last executing test programs:

2m45.505492675s ago: executing program 0 (id=3303):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002340)=ANY=[@ANYBLOB="bf16000000000000b70700000001000048700000000000003ca000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e345c65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e517232586872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000600001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736dd19363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419dfc75c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2ddf267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbe4fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c63fb9450dd03985d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921bd4d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fdf278218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c30600a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86da86b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34ad2e1b2e64af4e37211b524e20f4ae1ba89a32bad2af9030f840f1ba466164f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e90eb1fffffffffffffcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c2615318bf813e788c84409dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5cc98d992f3de7d1cdfb24384b9f10f615c87c441dc970ec896a5af6bf69b50a244bc138a1cae98680bcff6bcb3058c6e0d1cc0da889710f33f5638f805ce602365492282863cc8092b16656dea03cd50182aabbac78a14506dcbf823bec4a5dad14c4d7353b6a55c28321647df3a85bf9fca4e18aeaf4867e6a3dbdd7a5dbe1a52bddae83fc368404a032b75649cf74d7af8e9e3e43fad643ad3e8575a2bb0507531eac5e10b631575f1360803c8a0c2f09db289a5934a4f2f5fe5cfc52b270a4a5fa2a8de62dcaf7ef52f1fd84c55e6a0c5a365a3b4e73c4ac6fc26367f3f6c07b06a0874c039622ba2bd369b105f57099f742a000a36c2f044a5de24604f82a1f197d9a70b5a62f794f57ec02df70d459fedd6125ae41479a2661360a79e175f0add2820018d5985183ee80f681403a7d08e0e2b88d0750c90b7ed5fed6f81ce797f3b60445ce811d2b4e45005a5ea06c1fe927af06433cd3885dc954e698a7a73416c73bfab7773a6e5e14338797ce9148cda4c0bf05fb67915aeb3661e755e4e1a0ceedfe8e91ee5361ff4c7c07b422e1443a6616b6eb3c325d5687644a4c0a1d44d9dfd82896f56b12a2c0f3245116003ad"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

2m45.272550779s ago: executing program 0 (id=3305):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bb00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

2m44.960081956s ago: executing program 0 (id=3307):
syz_mount_image$jffs2(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x808000, &(0x7f0000000300), 0x1, 0x274, &(0x7f0000000340)="$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")

2m44.648162286s ago: executing program 0 (id=3310):
prctl$PR_SET_MM(0x41555856, 0x2, &(0x7f0000ffb000/0x2000)=nil)

2m44.436224079s ago: executing program 0 (id=3312):
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="73ddb78933545c4fb5924889b9d6a42d93307dd7eda8ee3563a96528c5606968104fbf9230291b3e7f545041a1dab3417b410b730500000000000000dbde711b1f8582a144024d"], 0xfd, 0x5a59, &(0x7f0000000c00)="$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")

2m41.973747191s ago: executing program 0 (id=3321):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000071104f000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

2m25.822306834s ago: executing program 32 (id=3321):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000071104f000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

1m14.721460086s ago: executing program 5 (id=3899):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'})

1m14.366617237s ago: executing program 5 (id=3902):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x1c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffff}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)

1m14.179148353s ago: executing program 5 (id=3903):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x190d, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440013030e000a000d000000ba8000001201", 0x2e}], 0x339}, 0x0)

1m13.735308614s ago: executing program 5 (id=3909):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1000806, &(0x7f00000016c0)={[{@iocharset={'iocharset', 0x3d, 'cp1255'}}, {}, {@gid={'gid', 0x3d, 0xee01}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {}, {@errors_continue}, {}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@keep_last_dots}, {@uid={'uid', 0x3d, 0xee01}}, {@gid}], [{@appraise}]}, 0x9, 0x1505, &(0x7f0000000180)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)

1m13.357056524s ago: executing program 5 (id=3914):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f0000000280)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0")
quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x3, 0x1, 0x0, 0x4})

1m12.74538875s ago: executing program 5 (id=3923):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
readv(r0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/14, 0xe}, {&(0x7f00000004c0)=""/26, 0x1a}, {&(0x7f0000003a40)=""/4097, 0x1001}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x4)

1m12.295601868s ago: executing program 33 (id=3923):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
readv(r0, &(0x7f0000000340)=[{&(0x7f0000000480)=""/14, 0xe}, {&(0x7f00000004c0)=""/26, 0x1a}, {&(0x7f0000003a40)=""/4097, 0x1001}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x4)

27.715389355s ago: executing program 6 (id=4367):
r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000180)=@v={0x93, 0x8, 0x100, 0xfe, @generic=0x3, 0x4, 0x7})

27.333038287s ago: executing program 6 (id=4371):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000ff0100000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

26.977315162s ago: executing program 6 (id=4374):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_int(r0, 0x29, 0x48, &(0x7f0000000000)=0xd00, 0x4)

26.75158665s ago: executing program 6 (id=4375):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000300)={[{@part={'part', 0x3d, 0x4}}, {@nls={'nls', 0x3d, 'euc-jp'}}, {@gid}, {@part={'part', 0x3d, 0x4}}, {@creator={'creator', 0x3d, "ddf2bd6c"}}, {@umask={'umask', 0x3d, 0x9}}, {@uid}, {@nodecompose}, {@creator={'creator', 0x3d, "85f19471"}}]}, 0x1, 0x6da, &(0x7f0000000580)="$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")
mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x23010, 0x0)

26.311001763s ago: executing program 6 (id=4377):
syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x0, &(0x7f0000000d80)=ANY=[], 0x3, 0x7c4, &(0x7f0000000040)="$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")
open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0)

25.445571782s ago: executing program 6 (id=4382):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000480)=@overlay={0x3ff, 0x6, 0x4, 0x0, 0x848, {}, {0x2, 0x0, 0x81, 0x6, 0x5, 0x55, "73681921"}, 0x6, 0x3, {}, 0x1})

24.55338492s ago: executing program 34 (id=4382):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000480)=@overlay={0x3ff, 0x6, 0x4, 0x0, 0x848, {}, {0x2, 0x0, 0x81, 0x6, 0x5, 0x55, "73681921"}, 0x6, 0x3, {}, 0x1})

5.880298086s ago: executing program 4 (id=4502):
r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f0000001500)={[{@subvolid}, {@clear_cache}, {@nodatasum}, {@compress}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$eJzs3V9oVFceB/Az+aPxDyY+xV32wX1YWcUFWRF2UdggGF2Whdn1YVnYrFlZxT+7JUgDwb5YS2lBxGCgthSKD33pS0mlUFqqBAsthYogVloUW0teWiiESsGXlpK590xmzvVmxlQbq5+PJHfO/d1z7pnhPsx3zLkTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIIRwcM3Kv+xaPb2urD7dP3bq6LLt507vP3ljaGjLlRAqtf2VvL5n+66/79+95689scPw37JtX1/ZkFnXz7PGkqads/2af/4TQuhOBujMtzs6G/pW0hOEI8UB53XgZv/o5u7BaxN3zmy8eP3QhuJTZ1bPYk9gseTX1fTctTRQ+92RHFFvN1x6laZLNOufXnA/yZMAAO7JpmptU387mr/FrbePpfWkPZC0x5N2fIcw3thYiGzcJWXzXJvWF2meA1lUWFo6z6Sev/71djXtn7STqHEP82w+NI80PWXzHEnqizVPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIfJqx9euvTcy+u3ldWn+8dOHV22/dzp/SdvDA1tuRJCX21/JStXlv+q8w+fLtt57fiRN36zr+ftk515v7jtajg4fBIf/LE3hL0Nlek47JerQqg2F2rN8FKxcLD24M+xAAAAwKPkF7XfHfV2Fge7m9qVWpqs1P5FWVg8cLN/dHP34LWJO2c2Xrx+aMPCx6uWjDdw1/Hq7b65n0pDMI7xNx1vrh4PPVIYZ37piGme/2zmyVsXJn7777L+hfzfN3/+j6+c/A8AAMCPIf+n48yvVf6/+s7zT3UN7n2vrH8h/69tOmUh/8cZx/zfERaW/wEAAOBh9qDz/0BhnPm1yv/fnZ86f/nb46+U9S/k/03t5f+uxmnHnR/FCR/uDWFTq6kDAAAAJeL/u899tBDzevbJQZrXO2ZGe6d6blwtG6+Q/wfay//d9/2ZAQAAAAv1v7F/Hb8wNn6zrF7I/9X28v/SBz5zAAAAoF37Tvz/3PoNIyvL6oX8P9xe/l+eb/OVD1mn9+NfIUz0htAz+2AkK3wQxv9ULwAAAAD3SczpX41u/f7jwel3y44r5P+R+e//H+90ENf/N93/r7D+v6GQ3fVvqxsDAAAA8DgqruePt8fPvrmg7Pv3213/f+uXO3b9d+c/vig7fyH/H2sv/3c2bu/n9/8BAADAAvzcvv/vn4Vx5tfq/v/fDN36et3hZwfL+hfy/3h7+T9uVzQ+van4+jzTG8Ka2Qf53QRfi6c7nBQmuxsK2Quf9Ngde+SFyaUNhZqRpMfve0P49eyDY0lhdSyMJ4WZVXnhbFK4HAv59VAvvJ4UpuKV9sKqfLpp4a1YyBdYTMYVFCvqSyKSHrfLeswW7trjev3kAAAAj5UYnvMs293cDGmUnay0OmB5qwM6Wh3Q2eqAruSA9MCy/WG4uRD3v7jtd7evPPHm06FEIf+fbS//x5diSbYpW/8f4vr//HsN6+v/h2OhLylMxkI1vWNANZ4jC7sn4jn6qnmPmTX1AgAAADzS4ucCnYs8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5g7/6D7KrqA4Cf/f0jm91FHAFJNYqA6ZDNJjFKK1MC1UFxpi4OdZw60UR2g9ssJCZhICnthEA7U5hUVKa1o0NDHUdpkUY6jlK1pEyBcaRTm7ZMxWhl/EFtaxnGSodSm87be8/d+87dm/dCdiFLP58/9p33vufnfT/2nXvvOxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/h38ZWPMb+1f89Py6+PfPuOHDewcuve+jWw8c3bRpw5EQJmYf78jCHYMrui785sBlj+3f+flzp/rvP9Cbl8vjYVnjT2d+55ai1uUhfLEjhO40sHooC/Tk94difSuGQjgtzAWKElODWYm04fDQQAgHw1ygqOr+gRCGSoErjzz4wIFG4o6BEM4NIfSlbXy7L2tjIA2c15sFBtPA9u4s8F/HMkXgS51ZAE5afDMUL/pDE80ZRucvV/P661mwjr240uF1xcRofb4fX7LInSrpTR+YOKmnrVIdi6Ly9jjs3bYE3m2V7Xy7p638RSr/hnJsLtQXOientm65bmZ3fKQzjI111dW0SM/z40/feNWJpJfM6zB2YHRBXofP3vme68+afMuNt24/54m177vg6Ml2s27zLra+kL/mlszzGG30ebIE3n6Vb0krfekKIfzcB7tv6vrtI5+qi1fm/6PHn//Hl3O87WzKHWt9bjibm8dHhmLiqeFsbg4AAABLxlLYa/qjs1/xe6s61zxeV19l/r+yveP/8ZB/PpnPRns4hI2ziZtHQjhz9vEscHds7gMjIbxmNjXRHLgkCRwO4azZxKqiqqREfyyxMgk8OZwHNiaBh2NgIgl8OgZuTwK3xMChJHBVDBxOApfGQJhuHsfPD+fjaDswEAObs414KJ6F8JPh2Fqyrb5VVAUAALBA8tlhT/Pd0rkOJ5shTi8PDbTKEM/Ars3Ql9SQzmCLaVVtDd2tauhsVUMx7n3HH36l5o5WNVdOw+hoznDpK/7w/BVfu+ELoUZl/j9+/Pl/3zwd6agc/w/hitm/MXdnHpkp4psnmjIAAAAAJ2HtG2a+9idnv+nNdfHK/H9je+f/x30iXaXM4dG4G2LbSAjjzYGs2jdXA9lR72V5AAAAAJaC4nh8cSx8Or/NTtFO59PV/BMnmD8e+N84b/5fCpOnb/vBUxvq+luZ/0+0d/7/YPNt1omHYy8+NhJCfynwSOxlIzBrZQx89+LmQD7+h+MGuC1WlZ+YUFR1WyyxOQbGk8DBuhLfKEqc2RzIn6yi8ZuLcUznJUoBAAAAeMHF3QHxuHw8///Ctd/70KaP7/1cXbnK/H/ziZ3/PzsPrpzeP7MshDXdIXSlPwx4dDBbGDAGhjryxFcHs7q60qpuGgzhosbA0qqeyNf/707XGDwykFUVA2e+9rNPn9dIfGoghDXlwGPvvWt2x8juJFA0/qsDIby6Mdq08S/0Z433pI3/QX8IryoFiqo+0B9Co7HetKoH+/LrGKRV/VlfCKeXAkVVb+wLYU8AYImK/0onyw/u2rN325aZmamdi5iI+/AHwtbpmamxq7bPTPbV9Gky6XPTMkY3VcfU2ebYj+ZLFN1z+dhIO+nid4Lj5b7k+/ErJw7m9+N3oZ7Zca7rabq7Ph3y68+pNpEO6cUY8mC5krknsVJ/zN8bloX+63ZN7Ry7Ycvu3TvXZn/bzb4u+xsPM2Xbam26rQbn61sbL492F0N/vtuq6TJXa3Zfs2PNrj17V09fs+Xqqaunrn3D+LrxdevHN7zpwjWNUY1nf1sM9fz5qk6Geuyu6hDavQbU8x3qK7tLlbwQnxoSEhJLLbHl4q/+5b1nfWJZ3cdPZf6/4/jz//ipEz/58/UZ6o7/j8bD/Nnjc4f5N8fAwXaP/4/WHc0vTgxYmQT2xcA+h/kBAAB4aYi7G+PezLhXuuem1WN//MlHnqwrV5n/72vv9/8LtP5/sXT95XXL/K+KJcbr1v9Pl/kv1v/fV7f+f7rMf7H+/8EXYf3/64pAskl+Yv1/AADgpeCFW/+/5fL+6QUCKhlaLu+fXiCgkqHlMv7tXiDghNf/f/tzr+u55iOvviXUqMz/b29v/m/hfgAAADh13HVkQ8eD//o/D9XFK/P/g+3N/1/49f9C3fn/K+sCE3ULA1r/DwAAgCWqbv2/9a/78ebP/WzFD+vKVeb/h9qb/8fTLjqbcsdanxvO1rQL6Zp2Tw0XPxkAAACApaEzjI21u6Jp08qolzz/Nh/PlwI9Xrrsr758zT8+8tb39tfVV5n/H25v/t/0u4xn73zP9WdNvuXG527dfs4Ta993wdG54/8AAADA4ml3vwQAAAAAAAAAAAAAAPDie3rv5Lv++ew7P1MXr/z+P1wx+3jd7//jdf/i7wte3pQ71tp6/b/8/pXvuHfP7JKFjw6HcE45sG3/ttNCfm3+88uBBzatOqOR2J+W+Mp3Lv1BI/H+NPC21S97ppG4KAlsjosknpUG4lUVn1meBOLyin+fBuL2OJQGevPA7y7PxtGRbqsfDWXbqiPdVo8PhTBSChTb6otDWRsd6QDvSALFAD+UBuIAfyUPdKa9undZ1qsYGIpF/2hZ1isAAE5Z8VtgT9g6PTM1Hr/Cx9tXdjffRk1Llt1UrbajzeaP5kuT3XP52Eg76a70u+jctcZ7Ql9jCGsrX1fLWTpmR7kwtbTYdC+vGXKr1d7a/XX2iW663voRDWQjGrtq+8xkT8uBr2+dZV13yyxrK5OdcpbO2U3aRi1t9KWNEbW5bdrocrzfGcbGupJcvxiDo6HJQr0iyuv81b0Kynn2Tb7xb75x7Nihuvoq8//R9ub/feVxPZNfDGBfvLLezSMhnNnmiAAAAIB2fevL/7Ru+yd+55709ort1956weCPLq4rV5n/r2xv/h93jOWHgrO9HYfj9f+L+f9oFrg7NveBkRBeM5uaiCWyC+pfHkuMZ4G74w6TVbHE5onmqvpj4FASeHI4DxxOAg/HQL6X4rMh35XzkeEQNsymrmgusSOWGE0C74yBlUlgLAbGk8DyGNiYBP59eR6YSAJfj4Ew3byt/ny5vSsAAMDzkM+zeprvhnSed6i7VYaOVhkGW2XobJWhr1WGulHE+/fFDD3JySsdpUw9aa0DSS2VDPFi+Cfcr0qG8I3mnGnBStPx/IPifIOO5gz/dtnrv33erlXtX/9/vL35/2Dzbdb6w3H+P3f9vyzwSOzex+Kp4ytj4LsXNwfyHQMPx8nubUVVE3mJfNJ+WyyxMQZWJoEdMbAxCWy+Ig8cPKM5kM+0i8ZvLhqfzkuUAgAAAPCCizsI4m6aOP//0/+++3MH/uHav64rV5n/b2xv/h/bW1Zu7Jai1uUhfLFjrjdFYPVQFoj7MYbiz+NXDIVwWmkHR1FiajAr0Zs0HB4ayH6h3ptWdf9AtsZAvH/lkQcfONBI3DEQwrmlvS9FG9/uy9oYSAPn9WaBwTSwvTsLxD0/ReBLnVkATlqxVzC+oPJTXQqj85eref29VK4Jmg6vsg90nnzz/eZqsfSlD+T7VAsn9rRVqmNRVN4eh73bluK7bdS7rfxFKv+Gcmwu1Bc6J6e2brluZnd8pPxL1opFep7Lv1JtJ70Ar8N9z7+3rfWlHRhPPj7G5y83/+uwI1b37J3vuf6sybfceOv2c55Y+74LjrbdjRrxh8Lv/uTLRsubd7H1hfw1t+Q+TyZ8nizFfwMrPW2NGexTv//V//jp4z+ri1fm/xPtzf+7k9tZz8aNuWskhNeXNu6jcfP/8kj2OVgKZJ+Sp1cD2SH37w3XfnICAADAQit2dxT7C6bz2+yE8HSeXM0/cYL54/6KjfPmb7ffW29+aP8P/+6Or9TFK/P/zcef//cn3XT83/F/Fonj//M61XdF96cP7DupXdGV6lgUjv/P61R/tzn+Py/H/x3/n4/j/y04/j+vU/1pq3xL2uFLVwjh6++/8+33bP+18+rilfn/jvbm/9b/m3/RvmL9v8116//tqFv/b5/1/wAAgEVVs9BcOs+rrN5XyZCu3lfJ0HKBwJZLDFr/74TX/3vrO//3+mOvuGRnqFGZ/+9rb/4fXw7Lyq0vlfX/Vl5RU9XtMbDDwoAAAACciup2EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDievcvPLl8029eOF0X//4ZN3x478Cl931064GjmzZtOBJClrUjC3cMrui68JsDlz22f+fnz53qv/9AX16uJ789uyl3rPW54RAOlh4Ziomnhht35gJXvuPePd2NxKPDIZxTDmzbv+20RuLTwyGcXw48sGnVGY3E/rTEV75z6Q8aifengbetftkzjcRFeaAj7e4nl2fd7Ui7e2B5CCOlQNHdX1/eXFXRxmV5oDNt4zNDWRsxMBSLfnwoayMGZmKJ6f4Q1nSH0JVW9bW+rKqutKq/6Muq6kqr+q2+EC4KIXSnVX2nN6uqOx353/ZmVcXAma/97NPnNRIHe0NYUw489t67NjQSH0oCRePv6g3h1Y2XTNr4fT1Z4z1p43f0hPCqEEJvWuI/u7MSvWmJJ7pDOL0UKBr/YHcIewIvCfHDZ7L84K49e7dtmZmZ2rmIid68rYGwdXpmauyq7TOTfUmf6nSU0sduOn78eI4+feNVjdt7Lh8baSfdnZfrme3yup6mu+sXqvftOtHex34NliuZez4q9cf8vWFZ6L9u19TOsRu27N69c232t93s67K/XXk021ZrF2pbdbYoHz3fbXV+uZI1u6/ZsWbXnr2rp6/ZcvXU1VPXvmF83fi69eMb3nThmsaoxrO/CzHUu44fX4yhvrK7VMkL8QEgISGx1BKdTZ9u46f6P73KF/25jvaEvtkP6Mq0opylY3aUCzHoS6rxrkUadGVKUhnR2srEoZJlXess6yuTibksA1mW2e91lclhuabO2U0a73eGsbHazTLafLe8eX88z+Zt1+P5pms3DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/B87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAsAAAAACPO3DqNnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBSAAAA//+3Rsqd")
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000))

2.740913925s ago: executing program 4 (id=4517):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x4008af25, 0x0)

2.680924006s ago: executing program 7 (id=4383):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x3200c00, &(0x7f0000000340)=ANY=[], 0x3, 0xa8a, &(0x7f0000001880)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)

2.44964698s ago: executing program 1 (id=4520):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000040)={0xa, @capture={0x0, 0x0, {0x7, 0x4}}})

2.150667255s ago: executing program 1 (id=4522):
r0 = socket(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x0)

2.089576771s ago: executing program 2 (id=4523):
syz_emit_ethernet(0x22, &(0x7f0000000280)={@broadcast, @local, @void, {@arp={0x806, @generic={0x30b, 0x88f8, 0x6, 0x0, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, "", @local}}}}, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000100), &(0x7f0000000280)=ANY=[], 0x0, 0x0)

1.913293649s ago: executing program 3 (id=4524):
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='uid_map\x00')
write$tcp_mem(r0, &(0x7f0000000000)={0x400, 0x20, 0x4, 0x20, 0x9}, 0x48)

1.851385674s ago: executing program 2 (id=4525):
setresuid(0x0, 0xee01, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x8, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.848422644s ago: executing program 7 (id=4526):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000004000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000fe000000000000000000000001000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033f4f92e6c"], 0xfc}}, 0x0)

1.819381706s ago: executing program 1 (id=4527):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000100)={0x3, 0x0, 0xfff, 0x0, 0x6, 0xa})

1.635196233s ago: executing program 3 (id=4528):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0c2000003d0007010000000000000000017c0000040000000c00018006001700800a0000e81f02"], 0x200c}}, 0xc000)

1.582990437s ago: executing program 2 (id=4529):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x9c}, {0x6}]}, 0x10)

1.412459227s ago: executing program 7 (id=4530):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'batadv_slave_0\x00', &(0x7f0000000380)=@ethtool_coalesce={0xe, 0x5, 0x8, 0x7ff, 0x5, 0x72af, 0x0, 0x9, 0x0, 0x8, 0x4, 0xffe3, 0x3, 0x5, 0x4, 0x2, 0xe, 0x8, 0x2, 0x5, 0x2, 0xf, 0x8}})

1.380870339s ago: executing program 1 (id=4531):
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x80c406, &(0x7f00000005c0)=ANY=[], 0xff, 0x2bc, &(0x7f0000000180)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0)

1.365447143s ago: executing program 4 (id=4532):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)

1.266432009s ago: executing program 2 (id=4533):
syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$eJzs3AuYj1XXMPC99t43Y5L+TXIY9trr5p8G2yRJDgk5JEmSJDklJCZJEhJDTklDEnKcJIchJIdpTBrn8yHnpMkjTZKE5BT2d+np/Tzv0/O+fe9X3+e93lm/69qXvdz/tf7rnjXX3Pf9v66Z73uOqtu8Xq2mRCT+FPj7P8lCiBghxDAhxA1CiEAIUTGuYtyV4/kUJP+5N2F/rUfTrnUH7Fri+eduPP/cjeefu/H8czeef+7G88/deP65G8+fsdxs+5yiN/LKvYs//8/N+Pr/P0hOuclfbyx3c6//QgrPP3fj+eduPP/cjeefu/H8czee//98Nf+TYzz/3I3nz1hudq0/f+Z1bde1/v5jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZY7nPNXaSHEv+2vdV+MMcYYY4wxxhj76/i817oDxhhjjDHGGGOM/b8HQgoltAhEHpFXxIh8IlZcJ/KL60UBcYOIiBtFnLhJFBQ3i0KisCgiiop4UUwUF0agsIJEKEqIkiIqbhGlxK0iQZQWZURZ4UQ5kShuE+XF7aKCuENUFHeKSuIuUVlUEVVFNXG3qC7uETVETVFL3Ctqizqirqgn7hP1xf2igXhANBQPikbiIdFYPCyaiEdEU/GoaCYeE83F46KFeEK0FK1Ea9FGtP2/yn9Z9BWviH6iv0gWA8RA8aoYJAaLIWKoGCZeE8PF62KEeEOkiJFilHhTjBZviTHibTFWjBPjxTtigpgoJonJYoqYKlLFu2KaeE9MF++LGWKmmCVmizQxR8wVH4h5Yr5YID4UC8VHYpFYLJaIpSJdfCwyxDKRKT4Ry8WnIkusECvFKrFarBFrxTqxXmwQG8UmsVlsEVvFNrFdfCZ2iJ1il9gt9oi9Yp/4XOwXX4gD4kuRLb76L+af/af8XiBAgAQJGjTkgTwQAzEQC7GQH/JDASgAEYhAHMRBQSgIhaAQFIEiEA/xUByKAwICAUEJKAFRiEIpKAUJkABloAw4cJAIiVAebocKUAEqQkWoBJWgMlSBKlANqkF1qA41oAbUglpQG2pDXagL98F9cD80gAbQEBpCI2gEjaExNIEm0BSaQjNoBs2hObSAFtASWkJraA1toS20g3bQHtpDR+gInaATdIbOkARJ0BW6QjfoBt2hO/SAHtATekIv6A294WV4GV6BV6A/1JYDYCAMhEEwCIbAUBgKr8FweB1ehzcgBUbCKHgT3oS3YAycgbEwDsbDeKguJ8IkmAwkp0IqpMI0mAbTYTrMgJkwE2ZDGsyBuTAX5sF8mA8fwkL4CD6CxbAYlkI6pEMGLINMyITlcBayYAWshFWwGtbAalgH62EdbIRNsBG2wBbYBtvgM/gMdsJO2A27YS/shc/hc/gCvoAUyIZsOAgH4RAcgsNwGHIgB47AETgKR+EYHIPjcBxOwEk4BSfhNJyGM3AWzsE5uAAX4CK8GP9ts72lN6QIeYWWWuaReWSMjJGxMlbml/llAVlARmRExsk4WVAWlIVkIVlEFpHxMl4Wl8UlSpQkQ1lClogRQshSspRMkAmyjCwjnXQyUSbK8rK8rCAryIryTllJ3iUryyqyg6smq8nqsqOrIWvKWrKWrC3ryLqynqwn68v6soFsIBvKhrKRbCQby4dlEzkAhsCj8spkmsuR0EKOgpaylWwt28i34EnZTo6B9rKD7CifluNgLHSW7VySfFZ2lZOgm3xeToYXZA85FXrKl2Qv2Vv2kS/LvrK96yf7yxkwQA6Us2GQHCyHyKFyHtSRVyZWV74hU+RIOUq+KZfCW3KMfFuOlePkePmOnCAnyklyspwip8pU+a6cJt+T0+X7coacKWfJ2TJNzpFz5QdynpwvF8gP5UL5kVwkF8slcqlMlx/LDLlMZspP5HL5qcySK+RKuUqulmvkWrlOrpcb5Ea5SW6WW+RWuU1ul5/JHXKn3CV3yz1yr9wnP5f75RfygPxSZsuv5EH5N3lIfi0Py29kjvxWHpHfyaPye3lM/iCPyx/lCXlSnpI/ydPyZ3lGnpXn5Hl5Qf4iL8pL8rL0UihQUimlVaDyqLwqRuVTseo6lV9drwqoG1RE3aji1E2qoLpZFVKFVRFVVMWrYqq4MgqVVaRCVUKVVFF1iyqlblUJqrQqo8oqp8qpRHWbKq9uVxXUHaqiulNVUnepyqqKqqqqqbtVdXWPqqFqqlrqXlVb1VF1VT11n6qv7lcN1AOqoXpQNVIPqcbqYdVEPaKaqkdVM/WYaq4eVy3UE6qlaqVaqzaqrXpStVNPqfaqg+qonlad1DOqs+qiktSzqqt6TnVTz6vu6gXVQ72oeqqXVC/VW/VRl9Rl5VU/1V8lqwFqoHpVDVKD1RA1VA1Tr6nh6nU1Qr2hUtRINUq9qUart9QY9bYaq8ap8eodNUFNVJPUZDVFTVWp6l01Tb2npqv31Qw1U81Ss1WamqOG/FZpwT/lD/jtqvuP+e/9i/wRv777NrVdfaZ2qJ1ql9qt9qi9ap/ap/ar/eqAOqCyVbY6qA6qQ+qQOqwOqxyVo46oI+qoOqqOqWPquDquTqiT6rz6SZ1WP6sz6qw6q86rC+qCuvjb10Bo0FIrrXWg8+i8Okbn07H6Op1fX68L6Bt0RN+o4/RNuqC+WRfShXURXVTH62K6uDYatdWkQ11Cl9RRfYsupW/VCbq0LqPLaqfL6UR925/O/6P+2uq2up1up9vr9rqj7qg76U66s+6sk3SS7qq76m66m+6uu+seuofuqXvqXrqX7qP76L66r+6n++lknawH6lf1ID1YD9FD9TD9mh6uh+sReoRO0Sl6lB6lR+vReoweo8fqsXq8Hq8n6Al6kp6kp+gpOlWn6ml6mp6up+sZeoaepWfpNJ2m5+q5ep6epxfoBXqhXqgX6UV6iV6i03W6ztAZOlNn6uV6uc7SK/QKvUqv0mv0Gr1Or9Mb9Aa9SW/SW/QWnaW36+16h96hd+ldeo/eo/fpfXq/3q8P6AM6W2frg/qgPqQP6cP6sM7ROfqIPqKP6qP6mD424Lg+rk/oE/qUPqVP69P6jD6jz+lz+oK+oC/qi/qyvnzlti+QgQx0oIM8QZ4gJogJYoPYIH+QPygQFAgiQSSIC+KCgsHNQaGgcFAkKBrEB8WC4oEJMLABBWFQIigZRINbglLBrUFCUDooE5QNXFAuSAxuC8oHtwcVgjuCisGdQaXgrqByUCWoGlQL7g6qB/cENYKaQa3g3qB2UCeoG9QL7gvqB/cHDYIHgobBg0Gj4KGgcfBw0CR4JGgaPBo0Cx4LmgePBy2CJ4KWQaugddAmaPuX1vf+TOGnXD/T3ySbAWagedUMMoPNEDPUDDOvmeHmdTPCvGFSzEgzyrxpRpu3zBjzthlrxpnx5h0zwUw0k8xkM8VMNanmXTPNvGemm/fNDDPTzDKzTZqZY+aaD8w8M98sMB+aheYjs8gsNkvMUpNuPjYZZpnJNJ+Y5eZTk2VWmJVmlVlt1py/UQiz3mwwG80ms9lsMVvNNrPdfGZ2mJ1ml9lt9pi9Zp/53Ow3X5gD5kuTbb4yB83fzCHztTlsvjE55ltzxHxnjprvzTHzgzlufjQnzElzyvxkTpufzRlz1pwz580F84u5aC6Zy8Zfubm/cnlHjRrzYB6MwRiMxVjMj/mxABbACEYwDuOwIBbEQlgIi2ARjMd4LI7F8QpCwhJYAqMYxVJYChMwActgGXToMBETsTyWxwpYAStiRayElbAyVsaqWBXvxrvxHrwHa2JNvBfvxTpYB+thPayP9bEBNsCG2BAbYSNsjI2xCTbBptgUm2EzbI7NsQW2wJbYEltja2yLbbEdtsP22B47YkfshJ2wM3bGJEzCrtgVu2E37I7dsQf2wJ7YE3thL+yDfbAv9sV+2A+TMRkH4kAchINwCA7BYTgMh+NwHIEjMAVTcBSOwtE4GsfgGByL43A8voMTcCJOwsk4BadiKqbiNJyG03E6zsAZOAtnYRqm4Vyci/NwHi7ABbgQF+IiXIRLcAmmYzpmYAZmYiYux+WYhVm4ElfialyNa3Etrsf1uBE34mbcjFtxK27H7bgDd+Au3IV7cA/uw324H/fjATyA2ZiNB/EgHsJDeBgPYw7m4BE8gkfxKB7DY3gcj+MJPIGn8BSextN4Bs/gOTyHF/AXvIiX8DJ6jLFSxNrrbH57vS1gb7AxNp/9x7iILWrjbTFb3BpbyBb+dzFaaxNsaVvGlrXOlrOJ9rbfxZVtFVvVVrN32+r2Hlvjd3F9e79tYB+wDe2Dtp6977c4769xI/uQbWwft03sE7apbWWb2Ta2uX3ctrBP2Ja2lW1t29hO9hnb2XaxSfZZ29U+97s4wy6z6+0Gu9FusvvtF/acPW+P2u/tBfuL7Wf722H2NTvcvm5H2Ddsih35u3i8fcdOsBPtJDvZTrFTfxfPsrNtmp1j59oP7Dw7/3dxuv3YLrSZdpFdbJfYpb/GV3rKtJ/Y5fZTm2VX2JV2lV1t19i1dt3/7nWV3WK32m12n/3c7rA77S672+6xe3+Nr5zHAfulzbZf2SP2O3vIfm0P22M2x377a3zl/I7ZH+xx+6M9YU/aU/Yne9r+bM/Ys7+e/5Vz/8lespett4KAJCnSFFAeyksxlI9i6TrKT9dTAbqBInQjxdFNVJBupkJUmIpQUYqnYlScDCFZIgqpBJWkKN1CpehWSqDSVIbKkqNylEi3UXm6nSrQHVSR7qRKdBdVpipUlarR3VSd7qEaVJNq0b1Um+pQXapH91F9up8a0APUkB6kRvQQNaaHqQk9Qk3pUWpGj1Fzepxa0BPUklpRa2pDbelJakdPUXvqQB3paepEz1Bn6kJJ9Cx1peeoGz1P3ekF6kEvUk96iXpRb+pDL1NfeoX6UX9KpgE0kF6lQTSYhtBQGkav0XB6nUbQG5RCI2kUvUmj6S0aQ2/TWBpH4+kdmkATaRJNpik0lVLpXTqb3qXIlXu9GTSTZtFsSqM5NJc+oHk0nxbQh7SQPqJFtJiW0FJKp48pg5ZRJn1Cy+lTyqIVtJJW0WpaQ2tpHa2nDbSRNtFm2kJbaRttp89oB+2kXbSb9tBe2kef0376gg7Ql5RNX9FB+hsdoq/pMH1DOfQtHaHv6Ch9T8foBzpOP9IJOkmn6Cc6TT/TGTpL5+g8XaBf6CJdosvkSYQQylCFOgzCPGHeMCbMF8aG14X5w+vDAuENYSS8MYwLbwoLhjeHhcLCYZGwaBgfFguLhybE0IYUhmGJsGQYDW8JS4W3hglh6bBMWDZ0YbkwMbwtLB/eHlYI7wgrhneGlcK7wsphlfDxB6uFd4fVw3vCGmHNsFZ4b1g7rBPWDeuF94X1w/vDBuEDYcPwwbBC+FDYOHw4bBI+EjYNHw2bhY+FzcPHwxbhE2HLsFXYOmwTtg2fDNuFT4Xtww5hx/DpsFP4TNg57BImhc+GXcPn/vB4cjggHBi+Gr4aev+AWhJdGk2PfhzNiC6LZkY/iS6PfhrNiq6Iroyuiq6Oromuja6Lro9uiG6Mbopujm6Jbo1ui3pfL69w4KRTTrvA5XF5XYzL52LddS6/u94VcDe4iLvRxbmbXEF3syvkCrsirqiLd8VccWccOuvIha6EK+mi7hZXyt3qElxpV8aVdc6Vc4mujWvr2rp27inX3nVwHd3T7mn3jHvGdXFd3LOuq3vOdXPPu+7uBdfDvehedC+5Xq636+Nedn3dK66f6++SXbIb6Aa6QW6QG+KGuGFumBvuhrsRboRLcSlulBvlRrvRbowb48a6sW68G+8muAlukpvkprgpLtWlumlumpvuprsZboab5Wa5NJfm5rq5bp6b5xa4BW5hwkK3yC1yS9wSl+7SXYbLcJku0y13y12Wy3Ir3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O9wOt8vtcnvcHrfP7XP73X53wB1w2S7bHXQH3SF3yB1237gc96074r5zR9337pj7wR13P7oT7qQ75X5yp93P7ow768658+6C+8VddJfcZeddauTdyLTIe5HpkfcjMyIzI7MisyNpkTmRuZEPIvMi8yMLIh9GFkY+iiyKLI4siSyNpEc+jmRElkUyI59Elkc+jWRFVkRWRlZFVkfWRLwvtiP0JXxJH/W3+FL+Vp/gS/syvqx3vpxP9Lf58v52X8Hf4Sv6O30lf5ev7Kv4qv4J39K38q19G9/WP+nb+ad8e9/Bd/RP+07+Gd/Zd/FJ/lnf1T/nu/nnfXf/gu/hX/Q9/Uu+l+/t+/iXfV//iu/n+/tkP8AP9K/6QX6wH+KH+mH+NT/cv+5H+Dd8ih/pR/k3/Wj/lh/j3/Zj/Tg/3r/jJ/iJfpKf7Kf4qT7Vv+un+ff8dP++n+Fn+ll+tk/zc/xc/4Gf5+f7Bf5Dv9B/5Bf5xX6JX+rT/cc+wy/zmf4Tv9x/6rP8Cr/Sr/Kr/Rq/1q/z6/0Gv9Fv8pv9Fr/Vb/Pb/Wd+h9/pd/ndfo/f6/f5z/1+/4U/4L/02f4rf9D/zR/yX/vD/huf47/1R/x3/qj/3h/zP/jj/kd/wp/0p/xP/rT/2Z/xZ/05f95f8L/4i/6Sv8y/s8YYY4wx9n9E/cHxAf/i/+Rv64qBQojrdxbN+eeamwv9fT9YxneKCCGe7d/z0X9btWsnJyf/9tosJYKSi4UQkav5ecTVeIXoKJ4RSaKDKP8v+xsse1+gP6gfvVOI2KuVfxUr/rn+7f9B/SefHp9RKTwX95/UXyxEQsmrOfnE1fhq/Qr/Qf3C7f6g/3xfpwrR/h9y8our8dX6ieIp8ZxI+nevZIwxxhhjjDHG/m6wrNr9j56frzyfx+urOXnF1fiPns8ZY4wxxhhjjDF27b3Qu0+XJ5OSOnTnzZ/Y1Pjv0QZvePOXba71TybGGGOMMcbYX+3qTf+17oQxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu9/n/8ObFrfY6MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYtfa/AgAA///mJjhh")
truncate(&(0x7f0000000100)='./file1\x00', 0xc88)

1.123664652s ago: executing program 7 (id=4534):
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='ns\x00')
renameat2(r0, &(0x7f0000000380)='./cgroup\x00', r0, &(0x7f00000003c0)='./mnt\x00', 0x5)

1.123269273s ago: executing program 3 (id=4535):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8917, 0x0)

1.099886235s ago: executing program 4 (id=4536):
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/psched\x00')
read$FUSE(r0, &(0x7f00000023c0)={0x2020}, 0x2020)

1.001363125s ago: executing program 1 (id=4537):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000003b0007010000000000000000017c0000040000000c00018066fe0600800a0000180002"], 0x3c}}, 0xc000)

813.453673ms ago: executing program 3 (id=4538):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000640)={[{@jqfmt_vfsv1}, {@resgid}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@orlov}, {@orlov}]}, 0xfc, 0x575, &(0x7f0000001180)="$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")
llistxattr(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)

797.399863ms ago: executing program 7 (id=4539):
syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xabb, &(0x7f0000000340)="$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")
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0)

770.107656ms ago: executing program 4 (id=4540):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

592.78089ms ago: executing program 1 (id=4541):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8082, &(0x7f0000000340)={[{@uid}, {@gid_forget}, {@anchor={'anchor', 0x3d, 0x3ff}}, {@shortad}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@shortad}, {@umask={'umask', 0x3d, 0x3}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}]}, 0x1, 0xc4a, &(0x7f0000001b40)="$eJzs3VFsXeddAPD/d3Id2ykQb91CCyvcARpp1pQ0yeqsQeWGuoZJaWrN8d4m+ca+CVd1bMt2WFoG83jhgYdJCPGwJ0tQIQ0xVQwh3jBQpO2lD6hPPFmgVhPiwUKT+jQuOud+175O0jap7cRpf7/25n/uOf/vnO/7zuk5qeXvfAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARPz2ixdOPZMedC0AgPvp0uRXT532/AeAT5TL/v8fAAAAAAAAAAAAAAAOuhRFPBopFi9tpunqe9fQxfb8jZtTY+N3LjacqpKHqvzyM/TM6TNnv/Ts6Lle/ODye+3xeHny8oX6CwvXF5day8ut2frUfHtmYbZ113vYbflbnag6oH79lRuzV68u108/fWbH5psj7w4+cmzk/OiTJ5/o5U6NjY9P9uXUBj7y0W/zfiM8DkcRJyPFU9//cWpGRBG774sPuXb223DViBNVI6bGxquGzLWb8yvlxoleRxQR9b5CjV4f3YdzsSuNiNWy+mWFT5TNm1xsLjWvzLXqE82llfZKe2F+InVrW7anHkWcSxFrEbExePvuBqKIWqT47tHNdCUiDvX64YvVwOD3r0exj228C2U96wMRa8VDcM4OsMEo4qVI8ZM3i5gp+yx/4gsRL5XxHyJeL+PzEam8MM5GvFNdR8MPuObshVoU8afl+T+/mWar+0HvvnLxa/WvzF9d6Mvt3Vce+ufD/XTA701DUUSzuuNvpo/+lx0AAAAAAAAAAAAAAAAA9tpwFPF4pHjx33+/Glcc1bj0o+dHf2fkZ/vHjD/2Ifspc5+OiNXi7sbkHs5DiCfSREp3NZbYHIX7YSiK+MM8/u/bD7oyAAAAAAAAAAAAAAAAAAAAn2hFvB0pnnvreFqL/jnF2/PX6pebV+a6s8L25v7tzZne6XQ69dSNjRync1zNcS3H9Rw3cowil8+xkeN0jqs5ruW4nuNGjnEol8+xkeN0jqs5ruW4nuNGjlHL5XNs5Did42qOazmu57iRYxyQuXsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD5Oiijip5HiO9/YTJEiohExHd24PtjLAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAepMFUxA8iRf13G1vrahGRqn+7jpd/nI3G4TJ+OhqjZXw+GhdybFax1vj2A6g/uzOQivhRpBgcemPrhOfzP9D9tnUZxOvf3P72C7VuPNTbOPLu4CPHjp4fHf+lx95vOd2pAicutudv3KxPjY2PT/atruWjf7pv3Ug+brE3TScill997ZXm3FxrycInY6HWXajFnu55OGJvd7h3C7XuQr5fxQOvz3L5oL19U+PBV2znQlT3/jves/nYKJ//70SK33jrP3oP/N7z/2e637ae8PHeH20//5+7dUf79Px/tG/dc/lvIwO1iKGV64sDxyKGll997WT7evNa61pr/uypU18eHf3ymVMDhyOGrrbnWn1Lu+4qAAAAAAAAAAAAAAAAgPsrFfFbkaL5o81Uj4ib1XitkfOjT5584lAcqsZb7Ri39fLk5Qv1FxauLy61lpdbs/Wp+fbMwmzrbg83VA33mhob35fGfKjhfa7/8NALC4uvLrWv/d7KHbcfGbpwZXllqTlz580xHEVEo3/NiarCU2PjVaXn2s35qujEHg3MHEhF/GekmDlbT5/P6/L4vzK8PdCX2z/+f7VvfbW8T+P/PnXLcVIq4r1I8et/9lh8vqrnkbitz3LeX0WKE+c+l/PicJnXq0P3vQLdkYHvdbr+7qc7c3ttf3Q795l7692Drzz/RyPFD/7ke/Ered3O9z9sj//sP/9Hbt3RPp3/z/StO7LjfQW7bjr5/J+MFM8/+kb8al73Qe//KKLT6Xwr4nhO3no/x96e/62L7rN9qSPRPe6v7VnrAQAAAAAAAAAAHl4DqYi/jhRPjNfSs3nd3fz+3+ytO9qn3//7+b51s/dpvqJddyoAAAAAHBADqYi3I8W1lTe2xlD3jf/eOf7zN7fnXh9Lt2ytfs73c9V7A/by53/9RvJxp3ffbAAAAAAAAAAAAAAAAAAAADhQUiri2Tyf+vSHzKe+Hile/O+ncl46Vub15oEfqf4curQwf/LC3NzCTHOleWWuVZ9cbM60yrKfiRSbf/m5XLao5lfvzTffneN9qNOea50qc5cixfjf9HK7c7H35ibvzgfenYu9zP1UpPivv92Z25vH+rPbuafL3L+IFF//xzvnHtvOPVPmfi9S/PDr9V7ukTK3937U7jtJh2ox13p6ZmHutlehAgAAAAAAAAAAAAAAAAAAwL0aSEX8caT4n+trsZqH/ef5/3sz8Nd6ua9/s2++/1vcrOb5H6nm/3+/5Y8y///InrUUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHimKeC1SLF7aTOuD5feuoYvt+Rs3p8bG+5M7W0vDqSp5qMovP0PPnD5z9kvPjp7rxTuV3z+Px8uTly/UX1i4vrjUWl5uzdan5tszC7Otu97Dbstvd13XiaoD6tdfuTF79epy/fTTZ3Zsvjny7uAjx0bOjz558ole7tTY+PhkX05t4B6Ofk+V23Y4ivjzSPHU93+c/nkwoojd98Udr537Z7hqxImqEVNj41VD5trN+ZVy40SvI4qIel+hRq+P7sO52JVGxGpZ/bLCJ8rmTS42l5pX5lr1iebSSnulvTA/kbq1LdtTjyLOpVhdi4iNwa29/F9vYSCKeCVSfPfoZvqXwYhDvX744qXJr546fcvB/2l7sbgPbf0AZT3rAxFrxUNwzg6wwSji7yPFT948Hv86GFGL7ie+EPFSf+LzEam8MM5GvDP4wKrLHqtFEf9bnv/zm+nNwfJ+0LuvXPxa/SvzVxf6cnv3lYP0fOjc+7U4vAeHvXsH/N40FEX8sLrjb6Z/8981AAAAAAAAAAAAAAAAwAFSxC9GiufeOp6q8cFbY4rb89fql5tX5rrD+npj/+oRf1DGTqfTqadubOQ4neNqjms5/nLO38jfo8jlc2zkOJ3jao5rOa7nuJFjHMrlc2zkOJ3jao5rOa7nuJFj1KrQ6XS+1S1fy+VzXM1xrRZRlOXz940c44CM3QMAAAAAAAAAAAAAAAAAAD5eiuqfFN/5xmaq5lJtRExHN66bD/Rj7/8DAAD//y8yBuM=")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)

453.384381ms ago: executing program 3 (id=4542):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000003, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000002c0)={0x0, 0x0, {0x0, 0x0, 0x100a}})

452.766516ms ago: executing program 4 (id=4543):
syz_mount_image$exfat(&(0x7f0000001f80), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f0000000140)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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")
rename(&(0x7f0000000100)='./file2\x00', &(0x7f0000000140)='./file0/../file0/file0\x00')

438.248684ms ago: executing program 2 (id=4544):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_macvtap\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0xfffffffa, 0x0, 0x0, 0x5, 0x1, 0x2, 0x4}})

85.049693ms ago: executing program 3 (id=4545):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xea)

76.783475ms ago: executing program 2 (id=4546):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000240))

0s ago: executing program 7 (id=4547):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, 0x0, 0x0)

kernel console output (not intermixed with test programs):


[  580.883388][ T5837] Allocator debug:
[  580.883399][ T5837]   capacity26112
[  580.883410][ T5837]   reserved             6656
[  580.883420][ T5837]   hidden               0
[  580.883434][ T5837]   btree                416
[  580.883444][ T5837]   data                 0
[  580.883460][ T5837]   cached               0
[  580.883470][ T5837]   reserved             0
[  580.883481][ T5837]   online_reserved      20352
[  580.883491][ T5837]   nr_inodes            0
[  580.883502][ T5837]   
[  580.883511][ T5837]   freelist_wait        waiting
[  580.883522][ T5837]   open buckets allocated37
[  580.883533][ T5837]   open buckets total   1024
[  580.883544][ T5837]   open_buckets_wait    empty
[  580.883554][ T5837]   open_buckets_btree   36
[  580.883564][ T5837]   open_buckets_user    0
[  580.883574][ T5837]   btree reserve cache  0
[  580.883585][ T5837] 
[  580.883594][ T5837] Dev 0:
[  580.883604][ T5837]                      buckets         sectors      fragmented
[  580.883616][ T5837]   free                    36               0               0
[  580.883629][ T5837]   sb                      24            6144               0
[  580.883640][ T5837]   journal                  8            2048               0
[  580.883652][ T5837]   btree                    6             416            1120
[  580.883665][ T5837]   user                     0               0               0
[  580.883676][ T5837]   cached                   0               0               0
[  580.883688][ T5837]   parity                   0               0               0
[  580.883700][ T5837]   stripe                   0               0               0
[  580.883712][ T5837]   need_gc_gens             0               0               0
[  580.883724][ T5837]   need_discard            54               0               0
[  580.883736][ T5837]   unstriped                0               0               0
[  580.883749][ T5837]   capacity               128
[  580.883759][ T5837]   
[  580.883769][ T5837]   reserves:
[  580.883780][ T5837]   stripe                  12
[  580.883804][ T5837]   normal                  10
[  580.883815][ T5837]   copygc                   8
[  580.883826][ T5837]   btree                    4
[  580.883837][ T5837]   btree_copygc             0
[  580.883848][ T5837]   reclaim                  0
[  580.883858][ T5837]   interior_updates         0
[  580.883869][ T5837]   
[  580.883879][ T5837]   open buckets            36
[  580.883890][ T5837]   buckets to invalidate    0
[  580.883900][ T5837] 
[  580.883910][ T5837] Copygc debug:
[  580.883920][ T5837]   running: 0
[  580.883930][ T5837]   copygc_wait:9600
[  580.883940][ T5837]   copygc_wait_at:128
[  580.883951][ T5837]   Currently waiting for:0 B
[  580.883962][ T5837]   Currently waiting since:10.0 MiB
[  580.883973][ T5837]   Currently calculated wait:4.16 KiB
[  580.883984][ T5837] 
[  580.883994][ T5837] Journal debug:
[  580.884005][ T5837]   flags:                   replay_done,running,may_skip_flush
[  580.884016][ T5837]   dirty journal entries:   1/32768
[  580.884028][ T5837]   seq:                     104
[  580.884039][ T5837]   seq_ondisk:              104
[  580.884050][ T5837]   last_seq:                104
[  580.884061][ T5837]   last_seq_ondisk:         104
[  580.884072][ T5837]   flushed_seq_ondisk:      104
[  580.884083][ T5837]   watermark:               stripe
[  580.884093][ T5837]   each entry reserved:     321
[  580.884105][ T5837]   nr flush writes:         7
[  580.884116][ T5837]   nr noflush writes:       97
[  580.884126][ T5837]   average write size:      5.39 KiB
[  580.884148][ T5837]   free buf:                65536
[  580.901618][ T5837]   nr direct reclaim:       0
[  580.901640][ T5837]   nr background reclaim:   6
[  580.901651][ T5837]   reclaim kicked:          0
[  580.901660][ T5837]   reclaim runs in:         0 ms
[  580.901671][ T5837]   blocked:                 0
[  580.901681][ T5837]   current entry sectors:   256
[  580.901691][ T5837]   current entry error:     ok
[  580.901701][ T5837]   current entry:           closed
[  580.901710][ T5837]   unwritten entries:
[  580.901718][ T5837]   last buf closed
[  580.901727][ T5837]   space:
[  580.901737][ T5837]     discarded              256:1536
[  580.901749][ T5837]     clean ondisk           256:1536
[  580.901759][ T5837]     clean                  256:1536
[  580.901770][ T5837]     total                  256:2048
[  580.901779][ T5837]   dev 0:
[  580.901788][ T5837]   durability 1:
[  580.901798][ T5837]     nr                     8
[  580.901807][ T5837]     bucket size            256
[  580.901818][ T5837]     available              6:16
[  580.901828][ T5837]     discard_idx            6
[  580.901839][ T5837]     dirty_ondisk           6 (seq 104)
[  580.901849][ T5837]     dirty_idx              6 (seq 104)
[  580.901860][ T5837]     cur_idx                6 (seq 104)
[  580.901871][ T5837]   replicas want 1 need 1
[  580.901881][ T5837] 
[  580.979850][T14326] loop4: detected capacity change from 0 to 8192
[  581.122654][    T9] usb 2-1: Product: syz
[  581.122679][    T9] usb 2-1: Manufacturer: syz
[  581.122695][    T9] usb 2-1: SerialNumber: syz
[  581.128418][    T9] usb 2-1: config 0 descriptor??
[  581.133013][    T9] smsusb:smsusb_probe: board id=2, interface number 0
[  581.355241][ T5856] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  581.431001][    T9] smsusb:smsusb_probe: Device initialized with return code -19
[  581.590051][T14338] loop2: detected capacity change from 0 to 512
[  581.665684][T14338] EXT4-fs: Ignoring removed bh option
[  581.682359][ T5856] usb 6-1: Using ep0 maxpacket: 32
[  581.704632][ T5856] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  581.770541][ T5856] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a
[  581.812150][T14338] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  581.812744][ T5856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  581.821429][T14338] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  581.910181][ T5856] usb 6-1: Product: syz
[  581.917724][T14338] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[  581.920973][ T5856] usb 6-1: Manufacturer: syz
[  581.927692][    T9] usb 2-1: USB disconnect, device number 107
[  581.942737][ T5856] usb 6-1: SerialNumber: syz
[  581.999804][T14338] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c02c, mo2=0002]
[  582.032453][ T5856] usb 6-1: config 0 descriptor??
[  582.046300][T14338] System zones: 0-2, 18-18, 34-34
[  582.049343][ T5856] xr_serial 6-1:0.0: skipping garbage
[  582.111164][T14338] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.3584: couldn't read orphan inode 15 (err -116)
[  582.155666][T14338] EXT4-fs (loop2): Remounting filesystem read-only
[  582.165687][T14338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  582.205676][T14352] loop3: detected capacity change from 0 to 256
[  582.285302][  T978] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[  582.297588][T14352] MINIX-fs: mounting file system with errors, running fsck is recommended
[  582.308624][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  582.334087][ T5888] usb 6-1: USB disconnect, device number 5
[  582.484149][  T978] usb 5-1: Using ep0 maxpacket: 32
[  582.503451][  T978] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  582.513979][    T8] usb 2-1: new full-speed USB device number 108 using dummy_hcd
[  582.535316][  T978] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=c2.57
[  582.546638][  T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.557005][  T978] usb 5-1: Product: syz
[  582.561171][  T978] usb 5-1: Manufacturer: syz
[  582.567967][  T978] usb 5-1: SerialNumber: syz
[  582.579801][  T978] usb 5-1: config 0 descriptor??
[  582.589912][  T978] gspca_main: spca501-2.14.0 probing 0000:0000
[  582.706411][    T8] usb 2-1: config 0 has an invalid interface number: 74 but max is 0
[  582.714684][ T5856] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[  582.721810][    T8] usb 2-1: config 0 has no interface number 0
[  582.729657][    T8] usb 2-1: config 0 interface 74 has no altsetting 0
[  582.734850][   T46] usb 3-1: new low-speed USB device number 110 using dummy_hcd
[  582.740672][    T8] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=f6.7d
[  582.753162][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.762665][    T8] usb 2-1: Product: syz
[  582.767104][    T8] usb 2-1: Manufacturer: syz
[  582.771721][    T8] usb 2-1: SerialNumber: syz
[  582.779987][    T8] usb 2-1: config 0 descriptor??
[  582.789612][    T8] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state.
[  582.798639][    T8] usb 2-1: setting power ON
[  582.808723][  T978] gspca_spca501: reg write: error -71
[  582.814258][    T8] dvb-usb: bulk message failed: -22 (2/0)
[  582.822233][  T978] spca501 5-1:0.0: Reg write failed for 0x02,0x0f,0x05
[  582.832645][  T978] spca501 5-1:0.0: probe with driver spca501 failed with error -22
[  582.843708][    T8] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  582.856341][  T978] usb 5-1: USB disconnect, device number 107
[  582.866291][    T8] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19)
[  582.881736][    T8] dvb_usb_cxusb 2-1:0.74: probe with driver dvb_usb_cxusb failed with error -22
[  582.883599][ T5856] usb 4-1: Using ep0 maxpacket: 32
[  582.933133][ T5856] usb 4-1: unable to get BOS descriptor or descriptor too short
[  582.959444][   T46] usb 3-1: string descriptor 0 read error: -22
[  582.974159][   T46] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f
[  582.990755][ T5856] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 160, changing to 11
[  583.002359][   T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.011655][ T5856] usb 4-1: config 1 interface 0 has no altsetting 0
[  583.021925][ T5856] usb 4-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40
[  583.032605][   T46] usb 3-1: config 0 descriptor??
[  583.038587][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.053751][    T8] usb 2-1: USB disconnect, device number 108
[  583.061172][   T46] usbtest 3-1:0.0: FX2 device
[  583.072395][   T46] usbtest 3-1:0.0: low-speed {control intr-in intr-out} tests (+alt)
[  583.084768][ T5856] usb 4-1: Product: syz
[  583.092572][ T5856] usb 4-1: Manufacturer: syz
[  583.102185][ T5856] usb 4-1: SerialNumber: syz
[  583.290853][   T46] usb 3-1: USB disconnect, device number 110
[  583.357118][ T5856] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input46
[  583.398218][ T5189] bcm5974 4-1:1.0: could not read from device
[  583.422809][ T5189] bcm5974 4-1:1.0: could not read from device
[  583.449599][ T5189] bcm5974 4-1:1.0: could not read from device
[  583.471767][ T5856] usb 4-1: USB disconnect, device number 117
[  583.492268][ T5189] bcm5974 4-1:1.0: could not read from device
[  583.696137][    T8] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  583.872664][    T8] usb 6-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc
[  583.902760][    T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.925400][    T8] usb 6-1: Product: syz
[  583.948753][    T8] usb 6-1: Manufacturer: syz
[  583.954119][    T8] usb 6-1: SerialNumber: syz
[  583.983583][    T8] usb 6-1: config 0 descriptor??
[  584.043228][    T8] cypress_m8 6-1:0.0: Nokia CA-42 V2 Adapter converter detected
[  584.082652][    T8] nokiaca42v2 ttyUSB0: required endpoint is missing
[  584.258220][ T5856] usb 6-1: USB disconnect, device number 6
[  584.274401][ T5856] cypress_m8 6-1:0.0: device disconnected
[  584.637632][T14368] loop4: detected capacity change from 0 to 32768
[  584.661394][T14368] gfs2: statfs_percent mount option requires a numeric argument between 0 and 100
[  585.053942][    T9] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[  585.253096][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  585.274062][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  585.313134][    T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=df.97
[  585.341612][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  585.380164][    T9] usb 3-1: Product: syz
[  585.384401][    T9] usb 3-1: Manufacturer: syz
[  585.390754][    T9] usb 3-1: SerialNumber: syz
[  585.411953][    T9] usb 3-1: config 0 descriptor??
[  585.535367][T14387] loop3: detected capacity change from 0 to 32768
[  585.661717][   T46] usb 3-1: USB disconnect, device number 111
[  585.761362][T14391] loop1: detected capacity change from 0 to 32768
[  585.784074][T14395] loop5: detected capacity change from 0 to 32768
[  585.824624][T14395] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3610 (14395)
[  585.842252][T14387] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names
[  585.889974][T14387] bcachefs (loop3): recovering from clean shutdown, journal seq 7
[  585.912871][T14391] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3608 (14391)
[  585.936560][T14387] bcachefs (loop3): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.20: directory_size
[  585.936560][T14387]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  585.965308][T14395] BTRFS info (device loop5): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  585.983656][T14395] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  586.003949][T14395] BTRFS info (device loop5): using free-space-tree
[  586.012234][T14391] BTRFS info (device loop1): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  586.027029][T14391] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  586.039248][T14391] BTRFS info (device loop1): using free-space-tree
[  586.105776][T14387] bcachefs (loop3): accounting_read... done
[  586.130773][T14387] bcachefs (loop3): alloc_read... done
[  586.196141][T14387] bcachefs (loop3): stripes_read... done
[  586.272360][T14387] bcachefs (loop3): snapshots_read... done
[  586.292978][T14387] bcachefs (loop3): check_allocations...
[  586.372065][T14387] btree ptr not marked in member info btree allocated bitmap
[  586.372106][T14387]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 75277f57b0c8c24 written 32 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing
[  586.557309][T14387] btree ptr not marked in member info btree allocated bitmap
[  586.557332][T14387]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 19bc58a6c09b6540 written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[  586.596679][T13953] BTRFS info (device loop5): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  586.631301][ T5838] BTRFS info (device loop1): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  586.875499][T14387] btree ptr not marked in member info btree allocated bitmap
[  586.875520][T14387]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c18f4a4face03c6 written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[  586.947861][T14413] loop4: detected capacity change from 0 to 32768
[  586.962851][T14413] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3615 (14413)
[  586.996042][T14413] BTRFS info (device loop4): first mount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2
[  586.996143][T14413] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  586.996198][T14413] BTRFS info (device loop4): using free-space-tree
[  587.017898][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  587.017967][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  587.247754][    T9] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  587.444069][    T9] usb 6-1: config 0 has an invalid interface number: 201 but max is 0
[  587.462136][T14387] btree ptr not marked in member info btree allocated bitmap
[  587.462156][T14387]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7675f41d391e5d36 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[  587.463941][ T5845] BTRFS info (device loop4): last unmount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2
[  587.512363][    T9] usb 6-1: config 0 has no interface number 0
[  587.523643][    T9] usb 6-1: config 0 interface 201 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  587.543439][T14387] btree ptr not marked in member info btree allocated bitmap
[  587.543462][T14387]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq bcb9905dfb2993d5 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0, fixing
[  587.583121][    T9] usb 6-1: config 0 interface 201 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  587.591458][    T9] usb 6-1: New USB device found, idVendor=04fc, idProduct=0235, bcdDevice=ef.15
[  587.665201][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.673975][T14387] btree ptr not marked in member info btree allocated bitmap
[  587.673994][T14387]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9a831b4a3f983356 written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[  587.676907][    T9] usb 6-1: Product: syz
[  587.750643][T14387]  done
[  587.770882][    T9] usb 6-1: Manufacturer: syz
[  587.775506][    T9] usb 6-1: SerialNumber: syz
[  587.795523][T14387] bcachefs (loop3): going read-write
[  587.804956][    T9] usb 6-1: config 0 descriptor??
[  587.821351][T14387] bcachefs (loop3): journal_replay...
[  587.841318][    T9] spcp8x5 6-1:0.201: SPCP8x5 converter detected
[  587.877850][    T8] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[  587.895680][    T9] usb 6-1: SPCP8x5 converter now attached to ttyUSB0
[  588.087127][    T8] usb 2-1: Using ep0 maxpacket: 16
[  588.099067][T14387]  done
[  588.099799][    T8] usb 2-1: config 0 has an invalid interface number: 68 but max is 0
[  588.116909][    T8] usb 2-1: config 0 has no interface number 0
[  588.121264][T14387] bcachefs (loop3): check_extents_to_backpointers...
[  588.126821][T14387] bcachefs (loop3): scanning for missing backpointers in 6/128 buckets
[  588.153456][  T978] usb 6-1: USB disconnect, device number 7
[  588.154015][T14449] loop2: detected capacity change from 0 to 32768
[  588.165741][  T978] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[  588.173919][    T8] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4
[  588.183991][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  588.193974][  T978] spcp8x5 6-1:0.201: device disconnected
[  588.202561][    T8] usb 2-1: Product: syz
[  588.206768][    T8] usb 2-1: Manufacturer: syz
[  588.216306][    T8] usb 2-1: SerialNumber: syz
[  588.223151][T14387]  done
[  588.230129][    T8] usb 2-1: config 0 descriptor??
[  588.270704][    T8] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  588.280544][T14449] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3618 (14449)
[  588.299297][T14387] bcachefs (loop3): check_inodes... done
[  588.360350][T14387] bcachefs (loop3): resume_logged_ops... done
[  588.387350][T14449] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  588.399696][T14387] bcachefs (loop3): delete_dead_inodes... done
[  588.410351][T14449] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm
[  588.419599][T14449] BTRFS info (device loop2): using free-space-tree
[  588.492809][T14387] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean
[  588.523460][T14387] bcachefs (loop3): check_extents_to_backpointers...
[  588.526313][  T978] usb 2-1: USB disconnect, device number 109
[  588.529001][   T12] usb 2-1: Failed to submit usb control message: -71
[  588.534137][T14387]  done
[  588.548701][   T12] usb 2-1: unable to send the bmi data to the device: -71
[  588.564015][   T12] usb 2-1: unable to get target info from device
[  588.572485][   T12] usb 2-1: could not get target info (-71)
[  588.580215][   T12] usb 2-1: could not probe fw (-71)
[  588.602925][T14387] bcachefs (loop3): check_inodes... done
[  588.638654][T14387] bcachefs (loop3): resume_logged_ops... done
[  588.665690][T14387] bcachefs (loop3): delete_dead_inodes... done
[  588.715588][T14387] bcachefs (loop3): bch2_copygc_start(): error creating copygc thread EINTR
[  588.753377][T14387] bcachefs (loop3): error starting copygc thread
[  588.769180][T14387] bcachefs (loop3): bch2_fs_start(): error starting filesystem EINTR
[  588.785289][T14387] bcachefs (loop3): shutting down
[  588.790933][T14387] bcachefs (loop3): going read-only
[  588.798497][T14387] bcachefs (loop3): finished waiting for writes to stop
[  588.828822][T14387] bcachefs (loop3): flushing journal and stopping allocators, journal seq 16
[  588.837802][T14387] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 16
[  588.847594][    T9] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[  588.932516][T14387] bcachefs (loop3): clean shutdown complete, journal seq 17
[  588.945928][T14387] bcachefs (loop3): marking filesystem clean
[  588.971851][ T5855] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  589.061914][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  589.086940][    T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0303, bcdDevice=e4.df
[  589.105445][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  589.121494][T14387] bcachefs (loop3): shutdown complete
[  589.124740][    T9] usb 5-1: config 0 descriptor??
[  589.140994][    T9] pwc: Philips PCA646VC USB webcam detected.
[  589.365479][    T9] pwc: send_video_command error -71
[  589.370734][    T9] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  589.429190][    T9] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[  589.477222][    T9] usb 5-1: USB disconnect, device number 108
[  589.552218][T14387] bcachefs: bch2_fs_get_tree() error: EINTR
[  589.554758][   T46] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  589.605514][T14387] syz.3.3606 (14387) used greatest stack depth: 9840 bytes left
[  589.679113][ T5856] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[  589.885897][ T5856] usb 3-1: Using ep0 maxpacket: 8
[  589.909391][   T46] usb 6-1: config 0 has an invalid interface number: 35 but max is 0
[  589.917530][   T46] usb 6-1: config 0 has no interface number 0
[  589.950410][T14506] loop1: detected capacity change from 0 to 256
[  589.966727][ T5856] usb 3-1: unable to get BOS descriptor or descriptor too short
[  589.991181][   T46] usb 6-1: config 0 interface 35 has no altsetting 0
[  590.008881][ T5856] usb 3-1: config 11 has an invalid interface number: 244 but max is 0
[  590.050915][ T5856] usb 3-1: config 11 has no interface number 0
[  590.064957][   T46] usb 6-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=ac.10
[  590.087839][ T5856] usb 3-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0
[  590.106194][   T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.141322][ T5856] usb 3-1: config 11 interface 244 has no altsetting 0
[  590.148338][   T46] usb 6-1: Product: syz
[  590.152551][   T46] usb 6-1: Manufacturer: syz
[  590.161026][ T5856] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a
[  590.195733][   T46] usb 6-1: SerialNumber: syz
[  590.202037][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.218212][   T46] usb 6-1: config 0 descriptor??
[  590.239477][ T5856] usb 3-1: Product: syz
[  590.255051][ T5856] usb 3-1: Manufacturer: syz
[  590.262006][T14508] loop4: detected capacity change from 0 to 512
[  590.289134][ T5856] usb 3-1: SerialNumber: syz
[  590.414465][T14508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  590.465998][T14508] ext4 filesystem being mounted at /756/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  590.535888][  T978] usb 6-1: USB disconnect, device number 8
[  590.594383][ T5856] usb 3-1: USB disconnect, device number 112
[  590.653560][ T5845] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  590.698247][ T5890] usb 2-1: new full-speed USB device number 110 using dummy_hcd
[  590.871742][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89
[  590.906994][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  590.950247][ T5890] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  590.965303][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.973334][ T5890] usb 2-1: Product: syz
[  590.978385][ T5890] usb 2-1: Manufacturer: syz
[  590.983006][ T5890] usb 2-1: SerialNumber: syz
[  590.991393][ T5890] usb 2-1: config 0 descriptor??
[  591.004773][ T5890] streamzap 2-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200
[  591.168703][ T5856] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[  591.196858][T14521] loop5: detected capacity change from 0 to 512
[  591.225945][T14510] loop3: detected capacity change from 0 to 32768
[  591.253590][T14510] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  591.253590][T14510] clean (size 2912):
[  591.253590][T14510] flags:          0
[  591.253590][T14510] journal_seq:    10
[  591.253590][T14510] usage: type=inodes v=8
[  591.253590][T14510] usage: type=key_version v=0
[  591.253590][T14510] usage: type=reserved v=0
[  591.253590][T14510] usage: type=reserved v=0
[  591.253590][T14510] usage: type=reserved v=0
[  591.253590][T14510] usage: type=reserved v=0
[  591.253590][T14510] data_usage: btree: 1/1 [0]=2816
[  591.253590][T14510] data_usage: journal: 1/1 [0]=0
[  591.253590][T14510] data_usage: user: 1/1 [0]=16
[  591.253590][T14510] dev_usage: dev=0  
[  591.253590][T14510]   free: buckets=83 sectors=0 fragmented=0
[  591.253590][T14510]   sb: buckets=25 sectors=6152 fragmented=248
[  591.253590][T14510]   journal: buckets=8 sectors=2048 fragmented=0
[  591.253590][T14510]   btree: buckets=11 sectors=2816 fragmented=0
[  591.253590][T14510]   user: buckets=1 sectors=16 fragmented=240
[  591.253590][T14510]   cached: buckets=0 sectors=0 fragmented=0
[  591.253590][T14510]   parity: buckets=0 sectors=0 fragmented=0
[  591.253590][T14510]   stripe: buckets=0 sectors=0 fragmented=0
[  591.253590][T14510]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  591.253590][T14510]   need_discard: buckets=0 sectors=0 fragmented=0
[  591.253590][T14510] clock: read=0
[  591.253590][T14510] clock: write=1280
[  591.253590][T14510] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6
[  591.254063][T14510] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  591.264101][  T978] usb 2-1: USB disconnect, device number 110
[  591.421865][T14521] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  591.489680][ T5856] usb 5-1: Using ep0 maxpacket: 8
[  591.489704][T14521] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  591.505810][ T5856] usb 5-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=ab.e9
[  591.532072][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  591.575888][ T5856] usb 5-1: config 0 descriptor??
[  591.613905][T13953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  591.641567][T14525] loop2: detected capacity change from 0 to 4096
[  591.694418][T14525] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  591.813650][  T978] usb 5-1: USB disconnect, device number 109
[  591.876564][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  591.886148][T14528] loop5: detected capacity change from 0 to 512
[  591.966648][T14528] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  592.087917][T13953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  593.175526][T14531] loop2: detected capacity change from 0 to 32768
[  593.199818][T14531] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3636 (14531)
[  593.275464][T14531] BTRFS info (device loop2): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9
[  593.294029][T14531] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm
[  593.314122][T14531] BTRFS info (device loop2): using free-space-tree
[  593.472983][T14533] loop3: detected capacity change from 0 to 32768
[  593.513942][T14533] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  593.526504][T14533] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  593.608918][T14533] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  593.652105][   T25] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  593.659718][   T25] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  593.735012][ T5855] BTRFS info (device loop2): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9
[  593.758426][T14539] loop4: detected capacity change from 0 to 32768
[  593.792916][T14539] BTRFS: device fsid 384aeb47-f1c2-4293-8350-e6dffa96895f devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3640 (14539)
[  593.924317][T14539] BTRFS info (device loop4): first mount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f
[  593.962361][T14539] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  594.035693][T14539] BTRFS info (device loop4): using free-space-tree
[  594.151197][   T25] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 459ms
[  594.163937][   T25] gfs2: fsid=syz:syz.0: jid=0: Done
[  594.174555][T14533] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  594.766095][ T5845] BTRFS info (device loop4): last unmount of filesystem 384aeb47-f1c2-4293-8350-e6dffa96895f
[  594.861870][T14536] loop5: detected capacity change from 0 to 65536
[  595.117886][T14536] XFS (loop5): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5
[  595.396959][T14588] loop4: detected capacity change from 0 to 1756
[  595.409409][T14536] XFS (loop5): Ending clean mount
[  595.632128][T13953] XFS (loop5): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5
[  595.866055][T14590] loop4: detected capacity change from 0 to 1164
[  596.534439][T14563] loop2: detected capacity change from 0 to 32768
[  596.604507][T14563] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  596.631816][T14563] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  596.656712][T14597] loop1: detected capacity change from 0 to 128
[  596.796661][T14563] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  596.860234][   T46] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  596.867485][   T46] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  596.900612][T14593] loop4: detected capacity change from 0 to 32768
[  596.920556][T14593] BTRFS: device fsid f8fbafda-0237-42f9-bd6b-a83e6ac3fc88 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3645 (14593)
[  597.036180][T14599] loop5: detected capacity change from 0 to 512
[  597.047240][T14593] BTRFS info (device loop4): first mount of filesystem f8fbafda-0237-42f9-bd6b-a83e6ac3fc88
[  597.053992][T14599] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  597.100854][T14602] loop1: detected capacity change from 0 to 512
[  597.110401][   T46] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 227ms
[  597.121871][T14593] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm
[  597.143435][   T46] gfs2: fsid=syz:syz.0: jid=0: Done
[  597.151102][T14599] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.3644: invalid indirect mapped block 4294967295 (level 0)
[  597.182585][T14593] BTRFS info (device loop4): using free-space-tree
[  597.193725][T14563] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  597.208741][T14599] EXT4-fs (loop5): Remounting filesystem read-only
[  597.231925][T14599] EXT4-fs (loop5): 1 orphan inode deleted
[  597.237700][T14599] EXT4-fs (loop5): 1 truncate cleaned up
[  597.268423][T14599] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  597.320150][T14563] gfs2: fsid=syz:syz.0: can't create quotad thread: -4
[  597.369861][  T978] usb 4-1: new full-speed USB device number 118 using dummy_hcd
[  597.456999][T14623] loop1: detected capacity change from 0 to 256
[  597.511433][T13953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  597.601751][  T978] usb 4-1: config 8 has an invalid interface number: 130 but max is 0
[  597.625473][  T978] usb 4-1: config 8 has no interface number 0
[  597.635797][  T978] usb 4-1: config 8 interface 130 has no altsetting 0
[  597.680115][  T978] usb 4-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=e2.0f
[  597.696646][  T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.716500][  T978] usb 4-1: Product: syz
[  597.721221][  T978] usb 4-1: Manufacturer: syz
[  597.753827][ T5845] BTRFS info (device loop4): last unmount of filesystem f8fbafda-0237-42f9-bd6b-a83e6ac3fc88
[  597.764073][  T978] usb 4-1: SerialNumber: syz
[  598.022968][T14631] loop5: detected capacity change from 0 to 256
[  598.047320][  T978] gspca_main: conex-2.14.0 probing 0572:0041
[  598.366889][  T978] usb 4-1: USB disconnect, device number 118
[  598.410566][T14633] loop2: detected capacity change from 0 to 512
[  599.160117][T14629] loop1: detected capacity change from 0 to 32768
[  599.208314][T14629] BTRFS: device fsid 18898830-c59e-4026-919d-fe1055706c2c devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3651 (14629)
[  599.306988][T14629] BTRFS info (device loop1): first mount of filesystem 18898830-c59e-4026-919d-fe1055706c2c
[  599.357328][T14629] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  599.410803][T14629] BTRFS info (device loop1): using free-space-tree
[  599.816180][T14638] loop4: detected capacity change from 0 to 32768
[  599.859959][T14638] BTRFS: device fsid 100ef7e5-a5de-41f0-884c-a25b1c06c78a devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3652 (14638)
[  599.873686][ T5838] BTRFS info (device loop1): last unmount of filesystem 18898830-c59e-4026-919d-fe1055706c2c
[  599.997199][T14638] BTRFS info (device loop4): first mount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a
[  600.027384][T14638] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  600.077012][T14638] BTRFS info (device loop4): using free-space-tree
[  600.245271][T14635] loop5: detected capacity change from 0 to 32768
[  600.361303][T14635] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz"
[  600.416322][T14635] dlm: no local IP address has been set
[  600.421978][T14635] dlm: cannot start dlm midcomms -107
[  600.509919][T14635] gfs2: fsid=syz:syz: dlm_new_lockspace error -107
[  600.613252][ T5845] BTRFS info (device loop4): last unmount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a
[  602.039098][T14673] loop1: detected capacity change from 0 to 32768
[  602.124542][T14673] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  602.158421][T14673] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  602.251462][T14673] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  602.329657][   T46] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  602.336477][   T46] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  602.587512][   T46] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 234ms
[  602.618177][   T46] gfs2: fsid=syz:syz.0: jid=0: Done
[  602.624441][T14673] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  602.651487][T14683] loop5: detected capacity change from 0 to 32768
[  602.929260][T14691] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  603.124816][T14681] loop4: detected capacity change from 0 to 32768
[  603.143334][T14681] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz'
[  603.172467][T14681] CPU: 1 UID: 0 PID: 14681 Comm: syz.4.3659 Not tainted 6.14.0-rc2-next-20250210-syzkaller #0
[  603.172501][T14681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  603.172513][T14681] Call Trace:
[  603.172521][T14681]  <TASK>
[  603.172529][T14681]  dump_stack_lvl+0x241/0x360
[  603.172560][T14681]  ? __pfx_dump_stack_lvl+0x10/0x10
[  603.172580][T14681]  ? __pfx__printk+0x10/0x10
[  603.172614][T14681]  ? __kmalloc_cache_noprof+0x243/0x390
[  603.172633][T14681]  ? sysfs_create_dir_ns+0x28a/0x3a0
[  603.172661][T14681]  sysfs_create_dir_ns+0x2ce/0x3a0
[  603.172686][T14681]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  603.172718][T14681]  kobject_add_internal+0x435/0x8d0
[  603.172753][T14681]  kobject_init_and_add+0x124/0x190
[  603.172774][T14681]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  603.172804][T14681]  ? __pfx_kobject_init_and_add+0x10/0x10
[  603.172830][T14681]  ? __init_swait_queue_head+0xae/0x150
[  603.172856][T14681]  gfs2_sys_fs_add+0x23b/0x4a0
[  603.172882][T14681]  ? __pfx_gfs2_sys_fs_add+0x10/0x10
[  603.172919][T14681]  ? __pfx_alloc_workqueue+0x10/0x10
[  603.172951][T14681]  ? read_word_at_a_time+0xe/0x20
[  603.172969][T14681]  ? sized_strscpy+0x9a/0x2b0
[  603.172993][T14681]  gfs2_fill_super+0x11ee/0x24d0
[  603.173050][T14681]  ? __pfx_gfs2_fill_super+0x10/0x10
[  603.173072][T14681]  ? snprintf+0xda/0x120
[  603.173091][T14681]  ? __pfx_lock_release+0x10/0x10
[  603.173112][T14681]  ? do_raw_spin_lock+0x14f/0x370
[  603.173137][T14681]  ? __pfx_snprintf+0x10/0x10
[  603.173169][T14681]  ? sb_set_blocksize+0x98/0xf0
[  603.173193][T14681]  ? setup_bdev_super+0x4e6/0x5d0
[  603.173217][T14681]  get_tree_bdev_flags+0x48c/0x5c0
[  603.173241][T14681]  ? __pfx_gfs2_fill_super+0x10/0x10
[  603.173266][T14681]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  603.173288][T14681]  ? rcu_is_watching+0x15/0xb0
[  603.173314][T14681]  gfs2_get_tree+0x54/0x220
[  603.173345][T14681]  vfs_get_tree+0x90/0x2b0
[  603.173368][T14681]  do_new_mount+0x2be/0xb40
[  603.173397][T14681]  ? __pfx_do_new_mount+0x10/0x10
[  603.173431][T14681]  __se_sys_mount+0x2d6/0x3c0
[  603.173462][T14681]  ? __pfx___se_sys_mount+0x10/0x10
[  603.173493][T14681]  ? exc_page_fault+0x590/0x8b0
[  603.173523][T14681]  ? __x64_sys_mount+0x20/0xc0
[  603.173550][T14681]  do_syscall_64+0xf3/0x230
[  603.173569][T14681]  ? clear_bhb_loop+0x35/0x90
[  603.173597][T14681]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  603.173622][T14681] RIP: 0033:0x7f094378e58a
[  603.173640][T14681] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  603.173655][T14681] RSP: 002b:00007f09445ece68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  603.173674][T14681] RAX: ffffffffffffffda RBX: 00007f09445ecef0 RCX: 00007f094378e58a
[  603.173688][T14681] RDX: 000040000003b2c0 RSI: 000040000003b300 RDI: 00007f09445eceb0
[  603.173700][T14681] RBP: 000040000003b2c0 R08: 00007f09445ecef0 R09: 0000000000000000
[  603.173710][T14681] R10: 0000000000000000 R11: 0000000000000246 R12: 000040000003b300
[  603.173722][T14681] R13: 00007f09445eceb0 R14: 000000000003b281 R15: 000040000003b340
[  603.173757][T14681]  </TASK>
[  603.600059][T14681] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory.
[  603.693963][T14681] gfs2: fsid=syz:syz: error -17 adding sysfs files
[  604.330706][T14696] loop5: detected capacity change from 0 to 32768
[  604.356473][T14696] (syz.5.3663,14696,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  604.435683][T14696] (syz.5.3663,14696,1):ocfs2_fill_super:1177 ERROR: status = -22
[  605.826578][T14701] loop5: detected capacity change from 0 to 32768
[  605.889447][T14701] (syz.5.3666,14701,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  605.987376][T14701] (syz.5.3666,14701,0):ocfs2_fill_super:1177 ERROR: status = -22
[  606.060063][T14699] loop4: detected capacity change from 0 to 32768
[  606.110610][T14699] (syz.4.3665,14699,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  606.136333][T14707] loop2: detected capacity change from 0 to 512
[  606.143466][T14699] (syz.4.3665,14699,1):ocfs2_fill_super:1177 ERROR: status = -22
[  606.567008][T14713] loop2: detected capacity change from 0 to 1
[  606.629241][T14713] syz.2.3670: attempt to access beyond end of device
[  606.629241][T14713] loop2: rw=2048, sector=0, nr_sectors = 8 limit=1
[  606.670227][T14713] SQUASHFS error: Failed to read block 0x0: -5
[  606.698670][T14713] unable to read squashfs_super_block
[  607.012012][T14715] loop2: detected capacity change from 0 to 128
[  607.055510][T14715] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  607.095184][T14715] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  607.211584][T14703] loop1: detected capacity change from 0 to 65536
[  607.393578][T14717] loop2: detected capacity change from 0 to 1024
[  607.480129][T14717] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  607.762977][T14719] loop3: detected capacity change from 0 to 2048
[  607.841071][T14719] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  607.849230][T14721] loop2: detected capacity change from 0 to 136
[  607.881644][T14719] UDF-fs: Scanning with blocksize 512 failed
[  607.956446][T14719] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  608.158631][T14723] loop2: detected capacity change from 0 to 64
[  608.541525][T14729] loop1: detected capacity change from 0 to 256
[  608.582571][T14729] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  608.630126][T14729] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  608.668748][T14729] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  608.688235][T14709] loop5: detected capacity change from 0 to 65536
[  608.695700][T14729] UDF-fs: Scanning with blocksize 512 failed
[  608.743909][T14729] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  608.773096][T14709] (syz.5.3668,14709,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  608.814853][T14729] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  608.862285][T14709] (syz.5.3668,14709,1):ocfs2_fill_super:1177 ERROR: status = -22
[  609.159147][T14732] loop1: detected capacity change from 0 to 128
[  609.530720][T14734] loop1: detected capacity change from 0 to 512
[  609.801113][T14727] loop2: detected capacity change from 0 to 32768
[  609.854805][T14736] loop1: detected capacity change from 0 to 128
[  609.878755][T14727] (syz.2.3678,14727,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  609.939523][T14727] (syz.2.3678,14727,0):ocfs2_fill_super:1177 ERROR: status = -22
[  610.156716][T14739] loop4: detected capacity change from 0 to 128
[  610.357264][T14743] loop1: detected capacity change from 0 to 2048
[  610.504651][T14741] loop5: detected capacity change from 0 to 8192
[  610.668983][T14747] loop4: detected capacity change from 0 to 128
[  610.800929][T14749] loop1: detected capacity change from 0 to 256
[  610.848660][T14749] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  610.934013][T14749] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  610.966031][T14749] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  610.986594][T14751] loop5: detected capacity change from 0 to 128
[  611.000614][T14749] UDF-fs: Scanning with blocksize 512 failed
[  611.042266][T14749] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  611.081018][T14749] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  611.213784][T14753] loop4: detected capacity change from 0 to 4096
[  611.269739][T14753] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  612.317343][T14745] loop2: detected capacity change from 0 to 32768
[  612.352991][T14745] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz"
[  612.373986][T14755] loop5: detected capacity change from 0 to 32768
[  612.382240][T14745] dlm: no local IP address has been set
[  612.388386][T14745] dlm: cannot start dlm midcomms -107
[  612.395146][T14745] gfs2: fsid=syz:syz: dlm_new_lockspace error -107
[  612.453415][T14755] (syz.5.3690,14755,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  612.486820][T14755] (syz.5.3690,14755,1):ocfs2_fill_super:1177 ERROR: status = -22
[  612.545635][T14757] loop1: detected capacity change from 0 to 32768
[  612.742053][T14757] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  612.862298][T14757] XFS (loop1): Ending clean mount
[  612.887675][T14759] loop4: detected capacity change from 0 to 32768
[  613.014878][T14759] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  613.032557][ T5838] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  613.219352][T14784] netlink: 'syz.2.3696': attribute type 10 has an invalid length.
[  613.276369][T14784] macvlan0: entered promiscuous mode
[  613.281736][T14784] macvlan0: entered allmulticast mode
[  613.341441][T14759] XFS (loop4): Ending clean mount
[  613.419235][T14784] veth1_vlan: entered allmulticast mode
[  613.452018][ T5845] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  613.460269][T14784] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  614.335590][T14796] loop4: detected capacity change from 0 to 3
[  614.367734][T14796] syz.4.3701: attempt to access beyond end of device
[  614.367734][T14796] loop4: rw=2048, sector=0, nr_sectors = 8 limit=3
[  614.453304][T14796] SQUASHFS error: Failed to read block 0x0: -5
[  614.459562][T14796] unable to read squashfs_super_block
[  614.791545][T14801] loop2: detected capacity change from 0 to 2048
[  615.525378][T14804] loop4: detected capacity change from 0 to 32768
[  615.590793][T14804]  loop4: p1 p3 < p5 p6 >
[  616.213402][ T5851] udevd[5851]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory
[  616.235510][ T5844] udevd[5844]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory
[  616.239996][ T6644] udevd[6644]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  616.248321][ T6211] udevd[6211]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  616.466493][T14820] loop2: detected capacity change from 0 to 1024
[  616.621970][T14820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  616.710008][T14820] EXT4-fs warning (device loop2): ext4_rmdir:3201: inode #11: comm syz.2.3713: empty directory 'file1' has too many links (111)
[  616.940139][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  618.068487][T14868] netlink: 'syz.3.3734': attribute type 1 has an invalid length.
[  618.109496][T14868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3734'.
[  618.649444][T14888] loop5: detected capacity change from 0 to 512
[  618.704707][T14888] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  618.713294][T14877] loop3: detected capacity change from 0 to 8192
[  618.734115][T14888] UDF-fs: Scanning with blocksize 512 failed
[  618.769789][T14877] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  618.800339][T14888] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  618.817037][T14877] UDF-fs: Scanning with blocksize 512 failed
[  618.824890][T14888] UDF-fs: Scanning with blocksize 1024 failed
[  618.839425][T14877] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  618.863845][T14888] UDF-fs: warning (device loop5): udf_load_vrs: No VRS found
[  618.868683][T14877] UDF-fs: Scanning with blocksize 1024 failed
[  618.899563][T14888] UDF-fs: Scanning with blocksize 2048 failed
[  618.899563][T14895] netlink: 'syz.2.3748': attribute type 21 has an invalid length.
[  618.917304][T14888] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  618.927488][T14877] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  618.942265][T14895] netlink: 'syz.2.3748': attribute type 30 has an invalid length.
[  618.974333][T14877] UDF-fs: Scanning with blocksize 2048 failed
[  618.989493][T14877] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  619.020955][T14888] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  619.293414][T14903] loop2: detected capacity change from 0 to 2048
[  619.415394][T14903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  619.469614][T14912] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3756'.
[  619.536708][T14912] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3756'.
[  619.598377][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  620.094769][T14933] loop4: detected capacity change from 0 to 64
[  620.142075][T14935] loop5: detected capacity change from 0 to 256
[  620.682543][T14949] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  620.820594][T14956] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  620.972410][T14959] loop1: detected capacity change from 0 to 1764
[  621.308470][T14971] ip6t_srh: unknown srh match flags  4000
[  621.796830][    T9] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[  621.891770][T14993] ip6t_srh: unknown srh invflags A3A4
[  621.996950][    T9] usb 4-1: Using ep0 maxpacket: 8
[  622.004393][    T9] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  622.042358][    T9] usb 4-1: config 179 has no interface number 0
[  622.048689][    T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10
[  622.091139][    T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024
[  622.135472][    T9] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  622.162519][    T9] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  622.197912][    T9] usb 4-1: config 179 interface 65 has no altsetting 0
[  622.221697][    T9] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  622.246852][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  622.278031][T14979] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  622.332048][    T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input47
[  622.460162][ T5189] input input47: unable to receive magic message: -110
[  622.577189][ T5189] input input47: unable to receive magic message: -32
[  622.669508][ T5956] usb 4-1: USB disconnect, device number 119
[  622.669566][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  622.684176][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  622.687485][ T5189] input input47: unable to receive magic message: -32
[  622.715064][ T5956] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  622.877547][T15017] loop2: detected capacity change from 0 to 1024
[  623.186553][  T774] hfsplus: b-tree write err: -5, ino 4
[  623.249452][T15027] netlink: 'syz.4.3814': attribute type 10 has an invalid length.
[  623.268549][T15028] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  623.461678][T15027] team0: Port device wlan1 added
[  623.569999][T15037] netlink: 'syz.1.3817': attribute type 1 has an invalid length.
[  623.756075][T15044] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  625.230822][T15088] netlink: 'syz.3.3843': attribute type 4 has an invalid length.
[  625.238622][T15088] netlink: 'syz.3.3843': attribute type 4 has an invalid length.
[  625.302291][T15088] netlink: 'syz.3.3843': attribute type 4 has an invalid length.
[  625.336642][T15088] netlink: 'syz.3.3843': attribute type 4 has an invalid length.
[  625.344485][T15088] netlink: 'syz.3.3843': attribute type 4 has an invalid length.
[  625.359975][T15088] netlink: 'syz.3.3843': attribute type 4 has an invalid length.
[  625.371405][T15088] netlink: 'syz.3.3843': attribute type 4 has an invalid length.
[  625.383794][T15088] netlink: 'syz.3.3843': attribute type 4 has an invalid length.
[  625.399608][T15088] netlink: 'syz.3.3843': attribute type 4 has an invalid length.
[  625.409545][T15094] overlayfs: conflicting options: userxattr,redirect_dir=on
[  625.421132][ T5956] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[  625.446057][T15088] netlink: 'syz.3.3843': attribute type 4 has an invalid length.
[  625.623945][ T5956] usb 2-1: Using ep0 maxpacket: 16
[  625.678923][ T5956] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  625.714661][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.727297][ T5956] usb 2-1: Product: syz
[  625.738112][ T5956] usb 2-1: Manufacturer: syz
[  625.756314][ T5956] usb 2-1: SerialNumber: syz
[  625.793510][ T5956] r8152-cfgselector 2-1: Unknown version 0x0000
[  625.817354][ T5956] r8152-cfgselector 2-1: config 0 descriptor??
[  626.048592][T15111] xt_hashlimit: invalid rate
[  626.074368][ T5956] r8152-cfgselector 2-1: Unknown version 0x0000
[  626.091958][ T5956] r8152-cfgselector 2-1: bad CDC descriptors
[  626.254547][    T9] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[  626.319171][ T5856] r8152-cfgselector 2-1: USB disconnect, device number 111
[  626.447546][    T9] usb 4-1: Using ep0 maxpacket: 16
[  626.459742][    T9] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  626.467776][    T9] usb 4-1: config 0 has no interface number 0
[  626.530113][T15122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3860'.
[  626.532366][    T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  626.549102][T15122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3860'.
[  626.560207][T15122] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3860'.
[  626.561852][    T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  626.581798][T15122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3860'.
[  626.587357][    T9] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  626.601637][    T9] usb 4-1: Product: syz
[  626.605828][    T9] usb 4-1: SerialNumber: syz
[  626.638671][    T9] usb 4-1: config 0 descriptor??
[  626.660012][    T9] usbhid 4-1:0.8: couldn't find an input interrupt endpoint
[  626.803330][T15125] loop5: detected capacity change from 0 to 512
[  626.822727][T15103] loop2: detected capacity change from 0 to 32768
[  626.872276][T15125] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  626.899600][T15125] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  626.901347][ T5856] usb 4-1: USB disconnect, device number 120
[  627.039092][T13953] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  627.164620][T15134] loop4: detected capacity change from 0 to 2048
[  627.230693][T15134] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  627.364955][   T29] audit: type=1326 audit(1739285434.954:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15137 comm="syz.5.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f5d8cde9 code=0x7ffc0000
[  627.430372][   T29] audit: type=1326 audit(1739285434.954:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15137 comm="syz.5.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f5d8cde9 code=0x7ffc0000
[  627.548333][   T29] audit: type=1326 audit(1739285434.982:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15137 comm="syz.5.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fe6f5d8cde9 code=0x7ffc0000
[  627.639161][   T29] audit: type=1326 audit(1739285434.982:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15137 comm="syz.5.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f5d8cde9 code=0x7ffc0000
[  627.736895][   T29] audit: type=1326 audit(1739285434.982:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15137 comm="syz.5.3866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f5d8cde9 code=0x7ffc0000
[  627.997060][T15159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3875'.
[  628.007198][T15160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3877'.
[  628.204489][T15166] tmpfs: Bad value for 'mpol'
[  628.268467][   T29] audit: type=1326 audit(1739285435.796:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15167 comm="syz.1.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751298cde9 code=0x7ffc0000
[  628.301321][T15165] loop4: detected capacity change from 0 to 2048
[  628.357437][ T6644] udevd[6644]: incorrect nilfs2 checksum on /dev/loop4
[  628.377001][   T29] audit: type=1326 audit(1739285435.796:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15167 comm="syz.1.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751298cde9 code=0x7ffc0000
[  628.388142][T15165] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  628.499570][   T29] audit: type=1326 audit(1739285435.834:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15167 comm="syz.1.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f751298cde9 code=0x7ffc0000
[  628.530573][T15175] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  628.592232][   T29] audit: type=1326 audit(1739285435.834:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15167 comm="syz.1.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751298cde9 code=0x7ffc0000
[  628.702827][   T29] audit: type=1326 audit(1739285435.834:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15167 comm="syz.1.3881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751298cde9 code=0x7ffc0000
[  628.711197][T15183] sctp: [Deprecated]: syz.2.3888 (pid 15183) Use of int in maxseg socket option.
[  628.711197][T15183] Use struct sctp_assoc_value instead
[  628.748433][T15165] NILFS (loop4): failed to count free inodes: err=-34
[  629.071308][ T5845] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 8796093022222
[  629.122140][ T5845] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=16)
[  629.193039][ T5845] Remounting filesystem read-only
[  629.209088][ T5845] NILFS (loop4): error -5 truncating bmap (ino=16)
[  629.283679][ T5845] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer
[  629.412422][T15203] warning: `syz.5.3899' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  629.520038][T15208] loop4: detected capacity change from 0 to 764
[  629.784433][T15208] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  629.881291][T15214] bridge0: port 3(team0) entered blocking state
[  629.888010][T15214] bridge0: port 3(team0) entered disabled state
[  629.917073][T15214] team0: entered allmulticast mode
[  629.931437][T15214] team_slave_0: entered allmulticast mode
[  629.942213][T15214] team_slave_1: entered allmulticast mode
[  629.964931][T15214] team0: entered promiscuous mode
[  629.977314][T15214] team_slave_0: entered promiscuous mode
[  629.997152][T15214] team_slave_1: entered promiscuous mode
[  630.026928][T15214] bridge0: port 3(team0) entered blocking state
[  630.033992][T15214] bridge0: port 3(team0) entered forwarding state
[  630.389943][T15226] loop5: detected capacity change from 0 to 256
[  630.462068][T15226] exFAT-fs (loop5): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  630.623851][T15230] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  631.444709][   T35] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  631.624723][   T35] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  631.912728][   T35] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.024514][T15263] validate_nla: 46 callbacks suppressed
[  632.024533][T15263] netlink: 'syz.1.3930': attribute type 3 has an invalid length.
[  632.309305][   T35] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.692770][T15283] loop3: detected capacity change from 0 to 64
[  632.910007][   T35] team0: left allmulticast mode
[  632.930675][   T35] team_slave_0: left allmulticast mode
[  632.946687][   T35] team_slave_1: left allmulticast mode
[  632.952941][   T35] team0: left promiscuous mode
[  632.983374][   T35] team_slave_0: left promiscuous mode
[  632.995946][   T35] team_slave_1: left promiscuous mode
[  633.017508][   T35] bridge0: port 3(team0) entered disabled state
[  633.036072][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  633.046976][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  633.064487][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  633.075026][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  633.089506][   T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  633.091458][T15292] [U] v�3��f��"S��/��4:�XTz�W�t��lW��=
[  633.097816][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  633.117890][T15292] [U] J"�e:��"


[  633.250633][   T35] bridge_slave_1: left allmulticast mode
[  633.256401][   T35] bridge_slave_1: left promiscuous mode
[  633.316800][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  633.399208][   T35] bridge_slave_0: left allmulticast mode
[  633.407498][   T35] bridge_slave_0: left promiscuous mode
[  633.427832][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  633.733053][T15309] loop1: detected capacity change from 0 to 1764
[  634.121679][T15301] loop2: detected capacity change from 0 to 32768
[  634.138658][T15301] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3949 (15301)
[  634.210748][T15301] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  634.251134][T15301] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  634.288743][T15301] BTRFS info (device loop2): using free-space-tree
[  634.567572][T15301] tmpfs: Bad value for 'mpol'
[  634.636099][ T5855] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  634.718455][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  634.758013][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  634.796290][   T35] bond0 (unregistering): Released all slaves
[  635.201912][T15337] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  635.234590][T15342] autofs4:pid:15342:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(43008.1), cmd(0xc018937e)
[  635.320058][T15342] autofs4:pid:15342:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e)
[  635.341361][   T54] Bluetooth: hci5: command tx timeout
[  635.478944][T15349] loop1: detected capacity change from 0 to 256
[  635.735769][   T29] kauditd_printk_skb: 5 callbacks suppressed
[  635.735787][   T29] audit: type=1400 audit(1739285442.784:35): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A10EA0985277BDC57F2FECC9D0E0853AAC5F9FFFFFFA4176A7A0B551FA6A1B1A7E23BFE50DE47F188D5E869305C3313EB28CFCC342F6A6D5E67D4641F3E730E18B7ED4013AA6D638B4DDBEC86DC6DB88758C1C0D111 pid=15356 comm="syz.4.3964"
[  635.989738][T15363] 9pnet_fd: p9_fd_create_tcp (15363): problem connecting socket to 127.0.0.1
[  636.058285][T15365] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  636.105518][T15365] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  636.127364][T15365] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  636.550713][T15379] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  636.640469][T15381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  636.648221][T15381] IPv6: NLM_F_CREATE should be set when creating new route
[  636.655523][T15381] IPv6: NLM_F_CREATE should be set when creating new route
[  636.895678][   T35] hsr_slave_0: left promiscuous mode
[  636.951358][   T35] hsr_slave_1: left promiscuous mode
[  636.980752][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  637.010184][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  637.042822][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  637.050267][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  637.196907][   T35] veth1_macvtap: left promiscuous mode
[  637.210336][   T35] veth0_macvtap: left promiscuous mode
[  637.213514][T15401] Unsupported ieee802154 address type: 0
[  637.249885][   T35] veth1_vlan: left promiscuous mode
[  637.276865][   T35] veth0_vlan: left promiscuous mode
[  637.558212][   T54] Bluetooth: hci5: command tx timeout
[  637.882129][T15419] loop4: detected capacity change from 0 to 4096
[  637.892228][T15419] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  638.691013][   T35] team0 (unregistering): Port device team_slave_1 removed
[  638.765857][   T35] team0 (unregistering): Port device team_slave_0 removed
[  638.797510][   T29] audit: type=1326 audit(1739285445.637:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15430 comm="syz.4.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094378cde9 code=0x7ffc0000
[  638.832319][   T29] audit: type=1326 audit(1739285445.674:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15430 comm="syz.4.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094378cde9 code=0x7ffc0000
[  638.878001][   T29] audit: type=1326 audit(1739285445.674:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15430 comm="syz.4.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f094378cde9 code=0x7ffc0000
[  638.909416][   T29] audit: type=1326 audit(1739285445.674:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15430 comm="syz.4.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094378cde9 code=0x7ffc0000
[  638.950961][   T29] audit: type=1326 audit(1739285445.674:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15430 comm="syz.4.3996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094378cde9 code=0x7ffc0000
[  639.622178][T15417] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  639.773887][T15440] syz.1.4000: attempt to access beyond end of device
[  639.773887][T15440] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0
[  639.777876][   T54] Bluetooth: hci5: command tx timeout
[  639.853271][T15440] syz.1.4000: attempt to access beyond end of device
[  639.853271][T15440] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0
[  639.970455][T15440] syz.1.4000: attempt to access beyond end of device
[  639.970455][T15440] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0
[  640.022209][T15288] chnl_net:caif_netlink_parms(): no params data found
[  640.041999][T15440] syz.1.4000: attempt to access beyond end of device
[  640.041999][T15440] nbd1: rw=0, sector=18, nr_sectors = 2 limit=0
[  640.119469][T15440] syz.1.4000: attempt to access beyond end of device
[  640.119469][T15440] nbd1: rw=0, sector=30, nr_sectors = 2 limit=0
[  640.205821][T15440] syz.1.4000: attempt to access beyond end of device
[  640.205821][T15440] nbd1: rw=0, sector=36, nr_sectors = 2 limit=0
[  640.269703][T15440] VFS: unable to find oldfs superblock on device nbd1
[  641.038247][T15288] bridge0: port 1(bridge_slave_0) entered blocking state
[  641.048995][T15288] bridge0: port 1(bridge_slave_0) entered disabled state
[  641.121082][T15288] bridge_slave_0: entered allmulticast mode
[  641.151285][T15288] bridge_slave_0: entered promiscuous mode
[  641.211033][T15288] bridge0: port 2(bridge_slave_1) entered blocking state
[  641.218269][T15288] bridge0: port 2(bridge_slave_1) entered disabled state
[  641.269422][T15288] bridge_slave_1: entered allmulticast mode
[  641.301264][T15288] bridge_slave_1: entered promiscuous mode
[  641.322375][T15491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4017'.
[  641.510134][T15494] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4018'.
[  641.550981][T15494] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4018'.
[  641.622307][T15288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  641.672416][T15288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  641.883303][T15288] team0: Port device team_slave_0 added
[  641.917277][T15502] netlink: 'syz.4.4022': attribute type 12 has an invalid length.
[  641.941095][T15458] loop3: detected capacity change from 0 to 32768
[  641.987900][T15458] 
[  641.987900][T15458]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  641.987900][T15458] 
[  642.003000][   T54] Bluetooth: hci5: command tx timeout
[  642.011389][T15288] team0: Port device team_slave_1 added
[  642.125490][T15458] ERROR: (device loop3): ea_get: invalid ea.flag
[  642.125490][T15458] 
[  642.182590][T15458] ERROR: (device loop3): remounting filesystem as read-only
[  642.345530][T15288] batman_adv: batadv0: Adding interface: batadv_slave_0
[  642.395911][T15288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  642.470097][T15288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  642.543865][T15288] batman_adv: batadv0: Adding interface: batadv_slave_1
[  642.589467][T15288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  642.601897][T15498] loop1: detected capacity change from 0 to 32768
[  642.695414][T15498] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4020 (15498)
[  642.741567][T15288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  642.884349][T15498] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  642.934408][T15498] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  642.984928][T15498] BTRFS info (device loop1): using free-space-tree
[  643.016106][T15288] hsr_slave_0: entered promiscuous mode
[  643.064658][T15288] hsr_slave_1: entered promiscuous mode
[  643.106736][T15535] loop3: detected capacity change from 0 to 256
[  643.121929][T15288] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  643.156028][T15288] Cannot create hsr debugfs directory
[  643.249918][T15498] BTRFS info (device loop1): rebuilding free space tree
[  643.498239][   T46] usb 4-1: new full-speed USB device number 121 using dummy_hcd
[  643.564802][ T5838] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  643.731576][   T46] usb 4-1: config 5 has an invalid interface number: 123 but max is 0
[  643.763323][   T46] usb 4-1: config 5 has no interface number 0
[  643.783222][T15557] ipt_REJECT: TCP_RESET invalid for non-tcp
[  643.803047][   T46] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  643.876265][   T46] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86
[  643.954716][   T46] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid maxpacket 13625, setting to 64
[  643.992384][   T46] usb 4-1: config 5 interface 123 has no altsetting 0
[  644.008101][   T46] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  644.064657][   T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  644.072701][   T46] usb 4-1: Product: syz
[  644.096932][   T46] usb 4-1: Manufacturer: syz
[  644.101582][   T46] usb 4-1: SerialNumber: syz
[  644.153560][T15535] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  644.154144][T15566] loop2: detected capacity change from 0 to 256
[  644.468584][   T46] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device.
[  644.596550][   T46] usb 4-1: USB disconnect, device number 121
[  644.630038][T15576] syz.1.4043: attempt to access beyond end of device
[  644.630038][T15576] loop1: rw=0, sector=64, nr_sectors = 8 limit=0
[  644.702465][T15576] syz.1.4043: attempt to access beyond end of device
[  644.702465][T15576] loop1: rw=0, sector=120, nr_sectors = 8 limit=0
[  644.749384][T15576] Mount JFS Failure: -5
[  644.753588][T15576] jfs_mount failed w/return code = -5
[  644.879566][T15288] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  644.947457][T15288] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  644.995331][T15582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4046'.
[  645.027329][T15288] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  645.112796][T15288] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  645.806529][T15288] 8021q: adding VLAN 0 to HW filter on device bond0
[  645.931274][T15288] 8021q: adding VLAN 0 to HW filter on device team0
[  646.057699][  T774] bridge0: port 1(bridge_slave_0) entered blocking state
[  646.060624][T15609] loop3: detected capacity change from 0 to 128
[  646.064941][  T774] bridge0: port 1(bridge_slave_0) entered forwarding state
[  646.122284][  T774] bridge0: port 2(bridge_slave_1) entered blocking state
[  646.129550][  T774] bridge0: port 2(bridge_slave_1) entered forwarding state
[  646.580404][T15580] loop4: detected capacity change from 0 to 32768
[  646.612163][T15580] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4045 (15580)
[  646.695602][T15580] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  646.754796][T15580] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  646.819831][T15580] BTRFS info (device loop4): using free-space-tree
[  647.039787][T15651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4064'.
[  647.287677][T15288] 8021q: adding VLAN 0 to HW filter on device batadv0
[  647.307571][ T5845] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  647.884243][T15673] openvswitch: netlink: VXLAN extension message has 2 unknown bytes.
[  648.539624][T15696] netlink: 'syz.2.4078': attribute type 5 has an invalid length.
[  648.589880][T15698] loop1: detected capacity change from 0 to 512
[  648.693905][T15698] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13
[  648.775188][T15698] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4080: invalid indirect mapped block 2683928664 (level 1)
[  648.824742][T15698] EXT4-fs (loop1): Remounting filesystem read-only
[  648.831945][T15698] EXT4-fs (loop1): 1 truncate cleaned up
[  648.858804][T15288] veth0_vlan: entered promiscuous mode
[  648.864302][T15698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  648.935883][T15288] veth1_vlan: entered promiscuous mode
[  649.039650][T15288] veth0_macvtap: entered promiscuous mode
[  649.083140][T15288] veth1_macvtap: entered promiscuous mode
[  649.131133][ T5838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  649.164984][T15288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  649.214373][T15288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.239569][T15288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  649.281557][T15288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.291410][T15288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  649.363838][T15288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.389511][T15288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  649.446683][T15288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.483178][T15288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  649.524545][T15288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.546317][T15288] batman_adv: batadv0: Interface activated: batadv_slave_0
[  649.600603][T15288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  649.672196][T15288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.711934][T15288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  649.727661][T15288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.745300][T15288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  649.758501][T15288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.773163][T15288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  649.796148][T15288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.835290][T15288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  649.863922][T15288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  649.886231][T15288] batman_adv: batadv0: Interface activated: batadv_slave_1
[  649.943593][T15288] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  649.995175][T15288] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  650.011078][T15288] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  650.024324][T15288] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  650.382071][T15749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4100'.
[  650.712466][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  650.724770][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  650.821316][T15761] loop2: detected capacity change from 0 to 512
[  650.885808][T15761] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  650.913628][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  650.963290][T15761] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[  650.983814][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  650.992292][T15761] System zones: 1-12
[  650.996571][T15761] EXT4-fs (loop2): orphan cleanup on readonly fs
[  651.064172][T15761] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4104: bg 0: block 361: padding at end of block bitmap is not set
[  651.082182][T15761] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  651.093317][T15761] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #11: comm syz.2.4104: attempt to clear invalid blocks 33619980 len 1
[  651.130887][T15772] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4107'.
[  651.143425][T15761] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4104: invalid indirect mapped block 1811939328 (level 0)
[  651.191681][T15761] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4104: invalid indirect mapped block 2 (level 2)
[  651.251576][T15778] loop3: detected capacity change from 0 to 1024
[  651.295307][T15761] EXT4-fs (loop2): 1 truncate cleaned up
[  651.306191][T15761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  651.333258][T15779] loop1: detected capacity change from 0 to 1024
[  651.412650][T15761] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (17031!=33349)
[  651.423263][T15779] hfsplus: bad catalog entry type
[  651.451906][T15782] syz.4.4110: attempt to access beyond end of device
[  651.451906][T15782] loop9: rw=0, sector=0, nr_sectors = 1 limit=0
[  651.493076][T15782] FAT-fs (loop9): unable to read boot sector
[  651.667076][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  651.784837][ T5856] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  651.975562][ T5856] usb 7-1: Using ep0 maxpacket: 16
[  652.049090][ T5856] usb 7-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30
[  652.061561][   T29] audit: type=1400 audit(1739285458.040:41): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=15798 comm="syz.4.4116"
[  652.125905][ T5856] usb 7-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247
[  652.181108][ T5856] usb 7-1: config 0 interface 0 has no altsetting 0
[  652.204016][ T5856] usb 7-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31
[  652.221509][ T5856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.262202][ T5856] usb 7-1: Product: syz
[  652.272441][ T5856] usb 7-1: Manufacturer: syz
[  652.295046][ T5856] usb 7-1: SerialNumber: syz
[  652.310092][ T5856] usb 7-1: config 0 descriptor??
[  652.352869][ T5856] usb 7-1: cannot find UAC_HEADER
[  652.467970][ T5856] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22
[  652.613278][ T6211] udevd[6211]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  652.618872][   T25] usb 7-1: USB disconnect, device number 2
[  652.704353][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  652.710824][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  653.170337][T15826] cifs: Unknown parameter 'no'�a��N�[G�zob,er��;%j��
[  653.170337][T15826] ��z�,�@q�������J#�"��h/.�W1ȱ�nNC�"�C�׈�E)�8+����'
[  653.309738][   T54] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1
[  653.317853][   T54] Bluetooth: hci2: unexpected event for opcode 0x203e
[  653.573837][T15835] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4127'.
[  653.641671][T15796] loop2: detected capacity change from 0 to 40427
[  653.689019][T15796] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  653.752329][T15796] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  653.764015][T15796] F2FS-fs (loop2): build fault injection attr: rate: 18446, type: 0x1fffff
[  653.824291][T15796] F2FS-fs (loop2): invalid crc value
[  653.874549][T15796] F2FS-fs (loop2): Found nat_bits in checkpoint
[  654.041028][T15845] team0: Port device team_slave_0 removed
[  654.055855][T15845] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  654.130946][T15796] F2FS-fs (loop2): Start checkpoint disabled!
[  654.178419][T15796] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  654.210103][T15796] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  654.488203][ T5956] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[  654.575047][T15862] loop3: detected capacity change from 0 to 512
[  654.648421][T15862] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  654.656402][T15862] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2842c018, mo2=0002]
[  654.689448][T15867] xt_l2tp: invalid flags combination: c
[  654.698334][ T5956] usb 5-1: config 0 has an invalid interface number: 135 but max is 0
[  654.725215][T15862] System zones: 0-2, 18-18, 34-35
[  654.745270][ T5956] usb 5-1: config 0 has no interface number 0
[  654.751489][ T5956] usb 5-1: config 0 interface 135 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 32
[  654.794515][T15862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  654.826353][ T5956] usb 5-1: config 0 interface 135 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  654.888495][ T5956] usb 5-1: New USB device found, idVendor=05ac, idProduct=1402, bcdDevice=45.65
[  654.925513][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  654.939744][ T5956] usb 5-1: Product: syz
[  654.943993][ T5956] usb 5-1: Manufacturer: syz
[  654.958992][T15862] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  654.973329][T15862] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2842c018, mo2=0002]
[  654.984422][ T5956] usb 5-1: SerialNumber: syz
[  655.003408][ T5956] usb 5-1: config 0 descriptor??
[  655.004796][T15853] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  655.004946][T15853] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  655.156646][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  655.237105][T15853] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  655.237244][T15853] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  655.455328][ T5956] asix 5-1:0.135 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  655.493350][ T5956] asix 5-1:0.135: probe with driver asix failed with error -71
[  655.546908][ T5956] usb 5-1: USB disconnect, device number 110
[  656.318087][T15909] overlayfs: workdir and upperdir must be separate subtrees
[  656.727252][T15929] loop2: detected capacity change from 0 to 22
[  656.771982][T15929] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  656.803220][T15929] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  657.699329][T15960] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  657.812558][    T8] usb 3-1: new full-speed USB device number 113 using dummy_hcd
[  658.023400][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  658.070940][    T8] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  658.118431][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.133506][    T8] usb 3-1: Product: syz
[  658.137718][    T8] usb 3-1: Manufacturer: syz
[  658.174936][    T8] usb 3-1: SerialNumber: syz
[  658.231193][    T8] usb 3-1: config 0 descriptor??
[  658.237894][T15932] loop1: detected capacity change from 0 to 32768
[  658.284596][T15932] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4163 (15932)
[  658.403806][T15932] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  658.468632][T15932] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  658.696397][    T8] usb 3-1: USB disconnect, device number 113
[  658.794966][T15932] BTRFS info (device loop1): rebuilding free space tree
[  658.858175][T16009] loop4: detected capacity change from 0 to 16
[  658.864667][   T46] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[  658.873343][T16008] loop6: detected capacity change from 0 to 64
[  658.899543][T15932] BTRFS info (device loop1): disabling free space tree
[  658.900108][T16009] erofs (device loop4): mounted with root inode @ nid 36.
[  658.913737][T15932] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  658.943896][T15932] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  659.082871][   T46] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  659.104287][ T5838] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  659.105289][   T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.128626][ T6178] udevd[6178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  659.150090][   T46] usb 4-1: Product: syz
[  659.154303][   T46] usb 4-1: Manufacturer: syz
[  659.166268][   T46] usb 4-1: SerialNumber: syz
[  659.217434][   T46] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  659.410077][ T5956] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  659.845147][T16023] loop6: detected capacity change from 0 to 1024
[  660.012873][    T8] usb 4-1: USB disconnect, device number 122
[  660.187310][T14591] hfsplus: b-tree write err: -5, ino 4
[  660.580174][ T5956] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  660.614669][ T5956] ath9k_htc: Failed to initialize the device
[  660.670181][    T8] usb 4-1: ath9k_htc: USB layer deinitialized
[  660.713121][T16044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4204'.
[  661.271971][T16065] netlink: 'syz.3.4216': attribute type 1 has an invalid length.
[  661.284643][T16068] x_tables: unsorted entry at hook 2
[  661.340655][T16065] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  661.789345][   T29] audit: type=1326 audit(1739285467.151:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.4.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094378cde9 code=0x7ffc0000
[  661.898056][   T29] audit: type=1326 audit(1739285467.151:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.4.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094378cde9 code=0x7ffc0000
[  662.003192][   T29] audit: type=1326 audit(1739285467.189:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.4.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f094378cde9 code=0x7ffc0000
[  662.068786][T16094] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4229'.
[  662.098546][   T29] audit: type=1326 audit(1739285467.189:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16085 comm="syz.4.4225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094378cde9 code=0x7ffc0000
[  662.942888][T16123] loop1: detected capacity change from 0 to 64
[  663.123487][T16123] Trying to free block not in datazone
[  663.163992][T16123] Trying to free block not in datazone
[  663.211399][T16123] Trying to free block not in datazone
[  663.257758][T16123] Trying to free block not in datazone
[  663.542171][T16079] loop6: detected capacity change from 0 to 32768
[  663.665293][T16079] gfs2: fsid=_dev_net_tun: Trying to join cluster "lock_nolock", "_dev_net_tun"
[  663.724953][T16079] gfs2: fsid=_dev_net_tun: Now mounting FS (format 1801)...
[  663.811386][T16149] netlink: 'syz.1.4251': attribute type 3 has an invalid length.
[  663.830195][T16079] gfs2: fsid=_dev_net_tun.0: journal 0 mapped with 16 extents in 0ms
[  663.889196][   T25] gfs2: fsid=_dev_net_tun.0: jid=0, already locked for use
[  663.906083][   T25] gfs2: fsid=_dev_net_tun.0: jid=0: Looking at journal...
[  663.920806][T16114] loop3: detected capacity change from 0 to 32768
[  663.943545][T16114] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4238 (16114)
[  663.996753][T16114] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  664.035636][T16114] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  664.082060][T16114] BTRFS info (device loop3): using free-space-tree
[  664.138670][   T25] gfs2: fsid=_dev_net_tun.0: jid=0: Journal head lookup took 217ms
[  664.193806][   T25] gfs2: fsid=_dev_net_tun.0: jid=0: Done
[  664.223581][T16079] gfs2: fsid=_dev_net_tun.0: first mount done, others may mount
[  664.740232][T16139] loop4: detected capacity change from 0 to 32768
[  664.751209][ T5839] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  664.795446][T16139] JBD2: Ignoring recovery information on journal
[  664.964587][T16139] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  665.372378][ T5845] ocfs2: Unmounting device (7,4) on (node local)
[  665.605159][T16197] loop6: detected capacity change from 0 to 2048
[  665.672309][T16197] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  666.605440][T16231] loop2: detected capacity change from 0 to 1024
[  666.751386][T16238] netlink: 'syz.1.4284': attribute type 2 has an invalid length.
[  666.769986][T16238] netlink: 25 bytes leftover after parsing attributes in process `syz.1.4284'.
[  666.899784][ T1139] hfsplus: b-tree write err: -5, ino 4
[  667.005746][T16246] loop4: detected capacity change from 0 to 256
[  667.116535][T16246] FAT-fs (loop4): Directory bread(block 64) failed
[  667.135183][T16251] QAT: Stopping all acceleration devices.
[  667.162321][T16246] FAT-fs (loop4): Directory bread(block 65) failed
[  667.192537][T16246] FAT-fs (loop4): Directory bread(block 66) failed
[  667.215200][T16253] sit0: entered promiscuous mode
[  667.222961][T16246] FAT-fs (loop4): Directory bread(block 67) failed
[  667.249669][T16246] FAT-fs (loop4): Directory bread(block 68) failed
[  667.262224][T16253] netlink: 'syz.1.4290': attribute type 1 has an invalid length.
[  667.280541][T16246] FAT-fs (loop4): Directory bread(block 69) failed
[  667.312646][T16246] FAT-fs (loop4): Directory bread(block 70) failed
[  667.365971][T16246] FAT-fs (loop4): Directory bread(block 71) failed
[  667.396948][T16246] FAT-fs (loop4): Directory bread(block 72) failed
[  667.434406][T16246] FAT-fs (loop4): Directory bread(block 73) failed
[  667.621018][T16266] loop1: detected capacity change from 0 to 16
[  667.661049][T16266] erofs (device loop1): mounted with root inode @ nid 36.
[  667.789887][T16271] loop2: detected capacity change from 0 to 512
[  667.868988][T16271] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  667.914268][T16271] EXT4-fs (loop2): 1 truncate cleaned up
[  667.996263][T16271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  668.146903][T16271] EXT4-fs error (device loop2): ext4_map_blocks:673: inode #2: block 4: comm syz.2.4296: lblock 0 mapped to illegal pblock 4 (length 1)
[  668.393194][T16287] loop4: detected capacity change from 0 to 256
[  668.507472][T16292] loop6: detected capacity change from 0 to 128
[  668.511217][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  668.560861][T16292] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  669.394856][T16314] loop4: detected capacity change from 0 to 16
[  669.465530][T16314] erofs (device loop4): mounted with root inode @ nid 36.
[  670.412039][T16300] loop2: detected capacity change from 0 to 32768
[  670.476714][T16300] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4304 (16300)
[  670.572454][T16300] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  670.618850][T16300] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  670.684016][T16300] BTRFS info (device loop2): using free-space-tree
[  670.937611][T16300] BTRFS info (device loop2): resizing devid 3
[  670.983445][T16300] BTRFS info (device loop2): resizer unable to find device 3
[  671.170118][ T5855] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  671.288285][T16266] erofs (device loop1): read error -117 @ 8200 of nid 36
[  671.968591][T16390] loop2: detected capacity change from 0 to 8
[  672.142710][T16336] loop3: detected capacity change from 0 to 32768
[  672.574481][T16336] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open
[  672.670969][T16411] netlink: 'syz.4.4336': attribute type 5 has an invalid length.
[  672.684767][T16336] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete
[  673.135075][T16336] bcachefs: bch2_fs_get_tree() error: EINVAL
[  673.148621][T16419] Illegal XDP return value 4294967282 on prog  (id 301) dev N/A, expect packet loss!
[  673.682422][T16429] loop4: detected capacity change from 0 to 2048
[  673.773373][T16429] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  673.845957][T16435] dvmrp0: entered allmulticast mode
[  674.069316][T16406] infiniband syz1: set active
[  674.119458][T16406] infiniband syz1: added team_slave_0
[  674.143981][T16406] syz1: rxe_create_cq: returned err = -12
[  674.212344][T16406] infiniband syz1: Couldn't create ib_mad CQ
[  674.217998][T16445] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  674.234518][T16406] infiniband syz1: Couldn't open port 1
[  674.453022][T16406] RDS/IB: syz1: added
[  674.492985][T16406] smc: adding ib device syz1 with port count 1
[  674.499435][T16406] smc:    ib device syz1 port 1 has pnetid 
[  675.263577][T16473] ip6t_srh: unknown srh match flags  FDC7
[  675.645692][T16440] loop3: detected capacity change from 0 to 32768
[  675.686762][T16440] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4345 (16440)
[  675.826520][T16440] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  675.884750][T16440] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  675.940766][T16440] BTRFS info (device loop3): using free-space-tree
[  676.623559][ T5839] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  677.466459][T16546] loop6: detected capacity change from 0 to 1024
[  677.538794][T16545] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  677.615300][T16545] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  677.647938][T15288] hfsplus: bad catalog entry type
[  677.692500][T15288] hfsplus: bad catalog entry type
[  677.886866][  T774] hfsplus: b-tree write err: -5, ino 4
[  678.069526][T16526] loop1: detected capacity change from 0 to 32768
[  678.758351][   T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  679.113146][   T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  679.430607][   T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  679.431135][T16552] loop3: detected capacity change from 0 to 32768
[  679.565469][T16552] __jfs_setxattr: xattr_size = 1857, new_size = 2089
[  679.743150][   T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  679.777851][T16561] loop4: detected capacity change from 0 to 32768
[  679.916562][T16561] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  680.234213][T16561] XFS (loop4): Ending clean mount
[  680.315553][T16561] XFS (loop4): Quotacheck needed: Please wait.
[  680.363555][   T12] bridge_slave_1: left allmulticast mode
[  680.415549][   T12] bridge_slave_1: left promiscuous mode
[  680.449862][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  680.540675][   T12] bridge_slave_0: left allmulticast mode
[  680.551578][T16561] XFS (loop4): Quotacheck: Done.
[  680.557272][   T12] bridge_slave_0: left promiscuous mode
[  680.586375][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  680.774593][ T5845] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  680.864875][T13752] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  680.881093][T13752] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  680.892552][T13752] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  680.910128][T13752] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  680.926517][T13752] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  680.947385][T13752] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  682.276029][T16638] loop3: detected capacity change from 0 to 256
[  682.357237][T16638] FAT-fs (loop3): Directory bread(block 64) failed
[  682.368074][T16638] FAT-fs (loop3): Directory bread(block 65) failed
[  682.393099][T16638] FAT-fs (loop3): Directory bread(block 66) failed
[  682.399684][T16638] FAT-fs (loop3): Directory bread(block 67) failed
[  682.418409][T16638] FAT-fs (loop3): Directory bread(block 68) failed
[  682.445065][T16638] FAT-fs (loop3): Directory bread(block 69) failed
[  682.469487][T16638] FAT-fs (loop3): Directory bread(block 70) failed
[  682.476248][T16638] FAT-fs (loop3): Directory bread(block 71) failed
[  682.482985][T16638] FAT-fs (loop3): Directory bread(block 72) failed
[  682.490106][T16638] FAT-fs (loop3): Directory bread(block 73) failed
[  682.548027][T16638] syz.3.4400: attempt to access beyond end of device
[  682.548027][T16638] loop3: rw=0, sector=1256, nr_sectors = 4 limit=256
[  682.578231][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  682.596918][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  682.619152][T16638] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 328)
[  682.634571][   T12] bond0 (unregistering): Released all slaves
[  682.645625][T16638] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 328)
[  682.683127][   T12] bond1 (unregistering): Released all slaves
[  683.224189][   T54] Bluetooth: hci5: command tx timeout
[  683.255817][ T5956] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[  683.449972][ T5956] usb 4-1: Using ep0 maxpacket: 32
[  683.464335][ T5956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  683.475262][ T5956] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  683.506564][ T5956] usb 4-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  683.530323][ T5956] usb 4-1: config 0 interface 0 has no altsetting 1
[  683.603737][ T5956] usb 4-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57
[  683.625492][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.657234][ T5956] usb 4-1: Product: syz
[  683.661456][ T5956] usb 4-1: Manufacturer: syz
[  683.686358][ T5956] usb 4-1: SerialNumber: syz
[  683.716781][ T5956] usb 4-1: config 0 descriptor??
[  683.963989][T16676] netlink: 'syz.4.4413': attribute type 10 has an invalid length.
[  684.009171][T16676] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4413'.
[  684.067892][T16676] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  684.246555][    T8] usb 4-1: USB disconnect, device number 123
[  684.408739][T16687] netlink: 'syz.4.4418': attribute type 2 has an invalid length.
[  684.441668][T16687] netlink: 'syz.4.4418': attribute type 8 has an invalid length.
[  684.501160][T16687] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4418'.
[  684.815244][T16696] loop2: detected capacity change from 0 to 256
[  684.967632][T16696] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  685.054128][T16696] exFAT-fs (loop2): start_clu is invalid cluster(0xffffffff)
[  685.449112][   T54] Bluetooth: hci5: command tx timeout
[  685.790202][T16723] SET target dimension over the limit!
[  686.037267][   T12] hsr_slave_0: left promiscuous mode
[  686.048767][   T12] hsr_slave_1: left promiscuous mode
[  686.060103][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  686.082001][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  686.136407][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  686.168425][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  686.334253][   T12] veth1_macvtap: left promiscuous mode
[  686.355219][   T12] veth0_macvtap: left promiscuous mode
[  686.385567][   T12] veth1_vlan: left promiscuous mode
[  686.396311][   T12] veth0_vlan: left promiscuous mode
[  686.584893][T16706] loop4: detected capacity change from 0 to 32768
[  686.859300][T16750] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4438'.
[  686.922033][T16706] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): filesystem UUID already open
[  686.937410][T16719] loop2: detected capacity change from 0 to 32768
[  687.026011][T16706] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete
[  687.026851][T16719] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  687.392020][T16719] XFS (loop2): Ending clean mount
[  687.411947][T16706] bcachefs: bch2_fs_get_tree() error: EINVAL
[  687.454235][T16719] XFS (loop2): Quotacheck needed: Please wait.
[  687.642664][T16719] XFS (loop2): Quotacheck: Done.
[  687.694566][   T54] Bluetooth: hci5: command tx timeout
[  687.741513][T16735] loop1: detected capacity change from 0 to 32768
[  687.800286][T16735] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4435 (16735)
[  687.849476][ T5855] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  687.949343][T16735] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  688.002321][T16735] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  688.011006][T16735] BTRFS info (device loop1): disk space caching is enabled
[  688.109205][T16735] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  688.324140][T16762] loop3: detected capacity change from 0 to 32768
[  688.348398][T16762] BTRFS: device /dev/loop3 (7:3) using temp-fsid 13168f9e-f6bf-41ac-8351-90d4727f493a
[  688.358722][T16762] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4440 (16762)
[  688.372444][T16768] loop4: detected capacity change from 0 to 1024
[  688.412450][T16762] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  688.437938][T16762] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  688.456109][T16762] BTRFS info (device loop3): using free-space-tree
[  688.535975][T16735] BTRFS info (device loop1): rebuilding free space tree
[  688.540469][T16768] hfsplus: inconsistency in B*Tree (1,0,2,1,0)
[  688.644295][T16768] hfsplus: inconsistency in B*Tree (1,0,2,1,0)
[  688.742696][T16735] BTRFS info (device loop1): disabling free space tree
[  688.749833][T16735] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  688.786731][T16735] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  688.930330][ T5839] BTRFS info (device loop3): last unmount of filesystem 13168f9e-f6bf-41ac-8351-90d4727f493a
[  689.001666][T16735] BTRFS error: failed to open device for path � with flags 0x1: -2
[  689.210550][ T5838] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  689.898761][   T54] Bluetooth: hci5: command tx timeout
[  689.988407][   T12] team0 (unregistering): Port device team_slave_1 removed
[  690.365968][ T5956] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[  690.554516][ T5956] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  690.575369][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  690.607192][ T5956] usb 2-1: config 0 descriptor??
[  691.081817][ T5956] ath6kl: Failed to submit usb control message: -71
[  691.088512][ T5956] ath6kl: unable to send the bmi data to the device: -71
[  691.124302][ T5956] ath6kl: Unable to send get target info: -71
[  691.134690][ T5956] ath6kl: Failed to init ath6kl core: -71
[  691.145839][ T5956] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71
[  691.160242][T16809] bridge_slave_0: left allmulticast mode
[  691.165923][T16809] bridge_slave_0: left promiscuous mode
[  691.175992][ T5956] usb 2-1: USB disconnect, device number 112
[  691.211640][T16809] bridge0: port 1(bridge_slave_0) entered disabled state
[  691.236553][T16809] bridge_slave_1: left allmulticast mode
[  691.243179][T16809] bridge_slave_1: left promiscuous mode
[  691.249426][T16809] bridge0: port 2(bridge_slave_1) entered disabled state
[  691.262306][T16809] bond0: (slave bond_slave_0): Releasing backup interface
[  691.278209][T16809] bond0: (slave bond_slave_1): Releasing backup interface
[  691.309403][T16809] team0: Port device team_slave_0 removed
[  691.331115][T16809] team0: Port device team_slave_1 removed
[  691.337454][T16809] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  691.349357][T16809] batman_adv: batadv0: Removing interface: batadv_slave_0
[  691.366012][T16809] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  691.375401][T16809] batman_adv: batadv0: Removing interface: batadv_slave_1
[  691.429460][T16809] team0: Port device wlan1 removed
[  691.695335][T16832] loop3: detected capacity change from 0 to 128
[  691.804938][T16832] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  691.837867][T16603] chnl_net:caif_netlink_parms(): no params data found
[  691.949292][T16832] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w. Quota mode: none.
[  692.011451][T16832] ext4 filesystem being remounted at /934/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  692.237689][ T5839] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  692.424104][T16603] bridge0: port 1(bridge_slave_0) entered blocking state
[  692.457819][T16603] bridge0: port 1(bridge_slave_0) entered disabled state
[  692.479070][T16603] bridge_slave_0: entered allmulticast mode
[  692.501399][T16603] bridge_slave_0: entered promiscuous mode
[  692.533439][T16850] lo speed is unknown, defaulting to 1000
[  692.533673][T16603] bridge0: port 2(bridge_slave_1) entered blocking state
[  692.593528][T16603] bridge0: port 2(bridge_slave_1) entered disabled state
[  692.620826][T16603] bridge_slave_1: entered allmulticast mode
[  692.652799][T16603] bridge_slave_1: entered promiscuous mode
[  692.753205][T16850] lo speed is unknown, defaulting to 1000
[  692.827550][T16850] lo speed is unknown, defaulting to 1000
[  692.831615][T16603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  692.961561][T16603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  693.182318][T16850] infiniband syz0: set down
[  693.205990][T16850] infiniband syz0: added lo
[  693.321342][T16836] loop4: detected capacity change from 0 to 32768
[  693.358488][ T5956] lo speed is unknown, defaulting to 1000
[  693.382732][T16836] JBD2: Ignoring recovery information on journal
[  693.429503][T16877] netlink: 'syz.3.4471': attribute type 1 has an invalid length.
[  693.479653][T16850] RDS/IB: syz0: added
[  693.484229][T16850] smc: adding ib device syz0 with port count 1
[  693.491201][T16850] smc:    ib device syz0 port 1 has pnetid 
[  693.511846][T16879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4470'.
[  693.514467][T16877] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4471'.
[  693.521523][T16879] netlink: 'syz.1.4470': attribute type 1 has an invalid length.
[  693.564842][T16879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4470'.
[  693.598606][T16836] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  693.623906][T16603] team0: Port device team_slave_0 added
[  693.653685][ T5956] lo speed is unknown, defaulting to 1000
[  693.663303][T16603] team0: Port device team_slave_1 added
[  693.723016][T16850] lo speed is unknown, defaulting to 1000
[  693.868418][T16603] batman_adv: batadv0: Adding interface: batadv_slave_0
[  693.885443][T16603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  693.886830][ T5845] ocfs2: Unmounting device (7,4) on (node local)
[  693.934050][T16603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  694.026256][T16884] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4472'.
[  694.045771][T16886] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  694.084446][T16603] batman_adv: batadv0: Adding interface: batadv_slave_1
[  694.106564][T16603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  694.132468][    C0] vkms_vblank_simulate: vblank timer overrun
[  694.183685][T16603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  694.484644][T16603] hsr_slave_0: entered promiscuous mode
[  694.546870][T16603] hsr_slave_1: entered promiscuous mode
[  694.553476][T16603] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  694.593246][T16603] Cannot create hsr debugfs directory
[  694.615179][T16850] lo speed is unknown, defaulting to 1000
[  694.781950][T16900] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4480'.
[  694.988826][T16905] loop3: detected capacity change from 0 to 128
[  695.357430][   T25] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[  695.543146][   T25] usb 4-1: Using ep0 maxpacket: 16
[  695.557114][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58498, setting to 1024
[  695.559996][T16850] lo speed is unknown, defaulting to 1000
[  695.598980][   T25] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[  695.630811][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.657162][   T25] usb 4-1: config 0 descriptor??
[  695.665775][T16905] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  695.676967][   T25] usb 4-1: Found UVC 0.00 device <unnamed> (10c4:ea90)
[  695.715364][   T25] usb 4-1: No valid video chain found.
[  695.736668][T16603] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  695.807444][T16603] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  695.859406][T16603] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  695.902143][ T5956] usb 4-1: USB disconnect, device number 124
[  695.961413][T16603] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  696.161370][T16936] netlink: 'syz.1.4492': attribute type 10 has an invalid length.
[  696.185808][T16936] veth1_macvtap: left promiscuous mode
[  696.471156][T16603] 8021q: adding VLAN 0 to HW filter on device bond0
[  696.491115][T16942] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  696.609718][T16603] 8021q: adding VLAN 0 to HW filter on device team0
[  696.731681][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  696.738942][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  696.765274][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  696.772541][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  696.838918][T16850] lo speed is unknown, defaulting to 1000
[  697.089587][ T5888] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[  697.286432][ T5888] usb 2-1: Using ep0 maxpacket: 32
[  697.315253][ T5888] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  697.323291][ T5888] usb 2-1: config 0 has no interface number 0
[  697.359902][ T5888] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  697.382459][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  697.418736][ T5888] usb 2-1: Product: syz
[  697.430057][ T5888] usb 2-1: Manufacturer: syz
[  697.442950][ T5888] usb 2-1: SerialNumber: syz
[  697.464364][ T5888] usb 2-1: config 0 descriptor??
[  697.487214][ T5888] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  697.525466][ T5888] usb 2-1: selecting invalid altsetting 1
[  697.545158][ T5888] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  697.590180][ T5888] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  697.655202][ T5888] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  697.672829][ T5888] usb 2-1: media controller created
[  697.677694][T16603] 8021q: adding VLAN 0 to HW filter on device batadv0
[  697.766401][T16850] lo speed is unknown, defaulting to 1000
[  697.788995][ T5888] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  697.811107][T16968] netlink: 'syz.4.4501': attribute type 10 has an invalid length.
[  697.897510][T16968] team0: Device hsr_slave_0 failed to register rx_handler
[  697.927051][ T5888] usb 2-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)...
[  697.966772][ T5888] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered.
[  698.050834][T16946] loop3: detected capacity change from 0 to 32768
[  698.169145][T16946] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  698.188871][ T5888] DVB: Unable to find symbol mxl5005s_attach()
[  698.218874][ T5888] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  698.351002][ T5888] usb 2-1: USB disconnect, device number 113
[  698.580930][T16946] XFS (loop3): Ending clean mount
[  698.721368][T16603] veth0_vlan: entered promiscuous mode
[  698.829867][T16603] veth1_vlan: entered promiscuous mode
[  698.851606][ T5839] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  698.908521][T16850] lo speed is unknown, defaulting to 1000
[  699.008152][T16603] veth0_macvtap: entered promiscuous mode
[  699.053895][T16603] veth1_macvtap: entered promiscuous mode
[  699.189874][T16603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  699.238587][T16603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  699.259265][T16603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  699.275743][T16603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  699.296528][T16603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  699.351069][T16603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  699.371988][T16603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  699.393687][T16603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  699.469908][T16603] batman_adv: batadv0: Interface activated: batadv_slave_0
[  699.513479][T16603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  699.529381][T16603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  699.547207][T16603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  699.594072][T16603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  699.618379][T16603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  699.661665][T16603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  699.694225][T16603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  699.728925][T16603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  699.748666][T16603] batman_adv: batadv0: Interface activated: batadv_slave_1
[  699.817068][T16603] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  699.846131][T16603] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  699.872271][T16986] loop4: detected capacity change from 0 to 32768
[  699.898944][T16603] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  699.919046][T16986] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4502 (16986)
[  699.943718][T16603] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  700.022127][T16986] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  700.083035][T16986] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  700.092305][T16986] BTRFS info (device loop4): disk space caching is enabled
[  700.168588][T16986] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  700.416151][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  700.440562][T17025] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4509'.
[  700.446001][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  700.582420][T16986] BTRFS info (device loop4): rebuilding free space tree
[  700.674109][T17039] loop2: detected capacity change from 0 to 512
[  700.677517][T16986] BTRFS info (device loop4): disabling free space tree
[  700.713515][T16986] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  700.714622][T17039] EXT4-fs: Ignoring removed i_version option
[  700.723195][T16986] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  700.774961][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  700.797400][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  700.831230][T17039] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  700.900220][T17039] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002]
[  700.980853][T17039] System zones: 1-12
[  700.985146][T17039] EXT4-fs (loop2): orphan cleanup on readonly fs
[  701.034681][T17039] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.4511: invalid indirect mapped block 12 (level 1)
[  701.088152][T17039] EXT4-fs (loop2): Remounting filesystem read-only
[  701.124847][T17039] EXT4-fs (loop2): 1 truncate cleaned up
[  701.162770][T17039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  701.228841][ T5845] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  701.469884][T17060] IPv6: sit1: Disabled Multicast RS
[  701.474459][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  701.599603][T17058] loop7: detected capacity change from 0 to 2048
[  701.877688][T17068] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  702.567495][T17090] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  702.741058][T17098] loop1: detected capacity change from 0 to 128
[  702.934890][T17102] loop2: detected capacity change from 0 to 256
[  703.000485][T17102] exfat: Deprecated parameter 'utf8'
[  703.024288][T17102] exfat: Deprecated parameter 'namecase'
[  703.030873][T17102] exfat: Deprecated parameter 'utf8'
[  703.134523][T17112] netlink: 'syz.1.4537': attribute type 2 has an invalid length.
[  703.154051][T17102] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  703.243117][T17115] loop3: detected capacity change from 0 to 1024
[  703.256952][T17112] f�: entered promiscuous mode
[  703.271300][T17115] EXT4-fs: Ignoring removed orlov option
[  703.278428][T17102] exFAT-fs (loop2): start_clu is invalid cluster(0x0)
[  703.292143][T17115] EXT4-fs: Ignoring removed orlov option
[  703.398464][T17115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  703.520301][T17118] loop7: detected capacity change from 0 to 2048
[  703.533438][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  703.625064][T17126] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  703.702384][T17129] loop4: detected capacity change from 0 to 256
[  703.717275][T17118] NILFS error (device loop7): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5
[  703.770988][T17125] loop1: detected capacity change from 0 to 2048
[  703.806151][T17118] Remounting filesystem read-only
[  703.844884][T17125] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  703.983990][T17129] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  704.017047][   T30] INFO: task bch-reclaim/loo:13683 blocked for more than 143 seconds.
[  704.071464][   T30]       Not tainted 6.14.0-rc2-next-20250210-syzkaller #0
[  704.078795][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  704.133087][T17129] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff)
[  704.141784][   T30] task:bch-reclaim/loo state:D stack:26816 pid:13683 tgid:13683 ppid:2      task_flags:0x200040 flags:0x00004000
[  704.180005][   T30] Call Trace:
[  704.183332][   T30]  <TASK>
[  704.190672][   T30]  __schedule+0x190e/0x4c90
[  704.219685][   T30]  ? __pfx___schedule+0x10/0x10
[  704.246608][   T30]  ? __pfx_lock_release+0x10/0x10
[  704.286308][   T30]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  704.301557][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  704.312157][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  704.318983][   T30]  ? schedule+0x90/0x320
[  704.323350][   T30]  schedule+0x14b/0x320
[  704.332214][   T30]  schedule_preempt_disabled+0x13/0x30
[  704.340267][   T30]  __mutex_lock+0x817/0x1010
[  704.346715][   T30]  ? __mutex_lock+0x602/0x1010
[  704.356802][   T30]  ? bch2_journal_reclaim_thread+0x16d/0x570
[  704.364456][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  704.373947][   T30]  ? do_raw_spin_lock+0x14f/0x370
[  704.379046][   T30]  ? do_raw_spin_unlock+0x13c/0x8b0
[  704.388606][   T30]  bch2_journal_reclaim_thread+0x16d/0x570
[  704.400041][   T30]  ? bch2_journal_reclaim_thread+0x267/0x570
[  704.408677][   T30]  ? __pfx_bch2_journal_reclaim_thread+0x10/0x10
[  704.420983][   T30]  kthread+0x7a9/0x920
[  704.427768][   T30]  ? __pfx_kthread+0x10/0x10
[  704.432407][   T30]  ? __pfx_bch2_journal_reclaim_thread+0x10/0x10
[  704.450051][   T30]  ? __pfx_kthread+0x10/0x10
[  704.457967][   T30]  ? __pfx_kthread+0x10/0x10
[  704.462610][   T30]  ? __pfx_kthread+0x10/0x10
[  704.474717][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  704.482486][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  704.494562][   T30]  ? __pfx_kthread+0x10/0x10
[  704.500804][   T30]  ret_from_fork+0x4b/0x80
[  704.505257][   T30]  ? __pfx_kthread+0x10/0x10
[  704.519000][   T30]  ret_from_fork_asm+0x1a/0x30
[  704.523835][   T30]  </TASK>
[  704.527010][   T30] 
[  704.527010][   T30] Showing all locks held in the system:
[  704.545959][   T30] 1 lock held by khungtaskd/30:
[  704.550855][   T30]  #0: ffffffff8e9383e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0
[  704.567664][   T30] 4 locks held by kworker/u8:8/1338:
[  704.587667][   T30]  #0: ffff88805fe63148 ((wq_completion)btree_update){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840
[  704.639561][   T30]  #1: ffffc90004a1fc60 ((work_completion)(&c->btree_interior_update_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840
[  704.657421][   T30]  #2: ffff888057c04380 (&c->btree_trans_barrier){.+.+}-{0:0}, at: bch2_trans_srcu_lock+0x9a/0x1a0
[  704.677769][   T30]  #3: ffff888057c266d0 (&c->gc_lock){++++}-{4:4}, at: bch2_btree_update_start+0x682/0x14e0
[  704.710003][   T30] 2 locks held by getty/5590:
[  704.725190][   T30]  #0: ffff888035a4a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  704.743168][   T30]  #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00
[  704.753735][   T30] 6 locks held by syz-executor/5837:
[  704.759199][   T30]  #0: ffff88807cb1e0e0 (&type->s_umount_key#68){+.+.}-{4:4}, at: deactivate_super+0xb5/0xf0
[  704.770909][   T30]  #1: ffff888057c00278 (&c->state_lock){+.+.}-{4:4}, at: __bch2_fs_stop+0xfd/0x5c0
[  704.784142][   T30]  #2: ffff888057c4bc28 (&j->reclaim_lock){+.+.}-{4:4}, at: journal_flush_done+0x7b/0x400
[  704.794390][   T30]  #3: ffff888057c04380 (&c->btree_trans_barrier){.+.+}-{0:0}, at: __bch2_trans_get+0x7e4/0xd30
[  704.805587][   T30]  #4: ffff888057c04380 (&c->btree_trans_barrier){.+.+}-{0:0}, at: bch2_trans_srcu_lock+0x9a/0x1a0
[  704.816513][   T30]  #5: ffff888057c266d0 (&c->gc_lock){++++}-{4:4}, at: bch2_btree_update_start+0x682/0x14e0
[  704.826844][   T30] 1 lock held by bch-reclaim/loo/13683:
[  704.835715][   T30]  #0: ffff888057c4bc28 (&j->reclaim_lock){+.+.}-{4:4}, at: bch2_journal_reclaim_thread+0x16d/0x570
[  704.849827][   T30] 
[  704.857339][   T30] =============================================
[  704.857339][   T30] 
[  704.869215][   T30] NMI backtrace for cpu 1
[  704.869230][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc2-next-20250210-syzkaller #0
[  704.869249][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  704.869259][   T30] Call Trace:
[  704.869267][   T30]  <TASK>
[  704.869275][   T30]  dump_stack_lvl+0x241/0x360
[  704.869304][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  704.869323][   T30]  ? __pfx__printk+0x10/0x10
[  704.869366][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  704.869397][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  704.869415][   T30]  ? _printk+0xd5/0x120
[  704.869436][   T30]  ? __pfx__printk+0x10/0x10
[  704.869459][   T30]  ? __wake_up_klogd+0xcc/0x110
[  704.869480][   T30]  ? __pfx__printk+0x10/0x10
[  704.869507][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  704.869531][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  704.869553][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  704.869579][   T30]  watchdog+0x1058/0x10a0
[  704.869604][   T30]  ? watchdog+0x1ea/0x10a0
[  704.869634][   T30]  ? __pfx_watchdog+0x10/0x10
[  704.869655][   T30]  kthread+0x7a9/0x920
[  704.869675][   T30]  ? __pfx_kthread+0x10/0x10
[  704.869700][   T30]  ? __pfx_watchdog+0x10/0x10
[  704.869721][   T30]  ? __pfx_kthread+0x10/0x10
[  704.869741][   T30]  ? __pfx_kthread+0x10/0x10
[  704.869768][   T30]  ? __pfx_kthread+0x10/0x10
[  704.869794][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  704.869815][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  704.869836][   T30]  ? __pfx_kthread+0x10/0x10
[  704.869861][   T30]  ret_from_fork+0x4b/0x80
[  704.869880][   T30]  ? __pfx_kthread+0x10/0x10
[  704.869902][   T30]  ret_from_fork_asm+0x1a/0x30
[  704.869944][   T30]  </TASK>
[  704.869951][   T30] Sending NMI from CPU 1 to CPUs 0:
[  705.054980][    C0] NMI backtrace for cpu 0
[  705.054994][    C0] CPU: 0 UID: 0 PID: 14591 Comm: kworker/u8:7 Not tainted 6.14.0-rc2-next-20250210-syzkaller #0
[  705.055018][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  705.055029][    C0] Workqueue: events_unbound nsim_dev_trap_report_work
[  705.055053][    C0] RIP: 0010:rcu_is_watching+0x3a/0xb0
[  705.055071][    C0] Code: e8 1b 91 55 0a 89 c3 83 f8 08 73 7a 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 50 2b 32 8e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 bc 3e 81 00 48 c7 c3 98 79 03 00 49 03 1e 48 89
[  705.055083][    C0] RSP: 0018:ffffc9000c1d72c0 EFLAGS: 00000246
[  705.055096][    C0] RAX: 1ffffffff1c6456a RBX: 0000000000000000 RCX: ffffffff819b0c60
[  705.055108][    C0] RDX: 0000000000000000 RSI: ffffffff8c60da00 RDI: ffffffff8c60d9c0
[  705.055118][    C0] RBP: ffffc9000c1d7418 R08: ffffffff901bcf77 R09: 1ffffffff20379ee
[  705.055130][    C0] R10: dffffc0000000000 R11: fffffbfff20379ef R12: 1ffff9200183ae68
[  705.055142][    C0] R13: ffffffff816bbfa8 R14: ffffffff8e322b50 R15: dffffc0000000000
[  705.055154][    C0] FS:  0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  705.055167][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  705.055177][    C0] CR2: 00007f7fb25fdff8 CR3: 0000000030068000 CR4: 00000000003526f0
[  705.055191][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  705.055200][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  705.055209][    C0] Call Trace:
[  705.055215][    C0]  <NMI>
[  705.055222][    C0]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  705.055242][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  705.055266][    C0]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  705.055285][    C0]  ? nmi_handle+0x2a/0x5a0
[  705.055317][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  705.055335][    C0]  ? nmi_handle+0x14f/0x5a0
[  705.055356][    C0]  ? nmi_handle+0x2a/0x5a0
[  705.055379][    C0]  ? rcu_is_watching+0x3a/0xb0
[  705.055394][    C0]  ? default_do_nmi+0x63/0x160
[  705.055413][    C0]  ? exc_nmi+0x123/0x1f0
[  705.055430][    C0]  ? end_repeat_nmi+0xf/0x53
[  705.055452][    C0]  ? unwind_next_frame+0xb8/0x2380
[  705.055476][    C0]  ? lock_release+0xb0/0xa30
[  705.055496][    C0]  ? rcu_is_watching+0x3a/0xb0
[  705.055512][    C0]  ? rcu_is_watching+0x3a/0xb0
[  705.055529][    C0]  ? rcu_is_watching+0x3a/0xb0
[  705.055544][    C0]  </NMI>
[  705.055550][    C0]  <TASK>
[  705.055557][    C0]  lock_release+0xbf/0xa30
[  705.055578][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  705.055599][    C0]  ? __pfx_lock_release+0x10/0x10
[  705.055619][    C0]  ? __pfx_lock_release+0x10/0x10
[  705.055641][    C0]  ? unwind_next_frame+0xb8/0x2380
[  705.055661][    C0]  ? deref_stack_reg+0x17c/0x210
[  705.055682][    C0]  ? deref_stack_reg+0x17c/0x210
[  705.055705][    C0]  ? unwind_next_frame+0xb8/0x2380
[  705.055724][    C0]  unwind_next_frame+0x1a77/0x2380
[  705.055748][    C0]  ? unwind_next_frame+0xb8/0x2380
[  705.055766][    C0]  ? __unwind_start+0xf8/0x740
[  705.055785][    C0]  __unwind_start+0x59a/0x740
[  705.055807][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  705.055826][    C0]  arch_stack_walk+0xe5/0x150
[  705.055852][    C0]  ? arch_stack_walk+0xe5/0x150
[  705.055876][    C0]  stack_trace_save+0x118/0x1d0
[  705.055895][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  705.055915][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  705.055940][    C0]  kasan_save_track+0x3f/0x80
[  705.055989][    C0]  kasan_save_free_info+0x40/0x50
[  705.056015][    C0]  __kasan_slab_free+0x59/0x70
[  705.056030][    C0]  ? skb_release_data+0x6a0/0x8a0
[  705.056046][    C0]  kfree+0x196/0x430
[  705.056061][    C0]  ? __local_bh_enable_ip+0x168/0x200
[  705.056077][    C0]  ? skb_release_data+0x6a0/0x8a0
[  705.056096][    C0]  skb_release_data+0x6a0/0x8a0
[  705.056119][    C0]  consume_skb+0x9f/0xf0
[  705.056135][    C0]  nsim_dev_trap_report_work+0x7cc/0xb50
[  705.056163][    C0]  ? process_scheduled_works+0x976/0x1840
[  705.056182][    C0]  process_scheduled_works+0xa66/0x1840
[  705.056218][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  705.056242][    C0]  ? assign_work+0x364/0x3d0
[  705.056263][    C0]  worker_thread+0x870/0xd30
[  705.056286][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  705.056309][    C0]  ? __kthread_parkme+0x169/0x1d0
[  705.056330][    C0]  ? __pfx_worker_thread+0x10/0x10
[  705.056349][    C0]  kthread+0x7a9/0x920
[  705.056369][    C0]  ? __pfx_kthread+0x10/0x10
[  705.056391][    C0]  ? __pfx_worker_thread+0x10/0x10
[  705.056409][    C0]  ? __pfx_kthread+0x10/0x10
[  705.056429][    C0]  ? __pfx_kthread+0x10/0x10
[  705.056451][    C0]  ? __pfx_kthread+0x10/0x10
[  705.056470][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  705.056489][    C0]  ? lockdep_hardirqs_on+0x99/0x150
[  705.056509][    C0]  ? __pfx_kthread+0x10/0x10
[  705.056530][    C0]  ret_from_fork+0x4b/0x80
[  705.056549][    C0]  ? __pfx_kthread+0x10/0x10
[  705.056570][    C0]  ret_from_fork_asm+0x1a/0x30
[  705.056598][    C0]  </TASK>
[  705.058245][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  705.535075][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc2-next-20250210-syzkaller #0
[  705.545223][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  705.555463][   T30] Call Trace:
[  705.558746][   T30]  <TASK>
[  705.561672][   T30]  dump_stack_lvl+0x241/0x360
[  705.566346][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  705.571538][   T30]  ? __pfx__printk+0x10/0x10
[  705.576152][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  705.582163][   T30]  ? vscnprintf+0x5d/0x90
[  705.586515][   T30]  panic+0x349/0x880
[  705.590411][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  705.596557][   T30]  ? __pfx_panic+0x10/0x10
[  705.600978][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  705.606365][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  705.612531][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  705.618697][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  705.624853][   T30]  watchdog+0x1097/0x10a0
[  705.629876][   T30]  ? watchdog+0x1ea/0x10a0
[  705.634312][   T30]  ? __pfx_watchdog+0x10/0x10
[  705.638983][   T30]  kthread+0x7a9/0x920
[  705.643153][   T30]  ? __pfx_kthread+0x10/0x10
[  705.647756][   T30]  ? __pfx_watchdog+0x10/0x10
[  705.652485][   T30]  ? __pfx_kthread+0x10/0x10
[  705.657082][   T30]  ? __pfx_kthread+0x10/0x10
[  705.661698][   T30]  ? __pfx_kthread+0x10/0x10
[  705.666381][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  705.671583][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  705.676782][   T30]  ? __pfx_kthread+0x10/0x10
[  705.681373][   T30]  ret_from_fork+0x4b/0x80
[  705.685783][   T30]  ? __pfx_kthread+0x10/0x10
[  705.690370][   T30]  ret_from_fork_asm+0x1a/0x30
[  705.695140][   T30]  </TASK>
[  705.698398][   T30] Kernel Offset: disabled
[  705.702791][   T30] Rebooting in 86400 seconds..