last executing test programs:

3m54.807809623s ago: executing program 0 (id=441):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@nogrpid}, {@norecovery}, {@errors_remount}]}, 0x1, 0x57d, &(0x7f0000000580)="$eJzs3d9rW1UcAPDvTX9s66brYAwVkcIenOjStfXHBMH5KDoc6PssbSyj6TKadKx1sO3BvfgiQxBxID74pu8+Dv8B/4qBDoeMog++VG5602ZLsmZZ1mTm84Fbzrk/es43956Tc3NuSAADayL9k4t4PiK+SiIORkSSbRuObOPE5n7r9y7PpUsSGxsf/5VU90vztf9VO25/lnkuIn79IuLVXGO55dW1xdlisbCc5ScrSxcmy6tDcW5pdqGwUDg/PTNz8o2Z6bfferNrsb5y5p9vP7r1/skvj65/8/OdQzeSOBUHsm31cTyGq/WZiZjIXpOROPXAjlNdKKyfJL2uAB0Zytr5SKR9wMEYylo98P93JSI2OvVux0cCfSHpvP0DT7XaOKB2b9+l++Cnxt33Nm+AGuMf3vxsJPZW743G1pP77ozS+93xLpSflvHLHzdvpEt073MIgB1dvRYRJ4aHG/u/JOv/OneijX0eLEP/B7vnVjr+ea3Z+Ce3Nf6JJuOf/U3abid2bv+5O10opqV0/PdO0/Hv1qTV+FCWe6Y65htJPjtXLKR927MRcSxG9qT5h83nnFy/vdFqW/34L13S8mtjwawed4b33H/M/Gxl9nFirnf3WsQLTce/ydb5T5qc//T1ONNmGUcKN19qtW3n+J+sjR8iXm56/rdntJLt+cm1443zk5PV62GydlU0+vv6kd9ald8Y/2jsZvzp+R97ePzjSf18bfnRy/h+77+FVtvuiz/av/5Hk0+q6dFs3aXZSmV5KmI0+bBx/fT2sbV8bf80/mNHH97/Nbv+90XEp23Gf/3wTy+2FX8Prv80/vlHOv+Pnrj9wefftSq/vf7v9WrqWLamnf5vp3qNdXw1AwAAAAAAQP/KRcSBSHL5rXQul89vPt9xOMZyxfHN5z9iPqrflR2PkVxtpvtg3fMQU9nzsLX89AP5mYg4FBFfD+2r5vNzpeJ8r4MHAAAAAAAAAAAAAAAAAACAPrG/xff/U78P9bp2wBPnJ79hcO3Y/rvxS09AX/L+D4NL+4fBpf3D4NL+YXDVtf89vawHsPu8/8Pg0v5hcGn/AAAAAAAAAAAAAAAAAAAAAAAAAAAA0FVnTp9Ol431e5fn0vz8xdWVxdLF4/OF8mJ+aWUuP1davpBfKJUWioX8XGlpp/9XLJUuTE3HyqXJSqFcmSyvrp1dKq2cr5w9tzS7UDhbGNmVqAAAAAAAAAAAAAAAAAAAAODpUl5dW5wtFgvLEhIdJYb7oxqbifSSrltzpZYY7XXFmiT+/LEvqtEq0eueCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2/RcAAP//NFYwZA==")
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, 0xfffffffffffffffd, 0x58)

3m54.597319895s ago: executing program 0 (id=445):
r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797ab0"], 0x40}}, 0x0)

3m54.499867688s ago: executing program 0 (id=448):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002b40), 0x82, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)

3m54.449790779s ago: executing program 0 (id=451):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa}}, {@nomblk_io_submit}, {@auto_da_alloc}, {@minixdf}]}, 0xfe, 0x572, &(0x7f0000000240)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

3m54.301911617s ago: executing program 0 (id=456):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1008002, &(0x7f0000000000)={[{@noauto_da_alloc}, {@test_dummy_encryption}, {@bh}, {@barrier}, {@dioread_nolock}, {@nodiscard}, {@nomblk_io_submit}, {@nodiscard}]}, 0x81, 0x601, &(0x7f00000011c0)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x40400, 0xd)

3m54.048145838s ago: executing program 0 (id=463):
syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0xfe, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0xfc, 0x6, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0]}, @processing_unit={0x9, 0x24, 0x7, 0xa, 0x1, 0xa4, "c106"}, @processing_unit={0x9, 0x24, 0x7, 0x4, 0x3, 0x5, "fd92"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x307, 0x0, 0x4, 0x3}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x0, "fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x6, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x3, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0)

3m53.924536457s ago: executing program 32 (id=463):
syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0xfe, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0xfc, 0x6, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0]}, @processing_unit={0x9, 0x24, 0x7, 0xa, 0x1, 0xa4, "c106"}, @processing_unit={0x9, 0x24, 0x7, 0x4, 0x3, 0x5, "fd92"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x307, 0x0, 0x4, 0x3}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x0, "fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x6, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x3, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0)

3m19.335849956s ago: executing program 2 (id=827):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)

3m19.278938898s ago: executing program 2 (id=828):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="4c00010002"], 0x8)

3m19.212319755s ago: executing program 2 (id=829):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)=ANY=[], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8)

3m19.2121211s ago: executing program 2 (id=830):
syz_mount_image$ext4(&(0x7f0000000640)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x808080, &(0x7f0000000000), 0x2c, 0x525, &(0x7f0000000100)="$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")
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x1, &(0x7f0000000280)="394c11960344487a54ec1fb2791c0e33688ffdda3ebff2392039ff3057bbe8ba5bd90d814ad7db39c3d2bcb22c120c64ecd4ed29369febcd3b609a66d493aa889b1feb0f73130101b750e0b7261ef82e5fbc43b79ffe23d10f420646ef4900181c9e7282e73f5337f7bd358f5eb4e9c24fdf7501a7643232a6d83eea44cbdcf861dd19b4cfebc4dc2bbe")

3m19.077450974s ago: executing program 2 (id=831):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x6}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r2=>0x0})
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4)
sendto$packet(r1, &(0x7f0000000340)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xa159, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

3m18.796441771s ago: executing program 2 (id=833):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r1}, 0x10)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2})

3m18.586785024s ago: executing program 33 (id=833):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r1}, 0x10)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x2})

2m48.612771687s ago: executing program 4 (id=1222):
r0 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$get_persistent(0x9, 0xffffffffffffffff, r0)

2m48.561404495s ago: executing program 4 (id=1224):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x200000, 0x1000, 0xfffffffc, 0x1}, 0x20)

2m48.502187587s ago: executing program 4 (id=1226):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, "dd9dec79219eb549"}}}}, 0x0)

2m48.501988396s ago: executing program 4 (id=1227):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x47c, &(0x7f0000000a80)="$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")
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f00000001c0)={[{@gid}, {}]})
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020)

2m48.355314958s ago: executing program 4 (id=1229):
r0 = syz_open_dev$sndpcmp(&(0x7f0000007640), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_INFO(r0, 0x40084149, &(0x7f0000000000))

2m47.827622783s ago: executing program 4 (id=1238):
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00')
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x0, 0xfffffc}]}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e)

2m47.739692744s ago: executing program 34 (id=1238):
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00')
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5)
setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28)
setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x0, 0xfffffc}]}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e)

951.301466ms ago: executing program 5 (id=3783):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000040)='./file1\x00', 0xc00, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESOCT, @ANYRES8, @ANYRES32=0x0, @ANYRESOCT, @ANYRES8, @ANYRES16=0x0, @ANYRESOCT=0x0], 0x1, 0x6207, &(0x7f0000012500)="$eJzs3ctvHVcdB/DfffoRmkZdVCVCyG3Do5TmWUKgQNsFLNiwQNmiRK5bRaSAkoDSKiKuvGHBHwFCYokQS1b8AV2wZccfQKQECdRVpxr7HGc88c21k/rOtc/nIzlzf3NmfM/ke+c+PDP3BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQP/7RT8/1IuLKb9KMExFfiEFEP2KprlciYmnlRHOdF2KzOZ6PiNFCRL3+5j/PRrweER8fj7j/4M5qPfv8Hvvxw7/+608/O/aTf/5ldOb/f7s1eGPScrdv//5/f7/75NsLAAAAJaqqquqlj/knI2KYPtsDAEdffv2vkjxfPXf1+pz1R61Wq9WHsG6qdne3WUTEenOd+j2Dw/EAcMisxyddd4EOyb9ow4g41nUngLnW67oDHIj7D+6s9lK+vebrwcpWez4XZEf+673t6zsmTadpn2Myq8fXRgziuQn9WZpRH+ZJzr/fzv/KVvs4LXfQ+c/KpPzHW5c+FSfnP2jn33J08u/vmn+pcv7DfeU/kD8AAAAAAMyx/Pf/Ex0f/114+k3Zk8cd/12ZUR8AAAAAAAAA4PO23/H/hq3x/7YZ/w8AAADmVv1ZvfaH4w/nTfoutnr+5V7EM63lgcKki2WWu+4HAAAAAAAAAAAAAJRkuHUO7+VexCginllerqqq/mlq1/v1tOsfdqVvP5Ss6yd5AADY8vHx1rX8vYjFiLicvutvtLy8XFWLS8vVcrW0kN/PjhcWq6XG59o8rectjPfwhng4rupftthYr2na5+Vp7e3fV9/XuBrsoWOz0WHgABARW69G970iHTFV9Wx0/S6Hw8H+f/TY/9mLrh+nAAAAwMGrqqrqpa/zPpmO+fe77hQAMBP59b99XECtVqvVavXRq5uq3d1tFhGx3lynfs9gOH4AOGTW45Ouu0CH5F+0YUS80HUngLnW67oDHIj7D+6s9lK+vebrQRrfPZ8LsiP/9d7menn93abTtM8xmdXjayMG8dyE/jw/oz7Mk5x/v53/la32cVruoPOflUn519t5ooP+dC3nP2jn33J08u/vmn+pcv7DfeU/kD8AAAAAAMyx/Pf/E3N1/Hf8pJsz1eOO/64c2L0CAAAAAAAAwMG6/+DOar7uNR///9Iuy7n+82jK+ffkX6Scf7+V/9dbyw0at++9/TD//z64s/rnW//5Yp7uMf+Hv66XHlm99IjopabeME2fZusetTEajOt7GvX6g2E656cavRvX4nqsxdkdy/bT/8fD9nOPbMRos70abLWf39E+3G7P61/Y0T5KZzpVS7n9dKzGL+N6vLPZXrctTNn+xSnt1ZT2nP/A/l+knP+w8VPnv5zae61p7d5H/Uf2++Z0t/t569qXf3f24Ddnqo0YbG9bU719L3XQn83/k2Pj+PXNtRunb1+9devGuUiTHXPPR5p8znL+o/Sz/fz/8lZ7fqJu7q/3PhrvO/95sRHDifm/3Lhdb+8rM+5bF3L+4/ST838nte++/x/m/Cfv/6920B8AAAAAAAAAAAAAAAB4nKqqNi8RfSsiLqbrf7q6NhMAmK38+l8lef6s6sGM70+tPuR1b876M9P602q++qNWH8a6qdrdm80iIv7RXKd+z/Db3X4ZADDPPo2If3fdCToj/4Ll7/urp6e67gwwUzc/+PDnV69fX7txs+ueAAAAAAAAAABPKo//udIY//lUVVV3W8vtGP/17Vh52vE/h/nG9gCjEwaqHux/mx5noz8e9BvDjb8Yk8b/Hm3fetz438Mp9zea0j6e0r7w6KylZrE4Zf1dL/RoyPm/2Bjv/FREnGwNv17C+K/tMe9LkPN/qfF4rvP/Wmu5Zv7VHw9z/v0d+Z+59f6vztz84MPXrr1/9b2199Z+ceHcubMXLl68dOnSmXevXV87u/Vvhz0+WDn/PPa180DLkvPPmcu/LDn/r6Ra/mXJ+X811fIvS84/v9+Tf1ly/vmzj/zLkvN/JdXyL0vO/xupln9Zcv6vplr+Zcn5fzPV8i9Lzv+1VMu/LDn/06mWf1ly/mdSvcf8lw66X8xGzj8f4bL/lyXnn89skH9Zcv7nUy3/suT8L6Ra/mXJ+b+eavmXJef/rVTLvyw5/4upln9Zcv7fTrX8y5Lzv5Rq+Zcl5/+dVMu/LDn/76Za/mXJ+b+RavmXJef/vVTLvyw5/++nWv5lyfn/INXyL0vO/81Uy78sD7//3w03Znxj5OE3vze6fmYCAAAAAAAAAAAAANpmcTpx19sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfMYOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrB3dzFynfX9wM+ud9drBxIDIX8nfwMbx4SQONn1S/xCm2LCa8N7IBT6gu1612bBb3jtEmgkGwVKJIyKKtqGi7aAUMlNhVWhilaAcoFaVa0E7QW9QVS0XERVQAG1UltBtppznufZmdnZmVnvZH3mnM9Hin/emTNzzpw5c3a/63xnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABodutr5z41kmVZ47/8jy1Z9rzG3zdNbckve9W13kIAAABgrX6R//nMDemCQ33cqGmZv3vpd762uLi4mL13wx+Of25xMV0xlWXjG7Msvy668sP3jTQvEzyaTY6MNn092mP1G3pcP9bj+vEe10/0uH5jj+sne1y/bAcss6n4fUx+Zzvyv24pdml2YzaeX7ejw60eHdk4Ohp/l5MbyW+zOH48m89OZnPZTMvyxbIj+fLfuLWxrjdlcV2jTeva1jhCfvrIsbgNI2Ef72hZ19J9Rj9+TTb1s58+cuzPzz99c6fZcze03F+xnXdsb2znJ8IlxbaOZBvTPonbOdq0nds6PCcbWrZzJL9d4+/t2/lMn9u5YWkz11X7cz6ZjeZ//26+n8aaf62X9tO2cNl/35Zl2aWlzW5fZtm6stFsc8slo0vPz2RxRDbuo3EovTAbW9Vxemsfx2ljzu5oPU7bXxPx+b813G5shW1ofpp+/PGJpuf954tXc5xGjUe90mul/Rgc9GulLMdgPC6+mz/oxzoegzvC43/k9pWPwY7HTodjMD3upmNwe69jcHRiQ77No1/ZHNe+veUY3NWy/IZ8TSP5fOr27sfg9PlTZ6cXPvqxu+dPHT0xd2Lu9J5du2b27Nt34MCB6ePzJ+dmij+ven+X3eZsNL0Gtod9F18Dr2hbtvlQXfzixLLz79W+Die7vA63tC076NfhWPuDG1mfF+TSMR0vKV4b727s9MnLo9kKr7H8+blz7a/D9LibXodjTa/Djt9Tlm3zSH6bXq/DxjJn7+zvZ5axpv86bcPK3wvWdgxuaToG238eaT8GB/3zSFmOwclwXHz/zpW/F2wL2/vYztX+PLJh2TGYHm449zQuST/vTx7IR6fj8pbGFddNZBcW5s7d8/DR8+fP7crCWBcvajpW2o/XzU2PKVt2vI6u+ng9NP/Sx27pcPmWsK8m7278Mbnic9VYZu893Z+r/Ltb5/3ZcunuLIwBW+/92em7eWN/TmTZ57/98Qe/+cjnX7vi/mzkzU9Mr/1n8ZRLm86/4yucf2Puf7ZYX7qrRzeMjxWv3w1p74y3nI9bn6qx/Nw1kq/7men+zsfj4b/1Ph/f2OV8vLVt2UGfj8fbH1w8H4/0+m3H2rQ/n5PhODk50/183Fhm6+7VHpNjXc/Ht4U5Evb/K0NSSLmo6dhZ6bhN6xobGw+PayyuofU43dOy/HjIZo11PbH76o7TO24r7mtDenRL1us4nWpbdtDHafrd10rH6Uiv375dnfbnczIcFzfu6X6cNpZ5cu/az52b4l+bzp0TvY7B8Q0TjW0eTwdhfr7PFjfFY/Ce7Fh2JjuZzebXTuTH00i+rp339ncMToT/1vtcubXLMXhH27KDPgbT97GVjr2RseUPfgDan8/JcFw8fm/3Y7CxzOv2D/Zn1zvCJWmZpp9d23+/ttLvvG5p203P1bEyFrbz2/u7/262sczJA6vNmd33013hkus67Kf21+9Kr6nZbH3209awnU8fWHk/NbanscznDvZ5PB3Ksuzih+/Pf98b/n3lLy9872st/+7S6d90Ln74/p88//jfrmb7ARh+zxZjc/G9rulfpvr5938AAABgKMTcPxpmIv8DAABAZcTcH/+v8ET+BwAAgMqIuX8szKQm+X/r656ef/Zilpr5i0G8Pu2GB4rlYsd1Jnw9tbikcfn9X577r7+52N+6R7Ms+/kDv9tx+a0PxO0qTIXtvPL61suX+drdfa37yEMX03qb++tfCPcfH0+/h0GnCu5MlmXfuOEz+Xqm3nc5n08+cCSfD1567NHGMs8cLL6Ot3/qRcXyfxLKv4eOH225/VNhP/wozJk3d94f8XZfvfzKbfvfs7S+eLuR7dfnD/vx9xf3G98n57OPFsvH/bzS9n/z0098tbH8wy/vvP0XRztv/xPhfr8c5v+8pFi++TlofB1v98mw/XF98Xb3fOlbHbf/yqeK5c++oVjuSJhx/XeEr3e84en55v318MjRlseVvbFYLq5/5nu/n18f7y/ef/v2Tx6+3LI/2o+PJ/+5uJ/ptuXj5XE90V+3rb9xP83HZ1z/E793pGU/91r/lQefeknjftvXf1fbcmc/fGe+/qX7a33Hpj/95Gc6ri9uz6G/ONvyeA69M7yOw/off384HsP1/3uluL/2d1c48s7W809c/gtbLrY8nuhNPyvWf+XVJ/K5cXLT5uue9/zrL72sse+y7Lsbi/vrtf4Tf3amZfu/eFOxP+L1saPfvv6VxPWf+8jO02cWLszPpr36yA35e+e8pdieuL03hHNr+9eHz5z/wNy5qZmpmSybqu5b6F21L4X5k2Jc6r704rIz6J0Phefzlj/+xubb/+nT8fJ/eXdx+eU3F9+3XhGW+2y4fEt4/la3/uUev/Wm/PU98mTYwsXl7xe8Ftt2/MeBvhYMj7/954J4vJ998Qfy/dC4Lv++EV/Xa9z+H8wW9/P1sF8Xwzszb79paX3Ny8f3Rrj8ruL1vub9F05z8Xn9Sni+3/qj4v7jdsXH+4Pwc8y3trae7+Lx8fWLo+33n7+Lx6VwPskuFdfHpeL+vvzMTR03L74PSXbp5vzrP0j3c/OqHuZKFj66MH1y/vSFh6fPzy2cn1746McOnzpz4fT5w/l7eR7+YK/bL52fNufnp9m5fXuz/Gx1phjPsWu9/WcfOja7f+b22bnjRy8cP//Q2blzJ44tLBybm124/ejx43Mf6XX7+dn7du0+uGf/7p0n5mfvO3Dw4J6DO+dPn2lsRrFRPeyb+dDO0+cO5zdZuG/vwV333rt3ZuepM7Nz9+2fmdl5odft8+9NOxu3/p2d5+ZOHj0/f2pu58L8x+bu23Vw377dPd8N8NTZ4wtT0+cunJ6+sDB3brp4LFPn84sb3/t63Z5qWvjX4ufZdiPFG/Flb79rX3p/1oYvf3zFuyoWaXsD0afDe9H8/QvOHujn65j7x8NMapL/AQAAoA5i7p8IM5H/AQAAoDJi7t8YZiL/AwAAQGXE3D8ZZlKT/F+5/v/Wi32tX/9f/795f+n/16z//66y9f8b54u51OvU/1+btfbv9f8D/X/9f/1//X/9fwagbP3/mPs3ZVkt8z8AAADUQcz9m8NM5H8AAACojJj7rwszkf8BAACgMmLuf16YSU3yv/6//r/+v/6//n/n9a9v/9/n/w+K/n93+v896P9PZ/Xq/18a5Pbr//fZ/5/qdU9USdn6/zH3Pz/MpCb5HwAAAOog5v7rw0zkfwAAAKiMmPtvCDOR/wEAAKAyYu7fEmZSk/yv/6//r/+v/6//33n9+v/DSf+/O/3/HvT/ff6//r/P/2egytb/j7n/BWEmNcn/AAAAUD3Lf5kQc/8Lw0zkfwAAACifsau7Wcz9LwozWZb/r3IFAAAAwDUXc/+NWVsRvCb//q//r/+v/6//r//fef399/83ZPr/5aH/353+fw/6/2vrzzdOjPr/+v/6/zQpW/8/z/3ZZPbiMJOa5H8AAACog5j7bwozkf8BAACgMmLu/39hJvI/AAAAVEbM/VvDTGqS//X/9f/r1v//t736//r/Pv+/yvT/u9P/70H/3+f/6//r/zNQZev/x9x/c5hJTfI/AAAA1EHM/beEmcj/AAAAUBkx9///MBP5HwAAACoj5v5tYSY1yf/6/yXv/8fmqP6/z//X/9f/1//vi/5/d/r/Pej/6//r/+v/M1Bl6//H3P+SMJOa5H8AAACog5j7XxpmIv8DAABAZcTc/7IwE/kfAAAAKiPm/qkwk5rkf/3/kvf/ix78hM//1//X/9f/1//vj/5/d/r/Pej/6//r/+v/M1Bl6//H3H9rmElN8j8AAADUQcz928NM5H8AAACojJj7bwszkf8BAACgMmLu3xFmUpP8r/8/FP3/TP9f/1//X/9f/78/+v/d6f/3oP+v/6//r//PQJWt/x9z/8vDTGqS/wEAAKAOYu6/PcxE/gcAAIDKiLn/FWEm8j8AAABURsz9d4SZ1CT/6//r/+v/6//r/3dev/7/cNL/707/vwf9f/1//X/9fwaqbP3/mPtfGWZSk/wPAAAAdRBz/51hJvI/AAAAVEbM/XeFmcj/AAAAUBkx9+8MM6lJ/tf/1//X/9f/1//vvH79/+Gk/9+d/n8P+v/6//r/+v8MVNn6/zH33x1mUpP8DwAAAHUQc/89YSbyPwAAAFRGzP3TYSbyPwAAAFRGzP0zYSY1yf/6//r/+v+l7P/nNyll//9lS/er/1/Q/y8X/f/u9P970P/X/7/m/f9x/X8qpWz9/5j7d4WZ1CT/AwAAQB3E3L87zET+BwAAgMqIuX9PmIn8DwAAAJURc//eMJOa5H/9f/1//f9S9v9zpez/N9H/L+j/l4v+f3eD7//Hh6j/r/+v/+/z//X/Wa5s/f+Y++8NM6lJ/gcAAIA6iLl/X5iJ/A8AAACVEXP//jAT+R8AAAAqI+b+A2EmNcn/+v/6//r/+v/6/53Xr/8/nMrZ/x/te/3D1//3+f/6/0v0//X/9f9pV7b+f8z9B8NMapL/AQAAoA5i7n9VmIn8DwAAAJURc/8vhZnI/wAAAFAZMff/cphJTfK//n/Z+/+jmf6//r/+v/6//n//ytn/75/+v/6//v/wbr/+v/4/y5Wt/x9z/31hJjXJ/wAAAFAHMff/SpiJ/A8AAACVEXP/q8NM5H8AAACojJj7D4WZ1CT/V6z/P9nfmoep/+/z//X/9f/1//X/V0P/vzv9/x70//X/9f/1/xmosvX/Y+5/TZhJTfI/AAAA1EHM/feHmcj/AAAAUBkx9782zET+BwAAgMqIuf91YSY1yf8V6/9X8PP/9f/1//X/9f/1/1dD/787/f8e9P/1//X/9f8ZqLL1/2Puf32YSU3yPwAAANRBzP1vCDMav2ZbBAAAAAxazP1vDDPx7/8AAABQGTH3vynMpCb5X/9f/1//X/9f/7/z+vX/h5P+f3f6/z3o/+v/6//r/zNQZev/x9z/q2EmNcn/AAAAUAcx9z8QZiL/AwAAQGXE3P/mMBP5HwAAACoj5v63hJnUJP/r/+v/6//r/+v/d16//v9w0v/vbsj6/7+4Plyu/1/Q/y/39q+2/z/W9vVz0v//4Ur9/8WN7bfX/+e5ULb+f8z9bw0zqUn+BwAAgDqIuf9tYSbyPwAAAFRGzP1vDzOR/wEAAKAyYu5/R5hJTfK//n9jO5bay/r/+v/5BevS/3/Hf+r/6/9n+v8Dp//f3ZD1/33+fxv9/3Jvv8//1/9nubL1/2Puf2eYSU3yPwAAANRBzP0PhpnI/wAAAFAZMfe/K8xE/gcAAIDKiLn/3WEmNcn/+v8+/1//3+f/6/93Xr/+/3DS/+9O/78H/X/9/7L1//9d/5/hVrb+f8z9D4WZ1CT/AwAAQB3E3P+eMBP5HwAAACoj5v5fCzOR/wEAAKAyYu5/b5hJTfL/te7/b9L/77P/P6X/r/+v/9/2ePT/9f870f/vTv+/B/1//f+y9f99/j9Drmz9/5j73xdm0n/+n+x7SQAAAOCaiLn/18NMavLv/wAAAFAHMff/RpiJ/A8AAACVEXP/b4aZ1CT/X+v+v8//9/n/+v816v+P6v/r/z/31q//H888+v/6//r/kf6//r/+P+3K1v+Puf+3wkxqkv8BAACgDmLuf3+YifwPAAAAQ6HT/5PdLub+w2Em8j8AAABURsz9R8JMapL/9f9r1P//q38ortT/H47+/x9t/8fvf+dtR3ZVqf/v8//1/9fBun7+f+PF7/P/9f/1/xP9f/1//X/ala3/H3P/0TCTmuR/AAAAqIOY+387zET+BwAAgMqIuf9YmIn8DwAAAJURc/9smElN8r/+f436/z7/f7j6/0P8+f9xf+j/txpY/z+edPX/O1rX/v97lnri+v+r7f9PdLxU/1//f5i3X/9f/5/lytb/j7l/LsykJvkfAAAA6iDk/tHjxVy6Qv4HAACAyoi5/0SYifwPAAAAlRFz/wfCTGqS//X/9f/1//X/ff5/5/WXtv/v8/+70v/vrjz9/870//X/h3n79f/1/1mubP3/mPvnw0xqkv8BAACgDmLu/2CYifwPAAAAlRFz/4fCTOR/AAAAqIyY+0+GmdQk/+v/6//r/+v/6/93Xr/+/3DS/+9O/78H/X/9/6vZ/nDc6P/r/7Nc2fr/MfefCjOpSf4HAACAOoi5/3SYifwPAAD8H3v38WRpWfZx/DQM0l1UiTsXblzrn8BC1/oHuHDjxip1YcKcGMwRE+aAOWMARUyomMGEYhYRc0BFFANijeXMdV3TPefp53TPnNP9nPv+fBZevvM6ngPvlL4/hm/dQDNy9z8qbrH/AQAAoBm5+x8dt3Sy//X/+v9m+//76f93+3z9v/6/Zfr/cfr/BfT/+n/v/+v/Waqp9f+5+x8Tt3Sy/wEAAKAHufsfG7fY/wAAANCM3P0Xxi32PwAAADQjd//j4pZO9v8p/f/GrM/+PzNe/X9L/b/3/3f9fP2//r9lB9v/X/z//+TT/+v/9f9B/6//1/9zqqn1/7n7Hx+3dLL/AQAAoAe5+58Qt9j/AAAA0Izc/U+MW+x/AAAAaEbu/ifFLZ3sf+//e/9f/6//1/8Pf77+fz15/39cT/3/hTee98jbr7rX1fv5/NX3/7ft7P+D/n85Dvv76//1/8ybWv+fu//JcUsn+x8AAAB6kLv/KXGL/Q8AAADNyN3/1LjF/gcAAIBm5O5/WtzSyf7X/+v/9f/6/1b6/0vjx/X/fdP/j+up/z+dz/f+v/5f/6//Z7mm1v/n7n963NLJ/gcAAIAe5O5/Rtxi/wMAAEAzcvdfFLfY/wAAANCM3P1H45ZO9r/+f/X9/3/1//r/uPp/7//r/1dP/z9O/7+A/l//r//X/7NUU+v/c/dfHLd0sv8BAACgB7n7nxm32P8AAADQjNz9z4pb7H8AAABoRu7+Z8ctnex//b/3//X/+n/9//Dn6//Xk/5/nP5/Af3/mfbz5+j/9f/6f7bbZ/9/58h/bC+l/8/d/5y4pZP9DwAAAD3I3f/cuMX+BwAAgGbk7n9e3GL/AwAAQDNy9z8/bulk/+v/9f/6f/3/aff/87/0jtP/D1te/79V/576/3n6/3GT6f83jgz+sP5/7ft/7//r//X/7DC19/9z978gbulk/wMAAEAPcve/MG4Z2f/7/ov5AAAAwKHK3f+iuMXv/wMAAMDay+osd/+L45ZO9r/+X/+v/9f/e/9/+PPH+v+rt30/7/9Pi/5/3GT6/13o//X/6/z99f/6f+ZNrf/P3f+SuKWT/Q8AAAA9yN1/Sdxi/wMAAEAzcve/NG6x/wEAAKAZuftfFrd0sv+H+/+T/3v9/97o/3d+f/3/8K+PZfX/+e+o/x/t/+/f7vv/+v8x+v9x+v8F9P/77+e3/SHq/5vu/7cW/Xz9P0Om1v/n7n953NLJ/gcAAIAe5O5/Rdxi/wMAAEAzcve/Mm6x/wEAAKAZufsvjVs62f/e/9f/Zz+/uQb9/9n6f+//T+T9/9mB9/9H9P97pP8fp/9fQP/v/f82+v/8Ie//c+im1v/n7n9V3NLJ/gcAAIAe5O5/ddxi/wMAAMB62P73Dpz6N5SG3P2viVvsfwAAAGhG7v7Xxi2d7H/9v/7f+//6f/3/8OdPq//3/v9e6f/H6f8X0P+vop8/0lj/f9luP38K/f9Fq3v/X//PadnR/19z8scPq//P3f+6uKWT/Q8AAAA9yN3/+rjF/gcAAIBm5O5/Q9xi/wMAAEAzcve/MW7pZP+vvP/f2v2z9f/6f/2//l//f+JXj/5/efT/4/T/C+j/vf/fxvv/+n8mY0f/v81h9f+5+98Ut3Sy/wEAAKAHufvfHLfY/wAAANCM3P2XxS32PwAAADQjd/9b4pZO9r/3//X/+n/9v/5/+PO9/7+e9P/j9P8L6P+39/MPn+n/9f/6f87Q1Pr/3P1vjVs62f8AAADQg9z9b4tb7H8AAABoRu7+t8ct9j8AAAA0I3f/O+KWTva//n+1/X/+uP5f/z/T/+v/9f8Hotv+f2Pov4nm7dL/X/+wow/c+SP6f/2/9//1//p/lmAS/f+xk//fZe7+d8Ytnex/AAAA6EHu/nfFLfY/AAAANCN3/7vjFvsfAAAAmpG7/z1xyz73/z2W+q0Ojv7f+//6f/2//n/48/X/66nb/n+PvP+/gP5f/6//1/+zVJPo/7f9z7n73xu3+P1/AAAAaEbu/vfFLfY/AAAANCN3//vjFvsfAAAAmpG7/wNxSyf7X/+v/9f/6//1/8Ofr/9fT/r/cRPt/7fyn+j/T6v/v/U++v9JfH/9v/6feVPr/3P3Xx63dLL/AQAAoAe5+z8Yt9j/AAAA0Izc/R+KW+x/AAAAaEbu/g/HLZ3sf/2//l//r//X/w9/vv5/Pen/x020/y8H0v9fMfIFhvr/Y+dOvf/3/v9Evr/+X//PvKn1/7n7PxK3dLL/AQAAoAe5+6+IW+x/AAAAaEbu/ivjFvsfAAAAmpG7/6NxSyf7X/+v/9f/6//1/8OfP9D/H9n+vfT/06T/H6f/X2A93//X/0/k++v/9f/Mm1r/n7v/Y3FLJ/sfAAAAepC7/6q4xf4HAACAZuTu/3jcYv8DAABAM3L3Xx23dLL/9f/6f/2//l//P/z53v9fT6vr/2f6f/2//n+BffXz5y7lKx/e9x+g/9f/M29q/X/u/k/ELZ3sfwAAAOhB7v5Pxi172f9b56/qawEAAABLlLv/U3GL3/8HAACAZuTu/3Tc0sn+1//PZmdti5f1//r/4z+g/9f/L7v/P1//f1C8/z9O/7+A/t/7//p//T9LNbX+P3f/Z+KWTvY/AAAA9CB3/zVxi/0PAAAAzbjj+D9uzj4bt9j/AAAA0Izc/Z+LWzrZ//p/7//v7P9nM/2//l//f8IBvP+/OdP/L53+f5z+fwH9f5v9/1mzhvr/rV1/vv6fKZpa/5+7//NxSyf7HwAAAHqQu//auMX+BwAAgGbk7v9C3GL/AwAAQDNy938xbulk/+v/9f/e/9f/6/+HP/8A+v/6s6r/Xx79/zj9/wL6/zb7f+//6/85NFPr/3P3fylu6WT/AwAAQA9y9385brH/AQAAoBm5+78St9j/AAAA0Izc/V+NWzrZ//p//b/+X/+v/x/+fP3/etL/j9P/L6D/1//r//X/LNXU+v/c/V+LWzrZ/wAAANCD3P3XxS32PwAAADQjd//1cYv9DwAAAM3I3f/1uKWT/a//1//r/9ez/9/U/+v/9f+DptL/X3DBA27Q/+v/9f/6f/2//r93U+v/c/d/I27pZP8DAABAD3L3fzNusf8BAACgGbn7vxW32P8AAADQjNz9345bOtn/8/3/ObMTheoJQ/1/NGr6/230/zu/v/5/+NeH9//1//r/1Tu1/z93nz/f+/9B/6//1/+vtv+/9/zP1//Toqn1/7n7b4hbOtn/AAAA0IPc/d+JW+x/AAAAaEbu/u/GLfY/AAAANCN3/41xSyf73/v/+n/9/0H2/xv6f/2//n/FpvL+v/7/9L6//l//v87fv5n3/8/W/7M8q+//t+Kf7a3/z93/vbilk/0PAAAAPcjd//24xf4HAACAZuTu/0HcYv8DAABAM3L3/zBu6WT/6//1//p/7//r/4c/X/+/nvT/4/T/C/TT/28O/eBh9/Nn6rC/fzP9v/f/WaKpvf+fu/9HcUsn+x8AAAB6kLv/x3GL/Q8AAADNyN3/k7jF/gcAAIBm5O7/adzSyf7X/+v/2+//H6L/P+XzD6n/P6r/1/8fBP1//jf6MP3/ApPp/4f/r+j9/2l/f/2//p95U+v/c/ffFLd0sv8BAACgB7n7fxa32P8AAADQjNz9N8ct9j8AAAA0I3f/z+OWTva//r+v/n9j1mP/7/3/ifT/3v/X/x8I/f84/f8Ck+n/V/7+/6DD7ucP4fvftczvr//X/zNvav1/7v5bNo50uf8BAABgXT3ovo+4aa//2luO/+Pm7Bdxi/0PAAAAzcjd/8u4xf4HAACAZuTu/1Xc0sn+1//31f/3+f6//l//r//vif5/nP5/Af1/b/3/Ur+//l//z7yp9f+5+38dt2wbfkf2/UcJAAAATEnu/t/ELZ38/j8AAAD0IHf/b+OWuf1/bI9/VzsAAAAwNbn7fxe3dPL7/2vc/w9nGa31/7MV9f/xr+u1/7/2gp1/vvT/+v+hz9f/ryf9/7gz7P+Pbej/9f8jhvv5m++u/9f/6//7NbX+P3f/7+OWTvY/AAAANGrHX1HI3f+HuMX+BwAAgGbk7v9j3GL/AwAAQDNy998at3Sy/9e4/9/lD6ix/v+03v/fqn/m/f/O3/+/ZHPw85fe/5+z849X/z9M/38w9P/jvP+/gP7f+//6f/0/SzW1/j93/5/ilk72PwAAAPQgd/+f4xb7HwAAAJqRu/8vcYv9DwAAAM3I3X9b3NLJ/tf/t9j/7+H9f/1/H/3/Lp/fzvv/9zzv6HUPfuiVl+v/Oekg+//8taD/1//r/0/Q/+v/9f+camr9f+7+v8Ytnex/AAAA6EHu/tvjFvsfAAAAmpG7/29xi/0PAAAAzcjd//e4pZP9r//X/0+l/88/14fQ/x9dv/4/m+Le+3/v/+v/53n/f5z+fwH9v/5f/6//Z6mm1v/n7r8jbulk/wMAAEAPcvf/I27J/b+x7790DwAAAExM7v5/Hr/b/h4tv/8PAAAAzTix+zdn/4pbOtn/+n/9/1T6/+T9/5M/z/v/J+j/9f/7sfb9/+ws/b/+X/+/pt9f/6//Z97U+v/c/f+OWzrZ/wAAANCD3P13xi079//dDvZbAQAAAMuUu/8/cYvf/wcAAIBm5O6/K27pZP/r//X/+n/9v/5/+PP1/+tp7ft/7//r//X/a/v99f/6f+ZNrf/P3f+/AAAA//+4rmTi")
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a)

691.291993ms ago: executing program 3 (id=3790):
r0 = syz_open_dev$video(&(0x7f0000000880), 0x1d, 0x0)
ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f00000008c0)={0x3, 0x10001, @name="322754113726347419feaaf4203704a7ef1c48b73c659f74bfe55bf596b9d875"})

599.31761ms ago: executing program 1 (id=3791):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="ec0000002100390d0000000000000000fe8000000000000000000000000000aae0000002000000000000000000000000000000000000fffc0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000800000000000000000000000000000000011000200ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0)

599.050263ms ago: executing program 3 (id=3792):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x67)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0xc0c719fe1969ce50, 0x0, 0x0, 0x0, 0x1}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000082c0)="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", 0x2000, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x78, 0x0, 0xffffffeffffffe00, {0xf0f, 0xfffffffe, 0x0, {0x6, 0x2, 0x80000001, 0xfffffffffffffffe, 0x7, 0x5, 0x3, 0x2, 0x9, 0x8000, 0x6, r2, r3, 0x1, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x16f)

598.931449ms ago: executing program 5 (id=3793):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {}, 0x2}, 0x18)
sendmsg$inet(r0, &(0x7f0000001bc0)={&(0x7f0000000680)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x1b8}, 0x20008051)

598.796815ms ago: executing program 1 (id=3794):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1, &(0x7f00000000c0)={[{@orlov}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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")

521.545107ms ago: executing program 1 (id=3795):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x4, 0x13, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x2, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_LINK={0xfffffefa, 0x3, 0x80000000}]}}]}, 0x7c}}, 0x24040084)

521.17112ms ago: executing program 5 (id=3796):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file1\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x1, 0x444a, &(0x7f0000004480)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb6, 0x0, &(0x7f00000003c0))
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
lseek(r0, 0xfffffffffffffffc, 0x2)
getdents(r0, 0x0, 0x54)

457.600628ms ago: executing program 3 (id=3797):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x7}, 0x1c)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfff}, 0x1c)
readv(r0, &(0x7f0000001500)=[{&(0x7f0000000140)=""/31, 0x1f}], 0x1)
shutdown(r0, 0x1)

457.283736ms ago: executing program 1 (id=3798):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_delrule={0x40, 0x21, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x20, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x10}, [@FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x80}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xfe}]}, 0x40}}, 0x0)

379.32968ms ago: executing program 1 (id=3799):
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
eventfd(0x1)

379.176117ms ago: executing program 3 (id=3800):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400", "c14ec98dcd2ad89f"}, 0x28)
sendto$inet6(r0, &(0x7f0000000140)="b9", 0x1, 0x8000, 0x0, 0x0)
write$binfmt_aout(r0, 0x0, 0xfdef)
sendto$inet6(r0, &(0x7f00000003c0)="c6", 0x1, 0x0, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

320.299967ms ago: executing program 3 (id=3801):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x10, 0x0, &(0x7f0000000100))

320.022522ms ago: executing program 1 (id=3802):
syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000140)=ANY=[@ANYBLOB='very_degraded,eras_code,data_replicas003,acl,noexcl,inodes_use_key_cache,move_bytes_in_flight=0Y000000000000000e,bdree_node_mem_ptr_optimizatio~,\x00\x00\x00\x00'], 0x1, 0x58ad, &(0x7f0000005980)="$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")

319.847738ms ago: executing program 3 (id=3803):
syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file1\x00', 0x1808001, &(0x7f0000000000)={[{@coherency_full}, {@noacl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x5}}, {@err_cont}, {@data_writeback}, {@journal_async_commit}, {@commit}]}, 0x1, 0x4470, &(0x7f0000008c00)="$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")
r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
pread64(r0, &(0x7f0000002240)=""/237, 0xfecf, 0x4eb)

61.107788ms ago: executing program 5 (id=3804):
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0xc0400, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

353.856µs ago: executing program 5 (id=3805):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "000000200100", "376a30a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e580c", '\x00', "fffffffffffffffd"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)

0s ago: executing program 5 (id=3806):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881)
r1 = dup(r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)=0xe6e5, 0x4)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf)
setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0xcc0}, 0x8)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfd87)

kernel console output (not intermixed with test programs):

 0] type 2 family 0 port 6081 - 0
[  160.930507][    T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  160.962854][ T5869] bridge_slave_1: left allmulticast mode
[  160.965205][ T5869] bridge_slave_1: left promiscuous mode
[  160.968381][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.995316][ T5869] bridge_slave_0: left allmulticast mode
[  160.997686][ T5869] bridge_slave_0: left promiscuous mode
[  161.000089][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.012464][ T9458] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1243'.
[  161.016678][ T9458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1243'.
[  161.057933][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  161.066193][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  161.073125][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  161.081842][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  161.085781][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  161.093347][    T9] usb 4-1: config 0 has an invalid interface number: 199 but max is 1
[  161.097826][    T9] usb 4-1: config 0 has no interface number 1
[  161.128185][    T9] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  161.136294][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  161.161459][    T9] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  161.165299][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  161.172077][    T9] usb 4-1: SerialNumber: syz
[  161.189170][    T9] usb 4-1: config 0 descriptor??
[  161.203378][    T9] usb 4-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  161.206854][    T9] usb 4-1: No valid video chain found.
[  161.407529][   T51] usb 4-1: USB disconnect, device number 12
[  161.462487][ T5869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  161.467147][ T5869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  161.471707][ T5869] bond0 (unregistering): Released all slaves
[  161.748004][ T5869] hsr_slave_0: left promiscuous mode
[  161.752398][ T5869] hsr_slave_1: left promiscuous mode
[  161.754583][ T5869] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.757331][ T5869] net_ratelimit: 12 callbacks suppressed
[  161.757339][ T5869] batadv0: mtu less than device minimum
[  161.771855][ T5869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  161.776668][ T5869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  161.781463][ T5869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  161.787149][ T5869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  161.791915][ T5869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  161.796587][ T5869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  161.801899][ T5869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  161.806652][ T5869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  161.811367][ T5869] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  161.824761][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.828376][ T5869] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  161.842523][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_1
[  161.846109][ T5869] batman_adv: batadv0: Interface deactivated: dummy0
[  161.848576][ T5869] batman_adv: batadv0: Removing interface: dummy0
[  161.858187][ T5869] veth1_macvtap: left promiscuous mode
[  161.861685][ T5869] veth0_macvtap: left promiscuous mode
[  161.863895][ T5869] veth1_vlan: left promiscuous mode
[  161.866034][ T5869] veth0_vlan: left promiscuous mode
[  161.967756][ T9483] Bluetooth: MGMT ver 1.23
[  162.298092][ T5869] team0 (unregistering): Port device team_slave_1 removed
[  162.325152][ T5869] team0 (unregistering): Port device team_slave_0 removed
[  162.370488][ T5877] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  162.530572][ T5877] usb 4-1: Using ep0 maxpacket: 16
[  162.534252][ T5877] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  162.546394][ T5877] usb 4-1: config 222 has an invalid interface number: 127 but max is 0
[  162.554291][ T5877] usb 4-1: config 222 has no interface number 0
[  162.572302][ T5877] usb 4-1: config 222 has an invalid interface number: 127 but max is 0
[  162.578403][ T5877] usb 4-1: config 222 has no interface number 0
[  162.582092][    C0] hpet: Lost 1 RTC interrupts
[  162.591589][ T5877] usb 4-1: config 222 has an invalid interface number: 127 but max is 0
[  162.597280][ T5877] usb 4-1: config 222 has no interface number 0
[  162.602084][ T5877] usb 4-1: config 222 has an invalid interface number: 127 but max is 0
[  162.604873][ T5877] usb 4-1: config 222 has no interface number 0
[  162.607697][ T5877] usb 4-1: config 222 has an invalid interface number: 127 but max is 0
[  162.614142][ T5877] usb 4-1: config 222 has no interface number 0
[  162.617611][ T5877] usb 4-1: config 222 has an invalid interface number: 127 but max is 0
[  162.622588][ T5877] usb 4-1: config 222 has no interface number 0
[  162.635654][ T5877] usb 4-1: config 222 has an invalid interface number: 127 but max is 0
[  162.638718][ T5877] usb 4-1: config 222 has no interface number 0
[  162.644856][ T5877] usb 4-1: config 222 has an invalid interface number: 127 but max is 0
[  162.647787][ T5877] usb 4-1: config 222 has no interface number 0
[  162.657732][ T5877] usb 4-1: New USB device found, idVendor=19d2, idProduct=1142, bcdDevice=1b.18
[  162.661072][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.664085][ T5877] usb 4-1: Product: syz
[  162.665615][ T5877] usb 4-1: Manufacturer: syz
[  162.667122][ T5877] usb 4-1: SerialNumber: syz
[  162.834853][ T9460] chnl_net:caif_netlink_parms(): no params data found
[  162.884084][ T5877] hub 4-1:222.127: Invalid hub with more than one config or interface
[  162.893970][ T5877] hub 4-1:222.127: probe with driver hub failed with error -22
[  162.897454][ T5877] option 4-1:222.127: GSM modem (1-port) converter detected
[  162.926502][ T5877] usb 4-1: USB disconnect, device number 13
[  162.938728][ T5877] option 4-1:222.127: device disconnected
[  163.084753][ T9460] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.087905][ T9460] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.091097][ T9460] bridge_slave_0: entered allmulticast mode
[  163.095604][ T9460] bridge_slave_0: entered promiscuous mode
[  163.124108][ T9460] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.126525][ T9460] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.129522][ T9460] bridge_slave_1: entered allmulticast mode
[  163.137296][ T9460] bridge_slave_1: entered promiscuous mode
[  163.170056][ T9460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.180800][   T54] Bluetooth: hci2: command tx timeout
[  163.186139][ T9460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.205336][ T5869] IPVS: stop unused estimator thread 0...
[  163.236467][ T9460] team0: Port device team_slave_0 added
[  163.250058][ T9460] team0: Port device team_slave_1 added
[  163.304919][ T9460] batman_adv: batadv0: Adding interface: batadv_slave_0
[  163.307278][ T9460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.318176][ T9460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.325422][ T9460] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.327879][ T9460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.337467][ T9460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.375623][ T9460] hsr_slave_0: entered promiscuous mode
[  163.378083][ T9460] hsr_slave_1: entered promiscuous mode
[  163.383560][ T9460] debugfs: 'hsr0' already exists in 'hsr'
[  163.385509][ T9460] Cannot create hsr debugfs directory
[  163.667505][ T9460] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  163.693785][ T9460] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  163.701843][ T9460] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  163.709726][ T9460] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  163.793717][ T9460] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.796821][ T9460] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.800797][ T9460] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.803801][ T9460] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.912688][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.925072][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.987697][ T9460] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.015828][ T9460] 8021q: adding VLAN 0 to HW filter on device team0
[  164.043024][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.046087][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.053507][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.056412][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.236545][ T9556] loop3: detected capacity change from 0 to 32768
[  164.244380][ T9556] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1273 (9556)
[  164.266176][ T9460] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.282141][ T9556] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  164.304448][ T9556] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  164.307992][ T9556] BTRFS info (device loop3): disk space caching is enabled
[  164.340971][ T9556] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  164.461003][ T9556] BTRFS info (device loop3): rebuilding free space tree
[  164.490458][ T9556] BTRFS info (device loop3): disabling free space tree
[  164.511337][ T9556] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  164.517062][ T9556] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  164.614547][ T7224] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  164.659730][ T9460] veth0_vlan: entered promiscuous mode
[  164.689671][ T9460] veth1_vlan: entered promiscuous mode
[  164.738709][ T9460] veth0_macvtap: entered promiscuous mode
[  164.753704][ T9460] veth1_macvtap: entered promiscuous mode
[  164.780113][ T9460] batman_adv: batadv0: Interface activated: batadv_slave_0
[  164.791528][ T9460] batman_adv: batadv0: Interface activated: batadv_slave_1
[  164.823459][ T5869] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.833458][ T5869] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.836349][ T5869] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.839440][ T5869] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.997219][ T6418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.999619][ T6418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.071589][   T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.080276][   T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.178151][ T9629] netlink: 'syz.5.1287': attribute type 1 has an invalid length.
[  165.253712][ T9629] vlan2: entered allmulticast mode
[  165.255814][ T9629] veth0_to_bond: entered allmulticast mode
[  165.260966][    T9] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  165.264720][   T54] Bluetooth: hci2: command tx timeout
[  165.413049][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  165.417725][    T9] usb 4-1: not running at top speed; connect to a high speed hub
[  165.428864][    T9] usb 4-1: config 2 has an invalid interface number: 226 but max is 1
[  165.433166][    T9] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  165.442245][    T9] usb 4-1: config 2 has 1 interface, different from the descriptor's value: 2
[  165.450143][    T9] usb 4-1: config 2 has no interface number 0
[  165.457735][    T9] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  165.470808][    T9] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10
[  165.484312][    T9] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  165.493416][    T9] usb 4-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  165.496641][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.508723][    T9] usb 4-1: Product: syz
[  165.512037][    T9] usb 4-1: Manufacturer: syz
[  165.518204][    C0] hrtimer: interrupt took 81908 ns
[  165.531282][    T9] usb 4-1: SerialNumber: syz
[  165.768282][    T9] usb 4-1: USB disconnect, device number 14
[  166.120352][ T9652] loop5: detected capacity change from 0 to 40427
[  166.146999][ T9652] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  166.150316][ T9652] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  166.165784][ T9652] F2FS-fs (loop5): invalid crc value
[  166.259460][ T9652] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  166.267414][ T9652] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  166.270435][ T9652] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  166.322526][   T33] audit: type=1800 audit(1755299380.063:24): pid=9652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1295" name="file1" dev="loop5" ino=10 res=0 errno=0
[  166.335616][ T9652] syz.5.1295: attempt to access beyond end of device
[  166.335616][ T9652] loop5: rw=34817, sector=77824, nr_sectors = 128 limit=40427
[  166.347828][ T9652] syz.5.1295: attempt to access beyond end of device
[  166.347828][ T9652] loop5: rw=0, sector=77888, nr_sectors = 8 limit=40427
[  166.653341][ T9696] loop3: detected capacity change from 0 to 1024
[  166.673381][ T9696] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  166.803832][ T9705] loop5: detected capacity change from 0 to 256
[  166.818199][ T9705] FAT-fs (loop5): Directory bread(block 64) failed
[  166.823321][ T9705] FAT-fs (loop5): Directory bread(block 65) failed
[  166.826112][ T9705] FAT-fs (loop5): Directory bread(block 66) failed
[  166.829449][ T9705] FAT-fs (loop5): Directory bread(block 67) failed
[  166.847485][ T9705] FAT-fs (loop5): Directory bread(block 68) failed
[  166.850259][ T9705] FAT-fs (loop5): Directory bread(block 69) failed
[  166.877661][ T9705] FAT-fs (loop5): Directory bread(block 70) failed
[  166.880322][ T9705] FAT-fs (loop5): Directory bread(block 71) failed
[  166.884738][ T9705] FAT-fs (loop5): Directory bread(block 72) failed
[  166.887484][ T9705] FAT-fs (loop5): Directory bread(block 73) failed
[  167.175790][ T9725] sctp: [Deprecated]: syz.3.1319 (pid 9725) Use of int in max_burst socket option deprecated.
[  167.175790][ T9725] Use struct sctp_assoc_value instead
[  167.216767][   T33] audit: type=1326 audit(1755299380.953:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9726 comm="syz.3.1320" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d278ebe9 code=0x7ffc0000
[  167.225832][   T33] audit: type=1326 audit(1755299380.953:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9726 comm="syz.3.1320" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d278ebe9 code=0x7ffc0000
[  167.239278][   T33] audit: type=1326 audit(1755299380.953:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9726 comm="syz.3.1320" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f48d278ebe9 code=0x7ffc0000
[  167.248821][   T33] audit: type=1326 audit(1755299380.963:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9726 comm="syz.3.1320" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d278ebe9 code=0x7ffc0000
[  167.259691][   T33] audit: type=1326 audit(1755299380.963:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9726 comm="syz.3.1320" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d278ebe9 code=0x7ffc0000
[  167.268636][   T33] audit: type=1326 audit(1755299380.963:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9726 comm="syz.3.1320" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f48d278ebe9 code=0x7ffc0000
[  167.277345][   T33] audit: type=1326 audit(1755299380.963:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9726 comm="syz.3.1320" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d278ebe9 code=0x7ffc0000
[  167.286785][   T33] audit: type=1326 audit(1755299380.963:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9726 comm="syz.3.1320" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d278ebe9 code=0x7ffc0000
[  167.341115][   T54] Bluetooth: hci2: command tx timeout
[  167.771448][   T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  167.921154][   T24] usb 6-1: Using ep0 maxpacket: 8
[  167.926985][   T24] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  167.929684][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.932992][   T24] usb 6-1: Product: syz
[  167.934456][   T24] usb 6-1: Manufacturer: syz
[  167.936366][   T24] usb 6-1: SerialNumber: syz
[  167.939582][   T24] usb 6-1: config 0 descriptor??
[  168.130472][ T9747] overlayfs: failed to clone upperpath
[  168.152024][   T24] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  168.399510][ T9764] loop3: detected capacity change from 0 to 1024
[  168.564590][ T9766] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  168.568145][ T9766] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  168.572630][ T9766] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  168.640977][ T9767] fuse: Bad value for 'fd'
[  169.115032][   T24] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  169.130533][   T24] usb 6-1: USB disconnect, device number 2
[  169.421392][   T54] Bluetooth: hci2: command tx timeout
[  169.851940][ T9775] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1339'.
[  170.051503][ T9779] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1341'.
[  170.496092][ T9795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1349'.
[  170.572808][ T9795] bond1: (slave geneve3): Enslaving as an active interface with an up link
[  170.791414][ T9791] loop5: detected capacity change from 0 to 32768
[  170.817221][ T9791] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  170.833466][ T9785] loop3: detected capacity change from 0 to 131072
[  170.837773][ T9785] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0)
[  170.841640][ T9785] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  170.849096][ T9785] F2FS-fs (loop3): invalid crc value
[  170.855760][ T5869] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  170.860857][ T5869] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  170.865067][ T5869] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  170.868604][ T5869] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  170.894061][ T9791] XFS (loop5): Ending clean mount
[  170.919849][ T9785] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  170.936093][ T9785] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  170.939728][ T9785] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  170.944406][ T9791] XFS (loop5): Quotacheck needed: Please wait.
[  170.963615][ T9785] F2FS-fs (loop3): f2fs_fill_dentries: corrupted namelen=24152, run fsck to fix.
[  170.987371][ T9785] F2FS-fs (loop3): checksum invalid, nid = 4, ino_of_node = 4, efdbe231 vs. 15bb5891
[  171.003773][ T9791] XFS (loop5): Quotacheck: Done.
[  171.046637][ T9460] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  171.546271][ T9818] loop5: detected capacity change from 0 to 32768
[  171.646203][ T9818] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nochanges,nojournal_transaction_names,read_only,version_upgrade=none
[  171.646216][ T9818]   allowing incompatible features above 0.0: (unknown version)
[  171.646220][ T9818]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  171.691908][ T9818] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  171.695513][ T9818] bcachefs (loop5): recovering from clean shutdown, journal seq 13
[  171.743450][ T9818] bcachefs (loop5): accounting_read... done
[  171.747609][ T9818] bcachefs (loop5): alloc_read... done
[  171.750910][ T9818] bcachefs (loop5): snapshots_read... done
[  171.774379][ T9818] bcachefs (loop5): journal_replay... done
[  171.777462][ T9818] bcachefs (loop5): resume_logged_ops... done
[  171.780350][ T9818] bcachefs (loop5): delete_dead_inodes... done
[  171.800520][ T9818] bcachefs (loop5): done starting filesystem
[  171.845628][ T9835] sp0: Synchronizing with TNC
[  171.852240][ T9835] sp0: Found TNC
[  171.945209][ T9460] bcachefs (loop5): shutting down
[  171.990315][ T9460] bcachefs (loop5): shutdown complete
[  172.299400][ T9848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1366'.
[  172.401071][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1371'.
[  172.551428][ T9875] loop3: detected capacity change from 0 to 64
[  172.555482][ T9875] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  172.934242][ T9895] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1388'.
[  173.289984][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1399'.
[  173.298776][ T9922] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000003
[  173.327166][ T9926] loop5: detected capacity change from 0 to 1024
[  173.330883][ T9926] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  173.368495][ T9926] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.380539][ T9926] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #11: comm syz.5.1401: missing EA_INODE flag
[  173.394672][ T9926] EXT4-fs (loop5): Remounting filesystem read-only
[  173.413033][ T9460] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.463899][ T9935] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1405'.
[  173.533964][ T9939] IPv6: Can't replace route, no match found
[  173.828244][   T10] Process accounting resumed
[  174.454360][   T33] kauditd_printk_skb: 3 callbacks suppressed
[  174.454370][   T33] audit: type=1326 audit(1755299388.192:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9976 comm="syz.5.1422" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6cd8ebe9 code=0x7ffc0000
[  174.481984][   T33] audit: type=1326 audit(1755299388.202:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9976 comm="syz.5.1422" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6cd8ebe9 code=0x7ffc0000
[  174.498766][ T9969] loop3: detected capacity change from 0 to 32768
[  174.501549][   T33] audit: type=1326 audit(1755299388.202:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9976 comm="syz.5.1422" exe="/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f8c6cd8ebe9 code=0x7ffc0000
[  174.505989][ T9969] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1418 (9969)
[  174.528073][ T9979] loop5: detected capacity change from 0 to 1024
[  174.530045][   T33] audit: type=1326 audit(1755299388.202:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9976 comm="syz.5.1422" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6cd8ebe9 code=0x7ffc0000
[  174.535531][ T9969] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  174.545108][ T9979] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  174.557289][ T9969] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  174.559586][   T33] audit: type=1326 audit(1755299388.202:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9976 comm="syz.5.1422" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c6cd8ebe9 code=0x7ffc0000
[  174.569287][ T9969] BTRFS error (device loop3): cannot disable free-space-tree
[  174.582546][ T9969] BTRFS info (device loop3): disk space caching is enabled
[  174.601995][ T9969] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  174.607932][ T9969] BTRFS error (device loop3): open_ctree failed: -22
[  174.776380][ T9988] loop3: detected capacity change from 0 to 512
[  174.818970][ T9988] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  174.829029][ T9994] overlayfs: failed to clone upperpath
[  174.831293][ T9988] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  174.853629][ T9988] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1428: Failed to acquire dquot type 1
[  174.874726][ T9988] EXT4-fs (loop3): 1 truncate cleaned up
[  174.880294][ T9988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.902891][ T9988] ext4 filesystem being mounted at /300/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.956478][ T7224] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.987906][ T9986] loop5: detected capacity change from 0 to 32768
[  174.998546][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1433'.
[  175.045008][T10002] loop3: detected capacity change from 0 to 4096
[  175.082666][T10006] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  175.091094][T10007] loop5: detected capacity change from 0 to 736
[  175.408470][T10025] loop3: detected capacity change from 0 to 128
[  175.420352][T10025] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  175.435114][T10025] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  175.493055][ T2325] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  175.527440][T10030] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000400)
[  175.535291][T10030] FAT-fs (loop3): Filesystem has been set read-only
[  175.662291][ T2325] usb 6-1: Using ep0 maxpacket: 16
[  175.675780][ T2325] usb 6-1: config 0 has an invalid interface number: 214 but max is 0
[  175.679175][ T2325] usb 6-1: config 0 has no interface number 0
[  175.681763][ T2325] usb 6-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  175.716787][ T2325] usb 6-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  175.721196][ T2325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.728042][ T2325] usb 6-1: Product: syz
[  175.730147][ T2325] usb 6-1: Manufacturer: syz
[  175.733372][ T2325] usb 6-1: SerialNumber: syz
[  175.747683][ T2325] usb 6-1: config 0 descriptor??
[  176.424461][ T2325] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.214/input/input11
[  176.659260][   T24] usb 6-1: USB disconnect, device number 3
[  177.106814][T10057] loop3: detected capacity change from 0 to 4096
[  177.110167][T10057] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  177.117107][T10057] ntfs3(loop3): ino=0, mi_enum_attr
[  177.119225][T10057] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  177.130220][T10057] ntfs3(loop3): failed to replay log file. Can't mount rw!
[  177.535086][T10081] net_ratelimit: 30 callbacks suppressed
[  177.535099][T10081] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.621993][T10082] overlayfs: failed to clone upperpath
[  177.791879][T10075] loop3: detected capacity change from 0 to 8192
[  178.163903][T10111] loop3: detected capacity change from 0 to 128
[  178.171846][T10111] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  178.192024][T10111] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  178.742423][ T2325] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  178.892754][ T2325] usb 6-1: Using ep0 maxpacket: 16
[  178.897920][ T2325] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  178.904804][ T2325] usb 6-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  178.920156][ T2325] usb 6-1: config 0 interface 0 has no altsetting 0
[  178.929780][ T2325] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  178.935738][ T2325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.940414][ T2325] usb 6-1: Product: syz
[  178.943151][ T2325] usb 6-1: Manufacturer: syz
[  178.948850][ T2325] usb 6-1: SerialNumber: syz
[  178.958701][ T2325] usb 6-1: config 0 descriptor??
[  179.684347][  T792] usb 6-1: USB disconnect, device number 4
[  179.722723][ T5890] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  179.879169][ T5890] usb 4-1: Using ep0 maxpacket: 16
[  179.889393][ T5890] usb 4-1: config 4 has an invalid interface number: 9 but max is 0
[  179.895366][ T5890] usb 4-1: config 4 has no interface number 0
[  179.898100][ T5890] usb 4-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  179.901937][ T5890] usb 4-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 167
[  179.906955][ T5890] usb 4-1: config 4 interface 9 has no altsetting 0
[  179.911667][ T5890] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[  179.916437][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.919616][ T5890] usb 4-1: Product: syz
[  179.925481][ T5890] usb 4-1: Manufacturer: syz
[  179.929792][ T5890] usb 4-1: SerialNumber: syz
[  179.941670][T10157] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  179.945935][T10157] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  179.964469][ T5890] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  180.069308][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1484'.
[  180.077253][T10175] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.082885][T10175] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.162049][ T5890] usb 4-1: USB disconnect, device number 15
[  180.164567][ T5869] usb 4-1: Failed to submit usb control message: -71
[  180.175491][ T5869] usb 4-1: unable to send the bmi data to the device: -71
[  180.178088][ T5869] usb 4-1: unable to get target info from device
[  180.180445][ T5869] usb 4-1: could not get target info (-71)
[  180.183639][ T5869] usb 4-1: could not probe fw (-71)
[  180.502592][  T792] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  180.657398][  T792] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  180.661344][  T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.666400][  T792] usb 6-1: Product: syz
[  180.668344][  T792] usb 6-1: Manufacturer: syz
[  180.670411][  T792] usb 6-1: SerialNumber: syz
[  180.676458][  T792] usb 6-1: config 0 descriptor??
[  180.683833][  T792] gspca_main: sq905c-2.14.0 probing 2770:9052
[  180.707043][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  180.785513][T10189] loop3: detected capacity change from 0 to 4096
[  180.799905][T10190] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  180.890128][T10192] loop3: detected capacity change from 0 to 2048
[  180.917946][T10192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.924484][T10192] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.957553][ T7224] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.778671][  T792] usb 6-1: USB disconnect, device number 5
[  183.174217][T10232] loop3: detected capacity change from 0 to 128
[  183.177350][T10232] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  183.191434][T10232] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  183.597128][  T792] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  183.749444][  T792] usb 6-1: Using ep0 maxpacket: 8
[  183.755746][  T792] usb 6-1: unable to get BOS descriptor or descriptor too short
[  183.759914][  T792] usb 6-1: config 8 has an invalid interface number: 125 but max is 0
[  183.763741][  T792] usb 6-1: config 8 has no interface number 0
[  183.766421][  T792] usb 6-1: config 8 interface 125 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64
[  183.770818][  T792] usb 6-1: config 8 interface 125 altsetting 9 bulk endpoint 0x9 has invalid maxpacket 1023
[  183.775708][  T792] usb 6-1: config 8 interface 125 has no altsetting 0
[  183.781497][  T792] usb 6-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=8d.5a
[  183.787636][  T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.791058][  T792] usb 6-1: Product: syz
[  183.795312][  T792] usb 6-1: Manufacturer: syz
[  183.799004][  T792] usb 6-1: SerialNumber: syz
[  183.806291][T10240] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  184.032196][  T792] s2255 6-1:8.125: Could not find bulk-in endpoint
[  184.036123][  T792] Sensoray 2255 driver load failed: 0xfffffff4
[  184.038931][  T792] s2255 6-1:8.125: probe with driver s2255 failed with error -12
[  184.045378][  T792] usb 6-1: USB disconnect, device number 6
[  184.571151][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1523'.
[  184.575092][T10272] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  184.577877][T10272] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  184.675305][T10278] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1526'.
[  184.710641][T10278] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1526'.
[  184.714252][T10278] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  185.104384][  T792] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  185.344884][  T792] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  185.349806][  T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  185.355830][  T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  185.359983][  T792] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  185.365727][  T792] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  185.369690][  T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.375301][  T792] usb 6-1: config 0 descriptor??
[  185.459318][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1536'.
[  185.828106][  T792] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  185.868094][  T792] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  186.008011][T10289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.011784][T10289] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.079487][  T792] usb 6-1: USB disconnect, device number 7
[  187.163488][T10133] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  187.384649][T10344] loop3: detected capacity change from 0 to 16
[  187.390816][T10344] erofs (device loop3): mounted with root inode @ nid 36.
[  187.613419][T10133] usb 6-1: Using ep0 maxpacket: 16
[  187.623482][T10133] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  187.627683][T10133] usb 6-1: config 0 interface 0 has no altsetting 0
[  187.629921][T10133] usb 6-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  187.632878][T10133] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.637059][T10133] usb 6-1: config 0 descriptor??
[  188.048982][T10133] logitech 0003:046D:C20E.0009: rdesc size test failed for formula gp
[  188.080728][T10133] logitech 0003:046D:C20E.0009: hidraw0: USB HID v20.00 Device [HID 046d:c20e] on usb-dummy_hcd.5-1/input0
[  188.109178][T10361] loop3: detected capacity change from 0 to 256
[  188.132890][T10361] FAT-fs (loop3): Directory bread(block 64) failed
[  188.137054][T10361] FAT-fs (loop3): Directory bread(block 65) failed
[  188.140105][T10361] FAT-fs (loop3): Directory bread(block 66) failed
[  188.144253][T10361] FAT-fs (loop3): Directory bread(block 67) failed
[  188.146928][T10361] FAT-fs (loop3): Directory bread(block 68) failed
[  188.149123][T10361] FAT-fs (loop3): Directory bread(block 69) failed
[  188.151466][T10361] FAT-fs (loop3): Directory bread(block 70) failed
[  188.155923][T10361] FAT-fs (loop3): Directory bread(block 71) failed
[  188.158821][T10361] FAT-fs (loop3): Directory bread(block 72) failed
[  188.161225][T10361] FAT-fs (loop3): Directory bread(block 73) failed
[  188.254204][  T792] usb 6-1: USB disconnect, device number 8
[  188.453639][ T5890] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  188.614720][ T5890] usb 4-1: Using ep0 maxpacket: 16
[  188.620104][ T5890] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  188.629535][ T5890] usb 4-1: config 0 has no interface number 0
[  188.636282][ T5890] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  188.640071][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.645285][ T5890] usb 4-1: Product: syz
[  188.647089][ T5890] usb 4-1: Manufacturer: syz
[  188.649002][ T5890] usb 4-1: SerialNumber: syz
[  188.657266][ T5890] usb 4-1: config 0 descriptor??
[  188.662500][ T5890] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  188.768029][T10374] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1568'.
[  188.772331][T10373] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1568'.
[  188.835389][T10378] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1570'.
[  189.028193][T10380] loop5: detected capacity change from 0 to 32768
[  189.243337][T10402] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun!
[  189.270119][ T5890] gspca_spca1528: reg_w err -71
[  189.313393][ T5890] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71
[  189.325199][ T5890] usb 4-1: USB disconnect, device number 16
[  189.595712][T10420] block nbd0: server does not support multiple connections per device.
[  189.600694][T10420] block nbd0: shutting down sockets
[  189.686480][T10424] loop5: detected capacity change from 0 to 64
[  189.785691][T10428] loop5: detected capacity change from 0 to 512
[  189.818977][T10428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.824442][T10428] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.869449][T10428] EXT4-fs error (device loop5): ext4_empty_dir:3084: inode #12: comm syz.5.1595: Directory hole found for htree leaf block 0
[  189.878752][T10433] netlink: 'syz.3.1596': attribute type 1 has an invalid length.
[  189.881610][T10433] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1596'.
[  189.916316][ T9460] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.582141][T10451] netlink: 'syz.3.1603': attribute type 1 has an invalid length.
[  190.924671][  T792] usb 4-1: new low-speed USB device number 17 using dummy_hcd
[  190.938585][T10461] loop5: detected capacity change from 0 to 256
[  191.135708][  T792] usb 4-1: config 65 has an invalid interface number: 95 but max is 0
[  191.138338][  T792] usb 4-1: config 65 has no interface number 0
[  191.144125][  T792] usb 4-1: string descriptor 0 read error: -22
[  191.146860][  T792] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=6f.b6
[  191.150772][  T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.162669][  T792] usbtest 4-1:65.95: Linux gadget zero
[  191.168182][  T792] usbtest 4-1:65.95: low-speed {control in/out} tests (+alt)
[  191.250175][T10469] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  191.284901][  T792] IPVS: starting estimator thread 0...
[  191.388391][T10470] IPVS: using max 46 ests per chain, 110400 per kthread
[  191.498249][  T792] usb 4-1: USB disconnect, device number 17
[  192.918630][T10500] overlay: filesystem on ./bus is read-only
[  192.927461][T10484] loop5: detected capacity change from 0 to 40427
[  192.974958][T10484] F2FS-fs (loop5): invalid crc value
[  193.054782][T10505] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1628'.
[  193.084394][T10484] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  193.106539][T10484] F2FS-fs (loop5): Start checkpoint disabled!
[  193.128024][T10484] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  193.742470][T10133] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  193.753526][T10133] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  193.835818][T10527] hid-generic 0000:0000:0000.000A: pid 10527 passed too short report
[  193.993897][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  194.016933][T10538] loop5: detected capacity change from 0 to 4096
[  194.300143][T10550] loop5: detected capacity change from 0 to 512
[  194.302864][T10550] EXT4-fs: Ignoring removed nobh option
[  194.360355][T10550] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.1649: corrupted inode contents
[  194.369423][T10550] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.1649: mark_inode_dirty error
[  194.375604][T10556] loop3: detected capacity change from 0 to 512
[  194.380603][T10550] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.1649: corrupted inode contents
[  194.517333][T10550] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.1649: mark_inode_dirty error
[  194.549293][T10550] Quota error (device loop5): write_blk: dquota write failed
[  194.560879][T10550] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  194.574908][T10550] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1649: Failed to acquire dquot type 0
[  194.608937][T10550] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1649: corrupted inode contents
[  194.638876][T10556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.649530][T10550] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.1649: mark_inode_dirty error
[  194.677143][T10550] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1649: corrupted inode contents
[  194.682196][T10550] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.1649: mark_inode_dirty error
[  194.692099][T10550] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1649: corrupted inode contents
[  194.698779][T10550] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  194.702652][T10550] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1649: corrupted inode contents
[  194.707869][T10550] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.1649: mark_inode_dirty error
[  194.711477][T10550] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  194.717046][T10550] EXT4-fs (loop5): 1 truncate cleaned up
[  194.721676][T10550] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.727128][T10550] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  194.741283][T10550] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1649: corrupted inode contents
[  194.748369][T10550] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.1649: mark_inode_dirty error
[  194.752551][T10550] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1649: corrupted inode contents
[  194.756473][T10550] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.1649: mark_inode_dirty error
[  194.760390][T10550] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1649: corrupted inode contents
[  194.765557][T10550] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.1649: mark_inode_dirty error
[  194.769885][T10550] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.1649: corrupted inode contents
[  194.777632][T10550] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.1649: mark_inode_dirty error
[  194.782170][T10550] EXT4-fs error (device loop5) in ext4_setattr:6071: Corrupt filesystem
[  194.810913][ T9460] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.831781][ T6416] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  194.838384][ T6416] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u10:9: Failed to release dquot type 1
[  195.175504][  T792] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  195.354571][  T792] usb 6-1: Using ep0 maxpacket: 16
[  195.360662][  T792] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  195.375673][  T792] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  195.387808][  T792] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  195.390953][  T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.393597][  T792] usb 6-1: Product: syz
[  195.395177][  T792] usb 6-1: Manufacturer: syz
[  195.397428][  T792] usb 6-1: SerialNumber: syz
[  195.400290][  T792] usb 6-1: config 0 descriptor??
[  195.432663][T10573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  195.442887][T10573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  195.460362][ T7224] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.618881][ T2325] usb 6-1: USB disconnect, device number 9
[  195.630106][T10582] loop3: detected capacity change from 0 to 16
[  195.634920][T10582] erofs (device loop3): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  195.639738][T10582] erofs (device loop3): mounted with root inode @ nid 36.
[  195.668178][T10584] loop3: detected capacity change from 0 to 1024
[  196.002199][T10590] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1663'.
[  196.405793][ T2325] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  196.554907][ T2325] usb 6-1: Using ep0 maxpacket: 16
[  196.568784][ T2325] usb 6-1: config 0 has an invalid interface number: 126 but max is 0
[  196.572104][ T2325] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  196.576224][ T2325] usb 6-1: config 0 has no interface number 0
[  196.579400][ T2325] usb 6-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  196.584117][ T2325] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024
[  196.588271][ T2325] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  196.594932][ T2325] usb 6-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 147
[  196.598923][ T2325] usb 6-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  196.604229][ T2325] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[  196.610208][ T2325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.618361][ T2325] usb 6-1: config 0 descriptor??
[  196.621250][T10596] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  196.631758][T10596] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  196.637058][ T2325] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  196.700489][T10602] loop3: detected capacity change from 0 to 128
[  196.709910][T10602] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  196.723384][T10602] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  196.730285][T10602] EXT4-fs error (device loop3): htree_dirblock_to_tree:1051: inode #2: comm syz.3.1669: Directory block failed checksum
[  196.745374][ T7224] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  196.839698][T10609] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1672'.
[  196.846886][ T2325] usb 6-1: USB disconnect, device number 10
[  197.050239][T10623] netlink: 'syz.1.1679': attribute type 2 has an invalid length.
[  197.631797][T10648] loop5: detected capacity change from 0 to 32768
[  197.655322][T10648] bcachefs: bch2_fs_parse_param() Error parsing option compression: option_value
[  197.994811][ T5890] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  198.436487][ T5890] usb 4-1: config 0 has no interfaces?
[  198.438466][ T5890] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  198.441546][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.450027][ T5890] usb 4-1: config 0 descriptor??
[  198.656097][ T5890] usb 4-1: USB disconnect, device number 18
[  199.034935][ T2325] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  199.185417][ T2325] usb 6-1: Using ep0 maxpacket: 32
[  199.189265][ T2325] usb 6-1: config 0 has an invalid interface number: 255 but max is 0
[  199.192128][ T2325] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  199.196047][ T2325] usb 6-1: config 0 has no interface number 0
[  199.198143][ T2325] usb 6-1: config 0 interface 255 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  199.201766][ T2325] usb 6-1: config 0 interface 255 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[  199.206409][ T2325] usb 6-1: config 0 interface 255 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  199.217260][ T2325] usb 6-1: New USB device found, idVendor=0499, idProduct=152e, bcdDevice=b4.9a
[  199.220888][ T2325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.223719][ T2325] usb 6-1: Product: syz
[  199.225315][ T2325] usb 6-1: Manufacturer: syz
[  199.227397][ T2325] usb 6-1: SerialNumber: syz
[  199.231555][ T2325] usb 6-1: config 0 descriptor??
[  199.321054][T10700] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1713'.
[  199.456822][ T2325] usb 6-1: USB disconnect, device number 11
[  199.476338][ T6711] udevd[6711]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.255/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  199.655103][  T973] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  199.804950][  T973] usb 4-1: Using ep0 maxpacket: 32
[  199.810553][  T973] usb 4-1: config 0 interface 0 has no altsetting 0
[  199.825095][  T973] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  199.829497][  T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.835241][  T973] usb 4-1: config 0 descriptor??
[  200.321841][  T973] corsair-cpro 0003:1B1C:0C10.000B: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0
[  200.720457][  T973] corsair-cpro 0003:1B1C:0C10.000B: probe with driver corsair-cpro failed with error -71
[  200.730280][  T973] usb 4-1: USB disconnect, device number 19
[  200.925080][ T2325] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  201.076456][ T2325] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  201.081283][ T2325] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  201.086022][ T2325] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  201.089461][ T2325] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  201.096004][ T2325] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  201.099232][ T2325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.103585][ T2325] usb 6-1: config 0 descriptor??
[  201.512802][ T2325] plantronics 0003:047F:FFFF.000C: ignoring exceeding usage max
[  201.528428][ T2325] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  201.787179][T10778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  202.252765][T10797] sctp: [Deprecated]: syz.3.1758 (pid 10797) Use of int in max_burst socket option deprecated.
[  202.252765][T10797] Use struct sctp_assoc_value instead
[  203.635461][  T792] usb 6-1: USB disconnect, device number 12
[  203.748261][T10821] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1770'.
[  203.863253][T10829] loop5: detected capacity change from 0 to 512
[  203.876280][T10829] EXT4-fs (loop5): Test dummy encryption mode enabled
[  203.879120][T10829] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  203.892510][T10829] EXT4-fs (loop5): 1 truncate cleaned up
[  203.900913][T10829] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.105518][  T973] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  204.398773][  T973] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  204.411369][  T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.417890][  T973] usb 4-1: Product: syz
[  204.421717][  T973] usb 4-1: Manufacturer: syz
[  204.425081][  T973] usb 4-1: SerialNumber: syz
[  204.438253][  T973] usb 4-1: config 0 descriptor??
[  204.591960][T10838] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.652822][  T973] usb 4-1: ignoring: probably an ADSL modem
[  204.658303][T10842] new mount options do not match the existing superblock, will be ignored
[  204.777470][ T9460] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.820125][T10848] loop5: detected capacity change from 0 to 512
[  204.826815][T10848] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  204.839289][T10848] EXT4-fs (loop5): 1 truncate cleaned up
[  204.843257][T10848] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.937318][ T9460] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.054496][  T973] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19!
[  205.260969][ T2325] usb 4-1: USB disconnect, device number 20
[  205.275734][   T51] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  205.729357][   T51] usb 6-1: config 135 has an invalid interface number: 230 but max is 0
[  205.732532][   T51] usb 6-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  205.736268][   T51] usb 6-1: config 135 has no interface number 0
[  205.738993][   T51] usb 6-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  205.747669][   T51] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  205.751205][   T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.754355][   T51] usb 6-1: Product: syz
[  205.758380][   T51] usb 6-1: Manufacturer: syz
[  205.760289][   T51] usb 6-1: SerialNumber: syz
[  205.766585][   T51] usb 6-1: Found UVC 0.00 device syz (18ec:3288)
[  205.768969][   T51] usb 6-1: No valid video chain found.
[  205.933394][T10866] loop3: detected capacity change from 0 to 32768
[  205.979006][ T2325] usb 6-1: USB disconnect, device number 13
[  205.982708][T10866] bcachefs (loop3): starting version 1.13: inode_has_child_snapshots opts=compression=lz4
[  205.982718][T10866]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  205.991208][T10866] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  205.994034][T10866] bcachefs (loop3): recovering from clean shutdown, journal seq 7
[  205.997518][T10866] bcachefs (loop3): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive
[  205.997518][T10866]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  206.021364][T10866] bcachefs (loop3): error reading btree root btree=accounting level=0: btree_node_read_error, fixing
[  206.025746][T10866] bcachefs (loop3): check_topology... done
[  206.030986][T10866] bcachefs (loop3): accounting_read... done
[  206.033973][T10866] bcachefs (loop3): alloc_read... done
[  206.036510][T10866] bcachefs (loop3): snapshots_read... done
[  206.039448][T10866] bcachefs (loop3): check_allocations...
[  206.042250][T10866] bcachefs (loop3): bucket 0:78 gen 0 has wrong data_type: got btree, should be need_discard, fixing
[  206.048403][T10866] bcachefs (loop3): bucket 0:78 gen 0 data type need_discard has wrong dirty_sectors: got 64, should be 0, fixing
[  206.055455][T10866]  done
[  206.063751][T10866] bcachefs (loop3): going read-write
[  206.073727][T10866] bcachefs (loop3): journal_replay... done
[  206.118634][T10866] bcachefs (loop3): check_lrus... done
[  206.121141][T10866] bcachefs (loop3): check_backpointers_to_extents... done
[  206.127046][T10866] bcachefs (loop3): check_extents_to_backpointers... done
[  206.131493][T10866] bcachefs (loop3): check_inodes... done
[  206.135145][T10866] bcachefs (loop3): resume_logged_ops... done
[  206.138096][T10866] bcachefs (loop3): delete_dead_inodes... done
[  206.142151][T10866] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean
[  206.145376][T10866] bcachefs (loop3): check_extents_to_backpointers...
[  206.146094][T10866] bcachefs (loop3): scanning for missing backpointers in 1/512 buckets
[  206.152295][T10866]  done
[  206.155225][T10866] bcachefs (loop3): check_inodes... done
[  206.158284][T10866] bcachefs (loop3): resume_logged_ops... done
[  206.160760][T10866] bcachefs (loop3): delete_dead_inodes... done
[  206.164135][T10866] bcachefs (loop3): done starting filesystem
[  206.195915][T10866] syz.3.1785 (10866) used greatest stack depth: 15112 bytes left
[  206.220994][ T7224] bcachefs (loop3): shutting down
[  206.223871][ T7224] bcachefs (loop3): going read-only
[  206.228304][ T7224] bcachefs (loop3): finished waiting for writes to stop
[  206.238036][ T7224] bcachefs (loop3): flushing journal and stopping allocators, journal seq 16
[  206.247992][ T7224] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 17
[  206.254678][ T7224] bcachefs (loop3): clean shutdown complete, journal seq 18
[  206.258051][ T7224] bcachefs (loop3): marking filesystem clean
[  206.278729][ T7224] bcachefs (loop3): shutdown complete
[  206.815966][  T973] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[  206.967776][  T973] usb 6-1: config 0 has an invalid interface number: 50 but max is 0
[  206.976516][  T973] usb 6-1: config 0 has no interface number 0
[  206.978872][  T973] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  206.997688][  T973] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  207.001276][  T973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.004166][  T973] usb 6-1: Product: syz
[  207.006276][  T973] usb 6-1: Manufacturer: syz
[  207.008182][  T973] usb 6-1: SerialNumber: syz
[  207.011352][  T973] usb 6-1: config 0 descriptor??
[  207.017623][  T973] yurex 6-1:0.50: Could not find endpoints
[  207.234527][   T51] usb 6-1: USB disconnect, device number 14
[  208.461756][T10935] loop3: detected capacity change from 0 to 64
[  209.114991][   T54] Bluetooth: Fragment is too long (len 14, expected 2)
[  209.241215][T10947] mkiss: ax0: crc mode is auto.
[  209.488463][   T51] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  209.790610][   T51] usb 6-1: Using ep0 maxpacket: 32
[  209.797491][   T51] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  209.802173][   T51] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0
[  209.810147][   T51] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  209.814693][   T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.818539][   T51] usb 6-1: Product: syz
[  209.820447][   T51] usb 6-1: Manufacturer: syz
[  209.822547][   T51] usb 6-1: SerialNumber: syz
[  209.839792][   T51] usb 6-1: config 0 descriptor??
[  209.864048][   T51] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input13
[  209.892469][   T51] usbtouchscreen 6-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90
[  209.928276][   T51] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -90
[  210.061640][  T973] usb 6-1: USB disconnect, device number 15
[  210.326338][ T2325] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  210.486473][ T2325] usb 4-1: Using ep0 maxpacket: 16
[  210.493491][ T2325] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  210.500670][ T2325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.504671][ T2325] usb 4-1: Product: syz
[  210.507742][ T2325] usb 4-1: Manufacturer: syz
[  210.509712][ T2325] usb 4-1: SerialNumber: syz
[  210.514501][ T2325] usb 4-1: config 0 descriptor??
[  210.522592][ T2325] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  210.527834][ T2325] usb 4-1: Detected FT-X
[  210.572708][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.580523][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.727480][ T2325] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  210.993000][T11008] loop5: detected capacity change from 0 to 2048
[  211.000577][T11008] FAT-fs (loop5): bogus logical sector size 0
[  211.002986][T11008] FAT-fs (loop5): Can't find a valid FAT filesystem
[  211.261163][T11017] loop5: detected capacity change from 0 to 24
[  211.518489][T11023] loop5: detected capacity change from 0 to 32768
[  211.522842][T11023] 
[  211.522842][T11023]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  211.522842][T11023] 
[  211.573081][T11023] 
[  211.573081][T11023]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  211.573081][T11023] 
[  211.577511][T11023] 
[  211.577511][T11023]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  211.577511][T11023] 
[  211.581102][T11023] 
[  211.581102][T11023]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  211.581102][T11023] 
[  211.584895][T11023] 
[  211.584895][T11023]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  211.584895][T11023] 
[  211.612628][  T115] 
[  211.612628][  T115]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  211.612628][  T115] 
[  211.619596][ T9460] 
[  211.619596][ T9460]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  211.619596][ T9460] 
[  211.636811][ T9460] 
[  211.636811][ T9460]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  211.636811][ T9460] 
[  212.196415][T10133] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  212.367669][T10133] usb 6-1: Using ep0 maxpacket: 32
[  212.371410][T10133] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.377432][T10133] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  212.381968][T10133] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  212.385561][T10133] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.394032][T10133] usb 6-1: config 0 descriptor??
[  212.816989][T10133] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0
[  212.940495][ T2325] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71
[  212.953942][ T2325] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  212.965134][ T2325] usb 4-1: USB disconnect, device number 21
[  212.973235][ T2325] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  212.980057][ T2325] ftdi_sio 4-1:0.0: device disconnected
[  212.991629][T11063] loop3: detected capacity change from 0 to 512
[  212.995591][T11063] EXT4-fs: Ignoring removed orlov option
[  213.017759][T11063] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  213.035160][T11063] EXT4-fs (loop3): orphan cleanup on readonly fs
[  213.043142][T11063] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1871: bg 0: block 248: padding at end of block bitmap is not set
[  213.051843][T11063] Quota error (device loop3): write_blk: dquota write failed
[  213.054777][T11063] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  213.058372][T11063] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1871: Failed to acquire dquot type 1
[  213.063921][T11063] EXT4-fs (loop3): 1 truncate cleaned up
[  213.073282][T11063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  213.079281][T10133] usb 6-1: USB disconnect, device number 16
[  213.086252][T11063] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.1871: Abort forced by user
[  213.090850][T11063] EXT4-fs (loop3): Remounting filesystem read-only
[  213.093589][T11063] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000.
[  213.112489][ T7224] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.260230][T11072] dvmrp0: entered allmulticast mode
[  213.265287][T11070] dvmrp0: left allmulticast mode
[  213.273475][T11068] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1873'.
[  213.378260][T11076] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1876'.
[  213.631170][T11095] delete_channel: no stack
[  213.906666][   T51] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  214.066678][   T51] usb 6-1: Using ep0 maxpacket: 32
[  214.071138][   T51] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[  214.074590][   T51] usb 6-1: config 0 has no interface number 0
[  214.078960][   T51] usb 6-1: config 0 interface 12 has no altsetting 0
[  214.084186][   T51] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  214.088406][   T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.092033][   T51] usb 6-1: Product: syz
[  214.094027][   T51] usb 6-1: Manufacturer: syz
[  214.096147][   T51] usb 6-1: SerialNumber: syz
[  214.103078][   T51] usb 6-1: config 0 descriptor??
[  214.504702][T11107] loop3: detected capacity change from 0 to 2048
[  214.730223][   T51] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  214.733342][   T51] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[  214.736362][   T51] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  214.753074][   T51] f81534 6-1:0.12: probe with driver f81534 failed with error -71
[  214.762283][   T51] usb 6-1: USB disconnect, device number 17
[  215.416744][   T51] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  215.598257][   T51] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  215.601607][   T51] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  215.605311][   T51] usb 4-1: config 220 has no interface number 2
[  215.616753][   T51] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  215.621125][   T51] usb 4-1: config 220 interface 0 has no altsetting 0
[  215.623676][   T51] usb 4-1: config 220 interface 76 has no altsetting 0
[  215.626133][   T51] usb 4-1: config 220 interface 1 has no altsetting 0
[  215.638540][   T51] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  215.642165][   T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.645027][   T51] usb 4-1: Product: syz
[  215.652306][   T51] usb 4-1: Manufacturer: syz
[  215.653987][   T51] usb 4-1: SerialNumber: syz
[  215.880883][   T51] usb 4-1: selecting invalid altsetting 0
[  215.885893][   T51] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  215.888892][   T51] usb 4-1: No valid video chain found.
[  215.895904][   T51] usb 4-1: selecting invalid altsetting 0
[  215.899258][   T51] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[  215.905903][   T51] usb 4-1: USB disconnect, device number 22
[  216.113050][T11178] loop5: detected capacity change from 0 to 32768
[  216.152016][T11178] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  216.198503][T11178] XFS (loop5): Ending clean mount
[  216.210118][T11178] XFS (loop5): Quotacheck needed: Please wait.
[  216.242653][T11178] XFS (loop5): Quotacheck: Done.
[  216.292450][ T9460] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  216.579668][T11206] netlink: 'syz.5.1929': attribute type 8 has an invalid length.
[  216.582724][T11206] netlink: 'syz.5.1929': attribute type 4 has an invalid length.
[  216.586114][T11206] netlink: 'syz.5.1929': attribute type 5 has an invalid length.
[  216.591417][T11208] netlink: 'syz.1.1935': attribute type 1 has an invalid length.
[  216.592652][T11206] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1929'.
[  216.634809][T11210] overlayfs: missing 'workdir'
[  216.787405][  T792] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  216.967160][  T792] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  216.972623][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.987275][  T792] usb 4-1: config 0 descriptor??
[  217.009776][  T792] cp210x 4-1:0.0: cp210x converter detected
[  217.722047][  T792] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  217.803446][  T792] usb 4-1: cp210x converter now attached to ttyUSB0
[  217.908026][    C0] hpet: Lost 1 RTC interrupts
[  217.958053][    C0] hpet: Lost 2 RTC interrupts
[  218.005599][  T792] usb 4-1: USB disconnect, device number 23
[  218.015959][  T792] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  218.219942][  T792] cp210x 4-1:0.0: device disconnected
[  218.794772][T11246] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1952'.
[  218.901766][T11252] loop5: detected capacity change from 0 to 4096
[  220.089665][T11285] loop5: detected capacity change from 0 to 32768
[  220.130807][T11287] loop3: detected capacity change from 0 to 32768
[  220.139596][T11287] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1972 (11287)
[  220.168686][T11287] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  220.172642][T11287] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  220.190325][T11287] BTRFS info (device loop3): using free-space-tree
[  220.360227][ T7224] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  221.495143][T11349] loop3: detected capacity change from 0 to 16
[  221.499543][T11349] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  221.503611][T11349] cramfs: wrong endianness
[  221.563664][T11351] loop3: detected capacity change from 0 to 2048
[  221.588179][T11351] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.593047][T11351] ext4 filesystem being mounted at /451/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.619544][T11356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1994'.
[  221.623221][ T7224] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.665333][T11360] loop3: detected capacity change from 0 to 512
[  221.670610][T11360] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  221.677058][T11360] EXT4-fs (loop3): 1 truncate cleaned up
[  221.681873][T11360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.709717][ T7224] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.776439][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1999'.
[  222.414758][T11380] loop5: detected capacity change from 0 to 32768
[  222.423150][T11380] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2006 (11380)
[  222.457840][T11380] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  222.461695][T11380] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  222.465218][T11380] BTRFS info (device loop5): using free-space-tree
[  222.492052][T11402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2016'.
[  222.772409][ T9460] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  223.467724][ T2325] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  223.617700][ T2325] usb 6-1: Using ep0 maxpacket: 16
[  223.622009][ T2325] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  223.629041][ T2325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.642608][ T2325] usb 6-1: config 0 descriptor??
[  223.654716][ T2325] gspca_main: sonixj-2.14.0 probing 0471:0327
[  224.150833][T11474] tipc: New replicast peer: 255.255.255.255
[  224.153757][T11474] tipc: Enabled bearer <udp:syz2>, priority 10
[  224.294942][T11484] kAFS: unparsable volume name
[  224.670158][ T2325] gspca_sonixj: reg_w1 err -71
[  224.687979][ T2325] sonixj 6-1:0.0: probe with driver sonixj failed with error -71
[  224.696094][ T2325] usb 6-1: USB disconnect, device number 18
[  224.789927][T11512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2061'.
[  225.363104][  T792] tipc: Node number set to 2886997162
[  225.457498][T11531] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2069'.
[  225.653289][T11533] loop5: detected capacity change from 0 to 1024
[  225.765295][   T32] hfsplus: b-tree write err: -5, ino 4
[  225.956505][T11539] loop5: detected capacity change from 0 to 4096
[  226.043748][T11545] loop5: detected capacity change from 0 to 1024
[  226.094503][T11545] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  226.102154][T11545] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  226.118744][   T33] audit: type=1800 audit(1755299439.856:41): pid=11545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2074" name="file1" dev="loop5" ino=15 res=0 errno=0
[  226.136128][T11545] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.2074: lblock 0 mapped to illegal pblock 0 (length 1)
[  226.147531][T11545] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  226.153457][T11545] EXT4-fs (loop5): This should not happen!! Data will be lost
[  226.153457][T11545] 
[  226.167085][T11545] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.2074: lblock 0 mapped to illegal pblock 0 (length 1)
[  226.177153][T11545] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  226.182597][T11545] EXT4-fs (loop5): This should not happen!! Data will be lost
[  226.182597][T11545] 
[  226.274358][ T9460] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  226.788181][ T5846] Bluetooth: hci0: command 0x0406 tx timeout
[  226.986880][    C0] hpet: Lost 1 RTC interrupts
[  227.852055][T11590] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2091'.
[  227.970590][T11596] loop5: detected capacity change from 0 to 2048
[  228.012394][T11599] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  228.027036][T11582] loop3: detected capacity change from 0 to 32768
[  228.048510][T11582] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2087 (11582)
[  228.055688][T11596] NILFS error (device loop5): nilfs_lookup: deleted inode referenced: 12
[  228.071485][T11582] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  228.075710][T11582] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  228.082965][T11596] Remounting filesystem read-only
[  228.085230][T11582] BTRFS info (device loop3): using free-space-tree
[  228.097590][T11596] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer
[  228.266695][ T7224] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  228.423290][   T33] audit: type=1326 audit(1755299442.155:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11618 comm="syz.3.2097" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f48d278ebe9 code=0x0
[  228.887590][T11639] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2106'.
[  229.404977][T11656] loop3: detected capacity change from 0 to 1024
[  229.452807][T11656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.464898][   T33] audit: type=1800 audit(1755299443.195:43): pid=11656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2114" name="bus" dev="loop3" ino=18 res=0 errno=0
[  229.476585][T11656] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.2114: Allocating blocks 385-513 which overlap fs metadata
[  229.485982][T11656] EXT4-fs (loop3): pa ffff88812345d3a0: logic 16, phys. 129, len 24
[  229.489768][T11656] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  229.496686][T11656] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 3 with error 1
[  229.503592][T11656] EXT4-fs (loop3): This should not happen!! Data will be lost
[  229.503592][T11656] 
[  229.535715][ T7224] Trying to write to read-only block-device loop3
[  229.540926][ T7224] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.605650][T11666] loop3: detected capacity change from 0 to 8
[  229.980390][T11679] netlink: 'syz.5.2123': attribute type 1 has an invalid length.
[  231.189581][ T2325] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  231.300892][T11736] 9pnet_fd: Insufficient options for proto=fd
[  231.340764][ T2325] usb 4-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a
[  231.345248][ T2325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.351451][ T2325] usb 4-1: config 0 descriptor??
[  231.356631][ T2325] gspca_main: xirlink-cit-2.14.0 probing 0545:800d
[  231.362457][ T2325] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14
[  231.560075][   T51] usb 4-1: USB disconnect, device number 24
[  232.689010][ T2325] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  232.847473][ T2325] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  232.852481][ T2325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.855887][ T2325] usb 4-1: Product: syz
[  232.857690][ T2325] usb 4-1: Manufacturer: syz
[  232.863513][ T2325] usb 4-1: SerialNumber: syz
[  232.867588][ T2325] usb 4-1: config 0 descriptor??
[  232.879017][ T2325] ch341 4-1:0.0: ch341-uart converter detected
[  232.980997][T11751] netlink: 212264 bytes leftover after parsing attributes in process `syz.1.2156'.
[  233.897450][ T2325] usb 4-1: failed to send control message: -71
[  233.900436][ T2325] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  233.915257][ T2325] usb 4-1: USB disconnect, device number 25
[  233.923305][ T2325] ch341 4-1:0.0: device disconnected
[  234.648003][T11808] loop3: detected capacity change from 0 to 512
[  234.804174][T11821] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2188'.
[  234.978679][T11833] overlayfs: failed to clone upperpath
[  236.167345][T11870] overlayfs: failed to clone upperpath
[  236.248643][T11875] overlayfs: failed to clone upperpath
[  236.358536][T11881] loop3: detected capacity change from 0 to 8192
[  236.523334][T11887] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  236.567709][T11887] batman_adv: batadv0: Removing interface: batadv_slave_0
[  236.791725][T11897] : renamed from bridge_slave_0 (while UP)
[  236.824617][T11899] fuse: Bad value for 'fd'
[  237.112458][ T2325] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  237.264504][ T2325] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  237.272931][ T2325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.282532][ T2325] usb 4-1: config 0 descriptor??
[  237.291905][ T2325] gspca_main: cpia1-2.14.0 probing 0813:0001
[  237.698198][ T2325] cpia1 4-1:0.0: unexpected state after lo power cmd: 00
[  237.980501][   T33] audit: type=1326 audit(1755299451.714:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11944 comm="syz.1.2245" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb01d58ebe9 code=0x0
[  238.305049][ T2325] gspca_cpia1: usb_control_msg 05, error -71
[  238.307652][ T2325] cpia1 4-1:0.0: unexpected systemstate: 00
[  238.313764][ T2325] usb 4-1: USB disconnect, device number 26
[  239.538300][T11987] loop3: detected capacity change from 0 to 1024
[  239.681507][T11991] lo speed is unknown, defaulting to 1000
[  239.684567][T11991] lo speed is unknown, defaulting to 1000
[  239.691710][T11991] lo speed is unknown, defaulting to 1000
[  239.707274][T11991] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  239.721982][T11991] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  239.793409][T11994] binder: BINDER_SET_CONTEXT_MGR already set
[  239.796618][T11994] binder: 11993:11994 ioctl 40046207 0 returned -16
[  239.908477][T11991] lo speed is unknown, defaulting to 1000
[  239.918104][T11991] lo speed is unknown, defaulting to 1000
[  239.922564][T11991] lo speed is unknown, defaulting to 1000
[  239.966098][T12000] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2270'.
[  239.984849][T12000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2270'.
[  239.988986][T12000] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2270'.
[  239.997094][T12000] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2270'.
[  240.140347][T12016] loop3: detected capacity change from 0 to 128
[  240.269550][T12030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2285'.
[  241.559988][   T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  241.564549][   T54] Bluetooth: hci0: command 0x0406 tx timeout
[  244.483360][T10133] Process accounting resumed
[  244.508535][T12079] Process accounting resumed
[  244.931259][T12116] geneve1: entered promiscuous mode
[  244.933930][T12116] macsec2: entered promiscuous mode
[  244.936215][T12116] macsec2: entered allmulticast mode
[  244.938497][T12116] geneve1: entered allmulticast mode
[  244.945603][T12116] geneve1: left allmulticast mode
[  244.952164][T12116] geneve1: left promiscuous mode
[  244.969113][T10133] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  245.130412][T10133] usb 4-1: Using ep0 maxpacket: 8
[  245.138208][T10133] usb 4-1: unable to get BOS descriptor or descriptor too short
[  245.145580][T10133] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  245.149956][T10133] usb 4-1: config 7 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  245.154525][T10133] usb 4-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  245.164193][T10133] usb 4-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a
[  245.168037][T10133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.172616][T10133] usb 4-1: Product: syz
[  245.174397][T10133] usb 4-1: Manufacturer: syz
[  245.176341][T10133] usb 4-1: SerialNumber: syz
[  245.182699][T12128] nfs: Unknown parameter 'ntext'
[  245.388171][T10133] usb 4-1: USB disconnect, device number 27
[  246.805570][T12173] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2349'.
[  246.940240][T12185] loop3: detected capacity change from 0 to 128
[  247.295795][T12197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2361'.
[  247.449643][T12205] loop3: detected capacity change from 0 to 512
[  247.862352][T12225] PKCS8: Unsupported PKCS#8 version
[  248.255547][T12237] loop3: detected capacity change from 0 to 32768
[  248.259193][T12237] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2380 (12237)
[  248.266863][T12237] BTRFS error: failed to open device for path /dev/loop3 with flags 0x23: -13
[  248.586109][T12265] openvswitch: netlink: Message has 1 unknown bytes.
[  248.588941][T12265] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.093120][  T792] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  249.257458][  T792] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  249.261864][  T792] usb 4-1: config 0 has no interface number 0
[  249.264386][  T792] usb 4-1: too many endpoints for config 0 interface 85 altsetting 0: 157, using maximum allowed: 30
[  249.272081][  T792] usb 4-1: config 0 interface 85 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 157
[  249.277612][  T792] usb 4-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=f1.f8
[  249.290718][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.307815][  T792] usb 4-1: config 0 descriptor??
[  249.331267][  T792] hub 4-1:0.85: bad descriptor, ignoring hub
[  249.350482][  T792] hub 4-1:0.85: probe with driver hub failed with error -5
[  249.363169][  T792] f81232 4-1:0.85: f81232 converter detected
[  249.381648][  T792] usb 4-1: f81232 converter now attached to ttyUSB0
[  249.632281][ T6682] usb 4-1: USB disconnect, device number 28
[  249.639468][ T6682] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0
[  249.651437][ T6682] f81232 4-1:0.85: device disconnected
[  249.858155][T12300] delete_channel: no stack
[  249.860299][T12300] delete_channel: no stack
[  250.137034][T12318] loop3: detected capacity change from 0 to 1764
[  250.157749][T12318] iso9660: Corrupted directory entry in block 2 of inode 1920
[  250.939935][T12366] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  251.085895][T12376] loop3: detected capacity change from 0 to 16
[  251.090303][T12376] erofs (device loop3): mounted with root inode @ nid 36.
[  251.097113][T12376] erofs (device loop3): corrupted dir block 8200 @ nid 36
[  251.176953][T12380] netlink: 'syz.1.2448': attribute type 4 has an invalid length.
[  251.180120][T12380] netlink: 'syz.1.2448': attribute type 3 has an invalid length.
[  251.184911][T12380] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2448'.
[  251.236355][T12382] netlink: 'syz.5.2449': attribute type 21 has an invalid length.
[  251.241145][T12382] netlink: 'syz.5.2449': attribute type 1 has an invalid length.
[  251.422925][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2458'.
[  251.439025][T12400] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2458'.
[  251.543170][T12396] loop3: detected capacity change from 0 to 32768
[  253.354829][T12464] netlink: 'syz.1.2487': attribute type 2 has an invalid length.
[  253.357826][T12464] netlink: 'syz.1.2487': attribute type 1 has an invalid length.
[  253.360619][T12464] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2487'.
[  253.690994][T12477] "syz.5.2493" (12477) uses obsolete ecb(arc4) skcipher
[  253.719677][T12460] loop3: detected capacity change from 0 to 40427
[  253.742089][T12460] F2FS-fs: heap/no_heap options were deprecated
[  254.027099][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2497'.
[  254.037157][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2497'.
[  254.047331][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2497'.
[  254.069702][T12491] tipc: Started in network mode
[  254.073456][T12491] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711
[  254.084079][T12491] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  254.270795][T12503] loop3: detected capacity change from 0 to 256
[  254.275108][T12503] vfat: Unknown parameter 'nnonumtail'
[  254.317452][   T33] audit: type=1804 audit(1755299468.042:45): pid=12503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2504" name="/newroot/595/file0/file1" dev="overlay" ino=3127 res=1 errno=0
[  254.470975][T12514] program syz.3.2508 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  254.481183][ T5846] Bluetooth: hci1: unexpected event for opcode 0x0c6d
[  254.694951][T12535] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2519'.
[  254.698437][T12535] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2519'.
[  254.699456][   T33] audit: type=1326 audit(1755299468.422:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12537 comm="syz.3.2520" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d278ebe9 code=0x7ffc0000
[  254.717396][   T33] audit: type=1326 audit(1755299468.422:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12537 comm="syz.3.2520" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d278ebe9 code=0x7ffc0000
[  254.732311][   T33] audit: type=1326 audit(1755299468.442:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12537 comm="syz.3.2520" exe="/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f48d278ebe9 code=0x7ffc0000
[  254.762755][   T33] audit: type=1326 audit(1755299468.442:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12537 comm="syz.3.2520" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d278ebe9 code=0x7ffc0000
[  254.785552][   T33] audit: type=1326 audit(1755299468.442:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12537 comm="syz.3.2520" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d278ebe9 code=0x7ffc0000
[  254.859012][T12553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2528'.
[  254.866360][T12553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2528'.
[  254.995975][T12566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2534'.
[  254.999697][T12566] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2534'.
[  255.435723][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  255.980478][T12593] overlayfs: failed to clone upperpath
[  256.339994][T12598] overlayfs: failed to clone upperpath
[  256.432822][T12606] netlink: 'syz.3.2551': attribute type 83 has an invalid length.
[  258.228563][T12641] loop3: detected capacity change from 0 to 131072
[  258.272431][T12641] F2FS-fs (loop3): QUOTA feature is enabled, so ignore qf_name
[  258.536877][T12641] F2FS-fs (loop3): write access unavailable, skipping recovery
[  258.539592][T12641] F2FS-fs (loop3): Mounted with checkpoint version = 1b41e955
[  259.471445][T12677] loop3: detected capacity change from 0 to 2048
[  259.811479][T12699] __nla_validate_parse: 1 callbacks suppressed
[  259.811493][T12699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2592'.
[  259.818946][T12699] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  260.218803][T12720] fuse: Bad value for 'fd'
[  260.315866][T12726] netlink: 'syz.3.2605': attribute type 11 has an invalid length.
[  260.408363][T12732] netlink: 'syz.5.2608': attribute type 39 has an invalid length.
[  260.976406][T12765] netlink: 212296 bytes leftover after parsing attributes in process `syz.3.2623'.
[  261.757569][T12789] 8021q: adding VLAN 0 to HW filter on device bond1
[  261.764965][T12789] bond0: (slave bond1): Enslaving as an active interface with an up link
[  262.052466][ T6682] usb 4-1: new low-speed USB device number 29 using dummy_hcd
[  262.205318][ T6682] usb 4-1: config 0 has an invalid interface number: 153 but max is 0
[  262.208830][ T6682] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  262.214074][ T6682] usb 4-1: config 0 has no interface number 0
[  262.216826][ T6682] usb 4-1: config 0 interface 153 has no altsetting 0
[  262.224544][ T6682] usb 4-1: string descriptor 0 read error: -22
[  262.226980][ T6682] usb 4-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=ea.83
[  262.230703][ T6682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.239334][ T6682] usb 4-1: config 0 descriptor??
[  262.244538][ T6682] uvcvideo 4-1:0.153: probe with driver uvcvideo failed with error -22
[  262.449163][ T6682] usb 4-1: USB disconnect, device number 29
[  263.311867][T12821] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2646'.
[  263.791874][T12834] loop3: detected capacity change from 0 to 512
[  263.811005][T12834] EXT4-fs (loop3): write access unavailable, skipping orphan cleanup
[  263.832914][T12834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  263.880045][ T7224] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.490330][T12850] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[  264.496656][T12850] netdevsim netdevsim1 : left promiscuous mode
[  264.498968][T12850] netdevsim netdevsim1 : left allmulticast mode
[  264.605072][T12854] 9pnet_fd: Insufficient options for proto=fd
[  264.788208][T12860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2662'.
[  264.915517][T12874] loop3: detected capacity change from 0 to 2048
[  264.923444][ T6711] udevd[6711]: incorrect nilfs2 checksum on /dev/loop3
[  265.056789][T12890] openvswitch: netlink: Key 4 has unexpected len 0 expected 12
[  266.130009][T12931] netlink: 'syz.3.2697': attribute type 2 has an invalid length.
[  266.360705][ T5846] Bluetooth: Wrong link type (-57)
[  266.566840][T12946] loop3: detected capacity change from 0 to 40427
[  267.232361][T12977] loop3: detected capacity change from 0 to 32768
[  268.102163][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2739'.
[  268.106682][T13019] openvswitch: netlink: Invalid MD length 0 for MD type 0
[  268.109773][T13019] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  268.286230][T13025] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  268.604535][T10133] usb 4-1: new full-speed USB device number 30 using dummy_hcd
[  268.770578][T10133] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  268.774596][T10133] usb 4-1: config 0 interface 0 has no altsetting 0
[  268.777184][T10133] usb 4-1: New USB device found, idVendor=0471, idProduct=2088, bcdDevice=c6.66
[  268.781619][T10133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.794302][T10133] usb 4-1: config 0 descriptor??
[  268.802260][T12992] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  269.017055][T13056] openvswitch: netlink: IPv4 frag type 32 is out of range max 2
[  269.047329][T10133] usb 4-1: string descriptor 0 read error: -71
[  269.065300][T10133] usb 4-1: USB disconnect, device number 30
[  270.229952][T13100] fuse: Bad value for 'fd'
[  270.325698][T13106] xt_socket: unknown flags 0x50
[  270.641595][T13124] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2787'.
[  272.322748][T13168] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2807'.
[  272.605877][T13196] openvswitch: netlink: IPv4 tun info is not correct
[  272.912703][T13216] overlayfs: failed to clone upperpath
[  273.074841][  T973] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  273.211164][T13240] ip6erspan0: entered promiscuous mode
[  273.244486][  T973] usb 4-1: Using ep0 maxpacket: 16
[  273.251236][  T973] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  273.256777][  T973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  273.266500][  T973] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  273.270392][  T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.275230][  T973] usb 4-1: Product: syz
[  273.277771][  T973] usb 4-1: Manufacturer: syz
[  273.283968][  T973] usb 4-1: SerialNumber: syz
[  273.294967][  T973] usb 4-1: config 0 descriptor??
[  273.301496][  T973] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  273.305931][  T973] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  274.067654][  T973] em28xx 4-1:0.0: chip ID is em2750
[  274.272608][  T973] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  274.283212][  T973] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  274.287781][  T973] em28xx 4-1:0.0: No AC97 audio processor
[  274.301491][  T973] usb 4-1: USB disconnect, device number 31
[  274.308616][  T973] em28xx 4-1:0.0: Disconnecting em28xx
[  274.333967][  T973] em28xx 4-1:0.0: Freeing device
[  274.431010][T13259] netlink: 'syz.5.2850': attribute type 7 has an invalid length.
[  274.438220][T13259] : entered promiscuous mode
[  274.481826][T13261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2851'.
[  275.134401][T13289] loop3: detected capacity change from 0 to 512
[  275.194920][T13293] netlink: 'syz.1.2867': attribute type 1 has an invalid length.
[  275.197705][ T5846] Bluetooth: hci2: command tx timeout
[  275.197973][T13293] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2867'.
[  275.289683][T13297] loop3: detected capacity change from 0 to 4096
[  275.325693][T13300] loop3: detected capacity change from 0 to 164
[  275.407467][T13303] loop3: detected capacity change from 0 to 256
[  275.628708][T13308] loop3: detected capacity change from 0 to 512
[  277.066504][T13358] trusted_key: encrypted_key: key user:syz not found
[  277.424117][  T973] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  277.585498][  T973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  277.588765][  T973] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  277.592769][  T973] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  277.604115][  T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.648243][  T973] usb 4-1: config 0 descriptor??
[  277.889192][T13379] netlink: 384 bytes leftover after parsing attributes in process `syz.5.2902'.
[  277.893442][T13379] netlink: 'syz.5.2902': attribute type 2 has an invalid length.
[  278.208574][  T973] kovaplus 0003:1E7D:2D50.000E: unknown main item tag 0x0
[  278.211485][  T973] kovaplus 0003:1E7D:2D50.000E: unknown main item tag 0x0
[  278.213894][  T973] kovaplus 0003:1E7D:2D50.000E: unknown main item tag 0x0
[  278.216903][  T973] kovaplus 0003:1E7D:2D50.000E: unknown main item tag 0x0
[  278.219894][  T973] kovaplus 0003:1E7D:2D50.000E: unknown main item tag 0x0
[  278.223879][  T973] kovaplus 0003:1E7D:2D50.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0
[  278.939658][T13398] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  278.949255][T13398] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  279.390526][  T973] kovaplus 0003:1E7D:2D50.000E: couldn't init struct kovaplus_device
[  279.393203][  T973] kovaplus 0003:1E7D:2D50.000E: couldn't install mouse
[  279.398413][  T973] kovaplus 0003:1E7D:2D50.000E: probe with driver kovaplus failed with error -71
[  279.402837][  T973] usb 4-1: USB disconnect, device number 32
[  279.620481][T13414] bond0: (slave bond1): Error -95 calling ndo_bpf
[  280.148132][T13464] bridge_slave_0: default FDB implementation only supports local addresses
[  280.329890][T13486] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2954'.
[  281.817275][T13538] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2976'.
[  282.298937][T13551] overlayfs: failed to clone upperpath
[  282.695506][T13560] loop3: detected capacity change from 0 to 4096
[  282.996264][T13578] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[  283.001589][T13578] overlayfs: overlapping lowerdir path
[  283.441225][T13615] loop3: detected capacity change from 0 to 512
[  283.643448][T13625] RDS: rds_bind could not find a transport for 0:0:4::1, load rds_tcp or rds_rdma?
[  283.716130][T13631] netlink: 'syz.3.3018': attribute type 11 has an invalid length.
[  283.726910][T13631] netlink: 149476 bytes leftover after parsing attributes in process `syz.3.3018'.
[  283.771046][T13628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  283.938330][T13647] loop3: detected capacity change from 0 to 2048
[  284.001620][T13651] netlink: 'syz.3.3030': attribute type 10 has an invalid length.
[  284.004231][T13651] lo: entered promiscuous mode
[  284.013356][T13651] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  284.054623][T13657] loop3: detected capacity change from 0 to 1024
[  285.889670][T13714] netlink: 'syz.5.3058': attribute type 10 has an invalid length.
[  285.902149][T13714] team0: Device ipvlan1 failed to register rx_handler
[  286.099702][T13730] netlink: 'syz.5.3065': attribute type 1 has an invalid length.
[  286.144069][T13732] loop3: detected capacity change from 0 to 1024
[  288.090594][T13801] netlink: 'syz.5.3097': attribute type 21 has an invalid length.
[  288.097891][T13801] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3097'.
[  288.102155][T13801] netlink: 'syz.5.3097': attribute type 4 has an invalid length.
[  288.107711][T13801] netlink: 'syz.5.3097': attribute type 5 has an invalid length.
[  288.111595][T13801] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3097'.
[  288.239353][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  288.451674][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3109'.
[  288.497771][T13830] netlink: 'syz.3.3111': attribute type 5 has an invalid length.
[  288.920416][   T33] audit: type=1326 audit(1755299502.638:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13857 comm="syz.1.3125" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01d58ebe9 code=0x7ffc0000
[  288.935493][   T33] audit: type=1326 audit(1755299502.638:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13857 comm="syz.1.3125" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01d58ebe9 code=0x7ffc0000
[  288.955350][   T33] audit: type=1326 audit(1755299502.648:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13857 comm="syz.1.3125" exe="/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fb01d58ebe9 code=0x7ffc0000
[  288.965510][   T33] audit: type=1326 audit(1755299502.648:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13857 comm="syz.1.3125" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01d58ebe9 code=0x7ffc0000
[  288.973769][   T33] audit: type=1326 audit(1755299502.648:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13857 comm="syz.1.3125" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01d58ebe9 code=0x7ffc0000
[  289.008601][T13862] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  289.375519][T13875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3130'.
[  289.378794][T13875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3130'.
[  289.670501][T13877] netlink: 'syz.5.3133': attribute type 2 has an invalid length.
[  289.674458][T13877] netlink: 'syz.5.3133': attribute type 8 has an invalid length.
[  289.679031][T13877] netlink: 1148 bytes leftover after parsing attributes in process `syz.5.3133'.
[  290.079511][T13893] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3141'.
[  290.166614][   T51] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  290.219832][T13911] TCP: TCP_TX_DELAY enabled
[  290.259744][T13917] netlink: 'syz.1.3152': attribute type 10 has an invalid length.
[  290.262441][T13917] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3152'.
[  290.266153][T13917] dummy0: entered promiscuous mode
[  290.268311][T13917] bridge0: port 3(dummy0) entered blocking state
[  290.270814][T13917] bridge0: port 3(dummy0) entered disabled state
[  290.273116][T13917] dummy0: entered allmulticast mode
[  290.325525][   T51] usb 4-1: Using ep0 maxpacket: 16
[  290.333438][   T51] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  290.342375][   T51] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  290.354031][   T51] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  290.358070][   T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.360886][   T51] usb 4-1: Product: syz
[  290.362743][   T51] usb 4-1: Manufacturer: syz
[  290.364440][   T51] usb 4-1: SerialNumber: syz
[  290.951954][   T51] usb 4-1: 0:1 : does not exist
[  290.965776][   T51] usb 4-1: USB disconnect, device number 33
[  290.984949][ T6711] udevd[6711]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  291.369260][T13952] loop3: detected capacity change from 0 to 32768
[  291.495031][ T5846] Bluetooth: hci2: unexpected event for opcode 0x2062
[  291.661733][T13970] loop3: detected capacity change from 0 to 1024
[  291.664996][T13970] EXT4-fs: Ignoring removed nomblk_io_submit option
[  291.704045][T13972] loop3: detected capacity change from 0 to 16
[  292.130988][T13990] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3186'.
[  292.135829][T13990] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3186'.
[  292.241547][T13998] netlink: 'syz.5.3190': attribute type 29 has an invalid length.
[  292.249419][T13998] netlink: 'syz.5.3190': attribute type 29 has an invalid length.
[  292.471840][T14018] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  292.653810][T14027] loop3: detected capacity change from 0 to 16384
[  294.014606][ T5846] Bluetooth: hci0: unexpected event for opcode 0x204e
[  294.501914][T14092] Invalid ELF header magic: != ELF
[  294.586615][  T973] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  294.736332][  T973] usb 4-1: Using ep0 maxpacket: 8
[  294.740439][  T973] usb 4-1: config 0 has an invalid interface number: 130 but max is 0
[  294.743561][  T973] usb 4-1: config 0 has no interface number 0
[  294.750005][  T973] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56
[  294.753165][  T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.757623][  T973] usb 4-1: Product: syz
[  294.759384][  T973] usb 4-1: Manufacturer: syz
[  294.761400][  T973] usb 4-1: SerialNumber: syz
[  294.769751][  T973] usb 4-1: config 0 descriptor??
[  294.786501][  T973] as10x_usb: device has been detected
[  294.789421][  T973] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e))
[  294.809273][  T973] usb 4-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))...
[  294.834350][  T973] as10x_usb: error during firmware upload part1
[  294.837730][  T973] Registered device PCTV Systems picoStick (74e)
[  294.910859][ T5846] Bluetooth: hci1: unexpected event for opcode 0x0c1b
[  294.982848][  T973] usb 4-1: USB disconnect, device number 34
[  295.008381][  T973] Unregistered device PCTV Systems picoStick (74e)
[  295.010369][  T973] as10x_usb: device has been disconnected
[  295.521850][ T5846] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  295.525569][ T5846] Bluetooth: hci2: Injecting HCI hardware error event
[  295.532510][   T54] Bluetooth: hci2: hardware error 0x00
[  296.426046][T14158] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1136)
[  296.432397][T14158] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  296.458088][T14160] veth0: entered promiscuous mode
[  296.460394][T14160] __nla_validate_parse: 4 callbacks suppressed
[  296.460412][T14160] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3259'.
[  296.610347][T14165] loop3: detected capacity change from 0 to 4096
[  297.676568][   T54] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  297.734844][T14213] loop3: detected capacity change from 0 to 512
[  298.048758][T14225] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3291'.
[  299.387776][T10133] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  299.561279][T10133] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  299.565716][T10133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.573750][T10133] usb 4-1: config 0 descriptor??
[  299.583370][T10133] cp210x 4-1:0.0: cp210x converter detected
[  299.723366][T14276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3313'.
[  300.020196][T10133] usb 4-1: cp210x converter now attached to ttyUSB0
[  300.027516][T10133] usb 4-1: USB disconnect, device number 35
[  300.033168][T10133] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  300.037032][T10133] cp210x 4-1:0.0: device disconnected
[  302.208374][T14330] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3334'.
[  302.212148][T14330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3334'.
[  302.553581][T14343] netlink: 'syz.5.3340': attribute type 12 has an invalid length.
[  302.561204][T14343] netlink: 'syz.5.3340': attribute type 29 has an invalid length.
[  302.565688][T14343] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3340'.
[  302.652924][T14349] netlink: 'syz.5.3343': attribute type 3 has an invalid length.
[  303.025439][T14358] loop3: detected capacity change from 0 to 4096
[  304.784571][T14406] netlink: 'syz.5.3366': attribute type 12 has an invalid length.
[  304.788464][T14406] netlink: 120 bytes leftover after parsing attributes in process `syz.5.3366'.
[  305.139484][T14415] netlink: 'syz.5.3370': attribute type 1 has an invalid length.
[  305.144761][T14415] netlink: 'syz.5.3370': attribute type 2 has an invalid length.
[  305.155125][T14415] netlink: 1172 bytes leftover after parsing attributes in process `syz.5.3370'.
[  305.194400][T14407] loop3: detected capacity change from 0 to 131072
[  305.849895][T14430] Invalid ELF header len 8
[  305.911260][T14434] loop3: detected capacity change from 0 to 64
[  306.833687][T14494] 2g,{: renamed from lo (while UP)
[  306.843742][   T54] Bluetooth: hci1: SCO packet for unknown connection handle 201
[  308.000985][T14524] @: renamed from vlan0 (while UP)
[  308.030626][T14526] kAFS: No cell specified
[  308.624365][T14534] syz.5.3421 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  309.281202][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  309.339654][T14553] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  309.484238][T14566] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3435'.
[  309.535216][   T33] audit: type=1326 audit(1755299523.256:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.3.3437" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d278ebe9 code=0x7ffc0000
[  309.544798][   T33] audit: type=1326 audit(1755299523.266:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.3.3437" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d278ebe9 code=0x7ffc0000
[  309.556514][   T33] audit: type=1326 audit(1755299523.276:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.3.3437" exe="/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f48d278ebe9 code=0x7ffc0000
[  309.573466][   T33] audit: type=1326 audit(1755299523.276:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.3.3437" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d278ebe9 code=0x7ffc0000
[  309.586084][   T33] audit: type=1326 audit(1755299523.276:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14569 comm="syz.3.3437" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48d278ebe9 code=0x7ffc0000
[  309.654714][T14578] loop3: detected capacity change from 0 to 2048
[  309.726848][T14582] sctp: [Deprecated]: syz.3.3443 (pid 14582) Use of int in maxseg socket option.
[  309.726848][T14582] Use struct sctp_assoc_value instead
[  309.825692][T14590] loop3: detected capacity change from 0 to 16
[  309.835117][T14590] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  310.562315][T14648] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad)
[  310.564840][T14648] PKCS7: Only support pkcs7_signedData type
[  310.666847][T14654] netlink: 51 bytes leftover after parsing attributes in process `syz.5.3477'.
[  311.497984][ T5890] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  311.648007][ T5890] usb 4-1: Using ep0 maxpacket: 8
[  311.652245][ T5890] usb 4-1: config 0 has an invalid interface number: 200 but max is 0
[  311.656016][ T5890] usb 4-1: config 0 has no interface number 0
[  311.659510][ T5890] usb 4-1: config 0 interface 200 has no altsetting 0
[  311.664855][ T5890] usb 4-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[  311.674225][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.677664][ T5890] usb 4-1: Product: syz
[  311.680400][ T5890] usb 4-1: Manufacturer: syz
[  311.682435][ T5890] usb 4-1: SerialNumber: syz
[  311.689980][ T5890] usb 4-1: config 0 descriptor??
[  311.912435][ T5890] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.200/input/input18
[  311.923161][ T5890] usb 4-1: USB disconnect, device number 36
[  311.983219][T14681] overlayfs: failed to clone upperpath
[  312.858316][  T973] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  313.010325][  T973] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  313.013717][  T973] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  313.025072][  T973] usb 4-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config
[  313.035089][  T973] usb 4-1: config 220 has no interface number 2
[  313.037180][  T973] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  313.044096][  T973] usb 4-1: config 220 interface 0 has no altsetting 0
[  313.047021][  T973] usb 4-1: config 220 interface 76 has no altsetting 0
[  313.050317][  T973] usb 4-1: config 220 interface 1 has no altsetting 0
[  313.055260][  T973] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  313.060176][  T973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.068241][  T973] usb 4-1: Product: syz
[  313.069914][  T973] usb 4-1: Manufacturer: syz
[  313.071605][  T973] usb 4-1: SerialNumber: syz
[  313.304692][  T973] usb 4-1: selecting invalid altsetting 0
[  313.307481][  T973] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  313.319118][  T973] usb 4-1: No valid video chain found.
[  313.355785][  T973] usb 4-1: selecting invalid altsetting 0
[  313.365024][  T973] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[  313.379678][  T973] usb 4-1: USB disconnect, device number 37
[  314.026322][T14769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3530'.
[  314.465508][T14780] loop3: detected capacity change from 0 to 32768
[  314.523251][T14790] sctp: Trying to GSO but underlying device doesn't support it.
[  314.575746][T10133] IPVS: starting estimator thread 0...
[  314.678408][T14795] IPVS: using max 40 ests per chain, 96000 per kthread
[  315.766158][T14814] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check.
[  316.811169][ T5890] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  316.882161][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  316.969974][ T5890] usb 4-1: Using ep0 maxpacket: 16
[  316.985788][ T5890] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  316.997652][ T5890] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  317.003332][ T5890] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  317.007499][ T5890] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  317.018477][ T5890] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  317.022323][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  317.025909][ T5890] usb 4-1: SerialNumber: syz
[  317.034880][ T5890] hub 4-1:1.0: bad descriptor, ignoring hub
[  317.037466][ T5890] hub 4-1:1.0: probe with driver hub failed with error -5
[  317.042027][ T5890] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  317.137266][T14860] xt_socket: unknown flags 0xd0
[  317.445305][T14835] raw-gadget.0 gadget.3: fail, usb_ep_set_wedge returned -11
[  317.569255][ T5890] usb 4-1: USB disconnect, device number 38
[  317.883486][T14894] overlayfs: failed to clone lowerpath
[  318.671810][   T54] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  318.768891][ T5890] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  318.962045][ T5890] usb 4-1: Using ep0 maxpacket: 16
[  318.966013][ T5890] usb 4-1: descriptor type invalid, skip
[  318.968447][ T5890] usb 4-1: descriptor type invalid, skip
[  318.978324][ T5890] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  318.985657][ T5890] usb 4-1: config 0 has no interfaces?
[  318.990747][ T5890] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  318.993561][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.006983][ T5890] usb 4-1: Product: syz
[  319.008513][ T5890] usb 4-1: Manufacturer: syz
[  319.019437][ T5890] usb 4-1: SerialNumber: syz
[  319.028016][ T5890] usb 4-1: config 0 descriptor??
[  319.059552][T14939] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3608'.
[  319.236243][ T5890] usb 4-1: USB disconnect, device number 39
[  319.256801][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3617'.
[  319.262566][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3617'.
[  319.266422][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3617'.
[  319.922984][T14981] loop3: detected capacity change from 0 to 1024
[  320.345232][T14998] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3636'.
[  320.714011][T15008] bond0: Removing last ns target with arp_interval on
[  320.715147][   T13] bond0: (slave bond_slave_0): interface is now down
[  320.723272][   T13] bond0: (slave bond_slave_1): interface is now down
[  320.726547][   T13] bond0: (slave bond1): interface is now down
[  320.735763][   T13] bond0: now running without any active interface!
[  320.933229][T15016] loop3: detected capacity change from 0 to 256
[  321.154459][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3650'.
[  321.163756][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3650'.
[  321.903796][T15051] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  322.397054][   T33] audit: type=1326 audit(1755299536.114:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15091 comm="syz.1.3681" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01d58ebe9 code=0x7ffc0000
[  322.406315][   T33] audit: type=1326 audit(1755299536.124:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15091 comm="syz.1.3681" exe="/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fb01d58ebe9 code=0x7ffc0000
[  322.414055][   T33] audit: type=1326 audit(1755299536.124:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15091 comm="syz.1.3681" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01d58ebe9 code=0x7ffc0000
[  322.424740][   T33] audit: type=1326 audit(1755299536.124:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15091 comm="syz.1.3681" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb01d58ebe9 code=0x7ffc0000
[  322.951592][T15126] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  323.038973][T15133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3701'.
[  323.049828][T15133] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3701'.
[  324.854292][T15166] syz_tun (unregistering): left allmulticast mode
[  324.888706][T15172] loop3: detected capacity change from 0 to 128
[  325.215003][T15193] loop3: detected capacity change from 0 to 512
[  325.595795][T15205] loop3: detected capacity change from 0 to 32768
[  325.609960][T15205] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3731 (15205)
[  325.615508][T15205] BTRFS error: failed to open device for path /dev/loop3 with flags 0x23: -13
[  325.678885][  T792] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  325.692524][  T792] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  326.244328][T15238] loop3: detected capacity change from 0 to 32768
[  326.390900][T15243] veth5: entered allmulticast mode
[  326.393226][T15245] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  326.484418][T15252] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3751'.
[  327.147982][T15293] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3768'.
[  327.152128][T15293] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3768'.
[  327.517386][T15300] loop3: detected capacity change from 0 to 32768
[  327.819701][T15338] netlink: 'syz.1.3789': attribute type 1 has an invalid length.
[  327.830109][T15338] netlink: 'syz.1.3789': attribute type 1 has an invalid length.
[  327.833291][T15338] netlink: 'syz.1.3789': attribute type 1 has an invalid length.
[  327.836405][T15338] netlink: 'syz.1.3789': attribute type 1 has an invalid length.
[  327.839556][T15338] netlink: 'syz.1.3789': attribute type 1 has an invalid length.
[  327.860245][T15338] netlink: 'syz.1.3789': attribute type 1 has an invalid length.
[  327.863842][T15338] netlink: 'syz.1.3789': attribute type 1 has an invalid length.
[  327.867087][T15338] netlink: 'syz.1.3789': attribute type 1 has an invalid length.
[  327.872483][T15338] netlink: 'syz.1.3789': attribute type 1 has an invalid length.
[  327.876391][T15338] netlink: 'syz.1.3789': attribute type 1 has an invalid length.
[  328.044729][T15353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3795'.
[  328.490575][T15369] loop3: detected capacity change from 0 to 32768
[  328.530950][T15369] ocfs2: Readonly device (7,3) detected. Cluster services will not be used for this mount. Recovery will be skipped.
[  328.550872][T15369] ocfs2: Mounting device (7,3) on (node local, slot 65535) with writeback data mode.
[  328.575443][ T7224] INFO: trying to register non-static key.
[  328.577950][ T7224] The code is fine but needs lockdep annotation, or maybe
[  328.581247][ T7224] you didn't initialize this object before use?
[  328.584100][ T7224] turning off the locking correctness validator.
[  328.586661][ T7224] CPU: 1 UID: 0 PID: 7224 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  328.586677][ T7224] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  328.586684][ T7224] Call Trace:
[  328.586689][ T7224]  <TASK>
[  328.586694][ T7224]  dump_stack_lvl+0x189/0x250
[  328.586711][ T7224]  ? rcu_is_watching+0x15/0xb0
[  328.586724][ T7224]  ? __pfx_dump_stack_lvl+0x10/0x10
[  328.586735][ T7224]  ? __pfx__printk+0x10/0x10
[  328.586751][ T7224]  ? __is_module_percpu_address+0x39b/0x3f0
[  328.586763][ T7224]  ? is_module_address+0x17/0xf0
[  328.586777][ T7224]  assign_lock_key+0x133/0x150
[  328.586788][ T7224]  register_lock_class+0x105/0x320
[  328.586805][ T7224]  __lock_acquire+0x99/0xd20
[  328.586820][ T7224]  ? ktime_get+0x3e/0x1f0
[  328.586833][ T7224]  ? ocfs2_mark_lockres_freeing+0x125/0x580
[  328.586845][ T7224]  lock_acquire+0x120/0x360
[  328.586859][ T7224]  ? ocfs2_mark_lockres_freeing+0x125/0x580
[  328.586874][ T7224]  _raw_spin_lock_irqsave+0xa7/0xf0
[  328.586887][ T7224]  ? ocfs2_mark_lockres_freeing+0x125/0x580
[  328.586898][ T7224]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  328.586911][ T7224]  ? ktime_get+0x1cb/0x1f0
[  328.586922][ T7224]  ocfs2_mark_lockres_freeing+0x125/0x580
[  328.586935][ T7224]  ? __pfx_ocfs2_mark_lockres_freeing+0x10/0x10
[  328.586952][ T7224]  ? ocfs2_journal_shutdown+0x64b/0xaf0
[  328.586967][ T7224]  ? __pfx_ocfs2_journal_shutdown+0x10/0x10
[  328.586980][ T7224]  ? kfree+0x18e/0x440
[  328.586995][ T7224]  ocfs2_dlm_shutdown+0x3a/0x240
[  328.587008][ T7224]  ocfs2_dismount_volume+0x46a/0x8d0
[  328.587025][ T7224]  ? __pfx_ocfs2_dismount_volume+0x10/0x10
[  328.587040][ T7224]  ? __pfx_evict_inodes+0x10/0x10
[  328.587058][ T7224]  ? __pfx_ocfs2_put_super+0x10/0x10
[  328.587073][ T7224]  generic_shutdown_super+0x135/0x2c0
[  328.587086][ T7224]  kill_block_super+0x44/0x90
[  328.587100][ T7224]  deactivate_locked_super+0xbc/0x130
[  328.587112][ T7224]  cleanup_mnt+0x425/0x4c0
[  328.587130][ T7224]  ? lockdep_hardirqs_on+0x9c/0x150
[  328.587144][ T7224]  task_work_run+0x1d4/0x260
[  328.587159][ T7224]  ? __pfx_task_work_run+0x10/0x10
[  328.587172][ T7224]  ? __x64_sys_umount+0x122/0x160
[  328.587186][ T7224]  ? exit_to_user_mode_loop+0x40/0x110
[  328.587202][ T7224]  exit_to_user_mode_loop+0xec/0x110
[  328.587216][ T7224]  do_syscall_64+0x2bd/0x3b0
[  328.587230][ T7224]  ? lockdep_hardirqs_on+0x9c/0x150
[  328.587243][ T7224]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.587254][ T7224]  ? exc_page_fault+0x9f/0xf0
[  328.587267][ T7224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.587277][ T7224] RIP: 0033:0x7f48d278ff17
[  328.587288][ T7224] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  328.587298][ T7224] RSP: 002b:00007fff99bdc3d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  328.587311][ T7224] RAX: 0000000000000000 RBX: 00007f48d2811c05 RCX: 00007f48d278ff17
[  328.587318][ T7224] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff99bdc490
[  328.587325][ T7224] RBP: 00007fff99bdc490 R08: 0000000000000000 R09: 0000000000000000
[  328.587331][ T7224] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff99bdd520
[  328.587353][ T7224] R13: 00007f48d2811c05 R14: 00000000000502d0 R15: 00007fff99bdd560
[  328.587365][ T7224]  </TASK>
[  328.779786][ T7224] ocfs2: Unmounting device (7,3) on (node local)
[  328.783203][ T7224] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI
[  328.788082][ T7224] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[  328.791481][ T7224] CPU: 0 UID: 0 PID: 7224 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  328.796655][ T7224] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  328.800637][ T7224] RIP: 0010:ocfs2_evict_inode+0x2d05/0x40e0
[  328.803012][ T7224] Code: 02 00 00 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 4c e2 83 fe 4d 01 f4 48 8b 1b 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 2c e2 83 fe 48 8b 3b 49 81 c7 88
[  328.810798][ T7224] RSP: 0018:ffffc9000308f340 EFLAGS: 00010202
[  328.813273][ T7224] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff8881082c1cc0
[  328.816517][ T7224] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  328.819792][ T7224] RBP: ffffc9000308fa70 R08: ffff888123724e77 R09: 1ffff110246e49ce
[  328.823116][ T7224] R10: dffffc0000000000 R11: ffffed10246e49cf R12: fffff52000611e78
[  328.826324][ T7224] R13: ffff888123725120 R14: dffffc0000000000 R15: ffff8881237250f8
[  328.829773][ T7224] FS:  000055558adeb500(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  328.833494][ T7224] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  328.836287][ T7224] CR2: 00007f8c6dc3cfc8 CR3: 000000010ec1e000 CR4: 00000000000006f0
[  328.839566][ T7224] Call Trace:
[  328.841030][ T7224]  <TASK>
[  328.842333][ T7224]  ? __pfx_ocfs2_evict_inode+0x10/0x10
[  328.844686][ T7224]  ? stack_depot_save_flags+0x41b/0x860
[  328.847061][ T7224]  ? kasan_save_stack+0x4d/0x60
[  328.849183][ T7224]  ? kasan_save_stack+0x3e/0x60
[  328.851274][ T7224]  ? kasan_record_aux_stack+0xbd/0xd0
[  328.853550][ T7224]  ? call_rcu+0x157/0x9c0
[  328.855467][ T7224]  ? __schedule+0x17a0/0x4cc0
[  328.857502][ T7224]  ? preempt_schedule_common+0x83/0xd0
[  328.859852][ T7224]  ? preempt_schedule+0xae/0xc0
[  328.861831][ T7224]  ? preempt_schedule_thunk+0x16/0x30
[  328.864057][ T7224]  ? try_to_wake_up+0x82b/0x12b0
[  328.866117][ T7224]  ? kthread_stop+0x188/0x5c0
[  328.868092][ T7224]  ? destroy_workqueue+0x134/0xc70
[  328.870270][ T7224]  ? ocfs2_delete_osb+0x49/0x170
[  328.872316][ T7224]  ? ocfs2_dismount_volume+0x57a/0x8d0
[  328.874550][ T7224]  ? generic_shutdown_super+0x135/0x2c0
[  328.876756][ T7224]  ? kill_block_super+0x44/0x90
[  328.878765][ T7224]  ? deactivate_locked_super+0xbc/0x130
[  328.881065][ T7224]  ? cleanup_mnt+0x425/0x4c0
[  328.883037][ T7224]  ? task_work_run+0x1d4/0x260
[  328.885012][ T7224]  ? exit_to_user_mode_loop+0xec/0x110
[  328.887213][ T7224]  ? do_syscall_64+0x2bd/0x3b0
[  328.889249][ T7224]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.891807][ T7224]  ? unwind_next_frame+0xa5/0x2390
[  328.894014][ T7224]  ? rcu_is_watching+0x15/0xb0
[  328.896035][ T7224]  ? unwind_next_frame+0xa5/0x2390
[  328.898205][ T7224]  ? unwind_next_frame+0xa5/0x2390
[  328.900397][ T7224]  ? rcu_is_watching+0x15/0xb0
[  328.902413][ T7224]  ? is_bpf_text_address+0x26/0x2b0
[  328.904594][ T7224]  ? rcu_is_watching+0x15/0xb0
[  328.906676][ T7224]  ? rcu_is_watching+0x15/0xb0
[  328.908652][ T7224]  ? lock_release+0x4b/0x3e0
[  328.910523][ T7224]  ? lock_release+0x4b/0x3e0
[  328.912467][ T7224]  ? is_bpf_text_address+0x292/0x2b0
[  328.914705][ T7224]  ? is_bpf_text_address+0x26/0x2b0
[  328.916909][ T7224]  ? do_raw_spin_lock+0x121/0x290
[  328.919035][ T7224]  ? rcu_is_watching+0x15/0xb0
[  328.921102][ T7224]  ? do_raw_spin_unlock+0x4d/0x240
[  328.923254][ T7224]  ? _raw_spin_unlock+0x28/0x50
[  328.925292][ T7224]  ? writeback_single_inode+0x43e/0x6a0
[  328.927561][ T7224]  ? write_inode_now+0x160/0x1d0
[  328.929588][ T7224]  ? __pfx_write_inode_now+0x10/0x10
[  328.931846][ T7224]  ? inode_wait_for_writeback+0xf9/0x290
[  328.934170][ T7224]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  328.936700][ T7224]  ? rcu_is_watching+0x15/0xb0
[  328.938750][ T7224]  ? do_raw_spin_unlock+0x4d/0x240
[  328.940916][ T7224]  ? __pfx_ocfs2_evict_inode+0x10/0x10
[  328.943240][ T7224]  evict+0x504/0x9c0
[  328.944956][ T7224]  ? __pfx_evict+0x10/0x10
[  328.946872][ T7224]  ? do_raw_spin_unlock+0x4d/0x240
[  328.949068][ T7224]  ? _raw_spin_unlock+0x28/0x50
[  328.951163][ T7224]  ? iput+0x6d8/0x9d0
[  328.952860][ T7224]  ocfs2_free_slot_info+0x79/0x260
[  328.954993][ T7224]  ? destroy_workqueue+0x894/0xc70
[  328.957200][ T7224]  ocfs2_delete_osb+0x58/0x170
[  328.959248][ T7224]  ocfs2_dismount_volume+0x57a/0x8d0
[  328.961488][ T7224]  ? __pfx_ocfs2_dismount_volume+0x10/0x10
[  328.963912][ T7224]  ? __pfx_evict_inodes+0x10/0x10
[  328.966036][ T7224]  ? __pfx_ocfs2_put_super+0x10/0x10
[  328.968185][ T7224]  generic_shutdown_super+0x135/0x2c0
[  328.970409][ T7224]  kill_block_super+0x44/0x90
[  328.972446][ T7224]  deactivate_locked_super+0xbc/0x130
[  328.974692][ T7224]  cleanup_mnt+0x425/0x4c0
[  328.976533][ T7224]  ? lockdep_hardirqs_on+0x9c/0x150
[  328.978734][ T7224]  task_work_run+0x1d4/0x260
[  328.980663][ T7224]  ? __pfx_task_work_run+0x10/0x10
[  328.982763][ T7224]  ? __x64_sys_umount+0x122/0x160
[  328.984813][ T7224]  ? exit_to_user_mode_loop+0x40/0x110
[  328.987033][ T7224]  exit_to_user_mode_loop+0xec/0x110
[  328.989250][ T7224]  do_syscall_64+0x2bd/0x3b0
[  328.991180][ T7224]  ? lockdep_hardirqs_on+0x9c/0x150
[  328.993357][ T7224]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.995893][ T7224]  ? exc_page_fault+0x9f/0xf0
[  328.997825][ T7224]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  329.000249][ T7224] RIP: 0033:0x7f48d278ff17
[  329.002094][ T7224] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  329.009700][ T7224] RSP: 002b:00007fff99bdc3d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  329.013148][ T7224] RAX: 0000000000000000 RBX: 00007f48d2811c05 RCX: 00007f48d278ff17
[  329.016325][ T7224] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff99bdc490
[  329.019591][ T7224] RBP: 00007fff99bdc490 R08: 0000000000000000 R09: 0000000000000000
[  329.022928][ T7224] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff99bdd520
[  329.026259][ T7224] R13: 00007f48d2811c05 R14: 00000000000502d0 R15: 00007fff99bdd560
[  329.029441][ T7224]  </TASK>
[  329.030764][ T7224] Modules linked in:
[  329.033680][    C0] hpet: Lost 15 RTC interrupts
[  329.037340][ T7224] ---[ end trace 0000000000000000 ]---
[  329.049033][ T7224] RIP: 0010:ocfs2_evict_inode+0x2d05/0x40e0
[  329.051895][ T7224] Code: 02 00 00 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 4c e2 83 fe 4d 01 f4 48 8b 1b 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 2c e2 83 fe 48 8b 3b 49 81 c7 88
[  329.060551][ T7224] RSP: 0018:ffffc9000308f340 EFLAGS: 00010202
[  329.063832][ T7224] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff8881082c1cc0
[  329.066869][ T7224] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  329.070510][ T7224] RBP: ffffc9000308fa70 R08: ffff888123724e77 R09: 1ffff110246e49ce
[  329.073784][ T7224] R10: dffffc0000000000 R11: ffffed10246e49cf R12: fffff52000611e78
[  329.077031][ T7224] R13: ffff888123725120 R14: dffffc0000000000 R15: ffff8881237250f8
[  329.081886][ T7224] FS:  000055558adeb500(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  329.085665][ T7224] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  329.088457][ T7224] CR2: 00007f8c6dc3cfc8 CR3: 000000010ec1e000 CR4: 00000000000006f0
[  329.092300][ T7224] Kernel panic - not syncing: Fatal exception
[  329.095688][ T7224] Kernel Offset: disabled
[  329.097495][ T7224] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:08:44  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff822c76fa RBX=0000000000140cca RCX=0000000000080000 RDX=ffffc9000fa71000
RSI=000000000007ffff RDI=ffffffff92a68000 RBP=ffffc90007e27428 RSP=ffffc90007e27360
R8 =ffffffff8fa37d37 R9 =0000000000000000 R10=ffffed1008a09800 R11=fffffbfff1f46fa7
R12=fffa80004504d000 R13=dffffc0000000000 R14=1ffffffff1b7ac8d R15=0000000000000000
RIP=ffffffff8b7943bc RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb01e38b6c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c25a1bb CR3=000000011c474000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f8c6ce12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000308f1b0
R8 =ffff8881071d0237 R9 =1ffff11020e3a046 R10=dffffc0000000000 R11=ffffffff854efc10
R12=dffffc0000000000 R13=ffffffff99af98ce R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efc8c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558adeb500 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff99bdbc28 CR3=000000010ec1e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
