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  127.834839][ T6984] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  128.902194][ T5959] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  129.048463][ T5959] usb 2-1: Using ep0 maxpacket: 8
[  129.053205][ T5959] usb 2-1: config 6 has an invalid interface number: 51 but max is 1
[  129.057052][ T5959] usb 2-1: config 6 has no interface number 1
[  129.061853][ T5959] usb 2-1: config 6 interface 0 has no altsetting 0
[  129.064593][ T5959] usb 2-1: config 6 interface 51 has no altsetting 0
[  129.071005][ T5959] usb 2-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad
[  129.074989][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.080762][ T5959] usb 2-1: Product: syz
[  129.082567][ T5959] usb 2-1: Manufacturer: syz
[  129.084515][ T5959] usb 2-1: SerialNumber: syz
[  129.155030][ T7024] loop0: detected capacity change from 0 to 32768
[  129.159196][ T7024] btrfs: Deprecated parameter 'usebackuproot'
[  129.161732][ T7024] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  129.166317][ T7024] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.483 (7024)
[  129.179708][ T7024] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  129.184124][ T7024] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  129.188109][ T7024] BTRFS error (device loop0): ignorebadroots must be used with ro mount option
[  129.191722][ T7024] BTRFS error (device loop0): open_ctree failed: -22
[  129.334039][ T5959] xr_serial 2-1:6.51: xr_serial converter detected
[  129.340598][ T5959] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[  129.343886][ T5959] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  129.350020][ T5959] usb 2-1: USB disconnect, device number 8
[  129.368929][ T5959] xr_serial 2-1:6.0: device disconnected
[  130.259737][ T5959] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  130.407802][ T5959] usb 2-1: Using ep0 maxpacket: 32
[  130.420899][ T5959] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  130.424124][ T5959] usb 2-1: config 0 has no interface number 0
[  130.434392][ T5959] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  130.442849][ T5959] usb 2-1: config 0 interface 1 has no altsetting 0
[  130.448333][ T5959] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  130.452104][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.456097][ T5959] usb 2-1: Product: syz
[  130.457693][ T5959] usb 2-1: Manufacturer: syz
[  130.459565][ T5959] usb 2-1: SerialNumber: syz
[  130.473562][ T5959] usb 2-1: config 0 descriptor??
[  130.679888][ T5959] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  130.683439][ T5959] cx231xx 2-1:0.1: Not found matching IAD interface
[  130.689721][ T5959] usb 2-1: USB disconnect, device number 9
[  131.360560][ T7066] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  131.370344][ T7066] netlink: 80 bytes leftover after parsing attributes in process `syz.0.502'.
[  131.506216][ T7073] Bluetooth: MGMT ver 1.23
[  132.556292][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.560474][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.657431][ T7092] loop1: detected capacity change from 0 to 32768
[  132.678071][ T7092] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 ./bus (7:1) scanned by syz.1.514 (7092)
[  132.682644][ T7092] btrfs: Unknown parameter 'dont_appraise'
[  132.697782][ T7108] loop0: detected capacity change from 0 to 4096
[  132.730459][ T7109] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  132.893053][ T7113] loop1: detected capacity change from 0 to 2048
[  132.931524][ T5294]  loop1: p2 < > p4
[  132.936731][ T7116] netlink: 'syz.2.525': attribute type 1 has an invalid length.
[  132.939611][ T5294] loop1: p4 size 8192 extends beyond EOD, truncated
[  132.964944][ T7113]  loop1: p2 < > p4
[  132.969753][ T7113] loop1: p4 size 8192 extends beyond EOD, truncated
[  133.095243][ T6082] udevd[6082]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  133.100359][ T6393] udevd[6393]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  133.129367][ T6393] udevd[6393]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  133.132905][ T6082] udevd[6082]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  133.170862][ T6393] udevd[6393]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  133.176274][   T10] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  133.327361][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  133.333357][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  133.337876][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10
[  133.342227][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64
[  133.346650][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  133.351064][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 213, setting to 64
[  133.355492][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  133.363727][   T10] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  133.367312][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.370660][   T10] usb 1-1: Product: syz
[  133.372918][   T10] usb 1-1: Manufacturer: syz
[  133.374970][   T10] usb 1-1: SerialNumber: syz
[  133.380192][   T10] usb 1-1: config 0 descriptor??
[  133.384618][ T7117] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  133.388289][ T7117] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  133.481984][ T7128] loop2: detected capacity change from 0 to 32768
[  133.486529][ T7128] BTRFS info: device /dev/loop2 (7:2) using temp-fsid 04145109-f5e0-4812-8cba-aaa9feee225e
[  133.491964][ T7128] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.530 (7128)
[  133.508636][ T7128] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  133.515900][ T7128] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  133.551727][ T7128] BTRFS info (device loop2): enabling ssd optimizations
[  133.554522][ T7128] BTRFS info (device loop2): enabling free space tree
[  133.590592][ T5934] BTRFS info (device loop2): last unmount of filesystem 04145109-f5e0-4812-8cba-aaa9feee225e
[  134.128565][ T7153] loop2: detected capacity change from 0 to 32768
[  134.146693][ T7153] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.533 (7153)
[  134.156638][ T7153] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  134.167839][ T7153] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  134.292704][ T7153] BTRFS info (device loop2): enabling ssd optimizations
[  134.305364][ T7153] BTRFS info (device loop2): enabling free space tree
[  134.308208][ T7153] BTRFS info (device loop2): use lzo compression, level 1
[  134.457915][ T5934] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  134.472716][   T10] rc_core: IR keymap rc-snapstream-firefly not found
[  134.475411][   T10] Registered IR keymap rc-empty
[  134.485244][   T10] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  134.517299][   T10] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8
[  134.575933][   T10] input: syz syz mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9
[  134.633318][ T7156] loop1: detected capacity change from 0 to 40427
[  134.650708][ T7156] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  134.653262][ T7156] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  134.657617][ T7156] F2FS-fs (loop1): invalid crc_offset: 33558524
[  134.668256][   T10] usb 1-1: USB disconnect, device number 8
[  134.671035][    C0] ati_remote 1-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[  134.917373][ T7156] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  135.071908][ T7156] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  135.074667][ T7156] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  135.574125][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  135.802212][   T10] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  135.806907][   T10] usb 1-1: config 0 has no interface number 0
[  135.831820][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=4f.5d
[  135.835374][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.838479][   T10] usb 1-1: Product: syz
[  135.855264][   T10] usb 1-1: Manufacturer: syz
[  135.863829][   T10] usb 1-1: SerialNumber: syz
[  135.891928][   T10] usb 1-1: config 0 descriptor??
[  135.910824][   T10] usbtest 1-1:0.85: Linux gadget zero
[  135.913182][   T10] usbtest 1-1:0.85: high-speed {control in/out int-out} tests (+alt)
[  136.093233][ T7202] netlink: 'syz.1.545': attribute type 3 has an invalid length.
[  136.125257][ T7202] netlink: 666 bytes leftover after parsing attributes in process `syz.1.545'.
[  136.181756][   T10] usb 1-1: USB disconnect, device number 9
[  137.400079][ T7219] loop2: detected capacity change from 0 to 24
[  138.026830][ T7229] Bluetooth: MGMT ver 1.23
[  138.220158][ T7238] loop2: detected capacity change from 0 to 1024
[  138.241543][ T7238] EXT4-fs: inline encryption not supported
[  138.250913][ T7238] EXT4-fs (loop2): Test dummy encryption mode enabled
[  138.278116][ T7238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.153113][ T5934] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.769690][ T7295] loop1: detected capacity change from 0 to 128
[  140.966977][ T7304] loop1: detected capacity change from 0 to 256
[  141.580212][ T7332] loop0: detected capacity change from 0 to 164
[  141.603816][ T7332] iso9660: Corrupted directory entry in block 4 of inode 1792
[  141.610267][ T7332] I/O error, dev mtdblock0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  141.769422][   T10] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  141.937927][   T10] usb 2-1: config 0 has an invalid interface number: 171 but max is 0
[  141.941317][   T10] usb 2-1: config 0 has an invalid interface number: 5 but max is 0
[  141.944507][   T10] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  143.839620][   T10] usb 2-1: config 0 has no interface number 0
[  143.842036][   T10] usb 2-1: config 0 has no interface number 1
[  143.844373][   T10] usb 2-1: too many endpoints for config 0 interface 5 altsetting 9: 214, using maximum allowed: 30
[  143.857893][   T10] usb 2-1: config 0 interface 5 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 214
[  143.862337][   T10] usb 2-1: config 0 interface 171 has no altsetting 0
[  143.864526][   T10] usb 2-1: config 0 interface 5 has no altsetting 0
[  143.879619][   T10] usb 2-1: New USB device found, idVendor=041e, idProduct=4052, bcdDevice=5e.9c
[  143.883236][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.886409][   T10] usb 2-1: Product: syz
[  143.897861][   T10] usb 2-1: Manufacturer: syz
[  143.899701][   T10] usb 2-1: SerialNumber: syz
[  143.917357][   T10] usb 2-1: config 0 descriptor??
[  144.547630][   T10] usb 2-1: USB disconnect, device number 10
[  145.003302][ T7366] loop1: detected capacity change from 0 to 4096
[  145.035224][ T7367] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  145.045126][ T7366] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=0, inode=3, rec_len=16, name_len=1
[  145.053878][ T7366] Remounting filesystem read-only
[  145.054312][ T7357] loop2: detected capacity change from 0 to 32768
[  146.568555][ T7391] [U] 
[  147.218971][ T5959] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  147.377708][ T5959] usb 2-1: Using ep0 maxpacket: 16
[  147.382725][ T5959] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb
[  147.386358][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.390375][ T5959] usb 2-1: Product: syz
[  147.392156][ T5959] usb 2-1: Manufacturer: syz
[  147.393913][ T5959] usb 2-1: SerialNumber: syz
[  147.609281][ T7395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.613022][ T7395] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.732094][ T5959] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  147.747910][ T5959] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -71
[  147.752546][ T5959] usb 2-1: USB disconnect, device number 11
[  147.764162][ T6393] udevd[6393]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  148.103226][    T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  148.261062][    T9] usb 3-1: Using ep0 maxpacket: 8
[  148.279348][    T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  148.284209][    T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  148.288292][    T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  148.300910][    T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  148.304581][    T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  148.309135][    T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  148.320175][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.451763][ T7410] loop0: detected capacity change from 0 to 32768
[  148.457562][ T7410] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section clean: entry type (unknown jset_entry_type 255) overruns end of section
[  148.457562][ T7410] clean (size 2912):
[  148.457562][ T7410] flags:          0
[  148.457562][ T7410] journal_seq:    13
[  148.457562][ T7410] usage: type=inodes v=8
[  148.457562][ T7410] usage: type=key_version v=2
[  148.457562][ T7410] usage: type=reserved v=0
[  148.457562][ T7410] usage: type=reserved v=0
[  148.457562][ T7410] usage: type=reserved v=0
[  148.457562][ T7410] usage: type=reserved v=0
[  148.457562][ T7410] data_usage: btree: 1/1 [0]=2816
[  148.457562][ T7410] data_usage: journal: 1/1 [0]=0
[  148.457562][ T7410] data_usage: user: 1/1 [0]=16
[  148.457562][ T7410] datetime: 0
[  148.457562][ T7410] clock: read=0
[  148.457562][ T7410] clock: write=1280
[  148.457562][ T7410] dev_usage: dev=1179915  
[  148.457562][ T7410] 
[  148.499391][ T7410] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  148.551484][    T9] usb 3-1: GET_CAPABILITIES returned 0
[  148.554238][    T9] usbtmc 3-1:16.0: can't read capabilities
[  148.766019][    T9] usb 3-1: USB disconnect, device number 10
[  149.444560][ T7427] loop1: detected capacity change from 0 to 2048
[  149.473840][ T7427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.654400][    T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  149.815863][    T9] usb 3-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b
[  149.819862][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.823577][    T9] usb 3-1: Product: syz
[  149.825371][    T9] usb 3-1: Manufacturer: syz
[  149.827217][    T9] usb 3-1: SerialNumber: syz
[  149.989334][   T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  150.040871][    T9] gspca_main: pac207-2.14.0 probing 093a:2476
[  150.043309][    T9] gspca_pac207: Failed to read a register (index 0x0000, error -71)
[  150.046388][    T9] uvcvideo 3-1:13.0: probe with driver uvcvideo failed with error -22
[  150.051505][    T9] usb 3-1: USB disconnect, device number 11
[  150.129936][ T5936] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.138354][   T10] usb 1-1: Using ep0 maxpacket: 32
[  150.149569][   T10] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  150.152912][   T10] usb 1-1: config 0 has no interface number 0
[  150.155546][   T10] usb 1-1: config 0 interface 12 has no altsetting 0
[  150.164495][   T10] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  150.169608][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.173483][   T10] usb 1-1: Product: syz
[  150.175166][   T10] usb 1-1: Manufacturer: syz
[  150.177001][   T10] usb 1-1: SerialNumber: syz
[  150.187625][   T10] usb 1-1: config 0 descriptor??
[  150.815097][   T10] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: e0 failed: -71
[  150.824688][   T10] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[  150.827500][   T10] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  150.830449][   T10] f81534 1-1:0.12: probe with driver f81534 failed with error -71
[  150.842949][   T10] usb 1-1: USB disconnect, device number 10
[  151.424431][ T7474] loop0: detected capacity change from 0 to 1024
[  151.440456][   T33] audit: type=1800 audit(1757507473.408:11): pid=7474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.650" name="file1" dev="loop0" ino=2 res=0 errno=0
[  151.471069][ T7474] hfsplus: invalid catalog entry type
[  151.500814][ T3061] hfsplus: bad catalog folder entry
[  151.502799][ T3061] hfsplus: bad catalog file entry
[  151.590306][ T7480] loop1: detected capacity change from 0 to 1764
[  151.772381][ T7488] loop2: detected capacity change from 0 to 512
[  151.776945][ T7488] EXT4-fs (loop2): Invalid default hash set in the superblock
[  151.786853][ T7491] syz.1.657 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  151.839593][    T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  151.922544][ T7497] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0
[  151.987164][    T9] usb 1-1: Using ep0 maxpacket: 32
[  151.991308][    T9] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  151.994142][    T9] usb 1-1: config 0 has no interface number 0
[  151.996483][    T9] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  152.010859][    T9] usb 1-1: config 0 interface 85 has no altsetting 0
[  152.016182][    T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  152.019597][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.022020][    T9] usb 1-1: Product: syz
[  152.023321][    T9] usb 1-1: Manufacturer: syz
[  152.024781][    T9] usb 1-1: SerialNumber: syz
[  152.046367][    T9] usb 1-1: config 0 descriptor??
[  152.051304][ T7503] loop2: detected capacity change from 0 to 512
[  152.056357][ T7503] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  152.066982][ T7503] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  152.075633][ T7503] EXT4-fs (loop2): 1 truncate cleaned up
[  152.082660][ T7503] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.134808][ T5934] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  152.432504][ T7151] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.511242][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.610539][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.670116][    T9] appletouch 1-1:0.85: Geyser mode initialized.
[  152.677302][    T9] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input10
[  152.716273][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.881908][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.891915][    T9] usb 1-1: USB disconnect, device number 11
[  152.915754][    T9] appletouch 1-1:0.85: input: appletouch disconnected
[  153.167649][   T13] bridge_slave_1: left allmulticast mode
[  153.170135][   T13] bridge_slave_1: left promiscuous mode
[  153.186288][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.209845][   T13] bridge_slave_0: left allmulticast mode
[  153.216408][   T13] bridge_slave_0: left promiscuous mode
[  153.218652][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.241207][ T5937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  153.248839][ T5937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  153.254123][ T5937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  153.258965][ T5937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  153.264356][ T5937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  153.374219][ T7513] loop1: detected capacity change from 0 to 32768
[  153.683825][ T7513] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  153.683849][ T7513]   allowing incompatible features above 0.0: (unknown version)
[  153.683858][ T7513]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  153.707083][ T7513] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  153.710987][ T7513] bcachefs (loop1): initializing new filesystem
[  153.728155][ T7513] bcachefs (loop1): going read-write
[  153.741735][ T7513] bcachefs (loop1): marking superblocks
[  153.808535][ T7513] bcachefs (loop1): initializing freespace
[  153.817904][  T794] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  153.838838][ T7513] bcachefs (loop1): done initializing freespace
[  153.914160][ T7513] bcachefs (loop1): reading snapshots table
[  153.918435][ T7513] bcachefs (loop1): reading snapshots done
[  153.948975][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.961510][ T7513] bcachefs (loop1): done starting filesystem
[  153.966647][  T794] usb 1-1: Using ep0 maxpacket: 8
[  153.970985][  T794] usb 1-1: unable to get BOS descriptor or descriptor too short
[  153.975060][  T794] usb 1-1: config 7 has an invalid interface number: 142 but max is 0
[  153.980219][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.983319][  T794] usb 1-1: config 7 has no interface number 0
[  153.988121][  T794] usb 1-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d
[  153.991426][  T794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.994425][  T794] usb 1-1: Product: syz
[  153.996469][  T794] usb 1-1: Manufacturer: syz
[  153.998270][  T794] usb 1-1: SerialNumber: syz
[  154.003621][   T13] bond0 (unregistering): Released all slaves
[  154.136929][   T13] IPVS: stopping backup sync thread 7497 ...
[  154.224064][   T33] audit: type=1804 audit(1757507476.203:12): pid=7533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.669" name="/newroot/224/file0/file1" dev="loop1" ino=4098 res=1 errno=0
[  154.237659][  T794] usb 1-1: USB disconnect, device number 12
[  154.242953][ T7513] syz.1.669 (7513) used greatest stack depth: 16920 bytes left
[  154.340767][ T5936] bcachefs (loop1): shutting down
[  154.343495][ T5936] bcachefs (loop1): going read-only
[  154.350121][ T5936] bcachefs (loop1): finished waiting for writes to stop
[  154.362434][ T5936] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[  154.472438][ T5936] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  154.492798][ T5936] bcachefs (loop1): clean shutdown complete, journal seq 4
[  154.497115][ T5936] bcachefs (loop1): marking filesystem clean
[  154.558470][ T5936] bcachefs (loop1): shutdown complete
[  154.641499][   T13] hsr_slave_0: left promiscuous mode
[  154.649660][   T13] hsr_slave_1: left promiscuous mode
[  154.657134][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.663352][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.680868][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.689101][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  154.740342][   T13] veth1_macvtap: left promiscuous mode
[  154.758467][   T13] veth0_macvtap: left promiscuous mode
[  154.762058][   T13] veth1_vlan: left promiscuous mode
[  154.771889][   T13] veth0_vlan: left promiscuous mode
[  155.316464][   T57] Bluetooth: hci1: command tx timeout
[  155.364906][   T13] team0 (unregistering): Port device team_slave_1 removed
[  155.417125][   T13] team0 (unregistering): Port device team_slave_0 removed
[  156.155479][ T7514] chnl_net:caif_netlink_parms(): no params data found
[  156.298957][ T7555] loop1: detected capacity change from 0 to 32768
[  156.361843][ T7555] JBD2: Ignoring recovery information on journal
[  156.467228][ T7514] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.470356][ T7514] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.470653][ T7555] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  156.473610][ T7514] bridge_slave_0: entered allmulticast mode
[  156.497283][ T7514] bridge_slave_0: entered promiscuous mode
[  156.503894][ T7514] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.509073][ T7514] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.513195][ T7514] bridge_slave_1: entered allmulticast mode
[  156.528656][ T7514] bridge_slave_1: entered promiscuous mode
[  156.619566][ T7514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  156.629032][ T7514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  156.762820][ T7514] team0: Port device team_slave_0 added
[  156.789456][ T7514] team0: Port device team_slave_1 added
[  156.796659][ T5936] ocfs2: Unmounting device (7,1) on (node local)
[  156.840487][   T33] audit: type=1326 audit(1757507478.835:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.0.682" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359978eba9 code=0x7ffc0000
[  156.865145][   T33] audit: type=1326 audit(1757507478.845:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.0.682" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359978eba9 code=0x7ffc0000
[  156.886259][   T33] audit: type=1326 audit(1757507478.845:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.0.682" exe="/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f359978eba9 code=0x7ffc0000
[  156.924118][   T33] audit: type=1326 audit(1757507478.855:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.0.682" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359978eba9 code=0x7ffc0000
[  156.947779][   T33] audit: type=1326 audit(1757507478.855:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz.0.682" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359978eba9 code=0x7ffc0000
[  156.978015][ T7514] batman_adv: batadv0: Adding interface: batadv_slave_0
[  156.980818][ T7514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.991701][ T7514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  157.008961][ T7514] batman_adv: batadv0: Adding interface: batadv_slave_1
[  157.012265][ T7514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  157.024196][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.683'.
[  157.028384][ T7514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  157.048236][ T7580] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.054109][ T7580] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.185758][ T7514] hsr_slave_0: entered promiscuous mode
[  157.211277][ T7514] hsr_slave_1: entered promiscuous mode
[  157.221213][ T7514] debugfs: 'hsr0' already exists in 'hsr'
[  157.232836][ T7514] Cannot create hsr debugfs directory
[  157.391418][   T57] Bluetooth: hci1: command tx timeout
[  157.469473][ T7600] vlan2: entered allmulticast mode
[  157.474133][ T7600] dummy0: entered allmulticast mode
[  157.748910][   T59] block nbd0: Receive control failed (result -32)
[  157.914368][ T7514] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  157.929741][ T7514] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  157.943220][ T7514] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  157.959957][ T7514] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  158.165748][ T7514] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.187690][   T33] audit: type=1326 audit(1757507480.180:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.0.697" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359978eba9 code=0x7ffc0000
[  158.202305][ T7514] 8021q: adding VLAN 0 to HW filter on device team0
[  158.218320][   T33] audit: type=1326 audit(1757507480.200:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.0.697" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359978eba9 code=0x7ffc0000
[  158.220768][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.230738][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.233369][   T33] audit: type=1326 audit(1757507480.200:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.0.697" exe="/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f359978eba9 code=0x7ffc0000
[  158.255155][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.258249][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.276699][   T33] audit: type=1326 audit(1757507480.200:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.0.697" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359978eba9 code=0x7ffc0000
[  158.305317][   T33] audit: type=1326 audit(1757507480.200:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7628 comm="syz.0.697" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359978eba9 code=0x7ffc0000
[  158.535893][ T7514] 8021q: adding VLAN 0 to HW filter on device batadv0
[  158.595050][ T7514] veth0_vlan: entered promiscuous mode
[  158.623226][ T7514] veth1_vlan: entered promiscuous mode
[  158.660502][ T7514] veth0_macvtap: entered promiscuous mode
[  158.671000][ T7514] veth1_macvtap: entered promiscuous mode
[  158.691354][ T7514] batman_adv: batadv0: Interface activated: batadv_slave_0
[  158.702241][ T7514] batman_adv: batadv0: Interface activated: batadv_slave_1
[  158.712672][ T5943] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  158.717553][ T5943] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  158.721129][ T5943] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  158.726909][ T2207] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  158.741922][ T5943] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  158.878671][ T2207] usb 2-1: unable to get BOS descriptor or descriptor too short
[  158.881727][ T2207] usb 2-1: not running at top speed; connect to a high speed hub
[  158.892467][ T2207] usb 2-1: config 6 has an invalid interface number: 30 but max is 0
[  158.902617][ T2207] usb 2-1: config 6 has no interface number 0
[  158.904674][ T2207] usb 2-1: config 6 interface 30 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  158.921664][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.922068][ T2207] usb 2-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=1e.11
[  158.924756][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.929702][ T2207] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.938188][ T2207] usb 2-1: Product: syz
[  158.939736][ T2207] usb 2-1: Manufacturer: syz
[  158.941133][ T2207] usb 2-1: SerialNumber: syz
[  158.959906][ T7640] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  159.000983][  T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.004461][  T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.026730][ T7656] loop0: detected capacity change from 0 to 1024
[  159.039251][ T7656] EXT4-fs: Ignoring removed bh option
[  159.086413][ T7656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.092940][ T7656] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.121796][ T7656] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.707: lblock 3 mapped to illegal pblock 3 (length 3)
[  159.142701][ T7656] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  159.150392][ T7656] EXT4-fs (loop0): This should not happen!! Data will be lost
[  159.150392][ T7656] 
[  159.166456][ T7656] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.707: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  159.173730][ T2207] usbtest 2-1:6.30: usb test device
[  159.173745][ T2207] usbtest 2-1:6.30: full-speed {control in/out bulk-out iso-out} tests (+alt)
[  159.184130][ T7656] EXT4-fs error (device loop0) in ext4_setattr:6071: Corrupt filesystem
[  159.206274][ T2207] usb 2-1: USB disconnect, device number 12
[  159.207706][ T7656] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.707: lblock 0 mapped to illegal pblock 0 (length 1)
[  159.218064][ T7656] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  159.222988][ T7656] EXT4-fs (loop0): This should not happen!! Data will be lost
[  159.222988][ T7656] 
[  159.258746][ T5928] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  159.464261][   T57] Bluetooth: hci1: command tx timeout
[  160.048904][ T7682] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  160.263760][ T7692] loop3: detected capacity change from 0 to 128
[  160.420560][  T794] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  160.732086][  T794] usb 2-1: config 0 has an invalid interface number: 235 but max is 0
[  160.798216][  T794] usb 2-1: config 0 has no interface number 0
[  160.821123][  T794] usb 2-1: config 0 interface 235 has no altsetting 0
[  160.850513][  T794] usb 2-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a
[  160.858417][  T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.866153][  T794] usb 2-1: Product: syz
[  160.867904][  T794] usb 2-1: Manufacturer: syz
[  160.873282][  T794] usb 2-1: SerialNumber: syz
[  160.881844][  T794] usb 2-1: config 0 descriptor??
[  160.959791][ T7704] loop3: detected capacity change from 0 to 512
[  161.073699][ T7708] loop3: detected capacity change from 0 to 256
[  161.083424][ T7708] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  161.130318][    T9] usb 2-1: USB disconnect, device number 13
[  161.526802][   T57] Bluetooth: hci1: command tx timeout
[  161.705850][ T2207] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  161.881920][ T2207] usb 1-1: unable to get BOS descriptor or descriptor too short
[  161.886331][ T2207] usb 1-1: not running at top speed; connect to a high speed hub
[  161.892409][ T2207] usb 1-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  161.899201][ T2207] usb 1-1: config 1 interface 0 has no altsetting 0
[  161.904999][ T2207] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  161.909219][ T2207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.912854][ T2207] usb 1-1: Product: syz
[  161.914853][ T2207] usb 1-1: Manufacturer: 屄⨖䦉㺯鴆㎔敓ƿ䉆⥜᭙‏嗚瑺囏⍛뙯ᕀ㫰Ⳏ쩀難폧ꃺ桩䚧󥔝
[  161.920237][ T2207] usb 1-1: SerialNumber: syz
[  162.188199][ T2207] usb 1-1: USB disconnect, device number 13
[  162.268380][ T7734] loop3: detected capacity change from 0 to 4096
[  162.321594][ T7737] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  162.408956][ T7739] loop3: detected capacity change from 0 to 16
[  162.415944][ T7739] erofs (device loop3): mounted with root inode @ nid 36.
[  162.543959][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  163.029611][    T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  163.043073][    T9] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  163.046720][    T9] usb 2-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config
[  163.050856][    T9] usb 2-1: config 220 has no interface number 2
[  163.067750][    T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  163.082711][    T9] usb 2-1: config 220 interface 0 has no altsetting 0
[  163.086106][    T9] usb 2-1: config 220 interface 76 has no altsetting 0
[  163.087772][ T7744] loop0: detected capacity change from 0 to 1024
[  163.089022][    T9] usb 2-1: config 220 interface 1 has no altsetting 0
[  163.090956][    T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  163.098979][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.111997][    T9] usb 2-1: Product: syz
[  163.114027][    T9] usb 2-1: Manufacturer: syz
[  163.116098][    T9] usb 2-1: SerialNumber: syz
[  163.124655][ T7744] hfsplus: bad catalog entry type
[  163.154441][ T1090] hfsplus: b-tree write err: -5, ino 4
[  163.331633][    T9] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  163.333927][    T9] usb 2-1: No valid video chain found.
[  163.335956][    T9] usb 2-1: selecting invalid altsetting 0
[  163.368447][    T9] usb 2-1: selecting invalid altsetting 0
[  163.375897][    T9] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  163.383501][    T9] usb 2-1: USB disconnect, device number 14
[  163.475501][ T7751] netlink: 28 bytes leftover after parsing attributes in process `syz.3.745'.
[  163.596324][   T33] kauditd_printk_skb: 4 callbacks suppressed
[  163.596340][   T33] audit: type=1326 audit(1757507485.617:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7756 comm="syz.3.748" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7a778eba9 code=0x0
[  163.966040][ T7764] I/O error, dev mtdblock0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  163.978318][ T7766] netlink: 104 bytes leftover after parsing attributes in process `syz.0.751'.
[  164.109755][ T7774] loop1: detected capacity change from 0 to 1024
[  164.145945][   T26] hfsplus: b-tree write err: -5, ino 4
[  164.268360][ T7782] loop0: detected capacity change from 0 to 256
[  164.285214][ T7782] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d)
[  164.290560][ T7782] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  164.295635][ T7782] exFAT-fs (loop0): failed to load alloc-bitmap
[  164.298289][ T7782] exFAT-fs (loop0): failed to recognize exfat type
[  164.541667][ T7786] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  164.648507][ T7781] loop1: detected capacity change from 0 to 32768
[  164.680589][ T7781] btrfs: Deprecated parameter 'usebackuproot'
[  164.683603][ T7781] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  164.691929][ T7790] ptrace attach of "/syz-executor exec"[5928] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      jC*p\x1bŖ 3Hej$x2e|yOkYxMxOB B͒GMP%OޜtĎ\x0dT[g]LJ;2$|gP\x22̏R׾{Vd,ru\x0da1i-6M+\x07}T#a5Zd0ƌ{w$)i%L>Q,oQeꮰHrʏ.ҿɷ0JVw^{'ǁo_8v:7>LpF,Z3R<\x07}A\x07B{ g`g/3`0=\x1bJ-^0eyJq -ʹ\x0bL\x0c^
[  164.735918][ T7781] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.759 (7781)
[  164.770358][    C1] vkms_vblank_simulate: vblank timer overrun
[  165.204489][ T7781] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  165.208895][ T7781] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  165.378915][ T7800] loop3: detected capacity change from 0 to 256
[  165.694610][ T7794] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  165.699180][ T7794] FAT-fs (loop3): Filesystem has been set read-only
[  165.702258][ T7794] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  165.706661][ T7794] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  165.721616][   T33] audit: type=1800 audit(1757507487.733:28): pid=7794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.763" name="file1" dev="loop3" ino=1048627 res=0 errno=0
[  165.829503][ T7781] BTRFS info (device loop1): rebuilding free space tree
[  165.865019][ T7781] BTRFS info (device loop1): allowing degraded mounts
[  165.868402][ T7781] BTRFS info (device loop1): enabling ssd optimizations
[  165.871820][ T7781] BTRFS info (device loop1): turning on flush-on-commit
[  165.874458][ T7781] BTRFS info (device loop1): enabling free space tree
[  165.931427][ T7781] BTRFS info (device loop1): force clearing of disk cache
[  165.934535][ T7781] BTRFS info (device loop1): trying to use backup root at mount time
[  165.939567][ T7781] BTRFS info (device loop1): use zstd compression, level 3
[  166.087027][ T5936] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  166.138361][ T7822] loop3: detected capacity change from 0 to 1024
[  166.141486][ T7822] EXT4-fs: Ignoring removed orlov option
[  166.147471][ T7822] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  166.151599][ T7822] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  166.157951][ T7822] EXT4-fs (loop3): invalid journal inode
[  166.160474][ T7822] EXT4-fs (loop3): can't get journal size
[  166.177826][ T7822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  166.246014][ T2207] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  166.755429][ T2207] usb 1-1: Using ep0 maxpacket: 32
[  166.774200][ T2207] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  166.778077][ T2207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.802163][ T2207] usb 1-1: config 0 descriptor??
[  167.044704][ T2207] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  167.064834][ T2207] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  167.071466][ T2207] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  167.075125][ T2207] usb 1-1: media controller created
[  167.096837][ T2207] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  167.269053][ T2207] az6027: usb out operation failed. (-71)
[  167.274880][ T7514] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.276053][ T2207] az6027: usb out operation failed. (-71)
[  167.291625][ T2207] stb0899_attach: Driver disabled by Kconfig
[  167.297987][ T2207] az6027: no front-end attached
[  167.297987][ T2207] 
[  167.301516][ T2207] az6027: usb out operation failed. (-71)
[  167.305104][ T2207] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  167.310905][ T2207] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11
[  167.332652][ T2207] dvb-usb: schedule remote query interval to 400 msecs.
[  167.341827][ T2207] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  167.368956][ T2207] usb 1-1: USB disconnect, device number 14
[  167.465894][ T2207] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  167.656728][ T7845] loop1: detected capacity change from 0 to 512
[  167.720345][ T7845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.727327][ T7845] ext4 filesystem being mounted at /262/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  167.742663][ T7845] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.777: corrupted inode contents
[  167.757408][ T7845] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.777: mark_inode_dirty error
[  167.762978][ T7845] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.777: corrupted inode contents
[  167.768159][ T7845] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.777: mark_inode_dirty error
[  167.810135][ T5936] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.879854][ T7853] loop1: detected capacity change from 0 to 64
[  167.894640][ T7853] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  168.032323][ T7858] netlink: 'syz.1.781': attribute type 8 has an invalid length.
[  168.377023][ T7876] loop1: detected capacity change from 0 to 128
[  168.576499][ T7884] netlink: 'syz.0.792': attribute type 5 has an invalid length.
[  168.615302][ T7886] loop3: detected capacity change from 0 to 4096
[  168.706407][ T7890] netlink: 'syz.0.795': attribute type 1 has an invalid length.
[  168.713257][ T7890] netlink: 'syz.0.795': attribute type 1 has an invalid length.
[  168.746835][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.797'.
[  168.756720][ T7894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.797'.
[  168.780378][ T7894] netlink: 'syz.0.797': attribute type 12 has an invalid length.
[  168.783821][ T7894] netlink: 'syz.0.797': attribute type 11 has an invalid length.
[  168.859520][ T5927] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.984131][ T5927] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.075489][   T57] Bluetooth: hci0: unexpected event for opcode 0x2019
[  169.083646][ T5927] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.098118][ T7892] loop3: detected capacity change from 0 to 32768
[  169.232898][ T5927] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.458524][ T5937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  169.463793][ T5937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  169.469694][ T5937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  169.480746][ T5937] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  169.484294][ T5937] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  169.546640][ T5927] bridge_slave_1: left allmulticast mode
[  169.556855][ T5927] bridge_slave_1: left promiscuous mode
[  169.567128][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.581986][ T5927] bridge_slave_0: left allmulticast mode
[  169.583816][ T5927] bridge_slave_0: left promiscuous mode
[  169.585866][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.919175][ T7940] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  170.058014][ T7944] loop3: detected capacity change from 0 to 2048
[  170.102643][ T7944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.107855][ T7944] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.196223][ T5927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  170.211723][ T5927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  170.218941][ T5927] bond0 (unregistering): Released all slaves
[  170.313231][ T7514] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.671536][ T7962] loop3: detected capacity change from 0 to 2048
[  170.724761][ T7962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.735789][ T7962] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  170.797686][ T5927] hsr_slave_0: left promiscuous mode
[  170.803214][ T7514] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.808263][ T5927] hsr_slave_1: left promiscuous mode
[  170.816616][ T5927] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.819766][ T5927] batman_adv: batadv0: Removing interface: batadv_slave_0
[  170.840250][ T5927] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.843067][ T5927] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.905748][ T5927] veth1_macvtap: left promiscuous mode
[  170.907859][ T5927] veth0_macvtap: left promiscuous mode
[  170.909963][ T5927] veth1_vlan: left promiscuous mode
[  170.913685][ T5927] veth0_vlan: left promiscuous mode
[  170.949100][ T7970] ALSA: mixer_oss: invalid OSS volume ''
[  170.950989][ T7970] ALSA: mixer_oss: invalid OSS volume '+]OؓOGec9bx'ĮC'
[  170.953885][ T7970] ALSA: mixer_oss: invalid OSS volume '_*[bYcq~lr<W|3z'
[  170.985289][ T7970] ALSA: mixer_oss: invalid OSS volume '{۱HJ:'
[  170.988040][ T7970] ALSA: mixer_oss: invalid OSS volume 'B}s둥"f0^C'
[  170.991334][ T7970] ALSA: mixer_oss: invalid OSS volume 'gRy'G!P'
[  170.994337][ T7970] ALSA: mixer_oss: invalid OSS volume '{ouD1*ڦi&qrm4_Xn'
[  171.005179][ T7970] ALSA: mixer_oss: invalid OSS volume '/U~d?":9S'
[  171.008262][ T7970] ALSA: mixer_oss: invalid OSS volume '(8'
[  171.010683][ T7970] ALSA: mixer_oss: invalid OSS volume '')3loX+iG9SNW'
[  171.013974][ T7970] ALSA: mixer_oss: invalid OSS volume '%X%Ň9WsE?%73'
[  171.028068][ T7970] ALSA: mixer_oss: invalid OSS volume 'Ji'
[  171.030665][ T7970] ALSA: mixer_oss: invalid OSS volume 'OfSҖ[sx'
[  171.033898][ T7970] ALSA: mixer_oss: invalid OSS volume '::IJUTTځA"B^Csb;`c'
[  171.041513][ T7970] ALSA: mixer_oss: invalid OSS volume 'cۉ<S٪3nF/Pf'
[  171.110661][ T7970] ALSA: mixer_oss: invalid OSS volume '9hĨy^7]'
[  171.113918][ T7970] ALSA: mixer_oss: invalid OSS volume '?6<g$/uXAd>=V'
[  171.121205][ T7970] ALSA: mixer_oss: invalid OSS volume '+ͿnU<$^EKʘr+'
[  171.124765][ T7970] ALSA: mixer_oss: invalid OSS volume '+8iYJz'
[  171.515663][   T57] Bluetooth: hci2: command tx timeout
[  171.871193][ T7984] loop0: detected capacity change from 0 to 764
[  171.889656][ T7984] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  171.959875][ T7986] loop0: detected capacity change from 0 to 128
[  171.976613][ T7986] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  172.012952][ T7986] ext4 filesystem being mounted at /276/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  172.071832][ T5927] team0 (unregistering): Port device team_slave_1 removed
[  172.097945][ T5928] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  172.170502][ T5927] team0 (unregistering): Port device team_slave_0 removed
[  172.308155][ T7991] loop0: detected capacity change from 0 to 512
[  172.312701][ T7991] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  172.316706][ T7991] EXT4-fs (loop0): blocks per group (42) and clusters per group (32768) inconsistent
[  172.463755][ T7993] netlink: 232 bytes leftover after parsing attributes in process `syz.0.826'.
[  172.550560][ T7995] loop0: detected capacity change from 0 to 4096
[  172.939639][ T7919] chnl_net:caif_netlink_parms(): no params data found
[  173.256366][ T7919] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.258766][ T7919] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.261443][ T7919] bridge_slave_0: entered allmulticast mode
[  173.275796][ T7919] bridge_slave_0: entered promiscuous mode
[  173.283083][ T7919] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.291715][ T7919] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.294307][ T7919] bridge_slave_1: entered allmulticast mode
[  173.300952][ T7919] bridge_slave_1: entered promiscuous mode
[  173.350923][ T7919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.365434][ T8010] loop3: detected capacity change from 0 to 4096
[  173.371154][ T7919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.467029][ T7919] team0: Port device team_slave_0 added
[  173.489523][ T7919] team0: Port device team_slave_1 added
[  173.516914][ T5927] IPVS: stop unused estimator thread 0...
[  173.583182][   T57] Bluetooth: hci2: command tx timeout
[  173.593101][ T7919] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.595422][ T7919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.605740][ T7919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.615350][ T7919] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.617756][ T7919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.627580][ T7919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.676118][ T7919] hsr_slave_0: entered promiscuous mode
[  173.679027][ T7919] hsr_slave_1: entered promiscuous mode
[  173.684952][ T7919] debugfs: 'hsr0' already exists in 'hsr'
[  173.687329][ T7919] Cannot create hsr debugfs directory
[  173.810994][ T5979] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  173.906286][ T8017] loop3: detected capacity change from 0 to 32768
[  173.929321][ T8017] JBD2: Ignoring recovery information on journal
[  173.937311][ T7919] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  173.954591][ T7919] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  173.966782][ T7919] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  173.975650][ T5979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.979108][ T5979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.982268][ T8017] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  173.986216][ T5979] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  173.996796][ T5979] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  173.999808][ T5979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.015131][ T5979] usb 1-1: config 0 descriptor??
[  174.033850][ T7919] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  174.136645][ T7514] ocfs2: Unmounting device (7,3) on (node local)
[  174.275844][ T7919] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.326072][ T7919] 8021q: adding VLAN 0 to HW filter on device team0
[  174.344008][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.346960][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.364911][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.368069][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.461595][ T5979] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd
[  174.488006][ T7919] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  174.492049][ T7919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  174.513689][ T5979] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  175.112194][ T7919] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.124795][ T2207] usb 1-1: USB disconnect, device number 15
[  175.372447][ T7919] veth0_vlan: entered promiscuous mode
[  175.403713][ T7919] veth1_vlan: entered promiscuous mode
[  175.447259][ T7919] veth0_macvtap: entered promiscuous mode
[  175.461921][ T7919] veth1_macvtap: entered promiscuous mode
[  175.484198][ T7919] batman_adv: batadv0: Interface activated: batadv_slave_0
[  175.497121][ T7919] batman_adv: batadv0: Interface activated: batadv_slave_1
[  175.507696][ T5927] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.525703][ T5927] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.540247][ T5927] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  175.543716][ T5927] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  175.569788][ T8065] loop3: detected capacity change from 0 to 1024
[  175.588230][ T8065] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  175.606639][ T8065] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  175.628378][ T8065] EXT4-fs (loop3): orphan cleanup on readonly fs
[  175.639664][ T8065] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.838: Freeing blocks not in datazone - block = 0, count = 4096
[  175.653894][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.656633][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.660193][   T57] Bluetooth: hci2: command tx timeout
[  175.701785][ T8065] EXT4-fs (loop3): 1 orphan inode deleted
[  175.721507][ T8065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  175.759011][ T8065] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.838: bg 0: block 10: padding at end of block bitmap is not set
[  175.773643][ T3061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  175.777379][ T3061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  175.819861][ T7514] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.209666][ T8076] loop4: detected capacity change from 0 to 32768
[  176.272749][ T8093] loop0: detected capacity change from 0 to 1024
[  176.276508][ T8093] EXT4-fs: Ignoring removed nobh option
[  176.316234][ T8093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.322167][ T8076] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  176.322192][ T8076]   allowing incompatible features above 0.0: (unknown version)
[  176.322201][ T8076]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  176.322224][ T8076] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  176.322254][ T8076] bcachefs (loop4): initializing new filesystem
[  176.332629][ T8076] bcachefs (loop4): going read-write
[  176.334538][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  176.353676][ T8076] bcachefs (loop4): marking superblocks
[  176.354817][ T8093] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt.
[  176.380622][ T8076] bcachefs (loop4): initializing freespace
[  176.393930][ T8076] bcachefs (loop4): done initializing freespace
[  176.405472][ T8076] bcachefs (loop4): reading snapshots table
[  176.410121][ T8076] bcachefs (loop4): reading snapshots done
[  176.411150][ T5928] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.441160][ T8076] bcachefs (loop4): done starting filesystem
[  176.507685][    T9] usb 4-1: Using ep0 maxpacket: 16
[  176.511286][    T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.521057][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  176.523297][    T9] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  176.526723][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.532651][    T9] usb 4-1: config 0 descriptor??
[  176.561138][   T33] audit: type=1804 audit(1757507498.591:29): pid=8076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.799" name="/newroot/0/file0/file1" dev="loop4" ino=4098 res=1 errno=0
[  176.677419][ T7919] bcachefs (loop4): shutting down
[  176.679749][ T7919] bcachefs (loop4): going read-only
[  176.681804][ T7919] bcachefs (loop4): finished waiting for writes to stop
[  176.689047][ T7919] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2
[  176.750171][ T7919] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3
[  176.763423][ T7919] bcachefs (loop4): clean shutdown complete, journal seq 4
[  176.770573][ T7919] bcachefs (loop4): marking filesystem clean
[  176.806185][ T7919] bcachefs (loop4): shutdown complete
[  176.983702][    T9] cougar 0003:060B:500A.0005: unknown main item tag 0x0
[  176.987154][    T9] cougar 0003:060B:500A.0005: unknown main item tag 0x0
[  176.990068][    T9] cougar 0003:060B:500A.0005: unknown main item tag 0x0
[  176.993192][    T9] cougar 0003:060B:500A.0005: unknown main item tag 0x0
[  176.996278][    T9] cougar 0003:060B:500A.0005: unknown main item tag 0x0
[  176.999779][    T9] cougar 0003:060B:500A.0005: unknown main item tag 0x0
[  177.002671][    T9] cougar 0003:060B:500A.0005: unknown main item tag 0x0
[  177.005610][    T9] cougar 0003:060B:500A.0005: unknown main item tag 0x0
[  177.008597][    T9] cougar 0003:060B:500A.0005: unknown main item tag 0x0
[  177.011699][    T9] cougar 0003:060B:500A.0005: unknown main item tag 0x0
[  177.015232][    T9] cougar 0003:060B:500A.0005: ignoring exceeding usage max
[  177.021024][    T9] cougar 0003:060B:500A.0005: unexpected long global item
[  177.024608][    T9] cougar 0003:060B:500A.0005: parse failed
[  177.027551][    T9] cougar 0003:060B:500A.0005: probe with driver cougar failed with error -22
[  177.185819][    T9] usb 4-1: USB disconnect, device number 2
[  177.750094][   T57] Bluetooth: hci2: command tx timeout
[  177.765084][ T8119] loop0: detected capacity change from 0 to 1024
[  177.769747][ T8119] EXT4-fs: Ignoring removed bh option
[  177.785231][ T8119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.828074][ T8119] EXT4-fs error (device loop0): ext4_xattr_block_find:1869: inode #15: comm syz.0.854: corrupted xattr block 113: invalid header
[  177.860721][ T8119] EXT4-fs (loop0): Remounting filesystem read-only
[  177.898450][ T5928] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.058027][ T8135] netlink: 40 bytes leftover after parsing attributes in process `syz.0.860'.
[  178.061062][ T8135] netlink: 40 bytes leftover after parsing attributes in process `syz.0.860'.
[  178.067098][ T8135] netlink: 21 bytes leftover after parsing attributes in process `syz.0.860'.
[  178.162584][ T8125] loop3: detected capacity change from 0 to 32768
[  178.165275][ T8125] btrfs: Unknown parameter 'ref_verify'
[  178.549678][ T8144] loop3: detected capacity change from 0 to 32768
[  178.607934][ T8144] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  178.657156][ T8144] XFS (loop3): Ending clean mount
[  178.678591][ T8144] XFS (loop3): Quotacheck needed: Please wait.
[  178.763310][ T8144] XFS (loop3): Quotacheck: Done.
[  178.981442][ T7514] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  180.533738][ T2207] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  180.697179][ T2207] usb 4-1: New USB device found, idVendor=0c45, idProduct=62a0, bcdDevice=a8.22
[  180.701142][ T2207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.711148][ T2207] usb 4-1: config 0 descriptor??
[  180.727981][ T2207] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62a0
[  180.957753][ T2207] gspca_sn9c20x: Write register 1000 failed -71
[  180.960354][ T2207] gspca_sn9c20x: Device initialization failed
[  180.963955][ T5979] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  180.964281][ T2207] gspca_sn9c20x 4-1:0.0: probe with driver gspca_sn9c20x failed with error -71
[  180.978112][ T2207] usb 4-1: USB disconnect, device number 3
[  181.113964][ T5979] usb 1-1: Using ep0 maxpacket: 8
[  181.121141][ T5979] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  181.133900][ T5979] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  181.137579][ T5979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.151020][ T5979] usb 1-1: config 0 descriptor??
[  181.159373][ T5979] gspca_main: vc032x-2.14.0 probing 046d:0892
[  181.581306][ T8215] loop3: detected capacity change from 0 to 4096
[  181.614471][ T8215] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  182.154165][ T8219] loop3: detected capacity change from 0 to 32768
[  182.165497][ T5979] gspca_vc032x: reg_r err -71
[  182.167646][ T5979] vc032x 1-1:0.0: probe with driver vc032x failed with error -71
[  182.175136][ T8219] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  182.200302][ T5979] usb 1-1: USB disconnect, device number 16
[  182.217708][ T8219] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  182.239841][   T33] audit: type=1800 audit(1757507504.286:30): pid=8219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.892" name="bus" dev="loop3" ino=17058 res=0 errno=0
[  182.291503][ T7514] ocfs2: Unmounting device (7,3) on (node local)
[  182.782834][ T8232] loop0: detected capacity change from 0 to 512
[  182.835898][ T8232] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  182.858509][ T8232] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.898: invalid indirect mapped block 2683928664 (level 1)
[  182.875046][ T8232] EXT4-fs (loop0): 1 truncate cleaned up
[  182.878922][ T8232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.892977][ T8232] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.898: Invalid block bitmap block 3 in block_group 0
[  182.904786][ T8232] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.898: Invalid block bitmap block 3 in block_group 0
[  182.916087][ T8232] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.898: Invalid block bitmap block 3 in block_group 0
[  182.986224][ T5928] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.013928][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.178589][ T8239] loop4: detected capacity change from 0 to 4096
[  183.185899][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.324543][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.328098][ T8244] loop0: detected capacity change from 0 to 512
[  183.366536][ T8244] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.902: casefold flag without casefold feature
[  183.399512][ T8244] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.902: couldn't read orphan inode 15 (err -117)
[  183.417143][ T8244] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.520612][ T5928] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.569074][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.764816][   T13] bridge_slave_1: left allmulticast mode
[  183.767017][   T13] bridge_slave_1: left promiscuous mode
[  183.770713][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.797343][ T5937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  183.801959][   T13] bridge_slave_0: left allmulticast mode
[  183.805828][ T5937] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  183.807832][   T13] bridge_slave_0: left promiscuous mode
[  183.816331][ T5937] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  183.828829][ T5937] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  183.829975][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.838956][ T5937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  184.143171][ T8259] overlay: Unknown parameter 'subj_role'
[  184.392877][ T5959] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  184.540233][ T5959] usb 1-1: Using ep0 maxpacket: 32
[  184.566984][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  184.572432][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.576196][ T5959] usb 1-1: New USB device found, idVendor=046d, idProduct=c082, bcdDevice= 0.00
[  184.581441][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.585292][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  184.586623][ T5959] usb 1-1: config 0 descriptor??
[  184.594323][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  184.603909][   T13] bond0 (unregistering): Released all slaves
[  185.037393][ T5959] logitech-hidpp-device 0003:046D:C082.0006: hidraw0: USB HID v0.02 Device [HID 046d:c082] on usb-dummy_hcd.0-1/input0
[  185.114697][   T13] hsr_slave_0: left promiscuous mode
[  185.117941][   T13] hsr_slave_1: left promiscuous mode
[  185.124629][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.127364][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.132285][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  185.135409][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.158513][   T13] veth1_macvtap: left promiscuous mode
[  185.167640][   T13] veth0_macvtap: left promiscuous mode
[  185.171971][   T13] veth1_vlan: left promiscuous mode
[  185.174463][   T13] veth0_vlan: left promiscuous mode
[  185.232014][ T5979] usb 1-1: USB disconnect, device number 17
[  185.702177][   T13] team0 (unregistering): Port device team_slave_1 removed
[  185.779881][   T13] team0 (unregistering): Port device team_slave_0 removed
[  185.875410][ T8294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.917'.
[  185.889721][   T57] Bluetooth: hci1: command tx timeout
[  187.576508][ T8248] chnl_net:caif_netlink_parms(): no params data found
[  187.662434][ T8315] loop0: detected capacity change from 0 to 64
[  187.676208][ T8315] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  187.748528][ T8248] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.751659][ T8248] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.754784][ T8248] bridge_slave_0: entered allmulticast mode
[  187.759845][ T8248] bridge_slave_0: entered promiscuous mode
[  187.791063][ T8248] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.794261][ T8248] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.807339][ T8248] bridge_slave_1: entered allmulticast mode
[  187.811627][ T8248] bridge_slave_1: entered promiscuous mode
[  187.871032][ T8319] netlink: 'syz.0.925': attribute type 8 has an invalid length.
[  187.914749][ T8248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.952266][ T8248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.969685][   T57] Bluetooth: hci1: command tx timeout
[  187.983540][ T8323] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3966. macoff=82
[  188.004790][ T8248] team0: Port device team_slave_0 added
[  188.027773][ T8248] team0: Port device team_slave_1 added
[  188.263612][ T8248] batman_adv: batadv0: Adding interface: batadv_slave_0
[  188.266184][ T8248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.276216][ T8248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  188.287237][ T8248] batman_adv: batadv0: Adding interface: batadv_slave_1
[  188.292204][ T8248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.306725][ T8248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.412723][ T8248] hsr_slave_0: entered promiscuous mode
[  188.423838][ T8248] hsr_slave_1: entered promiscuous mode
[  188.429786][ T2207] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  188.433992][ T8248] debugfs: 'hsr0' already exists in 'hsr'
[  188.443139][ T8248] Cannot create hsr debugfs directory
[  188.593463][ T2207] usb 1-1: config 0 has an invalid interface number: 83 but max is 0
[  188.609992][ T2207] usb 1-1: config 0 has no interface number 0
[  188.612506][ T2207] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61
[  188.625375][ T2207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.646903][ T2207] usb 1-1: config 0 descriptor??
[  188.672557][ T2207] ttusbir 1-1:0.83: cannot find expected altsetting
[  188.959803][ T5312] usb 1-1: USB disconnect, device number 18
[  190.047162][   T57] Bluetooth: hci1: command tx timeout
[  190.172197][ T8248] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  190.202226][ T8248] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  190.223245][ T8248] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  190.239929][ T8248] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  190.693866][ T8368] loop0: detected capacity change from 0 to 4096
[  190.838550][ T8248] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.902949][ T8248] 8021q: adding VLAN 0 to HW filter on device team0
[  190.967665][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.970960][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.075441][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.081010][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.304076][ T8378] netlink: 'syz.4.938': attribute type 9 has an invalid length.
[  191.661935][ T8248] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.745440][ T8248] veth0_vlan: entered promiscuous mode
[  191.755234][ T8248] veth1_vlan: entered promiscuous mode
[  191.781797][ T8248] veth0_macvtap: entered promiscuous mode
[  191.790728][ T8248] veth1_macvtap: entered promiscuous mode
[  191.815774][ T8248] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.829412][ T8248] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.838449][ T5927] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.848132][ T5927] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.852077][ T5927] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.865553][ T5927] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.965547][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.974279][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.014099][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.020889][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.085766][ T8401] loop4: detected capacity change from 0 to 40427
[  192.102584][ T8401] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  192.120011][ T8401] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  192.126318][   T57] Bluetooth: hci1: command tx timeout
[  192.150208][ T8401] F2FS-fs (loop4): invalid crc value
[  192.402933][ T8411] loop3: detected capacity change from 0 to 1024
[  192.521906][ T8411] cgroup: Unknown subsys name 'cpuset'
[  192.701447][ T8401] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  192.731902][ T8401] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  192.735059][ T8401] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  192.737937][ T8413] tipc: Started in network mode
[  192.744189][ T8413] tipc: Node identity fc02, cluster identity 4711
[  192.749807][ T8413] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  193.335742][   T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  193.485862][   T10] usb 4-1: Using ep0 maxpacket: 8
[  193.493773][ T8437] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  193.494440][   T10] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  193.501722][   T10] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  193.505245][   T10] usb 4-1: Product: syz
[  193.536740][   T10] usb 4-1: Manufacturer: syz
[  193.538821][   T10] usb 4-1: SerialNumber: syz
[  193.560390][   T10] usb 4-1: config 0 descriptor??
[  193.593820][   T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  193.647932][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  193.651301][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  194.017455][   T10] gspca_zc3xx: reg_r err -71
[  194.019563][   T10] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  194.065545][   T10] usb 4-1: USB disconnect, device number 4
[  194.079251][ T6393] udevd[6393]: setting owner of /dev/bus/usb/004/004 to uid=0, gid=0 failed: No such file or directory
[  194.174605][ T8434] loop0: detected capacity change from 0 to 32768
[  194.193416][ T8434] xfs: Unknown parameter 'noikeep'
[  194.646960][ T2207] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  194.792742][ T8445] loop4: detected capacity change from 0 to 256
[  194.798853][ T8445] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  194.803490][ T8445] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  194.811833][ T2207] usb 1-1: not running at top speed; connect to a high speed hub
[  194.822113][ T2207] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  194.830455][ T8445] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  194.835360][ T2207] usb 1-1: config 1 has no interface number 1
[  194.837935][ T2207] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  194.844250][ T8445] exFAT-fs (loop4): failed to load alloc-bitmap
[  194.846933][ T8445] exFAT-fs (loop4): failed to recognize exfat type
[  194.859903][ T2207] usb 1-1: string descriptor 0 read error: -22
[  194.862538][ T2207] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  194.874835][ T2207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.888980][ T2207] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc
[  194.935170][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  195.093713][   T10] usb 4-1: config 3 has an invalid interface number: 238 but max is 0
[  195.104702][   T10] usb 4-1: config 3 has no interface number 0
[  195.109935][   T10] usb 4-1: config 3 interface 238 has no altsetting 0
[  195.134001][ T8451] loop4: detected capacity change from 0 to 4096
[  195.145265][ T2207] usb 1-1: USB disconnect, device number 19
[  195.152480][   T10] usb 4-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=92.99
[  195.165438][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.173917][   T10] usb 4-1: Product: syz
[  195.176469][   T10] usb 4-1: Manufacturer: syz
[  195.178651][   T10] usb 4-1: SerialNumber: syz
[  195.412261][   T10] usb 4-1: unsupported MDLM descriptors
[  195.437052][   T10] usb 4-1: USB disconnect, device number 5
[  195.523885][ T8457] loop4: detected capacity change from 0 to 1024
[  195.552554][ T8457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.602610][ T7919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.692382][ T8463] loop0: detected capacity change from 0 to 512
[  195.713563][ T8463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.718840][ T8463] ext4 filesystem being mounted at /344/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  195.757013][ T5928] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.977663][ T8469] loop3: detected capacity change from 0 to 1024
[  196.006950][ T8469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.046127][ T2207] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  196.195781][ T2207] usb 1-1: Using ep0 maxpacket: 16
[  196.200125][ T2207] usb 1-1: config 0 has an invalid interface number: 68 but max is 0
[  196.203475][ T2207] usb 1-1: config 0 has no interface number 0
[  196.206718][ T2207] usb 1-1: config 0 interface 68 altsetting 0 endpoint 0x81 has invalid maxpacket 768, setting to 64
[  196.217966][ T2207] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4
[  196.221606][ T2207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.225107][ T2207] usb 1-1: Product: syz
[  196.227058][ T2207] usb 1-1: Manufacturer: syz
[  196.228849][ T2207] usb 1-1: SerialNumber: syz
[  196.233858][ T2207] usb 1-1: config 0 descriptor??
[  196.248007][ T2207] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  196.264595][   T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  196.418513][   T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  196.421744][   T10] usb 4-1: config 0 has no interface number 0
[  196.424310][   T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.428591][   T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.432240][   T10] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  196.437763][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.446770][   T10] usb 4-1: config 0 descriptor??
[  196.455795][ T5927] usb 1-1: Failed to submit usb control message: -71
[  196.459011][ T5979] usb 1-1: USB disconnect, device number 20
[  196.462649][ T5927] usb 1-1: unable to send the bmi data to the device: -71
[  196.468239][ T5927] usb 1-1: unable to get target info from device
[  196.475171][ T5927] usb 1-1: could not get target info (-71)
[  196.478851][ T5927] usb 1-1: could not probe fw (-71)
[  196.860657][   T10] hid_parser_main: 50 callbacks suppressed
[  196.860671][   T10] prodikeys 0003:041E:2801.0007: unknown main item tag 0x1
[  196.866714][   T10] prodikeys 0003:041E:2801.0007: unbalanced delimiter at end of report description
[  196.869941][   T10] prodikeys 0003:041E:2801.0007: hid parse failed
[  196.871037][ T8477] loop4: detected capacity change from 0 to 32768
[  196.871970][   T10] prodikeys 0003:041E:2801.0007: probe with driver prodikeys failed with error -22
[  196.886391][ T8477] process 'syz.4.972' launched './file1' with NULL argv: empty string added
[  197.069548][ T5979] usb 4-1: USB disconnect, device number 6
[  197.173557][ T8489] loop0: detected capacity change from 0 to 512
[  197.179550][ T8489] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  197.188762][ T8489] EXT4-fs (loop0): 1 truncate cleaned up
[  197.191397][ T8489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.200337][ T8489] fscrypt (loop0, inode 18): Unsupported encryption flags (0x33)
[  197.622128][ T5928] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.891683][ T8248] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.994835][ T8492] loop0: detected capacity change from 0 to 32768
[  198.029889][ T8492] ERROR: (device loop0): xtSearch: xt_getpage: xtree page corrupt
[  198.029889][ T8492] 
[  198.041999][ T8492] xtLookup: xtSearch returned -5
[  198.055403][ T8492] read_mapping_page failed!
[  198.057387][ T8492] jfs_mount: diMount failed w/rc = -5
[  198.060408][ T8492] Mount JFS Failure: -5
[  198.062342][ T8492] jfs_mount failed w/return code = -5
[  198.175494][ T8502] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253
[  198.178637][ T8502] PKCS7: Only support pkcs7_signedData type
[  198.203731][ T8504] program syz.3.985 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  198.565054][ T8512] loop0: detected capacity change from 0 to 32768
[  198.634119][ T8512] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=crc64,data_checksum=none,compression=lz4,background_compression=lz4,erasure_code,recovery_pass_last=check_allocations,nojournal_transaction_names,read_only,no_data_io
[  198.634135][ T8512]   allowing incompatible features above 0.0: (unknown version)
[  198.634141][ T8512]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  198.649121][ T8512] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  198.652897][ T8512] bcachefs (loop0): invalid journal entry, version=1.7: mi_btree_bitmap type=blacklist in superblock: invalid journal seq blacklist entry: bad size, fixing
[  198.658400][ T8512] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[  198.661209][ T8512] bcachefs (loop0): Version upgrade required:
[  198.661209][ T8512] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  198.661209][ T8512] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  198.661209][ T8512]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  198.685491][    C1] vkms_vblank_simulate: vblank timer overrun
[  198.708524][ T8512] bcachefs (loop0): btree node read error at btree alloc level 0/0
[  198.708576][ T8512]   u64s 11 type btree_ptr_v2 283673999966207:U64_MAX:U32_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[  198.708585][ T8512]   loop0 node offset 0/24 bset u64s 0: incorrect max key SPOS_MAX
[  198.708590][ T8512]   loop0 btree validate error
[  198.708594][ T8512]   flagging btree alloc lost data
[  198.708599][ T8512]   running recovery pass check_topology (2), currently at recovery_pass_empty (0)
[  198.708604][ T8512]   ret btree_node_read_err_bad_node
[  198.730255][ T8512] bcachefs (loop0): error reading btree root btree=alloc level=0: btree_node_read_error, fixing
[  198.738184][ T8512] bcachefs (loop0): check_topology... done
[  198.741445][ T8512] bcachefs (loop0): accounting_read... done
[  198.746110][ T8512] bcachefs (loop0): alloc_read... done
[  198.748542][ T8512] bcachefs (loop0): snapshots_read... done
[  198.751378][ T8512] bcachefs (loop0): check_allocations...
[  198.759152][ T8512] bcachefs (loop0): bucket 0:38 data type btree ptr gen 0 missing in alloc btree
[  198.759185][ T8512]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[  198.770240][ T8512] bcachefs (loop0): bucket 0:41 data type btree ptr gen 0 missing in alloc btree
[  198.770251][ T8512]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[  198.779792][ T8512] bcachefs (loop0): bucket 0:31 data type btree ptr gen 0 missing in alloc btree
[  198.779810][ T8512]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0, fixing
[  198.789244][ T8512] bcachefs (loop0): bucket 0:35 data type btree ptr gen 0 missing in alloc btree
[  198.789256][ T8512]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[  198.798793][ T8512] bcachefs (loop0): bucket 0:32 data type btree ptr gen 0 missing in alloc btree
[  198.798803][ T8512]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[  198.808925][ T8512] bcachefs (loop0): bucket 0:28 data type btree ptr gen 0 missing in alloc btree
[  198.808940][ T8512]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0, fixing
[  198.823330][ T8512] bcachefs (loop0): bucket 0:29 data type btree ptr gen 0 missing in alloc btree
[  198.823343][ T8512]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[  198.833037][ T8512] bcachefs (loop0): bucket 0:37 data type btree ptr gen 0 missing in alloc btree
[  198.833055][ T8512]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0, fixing
[  198.841760][ T8512] bcachefs (loop0): bucket 0:42 data type btree ptr gen 0 missing in alloc btree
[  198.841770][ T8512]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 1db8f60c84bb244c written 8 min_key POS_MIN durability: 1 ptr: 0:42:0 gen 0, fixing
[  198.855638][ T8512]  done
[  198.857057][ T8512] bcachefs (loop0): Fixed errors, running fsck a second time to verify fs is clean
[  198.861161][ T8512] bcachefs (loop0): done starting filesystem
[  198.932780][ T5928] bcachefs (loop0): shutting down
[  198.933108][ T8527] loop3: detected capacity change from 0 to 4096
[  198.955083][ T8527] NILFS (loop3): invalid segment: Inconsistency found
[  198.968892][ T8527] NILFS (loop3): trying rollback from an earlier position
[  198.976128][ T5928] bcachefs (loop0): shutdown complete
[  198.997458][ T8527] NILFS (loop3): recovery complete
[  199.005633][ T8528] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  199.041449][   T33] audit: type=1800 audit(1757507521.094:31): pid=8527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.996" name="bus" dev="loop3" ino=12 res=0 errno=0
[  199.473637][ T5959] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  199.664217][ T5959] usb 4-1: config 0 has an invalid interface number: 255 but max is 0
[  199.667961][ T5959] usb 4-1: config 0 has no interface number 0
[  199.670558][ T5959] usb 4-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  199.713862][ T5959] usb 4-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  199.731375][ T5959] usb 4-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79
[  199.735680][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.738681][ T5959] usb 4-1: Product: syz
[  199.740320][ T5959] usb 4-1: Manufacturer: syz
[  199.742214][ T5959] usb 4-1: SerialNumber: syz
[  199.747444][ T5959] usb 4-1: config 0 descriptor??
[  199.765791][ T5959] vmk80xx 4-1:0.255: driver 'vmk80xx' failed to auto-configure device.
[  199.769729][ T8538] loop4: detected capacity change from 0 to 256
[  199.770764][ T5959] vmk80xx 4-1:0.255: probe with driver vmk80xx failed with error -22
[  199.833370][ T8538] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x9aa2f194, utbl_chksum : 0xe619d30d)
[  199.971610][   T10] usb 4-1: USB disconnect, device number 7
[  200.066868][ T8544] loop0: detected capacity change from 0 to 1024
[  200.076608][ T8544] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  200.090231][ T8544] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  200.109368][ T8544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.156818][ T5928] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.422976][ T8548] loop4: detected capacity change from 0 to 32768
[  200.442527][ T8548] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  200.467637][ T8548] XFS (loop4): Ending clean mount
[  200.477013][ T8548] XFS (loop4): Quotacheck needed: Please wait.
[  200.518902][ T8548] XFS (loop4): Quotacheck: Done.
[  200.580635][ T7919] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  200.583357][ T2207] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  200.585348][ T8564] loop3: detected capacity change from 0 to 1024
[  200.639093][   T33] audit: type=1800 audit(1757507522.685:32): pid=8564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1009" name="file2" dev="loop3" ino=22 res=0 errno=0
[  200.733522][ T2207] usb 1-1: Using ep0 maxpacket: 8
[  200.763014][ T2207] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  200.782278][ T2207] usb 1-1: config 0 has no interface number 0
[  200.785050][ T2207] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  200.789381][ T2207] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  200.803124][ T2207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.804189][   T36] hfsplus: b-tree write err: -5, ino 4
[  200.828256][ T2207] usb 1-1: config 0 descriptor??
[  200.852854][ T2207] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  201.055105][ T5979] usb 1-1: USB disconnect, device number 21
[  201.142188][ T8578] loop4: detected capacity change from 0 to 16
[  201.166738][ T8578] erofs (device loop4): mounted with root inode @ nid 36.
[  201.274049][ T8581] netlink: 'syz.4.1017': attribute type 4 has an invalid length.
[  201.291448][ T8581] netlink: 'syz.4.1017': attribute type 4 has an invalid length.
[  201.511289][ T8590] loop3: detected capacity change from 0 to 64
[  201.700341][ T8599] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.1024' resets device
[  202.278845][   T33] audit: type=1326 audit(1757507524.335:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8584 comm="syz.4.1019" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f421918eba9 code=0x7fc00000
[  202.769517][ T8613] netlink: 'syz.3.1030': attribute type 3 has an invalid length.
[  202.772131][ T8613] netlink: 'syz.3.1030': attribute type 1 has an invalid length.
[  202.775786][ T8613] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1030'.
[  202.779134][ T8613] NCSI netlink: No device for ifindex 33022
[  202.875248][ T8615] loop3: detected capacity change from 0 to 512
[  202.900418][ T8615] fscrypt (loop3, inode 2): Error -61 getting encryption context
[  202.924277][ T8615] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61
[  202.932607][ T8615] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #13: comm syz.3.1031: iget: bad i_size value: 12154757448730
[  202.955515][ T8615] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1031: couldn't read orphan inode 13 (err -117)
[  202.962988][ T8615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.985537][ T8615] fscrypt (loop3, inode 2): Error -61 getting encryption context
[  202.994011][ T8620] netlink: 'syz.0.1033': attribute type 1 has an invalid length.
[  203.027589][ T8248] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.141696][ T8624] loop3: detected capacity change from 0 to 256
[  203.147450][ T8624] exfat: Deprecated parameter 'utf8'
[  203.282381][ T8624] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d)
[  203.901942][ T8630] sctp: [Deprecated]: syz.3.1037 (pid 8630) Use of int in maxseg socket option.
[  203.901942][ T8630] Use struct sctp_assoc_value instead
[  204.094928][ T8633] loop3: detected capacity change from 0 to 256
[  204.176140][ T8633] FAT-fs (loop3): Directory bread(block 64) failed
[  204.179125][ T8633] FAT-fs (loop3): Directory bread(block 65) failed
[  204.183833][ T8633] FAT-fs (loop3): Directory bread(block 66) failed
[  204.186806][ T8633] FAT-fs (loop3): Directory bread(block 67) failed
[  204.190088][ T8633] FAT-fs (loop3): Directory bread(block 68) failed
[  204.196913][ T8633] FAT-fs (loop3): Directory bread(block 69) failed
[  204.203997][ T8633] FAT-fs (loop3): Directory bread(block 70) failed
[  204.207824][ T8633] FAT-fs (loop3): Directory bread(block 71) failed
[  204.211623][ T8633] FAT-fs (loop3): Directory bread(block 72) failed
[  204.217086][ T8633] FAT-fs (loop3): Directory bread(block 73) failed
[  204.474558][ T8642] afs: Bad value for 'source'
[  204.917677][ T8653] loop3: detected capacity change from 0 to 32768
[  204.925044][ T8653] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1048 (8653)
[  204.943798][ T8653] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  204.948018][ T8653] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  205.093550][ T8653] BTRFS info (device loop3): enabling ssd optimizations
[  205.096355][ T8653] BTRFS info (device loop3): turning on sync discard
[  205.098710][ T8653] BTRFS info (device loop3): enabling free space tree
[  205.155723][ T8248] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  205.336245][ T8678] loop3: detected capacity change from 0 to 512
[  205.353416][ T8678] ext4: Unknown parameter 'nouser_xattr'
[  205.524165][ T8673] loop0: detected capacity change from 0 to 32768
[  205.547123][   T33] audit: type=1800 audit(1757507527.606:34): pid=8673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1051" name="file1" dev="loop0" ino=4 res=0 errno=0
[  205.673737][ T8685] loop4: detected capacity change from 0 to 128
[  205.953343][ T8673] ERROR: (device loop0): dbAdjCtl: the maximum free buddy is not the old root
[  205.953343][ T8673] 
[  205.965809][   T57] Bluetooth: hci0: command 0x0406 tx timeout
[  205.971424][ T8673] ERROR: (device loop0): remounting filesystem as read-only
[  206.060536][ T5928] ------------[ cut here ]------------
[  206.063463][ T5928] kernel BUG at fs/jfs/inode.c:169!
[  206.067303][ T8683] loop3: detected capacity change from 0 to 32768
[  206.068315][ T5928] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  206.073045][ T5928] CPU: 1 UID: 0 PID: 5928 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  206.076995][ T5928] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  206.080944][ T5928] RIP: 0010:jfs_evict_inode+0x438/0x440
[  206.083282][ T5928] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 23 c9 e7 fe e9 16 fe ff ff e8 69 c7 83 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  206.090807][ T5928] RSP: 0018:ffffc90003b57ae0 EFLAGS: 00010293
[  206.093385][ T5928] RAX: ffffffff833be4a7 RBX: ffff888113c88430 RCX: ffff888105b5d700
[  206.096628][ T5928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888113c88430
[  206.099655][ T5928] RBP: 0000000000000001 R08: ffffffff8fc3c837 R09: 1ffffffff1f87906
[  206.102894][ T5928] R10: dffffc0000000000 R11: ffffffff833bc1a0 R12: dffffc0000000000
[  206.106290][ T5928] R13: dffffc0000000000 R14: ffff888113c880b8 R15: ffffffff833be070
[  206.109679][ T5928] FS:  000055558c486500(0000) GS:ffff8881a39f1000(0000) knlGS:0000000000000000
[  206.113173][ T5928] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  206.115806][ T5928] CR2: 00007f42193d7dac CR3: 000000010e32a000 CR4: 00000000000006f0
[  206.119203][ T5928] Call Trace:
[  206.120655][ T5928]  <TASK>
[  206.121971][ T5928]  ? evict+0x4f8/0x9c0
[  206.123893][ T5928]  ? __pfx_jfs_evict_inode+0x10/0x10
[  206.126117][ T5928]  evict+0x504/0x9c0
[  206.128034][ T5928]  ? __pfx_evict+0x10/0x10
[  206.129750][ T5928]  ? do_raw_spin_unlock+0x4d/0x240
[  206.131740][ T5928]  evict_inodes+0x64c/0x6d0
[  206.133750][ T5928]  ? __pfx_evict_inodes+0x10/0x10
[  206.135831][ T5928]  generic_shutdown_super+0x9a/0x2c0
[  206.138108][ T5928]  kill_block_super+0x44/0x90
[  206.140026][ T5928]  deactivate_locked_super+0xbc/0x130
[  206.142127][ T5928]  cleanup_mnt+0x425/0x4c0
[  206.144051][ T5928]  ? lockdep_hardirqs_on+0x9c/0x150
[  206.146171][ T5928]  task_work_run+0x1d4/0x260
[  206.148024][ T5928]  ? __pfx_task_work_run+0x10/0x10
[  206.150172][ T5928]  ? __x64_sys_umount+0x122/0x160
[  206.152274][ T5928]  ? exit_to_user_mode_loop+0x40/0x130
[  206.154448][ T5928]  exit_to_user_mode_loop+0xec/0x130
[  206.156520][ T5928]  do_syscall_64+0x2bd/0xfa0
[  206.158369][ T5928]  ? lockdep_hardirqs_on+0x9c/0x150
[  206.160386][ T5928]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.162845][ T5928]  ? exc_page_fault+0xab/0x100
[  206.164902][ T5928]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  206.167227][ T5928] RIP: 0033:0x7f359978fed7
[  206.169020][ T5928] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  206.176616][ T5928] RSP: 002b:00007ffd0d24cad8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  206.180002][ T5928] RAX: 0000000000000000 RBX: 00007f3599811c05 RCX: 00007f359978fed7
[  206.183288][ T5928] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd0d24cb90
[  206.186445][ T5928] RBP: 00007ffd0d24cb90 R08: 0000000000000000 R09: 0000000000000000
[  206.189915][ T5928] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd0d24dc20
[  206.193127][ T5928] R13: 00007f3599811c05 R14: 000000000003262b R15: 00007ffd0d24dc60
[  206.196548][ T5928]  </TASK>
[  206.198088][ T5928] Modules linked in:
[  206.199887][    C1] vkms_vblank_simulate: vblank timer overrun
[  206.203811][ T5928] ---[ end trace 0000000000000000 ]---
[  206.211386][ T8683] ERROR: (device loop3): xtSearch: xt_getpage: xtree page corrupt
[  206.211386][ T8683] 
[  206.212176][   T33] audit: type=1800 audit(1757507528.266:35): pid=8683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1054" name="file1" dev="loop3" ino=4 res=0 errno=0
[  206.219616][ T8683] ERROR: (device loop3): remounting filesystem as read-only
[  206.227982][ T5928] RIP: 0010:jfs_evict_inode+0x438/0x440
[  206.230294][ T8683] xtLookup: xtSearch returned -5
[  206.232783][ T5928] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 23 c9 e7 fe e9 16 fe ff ff e8 69 c7 83 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  206.233498][ T8691] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1058'.
[  206.241122][ T5928] RSP: 0018:ffffc90003b57ae0 EFLAGS: 00010293
[  206.241173][ T5928] RAX: ffffffff833be4a7 RBX: ffff888113c88430 RCX: ffff888105b5d700
[  206.241186][ T5928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888113c88430
[  206.241196][ T5928] RBP: 0000000000000001 R08: ffffffff8fc3c837 R09: 1ffffffff1f87906
[  206.241206][ T5928] R10: dffffc0000000000 R11: ffffffff833bc1a0 R12: dffffc0000000000
[  206.241214][ T5928] R13: dffffc0000000000 R14: ffff888113c880b8 R15: ffffffff833be070
[  206.241222][ T5928] FS:  000055558c486500(0000) GS:ffff8881a39f1000(0000) knlGS:0000000000000000
[  206.241231][ T5928] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  206.251651][   T33] audit: type=1804 audit(1757507528.306:36): pid=8683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1054" name="/newroot/35/file1/file1" dev="loop3" ino=4 res=1 errno=0
[  206.280496][ T5928] CR2: 0000200000001300 CR3: 000000010e32a000 CR4: 00000000000006f0
[  206.290284][ T5928] Kernel panic - not syncing: Fatal exception
[  206.293526][ T5928] Kernel Offset: disabled
[  206.295280][ T5928] Rebooting in 86400 seconds..

VM DIAGNOSIS:
12:32:07  Registers:
info registers vcpu 0

CPU#0
RAX=00000000f2cf84f3 RBX=0000000000000000 RCX=00000000a85e1306 RDX=ffffc9000617ed8c
RSI=000000000000002e RDI=0000000077c39e91 RBP=00000000a08114d9 RSP=ffffc9000617ed18
R8 =00000000f213c359 R9 =0000000007960a0d R10=000000000000001a R11=ffffffff81ac2470
R12=dffffc0000000000 R13=0000000000000000 R14=ffffc9000617ed80 R15=ffffc9000617ed80
RIP=ffffffff85022840 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc49c2b76c0 ffffffff 00c00000
GS =0000 ffff8880b83f1000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc49b3733a0 CR3=000000002b34a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffffffff000000 XMM01=0101010101010101 0101010001ffff00
XMM02=695f746e756f6d5f 7a79730032736667 XMM03=3870633d74657372 6168636f692c6174
XMM04=3170633d74657372 6168636f692c3136 XMM05=0000000000000000 00007fc49c2b66e0
XMM06=00007fc49c2b66e0 00007fc49c2b6560 XMM07=00007fc49c2b65a0 00007fc49c2b6580
XMM08=6bfffa92fffe7bff 64e96e27fff77233 XMM09=0000000000000000 00007fc49b412fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003b57230
R8 =ffff888020e30237 R9 =1ffff110041c6046 R10=dffffc0000000000 R11=ffffffff8552a850
R12=dffffc0000000000 R13=ffffffff99d24915 R14=ffffffff9a037060 R15=0000000000000000
RIP=ffffffff8552a8cc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558c486500 ffffffff 00c00000
GS =0000 ffff8881a39f1000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f42193d7dac CR3=000000010e32a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f42193a7498 00007f42193a7470 XMM03=00007f42193a74a8 00007f42193a74a0
XMM04=00007f4219f0d100 00007f42193a7460 XMM05=00007f42193a7478 00007f42193a74c0
XMM06=00007f42193a74b8 00007f42193a74b0 XMM07=00007f42193a74a8 00007f42193a74a0
XMM08=0000000000000000 00007f4219212ee7 XMM09=0000000000000000 00007f4219212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
