last executing test programs:

2m1.436784708s ago: executing program 1 (id=2):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1})

2m1.136264692s ago: executing program 1 (id=11):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dummy0\x00'})
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2})

2m0.780368547s ago: executing program 1 (id=13):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@s, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='percpu_alloc_percpu\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

2m0.510278112s ago: executing program 1 (id=15):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file6\x00', 0x200)

2m0.178168146s ago: executing program 1 (id=20):
r0 = socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x3, 0x300)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x4, 0x0, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x14)

1m59.581479605s ago: executing program 1 (id=23):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0xee01, 0x0)

1m58.928898675s ago: executing program 32 (id=23):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0xee01, 0x0)

1m56.512764641s ago: executing program 2 (id=52):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
close(0x3)

1m56.237296105s ago: executing program 2 (id=53):
pipe2(&(0x7f0000001cc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000ec0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r3}}]}})

1m55.90837756s ago: executing program 2 (id=57):
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507de9881a1ffff00000204be04020506050e020409470009003f000c0010004600000085080000000000000065", 0x34, 0x800, 0x0, 0x0)
r0 = getpgrp(0xffffffffffffffff)
r1 = syz_pidfd_open(r0, 0x0)
pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x2, 0x4, 0x8}, 0x0)

1m55.667211673s ago: executing program 2 (id=58):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x558, &(0x7f0000000c00)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.impure\x00', &(0x7f0000000140)='\x00', 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

1m54.956358054s ago: executing program 2 (id=60):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000005c0)={[{@jqfmt_vfsold}, {@grpid}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@debug}, {@usrjquota}, {@nolazytime}, {@mblk_io_submit}]}, 0xfe, 0x477, &(0x7f0000000780)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000cc0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='ext4_request_inode\x00', r0}, 0x18)
syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40000, 0x0, 0x1, 0x0, 0x0)

1m51.959290778s ago: executing program 2 (id=77):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', <r1=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x1, 0x7ab0715dca68fed7, 0x0, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x20000600}}, 0x0)

1m51.305556108s ago: executing program 33 (id=77):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', <r1=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x1, 0x7ab0715dca68fed7, 0x0, {}, {}, {}, 0x4, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x20000600}}, 0x0)

1m4.01916199s ago: executing program 0 (id=437):
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

1m3.880810761s ago: executing program 0 (id=438):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000480)=',\xf2R>y\xe6\x80\x11\xbf+\xd9NV\xe3\x14i')

1m3.690740574s ago: executing program 0 (id=440):
r0 = getpgrp(0x0)
r1 = syz_pidfd_open(r0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @mcast1, 0x7819, 0x80}})
pidfd_send_signal(r1, 0x1f, &(0x7f0000000000)={0x0, 0x0, 0x119a}, 0x0)

1m3.517387747s ago: executing program 0 (id=443):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000640)='./file2\x00', 0x10050, &(0x7f00000000c0)={[{@errors_remount}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}]}, 0x3, 0x51e, &(0x7f0000000680)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
lstat(&(0x7f0000000040)='./file2\x00', 0x0)

1m2.863837717s ago: executing program 0 (id=451):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x818080, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1, @ANYRES16=r1, @ANYRESHEX, @ANYRES8=r1], 0x97, 0x2a9, &(0x7f0000000500)="$eJzs3T9ra2UYAPDnpGkSdEgEJxE8oINTabu6pEgLxUxKBnXQYluQJggtFPyDsZOri6OriyC4+SVc/AaCq+BmwcKRk5xjkt40N+m9ae+f32/p2/c8z3ue9/QtpcN58vGr/ZPDNI4vvvojGo0kKu1ox2USrahE6ZuY0v4uAICn2WWWxd/ZyDJ5SUQ0VlcWALBCS//9/2XlJQEAK/be+x+8s9Pp7L6bpo3Y63973s3/s8+/jq7vHMen0Yuj2IxmXEVk/xuN97IsG1TTXCve6A/Ou3lm/6PfivV3/ooY5m9FM1rDqen8/c7uVjoykT/I63ihuH87z9+OZrw84/77nd3tGfnRrcWbr0/UvxHN+P2T+Cx6cTgsYpQflYivt9L07ez7f778MC8vz08G5936MG4sW7vjHw0AAAAAAAAAAAAAAAAAAAAAAM+wjaJ3Tj2G/XvyqaL/ztpV/s16pKXWdH+eUX5SLnStP9Agix/K/jybaZpmReA4vxqvVKN6P7sGAAAAAAAAAAAAAAAAAACAJ8vZ51+cHPR6R6ePZVB2Ayhf67/tOu2JmddifnB9fK9KMZyzcqyVMUnE3DLyTSxc879F24PbPbqXbqr5p58XXufHh++9GKwvEPOIg/J0nRwks59hPcqZRnlIfp2MqcWC96rddClb6vjVZl5qLr332ovDwWBOTCTzCnvrz9GTK2aS67uoDZ/qzPT1YjCRPh3TWPw8578pD0h06wAAAAAAAAAAAAAAAAAAgJUav/Q74+LF3NRKVl9ZWQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwp8af/7/EYFAkLxBci9Oze94iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz4H/AgAA///uD2MO")
ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000100)={0xd5, 0x0, 0x4c422707339aefc1})

1m2.276843076s ago: executing program 0 (id=454):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x1cef, &(0x7f0000001240)={0x0, 0xa57d, 0x2, 0x0, 0x2df}, &(0x7f00000012c0), &(0x7f0000001300))
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x0)

1m2.012265659s ago: executing program 34 (id=454):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10)
r1 = syz_io_uring_setup(0x1cef, &(0x7f0000001240)={0x0, 0xa57d, 0x2, 0x0, 0x2df}, &(0x7f00000012c0), &(0x7f0000001300))
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, 0x0, 0x0)

47.888541429s ago: executing program 7 (id=563):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1)

47.646113153s ago: executing program 7 (id=567):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x50, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x18, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0x3}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5, 0x1c, 0x1}, @IFLA_BRPORT_FLUSH={0x4}]}}}]}, 0x50}}, 0x0)

47.400996916s ago: executing program 7 (id=572):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100))

47.183302349s ago: executing program 7 (id=576):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file6\x00', 0x200)

46.975244352s ago: executing program 7 (id=578):
r0 = syz_open_dev$video(&(0x7f0000002000), 0x4, 0x40840)
sched_setaffinity(0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000002040))

46.43944501s ago: executing program 7 (id=582):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00'})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018"], 0x58}, 0x1, 0x2}, 0x0)

45.848462939s ago: executing program 35 (id=582):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00'})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018"], 0x58}, 0x1, 0x2}, 0x0)

36.216049802s ago: executing program 4 (id=653):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@bridge_dellink={0x2c, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x8}}]}]}, 0x2c}}, 0x0)

34.270961551s ago: executing program 4 (id=663):
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0)
migrate_pages(r0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272)

33.469601903s ago: executing program 4 (id=668):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_emit_ethernet(0x3e, &(0x7f0000019340)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x8}}}}}}, 0x0)

33.041397909s ago: executing program 4 (id=670):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x558, &(0x7f0000000c00)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.impure\x00', &(0x7f0000000140)='\x00', 0x1, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

32.397624179s ago: executing program 4 (id=675):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={<r1=>0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x1, @loopback, 0x2}]}, &(0x7f00000002c0)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e20, 0x7, @loopback, 0x3}}, 0x3, 0x8003}, 0x90)

30.166124632s ago: executing program 4 (id=694):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000480)={0x0, 0x11, 0x1, "fe"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0xd0, 0x1801, 0x0, 0x0}, {0x7, 0x4200, 0x0, 0x0}], 0x2})

29.59721192s ago: executing program 36 (id=694):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000480)={0x0, 0x11, 0x1, "fe"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0xd0, 0x1801, 0x0, 0x0}, {0x7, 0x4200, 0x0, 0x0}], 0x2})

5.084556464s ago: executing program 3 (id=895):
r0 = fsopen(&(0x7f0000000300)='bpf\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0xa)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000100)='rw\x00', 0x0, 0x0)

4.826999138s ago: executing program 3 (id=897):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x9300)

4.131092618s ago: executing program 6 (id=901):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)

3.912271622s ago: executing program 6 (id=905):
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x73, 0x9e, 0x61, 0x8, 0xfd9, 0x2c, 0x66b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0xd4, 0x40, 0x0, [{{0x9, 0x4, 0x65, 0x0, 0x1, 0xbe, 0x86, 0x6d, 0x1, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1, 0x3, 0x9}}]}}]}}]}}, 0x0)
syz_usb_ep_read(r0, 0x1, 0x9a, &(0x7f0000000140)=""/154)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$printer(r0, &(0x7f00000008c0)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)

2.966380386s ago: executing program 3 (id=913):
socket(0x27, 0x2, 0x0)
timer_create(0x0, 0x0, 0x0)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04f74120"], 0x7)

2.848221297s ago: executing program 9 (id=914):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0b00000007000000010001000900000005"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000001900)=""/4108, &(0x7f00000000c0), &(0x7f0000000440), 0x2, r0}, 0x38)

2.764452569s ago: executing program 5 (id=915):
syz_mount_image$jfs(&(0x7f00000007c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x61db, &(0x7f000000abc0)="$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")
r0 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
write$UHID_INPUT(r0, &(0x7f0000001940)={0x8, {"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", 0x1000}}, 0x1006)

2.764212198s ago: executing program 3 (id=916):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x80000}, 0x10)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x46, 0x15, 0xbd, 0x40, 0x1a0a, 0x102, 0xcde9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcd, 0x0, 0x0, 0x33, 0x11, 0xa0}}]}}]}}, 0x0)

2.687709439s ago: executing program 9 (id=917):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000180)={[{@discard_async}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)

1.931499041s ago: executing program 8 (id=920):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"})

1.700890264s ago: executing program 8 (id=921):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000e80)={[{@creator={'creator', 0x3d, "d7f8b76c"}}, {@nodecompose}, {@creator={'creator', 0x3d, "b4f6c47a"}}, {@force}, {@barrier}, {}, {@nls={'nls', 0x3d, 'default'}}, {}]}, 0x3, 0x6b3, &(0x7f0000000780)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

1.645322255s ago: executing program 5 (id=922):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9, @void, @value}, 0x94)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)

1.574549866s ago: executing program 9 (id=923):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000001c0)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x70bd29, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x300}, 0xd}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0)

1.507481977s ago: executing program 8 (id=924):
r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
ioctl$USBDEVFS_IOCTL(r0, 0x4008550d, 0x0)

1.194685602s ago: executing program 5 (id=925):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x58, r2, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r1}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x58}, 0x1, 0xf000, 0x0, 0x2400c042}, 0x4040020)

1.193992032s ago: executing program 8 (id=935):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
sendmsg$inet(r0, &(0x7f0000001540)={&(0x7f0000000000)={0x2, 0x4e1e, @rand_addr=0x640100fc}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000040)='I', 0x1}], 0x1}, 0x80)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8)

1.124460783s ago: executing program 3 (id=926):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x101801e, &(0x7f0000000100)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@nointegrity}, {@discard}, {@nodiscard}, {@discard_size={'discard', 0x3d, 0x82}}, {@errors_continue}, {@nodiscard}, {@errors_remount}]}, 0x24, 0x6293, &(0x7f0000009000)="$eJzs3cuOHFcZB/Cvr3Mxsa0somAhNEnMJYT4GowhQJIFLNiwQN4iW5NJZOEAsg1yIgtPNBskeAgQEkuEWLLiAbJgy44HwJKNBMoCpaKaPmdcU+menvF4urpdv580rvr6VE2f8r+rL1NVfQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiB/+4MfnOxFx9VfphpMRn4teRDdipazXImJl7WR1nedjuzmei4jBUkS5/vY/JyJei4iPjkc8eHh3vbz5wj778f2//POPPzn2o3/8eXD2f3+93Xt90nJ37vzuv3+79/jbCwAAAG1UFEXRSR/zT0VEP322BwCefvn1v0jy7eq5qzfnrD9qtVqtXsC6qhjvXrWIiM3qOuV7BofjAWDBbMbHTXeBBsm/1foRcazpTgBzrdN0BzgSDx7eXe+kfDvV14O1UXs+F2RX/pudnes7Jk2nqZ9jMqvH11b04tkJ/VmZUR/mSc6/W8//6qh9mJY76vxnZVL+w9GlT62T8+/V8695evLvjs2/rXL+/QPl35M/AAAAAADMsfz3/5MNH/9dOvym7Mtex3/XZtQHAAAAAAAAAHjSDjr+X782/t8O4/8BAADA3Co/q5d+f/zRbZO+i628/Uon4pna8kDLpItlVpvuBwAAAAAAAAAAAAC0SX90Du+VTsQgIp5ZXS2KovypqtcHddj1F13btx/arOkneQAAGPnoeO1a/k7EckRcSd/1N1hdXS2K5ZXVYrVYWcrvZ4dLy8VK5XNtnpa3LQ338Ya4PyzKX7ZcWa9q2uflae3131fe17Do7aNjs9Fg4AAQEaNXoweTXpH+7/VqMRXFiWj4TQ4LYo/9nwVl/2c/mn6cAgAAAEevKIqik77O+1Q65t9tulMAwEzk1//6cQG1etHqmLP+qNVq9TzWVcV496pFRGxW1ynfMxiOHwAWzGZ83HQXaJD8W60fEc833QlgrnWa7gBH4sHDu+udlG+n+nqQxnfP54Lsyn+zs71eXn/cdJr6OSazenxtRS+endCf52bUh3mS8+/W8786ah+m5Q6ff7Hrz4RNnWM0Kf9yO0820J+m5fx79fxrjnr/n5Wt6I7Nv61y/v0D5d+TPwAAAAAAzLH89/+Tc3X8d/i4mzPVXsd/18aucXR9AQAAAAAAAIAn5cHDu+v5utd8/P8LY5Zz/efTKeffkX8r5fy7tfy/WluuV5m//9aj/P/z8O76n27/+/N5ut/8l/JMJz2yOukR0Un31Omn6WG27rO2Br1heU+DTrfXT+f8FIN34nrciI04t2vZbvr/eNR+fld72dPBdnvRG7Vf2NXe32nP61/c1T5IZxcVK7n9TKzHz+NGvL3dXrYtTdn+5SntxZT2nH/P/t9KOf9+5afMfzW1d2rT0v0Pu5/Z76vTcffz5vUv/ubc0W/OVFvR29m2qnL7XmygP9v/J8eG8ctbGzfP3Ll2+/bN85Emu269EGnyhOX8B+ln5/n/pVF7ft6v7q/3PxweOP95sRX9ifm/VJkvt/flGfetCTn/YfrJ+b+d2sfv/4uc/+T9/5UG+gMAAAAAAAAAAAAAAAB7KYpi+xLRNyPiUrr+p6lrMwGA2cqv/0WSb59V3Zvx/anVC1535qw/M60/KearP2r1ItZVxXhvVIuI+Ht1nfI9w6/H/TIAYJ59EhH/aroTNEb+LZa/76+cnm66M8BM3Xr/g59eu3Fj4+atpnsCAAAAAAAAADyuPP7nWmX859NFUdyrLbdr/Ne3Yu2w43/288zOAKMTBqruHXyb9rLVHfa6leHGX4hJ438Pdub2Gv+7P+X+BlPah1Pal6a0L09pH3uhR0XO/4XKeOenI+JUbfj1Noz/Wh/zvg1y/i9WHs9l/l+pLVfNv/jDIuff3ZX/2dvv/eLsrfc/ePX6e9fe3Xh342cXz58/d/HSpcuXL5995/qNjXOjfxvs8dHK+eexr50H2i45/5y5/Nsl5/+lVMu/XXL+X061/Nsl55/f78m/XXL++bOP/Nsl5/9yquXfLjn/r6Va/u2S838l1fJvl5z/11Mt/3bJ+b+aavm3S87/TKrl3y45/7Op3mf+K0fdL2Yj55+PcNn/2yXnn89skH+75PwvpFr+7ZLzv5hq+bdLzv+1VMu/XXL+30i1/Nsl538p1fJvl5z/N1Mt/3bJ+V9OtfzbJef/rVTLv11y/t9OtfzbJef/eqrl3y45/++kWv7tkvP/bqrl3y45/++lWv7tkvN/I9Xyb5dH3/9/uJnfnngyv8dMa2cG89ENM6OZpp+ZAAAAAAAAAAAAAIC6WZxO3PQ2AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfMoOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrB3dzFynfX9wM/sm9dOSAyE/J38DWwcE0Kyya7txC+0KSa8NryVQCj0Bdv1rs2CYxuvXQKNZNNAiYRRUUXbcNEWEGpzU5ELLmgFKBeoFVIl0l7QG0SFykVUBRSQKtEKstWc8zzPzszOzsx6x7sz53w+kv3zzpw555kzz5yd34y/cwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABrd8ob5z9SyLKv/yf/anmXX1v+9dWp7ftlrN3uEAAAAwHr9Kv/7+evTBYd7uFHDMv/8iu99fWlpaSl7/+ifj39haSldMZVl41uyLL8ueupHH6g1LhM8lk3WRhp+Humy+dEu1491uX68y/UTXa7f0uX6yS7Xr9gBK2wt3o/JV7Y7/+f2YpdmN2Tj+XW729zqsdqWkZH4Xk6ult9mafxEtpCdyuaz2abli2Vr+fLfvKW+rbdmcVsjDdvaWZ8hP3v0eBxDLezj3U3bWl5n9JPXZ1M//9mjx//2/HM3tatdd0PT+opx3r6rPs5PhUuKsdayLWmfxHGONIxzZ5vHZLRpnLX8dvV/t47z+R7HObo8zA3V+phPZiP5v5/J99NY49t6aT/tDJf94tYsyy4tD7t1mRXbykaybU2XjCw/PpPFjKyvoz6VXpKNrWme3tLDPK3Xud3N87T1OREf/1vC7cZWGUPjw/STT040PO6/XLqSeRrV73UxhqXR5cuKMbTOwX4/VwZlDsZ58Ux+px9vOwd3h/v/6G2rz8G2c6fNHEz3u2EO7uo2B0cmRvMxpwehlt9meQ7uaVp+NN9SLa/P3tZ5Ds6cf/jszOLHP3HXwsPHTs6fnD+9b8+e2X379x88eHDmxMKp+dni7yvc24NvWzaSnoe7wr6Lz4FXtyzbOFWXvjyx4vh7pc/DyfQ8bP6d1e61Rb+fh2Otd662MU/IlXO6eG68t77TJy+PZKs8x/LH5471Pw/T/W54Ho41PA/b/k5p8zwc6+F5WF/m7B29vWYZa/jTbgyr/y5Y3xzc3jAHW1+PbG9Ztt+vRwZlDk6GefGDO1b/XbAzjPfx6bW+HhldMQfT3Q3Hnvol6fX+5MG8tJuXN9evuGYiu7A4f+7uR46dP39uTxbKhnhpw1xpna/bGu5TtmK+jqx5vh5eeMXjN7e5fHvYV5N31f+aXPWxqi9zz92dH6v8t1v7/dl06d4slD7b6P3Z7rd5fX9OZNkXv/PJB7/16BffsOr+rPebn5pZ/2vx1Jc2HH/HVzn+xr7/hWJ7aVWPjY6PFc/f0bR3xpuOx80P1Vh+7Krl235+prfj8Xj4s9HH4xs6HI93tCzb7+PxeOudi8fjWrd3O9an9fGcDPPk1Gzn43F9mR171zonxzoej28NtRb2/2tCp5D6ooa5s9q8TdsaGxsP92ssbqF5nu5rWn489Gb1bT25N7woTKPsbZ7efmux/GjD7aKNmqdTLcv2e56m975Wm6e1bu++XZnWx3MyzIsb9nWep/Vlnr5n/cfOrfGfDcfOiW5zcHx0oj7m8TQJ8+N9trQ1zsG7s+PZmexUNpdfO5HPp1q+rel7eztWToQ/G32s3NFhDt7esmy/52D6Pbba3KuNrbzzfdD6eE6GefHEvZ3nYH2ZNx7o72vX28MlaZmG166t76+t9p7XzS276WrNlbEwzu8c6PzebH2ZUwfX2md23k93hkuuabOfWp+/qz2n5rKN2U87wjifO7j6fqqPp77MFw71OJ8OZ1l28aP35+/3hs9XLl74/tebPndp95nOxY/e/9MXnfintYwfgOH3QlG2Fb/rGj6Z6uXzfwAAAGDzdfsP6uk97snwGab+HwAAAMoo9v3xf4Un+n8AAAAojdj3j4WalKH//+Pui+x443MLL1zMUjJ/KYjXp93wQLFczLjOhp+nlpbVL7//q/P//Y8XexveSJZlv3zgj9ouv+OBOK7CVBjnU29qvnyFr9/V07aPPnQxbbcxv/6lsP54f3qdBu0iuLNZln3z+s/l25n6wOW8Pv3A0bw+eOnxx+rLPH+o+Dne/tmXFsv/Vfi/K4dPHGu6/bNhP/w41Nm3td8f8XZfu/yanQfet7y9eLvaruvyu/3EB4v1xu/J+fxjxfJxP682/m999smv1Zd/5FXtx39xpP34nwzr/Wqo//PyYvnGx6D+c7zdp8P44/bi7e7+yrfbjv+pzxTLn31zsdzRUOP2bw8/737zcwuN++uR2rGm+5W9pVgubn/2+3+aXx/XF9ffOv7JI5eb9kfr/Hj634r1zLQsHy+P24n+oWX79fU0zs+4/Sf/5GjTfu62/acefPbl9fW2bv/OluXOfvSOfPvL62v+xqa//vTn2m4vjufw359tuj+H3x2ex2H7T3wwzMdw/f8+Vayv9dsVjr67+fgTl//S9otN9yd668+L7T/1upN53TK5dds1177oukvvqu+7LHtmS7G+bts/+Tdnmsb/5RuL/RGvj//FrHX7q7n0ymL75z42ffrM4oWFubRXH70+/+6ctxfjieO9PhxbW38+cub8h+bPTc1OzWbZVHm/Qu+KfSXUnxblUuell1YcQe94KDyeN//lN7fd9q+fjZf/+3uLyy+/rfi99eqw3OfD5dvD47e27a/0xC035s/v2tNhhEsrvy94PXbu/q+DPS0Y7n/r64I438++7EP5fqhfl//eiM/rdY7/h3PFer4R9utS+GbmXTcub69x+fjdCJffUzzf173/wmEuPq5/Fx7vd/y4WH8cV7y/PwyvY769o/l4F+fHNy6OtK4//xaPS+F4kl0qro9Lxf19+fkb2w4vfg9Jdumm/Oc/S+u5aU13czWLH1+cObVw+sIjM+fnF8/PLH78E0cePnPh9Pkj+Xd5Hvlwt9svH5+25cenufn992T50epMUa6yzR7/2YeOzx2YvW1u/sSxCyfOP3R2/tzJ44uLx+fnFm87duLE/Me63X5h7r49ew/tO7B3+uTC3H0HDx3ad2h64fSZ+jCKQXWxf/Yj06fPHclvsnjfPYf23HvvPbPTD5+Zm7/vwOzs9IVut89/N03Xb/2H0+fmTx07v/Dw/PTiwifm79tzaP/+vV2/DfDhsycWp2bOXTg9c2Fx/txMcV+mzucX13/3dbs95bT4H8Xr2Va14ov4snfduT99P2vdVz+56qqKRVq+QPS58F00333x2YO9/Bz7/vFQkzL0/wAAAEAu9v0ToSb6fwAAACiN2PdvCTXR/wMAAEBpxL5/MtT0XwIq0v+XLv+/42JP25f/38z8f372Z/l/+f+Nz/+H/P0z7xm0/H9xvJD/74/15u/l/wP5f/l/+X/5f/l/+mDQ8v+x79+aZT7/BwAAgJKKff+2UBP9PwAAAJRG7PuvCTXR/wMAAEBpxL7/2lCTivT/8v/y/87/L/8v/99++/L/w0n+vzP5/y7k/2eyauX/L/Vz/JuQ/9/a+IP8P4No0PL/se9/UahJRfp/AAAAqILY918XaqL/BwAAgNKIff/1oSb6fwAAACiN2PdvDzWpSP8v/7+u/H/KXMn/N49f/r+Z/H+YD/L/8v8bQP6/M/n/LuT/nf9/uPL/TeT/GUSDlv+Pff+LQ00q0v8DAABAFcS+/yWhJvp/AAAAGDxjV3az2Pe/NNRkRf9/hRsAAAAANl3s+2/IWoLgFfn8X/7f+f/l/+X/5f/bb7/3/P9oJv8/OOT/O5P/70L+X/5f/l/+n74atPx/3vdnk9nLQk0q0v8DAABAFcS+/8ZQkx76/y1XbVQAAABAP8W+//+Fmvj8HwAAAEoj9v07Qk0q0v/L/5cm//+LxodO/l/+v9P25f+d/7/M5P87k//vQv5f/l/+X/6fvhq0/H/s+28KNalI/w8AAABVEPv+m0NN9P8AAABQGrHv//+hJvp/AAAAKI3Y9+8MNalI/y//P+D5/5gcdf5/+X/5/4HM/0/K/w8c+f/O5P+76CX/f638/2rk/+X/5f9pNWj5/9j3vzzUpCL9PwAAAFRB7PtfEWqi/wcAAIDSiH3/K0NN9P8AAABQGrHvnwo1qUj/v5b8f+2S/P9qrvL5/yd6OP9/E/l/+f9O25f/d/7/MpP/70z+vwvn/5f/l/+X/6evBi3/H/v+W0JNKtL/AwAAQBXEvn9XqIn+HwAAAEoj9v23hpro/wEAAKA0Yt+/O9SkIv2/8/8PRf4/k/+X/5f/l/+X/++N/H9n8v9dyP/L/8v/y//TV4OW/499/6tCTSrS/wMAAEAVxL7/tlAT/T8AAACURuz7Xx1qov8HAACA0oh9/+2hJhXp/+X/5f/l/+X/5f/bb1/+fzjJ/3cm/9+F/L/8v/y//D99NWj5/9j3vybUpCL9PwAAAFRB7PvvCDXR/wMAAEBpxL7/zlAT/T8AAACURuz7p0NNKtL/y//L/8v/y//L/7ffvvz/cJL/70z+vwv5f/l/+X/5f/pq0PL/se+/K9SkIv0/AAAAVEHs++8ONdH/AwAAQGnEvn8m1ET/DwAAAKUR+/7ZUJOK9P/y//L/8v/y/2vK/79yeb3y/wX5/8Ei/9+Z/H8X8v/y/5ue/x+X/6dUBi3/H/v+PaEmFen/AQAAoApi37831ET/DwAAAKUR+/59oSb6fwAAACiN2PffE2pSkf5f/l/+X/6/r/n/Wrv5UKr8fwP5/4L8/2CR/++s//n/eBfl/+X/5f+d/1/+n5UGLf8f+/57Q00q0v8DAABAFcS+f3+oif4fAAAASiP2/QdCTfT/AAAAUBqx7z8YalKR/l/+X/5f/t/5/+X/229f/n84yf935vz/Xcj/y/8Pcf6/Prfk/xk0g5b/j33/oVCTivT/AAAAUAWx739tqIn+HwAAAEoj9v2/Fmqi/wcAAIDSiH3/r4eaVKT/l/+X/5f/l/8f9Pz/hPy//P8ayP93Jv/fhfy//P8Q5/+d/59BNGj5/9j33xdqUpH+HwAAAKog9v2/EWqi/wcAAIDSiH3/60JN9P8AAABQGrHvPxxqUpH+X/5/g/L/8UL5f/l/+X/n/5f/v6rk/zuT/+9C/l/+X/5f/p++GrT8f+z7Xx9qUpH+HwAAAKog9v33h5ro/wEAAKA0Yt//hlAT/T8AAACURuz73xhqUpH+X/7f+f83P/8/3jR2+f/l28n/F+T/5f/XQv6/M/n/LuT/5f/l/+X/6atBy//Hvv9NoSYV6f8BAACgCmLf/+ZQE/0/AAAAlEbs+98SaqL/BwAAgNKIff9bQ00q0v/L/8v/b37+3/n/5f8L8v/y//0g/9+Z/H8X/c//j7esX/7/Ktrs8cv/y/+z0qDl/2Pf/5uhJhXp/wEAAKAKYt//QKiJ/h8AAABKI/b9bws10f8DAABAacS+/+2hJhXp/+X/5f/l/+X/5f/bb1/+fzjJ/3c2ZPn/X10XLh/i/H/r+uX/r6LNHv9a8/9jLT9flfz/j1bL/y9tab29/D9Xw6Dl/2Pf/45Qk4r0/wAAAFAFse9/Z6iJ/h8AAABKI/b97wo10f8DAABAacS+/7dCTSrS/8v/18exnF6W/5f/zy+Q/5f/l/8fWvL/nQ1Z/r8M5/9vXb/8/1W02eN3/n/5f1YatPx/7PvfHWpSkf4fAAAAqiD2/Q+GmvTW/z/f33flAQAAgKsh9v3vCTXx+T8AAACURuz73xtqUpH+X/7f+f/l/+X/5f/bb1/+fzjJ/3cm/9+F/L/8/6Dl//9T/p/hNmj5/9j3PxRqUpH+HwAAAKog9v3vCzXR/wMAAEBpxL7/t0NN9P8AAABQGrHvf3+oSUX6f/n/Ycn/T8n/rzH/PxEuk/+X/5f/rxb5/87k/7uQ/5f/H7T8v/P/M+QGLf8f+/4PhJr03v9P9rwkAAAAsCli3/87oSYV+fwfAAAAqiD2/b8baqL/BwAAgNKIff/vhZpUpP+X/x+W/L/z/2fO/y//33J/Spn/H5H/X6+Ny//HI4/8v/y//H8k/y//L/9Pq0HL/8e+//dDTSrS/wMAAEAVxL7/g6Em+n8AAAAYCu3+T3ar2PcfCTXR/wMAAEBpxL7/aKhJRfp/+X/5f/n/K8r/54td1fz/X+z6lx98751H98j/Vyv/7/z/67ah5/+vP/md/1/+X/4/kf+X/5f/p9Wg5f9j338s1GS58Xu7E/wDAADAcIt9/x+EmlTk838AAACogtj3Hw810f8DAABAacS+fy7UpCL9v/y//L/8v/P/9zv/H/fHMOX/p7cMUf4/HnTl/9va0Pz/+5Zz4vL/a83/T7S9tDX/X5P/byL/v+bxfzfLMvl/+X820aDl/2PfPx9qUpH+HwAAAKog9P0jJ4q6fIX+HwAAAEoj9v0nQ030/wAAAFAase//UKhJRfp/+X/5f/l/+X/n/2+//YHN/zv/f0fy/50NTv6/Pef/l/8f5vHL/8v/s9Kg5f9j378QalKR/h8AAACqIPb9Hw410f8DAABAacS+/yOhJvp/AAAAKI3Y958KNalI/y//L/8v/y///3/s3ceTZeV5x/E70BO6qHJ554UXZu8/gYVZ2ztvvGDjjatcrjIOOCcGYysL5RxQFgooISGUUE6ghISykIRyDigjqUbF9PM83T19+tzumdt9z3nfz2ehh2lo7h0VxfCbnu8c/f/w6+v/50n/P07/v4T+X/+v/9f/s1JT6/9z9/9t3NLJ/gcAAIAe5O6/Nm6x/wEAAKAZufv/Lm6x/wEAAKAZufv/Pm7pZP/r//X/zfb/f6L/3+/19f/6/5bp/8fp/4ec3P5D/b/+X/+v/2elptb/5+7/h7ilk/0PAAAAPcjd/49xi/0PAAAAzcjdf13cYv8DAABAM3L3/1Pc0v7+P7XY2/+fWKyn/z914Z875v4/M179f0v9v+f/7/v6+n/9f8uOt/+/4aF/8+n/Z9//76D/1//r//X/rNTU+v/c/f8ct7S//wEAAKAbufv/JW6x/wEAAKAZufv/NW6x/wEAAKAZufv/LW7pZP97/r/n/+v/9f/6/+HX1//Pk+f/j+up/7/u3iuufeD2P7zjMK+v/9f/6//1/6zW1Pr/3P3/Hrd0sv8BAACgB7n7/yNusf8BAACgGbn7/zNusf8BAABghjYHP5q7/7/ilk72v/5f/6//j/7/jP5f/6//b4H+f1xP/f/FvL7+X/+v/9f/s1pT6/9z9/933NLJ/gcAAIAe5O7/n7jF/gcAAIDpGvqF2CNy918ft9j/AAAA0Izc/Wfjlk72v/7/6Pv/3+r/59H/e/6//l//3wT9/zj9/xL6f/2//l//z0pNrf/P3X9D3NLJ/gcAAIAe5O7/37jF/gcAAIBm5O6/MW6x/wEAAKAZufv/L27pZP/r/z3/X/+v/9f/D7++/n+ept3/byx9ff2//n/m/f9J/b/+X//PTofs/x8c+df2Svr/3P3/H7d0sv8BAACgB7n7Hxa32P8AAADQjNz9D49b7H8AAABoRu7+R8Qtnex//b/+X/+v/7/o/n/vP3rn6f+H6f+Px7T7/+W66f9PDP9eCPr/2ff/nv+v/9f/s8vUnv+fu/+RcUsn+x8AAAB6kLv/UXHLyP4/9E/mAwAAAGuVu//RcYuv/wMAAMDsZXWWu/8xcUsn+1//r//X/+v/Pf9/+PXH+v87drw//f+06P/HTab/34f+X/8/5/ev/9f/s9fU+v/c/Y+NWzrZ/wAAANCD3P03xS32PwAAADQjd//j4hb7HwAAAJqRu//xcUsn+3+4/9/+8/r/g9H/737/+v/hfz5W1f/n31H/P9r/X+35/33S/4/T/y+xq///843FQv+v/9f/R/+/uezz9f8MmVr/n7v/CXFLJ/sfAAAAepC7/4lxi/0PAAAAzcjd/6S4xf4HAACAZuTuf3Lc0sn+9/x//b/+f379v+f/b1nn8/8Xx97/b+j/D0j/P07/v4Tn/+v/9f/jz/8f+V0A9P8MmVr/n7v/KXFLJ/sfAAAAepC7/6lxi/0PAAAA87Dz1w5c+AtKQ+7+p8Ut9j8AAAA0I3f/0+OWdvb/6LM69f/6f/2//v9w/f9GfUv/v8Xz/6dF/z9O/7+E/v8o+vmNxvr/m/f7/Cn0/9cfdf8/Qv/PkF39/53bH19X/5+7/xlxSzv7HwAAALqXu/+ZcYv9DwAAAM3I3f+suMX+BwAAgGbk7n923NLJ/j/y/n/kdx/Q/+v/9f9z7P+36f+36P+nRf8/Tv+/hP7f8/89/1//z0rt6v93WFf/n7v/OXHL6PA7veR7CQAAAExJ7v7nxi2dfP0fAAAAepC7/+a4xf4HAACAZuTuf17c0sn+9/x//b/+X/+v/x9+ff3/PF1Sf3+Z/r/o//X/+n/9v/6fFZha/5+7//lxSyf7HwAAAHqQu/8FcYv9DwAAAHMy+pv15+5/Ydxi/wMAAEAzcve/KG7pZP/r/4+2/8+P6//1/wv9v/5f/38sun3+/4mhH4n22qf/v/uvz/7Z7o/o//X/+n/9v/6fA/r9kT83if7/3PZ/Xebuf3Hc0sn+BwAAgB7k7n9J3GL/AwAAQDNy9780brH/AQAAoBm5+2+JWw65/8eahynT/3v+v/5f/6//H359/f88ddv/H5Dn/y+h/9f/6//1/6zUJPr/Hd/O3f+yuMXX/wEAAKAZuftfHrfY/wAAANCM3P2viFvsfwAAAGhG7v5Xxi2d7H/9v/5f/6//1/8Pv77+f570/+P0/0vMqf+/5RL6/43hD6+7n79U637/+n/9P3tNrf/P3X9r3NLJ/gcAAIAe5O5/Vdxi/wMAAEAzcve/Om6x/wEAAKAZuftfE7d0sv/1//p//b/+X/8//Pr6/3nS/4/T/y8Wi9eNvIGh/v/c6Wn2/57/P7n3r//X/7PX1Pr/3P2vjVs62f8AAADQgSs3z58z8VPB9j8AAAC0KHf/bXGL/Q8AAADNyN3/+rilk/2v/9f/6/+3+//6nuj/9f/6/9nS/4/T/y8xp+f/6/8n9/71//p/9ppa/5+7/w1xSyf7HwAAAHqQu//2uMX+BwAAgGbk7n9j3GL/AwAAQDNy998Rt3Sy//X/+n/9v+f/6/+HX1//P09H1/8v9P/6f/3/Evp//b/+nwtNrf/P3f+muKWT/Q8AAAA9yN3/5rjF/gcAAIBm5O5/S9xi/wMAAEAzcve/NW7pZP/r//X/+n/9v/5/+PX1//Pk+f/j9P9L6P/1//p//T8rNdz/X7+2/j93/9vilk72PwAAAPQgd/+dcYv9DwAAAM3I3f/2uMX+BwAAgGbk7n9H3NLJ/tf/6/939/+Lhf5f/3/w/v8G/f+l9f9nFvr/ldP/j9P/L6H/b7P/v2zRUP+/ue/n6/+Zoqk9/z93/zvjlk72PwAAAPQgd/+74hb7HwAAAJqRu//dcYv9DwAAAM3I3f+euKWT/a//1/97/r/+3/P/h1/f8//nSf8/Tv+/hP7/kvr//PF4cv2/5//r/1mbqfX/ufvfG7d0sv8BAACgB7n73xe32P8AAADQjNz9749b7H8AAABoRu7+D8Qtnex//b/+X/+v/9f/D7++/n+e9P/j9P9L6P/bfP5/H/3/5kL/zwRNrf/P3f/BuKWT/Q8AAAA9yN1/V9xi/wMAAEAzcvffHbfY/wAAANCM3P0fils62f/6f/2//n+e/f8Z/b/+X/8/aCr9/1VX/ek9+n/9v/5f/+/5//r/3k2t/8/d/+G4pZP9DwAAAD3I3f+RuMX+BwAAgGbk7v9o3GL/AwAAQDNy938sbulk/+/t/08utgrVLUP9fzRqs+//T+94H0n/r/8//4EZ9P8L/b/+X/8/aCr9v+f/X9z71//r/+f8/g/V/1+59/P1/7Roav1/7v574pZO9j8AAAD0IHf/x+MW+x8AAACakbv/E3GL/Q8AAADNyN1/b9zSyf73/H/9v/5f/6//H359/f886f/H6f+XWFf/f9n2+9X/z/f9N/P8/8v1/6zO1Pr/3P2fjFs62f8AAADQg9z9n4pb7H8AAABoRu7+T8ct9j8AAADM1uYF387d/5m4pZP9r/8/nv7/9+Jj+n/9v/5f/6//P1r6/3H6/3Lhd21LP8//PzP0wXX385dq3e+/mf7f8/9Zoan1/7n7Pxu3dLL/AQAAoAe5+z8Xt9j/AAAA0Izc/Z+PW+x/AAAAaEbu/i/ELZ3sf/1/N8//v/9Ut/3/X+r/L3h9/b/+v2X6//wRfZj+f4l++v9B6+7n5/7+9f/6f/aaWv+fu/++uKWT/Q8AAAA9yN3/xbjF/gcAAIBm5O7/Utxi/wMAAEAzcvd/OW7pZP/r/7vp/2/cep899v+e/6//1//3RP8/Tv+/hP5f/99+/39qv8/X/3MUptb/5+6//8RGl/sfAAAA5uov/vhv7jvoX3v/+f89s/hK3HL14twBv4wNAAAATNxDu//ExmLx1fPf8vV/AAAAaFHu/q/FLZ3sf/1/X/1/n8//1//r//X/PdH/j9P/L6H/1/+33//vS//PUZha/5+7/+txy47ht3Ho7yUAAAAwJbn7vxG3dPL1fwAAAOhB7v5vxi179r/fDhAAAADmKnf/t+KWTr7+v87+/3L9//L+f3FE/X/8dfr/Lfp//f/Q6+v/50n/P+4S+/9zJ/T/+v8R+n/9v/6fC02t/8/d/+24pZP9DwAAAI3a9TMKufu/E7fY/wAAANCM3P3fjVvsfwAAAGhG7v7vxS2d7H/P/z/i/v+hv8Hufj5T9SN8/v9m/ZHn/3fe/990ZvD19f/6/5bp/8d5/v8S+/T/+V+I+v9xE+r/T+v/9f9Mw9T6/9z9349bOtn/AAAA0IPc/T+IW+x/AAAAaEbu/h/GLfY/AAAANCN3/4/ilk72v/5/4s//v6j+/wDP/9f/99H/7/P67fT/f3DF2buu+avbbtX/s+04+//8Z0H/337/7/n/s+v/Pf9f/89ErL7/39j1wcP2/7n7fxy3dLL/AQAAoAe5+x+IW+x/AAAAaEbu/p/ELfY/AAAANCN3/0/jlk72v/5f/z+V/j//v15D/3/2ovv/zcVisZb+P5vi3vt/z//X/+/l+f/j9P9L6P/1//p//T8rtfr+f/cHD9v/5+7/WdzSyf4HAACAHuTu/3nckvv/xKF/6h4AAACYmNz9v4hbfP0fAAAAmpG7/5dxSyf7X/+v/59K/588/3/789p6/v81Faf22f//Uf2R/v9o6f/H6f+X0P/r//X/+n9Wamr9f+7+X8Utnex/AAAA6EHu/gfjFvsfAAAAmpG7/9dxi/0PAAAAzcjd/5u4pZP9r/9vtf/PIl7/r/+fSv/v+f+e/388uuz/Tx7876//X0L/r//X/+v/Wamp9f+5+38XAAD//wBnYNM=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0)
renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0)

1.036912564s ago: executing program 5 (id=927):
r0 = socket$inet6(0xa, 0x3, 0x26)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, 0x0, 0x0)

987.430855ms ago: executing program 9 (id=928):
r0 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0)

696.228409ms ago: executing program 6 (id=929):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r2}, @IFLA_GTP_FD1={0x8, 0x2, @udp6=r0}]}}}]}, 0x40}}, 0x0)

500.651772ms ago: executing program 6 (id=930):
r0 = socket$inet6(0xa, 0x6, 0x0)
r1 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c)

459.815022ms ago: executing program 9 (id=931):
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000001095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)

393.455814ms ago: executing program 5 (id=932):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd60", 0xa8}], 0x1}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f00"], 0x28}}, 0x0)

306.180375ms ago: executing program 9 (id=933):
syz_mount_image$jfs(&(0x7f00000007c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c646973636172643d3078303030303030303030303030303030332c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d6d6163637972696c6c69632c0067add4ceec7cb8702b1b4a0ff322839e69b507d7478e0706b00408dc59283f5c0159b8e3c0289dcb182504844ef8e6912cdb3f50680fc9602ed27c1f6b47a91f941f154aa205d34a9b7a7c67efa0c0e2a70251d664fce12ae64a01000000000000002c4e1566a61a0ade4b6c9d78151053d9fb310800000000000000e14e5fe3c46c0acbb22d40391ae31d2025dcd947adf76739ae4ecbe3b630040b37e2b09d7816e0b93981de1147532cf2f46d4d4904f68fb43cd165b9"], 0x1, 0x61db, &(0x7f000000abc0)="$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")
r0 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
write$UHID_INPUT(r0, &(0x7f0000001940)={0x8, {"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", 0x1000}}, 0x1006)

305.839835ms ago: executing program 6 (id=934):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x19)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

203.502886ms ago: executing program 8 (id=936):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x2dc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_WINDOW={0x8, 0x5, 0x8}]}}}]}, 0x3c}}, 0x800)

203.123917ms ago: executing program 5 (id=937):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUk4gWC3qvS7INJZtuyW5KEwu2B3vxIkUQsSB69+6x+A/4VxS0UKQEPXiJzGY2XZPZNNlumm3384Fp35uZzZvvvvm+fbOzywbQt8bSfwoRL0fEN0nESMu2wcg2jq3tt/Lw+nS6JLG6+ulfSSTZuub+Sfb/oazyUkT89lXEycLmdmtLy3OlSqW8kNXH6/NXxmtLy6cuzZdmy7Ply5NTU2fempp89523uxbr6+f/+f6Tux+e+fr4yne/3D9yO4mzcTjb1hrHE7jRWhmLsew5GYqzG3ac6EJjvSTZ6wOgIwNZng9FOgaMxECW9blWR57moQG77Ms0rYE+lch/6FPNeUDz2r5L18HPjAfvr10AbY5/cO29kRhuXBsdXEn+d2WUXu+OdqH9tI1f/7xzO12i3fsQ+7vQEMAGN25GxOnBwc3jX5KNf507vY19NrbRb68/sJfupvOfN/LmP4X1+U/kzH8O5eRuJx6f/4X7XWimrXT+917u/Hf9ptXoQFZ7oTHnG0ouXqqU07HtxYg4EUP70/pERHyQfxPk88LKvdV27bfO/9Ilbb85F8yO4/7ghvnfTKleevLI1zy4GfFK7vw3We//JKf/0+fj/DbbOFa+82q7bY+Pf3et/hTxWm7/P+rMZOv7k+ON82G8eVZs9vetY7+3a3+v40/7/+DW8Y8mrfdraztv48fhf8vttnV6/u9LPmuU92XrrpXq9YWJiH3Jx5vXTz56bLPe3D+N/8Txrce/vPP/QJrY24z/1tFbrbsO7yz+3ZXGP7Oj/t954d5HX/zQrv3t9f+bjdKJbM12xr/tHuCTPHcAAAAAAADQawoRcTiSQnG9XCgUi2uf7zgaBwuVaq1+8mJ18fJMNL4rOxpDhead7pGWz0NMZJ+HbdYnN9SnIuJIRHw7cKBRL05XKzN7HTwAAAAAAAAAAAAAAAAAAAD0iEMRw3nf/0/9MZD/mDargWfRFj/5DTzn2ud/tqUbv/QE9CSv/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kP/Wsn+f/zuV08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+nD93Ll1WVx5en07rM1eXFueqV0/NlGtzxfnF6eJ0deFKcbZana2Ui9PV+cf9vUq1emViMhavjdfLtfp4bWn5wnx18XL9wqX50mz5QnnoqUQFAAAAAAAAAAAAAAAAAAAAz5ba0vJcqVIpLygodFQY7I3D6MFCoTcOo8PCXo9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDIfwEAAP//wGE62g==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000240)=ANY=[@ANYBLOB="06000000000000000153"])

30.153119ms ago: executing program 6 (id=938):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r0}, 0x10)
close(0x3)
close(r1)

29.932079ms ago: executing program 3 (id=939):
r0 = socket$inet6(0xa, 0x80002, 0x0)
recvmmsg(r0, &(0x7f000000a140)=[{{0x0, 0x0, 0x0}, 0x18a}], 0x1, 0x20010100, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

0s ago: executing program 8 (id=940):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x20, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0)

kernel console output (not intermixed with test programs):

327] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  123.166852][   T26] audit: type=1800 audit(1748017957.305:4): pid=5327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.279" name="file2" dev="loop6" ino=16 res=0 errno=0
[  123.390634][ T4577] EXT4-fs (loop6): unmounting filesystem.
[  123.791601][ T5359] loop0: detected capacity change from 0 to 1024
[  123.971078][ T5368] loop4: detected capacity change from 0 to 256
[  124.030668][   T75] hfsplus: b-tree write err: -5, ino 4
[  124.455245][ T4265] Bluetooth: hci3: command 0x0401 tx timeout
[  125.080484][ T5375] loop3: detected capacity change from 0 to 32768
[  125.144758][ T5375] 
[  125.144758][ T5375]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  125.144758][ T5375] 
[  125.188361][ T5375] 
[  125.188361][ T5375]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  125.188361][ T5375] 
[  125.242592][ T5375] 
[  125.242592][ T5375]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  125.242592][ T5375] 
[  125.398877][ T5415] loop4: detected capacity change from 0 to 1764
[  125.421060][ T5378] loop0: detected capacity change from 0 to 40427
[  125.475987][ T5378] F2FS-fs (loop0): invalid crc value
[  125.524483][ T5378] F2FS-fs (loop0): Found nat_bits in checkpoint
[  125.547721][ T5415] iso9660: Corrupted directory entry in block 2 of inode 1920
[  125.722657][ T5378] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  125.961007][ T4252] syz-executor: attempt to access beyond end of device
[  125.961007][ T4252] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  126.321930][ T5455] loop6: detected capacity change from 0 to 128
[  126.961559][ T5473] loop4: detected capacity change from 0 to 1024
[  127.265404][    T7] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  127.405481][ T5473] EXT4-fs: Ignoring removed orlov option
[  127.411942][ T5473] EXT4-fs: Ignoring removed oldalloc option
[  127.437645][ T5473] EXT4-fs (loop4): Test dummy encryption mode enabled
[  127.495401][    T7] usb 7-1: Using ep0 maxpacket: 32
[  127.505482][ T5473] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  127.516320][    T7] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  127.555243][    T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.601002][    T7] usb 7-1: config 0 descriptor??
[  127.628168][    T7] gspca_main: sunplus-2.14.0 probing 041e:400b
[  127.765248][ T4301] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  127.813497][ T4251] EXT4-fs (loop4): unmounting filesystem.
[  127.975396][ T4301] usb 1-1: Using ep0 maxpacket: 16
[  127.986079][ T4301] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47
[  128.005223][ T4301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.023619][ T4301] usb 1-1: Product: syz
[  128.033784][ T4301] usb 1-1: Manufacturer: syz
[  128.064139][ T4301] usb 1-1: SerialNumber: syz
[  128.081384][ T4301] usb 1-1: config 0 descriptor??
[  128.105960][ T4301] gspca_main: sn9c2028-2.14.0 probing 0c45:800a
[  128.313873][ T4301] gspca_sn9c2028: read1 error -32
[  128.320398][ T4301] gspca_sn9c2028: read1 error -32
[  128.381868][ T4822] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  128.452081][    T7] gspca_sunplus: reg_r err -71
[  128.460103][    T7] sunplus: probe of 7-1:0.0 failed with error -71
[  128.479817][    T7] usb 7-1: USB disconnect, device number 2
[  128.572249][ T4301] usb 1-1: USB disconnect, device number 5
[  128.588546][ T4822] usb 5-1: config index 0 descriptor too short (expected 227, got 18)
[  128.610268][ T4822] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  128.650143][ T4822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.674898][ T4822] usb 5-1: Product: syz
[  128.689044][ T4822] usb 5-1: Manufacturer: syz
[  128.704030][ T4822] usb 5-1: SerialNumber: syz
[  128.726667][ T4822] usb 5-1: config 0 descriptor??
[  128.734766][ T4822] ch341 5-1:0.0: ch341-uart converter detected
[  129.045762][    T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  129.255542][    T7] usb 4-1: Using ep0 maxpacket: 32
[  129.272364][    T7] usb 4-1: config 0 has an invalid interface number: 126 but max is 0
[  129.293313][    T7] usb 4-1: config 0 has no interface number 0
[  129.311838][    T7] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  129.332712][ T5560] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.339890][ T5560] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.348195][    T7] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  129.358923][    T7] usb 4-1: config 0 interface 126 has no altsetting 0
[  129.371627][    T7] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  129.415297][    T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.445089][    T7] usb 4-1: Product: syz
[  129.449345][    T7] usb 4-1: Manufacturer: syz
[  129.474363][    T7] usb 4-1: SerialNumber: syz
[  129.498186][    T7] usb 4-1: config 0 descriptor??
[  129.514547][ T5542] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  129.526157][ T5542] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  129.560083][ T4822] usb 5-1: failed to send control message: -71
[  129.575466][ T4822] ch341-uart: probe of ttyUSB0 failed with error -71
[  129.605323][ T4822] usb 5-1: USB disconnect, device number 3
[  129.612184][ T4822] ch341 5-1:0.0: device disconnected
[  129.975692][    T7] ir_usb 4-1:0.126: IR Dongle converter detected
[  130.177097][    T7] usb 4-1: IR Dongle converter now attached to ttyUSB0
[  130.397918][ T4822] usb 4-1: USB disconnect, device number 5
[  130.407402][ T5566] loop6: detected capacity change from 0 to 32768
[  130.425155][ T4822] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0
[  130.433573][ T4822] ir_usb 4-1:0.126: device disconnected
[  130.452276][ T5566] 
[  130.452276][ T5566]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.452276][ T5566] 
[  130.505932][ T5566] 
[  130.505932][ T5566]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.505932][ T5566] 
[  130.526052][    T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  130.534697][ T5566] 
[  130.534697][ T5566]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.534697][ T5566] 
[  130.566489][ T5566] 
[  130.566489][ T5566]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.566489][ T5566] 
[  130.597686][ T5566] 
[  130.597686][ T5566]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.597686][ T5566] 
[  130.649420][ T5582] 
[  130.649420][ T5582]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.649420][ T5582] 
[  130.649714][   T26] audit: type=1800 audit(1748017964.785:5): pid=5566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.362" name="bus" dev="loop6" ino=7 res=0 errno=0
[  130.728124][  T108] 
[  130.728124][  T108]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.728124][  T108] 
[  130.745284][    T7] usb 5-1: Using ep0 maxpacket: 16
[  130.752847][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.764284][ T5582] 
[  130.764284][ T5582]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.764284][ T5582] 
[  130.805600][    T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  130.824317][ T5566] 
[  130.824317][ T5566]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.824317][ T5566] 
[  130.831729][    T7] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  130.852389][ T5566] 
[  130.852389][ T5566]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.852389][ T5566] 
[  130.871857][ T5566] 
[  130.871857][ T5566]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.871857][ T5566] 
[  130.885140][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.892700][ T5566] 
[  130.892700][ T5566]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.892700][ T5566] 
[  130.912527][    T7] usb 5-1: config 0 descriptor??
[  130.915824][ T4303] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  130.934508][ T5566] 
[  130.934508][ T5566]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.934508][ T5566] 
[  130.965335][  T107] 
[  130.965335][  T107]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  130.965335][  T107] 
[  131.020885][ T5574] loop0: detected capacity change from 0 to 32768
[  131.067864][ T5574] 
[  131.067864][ T5574]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  131.067864][ T5574] 
[  131.110470][ T4577] 
[  131.110470][ T4577]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  131.110470][ T4577] 
[  131.138048][ T4303] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  131.165252][ T4303] usb 6-1: config 0 has no interface number 0
[  131.171723][ T4577] 
[  131.171723][ T4577]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  131.171723][ T4577] 
[  131.182444][ T4303] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  131.193781][ T5574] non-latin1 character 0x3ff found in JFS file name
[  131.202058][ T4303] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.225123][ T5574] mount with iocharset=utf8 to access
[  131.247609][ T4303] usb 6-1: config 0 descriptor??
[  131.266049][ T5594] non-latin1 character 0x3ff found in JFS file name
[  131.272797][ T5594] mount with iocharset=utf8 to access
[  131.292193][ T4303] usb 6-1: selecting invalid altsetting 1
[  131.323271][ T4303] dvb_ttusb_budget: ttusb_init_controller: error
[  131.360412][ T4303] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  131.361423][    T7] microsoft 0003:045E:07DA.0004: unknown main item tag 0x3
[  131.413207][    T7] HID 045e:07da: Invalid code 65791 type 1
[  131.444725][   T75] 
[  131.444725][   T75]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  131.444725][   T75] 
[  131.467351][   T75] 
[  131.467351][   T75]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  131.467351][   T75] 
[  131.469373][    T7] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0004/input/input10
[  131.511832][  T107] 
[  131.511832][  T107]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  131.511832][  T107] 
[  131.536181][ T4252] 
[  131.536181][ T4252]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  131.536181][ T4252] 
[  131.561651][ T4252] 
[  131.561651][ T4252]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  131.561651][ T4252] 
[  131.576285][    T7] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  131.608734][    T7] usb 5-1: USB disconnect, device number 4
[  131.689671][ T4303] DVB: Unable to find symbol cx22700_attach()
[  131.797117][ T4303] DVB: Unable to find symbol tda10046_attach()
[  131.803735][ T4303] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  131.830998][ T5608] IPVS: wrr: FWM 4 0x00000004 - no destination available
[  131.844984][ T4303] usb 6-1: USB disconnect, device number 3
[  131.915309][ T4331] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  132.105127][ T4331] usb 7-1: Using ep0 maxpacket: 8
[  132.112032][ T4331] usb 7-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config
[  132.138449][ T4331] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 252, changing to 11
[  132.175117][ T4331] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 41574, setting to 1024
[  132.204286][ T4331] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  132.271577][ T4331] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  132.319553][ T4331] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  132.357015][ T4331] usb 7-1: Product: syz
[  132.361246][ T4331] usb 7-1: Manufacturer: syz
[  132.375380][ T4331] usb 7-1: SerialNumber: syz
[  132.401364][ T4331] usb 7-1: config 0 descriptor??
[  132.500629][ T5633] netem: incorrect ge model size
[  132.511013][ T5633] netem: change failed
[  132.612078][ T4331] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  132.628223][ T4331] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  132.699126][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  132.705617][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  132.820859][ T4331] radio-si470x 7-1:0.0: software version 0, hardware version 0
[  132.835920][ T4331] radio-si470x 7-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  132.865312][ T4331] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  133.021979][ T4331] radio-si470x 7-1:0.0: si470x_set_report: usb_control_msg returned -71
[  133.043789][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[  133.051169][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[  133.057837][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[  133.064628][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[  133.071330][ T4331] radio-si470x 7-1:0.0: si470x_set_report: usb_control_msg returned -71
[  133.080064][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[  133.086718][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[  133.103523][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[  133.121783][    C0] radio-si470x 7-1:0.0: non-zero urb status (-71)
[  133.142755][ T4331] radio-si470x: probe of 7-1:0.0 failed with error -22
[  133.160795][ T5663] netlink: 176 bytes leftover after parsing attributes in process `syz.0.393'.
[  133.164011][ T4331] usb 7-1: USB disconnect, device number 3
[  133.309718][ T5665] loop4: detected capacity change from 0 to 1024
[  133.668314][ T5682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.400'.
[  133.842531][ T5692] loop5: detected capacity change from 0 to 256
[  133.940787][ T1193] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  134.029524][ T5700] input: syz0 as /devices/virtual/input/input12
[  134.109871][ T5703] loop6: detected capacity change from 0 to 128
[  134.145888][ T1193] usb 5-1: Using ep0 maxpacket: 16
[  134.153360][ T1193] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  134.175129][ T4300] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  134.185217][ T1193] usb 5-1: config 0 has no interface number 0
[  134.210446][ T1193] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.224465][ T5707] vivid-002: =================  START STATUS  =================
[  134.231918][ T1193] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.250073][ T1193] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  134.259383][ T1193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.267584][ T5707] vivid-002: Radio HW Seek Mode: Bounded
[  134.276981][ T5707] vivid-002: Radio Programmable HW Seek: false
[  134.283206][ T5707] vivid-002: RDS Rx I/O Mode: Block I/O
[  134.310145][ T1193] usb 5-1: config 0 descriptor??
[  134.346328][ T5707] vivid-002: Generate RBDS Instead of RDS: false
[  134.356434][ T5707] vivid-002: RDS Reception: true
[  134.361523][ T5707] vivid-002: RDS Program Type: 0 inactive
[  134.367682][ T5707] vivid-002: RDS PS Name:  inactive
[  134.377741][ T4300] usb 1-1: Using ep0 maxpacket: 16
[  134.388072][ T5707] vivid-002: RDS Radio Text:  inactive
[  134.394846][ T4300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.416225][ T4300] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.418311][ T5714] loop5: detected capacity change from 0 to 256
[  134.432550][ T5707] vivid-002: RDS Traffic Announcement: false inactive
[  134.442570][ T4300] usb 1-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00
[  134.461604][ T5707] vivid-002: RDS Traffic Program: false inactive
[  134.483334][ T4300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.502681][ T5707] vivid-002: RDS Music: false inactive
[  134.512429][ T5714] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d)
[  134.513112][ T5707] vivid-002: ==================  END STATUS  ==================
[  134.533705][ T4300] usb 1-1: config 0 descriptor??
[  134.616171][ T4331] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  134.704829][ T5722] netlink: 'syz.3.413': attribute type 4 has an invalid length.
[  134.718478][ T5722] netlink: 152 bytes leftover after parsing attributes in process `syz.3.413'.
[  134.754472][ T5722] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  134.805335][ T4331] usb 7-1: Using ep0 maxpacket: 16
[  134.819773][ T4331] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  134.842269][ T4331] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  134.891459][ T4331] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  134.934076][ T4331] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  134.953841][ T4300] wacom 0003:056A:00D0.0006: unknown main item tag 0x0
[  134.957758][ T4331] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  134.978538][ T1193] uclogic 0003:28BD:0071.0005: pen parameters not found
[  134.985912][ T4300] wacom 0003:056A:00D0.0006: unknown main item tag 0x0
[  134.993608][ T4300] wacom 0003:056A:00D0.0006: Unknown device_type for 'HID 056a:00d0'. Assuming pen.
[  135.004825][ T1193] uclogic 0003:28BD:0071.0005: interface is invalid, ignoring
[  135.006280][ T4331] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  135.049220][ T4300] wacom 0003:056A:00D0.0006: hidraw0: USB HID v0.36 Device [HID 056a:00d0] on usb-dummy_hcd.0-1/input0
[  135.064823][ T4331] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  135.069469][ T4300] input: Wacom Bamboo 2FG Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00D0.0006/input/input13
[  135.091189][ T4331] usb 7-1: Manufacturer: syz
[  135.111063][ T4331] usb 7-1: config 0 descriptor??
[  135.154480][ T4300] usb 1-1: USB disconnect, device number 6
[  135.182124][ T5735] netlink: 12 bytes leftover after parsing attributes in process `syz.5.417'.
[  135.193937][ T5735] netlink: 12 bytes leftover after parsing attributes in process `syz.5.417'.
[  135.217331][ T4301] usb 5-1: USB disconnect, device number 5
[  135.394798][ T5743] loop5: detected capacity change from 0 to 256
[  135.449810][ T5743] FAT-fs (loop5): Directory bread(block 64) failed
[  135.460698][ T5743] FAT-fs (loop5): Directory bread(block 65) failed
[  135.470697][ T5743] FAT-fs (loop5): Directory bread(block 66) failed
[  135.481979][ T5743] FAT-fs (loop5): Directory bread(block 67) failed
[  135.494183][ T5743] FAT-fs (loop5): Directory bread(block 68) failed
[  135.507856][ T5743] FAT-fs (loop5): Directory bread(block 69) failed
[  135.514744][ T5743] FAT-fs (loop5): Directory bread(block 70) failed
[  135.525096][ T4331] rc_core: IR keymap rc-hauppauge not found
[  135.530365][ T5743] FAT-fs (loop5): Directory bread(block 71) failed
[  135.536983][ T4331] Registered IR keymap rc-empty
[  135.540047][ T5743] FAT-fs (loop5): Directory bread(block 72) failed
[  135.542981][ T4331] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  135.566874][ T5743] FAT-fs (loop5): Directory bread(block 73) failed
[  135.615325][ T4331] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  135.655694][ T4331] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  135.686546][ T4331] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input16
[  135.749927][ T4331] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  135.795567][ T4331] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  135.835199][ T4331] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  135.865201][ T4331] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  135.907400][ T4331] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  135.935289][ T4331] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  135.965196][ T4331] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  136.013822][ T5759] loop4: detected capacity change from 0 to 512
[  136.035294][ T4331] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  136.044345][ T5757] loop0: detected capacity change from 0 to 1024
[  136.057707][ T5759] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=802c198, mo2=0002]
[  136.075235][ T4331] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  136.104351][ T5763] loop3: detected capacity change from 0 to 512
[  136.111265][ T4331] mceusb 7-1:0.0: Error: mce write submit urb error = -90
[  136.121798][ T5763] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  136.148400][ T4331] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  136.158310][ T4331] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  136.177536][ T4331] usb 7-1: USB disconnect, device number 4
[  136.188154][ T5763] EXT4-fs (loop3): 1 truncate cleaned up
[  136.188322][ T5759] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.424: inode #1: comm syz.4.424: iget: illegal inode #
[  136.218216][ T5763] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  136.259149][ T5759] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.424: error while reading EA inode 1 err=-117
[  136.309102][ T5771] loop5: detected capacity change from 0 to 512
[  136.316582][ T5771] EXT4-fs: Ignoring removed nobh option
[  136.340437][ T5759] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.424: inode #1: comm syz.4.424: iget: illegal inode #
[  136.357627][   T37] hfsplus: b-tree write err: -5, ino 4
[  136.371351][ T5771] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.425: invalid indirect mapped block 256 (level 2)
[  136.416317][ T5771] EXT4-fs (loop5): 2 truncates cleaned up
[  136.428448][ T5759] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.424: error while reading EA inode 1 err=-117
[  136.445598][ T5771] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  136.456596][ T4259] EXT4-fs (loop3): unmounting filesystem.
[  136.506060][ T5759] EXT4-fs (loop4): 1 orphan inode deleted
[  136.511885][ T5759] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  136.594831][ T5771] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.425: bg 0: block 5: invalid block bitmap
[  136.648023][ T4251] EXT4-fs (loop4): unmounting filesystem.
[  136.721188][ T5771] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  136.758079][ T5771] EXT4-fs (loop5): This should not happen!! Data will be lost
[  136.758079][ T5771] 
[  136.795590][ T5771] EXT4-fs (loop5): Total free blocks count 0
[  136.811244][ T5797] loop6: detected capacity change from 0 to 8
[  136.825218][ T5771] EXT4-fs (loop5): Free/Dirty block details
[  136.831382][ T5771] EXT4-fs (loop5): free_blocks=0
[  136.851655][ T5771] EXT4-fs (loop5): dirty_blocks=66
[  136.881946][ T5771] EXT4-fs (loop5): Block reservation details
[  136.902204][ T5771] EXT4-fs (loop5): i_reserved_data_blocks=66
[  136.974082][ T5801] netlink: 56 bytes leftover after parsing attributes in process `syz.0.433'.
[  137.045769][   T37] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28
[  137.325223][ T5812] devpts: called with bogus options
[  137.567650][ T5806] loop6: detected capacity change from 0 to 40427
[  137.583028][ T5806] F2FS-fs (loop6): invalid crc value
[  137.602121][ T5806] F2FS-fs (loop6): Found nat_bits in checkpoint
[  137.686732][ T5806] F2FS-fs (loop6): Start checkpoint disabled!
[  137.693251][ T5824] loop0: detected capacity change from 0 to 512
[  137.711223][ T5806] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  137.750037][ T5824] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  137.766292][ T5824] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e028, mo2=0002]
[  137.824414][ T5824] System zones: 0-1, 15-15, 18-18, 34-34
[  137.834680][ T5824] EXT4-fs (loop0): orphan cleanup on readonly fs
[  137.855777][ T5824] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0
[  137.870802][ T5824] EXT4-fs warning (device loop0): ext4_enable_quotas:7054: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  137.886520][ T5824] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  137.905304][ T5824] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.443: bad orphan inode 16
[  137.934904][ T5824] EXT4-fs (loop0): Remounting filesystem read-only
[  137.951767][ T5824] ext4_test_bit(bit=15, block=18) = 1
[  137.964569][ T5824] is_bad_inode(inode)=0
[  137.970244][   T37] kworker/u4:2: attempt to access beyond end of device
[  137.970244][   T37] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  137.985927][ T5824] NEXT_ORPHAN(inode)=0
[  137.993042][ T5824] max_ino=32
[  137.997540][ T5824] i_nlink=2
[  138.000760][ T5824] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  138.073236][ T5836] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present!
[  138.087028][ T5824] fscrypt (loop0, inode 16): Error -61 getting encryption context
[  138.250574][ T4252] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0)
[  138.293572][ T4252] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #13: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic f300, entries 1, max 4(0), depth 0(0)
[  138.530713][ T5844] loop3: detected capacity change from 0 to 128
[  138.729252][ T4252] EXT4-fs (loop0): unmounting filesystem.
[  138.865875][   T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.987858][   T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.086716][   T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.099851][ T4265] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  139.106207][ T4254] Bluetooth: hci5: command 0x1003 tx timeout
[  139.216548][   T26] audit: type=1326 audit(1748017973.355:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5853 comm="syz.5.456" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f579c58e969 code=0x0
[  139.305893][ T5856] loop5: detected capacity change from 0 to 164
[  139.322926][   T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.338133][ T5856] isofs_fill_super: bread failed, dev=loop5, iso_blknum=41, block=82
[  139.912459][ T4267] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  139.923247][ T4267] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  139.932353][ T4267] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  139.940259][ T4267] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  139.960615][ T4267] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  139.970761][ T4267] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  140.105195][ T1193] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  140.245283][ T5888] loop3: detected capacity change from 0 to 2048
[  140.266632][ T5888] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  140.302476][ T1193] usb 5-1: Using ep0 maxpacket: 32
[  140.312369][ T1193] usb 5-1: config 0 has an invalid interface number: 239 but max is 0
[  140.330935][ T1193] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  140.348968][ T5892] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  140.352155][ T1193] usb 5-1: config 0 has no interface number 0
[  140.405152][ T4331] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  140.412739][ T1193] usb 5-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8
[  140.465248][ T1193] usb 5-1: config 0 interface 239 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  140.493988][ T1193] usb 5-1: config 0 interface 239 has no altsetting 0
[  140.527823][ T1193] usb 5-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9
[  140.556626][ T1193] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.575271][ T1193] usb 5-1: Product: syz
[  140.579482][ T1193] usb 5-1: Manufacturer: syz
[  140.590322][ T1193] usb 5-1: SerialNumber: syz
[  140.615521][ T4331] usb 7-1: Using ep0 maxpacket: 32
[  140.623158][ T4331] usb 7-1: config index 0 descriptor too short (expected 156, got 27)
[  140.640071][ T1193] usb 5-1: config 0 descriptor??
[  140.649631][ T5874] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  140.654340][ T5892] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  140.675186][ T4331] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  140.700516][ T4331] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  140.711828][ T5892] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  140.745390][ T4331] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  140.783172][ T5892] Remounting filesystem read-only
[  140.811953][ T4259] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  140.825089][ T4331] usb 7-1: config 0 interface 0 has no altsetting 0
[  140.879629][ T4331] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  140.935645][ T4331] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  140.959890][ T5874] netlink: 27 bytes leftover after parsing attributes in process `syz.4.465'.
[  140.969045][ T4331] usb 7-1: Product: syz
[  140.974840][ T4331] usb 7-1: Manufacturer: syz
[  140.995310][ T4331] usb 7-1: SerialNumber: syz
[  141.012697][ T4331] usb 7-1: config 0 descriptor??
[  141.030986][ T4301] usb 5-1: USB disconnect, device number 6
[  141.050814][ T4331] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  141.095862][ T4331] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  141.098549][ T5875] chnl_net:caif_netlink_parms(): no params data found
[  141.115827][ T5912] process 'syz.5.475' launched '/dev/fd/3' with NULL argv: empty string added
[  141.314220][ T4331] usb 7-1: USB disconnect, device number 5
[  141.330828][ T4331] ldusb 7-1:0.0: LD USB Device #0 now disconnected
[  141.460537][ T5918] device batadv0 entered promiscuous mode
[  141.471744][ T5918] device batadv0 left promiscuous mode
[  141.851969][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.885955][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.894226][ T5875] device bridge_slave_0 entered promiscuous mode
[  141.955237][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.973485][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.024235][ T5875] device bridge_slave_1 entered promiscuous mode
[  142.049295][   T37] device hsr_slave_0 left promiscuous mode
[  142.052272][ T5936] loop4: detected capacity change from 0 to 4096
[  142.055523][ T4265] Bluetooth: hci0: command 0x0409 tx timeout
[  142.063039][ T5936] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  142.124346][   T37] device hsr_slave_1 left promiscuous mode
[  142.163362][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  142.176158][ T5948] loop3: detected capacity change from 0 to 256
[  142.189378][ T5948] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  142.201664][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[  142.213672][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.240560][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.268163][   T37] device bridge_slave_1 left promiscuous mode
[  142.284990][ T5948] exFAT-fs (loop3): error, invalid size(size(0) > aligned(9223372036854777344)
[  142.284990][ T5948] 
[  142.305689][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.323499][ T5948] exFAT-fs (loop3): Filesystem has been set read-only
[  142.336144][   T37] device bridge_slave_0 left promiscuous mode
[  142.350085][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.488058][   T37] device veth1_macvtap left promiscuous mode
[  142.499698][   T37] device veth0_macvtap left promiscuous mode
[  142.535441][   T37] device veth1_vlan left promiscuous mode
[  142.558424][   T37] device veth0_vlan left promiscuous mode
[  142.629714][ T5959] loop4: detected capacity change from 0 to 64
[  142.766246][ T5959] MTD: Couldn't look up './file0': -15
[  144.094633][   T37] team0 (unregistering): Port device team_slave_1 removed
[  144.137833][ T4267] Bluetooth: hci0: command 0x041b tx timeout
[  144.189245][   T37] team0 (unregistering): Port device team_slave_0 removed
[  144.258364][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  144.324820][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  144.921542][   T37] bond0 (unregistering): Released all slaves
[  145.084482][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.109498][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.227663][ T5875] team0: Port device team_slave_0 added
[  145.253569][ T5875] team0: Port device team_slave_1 added
[  145.384139][ T5992] loop3: detected capacity change from 0 to 2048
[  145.394757][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0
[  145.439605][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.496090][ T5992] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  145.608743][ T6002] loop4: detected capacity change from 0 to 128
[  145.625010][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.651222][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1
[  145.670951][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.735416][   T46] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  145.743503][ T6002] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  145.773790][   T46] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  145.795542][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  145.806557][ T6002] ext4 filesystem being mounted at /101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  145.883446][   T46] EXT4-fs (loop3): This should not happen!! Data will be lost
[  145.883446][   T46] 
[  145.944807][   T46] EXT4-fs (loop3): Total free blocks count 0
[  145.965284][   T46] EXT4-fs (loop3): Free/Dirty block details
[  145.971582][   T46] EXT4-fs (loop3): free_blocks=2415919504
[  145.999670][ T5875] device hsr_slave_0 entered promiscuous mode
[  146.031911][   T46] EXT4-fs (loop3): dirty_blocks=16
[  146.031974][ T5875] device hsr_slave_1 entered promiscuous mode
[  146.047516][   T46] EXT4-fs (loop3): Block reservation details
[  146.053550][   T46] EXT4-fs (loop3): i_reserved_data_blocks=1
[  146.061312][ T5875] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  146.061539][ T6002] EXT4-fs (loop4): shut down requested (1)
[  146.089838][ T4259] EXT4-fs (loop3): unmounting filesystem.
[  146.090130][ T5875] Cannot create hsr debugfs directory
[  146.215226][ T4267] Bluetooth: hci0: command 0x040f tx timeout
[  146.248804][ T4251] EXT4-fs (loop4): unmounting filesystem.
[  146.379118][ T5987] loop5: detected capacity change from 0 to 32768
[  146.415685][ T5987] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.500 (5987)
[  146.531721][ T5987] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  146.573944][ T5987] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  146.611937][ T5987] BTRFS info (device loop5): doing ref verification
[  146.655285][ T5987] BTRFS info (device loop5): use zlib compression, level 3
[  146.662559][ T5987] BTRFS info (device loop5): using free space tree
[  146.671888][ T6020] netlink: 'syz.6.508': attribute type 3 has an invalid length.
[  146.744996][ T5875] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  146.787397][ T5875] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  146.798883][ T5875] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  146.810442][ T5875] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  146.880248][ T5987] BTRFS info (device loop5): enabling ssd optimizations
[  147.140318][ T4419] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  147.142649][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.234938][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  147.259103][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  147.289375][ T5875] 8021q: adding VLAN 0 to HW filter on device team0
[  147.316728][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  147.343223][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  147.383900][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.391103][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.414490][ T6056] loop6: detected capacity change from 0 to 128
[  147.454356][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  147.547301][ T6056] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  147.558183][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  147.584714][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  147.641200][ T4483] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.648404][ T4483] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.677522][ T6056] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  147.684487][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  147.778287][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  147.815683][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  147.843585][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  147.860250][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  147.879350][ T6056] fscrypt (loop6, inode 12): Direct key flag not allowed with different contents and filenames modes
[  147.890155][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  147.922877][ T5875] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  147.951100][ T5875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  147.983957][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  147.997267][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  148.041440][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  148.086165][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  148.115786][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  148.133770][ T4577] EXT4-fs (loop6): unmounting filesystem.
[  148.136536][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  148.295605][ T4267] Bluetooth: hci0: command 0x0419 tx timeout
[  148.430915][ T4331] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  148.532710][ T6092] netlink: 36 bytes leftover after parsing attributes in process `syz.6.524'.
[  148.625114][ T4331] usb 4-1: Using ep0 maxpacket: 32
[  148.632494][ T4331] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  148.685097][ T4331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.711526][ T4331] usb 4-1: config 0 descriptor??
[  148.927117][ T4331] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  148.937610][ T4331] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  148.987733][ T4331] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  148.994952][ T4331] usb 4-1: media controller created
[  149.005253][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  149.014357][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  149.043465][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.070920][ T4331] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  149.156958][ T4331] az6027: usb out operation failed. (-71)
[  149.188529][ T4331] az6027: usb out operation failed. (-71)
[  149.216182][ T4331] stb0899_attach: Driver disabled by Kconfig
[  149.222236][ T4331] az6027: no front-end attached
[  149.222236][ T4331] 
[  149.265136][ T4331] az6027: usb out operation failed. (-71)
[  149.271066][ T4331] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  149.319553][ T4331] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17
[  149.332999][ T6113] loop6: detected capacity change from 0 to 64
[  149.375924][ T4331] dvb-usb: schedule remote query interval to 400 msecs.
[  149.405085][ T4331] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  149.424042][ T4331] usb 4-1: USB disconnect, device number 6
[  149.792933][ T4331] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  149.956084][ T6132] loop6: detected capacity change from 0 to 128
[  149.982562][ T6132] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  149.995135][ T4301] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  150.033853][ T6132] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  150.225330][ T4301] usb 6-1: Using ep0 maxpacket: 16
[  150.233443][ T4301] usb 6-1: config 0 has an invalid interface number: 29 but max is 0
[  150.256034][ T4301] usb 6-1: config 0 has no interface number 0
[  150.259907][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  150.268233][ T4301] usb 6-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16
[  150.293345][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  150.315079][ T4301] usb 6-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024
[  150.364044][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  150.365141][ T4301] usb 6-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  150.388220][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  150.408097][ T4301] usb 6-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0
[  150.416365][ T5875] device veth0_vlan entered promiscuous mode
[  150.431154][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  150.446796][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  150.452096][ T4301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.475311][ T4301] usb 6-1: Product: syz
[  150.485220][ T4301] usb 6-1: Manufacturer: syz
[  150.488600][ T5875] device veth1_vlan entered promiscuous mode
[  150.495557][ T4301] usb 6-1: SerialNumber: syz
[  150.508827][ T4301] usb 6-1: config 0 descriptor??
[  150.534307][ T6148] binder: 6147:6148 ioctl 400c620e 2000000014c0 returned -22
[  150.542725][ T6121] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  150.556835][ T6121] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  150.583208][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  150.604485][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  150.633437][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  150.660674][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  150.686911][ T5875] device veth0_macvtap entered promiscuous mode
[  150.722969][ T5875] device veth1_macvtap entered promiscuous mode
[  150.742786][ T6152] netlink: 24 bytes leftover after parsing attributes in process `syz.3.541'.
[  150.797378][ T5875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.845109][ T5875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.854991][ T5875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.878151][ T4301] usb 6-1: USB disconnect, device number 4
[  150.905176][ T5875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.925078][ T5875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.941986][ T5875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  150.952966][ T5875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  150.970413][ T5875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.010156][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.040399][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  151.056026][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  151.074691][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  151.086240][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  151.135554][ T5875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.165054][ T5875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.169567][ T6146] loop4: detected capacity change from 0 to 32768
[  151.181694][ T5875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.205809][ T5875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.218557][ T5875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.233666][ T5875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.275365][ T5875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.293485][ T6163] loop6: detected capacity change from 0 to 512
[  151.300002][ T5875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.306081][ T6163] EXT4-fs: Ignoring removed mblk_io_submit option
[  151.310176][ T6146] XFS (loop4): Mounting V5 Filesystem
[  151.323470][ T6163] EXT4-fs: Ignoring removed mblk_io_submit option
[  151.333705][ T6163] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  151.343986][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.364532][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  151.392319][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  151.394310][ T6163] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002]
[  151.418658][ T6146] XFS (loop4): Ending clean mount
[  151.434839][ T6163] System zones: 1-12
[  151.442276][ T6163] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2195: inode #15: comm syz.6.543: corrupted in-inode xattr
[  151.456103][ T5875] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.472232][ T5875] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.505240][ T5875] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.513993][ T5875] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.542900][ T6163] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.543: couldn't read orphan inode 15 (err -117)
[  151.584808][ T6163] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  151.643455][ T4251] XFS (loop4): Unmounting Filesystem
[  151.816252][ T6177] bridge0: port 1(bridge_slave_0) entered listening state
[  151.838115][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.862081][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.902793][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  151.945873][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.975147][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.020567][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  152.043477][ T4577] EXT4-fs (loop6): unmounting filesystem.
[  152.272873][ T6185] loop6: detected capacity change from 0 to 4096
[  152.340724][ T6193] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  152.426112][ T6185] NILFS (loop6): DAT doesn't have a block to manage vblocknr = 524288
[  152.444604][ T6185] NILFS error (device loop6): nilfs_bmap_truncate: broken bmap (inode number=15)
[  152.444961][ T6198] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.482819][ T6185] Remounting filesystem read-only
[  152.498470][ T6185] NILFS (loop6): error -5 truncating bmap (ino=15)
[  152.593861][ T6201] program syz.4.553 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  152.665341][ T4577] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer
[  152.824764][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.556'.
[  153.019301][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.7.560'.
[  153.142689][ T6217] loop3: detected capacity change from 0 to 4096
[  153.200921][ T6217] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  153.321340][ T6217] ntfs3: loop3: ino=5, "/" directory corrupted
[  153.338563][ T6217] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  153.487163][ T4259] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22.
[  153.522402][ T4259] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22.
[  153.720397][ T6245] loop6: detected capacity change from 0 to 256
[  153.742040][ T6249] netlink: 16 bytes leftover after parsing attributes in process `syz.4.570'.
[  154.337978][ T6272] loop5: detected capacity change from 0 to 16
[  154.389949][ T6272] erofs: (device loop5): mounted with root inode @ nid 36.
[  154.455514][ T6272] erofs: (device loop5): z_erofs_readahead: readahead error at page 12 @ nid 36
[  154.496046][ T6272] erofs: (device loop5): z_erofs_readahead: readahead error at page 9 @ nid 36
[  154.542374][ T6272] erofs: (device loop5): z_erofs_readahead: readahead error at page 8 @ nid 36
[  154.570906][ T6272] erofs: (device loop5): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36
[  154.600206][ T6272] syz.5.581: attempt to access beyond end of device
[  154.600206][ T6272] loop5: rw=524288, sector=67108872, nr_sectors = 16 limit=16
[  154.644900][ T6272] syz.5.581: attempt to access beyond end of device
[  154.644900][ T6272] loop5: rw=524288, sector=720, nr_sectors = 8 limit=16
[  154.790632][   T37] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.791877][ T6248] loop3: detected capacity change from 0 to 32768
[  154.941604][ T6248] XFS (loop3): Mounting V5 Filesystem
[  155.075364][   T37] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.091386][ T6270] loop4: detected capacity change from 0 to 32768
[  155.142916][ T6248] XFS (loop3): Ending clean mount
[  155.205790][ T6270] XFS (loop4): Mounting V5 Filesystem
[  155.225639][   T37] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.309262][ T6270] XFS (loop4): Ending clean mount
[  155.350199][   T37] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.364816][ T6270] XFS (loop4): Quotacheck needed: Please wait.
[  155.383662][ T4259] XFS (loop3): Unmounting Filesystem
[  155.448961][ T6304] netlink: 'syz.6.585': attribute type 11 has an invalid length.
[  155.469295][ T6304] netlink: 36 bytes leftover after parsing attributes in process `syz.6.585'.
[  155.502639][ T6270] XFS (loop4): Quotacheck: Done.
[  155.995746][ T4251] XFS (loop4): Unmounting Filesystem
[  156.385439][ T4267] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  156.397832][ T4267] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  156.450819][ T4267] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  156.471050][ T4254] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  156.479004][ T4254] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  156.486529][ T4254] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  156.899054][ T6344] loop6: detected capacity change from 0 to 512
[  157.043734][ T6344] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.598: inode #1: comm syz.6.598: iget: illegal inode #
[  157.147308][ T6344] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.598: error while reading EA inode 1 err=-117
[  157.184447][ T6344] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.598: inode #1: comm syz.6.598: iget: illegal inode #
[  157.251703][ T6344] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.598: error while reading EA inode 1 err=-117
[  157.275171][ T6344] EXT4-fs (loop6): 1 orphan inode deleted
[  157.281015][ T6344] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  157.389009][ T6324] chnl_net:caif_netlink_parms(): no params data found
[  157.396025][ T6344] EXT4-fs error (device loop6): ext4_lookup:1858: inode #15: comm syz.6.598: unexpected EA_INODE flag
[  157.570701][ T4577] EXT4-fs (loop6): unmounting filesystem.
[  157.800776][ T6377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.606'.
[  157.818396][ T6377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'.
[  158.043843][ T6389] netlink: 56 bytes leftover after parsing attributes in process `syz.3.611'.
[  158.094023][ T6389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.611'.
[  158.143543][ T6324] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.150916][ T6389] netlink: 31 bytes leftover after parsing attributes in process `syz.3.611'.
[  158.163172][ T6324] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.195207][ T6324] device bridge_slave_0 entered promiscuous mode
[  158.205362][ T6389] netlink: 'syz.3.611': attribute type 2 has an invalid length.
[  158.225619][ T6389] netlink: 31 bytes leftover after parsing attributes in process `syz.3.611'.
[  158.230234][ T6324] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.275188][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.312878][ T6324] device bridge_slave_1 entered promiscuous mode
[  158.323736][ T6390] loop4: detected capacity change from 0 to 8192
[  158.364434][ T6390] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  158.458857][ T6390] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  158.477721][   T37] device hsr_slave_0 left promiscuous mode
[  158.508217][   T37] device hsr_slave_1 left promiscuous mode
[  158.516429][ T6390] REISERFS (device loop4): using ordered data mode
[  158.522974][ T6390] reiserfs: using flush barriers
[  158.534855][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.535493][ T4254] Bluetooth: hci0: command 0x0409 tx timeout
[  158.553994][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[  158.603362][ T6390] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  158.625934][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  158.645139][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[  158.667981][ T6390] REISERFS (device loop4): checking transaction log (loop4)
[  158.683755][ T6390] REISERFS (device loop4): Using r5 hash to sort names
[  158.693078][   T37] device bridge_slave_1 left promiscuous mode
[  158.698315][ T6390] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  158.725300][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.745251][    T7] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  158.773409][   T37] device bridge_slave_0 left promiscuous mode
[  158.791646][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.912200][   T37] device veth1_macvtap left promiscuous mode
[  158.918447][   T37] device veth0_macvtap left promiscuous mode
[  158.926975][   T37] device veth1_vlan left promiscuous mode
[  158.933092][   T37] device veth0_vlan left promiscuous mode
[  158.941996][    T7] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  158.951892][    T7] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  158.961847][    T7] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 72
[  158.996077][    T7] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  159.025274][    T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.055405][    T7] usb 6-1: Product: syz
[  159.059726][    T7] usb 6-1: Manufacturer: syz
[  159.064354][    T7] usb 6-1: SerialNumber: syz
[  159.087830][ T6401] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  159.322968][    T7] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8
[  159.400507][ T4331] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  159.549384][ T6065] usb 6-1: USB disconnect, device number 5
[  159.558862][ T6065] usblp0: removed
[  159.610527][ T4331] usb 5-1: config index 0 descriptor too short (expected 65069, got 45)
[  159.623457][ T4331] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  159.641314][ T4331] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  159.663328][ T4331] usb 5-1: config 0 has no interfaces?
[  159.673404][ T4331] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  159.682792][ T4331] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.694429][ T4331] usb 5-1: config 0 descriptor??
[  159.804404][   T37] team0 (unregistering): Port device team_slave_1 removed
[  159.852961][   T37] team0 (unregistering): Port device team_slave_0 removed
[  159.902115][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  159.941211][ T4331] usb 5-1: USB disconnect, device number 7
[  159.971676][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  160.579643][   T37] bond0 (unregistering): Released all slaves
[  160.617283][ T4254] Bluetooth: hci0: command 0x041b tx timeout
[  160.638519][ T6424] input: syz0 as /devices/virtual/input/input18
[  160.685217][ T6324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  160.738550][ T6324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  160.913152][ T6324] team0: Port device team_slave_0 added
[  160.922106][ T6324] team0: Port device team_slave_1 added
[  160.975537][ T6324] batman_adv: batadv0: Adding interface: batadv_slave_0
[  160.975553][ T6324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  160.975575][ T6324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  160.977448][ T6324] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.191256][ T6439] loop4: detected capacity change from 0 to 2048
[  161.193997][ T6324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.273718][ T6324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.307699][ T6439] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  161.528563][ T6324] device hsr_slave_0 entered promiscuous mode
[  161.561622][ T6324] device hsr_slave_1 entered promiscuous mode
[  161.566134][ T4251] EXT4-fs (loop4): unmounting filesystem.
[  161.573594][ T6324] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  161.598975][ T6324] Cannot create hsr debugfs directory
[  161.783615][ T6460] loop6: detected capacity change from 0 to 128
[  161.790198][ T4822] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  161.853185][ T6461] loop4: detected capacity change from 0 to 2048
[  161.934486][ T6465] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  161.969947][   T26] audit: type=1800 audit(1748017996.105:7): pid=6461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.634" name="file2" dev="loop4" ino=16 res=0 errno=0
[  161.990978][ T4822] usb 6-1: Using ep0 maxpacket: 16
[  162.000626][ T4822] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  162.021487][ T4822] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  162.044782][ T4822] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  162.111643][ T4822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.137627][ T4822] usb 6-1: Product: syz
[  162.141851][ T4822] usb 6-1: Manufacturer: syz
[  162.184518][ T4822] usb 6-1: SerialNumber: syz
[  162.268032][ T6324] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  162.297604][ T6324] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  162.337091][ T6324] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  162.362793][ T6324] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  162.369400][ T6475] loop6: detected capacity change from 0 to 256
[  162.459900][ T6477] ptrace attach of "./syz-executor exec"[4251] was attempted by "\x09   
                   Àÿ      Àÿ      Ðÿ      àÿ              ðÿ      °ÿ      Àÿ                 ÿÿÿÿ                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        ÿÿÿÿ    â÷%-ì�‹5鎢Ÿ£D
|VTyÊÞ\x22ýÍšK«à­N�/)éõº/éÙH¯Mú&‚¡CsnVkת{Jv1±Á%­èÈ_)Þ$n»:…,þ\x5c¿]�n¯+]±2yrŒrîLË•ß-6·^%D³\x5c~Õzèw'Mc\x22o§â–�½‹ÄÙ«·`¿Ë¤=s N¾8|?Þ”Ò¡¿øÅBr›ô9šÎɳbõÝFøü…{iÄ$œ]ûë
[  162.534216][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.641'.
[  162.651907][ T4822] usb 6-1: cannot find UAC_HEADER
[  162.695573][ T4254] Bluetooth: hci0: command 0x040f tx timeout
[  162.713625][ T6324] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.788349][ T4822] snd-usb-audio: probe of 6-1:1.0 failed with error -22
[  162.805190][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  162.822347][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  162.827640][ T4822] usb 6-1: USB disconnect, device number 6
[  162.869606][ T6324] 8021q: adding VLAN 0 to HW filter on device team0
[  162.907193][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz.6.644'.
[  162.918222][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  162.946290][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  162.979436][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.986658][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.033204][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  163.060660][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  163.100964][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  163.120242][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.127450][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.190555][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  163.196730][ T6497] loop6: detected capacity change from 0 to 512
[  163.216429][ T6497] EXT4-fs: Ignoring removed oldalloc option
[  163.252800][ T6497] EXT4-fs error (device loop6): ext4_xattr_inode_iget:400: comm syz.6.647: Parent and EA inode have the same ino 15
[  163.282164][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  163.356025][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  163.404551][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  163.428620][ T6497] EXT4-fs error (device loop6): ext4_xattr_inode_iget:400: comm syz.6.647: Parent and EA inode have the same ino 15
[  163.461462][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  163.469648][ T6497] EXT4-fs (loop6): 1 orphan inode deleted
[  163.469684][ T6497] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  163.526109][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  163.563005][ T6490] loop3: detected capacity change from 0 to 32768
[  163.570916][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  163.591270][ T6490] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.645 (6490)
[  163.598921][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  163.624703][ T6503] EXT4-fs error (device loop6): ext4_lookup:1858: inode #15: comm syz.6.647: unexpected EA_INODE flag
[  163.642953][ T6490] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  163.668702][ T6490] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  163.684569][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  163.697818][ T6490] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  163.706002][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  163.729834][ T6490] BTRFS info (device loop3): trying to use backup root at mount time
[  163.753995][ T6490] BTRFS info (device loop3): setting nodatasum
[  163.754660][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  163.760540][ T6490] BTRFS info (device loop3): force zlib compression, level 3
[  163.779107][ T6490] BTRFS info (device loop3): doing ref verification
[  163.791890][ T6490] BTRFS info (device loop3): turning on flush-on-commit
[  163.806005][ T6490] BTRFS info (device loop3): allowing degraded mounts
[  163.815144][ T6324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  163.821270][ T6490] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  163.855541][ T6490] BTRFS info (device loop3): use lzo compression, level 0
[  163.883453][ T6490] BTRFS info (device loop3): enabling ssd optimizations
[  163.909997][ T6508] loop5: detected capacity change from 0 to 4096
[  163.917721][ T6490] BTRFS info (device loop3): using spread ssd allocation scheme
[  163.952694][ T6490] BTRFS info (device loop3): using free space tree
[  164.022137][ T6515] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  164.166193][ T6492] loop4: detected capacity change from 0 to 40427
[  164.195726][ T6492] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  164.202770][ T6492] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  164.289008][   T26] audit: type=1800 audit(1748017998.425:8): pid=6490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.645" name="file1" dev="loop3" ino=260 res=0 errno=0
[  164.332940][ T6492] F2FS-fs (loop4): invalid crc value
[  164.362494][ T6492] F2FS-fs (loop4): Found nat_bits in checkpoint
[  164.522912][ T6492] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  164.531102][ T6492] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  164.670917][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  164.703424][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  164.731067][ T6324] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.775333][ T4254] Bluetooth: hci0: command 0x0419 tx timeout
[  164.788763][ T4577] EXT4-fs (loop6): unmounting filesystem.
[  165.582332][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  165.603060][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  165.614484][ T4251] syz-executor: attempt to access beyond end of device
[  165.614484][ T4251] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  165.650510][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  165.672457][ T4259] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  165.686779][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  165.714716][ T6324] device veth0_vlan entered promiscuous mode
[  165.748449][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  165.764622][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  165.812562][ T6324] device veth1_vlan entered promiscuous mode
[  165.965541][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  165.977360][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  166.026172][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  166.056447][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  166.104862][ T6324] device veth0_macvtap entered promiscuous mode
[  166.142069][ T6324] device veth1_macvtap entered promiscuous mode
[  166.236211][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.247424][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.257442][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.268113][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.278535][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.302201][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.320550][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.345105][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.366935][ T6324] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.397475][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.408169][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.418345][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.429062][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.448818][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.477377][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.504703][ T6324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.527168][ T6324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.561348][ T6324] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.581596][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  166.599186][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  166.609362][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  166.619978][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  166.631866][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  166.641213][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  166.662084][ T6324] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.675620][ T6324] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.695894][ T6324] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.715048][ T6324] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.886921][ T4307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.925747][ T4307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.975565][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  166.987540][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.027599][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.072335][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  167.178033][ T4254] Bluetooth: hci0: command 0x0405 tx timeout
[  167.243109][ T6609] loop5: detected capacity change from 0 to 512
[  167.317724][ T6609] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  167.559907][ T6609] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.666: bg 0: block 64: padding at end of block bitmap is not set
[  167.643637][ T6609] Quota error (device loop5): write_blk: dquota write failed
[  167.657274][ T6609] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  167.680003][ T6609] EXT4-fs error (device loop5): ext4_acquire_dquot:6802: comm syz.5.666: Failed to acquire dquot type 0
[  167.713142][ T6609] EXT4-fs (loop5): 1 truncate cleaned up
[  167.727043][ T6609] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  168.014113][ T6607] loop3: detected capacity change from 0 to 32768
[  168.095903][ T6607] XFS (loop3): Mounting V5 Filesystem
[  168.124130][ T6633] loop4: detected capacity change from 0 to 1024
[  168.199260][ T6607] XFS (loop3): Ending clean mount
[  168.223783][ T6607] XFS (loop3): Quotacheck needed: Please wait.
[  168.229838][ T6633] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  168.345800][ T6607] XFS (loop3): Quotacheck: Done.
[  168.368948][ T4419] EXT4-fs (loop5): unmounting filesystem.
[  168.501237][ T6641] loop5: detected capacity change from 0 to 64
[  168.575289][ T4259] XFS (loop3): Unmounting Filesystem
[  168.734622][ T4251] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  168.839855][ T4251] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  168.906338][ T4251] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  169.023035][ T4251] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  169.076109][ T4251] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  169.138458][ T4251] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  169.180722][ T4251] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  169.205665][ T4251] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  169.261768][ T4251] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  169.276485][ T4300] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  169.328879][ T4251] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size
[  169.399291][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.681'.
[  169.477286][ T4300] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  169.505229][ T4300] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  169.538049][ T4300] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 72
[  169.574968][ T4300] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  169.598509][ T6668] loop8: detected capacity change from 0 to 4096
[  169.605583][ T4300] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.625498][ T4300] usb 7-1: Product: syz
[  169.629708][ T4300] usb 7-1: Manufacturer: syz
[  169.640119][ T4300] usb 7-1: SerialNumber: syz
[  169.675414][ T6657] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  169.891947][ T4300] usblp 7-1:1.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8
[  169.969509][ T6677] loop3: detected capacity change from 0 to 4096
[  170.022791][ T6677] ntfs: volume version 3.1.
[  170.119783][ T6575] usb 7-1: USB disconnect, device number 6
[  170.151412][ T6575] usblp0: removed
[  170.449373][ T6687] loop8: detected capacity change from 0 to 4096
[  170.485262][ T6687] ntfs3: loop8: Different NTFS' sector size (1024) and media sector size (512)
[  170.588103][ T1075] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.688699][ T6683] loop5: detected capacity change from 0 to 32768
[  170.791657][ T6605] EXT4-fs (loop4): unmounting filesystem.
[  170.805599][ T6683] XFS (loop5): Mounting V5 Filesystem
[  170.926756][ T1075] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.991447][ T6683] XFS (loop5): Ending clean mount
[  171.016400][ T6706] loop3: detected capacity change from 0 to 256
[  171.038842][ T6683] XFS (loop5): Quotacheck needed: Please wait.
[  171.175333][ T1075] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.231729][ T6683] XFS (loop5): Quotacheck: Done.
[  171.338855][ T1075] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.370528][ T4419] XFS (loop5): Unmounting Filesystem
[  171.955220][ T6723] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4)
[  171.962485][ T6723] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  172.045187][ T6723] vhci_hcd vhci_hcd.0: Device attached
[  172.295705][ T4822] usb 45-1: new low-speed USB device number 2 using vhci_hcd
[  172.305152][ T6065] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  172.327672][ T4265] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  172.355488][ T4265] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  172.364357][ T4265] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  172.372668][ T4265] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  172.384560][ T4265] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  172.393211][ T4265] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  172.505509][ T6065] usb 7-1: config 0 has no interfaces?
[  172.511065][ T6065] usb 7-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5
[  172.522152][ T6065] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.536463][ T6065] usb 7-1: config 0 descriptor??
[  172.666429][ T6748] loop8: detected capacity change from 0 to 1024
[  172.705317][ T4297] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  172.762622][ T6748] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  172.774455][ T6727] vhci_hcd: connection closed
[  172.777223][ T4331] usb 7-1: USB disconnect, device number 7
[  172.780628][ T6754] loop5: detected capacity change from 0 to 256
[  172.797278][   T37] vhci_hcd: stop threads
[  172.809075][   T26] audit: type=1800 audit(1748018006.945:9): pid=6754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.707" name="file1" dev="loop5" ino=1048638 res=0 errno=0
[  172.833797][   T37] vhci_hcd: release socket
[  172.837604][ T6748] EXT4-fs (loop8): shut down requested (2)
[  172.865247][   T37] vhci_hcd: disconnect device
[  172.900554][ T4297] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  172.920727][ T4297] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  172.931215][ T4822] usb 45-1: device descriptor read/64, error -71
[  172.932306][ T6324] EXT4-fs (loop8): unmounting filesystem.
[  172.990581][ T4297] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 72
[  173.029718][ T4297] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  173.038979][ T4297] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.048550][ T4297] usb 4-1: Product: syz
[  173.052829][ T4297] usb 4-1: Manufacturer: syz
[  173.057728][ T4297] usb 4-1: SerialNumber: syz
[  173.065112][ T6743] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  173.185393][ T4822] vhci_hcd: vhci_device speed not set
[  173.296210][ T4297] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8
[  173.313602][ T6767] netlink: 60 bytes leftover after parsing attributes in process `syz.8.710'.
[  173.333397][ T6767] netlink: 60 bytes leftover after parsing attributes in process `syz.8.710'.
[  173.351816][ T6765] netlink: 60 bytes leftover after parsing attributes in process `syz.8.710'.
[  173.374606][ T6737] chnl_net:caif_netlink_parms(): no params data found
[  173.394956][ T6768] netlink: 60 bytes leftover after parsing attributes in process `syz.8.710'.
[  173.530499][ T6576] usb 4-1: USB disconnect, device number 7
[  173.564502][ T6576] usblp0: removed
[  173.643929][ T6779] loop8: detected capacity change from 0 to 128
[  173.737183][ T6737] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.744351][ T6737] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.790174][ T6737] device bridge_slave_0 entered promiscuous mode
[  173.810732][ T1075] device hsr_slave_0 left promiscuous mode
[  173.825653][ T1075] device hsr_slave_1 left promiscuous mode
[  173.842536][ T1075] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.852087][ T1075] batman_adv: batadv0: Removing interface: batadv_slave_0
[  173.872073][ T1075] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.886447][ T1075] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.904675][ T1075] device bridge_slave_1 left promiscuous mode
[  173.917911][ T1075] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.939967][ T1075] device bridge_slave_0 left promiscuous mode
[  173.956957][ T1075] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.061388][ T1075] device veth1_macvtap left promiscuous mode
[  174.092598][ T1075] device veth0_macvtap left promiscuous mode
[  174.105678][ T1075] device veth1_vlan left promiscuous mode
[  174.132479][ T1075] device veth0_vlan left promiscuous mode
[  174.250537][ T6791] loop3: detected capacity change from 0 to 512
[  174.290194][ T6791] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  174.324624][ T6791] EXT4-fs (loop3): orphan cleanup on readonly fs
[  174.407906][ T6791] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.721: inode #255: comm syz.3.721: iget: illegal inode #
[  174.458543][ T4265] Bluetooth: hci1: command 0x0409 tx timeout
[  174.483454][ T6791] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.721: error while reading EA inode 255 err=-117
[  174.555564][ T6791] EXT4-fs (loop3): 1 orphan inode deleted
[  174.561385][ T6791] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  174.651273][ T6781] loop6: detected capacity change from 0 to 40427
[  174.681687][ T6781] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504)
[  174.691885][ T6781] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  174.725316][ T6781] F2FS-fs (loop6): invalid crc value
[  174.741027][ T6791] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz.3.721: path (unknown): bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[  174.803327][ T6781] F2FS-fs (loop6): Found nat_bits in checkpoint
[  174.846587][ T4259] EXT4-fs (loop3): unmounting filesystem.
[  174.970046][ T6781] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  174.986009][ T6781] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  175.210108][ T6807] mmap: syz.3.726 (6807) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  175.230496][ T4577] syz-executor: attempt to access beyond end of device
[  175.230496][ T4577] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  175.262066][ T6800] loop8: detected capacity change from 0 to 32768
[  175.281641][ T6800] XFS: ikeep mount option is deprecated.
[  175.372550][ T6800] XFS (loop8): Mounting V5 Filesystem
[  175.438563][ T6800] XFS (loop8): Ending clean mount
[  175.456268][ T6800] XFS (loop8): Quotacheck needed: Please wait.
[  175.526444][ T6800] XFS (loop8): Quotacheck: Done.
[  175.615136][ T4331] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  175.704953][ T1075] team0 (unregistering): Port device team_slave_1 removed
[  175.716997][ T6324] XFS (loop8): Unmounting Filesystem
[  175.853928][ T4331] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  175.875076][ T4331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.883176][ T4331] usb 4-1: Product: syz
[  175.885973][ T1075] team0 (unregistering): Port device team_slave_0 removed
[  175.887563][ T4331] usb 4-1: Manufacturer: syz
[  175.899569][ T4331] usb 4-1: SerialNumber: syz
[  175.906127][ T4331] usb 4-1: config 0 descriptor??
[  175.914821][ T4331] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 008
[  176.000773][ T1075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.101172][ T1075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.320881][ T4331]  (null): failure reading functionality
[  176.346817][ T4331] i2c i2c-1: connected i2c-tiny-usb device
[  176.535357][ T4265] Bluetooth: hci1: command 0x041b tx timeout
[  176.563276][ T4822] usb 4-1: USB disconnect, device number 8
[  176.569530][ T4297] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  176.808936][ T4297] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  176.825064][ T4297] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  176.845130][ T4297] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 72
[  176.885145][ T4297] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  176.904709][ T4297] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.923875][ T4297] usb 9-1: Product: syz
[  176.928446][ T4297] usb 9-1: Manufacturer: syz
[  176.933619][ T4297] usb 9-1: SerialNumber: syz
[  176.951461][ T6828] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  177.165936][ T1075] bond0 (unregistering): Released all slaves
[  177.187311][ T4297] usblp 9-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8
[  177.340194][ T6737] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.356692][ T6737] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.375623][ T6737] device bridge_slave_1 entered promiscuous mode
[  177.418892][ T6065] usb 9-1: USB disconnect, device number 2
[  177.427413][ T6065] usblp0: removed
[  177.516180][ T6737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.546954][ T6737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.654556][   T26] audit: type=1326 audit(1748018011.795:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6842 comm="syz.5.738" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f579c58e969 code=0x0
[  177.660628][ T6737] team0: Port device team_slave_0 added
[  177.704830][ T6737] team0: Port device team_slave_1 added
[  177.752760][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.764260][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.807316][ T6737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.846385][ T6737] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.853557][ T6737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.887384][ T6737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  178.002568][ T6737] device hsr_slave_0 entered promiscuous mode
[  178.024445][ T6737] device hsr_slave_1 entered promiscuous mode
[  178.041472][ T6737] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  178.053532][ T6737] Cannot create hsr debugfs directory
[  178.174333][ T6837] loop3: detected capacity change from 0 to 32768
[  178.219609][ T6837] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.735 (6837)
[  178.261012][ T6837] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  178.295302][ T6837] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  178.314877][ T6837] BTRFS info (device loop3): doing ref verification
[  178.347765][ T6837] BTRFS info (device loop3): use zlib compression, level 3
[  178.355258][ T6837] BTRFS info (device loop3): using free space tree
[  178.491509][ T6737] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  178.503398][ T6737] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  178.515520][ T6737] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  178.579066][ T6737] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  178.615136][ T4265] Bluetooth: hci1: command 0x040f tx timeout
[  178.644929][ T6837] BTRFS info (device loop3): enabling ssd optimizations
[  178.944202][ T4259] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  178.960571][ T6737] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.035350][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  179.044153][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  179.115970][ T6737] 8021q: adding VLAN 0 to HW filter on device team0
[  179.154622][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  179.179717][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  179.198893][ T4348] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.206093][ T4348] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.262987][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  179.272026][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  179.305722][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  179.326246][ T4348] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.333427][ T4348] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.421053][ T6897] loop6: detected capacity change from 0 to 64
[  179.430484][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  179.450942][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  179.507961][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  179.537600][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  179.553972][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  179.586999][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  179.591028][ T6897] overlayfs: upper fs needs to support d_type.
[  179.659321][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  179.677526][ T6897] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  179.686418][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  179.696174][ T6897] overlayfs: failed to set xattr on upper
[  179.702010][ T6897] overlayfs: ...falling back to index=off,metacopy=off.
[  179.706144][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  179.737031][ T6897] overlayfs: conflicting lowerdir path
[  179.749875][ T6737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  179.791074][ T6737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  179.817581][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  179.826972][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  180.401980][ T6920] loop8: detected capacity change from 0 to 2048
[  180.463274][ T6920] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[  180.533158][ T6926] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  180.686131][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  180.695860][ T4265] Bluetooth: hci1: command 0x0419 tx timeout
[  180.703143][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  180.742594][ T6737] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.842990][ T6932] loop5: detected capacity change from 0 to 1024
[  180.889284][ T6932] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  180.925391][ T6932] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  180.955505][ T6932] EXT4-fs error (device loop5): ext4_get_journal_inode:5723: comm syz.5.765: inode #63: comm syz.5.765: iget: illegal inode #
[  181.000518][ T6932] EXT4-fs (loop5): no journal found
[  181.025127][ T6932] EXT4-fs (loop5): can't get journal size
[  181.042347][ T6932] EXT4-fs (loop5): failed to initialize system zone (-22)
[  181.072264][ T6932] EXT4-fs (loop5): mount failed
[  181.390323][ T6925] loop6: detected capacity change from 0 to 32768
[  181.487075][ T6925] XFS (loop6): Mounting V5 Filesystem
[  181.614075][ T6925] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  181.685628][ T6925] XFS (loop6): Starting recovery (logdev: internal)
[  181.746874][ T6925] XFS (loop6): Ending recovery (logdev: internal)
[  181.819044][ T6940] loop8: detected capacity change from 0 to 32768
[  181.910652][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  181.933477][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  181.975480][ T6940] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  181.997271][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  182.050034][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  182.097147][ T6737] device veth0_vlan entered promiscuous mode
[  182.114483][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  182.123219][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  182.160696][ T6737] device veth1_vlan entered promiscuous mode
[  182.167323][ T4577] XFS (loop6): Unmounting Filesystem
[  182.260294][ T6324] ocfs2: Unmounting device (7,8) on (node local)
[  182.322281][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  182.393723][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  182.436728][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  182.465776][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  182.479807][ T6737] device veth0_macvtap entered promiscuous mode
[  182.507384][ T6737] device veth1_macvtap entered promiscuous mode
[  182.566344][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  182.605068][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.635564][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  182.672591][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.703028][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  182.734067][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.739033][ T6958] loop3: detected capacity change from 0 to 32768
[  182.764598][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  182.786355][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.819152][ T6737] batman_adv: batadv0: Interface activated: batadv_slave_0
[  182.846998][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  182.865705][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  182.896022][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  182.908284][ T6966] netlink: 12 bytes leftover after parsing attributes in process `syz.6.771'.
[  182.919718][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  182.951429][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.976499][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.995242][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.023062][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.045129][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.065039][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.075253][ T6737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  183.085778][ T6737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.101420][ T6737] batman_adv: batadv0: Interface activated: batadv_slave_1
[  183.112900][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  183.122684][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  183.156517][ T6737] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.175460][ T6737] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.184244][ T6737] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.235135][ T6737] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.510171][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.545229][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.595885][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  183.630860][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.675178][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.720818][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  184.622830][ T7002] loop3: detected capacity change from 0 to 8192
[  184.674892][ T7002] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  184.688262][ T7002] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  184.709187][ T7002] REISERFS (device loop3): using ordered data mode
[  184.731526][ T7002] reiserfs: using flush barriers
[  184.790209][ T7002] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  184.835619][ T7002] REISERFS (device loop3): checking transaction log (loop3)
[  185.002055][ T7002] REISERFS (device loop3): Using tea hash to sort names
[  185.016175][ T7002] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  185.061338][ T7002] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  185.093911][ T6943] syz.5.768 (6943): drop_caches: 3
[  185.299508][ T7025] netlink: 16 bytes leftover after parsing attributes in process `syz.8.794'.
[  185.371300][ T7029] syz.5.797 uses obsolete (PF_INET,SOCK_PACKET)
[  186.096752][ T7053] loop8: detected capacity change from 0 to 2048
[  186.193447][ T7053] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  186.661787][ T7047] loop6: detected capacity change from 0 to 40427
[  186.694871][ T7047] F2FS-fs (loop6): invalid crc value
[  186.732542][ T7051] loop3: detected capacity change from 0 to 32768
[  186.745370][ T6576] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  186.754329][ T7051] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.803 (7051)
[  186.767437][ T7047] F2FS-fs (loop6): Found nat_bits in checkpoint
[  186.807434][ T7051] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  186.832580][ T7051] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  186.856113][ T7051] BTRFS info (device loop3): turning on async discard
[  186.873238][ T7051] BTRFS info (device loop3): using free space tree
[  186.900341][ T7047] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  186.961622][ T6576] usb 6-1: Using ep0 maxpacket: 16
[  186.969212][ T6576] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  186.992191][ T6576] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  187.002847][ T6576] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  187.017941][ T6576] usb 6-1: SerialNumber: syz
[  187.054123][ T4577] syz-executor: attempt to access beyond end of device
[  187.054123][ T4577] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  187.157179][ T7051] BTRFS info (device loop3): enabling ssd optimizations
[  187.661123][ T6576] cdc_ether: probe of 6-1:1.0 failed with error -22
[  187.679692][ T4259] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  188.085468][   T14] usb 6-1: USB disconnect, device number 7
[  188.131474][ T7107] loop6: detected capacity change from 0 to 512
[  188.184126][ T7107] EXT4-fs: Ignoring removed oldalloc option
[  188.209747][ T7107] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  188.273255][ T7107] EXT4-fs (loop6): 1 truncate cleaned up
[  188.279127][ T7107] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  188.324898][ T7107] tipc: Started in network mode
[  188.352002][ T7107] tipc: Node identity 402c64656275675f08, cluster identity 4711
[  188.484336][ T4577] EXT4-fs (loop6): unmounting filesystem.
[  188.674653][ T7118] loop8: detected capacity change from 0 to 736
[  188.888466][ T7125] loop9: detected capacity change from 0 to 1024
[  188.930327][ T7125] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  188.949063][ T7128] user requested TSC rate below hardware speed
[  188.974275][ T7129] loop6: detected capacity change from 0 to 512
[  188.988458][ T7125] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  188.998657][ T7125] EXT4-fs error (device loop9): ext4_get_journal_inode:5723: comm syz.9.827: inode #63: comm syz.9.827: iget: illegal inode #
[  189.012709][ T7125] EXT4-fs (loop9): no journal found
[  189.033352][ T7125] EXT4-fs (loop9): can't get journal size
[  189.061806][ T7129] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  189.083736][ T7125] EXT4-fs (loop9): failed to initialize system zone (-22)
[  189.092246][ T7129] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  189.112567][ T7129] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  189.115145][ T7125] EXT4-fs (loop9): mount failed
[  189.133986][ T7129] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  189.161085][ T7129] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0080]
[  189.202708][ T7129] EXT4-fs (loop6): orphan cleanup on readonly fs
[  189.232427][ T7129] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.828: bg 0: block 34: padding at end of block bitmap is not set
[  189.253476][ T7129] Quota error (device loop6): write_blk: dquota write failed
[  189.270901][ T7129] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  189.285161][ T7129] EXT4-fs error (device loop6): ext4_acquire_dquot:6802: comm syz.6.828: Failed to acquire dquot type 1
[  189.329876][ T7129] EXT4-fs (loop6): 1 truncate cleaned up
[  189.357294][ T7129] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  189.384184][ T7129] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  189.403290][ T7129] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0080]
[  189.449265][ T7141] loop9: detected capacity change from 0 to 256
[  189.480889][ T7141] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  189.526696][ T4577] EXT4-fs (loop6): unmounting filesystem.
[  190.323334][ T7166] loop6: detected capacity change from 0 to 2048
[  190.366001][ T7170] loop3: detected capacity change from 0 to 128
[  190.389928][ T7166] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  190.402902][ T7169] user requested TSC rate below hardware speed
[  190.426718][ T7166] NILFS (loop6): mounting unchecked fs
[  190.454562][ T7166] NILFS (loop6): recovery required for readonly filesystem
[  190.462267][ T7166] NILFS (loop6): write access will be enabled during recovery
[  190.500134][ T7166] NILFS (loop6): norecovery option specified, skipping roll-forward recovery
[  191.320687][ T7173] loop9: detected capacity change from 0 to 40427
[  191.376400][ T7173] F2FS-fs (loop9): invalid crc value
[  191.434421][ T7173] F2FS-fs (loop9): Found nat_bits in checkpoint
[  191.635806][ T7173] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  191.662986][ T7178] loop8: detected capacity change from 0 to 32768
[  191.674062][ T7178] 
[  191.674062][ T7178]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  191.674062][ T7178] 
[  191.682736][ T7182] loop6: detected capacity change from 0 to 32768
[  191.720722][ T7178] 
[  191.720722][ T7178]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  191.720722][ T7178] 
[  191.747948][ T7182] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  191.749274][ T7178] 
[  191.749274][ T7178]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  191.749274][ T7178] 
[  191.795613][ T7178] 
[  191.795613][ T7178]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  191.795613][ T7178] 
[  191.806430][ T7178] 
[  191.806430][ T7178]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  191.806430][ T7178] 
[  191.820216][ T7182] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  191.832143][ T7196] 
[  191.832143][ T7196]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  191.832143][ T7196] 
[  191.836890][   T26] audit: type=1800 audit(1748018025.965:11): pid=7178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.848" name="bus" dev="loop8" ino=7 res=0 errno=0
[  191.852248][  T108] 
[  191.852248][  T108]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  191.852248][  T108] 
[  191.879307][ T7196] 
[  191.879307][ T7196]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  191.879307][ T7196] 
[  191.910186][ T6737] syz-executor: attempt to access beyond end of device
[  191.910186][ T6737] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  191.969595][ T7178] 
[  191.969595][ T7178]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  191.969595][ T7178] 
[  192.019571][ T7178] 
[  192.019571][ T7178]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  192.019571][ T7178] 
[  192.047248][ T7178] 
[  192.047248][ T7178]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  192.047248][ T7178] 
[  192.089646][ T7178] 
[  192.089646][ T7178]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  192.089646][ T7178] 
[  192.096123][ T4577] ocfs2: Unmounting device (7,6) on (node local)
[  192.126769][ T7178] 
[  192.126769][ T7178]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  192.126769][ T7178] 
[  192.166092][  T108] 
[  192.166092][  T108]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  192.166092][  T108] 
[  192.253074][ T6324] 
[  192.253074][ T6324]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  192.253074][ T6324] 
[  192.279302][ T6324] 
[  192.279302][ T6324]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  192.279302][ T6324] 
[  192.395071][ T4694] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  192.601626][ T4694] usb 6-1: Using ep0 maxpacket: 32
[  192.615894][ T4694] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  192.626372][ T7213] loop8: detected capacity change from 0 to 512
[  192.649613][ T7213] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  192.654140][ T4694] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  192.677027][ T7216] loop3: detected capacity change from 0 to 512
[  192.678773][ T4694] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  192.694977][ T4694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.702962][ T7216] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  192.721611][ T7213] EXT4-fs (loop8): 1 truncate cleaned up
[  192.729184][ T4694] usb 6-1: config 0 descriptor??
[  192.735091][ T7213] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  192.767643][ T7216] EXT4-fs (loop3): 1 truncate cleaned up
[  192.773523][ T7216] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  192.805755][ T7216] EXT4-fs error (device loop3): mb_free_blocks:1815: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt.
[  192.853303][ T6324] EXT4-fs (loop8): unmounting filesystem.
[  192.887646][ T4259] EXT4-fs (loop3): unmounting filesystem.
[  192.971304][ T4694] usb 6-1: USB disconnect, device number 8
[  193.262910][ T7223] loop8: detected capacity change from 0 to 32768
[  193.271393][ T7223] XFS: ikeep mount option is deprecated.
[  193.293359][ T7223] XFS (loop8): Mounting V5 Filesystem
[  193.342268][ T7223] XFS (loop8): Ending clean mount
[  193.349980][ T7223] XFS (loop8): Quotacheck needed: Please wait.
[  193.422084][ T7223] XFS (loop8): Quotacheck: Done.
[  193.590147][ T7246] netlink: 'syz.5.870': attribute type 2 has an invalid length.
[  193.608122][ T7246] netlink: 10 bytes leftover after parsing attributes in process `syz.5.870'.
[  193.680435][ T6324] XFS (loop8): Unmounting Filesystem
[  194.045188][  T127] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  194.137940][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  194.146981][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  194.236832][  T127] usb 10-1: config 7 has an invalid interface number: 101 but max is 0
[  194.265087][  T127] usb 10-1: config 7 has no interface number 0
[  194.276695][  T127] usb 10-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b
[  194.300878][  T127] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.325112][  T127] usb 10-1: Product: syz
[  194.329428][  T127] usb 10-1: Manufacturer: syz
[  194.334152][  T127] usb 10-1: SerialNumber: syz
[  194.372505][ T7248] loop3: detected capacity change from 0 to 32768
[  194.404287][ T7248] 
[  194.404287][ T7248]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  194.404287][ T7248] 
[  194.428087][ T7248] 
[  194.428087][ T7248]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  194.428087][ T7248] 
[  194.446880][ T7248] 
[  194.446880][ T7248]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  194.446880][ T7248] 
[  194.465236][ T7248] 
[  194.465236][ T7248]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  194.465236][ T7248] 
[  194.485369][ T7248] 
[  194.485369][ T7248]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  194.485369][ T7248] 
[  194.515794][   T26] audit: type=1800 audit(1748018028.655:12): pid=7248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.872" name="bus" dev="loop3" ino=7 res=0 errno=0
[  194.522190][ T7264] 
[  194.522190][ T7264]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  194.522190][ T7264] 
[  194.559630][  T107] 
[  194.559630][  T107]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  194.559630][  T107] 
[  194.585137][ T7264] 
[  194.585137][ T7264]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  194.585137][ T7264] 
[  194.620074][ T7261] loop8: detected capacity change from 0 to 32768
[  194.631201][ T7248] 
[  194.631201][ T7248]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  194.631201][ T7248] 
[  194.642014][ T7248] 
[  194.642014][ T7248]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  194.642014][ T7248] 
[  194.653144][ T7248] 
[  194.653144][ T7248]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  194.653144][ T7248] 
[  194.664614][ T7248] 
[  194.664614][ T7248]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  194.664614][ T7248] 
[  194.677440][ T7248] 
[  194.677440][ T7248]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  194.677440][ T7248] 
[  194.677440][ T7261] ialloc: diAlloc returned -28!
[  194.701566][  T108] 
[  194.701566][  T108]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  194.701566][  T108] 
[  194.790155][ T4259] 
[  194.790155][ T4259]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  194.790155][ T4259] 
[  194.803843][ T4259] 
[  194.803843][ T4259]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  194.803843][ T4259] 
[  194.841920][ T7266] loop6: detected capacity change from 0 to 1024
[  194.876622][ T7268] netlink: 228 bytes leftover after parsing attributes in process `syz.5.880'.
[  194.991980][ T7266] hfsplus: xattr search failed
[  195.131779][  T127] as10x_usb: device has been detected
[  195.144107][  T127] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe)
[  195.176735][  T127] usb 10-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)...
[  195.420304][  T127] as10x_usb: error during firmware upload part1
[  195.435780][  T127] Registered device Elgato EyeTV DTT Deluxe
[  195.447990][  T127] usb 10-1: USB disconnect, device number 2
[  195.479818][  T127] Unregistered device Elgato EyeTV DTT Deluxe
[  195.484695][  T127] as10x_usb: device has been disconnected
[  196.082568][ T7301] loop8: detected capacity change from 0 to 16
[  196.215261][ T4265] Bluetooth: hci3: command 0x0406 tx timeout
[  196.541310][ T7304] loop9: detected capacity change from 0 to 32768
[  196.568304][ T7304] 
[  196.568304][ T7304]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.568304][ T7304] 
[  196.605700][ T7304] 
[  196.605700][ T7304]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.605700][ T7304] 
[  196.607021][   T14] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  196.625371][ T7304] 
[  196.625371][ T7304]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.625371][ T7304] 
[  196.654794][ T7304] 
[  196.654794][ T7304]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.654794][ T7304] 
[  196.680699][ T7304] 
[  196.680699][ T7304]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.680699][ T7304] 
[  196.691999][   T26] audit: type=1800 audit(1748018030.825:13): pid=7304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.893" name="bus" dev="loop9" ino=7 res=0 errno=0
[  196.740165][ T7316] 
[  196.740165][ T7316]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.740165][ T7316] 
[  196.773957][ T7319] Bluetooth: MGMT ver 1.22
[  196.778740][  T107] 
[  196.778740][  T107]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.778740][  T107] 
[  196.795885][ T7316] 
[  196.795885][ T7316]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.795885][ T7316] 
[  196.814124][ T7311] loop8: detected capacity change from 0 to 32768
[  196.836781][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.858913][ T7304] 
[  196.858913][ T7304]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.858913][ T7304] 
[  196.858994][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.880364][   T14] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  196.891579][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.892043][ T7304] 
[  196.892043][ T7304]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.892043][ T7304] 
[  196.914143][   T14] usb 4-1: config 0 descriptor??
[  196.925687][ T7304] 
[  196.925687][ T7304]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.925687][ T7304] 
[  196.938813][ T7311] XFS (loop8): Mounting V5 Filesystem
[  196.951748][ T7304] 
[  196.951748][ T7304]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.951748][ T7304] 
[  196.991563][ T7304] 
[  196.991563][ T7304]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  196.991563][ T7304] 
[  197.023023][ T7311] XFS (loop8): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  197.045462][  T107] 
[  197.045462][  T107]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  197.045462][  T107] 
[  197.152828][ T7311] XFS (loop8): Starting recovery (logdev: internal)
[  197.162611][ T6737] 
[  197.162611][ T6737]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  197.162611][ T6737] 
[  197.215448][ T7311] XFS (loop8): Ending recovery (logdev: internal)
[  197.251426][ T6737] 
[  197.251426][ T6737]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  197.251426][ T6737] 
[  197.349952][   T14] hid-steam 0003:28DE:1142.0007: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0
[  197.432263][   T14] hid-steam 0003:28DE:1142.0008: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0
[  197.487185][ T6324] XFS (loop8): Unmounting Filesystem
[  197.545189][   T14] hid-steam 0003:28DE:1142.0007: Steam wireless receiver connected
[  197.566321][   T14] usb 4-1: USB disconnect, device number 9
[  197.608229][   T14] hid-steam 0003:28DE:1142.0007: Steam wireless receiver disconnected
[  197.822348][ T7340] loop9: detected capacity change from 0 to 764
[  197.844621][ T7340] rock: directory entry would overflow storage
[  197.861507][ T7340] rock: sig=0x4654, size=5, remaining=4
[  198.163327][ T7350] Debayer A: =================  START STATUS  =================
[  198.213170][ T7350] Debayer A: Debayer Mean Window Size: 3
[  198.220918][ T4254] Bluetooth: hci3: unexpected event for opcode 0x2041
[  198.258773][ T7350] Debayer A: ==================  END STATUS  ==================
[  198.519177][ T7344] loop8: detected capacity change from 0 to 32768
[  198.563163][ T7344] find_entry called with index >= next_index
[  198.571878][ T7344] find_entry called with index >= next_index
[  198.584706][ T7344] find_entry called with index >= next_index
[  198.590934][ T7344] find_entry called with index >= next_index
[  198.604560][ T7344] find_entry called with index >= next_index
[  198.610690][ T7344] add_index: next_index = 0.  Resetting!
[  198.633213][ T7344] find_entry called with index >= next_index
[  198.646726][ T7344] find_entry called with index >= next_index
[  198.653000][ T7344] find_entry called with index >= next_index
[  198.663633][ T7344] find_entry called with index >= next_index
[  198.675122][  T127] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  198.688096][ T7344] non-latin1 character 0x3ff found in JFS file name
[  198.694944][ T7344] mount with iocharset=utf8 to access
[  198.867649][  T127] usb 4-1: config 0 has an invalid interface number: 205 but max is 0
[  198.886871][  T127] usb 4-1: config 0 has no interface number 0
[  198.910318][  T127] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=cd.e9
[  198.929758][  T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.952077][  T127] usb 4-1: Product: syz
[  198.969330][  T127] usb 4-1: Manufacturer: syz
[  198.984228][  T127] usb 4-1: SerialNumber: syz
[  199.008972][  T127] usb 4-1: config 0 descriptor??
[  199.013146][ T7362] loop9: detected capacity change from 0 to 32768
[  199.026327][  T127] usb_ehset_test: probe of 4-1:0.205 failed with error -32
[  199.049462][ T7362] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.917 (7362)
[  199.070999][ T7361] loop5: detected capacity change from 0 to 32768
[  199.084015][ T7362] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  199.094757][ T7362] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm
[  199.103974][ T7362] BTRFS info (device loop9): turning on async discard
[  199.111906][ T7362] BTRFS info (device loop9): using free space tree
[  199.121427][ T7361] 
[  199.121427][ T7361]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.121427][ T7361] 
[  199.141896][ T7361] 
[  199.141896][ T7361]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.141896][ T7361] 
[  199.153025][ T7361] 
[  199.153025][ T7361]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.153025][ T7361] 
[  199.171108][ T7361] 
[  199.171108][ T7361]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.171108][ T7361] 
[  199.183969][ T7361] 
[  199.183969][ T7361]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.183969][ T7361] 
[  199.197056][ T7373] 
[  199.197056][ T7373]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.197056][ T7373] 
[  199.201069][   T26] audit: type=1800 audit(1748018033.335:14): pid=7361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.915" name="bus" dev="loop5" ino=7 res=0 errno=0
[  199.210460][ T7373] 
[  199.210460][ T7373]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.210460][ T7373] 
[  199.239158][  T108] 
[  199.239158][  T108]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.239158][  T108] 
[  199.288443][ T7361] 
[  199.288443][ T7361]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.288443][ T7361] 
[  199.304112][ T7361] 
[  199.304112][ T7361]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.304112][ T7361] 
[  199.308052][  T127] usb 4-1: USB disconnect, device number 10
[  199.314921][ T7361] 
[  199.314921][ T7361]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.314921][ T7361] 
[  199.321301][ T7362] BTRFS info (device loop9): enabling ssd optimizations
[  199.339150][ T7361] 
[  199.339150][ T7361]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.339150][ T7361] 
[  199.355243][ T7361] 
[  199.355243][ T7361]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.355243][ T7361] 
[  199.375784][  T108] 
[  199.375784][  T108]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.375784][  T108] 
[  199.442345][ T7388] loop8: detected capacity change from 0 to 1024
[  199.465357][ T4419] 
[  199.465357][ T4419]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.465357][ T4419] 
[  199.477489][ T4419] 
[  199.477489][ T4419]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.477489][ T4419] 
[  199.493526][ T7388] hfsplus: bad catalog entry type
[  199.561922][   T37] hfsplus: b-tree write err: -5, ino 4
[  199.569145][ T6737] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  200.772395][ T7400] loop3: detected capacity change from 0 to 32768
[  200.889940][ T7400] read_mapping_page failed!
[  200.912018][ T7400] ERROR: (device loop3): txCommit: 
[  200.912018][ T7400] 
[  200.936318][ T7400] ERROR: (device loop3): remounting filesystem as read-only
[  200.948072][ T7422] device veth1_macvtap left promiscuous mode
[  201.012357][ T7424] loop5: detected capacity change from 0 to 1024
[  201.067660][  T107] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0)
[  201.076127][ T7424] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  201.102343][  T107] ------------[ cut here ]------------
[  201.108304][  T107] kernel BUG at fs/jfs/jfs_txnmgr.c:931!
[  201.157395][  T107] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  201.163641][  T107] CPU: 0 PID: 107 Comm: jfsCommit Not tainted 6.1.140-syzkaller #0
[  201.171560][  T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  201.181793][  T107] RIP: 0010:txUnlock+0xc87/0xcb0
[  201.186785][  T107] Code: 7f d3 14 07 0f 0b e8 e8 84 91 fe 48 c7 c7 80 59 a6 8a 48 c7 c6 79 55 a6 8a ba a3 03 00 00 48 c7 c1 60 66 a6 8a e8 59 d3 14 07 <0f> 0b e8 c2 84 91 fe 48 c7 c7 80 59 a6 8a 48 c7 c6 79 55 a6 8a ba
[  201.206428][  T107] RSP: 0018:ffffc90002d47d28 EFLAGS: 00010246
[  201.212524][  T107] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 0037e7ca1a7b5100
[  201.220521][  T107] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  201.228529][  T107] RBP: ffffc900028ba120 R08: dffffc0000000000 R09: fffff520005a8f35
[  201.236707][  T107] R10: fffff520005a8f35 R11: 1ffff920005a8f34 R12: ffff8880274d72e8
[  201.244806][  T107] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880241e1094
[  201.252820][  T107] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  201.255624][ T7424] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, 
[  201.261761][  T107] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  201.261788][  T107] CR2: 00007f25780e56c0 CR3: 00000000656b1000 CR4: 00000000003506f0
[  201.270765][ T7424] block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  201.276672][  T107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  201.276687][  T107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  201.276700][  T107] Call Trace:
[  201.276708][  T107]  <TASK>
[  201.276720][  T107]  ? lockdep_hardirqs_on+0x94/0x140
[  201.276758][  T107]  jfs_lazycommit+0x56c/0xa50
[  201.276796][  T107]  ? txFreelock+0x5a0/0x5a0
[  201.330162][  T107]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  201.336081][  T107]  ? do_task_dead+0xd0/0xd0
[  201.340685][  T107]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  201.346597][  T107]  ? __kthread_parkme+0x162/0x1c0
[  201.351721][  T107]  kthread+0x29d/0x330
[  201.355805][  T107]  ? txFreelock+0x5a0/0x5a0
[  201.360335][  T107]  ? kthread_blkcg+0xd0/0xd0
[  201.364934][  T107]  ret_from_fork+0x1f/0x30
[  201.369370][  T107]  </TASK>
[  201.372402][  T107] Modules linked in:
[  201.390128][ T7419] loop9: detected capacity change from 0 to 32768
[  201.401815][ T7419] 
[  201.401815][ T7419]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  201.401815][ T7419] 
[  201.405090][  T107] ---[ end trace 0000000000000000 ]---
[  201.414000][ T7424] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  201.430638][  T107] RIP: 0010:txUnlock+0xc87/0xcb0
[  201.437417][ T7419] 
[  201.437417][ T7419]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  201.437417][ T7419] 
[  201.441247][  T107] Code: 7f d3 14 07 0f 0b e8 e8 84 91 fe 48 c7 c7 80 59 a6 8a 48 c7 c6 79 55 a6 8a ba a3 03 00 00 48 c7 c1 60 66 a6 8a e8 59 d3 14 07 <0f> 0b e8 c2 84 91 fe 48 c7 c7 80 59 a6 8a 48 c7 c6 79 55 a6 8a ba
[  201.450598][ T7424] EXT4-fs (loop5): This should not happen!! Data will be lost
[  201.450598][ T7424] 
[  201.472442][  T107] RSP: 0018:ffffc90002d47d28 EFLAGS: 00010246
[  201.481134][ T7419] 
[  201.481134][ T7419]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  201.481134][ T7419] 
[  201.484017][  T107] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 0037e7ca1a7b5100
[  201.501991][ T7419] 
[  201.501991][ T7419]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  201.501991][ T7419] 
[  201.503229][  T107] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  201.513790][ T7424] EXT4-fs (loop5): Total free blocks count 0
[  201.521526][  T107] RBP: ffffc900028ba120 R08: dffffc0000000000 R09: fffff520005a8f35
[  201.535453][ T7424] EXT4-fs (loop5): Free/Dirty block details
[  201.535472][ T7419] 
[  201.535472][ T7419]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  201.535472][ T7419] 
[  201.541409][ T7424] EXT4-fs (loop5): free_blocks=68451041280
[  201.560280][   T26] audit: type=1800 audit(1748018035.695:15): pid=7419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.933" name="bus" dev="loop9" ino=7 res=0 errno=0
[  201.569754][  T107] R10: fffff520005a8f35 R11: 1ffff920005a8f34 R12: ffff8880274d72e8
[  201.584251][  T108] 
[  201.584251][  T108]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  201.584251][  T108] 
[  201.599207][  T107] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880241e1094
[  201.607419][  T107] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  201.612184][ T7424] EXT4-fs (loop5): dirty_blocks=80
[  201.616881][ T7433] 
[  201.616881][ T7433]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  201.616881][ T7433] 
[  201.631550][ T7424] EXT4-fs (loop5): Block reservation details
[  201.632188][  T107] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  201.638335][ T7424] EXT4-fs (loop5): i_reserved_data_blocks=5
[  201.644845][  T107] CR2: 0000001b30a1bff8 CR3: 000000002764b000 CR4: 00000000003506f0
[  201.659392][ T7433] 
[  201.659392][ T7433]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  201.659392][ T7433] 
[  201.669882][  T107] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  201.678271][  T107] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  201.686888][  T107] Kernel panic - not syncing: Fatal exception
[  201.693222][  T107] Kernel Offset: disabled
[  201.697550][  T107] Rebooting in 86400 seconds..