last executing test programs:

1m3.184320149s ago: executing program 1 (id=45):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x6c, r0, 0x1, 0x70bd2d, 0x25dfdbbc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a2dc176d40eeb09eb2e9a7f3890704f66a145e15b83b44d5"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="876a531347511fd5b96bc99581a53da2f4abe1a30797e8507a6ad3fbae8d41b4"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "d64a6652a8a1dc6e"}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4020}, 0x4080)

1m2.888377027s ago: executing program 1 (id=47):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x7f}]}}}]}, 0x3c}}, 0x0)

1m2.657910583s ago: executing program 1 (id=50):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast2, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

1m2.359945911s ago: executing program 1 (id=52):
syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000002c0)={[{@creator={'creator', 0x3d, "1c4cdc1a"}}, {@type={'type', 0x3d, "e833026f"}}, {@gid}, {@uid}, {}, {@part={'part', 0x3d, 0x2}}, {@creator={'creator', 0x3d, "338be97f"}}, {}, {@part={'part', 0x3d, 0x7}}, {@nobarrier}]}, 0x20, 0x6fe, &(0x7f0000000480)="$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")
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020)

1m1.782632638s ago: executing program 1 (id=57):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000140)={0x9, 0x5, 0xd, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000005c0)=0xff)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x9)

1m1.253185382s ago: executing program 1 (id=61):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
getpeername(r0, 0x0, 0x0)

1m0.652236499s ago: executing program 32 (id=61):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
getpeername(r0, 0x0, 0x0)

4.142666625s ago: executing program 0 (id=365):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000d00)="df33c9f7b9a60007000000000000", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

3.923520181s ago: executing program 0 (id=367):
syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100)
truncate(&(0x7f00000002c0)='./file0\x00', 0x8000000)
ftruncate(r0, 0x3)

2.365947844s ago: executing program 4 (id=373):
r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000b00)=[@ioring_restriction_sqe_op], 0x1)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0)
io_uring_enter(r0, 0x2e6f, 0x8555, 0x2, 0x0, 0x0)

2.358856604s ago: executing program 0 (id=374):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x25dfdbfe, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x953}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)

2.061678632s ago: executing program 4 (id=376):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='macvlan1\x00', 0x10)
syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0)

1.77670754s ago: executing program 4 (id=378):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xc, 0x32, 0x0, 0xffffd000)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)='D', 0x1)
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000180))

1.776380901s ago: executing program 3 (id=379):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)="cd", 0x1}], 0x1, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x41, 0xffffff7f}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x43}}], 0x38, 0x4048008}, 0x0)

1.696902103s ago: executing program 0 (id=380):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x100}, 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8080)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x4, 0x0, 0x0, 0x5, 0x1, 0xffff6ebe}]}, {0x0, [0x30, 0x30, 0x30, 0x2e]}}, 0x0, 0x2a, 0x0, 0x1, 0x3}, 0x28)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x2c}, 0x10)

1.668171033s ago: executing program 4 (id=381):
r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x3fe, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000240)=0x1)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x2, 0x1, 0x0, "ee4f6da8d2cf40118a7b75b300000000000080302700000000000000000f4c00", 0x47524247})

1.503011898s ago: executing program 0 (id=383):
syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100)
truncate(&(0x7f00000002c0)='./file0\x00', 0x8000000)
ftruncate(r0, 0x3)

1.4402295s ago: executing program 4 (id=384):
syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e9b, &(0x7f000000bc00)="$eJzs3U9vHGcdB/Df/vH6T2kbVagKEQc3hdJSmv8JlH9NOXCAA0ioZxK5bhVIASUB0SoirnJAXICXAJdeOPQt8AL6GhAvgEg2px4og8Z+nmQ8XmcdEu/s+vl8JGfmN8+O95l8PZ5dz8w+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADED77/k7O9iLjym7TgWMTnYhDRj1iu69WoZy7nxw8j4nhsN8fzETFYjKjX3/7n2YgLEfHJMxGbW7fX6sXnDtiPi2du3fjsh9/7x+//dPf4z97+6Uft9h9//vzHf7gTcexHr3/82Z0ns+0AAABQiqqqql56m38ivb/vd90pAGAq8vG/SvJytVqtVj/R+o/92eqPutC6qRrvTrOIiI3mOvVrBqfjAWDObMSnXXeBDsm/aMOIeKrrTgAzrdd1BzgUm1u313op317zeLC6057/Trkr/43e/fs79ptO0r7GZFo/X3djEM/t05/lKfVhluT8++38r+y0j9LjDjv/adkv/9HOrU/FyfkP2vm37Mr/zxExt/n3x+Zfqpz/8FHy3xjM8f4vfwAAAAAAjr789/9jHZ//XXz8TTmQh53/XZ1SHwAAAAAAAADgSXvc8f/uM/4fAAAAzKz6vXrtL888WLbfZ7HVy9/qRTzdejxQmNXGhwMCAAAAAAAAAAAAANMxjFhJ1/UvRMTTKytVVdVfTe36UT3u+vOu9O2HknX9Sx4AAHZ88kzrXv5exFJEvJU+629hZWWlqpaWV6qVankxv54dLS5Vy433tXlaL1scHeAF8XBU1d9sqbFe06T3y5Pa29+vfq5RNThAx6ajw8ABICJ2jkabjkhHTFU9G12/ymE+2P+PHvs/B9H1zykAAABw+Kqqqnrp47xPpHP+/a47BQBMRT7+t88LqNVqtVqtPnp1UzXenWYRERvNderXDIbjB4A5sxGfdt0FOiT/og0j4njXnQBmWq/rDnAoNrdur/VSvr3m8WB1pz1fC7Ir/43e9np5/XHTSdrXmEzr5+tuDOK5ffrz/JT6MEty/v12/ld22vMQ/4ed/7Tsl3+9ncc66E/Xcv6Ddv4tRyf//tj8S5XzHz5S/gP5AwAAAADADMt//z/m/G/eZAAAAAAAAACYO5tbt9fyfa/5/P8Xxzyu15xz/+eRkfPvHTh/9/8eJTn/fjv/1gU5g8b8vTcf5P/vrdtrH9361xfydObzXxiM6ude6PUHw3TNT7XwTlyL67EeZ/Y8frir/eye9oVd7ecmtJ/f0z6q25dz+6lYi1/G9Xj7fvvihAujlia0VxPac/4D+3+Rcv7Dxled/0pq77WmtXsf9vfs983puOe5/Lf/vLR375q+uzG4v21N9fad7KA/2/8nT43i1zfXb5z67dVbt26cjTTZtfRcpMkTlvNfSF85/5df3GnPv/eb++u9D0ePnP+suBvDffN/sTFfb+8rU+5bF3L+o/SV889HoPH7/zznv//+/2oH/QEAAAAAAAAAAAAAAICHqapq+xbRyxFxKd3/09W9mQDAdOXjf5Xk5Wq1Wq1Wq49e3VSN90aziIi/N9epXzP8btw3AwBm2X8j4p9dd4LOyL9g+fP+6umXuu4MMFU33//g51evX1+/cbPrngAAAAAAAAAA/688/udqY/zn7euAWuNG7xr/9c1YndvxP/ujwfZY52mDXoiHj/99Mh4+/vdwwvMtTGgfTWhfnNC+NKF97I0eDTn/F1LGOf8TacNKGv/15Q7607Wc/8k01nPO/yutxzXzr/46z/n3d+V/+tZ7vzp98/0PXrv23tV3199d/8XZM5cunL944fzFi6ffuXZ9/czOvx32+HDl/PPY164DLUvOP2cu/7Lk/L+cavmXJef/UqrlX5acf369J/+y5Pzzex/5lyXn/0qq5V+WnP9XUy3/suT8X021/MuS8/9aquVflpz/a6mWf1ly/qdSLf+y5PxPp1r+Zcn55zNc8i9Lzj9f2SD/suT8z6Va/mXJ+Z9PtfzLkvO/kGr5lyXnfzHV8i9Lzv9SquVflpz/11Mt/7Lk/L+RavmXJef/eqrlX5ac/zdTLf+y5Py/lWr5lyXn/+1Uy78sOf/vpFr+Zcn5fzfV8i9Lzv+NVMu/LA8+/9+MGTNm8kzXv5kAAAAAAAAAAAAAgLZpXE7c9TYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvXuLkbO87wf+7sleGxL8D2figG1OBhZ21ydwiMEkIX9KeqAkpE1Lahx7bZz4VO+ak1DZFNoSBalI7QW9aJpEaRSprUBVpKYSjZAaqb1rrhpxE7USF76AykFJ1VSBrd6Z53k8Mzs7sz6MPfM+nw/CP+/MOzPPvPPO7H7X+s4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjdZ/YuZPhoqiKP+v/bGmKC4u/76q2Fl+Ob/tQq8QAAAAOFvv1f7820vSCTuXcaGGbf7l2n/73sLCwkLxxXdPvP9nCwvpjHVFMbKyKGrnRf/6i58vNG4TPF+MDw03fD3cdO7Fi25+pMvyRrucP9bl/BVdzl/Z5fzxLucv2gGLrKr/PqZ2ZTfU/rqmvkuLy4qx2nk3tLnU80Mrh4fj73JqhmqXWRjbVxwoDhYzxdSiywzV/iuK19eXt/VAEW9ruOG21hZFcfKnz+6JaxgK+/iGounGahofu3fuK9a9+9Nn93xn7u2r282uu2HRSoti44ZynS8UxalfVxVDxcq0T+I6hxvWubbNOkea1jlUu1z599Z1nlzmOuP9Hg/r/FGHda4Npz11fVEU88WS27R6vhguVrfcatrf4/UjoryO8qH8UDF6WsfJ+mUcJ+Vl3rq++ThpPSbj/l8f9snoEmtofDje+cqKRfv9TI+T8l73w7FaXvdD5Y2Ojzf+arXpWC23efbGpY+Bto9dm2MgHcsNx8CGbsfA8IqR2jEwfGrNG5qOgelFlxkuhmq3deLGzsfA5Nyho5OzTz9z+4FDu/fP7J85PD21bcvmrVs2b906ue/AwZmp+p+nt0sHyOpiOB2DG8JrTTwGb27ZtvGQXPjmuXsejPfJ86C875+9qVzQxcPFEsd4uc0LG8/+eZC+7zc8D0YbngdtX1PbPA9Gl/E8KLc5uXF53zNHG/5vt4ZevRauaTgGLuT3w/I2H71l6dfCtWFdL956ut8PRxYdA/FuDYXnXnlK+nlv/K6wXxYfF9eUZ1y0ojg+O3Psjqd2z80dmy7COC8ubXisWo+X1Q33qVh0vAyf9vGy829+edM1bU5fE/bV+G2dH6tymy0TnR+r2qt7+/3ZdOqmIoxz7Hzvz3bfzcr9mbJEh/1ZbvPC7Wf/s2DKJQ2vf2PdXv9Gxkbrr38jaW+MNb3+LX5oRmorK4qTty/v9W8s/H++X/8u65PXv3JfPXpH52Og3ObFydM9BkY7vv5dH+ZQWM8tITGMN+T+92vnz9cP04bHsutxMzo6Fo6b0XiLzcfN5kWXKa+tvO2NU2d23Gy8vvmxavq5pYLHTbmv/nyq83FTbvPG9Nm/dqyKf2147VjR7RgYG1lRrncsHQT117uFVfEYuKPYUxwpDhZ702XKR7m8rYlNyzsGVoT/z/drx1V9cgyU++qVTZ2PgXKbH24+tz87bQynpG0afnZq/f3CUpn/mtFT19e628515i/X+cktnX83VG7z9pbTzRmd99Nt4ZSL2uyn1ufPUsf03uL87KerwjoPbu38u6lym8u2LfN42lkUxZvTb9Z+3xV+v/v3x//9e02/9233O+U3p998cPLhH5/O+gEAOHPv1/6cX1H/WbPhX6yX8+//AAAAwECIuX84zET+BwAAgMqIuX8kzET+BwAAgMqIuX80zCST/P/4Xdtffe+5Ir0b4EIQz4+74aF76tvFjvd8+Hrdwinl6R//9tirX31uebc9XBTFLx/8cNvtH78nrqvuaFznR5tPX+Sq65Z1+489cmq7xvdPOLm9fv3x/iz3MIhd5dcnN9Wud93T07X5xoNFbT48/+Lz9euvfx23P7G5vv1fhjct2blvqOnyG8N6bghzXXhPmYd2ntoP5YyXe3Xttf986edO3V683NCGD9bu5it/UL/e+B5RL19a3z7e76XW/09f++6r5fZP3dh+/c8Nt1//iXC9b4X5ix317Rv3+Vcb1v9HYf3x9uLl7vjWD9qu/7Ur69u/Fo6Lb4TZuv77/vQj77V7vOLt7Ly7frl4+1P/vaV2uXh98fpb1z/+3HTT/mi9/jferV/Pjid+NtK4fTw93k702N3Nx/dQeHybeuRFUXz3j4um/Vx8rH65f2xZf7y+o3e3X/9tLes8OnRd7fKn7s+apvv19b/e1Pb+xvXs/Ls1Tffn5fvD/nt38ofl9Z54OByP4fz//VH9+lrfy/S1+5tfb+L231hTf97G65tsWf/LLeufv67cd93X/8C79fW/du/KpvXv/FQ4nh6oz27r3/9XlzRd/pvfqT8ex56cOHxk9viBvQ17tfF5vHJ81eqLLv7ABy8Jr6WtX+86Mvf4zLF1U+umimLdAL5lYK/X/60w/6s+5s/9LdT9+Gf14+6lT9e/b9388/rXL4fTHwuPZ/z++PW/GGs6Xlsf9/l76/Ns139rWMdyXfm1/7xuWRue+MLrx//hD99u/bkg3p+jl4/X7t8r66+onTf0Rv381terbv7j8ubn9U9Gp2rz+2G/LoR3Zt5wRf32Wq8/vjfJS5+pP3/jT3Lx8kXL+4msGWm+H2e7/p+En2N+cFXz6188Pr7/XPO7ORdriqFyCfPh9aGYr58ft4r7+6WTV7S9vfg+PMX81aezzCXNPj07efDA4eNPTc7NzM5Nzj79zK5DR44fnttVe+/SXV/qdvlTz+/Vtef33pltW4ras/1IffTYhV7/0Uf27L1z6qa9M/t2H98398jRmWP798zO7pnZO3vT7n37Zp7sdvkDe3dMb9q++c5NE/sP7N1x1/btm7dPHDh8pFxGfVFdbJv68sThY7tqF5ndsWX79NatW6YmDh3ZO7PjzqmpiePdLl/73jRRXvqJiWMzB3fPHTg0MzF74JmZHdPbt23b1PXdHw8d3Te7bvLY8cOTx2dnjk3W78u6udrJ5fe+bpcnD7NHwutdi6Hw0/nnb9uW3h+39O2vLHlV9U2afzwt3gnvBRW/v3X7Oub+sTCTTPI/AAAA5CDm/vDG/6fOkP8BAACgMmLuXxlmIv8DAABAZcTcPx5mkkn+1//X/9f/1//X/9f/7yX9f/3/TvT/9f8Hef36//r/dNdv/f+Y+1cVRZb5HwAAAHIQc//qMBP5HwAAACoj5v6LwkzkfwAAAKiMmPsvDjPJI/+Ptf5V/1//X/+/sf8ft9X/L/T/9f/PkP6//n8n+v/6/4O8/j7s/6/S/6ff9Fv/P+b+D4SZ5JH/AQAAIAsx938wzET+BwAAgMqIuf+SMBP5HwAAACoj5v41YSaZ5H+f/6//r//v8//1//uh/39RegWuQP+/aRfr/+v/d6L/r/8/yOvvw/6/z/+n7/Rb/z/m/v8XZpJJ/gcAAIAcxNz/oTAT+R8AAAAqI+b+S8NM5H8AAACojJj7LwszyST/6//r/+v/6//r//dD/9/n/58p/X/9/0L//4xd6P78oK9f/1//n+76rf8fc//lYSaZ5H8AAADIQcz9V4SZyP8AAABQGTH3XxlmIv8DAABAZcTcf1WYSSb5X/9f/1//X/9f/1//v5f0//X/O9H/1/8f5PXr/+v/012/9f9j7r86zCST/A8AAAA5iLn/mjAT+R8AAAAqI+b+D4eZyP8AAABQGTH3rw0zyST/6//r/+v/6//r/+v/99Jg9f+HlzxH/79O/7+Z/r/+v/6//j+d9Vv/P+b+j4SZZJL/AQAAIAcx918bZiL/AwAAQGXE3H9dmIn8DwAAAJURc/+6MJNM8r/+v/6//r/+v/6//n8vDVb/f2n6/3X6/830//X/9f/1/+ms3/r/MfevDzPJJP8DAABADmLu3xBmIv8DAABAZcTcf32YifwPAAAAlRFz/w1hJpnkf/1//X/9f/1//X/9/17S/9f/70T/X/9/kNev/7+8/v+KbldEpfVb/z/m/hvDTDLJ/wAAAJCDmPtvCjNpyP9DPfvXBAAAAOB8iLn/5jAT//4PAAAAlRFz/8Ywk0zyv/6//r/+v/6//r/+fy/p/y/q/7/1P4X+f6T/r/8/yOvX//f5/3TXb/3/mPtvCTPJJP8DAABADmLuvzXMRP4HAACAyoi5/7YwE/kfAAAAKiPm/okwk0zyv/6//r/+v/6//r/+fy9Vtf+fXkd9/r/+v/6//r/+v/4/S+q3/n/M/beHmWSS/wEAACAHMfffEWYi/wMAAEBlxNw/GWYi/wMAAEBlxNw/FWaSSf7X/9f/1//X/9f/1//vpar2/8/i8//1/xvo/+v/D/L69f/1/+mu3/r/MfdPh5lkkv8BAAAgBzH3bwozkf8BAACgMmLu3xxmIv8DAABAZcTcvyXMJJP8r/+v/6//r/+v/6//30v6//r/nVS//3+k+Q0A9P/PqQu9fv1//X+aDbc5rd/6/zH3bw0zyST/AwAAQA5i7t8WZiL/AwAAQGXE3H9nmIn8DwAAAJURc/9dYSaZ5H/9f/1//X/9f/1//f9e0v/X/++k+v1/n//fSxd6/fr/+v9012/9/5j7t4eZZJL/AQAAIAcx9380zET+BwAAgMqIuf/uMBP5HwAAAAZKu88hjGLu/1iYSSb5X/+/6v3/hZX6//r/+v+d16//31v6//r/nej/6/8P8vr1//X/6a7f+v8x9+8IM8kk/wMAAEAOYu6/J8xE/gcAAIDKiLn/3jAT+R8AAAAqI+b+nWEmmeR//f+q9/99/r/+v/5/t/Xr//eW/r/+fyf6/4PZ/w8/tuj/n5/+//hSl2/s/5fHkP4//ajf+v8x998XZpJJ/gcAAIAcxNz/8TAT+R8AAAAqI+b+T4SZyP8AAABQGTH3fzLMJJP8r/+v/6//r/+v/6//30v6//r/nej/D2b/P9L/9/n/+v9002/9/5j77w8zyST/AwAAQA5i7v9UmIn8DwAAAJURc///DzOR/wEAAKAyYu5/IMwkk/yv/6//r/+v/6//r//fS/r/+v+d6P/r/w/y+vX/9f/prt/6/zH3/0qYSSb5HwAAAHIQc/+DYSbyPwAAAFRGzP2fDjOR/wEAAKAyYu7/1TCTTPK//v/56f8Pp+vX/9f/1//X/9f/P5f0/weo/z/U+uzT/9f/H+z16//r/9Ndv/X/Y+7/tTCTTPI/AAAA5CDm/l8PM5H/AQAAoDJi7v+NMBP5HwAAACoj5v6Hwkwyyf/6/z7/X/9f/1//X/+/l/T/9f870f/X/x/k9ev/6//TXb/1/2Pu/80wk0zyPwAAAOQg5v6Hw0zkfwAAAKiMmPs/E2Yi/wMAAEBlxNz/2TCTTPK//r/+v/6//r/+v/5/L+n/D2z/f2Wh/9+V/r/+v/6//j+d9Vv/P+b+R8JMMsn/AAAAkIOY+z8XZiL/AwAAQGXE3P9bYSbyPwAAAFRGzP2/HWaSSf7X/9f/1//X/9f/1//vJf3/xf3/8jXsQvb/VyxnQ5//vyz6//r/+v/6/3TWb/3/mPs/H2aSSf4HAACAHMTc/zthJvI/AAAAVEbM/b8bZiL/AwAAQGXE3P9omEkm+V//X/9f/1//X/9f/7+X9P8H9vP/9f+XQf9f/1//X/+fzvqt/x9z/xfCTDLJ/wAAAJCDmPt/L8xE/gcAAIDKiLl/V5iJ/A8AAACVEXP/Y2EmmeR//X/9f/1//X/9f/3/XtL/1//vRP9f/3+Q16//r/9Pd/3W/4+5f3eYSSb5HwAAAHIQc/8Xw0zkfwAAAKiMmPv3hJnI/wAAAFAZMffvDTPJJP/r/+v/6//r/+v/6//3kv6//n8n+v/6/4O8fv1//X+667f+f8z9M2EmmeR/AAAAyEHM/fvCTOR/AAAAqIyY+/eHmcj/AAAAUBkx9z8eZpJJ/tf/1//X/9f/1//X/+8l/X/9/070//X/B3n9+v/6/3TXb/3/mPsPhJlkkv8BAAAgBzH3fynMRP4HAACAyoi5/8thJvI/AAAAVEbM/QfDTDLJ//r/+v/6//r/+v/6/72k/6//34n+v/7/IK9f/1//n+76rf8fc/+hMJNM8j8AAADkIOb+w2Em8j8AAABURsz9R8JM5H8AAACojJj7j4aZZJL/9f/1//X/9f/1//X/e0n/X/+/E/1//f9BXr/+v/4/3fVb/z/m/t8PM8kk/wMAAEAOYu4/FmYi/wMAAEBlxNw/G2Yi/wMAAEBlxNw/F2aSSf7X/9f/1//X/9f/1//vJf1//f9O9P/1/wd5/fr/+v9012/9/5j7j4eZZJL/AQAAIAcx9z8RZiL/AwAAQGXE3P9kmIn8DwAAwP+xd5e7np1VHMf/pRkgIQ3XwhVwCVwDr7gFpLgWd5fi7u7u7u4uheIaSsJZax06svecU3b/z37W5/NmBWYy88AkTX+ZfLOZRu7+e8ctTfa//l//r/8/7f9vvNfJf3+k/v+k89P/6//1/2ei/9f/H/T/53bsfn7v79f/6/9ZN1r/n7v/PnFLk/0PAAAAHeTuv2/cYv8DAADANHL33y9usf8BAABgGrn7r49bmux//b/+X//v+//6f/3/lvT/+v8l+n/9/57fr//X/7NutP4/d//945Ym+x8AAAA6yN3/gLjF/gcAAIBp5O5/YNxi/wMAAMA0cvc/KG5psv/1//p//b/+X/+v/9+S/l//v0T/r//f8/v1//p/1o3W/+fuf3Dc0mT/AwAAQAe5+x8St9j/AAAAMI3c/Q+NW+x/AAAAmEbu/ofFLU32v/5f/6//1//r//X/W9L/6/+X6P/1/3t+v/5f/8+60fr/3P0Pj1ua7H8AAADoIHf/I+IW+x8AAACmkbv/kXGL/Q8AAADTyN3/qLilyf7X/+v/9f/6f/2//n9L+n/9/xL9v/5/z+/X/+v/Wbd5/3+PG/57r7b/z91/Q9zSZP8DAABAB7n7Hx232P8AAAAwjdz9j4lb7H8AAACYRu7+x8YtTfa//l//f9r/33LN1P3/9Zf+een/b/1O/b/+fwv6f/3/Ev3/qP3/1f0/of/X/+v/WbN5/7/S+1/8n3P3Py5uabL/AQAAoIPc/Y+PW+x/AAAAmEbu/ifELfY/AAAATCN3/xPjlib7X/+v//f9f/2//l//vyX9v/5/if5/1P7f9/9va/9/96t4v/6fDkbr/3P3PyluabL/AQAAoIPc/U+OW+x/AAAAmEbu/qfELfY/AAAATCN3/1Pjlib7X/+v/9f/6//1//r/Len/9f9L9P/6/z2/3/f/9f+sG63/z93/tLilyf4HAACADnL3Pz1usf8BAABgGrn7nxG32P8AAAAwjdz9z4xbmux//b/+X/+v/79N/f+1+n/9/zL9v/5/if5f/7/n9+v/9f+sG63/z93/rLilyf4HAACADnL3Pztusf8BAABgGrn7nxO32P8AAAAwjdz9z41bmux//b/+X/+v//f9f/3/lvT/0/X/1+j/T+n/9f/6f/0/y0br/3P3Py9uabL/AQAAoIPc/c+PW+x/AAAAmEbu/hfELfY/AAAATCN3/41xS5P9r//X/+v/9f/6f/3/lvT/0/X/vv//P/T/+n/9v/6fZaP1/7n7Xxi3rA2/Cys/DgAAAAwjd/+L4pYmf/8PAAAAHeTuf3HcYv8DAADANHL3vyRuabL/9f/6f/2//l//r//fkv5f/79E/3/5/v/OV/j99P9jvV//r/9n3Wj9f+7+l8YtTfY/AAAAdJC7/2Vxi/0PAAAA08jd//K4xf4HAACAaeTuf0Xc0mT/X6n/v/kuJz+u/786+v/Lv1//r//X/+v/9f/6/yX6f9//3/P79f/6f9aN1v/n7n9l3NJk/wMAAEAHuftfFbfY/wAAADCN3P2vjlvsfwAAAJhG7v7XxC1N9r/v/+v/9f/6f/2//n9L+n/9/xL9v/5/z+/X/+v/WTda/5+7/7VxS5P9DwAAAB3k7n9d3GL/AwAAwDRy978+brH/AQAAYBq5+98QtzTZ//p//f/R+/876P+T/j/+XPX/+v8z0P/r/w/6/3M7dj+/9/fr//X/rBut/8/d/8a4pcn+BwAAgA5y978pbrH/AQAAYBq5+98ct9j/AAAAMI3c/W+JW5rsf/2//v/o/b/v/xf9f/y56v/1/2eg/9f/H/T/53bsfn7v79f/6/9ZN1r/n7v/rXFLk/0PAAAAHeTuf1vcYv8DAADANHL3vz1usf8BAABgGrn73xG3NNn/+n/9v/5f/6//1/9vSf+v/1+i/9f/7/n9+n/9P+tG6/9z978zbmmy/wEAAKCD3P3vilvsfwAAAJhG7v53xy32PwAAAEwjd/974pYm+1//v/f+/543xQv0//p//b/+f0j6f/3/Ev2//n/P79f/6/9ZN1r/n7v/vXFLk/0PAAAAHeTuf1/cYv8DAADANHL3vz9usf8BAABgGrn7PxC3NNn/Pfr/C5f8tHn6f9//1//r//X/Y9P/6/+X6P/1/3t+v/5f/8+60fr/3P0fjFua7H8AAADoIHf/h+IW+x8AAACmkbv/w3GL/Q8AAADTyN3/kbilyf7v0f9fqkH/n/+zbt/+/5a76v/1/0X/r/8/6P/1/yv0//r/Pb9f/6//Z91o/X/u/o/GLU32PwAAAHSQu/9jcYv9DwAAANPI3f/xuMX+BwAAgGnk7v9E3HC36473pNuV/n/a/t/3//X/+n/9/xD0//r/Jfp//f+e36//1/+zbrT+P3f/J+MWf/8PAAAA08jd/6m4xf4HAACAaeTu/3TcYv8DAADANHL3fyZuabL/9f/6f/2//l//r//fkv5f/79E/6//3/P79f/6f9aN1v/n7v9s3NJk/wMAAEAHufs/F7fY/wAAADCN3P2fj1vsfwAAAJhG7v4vxC1N9r/+X/+v//+/9f8XLv719f/6f/2//l//v0z/r//f8/v1//p/1o3W/+fu/2Lc0mT/AwAAQAe5+78Ut9j/AAAAMI3c/V+OW+x/AAAAmEbu/q/ELU32v/5f/6//9/1//b/+f0v6f/3/Ev2//n/P79f/6/9ZN1r/n7v/q3FLk/0PAAAAHeTu/1rcYv8DAADANHL3fz1usf8BAABgGrn7vxG3NNn/M/f/Sz9N/39C/6//P+j/9f8b0//r/5fo//X/e37/mfr/y/xLpf6fDkbr/3P3fzNuabL/AQAAoIPc/d+KW+x/AAAAmEbu/m/HLfY/AAAATCN3/3filib7f+b+f4n+/4T+X/9/0P/r/zem/9f/L9H/6//3/H7f/9f/s260/j93/3fjlib7HwAAADrI3f+9uMX+BwAAgGnk7v9+3GL/AwAAwDRy9/8gbmmy//X/+n/9v/5f/6//35L+X/+/RP+v/9/z+/X/+n/Wjdb/5+7/YdzSZP8DAABAB7n7fxS32P8AAAAwjdz9P45b7H8AAACYRu7+n8QtTfa//l//r/8fqv+/48W/jv5f/6//X6b/1/8f9P/ndux+fu/v1//r/1k3Wv+fu/+ncUuT/Q8AAAAd5O7/Wdxi/wMAAMA0cvf/PG6x/wEAAGAauft/Ebc02f/6f/2//v/c/f+1B9//v9V79P/6/8vR/+v/l+j/9f97fr/+X//PutH6/9z9v4xbmux/AAAA6CB3/6/iFvsfAAAAppG7/9dxi/0PAAAA08jd/5u4pcn+1//r//X/Q33/X/+v/9f/n5H+X/9/0P+f27H7+b2/X/+v/2fdaP1/7v6b4pYm+x8AAAA6yN3/27jF/gcAAIBp5O7/Xdxi/wMAAMA0cvffHLc02f/6f/3/lP3/nfT/+n/9/yj0//r/Jfp//f+e36//1/+zbrT+P3f/7+OWJvsfAAAAOsjd/4e4xf4HAACAaeTu/2PcYv8DAADANHL3/yluabL/9f/6/yn7f9//1//vrf+/9vQfwPr/s9H/6/8PM/T/153+/vr//bxf/6//Z91o/X/u/j/HLU32PwAAAHSQu/8vcYv9DwAAANPI3f/XuMX+BwAAgGnk7v9b3DLV/v/3FVs2/b/+X/+v/9f/D9D/+/7/uen/9f+HGfr/w+nvr//fz/v1//p/1o3W/+fu/3vcMtX+BwAAgN5y9/8jbrH/AQAAYBq5+/8Zt9j/AAAAMI3c/f+KW5rsf/2//l//r//X/+v/t6T/1/8v0f/r//f8fv2//p91o/X/ufv/EwAA//9cXC6B")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x60843, 0x15)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xfc6, 0xfffffffffffffff7, 0x6976})
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000006900)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="0d9435a8af712ba22db08aad61bf52901d77aded910bc7949acdf1a626f568d38938f8ec34f72c1e0b3e6540dc1e44beac32958b12631708d0a5635580b2f9fef13a977211e5d519ab9531321cfb53a9b413ea91f290924482d4007a70a19759dd63f9fc81f2c63fe27bce5e7dddf01fa5c3f09ef226ee04045b0cf0661e3d5a67446c4d93db12c2ac7a15f0265fd7eade1a72cbd696413a03174375c955f8c82a9774c2c8ac5046d59c86dbd5165e6e447586", @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000000))

1.388490341s ago: executing program 3 (id=386):
r0 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0xab000)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, <r1=>0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.300662903s ago: executing program 2 (id=387):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={<r1=>0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000340)={0x7, 0x8, 0xfa00, {r1, 0x40}}, 0x10)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20)

1.240789805s ago: executing program 3 (id=388):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x80e0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x70, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x48, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IFACE={0x14}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

1.120066289s ago: executing program 2 (id=389):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x2, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"b4000000000000df9af34b00", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)

981.118912ms ago: executing program 3 (id=390):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001bc0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x40, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7ff}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x7}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x0)

939.429904ms ago: executing program 2 (id=391):
syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x10000, &(0x7f0000000000)={[{@nolazytime}]}, 0x1, 0x84d, &(0x7f0000000940)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000000580), &(0x7f0000000700)=ANY=[], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)

680.004071ms ago: executing program 3 (id=392):
unshare(0x2040600)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = dup(r0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, 0x0, 0x0)

620.679242ms ago: executing program 2 (id=393):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4)
sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)

495.869996ms ago: executing program 3 (id=394):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
fspick(0xffffffffffffff9c, 0x0, 0x0)

338.47141ms ago: executing program 2 (id=395):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f000015500001", 0x1b}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500211dff000401a8001600a400014020", 0x39}], 0x1}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

265.450662ms ago: executing program 0 (id=396):
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, 0x0, 0x0)
getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9)

80.741588ms ago: executing program 2 (id=397):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019300)={<r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0xf0b, 0xfffffffd, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x48}}, 0x4008000)

0s ago: executing program 4 (id=398):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x54f3, &(0x7f000000ab40)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x1f81ca7, 0x0, 0x1, 0x0, &(0x7f0000000080))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000180)={@desc={0x1, 0x0, @desc4}})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.23' (ED25519) to the list of known hosts.
[   78.217805][ T5757] cgroup: Unknown subsys name 'net'
[   78.384534][ T5757] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   80.067611][ T5757] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   81.753501][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   81.776337][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   81.780936][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   81.789486][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   81.793048][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   81.806160][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   81.807169][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   81.819035][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   81.821517][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   81.830614][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   81.839792][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   81.849333][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   81.857142][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   81.857976][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   81.864923][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   81.873026][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   81.887262][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   81.889090][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   81.901814][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   81.903333][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   81.928082][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   81.935330][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   81.945878][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   81.954263][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   82.429397][ T5768] chnl_net:caif_netlink_parms(): no params data found
[   82.529964][ T5771] chnl_net:caif_netlink_parms(): no params data found
[   82.574603][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.583058][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.591417][ T5768] bridge_slave_0: entered allmulticast mode
[   82.598788][ T5768] bridge_slave_0: entered promiscuous mode
[   82.614190][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.621497][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.628792][ T5768] bridge_slave_1: entered allmulticast mode
[   82.636257][ T5768] bridge_slave_1: entered promiscuous mode
[   82.648141][ T5769] chnl_net:caif_netlink_parms(): no params data found
[   82.688288][ T5770] chnl_net:caif_netlink_parms(): no params data found
[   82.715887][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   82.736097][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   82.853570][ T5768] team0: Port device team_slave_0 added
[   82.863342][ T5768] team0: Port device team_slave_1 added
[   82.969393][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0
[   82.977180][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.003199][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.015312][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.022479][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.030182][ T5771] bridge_slave_0: entered allmulticast mode
[   83.037815][ T5771] bridge_slave_0: entered promiscuous mode
[   83.046694][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.053858][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.061277][ T5771] bridge_slave_1: entered allmulticast mode
[   83.068511][ T5771] bridge_slave_1: entered promiscuous mode
[   83.087088][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.094258][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.104509][ T5769] bridge_slave_0: entered allmulticast mode
[   83.111812][ T5769] bridge_slave_0: entered promiscuous mode
[   83.120356][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.128193][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.154192][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.187488][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.194671][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.202109][ T5770] bridge_slave_0: entered allmulticast mode
[   83.209622][ T5770] bridge_slave_0: entered promiscuous mode
[   83.217468][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.224642][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.232128][ T5769] bridge_slave_1: entered allmulticast mode
[   83.241197][ T5769] bridge_slave_1: entered promiscuous mode
[   83.262658][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.272301][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.280363][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.287986][ T5770] bridge_slave_1: entered allmulticast mode
[   83.295000][ T5770] bridge_slave_1: entered promiscuous mode
[   83.324561][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.364295][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.410489][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.443445][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.458082][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.476903][ T5768] hsr_slave_0: entered promiscuous mode
[   83.483909][ T5768] hsr_slave_1: entered promiscuous mode
[   83.509297][ T5771] team0: Port device team_slave_0 added
[   83.518155][ T5771] team0: Port device team_slave_1 added
[   83.547308][ T5769] team0: Port device team_slave_0 added
[   83.562732][ T5770] team0: Port device team_slave_0 added
[   83.602550][ T5769] team0: Port device team_slave_1 added
[   83.611049][ T5770] team0: Port device team_slave_1 added
[   83.628141][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.635476][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.661549][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.679945][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.687236][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.713300][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.776500][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.783525][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.810101][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.822147][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.829534][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.855715][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.874467][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.881697][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.907978][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.930481][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.937543][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.964478][ T5781] Bluetooth: hci2: command tx timeout
[   83.965547][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.035263][ T5781] Bluetooth: hci0: command tx timeout
[   84.046071][ T5781] Bluetooth: hci3: command tx timeout
[   84.046594][ T5782] Bluetooth: hci1: command tx timeout
[   84.068335][ T5769] hsr_slave_0: entered promiscuous mode
[   84.074799][ T5769] hsr_slave_1: entered promiscuous mode
[   84.081437][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.090022][ T5769] Cannot create hsr debugfs directory
[   84.133089][ T5771] hsr_slave_0: entered promiscuous mode
[   84.139789][ T5771] hsr_slave_1: entered promiscuous mode
[   84.146351][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.153953][ T5771] Cannot create hsr debugfs directory
[   84.224416][ T5770] hsr_slave_0: entered promiscuous mode
[   84.231074][ T5770] hsr_slave_1: entered promiscuous mode
[   84.238084][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.245833][ T5770] Cannot create hsr debugfs directory
[   84.570407][ T5768] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   84.605865][ T5768] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   84.616108][ T5768] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   84.627190][ T5768] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   84.720804][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   84.736193][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   84.747116][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   84.766188][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   84.868852][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   84.900988][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   84.910971][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   84.930532][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   84.995890][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   85.011276][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   85.021754][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   85.033279][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   85.119719][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.150220][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.164593][ T5769] 8021q: adding VLAN 0 to HW filter on device team0
[   85.199450][ T5768] 8021q: adding VLAN 0 to HW filter on device team0
[   85.245303][ T2991] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.252600][ T2991] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.263988][ T2991] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.271197][ T2991] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.288228][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.295437][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.346119][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.363775][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.370934][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.460925][ T5771] 8021q: adding VLAN 0 to HW filter on device team0
[   85.486395][ T2991] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.493524][ T2991] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.516820][ T2991] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.524009][ T2991] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.567012][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.662207][ T5770] 8021q: adding VLAN 0 to HW filter on device team0
[   85.719119][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.726366][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.763491][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.770746][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.903478][ T5770] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   85.931776][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   86.035547][ T5782] Bluetooth: hci2: command tx timeout
[   86.067413][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.082356][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.116954][ T5782] Bluetooth: hci3: command tx timeout
[   86.122443][ T5782] Bluetooth: hci0: command tx timeout
[   86.129563][ T5782] Bluetooth: hci1: command tx timeout
[   86.271882][ T5769] veth0_vlan: entered promiscuous mode
[   86.293168][ T5768] veth0_vlan: entered promiscuous mode
[   86.322507][ T5768] veth1_vlan: entered promiscuous mode
[   86.337786][ T5769] veth1_vlan: entered promiscuous mode
[   86.353285][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.449402][ T5769] veth0_macvtap: entered promiscuous mode
[   86.483216][ T5769] veth1_macvtap: entered promiscuous mode
[   86.499867][ T5768] veth0_macvtap: entered promiscuous mode
[   86.527517][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.539973][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.556202][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.571922][ T5768] veth1_macvtap: entered promiscuous mode
[   86.583416][ T5771] veth0_vlan: entered promiscuous mode
[   86.598536][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.607503][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.617294][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.626980][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.672422][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.686319][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.698548][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.709303][ T5771] veth1_vlan: entered promiscuous mode
[   86.748545][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.761128][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.774606][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.822127][ T5768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.832250][ T5768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.841543][ T5768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.852979][ T5768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.899527][ T5770] veth0_vlan: entered promiscuous mode
[   86.930653][ T5771] veth0_macvtap: entered promiscuous mode
[   86.957323][  T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.972378][ T5770] veth1_vlan: entered promiscuous mode
[   86.978451][  T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.990379][ T5771] veth1_macvtap: entered promiscuous mode
[   87.091511][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.121824][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.134185][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.150324][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.172330][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.181748][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.205732][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.228407][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.246598][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.257107][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.267880][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.280214][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.294489][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.304686][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.317117][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.326271][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.353579][ T5770] veth0_macvtap: entered promiscuous mode
[   87.386398][ T5770] veth1_macvtap: entered promiscuous mode
[   87.472957][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.503246][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.582656][  T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.605134][  T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.640833][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.702842][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.732525][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.747137][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.765662][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.787432][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.816967][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.971001][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.979494][ T5838] syz.1.5[5838]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   87.987940][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.001166][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.011880][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.023534][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.034674][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.040007][ T5838] loop1: detected capacity change from 0 to 512
[   88.052855][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.081600][   T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.104311][   T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.116308][ T5782] Bluetooth: hci2: command tx timeout
[   88.142637][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.186998][ T5838] EXT4-fs (loop1): 1 truncate cleaned up
[   88.188764][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.201886][ T5777] Bluetooth: hci3: command tx timeout
[   88.202187][ T5782] Bluetooth: hci0: command tx timeout
[   88.213335][ T5777] Bluetooth: hci1: command tx timeout
[   88.219633][ T5838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.242880][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.257286][ T5838] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.5: bg 0: block 465: padding at end of block bitmap is not set
[   88.272855][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.276860][   T28] audit: type=1800 audit(1777375810.848:2): pid=5838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5" name="file0" dev="loop1" ino=13 res=0 errno=0
[   88.324631][ T5838] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem
[   88.360439][ T5838] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.5: invalid indirect mapped block 234881024 (level 0)
[   88.434563][ T2964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.453727][ T2964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.550003][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.627660][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.648485][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.710252][ T5849] capability: warning: `syz.1.7' uses 32-bit capabilities (legacy support in use)
[   88.724834][ T5849] program syz.1.7 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   88.770910][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.808325][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.866681][ T5772] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   88.882633][ T5852] =======================================================
[   88.882633][ T5852] WARNING: The mand mount option has been deprecated and
[   88.882633][ T5852]          and is ignored by this kernel. Remove the mand
[   88.882633][ T5852]          option from the mount to silence this warning.
[   88.882633][ T5852] =======================================================
[   89.115173][ T5772] usb 3-1: Using ep0 maxpacket: 16
[   89.129890][ T5772] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   89.142006][ T5772] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   89.178451][ T5772] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   89.214290][ T5772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.233309][ T5772] usb 3-1: Product: syz
[   89.244990][ T5772] usb 3-1: Manufacturer: syz
[   89.253207][ T5772] usb 3-1: SerialNumber: syz
[   89.524666][ T5772] usb 3-1: 0:2 : does not exist
[   89.560237][ T5772] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[   89.655567][ T5772] usb 3-1: USB disconnect, device number 2
[   89.733237][ T5786] udevd[5786]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   89.815166][ T5811] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   90.015266][ T5811] usb 2-1: Using ep0 maxpacket: 8
[   90.042318][ T5811] usb 2-1: config index 0 descriptor too short (expected 30, got 18)
[   90.059771][ T5811] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[   90.085089][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.093238][ T5811] usb 2-1: Product: syz
[   90.106293][ T5811] usb 2-1: Manufacturer: syz
[   90.110968][ T5811] usb 2-1: SerialNumber: syz
[   90.127641][ T5811] usb 2-1: config 0 descriptor??
[   90.153281][ T5811] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[   90.175199][ T5811] usb 2-1: setting power ON
[   90.180315][ T5811] dvb-usb: bulk message failed: -22 (2/0)
[   90.195859][ T5782] Bluetooth: hci2: command tx timeout
[   90.220758][ T5811] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   90.241148][ T5811] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[   90.261186][ T5811] usb 2-1: media controller created
[   90.275892][ T5777] Bluetooth: hci1: command tx timeout
[   90.281523][ T5777] Bluetooth: hci3: command tx timeout
[   90.288239][ T5782] Bluetooth: hci0: command tx timeout
[   90.325638][ T5878] loop0: detected capacity change from 0 to 32768
[   90.347209][ T5869] dvb-usb: bulk message failed: -22 (3/0)
[   90.353291][ T5869] dvb-usb: bulk message failed: -22 (4/0)
[   90.360940][ T5869] cxusb: i2c read failed
[   90.367960][ T5869] dvb-usb: bulk message failed: -22 (3/0)
[   90.373922][ T5869] dvb-usb: bulk message failed: -22 (3/0)
[   90.404378][ T5811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   90.450559][ T5811] usb 2-1: selecting invalid altsetting 6
[   90.457507][ T5811] usb 2-1: digital interface selection failed (-22)
[   90.464228][ T5811] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[   90.478917][ T5811] usb 2-1: setting power OFF
[   90.483910][ T5811] dvb-usb: bulk message failed: -22 (2/0)
[   90.493978][ T5878] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   90.536623][ T5811] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[   90.577718][ T5811] (NULL device *): no alternate interface
[   90.621633][ T5878] XFS (loop0): Ending clean mount
[   90.673012][ T5878] XFS (loop0): Quotacheck needed: Please wait.
[   90.773214][ T5811] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[   90.802348][ T5878] XFS (loop0): Quotacheck: Done.
[   90.832189][ T5811] usb 2-1: USB disconnect, device number 2
[   91.129702][ T5770] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   91.448395][   T28] audit: type=1326 audit(1777375814.048:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01f19cdd9 code=0x7ffc0000
[   91.515174][   T28] audit: type=1326 audit(1777375814.048:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01f19cdd9 code=0x7ffc0000
[   91.567917][   T28] audit: type=1326 audit(1777375814.058:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc01f19cdd9 code=0x7ffc0000
[   91.615168][ T5811] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   91.621124][   T28] audit: type=1326 audit(1777375814.068:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01f19cdd9 code=0x7ffc0000
[   91.705193][   T28] audit: type=1326 audit(1777375814.088:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fc01f19cdd9 code=0x7ffc0000
[   91.741628][ T5912] program syz.0.22 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   91.747251][   T28] audit: type=1326 audit(1777375814.088:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01f19cdd9 code=0x7ffc0000
[   91.781840][   T28] audit: type=1326 audit(1777375814.088:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01f19cdd9 code=0x7ffc0000
[   91.865211][ T5811] usb 4-1: Using ep0 maxpacket: 32
[   91.874701][ T5811] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[   91.891834][ T5811] usb 4-1: config 0 has no interface number 0
[   91.898445][   T28] audit: type=1326 audit(1777375814.098:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fc01f19cdd9 code=0x7ffc0000
[   91.915769][ T5811] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   91.953437][ T5811] usb 4-1: config 0 interface 85 has no altsetting 0
[   91.978956][   T28] audit: type=1326 audit(1777375814.098:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.1.26" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01f19cdd9 code=0x7ffc0000
[   91.992522][ T5811] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[   92.018886][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.042947][ T5811] usb 4-1: Product: syz
[   92.053032][ T5811] usb 4-1: Manufacturer: syz
[   92.071310][ T5811] usb 4-1: SerialNumber: syz
[   92.099719][ T5811] usb 4-1: config 0 descriptor??
[   92.126967][  T967] cfg80211: failed to load regulatory.db
[   92.421393][ T5908] loop2: detected capacity change from 0 to 32768
[   92.505602][ T5908] JBD2: Ignoring recovery information on journal
[   92.637355][ T5908] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   92.729024][ T5811] appletouch 4-1:0.85: Geyser mode initialized.
[   92.745324][ T5811] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input5
[   92.834797][ T5918] loop0: detected capacity change from 0 to 32768
[   92.899819][ T5918] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.29 (5918)
[   92.988275][ T5918] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   93.048978][ T5918] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   93.088455][  T967] usb 4-1: USB disconnect, device number 2
[   93.097868][ T5918] BTRFS info (device loop0): enabling auto defrag
[   93.115307][ T5918] BTRFS info (device loop0): use no compression
[   93.121675][ T5918] BTRFS info (device loop0): max_inline at 4096
[   93.133687][ T5918] BTRFS info (device loop0): using free space tree
[   93.191949][ T5768] ocfs2: Unmounting device (7,2) on (node local)
[   93.214173][  T967] appletouch 4-1:0.85: input: appletouch disconnected
[   93.337787][ T5918] BTRFS info (device loop0): enabling ssd optimizations
[   93.345624][ T5918] BTRFS info (device loop0): auto enabling async discard
[   93.848482][ T5770] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   94.415217][ T5811] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   94.531260][ T5969] loop2: detected capacity change from 0 to 2048
[   94.609337][ T5969] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   94.619902][ T5811] usb 1-1: Using ep0 maxpacket: 16
[   94.648315][ T5811] usb 1-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config
[   94.685411][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   94.732076][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 24929, setting to 1024
[   94.782069][ T5811] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[   94.812736][ T5811] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   94.845718][ T5811] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   94.865360][ T5811] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   94.899885][ T5811] usb 1-1: Manufacturer: syz
[   94.922475][ T5811] usb 1-1: config 0 descriptor??
[   95.169101][ T5983] loop3: detected capacity change from 0 to 256
[   95.255118][ T5811] rc_core: IR keymap rc-hauppauge not found
[   95.278838][ T5983] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   95.295471][ T5811] Registered IR keymap rc-empty
[   95.315926][ T5811] mceusb 1-1:0.0: Error: mce write urb status = -71
[   95.385179][ T5811] mceusb 1-1:0.0: Error: mce write urb status = -71
[   95.420223][ T5811] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[   95.443154][ T5988] loop1: detected capacity change from 0 to 1024
[   95.480962][ T5811] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6
[   95.500225][ T5811] mceusb 1-1:0.0: Error: mce write urb status = -71
[   95.535640][ T5811] mceusb 1-1:0.0: Error: mce write urb status = -71
[   95.589359][ T5811] mceusb 1-1:0.0: Error: mce write urb status = -71
[   95.665392][ T5811] mceusb 1-1:0.0: Error: mce write urb status = -71
[   95.706152][ T5811] mceusb 1-1:0.0: Error: mce write urb status = -71
[   95.775122][ T5811] mceusb 1-1:0.0: Error: mce write urb status = -71
[   95.807049][ T5769] hfsplus: bad catalog entry type
[   95.815711][ T5811] mceusb 1-1:0.0: Error: mce write urb status = -71
[   95.867602][ T5811] mceusb 1-1:0.0: Error: mce write urb status = -71
[   95.927963][ T5811] mceusb 1-1:0.0: Error: mce write urb status = -71
[   95.974526][ T5811] mceusb 1-1:0.0: Error: mce write urb status = -71
[   96.019031][ T5811] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[   96.033756][ T5811] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[   96.054088][ T5811] usb 1-1: USB disconnect, device number 2
[   96.116320][ T5786] udevd[5786]: setting mode of /dev/bus/usb/001/002 to 020664 failed: No such file or directory
[   96.139519][ T5786] udevd[5786]: setting owner of /dev/bus/usb/001/002 to uid=0, gid=0 failed: No such file or directory
[   96.206719][   T66] hfsplus: b-tree write err: -5, ino 25
[   96.213463][   T66] hfsplus: b-tree write err: -5, ino 4
[   96.249934][   T66] hfsplus: b-tree write err: -5, ino 2
[   96.300592][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.395777][ T6002] loop3: detected capacity change from 0 to 164
[   96.463758][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.529680][ T6002] rock: directory entry would overflow storage
[   96.552978][ T6002] rock: sig=0x4d4e, size=5, remaining=4
[   96.572807][ T6002] isofs: isofs_export_get_parent(): child directory not normalized!
[   96.617410][ T6003] isofs: isofs_export_get_parent(): child directory not normalized!
[   96.653685][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.827720][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   96.857992][ T5997] loop2: detected capacity change from 0 to 32768
[   97.205940][ T5997] UFO tlock:0xffffc9000286a120
[   97.285325][ T5811] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   97.495209][ T5811] usb 1-1: Using ep0 maxpacket: 16
[   97.511468][ T5811] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[   97.535142][ T5811] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[   97.565186][ T5811] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   97.609806][ T5811] usb 1-1: config 1 interface 0 has no altsetting 0
[   97.622826][ T5811] usb 1-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40
[   97.635120][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.653437][ T5811] usb 1-1: Product: syz
[   97.663567][ T5811] usb 1-1: Manufacturer: syz
[   97.672148][ T5811] usb 1-1: SerialNumber: syz
[   97.794179][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   97.805867][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   97.821055][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   97.831105][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   97.843550][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   97.859784][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   97.931820][ T5811] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8
[   98.179239][ T5772] usb 1-1: USB disconnect, device number 3
[   98.223466][ T5772] usblp0: removed
[   98.417624][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'.
[   99.149659][ T5811] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   99.266299][ T6017] chnl_net:caif_netlink_parms(): no params data found
[   99.386345][ T5811] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[   99.389717][ T6044] loop0: detected capacity change from 0 to 32768
[   99.410908][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.420095][   T11] hsr_slave_0: left promiscuous mode
[   99.442116][ T5811] usb 3-1: Product: syz
[   99.442227][   T11] hsr_slave_1: left promiscuous mode
[   99.449252][ T5811] usb 3-1: Manufacturer: syz
[   99.475370][ T5811] usb 3-1: SerialNumber: syz
[   99.483489][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.511893][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.522076][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.540815][ T6044] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   99.565345][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.574283][   T11] bridge_slave_1: left allmulticast mode
[   99.590579][   T11] bridge_slave_1: left promiscuous mode
[   99.605674][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.641684][   T11] bridge_slave_0: left allmulticast mode
[   99.648694][   T11] bridge_slave_0: left promiscuous mode
[   99.654876][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.705834][ T6042] loop3: detected capacity change from 0 to 32768
[   99.760244][ T6044] XFS (loop0): Ending clean mount
[   99.779479][ T5811] rtl8150 3-1:1.0: couldn't reset the device
[   99.786868][ T5811] rtl8150: probe of 3-1:1.0 failed with error -5
[   99.811278][ T6044] XFS (loop0): Quotacheck needed: Please wait.
[   99.822377][   T11] veth1_macvtap: left promiscuous mode
[   99.844047][   T11] veth0_macvtap: left promiscuous mode
[   99.870066][   T11] veth1_vlan: left promiscuous mode
[   99.874609][ T5811] usb 3-1: USB disconnect, device number 3
[   99.900554][   T11] veth0_vlan: left promiscuous mode
[   99.911947][ T6044] XFS (loop0): Quotacheck: Done.
[   99.942902][ T6063] ea_get: invalid extended attribute
[   99.956729][ T5777] Bluetooth: hci3: command tx timeout
[   99.974184][ T6063] ffff88807763b170: 04 00 00 00                                      ....
[  100.311140][ T5770] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  101.188042][   T11] team0 (unregistering): Port device team_slave_1 removed
[  101.232589][   T11] team0 (unregistering): Port device team_slave_0 removed
[  101.274945][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  101.321582][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  101.816020][   T11] bond0 (unregistering): Released all slaves
[  101.945451][ T6070] netlink: 52 bytes leftover after parsing attributes in process `syz.3.75'.
[  102.045262][ T5777] Bluetooth: hci3: command tx timeout
[  102.253517][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.294040][ T6017] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.315317][ T6017] bridge_slave_0: entered allmulticast mode
[  102.334657][ T6017] bridge_slave_0: entered promiscuous mode
[  102.342565][ T6090] loop0: detected capacity change from 0 to 2048
[  102.361416][ T6017] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.374928][ T6017] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.405294][ T6017] bridge_slave_1: entered allmulticast mode
[  102.423455][ T6017] bridge_slave_1: entered promiscuous mode
[  102.467774][ T6090] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  102.526375][ T6090] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  102.535144][ T6090] UDF-fs: Scanning with blocksize 512 failed
[  102.580063][ T6017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.603519][ T6090] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  102.648687][ T6017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.734746][   T28] kauditd_printk_skb: 1 callbacks suppressed
[  102.734760][   T28] audit: type=1800 audit(1777375825.328:13): pid=6090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.80" name="file1" dev="loop0" ino=838 res=0 errno=0
[  102.817571][   T28] audit: type=1800 audit(1777375825.338:14): pid=6090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.80" name="file1" dev="loop0" ino=838 res=0 errno=0
[  102.876886][ T6017] team0: Port device team_slave_0 added
[  102.912392][ T6017] team0: Port device team_slave_1 added
[  102.938558][ T6093] loop3: detected capacity change from 0 to 4096
[  103.073218][ T6098] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  103.116431][ T6017] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.152556][ T6017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.245141][ T6017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.288820][ T6017] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.307375][ T6088] loop2: detected capacity change from 0 to 32768
[  103.323577][ T6017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.349986][ T6088] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.81 (6088)
[  103.389930][ T6100] loop0: detected capacity change from 0 to 4096
[  103.419500][ T6088] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  103.454753][ T6100] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512).
[  103.464146][ T6088] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  103.464253][ T6088] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  103.464367][ T6088] BTRFS info (device loop2): use zstd compression, level 3
[  103.464388][ T6088] BTRFS info (device loop2): using free space tree
[  103.528504][ T6017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.664252][ T6088] BTRFS info (device loop2): enabling ssd optimizations
[  103.695925][ T6088] BTRFS info (device loop2): auto enabling async discard
[  103.838426][ T6017] hsr_slave_0: entered promiscuous mode
[  103.890691][ T6017] hsr_slave_1: entered promiscuous mode
[  103.923038][   T28] audit: type=1800 audit(1777375826.518:15): pid=6088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.81" name="file1" dev="loop2" ino=260 res=0 errno=0
[  103.978715][ T6017] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  104.010940][ T6017] Cannot create hsr debugfs directory
[  104.051810][ T6124] netlink: 48 bytes leftover after parsing attributes in process `syz.3.84'.
[  104.115255][ T5777] Bluetooth: hci3: command tx timeout
[  104.434481][ T5768] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  104.951601][ T6142] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  104.960627][ T6017] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  105.064576][ T6017] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  105.118606][ T6017] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  105.156112][ T6017] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  105.305841][ T5772] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  105.458003][ T6017] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.502939][ T6133] loop3: detected capacity change from 0 to 32768
[  105.508740][ T5772] usb 3-1: Using ep0 maxpacket: 8
[  105.527267][ T6017] 8021q: adding VLAN 0 to HW filter on device team0
[  105.536604][ T5772] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  105.568126][ T5772] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  105.605923][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.613167][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.630333][ T5772] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  105.659314][ T6133] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  105.704160][ T5772] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  105.760781][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.768112][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.806349][ T5772] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  105.835428][ T5772] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.874136][ T6162] netlink: 'syz.0.92': attribute type 12 has an invalid length.
[  105.893829][ T6162] netlink: 24 bytes leftover after parsing attributes in process `syz.0.92'.
[  106.039336][ T6133] syz.3.87 (6133) used greatest stack depth: 18704 bytes left
[  106.106565][ T5772] usb 3-1: GET_CAPABILITIES returned 0
[  106.112262][ T5772] usbtmc 3-1:16.0: can't read capabilities
[  106.204672][ T5771] ocfs2: Unmounting device (7,3) on (node local)
[  106.210719][ T5777] Bluetooth: hci3: command tx timeout
[  106.242348][ T6167] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  106.392611][ T5811] usb 3-1: USB disconnect, device number 4
[  106.649121][ T6017] 8021q: adding VLAN 0 to HW filter on device batadv0
[  106.735284][   T27] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  106.975374][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  107.029756][   T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  107.074914][   T27] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[  107.085882][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.121800][   T27] usb 4-1: config 0 descriptor??
[  107.406505][ T6194] loop2: detected capacity change from 0 to 8192
[  107.448468][ T6194] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  107.558182][ T6194] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  107.593499][   T27] saitek 0003:06A3:0621.0001: ignoring exceeding usage max
[  107.620888][ T6194] REISERFS (device loop2): using ordered data mode
[  107.667788][   T27] saitek 0003:06A3:0621.0001: unknown main item tag 0x1
[  107.682703][ T6194] reiserfs: using flush barriers
[  107.712267][ T6194] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  107.730175][   T27] saitek 0003:06A3:0621.0001: collection stack underflow
[  107.759332][   T27] saitek 0003:06A3:0621.0001: item 0 4 0 12 parsing failed
[  107.777103][ T6194] REISERFS (device loop2): checking transaction log (loop2)
[  107.787507][ T6017] veth0_vlan: entered promiscuous mode
[  107.795689][   T27] saitek 0003:06A3:0621.0001: parse failed
[  107.804798][   T27] saitek: probe of 0003:06A3:0621.0001 failed with error -22
[  107.837926][ T6017] veth1_vlan: entered promiscuous mode
[  107.864956][   T27] usb 4-1: USB disconnect, device number 3
[  107.989895][ T6017] veth0_macvtap: entered promiscuous mode
[  108.031929][ T6017] veth1_macvtap: entered promiscuous mode
[  108.100309][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.154042][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.182783][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.204523][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.205332][ T6194] REISERFS (device loop2): Using tea hash to sort names
[  108.224485][ T6194] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  108.260890][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.285107][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.302432][ T6017] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.334066][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.356097][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.375632][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.395066][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.425082][ T6017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  108.446738][   T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  108.463124][ T6017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.481510][ T6017] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.514176][ T6017] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.555306][ T6017] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.594582][ T6017] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.605241][ T6017] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.660788][   T27] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  108.675732][   T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.694143][   T27] usb 1-1: Product: syz
[  108.714265][   T27] usb 1-1: Manufacturer: syz
[  108.727958][   T27] usb 1-1: SerialNumber: syz
[  108.773092][   T27] usb 1-1: config 0 descriptor??
[  108.856355][  T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.893994][  T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.969661][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.986488][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.065268][   T27] usb 1-1: ignoring: probably an ADSL modem
[  109.460271][   T27] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[  109.692472][   T27] usb 1-1: USB disconnect, device number 4
[  110.695231][ T5830] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  110.900701][ T5830] usb 5-1: Using ep0 maxpacket: 32
[  110.923126][ T5830] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  110.955450][ T5830] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.969231][ T5830] usb 5-1: Product: syz
[  110.973456][ T5830] usb 5-1: Manufacturer: syz
[  110.991999][ T5830] usb 5-1: SerialNumber: syz
[  111.029876][ T5830] usb 5-1: config 0 descriptor??
[  111.288692][ T5830] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 002
[  111.402183][ T6265] loop0: detected capacity change from 0 to 32768
[  111.439643][ T6265] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.110 (6265)
[  111.499912][ T6265] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  111.551565][ T6265] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  111.572717][ T6262] i2c i2c-1: adapter quirk: no zero length (addr 0x0007, size 0, read)
[  111.593745][ T6265] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  111.618935][ T5772] usb 5-1: USB disconnect, device number 2
[  111.640886][ T6265] BTRFS info (device loop0): use zstd compression, level 3
[  111.670971][ T6265] BTRFS info (device loop0): using free space tree
[  111.895469][ T6265] BTRFS info (device loop0): enabling ssd optimizations
[  111.905198][ T6265] BTRFS info (device loop0): auto enabling async discard
[  112.125385][   T28] audit: type=1800 audit(1777375834.718:16): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.110" name="file1" dev="loop0" ino=260 res=0 errno=0
[  112.442110][ T5770] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  113.415128][    T8] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  113.630600][    T8] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  113.674557][    T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253
[  113.707312][    T8] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  113.734271][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.762402][    T8] usb 5-1: Product: syz
[  113.775086][    T8] usb 5-1: Manufacturer: syz
[  113.790342][    T8] usb 5-1: SerialNumber: syz
[  113.817217][    T8] usb 5-1: config 0 descriptor??
[  113.856403][    T8] gspca_main: sunplus-2.14.0 probing 055f:c630
[  114.077420][   T49] Bluetooth: hci4: Frame reassembly failed (-84)
[  114.100148][ T6347] Bluetooth: hci4: Frame reassembly failed (-84)
[  114.353491][ T6329] loop3: detected capacity change from 0 to 40427
[  114.385135][ T6329] F2FS-fs (loop3): Corrupted extension count (33554469 + 1 > 64)
[  114.393203][ T6329] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  114.431689][ T6329] F2FS-fs (loop3): invalid crc value
[  114.637296][ T6329] F2FS-fs (loop3): Try to recover 2th superblock, ret: -30
[  114.661008][ T6329] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  114.670183][    T8] gspca_sunplus: reg_r err -71
[  114.677683][    T8] sunplus: probe of 5-1:0.0 failed with error -71
[  114.727750][    T8] usb 5-1: USB disconnect, device number 3
[  114.909452][ T6365] netlink: 100 bytes leftover after parsing attributes in process `syz.2.134'.
[  115.825190][ T5830] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  115.937945][ T6390] loop3: detected capacity change from 0 to 8
[  115.955462][ T6390] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  115.973573][ T6176] udevd[6176]: incorrect cramfs checksum on /dev/loop3
[  116.005793][ T5830] usb 3-1: Using ep0 maxpacket: 32
[  116.020995][ T5830] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  116.038758][ T6176] udevd[6176]: incorrect cramfs checksum on /dev/loop3
[  116.045992][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.054111][ T5830] usb 3-1: Product: syz
[  116.064073][ T5830] usb 3-1: Manufacturer: syz
[  116.076058][ T5830] usb 3-1: SerialNumber: syz
[  116.094446][ T5830] usb 3-1: config 0 descriptor??
[  116.125901][ T5777] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  116.126006][ T5782] Bluetooth: hci4: command 0xfc11 tx timeout
[  116.356925][ T5830] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 005
[  116.564659][ T6383] i2c i2c-1: adapter quirk: no zero length (addr 0x0007, size 0, read)
[  116.580610][ T6403] loop4: detected capacity change from 0 to 2048
[  116.591712][ T5830] usb 3-1: USB disconnect, device number 5
[  116.641738][ T6403]  loop4: p3 < > p4 < >
[  116.656842][ T6403] loop4: partition table partially beyond EOD, truncated
[  116.687080][ T6406] netlink: 20 bytes leftover after parsing attributes in process `syz.3.154'.
[  116.694020][ T6403] loop4: p3 start 4284289 is beyond EOD, truncated
[  116.870817][ T6410] loop3: detected capacity change from 0 to 512
[  116.892859][ T6408] loop0: detected capacity change from 0 to 4096
[  116.941730][ T6408] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[  116.999642][ T6410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.012975][ T6410] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.042263][ T6176] udevd[6176]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  117.209773][   T28] audit: type=1800 audit(1777375839.808:17): pid=6408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.153" name="file1" dev="loop0" ino=30 res=0 errno=0
[  117.390731][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.433411][ T6421] loop2: detected capacity change from 0 to 2048
[  117.534671][ T6421] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  117.624842][ T6425] loop4: detected capacity change from 0 to 512
[  118.131134][ T6439] loop0: detected capacity change from 0 to 256
[  118.543470][ T6451] loop2: detected capacity change from 0 to 256
[  118.557145][ T6451] exfat: Deprecated parameter 'namecase'
[  118.593695][ T6451] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  118.929611][ T6461] Zero length message leads to an empty skb
[  119.425871][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.184'.
[  119.434830][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.184'.
[  119.481099][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.184'.
[  119.507107][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.184'.
[  119.536590][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.184'.
[  119.552550][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.184'.
[  119.562188][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.184'.
[  119.571639][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.184'.
[  119.688795][ T6491] openvswitch: netlink: Actions may not be safe on all matching packets
[  119.722289][ T6494] loop2: detected capacity change from 0 to 512
[  119.811600][ T6494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.845400][ T6494] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.066963][ T6494] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #12: comm syz.2.189: Directory hole found for htree leaf block 0
[  120.154727][ T6508] loop4: detected capacity change from 0 to 256
[  120.189172][ T6479] loop3: detected capacity change from 0 to 32768
[  120.219061][ T6479] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.183 (6479)
[  120.242771][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.268560][ T6508] FAT-fs (loop4): Directory bread(block 64) failed
[  120.307490][ T6479] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  120.309039][ T6508] FAT-fs (loop4): Directory bread(block 65) failed
[  120.347170][ T6479] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  120.375586][ T6508] FAT-fs (loop4): Directory bread(block 66) failed
[  120.402164][ T6508] FAT-fs (loop4): Directory bread(block 67) failed
[  120.409073][ T6479] BTRFS info (device loop3): using free space tree
[  120.431648][ T6508] FAT-fs (loop4): Directory bread(block 68) failed
[  120.459528][ T6508] FAT-fs (loop4): Directory bread(block 69) failed
[  120.507882][ T6508] FAT-fs (loop4): Directory bread(block 70) failed
[  120.514539][ T6508] FAT-fs (loop4): Directory bread(block 71) failed
[  120.534516][ T6508] FAT-fs (loop4): Directory bread(block 72) failed
[  120.541635][ T6508] FAT-fs (loop4): Directory bread(block 73) failed
[  120.614210][ T6479] BTRFS info (device loop3): enabling ssd optimizations
[  120.657308][ T6479] BTRFS info (device loop3): auto enabling async discard
[  120.819629][ T6529] iso9660: Corrupted directory entry in block 2 of inode 1792
[  121.089290][ T5771] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  121.138106][ T6539] input: syz1 as /devices/virtual/input/input7
[  121.591783][ T6547] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  121.624381][ T6547] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  121.642677][ T5772] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  121.652995][ T6547] REISERFS (device loop4): using ordered data mode
[  121.676865][ T6547] reiserfs: using flush barriers
[  121.688716][ T6547] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  121.705682][ T6547] REISERFS (device loop4): checking transaction log (loop4)
[  121.754450][ T6547] REISERFS (device loop4): Using r5 hash to sort names
[  121.772178][ T6547] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  121.865276][ T5772] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  121.892565][ T5772] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.931460][ T5772] usb 3-1: config 0 descriptor??
[  121.947846][ T5772] cp210x 3-1:0.0: cp210x converter detected
[  122.355198][ T5777] Bluetooth: hci3: command tx timeout
[  122.364721][ T5772] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  122.586947][ T5772] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -71
[  122.604761][ T5772] cp210x 3-1:0.0: GPIO initialisation failed: -71
[  122.651371][ T5772] usb 3-1: cp210x converter now attached to ttyUSB0
[  122.685553][ T5772] usb 3-1: USB disconnect, device number 6
[  122.738978][ T5772] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  122.757019][ T5772] cp210x 3-1:0.0: device disconnected
[  123.354098][ T6555] set_capacity_and_notify: 2 callbacks suppressed
[  123.354113][ T6555] loop0: detected capacity change from 0 to 65536
[  123.444135][ T6555] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  123.482888][ T6561] loop4: detected capacity change from 0 to 32768
[  123.494267][ T6563] loop2: detected capacity change from 0 to 4096
[  123.539148][ T6561] 
[  123.539148][ T6561]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  123.539148][ T6561] 
[  123.620670][ T6563] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  123.653483][ T6555] XFS (loop0): Ending clean mount
[  123.677875][ T6555] XFS (loop0): Quotacheck needed: Please wait.
[  123.722417][ T6563] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  123.865121][ T6555] XFS (loop0): Quotacheck: Done.
[  123.974278][   T66] read_mapping_page failed!
[  123.992039][   T66] ERROR: (device loop4): txCommit: 
[  123.992039][   T66] 
[  124.059225][   T66] jfs_write_inode: jfs_commit_inode failed!
[  124.082933][ T6017] 
[  124.082933][ T6017]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  124.082933][ T6017] 
[  124.098344][   T28] audit: type=1800 audit(1777375846.688:18): pid=6563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.208" name="file1" dev="loop2" ino=30 res=0 errno=0
[  124.151646][ T6017] 
[  124.151646][ T6017]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  124.151646][ T6017] 
[  124.297700][ T5770] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  124.817560][ T6589] loop2: detected capacity change from 0 to 2048
[  124.867215][ T6589] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  125.064686][ T6581] loop3: detected capacity change from 0 to 32768
[  125.157819][ T6581] read_mapping_page failed!
[  125.177673][ T6581] ERROR: (device loop3): txCommit: 
[  125.177673][ T6581] 
[  125.680222][ T6613] process 'syz.2.218' launched './file0' with NULL argv: empty string added
[  126.243397][ T6627] loop3: detected capacity change from 0 to 512
[  126.267843][ T6627] EXT4-fs: Ignoring removed bh option
[  126.289525][ T6627] EXT4-fs: Ignoring removed nomblk_io_submit option
[  126.337066][ T6627] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  126.410160][ T5830] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  126.434479][ T6627] EXT4-fs (loop3): 1 truncate cleaned up
[  126.470752][ T6627] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  126.529407][ T6627] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 1057052516 > max in inode 18
[  126.625932][ T5830] usb 3-1: Using ep0 maxpacket: 32
[  126.661579][ T5830] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  126.675847][ T5830] usb 3-1: config 0 has no interface number 0
[  126.695154][ T5830] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  126.727360][ T5830] usb 3-1: config 0 interface 85 has no altsetting 0
[  126.744879][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.759275][ T5830] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  126.782459][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.823130][ T5830] usb 3-1: Product: syz
[  126.837060][ T5830] usb 3-1: Manufacturer: syz
[  126.841729][ T5830] usb 3-1: SerialNumber: syz
[  126.897361][ T5830] usb 3-1: config 0 descriptor??
[  126.948804][ T6635] loop0: detected capacity change from 0 to 8192
[  126.972582][ T6635] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  126.988588][ T6635] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  126.998688][ T6635] REISERFS (device loop0): using ordered data mode
[  127.005399][ T6635] reiserfs: using flush barriers
[  127.019913][ T6635] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  127.036844][ T6635] REISERFS (device loop0): checking transaction log (loop0)
[  127.177654][ T6635] REISERFS (device loop0): Using tea hash to sort names
[  127.196667][ T6635] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  127.550901][ T5830] appletouch 3-1:0.85: Geyser mode initialized.
[  127.571506][ T5830] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input8
[  127.866971][ T5830] usb 3-1: USB disconnect, device number 7
[  127.919351][ T5830] appletouch 3-1:0.85: input: appletouch disconnected
[  128.365871][ T6648] loop3: detected capacity change from 0 to 32768
[  128.385175][ T6648] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.224 (6648)
[  128.442164][ T6648] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  128.488936][ T6648] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  128.529748][ T6648] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  128.559934][ T6648] BTRFS info (device loop3): use zstd compression, level 3
[  128.585090][ T6648] BTRFS info (device loop3): using free space tree
[  128.735625][ T5772] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  128.776160][ T6648] BTRFS info (device loop3): enabling ssd optimizations
[  128.783692][ T6648] BTRFS info (device loop3): auto enabling async discard
[  128.925692][ T5772] usb 1-1: Using ep0 maxpacket: 8
[  128.951265][ T5772] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  128.985311][ T5772] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  129.018669][ T5772] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.066637][ T5772] usb 1-1: config 0 descriptor??
[  129.143448][ T6695] loop2: detected capacity change from 0 to 128
[  129.167318][ T5771] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  129.329797][ T5772] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  129.400082][ T6698] loop4: detected capacity change from 0 to 128
[  129.567175][ T6698] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  129.694101][ T6698] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  129.784413][ T6176] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop3 scanned by udevd (6176)
[  129.925142][ T6017] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  130.438286][   T28] audit: type=1326 audit(1777375853.028:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7e673e159 code=0x7ffc0000
[  130.521657][   T28] audit: type=1326 audit(1777375853.028:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7e673e159 code=0x7ffc0000
[  130.575289][   T28] audit: type=1326 audit(1777375853.028:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e679cdd9 code=0x7ffc0000
[  130.610076][ T5811] usb 1-1: USB disconnect, device number 5
[  130.656064][   T28] audit: type=1326 audit(1777375853.028:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e679cdd9 code=0x7ffc0000
[  130.730270][   T28] audit: type=1326 audit(1777375853.038:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7e673e159 code=0x7ffc0000
[  130.815427][   T28] audit: type=1326 audit(1777375853.038:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7e673e159 code=0x7ffc0000
[  130.899197][   T28] audit: type=1326 audit(1777375853.048:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7e673e159 code=0x7ffc0000
[  130.963448][   T28] audit: type=1326 audit(1777375853.048:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7e673e159 code=0x7ffc0000
[  131.016319][   T28] audit: type=1326 audit(1777375853.058:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7e673e159 code=0x7ffc0000
[  131.079455][   T28] audit: type=1326 audit(1777375853.058:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6709 comm="syz.3.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7e673e159 code=0x7ffc0000
[  131.264224][ T6715] loop4: detected capacity change from 0 to 32768
[  131.299817][ T6715] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  131.533192][ T6176] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  131.548387][ T6732] loop2: detected capacity change from 0 to 64
[  131.773097][ T6732] hfs: request for non-existent node 131072 in B*Tree
[  131.815422][ T6732] hfs: request for non-existent node 131072 in B*Tree
[  131.823452][ T6734] loop4: detected capacity change from 0 to 8192
[  131.880944][ T6734] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  131.925133][ T6734] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  131.934859][ T6734] REISERFS (device loop4): using ordered data mode
[  131.975293][ T6734] reiserfs: using flush barriers
[  132.015176][ T6734] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  132.080227][ T6734] REISERFS (device loop4): checking transaction log (loop4)
[  132.161826][ T6746] warning: `syz.2.238' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  132.322348][ T6734] REISERFS (device loop4): Using tea hash to sort names
[  132.338132][ T6734] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  132.536297][ T6753] loop3: detected capacity change from 0 to 256
[  133.008861][ T6761] loop3: detected capacity change from 0 to 1024
[  133.085799][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  133.092733][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  133.137783][ T6761] hfsplus: bad catalog entry type
[  133.290625][ T6771] loop0: detected capacity change from 0 to 64
[  133.336772][ T2991] hfsplus: b-tree write err: -5, ino 25
[  133.342634][ T2991] hfsplus: b-tree write err: -5, ino 4
[  133.407234][ T2991] hfsplus: b-tree write err: -5, ino 2
[  133.412984][ T2991] hfsplus: b-tree write err: -5, ino 26
[  133.853345][ T6785] loop2: detected capacity change from 0 to 2048
[  133.918276][ T6791] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  134.046770][ T6785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.085559][ T6789] loop3: detected capacity change from 0 to 8192
[  134.127393][ T6789] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  134.161342][ T6789] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  134.215787][ T6789] REISERFS (device loop3): using ordered data mode
[  134.222395][ T6789] reiserfs: using flush barriers
[  134.255620][ T6785] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  134.313183][ T6789] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  134.375231][ T6789] REISERFS (device loop3): checking transaction log (loop3)
[  134.413915][ T6773] loop4: detected capacity change from 0 to 32768
[  134.462831][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.538275][ T6809] loop0: detected capacity change from 0 to 512
[  134.606436][ T6773] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  134.800876][ T6773] XFS (loop4): Ending clean mount
[  134.826162][ T6789] REISERFS (device loop3): Using tea hash to sort names
[  134.833559][ T6789] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  135.175436][ T6017] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  135.266070][ T6826] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  135.479391][ T6831] loop0: detected capacity change from 0 to 64
[  135.790140][ T6837] netlink: 'syz.4.260': attribute type 10 has an invalid length.
[  135.833833][ T6837] __nla_validate_parse: 45 callbacks suppressed
[  135.833850][ T6837] netlink: 152 bytes leftover after parsing attributes in process `syz.4.260'.
[  136.316919][ T6857] loop4: detected capacity change from 0 to 64
[  137.255597][ T6866] loop4: detected capacity change from 0 to 8192
[  137.329276][ T6866] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  137.402761][ T6866] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  137.425013][    C1] sched: RT throttling activated
[  137.486692][ T6866] REISERFS (device loop4): using ordered data mode
[  137.493285][ T6866] reiserfs: using flush barriers
[  137.567918][ T6866] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  137.653053][ T6859] loop2: detected capacity change from 0 to 131072
[  137.675093][ T6859] F2FS-fs (loop2): invalid crc value
[  137.695865][ T6866] REISERFS (device loop4): checking transaction log (loop4)
[  137.713540][ T6859] F2FS-fs (loop2): Found nat_bits in checkpoint
[  137.778737][ T6859] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  138.069184][ T6866] REISERFS (device loop4): Using tea hash to sort names
[  138.081997][ T6866] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  138.592137][ T5811] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  138.803660][ T5811] usb 4-1: Using ep0 maxpacket: 32
[  138.827810][ T5811] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  138.860405][ T5811] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  138.875296][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  138.894491][ T5811] usb 4-1: Product: syz
[  138.908946][ T5811] usb 4-1: Manufacturer: syz
[  138.913622][ T5811] usb 4-1: SerialNumber: syz
[  138.937785][ T5811] usb 4-1: config 0 descriptor??
[  138.954325][ T6894] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  139.058116][ T6892] loop2: detected capacity change from 0 to 32768
[  139.112590][ T6892] JBD2: Ignoring recovery information on journal
[  139.175327][ T5772] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  139.226407][ T6908] loop0: detected capacity change from 0 to 512
[  139.237981][ T6892] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  139.268370][ T6908] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz.0.288: corrupted in-inode xattr: invalid ea_ino
[  139.289481][ T6908] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.288: couldn't read orphan inode 15 (err -117)
[  139.309833][ T6908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.375583][ T5772] usb 5-1: Using ep0 maxpacket: 16
[  139.384160][ T5772] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  139.396332][ T5772] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  139.407766][ T5772] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  139.421619][ T5772] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  139.433152][ T5772] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  139.463241][ T5772] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  139.486121][ T5772] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  139.505588][ T5772] usb 5-1: Manufacturer: syz
[  139.526819][ T5772] usb 5-1: config 0 descriptor??
[  139.580226][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.684817][ T5768] ocfs2: Unmounting device (7,2) on (node local)
[  139.916174][ T5772] rc_core: IR keymap rc-hauppauge not found
[  139.923640][ T5772] Registered IR keymap rc-empty
[  139.939499][ T5772] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  139.997584][ T5772] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  140.037203][ T5772] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  140.062984][ T5772] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input9
[  140.103336][ T5772] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  140.194915][ T5772] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  140.272458][ T5772] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  140.315160][ T5772] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  140.385397][ T5772] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  140.450761][ T5772] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  140.464412][ T6925] loop0: detected capacity change from 0 to 8192
[  140.502064][ T6925] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  140.516056][ T5772] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  140.523500][ T6925] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  140.532820][ T6925] REISERFS (device loop0): using ordered data mode
[  140.539728][ T6925] reiserfs: using flush barriers
[  140.546582][ T6925] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  140.562884][ T5772] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  140.570861][ T6925] REISERFS (device loop0): checking transaction log (loop0)
[  140.595215][ T5772] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  140.645217][ T5772] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  140.697183][ T5772] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  140.725084][ T5772] mceusb 5-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active)
[  140.742823][ T6925] REISERFS (device loop0): Using tea hash to sort names
[  140.759022][ T6925] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  140.795552][ T5772] usb 5-1: USB disconnect, device number 4
[  141.097870][ T6920] loop2: detected capacity change from 0 to 32768
[  141.110145][ T6928] loop4: detected capacity change from 0 to 64
[  141.204449][ T6920] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  141.390931][    T9] usb 4-1: USB disconnect, device number 4
[  141.429421][ T6920] XFS (loop2): Ending clean mount
[  141.454018][ T6920] XFS (loop2): Quotacheck needed: Please wait.
[  141.557030][ T5772] kernel write not supported for file /102/attr/prev (pid: 5772 comm: kworker/0:3)
[  141.570979][ T6920] XFS (loop2): Quotacheck: Done.
[  141.622129][   T28] kauditd_printk_skb: 546 callbacks suppressed
[  141.622145][   T28] audit: type=1800 audit(1777375864.218:575): pid=6920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.291" name="bus" dev="loop2" ino=6155 res=0 errno=0
[  141.725243][   T28] audit: type=1800 audit(1777375864.228:576): pid=6920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.291" name="file1" dev="loop2" ino=6150 res=0 errno=0
[  141.764735][ T5768] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  141.952373][ T6946] loop4: detected capacity change from 0 to 2048
[  142.117568][ T6952] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  142.352257][ T6952] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  142.405926][ T6952] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  142.444262][ T6952] Remounting filesystem read-only
[  142.459978][   T49] NILFS (loop4): discard dirty page: offset=4096, ino=6
[  142.492418][   T49] NILFS (loop4): discard dirty block: blocknr=39, size=1024
[  142.515073][   T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  142.535558][   T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  142.554703][   T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  142.575119][   T49] NILFS (loop4): discard dirty page: offset=0, ino=3
[  142.581879][   T49] NILFS (loop4): discard dirty block: blocknr=42, size=1024
[  142.605235][   T49] NILFS (loop4): discard dirty block: blocknr=43, size=1024
[  142.612627][   T49] NILFS (loop4): discard dirty block: blocknr=44, size=1024
[  142.649169][ T6959] loop2: detected capacity change from 0 to 8192
[  142.659849][   T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  142.672913][ T6959] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  142.685667][   T49] NILFS (loop4): discard dirty page: offset=65536, ino=3
[  142.689782][ T6959] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  142.702635][ T6959] REISERFS (device loop2): using ordered data mode
[  142.709569][ T6959] reiserfs: using flush barriers
[  142.714363][   T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  142.729746][ T6959] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  142.754737][ T6959] REISERFS (device loop2): checking transaction log (loop2)
[  142.780879][   T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  142.791388][   T49] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[  142.799044][   T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  142.808449][   T49] NILFS (loop4): discard dirty page: offset=98304, ino=3
[  142.816400][   T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  142.825712][   T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  142.835317][   T49] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[  142.853623][   T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  142.876070][   T49] NILFS (loop4): discard dirty page: offset=196608, ino=3
[  142.883274][   T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  142.915557][   T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  142.938857][   T49] NILFS (loop4): discard dirty block: blocknr=49, size=1024
[  142.968784][   T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  142.997141][ T6966] mkiss: ax0: crc mode is auto.
[  143.023271][   T49] NILFS (loop4): discard dirty page: offset=0, ino=18
[  143.077512][   T49] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[  143.087945][   T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  143.098690][   T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  143.107930][   T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  143.118723][   T49] NILFS (loop4): discard dirty page: offset=0, ino=2
[  143.136171][   T49] NILFS (loop4): discard dirty block: blocknr=18, size=1024
[  143.165908][   T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  143.186990][   T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  143.210987][   T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  143.229396][ T6959] REISERFS (device loop2): Using tea hash to sort names
[  143.244257][   T49] NILFS (loop4): discard dirty page: offset=0, ino=19
[  143.255851][ T6959] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  143.284068][   T49] NILFS (loop4): discard dirty block: blocknr=0, size=1024
[  143.303691][   T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  143.348932][   T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  143.385207][   T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  143.413708][   T49] NILFS (loop4): discard dirty page: offset=0, ino=5
[  143.442106][   T49] NILFS (loop4): discard dirty block: blocknr=41, size=1024
[  143.464896][   T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  143.494969][   T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  143.519572][   T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  143.545414][   T49] NILFS (loop4): discard dirty page: offset=0, ino=4
[  143.567515][   T49] NILFS (loop4): discard dirty block: blocknr=40, size=1024
[  143.589845][   T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  143.620601][   T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  143.644489][   T49] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  143.679571][ T6017] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  143.705812][ T6017] NILFS (loop4): discard dirty page: offset=0, ino=6
[  143.730063][ T6017] NILFS (loop4): discard dirty block: blocknr=35, size=1024
[  143.745356][ T6017] NILFS (loop4): discard dirty block: blocknr=36, size=1024
[  143.771381][ T6017] NILFS (loop4): discard dirty block: blocknr=37, size=1024
[  143.805388][ T6017] NILFS (loop4): discard dirty block: blocknr=38, size=1024
[  144.025173][ T5830] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  144.217067][ T6989] loop2: detected capacity change from 0 to 128
[  144.237637][ T5830] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  144.285831][ T5830] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  144.331166][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.360510][ T5830] usb 1-1: Product: syz
[  144.364761][ T5830] usb 1-1: Manufacturer: syz
[  144.414712][ T5830] usb 1-1: SerialNumber: syz
[  144.493886][ T6977] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  144.528149][ T6977] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  144.777907][ T5830] usb 1-1: USB disconnect, device number 6
[  144.946267][ T6176] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  145.179959][ T6985] loop3: detected capacity change from 0 to 131072
[  145.197969][ T6985] F2FS-fs (loop3): invalid crc value
[  145.239018][ T6985] F2FS-fs (loop3): Found nat_bits in checkpoint
[  145.306452][ T6985] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  145.516258][ T7005] netlink: 552 bytes leftover after parsing attributes in process `syz.2.316'.
[  145.577980][ T6992] loop4: detected capacity change from 0 to 32768
[  145.641266][ T6992] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.315 (6992)
[  145.663382][ T6992] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  145.675606][ T6992] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  145.684372][ T6992] BTRFS info (device loop4): setting nodatasum
[  145.692671][ T6992] BTRFS info (device loop4): force zlib compression, level 3
[  145.700497][ T6992] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  145.712094][ T6992] BTRFS info (device loop4): use lzo compression, level 0
[  145.719732][ T6992] BTRFS info (device loop4): turning on flush-on-commit
[  145.728624][ T6992] BTRFS info (device loop4): enabling auto defrag
[  145.735832][ T6992] BTRFS info (device loop4): max_inline at 4096
[  145.742142][ T6992] BTRFS info (device loop4): using free space tree
[  145.931787][ T6992] BTRFS info (device loop4): enabling ssd optimizations
[  146.396950][ T6017] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  147.137571][ T7053] loop4: detected capacity change from 0 to 8192
[  147.200195][ T7053] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  147.220835][ T7053] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  147.248209][ T7053] REISERFS (device loop4): using ordered data mode
[  147.267222][ T5772] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  147.282986][ T7053] reiserfs: using flush barriers
[  147.300333][ T7053] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  147.352572][ T7053] REISERFS (device loop4): checking transaction log (loop4)
[  147.475624][ T5772] usb 1-1: Using ep0 maxpacket: 16
[  147.491581][ T5772] usb 1-1: config 0 has no interfaces?
[  147.504818][ T5772] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  147.534366][ T5772] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  147.557669][ T5772] usb 1-1: Manufacturer: syz
[  147.597793][ T5772] usb 1-1: config 0 descriptor??
[  147.652744][ T7053] REISERFS (device loop4): Using tea hash to sort names
[  147.671290][ T7053] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  147.904401][ T7054] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  147.947161][    T8] usb 1-1: USB disconnect, device number 7
[  148.395359][ T5830] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  148.608516][ T5830] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  148.616972][ T5830] usb 3-1: config 0 has no interface number 0
[  148.623360][ T5830] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  148.635081][ T5830] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  148.645882][ T5830] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  148.659081][ T5830] usb 3-1: config 0 interface 1 has no altsetting 0
[  148.665827][ T5830] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  148.674912][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.692824][ T5830] usb 3-1: config 0 descriptor??
[  149.309434][ T7088] loop0: detected capacity change from 0 to 4096
[  149.340706][ T5830] uclogic 0003:145F:0212.0002: pen parameters not found
[  149.361581][ T5830] uclogic 0003:145F:0212.0002: interface is invalid, ignoring
[  149.384129][ T7088] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  149.519118][ T7088] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  149.556497][   T27] usb 3-1: USB disconnect, device number 8
[  149.864072][ T7093] loop4: detected capacity change from 0 to 8192
[  149.900580][ T7093] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  149.959056][ T7093] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  149.975826][ T7093] REISERFS (device loop4): using ordered data mode
[  149.982986][ T7093] reiserfs: using flush barriers
[  150.013056][ T7093] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  150.032600][ T7093] REISERFS (device loop4): checking transaction log (loop4)
[  150.095795][ T5811] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  150.114681][ T7082] loop3: detected capacity change from 0 to 40427
[  150.167773][ T7082] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  150.174212][ T7082] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  150.235742][ T7082] F2FS-fs (loop3): invalid crc value
[  150.272253][ T7093] REISERFS (device loop4): Using tea hash to sort names
[  150.289899][ T5811] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.293817][ T7093] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  150.325237][ T7101] program syz.2.340 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  150.334034][ T5811] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  150.389058][ T5811] usb 1-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00
[  150.426430][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.475310][ T5811] usb 1-1: config 0 descriptor??
[  150.560644][ T7082] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  150.581054][ T7082] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  150.713891][ T5771] syz-executor: attempt to access beyond end of device
[  150.713891][ T5771] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  150.758419][ T5771] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  150.914561][ T5811] sony 0003:054C:042F.0003: ignoring exceeding usage max
[  150.951703][ T5811] sony 0003:054C:042F.0003: unknown main item tag 0x0
[  150.978897][ T5811] sony 0003:054C:042F.0003: unknown main item tag 0x0
[  151.005745][ T5811] sony 0003:054C:042F.0003: unknown main item tag 0x0
[  151.035328][ T5811] sony 0003:054C:042F.0003: unknown main item tag 0x0
[  151.042206][ T5811] sony 0003:054C:042F.0003: unknown main item tag 0x0
[  151.068032][ T5811] sony 0003:054C:042F.0003: unknown main item tag 0x0
[  151.079035][ T5811] sony 0003:054C:042F.0003: unknown main item tag 0x0
[  151.088436][ T5811] sony 0003:054C:042F.0003: unknown main item tag 0x0
[  151.100843][ T5811] sony 0003:054C:042F.0003: unknown main item tag 0x0
[  151.109939][ T5811] sony 0003:054C:042F.0003: unknown main item tag 0x0
[  151.121482][ T5811] sony 0003:054C:042F.0003: unknown main item tag 0x0
[  151.131019][ T5811] sony 0003:054C:042F.0003: unknown main item tag 0x0
[  151.144804][ T5811] sony 0003:054C:042F.0003: unknown main item tag 0x0
[  151.172808][ T5811] sony 0003:054C:042F.0003: unknown main item tag 0x0
[  151.187033][ T5811] sony 0003:054C:042F.0003: unknown main item tag 0x0
[  151.193993][ T5811] sony 0003:054C:042F.0003: unknown main item tag 0x0
[  151.204121][ T5811] sony 0003:054C:042F.0003: unknown main item tag 0x0
[  151.254752][ T5811] sony 0003:054C:042F.0003: unknown main item tag 0x0
[  151.271268][    T9] kernel write not supported for file /sg0 (pid: 9 comm: kworker/0:1)
[  151.271504][ T5811] sony 0003:054C:042F.0003: unknown main item tag 0x0
[  151.292093][ T5811] sony 0003:054C:042F.0003: unknown main item tag 0x0
[  151.299953][ T5811] sony 0003:054C:042F.0003: unknown main item tag 0x0
[  151.311853][ T5811] sony 0003:054C:042F.0003: unknown main item tag 0x0
[  151.319465][ T5811] sony 0003:054C:042F.0003: unknown main item tag 0x0
[  151.338817][ T5811] sony 0003:054C:042F.0003: unknown main item tag 0x0
[  151.355591][ T7114] loop4: detected capacity change from 0 to 64
[  151.361998][ T5811] sony 0003:054C:042F.0003: unknown main item tag 0x0
[  151.387914][ T5811] sony 0003:054C:042F.0003: unknown main item tag 0x0
[  151.404019][ T5811] sony 0003:054C:042F.0003: unbalanced collection at end of report description
[  151.437582][ T5811] sony 0003:054C:042F.0003: parse failed
[  151.457731][ T5811] sony: probe of 0003:054C:042F.0003 failed with error -22
[  151.509370][ T5811] usb 1-1: USB disconnect, device number 8
[  151.775155][    T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  151.917190][ T7130] loop0: detected capacity change from 0 to 64
[  151.963216][ T7130] MINIX-fs: mounting file system with errors, running fsck is recommended
[  151.991539][    T8] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  152.010407][    T8] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  152.022841][    T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  152.032724][    T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  152.044720][    T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  152.060921][    T8] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  152.080326][    T8] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  152.105038][    T8] usb 3-1: Product: syz
[  152.120807][    T8] usb 3-1: Manufacturer: syz
[  152.138518][    T8] cdc_wdm 3-1:1.0: skipping garbage
[  152.145991][ T7129] loop4: detected capacity change from 0 to 8192
[  152.152591][    T8] cdc_wdm 3-1:1.0: skipping garbage
[  152.168420][    T8] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  152.181713][ T7129] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  152.188675][    T8] cdc_wdm 3-1:1.0: Unknown control protocol
[  152.253804][ T7129] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  152.295261][ T7129] REISERFS (device loop4): using ordered data mode
[  152.306740][ T7129] reiserfs: using flush barriers
[  152.314509][ T7129] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  152.331762][ T7129] REISERFS (device loop4): checking transaction log (loop4)
[  152.544705][ T7129] REISERFS (device loop4): Using tea hash to sort names
[  152.565823][ T7129] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  153.228918][ T7152] loop4: detected capacity change from 0 to 256
[  153.250085][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.361'.
[  153.604147][ T7160] Driver unsupported XDP return value 0 on prog  (id 16) dev N/A, expect packet loss!
[  153.806275][ T7162] loop4: detected capacity change from 0 to 8192
[  153.844575][ T7162] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  153.890502][ T7162] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  153.932728][ T7162] REISERFS (device loop4): using ordered data mode
[  153.959681][ T7162] reiserfs: using flush barriers
[  153.995143][ T7162] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  154.024904][ T7156] loop3: detected capacity change from 0 to 32768
[  154.043704][ T7164] loop0: detected capacity change from 0 to 8192
[  154.050602][ T7156] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.363 (7156)
[  154.070073][ T7162] REISERFS (device loop4): checking transaction log (loop4)
[  154.103933][ T7164] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  154.154110][ T7156] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  154.194442][ T7162] REISERFS (device loop4): Using r5 hash to sort names
[  154.233288][ T7156] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  154.242343][ T7164] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  154.257004][ T7162] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  154.274705][ T7156] BTRFS info (device loop3): using free space tree
[  154.285866][ T7164] REISERFS (device loop0): using ordered data mode
[  154.292699][ T7164] reiserfs: using flush barriers
[  154.305644][ T7164] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  154.345866][ T7164] REISERFS (device loop0): checking transaction log (loop0)
[  154.450187][ T7162] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "ÿÿ18446744073709551615ÿÿÿÿ0177777777777777777777701777777777777777777777ÿÿ18446744073709551615ÿÿ"
[  154.473947][ T5811] usb 3-1: USB disconnect, device number 9
[  154.565568][ T7156] BTRFS info (device loop3): enabling ssd optimizations
[  154.572601][ T7156] BTRFS info (device loop3): auto enabling async discard
[  154.767960][ T7164] REISERFS (device loop0): Using tea hash to sort names
[  154.783165][ T7164] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  155.012531][ T5771] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  155.682924][ T7205] tipc: Started in network mode
[  155.703008][ T7205] tipc: Node identity ac14140f, cluster identity 4711
[  155.752770][ T7205] tipc: New replicast peer: 172.20.20.187
[  155.786573][ T7205] tipc: Enabled bearer <udp:syz2>, priority 10
[  156.412243][ T7222] loop0: detected capacity change from 0 to 8192
[  156.454684][ T7222] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  156.497355][ T7222] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  156.531028][ T7222] REISERFS (device loop0): using ordered data mode
[  156.558336][ T7222] reiserfs: using flush barriers
[  156.582847][ T7222] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  156.663688][ T7222] REISERFS (device loop0): checking transaction log (loop0)
[  156.787873][    T8] tipc: Node number set to 2886997007
[  156.911357][ T7222] REISERFS (device loop0): Using tea hash to sort names
[  156.945680][ T7222] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  157.007107][ T7227] loop4: detected capacity change from 0 to 32768
[  157.145360][ T7227] ERROR: (device loop4): dbAdjCtl: the maximum free buddy is not the old root
[  157.145360][ T7227] 
[  157.188187][ T7227] ERROR: (device loop4): remounting filesystem as read-only
[  157.379118][ T7248] netlink: 48 bytes leftover after parsing attributes in process `syz.2.395'.
[  157.597389][  T111] BUG: Bad page state in process jfsCommit  pfn:7bd7a
[  157.604303][  T111] page:ffffea0001ef5e80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x7bd7a
[  157.632716][  T111] flags: 0xfff0800000820d(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff)
[  157.663651][  T111] page_type: 0xffffffff()
[  157.669039][  T111] raw: 00fff0800000820d dead000000000100 dead000000000122 0000000000000000
[  157.685203][  T111] raw: 000000000000001c ffff8880658426c8 00000000ffffffff 0000000000000000
[  157.719281][  T111] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  157.731756][  T111] page_owner tracks the page as allocated
[  157.739053][  T111] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 7227, tgid 7225 (syz.4.384), ts 157074020525, free_ts 156858841393
[  157.757895][  T111]  post_alloc_hook+0x1c1/0x200
[  157.762971][  T111]  get_page_from_freelist+0x1951/0x19e0
[  157.777969][  T111]  __alloc_pages+0x1f0/0x460
[  157.782855][  T111]  folio_alloc+0x1e/0x30
[  157.788978][  T111]  filemap_alloc_folio+0xdf/0x490
[  157.797049][  T111]  do_read_cache_folio+0x364/0x7d0
[  157.802359][  T111]  do_read_cache_page+0x32/0x250
[  157.808844][  T111]  __get_metapage+0x31a/0xfa0
[  157.813710][  T111]  diRead+0x6d3/0xb90
[  157.818393][  T111]  jfs_iget+0x90/0x440
[  157.822613][  T111]  jfs_fill_super+0x712/0xad0
[  157.827827][  T111]  mount_bdev+0x221/0x2d0
[  157.832361][  T111]  legacy_get_tree+0xea/0x180
[  157.837698][  T111]  vfs_get_tree+0x8c/0x280
[  157.842260][  T111]  do_new_mount+0x24b/0xa40
[  157.847436][  T111]  __se_sys_mount+0x2e7/0x3d0
[  157.852298][  T111] page last free stack trace:
[  157.857731][  T111]  free_unref_page_prepare+0x7b2/0x8c0
[  157.863365][  T111]  free_unref_page_list+0xbe/0x860
[  157.869243][  T111]  release_pages+0x1f7a/0x2200
[  157.874138][  T111]  tlb_flush_mmu+0x379/0x510
[  157.879601][  T111]  tlb_finish_mmu+0xf9/0x220
[  157.884375][  T111]  exit_mmap+0x428/0xb90
[  157.890020][  T111]  __mmput+0x118/0x3c0
[  157.895588][  T111]  exit_mm+0x1f2/0x2c0
[  157.899908][  T111]  do_exit+0x8dd/0x2460
[  157.904241][  T111]  do_group_exit+0x21b/0x2d0
[  157.911352][  T111]  get_signal+0x12fc/0x13f0
[  157.916658][  T111]  arch_do_signal_or_restart+0xc2/0x800
[  157.922466][  T111]  exit_to_user_mode_loop+0x70/0x110
[  157.928374][  T111]  exit_to_user_mode_prepare+0xee/0x180
[  157.934465][  T111]  syscall_exit_to_user_mode+0x1a/0x50
[  157.940617][  T111]  do_syscall_64+0x61/0xa0
[  157.945547][  T111] Modules linked in:
[  157.949626][  T111] CPU: 1 PID: 111 Comm: jfsCommit Not tainted syzkaller #0
[  157.956866][  T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  157.966976][  T111] Call Trace:
[  157.970312][  T111]  <TASK>
[  157.973294][  T111]  dump_stack_lvl+0x18c/0x250
[  157.978151][  T111]  ? show_regs_print_info+0x20/0x20
[  157.983403][  T111]  ? swiotlb_print_info+0x70/0x70
[  157.988468][  T111]  ? dump_page+0xba3/0x14a0
[  157.993042][  T111]  bad_page+0x14b/0x170
[  157.997244][  T111]  free_unref_page_prepare+0x85f/0x8c0
[  158.002777][  T111]  free_unref_page+0x32/0x2e0
[  158.007547][  T111]  ? __folio_put+0xef/0x210
[  158.012103][  T111]  txUnlock+0x27e/0xcb0
[  158.016319][  T111]  ? lockdep_hardirqs_on+0x98/0x150
[  158.021598][  T111]  jfs_lazycommit+0x56e/0xa70
[  158.026375][  T111]  ? txFreelock+0x5a0/0x5a0
[  158.030944][  T111]  ? do_task_dead+0xd0/0xd0
[  158.035523][  T111]  ? __kthread_parkme+0x7a/0x1c0
[  158.040518][  T111]  kthread+0x2fa/0x390
[  158.044635][  T111]  ? txFreelock+0x5a0/0x5a0
[  158.049195][  T111]  ? kthread_blkcg+0xd0/0xd0
[  158.053852][  T111]  ret_from_fork+0x48/0x80
[  158.058355][  T111]  ? kthread_blkcg+0xd0/0xd0
[  158.062995][  T111]  ret_from_fork_asm+0x11/0x20
[  158.067869][  T111]  </TASK>
[  158.071038][    C1] vkms_vblank_simulate: vblank timer overrun
[  158.084622][  T111] Disabling lock debugging due to kernel taint
[  158.090975][  T111] page:ffffea0001ef5e80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x7bd7a
[  158.102946][  T111] flags: 0xfff0800000820d(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff)
[  158.114592][  T111] page_type: 0xffffffff()
[  158.119383][  T111] raw: 00fff0800000820d dead000000000100 dead000000000122 0000000000000000
[  158.128348][  T111] raw: 000000000000001c ffff8880658426c8 00000000ffffffff 0000000000000000
[  158.137306][  T111] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u))
[  158.147948][  T111] page_owner tracks the page as allocated
[  158.153777][  T111] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 7227, tgid 7225 (syz.4.384), ts 157074020525, free_ts 156858841393
[  158.172260][  T111]  post_alloc_hook+0x1c1/0x200
[  158.177299][  T111]  get_page_from_freelist+0x1951/0x19e0
[  158.183019][  T111]  __alloc_pages+0x1f0/0x460
[  158.188084][  T111]  folio_alloc+0x1e/0x30
[  158.192429][  T111]  filemap_alloc_folio+0xdf/0x490
[  158.198271][  T111]  do_read_cache_folio+0x364/0x7d0
[  158.204845][  T111]  do_read_cache_page+0x32/0x250
[  158.210236][  T111]  __get_metapage+0x31a/0xfa0
[  158.215188][  T111]  diRead+0x6d3/0xb90
[  158.219297][  T111]  jfs_iget+0x90/0x440
[  158.223498][  T111]  jfs_fill_super+0x712/0xad0
[  158.228543][  T111]  mount_bdev+0x221/0x2d0
[  158.233096][  T111]  legacy_get_tree+0xea/0x180
[  158.238125][  T111]  vfs_get_tree+0x8c/0x280
[  158.242652][  T111]  do_new_mount+0x24b/0xa40
[  158.247499][  T111]  __se_sys_mount+0x2e7/0x3d0
[  158.253181][  T111] page last free stack trace:
[  158.258748][  T111]  free_unref_page_prepare+0x7b2/0x8c0
[  158.264408][  T111]  free_unref_page_list+0xbe/0x860
[  158.269855][  T111]  release_pages+0x1f7a/0x2200
[  158.274747][  T111]  tlb_flush_mmu+0x379/0x510
[  158.279839][  T111]  tlb_finish_mmu+0xf9/0x220
[  158.284571][  T111]  exit_mmap+0x428/0xb90
[  158.289195][  T111]  __mmput+0x118/0x3c0
[  158.293372][  T111]  exit_mm+0x1f2/0x2c0
[  158.297823][  T111]  do_exit+0x8dd/0x2460
[  158.302165][  T111]  do_group_exit+0x21b/0x2d0
[  158.308309][  T111]  get_signal+0x12fc/0x13f0
[  158.312982][  T111]  arch_do_signal_or_restart+0xc2/0x800
[  158.319764][  T111]  exit_to_user_mode_loop+0x70/0x110
[  158.326723][  T111]  exit_to_user_mode_prepare+0xee/0x180
[  158.332385][  T111]  syscall_exit_to_user_mode+0x1a/0x50
[  158.338272][  T111]  do_syscall_64+0x61/0xa0
[  158.343234][  T111] ------------[ cut here ]------------
[  158.348902][  T111] kernel BUG at include/linux/mm.h:1458!
[  158.364741][  T111] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  158.370875][  T111] CPU: 1 PID: 111 Comm: jfsCommit Tainted: G    B              syzkaller #0
[  158.379604][  T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  158.389690][  T111] RIP: 0010:put_metapage+0x253/0x340
[  158.395047][  T111] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 e7 71 d9 fe e9 25 ff ff ff e8 cd 3a 81 fe 48 8b 3c 24 48 c7 c6 80 09 04 8b e8 6d a4 c1 fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 e6 3e 81
[  158.414672][  T111] RSP: 0018:ffffc90002627cc0 EFLAGS: 00010246
[  158.420763][  T111] RAX: 0a21d777b6bca200 RBX: ffff8880658426c8 RCX: 0a21d777b6bca200
[  158.428767][  T111] RDX: 0000000000000000 RSI: ffffffff8b1c8fc0 RDI: ffffffff8b1c8f80
[  158.436766][  T111] RBP: 000000000000007f R08: ffffffff8e8b19ef R09: 1ffffffff1d1633d
[  158.444783][  T111] R10: dffffc0000000000 R11: fffffbfff1d1633e R12: ffff8880658426f0
[  158.452780][  T111] R13: ffffea0001ef5eb4 R14: 1ffff1100cb084de R15: 1ffff1100cb084eb
[  158.460776][  T111] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  158.469729][  T111] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  158.476333][  T111] CR2: 00007fe8341e8158 CR3: 000000002e354000 CR4: 00000000003506e0
[  158.484335][  T111] Call Trace:
[  158.487645][  T111]  <TASK>
[  158.490605][  T111]  txUnlock+0x427/0xcb0
[  158.494809][  T111]  jfs_lazycommit+0x56e/0xa70
[  158.499518][  T111]  ? txFreelock+0x5a0/0x5a0
[  158.504051][  T111]  ? do_task_dead+0xd0/0xd0
[  158.508603][  T111]  ? __kthread_parkme+0x7a/0x1c0
[  158.513579][  T111]  kthread+0x2fa/0x390
[  158.517849][  T111]  ? txFreelock+0x5a0/0x5a0
[  158.522386][  T111]  ? kthread_blkcg+0xd0/0xd0
[  158.527006][  T111]  ret_from_fork+0x48/0x80
[  158.531468][  T111]  ? kthread_blkcg+0xd0/0xd0
[  158.536084][  T111]  ret_from_fork_asm+0x11/0x20
[  158.540903][  T111]  </TASK>
[  158.543939][  T111] Modules linked in:
[  158.547927][    C1] vkms_vblank_simulate: vblank timer overrun
[  158.560735][  T111] ---[ end trace 0000000000000000 ]---
[  158.567776][  T111] RIP: 0010:put_metapage+0x253/0x340
[  158.573095][  T111] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 e7 71 d9 fe e9 25 ff ff ff e8 cd 3a 81 fe 48 8b 3c 24 48 c7 c6 80 09 04 8b e8 6d a4 c1 fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 e6 3e 81
[  158.593276][  T111] RSP: 0018:ffffc90002627cc0 EFLAGS: 00010246
[  158.599545][  T111] RAX: 0a21d777b6bca200 RBX: ffff8880658426c8 RCX: 0a21d777b6bca200
[  158.607619][  T111] RDX: 0000000000000000 RSI: ffffffff8b1c8fc0 RDI: ffffffff8b1c8f80
[  158.616523][  T111] RBP: 000000000000007f R08: ffffffff8e8b19ef R09: 1ffffffff1d1633d
[  158.624549][  T111] R10: dffffc0000000000 R11: fffffbfff1d1633e R12: ffff8880658426f0
[  158.632615][  T111] R13: ffffea0001ef5eb4 R14: 1ffff1100cb084de R15: 1ffff1100cb084eb
[  158.640696][  T111] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  158.649852][  T111] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  158.658015][  T111] CR2: 00007ff7e69ea2f8 CR3: 000000002fbfb000 CR4: 00000000003506f0
[  158.667150][  T111] Kernel panic - not syncing: Fatal exception
[  158.673425][  T111] Kernel Offset: disabled
[  158.677761][  T111] Rebooting in 86400 seconds..