last executing test programs:

1m31.590464065s ago: executing program 1 (id=555):
r0 = socket$inet6(0x2d, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0)

1m31.529350595s ago: executing program 1 (id=556):
r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c)
r1 = socket$inet6(0xa, 0x802, 0x88)
setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x9, @empty}, 0x1c)
sendto$inet6(r1, &(0x7f0000000000)="17", 0x1, 0x0, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000a, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8e661, 0x4, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0xa8000000, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0xe, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1m31.528854778s ago: executing program 1 (id=557):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000800000600150005000000280016"], 0x4c}}, 0x0)

1m31.469969885s ago: executing program 1 (id=558):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)

1m31.360235882s ago: executing program 1 (id=559):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10)

1m31.008950533s ago: executing program 1 (id=561):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55)

1m30.872281106s ago: executing program 32 (id=561):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55)

1m24.294086867s ago: executing program 3 (id=598):
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000600)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x9, 0x5, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
read(r0, &(0x7f0000000840)=""/40, 0x28)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x5, 0x400}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x400, 0x55a})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000500)={0x8b, 0xfff, 0x1, 'queue1\x00', 0x80000001})

1m23.939221725s ago: executing program 3 (id=600):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @func={0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x50}, 0x20)

1m23.85828735s ago: executing program 3 (id=603):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x30, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}}, 0x4000)

1m23.790937453s ago: executing program 3 (id=604):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

1m23.678111167s ago: executing program 3 (id=607):
unshare(0x400)
r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
lseek(r0, 0x0, 0x4)

1m22.351046263s ago: executing program 3 (id=632):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)

1m22.263928815s ago: executing program 33 (id=632):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)

43.54015638s ago: executing program 0 (id=1014):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
io_destroy(0x0)

43.4697843s ago: executing program 0 (id=1015):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r2, 0x5, 0x20}, 0xc)

43.420375028s ago: executing program 0 (id=1016):
r0 = socket$kcm(0x29, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x119, 0x487, &(0x7f0000000500), &(0x7f0000000480)=0xfffffffffffffd69)

43.420178144s ago: executing program 0 (id=1017):
syz_mount_image$ext4(&(0x7f0000000640)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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")
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x1, &(0x7f0000000280)="394c11960344487a54ec1fb2791c0e33688ffdda3ebff2392039ff3057bbe8ba5bd90d814ad7db39c3d2bcb22c120c64ecd4ed29369febcd3b609a66d493aa889b1feb0f73130101b750e0b7261ef82e5fbc43b79ffe23d10f420646ef4900181c9e7282e73f5337f7bd358f5eb4e9c24fdf7501a7643232a6d83eea44cbdcf861dd19b4cfebc4dc2bbe")

43.276213302s ago: executing program 0 (id=1018):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x30}}, 0x0)

42.929876689s ago: executing program 0 (id=1019):
socket$inet(0x2, 0x1, 0x0)
socket$inet(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
userfaultfd(0x80801)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0)

42.835477624s ago: executing program 34 (id=1019):
socket$inet(0x2, 0x1, 0x0)
socket$inet(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
userfaultfd(0x80801)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0)

1.264507832s ago: executing program 4 (id=1638):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x4c, r1, 0x1, 0xfffffffd, 0x25dfdbfc, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab}}, {0x8}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x90)

1.168815165s ago: executing program 4 (id=1641):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, &(0x7f0000000040))

1.107726085s ago: executing program 4 (id=1644):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1d, 0x8e, 0xe365e39d0c265083}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20048080)

1.10740366s ago: executing program 4 (id=1647):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0)

1.038586611s ago: executing program 4 (id=1648):
futex(&(0x7f000000cffc)=0x1, 0xd, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x1, 0x0, 0x0, 0x0, 0x3)

899.543017ms ago: executing program 5 (id=1658):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6213, &(0x7f0000000240)="$eJzs3U9vHGcdB/Df7D//KW2jHqoSIeS2AVpK87eEQIG2Bzj0wgHlihK5bhWRAkoCSquIuMqFAy8ChMQREEdOvIAeuHLjBRApQQJ66qCxn8cZL96s43R31n4+H8md+c0z432m3x3vbmZmnwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4u3v//BMFRGXfpEWHIv4XPQjehErTb0WEStrx/L6g4h4Lraa49mIGC5FVLnx6YjXIuLjpyLu3b+13iw6u89+fO9Pf//dj574wd/+MDz1nz/f6L8+ab2bN3/977/cPvj+AgAAQInquq6r9DH/ePp83+u6UwDAXOTX/zrJy9ULV28uWH/UarVafQjrtnpvt9tFRGy2t2neMzgdDwCHzGZ80nUX6JD8izaIiCe67gSw0KquO8BM3Lt/a71K+Vbt14O17fZ8Lciu/Dernfs7Jk2nGb/GZF7PrzvRj2cm9GdlTn1YJDn/3nj+l7bbR2m9Wec/L5PyH23f+lScnH9/PP8xRyf/3p75lyrnP3ik/PvyBwAAAACABZb//f9Yx+d/lx5/V/blYed/1+bUBwAAAAAAAAD4rD3u+H87KuP/AQAAwKJqPqs3fvPUg2WTvoutWX6xinhybH2gMOlmmdWu+wEAAAAAAAAAAAAAJRlsX8N7sYoYRsSTq6t1XTc/beP1o3rc7Q+70vcfStb1H3kAANj28VNj9/JXEcsRcTF9199wdXW1rpdXVuvVemUpv58dLS3XK63PtXnaLFsa7eMN8WBUN79subVd27TPy9Pax39f81ijur+Pjs1Hh4EDQERsvxrd84p0xNT109H1uxwOB8f/0eP4Zz+6fp4CAAAAs1fXdV2lr/M+ns7597ruFAAwF/n1f/y8gFqtVqvV6qNXt9V7u90uImKzvU3znsFw/ABwyGzGJ113gQ7Jv2iDiHiu604AC63qugPMxL37t9arlG/Vfj1I47vna0F25b9ZbW2Xt99rOs34NSbzen7diX48M6E/z86pD4sk598bz//SdvsorTfr/OdlUv7Nfh7roD9dy/n3x/Mfc3Ty7+2Zf6ly/oNHyr8vfwAAAAAAWGD53/+PLdT539FBd2eqh53/XZvZowIAAAAAAADAbN27f2s93/eaz/9/YY/13P95NOX8K/kXKeef7v/fufDmpbH1+q35u289yP9f92+t//7GPz+fp/vNfynPVOmZVaVnRJUeqRqk6QF3bII7w/6oeaRh1esP0jU/9fDduBJXYyNO71q3l46HB+1ndrU3PR1utdf97fazu9oHO+15+3O72ofpSqd6JbefjPX4aVyNd7bam7alKfu/PKW9ntKe8+87/ouU8x+0fpr8V1N7NTZt3P2o93/HfXu61+O8eeWLvzo9+92Z6k70d/atrdm/Fzroz9b/kydG8fPrG9dO3rx848a1M5Emu5aejTT5jOX8h+kn5//Si9vt+e9++3i9+9HokfNfFHdiMDH/F1vzzf6+POe+dSHnP0o/Of93Uvvex/9hzn/y8f9KB/0BAAAAAAAAAAAAAACAh6nreusW0Tcj4ny6/6erezMBgPnKr/91kpfPq+4fdPs/7t6PrvqvVs+5rhasP3OtP61n/XhvL9T+qg9U/3fB+rNwdVu9tzfaRUT8tb1N857hl3v9MgBgkX0aEf/ouhN0Rv4Fy9/310xPdN0ZYK6uf/Dhjy9fvbpx7XrXPQEAAAAAAAAADiqP/7nWGv/5RF3Xt8fW2zX+61ux9rjjfw7yzM4AoxMGqu4/+j49TC+i32sNN/58TBr/e7gz97DxvwdTHm84pX00pX1pSvvylPY9b/Royfk/3xrv/EREHB8bfr2E8V/Hx7wvQc7/hdbzucn/K2PrtfOvf3uY8+/tyv/Ujfd/dur6Bx++euX9y+9tvLfxk3Nnzpw+d/78hQsXTr175erG6e3/dtjj2cr557GvXQdalpx/zlz+Zcn5fynV8i9Lzv/LqZZ/WXL++f2e/MuS88+ffeRflpz/y6mWf1ly/l9NtfzLkvN/JdXyL0vO/2upln9Zcv6vplr+Zcn5n0y1/MuS8z+V6n3mvzLrfjEfOf98hsvxX5acf76yQf5lyfmfTbX8y5LzP5dq+Zcl5/9aquVflpz/11Mt/7Lk/M+nWv5lyfl/I9XyL0vO/0Kq5V+WnP83Uy3/suT8v5Vq+Zcl5/96quVflpz/t1Mt/7Lk/L+TavmXJef/3VTLvyw5/zdSLf+yPPj+fzNmzJjJM13/ZQIAAAAAAAAAAAAAxs3jcuKu9xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+B87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLevcXIddd3AD+zN28cSAyE1ElN2DjGGGeTXV/iC62LCdeGW0kIhV6wXe/aLPiG1y6BRrWjQImEUVFF2/DQFhBq81JhVTzQClAeUKtKlaB9oC+ICpWHqAooIFWlFWSrmfP//3dmdnZm1zvenDnn85GSX3bmzJwzZ/4zu1873x0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmt35htlP1bIsq9Vq+QWbsuxF9XnDxKbGJa99YY8PAAAAWLtfNP793M3pgsMruFHTNv90x7e/urCwsJC9b/hPRz+3sJCumMiy0Q1Z1rguuvqD99eatwkez8ZrQ01fD/XY/XCP60d6XD/a4/qxHtdv6HH9eI/rl5yAJW7IaunOtjX+c1N+SrNbstHGdds63Orx2oah+rlLt81qjdssjJ7I5rJT2Ww23bJ9vm2tsf3X76zv661Z3NdQ07621FfITx49Ho+hFs7xtpZ9Ld5n9KPXZxM//cmjx//6wrO3dZo9T0PL/eXHuWNr/Tg/ES7Jj7WWbUjnJB7nUNNxbunwnAy3HGetcbv6f7cf53MrPM7hxcNcV+3P+Xg21Pjv7zTO00gt63CetoTLfnZXlmWXFw+7fZsl+8qGso0tlwwtPj/j+Yqs30d9Kb00G1nVOr1zBeu0Pme2ta7T9tdEfP7vDLcbWeYYmp+mHz021vS8/3zhWtZpVH/Uy71W2tdgv18rRVmDcV18p/Ggn+i4BreFx//o9uXXYMe102ENpsfdtAa39lqDQ2PDjWNOT0KtcZvFNbirZfvhxp5qjfnM9u5rcOrC6XNT8x/7+D1zp4+dnD05e2bPrl3Te/btO3DgwNSJuVOz0/m/r/FsF9/GbCi9BraGcxdfA69u27Z5qS58cWzJ+++1vg7Hu7wON7Vt2+/X4Uj7g6utzwty6ZrOXxvvqZ/08StD2TKvscbzs3Ptr8P0uJtehyNNr8OO31M6vA5HVvA6rG9zbufKfmYZafqn0zEs/71gbWtwU9MabP95pH0N9vvnkaKswfGwLr63c/nvBVvC8T4xudqfR4aXrMH0cMN7T/2S9PP++IHG6LQub69fceNYdnF+9vy9jxy7cOH8riyMdfGyprXSvl43Nj2mbMl6HVr1ej08d8cTt3e4fFM4V+P31P81vuxzVd9m773dn6vGd7fO57Pl0t1ZGH223uez03fz+vkcy7LPf+uxB7/x6OffsOz5rOfNT0yt/WfxlEub3n9Hl3n/jbn/+Xx/6a4eHx4dyV+/w+nsjLa8H7c+VSON965aY9/PTa3s/Xg0/LPe78e3dHk/3ty2bb/fj0fbH1x8P671+tOOtWl/PsfDOjk13f39uL7N5t2rXZMjXd+P7wqzFs7/a0JSSLmoae0st27TvkZGRsPjGol7aF2ne1q2Hw3ZrL6vp3Zf2zrdcVd+X8Pp0S1ar3U60bZtv9dp+rOv5dZprdefvl2b9udzPKyLW/Z0X6f1bZ7eu/b3zhvifza9d471WoOjw2P1Yx5Ni7Dxfp8t3BDX4L3Z8exsdiqbaVw71lhPtca+Ju9b2RocC/+s93vl5i5rcEfbtv1eg+n72HJrrzay9MH3QfvzOR7WxZP3dV+D9W3euL+/P7vuCJekbZp+dm3/87Xl/szr9rbTdL3Wykg4zm/t7/5ns/VtTh1Ybc7sfp7uDpfc2OE8tb9+l3tNzWTrc542h+N89sDy56l+PPVtPndwhevpcJZllz5yf+PPe8Pfr/zdxe9+teXvXTr9nc6lj9z/4xef+MfVHD8Ag+/5fGzMv9c1/c3USv7+HwAAABgIMfcPhZnI/wAAAFAaMffH/ys8kf8BAACgNGLuHwkzqUj+3/zGZ+eev5SlZv5CEK9Pp+GBfLvYcZ0OX08sLKpffv+XZ//7Hy6tbN9DWZb9/IE/6Lj95gficeUmwnFefVPr5Ut89Z4V7fvow5fSfpv7618I9x8fz0qXQacK7nSWZV+/+TON/Uy8/0pjPv3A0cZ88PITj9e3ee5g/nW8/TMvy7f/i1D+PXziWMvtnwnn4YdhTr+t8/mIt/vKldds2f/exf3F29W23tR42E9+IL/f+HtyPvt4vn08z8sd/zc+/dRX6ts/8qrOx39pqPPxPxXu98th/u8r8u2bn4P61/F2nwzHH/cXb3fvl77Z8fivfirf/tyb8+2Ohhn3vyN8ve3Nz841n69HasdaHlf2lny7uP/p7/5x4/p4f/H+249//MiVlvPRvj6e/rf8fqbato+Xx/1Ef9+2//r9NK/PuP+n/uhoy3nutf+rDz7zivr9tu//7rbtzn1kZ2P/i/fX+hub/vKTn+m4v3g8h//2XMvjOfzu8DoO+3/yA2E9huv/72p+f+2/XeHou1vff+L2X9h0qeXxRG/9ab7/q6872Zgbxm/YeOOLXnzT5VfWz12WfWdDfn+99n/yr862HP8Xb83PR7w+dvTb97+cuP/zH508c3b+4txMOquP3tz43Tlvz48nHu/N4b21/esjZy98cPb8xPTEdJZNlPdX6F2zL4X543xc7r71wpJ30J0Ph+fz9j//+sbt//rpePm/vye//Mrb8u9brw7bfTZcvik8f6vb/1JP3nlr4/Vdezoc4cLS3xe8Flu2/deBFW0YHn/7zwVxvZ97+Qcb56F+XeP7Rnxdr/H4vz+T38/XwnldCL+Zeeuti/tr3j7+boQrD+Wv9zWfv/A2F5/XvwnP9zt+mN9/PK74eL8ffo755ubW97u4Pr52aaj9/hu/xeNyeD/JLufXx63i+b7y3K0dDy/+HpLs8m2Nr/8k3c9tq3qYy5n/2PzUqbkzFx+ZujA7f2Fq/mMfP3L67MUzF440fpfnkQ/1uv3i+9PGxvvTzOy+vVnj3epsPq6zF/r4zz18fGb/9PaZ2RPHLp648PC52fMnj8/PH5+dmd9+7MSJ2Y/2uv3czKFduw/u2b978uTczKEDBw/uOTg5d+Zs/TDyg+ph3/SHJ8+cP9K4yfyhvQd33Xff3unJ02dnZg/tn56evNjr9o3vTZP1W//+5PnZU8cuzJ2enZyf+/jsoV0H9+3b3fO3AZ4+d2J+Yur8xTNTF+dnz0/lj2XiQuPi+ve+XrennOb/I/95tl0t/0V82bvu3pd+P2vdlx9b9q7yTdp+geiz4XfR/PNLzh1Yydcx94+GmVQk/wMAAEAVxNw/FmYi/wMAAEBpxNy/IcxE/gcAAIDSiLl/PMykIvm/dP3/zZdWtH/9f/3/5vOl/1+x/v9DRev/5+8X+v/9sdb+vf5/oP+v/6//r/+v/08fFK3/H3P/DVlWyfwPAAAAVRBz/8YwE/kfAAAASiPm/hvDTOR/AAAAKI2Y+18UZlKR/K//r/+v/6//r//fef/6/4NJ/787/f8e9P+nsmr1/y/38/j1//X/Wapo/f+Y+18cZlKR/A8AAABVEHP/TWEm8j8AAACURsz9N4eZyP8AAABQGjH3bwozqUj+1//X/9f/1//X/++8f/3/waT/353+fw/6/z7/X/9f/5++Klr/P+b+l4SZVCT/AwAAQBXE3P/SMBP5HwAAAIpn5NpuFnP/y8JMluT/a9wBAAAA8IKLuf+WrK0IXpG//9f/1/8vfv9/Q7pO/1//Pytk/3840/8vDv3/7vT/e9D/1//X/9f/p6+K1v9v5P5sPHt5mElF8j8AAABUQcz9t4aZyP8AAABQGjH3/1KYifwPAAAApRFz/+Ywk4rkf/1//f/i9/99/r/+f9H7/z7/v0j0/7vT/+9B/1//X/9f/5++Klr/P+b+28JMKpL/AQAAoApi7r89zET+BwAAgNKIuf+Xw0zkfwAAACiNmPu3hJlUJP/r/xe8/x+bo/r/+v/6//r/+v8rov/fnf5/D/r/+v/6//r/9FXR+v8x978izKQi+R8AAACqIOb+O8JM5H8AAAAojZj7XxlmIv8DAABAacTcPxFmUpH8r/9f8P5/3oMf8/n/+v/6//r/+v8ro//fnf5/D/r/+v996f8vXNL/1/8nV7T+f8z9d4aZVCT/AwAAQBXE3L81zET+BwAAgNKIuf+uMBP5HwAAAEoj5v5tYSYVyf/6/wPR/8/0//X/9f/1//X/V0b/vzv9/x70//X/ff6//j99VbT+f8z9rwozqUj+BwAAgCqIuX97mIn8DwAAAKURc/+rw0zkfwAAACiNmPt3hJlUJP/r/+v/6//r/+v/d96//v9g0v/vTv+/B/1//X/9f/1/+qpo/f+Y+18TZlKR/A8AAABVEHP/zjAT+R8AAABKI+b+u8NM5H8AAAAojZj7J8NMKpL/9f/1//X/9f/1/zvvX/9/MOn/d6f/34P+v/6//r/+P31VtP5/zP33hJlUJP8DAABAFcTcf2+YifwPAAAApRFz/1SYifwPAAAApRFz/3SYSUXyv/6//r/+v/7/qvr/r1y8X/3/nP5/sej/d6f/34P+v/7/C97/H9X/p1SK1v+PuX9XmElF8j8AAABUQcz9u8NM5H8AAAAojZj794SZyP8AAABQGjH37w0zqUj+1//X/9f/1//3+f+d96//P5j0/7vrf/8/PkT9f/1//X+f/6//z1JF6//H3H9fmElF8j8AAABUQcz9+8JM5H8AAAAojZj794eZyP8AAABQGjH3HwgzqUj+1//X/9f/1//X/++8f/3/waT/353P/+9B/1//X/9f/581eugPm78qWv8/5v6DYSYVyf8AAABQBTH3vzbMRP4HAACA0oi5/1fCTOR/AAAAKI2Y+381zKQi+V//v6V7Xn+4+v/6//r/+v8N+v+DSf+/O/3/HvT/9f/1//X/6atl+/8heq93/z/m/kNhJhXJ/wAAAFAFMff/WpiJ/A8AAAClEXP/68JM5H8AAAAojZj7D4eZVCT/6//7/H/9f/1//f/O+1/v/v9YvF/9/zXR/+9O/78H/X/9f/1//X/6qmif/x9z/+vDTCqS/wEAAKAKYu6/P8xE/gcAAIDSiLn/DWEm8j8AAACURsz9bwwzqUj+1//X/x+U/v+N+v/6/22Pp2z9f5//3x/6/93p//eg/6//r/+v/09fFa3/H3P/m8JMKpL/AQAAoApi7n9zmIn8DwAAAKURc/9bwkzkfwAAACiNmPvfGmZSkfyv/6//Pyj9/0z/X/+/7fHo/+v/d6L/353+fw/6//r/+v/6//RV0fr/Mff/ephJRfI/AAAAVEHM/Q+Emcj/AAAAUBox978tzET+BwAAgNKIuf/tYSYVyf/6//r/+v/6//r/nfev/z+Y9P+7G7D+/y9uCpfr/+f0/4t9/Kvt/4+0fX1d+v8/WK7/v7Ch/fb6/1wPRev/x9z/jjCTiuR/AAAAqIKY+98ZZiL/AwAAQGnE3P+uMBP5HwAAAEoj5v7fCDOpSP7X/68fx2J7Wf+/rP3/If1//X/9/4rQ/+9uwPr/Pv+/jf5/sY/f5//r/7NU0fr/Mfe/O8ykIvkfAAAAqiDm/gfDTOR/AAAAKI2Y+x8KM5H/AQAAoDRi7n9PmElF8r/+v8//r0b/3+f/Z/r/+v8Vof/fnf5/D/r/+v9F6///p/4/g61o/f+Y+x8OM6lI/gcAAIAqiLn/vWEm8j8AAACURsz9vxlmIv8DAABAacTc/74wk4rkf/3/Qen/Twxo//8x/f/r2P+/46Z8O/1//X8W6f93p//fg/6//n/R+v8+/58BV7T+f8z97w8zWXn+H1/xlgAAAMALIub+3wozqcjf/wMAAEAVxNz/22Em8j8AAACURsz9vxNmUpH8r/8/KP1/n/+f6f/7/P+2x6P/r//fyfr1/+M7j/6//r/+f6T/r/+v/0+7ovX/Y+7/3TCTiuR/AAAAqIKY+z8QZiL/AwAAwEDo9P9kt4u5/0iYifwPAAAApRFz/9Ewk4rkf/1//X/9/4L2//9s679879vvPLpL/1//X/9/Vdb18//rL36f/6//r/+f6P/r/+v/065o/f+Y+4+FmVQk/wMAAEAVxNz/e2Em8j8AAACURsz9x8NM5H8AAAAojZj7Z8JMKpL/9f/1//X/C9r/H+DP/4/nQ/+/Vd/6//FNV/+/o7x/n1bR9e3/v3exJ67/v9r+/1jHS/X/9f8H+fj1//X/Wapo/f+Y+2fDTCqS/wEAAKAKQu4fOpHPxSvkfwAAACiNmPtPhpnI/wAAAFAaMfd/MMykIvlf/1//X/9f/9/n/3fef7f+f23E5/8XVerf/6zxQtH/b1Oc/n9n+v/6/4N8/Pr/+v8sVbT+f8z9c2EmFcn/AAAAUAUx938ozET+BwAAgNKIuf/DYSbyPwAAAJRGzP2nwkwqkv/1//X/9f/1//X/O++/sJ//r//f1Vr79/r/gf5/tfv//6P/r/+v/09/FK3/H3P/6TCTiuR/AAAAqIKY+8+Emcj/8P/s3UmTXfV5x/HTiUCtIovsssgmVVnmJbBI1skLyCKbbFKVyiITSciMyDySQELmhEDm2GAbDMbYBs8D2MbYeAbbeJ4HPGFsSi5az/NI3X363G717b7n/P+fz0KPaau515RK4qfW1wcAAKAZuft/IW6x/wEAAKAZuft/MW7pZP/r/4/T/1+qlPX/u9//6v4/X/EE+/8f1f8f9Pr6f/1/y/T/0/T/K4z3/1cPw9BX/+/5//p//T9rMrf+P3f/L8Utnex/AAAA6EHu/l+OW+x/AAAAaEbu/uviFvsfAAAAmpG7/1filk72/57+f2vos//PjNfz/z3/X/+v/9f/L9zp9v83Pv8zn/7/0P3/XbesetmZ9v8tPv//6rEPbrqfP65Nv/9D9v9nD/p8/T8tmlv/n7v/V+OWTvY/AAAA9CB3/6/FLfY/AAAANCN3//Vxi/0PAAAAzcjd/+txSyf7f33P/z+38/GF9v9F/6//3/mA/l//r/9fLM//n9bT8/+ve/yan3/6vh+8/yiv31H/P2rT/fzS37/n/+v/2W9u/X/u/t+IWzrZ/wAAANCD3P2/GbfY/wAAANCM3P2/FbfY/wAAANCM3P2/Hbd0sv/X1/8v+vn/Rf+v/9/5gP5f/6//Xyz9/7Se+v8reX39v/5f/6//Z73m1v/n7v+duKWT/Q8AAAA9yN3/u3GL/Q8AAADNyN1/Q9xi/wMAAEAzcvefj1s62f/6/5Pv/5/T/+v/4+r/9f/6/5On/5+m/19B/6//1//r/1mrufX/uftvjFs62f8AAADQg9z9vxe32P8AAADQjNz9vx+32P8AAADQjNz9fxC3dLL/9f+e/6//1//r/8dfX/+/TPr/afr/FfT/x+3nr9L/6//1/1zuiP3/sxM/ba+l/8/d/4dxSyf7HwAAAHqQu/+P4hb7HwAAAJqRu/+P4xb7HwAAAJqRu/9P4pZO9r/+X/+v/9f/X3H/v/+H3g79/zj9/+nQ/0+bTf+/dWb0w/r/xff/nv+v/9f/s8vcnv+fu/9P45ZO9j8AAAD0IHf/n8UtE/v/yL+ZDwAAAGxU7v4/j1t8/R8AAAAWL6uz3P1/Ebd0sv/1//p//b/+3/P/x19/qv+//7L3p/+fF/3/tNn0/wfQ/+v/l/z+9f/6f/abW/+fu/8v45ZO9j8AAAD0IHf/TXGL/Q8AAADNyN3/V3GL/Q8AAADNyN3/13FLJ/t/vP+/9N/r/w9H/7/7/ev/x398rKv/z7+j/n+y//8xz//vk/5/2un3/2f1/7v//vr/E7Tp9994/39u1efr/xkzt/4/d//NcUsn+x8AAAB6kLv/lrjF/gcAAIBm5O7/m7jF/gcAAIBm5O7/27ilk/3v+f/6f/3/8vp/z/+/aJPP/x9Ovf8/o/8/JP3/NM//X0H/r//X/3v+P2s1t/4/d/+tcUsn+x8AAAB6cOszw87u/7thsP8BAABgiS7/swN7/0BpyN3/93GL/Q8AAADNyN3/D3FLJ/tf/6//1//r//X/469/1P5/1YORPf//dOj/p+n/V9D/n0Q/f6ax/v+2gz5/Dv3/Dfp/ZmZX///gpY9vqv/P3f+PcUsn+x8AAAB6kLv/n+IW+x8AAACakbv/n+MW+x8AAACakbv/X+KWTvb/iff/E0Gs/l//r//X/7fU/6+i/z8d+v9p+v8V9P+e/+/5//p/1upS/7/758NN9f+5+/81bulk/wMAAEAPcvf/W9xi/wMAAEAzcvffFrfY/wAAANCM3P3/Hrd0sv89/1//r//X/+v/x19f/79M+v9p+v8V9P/6f/2//p+12vX8/8tsqv/P3X973NLJ/gcAAIAe5O6/I26x/wEAAKAZufv/I26x/wEAAKAZufv/M27pZP/r/0+2/8+P6//1/4P+X/+v/z8V3fb/W2O/Eu13QP//yM+e/4ndH9H/6//1//p//T9rMIv+/8Klf7vM3f9fcUsn+x8AAAB6kLv/v+MW+x8AAACakbv/f+IW+x8AAACakbv/f+OWI+7/71/ruzo9+n/P/9f/6//1/+Ovr/9fpm77/0Py/P8V9P/6f/2//p+1mkX/f9lf5+7/v7jF1/8BAACgGbn7/z9usf8BAACgGbn7XxC32P8AAADQjNz9L4xbOtn/+n/9v/5f/6//H3/9K+3/t4dx+v/Tof+fpv9fQf+v/9f/6/9Zq7n1/7n774xbOtn/AAAA0IPc/XfFLfY/AAAANCN3/4viFvsfAAAAmpG7/8VxSyf7X/+v/9f/6//1/+Ov7/n/y6T/n6b/H4bh7ok3MNb/Xzir/9f/6//1/1yhufX/uftfErd0sv8BAACgB7n7745b7H8AAABoRu7+e+IW+x8AAACakbv/pXFLJ/tf/6//1//r//X/46+v/18m/f80/f8Knv+v/9f/6/9Zq7n1/7n7741bOtn/AAAA0IPc/ffFLfY/AAAANCN3/8viFvsfAAAAmpG7//64pZP9r//X/+v/9f8n0v+f1//vpf8/HSfX/w/6f/2//n8F/b/+X//PXqfV/z8bP9+v6v9z9788bulk/wMAAEAPcvc/ELfY/wAAANCM3P2viFvsfwAAAGhG7v5Xxi2d7H/9v/5f/6//9/z/8dfX/y+T5/9P0/+voP/X/+v/9f+s1Wn1/wf1/nv/Onf/q+KWTvY/AAAA9CB3/4Nxi/0PAAAAzcjd/1DcYv8DAABAM3L3vzpu6WT/6//1/7v7/2HQ/+v/9f8XnUL/vz3o/9dO/z9N/7+C/r/N/v97hob6/3MHfr7+nzmaW/+fu/81cUsn+x8AAAB6kLv/tXGL/Q8AAADNyN3/urjF/gcAAIBm5O5/fdzS0v5/7uD0bfn9/9k9n6j/H4bhies9/1//P/H6+v/Z9P/1T1X/vz76/2n6/xX0/232/57/r/9nY+bW/+fuf0Pc0tL+BwAAgM7l7n9j3GL/AwAAQDNy978pbrH/AQAAoBm5+98ct3Sy/5ff/+/9RP3/cKzn/+v/dz6g/9f/6/8X67j9/e3b8Wua/l//r/8f7ee3Dvj3nkH/r//X/zNibv1/7v63xC2d7H8AAADoQe7+h+MW+x8AAACakbv/kbjF/gcAAIBm5O5/a9zSyf7X/+v/9f/L7P+39f/6f/3/qLk8///aa3/8Mf2//r/F/n+K/l//r/9nr7n1/7n73xa3dLL/AQAAoAe5+98et9j/AAAA0Izc/Y/GLfY/AAAANOPRnZBze3jHMHS5//f3/1cNFwvVi8b6/2jU9P+X0f/vfv/6//EfH57/r//X/5+8ufT/nv9/Ze9f/6//X/L7P1L//0P7P1//T4vm1v/n7n8sbulk/wMAAEAPcve/M26x/wEAAKAZufvfFbfY/wAAANCM3P2Pxy2d7H/P/9f/6//1//r/8dfX/y+T/n+a/n8F/f/x+/n8WVX/v9zn/3+v/p/1mVv/n7v/3XHLzvD74e+7wv+ZAAAAwIzk7n9P3NLJ1/8BAACgB7n73xu32P8AAADQjNz974tbOtn/+n/9v/5f/6//H399/f8y6f+n6f9X6Kf/3x774Kb7+ePa9Ptvpv/3/H/WaG79f+7+98ctnex/AAAAaNszO9/m7v9A3GL/AwAAQDNy938wbrH/AQAAoBm5+5+IWzrZ//p//X/7/f9P6//3vL7+X//fMv1//oo+Tv+/Qj/9/6hN9/NLf//6f/0/+82t/8/d/2Tc0sn+BwAAgB7k7v9Q3GL/AwAAQDNy9384brH/AQAAoBm5+z8StzSx/8+s/B76/776/62hx/7f8//1//r/niyn/79j9Bdpz//X/+v/l/v+9f/6f/abW/+fu/+prTMN7n8AAABo10/+yM89edjv+9TOt9vDR+MW+x8AAACakbv/Y3GL/Q8AAADNyN3/8bilk/2v/++r/+/z+f/6f/2//r8ny+n/x+n/9f/6/+W+f/2//p/95tb/5+7/RNxy2fBb/f+iBwAAAJyqq4/23XP3fzJu6eTr/wAAANCD3P2filv27f8Lh/xT7QAAAMDc5O7/dNzSydf/9f8z7/+HE+r/4/vp/y/S/+v/x15f/79M+v9px+z/L2zp//X/E/T/+n/9P3vNrf/P3f/AvUOX+x8AAAAatet3FD6z8+328Nm4xf4HAACAZuTu/1zcYv8DAABAM3L3fz5u6WT/6/9n3v9f0fP/z9V/8vz/zvv/m7ZHX1//r/9vmf5/muf/r6D/1//r//X/rNUR+v+dQXrS/X/u/i/ELZ3sfwAAAOhB7v4vxi32PwAAADQjd/+X4hb7HwAAAJqRu//LcUsn+1//v4H+/+azw3Ci/f8hnv+v/++j/z/g9dvp/3/gmvMP/9TP3HOn/p9LTrP/zx8L+n/9v/7/Iv2//l//z15ze/5/7v6vxC2d7H8AAADoQe7+p+MW+x8AAACakbv/q3HL8/v/oU29KwAAAGCdcvd/LW7p5Ov/+v8Wn/+/zP4//1lvoP8/v7z+P5vi3vt/z//X/+/n+f/T9P8r6P/1//p//T9rNbf+P3f/1+OWTvY/AAAA9CB3/zfiltz/W0f+rXsAAABgZnL3fzNu8fV/AAAAaEbu/mfilk72v/5f/z+X/j95/v+lz/P8/4v0//r/o9D/T9P/r6D/1//r//X/rNXc+v/c/d+KWzrZ/wAAANCD3P3Pxi32PwAAADQjd/+34xb7HwAAAJqRu/87cUsn+1//r//X/+v/9f/jr6//Xyb9/zT9/wr6f/2//l//z1rNrf/P3f/dAAAA//9ky21Q")
chdir(&(0x7f0000000040)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)

679.733246ms ago: executing program 5 (id=1666):
r0 = socket$kcm(0x2d, 0x2, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x100000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x41)

619.184156ms ago: executing program 5 (id=1670):
r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000200))
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0x100000, 0x71, 0x0, {r0}}, 0x20)

559.654911ms ago: executing program 5 (id=1672):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV4={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080)

559.398353ms ago: executing program 5 (id=1673):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES64, @ANYBLOB="a783c89422e31c30d6bf831c4426922089e2b8944eda733c7bed9440aee9df8636110f251ff75794e847bbad8f5979c9d55434d5344bc268e61948fc8a8ffe2d27c14972f79c1c977c01b4a8a4e35f14d116c59482add0c31e922b29fb4c24948818edc636cced878ca31c24c6a3a31bcdca27864f7611d3163d21939c3c5afb70", @ANYRESOCT], 0xfa, 0x61ee, &(0x7f0000012cc0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

559.07427ms ago: executing program 2 (id=1674):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x8000}, 0x12, [0xff03, 0x6, 0x0, 0x0, 0x1, 0x420000, 0x0, 0x10000, 0x4, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffff, 0x100000, 0x6, 0x0, 0x2, 0xffffffff, 0x0, 0x3, 0x0, 0x20, 0x3, 0x200, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x1, 0x0, 0x0, 0xdffffffc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x20000000, 0x40000000, 0x0, 0x800000, 0x7fffffff, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x7, 0x8, 0x0, 0xfffffffc, 0x9, 0x8c, 0x0, 0x0, 0x5, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c1b, 0x80, 0x0, 0x0, 0x8000], [0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa79d, 0xfffffffd, 0x0, 0x0, 0xc, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x3, 0x8000000, 0x520, 0xffffffff, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffc, 0xaf, 0x10001, 0x9, 0x1, 0x0, 0x3, 0xfffffffe, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000005, 0x0, 0x5, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x8], [0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0xe17, 0xe, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2, 0x8000001, 0x1, 0x7fff, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x5, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x3, 0x3, 0xfffffffd, 0x53591b27, 0x0, 0x0, 0x0, 0x0, 0x1000008, 0x7, 0xd86, 0x0, 0x10000, 0x80000000, 0x1000000]}, 0x45c)

500.040743ms ago: executing program 2 (id=1675):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x101, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
ioctl$TCSETS(r0, 0x40204706, 0x0)

499.947405ms ago: executing program 2 (id=1676):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0xd}}, 0x14}}, 0x20000814)

447.25332ms ago: executing program 2 (id=1677):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv4_newroute={0x24, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_IP_PROTO={0x5, 0x1b, 0x3a}]}, 0x24}}, 0x24008800)

447.022194ms ago: executing program 2 (id=1678):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d711877000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

367.768001ms ago: executing program 2 (id=1679):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000000000000001}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001c0001"], 0x14}}, 0x0)

271.744143ms ago: executing program 5 (id=1680):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0)
close(r0)

0s ago: executing program 4 (id=1681):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f000056f000/0x2000)=nil, 0x2000, 0x1)
syz_clone(0x40008000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)

kernel console output (not intermixed with test programs):

evice loop2): using free-space-tree
[  105.011677][ T7365] 8021q: adding VLAN 0 to HW filter on device team0
[  105.029782][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.032385][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.037041][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.039884][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.155004][ T5847] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  105.261766][ T7365] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.328872][ T5235] Bluetooth: hci2: command tx timeout
[  105.361856][ T7365] veth0_vlan: entered promiscuous mode
[  105.380190][ T7365] veth1_vlan: entered promiscuous mode
[  105.408878][ T7483] pim6reg0: tun_chr_ioctl cmd 1074812118
[  105.450131][ T7365] veth0_macvtap: entered promiscuous mode
[  105.456455][ T7365] veth1_macvtap: entered promiscuous mode
[  105.489553][ T7365] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.500954][ T7365] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.522963][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.532499][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.535896][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.600827][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.667583][ T1087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.681727][ T1087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.757170][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.764420][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.938080][ T7512] loop2: detected capacity change from 0 to 1024
[  106.011838][   T36] hfsplus: b-tree write err: -5, ino 4
[  106.265114][ T7527] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  106.338734][   T33] audit: type=1107 audit(1755055672.964:14): pid=7521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  106.778864][ T7539] Bluetooth: MGMT ver 1.23
[  107.398559][   T54] Bluetooth: hci2: command tx timeout
[  107.834057][ T7572] loop3: detected capacity change from 0 to 128
[  107.849979][ T7572] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  107.874801][ T7572] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  107.877603][ T7574] mkiss: ax0: crc mode is auto.
[  107.902508][ T7572] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05
[  107.906896][ T7572] UDF-fs: error (device loop3): udf_count_free_bitmap: udf_count_free failed
[  107.920461][ T7576] loop0: detected capacity change from 0 to 1024
[  107.942776][ T7365] UDF-fs: error (device loop3): udf_read_inode: (ino 104) failed !bh
[  107.946153][ T7365] UDF-fs: error (device loop3): udf_read_inode: (ino 104) failed !bh
[  108.049864][ T7584] loop0: detected capacity change from 0 to 128
[  108.054334][ T7584] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  108.064146][ T7584] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  108.715239][ T7603] loop2: detected capacity change from 0 to 8
[  108.724638][ T7603] SQUASHFS error: Unable to read directory block [629:46]
[  108.807574][ T7608] loop2: detected capacity change from 0 to 2048
[  108.824472][ T7608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.830402][ T7608] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.838317][ T5235] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  108.852829][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.017004][ T7620] loop0: detected capacity change from 0 to 512
[  109.025934][ T7620] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  109.043017][ T7620] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.622: invalid indirect mapped block 83886080 (level 1)
[  109.058717][ T7620] EXT4-fs (loop0): Remounting filesystem read-only
[  109.061145][ T7620] EXT4-fs (loop0): 1 orphan inode deleted
[  109.063154][ T7620] EXT4-fs (loop0): 1 truncate cleaned up
[  109.065846][ T7620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.082037][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.624'.
[  109.086487][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.321384][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.429855][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.540485][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  109.543696][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  109.546899][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  109.552653][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  109.556672][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  109.585790][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.831616][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.004029][   T12] bridge_slave_1: left allmulticast mode
[  110.010946][   T12] bridge_slave_1: left promiscuous mode
[  110.016198][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.021344][   T12] bridge_slave_0: left allmulticast mode
[  110.023675][   T12] bridge_slave_0: left promiscuous mode
[  110.026781][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.056389][   T24] IPVS: starting estimator thread 0...
[  110.114201][ T7657] tmpfs: Bad value for 'mpol'
[  110.159112][ T7655] IPVS: using max 78 ests per chain, 187200 per kthread
[  110.410259][ T7659] loop0: detected capacity change from 0 to 40427
[  110.413168][ T7659] F2FS-fs: heap/no_heap options were deprecated
[  110.419455][ T7659] F2FS-fs (loop0): build fault injection rate: 19
[  110.421817][ T7659] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  110.429993][ T7659] F2FS-fs (loop0): invalid crc value
[  110.463356][ T7659] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  110.483367][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  110.489329][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  110.494022][   T12] bond0 (unregistering): Released all slaves
[  110.505208][ T7646] chnl_net:caif_netlink_parms(): no params data found
[  110.509965][ T7659] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[  110.527186][ T7659] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  110.535583][ T7659] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  110.565855][ T7659] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  110.615219][ T7659] syz.0.637: attempt to access beyond end of device
[  110.615219][ T7659] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  110.627999][ T7659] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of f2fs_mpage_readpages+0x18df/0x1ac0
[  110.634721][ T7659] syz.0.637: attempt to access beyond end of device
[  110.634721][ T7659] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  110.670686][ T5843] syz-executor: attempt to access beyond end of device
[  110.670686][ T5843] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  110.685349][ T5843] CPU: 1 UID: 0 PID: 5843 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  110.685371][ T5843] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  110.685378][ T5843] Call Trace:
[  110.685383][ T5843]  <TASK>
[  110.685415][ T5843]  dump_stack_lvl+0x189/0x250
[  110.685437][ T5843]  ? __pfx_dump_stack_lvl+0x10/0x10
[  110.685451][ T5843]  ? __pfx_queue_work_on+0x10/0x10
[  110.685462][ T5843]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  110.685476][ T5843]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  110.685498][ T5843]  f2fs_handle_critical_error+0x37c/0x540
[  110.685519][ T5843]  f2fs_write_end_io+0x886/0xb60
[  110.685550][ T5843]  __submit_merged_bio+0x27a/0x6a0
[  110.685570][ T5843]  __submit_merged_write_cond+0x255/0x530
[  110.685590][ T5843]  f2fs_write_data_pages+0x261d/0x3000
[  110.685631][ T5843]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  110.685692][ T5843]  ? __lock_acquire+0xab9/0xd20
[  110.685725][ T5843]  ? do_raw_spin_lock+0x121/0x290
[  110.685746][ T5843]  ? do_raw_spin_unlock+0x4d/0x240
[  110.685757][ T5843]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  110.685767][ T5843]  do_writepages+0x32e/0x550
[  110.685782][ T5843]  ? do_raw_spin_unlock+0x4d/0x240
[  110.685792][ T5843]  filemap_fdatawrite+0x199/0x240
[  110.685802][ T5843]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  110.685830][ T5843]  ? do_raw_spin_unlock+0x4d/0x240
[  110.685840][ T5843]  f2fs_sync_dirty_inodes+0x31f/0x830
[  110.685856][ T5843]  f2fs_write_checkpoint+0x95a/0x1df0
[  110.685876][ T5843]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  110.685905][ T5843]  ? kill_f2fs_super+0x298/0x6c0
[  110.685916][ T5843]  kill_f2fs_super+0x2c3/0x6c0
[  110.685929][ T5843]  ? __pfx_kill_f2fs_super+0x10/0x10
[  110.685937][ T5843]  ? radix_tree_delete_item+0x2b6/0x400
[  110.685949][ T5843]  ? shrinker_free+0x2ce/0x3e0
[  110.685957][ T5843]  deactivate_locked_super+0xbc/0x130
[  110.685968][ T5843]  cleanup_mnt+0x425/0x4c0
[  110.685977][ T5843]  ? lockdep_hardirqs_on+0x9c/0x150
[  110.685987][ T5843]  task_work_run+0x1d4/0x260
[  110.685998][ T5843]  ? __pfx_task_work_run+0x10/0x10
[  110.686006][ T5843]  ? __x64_sys_umount+0x122/0x160
[  110.686017][ T5843]  ? exit_to_user_mode_loop+0x40/0x110
[  110.686029][ T5843]  exit_to_user_mode_loop+0xec/0x110
[  110.686039][ T5843]  do_syscall_64+0x2bd/0x3b0
[  110.686048][ T5843]  ? lockdep_hardirqs_on+0x9c/0x150
[  110.686055][ T5843]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.686062][ T5843]  ? exc_page_fault+0x9f/0xf0
[  110.686071][ T5843]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  110.686078][ T5843] RIP: 0033:0x7f266218ff17
[  110.686086][ T5843] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  110.686092][ T5843] RSP: 002b:00007fff50290c28 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  110.686101][ T5843] RAX: 0000000000000000 RBX: 00007f2662211c05 RCX: 00007f266218ff17
[  110.686106][ T5843] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff50290ce0
[  110.686110][ T5843] RBP: 00007fff50290ce0 R08: 0000000000000000 R09: 0000000000000000
[  110.686114][ T5843] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff50291d70
[  110.686119][ T5843] R13: 00007f2662211c05 R14: 000000000001afd5 R15: 00007fff50291db0
[  110.686130][ T5843]  </TASK>
[  110.686134][ T5843] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  111.017820][ T7646] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.023085][ T7646] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.026453][ T7646] bridge_slave_0: entered allmulticast mode
[  111.031800][ T7646] bridge_slave_0: entered promiscuous mode
[  111.044129][ T7646] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.052418][ T7646] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.055738][ T7646] bridge_slave_1: entered allmulticast mode
[  111.061947][ T7646] bridge_slave_1: entered promiscuous mode
[  111.192853][ T7646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.232243][   T12] hsr_slave_0: left promiscuous mode
[  111.238650][   T12] hsr_slave_1: left promiscuous mode
[  111.240814][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.243473][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.259969][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.263219][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.294240][   T12] veth1_macvtap: left promiscuous mode
[  111.296800][   T12] veth0_macvtap: left promiscuous mode
[  111.309971][   T12] veth1_vlan: left promiscuous mode
[  111.312516][   T12] veth0_vlan: left promiscuous mode
[  111.464834][ T5892] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  111.618265][ T5892] usb 3-1: Using ep0 maxpacket: 16
[  111.627764][ T5892] usb 3-1: config 0 has an invalid interface number: 109 but max is 0
[  111.638445][ T2209] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  111.641954][ T5892] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  111.646331][ T5892] usb 3-1: config 0 has no interface number 0
[  111.649262][   T54] Bluetooth: hci2: command tx timeout
[  111.675131][ T5892] usb 3-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e
[  111.678161][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.684294][ T5892] usb 3-1: Product: syz
[  111.685865][ T5892] usb 3-1: Manufacturer: syz
[  111.687448][ T5892] usb 3-1: SerialNumber: syz
[  111.696249][ T5892] usb 3-1: config 0 descriptor??
[  111.809767][ T2209] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  111.813563][ T2209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.816771][ T2209] usb 1-1: Product: syz
[  111.833239][ T2209] usb 1-1: Manufacturer: syz
[  111.835291][ T2209] usb 1-1: SerialNumber: syz
[  111.843164][ T2209] usb 1-1: config 0 descriptor??
[  111.856526][ T2209] gspca_main: sunplus-2.14.0 probing 055f:c230
[  111.927486][   T12] team0 (unregistering): Port device team_slave_1 removed
[  111.929274][ T7692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.938085][ T7692] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.980887][ T5892] rndis_host 3-1:0.109: More than one union descriptor, skipping ...
[  111.986528][ T5892] usb 3-1: bad CDC descriptors
[  111.989755][ T5892] cdc_acm 3-1:0.109: More than one union descriptor, skipping ...
[  111.996773][   T12] team0 (unregistering): Port device team_slave_0 removed
[  112.002763][ T5892] usb 3-1: USB disconnect, device number 11
[  112.414450][ T7646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.514477][ T7646] team0: Port device team_slave_0 added
[  112.517834][ T7646] team0: Port device team_slave_1 added
[  112.581818][ T7646] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.584555][ T7646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.594917][ T7646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.604188][ T7646] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.606671][ T7646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.616184][ T7646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.659056][ T7646] hsr_slave_0: entered promiscuous mode
[  112.662161][ T7646] hsr_slave_1: entered promiscuous mode
[  112.664788][ T7646] debugfs: 'hsr0' already exists in 'hsr'
[  112.666988][ T7646] Cannot create hsr debugfs directory
[  112.778706][ T5892] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  112.815106][ T7646] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  112.824347][ T7646] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  112.828716][ T7646] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  112.834607][ T7646] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  112.887116][ T7646] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.900822][ T7646] 8021q: adding VLAN 0 to HW filter on device team0
[  112.908699][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.911030][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.918142][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.920849][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.928376][ T5892] usb 3-1: Using ep0 maxpacket: 16
[  112.932957][ T5892] usb 3-1: config 1 has an invalid interface number: 105 but max is 0
[  112.939128][ T5892] usb 3-1: config 1 has no interface number 0
[  112.941176][ T5892] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  112.944588][ T5892] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  112.951193][ T5892] usb 3-1: config 1 interface 105 has no altsetting 0
[  112.959741][ T5892] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  112.962839][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.965558][ T5892] usb 3-1: Product: syz
[  112.967124][ T5892] usb 3-1: Manufacturer: syz
[  112.979486][ T5892] usb 3-1: SerialNumber: syz
[  112.993132][ T7702] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  112.996270][ T7702] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  113.135569][ T7646] 8021q: adding VLAN 0 to HW filter on device batadv0
[  113.275283][ T2209] gspca_sunplus: reg_r err -71
[  113.277045][ T2209] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  113.289887][ T2209] usb 1-1: USB disconnect, device number 9
[  113.361477][ T7646] veth0_vlan: entered promiscuous mode
[  113.374881][ T7646] veth1_vlan: entered promiscuous mode
[  113.397124][ T7646] veth0_macvtap: entered promiscuous mode
[  113.402754][ T7646] veth1_macvtap: entered promiscuous mode
[  113.416387][ T7646] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.420097][ T7702] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  113.423217][ T7702] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  113.431459][ T7646] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.444841][ T5864] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.452313][ T5864] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.471153][ T5864] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.490249][ T5864] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.511869][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.514423][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.535663][ T2181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.539542][ T2181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.734528][   T54] Bluetooth: hci2: command tx timeout
[  113.836415][ T5892] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  113.845607][ T5892] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  113.858854][ T5892] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  113.913004][ T5892] aqc111 3-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 4e:79:67:63:6e:c9
[  113.920293][ T5892] usb 3-1: USB disconnect, device number 12
[  113.923677][ T5892] aqc111 3-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  114.011701][ T5892] aqc111 3-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  114.017847][ T7774] loop0: detected capacity change from 0 to 4096
[  114.021314][ T5892] aqc111 3-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  114.024674][ T5892] aqc111 3-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  114.029074][ T7774] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  114.060278][ T7774] ntfs3(loop0): ino=1a, mi_enum_attr
[  114.062275][ T7774] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  114.074982][ T7774] ntfs3(loop0): ino=1a, mi_enum_attr
[  114.076872][ T7774] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  114.405472][ T7796] loop2: detected capacity change from 0 to 512
[  114.410581][ T7796] EXT4-fs (loop2): Test dummy encryption mode enabled
[  114.412884][ T7796] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  114.442323][ T7796] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.658: bad orphan inode 131083
[  114.446812][ T7796] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.559173][   T33] audit: type=1800 audit(1755055681.154:15): pid=7800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.658" name="file1" dev="loop2" ino=19 res=0 errno=0
[  115.137942][ T7806] loop0: detected capacity change from 0 to 512
[  115.190779][ T7806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.217095][ T7806] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.270890][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.286502][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.351694][ T7814] loop0: detected capacity change from 0 to 512
[  115.809554][   T54] Bluetooth: hci2: command tx timeout
[  117.031689][ T7857] loop0: detected capacity change from 0 to 32768
[  117.036853][ T7857] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.679 (7857)
[  117.043044][ T7857] BTRFS info (device loop0 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  117.047445][ T7857] BTRFS info (device loop0 state S): using crc32c (crc32c-lib) checksum algorithm
[  117.050917][ T7857] BTRFS info (device loop0 state S): using free-space-tree
[  117.108157][ T7875] loop2: detected capacity change from 0 to 1024
[  117.117947][ T7875] EXT4-fs: Ignoring removed nobh option
[  117.126035][ T7875] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  117.136190][   T27] BTRFS warning (device loop0 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored
[  117.145150][ T7875] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.683: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  117.152170][   T27] BTRFS warning (device loop0 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored
[  117.157477][ T6002] BTRFS warning (device loop0 state S): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x31515604 level 0, ignored
[  117.164129][ T7857] BTRFS error (device loop0 state S): dev extent physical offset 6881280 devid 2 has no corresponding chunk
[  117.164410][ T7875] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.683: couldn't read orphan inode 11 (err -117)
[  117.168074][ T7857] BTRFS error (device loop0 state S): failed to find devid 2
[  117.168118][ T7857] BTRFS error (device loop0 state S): failed to verify dev extents against chunks: -117
[  117.180893][ T7875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.190692][ T7857] BTRFS error (device loop0 state S): open_ctree failed: -117
[  117.230356][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.261483][ T7885] loop0: detected capacity change from 0 to 16
[  117.296129][ T7888] loop2: detected capacity change from 0 to 512
[  117.300968][ T7885] erofs (device loop0): mounted with root inode @ nid 36.
[  117.305091][ T7888] EXT4-fs: Ignoring removed oldalloc option
[  117.323515][ T7888] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.685: Parent and EA inode have the same ino 15
[  117.336932][ T7888] EXT4-fs (loop2): 1 orphan inode deleted
[  117.346663][ T7888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.407698][ T7891] netlink: 'syz.0.687': attribute type 3 has an invalid length.
[  117.419766][ T7888] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.685: invalid indirect mapped block 234881024 (level 0)
[  117.550957][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.693624][ T7909] capability: warning: `syz.0.693' uses 32-bit capabilities (legacy support in use)
[  117.857797][ T7920] loop0: detected capacity change from 0 to 16
[  117.861447][ T7920] erofs (device loop0): rootino(nid 36) is not a directory(i_mode 142735)
[  117.890393][   T54] Bluetooth: hci2: command tx timeout
[  119.516195][ T7990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.717'.
[  119.550672][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.718'.
[  119.568430][   T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  119.695893][ T7999] loop0: detected capacity change from 0 to 32768
[  119.719327][   T24] usb 3-1: Using ep0 maxpacket: 16
[  119.725081][   T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  119.734711][   T24] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  119.741686][   T24] usb 3-1: config 1 has no interface number 1
[  119.742824][ T7999] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  119.743667][   T24] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  119.755891][   T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  119.759879][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.762716][   T24] usb 3-1: Product: syz
[  119.768310][   T24] usb 3-1: Manufacturer: syz
[  119.772916][   T24] usb 3-1: SerialNumber: syz
[  119.775312][ T7999] XFS (loop0): Ending clean mount
[  119.781594][ T7999] XFS (loop0): Quotacheck needed: Please wait.
[  119.812678][ T7999] XFS (loop0): Quotacheck: Done.
[  119.855219][ T5843] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  120.013462][   T24] usb 3-1: USB disconnect, device number 13
[  120.360946][ T8041] loop0: detected capacity change from 0 to 40427
[  120.386705][ T8041] F2FS-fs (loop0): invalid crc value
[  120.415614][ T8041] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  120.419132][ T8041] F2FS-fs (loop0): Start checkpoint disabled!
[  120.422940][ T8041] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  120.462554][ T8041] F2FS-fs (loop0): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  120.525496][   T27] kworker/u10:0: attempt to access beyond end of device
[  120.525496][   T27] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  120.531594][   T27] kworker/u10:0: attempt to access beyond end of device
[  120.531594][   T27] loop0: rw=2049, sector=45104, nr_sectors = 16 limit=40427
[  120.536465][   T27] CPU: 1 UID: 0 PID: 27 Comm: kworker/u10:0 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  120.536483][   T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  120.536491][   T27] Workqueue: writeback wb_workfn (flush-7:0)
[  120.536512][   T27] Call Trace:
[  120.536517][   T27]  <TASK>
[  120.536523][   T27]  dump_stack_lvl+0x189/0x250
[  120.536543][   T27]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.536556][   T27]  ? __pfx_queue_work_on+0x10/0x10
[  120.536568][   T27]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  120.536583][   T27]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  120.536605][   T27]  f2fs_handle_critical_error+0x37c/0x540
[  120.536625][   T27]  f2fs_write_end_io+0x886/0xb60
[  120.536656][   T27]  __submit_merged_bio+0x27a/0x6a0
[  120.536676][   T27]  __submit_merged_write_cond+0x255/0x530
[  120.536696][   T27]  f2fs_write_data_pages+0x261d/0x3000
[  120.536737][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  120.536822][   T27]  ? f2fs_write_meta_pages+0x357/0x450
[  120.536847][   T27]  ? __lock_acquire+0xab9/0xd20
[  120.536867][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  120.536883][   T27]  do_writepages+0x32e/0x550
[  120.536897][   T27]  ? reacquire_held_locks+0x127/0x1d0
[  120.536904][   T27]  ? writeback_sb_inodes+0x384/0x1010
[  120.536918][   T27]  __writeback_single_inode+0x145/0xff0
[  120.536927][   T27]  ? do_raw_spin_unlock+0x4d/0x240
[  120.536938][   T27]  writeback_sb_inodes+0x6c7/0x1010
[  120.536960][   T27]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  120.536989][   T27]  ? rcu_is_watching+0x15/0xb0
[  120.537001][   T27]  wb_writeback+0x43b/0xaf0
[  120.537014][   T27]  ? queue_io+0x391/0x590
[  120.537025][   T27]  ? __pfx_wb_writeback+0x10/0x10
[  120.537039][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  120.537049][   T27]  wb_workfn+0x409/0xef0
[  120.537064][   T27]  ? __pfx_wb_workfn+0x10/0x10
[  120.537074][   T27]  ? __lock_acquire+0xab9/0xd20
[  120.537090][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  120.537100][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  120.537107][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  120.537113][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  120.537121][   T27]  process_scheduled_works+0xae1/0x17b0
[  120.537142][   T27]  ? __pfx_process_scheduled_works+0x10/0x10
[  120.537162][   T27]  worker_thread+0x8a0/0xda0
[  120.537183][   T27]  kthread+0x711/0x8a0
[  120.537193][   T27]  ? __pfx_worker_thread+0x10/0x10
[  120.537200][   T27]  ? __pfx_kthread+0x10/0x10
[  120.537210][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  120.537218][   T27]  ? lockdep_hardirqs_on+0x9c/0x150
[  120.537226][   T27]  ? __pfx_kthread+0x10/0x10
[  120.537235][   T27]  ret_from_fork+0x3fc/0x770
[  120.537245][   T27]  ? __pfx_ret_from_fork+0x10/0x10
[  120.537278][   T27]  ? __switch_to_asm+0x39/0x70
[  120.537289][   T27]  ? __switch_to_asm+0x33/0x70
[  120.537297][   T27]  ? __pfx_kthread+0x10/0x10
[  120.537307][   T27]  ret_from_fork_asm+0x1a/0x30
[  120.537324][   T27]  </TASK>
[  120.537327][   T27] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  120.565555][ T8044] loop4: detected capacity change from 0 to 32768
[  120.570474][   T27] CPU: 1 UID: 0 PID: 27 Comm: kworker/u10:0 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  120.570487][   T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  120.570493][   T27] Workqueue: writeback wb_workfn (flush-7:0)
[  120.570507][   T27] Call Trace:
[  120.570511][   T27]  <TASK>
[  120.570515][   T27]  dump_stack_lvl+0x189/0x250
[  120.570528][   T27]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.570537][   T27]  ? __pfx_queue_work_on+0x10/0x10
[  120.570545][   T27]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  120.570554][   T27]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  120.570568][   T27]  f2fs_handle_critical_error+0x37c/0x540
[  120.570581][   T27]  f2fs_write_end_io+0x886/0xb60
[  120.570601][   T27]  __submit_merged_bio+0x27a/0x6a0
[  120.570614][   T27]  __submit_merged_write_cond+0x255/0x530
[  120.570626][   T27]  f2fs_write_data_pages+0x261d/0x3000
[  120.570653][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  120.570700][   T27]  ? f2fs_write_meta_pages+0x357/0x450
[  120.570715][   T27]  ? __lock_acquire+0xab9/0xd20
[  120.570728][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  120.570739][   T27]  do_writepages+0x32e/0x550
[  120.570752][   T27]  ? reacquire_held_locks+0x127/0x1d0
[  120.570759][   T27]  ? writeback_sb_inodes+0x384/0x1010
[  120.570773][   T27]  __writeback_single_inode+0x145/0xff0
[  120.570783][   T27]  ? do_raw_spin_unlock+0x4d/0x240
[  120.570801][   T27]  writeback_sb_inodes+0x6c7/0x1010
[  120.570824][   T27]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  120.570854][   T27]  ? rcu_is_watching+0x15/0xb0
[  120.570866][   T27]  wb_writeback+0x43b/0xaf0
[  120.570879][   T27]  ? queue_io+0x391/0x590
[  120.570890][   T27]  ? __pfx_wb_writeback+0x10/0x10
[  120.570903][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  120.570913][   T27]  wb_workfn+0x409/0xef0
[  120.570928][   T27]  ? __pfx_wb_workfn+0x10/0x10
[  120.570939][   T27]  ? __lock_acquire+0xab9/0xd20
[  120.570954][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  120.570965][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  120.570972][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  120.570978][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  120.570987][   T27]  process_scheduled_works+0xae1/0x17b0
[  120.571008][   T27]  ? __pfx_process_scheduled_works+0x10/0x10
[  120.571029][   T27]  worker_thread+0x8a0/0xda0
[  120.571049][   T27]  kthread+0x711/0x8a0
[  120.571060][   T27]  ? __pfx_worker_thread+0x10/0x10
[  120.571067][   T27]  ? __pfx_kthread+0x10/0x10
[  120.571077][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  120.571084][   T27]  ? lockdep_hardirqs_on+0x9c/0x150
[  120.571092][   T27]  ? __pfx_kthread+0x10/0x10
[  120.571102][   T27]  ret_from_fork+0x3fc/0x770
[  120.571111][   T27]  ? __pfx_ret_from_fork+0x10/0x10
[  120.571121][   T27]  ? __switch_to_asm+0x39/0x70
[  120.571130][   T27]  ? __switch_to_asm+0x33/0x70
[  120.571138][   T27]  ? __pfx_kthread+0x10/0x10
[  120.571148][   T27]  ret_from_fork_asm+0x1a/0x30
[  120.571165][   T27]  </TASK>
[  120.571168][   T27] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  120.770714][ T8044] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  120.802184][ T8044] XFS (loop4): Ending clean mount
[  120.837884][ T8069] loop2: detected capacity change from 0 to 512
[  120.843970][ T8069] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  120.861564][ T8069] EXT4-fs (loop2): 1 truncate cleaned up
[  120.864228][ T8069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.890756][ T7646] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  120.897198][   T33] audit: type=1800 audit(1755055687.524:16): pid=8069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.733" name="file2" dev="loop2" ino=16 res=0 errno=0
[  120.953093][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.158642][ T8085] netlink: 24 bytes leftover after parsing attributes in process `syz.2.739'.
[  121.214298][ T8079] loop0: detected capacity change from 0 to 32768
[  121.281607][ T8079] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  121.281628][ T8079]   allowing incompatible features above 0.0: (unknown version)
[  121.281633][ T8079]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  121.304148][ T8079] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  121.307132][ T8079] bcachefs (loop0): initializing new filesystem
[  121.315377][ T8083] loop4: detected capacity change from 0 to 32768
[  121.321218][ T8079] bcachefs (loop0): going read-write
[  121.329470][ T8079] bcachefs (loop0): marking superblocks
[  121.346005][ T8083] 
[  121.346005][ T8083]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  121.346005][ T8083] 
[  121.353155][ T8079] bcachefs (loop0): initializing freespace
[  121.364310][ T8079] bcachefs (loop0): done initializing freespace
[  121.369471][ T8079] bcachefs (loop0): reading snapshots table
[  121.371855][ T8079] bcachefs (loop0): reading snapshots done
[  121.393751][ T8079] bcachefs (loop0): done starting filesystem
[  121.395986][ T1088] 
[  121.395986][ T1088]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  121.395986][ T1088] 
[  121.409779][ T1088] 
[  121.409779][ T1088]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  121.409779][ T1088] 
[  121.417904][ T7646] 
[  121.417904][ T7646]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  121.417904][ T7646] 
[  121.423222][ T7646] 
[  121.423222][ T7646]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  121.423222][ T7646] 
[  121.427868][  T116] 
[  121.427868][  T116]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  121.427868][  T116] 
[  121.446981][ T5843] bcachefs (loop0): shutting down
[  121.449953][ T5843] bcachefs (loop0): going read-only
[  121.451712][ T5843] bcachefs (loop0): finished waiting for writes to stop
[  121.457267][ T5843] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[  121.491584][ T5843] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[  121.495547][ T5843] bcachefs (loop0): clean shutdown complete, journal seq 4
[  121.499036][ T5843] bcachefs (loop0): marking filesystem clean
[  121.513882][ T5843] bcachefs (loop0): shutdown complete
[  121.868299][ T5885] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  122.020564][ T5885] usb 3-1: config 0 has an invalid interface number: 212 but max is 0
[  122.023372][ T5885] usb 3-1: config 0 has no interface number 0
[  122.026609][ T5885] usb 3-1: config 0 interface 212 has no altsetting 0
[  122.031389][ T5885] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00
[  122.034403][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.036966][ T5885] usb 3-1: Product: syz
[  122.044691][ T5885] usb 3-1: Manufacturer: syz
[  122.046336][ T5885] usb 3-1: SerialNumber: syz
[  122.050696][ T5885] usb 3-1: config 0 descriptor??
[  122.059574][ T5885] ftdi_sio 3-1:0.212: FTDI USB Serial Device converter detected
[  122.064515][ T5885] usb 3-1: Detected FT4232HP
[  122.198908][ T8131] loop4: detected capacity change from 0 to 256
[  122.211001][ T8131] exFAT-fs (loop4): failed to load upcase table (idx : 0x000101ff, chksum : 0x66f7cbb2, utbl_chksum : 0xe619d30d)
[  122.247986][ T8133] loop4: detected capacity change from 0 to 1024
[  122.269194][ T5885] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  122.280807][ T5885] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  122.291564][ T5885] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  122.303013][   T68] hfsplus: b-tree write err: -5, ino 8
[  122.305209][ T5885] usb 3-1: USB disconnect, device number 14
[  122.311666][ T5885] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  122.315313][ T5885] ftdi_sio 3-1:0.212: device disconnected
[  122.580862][ T8141] loop0: detected capacity change from 0 to 16
[  122.598108][ T8141] erofs (device loop0): mounted with root inode @ nid 36.
[  122.607124][ T8141] erofs (device loop0): invalid tail-packing pclustersize 32768
[  122.610848][ T8141] erofs (device loop0): invalid tail-packing pclustersize 32768
[  122.614040][ T8141] erofs (device loop0): read error -117 @ 32811 of nid 36
[  122.821870][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.763'.
[  122.854140][ T8149] loop2: detected capacity change from 0 to 1024
[  122.857053][ T8149] EXT4-fs: Ignoring removed nomblk_io_submit option
[  122.863492][ T8149] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  122.866504][ T8149] EXT4-fs (loop2): stripe (3675) is not aligned with cluster size (16), stripe is disabled
[  122.872353][ T8149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  122.881059][ T5885] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  122.908505][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.038501][ T5885] usb 1-1: Using ep0 maxpacket: 32
[  123.041955][ T5885] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[  123.045407][ T5885] usb 1-1: config 0 has no interface number 0
[  123.047649][ T5885] usb 1-1: config 0 interface 50 has no altsetting 0
[  123.052776][ T5885] usb 1-1: New USB device found, idVendor=067b, idProduct=0307, bcdDevice=13.70
[  123.055910][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.059288][ T5885] usb 1-1: Product: syz
[  123.060797][ T5885] usb 1-1: Manufacturer: syz
[  123.062686][ T5885] usb 1-1: SerialNumber: syz
[  123.066076][ T5885] usb 1-1: config 0 descriptor??
[  123.072586][ T5885] pl2303 1-1:0.50: required interrupt-in endpoint missing
[  123.275868][   T24] usb 1-1: USB disconnect, device number 10
[  123.922077][ T8157] loop0: detected capacity change from 0 to 4096
[  123.977117][ T8166] loop0: detected capacity change from 0 to 64
[  124.013967][ T5843] Trying to free block not in datazone
[  124.021469][ T5843] Trying to free block not in datazone
[  124.025805][ T5843] Trying to free block not in datazone
[  124.027643][ T5843] Trying to free block not in datazone
[  124.030714][ T5843] Trying to free block not in datazone
[  124.032650][ T5843] Trying to free block not in datazone
[  124.034586][ T5843] Trying to free block not in datazone
[  124.036403][ T5843] Trying to free block not in datazone
[  124.039464][ T5843] Trying to free block not in datazone
[  124.041423][ T5843] Trying to free block not in datazone
[  124.043266][ T5843] Trying to free block not in datazone
[  124.045155][ T5843] Trying to free block not in datazone
[  124.047200][ T5843] Trying to free block not in datazone
[  124.051877][ T5843] Trying to free block not in datazone
[  124.084280][ T8169] netlink: 'syz.0.772': attribute type 178 has an invalid length.
[  124.408411][   T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  124.568275][   T24] usb 1-1: Using ep0 maxpacket: 32
[  124.571718][   T24] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  124.574466][   T24] usb 1-1: config 0 has no interface number 0
[  124.576760][   T24] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  124.580684][   T24] usb 1-1: config 0 interface 2 has no altsetting 0
[  124.584881][   T24] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  124.588020][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.590929][   T24] usb 1-1: Product: syz
[  124.592476][   T24] usb 1-1: Manufacturer: syz
[  124.594226][   T24] usb 1-1: SerialNumber: syz
[  124.597327][   T24] usb 1-1: config 0 descriptor??
[  124.805695][   T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  124.847002][   T24] usb 1-1: USB disconnect, device number 11
[  124.980143][ T8184] loop2: detected capacity change from 0 to 32768
[  125.361132][   T33] audit: type=1326 audit(1755055691.974:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8213 comm="syz.2.780" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee2b8ebe9 code=0x7ffc0000
[  125.379278][   T33] audit: type=1326 audit(1755055691.984:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8213 comm="syz.2.780" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee2b8ebe9 code=0x7ffc0000
[  125.403881][   T33] audit: type=1326 audit(1755055691.984:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8213 comm="syz.2.780" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f9ee2b8ebe9 code=0x7ffc0000
[  125.424109][   T33] audit: type=1326 audit(1755055691.984:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8213 comm="syz.2.780" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee2b8ebe9 code=0x7ffc0000
[  125.432945][   T33] audit: type=1326 audit(1755055691.984:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8213 comm="syz.2.780" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee2b8ebe9 code=0x7ffc0000
[  125.618937][ T8239] loop0: detected capacity change from 0 to 16
[  125.634476][ T8239] erofs (device loop0): algorithm 1 isn't enabled on this kernel
[  125.660721][ T8242] loop2: detected capacity change from 0 to 2048
[  125.683153][ T8242] EXT4-fs: Ignoring removed mblk_io_submit option
[  125.719693][ T8242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.147784][ T1088] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u9:5: bg 0: block 234: padding at end of block bitmap is not set
[  126.156362][ T1088] EXT4-fs (loop2): Remounting filesystem read-only
[  126.270923][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.919674][ T8287] loop2: detected capacity change from 0 to 512
[  126.922449][ T8287] EXT4-fs: Ignoring removed mblk_io_submit option
[  126.931812][ T8287] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  126.952887][ T8287] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  126.956540][ T8287] EXT4-fs (loop2): orphan cleanup on readonly fs
[  126.965598][ T8287] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.800: Invalid block bitmap block 0 in block_group 0
[  126.977955][ T8287] EXT4-fs (loop2): Remounting filesystem read-only
[  126.983690][ T8287] Quota error (device loop2): write_blk: dquota write failed
[  126.989369][ T8287] Quota error (device loop2): write_blk: dquota write failed
[  126.992932][ T8287] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  126.997427][ T8287] EXT4-fs (loop2): 1 orphan inode deleted
[  127.005426][ T8287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  127.209379][ T8290] loop0: detected capacity change from 0 to 32768
[  127.237833][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.314375][ T8292] loop2: detected capacity change from 0 to 4096
[  127.321096][ T8292] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  127.343795][ T8292] ntfs3(loop2): ino=19, mi_enum_attr
[  127.345689][ T8292] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  127.363403][ T8292] ntfs3(loop2): failed to convert "c46c" to ascii
[  127.373147][ T8292] ntfs3(loop2): ino=20, mi_enum_attr
[  127.436020][ T8295] loop2: detected capacity change from 0 to 128
[  127.450213][ T8295] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  127.467920][ T8295] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  127.484766][ T8295] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.802: checksumming directory block 0
[  127.512690][ T5847] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  127.771236][ T8306] loop2: detected capacity change from 0 to 1024
[  127.820522][ T8306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.824832][ T8306] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.867306][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.472468][ T8336] loop2: detected capacity change from 0 to 16
[  128.477708][ T8336] erofs (device loop2): mounted with root inode @ nid 36.
[  128.544182][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'.
[  128.547207][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'.
[  128.553539][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.820'.
[  128.781055][ T8363] loop2: detected capacity change from 0 to 512
[  128.785016][ T8363] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  128.809248][ T8363] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[  128.813095][ T8358] loop4: detected capacity change from 0 to 32768
[  128.839188][ T8358] JBD2: Ignoring recovery information on journal
[  128.859215][ T8358] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  128.899883][ T8358] OCFS2: ERROR (device loop4): int ocfs2_reserve_local_alloc_bits(struct ocfs2_super *, u32, struct ocfs2_alloc_context *): local alloc inode 76 says it has 2 used bits, but a count shows 1
[  128.906192][ T8358] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  128.909793][ T8358] OCFS2: File system is now read-only.
[  128.911658][ T8358] (syz.4.829,8358,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30
[  128.914658][ T8358] (syz.4.829,8358,0):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -30
[  128.917857][ T8358] (syz.4.829,8358,0):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -30
[  128.921061][ T8358] (syz.4.829,8358,0):ocfs2_lock_allocators:2775 ERROR: status = -30
[  128.924111][ T8358] (syz.4.829,8358,0):ocfs2_write_begin_nolock:1723 ERROR: status = -30
[  128.926890][ T8358] (syz.4.829,8358,0):ocfs2_write_begin:1887 ERROR: status = -30
[  128.963572][ T7646] ocfs2: Unmounting device (7,4) on (node local)
[  129.348891][    T9] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  129.573834][ T8404] netlink: 24 bytes leftover after parsing attributes in process `syz.4.847'.
[  129.601331][    T9] usb 1-1: config 201 has an invalid interface number: 249 but max is 0
[  129.606406][    T9] usb 1-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config
[  129.610594][    T9] usb 1-1: config 201 has no interface number 0
[  129.612678][    T9] usb 1-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81
[  129.616365][    T9] usb 1-1: config 201 interface 249 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  129.628303][    T9] usb 1-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 255, setting to 64
[  129.631917][    T9] usb 1-1: config 201 interface 249 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  129.637917][    T9] usb 1-1: config 201 interface 249 has no altsetting 0
[  129.645469][    T9] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df
[  129.650730][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.653600][    T9] usb 1-1: Product: syz
[  129.658501][    T9] usb 1-1: Manufacturer: syz
[  129.660170][    T9] usb 1-1: SerialNumber: syz
[  129.668475][ T8377] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  129.751898][ T8414] loop4: detected capacity change from 0 to 16
[  129.756003][ T8414] erofs (device loop4): mounted with root inode @ nid 36.
[  129.885552][    T9] ath6kl: Failed to submit usb control message: -71
[  129.887935][    T9] ath6kl: unable to send the bmi data to the device: -71
[  129.892042][    T9] ath6kl: Unable to send get target info: -71
[  129.894792][    T9] ath6kl: Failed to init ath6kl core: -71
[  129.897557][    T9] ath6kl_usb 1-1:201.249: probe with driver ath6kl_usb failed with error -71
[  129.904634][    T9] usb 1-1: USB disconnect, device number 12
[  130.388257][    T9] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  130.461834][   T24] kernel read not supported for file /input/event1 (pid: 24 comm: kworker/1:0)
[  130.552060][    T9] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  130.556048][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.563068][    T9] usb 3-1: config 0 descriptor??
[  130.660501][ T8444] loop0: detected capacity change from 0 to 2048
[  130.667793][ T8444] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  130.725036][ T8446] loop0: detected capacity change from 0 to 512
[  130.738737][ T8446] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  130.745152][ T8446] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  130.753057][ T8446] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  130.756693][ T8446] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  130.764011][ T8446] System zones: 0-2, 18-18, 34-35
[  130.770329][ T8446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.805953][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.190382][    T9] pegasus 3-1:0.0: can't reset MAC
[  132.193579][    T9] pegasus 3-1:0.0: probe with driver pegasus failed with error -5
[  132.206751][    T9] usb 3-1: USB disconnect, device number 15
[  132.362594][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.364799][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.568399][   T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  132.727036][   T10] usb 1-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1
[  132.737585][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.750976][   T10] usb 1-1: config 0 descriptor??
[  132.762856][   T10] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  132.767568][   T10] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  132.873989][ T8467] loop2: detected capacity change from 0 to 32768
[  132.876964][ T8467] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.874 (8467)
[  132.883658][ T8467] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  132.887178][ T8467] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  132.890355][ T8467] BTRFS info (device loop2): disk space caching is enabled
[  132.892687][ T8467] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  132.943800][ T8467] BTRFS info (device loop2): rebuilding free space tree
[  132.951762][ T8467] BTRFS info (device loop2): disabling free space tree
[  132.954060][ T8467] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  132.957182][ T8467] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  132.969950][ T2209] usb 1-1: USB disconnect, device number 13
[  133.033182][ T5847] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  133.209289][ T8488] loop2: detected capacity change from 0 to 2048
[  133.230612][ T8488] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  133.233214][ T8488] UDF-fs: Scanning with blocksize 512 failed
[  133.250591][ T8488] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  133.402015][ T8492] loop2: detected capacity change from 0 to 2048
[  133.410186][ T8492] hpfs: hpfs_map_sector(): read error
[  133.604746][ T8509] loop0: detected capacity change from 0 to 512
[  133.632895][ T8509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.637374][ T8509] ext4 filesystem being mounted at /288/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.707676][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.891727][ T8521] loop4: detected capacity change from 0 to 32768
[  133.896227][ T8521] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.886 (8521)
[  133.923617][ T8521] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  133.931277][ T8521] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  133.978729][ T2209] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  134.001202][ T8521] BTRFS info (device loop4): rebuilding free space tree
[  134.017105][ T8521] BTRFS info (device loop4): disabling free space tree
[  134.019797][ T8521] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  134.023248][ T8521] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  134.088445][ T7646] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  134.135042][ T2209] usb 1-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e
[  134.138810][ T2209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.173006][ T2209] pwc: Logitech ViewPort AV 100 webcam detected.
[  134.376085][ T2209] pwc: Failed to set LED on/off time (-71)
[  134.390138][ T2209] pwc: send_video_command error -71
[  134.391922][ T2209] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  134.394643][ T2209] Philips webcam 1-1:127.0: probe with driver Philips webcam failed with error -71
[  134.420105][ T2209] usb 1-1: USB disconnect, device number 14
[  135.288534][    T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  135.447024][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  135.453897][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  135.459032][    T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  135.471599][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  135.474233][    T9] usb 1-1: SerialNumber: syz
[  135.724243][    T9] usb 1-1: 0:2 : does not exist
[  135.732640][    T9] usb 1-1: unit 5: unexpected type 0x0a
[  135.750714][    T9] usb 1-1: USB disconnect, device number 15
[  135.784323][ T6502] udevd[6502]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  135.818162][ T8624] tipc: Started in network mode
[  135.823551][ T8624] tipc: Node identity 7a5e3b3a4d86, cluster identity 4711
[  135.827094][ T8624] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  135.833218][ T8624] tipc: Resetting bearer <eth:syzkaller0>
[  135.848141][ T8623] tipc: Disabling bearer <eth:syzkaller0>
[  136.118114][ T8631] loop2: detected capacity change from 0 to 1024
[  136.135855][ T8631] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  136.142090][ T8631] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  136.148946][ T8631] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  136.152604][ T8631] EXT4-fs (loop2): orphan cleanup on readonly fs
[  136.156008][ T8631] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.899: Freeing blocks not in datazone - block = 0, count = 4096
[  136.167953][ T8631] EXT4-fs (loop2): Remounting filesystem read-only
[  136.172125][ T8631] EXT4-fs (loop2): 1 orphan inode deleted
[  136.175793][ T8631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  136.357568][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.769258][ T8654] loop2: detected capacity change from 0 to 32768
[  136.773378][ T8654] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.908 (8654)
[  136.789248][ T8654] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  136.795525][ T8654] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  136.800582][ T8654] BTRFS info (device loop2): using free-space-tree
[  136.831744][ T8654] BTRFS info (device loop2): rebuilding free space tree
[  136.877165][ T5847] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  137.474571][ T8688] loop4: detected capacity change from 0 to 64
[  137.487254][ T8688] MINIX-fs: file system does not have enough zmap blocks allocated.  Refusing to mount.
[  137.492587][ T8688] MINIX-fs: bad superblock or unable to read bitmaps
[  137.532267][ T8690] loop4: detected capacity change from 0 to 8
[  137.636689][ T8694] cgroup: fork rejected by pids controller in /syz4
[  137.688324][ T2209] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  137.844012][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.851198][ T2209] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.854974][ T2209] usb 1-1: config 0 interface 0 has no altsetting 0
[  137.857238][ T2209] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00
[  137.878418][ T2209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.911172][ T2209] usb 1-1: config 0 descriptor??
[  138.011974][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.099195][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.161353][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.176361][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  138.187101][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  138.194932][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  138.199554][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  138.204874][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  138.222489][ T8707] netlink: 'syz.2.925': attribute type 4 has an invalid length.
[  138.326420][   T12] bridge_slave_1: left allmulticast mode
[  138.333089][   T12] bridge_slave_1: left promiscuous mode
[  138.339997][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.341618][ T2209] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.0004/input/input7
[  138.352600][   T12] bridge_slave_0: left allmulticast mode
[  138.362447][   T12] bridge_slave_0: left promiscuous mode
[  138.364647][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.444049][ T2209] sony 0003:054C:03D5.0004: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0
[  138.538050][    T9] usb 1-1: USB disconnect, device number 16
[  138.852092][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.860235][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.865859][   T12] bond0 (unregistering): Released all slaves
[  139.044621][ T8716] loop2: detected capacity change from 0 to 736
[  139.116146][ T8716] rock: directory entry would overflow storage
[  139.134386][ T8716] rock: sig=0x3b10, size=4, remaining=3
[  139.470319][ T8734] openvswitch: netlink: IPv4 tun info is not correct
[  139.490784][ T8704] chnl_net:caif_netlink_parms(): no params data found
[  139.544186][   T12] hsr_slave_0: left promiscuous mode
[  139.549990][   T12] hsr_slave_1: left promiscuous mode
[  139.557573][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.561347][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.564827][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.567197][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.577479][   T12] veth1_macvtap: left promiscuous mode
[  139.580883][   T12] veth0_macvtap: left promiscuous mode
[  139.582757][   T12] veth1_vlan: left promiscuous mode
[  139.584525][   T12] veth0_vlan: left promiscuous mode
[  140.005327][   T12] team0 (unregistering): Port device team_slave_1 removed
[  140.037642][   T12] team0 (unregistering): Port device team_slave_0 removed
[  140.278749][   T54] Bluetooth: hci2: command tx timeout
[  140.395244][ T8740] netlink: 'syz.2.937': attribute type 41 has an invalid length.
[  140.490794][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.494495][ T8704] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.497617][ T8704] bridge_slave_0: entered allmulticast mode
[  140.502137][ T8704] bridge_slave_0: entered promiscuous mode
[  140.505741][ T8704] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.508158][ T8704] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.512305][ T8704] bridge_slave_1: entered allmulticast mode
[  140.516006][ T8704] bridge_slave_1: entered promiscuous mode
[  140.564327][ T8704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.574382][ T8704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  140.663522][ T8704] team0: Port device team_slave_0 added
[  140.682282][ T8704] team0: Port device team_slave_1 added
[  140.752855][ T8704] batman_adv: batadv0: Adding interface: batadv_slave_0
[  140.755103][ T8704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.792429][ T8704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  140.797260][ T8704] batman_adv: batadv0: Adding interface: batadv_slave_1
[  140.802161][ T8704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  140.811970][ T8704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  140.895425][ T8704] hsr_slave_0: entered promiscuous mode
[  140.898091][ T8704] hsr_slave_1: entered promiscuous mode
[  140.902176][ T8704] debugfs: 'hsr0' already exists in 'hsr'
[  140.904603][ T8704] Cannot create hsr debugfs directory
[  141.068431][ T2209] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  141.077047][ T8782] netlink: 284 bytes leftover after parsing attributes in process `syz.2.951'.
[  141.221510][ T2209] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  141.225218][ T2209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.233129][ T2209] usb 1-1: config 0 descriptor??
[  141.388338][ T5892] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  141.494430][ T8704] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  141.501541][ T8704] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  141.507439][ T8704] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  141.513180][ T8704] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  141.543022][ T5892] usb 3-1: Using ep0 maxpacket: 8
[  141.547595][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  141.556174][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  141.561759][ T5892] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  141.566787][ T5892] usb 3-1: New USB device found, idVendor=1608, idProduct=0207, bcdDevice=43.8e
[  141.570292][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.580702][ T5892] usb 3-1: config 0 descriptor??
[  141.584668][ T5892] io_ti 3-1:0.0: required endpoints missing
[  141.642008][ T2209] hackrf 1-1:0.0: Board ID: 00
[  141.644157][ T2209] hackrf 1-1:0.0: Firmware version: 
[  141.665290][ T2209] hackrf 1-1:0.0: Registered as swradio24
[  141.674854][ T2209] videodev: could not get a free minor
[  141.677198][ T2209] hackrf 1-1:0.0: Failed to register as video device (-23)
[  141.684059][ T8704] 8021q: adding VLAN 0 to HW filter on device bond0
[  141.700160][ T2209] hackrf 1-1:0.0: probe with driver hackrf failed with error -23
[  141.716359][ T8704] 8021q: adding VLAN 0 to HW filter on device team0
[  141.725367][ T6002] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.728567][ T6002] bridge0: port 1(bridge_slave_0) entered forwarding state
[  141.744527][ T6002] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.747180][ T6002] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.791485][ T5892] usb 3-1: USB disconnect, device number 16
[  141.848032][ T5885] usb 1-1: USB disconnect, device number 17
[  141.883153][ T8704] 8021q: adding VLAN 0 to HW filter on device batadv0
[  141.995230][ T8704] veth0_vlan: entered promiscuous mode
[  142.006393][ T8704] veth1_vlan: entered promiscuous mode
[  142.037467][ T8704] veth0_macvtap: entered promiscuous mode
[  142.043031][ T8704] veth1_macvtap: entered promiscuous mode
[  142.053328][ T8704] batman_adv: batadv0: Interface activated: batadv_slave_0
[  142.063185][ T8704] batman_adv: batadv0: Interface activated: batadv_slave_1
[  142.077239][ T5905] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.090519][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.094441][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.097983][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.156281][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.160838][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.180532][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.183314][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.266410][ T8836] loop4: detected capacity change from 0 to 4096
[  142.279080][ T8836] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  142.293605][ T8836] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  142.300656][ T8836] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  142.356401][ T8840] loop4: detected capacity change from 0 to 164
[  142.359048][   T54] Bluetooth: hci2: command tx timeout
[  142.366267][ T8840] Unable to read rock-ridge attributes
[  142.371612][ T8840] ISOFS: unable to read i-node block
[  142.426068][ T8844] loop0: detected capacity change from 0 to 64
[  142.545620][ T8850] loop0: detected capacity change from 0 to 512
[  142.552649][ T8850] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  142.557089][ T8850] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[  142.560564][ T8850] EXT4-fs (loop0): orphan cleanup on readonly fs
[  142.564466][ T8850] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.961: bg 0: block 361: padding at end of block bitmap is not set
[  142.571231][ T8850] EXT4-fs (loop0): Remounting filesystem read-only
[  142.573735][ T8850] EXT4-fs (loop0): 1 truncate cleaned up
[  142.576481][ T8850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  142.605518][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  142.898292][    T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  143.048521][    T9] usb 1-1: Using ep0 maxpacket: 32
[  143.055487][    T9] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  143.059850][    T9] usb 1-1: config 0 has no interface number 0
[  143.062938][    T9] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  143.069692][    T9] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  143.073415][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.076679][    T9] usb 1-1: Product: syz
[  143.079499][    T9] usb 1-1: Manufacturer: syz
[  143.081552][    T9] usb 1-1: SerialNumber: syz
[  143.086049][    T9] usb 1-1: config 0 descriptor??
[  143.094914][    T9] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  143.099347][    T9] em28xx 1-1:0.132: Video interface 132 found:
[  143.313781][ T8859] loop2: detected capacity change from 0 to 4096
[  143.501547][    T9] em28xx 1-1:0.132: unknown em28xx chip ID (0)
[  143.707504][    T9] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  143.717871][    T9] em28xx 1-1:0.132: board has no eeprom
[  143.718548][ T8869] loop2: detected capacity change from 0 to 32768
[  143.724106][ T8869] XFS: attr2 mount option is deprecated.
[  143.739390][ T8869] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  143.760770][ T8869] XFS (loop2): Ending clean mount
[  143.772028][ T8869] XFS (loop2): Quotacheck needed: Please wait.
[  143.793202][    T9] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  143.796836][    T9] em28xx 1-1:0.132: analog set to bulk mode.
[  143.800423][ T5892] em28xx 1-1:0.132: Registering V4L2 extension
[  143.809158][ T8869] XFS (loop2): Quotacheck: Done.
[  143.814096][    T9] usb 1-1: USB disconnect, device number 18
[  143.817056][    T9] em28xx 1-1:0.132: Disconnecting em28xx
[  143.851427][ T5847] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  143.867378][ T5892] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[  143.870907][ T5892] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[  143.883152][ T5892] em28xx 1-1:0.132: No AC97 audio processor
[  143.890816][ T5892] usb 1-1: Decoder not found
[  143.900484][ T5892] em28xx 1-1:0.132: failed to create media graph
[  143.902666][ T5892] em28xx 1-1:0.132: V4L2 device video103 deregistered
[  143.914432][ T5892] em28xx 1-1:0.132: Remote control support is not available for this card.
[  143.926995][    T9] em28xx 1-1:0.132: Closing input extension
[  143.950891][    T9] em28xx 1-1:0.132: Freeing device
[  144.085132][ T8887] loop2: detected capacity change from 0 to 512
[  144.090847][ T8887] EXT4-fs: Ignoring removed nomblk_io_submit option
[  144.094140][ T8887] EXT4-fs: old and new quota format mixing
[  144.197253][ T8889] loop2: detected capacity change from 0 to 8192
[  144.261842][ T6502] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  144.274376][ T6502] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  144.283003][ T6502]  loop2: unable to read partition table
[  144.289265][ T8889] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  144.292875][ T8889] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  144.297887][ T8889]  loop2: unable to read partition table
[  144.302537][ T8889] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
[  144.439971][   T54] Bluetooth: hci2: command tx timeout
[  145.658005][ T8930] loop4: detected capacity change from 0 to 16
[  145.671289][ T8930] erofs (device loop4): mounted with root inode @ nid 36.
[  146.168344][ T5848] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  146.332369][ T5848] usb 1-1: unable to get BOS descriptor or descriptor too short
[  146.336553][ T5848] usb 1-1: not running at top speed; connect to a high speed hub
[  146.341672][ T5848] usb 1-1: config 8 has an invalid interface number: 250 but max is 0
[  146.345049][ T5848] usb 1-1: config 8 has no interface number 0
[  146.347540][ T5848] usb 1-1: config 8 interface 250 has no altsetting 0
[  146.353221][ T5848] usb 1-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b9.7d
[  146.356743][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.360353][ T5848] usb 1-1: Product: syz
[  146.362248][ T5848] usb 1-1: Manufacturer: syz
[  146.364404][ T5848] usb 1-1: SerialNumber: syz
[  146.518590][   T54] Bluetooth: hci2: command tx timeout
[  146.586922][ T5848] gspca_main: sn9c2028-2.14.0 probing 0458:7005
[  146.593236][ T5848] gspca_sn9c2028: read1 error -71
[  146.595812][ T5848] gspca_sn9c2028: read1 error -71
[  146.598336][ T5848] gspca_sn9c2028: read1 error -71
[  146.600595][ T5848] sn9c2028 1-1:8.250: probe with driver sn9c2028 failed with error -71
[  146.605438][ T5848] usb 1-1: USB disconnect, device number 19
[  147.132355][ T8954] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1003'.
[  147.175378][ T8956] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.183570][ T8956] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.187645][ T8956] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  147.337274][ T8962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1007'.
[  147.658841][ T8968] loop0: detected capacity change from 0 to 32768
[  147.664699][ T8968] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1010 (8968)
[  147.683116][ T8968] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  147.687452][ T8968] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  147.691645][ T8968] BTRFS info (device loop0): using free-space-tree
[  147.759167][   T52] BTRFS warning (device loop0): checksum verify failed on logical 5308416 mirror 1 wanted 0xe1d58233 found 0x05b99823 level 0
[  147.768958][ T8968] BTRFS: error (device loop0) in btrfs_fill_super:986: errno=-5 IO failure
[  147.779335][ T8968] BTRFS error (device loop0 state E): commit super ret -30
[  147.975818][ T8986] Zero length message leads to an empty skb
[  148.246217][ T8998] loop0: detected capacity change from 0 to 512
[  148.251099][ T8998] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  148.254720][ T8998] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  148.275913][ T8998] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  148.283274][ T8998] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  148.287083][ T8998] System zones: 0-2, 18-18, 34-35
[  148.292564][ T8998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.339177][ T5843] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /347/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0
[  148.629906][ T9001] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.926050][ T9006] loop4: detected capacity change from 0 to 8192
[  149.578833][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  149.589046][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  149.593792][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  149.602746][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  149.608661][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  149.800164][ T9020] chnl_net:caif_netlink_parms(): no params data found
[  149.954194][ T9020] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.957358][ T9020] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.963235][ T9020] bridge_slave_0: entered allmulticast mode
[  149.967253][ T9020] bridge_slave_0: entered promiscuous mode
[  149.973477][ T9020] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.976772][ T9020] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.980179][ T9020] bridge_slave_1: entered allmulticast mode
[  149.984605][ T9020] bridge_slave_1: entered promiscuous mode
[  150.023940][ T9020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  150.035479][ T9020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.085223][ T9020] team0: Port device team_slave_0 added
[  150.090532][ T9020] team0: Port device team_slave_1 added
[  150.138889][ T9020] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.142138][ T9020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.146338][ T9037] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  150.153521][ T9020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.164283][ T9020] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.167640][ T9020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.180294][ T9020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  150.259847][ T9020] hsr_slave_0: entered promiscuous mode
[  150.263303][ T9020] hsr_slave_1: entered promiscuous mode
[  150.266224][ T9020] debugfs: 'hsr0' already exists in 'hsr'
[  150.268809][ T9020] Cannot create hsr debugfs directory
[  150.450388][ T9020] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  150.458960][ T9020] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  150.466828][ T9020] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  150.477278][ T9020] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  150.512137][ T9020] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.515153][ T9020] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.518575][ T9020] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.521639][ T9020] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.583445][ T9020] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.612208][ T8599] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.616348][ T8599] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.633604][ T9020] 8021q: adding VLAN 0 to HW filter on device team0
[  150.661619][ T8590] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.664624][ T8590] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.679800][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.682989][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.962411][ T9020] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.060563][ T9065] block nbd4: shutting down sockets
[  151.165895][ T9020] veth0_vlan: entered promiscuous mode
[  151.173596][ T9020] veth1_vlan: entered promiscuous mode
[  151.195326][ T9020] veth0_macvtap: entered promiscuous mode
[  151.200412][ T9020] veth1_macvtap: entered promiscuous mode
[  151.215907][ T9020] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.224220][ T9020] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.234322][ T5864] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.237873][ T5864] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.246008][ T5864] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.251428][ T5864] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.333000][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.336619][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.369743][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.373087][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.638529][   T54] Bluetooth: hci0: command tx timeout
[  151.689265][ T9089] loop5: detected capacity change from 0 to 8192
[  151.701859][ T9089] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  151.826535][ T9091] loop5: detected capacity change from 0 to 8192
[  151.842295][ T9091] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  152.022260][ T9105] netlink: 'syz.2.1055': attribute type 1 has an invalid length.
[  152.072964][ T9105] nbd: couldn't find a device at index 393224
[  153.205804][ T9121] loop5: detected capacity change from 0 to 32768
[  153.222334][ T9121] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  153.276346][ T9121] XFS (loop5): Ending clean mount
[  153.280718][ T9121] XFS (loop5): Quotacheck needed: Please wait.
[  153.309976][ T9121] XFS (loop5): Quotacheck: Done.
[  153.334792][ T9020] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  153.571718][ T9137] loop2: detected capacity change from 0 to 1024
[  153.591607][   T33] audit: type=1800 audit(1755055720.224:22): pid=9137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1064" name="file0" dev="loop2" ino=2 res=0 errno=0
[  153.719235][   T54] Bluetooth: hci0: command tx timeout
[  153.858145][ T9154] loop2: detected capacity change from 0 to 1024
[  153.877260][ T9154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.893894][ T9154] EXT4-fs error (device loop2): ext4_generic_delete_entry:2668: inode #12: block 7: comm syz.2.1073: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0
[  153.910335][ T9154] EXT4-fs error (device loop2) in ext4_delete_inline_entry:1687: Corrupt filesystem
[  153.937566][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.038332][    T9] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  154.046644][ T9165] loop2: detected capacity change from 0 to 128
[  154.052853][ T9165] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  154.060197][ T9165] ext4 filesystem being mounted at /397/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  154.072224][ T9165] EXT4-fs (loop2): shut down requested (1)
[  154.080254][ T9165] fscrypt: loop2: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[  154.097073][ T5847] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  154.203442][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  154.208150][    T9] usb 6-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  154.212679][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.231720][    T9] usb 6-1: config 0 descriptor??
[  154.234705][ T9150] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  154.396203][ T9168] loop4: detected capacity change from 0 to 32768
[  154.412647][ T9168] XFS (loop4): Invalid device [./file0], error=-16
[  154.483127][    T9] usbhid 6-1:0.0: can't add hid device: -71
[  154.485841][    T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  154.502466][    T9] usb 6-1: USB disconnect, device number 2
[  155.798596][   T54] Bluetooth: hci0: command tx timeout
[  156.117449][ T9200] loop5: detected capacity change from 0 to 8
[  156.133945][ T9200] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  156.173643][ T9200] cramfs: Error -3 while decompressing!
[  156.176416][ T9200] cramfs: ffffffff99be3628(26)->ffff88811c0ac000(4096)
[  156.181721][ T9200] cramfs: Error -3 while decompressing!
[  156.184331][ T9200] cramfs: ffffffff99be3642(26)->ffff88811c0ad000(4096)
[  156.187240][ T9200] cramfs: Error -3 while decompressing!
[  156.193332][ T9200] cramfs: ffffffff99be365c(16)->ffff88811c082000(4096)
[  156.208369][ T9200] cramfs: Error -3 while decompressing!
[  156.210876][ T9200] cramfs: ffffffff99be3628(26)->ffff88811c0ac000(4096)
[  156.214953][   T33] audit: type=1800 audit(1755055722.844:23): pid=9200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1092" name="file2" dev="loop5" ino=348 res=0 errno=0
[  156.639051][ T9217] loop2: detected capacity change from 0 to 32768
[  156.641963][ T9217] XFS: attr2 mount option is deprecated.
[  156.655596][ T9217] XFS: attr2 mount option is deprecated.
[  156.662188][ T9232] netlink: 'syz.5.1108': attribute type 4 has an invalid length.
[  156.697865][ T9217] XFS (loop2): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[  156.717659][ T9241] loop5: detected capacity change from 0 to 2048
[  156.733647][ T9217] XFS (loop2): ro->rw transition prohibited on norecovery mount
[  156.738948][ T9243] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  156.770857][ T5847] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  157.198737][   T51] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  157.468503][   T51] usb 6-1: config 5 has an invalid interface number: 179 but max is 0
[  157.477517][   T51] usb 6-1: config 5 has no interface number 0
[  157.504895][   T51] usb 6-1: New USB device found, idVendor=19d2, idProduct=0038, bcdDevice= e.8c
[  157.510235][   T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.513448][   T51] usb 6-1: Product: syz
[  157.515291][   T51] usb 6-1: Manufacturer: syz
[  157.517303][   T51] usb 6-1: SerialNumber: syz
[  157.742076][   T51] usb 6-1: bad CDC descriptors
[  157.751553][   T51] usb 6-1: USB disconnect, device number 3
[  157.878427][   T54] Bluetooth: hci0: command tx timeout
[  158.017606][ T9262] loop4: detected capacity change from 0 to 1024
[  158.041514][   T52] hfsplus: b-tree write err: -5, ino 4
[  158.170037][ T9272] delete_channel: no stack
[  158.173303][ T9271] delete_channel: no stack
[  158.224080][ T9274] loop2: detected capacity change from 0 to 1024
[  158.290053][ T9274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.764090][ T9288] loop4: detected capacity change from 0 to 512
[  158.770480][ T9288] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  158.897115][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1129'.
[  158.953435][ T9281] loop5: detected capacity change from 0 to 40427
[  159.015878][ T9281] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  159.112045][ T9281] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  159.117106][ T9281] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  159.124204][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.567545][ T9295] f2fs_ckpt-7:5: attempt to access beyond end of device
[  159.567545][ T9295] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  159.576993][ T9295] CPU: 1 UID: 0 PID: 9295 Comm: f2fs_ckpt-7:5 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  159.577015][ T9295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  159.577023][ T9295] Call Trace:
[  159.577028][ T9295]  <TASK>
[  159.577034][ T9295]  dump_stack_lvl+0x189/0x250
[  159.577057][ T9295]  ? __pfx_dump_stack_lvl+0x10/0x10
[  159.577072][ T9295]  ? __pfx_queue_work_on+0x10/0x10
[  159.577083][ T9295]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  159.577105][ T9295]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  159.577128][ T9295]  f2fs_handle_critical_error+0x37c/0x540
[  159.577149][ T9295]  f2fs_write_end_io+0x886/0xb60
[  159.577200][ T9295]  __submit_merged_bio+0x27a/0x6a0
[  159.577222][ T9295]  __submit_merged_write_cond+0x255/0x530
[  159.577242][ T9295]  f2fs_write_data_pages+0x261d/0x3000
[  159.577285][ T9295]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  159.577311][ T9295]  ? __pfx_usage_match+0x10/0x10
[  159.577322][ T9295]  ? __bfs+0x154/0x2a0
[  159.577331][ T9295]  ? __pfx_usage_match+0x10/0x10
[  159.577363][ T9295]  ? check_path+0x21/0x40
[  159.577374][ T9295]  ? check_noncircular+0xe0/0x160
[  159.577425][ T9295]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  159.577442][ T9295]  do_writepages+0x32e/0x550
[  159.577467][ T9295]  ? do_raw_spin_unlock+0x4d/0x240
[  159.577485][ T9295]  filemap_fdatawrite+0x199/0x240
[  159.577502][ T9295]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  159.577552][ T9295]  ? preempt_schedule_thunk+0x16/0x30
[  159.577575][ T9295]  f2fs_sync_dirty_inodes+0x31f/0x830
[  159.577605][ T9295]  f2fs_write_checkpoint+0x95a/0x1df0
[  159.577639][ T9295]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  159.577686][ T9295]  ? down_write+0x162/0x1f0
[  159.577701][ T9295]  ? __pfx_down_write+0x10/0x10
[  159.577717][ T9295]  ? __pfx___schedule+0x10/0x10
[  159.577764][ T9295]  __checkpoint_and_complete_reqs+0xd9/0x3b0
[  159.577786][ T9295]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  159.577816][ T9295]  issue_checkpoint_thread+0xd9/0x260
[  159.577837][ T9295]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  159.577856][ T9295]  ? __pfx_autoremove_wake_function+0x10/0x10
[  159.577872][ T9295]  ? __kthread_parkme+0x7b/0x200
[  159.577885][ T9295]  ? __kthread_parkme+0x1a1/0x200
[  159.577903][ T9295]  kthread+0x711/0x8a0
[  159.577921][ T9295]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  159.577938][ T9295]  ? __pfx_kthread+0x10/0x10
[  159.577955][ T9295]  ? _raw_spin_unlock_irq+0x23/0x50
[  159.577968][ T9295]  ? lockdep_hardirqs_on+0x9c/0x150
[  159.577981][ T9295]  ? __pfx_kthread+0x10/0x10
[  159.577997][ T9295]  ret_from_fork+0x3fc/0x770
[  159.578011][ T9295]  ? __pfx_ret_from_fork+0x10/0x10
[  159.578030][ T9295]  ? __switch_to_asm+0x39/0x70
[  159.578043][ T9295]  ? __switch_to_asm+0x33/0x70
[  159.578057][ T9295]  ? __pfx_kthread+0x10/0x10
[  159.578072][ T9295]  ret_from_fork_asm+0x1a/0x30
[  159.578106][ T9295]  </TASK>
[  159.723916][ T9295] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  159.746104][    C0] IPv4: Oversized IP packet from 127.0.0.1
[  160.004925][ T9305] loop2: detected capacity change from 0 to 32768
[  160.009891][ T9305] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1132 (9305)
[  160.029549][ T9305] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  160.033848][ T9305] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  160.055808][ T9305] BTRFS info (device loop2): using free-space-tree
[  160.127157][ T9305] BTRFS info (device loop2): rebuilding free space tree
[  160.188510][   T33] audit: type=1800 audit(1755055726.804:24): pid=9305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1132" name="bus" dev="loop2" ino=263 res=0 errno=0
[  160.340114][ T5847] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  160.422101][ T9334] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma?
[  160.584891][ T9342] loop2: detected capacity change from 0 to 8
[  160.718677][ T9349] loop2: detected capacity change from 0 to 1024
[  160.752681][ T9349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.875065][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.995816][ T9365] loop4: detected capacity change from 0 to 4096
[  161.003295][ T9365] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  161.250650][ T9362] loop2: detected capacity change from 0 to 32768
[  161.259616][ T9362] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1151 (9362)
[  161.276650][ T9362] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  161.282027][ T9362] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  161.285018][ T9362] BTRFS info (device loop2): using free-space-tree
[  161.329544][ T9385] loop4: detected capacity change from 0 to 128
[  161.357431][ T9385] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  161.363089][ T9385] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  161.434220][ T5847] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  161.447727][ T9389] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000400)
[  161.463112][ T9389] FAT-fs (loop4): Filesystem has been set read-only
[  161.849146][ T9363] Process accounting resumed
[  162.125024][ T9403] loop2: detected capacity change from 0 to 2048
[  162.141505][ T9403] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  162.190575][   T33] audit: type=1800 audit(1755055728.824:25): pid=9403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1159" name="bus" dev="loop2" ino=1367 res=0 errno=0
[  163.092887][ T9436] loop4: detected capacity change from 0 to 256
[  163.107325][ T9436] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  163.346388][ T9453] loop2: detected capacity change from 0 to 1024
[  163.405361][   T87] hfsplus: b-tree write err: -5, ino 4
[  163.458575][ T9460] loop2: detected capacity change from 0 to 1764
[  163.493992][ T9460] iso9660: Corrupted directory entry in block 2 of inode 1920
[  163.652689][ T9476] syz_tun: entered allmulticast mode
[  163.919559][ T9495] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1203'.
[  163.923842][ T9495] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1203'.
[  163.978462][   T51] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  164.146934][   T51] usb 3-1: Using ep0 maxpacket: 8
[  164.184181][   T51] usb 3-1: unable to get BOS descriptor or descriptor too short
[  164.257216][   T51] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd
[  164.275754][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.308054][   T51] usb 3-1: Product: syz
[  164.317199][   T51] usb 3-1: Manufacturer: syz
[  164.328471][   T51] usb 3-1: SerialNumber: syz
[  164.656825][   T51] kalmia 3-1:1.0: probe with driver kalmia failed with error -22
[  164.680635][   T51] usb 3-1: USB disconnect, device number 17
[  164.836690][ T9498] loop4: detected capacity change from 0 to 32768
[  164.849939][ T9498] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1204 (9498)
[  164.866834][ T9498] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  164.878049][ T9498] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  164.882922][ T9498] BTRFS info (device loop4): using free-space-tree
[  165.220850][ T9498] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  165.722438][ T9542] loop2: detected capacity change from 0 to 128
[  165.747615][ T9542] ext4: Unknown parameter 'context'
[  165.843025][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1220'.
[  166.327109][ T9565] input: syz1 as /devices/virtual/input/input8
[  166.329877][ T9566] loop4: detected capacity change from 0 to 8
[  166.352775][ T9566] SQUASHFS error: lzo decompression failed, data probably corrupt
[  166.362091][ T9566] SQUASHFS error: Failed to read block 0x0: -5
[  166.366996][ T9566] SQUASHFS error: lzo decompression failed, data probably corrupt
[  166.371907][ T9566] SQUASHFS error: Failed to read block 0x0: -5
[  166.374761][   T33] audit: type=1800 audit(1755055733.004:26): pid=9566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1226" name="file2" dev="loop4" ino=3 res=0 errno=0
[  166.562067][ T9584] loop5: detected capacity change from 0 to 1024
[  166.785843][ T9580] loop4: detected capacity change from 0 to 32768
[  166.789720][ T9580] XFS (loop4): sunit and swidth options incompatible with the noalign option
[  166.834349][ T9599] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1243'.
[  166.866412][ T9601] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1244'.
[  167.034251][ T9610] bridge: RTM_NEWNEIGH with invalid state 0x0
[  167.796727][ T9627] netlink: 'syz.5.1253': attribute type 83 has an invalid length.
[  168.021980][ T9629] loop5: detected capacity change from 0 to 32768
[  168.067408][ T9629] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=data_checksum=none,compression=lz4,recovery_pass_last=initialize_subvolumes,nojournal_transaction_names,noexcl,read_only
[  168.067428][ T9629]   allowing incompatible features above 0.0: (unknown version)
[  168.067436][ T9629]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  168.090336][ T9629] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  168.094540][ T9629] bcachefs (loop5): recovering from clean shutdown, journal seq 10
[  168.097548][ T9629] bcachefs (loop5): Version upgrade required:
[  168.097548][ T9629] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  168.097548][ T9629] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  168.097548][ T9629]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  168.144492][ T9629] bcachefs (loop5): accounting_read... done
[  168.150051][ T9629] bcachefs (loop5): alloc_read... done
[  168.153198][ T9629] bcachefs (loop5): done starting filesystem
[  168.191859][ T9020] bcachefs (loop5): shutting down
[  168.241582][ T9020] bcachefs (loop5): shutdown complete
[  168.340904][ T9661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1269'.
[  168.495968][ T9674] loop4: detected capacity change from 0 to 164
[  168.551507][ T9678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1278'.
[  168.587690][ T9680] loop4: detected capacity change from 0 to 4096
[  168.594706][ T9680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.626107][ T8704] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.670533][   T51] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  168.840356][   T51] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  168.843036][   T51] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x55, changing to 0x5
[  168.846972][   T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  168.851347][   T51] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  168.854224][   T51] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  168.856824][   T51] usb 3-1: Manufacturer: syz
[  168.864842][   T51] usb 3-1: config 0 descriptor??
[  168.869362][   T51] igorplugusb 3-1:0.0: endpoint incorrect
[  168.904977][ T9696] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1285'.
[  168.996863][ T9700] loop4: detected capacity change from 0 to 512
[  169.036790][ T9700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.041076][ T9700] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  169.050355][ T9700] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1287: corrupted inode contents
[  169.055820][ T9700] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.1287: mark_inode_dirty error
[  169.060769][ T9700] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1287: corrupted inode contents
[  169.065480][ T9700] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1287: mark_inode_dirty error
[  169.071508][ T5848] usb 3-1: USB disconnect, device number 18
[  169.092518][ T8704] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.934234][ T9723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1295'.
[  169.937141][ T9723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1295'.
[  169.977473][ T9725] loop2: detected capacity change from 0 to 2048
[  170.005930][ T9726] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  170.043255][ T9725] NILFS (loop2): error -2 truncating bmap (ino=16)
[  170.147404][ T9737] loop2: detected capacity change from 0 to 256
[  170.152718][ T9737] exfat: Deprecated parameter 'utf8'
[  170.154683][ T9737] exfat: Deprecated parameter 'namecase'
[  170.156735][ T9737] exfat: Deprecated parameter 'namecase'
[  170.159508][ T9737] exfat: Deprecated parameter 'utf8'
[  170.167524][ T9737] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d)
[  170.224569][ T9739] loop2: detected capacity change from 0 to 128
[  170.313952][ T9743] loop2: detected capacity change from 0 to 1024
[  170.335071][ T9743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  170.344659][ T9743] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.361074][ T9743] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.1304: lblock 3 mapped to illegal pblock 3 (length 3)
[  170.372724][ T9743] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  170.381078][ T9734] loop4: detected capacity change from 0 to 32768
[  170.381549][ T9743] EXT4-fs (loop2): This should not happen!! Data will be lost
[  170.381549][ T9743] 
[  170.399205][ T9743] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 4: comm syz.2.1304: lblock 4 mapped to illegal pblock 4 (length 1)
[  170.407520][ T9743] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.1304: Freeing blocks not in datazone - block = 3, count = 1
[  170.416367][ T9743] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 4: comm syz.2.1304: lblock 4 mapped to illegal pblock 4 (length 1)
[  170.424106][ T9743] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 5: comm syz.2.1304: lblock 5 mapped to illegal pblock 5 (length 1)
[  170.431789][   T33] audit: type=1800 audit(1755055737.064:27): pid=9743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1304" name="file1" dev="loop2" ino=15 res=0 errno=0
[  170.443460][ T9743] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.1304: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  170.454485][ T9743] EXT4-fs error (device loop2) in ext4_setattr:6071: Corrupt filesystem
[  170.494764][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  170.682889][ T9759] netlink: 'syz.4.1311': attribute type 1 has an invalid length.
[  170.686067][ T9759] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1311'.
[  170.832594][ T9767] loop4: detected capacity change from 0 to 4096
[  170.840677][ T9767] NILFS (loop4): invalid segment: Checksum error in segment payload
[  170.843306][ T9767] NILFS (loop4): trying rollback from an earlier position
[  170.853768][ T9767] NILFS (loop4): recovery complete
[  170.857280][ T9768] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  170.878809][   T51] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  170.913473][ T9770] loop4: detected capacity change from 0 to 8
[  170.915954][ T9770] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  170.926138][ T9770] cramfs: Error -3 while decompressing!
[  170.928153][ T9770] cramfs: ffffffff99be7628(1306)->ffff888037f54000(4096)
[  170.934785][ T9770] cramfs: bad data blocksize 3221485966
[  170.937908][ T9770] cramfs: Error -3 while decompressing!
[  170.939877][ T9770] cramfs: ffffffff99be7628(1306)->ffff888037f54000(4096)
[  170.977284][ T9774] netlink: 'syz.4.1318': attribute type 1 has an invalid length.
[  171.050143][   T51] usb 3-1: Using ep0 maxpacket: 8
[  171.054614][   T51] usb 3-1: unable to get BOS descriptor or descriptor too short
[  171.059878][   T51] usb 3-1: config 8 has an invalid interface number: 255 but max is 0
[  171.063365][   T51] usb 3-1: config 8 has no interface number 0
[  171.065869][   T51] usb 3-1: config 8 interface 255 has no altsetting 0
[  171.076030][   T51] usb 3-1: string descriptor 0 read error: -22
[  171.079205][   T51] usb 3-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf
[  171.082820][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.218380][    T9] usb 6-1: new low-speed USB device number 4 using dummy_hcd
[  171.228410][ T9783] loop4: detected capacity change from 0 to 4096
[  171.231072][ T9783] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  171.241659][ T9783] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  171.289707][ T9783] ntfs3: Cannot use different iocharset when remounting!
[  171.297187][   T51] catc 3-1:8.255: Can't set altsetting 1.
[  171.299871][   T51] catc 3-1:8.255: probe with driver catc failed with error -5
[  171.304999][   T51] usb 3-1: USB disconnect, device number 19
[  171.375172][    T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  171.379889][    T9] usb 6-1: config 0 has no interface number 0
[  171.382411][    T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  171.386416][    T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  171.391585][    T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  171.394962][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.428320][    T9] usb 6-1: config 0 descriptor??
[  171.430859][ T9776] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  171.437802][    T9] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  171.489142][ T9786] loop4: detected capacity change from 0 to 2048
[  171.493396][ T9786] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  171.498935][   T33] audit: type=1800 audit(1755055994.131:28): pid=9786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1323" name="file2" dev="loop4" ino=1347 res=0 errno=0
[  171.506009][   T33] audit: type=1800 audit(1755055994.131:29): pid=9786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1323" name="file2" dev="loop4" ino=1347 res=0 errno=0
[  171.637368][ T9788] loop4: detected capacity change from 0 to 2048
[  171.653891][ T9788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.658719][ T9788] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.736747][ T9792] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1324: bg 0: block 345: padding at end of block bitmap is not set
[  171.743349][ T9792] EXT4-fs (loop4): Remounting filesystem read-only
[  171.747039][   T52] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30
[  171.788617][ T8704] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.833059][ T9794] loop4: detected capacity change from 0 to 4096
[  171.840928][ T9794] NILFS (loop4): invalid segment: Checksum error in segment payload
[  171.843768][ T9794] NILFS (loop4): trying rollback from an earlier position
[  171.860640][ T9794] NILFS (loop4): recovery complete
[  171.985845][ T9808] netlink: 212264 bytes leftover after parsing attributes in process `syz.4.1332'.
[  172.100058][ T9822] raw_sendmsg: syz.2.1339 forgot to set AF_INET. Fix it!
[  173.592815][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803c267000: rx timeout, send abort
[  173.603927][ T9859] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1355'.
[  173.996597][    T9] usb 6-1: USB disconnect, device number 4
[  174.072201][ T9876] Invalid ELF header magic: != ELF
[  174.092708][    C0] vcan0: j1939_tp_rxtimer: 0xffff88812039f400: rx timeout, send abort
[  174.097598][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803c267000: abort rx timeout. Force session deactivation
[  174.236662][ T9885] fuse: Bad value for 'fd'
[  174.278128][ T9880] loop5: detected capacity change from 0 to 32768
[  174.346939][ T9880] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  174.359591][ T9880] XFS (loop5): Ending clean mount
[  174.457025][   T33] audit: type=1800 audit(1755055997.073:30): pid=9880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1364" name="file1" dev="loop5" ino=6150 res=0 errno=0
[  174.596012][    C0] vcan0: j1939_tp_rxtimer: 0xffff88812039f400: abort rx timeout. Force session deactivation
[  174.627881][ T9020] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  174.764467][ T9911] loop5: detected capacity change from 0 to 8192
[  174.862368][ T9919] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1378'.
[  174.866061][ T9917] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1378'.
[  174.872644][ T9917] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1378'.
[  175.588323][ T9947] nbd0: detected capacity change from 0 to 127
[  175.592560][   T56] block nbd0: Receive control failed (result -32)
[  175.631998][ T9953] 9pnet: p9_errstr2errno: server reported unknown error @cDB0xffffffffffffffff
[  175.748924][ T9961] loop4: detected capacity change from 0 to 512
[  175.751414][ T9963] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1396'.
[  175.760927][ T9961] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  175.813792][ T9965] loop4: detected capacity change from 0 to 8
[  175.832859][ T9965] SQUASHFS error: xz decompression failed, data probably corrupt
[  175.838452][ T9965] SQUASHFS error: Failed to read block 0x108: -5
[  175.843420][ T9965] SQUASHFS error: Unable to read metadata cache entry [106]
[  175.847469][ T9965] SQUASHFS error: Unable to read inode 0x11f
[  176.081081][ T7254] block nbd1: Receive control failed (result -32)
[  176.092623][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1406'.
[  176.143941][ T9986] loop4: detected capacity change from 0 to 1024
[  176.199272][ T5235] Bluetooth: hci0: command 0x0406 tx timeout
[  176.247744][ T9985] Process accounting resumed
[  176.250594][ T9985] syz.4.1407: attempt to access beyond end of device
[  176.250594][ T9985] loop4: rw=0, sector=8556385938, nr_sectors = 2 limit=1024
[  176.273806][ T5892] kworker/0:4: attempt to access beyond end of device
[  176.273806][ T5892] loop4: rw=0, sector=8556385938, nr_sectors = 2 limit=1024
[  176.974479][T10006] netlink: 'syz.4.1415': attribute type 29 has an invalid length.
[  177.747455][T10022] loop4: detected capacity change from 0 to 1024
[  178.266994][T10032] syz_tun: entered promiscuous mode
[  178.274170][T10032] syz_tun: left promiscuous mode
[  178.496931][T10034] loop5: detected capacity change from 0 to 512
[  178.503687][T10034] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  178.507879][T10034] EXT4-fs (loop5): fragment/cluster size (4096) != block size (2048)
[  178.681350][T10036] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1429'.
[  178.720049][   T33] audit: type=1326 audit(1755056001.355:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.2.1431" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee2b8ebe9 code=0x7ffc0000
[  178.761290][   T33] audit: type=1326 audit(1755056001.365:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.2.1431" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee2b8ebe9 code=0x7ffc0000
[  178.789225][   T33] audit: type=1326 audit(1755056001.365:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.2.1431" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ee2b8ebe9 code=0x7ffc0000
[  178.806041][   T33] audit: type=1326 audit(1755056001.365:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.2.1431" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee2b8ebe9 code=0x7ffc0000
[  178.813554][   T33] audit: type=1326 audit(1755056001.365:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.2.1431" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee2b8ebe9 code=0x7ffc0000
[  178.822054][   T33] audit: type=1326 audit(1755056001.365:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.2.1431" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ee2b8ebe9 code=0x7ffc0000
[  178.831202][   T33] audit: type=1326 audit(1755056001.365:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.2.1431" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee2b8ebe9 code=0x7ffc0000
[  178.839655][   T33] audit: type=1326 audit(1755056001.365:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.2.1431" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee2b8ebe9 code=0x7ffc0000
[  178.847244][   T33] audit: type=1326 audit(1755056001.365:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.2.1431" exe="/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f9ee2b8ebe9 code=0x7ffc0000
[  178.854330][   T33] audit: type=1326 audit(1755056001.365:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.2.1431" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee2b8ebe9 code=0x7ffc0000
[  179.177185][T10046] loop5: detected capacity change from 0 to 32768
[  179.184733][   T28] hfsplus: b-tree write err: -5, ino 3
[  179.187314][T10046] bcachefs: bch2_fs_parse_param() Error parsing option gc_reserve_bytes: option_value
[  179.259189][T10056] loop4: detected capacity change from 0 to 4096
[  179.262435][T10056] EXT4-fs (loop4): Test dummy encryption mode enabled
[  179.275866][T10056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.304942][ T8704] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.452967][T10072] loop4: detected capacity change from 0 to 256
[  179.467705][T10072] FAT-fs (loop4): Directory bread(block 64) failed
[  179.474287][T10072] FAT-fs (loop4): Directory bread(block 65) failed
[  179.476499][T10072] FAT-fs (loop4): Directory bread(block 66) failed
[  179.478640][T10072] FAT-fs (loop4): Directory bread(block 67) failed
[  179.491063][T10072] FAT-fs (loop4): Directory bread(block 68) failed
[  179.493189][T10072] FAT-fs (loop4): Directory bread(block 69) failed
[  179.504009][T10072] FAT-fs (loop4): Directory bread(block 70) failed
[  179.514888][T10072] FAT-fs (loop4): Directory bread(block 71) failed
[  179.517201][T10072] FAT-fs (loop4): Directory bread(block 72) failed
[  179.529849][T10072] FAT-fs (loop4): Directory bread(block 73) failed
[  179.592348][   T24] IPVS: starting estimator thread 0...
[  179.629079][T10069] loop5: detected capacity change from 0 to 32768
[  179.655991][T10069] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  179.686130][T10078] IPVS: using max 78 ests per chain, 187200 per kthread
[  179.831203][ T9020] ocfs2: Unmounting device (7,5) on (node local)
[  180.005790][T10117] loop4: detected capacity change from 0 to 4096
[  180.008970][T10117] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  180.017098][T10117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.032436][T10117] EXT4-fs (loop4): shut down requested (2)
[  180.060352][ T8704] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.910390][   T54] Bluetooth: hci0: unexpected cc 0x2039 length: 9 > 1
[  180.914613][   T54] Bluetooth: hci0: unexpected event for opcode 0x2039
[  181.273764][T10181] loop4: detected capacity change from 0 to 256
[  181.282135][T10181] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d)
[  181.406936][T10189] loop4: detected capacity change from 0 to 64
[  181.427299][T10189] minix_free_block (loop4:21): bit already cleared
[  181.663500][T10208] netlink: 'syz.4.1509': attribute type 10 has an invalid length.
[  181.687496][T10208] team0: Port device dummy0 added
[  181.690793][T10208] netlink: 'syz.4.1509': attribute type 10 has an invalid length.
[  181.700121][T10208] team0: Port device dummy0 removed
[  181.708688][T10208] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  181.856492][T10230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1520'.
[  183.912267][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  184.064090][    T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  184.068255][    T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  184.072472][    T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  184.075279][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.080337][T10275] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  184.085546][    T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  184.297452][   T24] usb 6-1: USB disconnect, device number 5
[  184.877305][T10281] tc_dump_action: action bad kind
[  184.921709][   T54] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  184.925366][   T54] Bluetooth: hci0: Injecting HCI hardware error event
[  184.933171][ T5235] Bluetooth: hci0: hardware error 0x00
[  186.036976][T10334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  186.899476][T10347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1574'.
[  186.991271][ T5235] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  187.008971][T10357] loop5: detected capacity change from 0 to 512
[  187.014306][T10357] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  187.042392][T10357] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.128169][ T9020] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.230169][T10372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1584'.
[  187.610606][    T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  187.764730][    T9] usb 6-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  187.768163][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.771461][    T9] usb 6-1: Product: syz
[  187.772880][    T9] usb 6-1: Manufacturer: syz
[  187.774449][    T9] usb 6-1: SerialNumber: syz
[  187.778455][    T9] usb 6-1: config 0 descriptor??
[  187.782786][    T9] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  187.990818][    T9] sonixb 6-1:0.0: Error reading register 00: -71
[  187.994619][    T9] usb 6-1: USB disconnect, device number 6
[  189.584155][T10450] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1618'.
[  189.618670][T10450] bridge0: entered promiscuous mode
[  189.621938][T10450] bridge0: port 3(macvlan2) entered blocking state
[  189.624241][T10450] bridge0: port 3(macvlan2) entered disabled state
[  189.626570][T10450] macvlan2: entered allmulticast mode
[  189.628407][T10450] bridge0: entered allmulticast mode
[  189.642592][T10450] macvlan2: left allmulticast mode
[  189.644547][T10450] bridge0: left allmulticast mode
[  189.647085][T10450] bridge0: left promiscuous mode
[  189.953674][T10458] loop4: detected capacity change from 0 to 512
[  189.996636][T10458] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  190.125106][T10468] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  190.138240][T10468] CIFS mount error: No usable UNC path provided in device string!
[  190.138240][T10468] 
[  190.144074][T10468] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  190.199513][T10476] loop5: detected capacity change from 0 to 512
[  190.205637][T10476] EXT4-fs: Ignoring removed i_version option
[  190.214296][T10476] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.264125][T10476] evm: overlay not supported
[  190.386534][ T9020] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.508955][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1644'.
[  190.581929][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1649'.
[  190.878384][T10534] loop5: detected capacity change from 0 to 32768
[  190.883709][T10534] 
[  190.883709][T10534]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  190.883709][T10534] 
[  190.900457][T10534] read_mapping_page failed!
[  190.902353][T10534] ERROR: (device loop5): txCommit: 
[  190.902353][T10534] 
[  190.910138][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1665'.
[  190.910798][T10534] read_mapping_page failed!
[  190.914030][T10548] IPVS: Error joining to the multicast group
[  190.914955][T10534] ERROR: (device loop5): txCommit: 
[  190.914955][T10534] 
[  190.928017][ T9020] 
[  190.928017][ T9020]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  190.928017][ T9020] 
[  190.933353][ T9020] 
[  190.933353][ T9020]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  190.933353][ T9020] 
[  191.001682][T10552] cgroup: noprefix used incorrectly
[  191.243881][T10565] loop5: detected capacity change from 0 to 32768
[  191.650716][  T116] ------------[ cut here ]------------
[  191.652926][  T116] WARNING: CPU: 1 PID: 116 at fs/jfs/jfs_dmap.c:2875 dbAdjTree+0x454/0x4e0
[  191.656437][  T116] Modules linked in:
[  191.658956][  T116] CPU: 1 UID: 0 PID: 116 Comm: jfsCommit Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  191.664725][  T116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  191.669084][  T116] RIP: 0010:dbAdjTree+0x454/0x4e0
[  191.670830][  T116] Code: 5a ff ff ff e8 2d af 81 fe eb 05 e8 26 af 81 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 43 7f 3d 08 cc e8 0d af 81 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff
[  191.677012][  T116] RSP: 0018:ffffc900023cf508 EFLAGS: 00010293
[  191.679451][  T116] RAX: ffffffff833dfca3 RBX: ffff888106a68010 RCX: ffff8881053e1cc0
[  191.682032][  T116] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
[  191.685163][  T116] RBP: 0000000000020056 R08: ffffea00041a9a07 R09: 1ffffd4000835340
[  191.688631][  T116] R10: dffffc0000000000 R11: fffff94000835341 R12: ffff888106a68018
[  191.691649][  T116] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155
[  191.694231][  T116] FS:  0000000000000000(0000) GS:ffff8881a3c24000(0000) knlGS:0000000000000000
[  191.697587][  T116] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  191.700311][  T116] CR2: 0000001b34b20ff8 CR3: 00000001117de000 CR4: 00000000000006f0
[  191.703438][  T116] Call Trace:
[  191.704620][  T116]  <TASK>
[  191.705721][  T116]  ? __pfx_lock_metapage+0x10/0x10
[  191.707660][  T116]  dbJoin+0x238/0x300
[  191.709250][  T116]  ? do_read_cache_folio+0x4c6/0x590
[  191.711460][  T116]  dbFreeBits+0x4e1/0xdb0
[  191.713106][  T116]  dbFree+0x336/0x650
[  191.714657][  T116]  txFreeMap+0x9e6/0xde0
[  191.716371][  T116]  ? do_raw_spin_unlock+0x4d/0x240
[  191.718384][  T116]  xtTruncate+0xcea/0x2e70
[  191.719833][  T116]  ? __pfx_xtTruncate+0x10/0x10
[  191.721462][  T116]  ? reacquire_held_locks+0x127/0x1d0
[  191.723250][  T116]  ? __mark_inode_dirty+0x4a6/0xdf0
[  191.725087][  T116]  ? __asan_memset+0x22/0x50
[  191.726659][  T116]  ? __dquot_initialize+0x218/0xcb0
[  191.728693][  T116]  jfs_free_zero_link+0x33a/0x4a0
[  191.730443][  T116]  ? __pfx_jfs_free_zero_link+0x10/0x10
[  191.732353][  T116]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  191.734429][  T116]  jfs_evict_inode+0x363/0x440
[  191.736133][  T116]  ? evict+0x4f8/0x9c0
[  191.737799][  T116]  ? __pfx_jfs_evict_inode+0x10/0x10
[  191.740111][  T116]  evict+0x504/0x9c0
[  191.741850][  T116]  ? __pfx_evict+0x10/0x10
[  191.743585][  T116]  ? do_raw_spin_unlock+0x4d/0x240
[  191.745603][  T116]  ? _raw_spin_unlock+0x28/0x50
[  191.747622][  T116]  ? iput+0x6d8/0x9d0
[  191.749107][  T116]  jfs_lazycommit+0x43f/0xa90
[  191.750814][  T116]  ? __pfx_jfs_lazycommit+0x10/0x10
[  191.752805][  T116]  ? __pfx_default_wake_function+0x10/0x10
[  191.755101][  T116]  ? __kthread_parkme+0x7b/0x200
[  191.756927][  T116]  ? __kthread_parkme+0x1a1/0x200
[  191.758766][  T116]  kthread+0x711/0x8a0
[  191.760413][  T116]  ? __pfx_jfs_lazycommit+0x10/0x10
[  191.762333][  T116]  ? __pfx_kthread+0x10/0x10
[  191.763985][  T116]  ? _raw_spin_unlock_irq+0x23/0x50
[  191.765672][  T116]  ? lockdep_hardirqs_on+0x9c/0x150
[  191.767430][  T116]  ? __pfx_kthread+0x10/0x10
[  191.769168][  T116]  ret_from_fork+0x3fc/0x770
[  191.771135][  T116]  ? __pfx_ret_from_fork+0x10/0x10
[  191.773310][  T116]  ? __switch_to_asm+0x39/0x70
[  191.774983][  T116]  ? __switch_to_asm+0x33/0x70
[  191.776573][  T116]  ? __pfx_kthread+0x10/0x10
[  191.778451][  T116]  ret_from_fork_asm+0x1a/0x30
[  191.780405][  T116]  </TASK>
[  191.781606][  T116] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  191.784545][  T116] CPU: 1 UID: 0 PID: 116 Comm: jfsCommit Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  191.788716][  T116] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  191.791887][  T116] Call Trace:
[  191.792972][  T116]  <TASK>
[  191.794002][  T116]  dump_stack_lvl+0x99/0x250
[  191.795669][  T116]  ? __asan_memcpy+0x40/0x70
[  191.797356][  T116]  ? __pfx_dump_stack_lvl+0x10/0x10
[  191.799125][  T116]  ? __pfx__printk+0x10/0x10
[  191.800659][  T116]  vpanic+0x281/0x750
[  191.801973][  T116]  ? __pfx__printk+0x10/0x10
[  191.803499][  T116]  ? __pfx_vpanic+0x10/0x10
[  191.804937][  T116]  ? is_bpf_text_address+0x26/0x2b0
[  191.806592][  T116]  panic+0xb9/0xc0
[  191.807870][  T116]  ? __pfx_panic+0x10/0x10
[  191.809465][  T116]  __warn+0x31b/0x4b0
[  191.810993][  T116]  ? dbAdjTree+0x454/0x4e0
[  191.812821][  T116]  ? dbAdjTree+0x454/0x4e0
[  191.814587][  T116]  report_bug+0x2be/0x4f0
[  191.816119][  T116]  ? dbAdjTree+0x454/0x4e0
[  191.817750][  T116]  ? dbAdjTree+0x454/0x4e0
[  191.819438][  T116]  ? dbAdjTree+0x456/0x4e0
[  191.821043][  T116]  handle_bug+0x84/0x160
[  191.822589][  T116]  exc_invalid_op+0x1a/0x50
[  191.824358][  T116]  asm_exc_invalid_op+0x1a/0x20
[  191.826035][  T116] RIP: 0010:dbAdjTree+0x454/0x4e0
[  191.827779][  T116] Code: 5a ff ff ff e8 2d af 81 fe eb 05 e8 26 af 81 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 43 7f 3d 08 cc e8 0d af 81 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff
[  191.834227][  T116] RSP: 0018:ffffc900023cf508 EFLAGS: 00010293
[  191.836198][  T116] RAX: ffffffff833dfca3 RBX: ffff888106a68010 RCX: ffff8881053e1cc0
[  191.838858][  T116] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
[  191.841419][  T116] RBP: 0000000000020056 R08: ffffea00041a9a07 R09: 1ffffd4000835340
[  191.843995][  T116] R10: dffffc0000000000 R11: fffff94000835341 R12: ffff888106a68018
[  191.846589][  T116] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155
[  191.849152][  T116]  ? dbAdjTree+0x453/0x4e0
[  191.850773][  T116]  ? dbAdjTree+0x453/0x4e0
[  191.852330][  T116]  ? __pfx_lock_metapage+0x10/0x10
[  191.854041][  T116]  dbJoin+0x238/0x300
[  191.855364][  T116]  ? do_read_cache_folio+0x4c6/0x590
[  191.857107][  T116]  dbFreeBits+0x4e1/0xdb0
[  191.858501][  T116]  dbFree+0x336/0x650
[  191.860090][  T116]  txFreeMap+0x9e6/0xde0
[  191.861784][  T116]  ? do_raw_spin_unlock+0x4d/0x240
[  191.863717][  T116]  xtTruncate+0xcea/0x2e70
[  191.865459][  T116]  ? __pfx_xtTruncate+0x10/0x10
[  191.867348][  T116]  ? reacquire_held_locks+0x127/0x1d0
[  191.869364][  T116]  ? __mark_inode_dirty+0x4a6/0xdf0
[  191.871374][  T116]  ? __asan_memset+0x22/0x50
[  191.872918][  T116]  ? __dquot_initialize+0x218/0xcb0
[  191.874773][  T116]  jfs_free_zero_link+0x33a/0x4a0
[  191.876646][  T116]  ? __pfx_jfs_free_zero_link+0x10/0x10
[  191.878791][  T116]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  191.881091][  T116]  jfs_evict_inode+0x363/0x440
[  191.883037][  T116]  ? evict+0x4f8/0x9c0
[  191.884686][  T116]  ? __pfx_jfs_evict_inode+0x10/0x10
[  191.886483][  T116]  evict+0x504/0x9c0
[  191.887774][  T116]  ? __pfx_evict+0x10/0x10
[  191.889212][  T116]  ? do_raw_spin_unlock+0x4d/0x240
[  191.891229][  T116]  ? _raw_spin_unlock+0x28/0x50
[  191.892981][  T116]  ? iput+0x6d8/0x9d0
[  191.894524][  T116]  jfs_lazycommit+0x43f/0xa90
[  191.896308][  T116]  ? __pfx_jfs_lazycommit+0x10/0x10
[  191.898438][  T116]  ? __pfx_default_wake_function+0x10/0x10
[  191.900697][  T116]  ? __kthread_parkme+0x7b/0x200
[  191.902266][  T116]  ? __kthread_parkme+0x1a1/0x200
[  191.903881][  T116]  kthread+0x711/0x8a0
[  191.905183][  T116]  ? __pfx_jfs_lazycommit+0x10/0x10
[  191.906834][  T116]  ? __pfx_kthread+0x10/0x10
[  191.908340][  T116]  ? _raw_spin_unlock_irq+0x23/0x50
[  191.910090][  T116]  ? lockdep_hardirqs_on+0x9c/0x150
[  191.911783][  T116]  ? __pfx_kthread+0x10/0x10
[  191.913234][  T116]  ret_from_fork+0x3fc/0x770
[  191.914678][  T116]  ? __pfx_ret_from_fork+0x10/0x10
[  191.916314][  T116]  ? __switch_to_asm+0x39/0x70
[  191.917931][  T116]  ? __switch_to_asm+0x33/0x70
[  191.919562][  T116]  ? __pfx_kthread+0x10/0x10
[  191.921142][  T116]  ret_from_fork_asm+0x1a/0x30
[  191.922735][  T116]  </TASK>
[  191.924621][  T116] Kernel Offset: disabled
[  191.926141][  T116] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:29:18  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff1c00040 RBX=ffffffff929fff00 RCX=dffffc0000000000 RDX=dffffc0000000000
RSI=0000000000000008 RDI=ffff8880303e40f0 RBP=ffffffff8e000160 RSP=ffffc9000335f600
R8 =ffff8880303e40f7 R9 =1ffff1100607c81e R10=dffffc0000000000 R11=ffffed100607c81f
R12=0000000000000000 R13=ffffffff8dbdbd10 R14=1ffffffff1b7b7a2 R15=ffff8881071280d1
RIP=ffffffff819b8678 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3b2355 CR3=000000010e7e2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=0000000000000000 00007f9ee2c12ee7 XMM09=0000000000000000 00007f9ee2c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900023cecb0
R8 =ffff888021640237 R9 =1ffff110042c8046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af18de R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b34b20ff8 CR3=00000001117de000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000015 000000000003bf12
XMM02=ffffffffff040880 808010000c0172d6 XMM03=ffff040fffffffff ffff040010000fff
XMM04=0000000000000000 0000000000000000 XMM05=00005555803081aa 0000555580308060
XMM06=0000000000000000 0000000000000000 XMM07=ffff040fffffffff ffff040fffffffff
XMM08=ffff040010000fff ffffffffff040880 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
