last executing test programs:

1m53.446035999s ago: executing program 0 (id=80):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)

1m53.391284766s ago: executing program 0 (id=82):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x101140)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x0, 0x34343452, 0x280, 0xd52, 0x3, @stepwise={{0x8001, 0x6}, {0x3, 0x200}, {0x7ff, 0x84}}})

1m53.330109003s ago: executing program 0 (id=84):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710443000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

1m53.257497019s ago: executing program 0 (id=86):
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000040)='./file2\x00', 0x2814c00, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1f, 0x249, &(0x7f0000000a00)="$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")
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0xa4)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000c80)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x18, 0x8, 0x0, 0x8000000000000001, 0x3, 0x3, 0x6, 0x59, 0x40, 0x171, 0x1, 0x4980, 0x38, 0x1, 0x6, 0x2, 0xbc4d}, [{0x70000000, 0x9, 0xffffffffe115859e, 0x7a46, 0xb5, 0x196c14cf, 0x8, 0x3}]}, 0x78)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x7, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c675bd9bffbcc2542ded71238259ca171ce1a311ef543dc137661d34f7c700", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0x5]})
write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x22)

1m52.961658397s ago: executing program 0 (id=97):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f300000000008000140"], 0xd4}}, 0x4000010)

1m52.511771218s ago: executing program 0 (id=101):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="f49105"], 0x0)

1m52.285548431s ago: executing program 32 (id=101):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="f49105"], 0x0)

16.513102551s ago: executing program 1 (id=1221):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x45e, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0xf2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfe, 0x0, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000000)={0x0, 0x23, 0x5, {0x5, 0x4, "44d042"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

14.7638691s ago: executing program 1 (id=1231):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x3c, r1, 0xe17131a1c005744d, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40006095}, 0x40010)

14.683322423s ago: executing program 1 (id=1233):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket(0x23, 0x5, 0x0)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004080}, 0x20001041)
r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345})
io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0)

14.363467483s ago: executing program 1 (id=1237):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x469, &(0x7f0000000ac0)="$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")
creat(&(0x7f0000000000)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
open_by_handle_at(r1, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x20, 0x5}}, 0x0)

13.879505687s ago: executing program 1 (id=1242):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000140)={0x18, 0x1, 0x0, 0x204, 0x0, 0x1})

13.454425269s ago: executing program 1 (id=1249):
syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [], "7f49"}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x5]}}}}}}, 0x0)

12.976632722s ago: executing program 33 (id=1249):
syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [], "7f49"}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x5]}}}}}}, 0x0)

3.221109113s ago: executing program 3 (id=1332):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

3.13199138s ago: executing program 4 (id=1333):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$tun(r0, &(0x7f0000000600)={@val={0x0, 0x1}, @void, @x25={0x0, 0xf, 0x5, "c2"}}, 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40)

2.911859921s ago: executing program 4 (id=1336):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040))

2.89011493s ago: executing program 3 (id=1337):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x6}, 0x50)
r1 = socket$inet(0x2, 0x3, 0x6)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20)

2.776304327s ago: executing program 4 (id=1338):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000300)=[{&(0x7f0000007c00)="580000001400192340834b80040d8c5602a647623eff5bab4e250200000058006f543bc2945f640094f96a0325010ebc806200000014008000f0fffeffe84d3ac561fff5dd000000100002000400080004000000224e0000", 0x58}], 0x1)

2.775029383s ago: executing program 3 (id=1340):
timer_create(0x3, 0x0, &(0x7f0000001400))
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

2.680275911s ago: executing program 4 (id=1341):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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")
mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc000, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1.925632342s ago: executing program 4 (id=1349):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000004c0)='\b\x00', 0x2, 0x4008080, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10)
sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x4000050, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8)

1.840909855s ago: executing program 3 (id=1351):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000)
io_uring_setup(0x191a, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x44, 0x6, 0x4c8, 0x0, 0x130, 0x0, 0x0, 0x98, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ip={@local, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @inet=@DSCP={0x28}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'dvmrp0\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @local, 0x0, 0x0, 'geneve0\x00', 'veth1_to_team\x00', {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x90, 0x1b8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv4=@multicast1, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a60000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94)
r3 = socket(0x10, 0x803, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000600)=r2, 0x4)
sendmsg$nl_generic(r3, 0x0, 0x0)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
msgrcv(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1000)
msgsnd(0x0, 0x0, 0xf1, 0x800)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x4000000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

1.190905247s ago: executing program 2 (id=1353):
mount$tmpfs(0x0, 0x0, 0x0, 0x1046409, &(0x7f0000000140)={[{@grpquota_inode_hardlimit}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x5}, 0x0)
r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd)
r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f0000000480), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}})

1.190626694s ago: executing program 2 (id=1354):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
clock_adjtime(0x0, &(0x7f0000000000)={0x0, 0x80000001, 0x800000000b, 0xff, 0x4, 0x20000000008, 0x79800000, 0xffff, 0x6, 0x6, 0xffffffffffffffff, 0x5, 0x810f, 0x2, 0xfffffffffffffffc, 0xe6b, 0xfffffffffffffff0, 0x4, 0x5, 0x800, 0x1, 0x2, 0x0, 0x4, 0x7, 0x8})

1.09385409s ago: executing program 2 (id=1355):
syz_emit_ethernet(0x16, &(0x7f0000000500)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@llc={0x4, {@snap={0xaa, 0x55, "1f", "e6b2cc", 0xc}}}}}, 0x0)

1.023670388s ago: executing program 2 (id=1356):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0)
write$vga_arbiter(r0, &(0x7f0000001580)=ANY=[@ANYBLOB='target PCI:', @ANYRES8=r0], 0x13)

941.390893ms ago: executing program 4 (id=1357):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001a00010000000000000000000a000000000000000000000006001d000000000006001c0000000000080019"], 0x34}}, 0x0)

941.115642ms ago: executing program 2 (id=1358):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@deltaction={0x60, 0x31, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0xfffffffffffffd5e}, 0x1, 0x0, 0x0, 0x881}, 0x8000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a0a050023080000440012800b000100697036746e6c00003400028008000100", @ANYRES32, @ANYBLOB="14000200ff020000000000000000000000000011140003"], 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000)

785.695056ms ago: executing program 34 (id=1357):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001a00010000000000000000000a000000000000000000000006001d000000000006001c0000000000080019"], 0x34}}, 0x0)

774.314293ms ago: executing program 3 (id=1360):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c646973636172643d3078303030303030303030303030303030332c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d6d6163637972696c6c69632c0067add4ceec7cb8702b1b4a0ff322839e69b507d7478e0706b00408dc59283f5c0159b8e3c0289dcb182504844ef8e6972cdb3f50680fcb602ed27c1f6b47a91f941f154ae205d34a9b7a7c67efa0c0e2a70251d664fce12ae64a5a521aa83080b7672c4e1566a61a0ade4b6c9d78151053d9fb31fd2cfc77f269f873e14e5fe3c46c0acbb22d40391ae31d2025dcd947adf76739ae4ecbe3b630040b37e2b09d7816e0b93981de1147532cf2f46d4d4904f68fb43cd165b9", @ANYBLOB="3db1bd3c9388ce300f92cc8091d7ddbdcfffeed8bb90e543382e29209562d6483c6fcfdf79d0b465e6bc8ea70762049054a683ca4394e098765d85fa3b798fc191119debc7d45cce724609d275eabc974abf88d2270db005808488efc289084aff3069b2b0a78cdfa1f780c10f6c51d7c9ced7ab3e8a7aa716d5ebe1e8cb6255366a32ca4bfad14e3b1315ec", @ANYRESHEX, @ANYRES64, @ANYRES16, @ANYRES64], 0x0, 0x624c, &(0x7f0000001f80)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgCYsmKB8iCLTseAEs2EiirFKrpc8Y1lZ7pGdvd1eP6/aRx1denavqU/119marqEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/PAHPz5XRMSVX6UbTkR8LvoRvYiVql6LiJW1E3n5QUS8ENvN8XxEDJciitz4bMTrEfHx8Yj7D+6sVzedP2A/vv+Xf/7hJ8d+9I8/Dc/876+3+m/stdzt27/979/uPvr2AgAAQBeVZVkW6WP+yfT5vtd2pwCAuciv/2WSb1cvXL25YP1Rq9Vq9RGs68rJ7taLiNisr1O9Z3A4HgCOmM34pO0u0CL5d9ogIo613QlgoRVtd4CZuP/gznqR8i3qrwdr4/Z8Lsiu/DeLnes79ppO0zzHZF6Pr63ox3N79GdlTn1YJDn/XjP/K+P2UVpu1vnPy175j8aXPnVOzr/fzL/h6cm/NzH/rsr5Dw6Vf1/+AAAAAACwwPLf/0+0fPx36fE35UD2O/67Nqc+AAAAAAAAAMCT9rjj/+0ojP8HAAAAi6r6rF753fGHt+31XWzV7ZeLiGcaywMdky6WWW27HwAAAAAAAAAAAADQJYPxObyXi4hhRDyzulqWZfVT16wP63HXP+q6vv3QZW0/yQMAwNjHxxvX8hcRyxFxOX3X33B1dbUsl1dWy9VyZSm/nx0tLZcrtc+1eVrdtjQ6wBviwaisftlybb26aZ+Xp7U3f191X6Oyf4COzUeLgQNARIxfje57RXrKlOWz0fa7HI6GSft/v52HLU+I/Z+DaPtxCgAAAMxeWZZlkb7O+2Q65t9ru1MAwFzk1//mcQG1Wq1Wq9VPX11XTna3XkTEZn2d6j2D4fgB4IjZjE/a7gItkn+nDSLihbY7ASy0ou0OMBP3H9xZL1K+Rf31II3vns8F2ZX/ZrG9Xl5/0nSa5jkm83p8bUU/ntujP8/PqQ+LJOffa+Z/Zdw+SsvNOv952Sv/ajtPtNCftuX8+838G56e/HsT8++qnP/gUPn35Q8AAAAAAAss//3/xEId/x096uZMtd/x37WZ3SsAAAAAAAAAzNb9B3fW83Wv+fj/FyYs5/rPp1POv5B/J+X8e438v9pYrj4e8L23H+b/nwd31v9469+fz9OD5r+UZ4r0yCrSI6JI91QM0vRxtu6ztob9UXVPw6LXH6Rzfsrhu3EtrsdGnN21bC/9fzxsP7erverpcLu97I/bz+9qH4zbN2Nn/Qu72ofpTKdyJbefjvX4eVyPd7bbq7alKdu/PKW9nNKe8+/b/zsp5z+o/VT5r6b2ojGt3Puo95n9vj6ddD9vXfvib87OfnOm2or+zrbVVdv3Ugv92f4/OTaKX97cuHH69tVbt26cizTZdev5SJMnLOc/TD87z/8vj9vz8359f7330ejQ+c/KtOe3pq0Y7Jn/y7X5antfeRIdXHA5/1H6yfm/k9on7/+Lk/9h7bf/v9pCfwAAAAAAAAAAAAAAAGA/ZVluX0L1VkRcTNf/tHVtJgAwX/n1v0zy7fOq+4+6/p93b0db/Ver51wXC9afudaflovVH7X6KNZ15WRv1ouI+Ht9neo9w68n/TIAYJF9GhH/arsTtEb+HZa/76+anmq7M8Bc3fzgw59evX5948bNtnsCAAAAAAAAADyqPP7nWm3851NlWd5tLLdr/Ne3Y+1xx/8c5JmdAUb3GMi1f/ht2s9Wb9Tv1YYbfzH2Gv97uDO33/jfgyn3N5zSPprSvjSlfXlK+8QLPWpy/i/Wxjs/FREnG8Ovd2H81+aY912Q83+p9niu8v9KY7l6/uXvj3L+vV35n7n1/i/O3Pzgw9euvX/1vY33Nn524dy5sxcuXrx06dKZd69d3zg7/rfFHs9Wzj+Pfe080G7J+efM5d8tOf8vpVr+3ZLz/3Kq5d8tOf/8fk/+3ZLzz5995N8tOf9XUi3/bsn5fy3V8u+WnP+rqZZ/t+T8v55q+XdLzv+1VMu/W3L+p1Mt/27J+Z9J9QHzX5l1v5iPnH8+wmX/75acfz6zQf7dkvM/n2r5d0vO/0Kq5d8tOf/XUy3/bsn5fyPV8u+WnP/FVMu/W3L+30y1/Lsl538p1fLvlpz/t1It/27J+X871fLvlpz/G6mWf7fk/L+Tavl3S87/u6mWf7fk/L+Xavl3S87/zVTLv1sefv+/GTNmzOSZtp+ZAAAAAAAAAAAAAICmeZxO3PY2AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPB/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvbuLkeus7wd+Zt+8diAxEPJ38jdh4xhjnE12/RK/0LqY8NrwVhJCoS/YrndtFvyG1y6BRrWjQImEUVFF23DRFhBqc1NhVVzQClAuUKtKlaC9oDeICpWLqAooIFWiFbDVzHmeZ2dmZ2d2vePNmXM+H4n8vDNn5pw5c+bsfm2+ewAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZne9YfZTtSzLarVafsPmLHtRfW6c2Ny45bUv7PYBAAAAa/eLxn+fvyXdcGQFD2pa5p/u/PZXFxYWFrL3Df/p6OcWFtIdE1k2uiHLGvdF137w/lrzMsET2XhtqOnroR6rH+5x/0iP+0d73D/W4/4NPe4f73H/kh2wxMaslp5se+OPm/Ndmt2ajTbu297hUU/UNgzV9116bFZrPGZh9GQ2l53OZrPpluXzZWuN5b9+V31db83iuoaa1rW1foT85LETcRtqYR9vb1nX4nNGP3p9NvHTnzx24q8vPnd7p9lzN7Q8X76dO7fVt/MT4ZZ8W2vZhrRP4nYONW3n1g7vyXDLdtYaj6v/uX07n1/hdg4vbua6an/Px7Ohxp+/09hPI7Wsw37aGm772d1Zll1Z3Oz2ZZasKxvKNrXcMrT4/oznR2T9OeqH0kuzkVUdp3et4Ditz5ntrcdp+2civv93hceNLLMNzW/Tjx4fa3rff75wPcdpVH/VnT4rQx2OwX5/VopyDMbj4juN9+rJjsfg9vD6H9ux/DHY8djpcAym1910DG7rdQwOjQ03tjm9CbXGYxaPwd0tyw831lRrzGd3dD8Gpy6eOT81/7GP3zt35vip2VOzZ/fu3j29d//+gwcPTp2cOz07nf/3Ovd28W3KhtJnYFvYd/Fz+Oq2ZZsP1YUvji05/17v53B8mc/h9vCeNev353Ck/cXV1ucDufSYzj8b76nv9PGrQ9kyn7HG+7Nr7Z/D9LqbPocjTZ/Djt9TOnwOR1bwOawvc37Xyn5mGWn6X6dtWP57wdqOwc1Nx2D7zyPtx2C/fx4pyjE4Ho6L7+1a/nvB1rC9T06u9ueR4SXHYHq54dxTvyX9vD9+sDE6HZd31O+4aSy7ND974b5Hj1+8eGF3Fsa6eFnTsdJ+vG5qek3ZkuN1aNXH65G5O5+8o8Ptm8O+Gr+3/p/xZd+r+jL77uv+XjW+u3Xeny237snC6LP13p+dvpvX9+dYln3+W48/9I3HPv+GZfdnPW9+YmrtP4unXNp0/h1d5vwbc/8v8/Wlp3pieHQk//wOp70z2nI+bn2rRhrnrlpj3c9Prex8PBr+t97n41u7nI+3tC3b7/PxaPuLi+fjWq+/7Vib9vdzPBwnp6e7n4/ry2zZs9pjcqTr+fjuMGth/78mJIWUi5qOneWO27SukZHR8LpG4hpaj9O9LcvH462+rqf3XN9xuvPu/LmG06tbtF7H6UTbsv0+TtPffS13nNZ6/e3b9Wl/P8fDcXHr3u7HaX2ZZ/at/dy5Mf6x6dw51usYHB0eq2/zaDoIG+f7bGFjPAbvy05k57LT2Uzj3rHG8VRrrGvy/pUdg2Phf+t9rtzS5Rjc2bZsv4/B9H1suWOvNrL0xfdB+/s5Ho6Lp+7vfgzWl3njgf7+7Loz3JKWafrZtf3v15b7O6872nbTjTpWRsJ2futA97+brS9z+uBqc2b3/XRPuOWmDvup/fO73GdqJluf/bQlbOdzB5ffT/XtqS/zuUMrPJ6OZFl2+SMPNP6+N/z7yt9d+u5XW/7dpdO/6Vz+yAM/fvHJf1zN9gMw+H6Zj03597qmf5layb//AwAAAAMh5v6hMBP5HwAAAEoj5v74/wpP5H8AAAAojZj7R8JMKpL/t7zxublfXs5SM38hiPen3fBgvlzsuE6HrycWFtVvf+DLs//9D5dXtu6hLMt+/uAfdFx+y4Nxu3ITYTuvvan19iW+eu+K1n3skctpvc399S+E54+vZ6WHQacK7nSWZV+/5TON9Uy8/2pjPvPgscZ86MqTT9SXef5Q/nV8/LMvy5f/i1D+PXLyeMvjnw374YdhTr+t8/6Ij/vK1ddsPfDexfXFx9W23dx42U99IH/e+HtyPvtEvnzcz8tt/zc+/fRX6ss/+qrO2395qPP2Px2e98th/s8r8uWb34P61/FxnwzbH9cXH3ffl77ZcfuvfSpf/vyb8+WOhRnXvzN8vf3Nz801769Ha8dbXlf2lny5uP7p7/5x4/74fPH527d//OjVlv3Rfnw882/580y1LR9vj+uJ/r5t/fXnaT4+4/qf/qNjLfu51/qvPfTsK+rP277+e9qWO/+RXY31Lz5f629s+stPfqbj+uL2HPnb8y2v58i7w+c4rP+pD4TjMdz/v9fy52v/7QrH3t16/onLf2Hz5ZbXE731p/n6r73uVGNuGN+46aYXvfjmK6+s77ss+86G/Pl6rf/UX51r2f4v3pbvj3h/7Oi3r385cf0XPjp59tz8pbmZtFcfu6Xxu3Penm9P3N5bwrm1/euj5y5+cPbCxPTEdJZNlPdX6F23L4X543xc6b70wpIz6K5Hwvt5x59/fdOOf/10vP3f35PffvVt+fetV4flPhtu3xzev9Wtf6mn7rqt8fmuPRO2cGHp7wtei63b/+vgihYMr7/954J4vJ9/+Qcb+6F+X+P7Rvxcr3H7vz+TP8/Xwn5dCL+Zedtti+trXj7+boSrD+ef9zXvv3Cai+/r34T3+x0/zJ8/bld8vd8PP8d8c0vr+S4eH1+7PNT+/I3f4nElnE+yK/n9cam4v68+f1vHzYu/hyS7cnvj6z9Jz3P7ql7mcuY/Nj91eu7spUenLs7OX5ya/9jHj545d+nsxaON3+V59EO9Hr94ftrUOD/NzO7flzXOVufycYO90Nt//pETMwemd8zMnjx+6eTFR87PXjh1Yn7+xOzM/I7jJ0/OfrTX4+dmDu/ec2jvgT2Tp+ZmDh88dGjvocm5s+fqm5FvVA/7pz88efbC0cZD5g/vO7T7/vv3TU+eOTcze/jA9PTkpV6Pb3xvmqw/+vcnL8yePn5x7szs5Pzcx2cP7z60f/+enr8N8Mz5k/MTUxcunZ26ND97YSp/LRMXGzfXv/f1ejzlNP8f+c+z7Wr5L+LL3nXP/vT7Weu+/PiyT5Uv0vYLRJ8Lv4vmn19y/uBKvo65fzTMpCL5HwAAAKog5v6xMBP5HwAAAEoj5v4NYSbyPwAAAJRGzP3jYSYVyf+l6/9vubyi9ev/6/837y/9/4r1/x8uWv8/P1/o//fHWvv3+v+B/r/+v/6//r/+P31QtP5/zP0bs6yS+R8AAACqIOb+TWEm8j8AAACURsz9N4WZyP8AAABQGjH3vyjMpCL5X/9f/1//X/9f/7/z+vX/B5P+f3f6/z3o/09l1er/X+nn9uv/6/+zVNH6/zH3vzjMpCL5HwAAAKog5v6bw0zkfwAAACiNmPtvCTOR/wEAAKA0Yu7fHGZSkfyv/6//r/+v/6//33n9+v+DSf+/O/3/HvT/Xf9f/1//n74qWv8/5v6XhJlUJP8DAABAFcTc/9IwE/kfAAAAimfk+h4Wc//LwkyW5P/rXAEAAADwgou5/9asrQhekX//1//X/y9+/39Duk//X/8/K2T/fzjT/y8O/f/u9P970P9fZX9+vOUr/X/9f/1/2hWt/9/I/dl49vIwk4rkfwAAAKiCmPtvCzOR/wEAAKA0Yu7/f2Em8j8AAACURsz9W8JMKpL/9f/1/4vf/3f9f/3/ovf/Xf+/SPT/u9P/70H/3/X/9f/1/+mrovX/Y+6/PcykIvkfAAAAqiDm/jvCTOR/AAAAKI2Y+/9/mIn8DwAAAKURc//WMJOK5H/9/4L3/2NzVP9f/1//X/9f/39F9P+70//vQf9f/1//X/+fvipa/z/m/leEmVQk/wMAAEAVxNx/Z5iJ/A8AAAClEXP/K8NM5H8AAAAojZj7J8JMKpL/9f8L3v/Pe/Bjrv+v/6//r/+v/78y+v/d6f/3oP+v/9+X/v/CZf1//X9yRev/x9x/V5hJRfI/AAAAVEHM/dvCTOR/AAAAKI2Y++8OM5H/AQAAoDRi7t8eZlKR/K//PxD9/0z/X/9f/1//X/9/ZfT/u9P/70H/X/8/bn88ybv+v/4/a1K0/n/M/a8KM6lI/gcAAIAqiLl/R5iJ/A8AAAClEXP/q8NM5H8AAAAojZj7d4aZVCT/6//r/+v/6//r/3dev/7/YNL/707/vwf9f/3/vlz/X/9f/5+oaP3/mPtfE2ZSkfwPAAAAVRBz/64wE/kfAAAASiPm/nvCTOR/AAAAKI2Y+yfDTCqS//X/9f/1//X/9f87r1//fzDp/3en/9+D/n+/+vPD+v/6//r/ZAXs/8fcf2+YSUXyPwAAAFRBzP33hZnI/wAAAFAaMfdPhZnI/wAAAFAaMfdPh5lUJP/r/+v/r7n/3/Ti9f8r0P9/5eLz6v/n9P+LRf+/O/3/HvrX/x/Jqt3/d/3/6+7/j+r/UypF6//H3L87zKQi+R8AAACqIOb+PWEm8j8AAACURsz9e8NM5H8AAAAojZj794WZVCT/6//r/7v+v/6/6/93Xr/+/2DS/++u//3/+BL1/13/X//f9f/1/1mqaP3/mPvvDzOpSP4HAACAKoi5f3+YifwPAAAApRFz/4EwE/kfAAAASiPm/oNhJhXJ//r/+v/6//r/+v+d16//P5j0/7ur+vX/N/faAP1//X/9f/1/1ujhP2z+qmj9/5j7D4WZVCT/AwAAQBXE3P/aMBP5HwAAAEoj5v5fCTOR/wEAAKA0Yu7/1TCTsuT/Hs1D/X/9f/1//X/9/87r1/8fTPr/3VW9/9+T/r/+v/6//j99VbT+f8z9h8NMypL/AQAAgJT7fy3MRP4HAACA0oi5/3VhJvI/AAAAlEbM/UfCTCqS//X/9f/1//X/9f87r3+9+/9j8Xn1/9dE/787/f8e9P/1//X/9f/pq6L1/2Puf32YSUXyPwAAAFRBzP0PhJnI/wAAAFAaMfe/IcxE/gcAAIDSiLn/jWEmFcn/+v/6//r/+v/6/53X7/r/g0n/v7v16P8P6/+Xpf8/pP+v/6//z1oVrf8fc/+bwkwqkv8BAACgCmLuf3OYifwPAAAApRFz/1vCTOR/AAAAKI2Y+98aZlKR/K//r/+v/6//r//fef36/4NJ/7871//vQf/f9f/1//X/6aui9f9j7v/1MJOK5H8AAACogpj7Hwwzkf8BAACgNGLuf1uYifwPAAAApRFz/9vDTCqS//X/9f/1//X/9f87r1//fzDp/3c3YP3/X9wcbtf/z+n/F3v7V9v/H2n7+ob0/3+wXP9/YUP74/X/uRGK1v+Puf8dYSYVyf8AAABQBTH3vzPMRP4HAACA0oi5/11hJvI/AAAAlEbM/b8RZlKR/K//X9+Oxfay/n9Z+/9D+v/6//r/FaH/39XGbLD6/67/30b/v9jb7/r/+v8sVbT+f8z97w4zqUj+BwAAgCqIuf+hMBP5HwAAAEoj5v6Hw0zkfwAAACiNmPvfE2ZSkfyv/+/6/9Xo/7v+f6b/r/9fEfr/3Q3Y9f/1/9vo/xd7+29I//8/9f8ZbEXr/8fc/0iYSUXyPwAAAFRBzP3vDTOR/wEAAKA0Yu7/zTAT+R8AAABKI+b+94WZVCT/6/8PSv9/YkD7/4/r/9/A/v+dN+fL6f/r/7NI/787/f8e9P/1/4vW/3f9fwZc0fr/Mfe/P8xk5fl/fMVLAgAAAC+ImPt/K8ykIv/+DwAAAFUQc/9vh5nI/wAAAFAaMff/TphJRfK//v8N6f83vnT9f9f/bz8+XP9f/1///8Zbv/5/PPPo/+v/6/9H+v8F6v9f0v+nGIrW/4+5/3fDTCqS/wEAAKAKYu7/QJiJ/A8AAAADodM12drF3H80zET+BwAAgNKIuf9YmElF8r/+/6Bc/1//P6ta///Ptv3L9779zmO79f/1//X/V2Vdr/9f//C7/r/+v/5/ov9foP6/6/9TEEXr/8fcfzzMpCL5HwAAAKog5v7fCzOR/wEAAKA0Yu4/EWYi/wMAAEBpxNw/E2ZSkfyv/6//r/9f0P7/AF//P+4P/f9Wfev/x5Ou/n9Hef8+HUU3tv//3sWeuP7/avv/Yx1v1f/X/x/k7df/1/9nqaL1/2Punw0zqUj+BwAAgCoIuX/oZD4X75D/AQAAoDRi7j8VZiL/AwAAQGnE3P/BMJOK5H/9f/1//X/9f9f/77z+bv3/2ojr/xdV6t//rPFB0f9vU5z+f2f6//r/g7z9+v/6/yxVtP5/zP1zYSYVyf8AAABQBTH3fyjMRP4HAACA0oi5/8NhJvI/AAAAlEbM/afDTCqS//X/9f/1//X/9f87r7+w1//X/+9qrf17/f9A/1//X/9f/1//nz4oWv8/5v4zYSYVyf8AwP+xd2dPltZ3HcdPy0xNT8GFd1rljVVe+idwodf6B3jhjRdaZXkBKiruDO4rioq7IrgnIQsEQkgC2RfIRkJ2SEL2fSEbIaEmRff3+53pPk8/p7vnnO7n+f1erwu+0KE5B2pqZj7T884DAPQgd/91cYv9DwAAAM3I3X993GL/AwAAQDNy9/9i3NLJ/tf/6/+b7f9/TP9/0Ovr//X/LdP/j9P/r6D/1//r//X/rNXU+v/c/b8Ut3Sy/wEAAKAHuft/OW6x/wEAAKAZuftviFvsfwAAAGhG7v5fiVs62f/7+v+txcT6/+xrN9z/58vo/1vq/z3//8DX1//r/1t2sv3/zc99z6f/1//r/4P+/1D9/7mDPl//T4um1v/n7v/VuKWT/Q8AAAA9yN3/a3GL/Q8AAADNyN1/Y9xi/wMAAEAzcvf/etzSyf5f3/P/z+983PP/L9H/6//3f/vQ/+v/9f+b5/n/43rq/2947Orrnrrvh+4/yuvr//X/nv+v/2e9ptb/5+7/jbilk/0PAAAAPcjd/5txi/0PAAAAzcjd/1txi/0PAAAAzcjd/9txSyf7f339/2ae/5/0//r/hf5f/7/v30f/r/8fov8fN/X+/6zn/+v/Z/z+9f/6f5ZNrf/P3f87cUsn+x8AAAB6kLv/d+MW+x8AAACakbv/prjF/gcAAIBm5O6/ELd0sv/1/5vv/5/V/+v/4+r/9f/6/83T/4+bev+/zuf/H+f19f/6f/2//p/1mlr/n7v/5rilk/0PAAAAPcjd/3txi/0PAAAAzcjd//txi/0PAAAAzcjd/wdxSyf7X//v+f/6f/2//n/49fX/86T/H6f/X0H/f6X9/Fn9v/5f/8/ljtj/PzPy3fZa+v/c/X8Yt3Sy/wEAAKAHufv/KG6x/wEAAKAZufv/OG6x/wEAAKAZufv/JG7pZP/r//X/+n/9/7H7/+Vvejv0/8P0/yfjmP39D+af6P/Dpvv/rTODH+62/39694020P97/r/+X//PHlN7/n/u/j+NWzrZ/wAAANCD3P1/FreM7P8j/2I+AAAAcKpy9/953OLr/wAAADB7WZ3l7v+LuKWT/a//1//r//X/nv8//Ppj/f/9l70//f+0eP7/uMn0/wfotv9fXHq/+v/5vn/9v/6fZVPr/3P3/2Xc0sn+BwAAgB7k7r8lbrH/AQAAoBm5+/8qbrH/AQAAoBm5+/86bulk/w/3/5f+d/3/4ej/975//f/wt4919f/5T9T/j/b/P+75/33S/487+f7/nP5/7z9f/79Bp/3+G+//z6/6fP0/Q6bW/+fuvzVu6WT/AwAAQA9y9/9N3GL/AwAAQDNy9/9t3GL/AwAAQDNy9/9d3NLJ/vf8f/2//n9+/f/+5/8n/f+uk3j+/+LE+/8z+v9D0v+P8/z/FfT/+n/9v+f/s1ZT6/9z998Wt3Sy/wEAAKAHtz292Nn9f79Y2P8AAAAwR5f/3oH9v6E05O7/h7jF/gcAAIBm5O7/x7ilk/2v/9f/6//n3/97/n8P/b/n/x+W/n+c/n8F/f8m+vkzjfX/tx/0+VPo/2/S/zMxe/r/By99/LT6/9z9/xS3dLL/AQAAoAe5+/85brH/AQAAoBm5+/8lbrH/AQAAoBm5+/81bulk/2+8/z9/8Gvr//X/+n/9v/5f/79u+v9x+v8V9P+e/+/5//p/1mpP/3+Z0+r/c/f/W9zSyf4HAACAHuTu//e4xf4HAACAZuTuvz1usf8BAACgGbn7/yNu6WT/e/6//l//r//X/w+/vv5/nvT/4/T/K+j/9f/6f/0/azW1/j93/x1xSyf7HwAAAHqQu//OuMX+BwAAgGbk7v/PuMX+BwAAgGbk7v+vuKWT/a//32z/nx/X/+v/F/p//b/+/0R02/9vDf1ItOyA/v+Rn7/wk3s/ov/X/+v/9f/6f9ZgEv3/xUs/u8zd/99xSyf7HwAAAHqQu/9/4hb7HwAAAJqRu/9/4xb7HwAAAJqRu///4pYj7v/vX+u7Ojn6f8//1//r//X/w6+v/5+n2fX/Z/f+pef/6//1//N9//p//T/LJtH/X/bXufv/P27x9X8AAABoRu7+58Ut9j8AAAA0I3f/8+MW+x8AAACakbv/BXFLJ/tf/6//1//r//X/w69/3P5/ezFM/38yZtf/76P/1//r/+f7/vX/+n+WTa3/z91/V9zSyf4HAACAHuTuf2HcYv8DAABAM3L3vyhusf8BAACgGbn7Xxy3dLL/9f/6f/2//l//P/z6nv8/T/r/cfr/xWJx98gbGOr/L57T/zfc/2+v8f3r//X/LJta/5+7/yVxSyf7HwAAAHqQu//uuMX+BwAAgGbk7r8nbrH/AQAAoBm5+18at3Sy//X/+n/9v/5f/z/8+vr/edL/j9P/r+D5/931/+t8//p//T/Lptb/5+6/N27pZP8DAABAD3L33xe32P8AAADQjNz9L4tb7H8AAABoRu7+++OWTva//l//r//X/2+k/7+g/99P/38yNtf/L/T/+n/9/wr6f/2//p/9Tqr/fya+v1/V/+fuf3nc0sn+BwAAgB7k7n8gbrH/AQAAoBm5+18Rt9j/AAAA0Izc/a+MWzrZ//p//b/+X//v+f/Dr6//nyfP/x+n/19B/6//1//r/1mrk+r/D+r99/917v5XxS2d7H8AAADoQe7+B+MW+x8AAACakbv/objF/gcAAIBm5O5/ddzSyf7X/+v/9/b/i4X+X/+v/991Av3/9kL/v3b6/3H6/xX0/232/9+3aKj/P3/g5+v/maKp9f+5+18Tt3Sy/wEAAKAHuftfG7fY/wAAANCM3P2vi1vsfwAAAGhG7v7Xxy0t7f9nD07f5t//n9v3ifr/xWLx+I2e/6//H3l9/f9k+v/6r6r/Xx/9/zj9/wr6/zb7f8//1/9zaqbW/+fuf0Pc0tL+BwAAgM7l7n9j3GL/AwAAQDNy978pbrH/AQAAoBm5+98ct3Sy/+ff/+//RP3/4oqe/6//3/mA/l//r/+frSvt7+/Yjh/T9P/6f/3/YD+/dcDPexaz6/+Xn6Ov/9f/s35T6/9z978lbulk/wMAAEAPcvc/HLfY/wAAANCM3P2PxC32PwAAADQjd/9b45ZO9r/+X/+v/59n/7+t/9f/6/8HHdjfX3O4z1/X8/+vvfYnHtX/6/9b7P/HzKv/X//71//r/1k2tf4/d//b4pZO9j8AAAD0IHf/2+MW+x8AAACakbv/HXGL/Q8AAADNyN3/zrilk/2/3P+fXewWqruG+v9o1PT/l9H/733/+v/hbx+e/6//1/9v3pU+f39d/b/n/x/v/ev/9f9zfv9H6v9/ePnz9f+0aGr9f+7+R+OWkeF38FsCAAAApih3/7vilk6+/g8AAAA9yN3/7rjF/gcAAIBm5O5/LG7pZP97/r/+X/+v/9f/D7++/n+e9P/j9P8r6P/1/57/f/3PXqX/Z32m1v/n7n9P3LIz/H7kmmP+awIAAAATkrv/vXFLJ1//BwAAgB7k7n9f3GL/AwAAQDNy978/bulk/+v/9f/6f/2//n/49fX/86T/H6f/X6Gf/n976IOn3c9fqdN+/830/57/zxpNrf/P3f+BuKWT/Q8AAAA9yN3/wbjF/gcAAIBm5O7/UNxi/wMAAEAzcvc/Hrd0sv/1//r/9vv/n9H/73t9/b/+v2X6//wRfZj+f4V++v9Bp93Pz/396//H+v+jf39IG6bW/+fufyJu6WT/AwAAQA9y9384brH/AQAAoBm5+z8St9j/AAAA0Izc/R+NWzrZ//r/vvr/rUWP/b/n/+v/9f89mU//f+eZoY96/r/+X/8/3/ev//f8f5ZNrf/P3f/k1pku9z8AAADM1U/96C88cdi/98mdP24vPha32P8AAADQjNz9H49b7H8AAABoRu7+T8Qtnex//X9f/X+fz//X/+v/9f89mU//P0z/r//X/8/3/ev/9f8sm1r/n7v/k3HLZcNv8P+gBwAAAJiN3P2fils6+fo/AAAA9CB3/6fjlqX9f/GQv6sdAAAAmJrc/Z+JWzr5+r/+f+L9/2JD/X/8ffr/Xfp//f/Q6+v/50n/P+4K+/+LW/p//f8I/b/+X//PflPr/3P3P3Dvosv9DwAAAI3a8ysKn9354/bic3GL/Q8AAADNyN3/+bjF/gcAAIBm5O7/QtzSyf7X/0+8/z/W8//P1595/n/n/f8t24Ovr//X/7dM/z/O8/9X0P/r//X/+n/W6gj9/84g3XT/n7v/i3FLJ/sfAAAAepC7/0txi/0PAAAAzcjd/+W4xf4HAACAZuTu/0rc0sn+1/+fQv9/67nFYqP9/yGe/6//76P/P+D12+n/f+DqCw//9M/dc5f+n0tOsv/Pbwv6f/2//n+X/l//r/9nv6k9/z93/1fjlk72PwAAAPQgd/9TcYv9DwAAAM3I3f+1uOW5/f/Qab0rAAAAYJ1y9389bunk6//6/xaf/z/P/j//W59C/39hfv1/NsW99/+e/6//X+b5/+P0/yvo//X/+n/9P2s1tf4/d/834pZO9j8AAAD0IHf/N+OW3P9bR/6lewAAAGBicvd/K27x9X8AAABoRu7+p+OWTva//l//f9z+/7zn/3v+v/5/h/5/WvT/4/T/K+j/9f/6f/0/azW1/j93/7fjlk72PwAAAPQgd/8zcYv9DwAAAM3I3f+duMX+BwAAgGbk7v9u3NLJ/tf/6/+n8vz/pP+/9Hn6/136f/3/Uej/xx2l/79q4OcF+n/9/xj9v/5f/89+U+v/c/d/LwAA//8apG/O")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000040)=""/63, 0x3f)

770.121553ms ago: executing program 2 (id=1361):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0)
write$sysctl(r1, &(0x7f0000000000)='2\x00', 0x2)

0s ago: executing program 3 (id=1362):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
socket$tipc(0x1e, 0x2, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000040))
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r1, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x4}}}}}, 0x0)

kernel console output (not intermixed with test programs):

ed and will be removed in a future release, please use -o space_cache=v2
[   85.330992][ T5854] Bluetooth: hci1: command tx timeout
[   85.393917][ T6376] BTRFS info (device loop2): rebuilding free space tree
[   85.414768][ T6376] BTRFS info (device loop2): disabling free space tree
[   85.417585][ T6376] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   85.421593][ T6376] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   85.429815][ T6376] BTRFS info (device loop2): turning on sync discard
[   85.434776][ T6376] BTRFS info (device loop2): enabling disk space caching
[   85.439514][ T6376] BTRFS info (device loop2): force clearing of disk cache
[   85.443200][ T6376] BTRFS info (device loop2): trying to use backup root at mount time
[   85.706321][ T6412] syz.3.188 uses obsolete (PF_INET,SOCK_PACKET)
[   85.785669][ T5843] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   86.466722][ T6435] loop1: detected capacity change from 0 to 2048
[   86.532366][  T794] cfg80211: failed to load regulatory.db
[   86.698503][ T6445] netlink: 24 bytes leftover after parsing attributes in process `syz.1.199'.
[   87.255306][ T6456] warning: `syz.1.202' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   88.375118][ T6473] loop3: detected capacity change from 0 to 1024
[   88.487412][   T32] hfsplus: b-tree write err: -5, ino 4
[   88.654650][ T6477] loop3: detected capacity change from 0 to 1024
[   88.718415][ T6477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   88.723077][ T6477] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   88.811709][ T6477] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.210: lblock 0 mapped to illegal pblock 0 (length 4)
[   88.847769][ T6477] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117
[   88.859507][ T6477] EXT4-fs (loop3): This should not happen!! Data will be lost
[   88.859507][ T6477] 
[   88.874183][ T6477] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: comm syz.3.210: lblock 0 mapped to illegal pblock 0 (length 1)
[   88.882872][ T6477] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: comm syz.3.210: lblock 0 mapped to illegal pblock 0 (length 1)
[   88.884876][ T6486] loop2: detected capacity change from 0 to 164
[   88.892708][ T6477] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: comm syz.3.210: lblock 0 mapped to illegal pblock 0 (length 1)
[   88.901958][ T6477] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: comm syz.3.210: lblock 0 mapped to illegal pblock 0 (length 1)
[   88.907390][ T6476] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: comm syz.3.210: lblock 0 mapped to illegal pblock 0 (length 4)
[   88.913873][ T6476] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: comm syz.3.210: lblock 0 mapped to illegal pblock 0 (length 4)
[   88.919420][ T6476] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: comm syz.3.210: lblock 0 mapped to illegal pblock 0 (length 4)
[   88.926387][ T6476] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: comm syz.3.210: lblock 0 mapped to illegal pblock 0 (length 4)
[   88.931089][   T56] Bluetooth: hci1: command 0x0405 tx timeout
[   88.932031][ T6476] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: comm syz.3.210: lblock 0 mapped to illegal pblock 0 (length 4)
[   88.943787][ T6486] iso9660: Corrupted directory entry in block 2 of inode 1920
[   89.235060][  T794] kernel write not supported for file bpf-prog (pid: 794 comm: kworker/0:2)
[   89.476548][ T6516] loop1: detected capacity change from 0 to 512
[   89.484714][ T6516] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[   89.496580][ T6516] netlink: 260 bytes leftover after parsing attributes in process `syz.1.226'.
[   89.508750][ T6160] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   89.726578][ T6522] netlink: 116 bytes leftover after parsing attributes in process `syz.3.229'.
[   90.110453][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.234'.
[   90.114910][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.234'.
[   90.117856][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.234'.
[   90.970648][ T6555] loop2: detected capacity change from 0 to 1024
[   90.978962][ T6555] EXT4-fs: Ignoring removed orlov option
[   91.035888][ T6555] EXT4-fs: Ignoring removed nomblk_io_submit option
[   91.113479][ T6555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.163210][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.244588][ T6570] loop2: detected capacity change from 0 to 8
[   91.260432][ T6570] SQUASHFS error: Unable to read inode 0x11f
[   91.302034][ T6574] vlan0: entered promiscuous mode
[   91.384092][ T6578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.250'.
[   91.446061][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.251'.
[   91.449656][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.251'.
[   91.591082][ T6590] loop1: detected capacity change from 0 to 4096
[   91.644340][ T6596] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   91.812653][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.261'.
[   91.817600][ T6590] sctp: [Deprecated]: syz.1.255 (pid 6590) Use of struct sctp_assoc_value in delayed_ack socket option.
[   91.817600][ T6590] Use struct sctp_sack_info instead
[   92.080369][ T6615] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   92.238711][ T6598] loop3: detected capacity change from 0 to 131072
[   92.242638][ T6598] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[   92.245365][ T6598] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   92.269982][ T6598] F2FS-fs (loop3): invalid crc value
[   92.275890][ T6622] netlink: 'syz.1.266': attribute type 1 has an invalid length.
[   92.280453][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'.
[   92.336701][ T6598] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   92.347190][ T6598] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   92.350048][ T6598] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   93.049927][ T6670] loop3: detected capacity change from 0 to 512
[   93.074880][    C1] IPv4: Oversized IP packet from 172.20.20.24
[   93.124546][ T6670] EXT4-fs (loop3): external journal device major/minor numbers have changed
[   93.214634][ T6670] block device autoloading is deprecated and will be removed.
[   93.218766][ T6670] EXT4-fs (loop3): external journal has bad superblock
[   93.579689][ T6704] netlink: 28 bytes leftover after parsing attributes in process `syz.3.296'.
[   93.604465][ T6704] syz.3.296 (6704) used greatest stack depth: 19448 bytes left
[   93.803327][ T5851] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   93.972971][ T5851] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84
[   93.989252][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[   93.995876][ T5851] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[   93.999432][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.008155][ T5851] usb 3-1: config 0 descriptor??
[   94.218757][ T5851] ath6kl: Failed to submit usb control message: -71
[   94.227068][ T5851] ath6kl: unable to send the bmi data to the device: -71
[   94.229266][ T5851] ath6kl: Unable to send get target info: -71
[   94.257921][ T5851] ath6kl: Failed to init ath6kl core: -71
[   94.262263][ T5851] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[   94.269450][ T5851] usb 3-1: USB disconnect, device number 4
[   94.868837][   T33] audit: type=1326 audit(1757321963.915:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.317" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cb38ebe9 code=0x50000
[   94.879454][   T33] audit: type=1326 audit(1757321963.915:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.317" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cb38ebe9 code=0x50000
[   94.891951][   T33] audit: type=1326 audit(1757321963.915:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.317" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cb38ebe9 code=0x50000
[   94.901249][   T33] audit: type=1326 audit(1757321963.915:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.317" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cb38ebe9 code=0x50000
[   94.908661][   T33] audit: type=1326 audit(1757321963.915:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.317" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cb38ebe9 code=0x50000
[   94.915531][   T33] audit: type=1326 audit(1757321963.915:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.317" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cb38ebe9 code=0x50000
[   94.923413][   T33] audit: type=1326 audit(1757321963.915:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.317" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cb38ebe9 code=0x50000
[   94.930250][   T33] audit: type=1326 audit(1757321963.915:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.317" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cb38ebe9 code=0x50000
[   94.937933][   T33] audit: type=1326 audit(1757321963.915:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.317" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cb38ebe9 code=0x50000
[   94.946725][   T33] audit: type=1326 audit(1757321963.915:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6754 comm="syz.1.317" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cb38ebe9 code=0x50000
[   95.599830][ T6760] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[   95.632841][ T6760] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   96.400050][ T6776] Zero length message leads to an empty skb
[   96.509218][ T6778] loop2: detected capacity change from 0 to 1024
[   96.518351][ T6778] EXT4-fs: Ignoring removed oldalloc option
[   96.529290][ T6778] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled
[   96.540889][ T5851] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   96.576826][ T6778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.627436][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.693016][ T5851] usb 4-1: config index 0 descriptor too short (expected 63186, got 210)
[   96.695824][ T5851] usb 4-1: config 0 has an invalid interface number: 106 but max is 0
[   96.703380][ T5851] usb 4-1: config 0 has an invalid descriptor of length 236, skipping remainder of the config
[   96.710487][ T5851] usb 4-1: config 0 has no interface number 0
[   96.715209][ T5851] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[   96.719939][ T5851] usb 4-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0x71, changing to 0x1
[   96.730058][ T5851] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 38949, setting to 64
[   96.740151][ T5851] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[   96.746317][ T5851] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[   96.752998][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.779319][ T5851] usb 4-1: config 0 descriptor??
[   96.824855][ T5851] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[   96.863302][ T6790] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[   96.995978][ T5878] usb 4-1: Failed to submit usb control message: -71
[   96.999416][   T51] usb 4-1: USB disconnect, device number 3
[   97.005300][ T5878] usb 4-1: unable to send the bmi data to the device: -71
[   97.012349][ T5878] usb 4-1: unable to get target info from device
[   97.014899][ T5878] usb 4-1: could not get target info (-71)
[   97.017484][ T5878] usb 4-1: could not probe fw (-71)
[   97.093293][ T6793] sctp: [Deprecated]: syz.2.333 (pid 6793) Use of int in maxseg socket option.
[   97.093293][ T6793] Use struct sctp_assoc_value instead
[   97.317233][ T6795] loop2: detected capacity change from 0 to 4096
[   97.958579][ T6811] loop1: detected capacity change from 0 to 8
[   97.984148][ T6811] SQUASHFS error: Unable to read inode 0x6
[   98.250911][ T5965] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[   98.272734][ T6813] loop1: detected capacity change from 0 to 256
[   98.307771][ T6813] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x40a90196, utbl_chksum : 0xe619d30d)
[   98.341854][ T6813] input: syz0 as /devices/virtual/input/input4
[   98.610433][ T5965] usb 4-1: unable to get BOS descriptor or descriptor too short
[   98.622550][ T5965] usb 4-1: not running at top speed; connect to a high speed hub
[   98.630316][ T5965] usb 4-1: config 13 has an invalid interface number: 50 but max is 0
[   98.639599][ T5965] usb 4-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[   98.648125][ T5965] usb 4-1: config 13 has no interface number 0
[   98.651262][ T5965] usb 4-1: config 13 interface 50 altsetting 167 endpoint 0x7 has invalid wMaxPacketSize 0
[   98.656143][ T5965] usb 4-1: config 13 interface 50 has no altsetting 0
[   98.670589][ T5965] usb 4-1: New USB device found, idVendor=1aca, idProduct=b2a3, bcdDevice=92.32
[   98.675518][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.681282][ T5965] usb 4-1: Product: syz
[   98.686335][ T5965] usb 4-1: Manufacturer: syz
[   98.689482][ T5965] usb 4-1: SerialNumber: syz
[   98.958649][ T5965] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[   98.961026][ T5965] usb 4-1: MIDIStreaming interface descriptor not found
[   98.984028][ T5965] usb 4-1: USB disconnect, device number 4
[   99.071774][ T6842] udevd[6842]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   99.453516][ T6865] loop1: detected capacity change from 0 to 2048
[   99.459729][ T6865] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d
[   99.469979][ T6865] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   99.679728][ T6872] loop3: detected capacity change from 0 to 512
[   99.965224][ T6872] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[   99.974242][ T6872] EXT4-fs (loop3): Remounting filesystem read-only
[   99.977681][ T6872] EXT4-fs (loop3): 1 truncate cleaned up
[   99.981480][ T6872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.041085][ T6160] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.432314][ T6898] tmpfs: Bad value for 'mpol'
[  100.470851][ T5851] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  100.622917][ T5851] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  100.628275][ T5851] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00
[  100.631966][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.639607][ T5851] usb 2-1: config 0 descriptor??
[  101.095386][ T5851] aquacomputer_d5next 0003:0C70:F00B.0001: hidraw0: USB HID v1.01 Device [HID 0c70:f00b] on usb-dummy_hcd.1-1/input0
[  101.255316][ T5847] usb 2-1: USB disconnect, device number 4
[  101.664748][ T5851] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  101.851880][ T5851] usb 3-1: Using ep0 maxpacket: 8
[  101.862941][ T5851] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  101.867687][ T5851] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  101.873293][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.016625][ T5851] usb 3-1: config 0 descriptor??
[  102.153159][ T5851] gspca_main: vc032x-2.14.0 probing 046d:0892
[  102.183522][ T6931] loop1: detected capacity change from 0 to 2048
[  102.209995][ T6931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.237666][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.626441][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.388'.
[  102.732118][  T794] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  102.882828][  T794] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config
[  102.886155][  T794] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  102.890202][  T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.893691][  T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.896947][  T794] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1
[  102.900542][  T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7
[  102.904211][  T794] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024
[  102.910759][  T794] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41
[  102.914128][  T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.916880][  T794] usb 2-1: Product: syz
[  102.918312][  T794] usb 2-1: Manufacturer: syz
[  102.919869][  T794] usb 2-1: SerialNumber: syz
[  102.925079][  T794] usb 2-1: config 0 descriptor??
[  103.000855][ T5965] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  103.133050][  T794] usb 2-1: ucan: probing device on interface #0
[  103.137376][  T794] usb 2-1: ucan: invalid endpoint configuration
[  103.139924][  T794] usb 2-1: ucan: probe failed; try to update the device firmware
[  103.149856][  T794] usb 2-1: USB disconnect, device number 5
[  103.150910][ T5965] usb 4-1: Using ep0 maxpacket: 16
[  103.160608][ T5965] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  103.165836][ T5965] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  103.176536][ T5965] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  103.185366][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.188663][ T5965] usb 4-1: Product: syz
[  103.190385][ T5965] usb 4-1: Manufacturer: syz
[  103.201539][ T5965] usb 4-1: SerialNumber: syz
[  103.420028][ T5965] usb 4-1: 0:2 : does not exist
[  103.429626][ T5965] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  103.449332][ T5965] usb 4-1: USB disconnect, device number 5
[  103.476271][ T5851] gspca_vc032x: reg_w err -71
[  103.478296][ T5851] vc032x 3-1:0.0: probe with driver vc032x failed with error -71
[  103.484685][ T5851] usb 3-1: USB disconnect, device number 5
[  103.500231][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  103.880408][ T6962] delete_channel: no stack
[  106.027425][ T7006] loop3: detected capacity change from 0 to 8192
[  106.030953][ T7006] msdos: Unknown parameter ''
[  107.070158][ T7024] loop1: detected capacity change from 0 to 32768
[  107.087115][ T7024] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.422 (7024)
[  107.119437][ T7024] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  107.127936][ T7024] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  107.212945][ T7024] BTRFS info (device loop1): enabling ssd optimizations
[  107.226621][ T7024] BTRFS info (device loop1): enabling free space tree
[  107.326974][ T5849] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  107.515300][ T7067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.435'.
[  108.258107][ T7082] loop2: detected capacity change from 0 to 1024
[  108.307093][ T7085] netlink: 'syz.3.442': attribute type 8 has an invalid length.
[  108.395562][ T7091] netlink: 'syz.1.445': attribute type 8 has an invalid length.
[  108.446291][ T7095] loop1: detected capacity change from 0 to 256
[  109.128300][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.467'.
[  109.308396][ T7149] netlink: 'syz.3.471': attribute type 1 has an invalid length.
[  109.375949][ T7149] bond1: (slave geneve2): making interface the new active one
[  109.380019][ T7149] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  109.384031][ T5878] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  109.387670][ T5878] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  109.391511][ T5878] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  109.394834][ T5878] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  109.416927][ T7152] loop3: detected capacity change from 0 to 8
[  109.423580][ T7152] unable to read inode lookup table
[  109.761797][ T5911] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  109.921724][ T5911] usb 4-1: Using ep0 maxpacket: 8
[  109.926349][ T5911] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  109.932065][ T5911] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  109.936154][ T5911] usb 4-1: config 0 interface 0 has no altsetting 0
[  109.938767][ T5911] usb 4-1: New USB device found, idVendor=05ac, idProduct=1440, bcdDevice= 0.00
[  109.942745][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.952109][ T5911] usb 4-1: config 0 descriptor??
[  110.043844][   T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  110.096876][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.481'.
[  110.198975][   T24] usb 2-1: New USB device found, idVendor=0421, idProduct=0007, bcdDevice=b8.51
[  110.208671][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.218583][   T24] usb 2-1: Product: syz
[  110.220389][   T24] usb 2-1: Manufacturer: syz
[  110.229825][   T24] usb 2-1: SerialNumber: syz
[  110.242095][   T24] usb 2-1: config 0 descriptor??
[  110.245757][   T24] rndis_host 2-1:0.0: skipping garbage
[  110.247672][   T24] rndis_host 2-1:0.0: More than one union descriptor, skipping ...
[  110.250580][   T24] usb 2-1: bad CDC descriptors
[  110.259508][   T24] cdc_acm 2-1:0.0: skipping garbage
[  110.261721][   T24] cdc_acm 2-1:0.0: More than one union descriptor, skipping ...
[  110.377631][ T5911] appleir 0003:05AC:1440.0002: unknown main item tag 0x0
[  110.391165][ T5911] appleir 0003:05AC:1440.0002: unknown main item tag 0x0
[  110.399294][ T5911] appleir 0003:05AC:1440.0002: item fetching failed at offset 4/5
[  110.404537][ T5911] appleir 0003:05AC:1440.0002: parse failed
[  110.406503][ T5911] appleir 0003:05AC:1440.0002: probe with driver appleir failed with error -22
[  110.452410][ T5911] usb 2-1: USB disconnect, device number 6
[  110.576018][ T5965] usb 4-1: USB disconnect, device number 6
[  111.231727][ T5965] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  111.319315][ T7197] binfmt_misc: register: failed to install interpreter file ./file0
[  111.392861][ T5965] usb 3-1: Using ep0 maxpacket: 8
[  111.402938][ T5965] usb 3-1: unable to get BOS descriptor or descriptor too short
[  111.406674][ T5965] usb 3-1: config 7 has an invalid interface number: 6 but max is 0
[  111.409452][ T5965] usb 3-1: config 7 has no interface number 0
[  111.415138][ T5965] usb 3-1: No eUSB2 isoc ep 15 companion for config 7 interface 6 altsetting 254
[  111.425451][ T5965] usb 3-1: config 7 interface 6 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  111.437112][ T5965] usb 3-1: config 7 interface 6 has no altsetting 0
[  111.445428][ T5965] usb 3-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=30.9e
[  111.448946][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.455026][ T5965] usb 3-1: Product: syz
[  111.456695][ T5965] usb 3-1: Manufacturer: syz
[  111.476910][ T5965] usb 3-1: SerialNumber: syz
[  111.696625][ T5965] option 3-1:7.6: GSM modem (1-port) converter detected
[  111.716010][ T5965] usb 3-1: USB disconnect, device number 6
[  111.727333][ T5965] option 3-1:7.6: device disconnected
[  112.041369][ T7225] loop1: detected capacity change from 0 to 32768
[  112.066722][ T7225] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  112.093597][ T7225] XFS (loop1): Ending clean mount
[  112.103172][ T7225] XFS (loop1): Quotacheck needed: Please wait.
[  112.138122][ T7225] XFS (loop1): Quotacheck: Done.
[  112.160627][   T33] kauditd_printk_skb: 10329 callbacks suppressed
[  112.160647][   T33] audit: type=1800 audit(1757321981.205:10342): pid=7225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.508" name="file1" dev="loop1" ino=6150 res=0 errno=0
[  112.199622][ T5849] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  112.402647][ T7237] netlink: 'syz.2.511': attribute type 29 has an invalid length.
[  112.405761][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.511'.
[  112.764128][   T33] audit: type=1326 audit(1757321981.805:10343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.2.521" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79e98ebe9 code=0x7ffc0000
[  112.780381][   T33] audit: type=1326 audit(1757321981.805:10344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.2.521" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79e98ebe9 code=0x7ffc0000
[  112.782431][ T7260] syz.2.521 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  112.791805][   T33] audit: type=1326 audit(1757321981.825:10345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.2.521" exe="/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fc79e98ebe9 code=0x7ffc0000
[  112.806440][   T33] audit: type=1326 audit(1757321981.845:10346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.2.521" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79e98ebe9 code=0x7ffc0000
[  112.816698][   T33] audit: type=1326 audit(1757321981.845:10347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7259 comm="syz.2.521" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79e98ebe9 code=0x7ffc0000
[  113.386321][ T7289] loop1: detected capacity change from 0 to 1024
[  113.401186][ T1091] hfsplus: b-tree write err: -5, ino 4
[  113.528205][ T7290] veth0_to_team: entered promiscuous mode
[  113.543072][ T7290] veth0_to_team: entered allmulticast mode
[  113.655663][ T7295] loop1: detected capacity change from 0 to 128
[  113.745273][ T7295] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  113.788670][ T7295] ext4 filesystem being mounted at /179/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  113.855808][ T7295] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 25 (only 1 groups)
[  113.964221][ T7299] libceph: resolve '0..' (ret=-3): failed
[  114.049521][ T5849] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  114.784223][ T7304] loop1: detected capacity change from 0 to 2048
[  114.847515][ T7304] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  115.035899][   T33] audit: type=1800 audit(1757321984.045:10348): pid=7310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.543" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  115.164088][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.546'.
[  115.167152][ T7316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.546'.
[  115.393414][ T7327] xt_time: invalid argument - start or stop time greater than 23:59:59
[  115.572877][ T7334] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.552'.
[  115.576580][ T7334] openvswitch: netlink: Message has 512 unknown bytes.
[  115.632305][ T7336] loop3: detected capacity change from 0 to 64
[  115.669516][ T7336] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  115.984305][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.559'.
[  116.243623][ T7359] netlink: 32 bytes leftover after parsing attributes in process `syz.2.566'.
[  116.546409][ T7372] loop1: detected capacity change from 0 to 512
[  116.633968][ T7375] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  116.637355][ T7375] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  116.660390][ T7372] EXT4-fs: Ignoring removed i_version option
[  116.663369][ T7372] EXT4-fs: inline encryption not supported
[  116.715843][ T7376] loop2: detected capacity change from 0 to 128
[  116.810331][ T7372] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.572: bg 0: block 131: padding at end of block bitmap is not set
[  116.827770][ T7372] EXT4-fs (loop1): Remounting filesystem read-only
[  116.833596][ T7372] EXT4-fs (loop1): 1 truncate cleaned up
[  116.839780][ T7372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.873480][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.218874][ T7390] loop3: detected capacity change from 0 to 32768
[  117.246373][ T5851] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  117.284680][ T7390] JBD2: unrecognised superblock format ID
[  117.287215][ T7390] (syz.3.579,7390,0):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  117.296933][ T7390] (syz.3.579,7390,0):ocfs2_check_volume:2345 ERROR: Could not initialize journal!
[  117.303605][ T7390] (syz.3.579,7390,0):ocfs2_check_volume:2430 ERROR: status = -22
[  117.306762][ T7390] (syz.3.579,7390,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  117.326707][ T7390] (syz.3.579,7390,0):ocfs2_fill_super:1177 ERROR: status = -22
[  117.415280][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.425347][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.429070][ T5851] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  117.444755][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.452662][ T5851] usb 2-1: config 0 descriptor??
[  118.282647][ T5851] hid-led 0003:27B8:01ED.0003: probe with driver hid-led failed with error -71
[  118.290852][ T5851] usb 2-1: USB disconnect, device number 7
[  118.738200][ T7427] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  118.747300][ T7427] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.752035][ T7427] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.018199][ T7425] loop3: detected capacity change from 0 to 32768
[  119.022795][ T7435] netlink: 196 bytes leftover after parsing attributes in process `syz.1.599'.
[  119.035421][ T7425] bcachefs (/dev/loop3): error validating superblock: Invalid option btree_node_size: must be a power of two
[  119.040513][ T7425] bcachefs: bch2_fs_get_tree() error: opt_parse_error
[  119.881375][ T7460] netlink: 224 bytes leftover after parsing attributes in process `syz.1.609'.
[  119.984364][ T7448] netlink: 'syz.3.604': attribute type 2 has an invalid length.
[  120.256333][ T7479] loop3: detected capacity change from 0 to 512
[  120.642991][ T7479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.647724][ T7479] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.695948][ T6160] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.728903][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'.
[  120.944363][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'.
[  121.031046][ T7507] loop1: detected capacity change from 0 to 128
[  121.069456][ T7507] syz.1.629: attempt to access beyond end of device
[  121.069456][ T7507] loop1: rw=2049, sector=145, nr_sectors = 3 limit=128
[  121.148340][ T7507] syz.1.629: attempt to access beyond end of device
[  121.148340][ T7507] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128
[  121.154011][ T7507] syz.1.629: attempt to access beyond end of device
[  121.154011][ T7507] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128
[  121.159468][ T7507] syz.1.629: attempt to access beyond end of device
[  121.159468][ T7507] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128
[  121.164533][ T7507] syz.1.629: attempt to access beyond end of device
[  121.164533][ T7507] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128
[  121.169596][ T7507] syz.1.629: attempt to access beyond end of device
[  121.169596][ T7507] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128
[  121.174436][ T7507] syz.1.629: attempt to access beyond end of device
[  121.174436][ T7507] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128
[  121.179513][ T7507] syz.1.629: attempt to access beyond end of device
[  121.179513][ T7507] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128
[  121.184434][ T7507] syz.1.629: attempt to access beyond end of device
[  121.184434][ T7507] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128
[  121.189353][ T7507] syz.1.629: attempt to access beyond end of device
[  121.189353][ T7507] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128
[  121.553086][ T7516] loop3: detected capacity change from 0 to 1024
[  121.563173][ T7516] ext4: Unknown parameter 'fowner>00000000000000000000'
[  121.724311][ T7518] loop1: detected capacity change from 0 to 4096
[  121.766007][ T7518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.792280][ T7518] fs-verity (loop1, inode 16): Unsupported log_blocksize: 13
[  121.816282][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.056713][ T7528] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  122.176631][ T7537] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.640'.
[  122.311723][ T7547] netlink: 20 bytes leftover after parsing attributes in process `syz.3.646'.
[  122.721163][ T5851] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  122.891211][ T5851] usb 3-1: Using ep0 maxpacket: 8
[  122.911071][ T5851] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  122.916291][ T5851] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  122.920052][ T5851] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  122.931778][ T5851] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  122.940814][ T5851] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  122.944014][ T5851] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  122.961650][ T5851] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  122.965127][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.991504][ T5851] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22
[  123.022624][ T5911] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  123.176193][ T5911] usb 2-1: config 0 has an invalid interface number: 18 but max is 0
[  123.179429][ T5911] usb 2-1: config 0 has no interface number 0
[  123.182364][ T5911] usb 2-1: config 0 interface 18 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[  123.187522][ T5911] usb 2-1: config 0 interface 18 has no altsetting 0
[  123.198213][ T5911] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  123.210606][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.214796][ T5851] usb 3-1: USB disconnect, device number 7
[  123.220885][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  123.232246][ T5911] usb 2-1: config 0 descriptor??
[  123.247620][ T5911] cp210x 2-1:0.18: cp210x converter detected
[  123.371149][    T9] usb 4-1: Using ep0 maxpacket: 32
[  123.375066][    T9] usb 4-1: config 0 has no interfaces?
[  123.379117][    T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  123.385483][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.388441][    T9] usb 4-1: Product: syz
[  123.389777][    T9] usb 4-1: Manufacturer: syz
[  123.393006][    T9] usb 4-1: SerialNumber: syz
[  123.398958][    T9] usb 4-1: config 0 descriptor??
[  123.614697][ T5965] usb 4-1: USB disconnect, device number 7
[  123.639995][ T5911] cp210x 2-1:0.18: failed to get vendor val 0x000e size 3: -71
[  123.652764][ T5911] usb 2-1: cp210x converter now attached to ttyUSB0
[  123.658628][ T5911] usb 2-1: USB disconnect, device number 8
[  123.670131][ T5911] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  123.673162][ T5911] cp210x 2-1:0.18: device disconnected
[  123.804162][ T7610] program syz.2.662 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  124.576457][ T7621] loop1: detected capacity change from 0 to 40427
[  124.668845][ T7621] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  124.678754][ T7621] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  124.703203][ T7621] F2FS-fs (loop1): Stopped filesystem due to reason: 0
[  124.831975][ T7639] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  124.834859][ T7639] IPv6: NLM_F_CREATE should be set when creating new route
[  126.195577][ T7667] loop3: detected capacity change from 0 to 128
[  126.216600][ T7667] ufs: You didn't specify the type of your ufs filesystem
[  126.216600][ T7667] 
[  126.216600][ T7667] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  126.216600][ T7667] 
[  126.216600][ T7667] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  126.234989][ T7667] ufs: ufstype=old is supported read-only
[  126.254710][ T7667] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[  126.420603][ T7679] netlink: 32 bytes leftover after parsing attributes in process `syz.1.693'.
[  126.597902][ T7685] loop1: detected capacity change from 0 to 1024
[  126.678518][ T7685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.685102][ T7685] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  126.700999][ T7692] loop3: detected capacity change from 0 to 2048
[  126.728046][ T7692] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  126.729253][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.904594][ T7703] loop3: detected capacity change from 0 to 128
[  126.926455][ T7703] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  126.942639][ T7703] ext4 filesystem being mounted at /198/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  126.994329][ T6160] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  127.230058][ T7713] netlink: 44 bytes leftover after parsing attributes in process `syz.1.707'.
[  127.236786][ T7713] netlink: 36 bytes leftover after parsing attributes in process `syz.1.707'.
[  127.305092][ T7716] loop1: detected capacity change from 0 to 512
[  127.324998][ T7716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.391935][ T7719] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  127.401884][ T7719] CIFS mount error: No usable UNC path provided in device string!
[  127.401884][ T7719] 
[  127.405955][ T7719] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  127.601222][ T7716] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.649355][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.940099][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.714'.
[  127.943317][ T7732] sch_fq: defrate 4294967295 ignored.
[  128.002804][ T7734] tmpfs: Cannot enable quota on remount
[  128.105019][ T7742] Invalid ELF header type: 0 != 1
[  128.144589][ T7744] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  128.199661][ T7749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.722'.
[  128.207182][ T7750] loop1: detected capacity change from 0 to 1024
[  128.379370][ T7757] loop3: detected capacity change from 0 to 512
[  128.388562][ T7757] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.726: bg 0: block 35: padding at end of block bitmap is not set
[  128.400295][ T7757] EXT4-fs (loop3): Remounting filesystem read-only
[  128.544908][ T7757] EXT4-fs (loop3): 1 truncate cleaned up
[  128.558775][ T7757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  128.643527][ T6160] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.211396][   T32] hfsplus: b-tree write err: -5, ino 4
[  131.078326][ T7802] loop1: detected capacity change from 0 to 2048
[  131.118252][ T7802] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  131.414091][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.753'.
[  131.670855][ T5851] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  131.801039][ T5965] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  131.820809][ T5851] usb 3-1: Using ep0 maxpacket: 32
[  131.824494][ T5851] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  131.828744][ T5851] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 3
[  131.834918][ T5851] usb 3-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01
[  131.838297][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.841642][ T5851] usb 3-1: Product: syz
[  131.843240][ T5851] usb 3-1: Manufacturer: syz
[  131.844990][ T5851] usb 3-1: SerialNumber: syz
[  131.850328][ T5851] usb 3-1: config 0 descriptor??
[  131.950953][ T5965] usb 2-1: Using ep0 maxpacket: 8
[  131.956139][ T5965] usb 2-1: unable to get BOS descriptor or descriptor too short
[  131.961009][ T5965] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  131.964856][ T5965] usb 2-1: config 1 has no interface number 1
[  131.967627][ T5965] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  131.976193][ T5965] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  131.980073][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.984198][ T5965] usb 2-1: Product: syz
[  131.985962][ T5965] usb 2-1: Manufacturer: syz
[  131.987908][ T5965] usb 2-1: SerialNumber: syz
[  132.215965][ T5965] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  132.219823][ T5965] usb 2-1: 2:1 : sample bitwidth 65 in over sample bytes 1
[  132.223089][ T5965] usb 2-1: 2:1 : invalid channels 0
[  132.244922][ T5965] usb 2-1: USB disconnect, device number 9
[  132.282552][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  132.596269][ T7844] loop3: detected capacity change from 0 to 2048
[  132.605649][ T7844] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.616168][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.620882][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.624885][ T7844] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.763: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  132.637584][ T7844] EXT4-fs (loop3): Remounting filesystem read-only
[  132.663990][ T6160] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.875487][ T7852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.766'.
[  133.079834][ T7861] netlink: 'syz.3.770': attribute type 1 has an invalid length.
[  133.086346][ T7861] netlink: 'syz.3.770': attribute type 2 has an invalid length.
[  134.346244][ T5911] usb 3-1: USB disconnect, device number 8
[  134.436838][ T7892] netlink: 212 bytes leftover after parsing attributes in process `syz.3.782'.
[  134.440177][ T7892] netlink: 'syz.3.782': attribute type 6 has an invalid length.
[  134.508229][ T7896] loop3: detected capacity change from 0 to 1024
[  134.522239][ T7896] hfsplus: bad catalog entry type
[  134.539860][ T1092] hfsplus: b-tree write err: -5, ino 4
[  134.710898][ T5911] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  134.807613][ T7900] netlink: 20 bytes leftover after parsing attributes in process `syz.3.785'.
[  134.878897][ T7888] 9pnet_fd: p9_fd_create_tcp (7888): problem connecting socket to 127.0.0.1
[  135.120951][ T5911] usb 3-1: Using ep0 maxpacket: 32
[  135.124618][ T5911] usb 3-1: config 8 has an invalid interface number: 203 but max is 0
[  135.127500][ T5911] usb 3-1: config 8 has no interface number 0
[  135.129770][ T5911] usb 3-1: config 8 interface 203 has no altsetting 0
[  135.134820][ T5911] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a
[  135.137807][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.140442][ T5911] usb 3-1: Product: syz
[  135.141924][ T5911] usb 3-1: Manufacturer: syz
[  135.143436][ T5911] usb 3-1: SerialNumber: syz
[  135.310904][  T794] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  135.364755][ T5911] port100 3-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint
[  135.371579][ T5911] usb 3-1: USB disconnect, device number 9
[  135.460903][  T794] usb 2-1: Using ep0 maxpacket: 8
[  135.467451][  T794] usb 2-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a
[  135.471825][  T794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.475133][  T794] usb 2-1: Product: syz
[  135.476853][  T794] usb 2-1: Manufacturer: syz
[  135.478670][  T794] usb 2-1: SerialNumber: syz
[  135.483440][  T794] usb 2-1: config 0 descriptor??
[  135.490182][  T794] gspca_main: sn9c2028-2.14.0 probing 0458:7003
[  135.896452][  T794] gspca_sn9c2028: read1 error -71
[  135.900749][  T794] gspca_sn9c2028: read1 error -71
[  135.903967][  T794] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71
[  135.911272][  T794] usb 2-1: USB disconnect, device number 10
[  136.369754][ T7927] loop2: detected capacity change from 0 to 1024
[  136.393888][ T7927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.409181][ T7927] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  136.450060][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.779266][ T7932] loop1: detected capacity change from 0 to 32768
[  136.884785][ T7932] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,read_only,nocow
[  136.884802][ T7932]   allowing incompatible features above 0.0: (unknown version)
[  136.884807][ T7932]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  136.907935][ T7932] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  136.911761][ T7932] bcachefs (loop1): initializing new filesystem
[  136.928023][ T7932] bcachefs (loop1): going read-write
[  136.947503][ T7932] bcachefs (loop1): marking superblocks
[  136.994586][ T7961] No buffer was provided with the request
[  137.007785][ T7932] bcachefs (loop1): initializing freespace
[  137.031710][ T7932] bcachefs (loop1): done initializing freespace
[  137.045766][ T7932] bcachefs (loop1): reading snapshots table
[  137.048667][ T7932] bcachefs (loop1): reading snapshots done
[  137.075121][ T7932] bcachefs (loop1): going read-only
[  137.082952][ T7932] bcachefs (loop1): finished waiting for writes to stop
[  137.099189][ T7932] bcachefs (loop1): flushing journal and stopping allocators, journal seq 5
[  137.158071][ T7932] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 8
[  137.164140][ T7932] bcachefs (loop1): clean shutdown complete, journal seq 9
[  137.168154][ T7932] bcachefs (loop1): marking filesystem clean
[  137.174731][ T7932] bcachefs (loop1): done starting filesystem
[  137.220173][ T7969] loop2: detected capacity change from 0 to 512
[  137.225632][ T7932] syz.1.798 (7932) used greatest stack depth: 16248 bytes left
[  137.258961][ T5849] bcachefs (loop1): shutting down
[  137.287475][ T7969] EXT4-fs (loop2): corrupt root inode, run e2fsck
[  137.294875][ T7969] EXT4-fs (loop2): mount failed
[  137.349049][ T5849] bcachefs (loop1): shutdown complete
[  137.523721][ T7979] netlink: 'syz.2.814': attribute type 29 has an invalid length.
[  137.841389][ T8001] loop2: detected capacity change from 0 to 1024
[  137.865320][ T8001] hfsplus: Unknown parameter '5_%{쑤>VW϶$Ec_7ɱK<X'
[  138.630106][ T8029] netlink: 'syz.3.838': attribute type 2 has an invalid length.
[  138.900197][ T8038] veth0: entered promiscuous mode
[  138.910994][ T8038] netlink: 32 bytes leftover after parsing attributes in process `syz.2.841'.
[  139.010902][ T8041] Bluetooth: MGMT ver 1.23
[  139.204799][ T8037] veth0: left promiscuous mode
[  140.075874][  T794] kernel write not supported for file /574/gid_map (pid: 794 comm: kworker/0:2)
[  141.645403][   T33] audit: type=1326 audit(1757322010.685:10349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.1.864" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85cb38ebe9 code=0x0
[  141.903099][ T8098] loop2: detected capacity change from 0 to 32768
[  141.908423][ T8098] XFS: noattr2 mount option is deprecated.
[  141.918790][ T8098] XFS (loop2): attr2 and noattr2 cannot both be specified.
[  142.869927][ T8124] netlink: 'syz.3.877': attribute type 21 has an invalid length.
[  142.872828][ T8124] netlink: 132 bytes leftover after parsing attributes in process `syz.3.877'.
[  143.335326][ T8110] syz.2.871 (8110): drop_caches: 2
[  143.664890][ T8128] loop1: detected capacity change from 0 to 256
[  143.674424][ T8128] FAT-fs (loop1): bogus logical sector size 133
[  143.677276][ T8128] FAT-fs (loop1): Can't find a valid FAT filesystem
[  143.874031][ T8130] netlink: 'syz.1.880': attribute type 12 has an invalid length.
[  143.876732][ T8130] netlink: 132 bytes leftover after parsing attributes in process `syz.1.880'.
[  144.554303][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.887'.
[  144.644773][ T8153] loop3: detected capacity change from 0 to 4096
[  144.659803][ T8153] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  144.677236][ T8153] ntfs3(loop3): ino=1a, mi_enum_attr
[  144.679145][ T8153] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  144.742515][ T8153] ntfs3(loop3): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  144.996662][ T8169] loop3: detected capacity change from 0 to 128
[  145.027977][ T8169] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  145.033268][ T8169] ext4 filesystem being mounted at /274/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  145.110838][ T6160] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  145.329150][ T8144] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  145.334862][ T8144] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  145.354101][ T8144] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  145.359739][ T8144] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  145.364261][ T8144] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  145.386361][ T8144] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  145.736897][ T8181] loop3: detected capacity change from 0 to 32768
[  145.742071][ T8181] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.902 (8181)
[  145.749995][ T8193] loop1: detected capacity change from 0 to 4096
[  145.812472][ T8193] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  145.816867][ T8181] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  145.839443][ T8181] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  146.024474][ T8181] BTRFS info (device loop3): enabling ssd optimizations
[  146.027529][ T8181] BTRFS info (device loop3): enabling free space tree
[  146.380592][ T6160] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  146.621645][ T5854] Bluetooth: hci2: command 0x0c1a tx timeout
[  146.856953][ T8238] loop3: detected capacity change from 0 to 2048
[  146.902318][ T8241] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  147.015725][   T33] audit: type=1326 audit(1757322016.065:10350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8246 comm="syz.3.923" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31a4d8ebe9 code=0x0
[  147.049818][ T8249] netlink: 128 bytes leftover after parsing attributes in process `syz.1.924'.
[  147.149891][ T8232] loop2: detected capacity change from 0 to 32768
[  147.160570][ T8232] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section errors: entries out of order
[  147.160570][ T8232] errors (size 64):
[  147.160570][ T8232] (unknown error 63098)           98139432299383  16981954538416098692
[  147.160570][ T8232] backpointer_to_missing_ptr      0               34376515584
[  147.160570][ T8232] (unknown error 62899)           26163           1611530240
[  147.160570][ T8232] 
[  147.193779][ T8232] bcachefs: bch2_fs_get_tree() error: invalid_sb_errors
[  147.418856][ T5854] Bluetooth: hci1: command 0x0405 tx timeout
[  147.601756][   T24] usb 4-1: new low-speed USB device number 8 using dummy_hcd
[  147.678164][ T8286] netlink: 'syz.2.942': attribute type 21 has an invalid length.
[  147.681440][ T8286] netlink: 128 bytes leftover after parsing attributes in process `syz.2.942'.
[  147.684966][ T8286] netlink: 'syz.2.942': attribute type 5 has an invalid length.
[  147.687965][ T8286] netlink: 3 bytes leftover after parsing attributes in process `syz.2.942'.
[  148.171733][   T24] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 65535, setting to 8
[  148.180436][   T24] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  148.199782][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.442473][ T8270] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  148.700867][ T5854] Bluetooth: hci2: command 0x0c1a tx timeout
[  148.733447][   T24] usb 4-1: string descriptor 0 read error: -71
[  148.737010][   T24] hub 4-1:32.0: USB hub found
[  148.743975][   T24] hub 4-1:32.0: config failed, can't read hub descriptor (err -22)
[  148.811804][ T8300] netlink: 'syz.1.946': attribute type 1 has an invalid length.
[  148.812471][   T24] usb 4-1: USB disconnect, device number 8
[  148.906249][ T8304] loop1: detected capacity change from 0 to 512
[  148.928879][ T8304] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  148.939949][ T8304] EXT4-fs (loop1): invalid journal inode
[  148.943643][ T8304] EXT4-fs (loop1): can't get journal size
[  148.958886][ T8304] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002]
[  148.966554][ T8304] System zones: 1-12, 13-13
[  148.968846][ T8304] EXT4-fs (loop1): orphan cleanup on readonly fs
[  148.979636][ T8304] EXT4-fs (loop1): 1 truncate cleaned up
[  148.983937][ T8304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  149.022562][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.300136][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.954'.
[  149.309615][ T8315] IPVS: Error joining to the multicast group
[  149.316886][ T8306] loop2: detected capacity change from 0 to 32768
[  149.328002][ T8306] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.950 (8306)
[  149.346778][ T8317] loop3: detected capacity change from 0 to 128
[  149.364851][ T8306] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  149.371705][ T8306] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  149.394124][ T8317] FAT-fs (loop3): Directory bread(block 32) failed
[  149.396783][ T8317] FAT-fs (loop3): Directory bread(block 33) failed
[  149.399426][ T8317] FAT-fs (loop3): Directory bread(block 34) failed
[  149.407863][ T8317] FAT-fs (loop3): Directory bread(block 35) failed
[  149.409973][ T8317] FAT-fs (loop3): Directory bread(block 36) failed
[  149.412571][ T8317] FAT-fs (loop3): Directory bread(block 37) failed
[  149.415638][ T8317] FAT-fs (loop3): Directory bread(block 38) failed
[  149.417858][ T8317] FAT-fs (loop3): Directory bread(block 39) failed
[  149.421498][ T8317] FAT-fs (loop3): Directory bread(block 40) failed
[  149.423971][ T8317] FAT-fs (loop3): Directory bread(block 41) failed
[  149.465177][ T8317] bio_check_eod: 2 callbacks suppressed
[  149.465190][ T8317] syz.3.955: attempt to access beyond end of device
[  149.465190][ T8317] loop3: rw=0, sector=4108, nr_sectors = 4 limit=128
[  149.474158][ T8306] BTRFS info (device loop2): enabling ssd optimizations
[  149.484725][ T8306] BTRFS info (device loop2): enabling free space tree
[  149.502722][ T5854] Bluetooth: hci1: command 0x0405 tx timeout
[  149.502736][ T8317] FAT-fs (loop3): Filesystem has been set read-only
[  149.507067][ T8317] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  149.547054][   T33] audit: type=1800 audit(1757322018.595:10351): pid=8306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.950" name="file1" dev="loop2" ino=260 res=0 errno=0
[  149.861602][ T5851] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  149.917320][ T8353] loop3: detected capacity change from 0 to 512
[  149.932108][ T5843] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  150.034381][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  150.037645][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[  150.059528][ T5851] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  150.063285][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.066735][ T5851] usb 2-1: Product: syz
[  150.078036][ T5851] usb 2-1: Manufacturer: syz
[  150.079567][ T5851] usb 2-1: SerialNumber: syz
[  150.086090][ T5851] usb 2-1: config 0 descriptor??
[  150.161086][ T5965] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  150.219904][ T8363] loop2: detected capacity change from 0 to 512
[  150.243383][ T8363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.248022][ T8363] ext4 filesystem being mounted at /326/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.274755][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.312637][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  150.315917][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 218, changing to 7
[  150.329866][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 32945, setting to 1024
[  150.339868][ T5965] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  150.348108][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.350649][ T5851] usb 2-1: USB disconnect, device number 11
[  150.356746][ T5965] usb 4-1: Product: syz
[  150.358079][ T5965] usb 4-1: Manufacturer: syz
[  150.359844][ T5965] usb 4-1: SerialNumber: syz
[  150.374665][ T5965] usb 4-1: config 0 descriptor??
[  150.377818][ T8370] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  150.380558][ T8370] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  150.390215][ T8370] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  150.394824][ T5965] usb 4-1: 0:0 : invalid sync pipe. bmAttributes e5, bLength 9, bSynchAddress 2f
[  150.396093][ T8370] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4)
[  150.402027][ T8370] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  150.405558][ T8370] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  150.414471][ T8370] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  150.419386][ T5967] udevd[5967]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  150.426167][ T8370] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  150.429293][ T8370] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  150.432971][ T8370] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  150.435175][ T8370] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  150.617758][ T5965] usb 4-1: USB disconnect, device number 9
[  150.655787][ T8380] loop2: detected capacity change from 0 to 512
[  150.664261][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  150.676113][ T8380] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  150.689330][ T8380] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=00c2]
[  150.696573][ T8380] System zones: 0-2, 18-18, 34-34
[  150.698641][ T8380] EXT4-fs (loop2): orphan cleanup on readonly fs
[  150.704427][ T8380] EXT4-fs error (device loop2): ext4_quota_enable:7134: inode #15: comm syz.2.976: iget: bad i_size value: 360287970189639690
[  150.713109][ T8380] EXT4-fs error (device loop2): ext4_quota_enable:7137: comm syz.2.976: Bad quota inode: 15, type: 2
[  150.717607][ T8380] EXT4-fs warning (device loop2): ext4_enable_quotas:7178: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix.
[  150.727633][ T8380] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  150.731562][ T8380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  150.744647][ T8380] EXT4-fs error (device loop2): ext4_lookup:1787: comm syz.2.976: inode #15: comm syz.2.976: iget: illegal inode #
[  150.772472][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.787786][ T5854] Bluetooth: hci2: command 0x0c1a tx timeout
[  151.144791][ T8401] program syz.3.986 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  151.149304][ T8401] program syz.3.986 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  151.265053][ T5965] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  151.342047][ T5847] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  151.420821][ T5965] usb 3-1: Using ep0 maxpacket: 16
[  151.423905][ T5965] usb 3-1: config 0 interface 0 has no altsetting 0
[  151.426030][ T5965] usb 3-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00
[  151.428958][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.436556][ T5965] usb 3-1: config 0 descriptor??
[  151.491155][ T5847] usb 2-1: Using ep0 maxpacket: 32
[  151.495443][ T5847] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  151.498676][ T5847] usb 2-1: config 0 has no interface number 0
[  151.506840][ T5847] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  151.511249][ T5847] usb 2-1: config 0 interface 85 has no altsetting 0
[  151.516990][ T5847] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  151.520543][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.525289][ T5847] usb 2-1: Product: syz
[  151.527079][ T5847] usb 2-1: Manufacturer: syz
[  151.529034][ T5847] usb 2-1: SerialNumber: syz
[  151.533728][ T5847] usb 2-1: config 0 descriptor??
[  151.572674][ T5854] Bluetooth: hci1: command 0x0405 tx timeout
[  151.747356][ T8399] loop1: detected capacity change from 0 to 1024
[  151.784436][ T8399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.878367][ T5965] monterey 0003:0566:3004.0004: unknown main item tag 0x0
[  151.881337][ T5965] monterey 0003:0566:3004.0004: unknown main item tag 0x0
[  151.884152][ T5965] monterey 0003:0566:3004.0004: unknown main item tag 0x0
[  151.886950][ T5965] monterey 0003:0566:3004.0004: unknown main item tag 0x0
[  151.889324][ T5965] monterey 0003:0566:3004.0004: unknown main item tag 0x0
[  151.892199][ T5965] monterey 0003:0566:3004.0004: unknown main item tag 0x0
[  151.894726][ T5965] monterey 0003:0566:3004.0004: unknown main item tag 0x0
[  151.896970][ T5965] monterey 0003:0566:3004.0004: unknown main item tag 0x0
[  151.899205][ T5965] monterey 0003:0566:3004.0004: unknown main item tag 0x0
[  151.901498][ T5965] monterey 0003:0566:3004.0004: unknown main item tag 0x0
[  151.919309][ T5965] monterey 0003:0566:3004.0004: hidraw0: USB HID v0.00 Device [HID 0566:3004] on usb-dummy_hcd.2-1/input0
[  152.088892][ T5911] usb 3-1: USB disconnect, device number 10
[  152.196388][ T5847] appletouch 2-1:0.85: Geyser mode initialized.
[  152.202750][ T5847] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input5
[  152.211930][ T8411] loop3: detected capacity change from 0 to 128
[  152.233393][ T8411] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  152.245098][ T8411] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  152.385049][ T5911] Process accounting resumed
[  152.400514][ T5847] usb 2-1: USB disconnect, device number 12
[  152.414060][ T5847] appletouch 2-1:0.85: input: appletouch disconnected
[  152.559347][ T8429] loop3: detected capacity change from 0 to 128
[  152.609797][ T8431] ubi31: attaching mtd0
[  152.749401][ T8439] loop3: detected capacity change from 0 to 512
[  152.756994][ T8439] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  152.770011][ T8439] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  152.773840][ T8439] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  152.776393][ T8439] System zones: 0-2, 18-18, 34-35
[  152.779173][ T8439] EXT4-fs (loop3): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.806985][ T6160] EXT4-fs (loop3): unmounting filesystem 00000000-0700-0000-0000-000000000000.
[  152.918915][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.135816][ T8451] loop1: detected capacity change from 0 to 32768
[  153.197164][ T8447] loop2: detected capacity change from 0 to 32768
[  153.273852][ T8451] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  153.273869][ T8451]   allowing incompatible features above 0.0: (unknown version)
[  153.273874][ T8451]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  153.287859][ T8451] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  153.289015][ T8447] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  153.290310][ T8451] bcachefs (loop1): initializing new filesystem
[  153.295776][ T8451] bcachefs (loop1): going read-write
[  153.306124][ T8451] bcachefs (loop1): marking superblocks
[  153.311893][ T8451] bcachefs (loop1): initializing freespace
[  153.315447][ T8451] bcachefs (loop1): done initializing freespace
[  153.318995][ T8451] bcachefs (loop1): reading snapshots table
[  153.321001][ T8451] bcachefs (loop1): reading snapshots done
[  153.338794][ T8447] XFS (loop2): Ending clean mount
[  153.345835][ T8451] bcachefs (loop1): done starting filesystem
[  153.346337][ T8447] XFS (loop2): Quotacheck needed: Please wait.
[  153.410084][ T8447] XFS (loop2): Quotacheck: Done.
[  153.458819][ T5843] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  153.880915][ T5911] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  153.961084][ T5849] bcachefs (loop1): shutting down
[  153.962718][ T5849] bcachefs (loop1): going read-only
[  153.964574][ T5849] bcachefs (loop1): finished waiting for writes to stop
[  153.972980][ T5849] bcachefs (loop1): flushing journal and stopping allocators, journal seq 4
[  153.985330][ T8485] tmpfs: Bad value for 'mpol'
[  154.015018][ T5849] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 6
[  154.021042][ T5849] bcachefs (loop1): clean shutdown complete, journal seq 7
[  154.024221][ T5849] bcachefs (loop1): marking filesystem clean
[  154.033449][ T5911] usb 3-1: Using ep0 maxpacket: 16
[  154.045777][ T5849] bcachefs (loop1): shutdown complete
[  154.046881][ T5911] usb 3-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  154.063479][ T5911] usb 3-1: config 1 interface 0 has no altsetting 0
[  154.069780][ T5911] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.40
[  154.074018][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.078267][ T5911] usb 3-1: Product: syz
[  154.079600][ T5911] usb 3-1: Manufacturer: syz
[  154.083573][ T5911] usb 3-1: SerialNumber: syz
[  154.309091][ T5911] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input6
[  154.334919][ T5911] usb 3-1: USB disconnect, device number 11
[  155.024157][ T8496] loop2: detected capacity change from 0 to 1024
[  155.215678][ T1092] hfsplus: b-tree write err: -5, ino 8
[  155.357013][ T8505] netlink: 'syz.1.1022': attribute type 3 has an invalid length.
[  155.498857][ T8515] loop1: detected capacity change from 0 to 2048
[  155.538511][ T8515] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #2: comm syz.1.1026: pblk 0 bad header/extent: eh_entries is 0 but eh_depth is > 0 - magic f30a, entries 0, max 4(4), depth 5(5)
[  155.557530][ T8515] EXT4-fs (loop1): get root inode failed
[  155.559363][ T8515] EXT4-fs (loop1): mount failed
[  155.668593][ T8523] loop1: detected capacity change from 0 to 512
[  155.671699][ T8523] EXT4-fs: Ignoring removed nomblk_io_submit option
[  155.674423][ T8523] EXT4-fs: Mount option(s) incompatible with ext3
[  155.866678][ T8530] random: crng reseeded on system resumption
[  156.167451][ T8540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1038'.
[  156.496221][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1040'.
[  156.507529][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1040'.
[  156.595985][ T8553] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check.
[  156.964741][ T8554] loop3: detected capacity change from 0 to 32768
[  156.967715][ T8554] XFS: ikeep mount option is deprecated.
[  157.039613][ T8554] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  157.130440][ T8554] XFS (loop3): Ending clean mount
[  157.148183][ T8554] XFS (loop3): Quotacheck needed: Please wait.
[  157.201191][ T8554] XFS (loop3): Quotacheck: Done.
[  157.302505][ T6160] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  157.362431][ T8584] loop1: detected capacity change from 0 to 32768
[  157.392852][ T8584] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  157.424607][ T8584] (syz.1.1055,8584,1):ocfs2_read_journal_inode:1659 ERROR: status = -13
[  157.430121][ T8584] (syz.1.1055,8584,1):ocfs2_mark_dead_nodes:1942 ERROR: status = -13
[  157.435152][ T8584] (syz.1.1055,8584,1):ocfs2_check_volume:2418 ERROR: status = -13
[  157.437704][ T8584] (syz.1.1055,8584,1):ocfs2_check_volume:2430 ERROR: status = -13
[  157.440242][ T8584] (syz.1.1055,8584,1):ocfs2_mount_volume:1764 ERROR: status = -13
[  157.494413][ T8584] (syz.1.1055,8584,0):ocfs2_fill_super:1177 ERROR: status = -13
[  157.796933][ T8616] hugetlbfs: syz.2.1069 (8616): Using mlock ulimits for SHM_HUGETLB is obsolete
[  158.005663][ T8629] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1074'.
[  158.009718][ T8629] unsupported nlmsg_type 40
[  158.683458][ T8639] vlan0: left promiscuous mode
[  159.085691][ T8656] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1086'.
[  159.289828][ T8659] loop3: detected capacity change from 0 to 128
[  159.320304][ T8659] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  159.345392][ T8659] hpfs: filesystem error: improperly stopped
[  159.348396][ T8659] hpfs: You really don't want any checks? You are crazy...
[  159.353466][ T8659] hpfs: hpfs_map_sector(): read error
[  159.355563][ T8659] hpfs: code page support is disabled
[  159.362378][ T8659] hpfs: hpfs_map_4sectors(): unaligned read
[  159.365530][ T8659] hpfs: hpfs_map_4sectors(): unaligned read
[  159.368123][ T8659] hpfs: filesystem error: unable to find root dir
[  159.947893][ T8667] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1091'.
[  160.287709][ T5851] IPVS: starting estimator thread 0...
[  160.410973][ T8682] IPVS: using max 64 ests per chain, 153600 per kthread
[  160.467062][ T8677] loop1: detected capacity change from 0 to 32768
[  160.589733][ T8677] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  160.589759][ T8677]   allowing incompatible features above 0.0: (unknown version)
[  160.589770][ T8677]   features: 
[  160.633600][ T8677] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  160.640565][ T8677] bcachefs (loop1): initializing new filesystem
[  160.683294][ T8701] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1104'.
[  160.687281][ T8701] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1104'.
[  160.691551][ T8701] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1104'.
[  160.712773][ T8677] bcachefs (loop1): going read-write
[  160.759581][ T8677] bcachefs (loop1): marking superblocks
[  160.768834][ T8677] bcachefs (loop1): initializing freespace
[  160.799191][ T8677] bcachefs (loop1): done initializing freespace
[  160.805895][ T8677] bcachefs (loop1): reading snapshots table
[  160.808340][ T8677] bcachefs (loop1): reading snapshots done
[  160.849712][ T8677] bcachefs (loop1): done starting filesystem
[  160.959952][ T5851] bcachefs (loop1): going read-only
[  160.965602][ T5851] bcachefs (loop1): finished waiting for writes to stop
[  160.971996][ T8677] bcachefs (loop1): shutdown by ioctl type 0emergency read only at seq 2
[  161.002701][ T5851] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  161.006319][ T5851] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 2
[  161.011848][ T5851] bcachefs (loop1): unclean shutdown complete, journal seq 2
[  161.020608][ T5851] bcachefs (loop1): done going read-only, filesystem not clean
[  161.025995][ T5849] bcachefs (loop1): shutting down
[  161.069986][ T5849] bcachefs (loop1): shutdown complete
[  161.264420][ T8708] loop3: detected capacity change from 0 to 32768
[  161.269278][ T8708] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1106 (8708)
[  161.289413][ T8708] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  161.293209][ T8708] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  161.296325][ T8708] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  161.326471][ T8708] BTRFS info (device loop3): rebuilding free space tree
[  161.341580][ T8708] BTRFS info (device loop3): disabling free space tree
[  161.344594][ T8708] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  161.348481][ T8708] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  161.353295][ T5851] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  161.363760][ T8708] BTRFS info (device loop3): setting nodatasum
[  161.366315][ T8708] BTRFS info (device loop3): allowing degraded mounts
[  161.369139][ T8708] BTRFS info (device loop3): enabling disk space caching
[  161.373626][ T8708] BTRFS info (device loop3): force clearing of disk cache
[  161.376483][ T8708] BTRFS info (device loop3): force zlib compression, level 3
[  161.421205][ T6160] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  161.528377][ T5851] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=6c.de
[  161.532493][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.535241][ T5851] usb 3-1: Product: syz
[  161.552991][ T5851] usb 3-1: Manufacturer: syz
[  161.554434][ T5851] usb 3-1: SerialNumber: syz
[  161.562605][ T5851] usb 3-1: config 0 descriptor??
[  161.571775][ T5851] ems_usb 3-1:0.0 (unnamed net_device) (uninitialized): couldn't initialize controller: -22
[  161.575397][ T5851] ems_usb 3-1:0.0: probe with driver ems_usb failed with error -22
[  161.776475][ T5851] usb 3-1: USB disconnect, device number 12
[  162.231749][ T8734] loop1: detected capacity change from 0 to 256
[  162.568315][ T8742] exFAT-fs (loop1): start_clu is invalid cluster(0x400)
[  162.934708][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1116'.
[  162.960139][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1116'.
[  163.604261][ T8752] loop3: detected capacity change from 0 to 32768
[  163.666345][   T33] audit: type=1800 audit(1757322032.715:10352): pid=8752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1118" name="file1" dev="loop3" ino=4 res=0 errno=0
[  163.812627][ T8770] loop1: detected capacity change from 0 to 1024
[  163.934700][ T8770] hfsplus: catalog searching failed
[  163.967611][   T32] hfsplus: b-tree write err: -5, ino 3
[  163.978863][ T5849] hfsplus: node 4:3 still has 2 user(s)!
[  165.150483][ T8787] loop2: detected capacity change from 0 to 40427
[  165.159130][ T8787] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  165.162278][ T8787] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  165.166998][ T8787] F2FS-fs (loop2): invalid crc value
[  165.212761][ T8787] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  165.227897][ T8787] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  165.230175][ T8787] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  165.864400][ T8776] kexec: Could not allocate control_code_buffer
[  166.986006][ T8868] lo speed is unknown, defaulting to 1000
[  166.988422][ T8868] lo speed is unknown, defaulting to 1000
[  167.006794][ T8868] lo speed is unknown, defaulting to 1000
[  167.029341][ T8868] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  167.070156][ T8868] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  167.126508][ T8868] lo speed is unknown, defaulting to 1000
[  167.131709][ T8868] lo speed is unknown, defaulting to 1000
[  167.134577][ T8868] lo speed is unknown, defaulting to 1000
[  167.302625][ T8873] loop3: detected capacity change from 0 to 24
[  167.305389][ T8873] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  167.327155][ T8873] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  167.406454][ T8875] loop3: detected capacity change from 0 to 256
[  167.874816][ T8885] 9pnet_fd: p9_fd_create_tcp (8885): problem connecting socket to 127.0.0.1
[  168.048295][   T33] audit: type=1326 audit(1757322036.995:10353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8882 comm="syz.1.1175" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cb38ebe9 code=0x7ffc0000
[  168.167829][   T33] audit: type=1326 audit(1757322036.995:10354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8882 comm="syz.1.1175" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cb38ebe9 code=0x7ffc0000
[  168.268676][ T8889] evm: overlay not supported
[  168.273908][   T33] audit: type=1326 audit(1757322037.005:10355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8882 comm="syz.1.1175" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85cb38ebe9 code=0x7ffc0000
[  168.295966][   T33] audit: type=1326 audit(1757322037.005:10356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8882 comm="syz.1.1175" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cb38ebe9 code=0x7ffc0000
[  168.310774][   T33] audit: type=1326 audit(1757322037.005:10357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8882 comm="syz.1.1175" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cb38ebe9 code=0x7ffc0000
[  168.319654][   T33] audit: type=1326 audit(1757322037.005:10358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8882 comm="syz.1.1175" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f85cb38ebe9 code=0x7ffc0000
[  168.342757][   T33] audit: type=1326 audit(1757322037.005:10359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8882 comm="syz.1.1175" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cb38ebe9 code=0x7ffc0000
[  168.350472][   T33] audit: type=1326 audit(1757322037.005:10360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8882 comm="syz.1.1175" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85cb38ebe9 code=0x7ffc0000
[  168.362494][   T33] audit: type=1326 audit(1757322037.015:10361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8882 comm="syz.1.1175" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f85cb38ebe9 code=0x7ffc0000
[  168.406592][ T8893] loop2: detected capacity change from 0 to 512
[  168.439129][ T8893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.446268][ T8893] ext4 filesystem being mounted at /404/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  168.464733][ T8893] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1178: corrupted inode contents
[  168.484025][ T8893] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.1178: mark_inode_dirty error
[  168.570253][ T8893] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1178: corrupted inode contents
[  168.609292][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.727336][ T8903] loop2: detected capacity change from 0 to 2048
[  168.755625][ T8903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.780206][ T8903] ext4 filesystem being mounted at /405/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.805299][ T8910] loop1: detected capacity change from 0 to 256
[  168.893988][ T8903] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1181: bg 0: block 345: padding at end of block bitmap is not set
[  168.968025][   T32] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 79 with max blocks 1 with error 28
[  168.975300][   T32] EXT4-fs (loop2): This should not happen!! Data will be lost
[  168.975300][   T32] 
[  168.983509][   T32] EXT4-fs (loop2): Total free blocks count 0
[  168.985879][   T32] EXT4-fs (loop2): Free/Dirty block details
[  168.988157][   T32] EXT4-fs (loop2): free_blocks=0
[  168.990264][   T32] EXT4-fs (loop2): dirty_blocks=16
[  168.993579][   T32] EXT4-fs (loop2): Block reservation details
[  168.995950][   T32] EXT4-fs (loop2): i_reserved_data_blocks=1
[  169.005690][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.761081][ T5965] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  169.912282][ T5965] usb 3-1: Using ep0 maxpacket: 16
[  169.926410][ T5965] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  169.929558][ T5965] usb 3-1: config 0 has no interface number 0
[  169.944664][ T5965] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.959940][ T5965] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  169.969634][ T8933] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  169.976166][ T5965] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  170.032285][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.045257][ T5965] usb 3-1: config 0 descriptor??
[  170.095049][ T8937] loop3: detected capacity change from 0 to 512
[  170.103863][ T8937] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  170.122701][ T8937] netlink: 'syz.3.1195': attribute type 1 has an invalid length.
[  170.183114][ T8937] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  170.195910][ T5713] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  170.197814][ T8937] 8021q: adding VLAN 0 to HW filter on device bond2
[  170.323053][ T5877] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  170.522784][ T8942] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  170.525830][ T8942] overlayfs: failed to set xattr on upper
[  170.528175][ T8942] overlayfs: ...falling back to redirect_dir=nofollow.
[  170.533066][ T8942] overlayfs: ...falling back to metacopy=off.
[  170.535566][ T8942] overlayfs: ...falling back to uuid=null.
[  170.689490][ T5965] input: HID 28bd:0071 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.0005/input/input7
[  170.718117][ T8949] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1200'.
[  170.727834][ T8949] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  170.768455][ T5965] input: HID 28bd:0071 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.0005/input/input8
[  170.839433][ T8954] netlink: 'syz.3.1202': attribute type 1 has an invalid length.
[  170.846499][ T5965] uclogic 0003:28BD:0071.0005: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.2-1/input1
[  170.903737][ T5965] usb 3-1: USB disconnect, device number 13
[  170.928303][    T9] IPVS: starting estimator thread 0...
[  171.017253][ T8957] IPVS: using max 35 ests per chain, 84000 per kthread
[  171.090925][ T8965] loop3: detected capacity change from 0 to 512
[  171.095272][ T8965] EXT4-fs error (device loop3): ext4_get_journal_inode:5806: comm syz.3.1208: inode #16777216: comm syz.3.1208: iget: illegal inode #
[  171.106023][ T8965] EXT4-fs (loop3): Remounting filesystem read-only
[  171.109749][ T8965] EXT4-fs (loop3): no journal found
[  171.112418][ T8965] EXT4-fs (loop3): can't get journal size
[  171.117464][ T8965] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  171.122972][ T8965] EXT4-fs (loop3): failed to initialize system zone (-22)
[  171.126243][ T8965] EXT4-fs (loop3): mount failed
[  171.747496][ T8975] loop2: detected capacity change from 0 to 512
[  171.762526][ T8975] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  171.771785][ T8975] EXT4-fs (loop2): 1 truncate cleaned up
[  171.774817][ T8975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.784513][ T8975] EXT4-fs error (device loop2): ext4_append:79: inode #2: comm syz.2.1211: Logical block already allocated
[  171.790639][ T8975] EXT4-fs (loop2): Remounting filesystem read-only
[  171.816371][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.000973][ T5854] Bluetooth: hci0: command tx timeout
[  172.185955][ T8993] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  172.497905][ T8992] loop2: detected capacity change from 0 to 32768
[  172.506904][ T8992] (syz.2.1218,8992,0):ocfs2_check_set_options:1259 ERROR: Group quotas were requested, but this filesystem does not have the feature enabled.
[  172.522831][ T8992] (syz.2.1218,8992,0):ocfs2_fill_super:1177 ERROR: status = -22
[  172.690415][ T9005] loop2: detected capacity change from 0 to 512
[  172.735886][ T9005] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1223: bg 0: block 393: padding at end of block bitmap is not set
[  172.741898][ T9005] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  172.745730][ T9005] EXT4-fs (loop2): 2 truncates cleaned up
[  172.749275][ T9005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.781727][    T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  172.808449][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.829419][ T9008] netlink: 'syz.3.1225': attribute type 6 has an invalid length.
[  172.893876][ T9010] loop3: detected capacity change from 0 to 128
[  172.898332][ T9010] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  172.910900][ T9010] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  172.950879][    T9] usb 2-1: Using ep0 maxpacket: 8
[  172.955669][    T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 254: 242, using maximum allowed: 30
[  172.969680][    T9] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 254, changing to 11
[  172.984107][    T9] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.996844][    T9] usb 2-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 242
[  173.013187][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  173.016791][    T9] usb 2-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00
[  173.020636][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.034108][    T9] usb 2-1: config 0 descriptor??
[  173.047691][ T9013] loop2: detected capacity change from 0 to 128
[  173.064673][ T9013] hpfs: Bad magic ... probably not HPFS
[  173.497887][    T9] microsoft 0003:045E:00F9.0006: hidraw0: USB HID v0.03 Device [HID 045e:00f9] on usb-dummy_hcd.1-1/input0
[  173.521227][    T9] microsoft 0003:045E:00F9.0006: no inputs found
[  173.529872][    T9] microsoft 0003:045E:00F9.0006: could not initialize ff, continuing anyway
[  173.680095][ T5965] usb 2-1: USB disconnect, device number 13
[  173.961749][ T9015] loop2: detected capacity change from 0 to 32768
[  174.329060][ T9025] loop2: detected capacity change from 0 to 1024
[  174.332385][ T9025] EXT4-fs: Ignoring removed orlov option
[  174.342635][ T9025] EXT4-fs: Ignoring removed nomblk_io_submit option
[  174.365562][ T9025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.523751][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.727977][ T9042] loop1: detected capacity change from 0 to 512
[  174.737519][ T9042] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  174.748450][ T9042] EXT4-fs (loop1): invalid journal inode
[  174.757772][ T9042] EXT4-fs (loop1): can't get journal size
[  174.831699][ T9042] EXT4-fs (loop1): 1 truncate cleaned up
[  174.844018][ T9042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.992849][ T9047] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1239'.
[  175.017915][ T9042] loop1: detected capacity change from 512 to 0
[  175.023688][    C0] I/O error, dev loop1, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 7 prio class 2
[  175.027676][    C0] I/O error, dev loop1, sector 26 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  175.031430][    C0] I/O error, dev loop1, sector 24 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  175.035810][ T9042] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4984: inode #32: block 12: comm syz.1.1237: unable to read itable block
[  175.081286][    C1] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  175.084654][    C1] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  175.088313][    C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  175.091365][ T9042] EXT4-fs (loop1): I/O error while writing superblock
[  175.171478][    C1] I/O error, dev loop1, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  175.175180][ T5849] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block
[  175.184001][ T9052] syz_tun: entered allmulticast mode
[  175.189986][    C0] I/O error, dev loop1, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2
[  175.196687][    C0] I/O error, dev loop1, sector 10 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2
[  175.200434][ T5849] EXT4-fs error (device loop1): ext4_get_inode_loc:4999: inode #2: block 5: comm syz-executor: unable to read itable block
[  175.201206][ T9052] dvmrp1: entered allmulticast mode
[  175.206524][    C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  175.211335][    C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2
[  175.214956][    C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  175.218477][ T5849] EXT4-fs (loop1): I/O error while writing superblock
[  175.221900][ T5849] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: IO failure
[  175.226771][    C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  175.230603][ T5849] EXT4-fs (loop1): I/O error while writing superblock
[  175.235573][ T5849] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error
[  175.243618][    C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  175.246875][ T5849] EXT4-fs (loop1): I/O error while writing superblock
[  175.262903][ T9051] syz_tun: left allmulticast mode
[  175.344520][   T85] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4984: inode #2: block 5: comm kworker/u9:3: unable to read itable block
[  175.354602][    C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  175.358269][   T85] EXT4-fs (loop1): I/O error while writing superblock
[  175.376190][ T6026] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.396431][    C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write
[  175.403074][ T6026] EXT4-fs (loop1): I/O error while writing superblock
[  175.534378][ T9062] Invalid source name
[  175.536610][ T9062] UBIFS error (pid: 9062): cannot open "ubifs", error -22
[  175.786154][ T5878] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.091882][ T5878] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.171875][ T5878] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.239858][ T5878] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.313226][   T56] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  176.319635][   T56] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  176.329484][   T56] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  176.336085][   T56] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  176.339183][   T56] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  176.516191][ T5878] bridge_slave_1: left allmulticast mode
[  176.518545][ T5878] bridge_slave_1: left promiscuous mode
[  176.522188][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.530464][ T5878] bridge_slave_0: left allmulticast mode
[  176.534944][ T5878] bridge_slave_0: left promiscuous mode
[  176.541217][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.986509][ T5878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.994420][ T5878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.999199][ T5878] bond0 (unregistering): Released all slaves
[  177.012120][ T9070] lo speed is unknown, defaulting to 1000
[  177.251085][ T9094] trusted_key: syz.2.1259 sent an empty control message without MSG_MORE.
[  177.458773][ T5878] hsr_slave_0: left promiscuous mode
[  177.466598][ T5878] hsr_slave_1: left promiscuous mode
[  177.474244][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  177.477374][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_0
[  177.481298][ T5878] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  177.484265][ T5878] batman_adv: batadv0: Removing interface: batadv_slave_1
[  177.505389][ T5878] veth1_macvtap: left promiscuous mode
[  177.507773][ T5878] veth0_macvtap: left promiscuous mode
[  177.510172][ T5878] veth1_vlan: left promiscuous mode
[  177.512384][ T5878] veth0_vlan: left promiscuous mode
[  178.026585][ T5878] team0 (unregistering): Port device team_slave_1 removed
[  178.074357][ T5878] team0 (unregistering): Port device team_slave_0 removed
[  178.377014][   T56] Bluetooth: hci2: command tx timeout
[  178.546901][ T9070] chnl_net:caif_netlink_parms(): no params data found
[  178.845829][ T9070] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.860505][ T9070] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.863830][ T9070] bridge_slave_0: entered allmulticast mode
[  178.867131][ T9070] bridge_slave_0: entered promiscuous mode
[  178.883203][ T9070] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.886619][ T9070] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.889630][ T9070] bridge_slave_1: entered allmulticast mode
[  178.893940][ T9070] bridge_slave_1: entered promiscuous mode
[  179.032536][ T9125] loop2: detected capacity change from 0 to 128
[  179.039382][ T9070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  179.053098][ T9070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  179.054927][ T5878] IPVS: stop unused estimator thread 0...
[  179.193648][ T9070] team0: Port device team_slave_0 added
[  179.215689][ T9070] team0: Port device team_slave_1 added
[  179.264734][ T9133] loop2: detected capacity change from 0 to 256
[  179.278202][ T9133] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  179.370377][ T9070] batman_adv: batadv0: Adding interface: batadv_slave_0
[  179.376656][ T9070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.421880][ T9070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  179.441133][ T9070] batman_adv: batadv0: Adding interface: batadv_slave_1
[  179.443969][ T9070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.460338][ T9070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  179.531091][ T9070] hsr_slave_0: entered promiscuous mode
[  179.534875][ T9070] hsr_slave_1: entered promiscuous mode
[  179.996734][ T9148] loop3: detected capacity change from 0 to 512
[  180.075859][ T9148] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  180.081023][ T9148] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it
[  180.084941][ T9148] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1273: Corrupt directory, running e2fsck is recommended
[  180.107440][ T9148] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117
[  180.111297][ T9148] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.1273: corrupted in-inode xattr: invalid ea_ino
[  180.117533][ T9148] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1273: couldn't read orphan inode 15 (err -117)
[  180.125626][ T9148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.335446][ T6160] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.442184][ T9163] loop2: detected capacity change from 0 to 256
[  180.443289][ T9070] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  180.451029][   T56] Bluetooth: hci2: command tx timeout
[  180.480498][ T9070] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  180.499451][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  180.499464][   T33] audit: type=1804 audit(1757322049.545:10367): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1280" name="/newroot/447/file0/bus" dev="loop2" ino=1048629 res=1 errno=0
[  180.500646][ T9163] Invalid ELF header magic: != ELF
[  180.525167][   T33] audit: type=1800 audit(1757322049.545:10368): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1280" name="bus" dev="loop2" ino=1048629 res=0 errno=0
[  180.551524][ T9070] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  180.565319][ T9070] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  180.834817][ T9187] loop2: detected capacity change from 0 to 1024
[  180.836039][ T9070] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.861594][ T9187] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.1286: Invalid inode table block 0 in block_group 0
[  180.874757][ T9070] 8021q: adding VLAN 0 to HW filter on device team0
[  180.878329][ T9187] EXT4-fs (loop2): get root inode failed
[  180.880596][ T9187] EXT4-fs (loop2): mount failed
[  180.920558][   T85] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.923533][   T85] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.930923][   T85] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.933807][   T85] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.991272][ T5965] kernel write not supported for file /915/sched (pid: 5965 comm: kworker/1:5)
[  181.024049][ T9070] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  181.139968][ T9197] loop2: detected capacity change from 0 to 4096
[  181.147626][ T9197] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  181.204468][ T9197] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  181.232305][ T9070] 8021q: adding VLAN 0 to HW filter on device batadv0
[  181.269179][ T9197] ntfs3: Cannot load iocharset cp
[  181.269179][ T9197] 
[  181.472996][ T9070] veth0_vlan: entered promiscuous mode
[  181.482718][ T9070] veth1_vlan: entered promiscuous mode
[  181.506837][ T9070] veth0_macvtap: entered promiscuous mode
[  181.514543][ T9070] veth1_macvtap: entered promiscuous mode
[  181.545003][ T9070] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.557949][ T9070] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.581102][ T5965] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  181.653364][ T9224] netlink: 324 bytes leftover after parsing attributes in process `syz.2.1294'.
[  181.682704][ T5878] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.722869][ T5878] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.757284][ T5878] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.783066][ T5965] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  181.789668][ T5878] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.801189][ T5965] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  181.822705][ T5965] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  181.839486][ T5965] usb 4-1: config 220 has no interface number 2
[  181.862761][ T5965] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  181.906013][ T5965] usb 4-1: config 220 interface 0 has no altsetting 0
[  181.918960][ T5965] usb 4-1: config 220 interface 76 has no altsetting 0
[  181.922493][ T5965] usb 4-1: config 220 interface 1 has no altsetting 0
[  181.927302][ T5965] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  181.930425][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.934622][ T5965] usb 4-1: Product: syz
[  181.936668][ T5965] usb 4-1: Manufacturer: syz
[  181.938732][ T5965] usb 4-1: SerialNumber: syz
[  182.019792][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.030762][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.054655][ T3610] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.057148][ T3610] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.165560][ T9232] loop4: detected capacity change from 0 to 512
[  182.168667][ T5965] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  182.172891][ T9232] EXT4-fs: journaled quota format not specified
[  182.177721][ T5965] usb 4-1: No valid video chain found.
[  182.180111][ T5965] usb 4-1: selecting invalid altsetting 0
[  182.202405][ T5965] usb 4-1: selecting invalid altsetting 0
[  182.205914][ T5965] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[  182.225096][ T5965] usb 4-1: USB disconnect, device number 10
[  182.402911][ T9239] program syz.4.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  182.530998][   T56] Bluetooth: hci2: command tx timeout
[  182.930215][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1303'.
[  183.011706][ T9254] dvmrp5: entered allmulticast mode
[  183.032753][ T9254] pimreg: entered allmulticast mode
[  183.193604][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'.
[  184.032626][   T33] audit: type=1326 audit(1757322053.085:10369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.3.1319" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f31a4d8ebe9 code=0x0
[  184.122265][ T9289] syzkaller1: entered promiscuous mode
[  184.124228][ T9289] syzkaller1: entered allmulticast mode
[  184.152694][ T9291] bpf: Bad value for 'gid'
[  184.228635][ T9295] loop3: detected capacity change from 0 to 512
[  184.253783][ T9295] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  184.527854][ T9302] netlink: 'syz.2.1325': attribute type 1 has an invalid length.
[  184.536026][ T9299] loop3: detected capacity change from 0 to 32768
[  184.543277][ T9299] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1326 (9299)
[  184.611055][   T56] Bluetooth: hci2: command tx timeout
[  184.616200][ T9299] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  184.620417][ T9299] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  184.841773][ T9299] BTRFS info (device loop3): turning off barriers
[  184.844418][ T9299] BTRFS info (device loop3): enabling free space tree
[  184.847172][ T9299] BTRFS info (device loop3): use zstd compression, level 3
[  185.651958][ T9299] BTRFS info (device loop3 state M): resize thread pool 4 -> 2097158
[  185.655300][ T9299] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 2048
[  185.660287][ T9299] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048
[  185.665034][ T9299] BTRFS warning (device loop3 state M): remount supports changing free space tree only from RO to RW
[  185.669643][ T9299] BTRFS info (device loop3 state M): disabling log replay at mount time
[  185.673263][ T9299] BTRFS info (device loop3 state M): force clearing of disk cache
[  185.676370][ T9299] BTRFS info (device loop3 state M): ignoring bad roots
[  185.679150][ T9299] BTRFS info (device loop3 state M): ignoring data csums
[  185.682601][ T9299] BTRFS info (device loop3 state M): ignoring meta csums
[  185.685356][ T9299] BTRFS info (device loop3 state M): ignoring unknown super block flags
[  185.808116][ T6160] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  186.365583][   T33] audit: type=1326 audit(1757322055.405:10370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9346 comm="syz.3.1340" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f31a4d8ebe9 code=0x0
[  186.502271][ T9354] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1343'.
[  186.677295][ T9362] loop2: detected capacity change from 0 to 2048
[  186.684293][ T9362] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  186.687255][ T9362] UDF-fs: Scanning with blocksize 512 failed
[  186.691509][   T56] Bluetooth: hci2: command tx timeout
[  186.704476][ T9362] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  186.798918][ T9349] loop4: detected capacity change from 0 to 40427
[  186.819885][ T9349] F2FS-fs (loop4): invalid crc value
[  186.917066][ T9349] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  186.923792][ T9349] F2FS-fs (loop4): Start checkpoint disabled!
[  186.938975][ T9349] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  186.939686][ T9364] loop2: detected capacity change from 0 to 32768
[  186.946429][ T9349] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  186.947380][ T9364] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1348 (9364)
[  186.972995][ T9364] BTRFS info (device loop2): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  186.978443][ T9364] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  187.089079][ T9364] BTRFS info (device loop2): enabling ssd optimizations
[  187.100075][ T9364] BTRFS info (device loop2): enabling free space tree
[  187.120505][ T9070] syz-executor: attempt to access beyond end of device
[  187.120505][ T9070] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  187.140138][ T9070] syz-executor: attempt to access beyond end of device
[  187.140138][ T9070] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  187.170050][ T5843] BTRFS info (device loop2): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  187.229331][   T27] kworker/u10:0: attempt to access beyond end of device
[  187.229331][   T27] loop4: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[  187.249434][   T27] CPU: 1 UID: 0 PID: 27 Comm: kworker/u10:0 Not tainted syzkaller #0 PREEMPT(full) 
[  187.249448][   T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  187.249455][   T27] Workqueue: writeback wb_workfn (flush-7:4)
[  187.249474][   T27] Call Trace:
[  187.249479][   T27]  <TASK>
[  187.249484][   T27]  dump_stack_lvl+0x189/0x250
[  187.249500][   T27]  ? __pfx_dump_stack_lvl+0x10/0x10
[  187.249509][   T27]  ? __pfx_queue_work_on+0x10/0x10
[  187.249517][   T27]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  187.249531][   T27]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  187.249548][   T27]  f2fs_handle_critical_error+0x37c/0x540
[  187.249565][   T27]  f2fs_write_end_io+0x886/0xb60
[  187.249582][   T27]  __submit_merged_bio+0x27a/0x6a0
[  187.249597][   T27]  __submit_merged_write_cond+0x255/0x530
[  187.249611][   T27]  f2fs_write_data_pages+0x261d/0x3000
[  187.249640][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  187.249658][   T27]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  187.249684][   T27]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  187.249728][   T27]  ? trace_f2fs_writepages+0x7f/0x200
[  187.249740][   T27]  ? f2fs_write_node_pages+0x478/0x6e0
[  187.249753][   T27]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  187.249770][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  187.249788][   T27]  do_writepages+0x32e/0x550
[  187.249803][   T27]  ? reacquire_held_locks+0x127/0x1d0
[  187.249811][   T27]  ? writeback_sb_inodes+0x384/0x1010
[  187.249825][   T27]  __writeback_single_inode+0x145/0xff0
[  187.249835][   T27]  ? do_raw_spin_unlock+0x4d/0x240
[  187.249847][   T27]  writeback_sb_inodes+0x6c7/0x1010
[  187.249870][   T27]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  187.249901][   T27]  ? rcu_is_watching+0x15/0xb0
[  187.249914][   T27]  wb_writeback+0x43b/0xaf0
[  187.249928][   T27]  ? queue_io+0x2f1/0x590
[  187.249939][   T27]  ? __pfx_wb_writeback+0x10/0x10
[  187.249953][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  187.249966][   T27]  wb_workfn+0x409/0xef0
[  187.249982][   T27]  ? __pfx_wb_workfn+0x10/0x10
[  187.249992][   T27]  ? __lock_acquire+0xab9/0xd20
[  187.250009][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  187.250025][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  187.250036][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  187.250046][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  187.250058][   T27]  process_scheduled_works+0xae1/0x17b0
[  187.250085][   T27]  ? __pfx_process_scheduled_works+0x10/0x10
[  187.250106][   T27]  worker_thread+0x8a0/0xda0
[  187.250128][   T27]  kthread+0x711/0x8a0
[  187.250139][   T27]  ? __pfx_worker_thread+0x10/0x10
[  187.250146][   T27]  ? __pfx_kthread+0x10/0x10
[  187.250155][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  187.250166][   T27]  ? lockdep_hardirqs_on+0x9c/0x150
[  187.250173][   T27]  ? __pfx_kthread+0x10/0x10
[  187.250183][   T27]  ret_from_fork+0x47f/0x820
[  187.250196][   T27]  ? __pfx_ret_from_fork+0x10/0x10
[  187.250211][   T27]  ? __switch_to_asm+0x39/0x70
[  187.250221][   T27]  ? __switch_to_asm+0x33/0x70
[  187.250229][   T27]  ? __pfx_kthread+0x10/0x10
[  187.250239][   T27]  ret_from_fork_asm+0x1a/0x30
[  187.250258][   T27]  </TASK>
[  187.250262][   T27] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  187.367752][   T27] CPU: 1 UID: 0 PID: 27 Comm: kworker/u10:0 Not tainted syzkaller #0 PREEMPT(full) 
[  187.367767][   T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  187.367778][   T27] Workqueue: writeback wb_workfn (flush-7:4)
[  187.367794][   T27] Call Trace:
[  187.367798][   T27]  <TASK>
[  187.367802][   T27]  dump_stack_lvl+0x189/0x250
[  187.367816][   T27]  ? __pfx_dump_stack_lvl+0x10/0x10
[  187.367827][   T27]  ? __pfx_queue_work_on+0x10/0x10
[  187.367834][   T27]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  187.367846][   T27]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  187.367863][   T27]  f2fs_handle_critical_error+0x37c/0x540
[  187.367879][   T27]  f2fs_write_end_io+0x886/0xb60
[  187.367912][   T27]  __submit_merged_bio+0x27a/0x6a0
[  187.367928][   T27]  __submit_merged_write_cond+0x255/0x530
[  187.367942][   T27]  f2fs_write_data_pages+0x261d/0x3000
[  187.367971][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  187.367991][   T27]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  187.368016][   T27]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  187.368034][   T27]  ? trace_f2fs_writepages+0x7f/0x200
[  187.368044][   T27]  ? f2fs_write_node_pages+0x478/0x6e0
[  187.368057][   T27]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  187.368074][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  187.368086][   T27]  do_writepages+0x32e/0x550
[  187.368100][   T27]  ? reacquire_held_locks+0x127/0x1d0
[  187.368107][   T27]  ? writeback_sb_inodes+0x384/0x1010
[  187.368121][   T27]  __writeback_single_inode+0x145/0xff0
[  187.368130][   T27]  ? do_raw_spin_unlock+0x4d/0x240
[  187.368141][   T27]  writeback_sb_inodes+0x6c7/0x1010
[  187.368164][   T27]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  187.368196][   T27]  ? rcu_is_watching+0x15/0xb0
[  187.368208][   T27]  wb_writeback+0x43b/0xaf0
[  187.368221][   T27]  ? queue_io+0x2f1/0x590
[  187.368232][   T27]  ? __pfx_wb_writeback+0x10/0x10
[  187.368245][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  187.368259][   T27]  wb_workfn+0x409/0xef0
[  187.368274][   T27]  ? __pfx_wb_workfn+0x10/0x10
[  187.368284][   T27]  ? __lock_acquire+0xab9/0xd20
[  187.368301][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  187.368316][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  187.368326][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  187.368336][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  187.368348][   T27]  process_scheduled_works+0xae1/0x17b0
[  187.368376][   T27]  ? __pfx_process_scheduled_works+0x10/0x10
[  187.368396][   T27]  worker_thread+0x8a0/0xda0
[  187.368418][   T27]  kthread+0x711/0x8a0
[  187.368428][   T27]  ? __pfx_worker_thread+0x10/0x10
[  187.368435][   T27]  ? __pfx_kthread+0x10/0x10
[  187.368445][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  187.368455][   T27]  ? lockdep_hardirqs_on+0x9c/0x150
[  187.368462][   T27]  ? __pfx_kthread+0x10/0x10
[  187.368471][   T27]  ret_from_fork+0x47f/0x820
[  187.368485][   T27]  ? __pfx_ret_from_fork+0x10/0x10
[  187.368499][   T27]  ? __switch_to_asm+0x39/0x70
[  187.368508][   T27]  ? __switch_to_asm+0x33/0x70
[  187.368517][   T27]  ? __pfx_kthread+0x10/0x10
[  187.368526][   T27]  ret_from_fork_asm+0x1a/0x30
[  187.368545][   T27]  </TASK>
[  187.474935][   T27] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  187.477112][   T27] CPU: 1 UID: 0 PID: 27 Comm: kworker/u10:0 Not tainted syzkaller #0 PREEMPT(full) 
[  187.477138][   T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  187.477144][   T27] Workqueue: writeback wb_workfn (flush-7:4)
[  187.477159][   T27] Call Trace:
[  187.477163][   T27]  <TASK>
[  187.477167][   T27]  dump_stack_lvl+0x189/0x250
[  187.477182][   T27]  ? __pfx_dump_stack_lvl+0x10/0x10
[  187.477191][   T27]  ? __pfx_queue_work_on+0x10/0x10
[  187.477199][   T27]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  187.477211][   T27]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  187.477228][   T27]  f2fs_handle_critical_error+0x37c/0x540
[  187.477244][   T27]  f2fs_write_end_io+0x886/0xb60
[  187.477260][   T27]  __submit_merged_bio+0x27a/0x6a0
[  187.477274][   T27]  __submit_merged_write_cond+0x255/0x530
[  187.477288][   T27]  f2fs_write_data_pages+0x261d/0x3000
[  187.477317][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  187.477335][   T27]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  187.477362][   T27]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  187.477379][   T27]  ? trace_f2fs_writepages+0x7f/0x200
[  187.477390][   T27]  ? f2fs_write_node_pages+0x478/0x6e0
[  187.477403][   T27]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  187.477420][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  187.477432][   T27]  do_writepages+0x32e/0x550
[  187.477445][   T27]  ? reacquire_held_locks+0x127/0x1d0
[  187.477452][   T27]  ? writeback_sb_inodes+0x384/0x1010
[  187.477466][   T27]  __writeback_single_inode+0x145/0xff0
[  187.477475][   T27]  ? do_raw_spin_unlock+0x4d/0x240
[  187.477486][   T27]  writeback_sb_inodes+0x6c7/0x1010
[  187.477508][   T27]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  187.477539][   T27]  ? rcu_is_watching+0x15/0xb0
[  187.477552][   T27]  wb_writeback+0x43b/0xaf0
[  187.477565][   T27]  ? queue_io+0x2f1/0x590
[  187.477575][   T27]  ? __pfx_wb_writeback+0x10/0x10
[  187.477589][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  187.477602][   T27]  wb_workfn+0x409/0xef0
[  187.477618][   T27]  ? __pfx_wb_workfn+0x10/0x10
[  187.477628][   T27]  ? __lock_acquire+0xab9/0xd20
[  187.477644][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  187.477659][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  187.477669][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  187.477702][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  187.477715][   T27]  process_scheduled_works+0xae1/0x17b0
[  187.477742][   T27]  ? __pfx_process_scheduled_works+0x10/0x10
[  187.477762][   T27]  worker_thread+0x8a0/0xda0
[  187.477783][   T27]  kthread+0x711/0x8a0
[  187.477794][   T27]  ? __pfx_worker_thread+0x10/0x10
[  187.477801][   T27]  ? __pfx_kthread+0x10/0x10
[  187.477810][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  187.477821][   T27]  ? lockdep_hardirqs_on+0x9c/0x150
[  187.477828][   T27]  ? __pfx_kthread+0x10/0x10
[  187.477837][   T27]  ret_from_fork+0x47f/0x820
[  187.477850][   T27]  ? __pfx_ret_from_fork+0x10/0x10
[  187.477865][   T27]  ? __switch_to_asm+0x39/0x70
[  187.477874][   T27]  ? __switch_to_asm+0x33/0x70
[  187.477883][   T27]  ? __pfx_kthread+0x10/0x10
[  187.477892][   T27]  ret_from_fork_asm+0x1a/0x30
[  187.477911][   T27]  </TASK>
[  187.478419][   T27] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  187.480082][ T9391] netlink: 'syz.2.1350': attribute type 79 has an invalid length.
[  188.020454][ T5878] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.132009][ T5878] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.229474][ T5878] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.319227][ T5878] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.551084][ T5878] bridge_slave_1: left allmulticast mode
[  188.553437][ T5878] bridge_slave_1: left promiscuous mode
[  188.555938][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.584092][ T5878] bridge_slave_0: left allmulticast mode
[  188.586340][ T5878] bridge_slave_0: left promiscuous mode
[  188.588762][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.699036][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  188.704422][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  188.707625][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  188.717111][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  188.720263][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  188.879093][ T9409] loop3: detected capacity change from 0 to 32768
[  188.904919][ T9409] 
[  188.904919][ T9409]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  188.904919][ T9409] 
[  188.977258][ T9409] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[  188.977258][ T9409] 
[  189.022360][   T52] 
[  189.022360][   T52]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  189.022360][   T52] 
[  189.027956][   T52] 
[  189.027956][   T52]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  189.027956][   T52] 
[  189.034691][ T6160] 
[  189.034691][ T6160]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  189.034691][ T6160] 
[  189.057510][  T117] 
[  189.057510][  T117]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  189.057510][  T117] 
[  189.063189][ T6160] 
[  189.063189][ T6160]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  189.063189][ T6160] 
[  189.086687][  T117] ==================================================================
[  189.089602][  T117] BUG: KASAN: slab-use-after-free in txEnd+0x32d/0x530
[  189.092060][  T117] Write of size 8 at addr ffff888039771840 by task jfsCommit/117
[  189.095670][  T117] 
[  189.096603][  T117] CPU: 0 UID: 0 PID: 117 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[  189.096620][  T117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  189.096630][  T117] Call Trace:
[  189.096637][  T117]  <TASK>
[  189.096645][  T117]  dump_stack_lvl+0x189/0x250
[  189.096664][  T117]  ? rcu_is_watching+0x15/0xb0
[  189.096677][  T117]  ? __kasan_check_byte+0x12/0x40
[  189.096697][  T117]  ? __pfx_dump_stack_lvl+0x10/0x10
[  189.096711][  T117]  ? rcu_is_watching+0x15/0xb0
[  189.096722][  T117]  ? lock_release+0x4b/0x3e0
[  189.096740][  T117]  ? __virt_addr_valid+0x1c8/0x5c0
[  189.096755][  T117]  ? __virt_addr_valid+0x4a5/0x5c0
[  189.096769][  T117]  print_report+0xca/0x240
[  189.096782][  T117]  ? txEnd+0x32d/0x530
[  189.096795][  T117]  kasan_report+0x118/0x150
[  189.096813][  T117]  ? txEnd+0x32d/0x530
[  189.096833][  T117]  kasan_check_range+0x2b0/0x2c0
[  189.096852][  T117]  txEnd+0x32d/0x530
[  189.096865][  T117]  jfs_lazycommit+0x5ba/0xa90
[  189.096881][  T117]  ? __pfx_jfs_lazycommit+0x10/0x10
[  189.096894][  T117]  ? __pfx_default_wake_function+0x10/0x10
[  189.096912][  T117]  ? __kthread_parkme+0x7b/0x200
[  189.096925][  T117]  ? __kthread_parkme+0x1a1/0x200
[  189.096939][  T117]  kthread+0x711/0x8a0
[  189.096954][  T117]  ? __pfx_jfs_lazycommit+0x10/0x10
[  189.096967][  T117]  ? __pfx_kthread+0x10/0x10
[  189.096982][  T117]  ? _raw_spin_unlock_irq+0x23/0x50
[  189.097001][  T117]  ? lockdep_hardirqs_on+0x9c/0x150
[  189.097013][  T117]  ? __pfx_kthread+0x10/0x10
[  189.097026][  T117]  ret_from_fork+0x47f/0x820
[  189.097045][  T117]  ? __pfx_ret_from_fork+0x10/0x10
[  189.097061][  T117]  ? __switch_to_asm+0x39/0x70
[  189.097074][  T117]  ? __switch_to_asm+0x33/0x70
[  189.097087][  T117]  ? __pfx_kthread+0x10/0x10
[  189.097099][  T117]  ret_from_fork_asm+0x1a/0x30
[  189.097120][  T117]  </TASK>
[  189.097125][  T117] 
[  189.160955][  T117] Allocated by task 9409:
[  189.162422][  T117]  kasan_save_track+0x3e/0x80
[  189.164063][  T117]  __kasan_kmalloc+0x93/0xb0
[  189.165872][  T117]  __kmalloc_cache_noprof+0x3d5/0x6f0
[  189.167929][  T117]  lmLogOpen+0x2d1/0xfb0
[  189.169331][  T117]  jfs_mount_rw+0xe9/0x670
[  189.170695][  T117]  jfs_fill_super+0x754/0xd80
[  189.172132][  T117]  get_tree_bdev_flags+0x40e/0x4d0
[  189.173723][  T117]  vfs_get_tree+0x92/0x2b0
[  189.175453][  T117]  do_new_mount+0x2ee/0xa90
[  189.177245][  T117]  __se_sys_mount+0x317/0x410
[  189.179076][  T117]  do_syscall_64+0xfa/0xfa0
[  189.180578][  T117]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.182416][  T117] 
[  189.183144][  T117] Freed by task 6160:
[  189.184344][  T117]  kasan_save_track+0x3e/0x80
[  189.185767][  T117]  __kasan_save_free_info+0x46/0x50
[  189.187349][  T117]  __kasan_slab_free+0x5b/0x80
[  189.188779][  T117]  kfree+0x199/0x6d0
[  189.189945][  T117]  lmLogClose+0x297/0x520
[  189.191263][  T117]  jfs_umount+0x2ef/0x3c0
[  189.192576][  T117]  jfs_put_super+0x8c/0x190
[  189.194202][  T117]  generic_shutdown_super+0x135/0x2c0
[  189.196045][  T117]  kill_block_super+0x44/0x90
[  189.197712][  T117]  deactivate_locked_super+0xbc/0x130
[  189.199622][  T117]  cleanup_mnt+0x425/0x4c0
[  189.201259][  T117]  task_work_run+0x1d4/0x260
[  189.202941][  T117]  exit_to_user_mode_loop+0xec/0x130
[  189.204851][  T117]  do_syscall_64+0x2bd/0xfa0
[  189.206600][  T117]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.208926][  T117] 
[  189.209835][  T117] The buggy address belongs to the object at ffff888039771800
[  189.209835][  T117]  which belongs to the cache kmalloc-1k of size 1024
[  189.214972][  T117] The buggy address is located 64 bytes inside of
[  189.214972][  T117]  freed 1024-byte region [ffff888039771800, ffff888039771c00)
[  189.219092][  T117] 
[  189.219952][  T117] The buggy address belongs to the physical page:
[  189.222182][  T117] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x39770
[  189.224910][  T117] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  189.227438][  T117] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  189.229913][  T117] page_type: f5(slab)
[  189.231145][  T117] raw: 00fff00000000040 ffff88801a841dc0 dead000000000100 dead000000000122
[  189.233659][  T117] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  189.236488][  T117] head: 00fff00000000040 ffff88801a841dc0 dead000000000100 dead000000000122
[  189.239093][  T117] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  189.241637][  T117] head: 00fff00000000003 ffffea0000e5dc01 00000000ffffffff 00000000ffffffff
[  189.244208][  T117] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  189.246909][  T117] page dumped because: kasan: bad access detected
[  189.248881][  T117] page_owner tracks the page as allocated
[  189.250516][  T117] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5849, tgid 5849 (syz-executor), ts 67024982525, free_ts 0
[  189.257284][  T117]  post_alloc_hook+0x240/0x2a0
[  189.258772][  T117]  get_page_from_freelist+0x21e4/0x22c0
[  189.260381][  T117]  __alloc_frozen_pages_noprof+0x181/0x370
[  189.262086][  T117]  alloc_pages_mpol+0x232/0x4a0
[  189.263579][  T117]  allocate_slab+0x8a/0x330
[  189.264973][  T117]  ___slab_alloc+0xbd1/0x13f0
[  189.266391][  T117]  __slab_alloc+0x55/0xa0
[  189.267696][  T117]  __kmalloc_node_noprof+0x5cc/0x800
[  189.269292][  T117]  qdisc_alloc+0x97/0xaa0
[  189.270572][  T117]  qdisc_create_dflt+0x8e/0x4e0
[  189.272056][  T117]  dev_activate+0x378/0x1150
[  189.273517][  T117]  __dev_open+0x69c/0x880
[  189.274863][  T117]  __dev_change_flags+0x1ea/0x6d0
[  189.276467][  T117]  netif_change_flags+0x88/0x1a0
[  189.278198][  T117]  do_setlink+0xc55/0x41c0
[  189.279657][  T117]  rtnl_newlink+0x160b/0x1c70
[  189.281114][  T117] page_owner free stack trace missing
[  189.282799][  T117] 
[  189.283769][  T117] Memory state around the buggy address:
[  189.286004][  T117]  ffff888039771700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  189.288766][  T117]  ffff888039771780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  189.291248][  T117] >ffff888039771800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  189.293824][  T117]                                            ^
[  189.296176][  T117]  ffff888039771880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  189.298697][  T117]  ffff888039771900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  189.301083][  T117] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  189.447642][  T117] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  189.449960][  T117] CPU: 0 UID: 0 PID: 117 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[  189.452806][  T117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  189.455922][  T117] Call Trace:
[  189.456990][  T117]  <TASK>
[  189.457943][  T117]  dump_stack_lvl+0x99/0x250
[  189.459352][  T117]  ? __asan_memcpy+0x40/0x70
[  189.460746][  T117]  ? __pfx_dump_stack_lvl+0x10/0x10
[  189.462583][  T117]  ? __pfx__printk+0x10/0x10
[  189.464152][  T117]  vpanic+0x237/0x6d0
[  189.465457][  T117]  ? __pfx_vpanic+0x10/0x10
[  189.466835][  T117]  ? preempt_schedule+0xae/0xc0
[  189.468484][  T117]  ? __pfx_preempt_schedule+0x10/0x10
[  189.470565][  T117]  panic+0xb9/0xc0
[  189.471813][  T117]  ? __pfx_panic+0x10/0x10
[  189.473225][  T117]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  189.475299][  T117]  ? txEnd+0x32d/0x530
[  189.476524][  T117]  check_panic_on_warn+0x89/0xb0
[  189.478025][  T117]  ? txEnd+0x32d/0x530
[  189.479380][  T117]  end_report+0x78/0x160
[  189.480955][  T117]  kasan_report+0x129/0x150
[  189.482453][  T117]  ? txEnd+0x32d/0x530
[  189.483878][  T117]  kasan_check_range+0x2b0/0x2c0
[  189.485379][  T117]  txEnd+0x32d/0x530
[  189.486618][  T117]  jfs_lazycommit+0x5ba/0xa90
[  189.488083][  T117]  ? __pfx_jfs_lazycommit+0x10/0x10
[  189.489683][  T117]  ? __pfx_default_wake_function+0x10/0x10
[  189.491747][  T117]  ? __kthread_parkme+0x7b/0x200
[  189.493272][  T117]  ? __kthread_parkme+0x1a1/0x200
[  189.494877][  T117]  kthread+0x711/0x8a0
[  189.496276][  T117]  ? __pfx_jfs_lazycommit+0x10/0x10
[  189.497887][  T117]  ? __pfx_kthread+0x10/0x10
[  189.499521][  T117]  ? _raw_spin_unlock_irq+0x23/0x50
[  189.501506][  T117]  ? lockdep_hardirqs_on+0x9c/0x150
[  189.503157][  T117]  ? __pfx_kthread+0x10/0x10
[  189.504765][  T117]  ret_from_fork+0x47f/0x820
[  189.506309][  T117]  ? __pfx_ret_from_fork+0x10/0x10
[  189.508226][  T117]  ? __switch_to_asm+0x39/0x70
[  189.509999][  T117]  ? __switch_to_asm+0x33/0x70
[  189.511585][  T117]  ? __pfx_kthread+0x10/0x10
[  189.513074][  T117]  ret_from_fork_asm+0x1a/0x30
[  189.514577][  T117]  </TASK>
[  189.516216][  T117] Kernel Offset: disabled
[  189.517515][  T117] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:00:58  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000005 RBX=0000000000000005 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f9 RSP=ffffc900024474f0
R8 =ffff8881071d8237 R9 =1ffff11020e3b046 R10=dffffc0000000000 R11=ffffffff85526070
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff9a02e080 R15=0000000000000000
RIP=ffffffff855260ec RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b83fa000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055556b8b6608 CR3=0000000038b06000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff818a38ad ffffffff818a375f
XMM02=00007fc79eb97498 ffffffff818a39dc XMM03=00007fc79eb974a8 00007fc79eb974a0
XMM04=00007fc79f6fd100 00007fc79eb97460 XMM05=00007fc79eb97478 00007fc79eb974c0
XMM06=00007fc79eb974b8 00007fc79eb974b0 XMM07=00007fc79eb974a8 00007fc79eb974a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fc79ea12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000007 RBX=0000000000000002 RCX=ffffffff936b28c8 RDX=0000000000000008
RSI=ffff888107b3e180 RDI=ffff888107b3d640 RBP=0000000000000000 RSP=ffffc9000310f628
R8 =0000000000000000 R9 =ffffffff8173bd85 R10=ffffc9000310f878 R11=ffffffff81ad4360
R12=0000000000000004 R13=0000000000000001 R14=ffff888107b3e180 R15=0000000000000000
RIP=ffffffff819e791f RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc79f8356c0 ffffffff 00c00000
GS =0000 ffff8881a39fa000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2db1eff8 CR3=0000000038b06000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fc79eb97498 00007fc79eb97470 XMM03=00007fc79eb974a8 00007fc79eb974a0
XMM04=00007fc79f6fd100 00007fc79eb97460 XMM05=00007fc79eb97478 00007fc79eb974c0
XMM06=00007fc79eb974b8 00007fc79eb974b0 XMM07=00007fc79eb974a8 00007fc79eb974a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fc79ea12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
