last executing test programs:

5m7.622665286s ago: executing program 0 (id=66):
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@remote, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e23, 0x9c, 0x0, @wg=@initiation={0x1, 0x40000, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002600)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

5m6.831773427s ago: executing program 0 (id=70):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20040800}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0xd8, 0x3, 0xd0e7500, 0x0, 0x60, 0x170, 0x1d8, 0x1d8, 0x170, 0x1d8, 0x3, 0x0, {[{{@ip={@private, @dev={0xac, 0x14, 0xd, 0x36}, 0xffffffff, 0xff, 'nr0\x00', 'team_slave_0\x00', {}, {}, 0x11, 0x1, 0xd}, 0x0, 0x70, 0xd8, 0x0, {0x60000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x100, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @private, 0x0, 0x0, 'tunl0\x00', 'veth1_to_bond\x00', {}, {}, 0x0, 0x0, 0x8}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268)

5m6.177664464s ago: executing program 0 (id=72):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc_mnt\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt/net/ip_vs_conn_sync\x00', 0x0, 0x0)
read(r0, &(0x7f0000000300)=""/1024, 0x400)

5m5.723172141s ago: executing program 0 (id=74):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.origin\x00', 0x0, 0x0, 0x3)

5m5.000397625s ago: executing program 0 (id=76):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1)

5m4.377107249s ago: executing program 0 (id=78):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x7bf}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@local=@item_012={0x1, 0x2, 0x3, "86"}, @global=@item_012={0x1, 0x1, 0x1, "81"}, @local=@item_012={0x2, 0x2, 0x4, '{&'}, @main=@item_4={0x3, 0x0, 0x8, "cad7df7c"}, @local=@item_4={0x3, 0x2, 0x1, "d9f9cc3a"}, @local=@item_4={0x3, 0x2, 0x1, "a2c6c30a"}, @global=@item_012={0x1, 0x1, 0x0, '\b'}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0)

5m3.68529297s ago: executing program 32 (id=78):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x7bf}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x18, {[@local=@item_012={0x1, 0x2, 0x3, "86"}, @global=@item_012={0x1, 0x1, 0x1, "81"}, @local=@item_012={0x2, 0x2, 0x4, '{&'}, @main=@item_4={0x3, 0x0, 0x8, "cad7df7c"}, @local=@item_4={0x3, 0x2, 0x1, "d9f9cc3a"}, @local=@item_4={0x3, 0x2, 0x1, "a2c6c30a"}, @global=@item_012={0x1, 0x1, 0x0, '\b'}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0)

4m44.23056452s ago: executing program 4 (id=178):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x3}, 0xa)
recvmmsg(r0, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10102, 0x0)
shutdown(r0, 0x1)

4m43.238519282s ago: executing program 4 (id=185):
r0 = syz_open_dev$loop(&(0x7f0000001540), 0x195d, 0xec4d2770249a3ef5)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/address_bits', 0x82803, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000015c0)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5d69098c8b534464c516bdd8a0f350000e35abdb80e38f5eb010001", "32d8cc263d9e234b30c50997d3bef4cd4a5d83cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a0000000200", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x8, 0x5]}})
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x81, 0x0, 0x11, 0x1d, 0x4, "7f12aaa9d802b5665e8fc89b7c6314a6bb462534ce80b43c0479187d69b3617861d429b40665a81cfe53e03bca0b5ea1bf3716d30a8b8e32dc8bb56673fc9a74", "b2b67709a251b9bcac61a179bc1051ca36db62acedf6b2e55fdd02f04499b80e3197257e53c7a59c9fa8faf9e0f7fda8500f5b1f3a34c1de8635c936518b724f", "ed166c5a4c49713592344127227d0903a8ac559239f6189263ac6be58740b449", [0x4, 0x1009]})

4m42.755951371s ago: executing program 4 (id=188):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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")
setxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000200), &(0x7f0000000000)=ANY=[], 0x700, 0x1)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

4m42.362595731s ago: executing program 4 (id=191):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.origin\x00', 0x0, 0x0, 0x3)

4m41.261362374s ago: executing program 4 (id=202):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000001c0)='./file2\x00', 0x800c08, &(0x7f0000000540)=ANY=[@ANYBLOB="2c756d61736b3d300004000000000000000000", @ANYRES8=0x0, @ANYRES16=0x0, @ANYRESDEC, @ANYRES8=0x0, @ANYBLOB, @ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRES8=0x0, @ANYBLOB="c49ecfdd8711048bea9eb55574810b5cbc454ccd5a63c7941ba393a86e5b7a8fdcf7b75e9bd7459f7e129fadabeef1e9b084a7568c9ce90014069121b0700a4f948941c59d1e8e3f80ffa601a20f979dd6e1fe150ba283f14999be8b6fe530f67dbac2443da65608409abd01602980fb5227c272180171dfa09978bf40bd650d5c4a54e6cecfcfd2e41e9ec85c6a274e668e7443cdd2c3cba6972ccffb41487a8202816ac3ba65bb5cb3d1323194c102f39aae52e46500849660e484f39210872d958d69f61e1311c51a34b64f81cb8a5cc30bf568185b0bb1f0d438777c833a9b362a10cace728b508eb7642244"], 0x21, 0x627f, &(0x7f0000001600)="$eJzs3UuPHFfZB/Cnr3PxG8fKIsprITRJzCWE+BqMIUCSBSzYsEDeIluTSWThALINciILTzQbFnwIEBJLhFiy4gNkwZYdHwBLNhIoqxSqmXPGNeVp94zt6eqZ8/tJ4+qnTlX3Kf+7prunqvoEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA//MGPz/Ui4sqv0owTEf8Xg4h+xFJdr0TE0sqJ5jovxWZzvBgRo4WIev3Nf56PeDMiPj0ecf/BndV69vk99uP7f/7HH35y7Ed//9PozH//cmvw1qTlbt/+7X/+evfJtxcAAABKVFVV1Usf809GxDB9tgcAjr78+l8leb567ur1OeuPWq1Wqw9h3VTt7m6ziIj15jr1ewaH4wHgkFmPz7ruAh2Sf9GGEXGs604Ac63XdQc4EPcf3FntpXx7zdeDla32fC7IjvzXe9vXd0yaTtM+x2RWz6+NGMQLE/qzNKM+zJOcf7+d/5Wt9nFa7qDzn5VJ+Y+3Ln0qTs5/0M6/5ejk3981/1Ll/If7yn8gfwAAAAAAmGP57/8nOj7+u/D0m7Injzv+uzKjPgAAAAAAAADAs7bf8f+GrfH/thn/DwAAAOZW/Vm99rvjD+dN+i62ev7lXsRzreWBwqSLZZa77gcAAAAAAAAAAAAAlGS4dQ7v5V7EKCKeW16uqqr+aWrX+/W06x92pW8/lKzrX/IAALDl0+Ota/l7EYsRcTl9199oeXm5qhaXlqvlamkhv58dLyxWS43PtXlaz1sY7+EN8XBc1Xe22Fivadrn5Wnt7furH2tcDfbQsdnoMHAAiIitV6P7XpGOmKp6Prp+l8PhYP8/euz/7EXXz1MAAADg4FVVVfXS13mfTMf8+113CgCYifz63z4uoFar1Wq1+ujVTdXu7jaLiFhvrlO/ZzAcPwAcMuvxWdddoEPyL9owIl7quhPAXOt13QEOxP0Hd1Z7Kd9e8/Ugje+ezwXZkf96b3O9vP5u02na55jM6vm1EYN4YUJ/XpxRH+ZJzr/fzv/KVvs4LXfQ+c/KpPzr7TzRQX+6lvMftPNvOTr593fNv1Q5/+G+8h/IHwAAAAAA5lj++/+JuTr+O37SzZnqccd/Vw7sUQEAAAAAAADgYN1/cGc1X/eaj/9/YZflXP95NOX8e/IvUs6/38r/q63lBo3b9959mP+/H9xZ/eOtf/1/nu4x/4d310vPrF56RvRSU2+Ypk+zdY/aGA3G9SONev3BMJ3zU43ej2txPdbi7I5l++n/42H7uUc2YrTZXg222s/vaB9ut+f1L+xoH6Uznaql3H46VuPncT3e22yv2xambP/ilPZqSnvOf2D/L1LOf9j4qfNfTu291rR275P+I/t9c7rb47xz7Yu/OXvwmzPVRgy2t62p3r5XOujP5v/JsXH88ubajdO3r966deNcpMmOuecjTZ6xnP8o/Wz//n91qz3/om7ur/c+Ge87/3mxEcOJ+b/auF1v72sz7lsXcv7j9JPzfy+1777/H+b8J+//r3fQHwAAAAAAAAAAAAAAAHicqqo2LxF9JyIuput/uro2EwCYrfz6XyV5/qzqwYwfT60+5HVvzvoz0/rz6lnd3zDmYXvU6i7qpmp3bzeLiPhbc536PcOvd7szAGCefR4R/+y6E3RG/gXL3/dXT0913Rlgpm5+9PFPr16/vnbjZtc9AQAAAAAAAACeVB7/c6Ux/vOpqqrutpbbMf7ru7HytON/DvON7QFGJwxUPdj/Nj3ORn886DeGG385Jo3/Pdq+9bjxv4dTHm80pX08pX3h0VlLzWJxyvq7XujRkPN/uTHe+amIONkafr2E8V/bY96XIOf/SuP5XOf/ldZyzfyr3x/m/Ps78j9z68NfnLn50cdvXPvw6gdrH6z97MK5c2cvXLx46dKlM+9fu752duvfDnt8sHL+eexr54GWJeefM5d/WXL+X0q1/MuS8/9yquVflpx/fr8n/7Lk/PNnH/mXJef/WqrlX5ac/9dSLf+y5PxfT7X8y5Lz/3qq5V+WnP8bqZZ/WXL+p1Mt/7Lk/M+keo/5Lx10v5iNnH8+wmX/L0vOP5/ZIP+y5PzPp1r+Zcn5X0i1/MuS838z1fIvS87/G6mWf1ly/hdTLf+y5Py/mWr5lyXnfynV8i9Lzv9bqZZ/WXL+3061/MuS838r1fIvS87/O6mWf1ly/t9NtfzLkvP/XqrlX5ac/9upln9ZHn7/vxtuzPjGyNNvfm90/ZsJAAAAAAAAAAAAAGibxenEXW8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9iBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuNkaOu74D+Nz57nx2IDEQUic1cHZMCImTOz/ED7QpJjw2PAdCoQ/Yru9sDvyEzy6BRrJRoETCqKiibXjRFhAqeYOIKlTRClBeoFZVK0H7gr5BVLS8iKqAAmqltgKu2pn//3+7e3u7e77NeXbm85Hin293dmd2dnbuvud8dwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJptf/XcJ0ayLGv8l/+xJcue0/j7pqkt+WWvuNZbCAAAAKzVz/M/n7khXXC4jxs1LfP3L/72VxcXFxezd2/44/HPLC6mK6aybHxjluXXRU/84D0jzcsEj2STI6NNX4/2WP2GHteP9bh+vMf1Ez2u39jj+ske1y/bActsKn4fk9/ZzvyvW4pdmt2YjefX7exwq0dGNo6Oxt/l5Eby2yyOn8jms1PZXDbTsnyx7Ei+/Ne3N9b1hiyua7RpXdsaR8hPHj4et2Ek7OOdLetaus/oR6/Kpn76k4eP/+WFp2/uNHvuhpb7K7bz9h2N7fxYuKTY1pFsY9oncTtHm7ZzW4fnZEPLdo7kt2v8vX07n+lzOzcsbea6an/OJ7PR/O/fyffTWPOv9dJ+2hYu+59bsyy7vLTZ7cssW1c2mm1uuWR06fmZLI7Ixn00DqXnZ2OrOk6393GcNubsztbjtP01EZ//7eF2YytsQ/PT9KOPTjQ97z9bvJrjNGo86pVeK+3H4KBfK2U5BuNx8Z38QT/a8RjcGR7/w7etfAx2PHY6HIPpcTcdgzt6HYOjExvybR790ua49h0tx+DuluU35GsayedTt3U/BqcvnD43vfDhj9w1f/rYybmTc2f27t49s3f//oMHD06fmD81N1P8edX7u+w2Z6PpNbAj7Lv4GnhZ27LNh+ri5yeWnX+v9nU42eV1uKVt2UG/DsfaH9zI+rwgl47peEnx2nhnY6dPXhnNVniN5c/PHWt/HabH3fQ6HGt6HXb8nrJsm0fy2/R6HTaWOXdHfz+zjDX912kbVv5esLZjcEvTMdj+80j7MTjon0fKcgxOhuPie3es/L1gW9jeR3et9ueRDcuOwfRww7mncUn6eX/yYD46HZe3NK64biK7uDB3/u6Hjl24cH53Fsa6eEHTsdJ+vG5uekzZsuN1dNXH6+H5Fz96S4fLt4R9NXlX44/JFZ+rxjL77u7+XOXf3Trvz5ZL92RhDNh6789O380b+3Miyz77rY8+8I2HP/vqFfdnI29+bHrtP4unXNp0/h1f4fwbc/8vivWlu3pkw/hY8frdkPbOeMv5uPWpGsvPXSP5up+Z7u98PB7+W+/z8Y1dzsdb25Yd9Pl4vP3BxfPxSK/fdqxN+/M5GY6TUzPdz8eNZbbuWe0xOdb1fHxrmCNh/788JIWUi5qOnZWO27SusbHx8LjG4hpaj9O9LcuPh2zWWNfje67uOL391uK+NqRHt2S9jtOptmUHfZym332tdJyO9Prt29Vpfz4nw3Fx497ux2ljmSf3rf3cuSn+tencOdHrGBzfMNHY5vF0EObn+2xxUzwG786OZ2ezU9lsfu1EfjyN5OvadU9/x+BE+G+9z5VbuxyDt7ctO+hjMH0fW+nYGxlb/uAHoP35nAzHxWP3dD8GG8u85sBgf3a9PVySlmn62bX992sr/c7rlrbd9GwdK2NhO791oPvvZhvLnDq42pzZfT/dGS65rsN+an/9rvSams3WZz9tDdv59MGV99OXt2f5Mp851OfxdDjLsksfvC//fW/495W/uvjdr7b8u0unf9O59MH7fvzcE3+3mu0HYPj9ohibi+91Tf8y1c+//wMAAABDIeb+0TAT+R8AAAAqI+b++H+FJ/I/AAAAVEbM/WNhJjXJ/1tf8/T8Ly5lqZm/GMTr0264v1gudlxnwtdTi0sal9/3xbn//ttL/a17NMuyn93/+x2X33p/3K7CVNjOJ17bevkyX72rr3UfffBSWm9zf/1z4f7j4+n3MOhUwZ3JsuzrN3wqX8/Ue67k88n7j+bzgcuPPtJY5plDxdfx9k+9oFj+z0L59/CJYy23fyrshx+GOfPGzvsj3u4rV16+7cC7ltYXbzey4/r8YT/23uJ+4/vkfPqRYvm4n1fa/m988vGvNJZ/6KWdt//SaOftfzzc7xfD/N8XFcs3PweNr+PtPh62P64v3u7uL3yz4/Y/8Yli+XOvK5Y7GmZc/+3h652ve3q+eX89NHKs5XFlry+Wi+uf+e4f5tfH+4v33779k0eutOyP9uPjyX8p7me6bfl4eVxP9Ddt62/cT/PxGdf/+B8cbdnPvdb/xANPvahxv+3rv7NtuXMfvCNf/9L9tb5j059//FMd1xe35/CXz7U8nsNvD6/jsP7H3huOx3D9/z1R3F/7uyscfXvr+Scu/7ktl1oeT/SGnxbrf+KVJ/O5cXLT5uue89zrL7+kse+y7Dsbi/vrtf6Tf3G2Zfs/f1OxP+L1saPfvv6VxPWf/9CuM2cXLs7Ppr368A35e+e8qdieuL03hHNr+9dHzl5439z5qZmpmSybqu5b6F21L4T542Jc7r704rIz6B0Phufzlj/9+ubb/vmT8fJ/fWdx+ZU3Ft+3XhaW+3S4fEt4/la3/uUe235T/voeeTJs4eLy9wtei207//NgXwuGx9/+c0E83s+98H35fmhcl3/fiK/rNW7/92eL+/la2K+L4Z2Zd9y0tL7m5eN7I1x5R/F6X/P+C6e5+Lx+KTzfb/5hcf9xu+Lj/X74OeabW1vPd/H4+Nql0fb7z9/F43I4n2SXi+vjUnF/X3nmpo6bF9+HJLt8c/71H6X7uXlVD3MlCx9emD41f+biQ9MX5hYuTC98+CNHTp+9eObCkfy9PI+8v9ftl85Pm/Pz0+zc/n1ZfrY6W4xn2bXe/nMPHp89MHPb7NyJYxdPXHjw3Nz5k8cXFo7PzS7cduzEibkP9br9/Oy9u/cc2ntgz66T87P3Hjx0aO+hXfNnzjY2o9ioHvbPfGDXmfNH8pss3Lvv0O577tk3s+v02dm5ew/MzOy62Ov2+femXY1b/96u83Onjl2YPz23a2H+I3P37j60f/+enu8GePrciYWp6fMXz0xfXJg7P108lqkL+cWN7329bk81Lfxb8fNsu5Hijfiyt965P70/a8MXP7riXRWLtL2B6NPhvWj+4XnnDvbzdcz942EmNcn/AAAAUAcx90+Emcj/AAAAUBkx928MM5H/AQAAoDJi7p8MM6lJ/q9c/3/rpb7Wr/+v/9+8v/T/a9b/f0fZ+v+N88Vc6nXq/6/NWvv3+v+B/r/+v/6//r/+PwNQtv5/zP2bsqyW+R8AAADqIOb+zWEm8j8AAABURsz914WZyP8AAABQGTH3PyfMpCb5X/9f/1//X/9f/7/z+te3/+/z/wdF/787/f8e9P+ns3r1/y8Pcvv1//vs/0/1uieqpGz9/5j7nxtmUpP8DwAAAHUQc//1YSbyPwAAAFRGzP03hJnI/wAAAFAZMfdvCTOpSf7X/9f/1//X/9f/77x+/f/hpP/fnf5/D/r/Pv9f/9/n/zNQZev/x9z/vDCTmuR/AAAAqJ7lv0yIuf/5YSbyPwAAAJTP2NXdLOb+F4SZLMv/V7kCAAAA4JqLuf/GrK0IXpN//y9X/3/pCdD/L77W/9f/1/8fhv7/hkz/vzz0/7vT/+9B/39t/fnGiVH/X/9f/58mZev/57k/m8xeGGZSk/wPAAAAdRBz/01hJvI/AAAAVEbM/b8UZiL/AwAAQGXE3L81zKQm+b9c/f+m7dL/z+n/D77//+/79P/1/33+f5Xp/3en/9+D/r/P/9f/1/9nMOIPSiXr/8fcf3OYSU3yPwAAANRBzP23hJnI/wAAAFAZMff/cpiJ/A8AAACVEXP/tjCTmuR//f+S9/9jc1T/3+f/6//r/+v/90X/vzv9/x70//X/9f/1/xmohZL1/2Puf1GYSU3yPwAAANRBzP0vDjOR/wEAAKAyYu5/SZiJ/A8AAACVEXP/VJhJTfK//n/J+/9FD37C5//r/+v/6//r//dH/787/f8e9P/1//X/9f8ZqLL1/2Pu3x5mUpP8DwAAAHUQc/+OMBP5HwAAACoj5v5bw0zkfwAAAKiMmPt3hpnUJP/r/w9F/z/T/9f/1//X/9f/74/+f3f6/z3o/+v/6//r/zNQZev/x9z/0jCTmuR/AAAAqIOY+28LM5H/AQAAoDJi7n9ZmIn8DwAAAJURc//tYSY1yf/6//r/+v/6//r/ndev/z+c9P+70//vQf9f/1//X/+fgSpb/z/m/peHmdQk/wMAAEAdxNx/R5iJ/A8AAACVEXP/nWEm8j8AAABURsz9u8JMapL/9f/1//X/9f/1/zuvX/9/OOn/d6f/34P+v/6//r/+PwNVtv5/zP13hZnUJP8DAABAHcTcf3eYifwPAAAAlRFz/3SYifwPAAAAlRFz/0yYSU3yv/6//r/+fyn7//lNStn/f8nS/er/F/T/y0X/v7s++//T+v/6//r/16r/P67/T6WUrf8fc//uMJOa5H8AAACog5j794SZyP8AAABQGTH37w0zkf8BAACgMmLu3xdmUpP8r/+v/6//X8r+f66U/f8m+v8F/f9y0f/vbvCf/x8fov6//r/+v8//1/9nubL1/2PuvyfMpCb5HwAAAOog5v79YSbyPwAAAFRGzP0HwkzkfwAAAKiMmPsPhpnUJP/r/+v/6//r/+v/d16//v9wKmf/f7Tv9Q9f/9/n/w9X//9U12uvdX9+ra719uv/6/+zXNn6/zH3HwozqUn+BwAAgDqIuf8VYSbyPwAAAFRGzP2/EmYi/wMAAEBlxNz/q2EmNcn/+v9l7/+PZvr/+v/6//r/+v/9K2f/v3/6//r/Pv9/eLdf/1//n+XK1v+Puf/eMJOa5H8AAACog5j7fy3MRP4HAACAyoi5/5VhJvI/AAAAVEbM/YfDTGqS/yvW/5/sb83D1P/3+f/XsP//qvb+vf6//r/+f/np/3en/9+D/r/+v/6//j8DVbb+f8z9rwozqUn+BwAAgDqIuf++MBP5HwAAACoj5v5Xh5nI/wAAAFAZMfe/JsykJvm/Yv3/Cn7+v/6/z//X/9f/1/9fDf3/7vT/e9D/1//X/9f/Z6DK1v+Puf+1YSY1yf8AAABQBzH3vy7MaPyabREAAAAwaDH3vz7MxL//AwAAQGXE3P+GMJOa5H/9f/1//X/9f/3/zuvX/x9O+v/d6f/3oP+v/6//r//PQJWt/x9z/6+HmdQk/wMAAEAdxNx/f5iJ/A8AAACVEXP/G8NM5H8AAACojJj73xRmUpP8r/+v/6//r/+v/995/fr/w0n/v7sh6////Ppwuf5/Qf+/3Nu/2v7/WNvXz0r//wcr9f8XN7bfXv+fZ0PZ+v8x9785zKQm+R8AAADqIOb+t4SZyP8AAABQGTH3vzXMRP4HAACAyoi5/21hJjXJ//r/je1Yai/r/+v/5xesS///bf+l/6//n+n/D5z+f3dD1v/3+f9t9P/Lvf0+/1//n+XK1v+Puf/tYSY1yf8AAABQBzH3PxBmIv8DAABAZcTc/44wE/kfAAAAKiPm/neGmdQk/+v/+/x//X+f/6//33n9q+3/dzoPNNP/Xx/6/93p//eg/6//X7b+/3/o/zPcytb/j7n/wTCTmuR/AAAAqIOY+98VZiL/AwAAQGXE3P8bYSbyPwAAAFRGzP3vDjOpSf5fuf//gdYFn6X+/yb9/z77/1P6//r/+v9tj6ds/f9e9P/Xh/5/d/r/Pej/6/+Xrf/v8/8ZcmXr/8fc/54wk/7z/2TfSwIAAADXRMz9vxlmUpN//wcAAIA6iLn/t8JM5H8AAACojJj7fzvMpCb53+f/D0v/3+f/Z/r/w9//H9X/1/9/9q1f/z+eefT/9f/1/yP9f/1//X/ala3/H3P/74SZ1CT/AwAAQB3E3P/eMBP5HwAAAIZCp/8nu13M/UfCTOR/AAAAqIyY+4+GmdQk/+v/16j//9f/WFyp/z8c/f8/2fFP3/v2W47urlL/3+f/6/+vg3X9/P/Gi9/n/+v/6/8n+v/6//r/tCtb/z/m/mNhJjXJ/wAAAFAHMff/bpiJ/A8AAACVEXP/8TAT+R8AAAAqI+b+2TCTmuR//f8a9f99/v9w9f+H+PP/4/7Q/281sP5/POnq/3e0rv3/dy31xPX/V9v/n+h4qf6//v8wb7/+v/4/y5Wt/x9z/1yYSU3yPwAAANRByP2jJ4q5dIX8DwAAAJURc//JMBP5HwAAACoj5v73hZnUJP/r/+v/6//r//v8/87rL23/3+f/d6X/3115+v+d6f/r/w/z9uv/6/+zXNn6/zH3z4eZ1CT/AwAAQB3E3P/+MBP5HwAAACoj5v4PhJnI/wAAAFAZMfefCjOpSf7X/9f/1//X/9f/77x+/f/hpP/fnf5/D/r/+v9Xs/3huNH/1/9nubL1/2PuPx1mUpP8DwD/z96dNFlWl3kcvwlFV2bQ0fSuF73pdfdLYNG97n4B3RG96U1HqAtQcVakcB5xwnnAecYBFHFCxRmcUJxFxHlARRQHxCjDrOd56mbdk/dmFjczz/n/P58FT5GS3FtlBfCrrG8cAIAe5O6/KG6x/wEAAKAZufsvjlvsfwAAAGhG7v4Hxy2d7H/9v/6/2f7/3/X/u72+/l//3zL9/5CL61v6/xX0//p/z//X/7NWY+v/c/c/JG7pZP8DAABAD3L3PzRusf8BAACgGbn7L4lb7H8AAABoRu7+h8Utnez/M/r/jVmf/X9mvPr/lvp/z//f9fX1//r/lh1u/3/53/7JN4H+/zT9/wr6f/2//l//z1qNrf/P3f/wuKWT/Q8AAAA9yN3/iLjF/gcAAIBm5O5/ZNxi/wMAAEAzcvc/Km7pZP97/r/n/+v/9f/6/+HX1/9Pk+f/L9dT/3/JredfdPd1/3z9fl7/4Pv/u3b2/0H/vx5H/f71//p/Fo2t/8/d/+i4pZP9DwAAAD3I3f+YuMX+BwAAgGbk7n9s3GL/AwAAQDNy9z8ubulk/+v/9f/6f/1/fPzkmX/d1Pr/K+Pj+v++6f+X66n/P5vX9/x//b/+X//Peo2t/8/df2nc0sn+BwAAgB7k7n983GL/AwAAQDNy918Wt9j/AAAA0Izc/Sfilk72v/7/4Pv/v+j/9f9xR97/e/6//r8J+v/l9P8r6P/1//p//T9rNbb+P3f/5XFLJ/sfAAAAepC7/wlxi/0PAAAAzcjd/8S4xf4HAACAZuTuf1Lc0sn+1/97/r/+X/+v/x9+ff3/NOn/l9P/r9BX/3/8zA+soZ8/T/+v/9f/M2+f/f+9S/6xvZb+P3f/k+OWTvY/AAAA9CB3/1PiFvsfAAAAmpG7/6lxi/0PAAAAzcjd/7S4pZP9r//X/+v/9f9n3f8v/tTbpv8ftr7+f6v+nvr/Rfr/5UbT/28cG/yw/t/z/6f8/vX/+n8Wje35/7n7nx63dLL/AQAAoAe5+58RtyzZ//v+xXwAAADgSOXuf2bc4uv/AAAAMHlZneXuf1bc0sn+1//r//X/+n/P/x9+/WX9//Vz78/z/8dF/7/caPr/Xej/9f9Tfv/6f/0/i8bW/+fuf3bc0sn+BwAAgB7k7r8ibrH/AQAAoBm5+58Tt9j/AAAA0Izc/c+NWzrZ/8P9/+n/Xf+/N/r/ne9f/z/882Nd/X/+HfX/S/v//2j3+f/6/2X0/8vp/1fQ/++/n5/7Lur/z6b/v7S+NfL+f2vV5+v/GTK2/j93//Pilk72PwAAAPQgd//z4xb7HwAAAJqRu/8FcYv9DwAAAM3I3X9l3NLJ/vf8f/1/9vObE+j/z9X/e/7/SJ7/Pzv0/v+Y/n+P9P/L6f9X0P97/n8bz//PD3n+P0dubP1/7v4Xxi2d7H8AAADoQe7+F8Ut9j8AAABMw/zvHTjzN5SG3P0vjlvsfwAAAGhG7v6XxC2d7H/9v/7f8//1//r/4dcfV//v+f97pf9fTv+/gv7/IPr5Y431/1ft9vlj6P8vO7jn/+v/OSs7+v8bTn/8qPr/3P0vjVs62f8AAADQg9z9L4tb7H8AAABoRu7+l8ct9j8AAAA0I3f/K+KWTvb/gff/W7u/tv5f/6//1//r/0/97NH/r4/+fzn9/wr6f8//b+P5//p/RmNH/z/nqPr/3P2vjFs62f8AAADQg9z9r4pb7H8AAABoRu7+q+IW+x8AAACakbv/1XFLJ/vf8//1//p//b/+f/j1Pf9/mvT/y+n/V9D/z/fzD5zp//X/+n/up7H1/7n7XxO3dLL/AQAAoAe5+18bt9j/AAAA0Izc/a+LW+x/AAAAaEbu/tfHLZ3sf/3/wfb/+XH9v/5/pv/X/+v/D0W3/f/G0L+JFu3S/9/8gBP/tfMj+n/9v+f/6//1/6zBKPr/k6f/6zJ3/xvilk72PwAAAPQgd/8b4xb7HwAAAJqRu/9NcYv9DwAAAM3I3f/muGWf+/8f1/quDo/+3/P/9f/6f/3/8Ovr/6ep2/5/jzz/fwX9v/5f/6//Z61G0f/P/Xnu/rfELb7+DwAAAM3I3f/WuMX+BwAAgGbk7n9b3GL/AwAAQDNy9789bulk/+v/9f/6f/2//n/49fX/0zTF/n/uvz567f+38hv6/7Pq/+/8V/3/KN6//l//z6Kx9f+5+6+OWzrZ/wAAANCD3P3viFvsfwAAAGhG7v53xi32PwAAADTj3uis3rX9Z/3tf/2//l//r//X/w+/vv5/mqbY/8/rtP8vh9L/X7PkDQz1/yePj73/9/z/kbx//b/+n0Vj6/9z9787bulk/wMAAEAPcvdfE7fY/wAAANCM3P3Xxi32PwAAADQjd/974pZO9r/+X/+v/9f/6/+HX3+g/z82/770/+Ok/19O/7/CNJ//r/8fyfvX/+v/WTS2/j93/3vjlk72PwAAAPQgd/91cYv9DwAAAM3I3f++uMX+BwAAgGbk7r8+bulk/+v/9f/6f/2//n/49T3/f5oOrv+f6f/1//r/FfbVzx9fy1s+uvc/QP+v/2fR2Pr/3P3vj1s62f8AAADQg9z9H4hb9rL/ty44qLcFAAAArFHu/g/GLb7+DwAAAM3I3f+huKWT/a//n83OmYuX9f/6/+0P6P/1/+vu/y/Q/x8Wz/9fTv+/gv7f8//1//p/1mps/X/u/g/HLZ3sfwAAAOhB7v4b4hb7HwAAAJpxz/YfN2cfiVvsfwAAAGhG7v6Pxi2d7H/9v+f/7+z/ZzP9v/5f/3/KITz/f3Om/187/f9y+v8V9P9t9v/nzBrq/7d2/Xz9P2M0tv4/d//H4pZO9j8AAAD0IHf/jXGL/Q8AAADNyN3/8bjF/gcAAIBm5O7/RNzSyf7X/+v/Pf9f/6//H379Q+j/60dV/78+B9X//73+f5v+X/+/zGj7f8//1/9zZMbW/+fu/2Tc0sn+BwAAgB7k7v9U3GL/AwAAQDNy9386brH/AQAAoBm5+z8Tt3Sy//X/+n/9v/5f/z/8+vr/afL8/+X0/yvo//X/+n/9P2s1tv4/d/9n45ZO9j8AAAD0IHf/TXGL/Q8AAADNyN1/c9xi/wMAAEAzcvd/Lm7pZP/r//X/+v9p9v+b+n/9v/5/0Fj6/wsv/M9b9P/6f/2//l//r//v3dj6/9z9n49bOtn/AAAA0IPc/V+IW+x/AAAAaEbu/i/GLfY/AAAANCN3/5filk72/2L/f97sVKF6ylD/H42a/n+O/n/n+9f/D//88Px//b/+/+Cd2f8f3+fne/5/0P/r//X/B9v//8vi5+v/adHY+v/c/bfELZ3sfwAAAOhB7v4vxy32PwAAADQjd/9X4hb7HwAAAJqRu//WuKWT/e/5//p//f9h9v8b+n/9v/7/gI3l+f/6/7N7//p//f+U338zz/8/V//P+hx8/78V39pb/5+7/6txSyf7HwAAAHqQu/9rcYv9DwAAAM3I3f/1uMX+BwAAgGbk7v9G3NLJ/tf/6//1/57/r/8ffn39/zTp/5fT/6/QT/+/OfTBo+7n76+jfv/N9P+e/88aje35/7n7vxm3dLL/AQAAoAe5+78Vt+zY//9zyO8KAAAAWKfc/d+OW3z9HwAAAJqRu/87cUsn+1//r/9vv///v0n1/1tzn9dY/39C/6//Pwz6//w3+jD9/wqj6f+H/1/0/P9xv3/9v/6fRWPr/3P33xa3dLL/AQAAoAe5+78bt9j/AAAA0Izc/bfHLfY/AAAANCN3//filk72v/6/r/5/Y9Zj/+/5/yPp/z3/X/9/KPT/y+n/VxhN/3/gz/8fdNT9/BG8//vW+f71//p/Fo2t/8/df8fGsS73PwAAAEzVf//bg27b6197x/YfN2ffj1vsfwAAAGhG7v4fxC32PwAAADQjd/8P45ZO9r/+v6/+v8/n/+v/9f/6/57o/5fT/6+g/++t/1/r+9f/6/9ZNLb+P3f/j+KWueF3bN/fSwAAAGBMcvf/OG7p5Ov/AAAA0IPc/T+JWxb2/8k9/q52AAAAYGxy9/80bunk6/8T7v+Hs4zW+v/ZAfX/8df12v/feOHOHy/9v/5/6PX1/9Ok/1/ufvb/Jzf0//r/JYb7+dv/Qf+v/9f/92ts/X/u/p/FLZ3sfwAAAGjUjl9RyN3/87jF/gcAAIBm5O7/Rdxi/wMAAEAzcvffGbd0sv8n3P/v8h1qrP8/q+f/b9W3PP+/8+f/X7E5+Ppr7//P2/n91f8P0/8fDv3/nM3FD3n+/wr6f8//1//r/1mrsfX/uft/Gbd0sv8BAACgB7n7fxW32P8AAADQjNz9v45b7H8AAABoRu7+u+KWTva//r/F/n8Pz//X//fR/+/y+u08//+fzj9x0//+/7VX6/857TD7//y5MNr+f4D+fwX9v/5f/6//Z63G1v/n7v9N3NLJ/gcAAIAe5O6/O26x/wEAAKAZuft/G7fY/wAAANCM3P2/i1s62f/6f/3/WPr//LE+gv7/xPT6/2yKe+//Pf9f/7/I8/+X0/+voP/X/+v/9f+s1dj6/9z998Qtnex/AAAA6EHu/t/HLbn/N/b9S/cAAADAyOTu/8P2nfs9Wr7+DwAAAM04tfs3Z3+MWzrZ//p//f9Y+v/k+f+nP8/z/0/R/+v/92Py/f/sHP2//l//P9H3r//X/7NobP1/7v4/xS2d7H8AAADoQe7+jbhl5/7/u8N9VwAAAMA63bv9x83Zn+MWX/8HAACAZuTuvy9u6WT/6//1//p//b/+f/j19f/TNPn+3/P/9f/6/8m+f/2//p9FY+v/c/f/NQAA//+VAGrk")
mknod(&(0x7f0000000040)='./bus\x00', 0xa18, 0x4)
r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

4m40.857124126s ago: executing program 4 (id=197):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480))
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000580)={'wlan1\x00', @random="0100"})

4m40.51901577s ago: executing program 33 (id=197):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480))
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000580)={'wlan1\x00', @random="0100"})

4m35.013231084s ago: executing program 3 (id=212):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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")
setxattr$security_ima(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000200), &(0x7f0000000000)=ANY=[], 0x700, 0x1)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')

4m34.581206198s ago: executing program 3 (id=214):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x40009, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0)

4m30.908564174s ago: executing program 3 (id=225):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/rebind\x00', 0x1, 0x0)
write(r0, &(0x7f0000001000)="312d93a86131b172dadb21657bbc758f3fddb3f82965d3ffc98a3157b36436b8", 0x20)

4m29.728298535s ago: executing program 3 (id=219):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='trusted.overlay.origin\x00', 0x0, 0x0, 0x3)

4m28.935654166s ago: executing program 3 (id=221):
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000580)="3882416c525bd564eb4b60df69fa225b915cc578b54ddcc0c9cf9378d23a5d9b7dc4b43236f043ebace17cd5469ba313fa113e3a8f5ed2699523ae2cd5dba9318a81a8490b4c5364fb3032a4bc541f12f3d89627e459e361c106d4b6", 0x5c}], 0x1)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5019, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x95, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x5, 0x1, {0x22, 0x361}}, {{{0x9, 0x5, 0x81, 0x3, 0x60, 0x4, 0xa, 0x46}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0xfffffffffffffe2c, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x371, {0xfffffffffffffef6, 0x21, 0xfffd}}}, &(0x7f0000000540)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})

4m28.058219946s ago: executing program 3 (id=227):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0)
write(r0, &(0x7f0000000640)='-', 0x1)

4m27.643384258s ago: executing program 34 (id=227):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0)
write(r0, &(0x7f0000000640)='-', 0x1)

2m5.714505644s ago: executing program 1 (id=1133):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x19, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r2}, 0xc)

2m5.381720078s ago: executing program 1 (id=1136):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24)
listen(r0, 0x0)
sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000100100000100000012000000000000001000000000000000100100000e"], 0x28}, 0x0)

2m5.114212835s ago: executing program 1 (id=1139):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x9, 0x242, &(0x7f00000008c0)="$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")
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000000000000000002000000000d00000000720007000000ee000000000000000d00000000002e305f2e2e2e"], 0x0, 0x44}, 0x28)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0)

2m4.77863727s ago: executing program 1 (id=1142):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x4004, &(0x7f0000005800)={[{@adaptive_mode}, {@six_active_logs}, {@fault_injection={'fault_injection', 0x3d, 0x64}}, {@noinline_xattr}, {@fault_type={'fault_type', 0x3d, 0x5}}, {@fastboot}, {@checkpoint_diasble}, {@fastboot}, {@fsync_mode_strict}, {@fastboot}]}, 0x21, 0x5533, &(0x7f00000002c0)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3001009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

2m1.633147851s ago: executing program 1 (id=1167):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/available_tracers\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000001280)=""/114, 0x72}], 0x1, 0x8, 0xfffffffe)

1m57.925162451s ago: executing program 1 (id=1179):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000009e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000006"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

1m56.954361011s ago: executing program 35 (id=1179):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000009e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000006"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

1m52.746420401s ago: executing program 6 (id=1193):
syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)={[{}]}, 0x1, 0x1cf, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f00000002c0)=""/48, 0x30)
getdents64(r0, 0xfffffffffffffffe, 0x29)

1m52.45901122s ago: executing program 6 (id=1194):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x0)
write(r0, 0x0, 0xfe31)

1m52.208067856s ago: executing program 6 (id=1195):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpgid(0x0)
kcmp(r1, r0, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)

1m51.830260115s ago: executing program 6 (id=1197):
syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX, @ANYRES8=0x0, @ANYRESDEC, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT=0x0], 0xfe, 0xc17, &(0x7f0000001dc0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})

1m50.788080871s ago: executing program 6 (id=1199):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0)
setreuid(0xffffffffffffffff, 0xee01)
fchdir(r0)

1m48.483903327s ago: executing program 2 (id=1205):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
unlink(&(0x7f0000000200)='./file0\x00')

1m48.213612275s ago: executing program 2 (id=1206):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x300)

1m47.905041077s ago: executing program 6 (id=1208):
r0 = epoll_create1(0x80000)
syz_clone3(&(0x7f0000000540)={0x901400, &(0x7f0000000000)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58)
select(0x40, &(0x7f0000000040)={0x9, 0x8, 0xff, 0x1, 0x7, 0x1, 0x1, 0x2ec1}, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000003c0)={0x90000011})

1m47.18962123s ago: executing program 36 (id=1208):
r0 = epoll_create1(0x80000)
syz_clone3(&(0x7f0000000540)={0x901400, &(0x7f0000000000)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58)
select(0x40, &(0x7f0000000040)={0x9, 0x8, 0xff, 0x1, 0x7, 0x1, 0x1, 0x2ec1}, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000003c0)={0x90000011})

1m47.157697713s ago: executing program 2 (id=1211):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00')
preadv(r1, &(0x7f0000001600)=[{&(0x7f0000000240)=""/41, 0x29}], 0x1, 0x0, 0x0)

1m46.768920113s ago: executing program 2 (id=1213):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0)
umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x8)

1m46.425517228s ago: executing program 2 (id=1215):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1011})

1m45.548645127s ago: executing program 2 (id=1218):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0)
write(r0, &(0x7f0000000240)="3c6b65726e456c3e202f6e65775f646f6d61696e0a26696c652072656164202f6574632f706173737764200361736b2e7569643d30207461736b2e657569643d300a73656c65637420646f6d61696e3d3cbf2e0000656c3e202f6e65775f646f6d61696e0a", 0x65)

1m44.734863061s ago: executing program 37 (id=1218):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0)
write(r0, &(0x7f0000000240)="3c6b65726e456c3e202f6e65775f646f6d61696e0a26696c652072656164202f6574632f706173737764200361736b2e7569643d30207461736b2e657569643d300a73656c65637420646f6d61696e3d3cbf2e0000656c3e202f6e65775f646f6d61696e0a", 0x65)

13.271720352s ago: executing program 9 (id=1645):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0)

12.942126136s ago: executing program 9 (id=1646):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f00000024c0)=""/4096, 0x104b}, {0x0}], 0x18, 0x5, 0x0)

10.795196755s ago: executing program 9 (id=1652):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000002c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x3, 0xfffffffc, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0x135)
syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x3, 0x0, 0x7, "", [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x5}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x3ff, 0x56d, 0xe5c7, 0x7}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x6, 0xfe}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x49, 0xff}}}}}]}}]}}, 0x0)
write$UHID_INPUT2(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0c00000015"], 0xc)

2.291424435s ago: executing program 7 (id=1689):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000640)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000680)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0xc6, &(0x7f0000000880)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @broadcast, {[@cipso={0x86, 0x77, 0x1, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x2, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "00de6c83d50000"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}, "9147f30e"}}}}}, 0x0)

2.067744718s ago: executing program 7 (id=1692):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000400)={[{@grpquota}, {@nogrpid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x4fa, &(0x7f0000000ac0)="$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")
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x200002, 0x200003, 0x801, 0x4, 0x7})
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)={0x4, 0x3, 0x0, 0x8, 0x6, 0x6, 0x20000001000, 0xffffffff, 0xfffffffd})
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000640)=ANY=[], 0x835, 0x1)

2.005150264s ago: executing program 5 (id=1693):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x4c}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001480)={0x70, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x5000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4806}, 0x0)

1.909236454s ago: executing program 8 (id=1694):
r0 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100"], 0x50)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x40045731, &(0x7f00000003c0))

1.66352502s ago: executing program 5 (id=1695):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x44)

1.601775476s ago: executing program 8 (id=1696):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec772000)
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
preadv(r0, 0x0, 0x0, 0x7, 0x8)

1.455234821s ago: executing program 7 (id=1697):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="a474c7eaf180e2401adbe10d", 0xc}, {&(0x7f0000000180)="8d359a7f0f0b91", 0x7}], 0x2)

1.386302568s ago: executing program 5 (id=1698):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c840}, 0x840)

1.342747433s ago: executing program 8 (id=1699):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4)
syz_emit_ethernet(0x2a, &(0x7f0000000380)={@random="c3ad7f0ceb48", @random="f8794fda5bd6", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x8}}}}}, 0x0)

994.250818ms ago: executing program 8 (id=1700):
r0 = gettid()
sigaltstack(&(0x7f0000000480)={&(0x7f0000002340)=""/4095, 0x80000001, 0xfff}, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
rt_sigqueueinfo(r0, 0x21, &(0x7f0000000100)={0x1f})

970.68135ms ago: executing program 5 (id=1701):
r0 = epoll_create1(0x80000)
r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xc})
epoll_pwait(r0, &(0x7f0000000180)=[{}], 0x1, 0xf, 0x0, 0x0)

910.023867ms ago: executing program 7 (id=1702):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000840)={'wpan1\x00', <r2=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xb}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x2c}}, 0x0)

901.048518ms ago: executing program 9 (id=1703):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r0, &(0x7f00000006c0)="306669ed6b3f8e62866482cb63353a313232373a6961c2a4430b39cb485fafdcffbf3a61e5c0e6ad4497509628ff041f4f5a90390f4c579f4f7ce82e9b664553427c30ecc58840c479439cea0b1bdfe9b9211c2e593dfafb801267daa16a6bc42715bce6d4459dec2db47af2637fb51788a5c69fb7456da69b479fbf36c10cdf", 0x80)

732.001265ms ago: executing program 8 (id=1704):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000003780)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)

676.091091ms ago: executing program 5 (id=1705):
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./gadget\x00', 0x1ff)
mount(0x0, &(0x7f0000000400)='./gadget\x00', &(0x7f0000000440)='gadgetfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000480)='./gadget/dummy_udc\x00', 0x2, 0x0)
pselect6(0x40, &(0x7f0000000500)={0xf, 0x10, 0x9, 0x5, 0x9, 0x8, 0x7, 0xf}, 0x0, 0x0, 0x0, 0x0)

603.755298ms ago: executing program 7 (id=1706):
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x285c, 0x4)
sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0)

549.447514ms ago: executing program 9 (id=1707):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/module/usb_storage/parameters/delay_use\x00', 0x1, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000680)={0x10, 0x17, 0x2, {0x7, './file2'}}, 0x10)

328.063416ms ago: executing program 5 (id=1708):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0xb3)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4)

206.759329ms ago: executing program 9 (id=1709):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x200000007f, &(0x7f0000000300)=0xa)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00')
lseek(r0, 0x2004, 0x0)

98.54513ms ago: executing program 7 (id=1710):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x402)
syz_emit_ethernet(0x4a, &(0x7f0000000540)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8500", 0x14, 0x6, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xfffc}}}}}}}, 0x0)

0s ago: executing program 8 (id=1711):
prlimit64(0x0, 0xd, &(0x7f0000000140)={0x6, 0x106}, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xfffc, &(0x7f0000000580)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000005c0)})

kernel console output (not intermixed with test programs):

 T8905] EXT4-fs (loop5): This should not happen!! Data will be lost
[  231.760230][ T8905] 
[  231.868169][ T8910] loop6: detected capacity change from 0 to 2048
[  231.909997][   T50] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:3: lblock 8 mapped to illegal pblock 8 (length 8)
[  231.967793][ T8910] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  231.990330][   T50] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  232.052219][   T50] EXT4-fs (loop5): This should not happen!! Data will be lost
[  232.052219][   T50] 
[  232.080843][ T8909] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  232.147531][ T6657] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  232.172975][ T5877] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  232.300000][ T6880] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.397581][ T5877] usb 3-1: config 0 has no interfaces?
[  232.419119][ T5877] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[  232.455909][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.495965][ T5877] usb 3-1: Product: syz
[  232.519386][ T5877] usb 3-1: Manufacturer: syz
[  232.535214][ T5877] usb 3-1: SerialNumber: syz
[  232.573759][ T5877] usb 3-1: config 0 descriptor??
[  232.706333][ T8924] loop6: detected capacity change from 0 to 256
[  232.939969][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.829'.
[  232.970109][ T8927] loop1: detected capacity change from 0 to 256
[  233.014724][ T5949] usb 3-1: USB disconnect, device number 6
[  233.758305][ T8947] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  234.072946][ T1194] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  234.292991][ T1194] usb 3-1: Using ep0 maxpacket: 32
[  234.338021][ T1194] usb 3-1: unable to get BOS descriptor or descriptor too short
[  234.388370][ T1194] usb 3-1: no configurations
[  234.398463][ T1194] usb 3-1: can't read configurations, error -22
[  234.784863][ T8971] loop5: detected capacity change from 0 to 256
[  234.854186][ T8971] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xdd63664a, utbl_chksum : 0xe619d30d)
[  235.283663][ T8977] input: syz0 as /devices/virtual/input/input18
[  235.483194][ T5949] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[  235.693956][ T5949] usb 7-1: config 0 has an invalid interface number: 255 but max is 0
[  235.718192][ T5949] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  235.736362][ T5949] usb 7-1: config 0 has no interface number 0
[  235.752935][ T5949] usb 7-1: config 0 interface 255 has no altsetting 0
[  235.766124][ T5949] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  235.777845][ T1194] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  235.788460][ T5949] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  235.814133][ T5949] usb 7-1: Product: syz
[  235.821835][ T5949] usb 7-1: Manufacturer: syz
[  235.831950][ T5949] usb 7-1: SerialNumber: syz
[  235.845763][ T5949] usb 7-1: config 0 descriptor??
[  235.971946][ T8969] loop1: detected capacity change from 0 to 40427
[  235.984399][ T1194] usb 3-1: Using ep0 maxpacket: 16
[  235.996226][ T1194] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  236.009180][ T1194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  236.057811][ T8969] F2FS-fs (loop1): invalid crc value
[  236.076259][ T1194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  236.109700][ T8969] F2FS-fs (loop1): Found nat_bits in checkpoint
[  236.117308][ T1194] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  236.163213][ T1194] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  236.184147][ T5949] usb 7-1: USB disconnect, device number 12
[  236.236051][ T1194] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  236.281294][ T1194] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  236.306273][ T1194] usb 3-1: Manufacturer: syz
[  236.331847][ T1194] usb 3-1: config 0 descriptor??
[  236.413549][ T8969] F2FS-fs (loop1): Start checkpoint disabled!
[  236.448888][ T8969] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  236.715534][   T60] kworker/u4:4: attempt to access beyond end of device
[  236.715534][   T60] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  236.733041][ T1194] rc_core: IR keymap rc-hauppauge not found
[  236.739015][ T1194] Registered IR keymap rc-empty
[  236.760218][ T1194] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  236.782953][   T60] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  236.827259][ T1194] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  236.873950][ T1194] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  236.936699][ T1194] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input19
[  236.981741][ T1194] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  237.042902][ T1194] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  237.082961][ T5949] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  237.096187][ T1194] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  237.154953][ T1194] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  237.186486][ T8996] loop6: detected capacity change from 0 to 256
[  237.193578][ T1194] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  237.236714][ T1194] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  237.295650][ T5949] usb 6-1: not running at top speed; connect to a high speed hub
[  237.317716][ T1194] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  237.354076][ T5949] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  237.397702][ T5949] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 165, setting to 64
[  237.409185][ T1194] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  237.456077][ T1194] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  237.483854][ T5949] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40
[  237.520914][ T5949] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.533087][ T1194] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  237.557738][ T5949] usb 6-1: Product: syz
[  237.577562][ T5949] usb 6-1: Manufacturer: syz
[  237.582229][ T5949] usb 6-1: SerialNumber: syz
[  237.611413][ T1194] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  237.636779][ T8991] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  237.662312][ T1194] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  237.693946][ T5949] oti6858 6-1:1.0: oti6858 converter detected
[  237.718000][ T1194] usb 3-1: USB disconnect, device number 9
[  237.738510][ T5949] usb 6-1: oti6858 converter now attached to ttyUSB0
[  238.237337][ T9003] loop6: detected capacity change from 0 to 4096
[  238.295799][ T9003] EXT4-fs: Ignoring removed nobh option
[  238.331960][ T5877] usb 6-1: USB disconnect, device number 7
[  238.398547][ T5877] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0
[  238.460924][ T5877] oti6858 6-1:1.0: device disconnected
[  238.630151][ T9003] EXT4-fs: Ignoring removed bh option
[  238.644308][ T9003] EXT4-fs (loop6): Test dummy encryption mode enabled
[  238.674807][ T9003] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.831153][ T9016] loop1: detected capacity change from 0 to 2048
[  238.854386][ T9019] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[  238.968957][ T9016] NILFS (loop1): invalid segment: Magic number mismatch
[  239.000014][ T9003] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  239.084158][ T9016] NILFS (loop1): trying rollback from an earlier position
[  239.135581][ T9025] loop2: detected capacity change from 0 to 16
[  239.215762][ T9016] NILFS (loop1): recovery complete
[  239.223977][ T9025] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  239.247715][ T6880] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.335635][ T9028] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  239.498361][ T9016] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean
[  239.793467][ T9036] netlink: 64 bytes leftover after parsing attributes in process `syz.6.876'.
[  239.880174][ T9038] device-mapper: ioctl: Invalid ioctl structure: name m, dev 2f
[  240.210828][ T9044] loop2: detected capacity change from 0 to 4096
[  240.251155][ T9044] EXT4-fs: Ignoring removed nobh option
[  240.313007][ T9044] EXT4-fs: Ignoring removed bh option
[  240.333754][ T9050] loop6: detected capacity change from 0 to 4096
[  240.391706][ T9044] EXT4-fs (loop2): Test dummy encryption mode enabled
[  240.466561][ T9050] ntfs3: loop6: ino=19, mi_enum_attr
[  240.507016][ T9050] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  240.562029][ T9044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.075381][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.851054][ T9079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.892'.
[  242.225372][ T9087] loop1: detected capacity change from 0 to 128
[  242.270756][ T9087] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  242.379859][ T9087] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  242.504158][ T5901] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  242.684208][ T1100] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  242.705189][ T5901] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  242.741465][ T5901] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  242.815349][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.887938][ T9082] loop6: detected capacity change from 0 to 40427
[  242.927027][ T9082] F2FS-fs (loop6): build fault injection attr: rate: 14, type: 0x7ffff
[  242.966951][ T9082] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0xe4
[  243.010590][ T9082] F2FS-fs (loop6): invalid crc value
[  243.049363][ T9082] F2FS-fs (loop6): Found nat_bits in checkpoint
[  243.198310][ T9082] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970
[  243.338231][ T9102] kAFS: bad VL server IP address
[  243.344446][ T9082] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  243.352481][ T5901] lg-g15 0003:046D:C222.000A: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0
[  243.520889][ T5901] lg-g15 0003:046D:C222.000A: Error -38 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver
[  243.536957][ T9082] F2FS-fs (loop6): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x885/0x1a80
[  243.610546][ T9082] F2FS-fs (loop6): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x13a/0xbc0
[  243.633108][ T5901] usb 3-1: USB disconnect, device number 10
[  243.778670][ T6880] syz-executor: attempt to access beyond end of device
[  243.778670][ T6880] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  243.824422][ T6880] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  244.255988][ T9112] loop1: detected capacity change from 0 to 256
[  244.401456][ T9115] loop2: detected capacity change from 0 to 16
[  244.477992][ T9115] erofs: (device loop2): mounted with root inode @ nid 36.
[  244.576692][ T9115] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  245.659941][ T9149] block nbd6: not configured, cannot reconfigure
[  246.957825][ T9164] loop5: detected capacity change from 0 to 32768
[  247.054811][ T9164] JBD2: Ignoring recovery information on journal
[  247.181507][ T9164] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  247.375761][ T9166] loop6: detected capacity change from 0 to 40427
[  247.422796][ T9166] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504)
[  247.429791][ T9166] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  247.454753][ T6657] ocfs2: Unmounting device (7,5) on (node local)
[  247.512401][ T9166] F2FS-fs (loop6): invalid crc value
[  247.534759][ T9166] F2FS-fs (loop6): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root
[  247.667470][ T9166] F2FS-fs (loop6): Found nat_bits in checkpoint
[  247.899763][ T9166] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  247.931520][ T9166] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  248.049486][ T9166] syz.6.932: attempt to access beyond end of device
[  248.049486][ T9166] loop6: rw=34817, sector=77824, nr_sectors = 8 limit=40427
[  248.179958][ T6880] syz-executor: attempt to access beyond end of device
[  248.179958][ T6880] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  248.219687][ T6880] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  248.423064][ T1194] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  248.663386][ T1194] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  248.672506][ T1194] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.732298][ T1194] usb 6-1: Product: syz
[  248.741564][ T1194] usb 6-1: Manufacturer: syz
[  248.774487][ T1194] usb 6-1: SerialNumber: syz
[  248.795860][ T1194] usb 6-1: config 0 descriptor??
[  248.828413][ T1194] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  248.877479][ T1194] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  248.943174][ T1194] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  248.962943][ T1194] usb 6-1: media controller created
[  249.017282][ T9186] dvb-usb: bulk message failed: -22 (7/0)
[  249.067047][ T1194] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  249.265019][ T1194] DVB: Unable to find symbol mt352_attach()
[  249.408573][ T9200] tun0: tun_chr_ioctl cmd 1074025675
[  249.419455][ T1194] DVB: Unable to find symbol nxt6000_attach()
[  249.436116][ T9200] tun0: persist disabled
[  249.440454][ T1194] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  249.493681][ T1194] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input21
[  249.563311][ T1194] dvb-usb: schedule remote query interval to 1000 msecs.
[  249.617235][ T1194] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  249.669597][ T1194] dvb-usb: bulk message failed: -22 (7/0)
[  249.707405][ T1194] dvb-usb: bulk message failed: -22 (7/0)
[  249.779063][ T1194] usb 6-1: USB disconnect, device number 8
[  249.919683][ T9193] loop1: detected capacity change from 0 to 32768
[  250.013956][ T9193] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop1 scanned by syz.1.940 (9193)
[  250.078925][ T1194] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  250.211833][ T9193] BTRFS info (device loop1): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  250.313625][ T9193] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  250.374796][ T9193] BTRFS info (device loop1): using free space tree
[  250.472829][ T5901] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  250.602103][ T9193] BTRFS info (device loop1): enabling ssd optimizations
[  250.644029][ T9193] BTRFS info (device loop1): auto enabling async discard
[  250.672343][ T5901] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  250.703510][ T5901] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  250.748980][ T5901] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  250.780253][ T5901] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  250.813887][ T5901] usb 7-1: SerialNumber: syz
[  250.953016][ T1194] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  251.065365][ T5901] usb 7-1: 0:2 : does not exist
[  251.147119][ T5901] usb 7-1: USB disconnect, device number 13
[  251.172751][ T1194] usb 3-1: Using ep0 maxpacket: 16
[  251.213190][ T1194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  251.231648][ T5803] udevd[5803]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  251.286958][ T1194] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  251.309426][ T5791] BTRFS info (device loop1): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  251.329557][ T1194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.364180][ T1194] usb 3-1: Product: syz
[  251.381542][ T9246] loop5: detected capacity change from 0 to 128
[  251.396233][ T1194] usb 3-1: Manufacturer: syz
[  251.418533][ T1194] usb 3-1: SerialNumber: syz
[  251.449130][ T1194] usb 3-1: config 0 descriptor??
[  251.489162][ T9246] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  251.518579][ T1194] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  251.552024][ T1194] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  251.562255][ T9246] ext4 filesystem being mounted at /222/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  251.659846][ T9246] fscrypt (loop5, inode 12): Direct key flag not allowed with different contents and filenames modes
[  251.903846][ T6657] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  252.196782][ T1194] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  252.509166][ T1194] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  252.546566][ T1194] em28xx 3-1:0.0: board has no eeprom
[  252.663363][ T1194] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  252.678241][ T1194] em28xx 3-1:0.0: dvb set to bulk mode.
[  252.705077][ T5877] em28xx 3-1:0.0: Binding DVB extension
[  252.725202][ T1194] usb 3-1: USB disconnect, device number 11
[  252.731986][ T1194] em28xx 3-1:0.0: Disconnecting em28xx
[  252.903305][ T5901] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  252.910975][   T52] Bluetooth: hci2: command 0x0406 tx timeout
[  252.970697][ T5877] em28xx 3-1:0.0: Registering input extension
[  252.978214][ T9268] i2c i2c-0: new_device: Extra parameters
[  252.993251][ T1194] em28xx 3-1:0.0: Closing input extension
[  253.073501][ T1194] em28xx 3-1:0.0: Freeing device
[  253.124176][ T5901] usb 6-1: Using ep0 maxpacket: 32
[  253.165058][ T5901] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[  253.194367][ T5901] usb 6-1: config 0 has no interface number 0
[  253.200543][ T5901] usb 6-1: config 0 interface 12 has no altsetting 0
[  253.236859][ T5901] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  253.275952][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.312855][ T5901] usb 6-1: Product: syz
[  253.320279][ T5901] usb 6-1: Manufacturer: syz
[  253.335400][ T5901] usb 6-1: SerialNumber: syz
[  253.351985][ T5901] usb 6-1: config 0 descriptor??
[  253.706785][ T9283] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  253.756471][ T9285] loop1: detected capacity change from 0 to 512
[  253.802377][ T9285] EXT4-fs: Ignoring removed nomblk_io_submit option
[  253.895519][ T9285] EXT4-fs: Ignoring removed mblk_io_submit option
[  253.940164][ T9285] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  254.020779][ T9285] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  254.032918][ T9290] 9pnet_fd: p9_fd_create_unix (9290): problem connecting socket: ./file0: -111
[  254.135685][ T9285] EXT4-fs (loop1): 1 truncate cleaned up
[  254.177855][ T9285] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  254.260586][ T5901] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[  254.289565][ T5901] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[  254.325894][ T5901] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  254.349084][ T9285] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #2: block 4: comm syz.1.966: lblock 0 mapped to illegal pblock 4 (length 1)
[  254.366222][ T5901] f81534: probe of 6-1:0.12 failed with error -71
[  254.392584][ T5901] usb 6-1: USB disconnect, device number 9
[  254.428817][ T9285] EXT4-fs (loop1): Remounting filesystem read-only
[  254.602297][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.816028][ T9302] loop2: detected capacity change from 0 to 64
[  255.619040][ T9317] loop1: detected capacity change from 0 to 256
[  255.949533][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  255.956663][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  256.629385][ T9313] loop5: detected capacity change from 0 to 40427
[  256.650293][ T9331] loop1: detected capacity change from 0 to 512
[  256.691674][ T9313] F2FS-fs (loop5): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  256.757880][ T9313] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  256.846339][ T9313] F2FS-fs (loop5): invalid crc value
[  256.876567][ T9331] Quota error (device loop1): do_check_range: Getting dqdh_next_free 256 out of range 0-7
[  256.940588][ T9313] F2FS-fs (loop5): Found nat_bits in checkpoint
[  256.988477][ T9331] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  257.083657][ T9331] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.986: Failed to acquire dquot type 1
[  257.168715][ T9313] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  257.219539][ T9313] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  257.272494][ T9331] EXT4-fs error (device loop1): ext4_do_update_inode:5294: inode #16: comm syz.1.986: corrupted inode contents
[  257.357894][ T9331] EXT4-fs error (device loop1): ext4_dirty_inode:6188: inode #16: comm syz.1.986: mark_inode_dirty error
[  257.451588][ T9331] EXT4-fs error (device loop1): ext4_do_update_inode:5294: inode #16: comm syz.1.986: corrupted inode contents
[  257.508351][ T6657] syz-executor: attempt to access beyond end of device
[  257.508351][ T6657] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  257.545556][ T9331] EXT4-fs error (device loop1): __ext4_ext_dirty:208: inode #16: comm syz.1.986: mark_inode_dirty error
[  257.585219][ T6657] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  257.619972][ T9341] loop6: detected capacity change from 0 to 1024
[  257.647563][ T9331] EXT4-fs error (device loop1): ext4_do_update_inode:5294: inode #16: comm syz.1.986: corrupted inode contents
[  257.786766][ T9331] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  257.870768][ T9331] EXT4-fs error (device loop1): ext4_do_update_inode:5294: inode #16: comm syz.1.986: corrupted inode contents
[  257.996318][ T9331] EXT4-fs error (device loop1): ext4_truncate:4314: inode #16: comm syz.1.986: mark_inode_dirty error
[  258.070577][ T9331] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  258.095241][ T9329] loop2: detected capacity change from 0 to 40427
[  258.148704][ T9331] EXT4-fs (loop1): 1 truncate cleaned up
[  258.168239][ T9329] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  258.211497][ T9331] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.232427][ T9329] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  258.297509][ T9329] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x7ffff
[  258.348629][ T9331] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  258.403477][ T9329] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x1f8
[  258.446822][ T9329] F2FS-fs (loop2): invalid crc value
[  258.467560][ T9347] loop6: detected capacity change from 0 to 512
[  258.508555][ T9329] F2FS-fs (loop2): Found nat_bits in checkpoint
[  258.526808][ T9347] EXT4-fs error (device loop6): ext4_iget_extra_inode:4752: inode #15: comm syz.6.992: corrupted in-inode xattr: invalid ea_ino
[  258.603165][ T9347] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.992: couldn't read orphan inode 15 (err -117)
[  258.633172][ T9331] Quota error (device loop1): do_check_range: Getting dqdh_next_free 256 out of range 0-7
[  258.674244][ T9347] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.707118][ T9331] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  258.757943][ T9347] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.992: invalid indirect mapped block 234881024 (level 0)
[  258.774044][ T9331] EXT4-fs error (device loop1): ext4_acquire_dquot:6949: comm syz.1.986: Failed to acquire dquot type 1
[  258.809570][ T9329] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  258.852849][ T9329] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  258.945538][ T6880] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.968379][ T5791] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.098886][ T9329] syz.2.985: attempt to access beyond end of device
[  259.098886][ T9329] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  259.249223][ T9359] loop5: detected capacity change from 0 to 16
[  259.291374][ T9359] erofs: (device loop5): mounted with root inode @ nid 36.
[  259.364371][ T5787] syz-executor: attempt to access beyond end of device
[  259.364371][ T5787] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  259.391546][ T9359] syz.5.995: attempt to access beyond end of device
[  259.391546][ T9359] loop5: rw=524288, sector=1342177272, nr_sectors = 2560 limit=16
[  259.490074][ T5787] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  259.974616][ T9357] loop6: detected capacity change from 0 to 32768
[  260.051104][ T9357] JBD2: Ignoring recovery information on journal
[  260.171714][ T9357] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  260.806287][ T6880] ocfs2: Unmounting device (7,6) on (node local)
[  260.961151][ T9381] loop5: detected capacity change from 0 to 4096
[  261.005783][ T9381] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[  261.122902][ T9381] ntfs3: loop5: ino=19, mi_enum_attr
[  261.128345][ T9381] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  261.212822][ T9381] ntfs3: loop5: ino=1a, mi_enum_attr
[  261.272506][ T9381] ntfs3: loop5: ino=1a, mi_enum_attr
[  261.312888][ T9381] ntfs3: loop5: Failed to initialize $Extend/$Reparse.
[  261.430786][ T9383] loop6: detected capacity change from 0 to 2048
[  261.541046][ T9383] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  261.652926][ T9388] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  261.795223][ T6880] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.931625][ T9394] loop9: detected capacity change from 0 to 7
[  261.960237][ T9398] loop5: detected capacity change from 0 to 512
[  261.987807][ T9394] Dev loop9: unable to read RDB block 7
[  262.032012][ T9394]  loop9: unable to read partition table
[  262.081139][ T9394] loop9: partition table beyond EOD, truncated
[  262.096670][ T9398] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.126050][ T9394] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5)
[  262.174329][ T9398] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  262.284966][ T9398] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  262.454028][ T6657] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.917158][ T9415] kAFS: bad VL server IP address
[  263.030071][ T9401] loop6: detected capacity change from 0 to 40427
[  263.094491][ T9401] F2FS-fs (loop6): invalid crc value
[  263.116613][ T9401] F2FS-fs (loop6): Found nat_bits in checkpoint
[  263.298685][ T9401] F2FS-fs (loop6): Start checkpoint disabled!
[  263.337694][ T9401] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  263.454205][ T9401] syz.6.1010: attempt to access beyond end of device
[  263.454205][ T9401] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  263.744006][ T1100] kworker/u4:7: attempt to access beyond end of device
[  263.744006][ T1100] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  263.800923][ T1100] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  263.835817][ T1100] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  263.926682][ T9407] loop1: detected capacity change from 0 to 32768
[  263.967787][ T9428] loop5: detected capacity change from 0 to 512
[  264.011269][ T9428] EXT4-fs (loop5): Test dummy encryption mode enabled
[  264.044555][ T9407] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  264.085910][ T9428] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  264.168954][ T9428] EXT4-fs (loop5): 1 truncate cleaned up
[  264.220454][ T9428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  264.274122][ T9407] XFS (loop1): Ending clean mount
[  264.494007][ T6657] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.761436][ T5791] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  265.386108][   T28] audit: type=1326 audit(1792739402.068:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.6.1030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15539f559 code=0x7ffc0000
[  265.505285][   T28] audit: type=1326 audit(1792739402.068:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.6.1030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15539f559 code=0x7ffc0000
[  265.590611][ T9459] program syz.2.1032 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  265.618953][   T28] audit: type=1326 audit(1792739402.108:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.6.1030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd15539f559 code=0x7ffc0000
[  265.769637][   T28] audit: type=1326 audit(1792739402.108:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.6.1030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15539f559 code=0x7ffc0000
[  265.893517][   T28] audit: type=1326 audit(1792739402.108:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.6.1030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15539f559 code=0x7ffc0000
[  266.009281][   T28] audit: type=1326 audit(1792739402.108:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.6.1030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fd15539f559 code=0x7ffc0000
[  266.121834][   T28] audit: type=1326 audit(1792739402.108:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.6.1030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15539f559 code=0x7ffc0000
[  266.242234][ T9476] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1039'.
[  266.260978][ T9475] loop1: detected capacity change from 0 to 1024
[  266.271655][   T28] audit: type=1326 audit(1792739402.108:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.6.1030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15539f559 code=0x7ffc0000
[  266.340151][ T9476] gretap0: entered promiscuous mode
[  266.356712][ T9476] macsec1: entered promiscuous mode
[  266.391748][   T28] audit: type=1326 audit(1792739402.108:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.6.1030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fd15539f559 code=0x7ffc0000
[  266.417780][ T9476] macsec1: entered allmulticast mode
[  266.449226][ T9476] gretap0: entered allmulticast mode
[  266.500373][ T9476] gretap0: left allmulticast mode
[  266.530906][ T9476] gretap0: left promiscuous mode
[  266.558319][ T9484] loop6: detected capacity change from 0 to 512
[  266.565560][   T28] audit: type=1326 audit(1792739402.108:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9454 comm="syz.6.1030" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15539f559 code=0x7ffc0000
[  266.617581][ T9475] hfsplus: request for non-existent node 211 in B*Tree
[  266.714088][ T9475] hfsplus: request for non-existent node 211 in B*Tree
[  266.741849][ T9484] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  266.795721][ T9484] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  266.909987][ T1100] hfsplus: b-tree write err: -5, ino 8
[  266.917498][ T9484] EXT4-fs error (device loop6): ext4_acquire_dquot:6949: comm syz.6.1042: Failed to acquire dquot type 0
[  267.140247][ T6880] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  267.300911][ T9497] loop6: detected capacity change from 0 to 16
[  267.328200][ T9497] erofs: (device loop6): mounted with root inode @ nid 36.
[  267.384523][    T9] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  267.424804][ T9497] syz.6.1046: attempt to access beyond end of device
[  267.424804][ T9497] loop6: rw=524288, sector=1342177272, nr_sectors = 2560 limit=16
[  267.594928][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  267.612962][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1048'.
[  267.635734][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  267.668866][    T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  268.425681][ T9503] loop6: detected capacity change from 0 to 131072
[  268.463845][ T9503] F2FS-fs (loop6): Invalid segment/section count (458783, 24 x 150994945)
[  268.472419][ T9503] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  268.495792][ T9503] F2FS-fs (loop6): invalid crc value
[  268.515894][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.545776][ T9503] F2FS-fs (loop6): Found nat_bits in checkpoint
[  268.600552][    T9] usb 6-1: Product: syz
[  268.619791][ T9503] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  268.627055][ T9503] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  268.643730][    T9] usb 6-1: Manufacturer: syz
[  268.673942][    T9] usb 6-1: SerialNumber: syz
[  268.921126][    T9] usb 6-1: 0:2 : does not exist
[  268.955781][    T9] usb 6-1: unit 9 not found!
[  268.996106][    T9] usb 6-1: 4:0: cannot get min/max values for control 1 (id 4)
[  269.073549][    T9] usb 6-1: 4:0: cannot get min/max values for control 3 (id 4)
[  269.111723][    T9] usb 6-1: 4:0: cannot get min/max values for control 5 (id 4)
[  269.166856][    T9] usb 6-1: 4:0: cannot get min/max values for control 6 (id 4)
[  269.217453][    T9] usb 6-1: 4:0: cannot get min/max values for control 10 (id 4)
[  269.295596][    T9] usb 6-1: USB disconnect, device number 10
[  270.130278][ T9525] loop1: detected capacity change from 0 to 16
[  270.213764][ T9525] erofs: (device loop1): mounted with root inode @ nid 36.
[  270.296180][ T9525] erofs: (device loop1): z_erofs_readahead: readahead error at folio 87 @ nid 36
[  270.368979][ T9529] loop5: detected capacity change from 0 to 2048
[  270.385589][ T9525] erofs: (device loop1): z_erofs_readahead: readahead error at folio 86 @ nid 36
[  270.416549][ T9529] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  270.463577][ T9525] syz.1.1057: attempt to access beyond end of device
[  270.463577][ T9525] loop1: rw=524288, sector=8, nr_sectors = 24 limit=16
[  270.517046][ T9529] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  270.576830][ T9525] syz.1.1057: attempt to access beyond end of device
[  270.576830][ T9525] loop1: rw=524288, sector=14425508768, nr_sectors = 8 limit=16
[  270.957368][ T9533] netem: incorrect ge model size
[  270.979475][ T9533] netem: change failed
[  271.080551][ T9539] loop6: detected capacity change from 0 to 256
[  271.803255][ T9553] loop6: detected capacity change from 0 to 1024
[  271.847069][ T9556] loop5: detected capacity change from 0 to 64
[  271.999162][ T9556] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  272.124498][ T9556] MINIX-fs warning: remounting unchecked fs, running fsck is recommended
[  272.588295][ T9567] loop5: detected capacity change from 0 to 8
[  272.735434][ T9567] SQUASHFS error: Unable to read directory block [249:9]
[  272.993261][ T9569] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input23
[  274.207294][ T9598] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  274.325001][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  274.325013][   T28] audit: type=1326 audit(1792739411.018:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9595 comm="syz.2.1089" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ffc99f559 code=0x7ffc0000
[  274.446658][   T28] audit: type=1326 audit(1792739411.018:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9595 comm="syz.2.1089" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ffc99f559 code=0x7ffc0000
[  274.541483][   T28] audit: type=1326 audit(1792739411.048:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9595 comm="syz.2.1089" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5ffc99f559 code=0x7ffc0000
[  274.635041][   T28] audit: type=1326 audit(1792739411.048:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9595 comm="syz.2.1089" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5ffc99f559 code=0x7ffc0000
[  274.707994][ T9610] Line length is too long: Should be less than 4094
[  275.049371][ T9620] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1101'.
[  275.071059][ T9622] loop1: detected capacity change from 0 to 256
[  275.159610][ T9622] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  275.497883][ T9629] loop2: detected capacity change from 0 to 256
[  275.528228][ T9629] exfat: Deprecated parameter 'namecase'
[  275.581305][ T9629] exfat: Deprecated parameter 'utf8'
[  275.639552][ T9629] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d)
[  275.961540][ T9627] loop6: detected capacity change from 0 to 32768
[  276.028942][ T9627] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.1103 (9627)
[  276.130059][ T9627] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  276.186998][ T9627] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  276.236829][ T9627] BTRFS info (device loop6): enabling auto defrag
[  276.272795][ T9627] BTRFS info (device loop6): force clearing of disk cache
[  276.314193][ T9627] BTRFS info (device loop6): ignoring data csums
[  276.320713][ T9627] BTRFS info (device loop6): turning on async discard
[  276.372869][ T9627] BTRFS info (device loop6): setting nodatacow, compression disabled
[  276.420862][ T9627] BTRFS info (device loop6): turning off async discard
[  276.460958][ T9627] BTRFS info (device loop6): disabling free space tree
[  276.780095][ T9627] BTRFS error (device loop6: state EMC): ignoredatacsums must be used with ro mount option
[  276.874399][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1113'.
[  276.974569][ T9664] gretap0: entered promiscuous mode
[  276.988942][ T6880] BTRFS info (device loop6: state EC): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  277.032326][ T9664] macsec1: entered promiscuous mode
[  277.090668][ T9664] macsec1: entered allmulticast mode
[  277.157100][ T9664] gretap0: entered allmulticast mode
[  277.251325][ T9664] gretap0: left allmulticast mode
[  277.312056][ T9664] gretap0: left promiscuous mode
[  277.385915][ T5792] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  277.398968][ T5792] Bluetooth: hci3: Injecting HCI hardware error event
[  277.409007][   T52] Bluetooth: hci3: hardware error 0x00
[  278.369276][ T9674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1117'.
[  278.545331][ T9669] loop6: detected capacity change from 0 to 32768
[  279.156205][ T9671] loop2: detected capacity change from 0 to 40427
[  279.193969][ T9671] F2FS-fs (loop2): invalid crc value
[  279.200506][ T9671] F2FS-fs (loop2): Found nat_bits in checkpoint
[  279.430879][ T9671] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  279.816718][ T5787] syz-executor: attempt to access beyond end of device
[  279.816718][ T5787] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  279.869211][   T52] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  279.932158][ T5787] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  280.116803][ T9703] loop5: detected capacity change from 0 to 512
[  280.959823][ T9714] sctp: [Deprecated]: syz.5.1134 (pid 9714) Use of int in max_burst socket option.
[  280.959823][ T9714] Use struct sctp_assoc_value instead
[  281.352271][ T9727] loop1: detected capacity change from 0 to 512
[  281.642809][ T5949] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  281.852247][ T5949] usb 7-1: config 0 has no interfaces?
[  281.863469][ T5949] usb 7-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01
[  281.910612][ T5949] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.956923][ T5949] usb 7-1: config 0 descriptor??
[  282.215838][ T5901] usb 7-1: USB disconnect, device number 14
[  282.655918][ T9756] use of bytesused == 0 is deprecated and will be removed in the future,
[  282.700413][ T9756] use the actual size instead.
[  283.021966][ T9735] loop1: detected capacity change from 0 to 40427
[  283.109851][ T9735] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  283.170027][ T9735] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  283.232342][ T9735] F2FS-fs (loop1): build fault injection attr: rate: 64, type: 0x7ffff
[  283.292876][ T9735] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x5
[  283.340295][ T9770] loop2: detected capacity change from 0 to 512
[  283.346840][    T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  283.374562][ T9735] F2FS-fs (loop1): invalid crc value
[  283.401142][ T9735] F2FS-fs (loop1): Found nat_bits in checkpoint
[  283.554175][    T9] usb 7-1: Using ep0 maxpacket: 8
[  283.575802][    T9] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  283.623577][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.649551][    T9] usb 7-1: Product: syz
[  283.666381][    T9] usb 7-1: Manufacturer: syz
[  283.671025][    T9] usb 7-1: SerialNumber: syz
[  283.712198][    T9] usb 7-1: config 0 descriptor??
[  283.749388][    T9] gspca_main: se401-2.14.0 probing 047d:5003
[  283.822344][ T9735] F2FS-fs (loop1): Start checkpoint disabled!
[  283.897165][ T9735] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  283.936788][ T9735] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  284.193690][ T9735] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x139/0x910
[  284.242470][ T9785] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  284.266205][ T9735] overlayfs: upper fs does not support tmpfile.
[  284.370417][    T9] input: se401 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input24
[  284.577902][ T5949] usb 7-1: USB disconnect, device number 15
[  284.701369][ T5791] syz-executor: attempt to access beyond end of device
[  284.701369][ T5791] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  284.814423][ T5791] syz-executor: attempt to access beyond end of device
[  284.814423][ T5791] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  284.935923][ T9783] loop5: detected capacity change from 0 to 32768
[  284.971710][ T9783] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.1164 (9783)
[  285.060003][ T9783] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  285.149541][ T9783] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  285.201440][ T9783] BTRFS info (device loop5): enabling auto defrag
[  285.249442][ T9783] BTRFS info (device loop5): force clearing of disk cache
[  285.275732][ T1100] kworker/u4:7: attempt to access beyond end of device
[  285.275732][ T1100] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  285.300867][ T9783] BTRFS info (device loop5): ignoring data csums
[  285.343019][ T9783] BTRFS info (device loop5): turning on async discard
[  285.364395][ T1100] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  285.394921][ T9783] BTRFS info (device loop5): setting nodatacow, compression disabled
[  285.416175][ T1100] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  285.446150][ T9783] BTRFS info (device loop5): turning off async discard
[  285.454990][ T1100] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  285.495763][ T9783] BTRFS info (device loop5): disabling free space tree
[  285.793258][ T9783] BTRFS error (device loop5: state EMC): ignoredatacsums must be used with ro mount option
[  285.974520][ T6657] BTRFS info (device loop5: state EC): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  286.046729][ T2919] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.060695][ T9816] loop6: detected capacity change from 0 to 1024
[  286.410593][ T2919] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.737567][ T2919] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.964450][ T2919] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.062750][ T5901] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  287.282948][ T5901] usb 7-1: too many configurations: 9, using maximum allowed: 8
[  287.333243][ T5901] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  287.342177][ T5901] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  287.485401][ T5901] usb 7-1: config 0 interface 0 has no altsetting 0
[  287.531871][ T5901] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  287.588058][ T5901] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  287.672739][ T5901] usb 7-1: config 0 interface 0 has no altsetting 0
[  287.680147][ T9814] loop2: detected capacity change from 0 to 40427
[  287.703288][ T5901] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  287.736441][ T5901] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  287.808020][ T9814] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  287.820859][ T5901] usb 7-1: config 0 interface 0 has no altsetting 0
[  287.874230][ T5901] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  287.887090][ T9814] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  287.931543][ T5901] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  288.021749][ T9814] F2FS-fs (loop2): invalid crc value
[  288.027341][ T5901] usb 7-1: config 0 interface 0 has no altsetting 0
[  288.063203][ T9814] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root
[  288.090459][ T5901] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  288.119007][ T5901] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  288.175341][ T5901] usb 7-1: config 0 interface 0 has no altsetting 0
[  288.200269][ T9814] F2FS-fs (loop2): Found nat_bits in checkpoint
[  288.242969][ T5901] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  288.279694][ T5901] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  288.358447][ T5901] usb 7-1: config 0 interface 0 has no altsetting 0
[  288.406086][ T5901] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  288.450085][ T5901] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  288.539698][ T5901] usb 7-1: config 0 interface 0 has no altsetting 0
[  288.598732][ T5901] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  288.609196][ T9814] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  288.638981][ T5901] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  288.667348][ T9814] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  288.713227][ T5901] usb 7-1: config 0 interface 0 has no altsetting 0
[  288.755692][ T5901] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  288.764928][ T5877] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  288.804592][ T5901] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  288.854581][ T5901] usb 7-1: Product: syz
[  288.858789][ T5901] usb 7-1: Manufacturer: syz
[  288.920090][ T5901] usb 7-1: SerialNumber: syz
[  288.934130][ T5901] usb 7-1: config 0 descriptor??
[  288.973469][ T5877] usb 6-1: Using ep0 maxpacket: 32
[  288.988306][ T5877] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  289.015489][ T5901] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[  289.067255][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  289.161630][ T5877] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  289.252762][ T5877] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  289.322579][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.378667][ T5877] usb 6-1: config 0 descriptor??
[  289.424349][    C0] usb 7-1: yurex_control_callback - control failed: -71
[  289.509450][ T5901] usb 7-1: USB disconnect, device number 16
[  289.552314][ T5901] yurex 7-1:0.0: USB YUREX #0 now disconnected
[  289.874440][ T5877] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x1
[  289.913937][ T5877] hid-led 0003:0FC5:B080.000B: unknown main item tag 0x2
[  290.273111][ T5877] hid-led: probe of 0003:0FC5:B080.000B failed with error -71
[  290.331915][ T5877] usb 6-1: USB disconnect, device number 11
[  290.769957][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  290.780887][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  290.789821][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  290.798083][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  290.815882][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  290.830020][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  290.991259][ T9859] loop6: detected capacity change from 0 to 1024
[  291.059246][ T9855] rxe_eth0 speed is unknown, defaulting to 1000
[  291.364186][ T2919] hsr_slave_0: left promiscuous mode
[  291.417006][ T2919] hsr_slave_1: left promiscuous mode
[  291.586061][ T9868] loop6: detected capacity change from 0 to 512
[  291.619959][ T2919] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  291.670254][ T2919] batman_adv: batadv0: Removing interface: batadv_slave_0
[  291.707157][ T9868] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8806e098, mo2=0002]
[  291.790588][ T9868] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  291.836468][ T2919] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  291.862751][ T9868] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it
[  291.882767][ T2919] batman_adv: batadv0: Removing interface: batadv_slave_1
[  291.916041][ T2919] bridge_slave_1: left allmulticast mode
[  291.921843][ T2919] bridge_slave_1: left promiscuous mode
[  291.927688][ T9868] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.1185: Corrupt directory, running e2fsck is recommended
[  291.979310][ T2919] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.017609][ T9868] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[  292.049710][ T9868] EXT4-fs error (device loop6): ext4_iget_extra_inode:4752: inode #15: comm syz.6.1185: corrupted in-inode xattr: e_name out of bounds
[  292.093587][ T2919] bridge_slave_0: left allmulticast mode
[  292.099283][ T2919] bridge_slave_0: left promiscuous mode
[  292.127956][ T9868] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.1185: couldn't read orphan inode 15 (err -117)
[  292.146654][ T2919] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.193317][ T9868] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  292.303409][ T9868] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  292.333202][ T2919] veth1_macvtap: left promiscuous mode
[  292.338766][ T2919] veth0_macvtap: left promiscuous mode
[  292.369061][ T9868] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it
[  292.413142][ T2919] veth1_vlan: left promiscuous mode
[  292.418605][ T2919] veth0_vlan: left promiscuous mode
[  292.442881][ T9868] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.1185: Corrupt directory, running e2fsck is recommended
[  292.579801][ T9862] loop5: detected capacity change from 0 to 32768
[  292.619833][ T6880] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.717749][ T9862] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  292.905160][ T5792] Bluetooth: hci1: command tx timeout
[  292.976231][ T9862] XFS (loop5): Ending clean mount
[  293.338414][ T6657] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  293.653023][ T9901] loop6: detected capacity change from 0 to 8
[  294.307444][ T9887] loop2: detected capacity change from 0 to 32768
[  294.408007][ T9887] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  294.446128][ T9911] loop5: detected capacity change from 0 to 1024
[  294.506186][ T9887] JBD2: Ignoring recovery information on journal
[  294.532480][ T9911] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended
[  294.627537][ T9911] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  294.699947][ T9916] loop6: detected capacity change from 0 to 2048
[  294.730658][ T9911] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  294.764802][ T9887] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  294.815398][ T9916] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  294.891947][ T9916] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  294.908891][ T9911] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #15: block 3: comm syz.5.1196: lblock 3 mapped to illegal pblock 3 (length 3)
[  294.996513][ T5792] Bluetooth: hci1: command tx timeout
[  295.029051][ T9911] EXT4-fs (loop5): Remounting filesystem read-only
[  295.048738][ T9916] overlayfs: upper fs needs to support d_type.
[  295.087685][ T9919] EXT4-fs (loop5): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 15; err -5
[  295.120661][ T9916] overlayfs: cleanup of 'work/#9' failed (-2)
[  295.163436][ T9916] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  295.211359][ T9916] overlayfs: failed to set xattr on upper
[  295.263365][ T9916] overlayfs: ...falling back to redirect_dir=nofollow.
[  295.297764][ T9916] overlayfs: ...falling back to metacopy=off.
[  295.327090][ T6657] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  295.341862][ T9916] overlayfs: ...falling back to index=off.
[  295.372873][ T9916] overlayfs: ...falling back to uuid=null.
[  295.586541][ T6880] UDF-fs: error (device loop6): udf_read_inode: (ino 1347) failed !bh
[  295.628463][ T6880] UDF-fs: error (device loop6): udf_read_inode: (ino 1347) failed !bh
[  295.756185][ T5787] ocfs2: Unmounting device (7,2) on (node local)
[  296.050630][ T9923] loop5: detected capacity change from 0 to 8192
[  296.095858][ T9923] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  296.155614][ T9923] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  296.196268][ T9923] REISERFS (device loop5): using ordered data mode
[  296.235105][ T9923] reiserfs: using flush barriers
[  296.286552][ T9923] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7
[  296.335388][ T9923] REISERFS (device loop5): checking transaction log (loop5)
[  296.380972][ T9923] REISERFS (device loop5): Using r5 hash to sort names
[  296.415920][ T9923] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  296.465062][ T9923] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  296.590643][ T2919] team0 (unregistering): Port device team_slave_1 removed
[  296.755227][ T2919] team0 (unregistering): Port device team_slave_0 removed
[  296.948933][ T2919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  297.066265][ T5792] Bluetooth: hci1: command tx timeout
[  297.088062][ T2919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  297.655851][ T9935] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  297.696872][ T9935] iommufd_mock iommufd_mock2: Adding to iommu group 1
[  297.841309][ T2919] bond0 (unregistering): Released all slaves
[  298.448509][ T9944] syzkaller1: tun_chr_ioctl cmd 1074025677
[  298.519962][ T9944] syzkaller1: linktype set to 768
[  298.810070][ T2919] IPVS: stop unused estimator thread 0...
[  298.989800][ T9855] chnl_net:caif_netlink_parms(): no params data found
[  299.143939][ T5792] Bluetooth: hci1: command tx timeout
[  299.320811][ T2919] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.667376][ T2919] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  299.939288][ T2919] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.065761][ T9855] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.115725][ T9855] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.143731][ T9855] bridge_slave_0: entered allmulticast mode
[  300.181071][ T9855] bridge_slave_0: entered promiscuous mode
[  300.300548][ T2919] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.337074][   T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  300.350124][   T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  300.364786][   T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  300.374674][   T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  300.384392][   T52] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  300.391714][   T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  300.520856][ T9855] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.536585][ T9855] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.551592][ T9855] bridge_slave_1: entered allmulticast mode
[  300.574224][ T9855] bridge_slave_1: entered promiscuous mode
[  300.737308][ T9855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  300.791845][ T9855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  300.836695][ T9976] rxe_eth0 speed is unknown, defaulting to 1000
[  301.203642][ T9855] team0: Port device team_slave_0 added
[  301.265897][ T9855] team0: Port device team_slave_1 added
[  301.443907][ T9855] batman_adv: batadv0: Adding interface: batadv_slave_0
[  301.450901][ T9855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  301.605602][ T9855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  301.656783][ T9855] batman_adv: batadv0: Adding interface: batadv_slave_1
[  301.690354][ T9855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  301.831726][ T9855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  302.252820][ T5901] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  302.389910][ T9855] hsr_slave_0: entered promiscuous mode
[  302.436911][ T9855] hsr_slave_1: entered promiscuous mode
[  302.464375][ T5901] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  302.486723][ T5901] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.502825][   T52] Bluetooth: hci0: command tx timeout
[  302.549872][ T5901] usb 6-1: config 0 descriptor??
[  302.589784][ T5901] cp210x 6-1:0.0: cp210x converter detected
[  302.639465][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  302.651856][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  302.660753][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  302.673407][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  302.681079][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  302.689223][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  303.221281][ T5901] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71
[  303.240458][T10001] rxe_eth0 speed is unknown, defaulting to 1000
[  303.253764][ T5901] cp210x 6-1:0.0: GPIO initialisation failed: -71
[  303.315157][ T5901] usb 6-1: cp210x converter now attached to ttyUSB0
[  303.363587][ T5901] usb 6-1: USB disconnect, device number 12
[  303.400792][ T5901] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  303.463449][ T5901] cp210x 6-1:0.0: device disconnected
[  304.394478][ T2919] hsr_slave_0: left promiscuous mode
[  304.419506][ T2919] hsr_slave_1: left promiscuous mode
[  304.441016][ T2919] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  304.473108][ T2919] batman_adv: batadv0: Removing interface: batadv_slave_0
[  304.492583][ T2919] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  304.513954][ T2919] batman_adv: batadv0: Removing interface: batadv_slave_1
[  304.547419][ T2919] bridge_slave_1: left allmulticast mode
[  304.565717][ T2919] bridge_slave_1: left promiscuous mode
[  304.571481][ T2919] bridge0: port 2(bridge_slave_1) entered disabled state
[  304.586816][ T5792] Bluetooth: hci0: command tx timeout
[  304.625843][ T2919] bridge_slave_0: left allmulticast mode
[  304.644385][ T2919] bridge_slave_0: left promiscuous mode
[  304.650163][ T2919] bridge0: port 1(bridge_slave_0) entered disabled state
[  304.742770][ T5792] Bluetooth: hci3: command tx timeout
[  304.784107][ T2919] veth1_macvtap: left promiscuous mode
[  304.789785][ T2919] veth0_macvtap: left promiscuous mode
[  304.824897][ T2919] veth1_vlan: left promiscuous mode
[  304.844509][ T2919] veth0_vlan: left promiscuous mode
[  306.121451][T10042] loop5: detected capacity change from 0 to 32768
[  306.181275][T10042] JBD2: Ignoring recovery information on journal
[  306.309058][T10042] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  306.626603][ T6657] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #0 has bad signature 
[  306.670246][ T5792] Bluetooth: hci0: command tx timeout
[  306.679442][ T6657] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  306.703954][ T6657] OCFS2: File system is now read-only.
[  306.729290][ T6657] (syz-executor,6657,0):_ocfs2_free_suballoc_bits:2511 ERROR: status = -30
[  306.755706][ T6657] (syz-executor,6657,0):_ocfs2_free_clusters:2605 ERROR: status = -30
[  306.781574][ T6657] (syz-executor,6657,0):ocfs2_sync_local_to_main:1001 ERROR: status = -30
[  306.804586][ T6657] (syz-executor,6657,0):ocfs2_sync_local_to_main:1013 ERROR: status = -30
[  306.830469][ T5792] Bluetooth: hci3: command tx timeout
[  306.840998][ T6657] (syz-executor,6657,0):ocfs2_shutdown_local_alloc:449 ERROR: status = -30
[  306.887262][ T2919] team0 (unregistering): Port device team_slave_1 removed
[  306.898991][ T6657] ocfs2: Unmounting device (7,5) on (node local)
[  307.047677][ T2919] team0 (unregistering): Port device team_slave_0 removed
[  307.174810][ T2919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  307.292207][ T2919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  308.077256][ T2919] bond0 (unregistering): Released all slaves
[  308.098340][    T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  308.210233][ T9976] chnl_net:caif_netlink_parms(): no params data found
[  308.291170][ T9855] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  308.326373][    T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  308.366893][    T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  308.395839][ T9855] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  308.418111][    T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  308.442781][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.474229][ T9855] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  308.494898][T10054] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  308.555478][    T9] usb 6-1: Quirk or no altest; falling back to MIDI 1.0
[  308.597552][ T9855] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  308.743275][ T5792] Bluetooth: hci0: command tx timeout
[  308.881008][T10001] chnl_net:caif_netlink_parms(): no params data found
[  308.904187][ T5792] Bluetooth: hci3: command tx timeout
[  308.932060][    T9] usb 6-1: USB disconnect, device number 13
[  309.173532][ T9976] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.180753][ T9976] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.231343][ T9976] bridge_slave_0: entered allmulticast mode
[  309.251539][ T9976] bridge_slave_0: entered promiscuous mode
[  309.296877][ T9976] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.326149][ T9976] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.349828][ T9976] bridge_slave_1: entered allmulticast mode
[  309.372236][ T9976] bridge_slave_1: entered promiscuous mode
[  309.608393][ T2919] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.694836][ T9976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  309.737961][ T9976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  309.850457][ T2919] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.956902][T10001] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.982327][T10001] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.019284][T10001] bridge_slave_0: entered allmulticast mode
[  310.037522][T10001] bridge_slave_0: entered promiscuous mode
[  310.225339][ T2919] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.257654][T10001] bridge0: port 2(bridge_slave_1) entered blocking state
[  310.273226][T10083] loop5: detected capacity change from 0 to 128
[  310.279739][T10001] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.332992][T10001] bridge_slave_1: entered allmulticast mode
[  310.372757][T10001] bridge_slave_1: entered promiscuous mode
[  310.438529][ T9976] team0: Port device team_slave_0 added
[  310.486240][ T2919] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.593727][ T9976] team0: Port device team_slave_1 added
[  310.632246][T10001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  310.662468][T10001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  310.800918][ T9976] batman_adv: batadv0: Adding interface: batadv_slave_0
[  310.832251][ T9976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.880120][ T9976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  310.910494][T10001] team0: Port device team_slave_0 added
[  310.983318][ T5792] Bluetooth: hci3: command tx timeout
[  311.037848][ T9976] batman_adv: batadv0: Adding interface: batadv_slave_1
[  311.069446][ T9976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.159124][ T9976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  311.201153][T10091] input: syz1 as /devices/virtual/input/input25
[  311.249743][T10001] team0: Port device team_slave_1 added
[  311.455645][T10001] batman_adv: batadv0: Adding interface: batadv_slave_0
[  311.479620][T10001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.580952][T10001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  311.687119][ T9855] 8021q: adding VLAN 0 to HW filter on device bond0
[  311.731780][T10001] batman_adv: batadv0: Adding interface: batadv_slave_1
[  311.766324][T10001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  311.882876][T10001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  311.981006][ T9976] hsr_slave_0: entered promiscuous mode
[  312.043536][ T9976] hsr_slave_1: entered promiscuous mode
[  312.081206][ T9976] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  312.131681][ T9976] Cannot create hsr debugfs directory
[  312.200997][ T2919] tipc: Left network mode
[  312.599386][ T9855] 8021q: adding VLAN 0 to HW filter on device team0
[  312.819766][T10001] hsr_slave_0: entered promiscuous mode
[  312.846960][T10001] hsr_slave_1: entered promiscuous mode
[  312.869177][T10001] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  312.886522][T10001] Cannot create hsr debugfs directory
[  312.990032][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.997240][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  313.058006][T10115] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  313.162368][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state
[  313.169572][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state
[  313.415495][T10117] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1245'.
[  313.915387][ T2919] dvmrp8 (unregistering): left allmulticast mode
[  314.225894][ T9976] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  314.371420][ T9976] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  314.431624][ T9976] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  314.545509][ T9976] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  314.717454][    T9] kernel write not supported for file /snd/seq (pid: 9 comm: kworker/0:1)
[  315.311400][ T9855] 8021q: adding VLAN 0 to HW filter on device batadv0
[  315.372759][T10001] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  315.444252][T10001] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  315.589884][ T2919] hsr_slave_0: left promiscuous mode
[  315.620893][ T2919] hsr_slave_1: left promiscuous mode
[  315.629524][ T2919] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  315.658270][ T2919] batman_adv: batadv0: Removing interface: batadv_slave_0
[  315.673564][ T2919] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  315.693617][ T2919] batman_adv: batadv0: Removing interface: batadv_slave_1
[  315.711802][ T2919] bridge_slave_1: left allmulticast mode
[  315.721309][ T2919] bridge_slave_1: left promiscuous mode
[  315.740160][ T2919] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.768806][ T2919] bridge_slave_0: left allmulticast mode
[  315.776006][ T2919] bridge_slave_0: left promiscuous mode
[  315.781802][ T2919] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.854812][ T2919] veth1_macvtap: left promiscuous mode
[  315.860445][ T2919] veth0_macvtap: left promiscuous mode
[  315.882558][ T2919] veth1_vlan: left promiscuous mode
[  315.894626][ T2919] veth0_vlan: left promiscuous mode
[  316.610197][T10155] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1251'.
[  317.180652][ T2919] team0 (unregistering): Port device team_slave_1 removed
[  317.257668][ T2919] team0 (unregistering): Port device team_slave_0 removed
[  317.328142][ T2919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  317.403493][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  317.409827][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  317.445467][ T2919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  318.018601][ T2919] bond0 (unregistering): Released all slaves
[  318.107879][T10001] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  318.165461][T10001] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  318.251633][ T9976] 8021q: adding VLAN 0 to HW filter on device bond0
[  318.448812][ T9976] 8021q: adding VLAN 0 to HW filter on device team0
[  318.578063][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.585267][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state
[  318.730843][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.738084][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  318.989891][ T9976] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  319.064822][ T9976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  319.302224][ T9855] veth0_vlan: entered promiscuous mode
[  319.420346][T10001] 8021q: adding VLAN 0 to HW filter on device bond0
[  319.479521][ T9855] veth1_vlan: entered promiscuous mode
[  319.487253][T10177] loop5: detected capacity change from 0 to 512
[  319.581375][T10177] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  319.653492][T10001] 8021q: adding VLAN 0 to HW filter on device team0
[  319.676425][ T9855] veth0_macvtap: entered promiscuous mode
[  319.735851][T10177] FAT-fs (loop5): error, corrupted directory (invalid entries)
[  319.748696][ T9855] veth1_macvtap: entered promiscuous mode
[  319.807209][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.814407][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state
[  319.986451][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.993663][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state
[  320.024384][ T1100] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  320.104772][ T9855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  320.161135][ T9855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.190553][ T9855] batman_adv: batadv0: Interface activated: batadv_slave_0
[  320.259414][ T9855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  320.302737][ T9855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  320.324132][ T9855] batman_adv: batadv0: Interface activated: batadv_slave_1
[  320.456437][ T9855] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  320.499796][ T9855] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  320.556517][ T9855] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  320.587378][ T9855] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  320.617597][T10194] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  320.641052][ T9976] 8021q: adding VLAN 0 to HW filter on device batadv0
[  321.246379][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.308831][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  321.488778][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.525001][T10001] 8021q: adding VLAN 0 to HW filter on device batadv0
[  321.561814][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.114206][ T9976] veth0_vlan: entered promiscuous mode
[  322.220093][ T9976] veth1_vlan: entered promiscuous mode
[  322.395281][ T9976] veth0_macvtap: entered promiscuous mode
[  322.446255][ T9976] veth1_macvtap: entered promiscuous mode
[  322.548257][ T9976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  322.612218][ T9976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.662114][ T9976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  322.724151][ T9976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.794090][ T9976] batman_adv: batadv0: Interface activated: batadv_slave_0
[  322.870329][ T9976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  322.930616][ T9976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  322.983473][ T9976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  323.033040][ T9976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  323.094164][ T9976] batman_adv: batadv0: Interface activated: batadv_slave_1
[  323.191289][ T9976] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  323.228646][ T9976] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  323.269791][ T9976] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  323.311752][ T9976] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  323.454957][T10001] veth0_vlan: entered promiscuous mode
[  323.687803][T10233] loop5: detected capacity change from 0 to 32768
[  323.719053][T10001] veth1_vlan: entered promiscuous mode
[  323.769627][T10233] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  323.784215][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.792091][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.956469][T10233] XFS (loop5): Ending clean mount
[  324.017267][T10001] veth0_macvtap: entered promiscuous mode
[  324.029560][T10233] XFS (loop5): Quotacheck needed: Please wait.
[  324.099280][T10001] veth1_macvtap: entered promiscuous mode
[  324.138487][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  324.185501][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  324.199669][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  324.284886][T10233] XFS (loop5): Quotacheck: Done.
[  324.294994][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.351831][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  324.392721][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.438870][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  324.469824][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.524793][T10001] batman_adv: batadv0: Interface activated: batadv_slave_0
[  324.586360][ T6657] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  324.635869][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  324.693552][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.730686][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  324.757841][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.795510][T10001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  324.842762][T10001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.886218][T10001] batman_adv: batadv0: Interface activated: batadv_slave_1
[  324.948591][T10001] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  324.992826][T10001] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  325.001570][T10001] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  325.055524][T10001] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  325.193305][T10269] rxe_eth0 speed is unknown, defaulting to 1000
[  325.523444][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.531336][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.779148][ T2919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.856825][ T2919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.810262][T10295] loop5: detected capacity change from 0 to 16
[  326.852335][T10295] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  327.423902][T10303] tun0: tun_chr_ioctl cmd 2147767507
[  327.928096][T10312] loop7: detected capacity change from 0 to 4096
[  327.997626][T10312] EXT4-fs: Ignoring removed i_version option
[  328.079228][T10312] EXT4-fs: Ignoring removed oldalloc option
[  328.105409][T10320] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  328.184949][T10312] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  328.240732][T10312] EXT4-fs (loop7): Test dummy encryption mode enabled
[  328.272859][T10312] EXT4-fs (loop7): can't mount with data_err=abort, fs mounted w/o journal
[  329.280054][T10336] loop5: detected capacity change from 0 to 2048
[  329.289865][T10338] loop8: detected capacity change from 0 to 2048
[  329.393182][T10336] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  329.413277][T10338] UDF-fs: error (device loop8): udf_process_sequence: Primary Volume Descriptor not found!
[  329.525451][T10336] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  329.576266][T10338] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  329.693545][T10336] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  330.533627][T10356] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1287'.
[  331.238315][T10378] loop9: detected capacity change from 0 to 512
[  331.419004][T10381] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1296'.
[  331.489550][T10381] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.497244][T10381] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.620806][T10381] bridge0: entered allmulticast mode
[  331.688664][T10386] loop8: detected capacity change from 0 to 4096
[  331.786483][T10386] ntfs3: loop8: Different NTFS sector size (1024) and media sector size (512).
[  331.914820][T10386] ntfs3: loop8: Mark volume as dirty due to NTFS errors
[  332.226827][T10398] overlayfs: missing 'lowerdir'
[  333.873182][T10429] ip_tables: iptables: counters copy to user failed while replacing table
[  333.988754][T10431] loop8: detected capacity change from 0 to 16
[  334.074274][T10431] erofs: (device loop8): mounted with root inode @ nid 36.
[  334.191334][T10431] erofs: (device loop8): erofs_find_target_block: corrupted dir block 0 @ nid 36
[  334.290163][T10437] erofs: (device loop8): erofs_map_blocks_flatmode: internal error @ nid: 36 (size 18446462598732841076), m_la 0x1000
[  334.450417][T10441] veth1_macvtap: left promiscuous mode
[  334.477374][T10441] macsec0: entered allmulticast mode
[  334.556260][T10442] veth1_macvtap: entered promiscuous mode
[  334.662282][T10442] veth1_macvtap: entered allmulticast mode
[  334.718775][T10442] macsec0: left allmulticast mode
[  334.753139][T10442] veth1_macvtap: left allmulticast mode
[  334.805664][T10444] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1318'.
[  335.513666][T10466] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1326'.
[  335.554039][T10469] loop9: detected capacity change from 0 to 8
[  336.597002][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1337'.
[  337.137528][T10476] loop7: detected capacity change from 0 to 32768
[  337.241806][T10476] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  337.387503][T10476] XFS (loop7): Ending clean mount
[  337.449348][T10519] loop9: detected capacity change from 0 to 4096
[  337.531141][T10519] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  337.826632][ T9855] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  337.945834][T10532] loop5: detected capacity change from 0 to 1024
[  338.058823][T10001] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  338.351437][T10532] hfsplus: xattr searching failed
[  338.406212][T10532] hfsplus: b-tree write err: -5, ino 3
[  338.634297][   T50] hfsplus: b-tree write err: -5, ino 3
[  339.927233][ T5877] kernel write not supported for file /61/oom_adj (pid: 5877 comm: kworker/0:3)
[  340.373662][   T28] audit: type=1326 audit(1792739477.068:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10585 comm="syz.8.1364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907019f559 code=0x7ffc0000
[  340.411863][    T8] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  340.535878][   T28] audit: type=1326 audit(1792739477.088:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10585 comm="syz.8.1364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907019f559 code=0x7ffc0000
[  340.653090][    T8] usb 8-1: Using ep0 maxpacket: 16
[  340.692378][    T8] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  340.726952][   T28] audit: type=1326 audit(1792739477.098:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10585 comm="syz.8.1364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f907019f559 code=0x7ffc0000
[  340.761748][    T8] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  340.851380][    T8] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  340.891280][    T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.910836][   T28] audit: type=1326 audit(1792739477.098:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10585 comm="syz.8.1364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907019f559 code=0x7ffc0000
[  340.962394][    T8] usb 8-1: Product: syz
[  340.986552][    T8] usb 8-1: Manufacturer: syz
[  341.011740][    T8] usb 8-1: SerialNumber: syz
[  341.108596][   T28] audit: type=1326 audit(1792739477.098:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10585 comm="syz.8.1364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907019f559 code=0x7ffc0000
[  341.170591][T10567] loop5: detected capacity change from 0 to 32768
[  341.314231][    T8] usb 8-1: 0:2 : does not exist
[  341.331872][   T28] audit: type=1326 audit(1792739477.118:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10585 comm="syz.8.1364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f907019f559 code=0x7ffc0000
[  341.424549][    T8] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[  341.565786][   T28] audit: type=1326 audit(1792739477.118:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10585 comm="syz.8.1364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907019f559 code=0x7ffc0000
[  341.629963][    T8] usb 8-1: USB disconnect, device number 2
[  341.828920][   T28] audit: type=1326 audit(1792739477.118:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10585 comm="syz.8.1364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f907019f559 code=0x7ffc0000
[  341.863752][T10197] udevd[10197]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  342.025592][   T28] audit: type=1326 audit(1792739477.118:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10585 comm="syz.8.1364" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907019f559 code=0x7ffc0000
[  344.513269][T10632] loop7: detected capacity change from 0 to 32768
[  344.580439][T10632] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  344.746669][T10632] XFS (loop7): Ending clean mount
[  344.817011][T10632] XFS (loop7): Quotacheck needed: Please wait.
[  345.047134][T10632] XFS (loop7): Quotacheck: Done.
[  345.419012][ T9855] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  345.609162][T10689] pimreg: tun_chr_ioctl cmd 1074025677
[  345.615198][T10689] pimreg: linktype set to 769
[  345.793845][T10697] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  346.212923][T10710] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1401'.
[  346.464886][T10719] loop5: detected capacity change from 0 to 256
[  346.574950][T10719] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  346.869519][T10719] syz.5.1404: attempt to access beyond end of device
[  346.869519][T10719] loop5: rw=524288, sector=440, nr_sectors = 256 limit=256
[  347.012069][T10719] syz.5.1404: attempt to access beyond end of device
[  347.012069][T10719] loop5: rw=524288, sector=696, nr_sectors = 256 limit=256
[  347.120962][T10719] syz.5.1404: attempt to access beyond end of device
[  347.120962][T10719] loop5: rw=0, sector=440, nr_sectors = 8 limit=256
[  347.190317][T10729] binder: 10726:10729 ioctl c018620c 200000000000 returned -22
[  347.258005][T10719] syz.5.1404: attempt to access beyond end of device
[  347.258005][T10719] loop5: rw=0, sector=440, nr_sectors = 8 limit=256
[  347.813403][T10747] loop5: detected capacity change from 0 to 128
[  347.895178][T10747] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  347.987416][T10747] ext4 filesystem being mounted at /387/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  348.134654][   T28] audit: type=1107 audit(1792739484.828:35): pid=10756 uid=0 auid=4 ses=1 subj=unconfined msg=''
[  348.289082][ T6657] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  348.477411][T10764] netlink: 'syz.7.1416': attribute type 3 has an invalid length.
[  349.096363][T10783] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  349.428883][T10791] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  349.980168][T10809] loop9: detected capacity change from 0 to 1024
[  350.066878][T10809] EXT4-fs: Ignoring removed bh option
[  350.072328][T10809] EXT4-fs: Ignoring removed oldalloc option
[  350.164468][T10809] EXT4-fs: Ignoring removed nobh option
[  350.230599][T10809] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  350.317028][T10809] EXT4-fs (loop9): bad geometry: bigalloc file system with non-zero first_data_block
[  350.317028][T10809] 
[  350.530579][T10818] rxe_eth0 speed is unknown, defaulting to 1000
[  350.576282][T10823] loop8: detected capacity change from 0 to 8
[  350.583449][T10821] kAFS: bad VL server IP address
[  350.701067][T10823] squashfs image failed sanity check
[  350.803961][ T5877] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  350.895052][T10827] loop9: detected capacity change from 0 to 64
[  351.182975][ T5877] usb 8-1: config 0 has no interfaces?
[  351.189888][T10832] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1443'.
[  351.361443][ T5877] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  351.437841][ T5877] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.533159][ T5877] usb 8-1: Product: syz
[  351.537368][ T5877] usb 8-1: Manufacturer: syz
[  351.585894][ T5877] usb 8-1: SerialNumber: syz
[  351.633599][ T5877] usb 8-1: config 0 descriptor??
[  352.095377][ T5877] usb 8-1: USB disconnect, device number 3
[  352.520500][T10865] input: syz1 as /devices/virtual/input/input27
[  352.838901][T10869] loop9: detected capacity change from 0 to 2048
[  353.046091][T10869] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  353.387119][T10001] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.584998][T10884] loop7: detected capacity change from 0 to 8192
[  353.754438][T10886] loop5: detected capacity change from 0 to 4096
[  353.866134][T10886] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[  354.152484][T10886] ntfs3: loop5: ino=19, mi_enum_attr
[  354.219470][T10886] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  354.335390][T10886] ntfs3: loop5: ino=1a, mi_enum_attr
[  354.408401][T10886] ntfs3: loop5: ino=1a, mi_enum_attr
[  354.454798][T10886] ntfs3: loop5: Failed to initialize $Extend/$Reparse.
[  354.753834][T10886] ntfs3: loop5: ino=5, "/" directory corrupted
[  356.147199][T10930] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1473'.
[  356.658423][T10943] loop7: detected capacity change from 0 to 256
[  356.773775][T10943] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  357.016612][T10950] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008)
[  357.174045][T10950] FAT-fs (loop7): Filesystem has been set read-only
[  357.257328][T10950] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008)
[  358.205636][   T28] audit: type=1326 audit(1792739494.888:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10968 comm="syz.7.1485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42a99f559 code=0x7ffc0000
[  358.239939][T10946] loop8: detected capacity change from 0 to 40427
[  358.365601][T10946] F2FS-fs (loop8): invalid crc value
[  358.423314][   T28] audit: type=1326 audit(1792739494.888:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10968 comm="syz.7.1485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42a99f559 code=0x7ffc0000
[  358.465141][T10946] F2FS-fs (loop8): Found nat_bits in checkpoint
[  358.642824][   T28] audit: type=1326 audit(1792739494.898:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10968 comm="syz.7.1485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42a99f559 code=0x7ffc0000
[  358.768500][T10946] F2FS-fs (loop8): Start checkpoint disabled!
[  358.777795][T10980] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1488'.
[  358.842688][   T28] audit: type=1326 audit(1792739494.898:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10968 comm="syz.7.1485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42a99f559 code=0x7ffc0000
[  358.985988][T10946] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  359.052729][   T28] audit: type=1326 audit(1792739494.948:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10968 comm="syz.7.1485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe42a99f559 code=0x7ffc0000
[  359.265424][   T28] audit: type=1326 audit(1792739494.948:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10968 comm="syz.7.1485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe42a99f2c2 code=0x7ffc0000
[  359.458345][   T28] audit: type=1326 audit(1792739494.948:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10968 comm="syz.7.1485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe42a99f357 code=0x7ffc0000
[  359.621245][   T28] audit: type=1326 audit(1792739494.948:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10968 comm="syz.7.1485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe42a95c251 code=0x7ffc0000
[  359.672854][T10995] Bluetooth: MGMT ver 1.22
[  359.697227][T10995] Bluetooth: hci0: Invalid link key type 149 for 00:00:09:00:00:00
[  359.733045][ T1100] kworker/u4:7: attempt to access beyond end of device
[  359.733045][ T1100] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  359.773001][   T28] audit: type=1326 audit(1792739494.948:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10968 comm="syz.7.1485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe42a9a0349 code=0x7ffc0000
[  359.808508][T10975] loop9: detected capacity change from 0 to 32768
[  359.823063][ T1100] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  359.965047][T10975] JBD2: Ignoring recovery information on journal
[  360.018247][   T28] audit: type=1326 audit(1792739494.948:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10968 comm="syz.7.1485" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe42a99f559 code=0x7ffc0000
[  360.138292][T11004] loop5: detected capacity change from 0 to 64
[  360.167179][T10975] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  360.726204][T11011] loop7: detected capacity change from 0 to 1024
[  360.825849][T11011] EXT4-fs error (device loop7): __ext4_fill_super:5517: comm syz.7.1497: inode #2: comm syz.7.1497: iget: illegal inode #
[  360.952936][T11011] EXT4-fs (loop7): get root inode failed
[  360.958656][T11011] EXT4-fs (loop7): mount failed
[  361.023966][T10001] ocfs2: Unmounting device (7,9) on (node local)
[  362.153541][T11034] Bluetooth: MGMT ver 1.22
[  363.551581][T11080] loop7: detected capacity change from 0 to 1024
[  363.589634][   T28] kauditd_printk_skb: 20 callbacks suppressed
[  363.589648][   T28] audit: type=1400 audit(1792739500.248:66): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="foo" pid=11077 comm="syz.8.1517" name="foo" offset=35
[  364.854814][T11114] loop9: detected capacity change from 0 to 128
[  365.053235][ T7805] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  365.142222][T11117] loop5: detected capacity change from 0 to 4096
[  365.242696][T11117] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512).
[  365.275991][ T7805] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  365.336191][ T7805] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.397595][T11117] ntfs3: loop5: ino=19, mi_enum_attr
[  365.420870][ T7805] usb 9-1: config 0 descriptor??
[  365.462363][T11117] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  365.499289][ T7805] gspca_main: cpia1-2.14.0 probing 0813:0001
[  365.539859][T11117] ntfs3: loop5: ino=19, mi_enum_attr
[  365.588727][T11117] ntfs3: loop5: Failed to initialize $Extend/$ObjId.
[  365.929429][ T7805] cpia1 9-1:0.0: unexpected state after lo power cmd: 00
[  366.014584][ T5877] kernel write not supported for file /input/event2 (pid: 5877 comm: kworker/0:3)
[  366.126227][ T7805] gspca_cpia1: usb_control_msg 01, error -32
[  366.171624][ T7805] gspca_cpia1: usb_control_msg 01, error -71
[  366.216328][ T7805] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0)
[  366.309169][ T7805] usb 9-1: USB disconnect, device number 2
[  366.706292][T11148] loop7: detected capacity change from 0 to 512
[  366.803411][T11148] EXT4-fs error (device loop7): ext4_iget_extra_inode:4752: inode #15: comm syz.7.1538: corrupted in-inode xattr: invalid ea_ino
[  366.916971][T11148] EXT4-fs error (device loop7): ext4_orphan_get:1413: comm syz.7.1538: couldn't read orphan inode 15 (err -117)
[  367.049309][T11148] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  367.375837][ T9855] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.468835][T11174] loop5: detected capacity change from 0 to 131072
[  368.508298][T11174] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (512, 24)
[  368.516297][T11174] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  368.524603][T11174] F2FS-fs (loop5): Test dummy encryption mode enabled
[  368.543578][T11174] F2FS-fs (loop5): invalid crc value
[  368.592357][T11174] F2FS-fs (loop5): Found nat_bits in checkpoint
[  368.639290][T11174] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  368.660806][T11174] F2FS-fs (loop5): Start checkpoint disabled!
[  368.711928][T11174] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  368.719195][T11174] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  369.397194][ T2980] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  370.098336][T11211] netlink: 201392 bytes leftover after parsing attributes in process `syz.7.1557'.
[  370.180298][T11211] netlink: zone id is out of range
[  371.552443][T11215] loop8: detected capacity change from 0 to 40427
[  371.663649][T11215] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504)
[  371.670653][T11215] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  371.772762][T11215] F2FS-fs (loop8): build fault injection attr: rate: 17008, type: 0x7ffff
[  371.781338][T11215] F2FS-fs (loop8): build fault injection attr: rate: 0, type: 0x1f8
[  371.927183][T11215] F2FS-fs (loop8): invalid crc value
[  371.997289][T11215] F2FS-fs (loop8): Found nat_bits in checkpoint
[  372.256267][T11224] loop9: detected capacity change from 0 to 40427
[  372.276923][T11215] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  372.332882][T11215] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  372.344460][T11224] F2FS-fs (loop9): Insane cp_payload (553648128 >= 504)
[  372.351520][T11224] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  372.456346][T11224] F2FS-fs (loop9): build fault injection attr: rate: 17008, type: 0x7ffff
[  372.529238][T11224] F2FS-fs (loop9): build fault injection attr: rate: 0, type: 0x1f8
[  372.551811][T11215] F2FS-fs (loop8): Stopped filesystem due to reason: 0
[  372.603130][T11224] F2FS-fs (loop9): invalid crc value
[  372.670263][T11224] F2FS-fs (loop9): Found nat_bits in checkpoint
[  372.999350][T11224] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  373.062242][T11224] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  375.671730][T11330] loop9: detected capacity change from 0 to 256
[  375.873955][T11330] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000ff2)
[  375.942071][T11330] FAT-fs (loop9): Filesystem has been set read-only
[  376.091132][T11342] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1595'.
[  376.328420][T11346] loop8: detected capacity change from 0 to 512
[  377.023087][T11359] loop8: detected capacity change from 0 to 2048
[  377.173469][T11359] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  377.460975][ T6657] bond0: (slave syz_tun): Releasing backup interface
[  377.496644][ T9976] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.038551][ T2919] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.456721][ T2919] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.844620][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  378.851213][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  378.929635][ T2919] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.536402][ T2919] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.599242][T11411] scsi_dev_info_list_add_str: bad dev info string 'Q^' '(null)' '(null)'
[  380.455675][   T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  380.476848][   T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  380.486717][   T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  380.502551][   T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  380.514982][   T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  380.525050][   T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  380.853454][T11436] xt_hashlimit: size too large, truncated to 1048576
[  380.877465][T11438] loop8: detected capacity change from 0 to 512
[  380.943513][T11439] xt_hashlimit: size too large, truncated to 1048576
[  381.004750][T11438] EXT4-fs error (device loop8): ext4_orphan_get:1408: inode #15: comm syz.8.1617: inode has both inline data and extents flags
[  381.110744][T11438] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.1617: couldn't read orphan inode 15 (err -117)
[  381.218008][T11438] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  381.260761][T11428] rxe_eth0 speed is unknown, defaulting to 1000
[  381.300316][T11445] loop9: detected capacity change from 0 to 512
[  381.442817][T11445] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  381.562816][T11445] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  381.613477][ T9976] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.986859][T10001] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.333510][T11456] loop9: detected capacity change from 0 to 512
[  382.493750][T11456] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  382.584755][   T52] Bluetooth: hci2: command tx timeout
[  382.612173][T11456] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  383.039174][T10001] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.667798][   T52] Bluetooth: hci2: command tx timeout
[  384.761787][T11466] loop8: detected capacity change from 0 to 40427
[  384.887733][T11466] F2FS-fs (loop8): invalid crc value
[  384.964298][T11466] F2FS-fs (loop8): Found nat_bits in checkpoint
[  384.975606][ T2919] hsr_slave_0: left promiscuous mode
[  385.064467][ T2919] hsr_slave_1: left promiscuous mode
[  385.136181][ T2919] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  385.182904][ T2919] batman_adv: batadv0: Removing interface: batadv_slave_0
[  385.213243][T11466] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  385.255478][ T2919] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  385.305820][ T2919] batman_adv: batadv0: Removing interface: batadv_slave_1
[  385.357314][ T2919] bridge_slave_1: left allmulticast mode
[  385.394850][ T2919] bridge_slave_1: left promiscuous mode
[  385.400692][ T2919] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.490543][ T2919] bridge_slave_0: left allmulticast mode
[  385.510637][ T9976] syz-executor: attempt to access beyond end of device
[  385.510637][ T9976] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  385.557222][ T2919] bridge_slave_0: left promiscuous mode
[  385.590184][ T2919] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.634734][ T9976] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  385.876451][ T2919] veth1_macvtap: left promiscuous mode
[  385.882129][ T2919] veth0_macvtap: left promiscuous mode
[  385.935750][ T2919] veth1_vlan: left promiscuous mode
[  385.941122][ T2919] veth0_vlan: left promiscuous mode
[  386.742841][   T52] Bluetooth: hci2: command tx timeout
[  388.435625][ T2919] team0 (unregistering): Port device team_slave_1 removed
[  388.586475][ T2919] team0 (unregistering): Port device team_slave_0 removed
[  388.746236][ T2919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  388.827091][   T52] Bluetooth: hci2: command tx timeout
[  388.912442][ T2919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  390.015944][ T2919] bond0 (unregistering): Released all slaves
[  390.190147][T11428] chnl_net:caif_netlink_parms(): no params data found
[  390.772223][T11428] bridge0: port 1(bridge_slave_0) entered blocking state
[  390.862275][T11428] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.900266][T11428] bridge_slave_0: entered allmulticast mode
[  390.962921][T11428] bridge_slave_0: entered promiscuous mode
[  390.990100][T11428] bridge0: port 2(bridge_slave_1) entered blocking state
[  391.084419][T11428] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.091713][T11428] bridge_slave_1: entered allmulticast mode
[  391.195382][T11428] bridge_slave_1: entered promiscuous mode
[  391.350686][T11536] netlink: 43 bytes leftover after parsing attributes in process `syz.9.1635'.
[  391.423052][T11428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  391.525866][T11428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  391.749989][T11428] team0: Port device team_slave_0 added
[  391.841978][T11428] team0: Port device team_slave_1 added
[  392.019986][T11518] loop7: detected capacity change from 0 to 32768
[  392.029375][T11428] batman_adv: batadv0: Adding interface: batadv_slave_0
[  392.079914][T11428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  392.181406][T11518] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt
[  392.181406][T11518] 
[  392.268231][T11518] ERROR: (device loop7): remounting filesystem as read-only
[  392.311683][T11428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  392.338727][T11518] xtLookup: xtSearch returned -5
[  392.372147][T11518] free_index: error reading directory table
[  392.399454][T11428] batman_adv: batadv0: Adding interface: batadv_slave_1
[  392.434055][T11518] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt
[  392.434055][T11518] 
[  392.467806][T11428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  392.526436][T11518] xtLookup: xtSearch returned -5
[  392.531421][T11518] free_index: error reading directory table
[  392.582187][T11518] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt
[  392.582187][T11518] 
[  392.630982][T11428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  392.648310][T11518] xtLookup: xtSearch returned -5
[  392.677255][T11518] free_index: error reading directory table
[  392.713914][T11518] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt
[  392.713914][T11518] 
[  392.789473][T11518] xtLookup: xtSearch returned -5
[  392.833015][T11518] free_index: error reading directory table
[  392.839004][T11518] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt
[  392.839004][T11518] 
[  392.928374][T11428] hsr_slave_0: entered promiscuous mode
[  392.937148][T11518] xtLookup: xtSearch returned -5
[  392.942125][T11518] free_index: error reading directory table
[  393.003361][T11428] hsr_slave_1: entered promiscuous mode
[  393.013779][T11518] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt
[  393.013779][T11518] 
[  393.053290][T11428] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  393.075611][T11518] xtLookup: xtSearch returned -5
[  393.080598][T11518] add_index: get/read_metapage failed!
[  393.091065][T11570] loop8: detected capacity change from 0 to 512
[  393.097505][T11428] Cannot create hsr debugfs directory
[  393.148218][T11518] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt
[  393.148218][T11518] 
[  393.159400][T11570] EXT4-fs: Ignoring removed nobh option
[  393.250728][T11518] xtLookup: xtSearch returned -5
[  393.277067][T11570] fscrypt (loop8, inode 2): Error -61 getting encryption context
[  393.291017][T11518] free_index: error reading directory table
[  393.327285][T11570] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -61
[  393.342532][T11518] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt
[  393.342532][T11518] 
[  393.413166][T11570] EXT4-fs error (device loop8): ext4_orphan_get:1408: inode #13: comm syz.8.1644: inode has both inline data and extents flags
[  393.435823][T11518] xtLookup: xtSearch returned -5
[  393.460911][T11518] free_index: error reading directory table
[  393.510242][T11518] ERROR: (device loop7): xtSearch: XT_GETPAGE: xtree page corrupt
[  393.510242][T11518] 
[  393.532448][T11570] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.1644: couldn't read orphan inode 13 (err -117)
[  393.570267][T11518] xtLookup: xtSearch returned -5
[  393.606117][T11518] free_index: error reading directory table
[  393.615527][T11570] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  393.763607][T11570] fscrypt (loop8, inode 2): Error -61 getting encryption context
[  393.794349][ T5949] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  394.012110][ T5949] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  394.032344][ T5949] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  394.071616][ T5949] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[  394.142694][ T5949] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  394.220441][ T5949] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  394.262120][ T5949] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  394.307079][ T5949] usb 10-1: Product: syz
[  394.354874][ T5949] usb 10-1: Manufacturer: syz
[  394.417306][ T5949] cdc_wdm 10-1:1.0: skipping garbage
[  394.448347][ T5949] cdc_wdm 10-1:1.0: skipping garbage
[  394.475176][ T9976] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.505311][ T5949] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[  394.551998][ T5949] cdc_wdm 10-1:1.0: Unknown control protocol
[  394.648766][ T5949] usb 10-1: USB disconnect, device number 2
[  394.937881][T11598] loop8: detected capacity change from 0 to 256
[  395.047980][T11598] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d)
[  395.782102][ T5949] wiimote 0005:057E:0306.000C: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0
[  395.848487][ T5949] wiimote 0005:057E:0306.000C: New device registered
[  395.945730][T11615] loop8: detected capacity change from 0 to 512
[  396.085657][T11615] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2
[  396.123427][    T8] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  396.175128][T11615] EXT4-fs error (device loop8): ext4_iget_extra_inode:4752: inode #15: comm syz.8.1654: corrupted in-inode xattr: e_value size too large
[  396.324817][T11615] EXT4-fs error (device loop8): ext4_orphan_get:1413: comm syz.8.1654: couldn't read orphan inode 15 (err -117)
[  396.405515][T11611] wiimote 0005:057E:0306.000C: Unhandled report 0 size 21
[  396.441557][T11615] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  396.482514][T11609] wiimote 0005:057E:0306.000C: Device removed
[  396.489282][    T8] usb 10-1: unable to get BOS descriptor or descriptor too short
[  396.546511][    T8] usb 10-1: unable to read config index 0 descriptor/start: -71
[  396.585438][    T8] usb 10-1: can't read configurations, error -71
[  396.679105][T11428] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  396.705632][ T9976] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.736828][T11428] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  396.846345][T11428] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  396.900555][T11428] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  396.983281][    T9] wiimote 0005:057E:0306.000C: detected device: Nintendo Wii Remote (Gen 1)
[  397.181143][    T9] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.000C/input/input29
[  397.360816][T11428] 8021q: adding VLAN 0 to HW filter on device bond0
[  397.390053][    T9] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.000C/input/input30
[  397.479023][    T9] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.000C/input/input28
[  397.540132][T11428] 8021q: adding VLAN 0 to HW filter on device team0
[  397.660154][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.667497][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state
[  397.741796][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.749199][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state
[  397.996845][T11428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  398.363180][T11649] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1659'.
[  398.836495][T11428] 8021q: adding VLAN 0 to HW filter on device batadv0
[  398.920072][T11658] loop8: detected capacity change from 0 to 164
[  399.490196][T11664] loop8: detected capacity change from 0 to 4096
[  399.649770][T11664] ntfs3: loop8: Failed to load $Extend (-22).
[  399.689852][T11664] ntfs3: loop8: Failed to initialize $Extend.
[  399.919139][T11675] loop7: detected capacity change from 0 to 512
[  400.009675][T11675] EXT4-fs (loop7): Test dummy encryption mode enabled
[  400.084550][T11675] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e024e0ad, mo2=0002]
[  400.165929][T11675] System zones: 1-12
[  400.196870][T11675] EXT4-fs (loop7): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  400.289136][T11428] veth0_vlan: entered promiscuous mode
[  400.396943][T11675] EXT4-fs error (device loop7): ext4_add_entry:2488: inode #2: comm syz.7.1664: Directory hole found for htree leaf block 0
[  400.414016][T11428] veth1_vlan: entered promiscuous mode
[  400.500767][T11675] EXT4-fs (loop7): Remounting filesystem read-only
[  400.559242][T11428] veth0_macvtap: entered promiscuous mode
[  400.637983][T11428] veth1_macvtap: entered promiscuous mode
[  400.721561][ T9855] EXT4-fs (loop7): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  400.756024][T11428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  400.827835][T11428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  400.892763][T11428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  400.936232][T11428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  400.972778][T11428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  401.030980][T11428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.094219][T11428] batman_adv: batadv0: Interface activated: batadv_slave_0
[  401.154710][T11428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  401.201331][T11428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.249949][T11428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  401.276444][T11428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.300116][T11428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  401.328150][T11428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.366588][T11428] batman_adv: batadv0: Interface activated: batadv_slave_1
[  401.413408][T11428] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  401.446232][T11428] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  401.489358][T11428] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  401.530958][T11428] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  401.932861][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.990083][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  402.135945][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  402.194669][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  402.900795][T11729] loop5: detected capacity change from 0 to 8
[  403.923510][T11756] netlink: 'syz.8.1686': attribute type 3 has an invalid length.
[  403.972775][T11756] netlink: 201336 bytes leftover after parsing attributes in process `syz.8.1686'.
[  404.357658][T11769] loop7: detected capacity change from 0 to 512
[  404.501635][T11769] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  404.519569][T11702] IPVS: starting estimator thread 0...
[  404.587621][T11769] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  404.642880][T11777] IPVS: using max 26 ests per chain, 62400 per kthread
[  404.857990][ T9855] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  405.589831][T11800] usbcore.quirks: string doesn't fit in 127 chars.
[  405.741136][T11805] loop8: detected capacity change from 0 to 1024
[  405.857380][T11805] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  406.017271][T11805] EXT4-fs error (device loop8): ext4_read_inline_dir:1600: inode #12: block 7: comm syz.8.1704: path /129/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0
[  406.307188][ T9976] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.748142][   T52] Bluetooth: hci1: command 0x0406 tx timeout
[  426.992995][T12080] Bluetooth: hci0: command 0x0406 tx timeout
[  426.999063][T12080] Bluetooth: hci3: command 0x0406 tx timeout
[  440.278655][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  440.285061][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  501.722134][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  501.728597][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  503.783023][   T52] Bluetooth: hci2: command 0x0406 tx timeout
[  563.161117][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  563.167602][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  570.182730][   T29] INFO: task jbd2/sda1-8:5116 blocked for more than 143 seconds.
[  570.190540][   T29]       Not tainted syzkaller #0
[  570.202154][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  570.211469][   T29] task:jbd2/sda1-8     state:D stack:25736 pid:5116  ppid:2      flags:0x00004000
[  570.227002][   T29] Call Trace:
[  570.230339][   T29]  <TASK>
[  570.239706][   T29]  __schedule+0x15ae/0x4700
[  570.253478][   T29]  ? asan.module_dtor+0x20/0x20
[  570.258437][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  570.267288][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  570.274374][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  570.279638][   T29]  schedule+0xbd/0x170
[  570.288006][   T29]  io_schedule+0x80/0xd0
[  570.292302][   T29]  bit_wait_io+0x11/0xd0
[  570.297831][   T29]  __wait_on_bit+0x9f/0x2c0
[  570.302395][   T29]  ? bit_wait+0xd0/0xd0
[  570.312142][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  570.319637][   T29]  ? bit_wait+0xd0/0xd0
[  570.326507][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  570.331340][   T29]  ? do_raw_write_lock+0x11e/0x260
[  570.340449][   T29]  ? bit_waitqueue+0x30/0x30
[  570.349185][   T29]  ? do_raw_read_unlock+0x3d/0x80
[  570.356249][   T29]  jbd2_journal_commit_transaction+0x2e90/0x5ad0
[  570.365074][   T29]  ? jbd2_journal_finish_inode_data_buffers+0xb0/0xb0
[  570.371879][   T29]  ? lock_chain_count+0x20/0x20
[  570.377931][   T29]  ? _raw_spin_unlock+0x40/0x40
[  570.386285][   T29]  ? __try_to_del_timer_sync+0x1c2/0x280
[  570.391964][   T29]  ? __timer_delete_sync+0x23d/0x2e0
[  570.399495][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  570.405815][   T29]  ? timer_delete_sync+0x20/0x20
[  570.410825][   T29]  ? do_raw_read_unlock+0x80/0x80
[  570.422440][   T29]  ? prepare_to_wait+0x1aa/0x200
[  570.432681][   T29]  kjournald2+0x40f/0x810
[  570.437086][   T29]  ? jbd2_seq_info_show+0x5c0/0x5c0
[  570.442312][   T29]  ? wake_bit_function+0x200/0x200
[  570.454742][   T29]  ? _raw_spin_unlock+0x40/0x40
[  570.459654][   T29]  ? __kthread_parkme+0x71/0x1c0
[  570.468051][   T29]  ? __kthread_parkme+0x15b/0x1c0
[  570.474145][   T29]  kthread+0x2fa/0x390
[  570.478252][   T29]  ? jbd2_seq_info_show+0x5c0/0x5c0
[  570.486162][   T29]  ? kthread_blkcg+0xd0/0xd0
[  570.492383][   T29]  ret_from_fork+0x48/0x80
[  570.497990][   T29]  ? kthread_blkcg+0xd0/0xd0
[  570.505101][   T29]  ret_from_fork_asm+0x11/0x20
[  570.509950][   T29]  </TASK>
[  570.518011][   T29] INFO: task syz-executor:5776 blocked for more than 143 seconds.
[  570.539147][   T29]       Not tainted syzkaller #0
[  570.546668][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  570.559606][   T29] task:syz-executor    state:D stack:22000 pid:5776  ppid:5775   flags:0x00004002
[  570.572152][   T29] Call Trace:
[  570.577470][   T29]  <TASK>
[  570.580457][   T29]  __schedule+0x15ae/0x4700
[  570.590693][   T29]  ? mark_lock+0x94/0x320
[  570.596495][   T29]  ? asan.module_dtor+0x20/0x20
[  570.601410][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  570.608371][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  570.616158][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  570.621686][   T29]  schedule+0xbd/0x170
[  570.627733][   T29]  io_schedule+0x80/0xd0
[  570.632050][   T29]  bit_wait_io+0x11/0xd0
[  570.636859][   T29]  __wait_on_bit+0x9f/0x2c0
[  570.641405][   T29]  ? bit_wait+0xd0/0xd0
[  570.652178][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  570.658285][   T29]  ? bit_wait+0xd0/0xd0
[  570.662479][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  570.674118][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  570.679286][   T29]  ? bit_waitqueue+0x30/0x30
[  570.688563][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  570.695812][   T29]  do_get_write_access+0x5c9/0xe00
[  570.700993][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  570.710246][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  570.716699][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  570.725942][   T29]  ? __might_sleep+0xe0/0xe0
[  570.730592][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  570.736572][   T29]  __ext4_mark_inode_dirty+0x13f/0x720
[  570.742075][   T29]  ext4_dirty_inode+0xcb/0x110
[  570.751526][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  570.761249][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  570.769736][   T29]  file_update_time+0x187/0x1a0
[  570.778488][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  570.787337][   T29]  ? do_wp_page+0x4ce/0x34d0
[  570.791972][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  570.801062][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  570.809184][   T29]  do_page_mkwrite+0x153/0x3f0
[  570.814471][   T29]  do_wp_page+0xd4d/0x34d0
[  570.818938][   T29]  ? folio_put+0xd0/0xd0
[  570.826367][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  570.831431][   T29]  ? __rwlock_init+0x150/0x150
[  570.836755][   T29]  handle_mm_fault+0x1300/0x4a40
[  570.841736][   T29]  ? handle_mm_fault+0xe6/0x4a40
[  570.850237][   T29]  ? numa_migrate_prep+0x350/0x350
[  570.855777][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  570.861105][   T29]  do_user_addr_fault+0x736/0x12d0
[  570.872682][   T29]  exc_page_fault+0x64/0x100
[  570.877333][   T29]  ? clear_bhb_loop+0x40/0x90
[  570.892294][   T29]  asm_exc_page_fault+0x26/0x30
[  570.913292][   T29] RIP: 0033:0x7efe0f6715e3
[  570.917777][   T29] RSP: 002b:00007ffdb697bb60 EFLAGS: 00010216
[  570.928954][   T29] RAX: 00007efe0c3f90b4 RBX: 00007ffdb697bc90 RCX: 0000000000000000
[  570.938068][   T29] RDX: 00007efe0c3f90b0 RSI: 0000000000000008 RDI: 00007ffdb697bc90
[  570.948704][   T29] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000
[  570.957828][   T29] R10: 00007ffdb697bc70 R11: 0000000000000000 R12: 0000000000000000
[  570.966243][   T29] R13: 0000000000006f4c R14: ffffffffffff90b4 R15: 0000000000000000
[  570.980189][   T29]  </TASK>
[  571.011512][   T29] INFO: task syz.9.1709:11819 blocked for more than 144 seconds.
[  571.032626][   T29]       Not tainted syzkaller #0
[  571.037637][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  571.056523][   T29] task:syz.9.1709      state:D stack:27048 pid:11819 ppid:10001  flags:0x00004004
[  571.069466][   T29] Call Trace:
[  571.073163][   T29]  <TASK>
[  571.076158][   T29]  __schedule+0x15ae/0x4700
[  571.080714][   T29]  ? mark_lock+0x94/0x320
[  571.091309][   T29]  ? asan.module_dtor+0x20/0x20
[  571.097150][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  571.109729][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  571.117463][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  571.127432][   T29]  schedule+0xbd/0x170
[  571.131552][   T29]  io_schedule+0x80/0xd0
[  571.136208][   T29]  bit_wait_io+0x11/0xd0
[  571.140485][   T29]  __wait_on_bit+0x9f/0x2c0
[  571.148778][   T29]  ? bit_wait+0xd0/0xd0
[  571.153259][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  571.158778][   T29]  ? bit_wait+0xd0/0xd0
[  571.166078][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  571.170873][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  571.176998][   T29]  ? bit_waitqueue+0x30/0x30
[  571.181626][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  571.187355][   T29]  do_get_write_access+0x5c9/0xe00
[  571.198380][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  571.206260][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  571.212469][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  571.228198][   T29]  ? __might_sleep+0xe0/0xe0
[  571.236856][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  571.242448][   T29]  __ext4_mark_inode_dirty+0x13f/0x720
[  571.248677][   T29]  ext4_dirty_inode+0xcb/0x110
[  571.256633][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  571.262739][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  571.267803][   T29]  file_update_time+0x187/0x1a0
[  571.275845][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  571.280919][   T29]  ? filemap_fault+0x103c/0x1540
[  571.286445][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  571.292224][   T29]  ? pte_alloc_one+0x3b6/0x540
[  571.297616][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  571.312427][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  571.317785][   T29]  do_page_mkwrite+0x153/0x3f0
[  571.328579][   T29]  handle_mm_fault+0x1a26/0x4a40
[  571.335435][   T29]  ? handle_mm_fault+0xe6/0x4a40
[  571.340510][   T29]  ? numa_migrate_prep+0x350/0x350
[  571.349911][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  571.355525][   T29]  do_user_addr_fault+0x736/0x12d0
[  571.360699][   T29]  exc_page_fault+0x64/0x100
[  571.368625][   T29]  asm_exc_page_fault+0x26/0x30
[  571.373841][   T29] RIP: 0033:0x7f8c3fe73ba9
[  571.378289][   T29] RSP: 002b:00007ffddc4d2830 EFLAGS: 00010202
[  571.390060][   T29] RAX: 0000001b2d624000 RBX: ffffffff8130988b RCX: 0000001b2d623ff8
[  571.398515][   T29] RDX: 00000000005ffde8 RSI: 00000000005ffde8 RDI: 00007f8c40d55700
[  571.406842][   T29] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007f8c40212000
[  571.423244][   T29] R10: 00007f8c40d55700 R11: 0000000000000000 R12: 00007f8c40226038
[  571.431269][   T29] R13: 0000000000000000 R14: ffffffff813091e1 R15: 00007f8c40d55720
[  571.443417][   T29]  ? __x64_sys_mmap+0x21/0x130
[  571.448230][   T29]  ? arch_get_unmapped_area+0x46b/0x7c0
[  571.459416][   T29]  </TASK>
[  571.482765][   T29] INFO: task syz.7.1710:11823 blocked for more than 144 seconds.
[  571.490619][   T29]       Not tainted syzkaller #0
[  571.506371][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  571.516992][   T29] task:syz.7.1710      state:D stack:27048 pid:11823 ppid:9855   flags:0x00004004
[  571.540639][   T29] Call Trace:
[  571.551005][   T29]  <TASK>
[  571.555701][   T29]  __schedule+0x15ae/0x4700
[  571.560292][   T29]  ? mark_lock+0x94/0x320
[  571.570423][   T29]  ? asan.module_dtor+0x20/0x20
[  571.576074][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  571.581228][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  571.590901][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  571.596437][   T29]  schedule+0xbd/0x170
[  571.600533][   T29]  io_schedule+0x80/0xd0
[  571.607883][   T29]  bit_wait_io+0x11/0xd0
[  571.612162][   T29]  __wait_on_bit+0x9f/0x2c0
[  571.618642][   T29]  ? bit_wait+0xd0/0xd0
[  571.628467][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  571.637072][   T29]  ? bit_wait+0xd0/0xd0
[  571.641276][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  571.649738][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  571.656654][   T29]  ? bit_waitqueue+0x30/0x30
[  571.661290][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  571.671139][   T29]  do_get_write_access+0x5c9/0xe00
[  571.679030][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  571.688094][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  571.694580][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  571.700755][   T29]  ? __might_sleep+0xe0/0xe0
[  571.708545][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  571.714482][   T29]  __ext4_mark_inode_dirty+0x13f/0x720
[  571.721716][   T29]  ext4_dirty_inode+0xcb/0x110
[  571.729535][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  571.735681][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  571.740828][   T29]  file_update_time+0x187/0x1a0
[  571.751762][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  571.757752][   T29]  ? filemap_fault+0x103c/0x1540
[  571.770857][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  571.790725][   T29]  ? pte_alloc_one+0x3b6/0x540
[  571.796795][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  571.806136][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  571.811288][   T29]  do_page_mkwrite+0x153/0x3f0
[  571.816505][   T29]  handle_mm_fault+0x1a26/0x4a40
[  571.822429][   T29]  ? handle_mm_fault+0xe6/0x4a40
[  571.831125][   T29]  ? numa_migrate_prep+0x350/0x350
[  571.836559][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  571.841881][   T29]  do_user_addr_fault+0x736/0x12d0
[  571.850320][   T29]  exc_page_fault+0x64/0x100
[  571.858701][   T29]  asm_exc_page_fault+0x26/0x30
[  571.866579][   T29] RIP: 0033:0x7fe42a873c09
[  571.871039][   T29] RSP: 002b:00007ffdee696700 EFLAGS: 00010202
[  571.878805][   T29] RAX: 0000001b34824000 RBX: 0000000000000000 RCX: 00000000005ffde8
[  571.890562][   T29] RDX: 0000001b34823ffc RSI: 00000000005ffde8 RDI: 00007fe42b755700
[  571.901822][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fe42ac12000
[  571.913264][   T29] R10: 00007fe42b755700 R11: 0000000000000000 R12: 0000000000000000
[  571.925439][   T29] R13: 0000000000000b6e R14: ffffffff813241a0 R15: 00007fe42b755720
[  571.934560][   T29]  ? fpregs_assert_state_consistent+0xb0/0xe0
[  571.940688][   T29]  </TASK>
[  571.974496][   T29] INFO: task syz.8.1711:11826 blocked for more than 145 seconds.
[  571.982268][   T29]       Not tainted syzkaller #0
[  571.992460][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  572.002438][   T29] task:syz.8.1711      state:D stack:27560 pid:11826 ppid:9976   flags:0x00004004
[  572.017345][   T29] Call Trace:
[  572.020667][   T29]  <TASK>
[  572.025805][   T29]  __schedule+0x15ae/0x4700
[  572.030463][   T29]  ? mark_lock+0x94/0x320
[  572.037953][   T29]  ? asan.module_dtor+0x20/0x20
[  572.043107][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  572.048269][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  572.057426][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  572.062957][   T29]  schedule+0xbd/0x170
[  572.067071][   T29]  io_schedule+0x80/0xd0
[  572.071425][   T29]  bit_wait_io+0x11/0xd0
[  572.082259][   T29]  __wait_on_bit+0x9f/0x2c0
[  572.087631][   T29]  ? bit_wait+0xd0/0xd0
[  572.091822][   T29]  out_of_line_wait_on_bit+0x13c/0x190
[  572.101868][   T29]  ? bit_wait+0xd0/0xd0
[  572.107541][   T29]  ? __wait_on_bit+0x2c0/0x2c0
[  572.112345][   T29]  ? do_raw_spin_lock+0x11f/0x2b0
[  572.121059][   T29]  ? bit_waitqueue+0x30/0x30
[  572.129797][   T29]  ? do_raw_spin_unlock+0x121/0x230
[  572.139025][   T29]  do_get_write_access+0x5c9/0xe00
[  572.144515][   T29]  jbd2_journal_get_write_access+0x10c/0x140
[  572.150532][   T29]  __ext4_journal_get_write_access+0x208/0x6d0
[  572.159906][   T29]  ? __ext4_journal_ensure_credits+0x450/0x450
[  572.166413][   T29]  ? __might_sleep+0xe0/0xe0
[  572.171039][   T29]  ext4_reserve_inode_write+0x205/0x2a0
[  572.177074][   T29]  __ext4_mark_inode_dirty+0x13f/0x720
[  572.188632][   T29]  ext4_dirty_inode+0xcb/0x110
[  572.193687][   T29]  ? __ext4_expand_extra_isize+0x400/0x400
[  572.199527][   T29]  __mark_inode_dirty+0x2cc/0xc90
[  572.209252][   T29]  file_update_time+0x187/0x1a0
[  572.215777][   T29]  ext4_page_mkwrite+0x1f9/0x11a0
[  572.220860][   T29]  ? filemap_fault+0x103c/0x1540
[  572.230749][   T29]  ? mapping_seek_hole_data+0x1330/0x1330
[  572.238805][   T29]  ? pte_alloc_one+0x3b6/0x540
[  572.246875][   T29]  ? ext4_change_inode_journal_flag+0x8a0/0x8a0
[  572.253454][   T29]  ? __lock_acquire+0x7eb0/0x7eb0
[  572.258508][   T29]  do_page_mkwrite+0x153/0x3f0
[  572.266800][   T29]  handle_mm_fault+0x1a26/0x4a40
[  572.271777][   T29]  ? handle_mm_fault+0xe6/0x4a40
[  572.277194][   T29]  ? numa_migrate_prep+0x350/0x350
[  572.282455][   T29]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  572.290966][   T29]  do_user_addr_fault+0x736/0x12d0
[  572.299401][   T29]  exc_page_fault+0x64/0x100
[  572.307977][   T29]  ? clear_bhb_loop+0x40/0x90
[  572.314319][   T29]  asm_exc_page_fault+0x26/0x30
[  572.319230][   T29] RIP: 0033:0x7f907006cea3
[  572.339098][   T29] RSP: 002b:00007ffd0e70a5a0 EFLAGS: 00010246
[  572.351599][   T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b32d64000
[  572.360124][   T29] RDX: 0000001b32d24000 RSI: 0000000000600000 RDI: 00007f90703e7708
[  572.371224][   T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  572.379698][   T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  572.390823][   T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd0e70a830
[  572.399257][   T29]  </TASK>
[  572.413217][   T29] 
[  572.413217][   T29] Showing all locks held in the system:
[  572.421000][   T29] 1 lock held by khungtaskd/29:
[  572.431611][   T29]  #0: ffffffff8e1322e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  572.448262][   T29] 2 locks held by getty/5545:
[  572.455320][   T29]  #0: ffff8880339100a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  572.468483][   T29]  #1: ffffc9000327e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370
[  572.479070][   T29] 3 locks held by syz-executor/5776:
[  572.487599][   T29]  #0: ffff888033673120 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  572.499015][   T29]  #1: ffff888033980510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  572.509941][   T29]  #2: ffff888033984990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  572.528602][   T29] 2 locks held by kworker/0:9/11533:
[  572.537409][   T29]  #0: ffff888018c72d38 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  572.551571][   T29]  #1: ffffc900037d7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  572.570016][   T29] 3 locks held by syz.9.1709/11819:
[  572.575831][   T29]  #0: ffff88805d494420 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  572.589199][   T29]  #1: ffff888033980510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  572.599627][   T29]  #2: ffff888033984990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  572.613313][   T29] 3 locks held by syz.7.1710/11823:
[  572.618545][   T29]  #0: ffff88805d496a20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  572.638423][   T29]  #1: ffff888033980510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  572.658209][   T29]  #2: ffff888033984990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  572.676610][   T29] 3 locks held by syz.8.1711/11826:
[  572.681846][   T29]  #0: ffff88805d490b20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0
[  572.695362][   T29]  #1: ffff888033980510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0
[  572.705551][   T29]  #2: ffff888033984990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170
[  572.718371][   T29] 2 locks held by dhcpcd/12175:
[  572.723527][   T29]  #0: ffff888043c30130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40
[  572.738980][   T29]  #1: ffffffff8e137cb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880
[  572.765083][   T29] 
[  572.767450][   T29] =============================================
[  572.767450][   T29] 
[  572.780269][   T29] NMI backtrace for cpu 0
[  572.784647][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  572.791939][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  572.802025][   T29] Call Trace:
[  572.805315][   T29]  <TASK>
[  572.808285][   T29]  dump_stack_lvl+0x18c/0x250
[  572.812983][   T29]  ? __wake_up_klogd+0xd9/0x100
[  572.817855][   T29]  ? show_regs_print_info+0x20/0x20
[  572.823071][   T29]  ? load_image+0x420/0x420
[  572.827610][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[  572.832568][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  572.838744][   T29]  ? load_image+0x420/0x420
[  572.843271][   T29]  ? wq_watchdog_touch+0xef/0x170
[  572.848311][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  572.854395][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  572.860395][   T29]  watchdog+0xf59/0xfa0
[  572.864569][   T29]  ? watchdog+0x1e1/0xfa0
[  572.868919][   T29]  kthread+0x2fa/0x390
[  572.873022][   T29]  ? hungtask_pm_notify+0x50/0x50
[  572.878061][   T29]  ? kthread_blkcg+0xd0/0xd0
[  572.882661][   T29]  ret_from_fork+0x48/0x80
[  572.887104][   T29]  ? kthread_blkcg+0xd0/0xd0
[  572.891704][   T29]  ret_from_fork_asm+0x11/0x20
[  572.896510][   T29]  </TASK>
[  572.916477][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  572.923370][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  572.930571][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  572.940811][   T29] Call Trace:
[  572.944100][   T29]  <TASK>
[  572.947056][   T29]  dump_stack_lvl+0x18c/0x250
[  572.951769][   T29]  ? show_regs_print_info+0x20/0x20
[  572.956984][   T29]  ? load_image+0x420/0x420
[  572.961509][   T29]  panic+0x2ca/0x720
[  572.965418][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  572.969933][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[  572.975496][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[  572.980889][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  572.987063][   T29]  watchdog+0xf98/0xfa0
[  572.991255][   T29]  ? watchdog+0x1e1/0xfa0
[  572.995606][   T29]  kthread+0x2fa/0x390
[  572.999684][   T29]  ? hungtask_pm_notify+0x50/0x50
[  573.004725][   T29]  ? kthread_blkcg+0xd0/0xd0
[  573.009330][   T29]  ret_from_fork+0x48/0x80
[  573.013933][   T29]  ? kthread_blkcg+0xd0/0xd0
[  573.018621][   T29]  ret_from_fork_asm+0x11/0x20
[  573.023497][   T29]  </TASK>
[  573.026595][   T29] Kernel Offset: disabled
[  573.030934][   T29] Rebooting in 86400 seconds..