last executing test programs:

34.624023528s ago: executing program 2 (id=698):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000", @ANYRES32], 0x50)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

34.551728159s ago: executing program 2 (id=700):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1800040, &(0x7f0000000840)={[{@jqfmt_vfsold}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@user_xattr}, {@nodioread_nolock}, {@mblk_io_submit}, {@resuid}, {@init_itable_val}]}, 0x1, 0x5ab, &(0x7f0000000240)="$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")
r0 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@private=0xa010100, @in=@loopback, 0x0, 0x0, 0x0, 0x4, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {}, 0x9, 0x0, 0x1}, {{@in=@empty, 0x2000000, 0x33}, 0xa, @in=@multicast2, 0x0, 0x0, 0x1, 0x3}}, 0xe8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
connect$inet6(r0, &(0x7f00000000c0), 0x1c)

34.315631174s ago: executing program 2 (id=703):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r2, 0x0, 0x0)

34.224515946s ago: executing program 2 (id=704):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x2a18c46, &(0x7f0000000140)={[{@utf8no}, {@shortname_win95}, {@fat=@flush}, {@fat=@errors_remount}, {@shortname_win95}, {@rodir}, {@shortname_lower}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@shortname_lower}, {@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp857'}}]}, 0x81, 0x2c1, &(0x7f0000001880)="$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")
creat(&(0x7f0000000580)='./bus\x00', 0x9e)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x44c00, 0xe898d2275f586997)
preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x5600, 0xa, 0x8)
lseek(0xffffffffffffffff, 0x10001, 0x0)

33.984682211s ago: executing program 2 (id=708):
openat$kvm(0xffffff9c, 0x0, 0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random='\"\x00\x00(\x00', @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000002c0)=0x8a0a, 0x4)
recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/17, 0x11}, 0x9}], 0x1, 0x2, 0x0)

33.07561596s ago: executing program 2 (id=713):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200182"], 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

32.717321308s ago: executing program 32 (id=713):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200182"], 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

30.563494293s ago: executing program 1 (id=726):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000100)='./file1\x00', 0x800810, &(0x7f00000003c0)={[{@usebackuproot}, {@thread_pool={'thread_pool', 0x3d, 0x9c}}, {@ssd_spread}, {@compress_algo={'compress', 0x3d, 'no'}}, {@nobarrier}, {@treelog}, {@notreelog}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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")
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x20042, 0x45)
r1 = open(&(0x7f0000000200)='./file2\x00', 0x1a0100, 0x123)
copy_file_range(r1, 0x0, r0, 0x0, 0x3df1, 0x0)
r2 = open$dir(&(0x7f0000000480)='./file1\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r2, 0xc038943b, &(0x7f0000000000)={0x50d001, 0x0, '\x00', 0x0, 0x0})

28.811014501s ago: executing program 1 (id=740):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r1, 0x0, 0xffffffdb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

26.661677606s ago: executing program 1 (id=751):
syz_open_dev$tty1(0xc, 0x4, 0x1)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe)
listen(r1, 0x1)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

25.753906625s ago: executing program 1 (id=757):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152)

25.686691697s ago: executing program 3 (id=758):
r0 = fsopen(&(0x7f0000000200)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
setuid(0xee00)
open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997faff)

25.653011958s ago: executing program 3 (id=759):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x5a6, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)

24.792397746s ago: executing program 3 (id=760):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r1, 0x0, 0xffffffdb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

24.789002466s ago: executing program 1 (id=761):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_OPENQRY(r0, 0x4b4b, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
r1 = socket$can_raw(0x1d, 0x3, 0x1)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
dup3(r1, r2, 0x0)

24.752899976s ago: executing program 1 (id=762):
r0 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC")
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_open_procfs$namespace(r0, &(0x7f0000000280)='ns/uts\x00')

24.210756858s ago: executing program 33 (id=762):
r0 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC")
fchdir(r1)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_open_procfs$namespace(r0, &(0x7f0000000280)='ns/uts\x00')

23.203092369s ago: executing program 3 (id=766):
syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x2000008, &(0x7f0000000280), 0x1, 0x603, &(0x7f0000000700)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./bus\x00', 0x0, 0x63d014, 0x0)
r1 = creat(&(0x7f00000007c0)='./bus\x00', 0x182)
write$UHID_INPUT(r1, &(0x7f0000000840)={0x8, {"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", 0x1000}}, 0x1006)
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)="37f0dd039a40e684948cafff1d0bf925e3694b9bc71096c684ffad3ce77ee0c457cc9c23890949a9b901efb53a5336ece7b894539f9efc205b0a9608e7cc8877c2cc042204f78a385690ad05ff58cd87ae068cc3fa15cb9c6db0750aa92cb58a3a0a1113b77a5b7b6579ea427fc969f23a7b9bceb941f7a8e51bbfad7ce8ddf313469806", 0x84}], 0x1)

21.442177657s ago: executing program 3 (id=771):
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
syz_fuse_handle_req(r0, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000000200)={0x50, 0x0, 0x1, {0x7, 0x29, 0x8, 0xdb0078e65cb35ffe, 0x5, 0x3, 0xb, 0x3, 0x0, 0x0, 0x4, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000007b40)="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", 0x2000, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x4, {0xffffffffffffffff, 0x4, 0x0, {0x1, 0x7ffffffffffffffc, 0x3, 0x2, 0x8, 0x7, 0xbe, 0xfffffff9, 0x406, 0x8000, 0x4, 0x0, 0xffffffffffffffff, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
lremovexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'btrfs.', '.#%$(\x00'})

20.966233116s ago: executing program 3 (id=774):
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf"], 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc0}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0)

20.883627478s ago: executing program 34 (id=774):
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf"], 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc0}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0)

11.200745873s ago: executing program 6 (id=819):
unshare(0x2040400)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r2=>0x0})
r3 = syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/net\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r1, 0xd66771a5e8224ded, 0x0, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}]}, 0x24}}, 0x8040)

10.982737788s ago: executing program 6 (id=821):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r1, 0x0, 0xffffffdb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

8.774005594s ago: executing program 6 (id=831):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

8.652144617s ago: executing program 6 (id=833):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/devices\x00', 0x0, 0x0)
epoll_create(0x7fff)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0, 0x160)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ipv6_route\x00')
open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='K\x00\x00\x00r'], 0x0)

8.495790781s ago: executing program 6 (id=835):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000700)={[{@nodiscard}, {@jqfmt_vfsv0}, {@errors_remount}, {@noquota}]}, 0xfc, 0x4b4, &(0x7f0000000c80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = open(&(0x7f0000000280)='.\x00', 0x101000, 0x1a4)
getdents(r0, 0x0, 0x0)

7.265782816s ago: executing program 6 (id=838):
mkdir(&(0x7f0000000500)='./file0\x00', 0x0)
chmod(&(0x7f0000000040)='.\x00', 0x35e)
setuid(0xee01)
mkdir(&(0x7f0000000040)='./file2\x00', 0xc1)
mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2)
rename(&(0x7f0000000100)='./file2/file0\x00', &(0x7f0000000140)='./file0\x00')

4.145731173s ago: executing program 4 (id=852):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0xb, 0xbf21, 0x100}, 0x50)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r1)
close(r1)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000800)=@generic={&(0x7f0000000540)='./file0\x00', r0}, 0x18)

3.938958367s ago: executing program 4 (id=854):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x3c, r1, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}}, 0x4000)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e)
sendmmsg(r2, &(0x7f0000000280)=[{{0x0, 0x700003a, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x4}], 0x400000000000085, 0x0)

3.748113881s ago: executing program 4 (id=855):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, r0)
setpgid(0x0, r0)
tkill(r0, 0x7)
wait4(r0, 0x0, 0x2, 0x0)
syz_open_procfs$namespace(r0, 0x0)

3.562381785s ago: executing program 4 (id=857):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000843}, 0xc0)

3.444649047s ago: executing program 7 (id=859):
times(0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x2208c80, &(0x7f0000000200), 0x3, 0x1514, &(0x7f0000000240)="$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")
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')
r0 = socket$inet(0x2, 0x1, 0x0)
readv(r0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

3.146042224s ago: executing program 7 (id=861):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf5, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0x200000, 0x1c6017})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.912448548s ago: executing program 7 (id=863):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r1, 0x0, 0xffffffdb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

2.564108516s ago: executing program 0 (id=865):
ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0xd, 0x802, 0xff, 0x1d, 0x402, 0xfffd})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

2.444325798s ago: executing program 0 (id=866):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000006c0)={0x40, 0x1, 0x3}, 0x10)
sendmsg$tipc(r1, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0)

2.152086115s ago: executing program 4 (id=867):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000002740)=ANY=[@ANYBLOB="1c0000f5020002"], 0xfe8)

1.90993248s ago: executing program 5 (id=869):
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000600)='./file1\x00', 0x800000, &(0x7f0000000100)=ANY=[], 0xfc, 0x234, &(0x7f0000000640)="$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")
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='\f', 0x1, 0x8000c61)
truncate(&(0x7f0000000940)='./file1\x00', 0x8daa)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)

1.478016159s ago: executing program 4 (id=870):
eventfd2(0x0, 0x1)
r0 = syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000100)=ANY=[@ANYBLOB="1401100100000040f80600b04000010203010902600003010900"], 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x20, 0x4, 0x2, {0x2, 0x5}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xd8bb}}}, 0x0)

1.41902557s ago: executing program 5 (id=871):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x18)
syz_extract_tcp_res(&(0x7f0000000080), 0x2, 0x0)

1.41827998s ago: executing program 0 (id=880):
setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006})
capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}], 0x3, 0x240080e4)

1.264843973s ago: executing program 0 (id=872):
times(0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x2208c80, &(0x7f0000000200), 0x3, 0x1514, &(0x7f0000000240)="$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")
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00')
r0 = socket$inet(0x2, 0x1, 0x0)
readv(r0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

1.217642684s ago: executing program 7 (id=873):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = epoll_create1(0x80000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a})
read$char_usb(r2, &(0x7f0000000340)=""/170, 0xaa)
ppoll(&(0x7f0000000100)=[{r2, 0x600}, {r1, 0x4102}, {r0, 0x4000}], 0x3, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0)

953.38462ms ago: executing program 5 (id=874):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x9b341a, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb)

803.589653ms ago: executing program 7 (id=875):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000)
stat(&(0x7f00000072c0)='./file0/file2\x00', &(0x7f0000007300))

752.402424ms ago: executing program 5 (id=876):
openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x80000001, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x8001, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x90, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x786, 0x41], [0x1000000a, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x4, 0x9, 0x8, 0x10000, 0x3, 0x5, 0x800003e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x6, 0x7, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2eb, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x1, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x12, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xfdffffff, 0x5, 0x45, 0x0, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0x4, 0xfff]}, 0x45c)
syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2)
syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0)

722.465785ms ago: executing program 0 (id=877):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000002180), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x140000000)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x32874000)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000002480)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1bC\x8e\xaeA\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfBW\\c\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xee\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\x03\x00\x00\x00\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd3\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd')
ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f00000003c0)='\x00\x00\x00\x06\x00\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x85\"Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4\x1c-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xe7\f\x00\x00,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa6\x1f\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2T\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\x7f\xcb8I\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdb\x7f\xeb\xa4\x89\xf7y\xfb1\xa0\xf9\xf3\x0e\f\x8d\xf6\xe1kZ\xec\xd2\xf10\xe5kJ\x05\xa9l\xc5\x00N\x13\x82\xd8\xcf\xe6\xfeY\xef\x04\x90Z\x88\xb3<\xa7j\xdc\xe5\xacK\x15\xf1/\xce\xca\xaa4\xcaD\x02\x95')

536.178369ms ago: executing program 7 (id=878):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nobh}, {@quota}]}, 0x1, 0x560, &(0x7f0000000440)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000200)='./bus\x00', 0xe1c00, 0x0, 0x0, 0x0, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2100, 0x0)
renameat2(r0, &(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000200)='./file1\x00', 0x4)

488.63163ms ago: executing program 0 (id=879):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r1, &(0x7f0000000980), 0xe)
listen(r1, 0x0)

331.790653ms ago: executing program 5 (id=881):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000008500000023"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4)
sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x0)

0s ago: executing program 5 (id=882):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, 0x0)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0)
read$FUSE(r0, &(0x7f0000002600)={0x2020}, 0x2020)

kernel console output (not intermixed with test programs):

122.676893][ T5548] handle_bad_sector: 4 callbacks suppressed
[  122.676911][ T5548] attempt to access beyond end of device
[  122.676911][ T5548] loop0: rw=34817, want=77952, limit=40427
[  122.771637][ T4193] attempt to access beyond end of device
[  122.771637][ T4193] loop0: rw=2049, want=40976, limit=40427
[  122.797461][ T5563] loop3: detected capacity change from 0 to 1024
[  122.826624][ T5563] EXT4-fs (loop3): Ignoring removed orlov option
[  122.870812][ T5563] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002]
[  122.879311][ T5563] System zones: 0-1, 3-12
[  122.898501][ T5563] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000007,debug,nodioread_nolock,min_batch_time=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,orlov,nodelalloc,jqfmt=vfsv1,auto_da_alloc=0x0000000001800000,,errors=continue. Quota mode: none.
[  123.196043][ T5572] program syz.3.437 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  123.441835][ T5580] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  123.644418][ T5592] loop3: detected capacity change from 0 to 16
[  123.671755][ T5594] loop0: detected capacity change from 0 to 8
[  123.918771][   T23] gspca_ov534_9: reg_w failed -71
[  124.336897][   T23] gspca_ov534_9: Unknown sensor 0000
[  124.336970][   T23] ov534_9: probe of 5-1:0.0 failed with error -22
[  124.372178][   T23] usb 5-1: USB disconnect, device number 7
[  124.386620][ T5592] loop3: detected capacity change from 0 to 40427
[  124.477201][ T5592] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff
[  124.507887][ T5592] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4
[  124.538917][ T5592] F2FS-fs (loop3): invalid crc value
[  124.562395][ T5311] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  124.568031][ T5592] F2FS-fs (loop3): Found nat_bits in checkpoint
[  124.793787][ T5592] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  124.813824][ T5311] usb 1-1: Using ep0 maxpacket: 32
[  124.872766][   T26] audit: type=1800 audit(1782937009.599:16): pid=5592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.444" name="file1" dev="loop3" ino=10 res=0 errno=0
[  124.903176][ T5592] attempt to access beyond end of device
[  124.903176][ T5592] loop3: rw=34817, want=77952, limit=40427
[  124.944647][ T5311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.962660][ T5311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.003790][ T5311] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  125.018473][ T5311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.054445][ T5311] usb 1-1: config 0 descriptor??
[  125.061091][ T4198] attempt to access beyond end of device
[  125.061091][ T4198] loop3: rw=2049, want=40976, limit=40427
[  125.419027][ T5610] XFS (loop1): Mounting V5 Filesystem
[  125.625493][ T5610] XFS (loop1): Ending clean mount
[  125.649158][ T5628] set_capacity_and_notify: 1 callbacks suppressed
[  125.649174][ T5628] loop2: detected capacity change from 0 to 32768
[  125.675723][ T5311] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[  125.711412][ T5628] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  125.720405][ T5628] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  125.774572][ T5628] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  125.795943][ T4189] XFS (loop1): Unmounting Filesystem
[  125.796677][ T5311] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  125.810943][ T5311] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  125.863184][ T1326] usb 1-1: USB disconnect, device number 5
[  126.052326][ T5636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.454'.
[  126.159340][ T5634] fido_id[5634]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  126.722800][ T5633] loop4: detected capacity change from 0 to 131072
[  126.761665][ T5311] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 945ms
[  126.770596][ T5311] gfs2: fsid=syz:syz.0: jid=0: Done
[  126.781074][ T5628] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  126.815601][ T5633] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[  126.823884][ T5633] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  126.839277][ T5633] F2FS-fs (loop4): invalid crc value
[  126.922417][ T5633] F2FS-fs (loop4): Found nat_bits in checkpoint
[  126.991065][ T5633] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  126.998402][ T5633] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  127.049926][ T5628] gfs2: fsid=syz:syz.0: found 1 quota changes
[  127.100466][   T26] audit: type=1800 audit(1782937011.816:17): pid=5633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.458" name="file1" dev="loop4" ino=7 res=0 errno=0
[  127.574113][ T4200] gfs2: fsid=syz:syz.0: inum=2340 error=-28, nblocks=1, full=1 fail_pt=0
[  127.605774][ T4200] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount
[  127.639926][ T4200] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error
[  127.689591][ T4200] gfs2: fsid=syz:syz.0:  R: n:18 f:a0000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0
[  127.700756][ T4200] gfs2: fsid=syz:syz.0:   L: f:00 b:4294967295 i:4294967295
[  127.846501][ T5654] loop1: detected capacity change from 0 to 4096
[  127.859372][ T4200] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[  127.888571][ T4200] CPU: 1 PID: 4200 Comm: syz-executor Not tainted syzkaller #0
[  127.896280][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  127.906472][ T4200] Call Trace:
[  127.909794][ T4200]  <TASK>
[  127.912763][ T4200]  dump_stack_lvl+0x188/0x250
[  127.917492][ T4200]  ? show_regs_print_info+0x20/0x20
[  127.923001][ T4200]  ? load_image+0x410/0x410
[  127.927558][ T4200]  ? do_raw_spin_unlock+0x11d/0x230
[  127.932815][ T4200]  gfs2_assert_warn_i+0x187/0x2c0
[  127.937900][ T4200]  gfs2_quota_cleanup+0x48c/0x670
[  127.943075][ T4200]  gfs2_make_fs_ro+0x523/0x620
[  127.947881][ T4200]  ? do_raw_spin_unlock+0x11d/0x230
[  127.953125][ T4200]  ? gfs2_dinode_out+0xb00/0xb00
[  127.958103][ T4200]  ? __lock_acquire+0x7b50/0x7b50
[  127.963164][ T4200]  ? do_raw_spin_lock+0x128/0x2f0
[  127.968225][ T4200]  ? __rwlock_init+0x140/0x140
[  127.973005][ T4200]  ? do_raw_spin_unlock+0x11d/0x230
[  127.978339][ T4200]  gfs2_put_super+0x1d2/0x7c0
[  127.983072][ T4200]  ? gfs2_evict_inode+0x1340/0x1340
[  127.988313][ T4200]  generic_shutdown_super+0x130/0x300
[  127.993731][ T4200]  kill_block_super+0x7c/0xe0
[  127.998625][ T4200]  deactivate_locked_super+0x93/0xf0
[  128.003952][ T4200]  cleanup_mnt+0x426/0x4d0
[  128.008431][ T4200]  task_work_run+0x125/0x1a0
[  128.013077][ T4200]  exit_to_user_mode_loop+0x10f/0x130
[  128.018487][ T4200]  exit_to_user_mode_prepare+0xee/0x180
[  128.024068][ T4200]  syscall_exit_to_user_mode+0x16/0x40
[  128.029564][ T4200]  do_syscall_64+0x58/0xa0
[  128.034278][ T4200]  ? clear_bhb_loop+0x30/0x80
[  128.039002][ T4200]  ? clear_bhb_loop+0x30/0x80
[  128.043809][ T4200]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  128.049753][ T4200] RIP: 0033:0x7fdfa28b3097
[  128.054205][ T4200] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  128.073846][ T4200] RSP: 002b:00007ffef05e6928 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  128.082300][ T4200] RAX: 0000000000000000 RBX: 00007fdfa29472ca RCX: 00007fdfa28b3097
[  128.090356][ T4200] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef05e69e0
[  128.098362][ T4200] RBP: 00007ffef05e69e0 R08: 00007ffef05e79e0 R09: 00000000ffffffff
[  128.106380][ T4200] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffef05e7a70
[  128.114390][ T4200] R13: 00007fdfa29472ca R14: 000000000001f124 R15: 00007ffef05e7ab0
[  128.122420][ T4200]  </TASK>
[  128.144734][ T5654] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  128.230094][ T5654] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  128.252856][ T5654] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  128.261758][ T5654] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  128.282786][ T5654] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  128.292454][ T5654] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  128.318701][ T5654] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  128.329637][ T5654] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  128.357963][ T5654] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  128.370454][ T5654] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  128.400492][ T5654] ntfs: volume version 3.1.
[  128.994502][ T5668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.470'.
[  129.054725][ T5671] loop1: detected capacity change from 0 to 16
[  129.167820][ T1326] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  129.230669][ T5677] loop2: detected capacity change from 0 to 64
[  129.506392][ T5684] Bluetooth: hci0: unsupported parameter 3079
[  129.513684][ T5684] Bluetooth: hci0: unsupported parameter 32
[  129.521798][ T5684] Bluetooth: hci0: unsupported parameter 3079
[  129.528414][ T5684] Bluetooth: hci0: unsupported parameter 32
[  129.570056][ T1326] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  129.599453][ T1326] usb 1-1: config 1 interface 0 altsetting 13 endpoint 0x2 has invalid wMaxPacketSize 0
[  129.610141][ T1326] usb 1-1: config 1 interface 0 has no altsetting 0
[  129.627105][ T5686] loop4: detected capacity change from 0 to 512
[  129.708235][ T5686] EXT4-fs (loop4): Test dummy encryption mode enabled
[  129.726095][ T5686] EXT4-fs (loop4): Ignoring removed oldalloc option
[  129.759603][ T5688] overlayfs: './bus' not a directory
[  129.817169][ T5686] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,acl,oldalloc,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback.
[  129.881623][ T1326] usb 1-1: string descriptor 0 read error: -22
[  129.890795][ T1326] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  129.909898][ T5671] loop1: detected capacity change from 0 to 40427
[  129.934178][ T5695] loop3: detected capacity change from 0 to 512
[  129.937003][ T1326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.997094][ T5671] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1ffff
[  130.051589][ T5695] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  130.094930][ T5671] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4
[  130.103144][ T5695] ext4 filesystem being mounted at /106/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  130.158402][ T5671] F2FS-fs (loop1): invalid crc value
[  130.191978][ T5671] F2FS-fs (loop1): Found nat_bits in checkpoint
[  130.312190][ T5671] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  130.416642][ T5713] device syzkaller1 entered promiscuous mode
[  130.500599][ T5671] attempt to access beyond end of device
[  130.500599][ T5671] loop1: rw=34817, want=77952, limit=40427
[  130.526346][    T7] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  130.562104][    T7] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  130.588380][ T4189] attempt to access beyond end of device
[  130.588380][ T4189] loop1: rw=2049, want=40976, limit=40427
[  130.607228][ T1326] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor
[  130.637851][ T1326] keytouch 0003:0926:3333.0008: usb_submit_urb(out) failed: -90
[  130.679569][ T1326] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:0926:3333.0008/input/input12
[  130.849425][ T1326] keytouch 0003:0926:3333.0008: input,hidraw1: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  130.874441][ T1326] usb 1-1: USB disconnect, device number 6
[  130.987365][    T7] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  131.025967][ T5719] fido_id[5719]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  131.132586][ T5722] loop2: detected capacity change from 0 to 1024
[  131.166384][ T5722] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  131.214911][ T5722] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c018, mo2=0002]
[  131.238344][ T5722] EXT4-fs (loop2): mounted filesystem without journal. Opts: mblk_io_submit,nodioread_nolock,noquota,debug,noblock_validity,nojournal_checksum,,errors=continue. Quota mode: none.
[  131.256942][ T5722] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.278480][ T5726] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  131.308542][ T5726] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  131.365156][ T5722] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: comm syz.2.489: lblock 0 mapped to illegal pblock 0 (length 1)
[  131.370490][    T7] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  131.393659][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.427700][ T5722] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  131.468242][    T7] usb 4-1: config 0 descriptor??
[  131.473608][ T5722] EXT4-fs (loop2): This should not happen!! Data will be lost
[  131.473608][ T5722] 
[  131.522319][    T7] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  131.711026][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  131.743556][    T7] gp8psk: usb in 128 operation failed.
[  132.002607][    T7] gp8psk: usb in 146 operation failed.
[  132.008352][    T7] gp8psk: failed to get FW version
[  132.052895][    T7] gp8psk: usb in 149 operation failed.
[  132.058517][    T7] gp8psk: failed to get FPGA version
[  132.324207][    T7] gp8psk: usb out operation failed.
[  132.329606][    T7] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  132.342148][    T7] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  132.343336][ T5733] loop1: detected capacity change from 0 to 131072
[  132.366866][    T9] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm kworker/u4:0: bg 0: block 112: padding at end of block bitmap is not set
[  132.386034][    T7] usb 4-1: USB disconnect, device number 3
[  132.393184][    T9] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28
[  132.406952][ T5733] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  132.415480][ T5733] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  132.451098][    T9] EXT4-fs (loop2): This should not happen!! Data will be lost
[  132.451098][    T9] 
[  132.463932][ T5733] F2FS-fs (loop1): invalid crc value
[  132.482917][    T9] EXT4-fs (loop2): Total free blocks count 0
[  132.495127][    T9] EXT4-fs (loop2): Free/Dirty block details
[  132.511571][    T9] EXT4-fs (loop2): free_blocks=0
[  132.516982][    T9] EXT4-fs (loop2): dirty_blocks=64
[  132.535355][    T9] EXT4-fs (loop2): Block reservation details
[  132.541412][    T9] EXT4-fs (loop2): i_reserved_data_blocks=4
[  132.560068][ T5733] F2FS-fs (loop1): Found nat_bits in checkpoint
[  132.617295][ T5733] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  132.624442][ T5733] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  132.836894][ T5756] loop0: detected capacity change from 0 to 512
[  133.000433][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  133.006919][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  133.028225][ T5756] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  133.040516][ T5754] loop2: detected capacity change from 0 to 4096
[  133.088061][ T5756] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  133.230342][ T5754] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  133.299683][ T5756] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.500: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1
[  133.325002][ T5754] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  133.443907][ T5764] EXT4-fs error (device loop0): ext4_map_blocks:631: inode #2: block 18: comm syz.0.500: lblock 23 mapped to illegal pblock 18 (length 1)
[  133.580729][ T4200] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22.
[  133.631575][ T4200] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22.
[  133.827984][ T4360] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  133.859279][ T4360] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  134.237254][ T5784] loop3: detected capacity change from 0 to 128
[  134.360203][ T5784] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  134.414550][ T5784] ext4 filesystem being mounted at /112/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  134.562607][ T5776] loop2: detected capacity change from 0 to 32768
[  134.853335][ T5794] netlink: 50 bytes leftover after parsing attributes in process `syz.1.503'.
[  135.090863][ T5803] loop1: detected capacity change from 0 to 2048
[  135.178807][ T5805] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  135.338296][   T26] kauditd_printk_skb: 13 callbacks suppressed
[  135.338311][   T26] audit: type=1800 audit(1782937020.014:20): pid=5803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.518" name="file1" dev="loop1" ino=15 res=0 errno=0
[  135.391509][   T26] audit: type=1800 audit(1782937020.044:21): pid=5803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.518" name="file1" dev="loop1" ino=15 res=0 errno=0
[  135.489372][ T4267] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  135.536229][ T4267] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  135.670001][ T5823] loop4: detected capacity change from 0 to 256
[  135.788627][ T5823] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5e9a16ef, utbl_chksum : 0xe619d30d)
[  135.842262][   T26] audit: type=1800 audit(1782937020.511:22): pid=5823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.525" name="file1" dev="loop4" ino=1048612 res=0 errno=0
[  136.168461][ T4360] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  136.212910][ T4360] hid-generic 0000:0000:0000.000B: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  136.325759][ T5844] netlink: 'syz.0.532': attribute type 1 has an invalid length.
[  136.421785][ T5844] 8021q: adding VLAN 0 to HW filter on device bond1
[  136.494913][ T5847] bond1: (slave geneve2): making interface the new active one
[  136.508378][ T5847] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  136.517658][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  136.708922][ T5849] input: syz1 as /devices/virtual/input/input13
[  136.725899][ T5847] syz.0.532 (5847) used greatest stack depth: 18144 bytes left
[  136.992995][ T5860] loop1: detected capacity change from 0 to 2048
[  137.124169][ T5860] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback.
[  137.219119][ T1287] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  137.244629][ T1287] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  137.257275][ T1287] EXT4-fs (loop1): This should not happen!! Data will be lost
[  137.257275][ T1287] 
[  137.267587][ T1287] EXT4-fs (loop1): Total free blocks count 0
[  137.273951][ T1287] EXT4-fs (loop1): Free/Dirty block details
[  137.282139][ T1287] EXT4-fs (loop1): free_blocks=66060288
[  137.287903][ T1287] EXT4-fs (loop1): dirty_blocks=32
[  137.293556][ T1287] EXT4-fs (loop1): Block reservation details
[  137.315157][ T1287] EXT4-fs (loop1): i_reserved_data_blocks=2
[  137.341870][ T1287] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4095 with max blocks 1 with error 28
[  137.379109][ T1287] EXT4-fs (loop1): This should not happen!! Data will be lost
[  137.379109][ T1287] 
[  137.487089][ T5878] loop0: detected capacity change from 0 to 1024
[  137.540034][ T5881] loop4: detected capacity change from 0 to 8
[  137.561450][ T5884] loop1: detected capacity change from 0 to 256
[  137.577995][ T5878] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  137.604626][ T5878] EXT4-fs (loop0): Ignoring removed orlov option
[  137.654256][ T5884] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5e9a16ef, utbl_chksum : 0xe619d30d)
[  137.659092][ T5886] loop3: detected capacity change from 0 to 128
[  137.680488][ T5878] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,nodiscard,sysvgroups,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: writeback.
[  137.718217][   T26] audit: type=1800 audit(1782937022.383:23): pid=5884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.544" name="file1" dev="loop1" ino=1048613 res=0 errno=0
[  137.739601][ T5882] loop2: detected capacity change from 0 to 4096
[  137.840640][ T5886] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  137.857713][ T5886] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.107743][ T5895] loop4: detected capacity change from 0 to 128
[  138.228378][ T5878] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  138.257149][ T4200] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  138.267035][ T5895] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,dioread_lock,nouid32,,errors=continue. Quota mode: none.
[  138.377660][ T4200] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  138.389953][ T5895] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  138.957747][ T5907] loop1: detected capacity change from 0 to 512
[  138.990950][ T5907] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  139.036519][ T4267] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  139.069594][ T5907] EXT4-fs (loop1): 1 truncate cleaned up
[  139.075312][ T5907] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  139.440822][ T4267] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  139.471983][ T4267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.490496][ T4267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.510799][ T4267] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  139.659385][ T4267] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  139.679687][ T4267] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  139.709414][ T4267] usb 3-1: Manufacturer: syz
[  139.731575][ T4267] usb 3-1: config 0 descriptor??
[  139.887483][ T5923] loop3: detected capacity change from 0 to 32768
[  139.938112][ T5923] 
[  139.938112][ T5923]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  139.938112][ T5923] 
[  139.965241][ T5923] 
[  139.965241][ T5923]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  139.965241][ T5923] 
[  139.979623][ T5923] 
[  139.979623][ T5923]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  139.979623][ T5923] 
[  139.999170][ T5923] ERROR: (device loop3): diWrite: ixpxd invalid
[  139.999170][ T5923] 
[  140.015773][ T5923] ERROR: (device loop3): txCommit: 
[  140.015773][ T5923] 
[  140.029605][ T5923] ERROR: (device loop3): diWrite: ixpxd invalid
[  140.029605][ T5923] 
[  140.041425][ T5923] ERROR: (device loop3): txCommit: 
[  140.041425][ T5923] 
[  140.072729][ T4198] 
[  140.072729][ T4198]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  140.072729][ T4198] 
[  140.091211][ T4198] 
[  140.091211][ T4198]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  140.091211][ T4198] 
[  140.243876][ T4267] appleir 0003:05AC:8243.000C: unknown main item tag 0x0
[  140.260738][ T4267] appleir 0003:05AC:8243.000C: No inputs registered, leaving
[  140.283444][ T4267] appleir 0003:05AC:8243.000C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  140.536080][ T5312] usb 3-1: USB disconnect, device number 6
[  140.652551][    C0] vcan0: j1939_tp_rxtimer: 0xffff888061fe9c00: rx timeout, send abort
[  140.664198][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888061fe9c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  140.732027][ T5936] loop0: detected capacity change from 0 to 256
[  140.781193][ T5936] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5e9a16ef, utbl_chksum : 0xe619d30d)
[  140.869590][   T26] audit: type=1800 audit(1782937025.518:24): pid=5936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.565" name="file1" dev="loop0" ino=1048614 res=0 errno=0
[  140.935288][ T5943] netlink: 40 bytes leftover after parsing attributes in process `syz.3.571'.
[  141.392902][ T5956] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  141.684026][ T5964] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  141.720408][ T5938] XFS (loop1): Mounting V5 Filesystem
[  141.767001][ T5964] EXT4-fs error (device loop2): ext4_read_inline_dir:1618: inode #12: block 7: comm syz.2.580: path /109/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=8, size=80 fake=0
[  141.874572][ T5978] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  141.898834][ T5938] XFS (loop1): Ending clean mount
[  141.965145][ T5977] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  141.979640][ T5977] ext4 filesystem being mounted at /136/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  142.157465][ T4189] XFS (loop1): Unmounting Filesystem
[  142.609115][ T5989] set_capacity_and_notify: 4 callbacks suppressed
[  142.609132][ T5989] loop4: detected capacity change from 0 to 40427
[  142.696893][ T5989] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  142.704755][ T5989] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  142.730494][ T5989] F2FS-fs (loop4): invalid crc value
[  142.794787][ T5989] F2FS-fs (loop4): Found nat_bits in checkpoint
[  142.867464][ T5989] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  142.874785][ T5989] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  142.982014][ T6004] loop1: detected capacity change from 0 to 256
[  143.031971][ T6004] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  143.195925][ T6004] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  143.360720][ T5992] loop3: detected capacity change from 0 to 32768
[  143.468682][ T5989] F2FS-fs (loop4): Start checkpoint disabled!
[  143.558857][ T6012] loop1: detected capacity change from 0 to 512
[  143.570582][ T5992] XFS (loop3): Mounting V5 Filesystem
[  143.728422][ T6012] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.591: invalid indirect mapped block 4294967295 (level 1)
[  143.762287][ T5992] XFS (loop3): Ending clean mount
[  143.789328][ T6012] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.591: invalid indirect mapped block 4294967295 (level 1)
[  143.830152][ T6012] EXT4-fs (loop1): 2 truncates cleaned up
[  143.835962][ T6012] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000004004,barrier=0x0000000000000005,,errors=continue. Quota mode: writeback.
[  143.979072][ T6012] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1457: inode #12: block 7: comm syz.1.591: path /98/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  144.002457][ T4198] XFS (loop3): Unmounting Filesystem
[  144.077575][ T6022] loop2: detected capacity change from 0 to 8192
[  144.537350][ T6030] loop4: detected capacity change from 0 to 128
[  144.664463][ T6030] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  144.751772][ T6030] ext4 filesystem being mounted at /115/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  144.841773][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.601'.
[  144.921508][ T6038] autofs4:pid:6038:autofs_fill_super: pipe file descriptor does not contain proper ops
[  145.068968][ T6043] loop2: detected capacity change from 0 to 1024
[  145.267365][ T6051] loop4: detected capacity change from 0 to 2048
[  145.340626][ T6051] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  145.392882][ T6051] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  145.534736][ T4267] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  145.553610][   T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  145.664839][ T6068] loop1: detected capacity change from 0 to 128
[  145.720104][ T6068] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  145.736936][ T6068] ext4 filesystem being mounted at /106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  145.835746][ T4267] usb 4-1: Using ep0 maxpacket: 16
[  145.848546][ T6060] loop2: detected capacity change from 0 to 32768
[  145.895478][ T6060] JBD2: Ignoring recovery information on journal
[  145.976739][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.988030][ T4267] usb 4-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30
[  146.006764][ T6060] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  146.023121][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.033901][ T4267] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 184, changing to 11
[  146.062680][   T23] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  146.079032][ T4267] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 1024
[  146.100775][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.114094][ T4267] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  146.135825][ T4267] usb 4-1: config 0 interface 0 has no altsetting 0
[  146.143757][   T23] usb 1-1: config 0 descriptor??
[  146.155548][ T4267] usb 4-1: New USB device found, idVendor=056a, idProduct=0307, bcdDevice= 0.00
[  146.165435][ T4267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.191488][ T4200] ocfs2: Unmounting device (7,2) on (node local)
[  146.193096][ T4267] usb 4-1: config 0 descriptor??
[  146.217943][ T6054] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  146.236168][ T6074] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  146.251928][ T6074] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  146.264989][ T6074] EXT4-fs (loop1): orphan cleanup on readonly fs
[  146.296193][ T6074] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3894: comm syz.1.626: Allocating blocks 41-42 which overlap fs metadata
[  146.316895][ T6074] Quota error (device loop1): write_blk: dquota write failed
[  146.329682][ T6074] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  146.349017][ T6074] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.626: Failed to acquire dquot type 0
[  146.363493][ T6074] EXT4-fs error (device loop1): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  146.436820][ T6074] EXT4-fs (loop1): 1 truncate cleaned up
[  146.463251][ T6074] EXT4-fs (loop1): pa ffff8880170b02a0: logic 1, phys. 41, len 23
[  146.471268][ T6074] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4904: group 0, free 22, pa_free 23
[  146.486969][ T6074] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,noblock_validity,noquota,nolazytime,nogrpid,errors=continue,jqfmt=vfsold,i_version,resuid=0x00000000000000002,errors=continue. Quota mode: writeback.
[  146.511319][ T6077] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  146.547080][ T6077] EXT4-fs (loop2): 1 truncate cleaned up
[  146.558825][ T6074] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended
[  146.581167][ T6077] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  146.586118][ T6074] EXT4-fs (loop1): re-mounted. Opts: . Quota mode: writeback.
[  146.631035][   T23] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0
[  146.641470][   T23] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0
[  146.648334][   T23] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0
[  146.655512][   T23] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0
[  146.663650][   T23] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0
[  146.670754][   T23] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0
[  146.677581][   T23] pyra 0003:1E7D:2CF6.000D: unknown main item tag 0x0
[  146.690436][   T23] pyra 0003:1E7D:2CF6.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0
[  146.722737][ T4267] wacom 0003:056A:0307.000E: unknown main item tag 0x7
[  146.744503][ T4267] wacom 0003:056A:0307.000E: hidraw1: USB HID v0.08 Device [HID 056a:0307] on usb-dummy_hcd.3-1/input0
[  146.948162][ T5314] usb 4-1: USB disconnect, device number 4
[  147.103057][ T6092] FAT-fs (loop1): Directory bread(block 64) failed
[  147.118888][ T6092] FAT-fs (loop1): Directory bread(block 65) failed
[  147.141588][ T6092] FAT-fs (loop1): Directory bread(block 66) failed
[  147.156595][ T6092] FAT-fs (loop1): Directory bread(block 67) failed
[  147.179459][ T6092] FAT-fs (loop1): Directory bread(block 68) failed
[  147.210107][ T6092] FAT-fs (loop1): Directory bread(block 69) failed
[  147.230128][ T6092] FAT-fs (loop1): Directory bread(block 70) failed
[  147.253501][   T23] pyra 0003:1E7D:2CF6.000D: couldn't init struct pyra_device
[  147.267783][   T23] pyra 0003:1E7D:2CF6.000D: couldn't install mouse
[  147.274410][ T6092] FAT-fs (loop1): Directory bread(block 71) failed
[  147.275562][ T6092] FAT-fs (loop1): Directory bread(block 72) failed
[  147.303592][   T23] pyra: probe of 0003:1E7D:2CF6.000D failed with error -71
[  147.308080][ T6092] FAT-fs (loop1): Directory bread(block 73) failed
[  147.324192][   T23] usb 1-1: USB disconnect, device number 7
[  147.464046][ T6102] fido_id[6102]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  147.481142][ T6092] Dev loop7: unable to read RDB block 2
[  147.488865][ T6092]  loop7: unable to read partition table
[  147.497512][ T6106] attempt to access beyond end of device
[  147.497512][ T6106] loop1: rw=2049, want=1228, limit=256
[  147.516631][ T6092] loop7: partition table beyond EOD, truncated
[  147.552979][ T6092] loop_reread_partitions: partition scan of loop7 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨�â·û
[  147.552979][ T6092] 
) failed (rc=-5)
[  147.680263][ T6111] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  147.712719][ T6111] rock: corrupted directory entry. extent=458780 out of volume (nzones=41)
[  148.186424][ T6131] netlink: 'syz.1.636': attribute type 2 has an invalid length.
[  148.321583][ T4267] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  148.357599][ T6137] set_capacity_and_notify: 5 callbacks suppressed
[  148.357615][ T6137] loop4: detected capacity change from 0 to 1024
[  148.407246][ T6137] EXT4-fs (loop4): inline encryption not supported
[  148.505003][ T6137] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,inlinecrypt,,errors=continue. Quota mode: none.
[  148.595585][ T6137] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.644529][ T6127] loop0: detected capacity change from 0 to 40427
[  148.680133][   T26] audit: type=1800 audit(1782937033.296:25): pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.639" name="file1" dev="loop4" ino=15 res=0 errno=0
[  148.702365][ T6137] EXT4-fs error (device loop4): ext4_map_blocks:741: inode #15: comm syz.4.639: lblock 0 mapped to illegal pblock 0 (length 1)
[  148.730645][   T26] audit: type=1800 audit(1782937033.345:26): pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.639" name="file1" dev="loop4" ino=15 res=0 errno=0
[  148.768952][ T6127] F2FS-fs (loop0): build fault injection attr: rate: 14, type: 0x1ffff
[  148.777723][ T4267] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  148.789526][ T6127] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0xe4
[  148.813974][ T6127] F2FS-fs (loop0): invalid crc value
[  148.827614][ T4267] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0
[  148.857123][ T4267] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  148.909188][ T4267] usb 3-1: config 0 interface 0 has no altsetting 0
[  148.928714][ T6127] F2FS-fs (loop0): Found nat_bits in checkpoint
[  149.038749][ T4267] usb 3-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00
[  149.058181][ T4267] usb 3-1: New USB device strings: Mfr=235, Product=0, SerialNumber=0
[  149.067808][ T6127] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0
[  149.100662][ T4267] usb 3-1: Manufacturer: syz
[  149.127540][ T4267] usb 3-1: config 0 descriptor??
[  149.182806][ T6127] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  149.233531][ T6127] F2FS-fs (loop0) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0
[  149.264630][ T6127] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xf7/0x580
[  149.368567][ T4193] attempt to access beyond end of device
[  149.368567][ T4193] loop0: rw=2049, want=45104, limit=40427
[  149.382174][   T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  149.456110][ T5314] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  149.651225][   T23] usb 2-1: Using ep0 maxpacket: 16
[  149.741403][ T5314] usb 5-1: Using ep0 maxpacket: 8
[  149.791913][   T23] usb 2-1: config 1 has an invalid interface number: 105 but max is 0
[  149.800154][   T23] usb 2-1: config 1 has no interface number 0
[  149.815741][   T23] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  149.827162][   T23] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  149.850625][   T23] usb 2-1: config 1 interface 105 has no altsetting 0
[  149.861967][ T5314] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  149.880635][ T5314] usb 5-1: config 179 has no interface number 0
[  149.888215][ T5314] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  149.935047][ T5314] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  149.972222][ T5314] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  149.985719][ T5314] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  149.998398][ T5314] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  150.013798][ T5314] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  150.024005][ T5314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.032683][   T23] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  150.058485][   T23] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  150.069072][   T23] usb 2-1: Product: syz
[  150.079886][   T23] usb 2-1: Manufacturer: syz
[  150.084676][   T23] usb 2-1: SerialNumber: syz
[  150.093073][ T6148] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  150.111276][ T6146] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  150.120243][ T4267] input: syz Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:3031.000F/input/input17
[  150.142666][ T6146] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  150.227333][ T4267] input: syz Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:5543:3031.000F/input/input18
[  150.253764][ T4267] uclogic 0003:5543:3031.000F: input,hidraw0: USB HID v0.04 Keypad [syz] on usb-dummy_hcd.2-1/input0
[  150.362286][ T5314] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input19
[  150.417043][ T4362] usb 3-1: USB disconnect, device number 7
[  150.424128][   T23] aqc111: probe of 2-1:1.105 failed with error -71
[  150.459433][   T23] usb 2-1: USB disconnect, device number 10
[  150.611366][ T6166] loop0: detected capacity change from 0 to 256
[  150.636905][ T5312] usb 5-1: USB disconnect, device number 8
[  150.654742][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  150.663778][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  150.685417][ T5312] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  150.743762][ T6166] FAT-fs (loop0): Directory bread(block 64) failed
[  150.752141][ T6166] FAT-fs (loop0): Directory bread(block 65) failed
[  150.760043][ T6166] FAT-fs (loop0): Directory bread(block 66) failed
[  150.767137][ T6166] FAT-fs (loop0): Directory bread(block 67) failed
[  150.773764][ T6166] FAT-fs (loop0): Directory bread(block 68) failed
[  150.781051][ T6166] FAT-fs (loop0): Directory bread(block 69) failed
[  150.793121][ T6166] FAT-fs (loop0): Directory bread(block 70) failed
[  150.804731][ T6166] FAT-fs (loop0): Directory bread(block 71) failed
[  150.813874][ T6166] FAT-fs (loop0): Directory bread(block 72) failed
[  150.821690][ T6166] FAT-fs (loop0): Directory bread(block 73) failed
[  151.424437][ T6179] loop1: detected capacity change from 0 to 512
[  151.529929][ T6179] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  151.567845][ T6179] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.823623][ T6169] loop3: detected capacity change from 0 to 131072
[  151.935121][ T6169] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  151.943460][ T6169] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  151.960528][ T6169] F2FS-fs (loop3): invalid crc value
[  152.008517][ T6169] F2FS-fs (loop3): Found nat_bits in checkpoint
[  152.061874][ T6169] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  152.069046][ T6169] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  152.266162][ T4362] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  152.336886][ T6177] loop4: detected capacity change from 0 to 32768
[  152.482666][ T6177] XFS (loop4): Mounting V5 Filesystem
[  152.524489][ T4362] usb 3-1: Using ep0 maxpacket: 32
[  152.627963][ T6177] XFS (loop4): Ending clean mount
[  152.672583][ T4362] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.714125][ T4362] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.744522][ T4362] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  152.774955][ T4362] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.794769][ T4362] usb 3-1: config 0 descriptor??
[  152.835054][ T4188] XFS (loop4): Unmounting Filesystem
[  152.889962][ T6211] loop1: detected capacity change from 0 to 512
[  153.075667][ T6211] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  153.216931][ T6211] EXT4-fs (loop1): 1 truncate cleaned up
[  153.253374][ T6211] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,noload,lazytime,noload,resgid=0x0000000000000000,auto_da_alloc,,errors=continue. Quota mode: none.
[  153.307788][ T4362] ft260 0003:0403:6030.0010: unknown main item tag 0x0
[  153.334811][ T4362] ft260 0003:0403:6030.0010: unknown main item tag 0x0
[  153.384286][ T4362] ft260 0003:0403:6030.0010: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0
[  153.415776][ T6214] device team_slave_0 entered promiscuous mode
[  153.422702][ T6214] device team_slave_1 entered promiscuous mode
[  153.472556][ T6214] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  153.483150][ T6214] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  153.578073][ T4362] ft260 0003:0403:6030.0010: chip code: 0000 0000
[  153.656165][ T6217] loop3: detected capacity change from 0 to 8192
[  153.764081][ T6217]  loop3: p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215
[  153.766110][ T6217] loop3: p3 start 524032 is beyond EOD, 
[  153.920219][ T6227] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  153.967223][ T6217] truncated
[  153.970751][ T6228] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  153.977957][ T6228] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  154.001191][ T6228] vhci_hcd vhci_hcd.0: Device attached
[  154.009815][ T6233] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6)
[  154.016392][ T6233] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  154.104098][ T6233] vhci_hcd vhci_hcd.0: Device attached
[  154.132574][ T6239] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(5)
[  154.139160][ T6239] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  154.168806][ T6239] vhci_hcd vhci_hcd.0: Device attached
[  154.287171][ T6228] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(8)
[  154.293846][ T6228] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  154.298492][ T4362] ft260 0003:0403:6030.0010: failed to reset I2C controller: -71
[  154.309834][ T4267] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[  154.357943][ T4362] usb 3-1: USB disconnect, device number 8
[  154.358879][ T6228] vhci_hcd vhci_hcd.0: Device attached
[  154.391428][ T6250] loop0: detected capacity change from 0 to 64
[  154.427527][ T6233] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12)
[  154.434200][ T6233] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  154.462701][ T6239] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(15)
[  154.469398][ T6239] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  154.498000][ T6233] vhci_hcd vhci_hcd.0: Device attached
[  154.521098][ T6239] vhci_hcd vhci_hcd.0: Device attached
[  154.528015][ T6255] device dummy0 entered promiscuous mode
[  154.550853][ T6255] device netdevsim0 entered promiscuous mode
[  154.556162][ T6249] vhci_hcd: connection closed
[  154.578642][ T5525] vhci_hcd: stop threads
[  154.590156][ T6252] vhci_hcd: connection closed
[  154.620330][ T6246] vhci_hcd: connection closed
[  154.624842][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  154.626454][ T6240] vhci_hcd: connection closed
[  154.639642][ T6234] vhci_hcd: connection closed
[  154.644486][ T6229] vhci_hcd: connection reset by peer
[  154.658181][ T6250] hfs: request for non-existent node 131072 in B*Tree
[  154.676657][ T5525] vhci_hcd: release socket
[  154.714829][ T6250] hfs: request for non-existent node 131072 in B*Tree
[  154.717513][ T5525] vhci_hcd: disconnect device
[  154.744617][ T5525] vhci_hcd: stop threads
[  154.787118][ T5525] vhci_hcd: release socket
[  154.810285][ T5525] vhci_hcd: disconnect device
[  154.816071][ T5525] vhci_hcd: stop threads
[  154.832021][ T5525] vhci_hcd: release socket
[  154.842288][ T6256] fido_id[6256]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  154.858662][ T5525] vhci_hcd: disconnect device
[  154.879509][ T5525] vhci_hcd: stop threads
[  154.898203][ T5525] vhci_hcd: release socket
[  154.924421][ T5525] vhci_hcd: disconnect device
[  154.936355][ T5525] vhci_hcd: stop threads
[  154.955336][ T5525] vhci_hcd: release socket
[  154.978765][ T5525] vhci_hcd: disconnect device
[  154.996706][ T5525] vhci_hcd: stop threads
[  155.008710][ T6217]  loop3: p126 could not be added: -ENOMEM
[  155.031190][ T5525] vhci_hcd: release socket
[  155.045486][ T5525] vhci_hcd: disconnect device
[  155.210990][ T6268] netlink: 'syz.2.680': attribute type 19 has an invalid length.
[  155.281571][ T6268] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  155.291310][ T6268] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  155.300249][ T6268] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  155.309126][ T6268] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  155.465629][ T6268] netlink: 'syz.2.680': attribute type 19 has an invalid length.
[  155.739109][ T6285] loop2: detected capacity change from 0 to 4096
[  155.761160][ T6283] loop1: detected capacity change from 0 to 4096
[  155.811571][ T6285] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  155.844502][ T6283] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  155.924160][ T5311] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  156.194979][ T5311] usb 5-1: Using ep0 maxpacket: 32
[  156.315538][ T5311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.371215][ T5311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.461773][ T5311] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  156.558645][ T5311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.638604][ T5311] usb 5-1: config 0 descriptor??
[  156.917343][    C1] sched: RT throttling activated
[  157.181404][ T5311] ft260 0003:0403:6030.0011: unknown main item tag 0x0
[  157.224377][ T5311] ft260 0003:0403:6030.0011: unknown main item tag 0x0
[  157.258390][ T5311] ft260 0003:0403:6030.0011: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0
[  157.395123][ T6306] loop3: detected capacity change from 0 to 1024
[  157.419720][ T5311] ft260 0003:0403:6030.0011: chip code: 0000 0000
[  157.507379][ T6314] loop2: detected capacity change from 0 to 1024
[  157.571074][ T6314] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  157.597628][ T6314] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,nodioread_nolock,noquota,barrier,user_xattr,nodioread_nolock,mblk_io_submit,resuid=0x0000000000000000,init_itable=0x0000000000000000,,errors=continue. Quota mode: none.
[  157.622065][ T5312] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  157.633220][ T6314] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.732717][ T6321] team0: Port device team_slave_0 removed
[  157.790910][ T4194] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  157.852311][ T6325] loop2: detected capacity change from 0 to 256
[  157.926349][ T6331] loop3: detected capacity change from 0 to 128
[  157.978233][ T6331] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  157.992833][ T5312] usb 1-1: config 0 has an invalid interface number: 251 but max is 0
[  158.001325][ T6331] hpfs: filesystem error: improperly stopped
[  158.007357][ T6331] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  158.015624][ T5312] usb 1-1: config 0 has no interface number 0
[  158.019280][ T6331] hpfs: You really don't want any checks? You are crazy...
[  158.029334][ T6331] hpfs: Code page index out of array
[  158.035292][ T6331] hpfs: code page support is disabled
[  158.047615][ T6331] hpfs: hpfs_map_4sectors(): unaligned read
[  158.053743][ T4194] usb 2-1: Using ep0 maxpacket: 8
[  158.059032][ T6331] hpfs: hpfs_map_4sectors(): unaligned read
[  158.078894][ T6331] hpfs: filesystem error: unable to find root dir
[  158.082414][ T5311] ft260 0003:0403:6030.0011: failed to reset I2C controller: -71
[  158.105478][ T4368] udevd[4368]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory
[  158.106016][ T4498] udevd[4498]: inotify_add_watch(7, /dev/loop3p8, 10) failed: No such file or directory
[  158.133854][ T4311] udevd[4311]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory
[  158.145236][ T4499] udevd[4499]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  158.148402][ T4200] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  158.171257][ T4266] udevd[4266]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  158.172465][ T5311] usb 5-1: USB disconnect, device number 9
[  158.188374][ T4367] udevd[4367]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory
[  158.202754][ T4292] udevd[4292]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[  158.232032][ T5312] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  158.241149][ T5312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.250916][ T4200] FAT-fs (loop2): Filesystem has been set read-only
[  158.283496][ T4200] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  158.303493][ T5312] usb 1-1: Product: syz
[  158.307732][ T5312] usb 1-1: Manufacturer: syz
[  158.342292][ T5312] usb 1-1: SerialNumber: syz
[  158.373501][ T5312] usb 1-1: config 0 descriptor??
[  158.375422][ T6332] udevd[6332]: inotify_add_watch(7, /dev/loop3p10, 10) failed: No such file or directory
[  158.388939][ T4194] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  158.405480][ T4194] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.420059][ T6333] udevd[6333]: inotify_add_watch(7, /dev/loop3p11, 10) failed: No such file or directory
[  158.430251][ T4194] usb 2-1: Product: syz
[  158.435905][ T4194] usb 2-1: Manufacturer: syz
[  158.441770][ T4194] usb 2-1: SerialNumber: syz
[  158.451301][ T6334] udevd[6334]: inotify_add_watch(7, /dev/loop3p12, 10) failed: No such file or directory
[  158.758100][ T6341] loop4: detected capacity change from 0 to 512
[  158.850119][ T6341] EXT4-fs (loop4): Ignoring removed mblk_io_submit option
[  158.862956][ T6341] EXT4-fs (loop4): orphan cleanup on readonly fs
[  158.870706][ T6341] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  159.074912][ T5312] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  159.097640][ T5312] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -71
[  159.123840][ T5312] asix: probe of 1-1:0.251 failed with error -71
[  159.147384][ T6341] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.711: attempt to clear invalid blocks 2 len 1
[  159.179306][ T5312] usb 1-1: USB disconnect, device number 8
[  159.187793][ T4194] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  159.209840][  T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.238384][ T4194] usb 2-1: clock source 0 is not valid, cannot use
[  159.256330][  T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.309720][ T6341] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  159.386488][ T4194] usb 2-1: 1:1: cannot get freq (v2/v3): err -32
[  159.394062][ T6341] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.711: invalid indirect mapped block 1819239214 (level 0)
[  159.467144][ T6341] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.711: invalid indirect mapped block 1819239214 (level 1)
[  159.506338][ T4267] vhci_hcd: vhci_device speed not set
[  159.582203][  T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.656771][ T4194] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  159.682795][ T4194] usb 2-1: clock source 0 is not valid, cannot use
[  159.697028][ T6341] EXT4-fs (loop4): 1 truncate cleaned up
[  159.702829][ T6341] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback.
[  159.722597][  T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.757131][ T4194] usb 2-1: 2:1: cannot get freq (v2/v3): err -71
[  159.797524][ T4194] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[  159.950025][  T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  159.976175][ T4194] usb 2-1: USB disconnect, device number 11
[  160.000160][  T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.017574][ T6341] EXT4-fs (loop4): re-mounted. Opts: usrjquota=,commit=0x0000000000000003,stripe=0x0000000000000000,minixdf,grpjquota=,noinit_itable,. Quota mode: writeback.
[  160.338210][  T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  160.415689][  T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.468944][ T6361] loop0: detected capacity change from 0 to 8192
[  160.529333][ T6364] fido_id[6364]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  160.606976][ T6361] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  160.650520][ T6361] REISERFS (device loop0): using ordered data mode
[  160.657257][ T6361] reiserfs: using flush barriers
[  160.733798][ T6361] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  160.785556][ T6361] REISERFS (device loop0): checking transaction log (loop0)
[  160.839624][ T6361] REISERFS (device loop0): Using r5 hash to sort names
[  160.849264][ T6361] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  160.939670][   T26] audit: type=1800 audit(1782937045.512:27): pid=6361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.720" name="file2" dev="loop0" ino=3 res=0 errno=0
[  161.066253][ T4362] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  161.099909][ T6374] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  161.115662][ T6374] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  161.260095][ T6359] chnl_net:caif_netlink_parms(): no params data found
[  161.332219][ T4362] usb 5-1: Using ep0 maxpacket: 8
[  161.476226][ T4362] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  161.507913][ T4362] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  161.573983][ T4362] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  161.641990][ T4362] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  161.663192][ T4362] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  161.676594][ T4362] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  161.686026][ T4362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.727151][ T6359] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.738793][ T6359] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.749077][ T6359] device bridge_slave_0 entered promiscuous mode
[  161.873976][ T6359] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.891530][ T6359] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.922051][ T6359] device bridge_slave_1 entered promiscuous mode
[  161.959178][ T4362] usb 5-1: GET_CAPABILITIES returned 0
[  161.965604][ T4362] usbtmc 5-1:16.0: can't read capabilities
[  162.084183][ T6359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  162.163310][ T5312] Bluetooth: hci4: command 0x0409 tx timeout
[  162.227651][ T6359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  162.315747][ T6376] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_IN returned 0
[  162.372943][ T6359] team0: Port device team_slave_0 added
[  162.419560][ T6359] team0: Port device team_slave_1 added
[  162.494701][ T6383] loop1: detected capacity change from 0 to 32768
[  162.531201][ T4194] usb 5-1: USB disconnect, device number 10
[  162.593726][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_0
[  162.606356][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  162.736816][ T6359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  162.794537][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.735'.
[  162.820812][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.735'.
[  162.831043][ T6420] netlink: 'syz.0.735': attribute type 12 has an invalid length.
[  162.846429][ T6420] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  162.855364][ T6420] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  162.864491][ T6420] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  162.873359][ T6420] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  162.911468][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.735'.
[  162.921307][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.735'.
[  162.940152][ T6420] netlink: 'syz.0.735': attribute type 12 has an invalid length.
[  162.985019][ T6359] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.018419][ T6359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.073500][ T6359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.289347][ T6359] device hsr_slave_0 entered promiscuous mode
[  163.335782][ T6359] device hsr_slave_1 entered promiscuous mode
[  163.360306][ T6359] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  163.367930][ T6359] Cannot create hsr debugfs directory
[  163.407880][ T6434] loop4: detected capacity change from 0 to 2048
[  163.504404][ T6434] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none.
[  163.911344][ T6450] loop0: detected capacity change from 0 to 128
[  164.008375][ T6450] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  164.058900][ T6424] loop3: detected capacity change from 0 to 40427
[  164.075304][ T6450] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.115313][ T6424] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff
[  164.148688][ T6424] F2FS-fs (loop3): invalid crc value
[  164.154322][  T154] device hsr_slave_0 left promiscuous mode
[  164.184970][  T154] device hsr_slave_1 left promiscuous mode
[  164.210365][ T6424] F2FS-fs (loop3): Found nat_bits in checkpoint
[  164.233932][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  164.241780][ T5311] Bluetooth: hci4: command 0x041b tx timeout
[  164.261500][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  164.321253][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  164.344639][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  164.362615][  T154] device bridge_slave_1 left promiscuous mode
[  164.385706][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.411865][ T6424] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  164.457295][  T154] device bridge_slave_0 left promiscuous mode
[  164.484360][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.584709][ T6460] attempt to access beyond end of device
[  164.584709][ T6460] loop3: rw=2049, want=40976, limit=40427
[  164.614059][  T154] device veth1_macvtap left promiscuous mode
[  164.630838][ T6477] F2FS-fs (loop3): access invalid blkaddr:2816
[  164.649577][ T6477] CPU: 0 PID: 6477 Comm: syz.3.737 Not tainted syzkaller #0
[  164.657054][ T6477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  164.667151][ T6477] Call Trace:
[  164.670468][ T6477]  <TASK>
[  164.673437][ T6477]  dump_stack_lvl+0x188/0x250
[  164.678164][ T6477]  ? show_regs_print_info+0x20/0x20
[  164.683491][ T6477]  ? f2fs_get_next_page_offset+0x6a0/0x6a0
[  164.689372][ T6477]  f2fs_is_valid_blkaddr+0xc4a/0x1260
[  164.694834][ T6477]  f2fs_map_blocks+0xc34/0x3630
[  164.699847][ T6477]  ? f2fs_force_buffered_io+0x680/0x680
[  164.705564][ T6477]  ? xa_load+0x276/0x2a0
[  164.709859][ T6477]  f2fs_mpage_readpages+0xcaf/0x22a0
[  164.715345][ T6477]  ? dquot_release_reservation_block+0xa0/0xa0
[  164.721565][ T6477]  ? f2fs_is_compress_backend_ready+0x99/0x120
[  164.727768][ T6477]  ? f2fs_readahead+0x163/0x2f0
[  164.732658][ T6477]  ? f2fs_set_data_page_dirty+0xae0/0xae0
[  164.738418][ T6477]  read_pages+0x172/0x920
[  164.742801][ T6477]  ? page_cache_ra_unbounded+0x8f0/0x8f0
[  164.748480][ T6477]  ? add_to_page_cache_lru+0x2ad/0x4a0
[  164.754007][ T6477]  page_cache_ra_unbounded+0x7f4/0x8f0
[  164.759557][ T6477]  ? read_cache_pages_invalidate_pages+0x1c0/0x1c0
[  164.766104][ T6477]  ? blk_cgroup_congested+0x30b/0x390
[  164.771655][ T6477]  f2fs_readdir+0x496/0xd90
[  164.776340][ T6477]  ? f2fs_fill_dentries+0xcc0/0xcc0
[  164.781721][ T6477]  ? end_current_label_crit_section+0x14b/0x170
[  164.788126][ T6477]  ? iterate_dir+0x10d/0x550
[  164.792762][ T6477]  ? down_read_killable+0x1ce/0x340
[  164.798005][ T6477]  ? fsnotify_perm+0x254/0x560
[  164.802939][ T6477]  iterate_dir+0x213/0x550
[  164.807400][ T6477]  ? f2fs_fill_dentries+0xcc0/0xcc0
[  164.812697][ T6477]  __se_sys_getdents+0xf2/0x260
[  164.817613][ T6477]  ? __x64_sys_getdents+0x80/0x80
[  164.822669][ T6477]  ? fillonedir+0x4c0/0x4c0
[  164.827213][ T6477]  ? lockdep_hardirqs_on+0x94/0x140
[  164.832574][ T6477]  do_syscall_64+0x4c/0xa0
[  164.837131][ T6477]  ? clear_bhb_loop+0x30/0x80
[  164.841846][ T6477]  ? clear_bhb_loop+0x30/0x80
[  164.846569][ T6477]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  164.852509][ T6477] RIP: 0033:0x7f1e4d31be59
[  164.857065][ T6477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  164.877455][ T6477] RSP: 002b:00007f1e4b553028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  164.886108][ T6477] RAX: ffffffffffffffda RBX: 00007f1e4d5a4090 RCX: 00007f1e4d31be59
[  164.894483][ T6477] RDX: 0000000000000058 RSI: 0000000000000000 RDI: 0000000000000005
[  164.902526][ T6477] RBP: 00007f1e4d3b1e6f R08: 0000000000000000 R09: 0000000000000000
[  164.910649][ T6477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.918658][ T6477] R13: 00007f1e4d5a4128 R14: 00007f1e4d5a4090 R15: 00007fff578061b8
[  164.926773][ T6477]  </TASK>
[  164.936752][  T154] device veth0_macvtap left promiscuous mode
[  164.953141][  T154] device veth1_vlan left promiscuous mode
[  164.959373][  T154] device veth0_vlan left promiscuous mode
[  165.074196][ T6477] F2FS-fs (loop3): access invalid blkaddr:2816
[  165.092699][ T6477] CPU: 1 PID: 6477 Comm: syz.3.737 Not tainted syzkaller #0
[  165.100100][ T6477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  165.110193][ T6477] Call Trace:
[  165.113506][ T6477]  <TASK>
[  165.116528][ T6477]  dump_stack_lvl+0x188/0x250
[  165.121248][ T6477]  ? show_regs_print_info+0x20/0x20
[  165.126483][ T6477]  ? f2fs_get_next_page_offset+0x6a0/0x6a0
[  165.132339][ T6477]  ? unlock_page+0x17c/0x1f0
[  165.136971][ T6477]  f2fs_is_valid_blkaddr+0xc4a/0x1260
[  165.142400][ T6477]  f2fs_map_blocks+0xc34/0x3630
[  165.147415][ T6477]  ? f2fs_force_buffered_io+0x680/0x680
[  165.153010][ T6477]  ? xa_load+0x276/0x2a0
[  165.157299][ T6477]  f2fs_mpage_readpages+0xcaf/0x22a0
[  165.162649][ T6477]  ? dquot_release_reservation_block+0xa0/0xa0
[  165.168868][ T6477]  ? f2fs_is_compress_backend_ready+0x99/0x120
[  165.175176][ T6477]  ? f2fs_readahead+0x163/0x2f0
[  165.180060][ T6477]  ? f2fs_set_data_page_dirty+0xae0/0xae0
[  165.185848][ T6477]  read_pages+0x172/0x920
[  165.190238][ T6477]  ? page_cache_ra_unbounded+0x8f0/0x8f0
[  165.195914][ T6477]  ? add_to_page_cache_lru+0x2ad/0x4a0
[  165.201506][ T6477]  page_cache_ra_unbounded+0x7f4/0x8f0
[  165.207383][ T6477]  ? read_cache_pages_invalidate_pages+0x1c0/0x1c0
[  165.214146][ T6477]  ? blk_cgroup_congested+0x30b/0x390
[  165.219567][ T6477]  f2fs_readdir+0x496/0xd90
[  165.224140][ T6477]  ? f2fs_fill_dentries+0xcc0/0xcc0
[  165.229378][ T6477]  ? end_current_label_crit_section+0x14b/0x170
[  165.235668][ T6477]  ? iterate_dir+0x10d/0x550
[  165.240293][ T6477]  ? down_read_killable+0x1ce/0x340
[  165.245523][ T6477]  ? fsnotify_perm+0x254/0x560
[  165.250331][ T6477]  iterate_dir+0x213/0x550
[  165.254790][ T6477]  ? f2fs_fill_dentries+0xcc0/0xcc0
[  165.260046][ T6477]  __se_sys_getdents+0xf2/0x260
[  165.264948][ T6477]  ? __x64_sys_getdents+0x80/0x80
[  165.270016][ T6477]  ? fillonedir+0x4c0/0x4c0
[  165.274664][ T6477]  ? lockdep_hardirqs_on+0x94/0x140
[  165.279911][ T6477]  do_syscall_64+0x4c/0xa0
[  165.284367][ T6477]  ? clear_bhb_loop+0x30/0x80
[  165.289084][ T6477]  ? clear_bhb_loop+0x30/0x80
[  165.293802][ T6477]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  165.299833][ T6477] RIP: 0033:0x7f1e4d31be59
[  165.304292][ T6477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.323943][ T6477] RSP: 002b:00007f1e4b553028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  165.332408][ T6477] RAX: ffffffffffffffda RBX: 00007f1e4d5a4090 RCX: 00007f1e4d31be59
[  165.340425][ T6477] RDX: 0000000000000058 RSI: 0000000000000000 RDI: 0000000000000005
[  165.348441][ T6477] RBP: 00007f1e4d3b1e6f R08: 0000000000000000 R09: 0000000000000000
[  165.356457][ T6477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.364470][ T6477] R13: 00007f1e4d5a4128 R14: 00007f1e4d5a4090 R15: 00007fff578061b8
[  165.372514][ T6477]  </TASK>
[  165.532110][ T6477] attempt to access beyond end of device
[  165.532110][ T6477] loop3: rw=0, want=45072, limit=40427
[  165.614342][ T6487] loop4: detected capacity change from 0 to 4096
[  165.644290][ T6466] loop0: detected capacity change from 0 to 32768
[  165.680062][ T6487] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  165.953810][  T154] team0 (unregistering): Port device team_slave_1 removed
[  165.977971][  T154] team0 (unregistering): Port device team_slave_0 removed
[  166.037416][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  166.085748][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  166.108212][ T6491] loop4: detected capacity change from 0 to 256
[  166.267240][  T154] bond0 (unregistering): Released all slaves
[  166.317558][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d154400: rx timeout, send abort
[  166.329477][ T5313] Bluetooth: hci4: command 0x040f tx timeout
[  166.349367][ T6497] loop1: detected capacity change from 0 to 128
[  166.431549][ T6497] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  166.448395][ T6497] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  166.642134][ T6359] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  166.713524][ T6359] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  166.760517][ T6493] loop4: detected capacity change from 0 to 32768
[  166.797724][ T6359] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  166.819172][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d154800: rx timeout, send abort
[  166.827662][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d154400: abort rx timeout. Force session deactivation
[  166.861162][ T6359] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  166.994667][ T6493] XFS (loop4): Mounting V5 Filesystem
[  167.121278][ T6493] XFS (loop4): Ending clean mount
[  167.241868][ T6493] XFS (loop4): Quotacheck needed: Please wait.
[  167.329045][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807d154800: abort rx timeout. Force session deactivation
[  167.387616][ T6359] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.464541][ T6493] XFS (loop4): Quotacheck: Done.
[  167.582352][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  167.600208][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  167.673944][ T6359] 8021q: adding VLAN 0 to HW filter on device team0
[  167.747546][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  167.783061][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  167.807337][ T4188] XFS (loop4): Unmounting Filesystem
[  167.878375][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.885558][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.935932][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  167.985561][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  168.015040][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  168.112929][  T155] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.120166][  T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[  168.177192][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  168.242027][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  168.294324][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  168.343259][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  168.413758][    T7] Bluetooth: hci4: command 0x0419 tx timeout
[  168.424986][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  168.444810][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  168.486598][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  168.515804][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  168.589591][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  168.684847][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  168.726266][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  168.792109][ T6359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  168.807948][ T6521] loop0: detected capacity change from 0 to 32768
[  168.966873][ T6541] loop3: detected capacity change from 0 to 1024
[  169.115924][ T6521] XFS (loop0): Mounting V5 Filesystem
[  169.204756][ T6541] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  169.287810][ T6541] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.766: Invalid inode table block 10701062190794016504 in block_group 0
[  169.341702][ T6521] XFS (loop0): Ending clean mount
[  169.438394][ T6541] EXT4-fs error (device loop3): ext4_get_max_inline_size:115: inode #18: comm syz.3.766: can't get inode location 18
[  169.504482][ T6541] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.766: Invalid inode table block 10701062190794016504 in block_group 0
[  169.519842][ T4193] XFS (loop0): Unmounting Filesystem
[  169.555671][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  169.598777][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  169.612123][ T6359] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.631166][ T6541] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  169.655827][ T6535] chnl_net:caif_netlink_parms(): no params data found
[  169.678508][ T6541] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #18: comm syz.3.766: mark_inode_dirty error
[  169.760078][ T6541] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.766: Invalid block bitmap block 18230840206504252057 in block_group 0
[  169.918427][ T6541] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.766: Invalid inode table block 10701062190794016504 in block_group 0
[  170.002887][ T6535] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.030671][ T6535] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.107344][ T6541] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  170.121622][ T6535] device bridge_slave_0 entered promiscuous mode
[  170.160001][ T6535] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.178693][ T6535] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.187176][ T6535] device bridge_slave_1 entered promiscuous mode
[  170.203763][ T6541] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #18: comm syz.3.766: mark_inode_dirty error
[  170.231751][ T6541] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.766: Invalid inode table block 10701062190794016504 in block_group 0
[  170.307400][ T6535] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  170.359018][ T6535] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  170.577846][ T6535] team0: Port device team_slave_0 added
[  170.613916][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  170.655116][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  170.670338][ T5311] Bluetooth: hci0: command 0x0409 tx timeout
[  170.829785][ T6535] team0: Port device team_slave_1 added
[  170.890196][ T6535] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.928542][ T6535] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.006662][ T6535] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.031916][ T6359] device veth0_vlan entered promiscuous mode
[  171.040121][ T6596] netlink: 'syz.4.773': attribute type 1 has an invalid length.
[  171.121779][ T6596] 8021q: adding VLAN 0 to HW filter on device bond2
[  171.149388][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  171.169873][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  171.224971][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  171.257140][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  171.280236][ T6597] bond2: (slave geneve2): making interface the new active one
[  171.321916][ T6597] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  171.346105][ T6601] loop0: detected capacity change from 0 to 256
[  171.355593][ T6535] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.368949][ T6535] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.401168][ T6601] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  171.432190][ T6601] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  171.440783][ T6535] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  171.457764][ T6601] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d)
[  171.477472][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  171.506475][ T6359] device veth1_vlan entered promiscuous mode
[  171.615311][ T6604] loop4: detected capacity change from 0 to 64
[  171.646061][ T6601] exFAT-fs (loop0): hint_cluster is invalid (17)
[  171.673189][ T6535] device hsr_slave_0 entered promiscuous mode
[  171.699245][ T6604] hfs: unable to locate alternate MDB
[  171.714105][ T6535] device hsr_slave_1 entered promiscuous mode
[  171.723444][ T6535] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  171.744947][ T6604] hfs: continuing without an alternate MDB
[  171.814873][ T6535] Cannot create hsr debugfs directory
[  171.835561][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  171.861378][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  171.870202][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  171.880218][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  171.892007][ T6359] device veth0_macvtap entered promiscuous mode
[  171.913835][ T6359] device veth1_macvtap entered promiscuous mode
[  171.965158][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  171.990090][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  172.148409][ T6359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.174096][ T6359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.183971][ T6359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.244300][ T6359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.262318][ T6359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.305903][ T6359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.338664][ T6359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.363452][ T6359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.377276][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_0
[  172.399228][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  172.409015][ T5525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  172.426308][ T6624] netlink: 27 bytes leftover after parsing attributes in process `syz.4.781'.
[  172.489762][ T6359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.510618][ T6359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.535142][ T6359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.560369][ T6359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.609214][ T6359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.645243][ T6359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.692284][ T6359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.712329][ T6359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.733116][ T6359] batman_adv: batadv0: Interface activated: batadv_slave_1
[  172.754189][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  172.764178][ T4360] Bluetooth: hci0: command 0x041b tx timeout
[  172.785651][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  172.851796][ T6359] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.870705][ T6359] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.888209][ T6359] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.906184][ T6359] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.949925][  T154] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.127820][  T154] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.225807][  T154] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.257203][   T13] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  173.287427][ T5525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.304770][ T5525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.360743][  T154] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.379680][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  173.400827][ T6606] chnl_net:caif_netlink_parms(): no params data found
[  173.423100][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.439061][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.456445][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  173.648317][   T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  173.718098][   T13] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  173.777993][ T6606] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.785587][ T6606] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.799016][ T4267] Bluetooth: hci3: command 0x0409 tx timeout
[  173.814876][ T6606] device bridge_slave_0 entered promiscuous mode
[  173.830326][   T13] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  173.874645][ T6606] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.888725][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.897197][ T6606] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.928312][ T6606] device bridge_slave_1 entered promiscuous mode
[  173.939687][   T13] usb 1-1: config 0 descriptor??
[  174.081774][ T6662] team0: Port device team_slave_0 removed
[  174.152968][ T6606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.180089][ T6606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.300324][   T13] usb 1-1: USB disconnect, device number 9
[  174.309408][ T6606] team0: Port device team_slave_0 added
[  174.361963][ T6606] team0: Port device team_slave_1 added
[  174.478908][ T6606] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.505592][ T6606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.603375][ T6673] loop5: detected capacity change from 0 to 128
[  174.629336][ T6606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  174.679577][ T6673] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  174.697522][ T6673] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.714037][ T6535] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  174.730155][ T6606] batman_adv: batadv0: Adding interface: batadv_slave_1
[  174.739068][ T6606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.825258][ T6606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  174.842407][ T4194] Bluetooth: hci0: command 0x040f tx timeout
[  174.863604][ T6535] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  174.945403][ T6535] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  174.999445][ T6535] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  175.020570][ T6606] device hsr_slave_0 entered promiscuous mode
[  175.045461][ T6606] device hsr_slave_1 entered promiscuous mode
[  175.062658][ T6606] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  175.070377][ T6606] Cannot create hsr debugfs directory
[  175.453076][ T5311] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  175.560270][ T6535] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.596031][ T6606] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  175.611191][ T6606] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  175.631026][ T6606] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  175.672907][ T6606] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  175.674720][ T4362] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  175.697396][ T6535] 8021q: adding VLAN 0 to HW filter on device team0
[  175.716351][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  175.736866][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  175.777744][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  175.786803][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  175.804704][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state
[  175.811838][ T4301] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.833217][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  175.855162][ T5311] usb 5-1: config index 0 descriptor too short (expected 45, got 36)
[  175.863341][ T5311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.881090][ T5311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.887876][   T23] Bluetooth: hci3: command 0x041b tx timeout
[  175.898469][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  175.906876][ T5311] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  175.921088][ T5311] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  175.930891][ T5311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.932757][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  175.957933][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.965150][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.994605][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  176.003776][ T5311] usb 5-1: config 0 descriptor??
[  176.013941][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  176.027071][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  176.050620][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  176.107077][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  176.121895][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  176.133565][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  176.146417][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  176.155367][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  176.190818][ T6535] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  176.218686][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  176.227336][ T4362] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  176.239495][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  176.251531][ T4362] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  176.264651][ T4362] usb 6-1: config 1 has no interface number 0
[  176.273299][ T4362] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  176.303992][ T4362] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  176.325045][ T4362] usb 6-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  176.334351][ T4362] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 149, setting to 64
[  176.358219][ T4362] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  176.478725][  T154] device hsr_slave_0 left promiscuous mode
[  176.488511][ T5311] plantronics 0003:047F:FFFF.0012: unknown main item tag 0xd
[  176.501153][  T154] device hsr_slave_1 left promiscuous mode
[  176.511908][ T5311] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving
[  176.521692][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.540128][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.548094][ T4362] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  176.557696][ T5311] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  176.566010][ T4362] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.605991][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.613761][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.615867][ T4362] usb 6-1: Product: syz
[  176.635872][ T4362] usb 6-1: Manufacturer: syz
[  176.640536][ T4362] usb 6-1: SerialNumber: syz
[  176.654007][  T154] device bridge_slave_1 left promiscuous mode
[  176.683843][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.696395][ T6702] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  176.723516][  T154] device bridge_slave_0 left promiscuous mode
[  176.747134][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.789688][  T154] device team_slave_1 left promiscuous mode
[  176.806981][  T154] device veth1_macvtap left promiscuous mode
[  176.813092][  T154] device veth0_macvtap left promiscuous mode
[  176.813803][ T4194] usb 5-1: USB disconnect, device number 11
[  176.830390][  T154] device veth1_vlan left promiscuous mode
[  176.840882][  T154] device veth0_vlan left promiscuous mode
[  176.917355][   T23] Bluetooth: hci0: command 0x0419 tx timeout
[  177.064448][  T154] bond0 (unregistering): (slave macvlan2): Releasing backup interface
[  177.138373][ T6702] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  177.206294][  T154] team0 (unregistering): Port device team_slave_1 removed
[  177.222220][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  177.241524][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  177.326500][  T154] bond0 (unregistering): Released all slaves
[  177.429894][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  177.437663][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  177.450826][ T6606] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.514722][ T6535] 8021q: adding VLAN 0 to HW filter on device batadv0
[  177.538418][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  177.576999][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  177.589781][ T4362] cdc_ncm 6-1:1.1: bind() failure
[  177.596960][ T6606] 8021q: adding VLAN 0 to HW filter on device team0
[  177.630372][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  177.639986][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  177.656837][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.664004][ T4301] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.704261][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  177.719614][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  177.743730][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  177.759190][ T4301] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.766381][ T4301] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.785360][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  177.810787][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  177.814160][    T7] usb 6-1: USB disconnect, device number 2
[  177.826677][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  177.840749][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  177.869510][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  177.891530][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  177.907848][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  177.927373][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  177.942316][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  177.964246][ T6606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  177.977232][ T4361] Bluetooth: hci3: command 0x040f tx timeout
[  177.997137][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  178.007419][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  178.027807][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  178.065101][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  178.102708][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  178.160351][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  178.173852][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  178.184315][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  178.211958][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  178.248931][ T6535] device veth0_vlan entered promiscuous mode
[  178.304154][ T6535] device veth1_vlan entered promiscuous mode
[  178.421167][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  178.454558][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  178.493677][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  178.560477][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  178.621428][ T6606] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.641584][ T6765] loop0: detected capacity change from 0 to 256
[  178.649583][ T6535] device veth0_macvtap entered promiscuous mode
[  178.685354][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  178.706190][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  178.791386][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  178.814225][ T6535] device veth1_macvtap entered promiscuous mode
[  178.834559][ T6769] loop4: detected capacity change from 0 to 128
[  178.896040][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.930751][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.961162][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  178.992733][ T6769] EXT4-fs (loop4): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback.
[  179.028034][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.050982][ T6769] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  179.076406][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.182224][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.212259][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  179.244567][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.257045][ T6535] batman_adv: batadv0: Interface activated: batadv_slave_0
[  179.320945][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.370925][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.391208][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.407946][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.438371][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.465218][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.482347][ T6535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.500422][ T6535] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.513467][ T6535] batman_adv: batadv0: Interface activated: batadv_slave_1
[  179.534736][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  179.565540][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  179.622921][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  179.634064][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  179.661010][ T6535] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  179.686433][ T6535] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  179.701231][ T6535] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  179.711554][ T6535] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.788654][ T6784] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  179.828647][ T6784] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  180.054754][ T4194] Bluetooth: hci3: command 0x0419 tx timeout
[  180.115838][ T4492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.124194][ T4492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.210156][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.228555][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.248046][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  180.260673][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  180.321064][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  180.351153][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  180.467117][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  180.476898][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  180.498443][ T6606] device veth0_vlan entered promiscuous mode
[  180.534735][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  180.568243][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  180.630830][ T6606] device veth1_vlan entered promiscuous mode
[  180.677080][ T6814] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  180.706692][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  180.827194][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  180.872566][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  180.930534][ T6606] device veth0_macvtap entered promiscuous mode
[  180.967434][ T6606] device veth1_macvtap entered promiscuous mode
[  181.050588][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.092875][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.126632][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.167465][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.214443][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.257597][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.288584][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.328781][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.353400][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.384137][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.445031][ T6606] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.501656][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  181.520978][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  181.563117][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  181.618488][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  181.682767][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.721447][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.780785][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.832284][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.868162][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.901665][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.934707][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.966403][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.003298][ T6831] loop5: detected capacity change from 0 to 32768
[  182.010042][ T6606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.032832][ T6606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.051751][ T6606] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.113611][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  182.133380][ T6831] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.822 (6831)
[  182.152423][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  182.186621][ T6831] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  182.200555][ T6606] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.230388][ T6606] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.245958][ T6831] BTRFS info (device loop5): using free space tree
[  182.261539][ T6606] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.274885][ T6831] BTRFS info (device loop5): has skinny extents
[  182.287544][ T6606] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.549591][ T6865] loop0: detected capacity change from 0 to 1024
[  182.568223][ T6865] hfsplus: part requires an argument
[  182.575799][ T6865] hfsplus: unable to parse mount options
[  182.748520][ T6831] BTRFS info (device loop5): enabling ssd optimizations
[  182.771836][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.779718][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.895052][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  182.947943][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.981671][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.996484][ T6879] tipc: Started in network mode
[  183.052307][ T6879] tipc: Node identity ac1414aa, cluster identity 4711
[  183.107650][ T6879] tipc: Enabled bearer <udp:s>, priority 10
[  183.132506][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  183.412322][ T6889] loop6: detected capacity change from 0 to 256
[  183.565709][ T6852] loop4: detected capacity change from 0 to 32768
[  183.753862][ T6899] loop6: detected capacity change from 0 to 512
[  183.829258][ T6899] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled
[  183.904653][ T6852] (syz.4.826,6852,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  183.923250][    T7] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  183.956020][ T6899] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.835: bg 0: block 393: padding at end of block bitmap is not set
[  183.983911][ T6902] loop0: detected capacity change from 0 to 512
[  184.107014][ T6899] EXT4-fs (loop6): Remounting filesystem read-only
[  184.114075][ T6852] (syz.4.826,6852,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  184.138650][ T6899] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  184.150944][ T6902] EXT4-fs (loop0): Ignoring removed bh option
[  184.173903][    T7] usb 8-1: Using ep0 maxpacket: 16
[  184.186300][ T6902] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2759: inode #11: comm syz.0.836: corrupted xattr block 95
[  184.220859][ T6899] EXT4-fs (loop6): Remounting filesystem read-only
[  184.223022][    T7] usb 8-1: too many configurations: 123, using maximum allowed: 8
[  184.237239][ T6899] EXT4-fs (loop6): 2 truncates cleaned up
[  184.243134][ T6899] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodiscard,jqfmt=vfsv0,errors=remount-ro,noquota,. Quota mode: writeback.
[  184.290755][ T6852] JBD2: Ignoring recovery information on journal
[  184.305011][ T5311] tipc: Node number set to 2886997162
[  184.324616][ T6902] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.836: bg 0: block 7: invalid block bitmap
[  184.384726][    T7] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  184.412045][ T6899] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1457: inode #12: block 7: comm syz.6.835: path /: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0
[  184.449091][ T6902] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  184.483720][ T6852] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  184.493436][ T6902] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2925: inode #11: comm syz.0.836: corrupted xattr block 95
[  184.536933][    T7] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  184.548881][ T6902] EXT4-fs warning (device loop0): ext4_evict_inode:304: xattr delete (err -117)
[  184.637204][ T6899] EXT4-fs (loop6): Remounting filesystem read-only
[  184.643216][ T6902] EXT4-fs (loop0): 1 orphan inode deleted
[  184.650339][    T7] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  184.665040][ T6902] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc,bh,,errors=continue. Quota mode: none.
[  184.770148][    T7] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  184.831559][ T4188] ocfs2: Unmounting device (7,4) on (node local)
[  184.895768][    T7] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  185.016196][    T7] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  185.126129][    T7] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  185.226474][    T7] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  185.327818][    T7] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  185.354268][    T7] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[  185.378820][    T7] usb 8-1: SerialNumber: syz
[  185.399575][    T7] usb 8-1: config 0 descriptor??
[  185.452937][ T4301] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.469749][    T7] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input21
[  185.580005][ T4301] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.599513][ T6907] loop5: detected capacity change from 0 to 40427
[  185.622302][ T6907] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1ffff
[  185.649717][ T6907] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x4
[  185.727682][ T6907] F2FS-fs (loop5): invalid crc value
[  185.730674][ T4301] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.758325][ T4235] usb 8-1: USB disconnect, device number 2
[  185.770057][ T3546] bcm5974 8-1:0.0: could not read from device
[  185.788176][ T6907] F2FS-fs (loop5): Found nat_bits in checkpoint
[  185.862287][ T4301] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.931970][ T6907] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  186.196679][ T6359] attempt to access beyond end of device
[  186.196679][ T6359] loop5: rw=2049, want=45104, limit=40427
[  186.219466][ T4492] wlan1: Trigger new scan to find an IBSS to join
[  187.030108][ T5314] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  187.368326][ T6963] chnl_net:caif_netlink_parms(): no params data found
[  187.390886][ T5314] usb 5-1: unable to get BOS descriptor or descriptor too short
[  187.511158][ T5314] usb 5-1: unable to read config index 0 descriptor/start: -71
[  187.519599][ T5314] usb 5-1: can't read configurations, error -71
[  187.594715][ T6988] loop5: detected capacity change from 0 to 256
[  187.622531][ T6988] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  187.751980][ T4492] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  187.867414][ T4301] device hsr_slave_0 left promiscuous mode
[  188.004340][ T6994] loop0: detected capacity change from 0 to 8192
[  188.011003][ T4301] device hsr_slave_1 left promiscuous mode
[  188.023386][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  188.031559][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_0
[  188.101345][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  188.129354][ T6970] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  188.142048][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_1
[  188.172653][ T6970] FAT-fs (loop0): Filesystem has been set read-only
[  188.272039][ T4301] device bridge_slave_1 left promiscuous mode
[  188.284098][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state
[  188.348391][ T4301] device bridge_slave_0 left promiscuous mode
[  188.361608][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.406780][ T4301] device veth1_macvtap left promiscuous mode
[  188.428129][ T4301] device veth0_macvtap left promiscuous mode
[  188.450581][ T4301] device veth1_vlan left promiscuous mode
[  188.470226][ T4301] device veth0_vlan left promiscuous mode
[  188.620712][ T7014] loop7: detected capacity change from 0 to 256
[  188.709571][ T7014] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001213e, chksum : 0x0cc630aa, utbl_chksum : 0xe619d30d)
[  188.812348][ T7014] exFAT-fs (loop7): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5)
[  188.829826][ T7014] exFAT-fs (loop7): Filesystem has been set read-only
[  188.864373][ T4235] Bluetooth: hci0: command 0x0409 tx timeout
[  189.098903][ T7025] loop0: detected capacity change from 0 to 512
[  189.378333][ T4301] team0 (unregistering): Port device team_slave_1 removed
[  189.451811][ T4301] team0 (unregistering): Port device team_slave_0 removed
[  189.484880][ T4301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  189.542930][ T4301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  189.696680][ T4301] bond0 (unregistering): Released all slaves
[  189.785293][ T7001] netlink: 56 bytes leftover after parsing attributes in process `syz.5.850'.
[  189.815014][ T6963] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.828075][ T6963] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.871588][ T6963] device bridge_slave_0 entered promiscuous mode
[  189.946979][ T6963] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.954213][ T6963] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.017560][ T6963] device bridge_slave_1 entered promiscuous mode
[  190.084155][ T6963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  190.140668][ T6963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  190.154402][ T7044] loop5: detected capacity change from 0 to 64
[  190.372448][ T6963] team0: Port device team_slave_0 added
[  190.381154][ T6963] team0: Port device team_slave_1 added
[  190.470206][   T26] audit: type=1800 audit(1782937074.966:28): pid=7050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.869" name="file1" dev="loop5" ino=5 res=0 errno=0
[  190.587486][ T6963] batman_adv: batadv0: Adding interface: batadv_slave_0
[  190.595497][ T6963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.726694][ T6963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  190.820726][ T6963] batman_adv: batadv0: Adding interface: batadv_slave_1
[  190.859272][ T7065] loop0: detected capacity change from 0 to 256
[  190.875573][ T6963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  190.905965][ T6963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  190.934843][ T7063] tipc: Started in network mode
[  190.943959][ T7065] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001213e, chksum : 0x0cc630aa, utbl_chksum : 0xe619d30d)
[  190.960476][ T4235] Bluetooth: hci0: command 0x041b tx timeout
[  190.970493][ T7063] tipc: Node identity ac1414aa, cluster identity 4711
[  190.981197][    T7] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  190.999263][ T7063] tipc: Enabled bearer <udp:s>, priority 10
[  191.128574][ T7065] exFAT-fs (loop0): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5)
[  191.186243][ T6963] device hsr_slave_0 entered promiscuous mode
[  191.224221][ T7065] exFAT-fs (loop0): Filesystem has been set read-only
[  191.242514][ T6963] device hsr_slave_1 entered promiscuous mode
[  191.257572][ T6963] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  191.271606][ T5525] wlan1: Trigger new scan to find an IBSS to join
[  191.276222][ T6963] Cannot create hsr debugfs directory
[  191.353492][    T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  191.386197][    T7] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  191.579722][    T7] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40
[  191.589804][ T4360] Bluetooth: hci2: command 0x0406 tx timeout
[  191.599117][    T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.600587][ T4360] Bluetooth: hci1: command 0x0406 tx timeout
[  191.635677][    T7] usb 5-1: Product: syz
[  191.649669][    T7] usb 5-1: Manufacturer: syz
[  191.669949][    T7] usb 5-1: SerialNumber: syz
[  191.675766][ T7085] loop7: detected capacity change from 0 to 512
[  191.756582][ T7085] EXT4-fs (loop7): Ignoring removed nobh option
[  191.828621][ T7085] EXT4-fs (loop7): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nobh,quota,,errors=continue. Quota mode: writeback.
[  191.970415][ T7085] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  192.024997][ T7085] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #2: comm syz.7.878: corrupted inode contents
[  192.107334][ T7085] EXT4-fs error (device loop7): ext4_dirty_inode:6077: inode #2: comm syz.7.878: mark_inode_dirty error
[  192.135990][ T4360] tipc: Node number set to 2886997162
[  192.147667][    T7] usb 5-1: USB disconnect, device number 14
[  192.172885][ T7085] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #2: comm syz.7.878: corrupted inode contents
[  192.211055][ T7085] EXT4-fs error (device loop7): __ext4_ext_dirty:183: inode #2: comm syz.7.878: mark_inode_dirty error
[  192.254023][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.294858][ T7085] 
[  192.297271][ T7085] ======================================================
[  192.304314][ T7085] WARNING: possible circular locking dependency detected
[  192.311387][ T7085] syzkaller #0 Not tainted
[  192.315832][ T7085] ------------------------------------------------------
[  192.322966][ T7085] syz.7.878/7085 is trying to acquire lock:
[  192.328976][ T7085] ffff888063fd4268 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410
[  192.338021][ T7085] 
[  192.338021][ T7085] but task is already holding lock:
[  192.345411][ T7085] ffff888063cc6628 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8c4/0x1a50
[  192.354943][ T7085] 
[  192.354943][ T7085] which lock already depends on the new lock.
[  192.354943][ T7085] 
[  192.365385][ T7085] 
[  192.365385][ T7085] the existing dependency chain (in reverse order) is:
[  192.374690][ T7085] 
[  192.374690][ T7085] -> #2 (&ei->i_data_sem/2){++++}-{3:3}:
[  192.382578][ T7085]        down_read+0x44/0x2e0
[  192.387324][ T7085]        ext4_map_blocks+0x350/0x1a50
[  192.392735][ T7085]        ext4_getblk+0x176/0x670
[  192.397802][ T7085]        ext4_bread+0x26/0x180
[  192.402610][ T7085]        ext4_quota_write+0x237/0x580
[  192.408025][ T7085]        get_free_dqblk+0x38a/0x7a0
[  192.413381][ T7085]        do_insert_tree+0x21b/0x19c0
[  192.418786][ T7085]        do_insert_tree+0x5c4/0x19c0
[  192.424100][ T7085]        do_insert_tree+0x5c4/0x19c0
[  192.429415][ T7085]        do_insert_tree+0x5c4/0x19c0
[  192.434996][ T7085]        qtree_write_dquot+0x354/0x4a0
[  192.440494][ T7085]        v2_write_dquot+0x108/0x190
[  192.445766][ T7085]        dquot_acquire+0x2d5/0x520
[  192.450935][ T7085]        ext4_acquire_dquot+0x2e3/0x4a0
[  192.456607][ T7085]        dqget+0x713/0xbb0
[  192.461060][ T7085]        __dquot_initialize+0x3a9/0xd00
[  192.466642][ T7085]        ext4_file_open+0x2e4/0x700
[  192.471885][ T7085]        do_dentry_open+0x7f7/0xf90
[  192.477132][ T7085]        path_openat+0x2718/0x2fb0
[  192.482280][ T7085]        do_filp_open+0x1df/0x400
[  192.487336][ T7085]        do_sys_openat2+0x14b/0x500
[  192.492568][ T7085]        __x64_sys_openat+0x135/0x160
[  192.497975][ T7085]        do_syscall_64+0x4c/0xa0
[  192.502972][ T7085]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  192.509433][ T7085] 
[  192.509433][ T7085] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}:
[  192.517702][ T7085]        down_read+0x44/0x2e0
[  192.522425][ T7085]        v2_read_dquot+0x4a/0x110
[  192.527492][ T7085]        dquot_acquire+0x152/0x520
[  192.532653][ T7085]        ext4_acquire_dquot+0x2e3/0x4a0
[  192.538250][ T7085]        dqget+0x713/0xbb0
[  192.542716][ T7085]        __dquot_initialize+0x3a9/0xd00
[  192.548325][ T7085]        ext4_file_open+0x2e4/0x700
[  192.553560][ T7085]        do_dentry_open+0x7f7/0xf90
[  192.558883][ T7085]        path_openat+0x2718/0x2fb0
[  192.564284][ T7085]        do_filp_open+0x1df/0x400
[  192.569369][ T7085]        do_sys_openat2+0x14b/0x500
[  192.574691][ T7085]        __x64_sys_openat+0x135/0x160
[  192.580098][ T7085]        do_syscall_64+0x4c/0xa0
[  192.585080][ T7085]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  192.590321][ T7105] loop5: detected capacity change from 0 to 4096
[  192.591536][ T7085] 
[  192.591536][ T7085] -> #0 (&dquot->dq_lock){+.+.}-{3:3}:
[  192.591570][ T7085]        __lock_acquire+0x2c66/0x7b50
[  192.611141][ T7085]        lock_acquire+0x19e/0x400
[  192.616210][ T7085]        __mutex_lock_common+0x1e5/0x2400
[  192.621980][ T7085]        mutex_lock_nested+0x17/0x20
[  192.627426][ T7085]        dquot_commit+0x5a/0x410
[  192.632490][ T7085]        ext4_write_dquot+0x1f0/0x360
[  192.637892][ T7085]        mark_all_dquot_dirty+0xf9/0x400
[  192.643555][ T7085]        __dquot_alloc_space+0x5cb/0xe10
[  192.649241][ T7085]        ext4_mb_new_blocks+0xf80/0x47c0
[  192.655019][ T7085]        ext4_ext_map_blocks+0x17d1/0x63d0
[  192.660870][ T7085]        ext4_map_blocks+0x97f/0x1a50
[  192.666273][ T7085]        ext4_getblk+0x176/0x670
[  192.671247][ T7085]        ext4_bread+0x26/0x180
[  192.676043][ T7085]        ext4_append+0x2bb/0x560
[  192.681048][ T7085]        ext4_init_new_dir+0x2a7/0x910
[  192.686542][ T7085]        ext4_mkdir+0x4c3/0xc90
[  192.691429][ T7085]        vfs_mkdir+0x386/0x570
[  192.696231][ T7085]        do_mkdirat+0x1dd/0x5c0
[  192.701119][ T7085]        __x64_sys_mkdirat+0x85/0x90
[  192.706476][ T7085]        do_syscall_64+0x4c/0xa0
[  192.711490][ T7085]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  192.717956][ T7085] 
[  192.717956][ T7085] other info that might help us debug this:
[  192.717956][ T7085] 
[  192.728339][ T7085] Chain exists of:
[  192.728339][ T7085]   &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2
[  192.728339][ T7085] 
[  192.742027][ T7085]  Possible unsafe locking scenario:
[  192.742027][ T7085] 
[  192.749592][ T7085]        CPU0                    CPU1
[  192.754990][ T7085]        ----                    ----
[  192.760389][ T7085]   lock(&ei->i_data_sem/2);
[  192.765028][ T7085]                                lock(&s->s_dquot.dqio_sem);
[  192.772523][ T7085]                                lock(&ei->i_data_sem/2);
[  192.779779][ T7085]   lock(&dquot->dq_lock);
[  192.784335][ T7085] 
[  192.784335][ T7085]  *** DEADLOCK ***
[  192.784335][ T7085] 
[  192.792585][ T7085] 4 locks held by syz.7.878/7085:
[  192.797634][ T7085]  #0: ffff88805a930460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  192.807087][ T7085]  #1: ffff888060002bd0 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450
[  192.818120][ T7085]  #2: ffff888063cc6628 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8c4/0x1a50
[  192.828206][ T7085]  #3: ffffffff8c441798 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30
[  192.837323][ T7085] 
[  192.837323][ T7085] stack backtrace:
[  192.843239][ T7085] CPU: 0 PID: 7085 Comm: syz.7.878 Not tainted syzkaller #0
[  192.850655][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  192.860947][ T7085] Call Trace:
[  192.864254][ T7085]  <TASK>
[  192.867315][ T7085]  dump_stack_lvl+0x188/0x250
[  192.872031][ T7085]  ? load_image+0x410/0x410
[  192.876562][ T7085]  ? show_regs_print_info+0x20/0x20
[  192.881803][ T7085]  ? print_circular_bug+0x12b/0x1a0
[  192.887036][ T7085]  check_noncircular+0x296/0x330
[  192.892019][ T7085]  ? add_chain_block+0x9b0/0x9b0
[  192.896989][ T7085]  ? lockdep_lock+0xf1/0x1f0
[  192.901623][ T7085]  ? mark_lock+0x94/0x320
[  192.905980][ T7085]  ? _find_first_zero_bit+0xd1/0xf0
[  192.911304][ T7085]  __lock_acquire+0x2c66/0x7b50
[  192.916367][ T7085]  ? check_path+0x21/0x40
[  192.920722][ T7085]  ? verify_lock_unused+0x140/0x140
[  192.925959][ T7085]  ? lockdep_lock+0xf1/0x1f0
[  192.930595][ T7085]  ? lockdep_unlock+0x143/0x2e0
[  192.935497][ T7085]  ? lockdep_lock+0x1f0/0x1f0
[  192.940343][ T7085]  lock_acquire+0x19e/0x400
[  192.944988][ T7085]  ? dquot_commit+0x5a/0x410
[  192.949626][ T7085]  ? __might_sleep+0xf0/0xf0
[  192.954255][ T7085]  ? read_lock_is_recursive+0x10/0x10
[  192.959675][ T7085]  ? verify_lock_unused+0x140/0x140
[  192.964920][ T7085]  __mutex_lock_common+0x1e5/0x2400
[  192.970243][ T7085]  ? dquot_commit+0x5a/0x410
[  192.974885][ T7085]  ? dquot_commit+0x5a/0x410
[  192.979598][ T7085]  ? __might_sleep+0xf0/0xf0
[  192.984236][ T7085]  ? mutex_lock_io_nested+0x60/0x60
[  192.989767][ T7085]  mutex_lock_nested+0x17/0x20
[  192.994586][ T7085]  dquot_commit+0x5a/0x410
[  192.999039][ T7085]  ext4_write_dquot+0x1f0/0x360
[  193.003924][ T7085]  mark_all_dquot_dirty+0xf9/0x400
[  193.009074][ T7085]  __dquot_alloc_space+0x5cb/0xe10
[  193.014231][ T7085]  ext4_mb_new_blocks+0xf80/0x47c0
[  193.019394][ T7085]  ? memset+0x1e/0x40
[  193.023412][ T7085]  ? ext4_mb_pa_callback+0xd0/0xd0
[  193.028599][ T7085]  ? ext4_inode_to_goal_block+0x313/0x450
[  193.034440][ T7085]  ext4_ext_map_blocks+0x17d1/0x63d0
[  193.039785][ T7085]  ? ext4_ext_release+0x10/0x10
[  193.044668][ T7085]  ? rwsem_write_trylock+0x135/0x1c0
[  193.049996][ T7085]  ? ext4_es_lookup_extent+0x5fd/0x9f0
[  193.055505][ T7085]  ext4_map_blocks+0x97f/0x1a50
[  193.059860][ T4235] Bluetooth: hci0: command 0x040f tx timeout
[  193.060416][ T7085]  ? ext4_issue_zeroout+0x250/0x250
[  193.072412][ T7085]  ext4_getblk+0x176/0x670
[  193.076869][ T7085]  ? ext4_get_block_unwritten+0x30/0x30
[  193.082610][ T7085]  ? __brelse+0x55/0x90
[  193.086893][ T7085]  ext4_bread+0x26/0x180
[  193.091190][ T7085]  ext4_append+0x2bb/0x560
[  193.095815][ T7085]  ? ext4_init_new_dir+0x910/0x910
[  193.100957][ T7085]  ? ext4_has_group_desc_csum+0x1f0/0x1f0
[  193.106714][ T7085]  ext4_init_new_dir+0x2a7/0x910
[  193.111699][ T7085]  ext4_mkdir+0x4c3/0xc90
[  193.116109][ T7085]  ? ext4_symlink+0xcd0/0xcd0
[  193.120851][ T7085]  ? inode_permission+0xef/0x480
[  193.125871][ T7085]  ? bpf_lsm_inode_mkdir+0x5/0x10
[  193.130959][ T7085]  ? security_inode_mkdir+0xb3/0x100
[  193.136324][ T7085]  vfs_mkdir+0x386/0x570
[  193.140629][ T7085]  do_mkdirat+0x1dd/0x5c0
[  193.145000][ T7085]  ? vfs_mkdir+0x570/0x570
[  193.149456][ T7085]  __x64_sys_mkdirat+0x85/0x90
[  193.154257][ T7085]  do_syscall_64+0x4c/0xa0
[  193.158713][ T7085]  ? clear_bhb_loop+0x30/0x80
[  193.163513][ T7085]  ? clear_bhb_loop+0x30/0x80
[  193.168316][ T7085]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  193.174392][ T7085] RIP: 0033:0x7fa360327e59
[  193.178843][ T7085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  193.198579][ T7085] RSP: 002b:00007fa35e580028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  193.207239][ T7085] RAX: ffffffffffffffda RBX: 00007fa3605affa0 RCX: 00007fa360327e59
[  193.215351][ T7085] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c
[  193.223357][ T7085] RBP: 00007fa3603bde6f R08: 0000000000000000 R09: 0000000000000000
[  193.231465][ T7085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  193.239469][ T7085] R13: 00007fa3605b0038 R14: 00007fa3605affa0 R15: 00007ffda36734c8
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  193.247567][ T7085]  </TASK>
[  193.328840][ T7105] EXT4-fs (loop5): inline encryption not supported
[  193.390182][ T7114] loop0: detected capacity change from 0 to 256
[  193.418106][ T7105] EXT4-fs: failed to create workqueue
[  193.436010][ T7105] EXT4-fs (loop5): mount failed
[  194.489933][ T4301] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.563628][ T4301] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.630346][ T4301] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.641497][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  194.654294][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  194.660690][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  194.710471][ T4301] device netdevsim0 left promiscuous mode
[  194.716927][ T4301] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.524276][ T4301] device hsr_slave_0 left promiscuous mode
[  195.531626][ T4301] device hsr_slave_1 left promiscuous mode
[  195.539225][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.546840][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.556895][ T4301] device bridge_slave_1 left promiscuous mode
[  195.565360][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.573882][ T4301] device bridge_slave_0 left promiscuous mode
[  195.580226][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.590073][ T4301] device dummy0 left promiscuous mode
[  195.601162][ T4301] device hsr_slave_0 left promiscuous mode
[  195.608693][ T4301] device hsr_slave_1 left promiscuous mode
[  195.614993][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  195.624212][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.633327][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  195.643086][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.651904][ T4301] device bridge_slave_1 left promiscuous mode
[  195.661451][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.673201][ T4301] device bridge_slave_0 left promiscuous mode
[  195.682160][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.694489][ T4301] device bond0 left promiscuous mode
[  195.701866][ T4301] device bond_slave_0 left promiscuous mode
[  195.707854][ T4301] device bond_slave_1 left promiscuous mode
[  195.715356][ T4301] device veth1_macvtap left promiscuous mode
[  195.724214][ T4301] device veth0_macvtap left promiscuous mode
[  195.732256][ T4301] device veth1_vlan left promiscuous mode
[  195.739710][ T4301] device veth0_vlan left promiscuous mode
[  195.869049][ T4301] team0 (unregistering): Port device team_slave_1 removed
[  195.880522][ T4301] team0 (unregistering): Port device team_slave_0 removed
[  195.891775][ T4301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  195.906891][ T4301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  195.958201][ T4301] bond0 (unregistering): Released all slaves
[  196.023834][ T4301] bond2 (unregistering): (slave geneve2): Releasing active interface
[  196.034830][ T4301] bond2 (unregistering): Released all slaves
[  196.044576][ T4301] bond1 (unregistering): Released all slaves
[  196.106821][ T4301] team0 (unregistering): Port device team_slave_1 removed
[  196.119746][ T4301] team0 (unregistering): Port device team_slave_0 removed
[  196.135453][ T4301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  196.148646][ T4301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  196.199860][ T4301] bond0 (unregistering): Released all slaves
[  197.300895][ T4301] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  197.312007][ T4301] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.374782][ T4301] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  197.385379][ T4301] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.434942][ T4301] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  197.449635][ T4301] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.505035][ T4301] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  197.516057][ T4301] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.605675][ T4301] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.655653][ T4301] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.705264][ T4301] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.754982][ T4301] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.847658][ T4301] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.887971][ T4301] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.935672][ T4301] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.995771][ T4301] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.123649][ T4301] tipc: Disabling bearer <udp:s>
[  198.128985][ T4301] tipc: Left network mode
[  198.135509][ T4301] tipc: Disabling bearer <udp:s>
[  198.140774][ T4301] tipc: Left network mode
[  199.178123][ T4301] device hsr_slave_0 left promiscuous mode
[  199.187272][ T4301] device hsr_slave_1 left promiscuous mode
[  199.193616][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.201551][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.210080][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.217812][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.227924][ T4301] device bridge_slave_1 left promiscuous mode
[  199.234455][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.242902][ T4301] device bridge_slave_0 left promiscuous mode
[  199.251282][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.262790][ T4301] device hsr_slave_0 left promiscuous mode
[  199.272382][ T4301] device hsr_slave_1 left promiscuous mode
[  199.279184][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.286989][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.296802][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.304613][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.312785][ T4301] device bridge_slave_1 left promiscuous mode
[  199.319491][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.328521][ T4301] device bridge_slave_0 left promiscuous mode
[  199.336730][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.349487][ T4301] device hsr_slave_0 left promiscuous mode
[  199.356073][ T4301] device hsr_slave_1 left promiscuous mode
[  199.362407][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.370427][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.382549][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.390817][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.398817][ T4301] device bridge_slave_1 left promiscuous mode
[  199.406799][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.415248][ T4301] device bridge_slave_0 left promiscuous mode
[  199.421413][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.436486][ T4301] device veth1_macvtap left promiscuous mode
[  199.442652][ T4301] device veth0_macvtap left promiscuous mode
[  199.450827][ T4301] device veth1_vlan left promiscuous mode
[  199.457194][ T4301] device veth0_vlan left promiscuous mode
[  199.463902][ T4301] device veth1_macvtap left promiscuous mode
[  199.472473][ T4301] device veth0_macvtap left promiscuous mode
[  199.478762][ T4301] device veth1_vlan left promiscuous mode
[  199.486679][ T4301] device veth0_vlan left promiscuous mode
[  199.493360][ T4301] device veth1_macvtap left promiscuous mode
[  199.502763][ T4301] device veth0_macvtap left promiscuous mode
[  199.511234][ T4301] device veth1_vlan left promiscuous mode
[  199.518045][ T4301] device veth0_vlan left promiscuous mode
[  199.708306][ T4301] bond1 (unregistering): (slave geneve2): Releasing active interface
[  199.720007][ T4301] bond1 (unregistering): Released all slaves
[  199.776814][ T4301] team0 (unregistering): Port device team_slave_1 removed
[  199.790727][ T4301] team0 (unregistering): Port device team_slave_0 removed
[  199.801399][ T4301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  199.814548][ T4301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  199.866403][ T4301] bond0 (unregistering): Released all slaves
[  199.961349][ T4301] team0 (unregistering): Port device team_slave_1 removed
[  199.972323][ T4301] team0 (unregistering): Port device team_slave_0 removed
[  199.983759][ T4301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  199.998575][ T4301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  200.048798][ T4301] bond0 (unregistering): Released all slaves
[  200.150445][ T4301] team0 (unregistering): Port device team_slave_1 removed
[  200.162145][ T4301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.180110][ T4301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  200.236025][ T4301] bond0 (unregistering): Released all slaves