last executing test programs:

14m11.880886935s ago: executing program 32 (id=99):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000)

12m10.833903362s ago: executing program 33 (id=494):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000140)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@dioread_nolock}, {@bsdgroups}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r1, 0x19, 0x8000000000005, 0x80000001, 0xffffffffffff8001})

11m3.773184658s ago: executing program 34 (id=698):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f0000002300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f00000000c0)='./file0\x00')
rename(&(0x7f0000001300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280)='./file1\x00')

9m23.76314073s ago: executing program 35 (id=958):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r1)

6m28.349612412s ago: executing program 36 (id=1692):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x800000, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1000}, [@RTA_IIF={0x8, 0x3, r2}, @RTA_DST={0x8, 0x1, @multicast1}, @RTA_SRC={0x8, 0x2, @local}]}, 0x34}}, 0xea5bc50b6199d77e)

5m45.929316706s ago: executing program 37 (id=1855):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@RTM_DELMDB={0x17, 0x55, 0x701}, 0x18}, 0x1, 0x0, 0x0, 0x48010}, 0x0)

5m41.491015857s ago: executing program 8 (id=1880):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x2}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x2, &(0x7f0000000200)="63e2ed8e46dc370adf33c9f7b986", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5m40.848861452s ago: executing program 8 (id=1884):
r0 = socket(0xa, 0x3, 0x8)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x23, 0x1, 0x2}})

5m40.183960941s ago: executing program 8 (id=1886):
r0 = socket(0x11, 0x800000003, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0)

5m39.635200953s ago: executing program 8 (id=1889):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
rmdir(&(0x7f0000000100)='./control\x00')

5m39.035872863s ago: executing program 8 (id=1893):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x0, 0x0, 0xff, 0x3}, 0x20)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00')
preadv2(r1, &(0x7f0000000380)=[{&(0x7f0000000300)=""/103, 0x67}, {&(0x7f0000001600)=""/239, 0xef}], 0x2, 0x5, 0x101, 0x1)

5m37.888032065s ago: executing program 8 (id=1899):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="757466383d312c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d77696e39352c000f3556feecb6412e00c80bdee16891f8bf67c9f201996782a86d4bab33b4f23383380e4ccafc9da9def41b05c1dfb2cfa24e43aedf5536d3bce06ddda97c586bc37fab5366b1ab6fee95cc224e56e681e82dd4dbbde3785fdd0fc4e7df753a0e2658aa5e88e1d38366c7908a7b2b678ee4b4bfc7aafa2101c157745926241af5ac30189eced78c1611b972d03bfef046f4adcada230ef0ac02ede79fb7d92a8354670c01cb80361c1fde2cef3204a182323c318e10ef11cb24c435d589b17a396377800f"], 0x1, 0x21b, &(0x7f0000000300)="$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")
syz_emit_ethernet(0x1e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180)

5m35.604963879s ago: executing program 38 (id=1899):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="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"], 0x1, 0x21b, &(0x7f0000000300)="$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")
syz_emit_ethernet(0x1e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180)

5m6.252812795s ago: executing program 5 (id=1987):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x0)

5m5.686077492s ago: executing program 5 (id=1990):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000140)="24000000010006", 0x7)

5m5.173475444s ago: executing program 5 (id=1993):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00')
read$FUSE(r0, &(0x7f0000001080)={0x2020}, 0x2020)
socket$inet6(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0)

5m4.400293588s ago: executing program 5 (id=1998):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nodioread_nolock}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000dc0)="$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")
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
pivot_root(&(0x7f0000000340)='.\x00', &(0x7f0000000180)='./file0/../file0/../file0\x00')

5m3.351986034s ago: executing program 5 (id=2005):
shutdown(0xffffffffffffffff, 0x1)
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c0311040000000c2402080001030000fffe000924060506020100000924030001030005490c240206"], 0x0)
memfd_secret(0x80000)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)

4m59.076211077s ago: executing program 5 (id=2027):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x6})
fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x0, 0x1, 0x4, 0x7fff800000002})
fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1, 0x1, 0xd, 0x7})

4m56.438101807s ago: executing program 39 (id=2027):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x6})
fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x0, 0x1, 0x4, 0x7fff800000002})
fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1, 0x1, 0xd, 0x7})

4m16.642650734s ago: executing program 0 (id=2221):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x800, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000041000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r1, @ANYBLOB="080004"], 0x4c}}, 0x0)

4m16.188878107s ago: executing program 0 (id=2224):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000740)='vxcan1\x00', 0x10)
connect$inet(r0, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10)

4m14.888689696s ago: executing program 0 (id=2234):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c36919790"], 0x0, 0x0, 0x0, 0x0}, 0x0)

4m11.133594397s ago: executing program 0 (id=2248):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0, @ANYBLOB="d9e2f81c20b5ab1f360c1068f219d7d16d4bfe86eebd827261ed2f1a31f74649a3567a6a0e87aa6e2a454b4b2903cdaa902ed3309c198137ed7175ad705c4a7b74ee9198f6c27ebda5c55ec63283c02ef96064a6f86f2943b6e6ab39a470dcf8d595020e1e6f36b279b34a014a08d72d90c365f7ded1fd84a93a001eea1c827778a1eae724b9120583b1d01022055a799750f46d9ea96b6d92fc394bc0323f2bab7932efd5e115612b3db68bcfae28458fb913cf093fcaa678f2810370e71c5285234b8db8e3ca8bd5ad8eac924a61", @ANYRESHEX, @ANYRES8=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0], 0x1, 0x1f6, &(0x7f0000000680)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
listxattr(&(0x7f0000000180)='./file1\x00', 0x0, 0x0)

4m10.315933331s ago: executing program 0 (id=2253):
r0 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
syz_emit_ethernet(0x5e, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0)

4m9.720009428s ago: executing program 0 (id=2256):
r0 = syz_io_uring_setup(0x3b, &(0x7f0000000040)={0x0, 0x2, 0x10100, 0x40000000, 0x2b5}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_MADVISE={0x19, 0x8, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0xd, 0x1, {0x0, r3}})
io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0)

4m7.791798972s ago: executing program 40 (id=2256):
r0 = syz_io_uring_setup(0x3b, &(0x7f0000000040)={0x0, 0x2, 0x10100, 0x40000000, 0x2b5}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_MADVISE={0x19, 0x8, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0xd, 0x1, {0x0, r3}})
io_uring_enter(r0, 0xd81, 0x0, 0x0, 0x0, 0x0)

1m52.13085715s ago: executing program 6 (id=2922):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
bind$can_j1939(r0, &(0x7f0000004dc0)={0x1d, r1, 0x3, {0x2, 0x0, 0x7}, 0xff}, 0x18)

1m51.547790818s ago: executing program 6 (id=2924):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2})
fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5})
fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x2})

1m50.862939171s ago: executing program 6 (id=2927):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x38}}, 0x0)

1m50.329624338s ago: executing program 6 (id=2931):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0)

1m49.118432026s ago: executing program 6 (id=2938):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0xfffffffffffffd4f}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x4048015)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})

1m47.954839387s ago: executing program 6 (id=2944):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}, 0xfffffffc}, 0x1c)

1m46.043122507s ago: executing program 41 (id=2944):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}, 0xfffffffc}, 0x1c)

1m5.684979297s ago: executing program 9 (id=3140):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00))
recvfrom(r0, 0x0, 0x0, 0x2001, 0x0, 0x0)

1m5.164983202s ago: executing program 9 (id=3144):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c000c80180003"], 0x3c}}, 0x0)

1m4.452959476s ago: executing program 9 (id=3148):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@local}, @mark={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0)

1m3.559581006s ago: executing program 9 (id=3152):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRESOCT=0x0, @ANYBLOB="d9e2f81c20b5ab1f360c1068f219d7d16d4bfe86eebd827261ed2f1a31f74649a3567a6a0e87aa6e2a454b4b2903cdaa902ed3309c198137ed7175ad705c4a7b74ee9198f6c27ebda5c55ec63283c02ef96064a6f86f2943b6e6ab39a470dcf8d595020e1e6f36b279b34a014a08d72d90c365f7ded1fd84a93a001eea1c827778a1eae724b9120583b1d01022055a799750f46d9ea96b6d92fc394bc0323f2bab7932efd5e115612b3db68bcfae28458fb913cf093fcaa678f2810370e71c5285234b8db8e3ca8bd5ad8eac924a61", @ANYRESHEX, @ANYRES8=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0], 0x1, 0x1f6, &(0x7f0000000680)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)

1m2.891542777s ago: executing program 9 (id=3157):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]})

1m2.063133923s ago: executing program 9 (id=3163):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r1)
keyctl$clear(0x7, 0x0)

59.94546773s ago: executing program 42 (id=3163):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r1)
keyctl$clear(0x7, 0x0)

24.268283787s ago: executing program 4 (id=3358):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
recvfrom(r0, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0)

23.5958179s ago: executing program 4 (id=3362):
syz_mount_image$romfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x18d, &(0x7f0000000500)="$eJzs2jFP4mAYB/D/9Y7AcfcJbiKhAzdAS3vHXeJuYuLkBzA20GJDa01rYmBq/AIah/oRXBxcdfMjMJs4uKmLq4OpaSkgLQmRKAz+fwN9wvO+z8NL3r7TW3Udu254VeC3f7xxJ7iOXWqo/5pG3dAwsAagFAX9MDypIWNrlO+Hfi0zoHyZPCvtYP3CMC1dydYgIiIiIiIiIiIiIiIiIiIiIvokyvdJUNwOnFPDtPT6q6zX7XU0y9Jdb/iNiOSODozAWTFMUVcn6lWeADG+v2MGqwdRPXkiL0aVCmHsEel+0p69K3ndXtW0tbbe1ncURW3If2T5ryLFtaR0RfEo+U1AIfr4klqfeD6+T3QtZ+8ToTh4fPtlBof7cfVcev0C3PEf8YbAn2sWgyUG8IFF9bo5m9Xr9gGYniokG1R3vRyQH+3Vr4Mx/zfj1AevQgAwLfUcvn+vcOY7+H2huyV9fqCVV8tX0flRazpWK3N+dnudH8BoEcPZ8zQXkrkd7WfUInOiES3JSwAAAP//XBwmMQ==")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x0)
getdents64(r0, 0x0, 0x0)

22.888283001s ago: executing program 4 (id=3369):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000000c0))

22.002752232s ago: executing program 4 (id=3373):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
mount$bind(&(0x7f0000000800)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x29c5006, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)

21.332427064s ago: executing program 4 (id=3380):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80000000, 0xfefffffd})
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x10000008})

20.527614257s ago: executing program 4 (id=3386):
syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x98, &(0x7f00000004c0)=ANY=[], 0xff, 0xa4, &(0x7f00000000c0)="$eJzs0b+pAkEQB+C5e/C4A9EC7OFq0CKswBKMBEEsyFYswdTIwNTkZHFFuGDBQFH4Ptg/P4ZdBuZw3U9jHNFvI/q/eOiT1XoXJf/FKr+gzmeThj655/M8YhYRVaqn7bJZHvMaPF80xd9Hb+sbAAB4XTXIdXTdM53afGk/2RMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAN7kFAAD//z7jFwY=")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

18.304609894s ago: executing program 43 (id=3386):
syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x98, &(0x7f00000004c0)=ANY=[], 0xff, 0xa4, &(0x7f00000000c0)="$eJzs0b+pAkEQB+C5e/C4A9EC7OFq0CKswBKMBEEsyFYswdTIwNTkZHFFuGDBQFH4Ptg/P4ZdBuZw3U9jHNFvI/q/eOiT1XoXJf/FKr+gzmeThj655/M8YhYRVaqn7bJZHvMaPF80xd9Hb+sbAAB4XTXIdXTdM53afGk/2RMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAN7kFAAD//z7jFwY=")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

8.573702223s ago: executing program 3 (id=3443):
r0 = io_uring_setup(0x37ae, &(0x7f00000003c0)={0x0, 0x800000, 0x0, 0x2, 0x22a})
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000280)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x2}, 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000780)={0x0, 0x0, 0x2}, 0x1)

8.031418459s ago: executing program 3 (id=3447):
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000900)={[{@noblock_validity}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@resuid}, {@dioread_lock}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)
fallocate(r0, 0x8, 0x4000, 0x4000)

6.850064013s ago: executing program 3 (id=3451):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x400}, 0x1c)
close(r0)

6.140141705s ago: executing program 3 (id=3454):
r0 = socket(0xa, 0x3, 0xff)
syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fec00000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4638, 0x4)
recvmmsg(r0, &(0x7f0000005880)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x100, 0x0)

5.608440129s ago: executing program 1 (id=3456):
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
munmap(&(0x7f000023f000/0x3000)=nil, 0x3000)

5.499785482s ago: executing program 3 (id=3457):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f00000003c0)='./file1\x00', 0x10, &(0x7f0000000040)=ANY=[], 0xff, 0x5a82, &(0x7f0000001080)="$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")
mknod$loop(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6001, 0x0)

5.25795185s ago: executing program 2 (id=3458):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='./file2\x00', 0x8c80, &(0x7f0000000100)={[{@fmask={'fmask', 0x3d, 0x1}}, {@umask={'umask', 0x3d, 0x80000002}}, {@errors_remount}, {@keep_last_dots}, {@allow_utime={'allow_utime', 0x3d, 0x801}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@dmask={'dmask', 0x3d, 0x1}}]}, 0x3, 0x1510, &(0x7f0000003640)="$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")
truncate(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x8cffffff)

4.914874019s ago: executing program 1 (id=3459):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x3, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x80}}, 0x14}, 0x1, 0x0, 0x0, 0x20004801}, 0x4)

4.568535756s ago: executing program 7 (id=3460):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="10000180040004"], 0x28}}, 0x0)

4.208362893s ago: executing program 1 (id=3461):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2b, 0x203, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xc19000000000}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x44040)

4.112578922s ago: executing program 2 (id=3462):
setresgid(0xee00, 0xee01, 0x0)
setgroups(0x0, 0x0)
setuid(0xee00)
shmget$private(0x0, 0x4000, 0x808, &(0x7f0000007000/0x4000)=nil)

3.711667309s ago: executing program 7 (id=3463):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

3.521647583s ago: executing program 2 (id=3464):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="72c91cba962b7a7389ad7a8961d1b79af89e0eb12240cdb0", 0x18}, {&(0x7f0000000180)="9937d665081bf122fe56a6bf300ec7b8e1ef7aaa720113172792ca0379449d9f4db61c895f1eedbd", 0x28}], 0x2, 0x0, 0x0, 0xc081}}], 0x1, 0x20040050)

3.328554054s ago: executing program 3 (id=3465):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x1000002, &(0x7f0000000280)={[{@quota}, {@errors_remount}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@discard_size={'discard', 0x3d, 0xfff}}, {@grpquota}, {@errors_continue}, {}]}, 0x1, 0x60b9, &(0x7f0000006340)="$eJzs3UuPHFfZB/Cn+jaXvEmsLKK8FkKTxFxCiK/BGALEWcCCDQvkLbI1mUQWDiDbICey8ESzYcGHACGxRIglKz5AFmzZ8QGwZCOBskqhmjlnXNPpdo8zma6eOb+fNK56+lRNn/K/qy9TVX0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIgf/uDH56qIuPqrdMOJiP+LfkQvYqWp1yJiZe1EXn4QES/EdnM8HxHDpYhm/e1/no14PSI+eibiwcO7683N5/fZj+//+R9/+MlTP/r7n4Zn/vuX2/03pi13585v//PXewfbZgAAAChNXdd1lT7mn0yf73tddwoAmIv8+l8n+Xb1wtWbC9YftVqtVh/Buq2e7F67iIjN9jrNewaH4wHgiNmMj7vuAh2Sf9EGEfFU150AFlrVdQc4FA8e3l2vUr5V+/Vgbac9nwuyJ//Navf6jmnTWcbPMZnX42sr+vHclP6szKkPiyTn3xvP/+pO+ygtd9j5z8u0/Ec7lz4VJ+ffH89/zPHJvzcx/1Ll/AdPlH9f/gAAAAAAsMDy3/9PdHz8d+ngm7Ivjzv+uzanPgAAAAAAAADA5+2g4//tMv4fAAAALKzms3rjd888um3ad7E1t1+pIp4eWx4oTLpYZrXrfgAAAAAAAAAAAABASQY75/BeqSKGEfH06mpd181P23j9pA66/lFX+vZDybp+kgcAgB0fPTN2LX8VsRwRV9J3/Q1XV1frenlltV6tV5by+9nR0nK90vpcm6fNbUujfbwhHozq5pctt9Zrm/V5eVb7+O9r7mtU9/fRsfnoMHAAiIidV6MHXpGOmbp+Nrp+l8PRYP8/fuz/7EfXj1MAAADg8NV1XVfp67xPpmP+va47BQDMRX79Hz8uoFar1Wq1+vjVbfVk99pFRGy212neMxiOHwCOmM34uOsu0CH5F20QES903QlgoVVdd4BD8eDh3fUq5Vu1Xw/S+O75XJA9+W9W2+vl9SdNZxk/x2Rej6+t6MdzU/rz/Jz6sEhy/r3x/K/utI/Scoed/7xMy7/ZzhMd9KdrOf/+eP5jjk/+vYn5lyrnP3ii/PvyBwAAAACABZb//n9ioY7/jj7r5sz0uOO/a4d2rwAAAAAAAABwuB48vLuer3vNx/+/MGE5138eTzn/Sv5Fyvn3xvL/6thy/db8/bce5f/vh3fX/3j7X/+fp/vNfynPVOmRVaVHRJXuqRqk6UG27tO2hv1Rc0/DqtcfpHN+6uE7cT1uxEac3bNsL/1/PGo/t6e96elwu73u77Sf39M+2G3P61/Y0z5MZzrVK7n9dKzHz+NGvL3d3rQtzdj+5Rnt9Yz2nH/f/l+knP+g9dPkv5raq7Fp4/6HvU/t9+3ppPu5fP2Lvzl7+Jsz01b0d7etrdm+lzroz/b/yVOj+OWtjZun71y7ffvmuUiTPbeejzT5nOX8h+ln9/n/5Z32/Lzf3l/vfzh64vwXxVYMpub/cmu+2d5X5ty3LuT8R+kn5/92ap+8/x/l/Kfv/6920B8AAAAAAAAAAAAAAAB4nLquty8RvRwRF9P1P11dmwkAzNfl9JUbdZJvn1fdn/P9qdVHvK4WrD9zrT+pF6s/avVRrNvqyd5sFxHxt/Y6FyPi15N+GQCwyD6JiH923Qk6I/+C5e/7a6anuu4MMFe33v/gp9du3Ni4eavrngAAAAAAAAAAn1Ue/3OtNf7zqbqu740tt2f817di7aDjfw7yzO4Ao1MGqu4/+TY9zlZv1O+1hht/MaaN/z3cnXvc+N+DGfc3nNE+mtG+NKN9eUb7xAs9WnL+L7bGOz8VESfHhl8vYfzX8THvS5Dzf6n1eG7y/8rYcu38698f5fx7e/I/c/u9X5y59f4Hr11/79q7G+9u/OzCuXNnL1y8eOnSpTPvXL+xcXbn3w57fLhy/nnsa+eBliXnnzOXf1ly/l9KtfzLkvP/cqrlX5acf36/J/+y5PzzZx/5lyXn/0qq5V+WnP/XUi3/suT8X021/MuS8/96quVflpz/a6mWf1ly/qdTLf+y5PzPpHqf+a8cdr+Yj5x/PsJl/y9Lzj+f2SD/suT8z6da/mXJ+V9ItfzLkvN/PdXyL0vO/xupln9Zcv4XUy3/suT8v5lq+Zcl538p1fIvS87/W6mWf1ly/t9OtfzLkvN/I9XyL0vO/zupln9Zcv7fTbX8y5Lz/16q5V+WnP+bqZZ/WR59/78ZM2bM5Jmun5kAAAAAAAAAAAAAgHHzOJ24620EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4HztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwt69xsh11vcDP3v12rkZCPk7+RtYO8YYZ5NdX+ILrYsJ14Zbya2kl9iud+0s+BavXZI0kh0FSiSMiirahhdtAUVt3lRYVV7QKqC8QK0qVSLtC/oGUaHyIqoCCkiV2ipkqznzPM/OzJ6d2bUn9sw5n48U/7wzZ+acOXPm7H7X+c4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA02vD+mS8OZFlW+y//Y22WXVv7++rxtfll77naWwgAAABcrl/mf756Q7pg/zJu1LDMP779+8/Pz8/PZ58e+pORr87PpyvGs2xkVZbl10UXf/zgQOMywVPZ2MBgw9eDHVY/1OH64Q7Xj3S4frTD9as6XD/W4fpFO2CR1fXfx+R3tin/69r6Ls1uzEby6zYV3OqpgVWDg/F3ObmB/DbzI0ey2exYNpNNNS1fX3YgX/6FDbV1fSSL6xpsWNf62hHy8ycOx20YCPt4U9O6Fu4z+un7svFf/PyJw3915pWbi2bH3dB0f/Xt3LKxtp2fD5fUt3UgW5X2SdzOwYbtXF/wnAw1bedAfrva31u389VlbufQwmZeUa3P+Vg2mP/9pXw/DTf+Wi/tp/Xhsv++Ncuy8wub3brMonVlg9mapksGF56fsfoRWbuP2qH05mx4RcfphmUcp7U5van5OG19TcTnf0O43fAS29D4NP30ydGG5/21+Us5TqPao17qtdJ6DHb7tdIrx2A8Ll7KH/TThcfgpvD4n9i89DFYeOwUHIPpcTccgxs7HYODo0P5NqcnYSC/zcIxuK1p+aF8TQP5fHlz+2Nw8szxU5Nzjz1+++zxQ0dnjs6c2LFt29SOXbv27NkzeWT22MxU/c9L3Nu9b002mF4DG8O+i6+Bd7Us23iozn9jdNH591Jfh2NtXodrW5bt9utwuPXBDVyZF+TiY7r+2rivttPHLgxmS7zG8udn6+W/DtPjbngdDje8Dgu/pxS8DoeX8TqsLXNq6/J+Zhlu+K9oG5b+XnB5x+DahmOw9eeR1mOw2z+P9MoxOBaOix9uXfp7wfqwvU9PrPTnkaFFx2B6uOHcU7sk/bw/ticfRcflLbUrrhnNzs7NnL7j0UNnzpzeloVxRbyl4VhpPV7XNDymbNHxOrji43X/7NufvqXg8rVhX43dXvtjbMnnqrbMzjvaP1f5d7fi/dl06fYsjC670vuz6Lt5bX+OZtnXvvfkPd954mvvX3J/1vLm5ycv/2fxlEsbzr8jS5x/Y+5/vb6+dFdPDY0M11+/Q2nvjDSdj5ufquH83DWQr/vVyeWdj0fCf1f6fHxjm/PxupZlu30+Hml9cPF8PNDptx2Xp/X5HAvHybGp9ufj2jLrtq/0mBxuez6+NcyBsP/fHZJCykUNx85Sx21a1/DwSHhcw3ENzcfpjqblR0I2q63rue2XdpxuubV+X0Pp0S24UsfpeMuy3T5O0+++ljpOBzr99u3StD6fY+G4uHFH++O0tsyLOy//3Lk6/rXh3Dna6RgcGRqtbfNIOgjz8302vzoeg3dkh7OT2bFsOr92ND+eBvJ1Tdy5vGNwNPx3pc+V69ocg1talu32MZi+jy117A0ML37wXdD6fI6F4+KZO9sfg7VlPrC7uz+7bgmXpGUafnZt/f3aUr/zuqVlN71Rx8pw2M7v7W7/u9naMsf2rDRntt9Pt4VLrinYT62v36VeU9PZldlP68J2vrJn6f1U257aMl/du8zjaX+WZeceuSv/fW/495W/PfuD55v+3aXo33TOPXLXz6478g8r2X4A+t/r9bGm/r2u4V+mlvPv/wAAAEBfiLl/MMxE/gcAAIDSiLk//l/hifwPAAAApRFz/3CYSUXy/7oPvDL7+rksNfPng3h92g1315eLHdep8PX4/ILa5Xc9O/Nff39ueesezLLstbv/oHD5dXfH7aobD9t58YPNly/y/O3LWvfB+8+l9Tb2178e7j8+nuUeBkUV3Kksy1644cv5esYfvJDPF+8+mM97zj/9VG2ZV/fWv463f/kt9eX/PJR/9x851HT7l8N++EmYUx8t3h/xdt+68O71ux9YWF+83cDG6/OH/cxD9fuN75Pzlafqy8f9vNT2f+dLz32rtvyj7yze/nODxdv/XLjfZ8P8n7fVl298Dmpfx9t9IWx/XF+83R3f/G7h9l/8Yn35Ux+qL3cwzLj+LeHrTR96ZbZxfz06cKjpcWUfri8X1z/1gz/Kr4/3F++/dfvHDlxo2h+tx8eL/1q/n8mW5ePlcT3R37Wsv3Y/jcdnXP9zf3iwaT93Wv/Fe15+W+1+W9d/W8typx7Zmq9/4f6a37HpL77w5cL1xe3Z/zenmh7P/k+F13FY/zMPheMxXP+/F+v31/ruCgc/1Xz+ict/fe25pscTfeQX9fVffO/RfK4aW73mmmuvu/78O2r7LsteWlW/v07rP/qXJ5u2/xs31fdHvD529FvXv5S4/tOfmzhxcu7s7HTaq0/ckL93zsfq2xO394Zwbm39+sDJMw/PnB6fGp/KsvHyvoXeJftmmD+rj/Ptl55fdAbden94Pm/5sxfWbP6XL8XL/+2++uUXPlr/vvWusNxXwuVrw/O3svUv9syGm/LX98CLYQvnF79f8OVYv+k/9yxrwfD4W38uiMf7qbc+nO+H2nX59434ur7M7f/RdP1+vh3263x4Z+aNNy2sr3H5+N4IF+6tv94ve/+F01x8Xv86PN8f/0n9/uN2xcf7o/BzzHfXNZ/v4vHx7XODrfefv4vH+XA+yc7Xr49Lxf194dWbCjcvvg9Jdv7m/Os/Tvdz84oe5lLmHpubPDZ74uyjk2dm5s5Mzj32+IHjJ8+eOHMgfy/PA5/pdPuF89Oa/Pw0PbNrZ5afrU7Wxxvsam//qfsPT++e2jw9c+TQ2SNn7j81c/ro4bm5wzPTc5sPHTky87lOt5+d3rdt+94du7dPHJ2d3rdn794deydmT5ysbUZ9ozrYNfXZiROnD+Q3mdu3c++2O+/cOTVx/OT0zL7dU1MTZzvdPv/eNFG79e9PnJ45dujM7PGZibnZx2f2bdu7a9f2ju8GePzUkbnxydNnT0yenZs5PVl/LONn8otr3/s63Z5ymvv3+s+zrQbqb8SXffK2Xen9WWuefXLJu6ov0vIGoq+E96L5pzed2rOcr2PuHwkzqUj+BwAAgCqIuX80zET+BwAAgNKIuX9VmIn8DwAAAKURc/9YmElF8n/p+v/rzi1r/fr/+v+N+0v/v2L9/3t7rf9fP1/o/3fH5fbv9f8D/X/9f/1//X/9f7qg1/r/MfevzrJK5n8AAACogpj714SZyP8AAABQGjH3XxNmIv8DAABAacTcf22YSUXyv/6//r/+v/6//n/x+vX/+5P+f3v6/x3o/09m1er/n+/m9uv/6/+zWK/1/2Puvy7MpCL5HwAAAKog5v7rw0zkfwAAACiNmPtvCDOR/wEAAKA0Yu5fG2ZSkfyv/6//r/+v/6//X7x+/f/+pP/fnv5/B/r/Pv9f/1//n67qtf5/zP1vCjOpSP4HAACAKoi5/81hJvI/AAAA9J7hS7tZzP1vCTNZlP8vcQUAAADAVRdz/41ZSxG8Iv/+r/+v/6//r/+v/1+8/uX3/4cy/f/eof/fnv5/B/r/+v/6//r/dFWv9f/z3J+NZW8NM6lI/gcAAIAqiLn/pjAT+R8AAABKI+b+/xdmIv8DAABAacTcvy7MpCL5X/9f/1//X/9f/794/T7/vz/p/7en/9+B/r/+v/6//j9d1Wv9/5j7bw4zqUj+BwAAgCqIuf+WMBP5HwAAAEoj5v7/H2Yi/wMAAEBpxNy/PsykIvlf/7/H+/+xOar/r/+v/6//r/+/LPr/7en/d6D/r/+v/6//T1f1Wv8/5v63hZlUJP8DAABAFcTc//YwE/kfAAAASiPm/neEmcj/AAAAUBox94+HmVQk/+v/93j/3+f/6//r/+v/6/+viP5/e/r/Hej/6//r/+v/01W91v+PuX9DmElF8j8AAABUQcz9G8NM5H8AAAAojZj7bw0zkf8BAACgNGLu3xRmUpH8r/+v/6//r/+v/1+8fv3//qT/357+fwf6//r/+v/6/3RVr/X/Y+5/Z5hJRfI/AAAAVEHM/ZvDTOR/AAAAKI2Y+98VZiL/AwAAQGnE3L8lzKQi+V//X/9f/1//X/+/eP36//1J/789/f8O9P/1//X/9f/pql7r/8fc/+4wk4rkfwAAAKiCmPu3hpnI/wAAAFAaMfffFmYi/wMAAEBpxNw/EWZSkfyv/6//r/+v/6//X7x+/f/+pP/fnv5/B/r/+v/6//r/dFWv9f9j7r89zKQi+R8AAACqIOb+O8JM5H8AAAAojZj7J8NM5H8AAAAojZj7p8JMKpL/9f/1//X/9f9X1P9/x8L96v/X6f/3Fv3/9vT/O9D/1/+/6v3/Ef1/SqXX+v8x928LM6lI/gcAAIAqiLl/e5iJ/A8AAAClEXP/jjAT+R8AAABKI+b+nWEmFcn/+v/6//r/+v8+/794/fr//Un/v73u9//jQ9T/1//X//f5//r/LNZr/f+Y++8MM6lI/gcAAIAqiLl/V5iJ/A8AAAClEXP/7jAT+R8AAABKI+b+PWEmFcn/+v/6//r/+v/6/8Xr1//vT/r/7fn8/w70//X/9f/1/+mqXuv/x9y/N8ykIvkfAAAAqiDm/veEmcj/AAAAUBox9/9KmIn8DwAAAKURc/+vhplUJP/r/+v/6//r/+v/F69f/78/6f+3p//fgf6//r/+v/4/XdVr/f+Y+/eFmVQk/wMAAEAVxNz/a2Em8j8AAACURsz97w0zkf8BAACgNGLu3x9mUpH8r/+v/6//r/+v/1+8fv3//qT/357+fwf6//r/+v/6/3RVr/X/Y+5/X5hJRfI/AAAAVEHM/XeFmcj/AAAAUBox978/zET+BwAAgNKIuf8DYSYVyf/6//r/+v/6//r/xevX/+9P+v/t6f93oP+v/6//r/9PV/Va/z/m/g+GmVQk/wMAAEAVxNz/oTAT+R8AAABKI+b+D4eZyP8AAABQGjH3fyTMpCL5X/9f/1//X/9f/794/fr//Un/vz39/w70/0vW/x+/Tv9f/583SlECWuzS+v/XvrbkCi+z/x9z/6+HmVQk/wMAAEAVxNx/d5iJ/A8AAAClEXP/R8NM5H8AAAAojZj7PxZmUpH8r/+v/6//r/+v/1+8fv3//qT/316f9f9/eX24XP+/Tv+/t7e/J/v/P16q/z+/qvX2+v+8ES6t/1+oK/3/mPs/HmZSkfwPAAAAVRBz/yfCTOR/AAAAKI2Y+z8ZZiL/AwAAQGnE3P8bYSYVyf/6/7XtWGgv6//r/+cX6P/r/+v/9y39//b6rP/v8/9b6P/39vb3ZP/f5/9zlfVa/z/m/k+FmVQk/wMAAEAVxNx/T5iJ/A8AAAClEXP/vWEm8j8AAACURsz994WZVCT/6//7/H/9f/1//f/i9ev/9yf9//b0/zvQ/9f/77X+/3/o/9Pfeq3/H3P//WEmFcn/AAAAUAUx9z8QZiL/AwAAQGnE3P+bYSbyPwAAAJRGzP2fDjOpSP7X/++X/v+4/r/+v/5/y+PR/9f/L6L/357+fwf6//r/vdb/9/n/9Lle6//H3P9gmMny8//YspcEAAAAroqY+38rzKQi//4PAAAAVRBz/2+Hmcj/AAAAUBox9/9OmElF8r/+f7/0/33+f6b/r//f8nj0//X/i1y5/n888+j/6//r/0f6//r/+v+06rX+f8z9vxtmUpH8DwAAAFUQc/9DYSbyPwAAAPSFov8nu1XM/QfCTOR/AAAAKI2Y+w+GmVQk/+v/6//r//do//9PN/7zD7//iYPb9P/1//X/V+SKfv5/7cXv8//1//X/E/1//X/9f1r1Wv8/5v5DYSYVyf8AAABQBTH3/16YifwPAAAApRFz/+EwE/kfAAAASiPm/ukwk4rkf/1//X/9/x7t//fx5//H/aH/36xr/f940tX/L3RF+/8PLPTE9f9X2v8fLbxU/1//v5+3X/9f/5/Feq3/H3P/TJhJRfI/AAAAVEHI/YNH6nPhCvkfAAAASiPm/qNhJvI/AAAAlEbM/Q+HmVQk/+v/6//r/+v/+/z/4vX3bP/f5/+3pf/fXu/0/4vp/+v/9/P26//r/7NYr/X/Y+6fDTOpSP4HAACAKoi5/zNhJvI/AAAAlEbM/Z8NM5H/AQAAoDRi7j8WZlKR/K//r/+v/6//r/9fvH79//6k/9+e/n8H+v/6//r/+v90Va/1/2PuPx5mUpH8DwAAAFUQc/+JMBP5HwAAAEoj5v6TYSbyPwAAAJRGzP2nwkz+j737aN6rLv84fuf/D2MyPAAXbtj7EFjoWh+ACzcudMZxoaPYG8FesfeCvWMBRWzYG9hQ7GLvigU76sRxcl1X8kvO79xJvJOc871er82lwXiiw4Af4T3fJvtf/6//H7b/v5v+f7/v6//1/yPT/8/T/2+h/9f/6//1/+zU0vr/3P0Pjlua7H8AAADoIHf/Q+IW+x8AAACGkbv/srjF/gcAAIBh5O5/aNzSZP+f1P8f2PTs/zPj1f+P1P97/3/f7+v/9f8jO7/9/xX//SOf/l//r/8P+n/9v/6fky2t/8/d/7C4pcn+BwAAgA5y9z88brH/AQAAYBi5+x8Rt9j/AAAAMIzc/Y+MW5rsf+//e/9f/6//1/9Pf1//v07e/5/Xqf+/7JaLH3j7dXe5/ky+r//X/+v/9f/s1tL6/9z9j4pbmux/AAAA6CB3/6PjFvsfAAAAhpG7/zFxi/0PAAAAw8jd/9i4pcn+1//r//X/+n/9//T39f/rpP+f16n/P5vv6//1//p//T+7tbT+P3f/4+KWJvsfAAAAOsjd//i4xf4HAACAYeTuvzxusf8BAABgGLn7j8QtTfa//v/c9///1v/r/+Pq//X/+v9zT/8/T/+/hf5f/6//1/+zU0vr/3P3XxG3NNn/AAAA0EHu/ifELfY/AAAADCN3/xPjFvsfAAAAhpG7/0lxS5P9r//3/r/+X/+v/5/+vv5/nfT/885//z/1Z8j96f9X3/9fpP/X/+v/OdEZ9v93zPxheyf9f+7+J8ctTfY/AAAAdJC7/ylxi/0PAAAAw8jd/9S4xf4HAACAYeTuf1rc0mT/6//1//p//b/+f/r7+v910v/PW8z7/wcOTv6w/n/1/b/3//X/+n/2WNr7/7n7nx63NNn/AAAA0EHu/mfELfY/AAAADCN3/zPjFvsfAAAAhpG7/1lxS5P9r//X/+v/9f/6/+nvz/X/15/w69P/L4v+f95i+v996P/1/2v+9ev/9f+camn9f+7+Z8ctTfY/AAAAdJC7/8q4xf4HAACAYeTuf07cYv8DAADAMHL3PzduabL/p/v/479d/3969P97f/36/+nfP3bV/+e/o/5/tv+/u/f/e9L/z9P/b6H/1//r//fr/w9v+/n6f6Ysrf/P3f+8uKXJ/gcAAIAOcvc/P26x/wEAAGAYuftfELfY/wAAADCM3P0vjFua7H/v/+v/9f/r6/+9/3/MhXz/f3Pe+/+D+v/TpP+fp//fQv+v/9f/e/+fnVpa/5+7/0VxS5P9DwAAAB3k7n9x3GL/AwAAwDqc+PcOnPw3lIbc/S+JW+x/AAAAGEbu/pfGLU32v/5f/6//1//37v8PraT/9/7/6dL/z9P/b3Fh+/8Dg/b/Bwfr/6/a7+cvof+/XP/Pwuzp/284/uMXqv/P3f+yuKXJ/gcAAIAOcve/PG6x/wEAAGAYuftfEbfY/wAAADCM3P2vjFua7P9z3v8f3v/b+n/9v/5f/3/h+/+1vP+v/z9d+v95+v8tvP/v/X/v/+v/2ak9/f8JLlT/n7v/VXFLk/0PAAAAHeTuf3XcYv8DAADAMHL3XxW32P8AAAAwjNz9r4lbmux/7//r//X/+n/9//T39f/rpP+fp//fQv+v/9f/6//ZqaX1/7n7Xxu3NNn/AAAA0EHu/tfFLfY/AAAADCN3/+vjFvsfAAAAhpG7/w1xS5P9r/8/t/1//rj+X/+/0f/r//X/50Xb/v/A1J+JTrVP/3/T/Y/cc++P6P/1//p//b/+nx1YRP9/9Pj/uszd/8a4pcn+BwAAgA5y978pbrH/AQAAYBi5+98ct9j/AAAAMIzc/W+JWwbZ/4e2/Hb9v/f/9f/6f/3/9Pf1/+vUtv8/Td7/30L/r//X/+v/2alF9P8n/PPc/W+NWwbZ/wAAAMCmdv/b4hb7HwAAAIaRu//tcYv9DwAAAMPI3f+OuKXJ/tf/6//1//p//f/09/X/66T/n6f/30L/r//X/+v/2aml9f+5+6+OW5rsfwAAAOggd/874xb7HwAAAIaRu/9dcYv9DwAAAMPI3f/uuKXJ/tf/6//1//p//f/09/X/66T/n6f/32w218z8Aqb6/6N30v/r//X/+n/O0tL6/9z974lbmux/AAAA6CB3/zVxi/0PAAAAw8jdf23cYv8DAADAMHL3vzduabL/9f/6f/2//l//P/19/f866f/n6f+38P6//l//r/9np5bW/+fuf1/c0mT/AwAAQAe5+6+LW+x/AAAAGEbu/vfHLfY/AAAADCN3//VxS5P9r//X/+v/9f/6/+nv6//X6dz1/xv9v/5f/7+F/l//r//nZEvr/3P3fyBuabL/AQAAoIPc/R+MW+x/AAAAGEbu/g/FLfY/AAAADCN3/4fjlib7X/+v/9f/6//1/9Pf1/+vk/f/5+n/t9D/6//1//p/dmpp/X/u/o/ELU32PwAAAHSQu/+GuMX+BwAAgGHk7v9o3GL/AwAAwDBy938sbmmy//X/+v+9/f9mo//X/+v/jzkP/f+hjf5/5/T/8/T/W+j/x+z//28zUP9/eN+fr/9niZbW/+fu/3jc0mT/AwAAQAe5+z8Rt9j/AAAAMIzc/Z+MW+x/AAAAGEbu/k/FLU32v/5f/+/9f/2//n/6+97/Xyf9/zz9/xb6/zH7f+//6/+5YJbW/+fu/3Tc0mT/AwAAQAe5+z8Tt9j/AAAAMIzc/Z+NW+x/AAAAGEbu/s/FLU32v/5f/6//1//r/6e/r/9fJ/3/PP3/Fvp//b/+X//PTi2t/8/d//m4pcn+BwAAgA5y998Yt9j/AAAAMIzc/TfFLfY/AAAADCN3/xfilib7X/+v/9f/r7P/P6T/1//r/yctpf+/9NJ73Kz/1//r//X/+n/9f3dL6/9z938xbmmy/wEAAKCD3P1filvsfwAAABhG7v4vxy32PwAAAAwjd/9X4pYm+//U/v+izbFC9Zip/j8aNf3/CfT/e3/9+v/p3z+8/6//1/+fe0vp/73/f3a/fv2//n/Nv/4z6v8vOfXn6/8Z0dL6/9z9N8ctTfY/AAAAdJC7/6txi/0PAAAAw8jd/7W4xf4HAACAYeTuvyVuabL/vf+v/9f/6//1/9Pf1/+vk/5/nv5/C/2//t/7/w+67//r/9mdpfX/ufu/Hrc02f8AAADQQe7+b8Qt9j8AAAAMI3f/N+MW+x8AAACGkbv/W3FLk/2v/9f/6//1//r/6e/r/9dJ/z9P/7+F/l//r//3/j87tbT+P3f/t+OWJvsfAAAAOsjd/524xf4HAACAYeTu/27cYv8DAADAMHL3fy9uabL/d9//X6L/D/r/pfT/99H/n/R9/b/+f2T6//wz+jT9/xb6f/2//l//z04trf/P3X9r3NJk/wMAAEAHufu/H7fY/wAAADCM3P0/iFvsfwAAABhG7v4fxi1N9r/3/3v1/wc2Hft/7//r//X/nej/5+n/t9D/6//1//p/dmpp/X/u/h/FLU32PwAAAKzVve76gFtP91+bu//HcYv9DwAAAMPI3f+TuMX+BwAAgGHk7v9p3NJk/+v/e/X/Pd//1//r//X/nej/5+n/t9D/6//1//p/dmpp/X/u/p/FLScMv4Nn/J8SAAAAWJLc/T+PW5r89X8AAADoIHf/L+KWU/b/0dP8u9oBAACApcnd/8u4pclf/9f/L7z/34zf/9+20f/r/4/R/+v/d0H/P+9/7P+PHtD/6/9n6P/1//p/Tra0/j93/6/ilib7HwAAAAa15/9RyN3/67jF/gcAAIBh5O7/Tdxi/wMAAMAwcvf/Nm5psv/1/wvv/8/q/f/D9Y/W0P97//8c9v9XHpr8vv5f/z8y/f887/9vof/X/+v/9f/s1NL6/9z9t8UtTfY/AAAAdJC7/3dxi/0PAAAAw8jd//u4xf4HAACAYeTu/0Pc0mT/6/9H7P/X9f6//t/7/2ff/9/54iM33vt+116t/+e489n/5+8L+n/9v/7/GP2//l//z8mW1v/n7v9j3NJk/wMAAEAHuftvj1vsfwAAABhG7v4/xS32PwAAAAwjd/+f45Ym+1//r/9fSv+f/11fgP7/yPr6/2yKu/f/3v/X/5/K+//z9P9b6P/1//p//T87tbT+P3f/X+KWJvsfAAAAOsjd/9e4xf4HAACAYeTu/1vcYv8DAADAMHL3/z1uabL/9f/6/6X0/8n7/8d/nvf/j9H/6//PhP5/nv5/C/2//l//r/9np5bW/+fu/0fc0mT/AwAAQAe5+++IW+x/AAAAGEbu/n/GLfY/AAAADCN3/7/ilib7X/+v/9f/6//1/9Pf1/+vk/5/nv5/C/2//l//r/9np5bW/+fu/08AAAD//6cRdCE=")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

3.265342219s ago: executing program 1 (id=3466):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18b1, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x3, "881d76e4"}]}}, 0x0}, 0x0)
mkdir(0x0, 0x0)

2.744094294s ago: executing program 2 (id=3467):
syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x50f, &(0x7f0000000140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x0, 0x0, 0x8000c62)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)

2.113036069s ago: executing program 7 (id=3468):
r0 = socket$unix(0x1, 0x1, 0x0)
pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x3c)
close_range(r0, 0xffffffffffffffff, 0x0)

1.508236711s ago: executing program 7 (id=3469):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180900000020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x18)
r1 = io_uring_setup(0x2c4c, &(0x7f00000000c0)={0x0, 0x2, 0x1000, 0x1004003, 0x4})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x18, &(0x7f0000000000), 0x1)

1.256358971s ago: executing program 2 (id=3470):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f00000002c0)=0x700)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)

817.746542ms ago: executing program 7 (id=3471):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0xa0}], 0x1, 0x40800)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000018000106"], 0x24}, 0x1, 0x0, 0x0, 0x4009}, 0x0)
ioctl$SIOCSIFMTU(r0, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x7})

789.870488ms ago: executing program 1 (id=3472):
r0 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00')
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f00000000c0)={@broadcast, @empty=0xe0000320, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)
pread64(r0, &(0x7f0000000100)=""/253, 0xfd, 0xadc)

504.64528ms ago: executing program 2 (id=3473):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xc3ff, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848010000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4058880)

152.781684ms ago: executing program 7 (id=3474):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'rti800\x00', [0x401, 0x10, 0x401, 0xa, 0x14000000, 0xfffffffc, 0x9, 0x2, 0xffd, 0xa, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]})
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000})
syz_usb_connect(0x2, 0x40, 0x0, 0x0)

0s ago: executing program 1 (id=3475):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x154, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xd, 0xa}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xced8, 0x10000, 0xf4ee, 0xc, 0x9, 0x2, 0x8}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x3}]}}]}, 0x154}, 0x1, 0x7a00, 0x0, 0x4010041}, 0x0)

kernel console output (not intermixed with test programs):

  </TASK>
[  921.046746][T13362] ---[ end trace 0000000000000000 ]---
[  921.175522][T11638] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  921.497582][T13372] loop9: detected capacity change from 0 to 256
[  921.687559][T13372] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011f41, chksum : 0x2f9e4978, utbl_chksum : 0xe619d30d)
[  922.082746][ T3364] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  922.311990][ T3364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  922.324177][ T3364] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  922.334589][ T3364] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  922.344153][ T3364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  922.423679][ T3364] usb 5-1: config 0 descriptor??
[  922.855823][T13388] bridge0: entered promiscuous mode
[  922.868327][T13388] macvtap1: entered promiscuous mode
[  922.888514][T13388] bridge0: port 3(macvtap1) entered blocking state
[  922.896195][T13388] bridge0: port 3(macvtap1) entered disabled state
[  922.904193][T13388] macvtap1: entered allmulticast mode
[  922.909955][T13388] bridge0: entered allmulticast mode
[  922.920213][T13388] macvtap1: left allmulticast mode
[  922.925954][T13388] bridge0: left allmulticast mode
[  922.952832][T13389] loop9: detected capacity change from 0 to 512
[  922.962080][ T3364] steelseries 0003:1038:12B6.0015: unknown main item tag 0x0
[  922.980894][ T3364] steelseries 0003:1038:12B6.0015: unknown main item tag 0x0
[  922.992630][ T3364] steelseries 0003:1038:12B6.0015: unknown main item tag 0x0
[  923.000351][ T3364] steelseries 0003:1038:12B6.0015: unknown main item tag 0x0
[  923.013567][ T3364] steelseries 0003:1038:12B6.0015: unknown main item tag 0x0
[  923.021712][ T3364] steelseries 0003:1038:12B6.0015: unknown main item tag 0x0
[  923.029594][ T3364] steelseries 0003:1038:12B6.0015: unknown main item tag 0x0
[  923.052723][T13388] bridge0: left promiscuous mode
[  923.107195][T13389] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  923.120725][T13389] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  923.211173][ T3364] steelseries 0003:1038:12B6.0015: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.4-1/input0
[  923.563359][T11721] usb 5-1: USB disconnect, device number 11
[  923.610293][T11215] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  923.878772][T13401] loop1: detected capacity change from 0 to 2048
[  924.032040][T13401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  924.061432][T13400] loop6: detected capacity change from 0 to 4096
[  924.137453][T13400] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512).
[  924.353145][T13400] ntfs3(loop6): ino=1a, mi_enum_attr
[  924.358841][T13400] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  924.544395][T11638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  924.584544][T13400] ntfs3(loop6): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  924.612074][    C1] vkms_vblank_simulate: vblank timer overrun
[  924.742667][T11227] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  924.962069][T11227] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7
[  925.044447][T11227] usb 10-1: string descriptor 0 read error: -22
[  925.051497][T11227] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  925.061426][T11227] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  925.182003][T11227] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor
[  925.191963][T11227] usb 10-1: found format II with max.bitrate = 65528, frame size=65535
[  925.201783][T11227] usb 10-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  925.484098][T11227] usb 10-1: USB disconnect, device number 9
[  925.548524][T13421] sch_tbf: burst 0 is lower than device macvlan1 mtu (1514) !
[  927.004570][T13445] netlink: set zone limit has 8 unknown bytes
[  927.303115][T13449] loop6: detected capacity change from 0 to 164
[  928.387918][T13462] loop9: detected capacity change from 0 to 256
[  928.896620][T13467] tun0: tun_chr_ioctl cmd 2147767520
[  929.194727][T13462] FAT-fs (loop9): Directory bread(block 64) failed
[  929.201737][T13462] FAT-fs (loop9): Directory bread(block 65) failed
[  929.208995][T13462] FAT-fs (loop9): Directory bread(block 66) failed
[  929.223013][T13462] FAT-fs (loop9): Directory bread(block 67) failed
[  929.229951][T13462] FAT-fs (loop9): Directory bread(block 68) failed
[  929.239541][T13462] FAT-fs (loop9): Directory bread(block 69) failed
[  929.246656][T13462] FAT-fs (loop9): Directory bread(block 70) failed
[  929.253672][T13462] FAT-fs (loop9): Directory bread(block 71) failed
[  929.260569][T13462] FAT-fs (loop9): Directory bread(block 72) failed
[  929.267598][T13462] FAT-fs (loop9): Directory bread(block 73) failed
[  929.965474][T13482] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  930.621895][T13495] loop6: detected capacity change from 0 to 64
[  930.808756][T13496] 8021q: adding VLAN 0 to HW filter on device bond1
[  930.824595][T13496] bond0: (slave bond1): Enslaving as an active interface with an up link
[  931.193259][T13504] loop1: detected capacity change from 0 to 512
[  931.313351][T12742] hfs: node 4:3 still has 1 user(s)!
[  931.325142][T13504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  931.338685][T13504] ext4 filesystem being mounted at /120/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  931.502864][T13511] Failed to get privilege flags for destination (handle=0x2:0x7)
[  931.562597][T13504] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.2543: path /120/file1: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[  931.612119][T13504] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 4: comm syz.1.2543: path /120/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=11, rec_len=10454, size=2048 fake=1
[  931.658474][T13504] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 12: comm syz.1.2543: path /120/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  931.701049][T13504] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz.1.2543: path /120/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[  931.911794][T13504] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 14: comm syz.1.2543: path /120/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  932.057872][T13520] netlink: 45 bytes leftover after parsing attributes in process `syz.9.2550'.
[  932.292028][T11638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  933.197555][T13541] loop9: detected capacity change from 0 to 128
[  933.250010][T13543] loop1: detected capacity change from 0 to 16
[  933.285038][T13543] erofs (device loop1): mounted with root inode @ nid 36.
[  933.332950][T13541] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  933.381540][T13543] syz.1.2559: attempt to access beyond end of device
[  933.381540][T13543] loop1: rw=0, sector=48, nr_sectors = 16 limit=16
[  933.395603][T13543] erofs (device loop1): read error -5 @ 43 of nid 36
[  933.420615][T13541] ext4 filesystem being mounted at /179/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  933.585027][T13541] EXT4-fs warning (device loop9): verify_group_input:137: Cannot add at group 25 (only 1 groups)
[  933.939608][T11215] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  935.013788][T13577] bond_slave_0: entered promiscuous mode
[  935.019759][T13577] bond_slave_1: entered promiscuous mode
[  935.085259][T13576] bond_slave_0: left promiscuous mode
[  935.090953][T13576] bond_slave_1: left promiscuous mode
[  935.620551][T13587] loop9: detected capacity change from 0 to 128
[  935.675121][T13587] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  935.742648][T13587] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  935.790006][T13589] could not allocate digest TFM handle _!5����(��i����HP,�om�x��*�71U"~����2.�>�~e���>/y��
[  935.985115][T13595] loop4: detected capacity change from 0 to 128
[  936.057169][T13595] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  936.161982][T13595] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  936.236109][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  936.236191][   T30] audit: type=1800 audit(1754712766.617:192): pid=13595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2583" name="file1" dev="loop4" ino=94 res=0 errno=0
[  936.513680][T13602] loop9: detected capacity change from 0 to 512
[  936.572791][T13602] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  936.653915][   T30] audit: type=1326 audit(1754712767.027:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13600 comm="syz.2.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83bd18ebe9 code=0x7ffc0000
[  936.774334][   T30] audit: type=1326 audit(1754712767.157:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13600 comm="syz.2.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f83bd18ebe9 code=0x7ffc0000
[  936.869872][T13602] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  936.883283][T13602] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  937.837671][T13622] loop1: detected capacity change from 0 to 128
[  937.945206][T13622] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  938.660627][T13613] loop6: detected capacity change from 0 to 65536
[  938.833922][T13613] XFS (loop6): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  938.894623][T11215] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  939.068659][T13613] XFS (loop6): Ending clean mount
[  939.086961][T13613] XFS (loop6): Quotacheck needed: Please wait.
[  939.180105][T13613] XFS (loop6): Quotacheck: Done.
[  939.327909][T12742] XFS (loop6): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  941.483923][T13664] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  941.674425][T13669] loop9: detected capacity change from 0 to 64
[  941.992695][T13669] hfs: small file entry
[  942.241088][T13674] loop4: detected capacity change from 0 to 256
[  942.378948][T13674] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  942.649266][   T30] audit: type=1800 audit(1754712773.027:195): pid=13674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2612" name=F26BC524B970A5BC277FE4FB38 dev="loop4" ino=1048751 res=0 errno=0
[  942.656625][T13680] loop6: detected capacity change from 0 to 64
[  942.672351][    C1] vkms_vblank_simulate: vblank timer overrun
[  943.566072][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  943.894248][T13689] loop6: detected capacity change from 0 to 4096
[  943.995865][T13697] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  944.075874][   T30] audit: type=1800 audit(1754712774.457:196): pid=13689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2618" name="file1" dev="loop6" ino=15 res=0 errno=0
[  945.260937][T13715] syz.9.2628 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  945.384751][T13721] loop4: detected capacity change from 0 to 512
[  945.461920][T13721] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  946.191362][T13733] loop4: detected capacity change from 0 to 512
[  946.277769][T13733] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  946.346518][T13736] netlink: 'syz.1.2639': attribute type 4 has an invalid length.
[  946.359393][T13733] FAT-fs (loop4): FAT read failed (blocknr 1568)
[  946.581363][T13739] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2640'.
[  947.039398][T13739] bridge0: port 2(bridge_slave_1) entered disabled state
[  947.050599][T13739] bridge_slave_1: left allmulticast mode
[  947.056848][T13739] bridge_slave_1: left promiscuous mode
[  947.064010][T13739] bridge0: port 2(bridge_slave_1) entered disabled state
[  947.254837][T13744] loop1: detected capacity change from 0 to 2048
[  947.408607][T13752] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  947.771174][T13755] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2645'.
[  949.342738][T11227] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  949.552646][T11227] usb 2-1: Using ep0 maxpacket: 32
[  949.584060][T11227] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  949.600741][T11227] usb 2-1: config 0 has no interfaces?
[  949.608421][T11227] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  949.618398][T11227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  949.712646][T11227] usb 2-1: config 0 descriptor??
[  949.839762][T13786] loop4: detected capacity change from 0 to 512
[  949.883424][T13786] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  949.950364][T13786] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002]
[  950.052929][T11227] usb 2-1: USB disconnect, device number 5
[  950.090033][T13786] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.2659: corrupted in-inode xattr: e_value size too large
[  950.153460][T13786] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2659: couldn't read orphan inode 15 (err -117)
[  950.235771][T13786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  950.646050][T12150] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  950.799559][T13797] loop6: detected capacity change from 0 to 256
[  950.863038][T13797] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  950.874205][T13797] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  951.045537][T13797] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  951.751775][T13813] loop6: detected capacity change from 0 to 128
[  951.783855][ T5863] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  951.863110][T13813] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  951.940472][T13813] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  951.961613][T13819] loop4: detected capacity change from 0 to 8
[  951.980714][ T5863] usb 2-1: Using ep0 maxpacket: 16
[  952.001294][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  952.013081][ T5863] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  952.023457][ T5863] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice=1a.00
[  952.032942][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  952.176992][ T5863] usb 2-1: config 0 descriptor??
[  952.679412][ T5863] lua 0003:1E7D:2C2E.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0
[  952.824068][T13825] Set syz0 is full, maxelem 0 reached
[  952.845326][T13816] loop9: detected capacity change from 0 to 4096
[  952.903043][ T5863] usb 2-1: USB disconnect, device number 6
[  952.945872][T13816] ntfs3(loop9): Different NTFS sector size (1024) and media sector size (512).
[  953.331435][T13832] syzkaller0: tun_chr_ioctl cmd 1074025672
[  953.338000][T13832] syzkaller0: ignored: set checksum disabled
[  955.722785][T13857] loop4: detected capacity change from 0 to 512
[  955.884125][T13857] EXT4-fs (loop4): orphan cleanup on readonly fs
[  955.909307][T13857] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  955.920978][T13857] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  955.930911][T13857] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2691: Failed to acquire dquot type 1
[  956.073002][T13857] EXT4-fs (loop4): 1 truncate cleaned up
[  956.081359][T13857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  956.240994][T13857] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended
[  956.318897][T13857] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 8
[  956.363001][T13864] loop9: detected capacity change from 0 to 256
[  956.746541][T12150] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  956.864512][ T5863] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  957.023261][ T5863] usb 7-1: Using ep0 maxpacket: 32
[  957.058149][ T5863] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[  957.071455][ T5863] usb 7-1: config 0 has no interface number 0
[  957.122342][ T5863] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  957.132319][ T5863] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  957.140664][ T5863] usb 7-1: Product: syz
[  957.145561][ T5863] usb 7-1: Manufacturer: syz
[  957.150368][ T5863] usb 7-1: SerialNumber: syz
[  957.235227][ T5863] usb 7-1: config 0 descriptor??
[  957.250759][ T5863] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  957.272915][ T3364] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  957.499293][ T3364] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  957.508199][ T3364] usb 2-1: config 0 has no interface number 0
[  957.584670][ T5863] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  957.602898][ T3364] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  957.612588][ T3364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  957.621002][ T3364] usb 2-1: Product: syz
[  957.626136][ T3364] usb 2-1: Manufacturer: syz
[  957.632048][ T3364] usb 2-1: SerialNumber: syz
[  957.652993][ T5863] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  957.694891][ T3364] usb 2-1: config 0 descriptor??
[  957.922499][ T3364] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  957.945298][ T3364] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  957.957576][ T3364] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  957.963970][T11227] usb 7-1: USB disconnect, device number 5
[  957.966365][    C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[  957.979511][ T3364] usb 2-1: media controller created
[  958.044010][T11227] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  958.124154][T11227] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  958.124284][ T3364] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  958.138313][T11227] quatech2 7-1:0.51: device disconnected
[  958.653200][ T3364] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  959.016626][ T3364] usb 2-1: USB disconnect, device number 7
[  960.293795][T13910] syzkaller1: tun_chr_ioctl cmd 1074025677
[  960.300445][T13910] syzkaller1: linktype set to 773
[  960.724306][   T30] audit: type=1326 audit(1754712791.097:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13916 comm="syz.4.2718" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbefd58ebe9 code=0x0
[  961.071991][T13923] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2720'.
[  961.247223][T13929] loop1: detected capacity change from 0 to 512
[  961.343654][T13929] EXT4-fs (loop1): orphan cleanup on readonly fs
[  961.350352][T13929] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  961.435937][T13929] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  961.497492][T13929] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.2723: attempt to clear invalid blocks 2 len 1
[  961.558038][T13929] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2723: invalid indirect mapped block 1819239214 (level 0)
[  961.604107][T13929] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.2723: invalid indirect mapped block 1819239214 (level 1)
[  961.629619][T13929] EXT4-fs (loop1): 1 truncate cleaned up
[  961.638945][T13929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  961.760969][T13929] EXT4-fs (loop1): shut down requested (1)
[  962.075367][T11638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  963.082529][T11227] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  963.342355][T11227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  963.353889][T11227] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00
[  963.363412][T11227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  963.451518][T11227] usb 2-1: config 0 descriptor??
[  963.679640][T13950] loop9: detected capacity change from 0 to 128
[  963.901143][T11227] elecom 0003:056E:00E6.0017: item fetching failed at offset 0/69
[  963.967729][T11227] elecom 0003:056E:00E6.0017: probe with driver elecom failed with error -22
[  964.084974][ T3364] usb 2-1: USB disconnect, device number 8
[  964.303405][T11227] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  964.476697][T13962] netlink: 340 bytes leftover after parsing attributes in process `syz.9.2736'.
[  964.509832][T11227] usb 7-1: Using ep0 maxpacket: 32
[  964.532001][T11227] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  964.550238][T11227] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  964.564040][T11227] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  964.575891][T11227] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  964.585415][T11227] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  964.688625][T11227] usb 7-1: config 0 descriptor??
[  964.696773][T13955] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  964.754657][T11227] hub 7-1:0.0: USB hub found
[  964.973421][T11227] hub 7-1:0.0: 2 ports detected
[  965.198173][T11227] hub 7-1:0.0: hub_hub_status failed (err = -71)
[  965.205088][T11227] hub 7-1:0.0: config failed, can't get hub status (err -71)
[  965.307647][T11227] usbhid 7-1:0.0: can't add hid device: -71
[  965.316251][T11227] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  965.418321][T11227] usb 7-1: USB disconnect, device number 6
[  965.626121][T13977] loop9: detected capacity change from 0 to 128
[  965.664256][T13977] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  966.295927][T13977] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  966.823381][   T30] audit: type=1800 audit(1754712797.197:198): pid=13977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2742" name="file1" dev="loop9" ino=104 res=0 errno=0
[  967.394172][T13994] syz.1.2751 uses obsolete (PF_INET,SOCK_PACKET)
[  967.429458][T13992] loop6: detected capacity change from 0 to 256
[  967.493798][T13992] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  967.505031][T13992] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  967.662067][T13992] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  968.389745][T14007] netlink: 'syz.4.2755': attribute type 4 has an invalid length.
[  968.718971][T14015] loop6: detected capacity change from 0 to 128
[  968.809365][T14015] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[  968.833997][T14015] System zones: 1-3, 19-19, 35-36
[  968.864943][T14015] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  968.894926][T14015] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  969.023606][T14015] EXT4-fs warning (device loop6): ext4_group_extend:1891: can't read last block, resize aborted
[  969.078554][T14021] netlink: 37 bytes leftover after parsing attributes in process `syz.1.2760'.
[  969.340645][T12742] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  969.611215][T14028] loop1: detected capacity change from 0 to 64
[  969.773191][T14032] ipvlan2: entered allmulticast mode
[  969.778738][T14032] syz_tun: entered allmulticast mode
[  969.825611][T14034] loop9: detected capacity change from 0 to 512
[  969.894330][T14034] EXT4-fs: Ignoring removed oldalloc option
[  969.995301][T14034] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  970.077060][T11638] hfs: node 4:3 still has 1 user(s)!
[  970.213194][T14034] EXT4-fs (loop9): 1 truncate cleaned up
[  970.221044][T14034] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  970.401643][T14041] loop1: detected capacity change from 0 to 256
[  970.436189][T14041] exfat: Deprecated parameter 'utf8'
[  970.473869][T14034] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  970.608165][T14041] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  970.906409][T14050] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2773'.
[  970.926605][T11215] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  972.197770][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  972.204824][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  972.663896][T14081] loop4: detected capacity change from 0 to 64
[  972.794423][T14081] syz.4.2788: attempt to access beyond end of device
[  972.794423][T14081] loop4: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[  973.928493][T14080] loop6: detected capacity change from 0 to 8192
[  974.030248][T14100] loop1: detected capacity change from 0 to 256
[  974.133251][T14101] loop9: detected capacity change from 0 to 512
[  974.181297][T14105] sch_tbf: burst 3298 is lower than device lo mtu (65550) !
[  974.435445][T14100] FAT-fs (loop1): Directory bread(block 64) failed
[  974.442531][T14100] FAT-fs (loop1): Directory bread(block 65) failed
[  974.449450][T14100] FAT-fs (loop1): Directory bread(block 66) failed
[  974.460330][T14100] FAT-fs (loop1): Directory bread(block 67) failed
[  974.467456][T14100] FAT-fs (loop1): Directory bread(block 68) failed
[  974.481274][T14100] FAT-fs (loop1): Directory bread(block 69) failed
[  974.490527][T14100] FAT-fs (loop1): Directory bread(block 70) failed
[  974.497383][T14100] FAT-fs (loop1): Directory bread(block 71) failed
[  974.504405][T14100] FAT-fs (loop1): Directory bread(block 72) failed
[  974.511131][T14100] FAT-fs (loop1): Directory bread(block 73) failed
[  976.017148][ T3364] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  976.264262][ T3364] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  976.274118][ T3364] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  976.282830][ T3364] usb 5-1: Product: syz
[  976.287266][ T3364] usb 5-1: Manufacturer: syz
[  976.292061][ T3364] usb 5-1: SerialNumber: syz
[  976.378676][ T3364] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  977.276699][T14133] loop6: detected capacity change from 0 to 32768
[  977.474575][ T5863] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  977.746241][T14136] loop1: detected capacity change from 0 to 32768
[  977.771222][T14136] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2816 (14136)
[  977.787719][T14133] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  977.788161][T14133]   allowing incompatible features above 0.0: (unknown version)
[  977.788554][T14133]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  977.837096][T14133] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  977.849035][T14133] bcachefs (loop6): recovering from clean shutdown, journal seq 10
[  977.863934][T14133] bcachefs (loop6): Version upgrade required:
[  977.863934][T14133] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  977.863934][T14133] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  977.863934][T14133]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  977.937221][    C1] vkms_vblank_simulate: vblank timer overrun
[  978.004040][T14136] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  978.014889][T14136] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  978.024728][T14136] BTRFS info (device loop1): using free-space-tree
[  978.065821][T14133] bcachefs (loop6): dropping and reconstructing all alloc info
[  978.078026][T14148] loop9: detected capacity change from 0 to 256
[  978.216515][T14148] exfat: Deprecated parameter 'namecase'
[  978.224783][T14148] exfat: Deprecated parameter 'utf8'
[  978.328840][T14133] bcachefs (loop6): accounting_read... done
[  978.382488][T14133] bcachefs (loop6): alloc_read... done
[  978.401982][T14133] bcachefs (loop6): snapshots_read... done
[  978.418157][T14133] bcachefs (loop6): check_allocations...
[  978.441384][T14136] BTRFS error (device loop1): balance: invalid convert metadata profile raid0
[  978.576505][T11638] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  978.630046][T14148] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d)
[  978.688838][T11227] usb 5-1: USB disconnect, device number 12
[  978.723019][    C1] vkms_vblank_simulate: vblank timer overrun
[  978.805953][T14133]  done
[  978.821006][T14133] bcachefs (loop6): going read-write
[  978.826913][T14133] bcachefs (loop6): insufficient writeable journal devices available: have 0, need 1
[  978.826913][T14133] rw journal devs:
[  978.923409][T14133] bcachefs (loop6): done starting filesystem
[  979.151768][    C1] hrtimer: interrupt took 75410 ns
[  979.230479][T12742] bcachefs (loop6): shutting down
[  979.236116][T12742] bcachefs (loop6): going read-only
[  979.241694][T12742] bcachefs (loop6): finished waiting for writes to stop
[  979.313931][ T5863] usb 5-1: Service connection timeout for: 257
[  979.320436][ T5863] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
[  979.335442][ T5863] ath9k_htc: Failed to initialize the device
[  979.342879][T12742] bcachefs (loop6): flushing journal and stopping allocators, journal seq 10
[  979.377892][T11227] usb 5-1: ath9k_htc: USB layer deinitialized
[  979.443035][T12742] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 10
[  979.513379][T12742] bcachefs (loop6): unclean shutdown complete, journal seq 10
[  979.557727][T12742] bcachefs (loop6): done going read-only, filesystem not clean
[  979.685335][T12742] bcachefs (loop6): shutdown complete
[  980.780540][T14180] loop1: detected capacity change from 0 to 2048
[  980.857723][T14180] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  980.947915][   T30] audit: type=1800 audit(1754712811.317:199): pid=14180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2817" name="file1" dev="loop1" ino=1367 res=0 errno=0
[  980.968946][    C1] vkms_vblank_simulate: vblank timer overrun
[  981.403723][T14188] loop9: detected capacity change from 0 to 1024
[  981.574200][T14192] netlink: 'syz.1.2828': attribute type 1 has an invalid length.
[  984.469205][T14216] loop1: detected capacity change from 0 to 256
[  985.106632][T14214] loop4: detected capacity change from 0 to 32768
[  985.119956][T14214] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2839 (14214)
[  985.143238][ T5871] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  985.156671][T14214] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  985.168290][T14214] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  985.178361][T14214] BTRFS info (device loop4): using free-space-tree
[  985.395141][T14214] BTRFS info (device loop4): rebuilding free space tree
[  985.404208][ T5871] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  985.413867][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  985.527142][ T5871] usb 3-1: config 0 descriptor??
[  985.595559][ T5871] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  985.671895][T12150] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  985.755667][T14238] loop1: detected capacity change from 0 to 256
[  985.796442][ T5871] gp8psk: usb in 128 operation failed.
[  985.855435][ T5871] gp8psk: usb in 137 operation failed.
[  985.861263][ T5871] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  985.909388][ T5871] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver)
[  985.918482][ T5871] usb 3-1: media controller created
[  986.036220][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  986.330864][ T5871] gp8psk_fe: Frontend attached
[  986.336219][ T5871] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  986.344781][ T5871] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  986.533291][ T5863] IPVS: starting estimator thread 0...
[  986.624011][T14246] IPVS: using max 240 ests per chain, 12000 per kthread
[  986.835965][ T5871] gp8psk: usb in 137 operation failed.
[  986.841640][ T5871] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected.
[  986.851492][ T5871] gp8psk: found Genpix USB device pID = 203 (hex)
[  986.929055][ T5871] usb 3-1: USB disconnect, device number 20
[  987.287968][T14253] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2850'.
[  987.318482][T14253] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2850'.
[  987.371378][T14254] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2850'.
[  987.715095][ T5871] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected.
[  988.234023][T14261] tap0: tun_chr_ioctl cmd 1074025677
[  988.240046][T14261] tap0: linktype set to 823
[  989.260547][T14266] loop9: detected capacity change from 0 to 32768
[  989.446983][T14266] bcachefs (loop9): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256
[  989.447136][T14266]   allowing incompatible features above 0.0: (unknown version)
[  989.447235][T14266]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  989.468424][    C1] vkms_vblank_simulate: vblank timer overrun
[  989.508685][T14266] bcachefs (loop9): Using encoding defined by superblock: utf8-12.1.0
[  989.517970][T14266] bcachefs (loop9): initializing new filesystem
[  989.542938][T14266] bcachefs (loop9): going read-write
[  989.614801][ T5104] Bluetooth: hci4: command 0x0406 tx timeout
[  989.670085][T14266] bcachefs (loop9): marking superblocks
[  989.726302][T14266] bcachefs (loop9): initializing freespace
[  989.761803][T14266] bcachefs (loop9): done initializing freespace
[  989.779734][T14285] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  989.783965][T14266] bcachefs (loop9): reading snapshots table
[  989.796876][T14266] bcachefs (loop9): reading snapshots done
[  989.796932][T14285] bridge0: port 1(bridge_slave_0) entered disabled state
[  989.986195][T14266] bcachefs (loop9): done starting filesystem
[  990.365254][T11720] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  990.520006][T11215] bcachefs (loop9): shutting down
[  990.525423][T11215] bcachefs (loop9): going read-only
[  990.530944][T11215] bcachefs (loop9): finished waiting for writes to stop
[  990.609117][T11720] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  990.619856][T11720] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  990.662541][T11215] bcachefs (loop9): flushing journal and stopping allocators, journal seq 3
[  990.694522][T11720] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  990.704264][T11720] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  990.712856][T11720] usb 7-1: SerialNumber: syz
[  990.990361][T11720] usb 7-1: 0:2 : does not exist
[  991.031361][T11215] bcachefs (loop9): flushing journal and stopping allocators complete, journal seq 3
[  991.074487][T11215] bcachefs (loop9): clean shutdown complete, journal seq 4
[  991.091835][T11720] usb 7-1: USB disconnect, device number 7
[  991.105270][T11215] bcachefs (loop9): marking filesystem clean
[  991.466737][T11215] bcachefs (loop9): shutdown complete
[  993.257540][T14328] loop6: detected capacity change from 0 to 1024
[  993.277580][T14328] EXT4-fs: inline encryption not supported
[  993.285478][T14328] EXT4-fs: Ignoring removed i_version option
[  993.414432][T14328] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  993.645408][T14328] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt.
[  993.680397][T14333] loop1: detected capacity change from 0 to 2048
[  994.088630][T12742] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  994.883186][T14351] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2890'.
[  995.236459][T14359] loop9: detected capacity change from 0 to 256
[  995.329381][T14359] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  995.330660][T14359] exFAT-fs (loop9): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  995.395978][T14359] exFAT-fs (loop9): valid_size(150994954) is greater than size(10)
[  996.516004][T14378] vivid-003: disconnect
[  996.521954][T14378] vivid-003: reconnect
[  996.833913][T14384] loop1: detected capacity change from 0 to 128
[  996.853793][T14384] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  996.958456][T14382] loop4: detected capacity change from 0 to 2048
[  997.136622][T14391] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  998.040088][T11720] hid-generic 0003:0004:0000.0018: unknown main item tag 0x0
[  998.048420][T11720] hid-generic 0003:0004:0000.0018: unknown main item tag 0x0
[  998.056392][T11720] hid-generic 0003:0004:0000.0018: unknown main item tag 0x0
[  998.137742][T11720] hid-generic 0003:0004:0000.0018: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  999.100089][T14410] loop1: detected capacity change from 0 to 32768
[  999.169126][T14410] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  999.290419][T14415] loop9: detected capacity change from 0 to 2048
[  999.331669][T11638] ocfs2: Unmounting device (7,1) on (node local)
[  999.332143][T14421] loop6: detected capacity change from 0 to 256
[  999.380653][T14415] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  999.466132][T14421] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  999.552552][T11720] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  999.723022][T11720] usb 3-1: Using ep0 maxpacket: 32
[  999.808242][T11720] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  999.818228][T11720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  999.827162][T11720] usb 3-1: Product: syz
[  999.831530][T11720] usb 3-1: Manufacturer: syz
[  999.839578][T11720] usb 3-1: SerialNumber: syz
[  999.917416][T11720] usb 3-1: config 0 descriptor??
[  999.947269][T11720] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1000.779432][T11720] gspca_stk1135: reg_w 0x5 err -71
[ 1000.786190][T11720] gspca_stk1135: serial bus timeout: status=0x00
[ 1000.805972][T11720] gspca_stk1135: Sensor write failed
[ 1000.811545][T11720] gspca_stk1135: serial bus timeout: status=0x00
[ 1000.824781][T11720] gspca_stk1135: Sensor write failed
[ 1000.830338][T11720] gspca_stk1135: serial bus timeout: status=0x00
[ 1000.837221][T11720] gspca_stk1135: Sensor read failed
[ 1000.842783][T11720] gspca_stk1135: serial bus timeout: status=0x00
[ 1000.849282][T11720] gspca_stk1135: Sensor read failed
[ 1000.854910][T11720] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1000.861753][T11720] gspca_stk1135: serial bus timeout: status=0x00
[ 1000.868488][T11720] gspca_stk1135: Sensor read failed
[ 1000.874060][T11720] gspca_stk1135: serial bus timeout: status=0x00
[ 1000.880546][T11720] gspca_stk1135: Sensor read failed
[ 1000.886582][T11720] gspca_stk1135: serial bus timeout: status=0x00
[ 1000.900280][T11720] gspca_stk1135: Sensor write failed
[ 1000.907768][T11720] gspca_stk1135: serial bus timeout: status=0x00
[ 1000.914902][T11720] gspca_stk1135: Sensor write failed
[ 1000.920713][T11720] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71
[ 1000.928184][T14431] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1000.936233][T14431] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1001.139089][T11720] usb 3-1: USB disconnect, device number 21
[ 1001.647868][T14443] netlink: 'syz.9.2930': attribute type 33 has an invalid length.
[ 1001.656870][T14443] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[ 1001.719326][T14445] loop6: detected capacity change from 0 to 512
[ 1001.783172][T14445] EXT4-fs (loop6): Test dummy encryption mode enabled
[ 1001.790191][T14445] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1001.963369][T14451] loop1: detected capacity change from 0 to 64
[ 1002.158381][T14445] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.2931: bad orphan inode 131083
[ 1002.205372][T14445] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1002.290107][T14450] loop4: detected capacity change from 0 to 4096
[ 1002.443375][T14455] loop9: detected capacity change from 0 to 64
[ 1003.744123][T14035] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1003.838479][ T8616] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1003.880606][T14467] loop1: detected capacity change from 0 to 128
[ 1004.031482][ T8616] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1004.033294][T11720] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[ 1004.103380][T14471] netlink: 45 bytes leftover after parsing attributes in process `syz.2.2945'.
[ 1004.209744][ T8616] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1004.275894][T11720] usb 10-1: Using ep0 maxpacket: 8
[ 1004.309963][T11720] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1004.320912][T11720] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1004.392667][ T8616] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1004.407988][T11720] usb 10-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[ 1004.418712][T11720] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1004.428003][T11720] usb 10-1: Product: syz
[ 1004.432786][T11720] usb 10-1: Manufacturer: syz
[ 1004.437689][T11720] usb 10-1: SerialNumber: syz
[ 1004.459393][T11720] usb 10-1: config 0 descriptor??
[ 1004.488974][T11720] snd_usb_toneport 10-1:0.0: Line 6 TonePort UX2 found
[ 1004.726425][ T8616] bridge_slave_1: left allmulticast mode
[ 1004.732889][ T8616] bridge_slave_1: left promiscuous mode
[ 1004.737674][T11720] snd_usb_toneport 10-1:0.0: cannot get proper max packet size
[ 1004.739734][ T8616] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1004.746717][T11720] snd_usb_toneport 10-1:0.0: Line 6 TonePort UX2 now disconnected
[ 1004.774153][T11720] snd_usb_toneport 10-1:0.0: probe with driver snd_usb_toneport failed with error -22
[ 1004.821134][ T8616] bridge_slave_0: left allmulticast mode
[ 1004.827710][ T8616] bridge_slave_0: left promiscuous mode
[ 1004.834622][ T8616] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1005.031328][T11720] usb 10-1: USB disconnect, device number 10
[ 1005.352456][ T8616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1005.376213][ T8616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1005.411203][ T8616] bond0 (unregistering): Released all slaves
[ 1006.127093][ T8616] hsr_slave_0: left promiscuous mode
[ 1006.152865][ T8616] hsr_slave_1: left promiscuous mode
[ 1006.161181][ T8616] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1006.169106][ T8616] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1006.299063][ T8616] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1006.306987][ T8616] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1006.449863][ T8616] veth1_macvtap: left promiscuous mode
[ 1006.456661][ T8616] veth0_macvtap: left promiscuous mode
[ 1006.463621][ T8616] veth1_vlan: left promiscuous mode
[ 1006.469250][ T8616] veth0_vlan: left promiscuous mode
[ 1006.825102][T14484] loop1: detected capacity change from 0 to 64
[ 1006.961012][   T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1007.019362][   T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1007.049419][   T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1007.160681][T11720] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[ 1007.266355][T14492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2954'.
[ 1007.280447][   T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1007.293292][   T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1007.337925][ T8616] team0 (unregistering): Port device team_slave_1 removed
[ 1007.387869][ T8616] team0 (unregistering): Port device team_slave_0 removed
[ 1007.785469][T11720] usb 5-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config
[ 1007.796186][T11720] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 1007.808988][T11720] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 24929, setting to 64
[ 1007.821296][T11720] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1007.851936][T11720] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1007.867727][T11720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1007.876213][T11720] usb 5-1: Product: syz
[ 1007.880595][T11720] usb 5-1: Manufacturer: syz
[ 1007.885608][T11720] usb 5-1: SerialNumber: syz
[ 1007.898544][T11720] usb 5-1: config 0 descriptor??
[ 1007.906829][T14486] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1008.031942][T14492] vlan2: entered allmulticast mode
[ 1008.308151][T11720] radio-si470x 5-1:0.0: DeviceID=0x6465 ChipID=0x7669
[ 1008.526239][T11720] radio-si470x 5-1:0.0: software version 100, hardware version 101
[ 1008.724201][T11720] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71
[ 1008.733903][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1008.741073][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1008.748606][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1008.760877][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1008.768720][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1008.784559][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1008.793426][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1008.802466][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1008.812632][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1008.819753][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1008.828073][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1008.835983][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1008.844521][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1008.851658][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1008.858831][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1008.869145][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1008.877291][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1008.894148][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1008.904092][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1008.913216][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1008.920665][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1008.928364][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1008.935546][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1008.942597][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1008.949640][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1008.956737][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1008.963867][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1008.970842][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1008.978197][T11720] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71
[ 1008.987168][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1009.002666][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1009.009720][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1009.017065][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1009.024206][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1009.031253][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1009.038505][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1009.045726][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1009.052922][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1009.060126][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1009.067355][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1009.074950][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1009.082085][    C1] radio-si470x 5-1:0.0: non-zero urb status (-71)
[ 1009.108754][T11720] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22
[ 1009.189740][T11720] usb 5-1: USB disconnect, device number 13
[ 1009.375362][   T50] Bluetooth: hci4: command tx timeout
[ 1009.399699][T14503] tmpfs: Unexpected value for 'quota'
[ 1009.418506][T14489] chnl_net:caif_netlink_parms(): no params data found
[ 1009.636140][T14510] loop9: detected capacity change from 0 to 128
[ 1009.744156][T14510] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[ 1009.820885][T14510] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1009.937005][T14513] loop1: detected capacity change from 0 to 1024
[ 1010.029869][T14516] loop4: detected capacity change from 0 to 1024
[ 1010.147139][T14516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1010.361981][T14525] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.2962: Abort forced by user
[ 1010.402989][ T8616] hfsplus: b-tree write err: -5, ino 4
[ 1010.412779][T14525] EXT4-fs (loop4): Remounting filesystem read-only
[ 1010.424107][T14525] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[ 1010.451558][T14516] overlayfs: failed to verify upper root origin
[ 1010.744252][T12150] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1010.809735][T14489] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1010.817591][T14489] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1010.832060][T14489] bridge_slave_0: entered allmulticast mode
[ 1010.841957][T14489] bridge_slave_0: entered promiscuous mode
[ 1010.878654][T14489] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1010.888536][T14489] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1010.896557][T14489] bridge_slave_1: entered allmulticast mode
[ 1010.906288][T14489] bridge_slave_1: entered promiscuous mode
[ 1011.190463][T14535] loop4: detected capacity change from 0 to 512
[ 1011.221394][T14489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1011.294177][T14535] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2969: casefold flag without casefold feature
[ 1011.325280][T14489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1011.352823][T14535] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2969: couldn't read orphan inode 15 (err -117)
[ 1011.390645][T14535] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1011.452681][   T50] Bluetooth: hci4: command tx timeout
[ 1011.506037][T14489] team0: Port device team_slave_0 added
[ 1011.532070][T14489] team0: Port device team_slave_1 added
[ 1011.546921][ T5871] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[ 1011.594605][T14535] fscrypt (loop4, inode 18): Direct key flag not allowed with different contents and filenames modes
[ 1011.730343][ T5871] usb 10-1: Using ep0 maxpacket: 8
[ 1011.761359][ T5871] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1011.773626][ T5871] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1011.783838][ T5871] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1011.797476][ T5871] usb 10-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00
[ 1011.807047][ T5871] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1011.836711][T14489] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1011.839141][T12150] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1011.844142][T14489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1011.844301][T14489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1011.858133][T14489] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1011.858224][T14489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1011.858374][T14489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1011.884531][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1011.975254][ T5871] usb 10-1: config 0 descriptor??
[ 1012.273804][T14489] hsr_slave_0: entered promiscuous mode
[ 1012.287059][T14489] hsr_slave_1: entered promiscuous mode
[ 1012.298558][T14489] debugfs: 'hsr0' already exists in 'hsr'
[ 1012.304723][T14489] Cannot create hsr debugfs directory
[ 1012.447332][ T5871] logitech 0003:046D:C293.0019: bogus close delimiter
[ 1012.455949][ T5871] logitech 0003:046D:C293.0019: item 0 1 2 10 parsing failed
[ 1012.521367][ T5871] logitech 0003:046D:C293.0019: parse failed
[ 1012.528650][ T5871] logitech 0003:046D:C293.0019: probe with driver logitech failed with error -22
[ 1012.587775][T14548] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2974'.
[ 1012.665388][ T5871] usb 10-1: USB disconnect, device number 11
[ 1013.231984][T14552] loop1: detected capacity change from 0 to 2048
[ 1013.312730][T11720] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 1013.426295][T14552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1013.481263][T14552] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1013.515013][T11720] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02
[ 1013.525503][T11720] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1013.534609][T11720] usb 5-1: Product: syz
[ 1013.538971][T11720] usb 5-1: Manufacturer: syz
[ 1013.544438][T11720] usb 5-1: SerialNumber: syz
[ 1013.553690][   T50] Bluetooth: hci4: command tx timeout
[ 1013.564151][T11720] usb 5-1: config 0 descriptor??
[ 1013.640178][T14551] EXT4-fs error (device loop1): ext4_free_inode:354: comm syz.1.2977: bit already cleared for inode 15
[ 1013.658249][   T30] audit: type=1800 audit(1754712843.987:200): pid=14552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2977" name="file1" dev="loop1" ino=15 res=0 errno=0
[ 1013.872346][T14489] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1013.937499][T14489] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1013.995101][T14489] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1014.043491][T11638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1014.056256][T11720] hso 5-1:0.0: Failed to find BULK IN ep
[ 1014.120619][T14489] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1014.259719][T11720] usb 5-1: USB disconnect, device number 14
[ 1014.539129][T14571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2982'.
[ 1014.888704][T14575] loop9: detected capacity change from 0 to 1024
[ 1015.056727][T14575] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1015.070781][T14575] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1015.090456][T14489] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1015.178693][T14489] 8021q: adding VLAN 0 to HW filter on device team0
[ 1015.224622][   T30] audit: type=1800 audit(1754712845.597:201): pid=14575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2986" name="file1" dev="loop9" ino=15 res=0 errno=0
[ 1015.307635][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1015.315862][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1015.440485][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1015.448129][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1015.612949][   T50] Bluetooth: hci4: command tx timeout
[ 1015.680317][T11215] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1016.336927][T14593] program syz.2.2993 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1016.389826][T14591] loop9: detected capacity change from 0 to 1764
[ 1016.550671][T14596] loop1: detected capacity change from 0 to 512
[ 1016.712022][T14596] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1016.725894][T14596] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1017.205952][T14596] Quota error (device loop1): do_check_range: Getting block 589828 out of range 1-5
[ 1017.220539][T14596] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[ 1017.230496][T14596] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2994: Failed to acquire dquot type 0
[ 1017.520717][T14489] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1017.737576][T11638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1018.029270][T14489] veth0_vlan: entered promiscuous mode
[ 1018.156351][T14489] veth1_vlan: entered promiscuous mode
[ 1018.213025][T14618] loop1: detected capacity change from 0 to 512
[ 1018.345980][T14620] befs: (nullb0): No write support. Marking filesystem read-only
[ 1018.354686][T14620] befs: (nullb0): invalid magic header
[ 1018.449928][T14489] veth0_macvtap: entered promiscuous mode
[ 1018.494710][T14618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1018.512937][T14618] ext4 filesystem being mounted at /222/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1018.582992][T14489] veth1_macvtap: entered promiscuous mode
[ 1018.651863][T14618] EXT4-fs error (device loop1): ext4_empty_dir:3081: inode #12: comm syz.1.3002: invalid size
[ 1018.772721][T11721] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 1018.799698][T14618] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[ 1018.837274][T14489] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1018.911800][T14489] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1018.972084][   T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1018.982525][T11721] usb 5-1: Using ep0 maxpacket: 32
[ 1019.035218][T11721] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1019.044790][T11721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1019.056163][ T1148] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1019.094758][ T1148] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1019.106654][T11721] usb 5-1: config 0 descriptor??
[ 1019.154235][ T3488] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1019.177101][T11721] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1019.207862][T11638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1019.708733][T14638] loop1: detected capacity change from 0 to 1024
[ 1019.787460][T14638] EXT4-fs: Ignoring removed orlov option
[ 1019.827694][T14638] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[ 1019.843273][T14638] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1019.959513][T14638] EXT4-fs (loop1): invalid journal inode
[ 1019.966537][T14638] EXT4-fs (loop1): can't get journal size
[ 1020.112779][T11721] gspca_sunplus: reg_w_riv err -71
[ 1020.118514][T11721] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[ 1020.120331][T14638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1020.158970][T11721] usb 5-1: USB disconnect, device number 15
[ 1020.323912][ T5871] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 1020.333894][ T5104] Bluetooth: hci3: command 0x0406 tx timeout
[ 1020.417983][T14638] EXT4-fs (loop1): Can't support bigalloc feature without extents feature
[ 1020.417983][T14638] 
[ 1020.528119][ T5871] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1020.541702][ T5871] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1020.548829][ T5871] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1020.562786][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1020.715539][ T5871] usb 3-1: config 0 descriptor??
[ 1020.825426][T11638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1021.237081][ T5871] logitech 0003:046D:C29C.001A: hidraw0: USB HID v1.01 Device [HID 046d:c29c] on usb-dummy_hcd.2-1/input0
[ 1021.410650][T14655] loop1: detected capacity change from 0 to 2048
[ 1021.547264][T14660] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1021.612507][ T5871] logitech 0003:046D:C29C.001A: no inputs found
[ 1021.684537][   T30] audit: type=1800 audit(1754712852.047:202): pid=14655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3014" name="file1" dev="loop1" ino=15 res=0 errno=0
[ 1021.702916][ T5871] usb 3-1: USB disconnect, device number 22
[ 1023.291013][T14672] loop1: detected capacity change from 0 to 32768
[ 1023.326638][T14682] loop9: detected capacity change from 0 to 512
[ 1023.483816][T14682] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1023.491559][T14672] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[ 1023.515565][T14672]   allowing incompatible features above 0.0: (unknown version)
[ 1023.529484][T14672]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[ 1023.544257][T14672] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[ 1023.553579][T14672] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[ 1023.563341][T14672] bcachefs (loop1): Version upgrade required:
[ 1023.563341][T14672] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[ 1023.563341][T14672] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[ 1023.563341][T14672]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[ 1023.658133][T14672] bcachefs (loop1): dropping and reconstructing all alloc info
[ 1023.705865][T14682] EXT4-fs (loop9): 1 truncate cleaned up
[ 1023.714350][T14682] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1023.714800][T14672] bcachefs (loop1): accounting_read... done
[ 1023.758226][T14672] bcachefs (loop1): alloc_read... done
[ 1023.787935][T14672] bcachefs (loop1): snapshots_read... done
[ 1023.807903][T14672] bcachefs (loop1): check_allocations... done
[ 1024.074927][T11215] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1024.079315][T14672] bcachefs (loop1): going read-write
[ 1024.171239][T14672] bcachefs (loop1): done starting filesystem
[ 1024.371547][T11638] bcachefs (loop1): shutting down
[ 1024.377086][T11638] bcachefs (loop1): going read-only
[ 1024.382681][T11638] bcachefs (loop1): finished waiting for writes to stop
[ 1024.415005][T11638] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11
[ 1024.467489][T11638] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 11
[ 1024.482616][T14704] loop9: detected capacity change from 0 to 65
[ 1024.486132][T11638] bcachefs (loop1): unclean shutdown complete, journal seq 12
[ 1024.541092][T14704] BFS-fs: bfs_fill_super(): NOTE: filesystem loop9 was created with 512 inodes, the real maximum is 511, mounting anyway
[ 1024.543463][T11638] bcachefs (loop1): done going read-only, filesystem not clean
[ 1024.687793][T11638] bcachefs (loop1): shutdown complete
[ 1025.142387][T14712] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3031'.
[ 1026.074238][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1026.086567][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1026.299170][ T4053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1026.308127][ T4053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1028.707905][T14753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3049'.
[ 1028.975702][T14751] loop3: detected capacity change from 0 to 32768
[ 1029.177757][T14751] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[ 1029.177927][T14751]   allowing incompatible features above 0.0: (unknown version)
[ 1029.178038][T14751]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[ 1029.204163][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1029.247499][T14751] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[ 1029.262721][T14751] bcachefs (loop3): initializing new filesystem
[ 1029.284318][T14751] bcachefs (loop3): going read-write
[ 1029.334348][T14751] bcachefs (loop3): marking superblocks
[ 1029.395048][T14751] bcachefs (loop3): initializing freespace
[ 1029.423640][T14751] bcachefs (loop3): done initializing freespace
[ 1029.444382][T14751] bcachefs (loop3): reading snapshots table
[ 1029.450776][T14751] bcachefs (loop3): reading snapshots done
[ 1029.551647][T14751] bcachefs (loop3): done starting filesystem
[ 1029.864458][T14489] bcachefs (loop3): shutting down
[ 1029.875550][T14489] bcachefs (loop3): going read-only
[ 1029.884828][T14489] bcachefs (loop3): finished waiting for writes to stop
[ 1029.926490][T14489] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3
[ 1030.122906][T14489] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[ 1030.171288][T14489] bcachefs (loop3): clean shutdown complete, journal seq 4
[ 1030.218864][T14489] bcachefs (loop3): marking filesystem clean
[ 1030.396424][T14489] bcachefs (loop3): shutdown complete
[ 1030.993730][T14790] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3061'.
[ 1031.850616][T14795] tap0: tun_chr_ioctl cmd 1074025677
[ 1031.856975][T14795] tap0: linktype set to 774
[ 1032.498663][T14801] sctp: [Deprecated]: syz.1.3067 (pid 14801) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1032.498663][T14801] Use struct sctp_sack_info instead
[ 1033.098031][T14805] loop1: detected capacity change from 0 to 2048
[ 1033.160136][T14805] NILFS (loop1): invalid segment: Inconsistency found
[ 1033.167607][T14805] NILFS (loop1): trying rollback from an earlier position
[ 1033.282863][T14805] NILFS (loop1): recovery complete
[ 1033.313862][T14810] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1033.644189][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1033.650937][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1034.511901][T14823] loop1: detected capacity change from 0 to 512
[ 1034.573633][T14823] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[ 1034.702863][T14823] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.3075: Invalid block bitmap block 0 in block_group 0
[ 1034.793652][T14823] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[ 1034.833401][T14823] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.3075: attempt to clear invalid blocks 983261 len 1
[ 1034.852739][T14823] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.3075: Invalid inode table block 0 in block_group 0
[ 1034.930205][T14823] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[ 1034.969777][T14823] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[ 1035.041772][T14823] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.3075: Invalid inode table block 0 in block_group 0
[ 1035.123123][T14823] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem
[ 1035.161549][T14823] EXT4-fs error (device loop1): ext4_truncate:4666: inode #11: comm syz.1.3075: mark_inode_dirty error
[ 1035.217857][T14823] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[ 1035.250927][T14823] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.3075: Invalid inode table block 0 in block_group 0
[ 1035.321795][T14823] EXT4-fs (loop1): 1 truncate cleaned up
[ 1035.330187][T14823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1035.701910][T14839] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[ 1036.066035][T11638] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1036.693202][T11720] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[ 1036.868666][T11720] usb 2-1: Using ep0 maxpacket: 16
[ 1036.892558][T11720] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1036.903497][T11720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1036.915009][T11720] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1036.925105][T11720] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1036.940193][T11720] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1037.119398][T11720] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1037.129198][T11720] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1037.138699][T11720] usb 2-1: Manufacturer: syz
[ 1037.217451][T11720] usb 2-1: config 0 descriptor??
[ 1037.495302][T14867] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3094'.
[ 1038.202884][T14848] loop1: detected capacity change from 0 to 1764
[ 1038.519744][T14870] loop3: detected capacity change from 0 to 32768
[ 1038.562451][T11720] rc_core: IR keymap rc-hauppauge not found
[ 1038.568742][T11720] Registered IR keymap rc-empty
[ 1038.583565][T11720] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1038.602730][T14870] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[ 1038.621650][T11720] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1038.644199][T11720] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1038.659253][T11720] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input27
[ 1038.700734][T11720] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1038.732632][T11720] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1038.792104][T11720] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1038.816611][T11720] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1038.845643][T11720] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1038.873825][T11720] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1038.907759][T11720] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1038.939577][T11720] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1038.978664][T11720] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1039.040452][T11720] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1039.093949][T11720] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1039.105449][T11720] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1039.145643][T11720] usb 2-1: USB disconnect, device number 9
[ 1039.161449][T14870] XFS (loop3): Ending clean mount
[ 1039.366358][T14489] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[ 1039.566929][T14895] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3102'.
[ 1039.577177][T14895] net veth1_virt_wifi 
70�: renamed from virt_wifi0
[ 1039.845411][T14895] net veth1_virt_wifi 
70�: entered allmulticast mode
[ 1039.858985][T14895] A link change request failed with some changes committed already. Interface 
70� may have been left with an inconsistent configuration, please check.
[ 1040.777864][T14908] loop1: detected capacity change from 0 to 256
[ 1040.867804][T14908] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1040.999676][T14908] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d)
[ 1041.036461][T14903] loop4: detected capacity change from 0 to 4096
[ 1041.066118][T14903] ntfs3: Unknown parameter '���2�Q��'
[ 1041.659787][T14919] loop9: detected capacity change from 0 to 256
[ 1041.702948][T14919] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1041.716276][T14919] exFAT-fs (loop9): Medium has reported failures. Some data may be lost.
[ 1041.728194][T14921] tun0: tun_chr_ioctl cmd 1074025677
[ 1041.734767][T14921] tun0: linktype set to 783
[ 1041.963327][T14919] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1042.522581][ T5871] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 1042.769585][ T5871] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1042.784941][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1042.795194][ T5871] usb 2-1: Product: syz
[ 1042.799595][ T5871] usb 2-1: Manufacturer: syz
[ 1042.804783][ T5871] usb 2-1: SerialNumber: syz
[ 1042.896198][ T5871] usb 2-1: config 0 descriptor??
[ 1043.018769][T14941] loop3: detected capacity change from 0 to 512
[ 1043.056833][T14941] EXT4-fs: Ignoring removed oldalloc option
[ 1043.222040][T11720] usb 2-1: USB disconnect, device number 10
[ 1043.303175][T14941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1043.317405][T14941] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1043.715692][T14950] EXT4-fs error (device loop3): ext4_empty_dir:3081: inode #12: comm syz.3.3124: invalid size
[ 1043.870762][T14948] loop9: detected capacity change from 0 to 2364
[ 1044.395499][T14489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1044.524788][T14954] netlink: 'syz.1.3128': attribute type 1 has an invalid length.
[ 1044.532998][T14954] netlink: 'syz.1.3128': attribute type 2 has an invalid length.
[ 1045.153345][T14964] loop4: detected capacity change from 0 to 1024
[ 1045.698688][   T14] hfsplus: b-tree write err: -5, ino 4
[ 1046.235350][T14977] team0: No ports can be present during mode change
[ 1046.864208][T14990] netlink: 'syz.9.3144': attribute type 3 has an invalid length.
[ 1047.455984][T14994] netlink: 'syz.1.3146': attribute type 53 has an invalid length.
[ 1047.465757][T14994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3146'.
[ 1047.733519][T14997] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3148'.
[ 1047.743761][T14997] netlink: 'syz.9.3148': attribute type 20 has an invalid length.
[ 1047.751784][T14997] netlink: 'syz.9.3148': attribute type 21 has an invalid length.
[ 1048.270434][T14984] syz.4.3142 (14984): drop_caches: 2
[ 1048.479944][T15007] loop9: detected capacity change from 0 to 8
[ 1048.589982][T15007] SQUASHFS error: zlib decompression failed, data probably corrupt
[ 1048.599081][T15007] SQUASHFS error: Failed to read block 0x4e8: -5
[ 1048.890291][T11215] SQUASHFS error: Unable to read directory block [631:72]
[ 1048.952064][T11215] SQUASHFS error: Unable to read inode 0xe3
[ 1048.999191][T11215] SQUASHFS error: Unable to read inode 0xe3
[ 1049.598280][ T4053] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1049.640050][T15020] input: syz0 as /devices/virtual/input/input28
[ 1049.828000][ T4053] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1050.003026][T15024] loop3: detected capacity change from 0 to 512
[ 1050.038789][ T4053] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1050.183394][T15024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1050.197716][T15024] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1050.307263][ T4053] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1050.435659][T14489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1050.624531][ T4053] bridge_slave_1: left allmulticast mode
[ 1050.630645][ T4053] bridge_slave_1: left promiscuous mode
[ 1050.637607][ T4053] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1050.650860][ T4053] bridge_slave_0: left allmulticast mode
[ 1050.664845][ T4053] bridge_slave_0: left promiscuous mode
[ 1050.671494][ T4053] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1051.204245][ T4053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1051.259236][ T4053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1051.309834][ T4053] bond0 (unregistering): (slave bond1): Releasing backup interface
[ 1051.335385][ T4053] bond0 (unregistering): Released all slaves
[ 1051.381120][ T4053] bond1 (unregistering): Released all slaves
[ 1051.755609][ T4053] hsr_slave_0: left promiscuous mode
[ 1051.775633][ T4053] hsr_slave_1: left promiscuous mode
[ 1051.791694][ T4053] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1051.800309][ T4053] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1051.810956][ T4053] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1051.818913][ T4053] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1051.850625][ T4053] veth1_macvtap: left promiscuous mode
[ 1051.856643][ T4053] veth0_macvtap: left promiscuous mode
[ 1051.864399][ T4053] veth1_vlan: left promiscuous mode
[ 1051.870004][ T4053] veth0_vlan: left promiscuous mode
[ 1052.479796][T15036] loop3: detected capacity change from 0 to 512
[ 1052.625342][ T4053] team0 (unregistering): Port device team_slave_1 removed
[ 1052.700007][ T4053] team0 (unregistering): Port device team_slave_0 removed
[ 1052.782794][T15036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1052.796386][T15036] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1053.045025][T15036] EXT4-fs (loop3): shut down requested (2)
[ 1053.512067][T14489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1053.600168][T15044] loop4: detected capacity change from 0 to 64
[ 1053.697248][ T5104] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1053.708696][T15044] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[ 1053.719385][ T5104] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1053.736202][ T5104] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1053.762688][ T5104] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1053.778494][ T5104] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1054.743300][T15045] chnl_net:caif_netlink_parms(): no params data found
[ 1054.864778][T15066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3176'.
[ 1054.874382][T15066] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3176'.
[ 1055.173317][T15072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3178'.
[ 1055.743541][T11720] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1055.856665][ T5104] Bluetooth: hci0: command tx timeout
[ 1055.933157][T11720] usb 5-1: Using ep0 maxpacket: 16
[ 1055.964321][T11720] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1055.977949][T11720] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1055.991564][T11720] usb 5-1: Product: syz
[ 1055.998014][T11720] usb 5-1: Manufacturer: syz
[ 1056.002996][T11720] usb 5-1: SerialNumber: syz
[ 1056.031262][T15045] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1056.039218][T15045] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1056.047401][T15045] bridge_slave_0: entered allmulticast mode
[ 1056.057287][T15045] bridge_slave_0: entered promiscuous mode
[ 1056.110595][T11720] usb 5-1: config 0 descriptor??
[ 1056.209603][T15045] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1056.217674][T15045] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1056.225647][T15045] bridge_slave_1: entered allmulticast mode
[ 1056.235879][T15045] bridge_slave_1: entered promiscuous mode
[ 1056.341829][T11720] usb 5-1: USB disconnect, device number 16
[ 1056.579576][T15045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1056.634397][T15045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1056.715236][ T5871] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[ 1056.875914][T15045] team0: Port device team_slave_0 added
[ 1056.918459][ T5871] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1056.930282][ T5871] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1056.940557][ T5871] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1056.950229][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1056.978191][T15045] team0: Port device team_slave_1 added
[ 1057.248445][T15045] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1057.257049][T15045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1057.284203][T15045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1057.423330][T15045] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1057.430715][T15045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1057.458645][T15045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1057.545185][ T5871] aiptek 4-1:17.0: Aiptek using 400 ms programming speed
[ 1057.556148][ T5871] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input29
[ 1057.574380][ T5871] input: failed to attach handler kbd to device input29, error: -5
[ 1057.604474][ T5871] usb 4-1: USB disconnect, device number 10
[ 1057.810317][T15045] hsr_slave_0: entered promiscuous mode
[ 1057.821169][T15045] hsr_slave_1: entered promiscuous mode
[ 1057.836054][T15045] debugfs: 'hsr0' already exists in 'hsr'
[ 1057.842295][T15045] Cannot create hsr debugfs directory
[ 1057.951040][ T5104] Bluetooth: hci0: command tx timeout
[ 1058.773986][T15115] loop4: detected capacity change from 0 to 1024
[ 1058.787900][T15115] EXT4-fs: Ignoring removed bh option
[ 1058.794358][T15115] EXT4-fs: Ignoring removed nobh option
[ 1058.800252][T15115] EXT4-fs: inline encryption not supported
[ 1058.846256][T15115] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1059.040421][T15115] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.3197: Allocating blocks 385-513 which overlap fs metadata
[ 1059.117419][T15124] EXT4-fs (loop4): pa ffff888123a1a7e0: logic 16, phys. 129, len 24
[ 1059.126016][T15124] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[ 1059.421994][T12150] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1059.581909][ T5871] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 1059.628902][T15045] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1059.695691][T15045] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1059.733920][T15045] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1059.753177][ T5871] usb 2-1: Using ep0 maxpacket: 32
[ 1059.768959][T15045] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1059.789863][ T5871] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[ 1059.798579][ T5871] usb 2-1: config 0 has no interface number 0
[ 1059.839526][ T5871] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1059.849098][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1059.857640][ T5871] usb 2-1: Product: syz
[ 1059.862038][ T5871] usb 2-1: Manufacturer: syz
[ 1059.867022][ T5871] usb 2-1: SerialNumber: syz
[ 1059.990207][T15132] loop3: detected capacity change from 0 to 164
[ 1060.015010][ T5104] Bluetooth: hci0: command tx timeout
[ 1060.015018][ T5871] usb 2-1: config 0 descriptor??
[ 1060.029164][ T5871] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1060.087843][T15132] Unable to read rock-ridge attributes
[ 1060.153866][T15132] Unable to read rock-ridge attributes
[ 1060.216649][T15134] loop4: detected capacity change from 0 to 164
[ 1060.306516][ T5871] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1060.332032][T15134] ISOFS: unable to read i-node block
[ 1060.337878][T15134] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[ 1060.359903][ T5871] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1060.735842][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1060.739005][ T5863] usb 2-1: USB disconnect, device number 11
[ 1060.789010][ T5863] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1060.865394][ T5863] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1060.878800][ T5863] quatech2 2-1:0.51: device disconnected
[ 1061.096794][T15140] tap0: tun_chr_ioctl cmd 2147767521
[ 1061.220297][T15045] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1061.400279][T15045] 8021q: adding VLAN 0 to HW filter on device team0
[ 1061.472345][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1061.479981][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1061.581561][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1061.589241][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1061.891014][T15148] input: syz0 as /devices/virtual/input/input30
[ 1062.093056][ T5104] Bluetooth: hci0: command tx timeout
[ 1062.905410][T15154] loop4: detected capacity change from 0 to 4096
[ 1062.979857][T15154] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[ 1063.615071][T15045] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1064.654663][T15178] loop3: detected capacity change from 0 to 4096
[ 1064.712706][T15178] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[ 1065.044112][T15178] ntfs3(loop3): ino=1a, mi_enum_attr
[ 1065.049754][T15178] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[ 1065.765174][T15045] veth0_vlan: entered promiscuous mode
[ 1065.855927][T15045] veth1_vlan: entered promiscuous mode
[ 1066.167156][T15045] veth0_macvtap: entered promiscuous mode
[ 1066.258628][T15045] veth1_macvtap: entered promiscuous mode
[ 1066.450809][T15045] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1066.555388][T15045] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1066.654050][T14144] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1066.684644][T15212] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3235'.
[ 1066.693760][T14144] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1066.693995][T14144] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1066.694200][T14144] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1067.338014][T15220] loop4: detected capacity change from 0 to 256
[ 1067.408679][T15220] exfat: Deprecated parameter 'namecase'
[ 1067.417352][T15220] exfat: Deprecated parameter 'utf8'
[ 1067.440003][T15216] loop1: detected capacity change from 0 to 4096
[ 1067.512997][T15220] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[ 1067.635570][T15224] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1067.711794][   T30] audit: type=1800 audit(1754712898.087:203): pid=15216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3237" name="file1" dev="loop1" ino=15 res=0 errno=0
[ 1068.662726][T11720] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 1068.790574][T15242] loop3: detected capacity change from 0 to 2048
[ 1068.879484][T11720] usb 5-1: Using ep0 maxpacket: 32
[ 1068.927656][T15242] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1068.951061][T11720] usb 5-1: config 0 has no interfaces?
[ 1068.961389][T11720] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1068.971332][T11720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1069.030778][T11720] usb 5-1: config 0 descriptor??
[ 1069.284106][T11720] usb 5-1: USB disconnect, device number 17
[ 1069.591269][T15252] loop3: detected capacity change from 0 to 128
[ 1070.326986][T11720] kernel read not supported for file /mISDNtimer (pid: 11720 comm: kworker/1:1)
[ 1070.861503][ T5104] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[ 1070.871670][ T5104] CPU: 1 UID: 0 PID: 5104 Comm: kworker/u9:1 Tainted: G        W           6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(none) 
[ 1070.871871][ T5104] Tainted: [W]=WARN
[ 1070.871928][ T5104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1070.872043][ T5104] Workqueue: hci3 hci_rx_work
[ 1070.872249][ T5104] Call Trace:
[ 1070.872305][ T5104]  <TASK>
[ 1070.872359][ T5104]  __dump_stack+0x26/0x30
[ 1070.872557][ T5104]  dump_stack_lvl+0x1df/0x270
[ 1070.872751][ T5104]  dump_stack+0x1e/0x25
[ 1070.872924][ T5104]  sysfs_create_dir_ns+0x46c/0x540
[ 1070.873158][ T5104]  kobject_add_internal+0xeed/0x1840
[ 1070.873394][ T5104]  kobject_add+0x2c1/0x410
[ 1070.873610][ T5104]  ? kmsan_get_metadata+0xfb/0x160
[ 1070.873811][ T5104]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1070.874013][ T5104]  device_add+0xa70/0x1c10
[ 1070.874243][ T5104]  hci_conn_add_sysfs+0x15f/0x2f0
[ 1070.874425][ T5104]  le_conn_complete_evt+0x1b35/0x21b0
[ 1070.874621][ T5104]  hci_le_conn_complete_evt+0x157/0x260
[ 1070.874852][ T5104]  hci_le_meta_evt+0x6e8/0x960
[ 1070.875050][ T5104]  ? __pfx_hci_le_conn_complete_evt+0x10/0x10
[ 1070.875293][ T5104]  hci_event_packet+0xce2/0x1e40
[ 1070.875472][ T5104]  ? __pfx_hci_le_meta_evt+0x10/0x10
[ 1070.875722][ T5104]  hci_rx_work+0x9a8/0x12b0
[ 1070.875929][ T5104]  ? __pfx_hci_rx_work+0x10/0x10
[ 1070.876117][ T5104]  process_scheduled_works+0xb91/0x1d80
[ 1070.876385][ T5104]  worker_thread+0xedf/0x1590
[ 1070.876627][ T5104]  kthread+0xd59/0xf00
[ 1070.876770][ T5104]  ? __pfx_worker_thread+0x10/0x10
[ 1070.876991][ T5104]  ? __pfx_kthread+0x10/0x10
[ 1070.877141][ T5104]  ret_from_fork+0x1e3/0x310
[ 1070.877297][ T5104]  ? __pfx_kthread+0x10/0x10
[ 1070.877447][ T5104]  ret_from_fork_asm+0x1a/0x30
[ 1070.877665][ T5104]  </TASK>
[ 1071.049056][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1071.061875][ T5104] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1071.077862][ T5104] Bluetooth: hci3: failed to register connection device
[ 1072.206119][ T4421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1072.214429][ T4421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1072.354472][ T8616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1072.362835][ T8616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1072.603556][T15300] netlink: 'syz.2.3266': attribute type 3 has an invalid length.
[ 1072.611540][T15300] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3266'.
[ 1073.346185][T15311] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3270'.
[ 1073.520366][T15313] loop7: detected capacity change from 0 to 8
[ 1075.153468][T11720] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[ 1075.373117][T11720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1075.384039][T11720] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1075.393481][T11720] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1075.403015][T11720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1075.525484][T11720] usb 3-1: config 0 descriptor??
[ 1075.549884][T11720] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1075.558762][T11720] dvb-usb: bulk message failed: -22 (3/0)
[ 1075.652542][T11720] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1075.664517][T11720] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1075.671912][T11720] usb 3-1: media controller created
[ 1075.737131][T11720] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1075.774367][T15332] dvb-usb: bulk message failed: -22 (2/0)
[ 1075.823998][T11720] dvb-usb: bulk message failed: -22 (6/0)
[ 1075.830309][T11720] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1075.891363][T11720] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input31
[ 1075.973338][T11720] dvb-usb: schedule remote query interval to 150 msecs.
[ 1075.985663][T11720] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1076.042592][T11720] usb 3-1: USB disconnect, device number 23
[ 1076.183459][ T5863] kernel write not supported for file /dsp1 (pid: 5863 comm: kworker/1:3)
[ 1076.206114][T11720] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1076.337361][T15350] loop1: detected capacity change from 0 to 64
[ 1076.482698][T15349] Trying to free block not in datazone
[ 1076.502776][T15348] loop4: detected capacity change from 0 to 2048
[ 1076.522577][T15348] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1076.593629][T15352] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1077.172655][T11227] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 1077.308619][T15359] loop7: detected capacity change from 0 to 1024
[ 1077.477282][T15359] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1077.514407][T11227] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1077.524179][T11227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1077.532688][T11227] usb 2-1: Product: syz
[ 1077.537068][T11227] usb 2-1: Manufacturer: syz
[ 1077.541861][T11227] usb 2-1: SerialNumber: syz
[ 1077.659922][T11227] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1077.765955][T15359] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.3292: Allocating blocks 497-513 which overlap fs metadata
[ 1077.863148][T15359] EXT4-fs (loop7): pa ffff888123a1a7e0: logic 1664, phys. 129, len 24
[ 1077.871613][T15359] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 23, pa_free 24
[ 1077.940027][ T5871] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1078.385900][T15045] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1078.705875][T11720] usb 2-1: USB disconnect, device number 12
[ 1078.888297][T15380] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3299'.
[ 1079.372751][ T5871] usb 2-1: Service connection timeout for: 256
[ 1079.379412][ T5871] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1079.390224][ T5871] ath9k_htc: Failed to initialize the device
[ 1079.460241][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3304'.
[ 1079.493875][T11720] usb 2-1: ath9k_htc: USB layer deinitialized
[ 1079.613379][T15392] team_slave_0: entered promiscuous mode
[ 1079.619500][T15392] team_slave_1: entered promiscuous mode
[ 1079.658595][T15391] team_slave_0: left promiscuous mode
[ 1079.664467][T15391] team_slave_1: left promiscuous mode
[ 1079.931483][T15396] Driver unsupported XDP return value 0 on prog  (id 275) dev N/A, expect packet loss!
[ 1081.114767][T15413] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3315'.
[ 1081.128114][T15415] loop7: detected capacity change from 0 to 128
[ 1081.222990][T15415] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1081.279245][T15415] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1081.391527][T15424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3319'.
[ 1081.634925][T15045] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1081.801496][T15429] loop4: detected capacity change from 0 to 16
[ 1081.873777][T15429] erofs (device loop4): mounted with root inode @ nid 36.
[ 1082.013872][T15429] overlayfs: failed to get metacopy (-117)
[ 1082.907058][T15449] hpfs: Bad magic ... probably not HPFS
[ 1085.102520][ T5871] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[ 1085.297624][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1085.309372][ T5871] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1085.318952][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1085.384416][ T5871] usb 3-1: config 0 descriptor??
[ 1085.630624][ T5871] usbhid 3-1:0.0: can't add hid device: -71
[ 1085.637503][ T5871] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1085.671703][ T5871] usb 3-1: USB disconnect, device number 24
[ 1086.161088][T15496] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3353'.
[ 1086.202872][ T5871] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[ 1086.226768][T15498] loop3: detected capacity change from 0 to 256
[ 1086.351846][T15498] FAT-fs (loop3): Directory bread(block 64) failed
[ 1086.359175][T15498] FAT-fs (loop3): Directory bread(block 65) failed
[ 1086.366378][T15498] FAT-fs (loop3): Directory bread(block 66) failed
[ 1086.373274][T15498] FAT-fs (loop3): Directory bread(block 67) failed
[ 1086.380164][T15498] FAT-fs (loop3): Directory bread(block 68) failed
[ 1086.387102][T15498] FAT-fs (loop3): Directory bread(block 69) failed
[ 1086.399958][T15498] FAT-fs (loop3): Directory bread(block 70) failed
[ 1086.408307][T15498] FAT-fs (loop3): Directory bread(block 71) failed
[ 1086.416071][T15498] FAT-fs (loop3): Directory bread(block 72) failed
[ 1086.422975][T15498] FAT-fs (loop3): Directory bread(block 73) failed
[ 1086.511094][ T5871] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1086.522736][ T5871] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1086.532062][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1086.592635][ T5871] usb 3-1: config 0 descriptor??
[ 1086.681490][ T5871] hub 3-1:0.0: USB hub found
[ 1086.856588][ T5871] hub 3-1:0.0: 1 port detected
[ 1087.057416][ T5871] hub 3-1:0.0: hub_hub_status failed (err = -71)
[ 1087.064631][ T5871] hub 3-1:0.0: config failed, can't get hub status (err -71)
[ 1087.140629][ T5871] usbhid 3-1:0.0: can't add hid device: -71
[ 1087.147426][ T5871] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1087.239826][ T5871] usb 3-1: USB disconnect, device number 25
[ 1087.628214][T15506] netlink: 'syz.3.3355': attribute type 1 has an invalid length.
[ 1087.636492][T15506] netlink: 'syz.3.3355': attribute type 4 has an invalid length.
[ 1087.647965][T15506] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3355'.
[ 1087.657460][T15506] NCSI netlink: No device for ifindex 3088861696
[ 1088.437138][T15518] loop4: detected capacity change from 0 to 22
[ 1088.493763][T15518] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1089.025430][T15529] netlink: 'syz.3.3367': attribute type 10 has an invalid length.
[ 1089.051147][T15529] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1089.078185][T15529] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1089.318604][T15529] bond0: entered promiscuous mode
[ 1089.324494][T15529] bond_slave_0: entered promiscuous mode
[ 1089.335704][T15529] bond_slave_1: entered promiscuous mode
[ 1089.342805][T15529] batadv0: entered promiscuous mode
[ 1090.057120][T15545] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3374'.
[ 1090.067352][T15545] netlink: 1 bytes leftover after parsing attributes in process `syz.7.3374'.
[ 1091.187211][   T14] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1091.260120][   T30] audit: type=1326 audit(1754712921.617:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15562 comm="syz.3.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709798ebe9 code=0x7ffc0000
[ 1091.384314][   T30] audit: type=1326 audit(1754712921.677:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15562 comm="syz.3.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709798ebe9 code=0x7ffc0000
[ 1091.411411][   T30] audit: type=1326 audit(1754712921.717:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15562 comm="syz.3.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f709798ebe9 code=0x7ffc0000
[ 1091.441149][T15563] loop7: detected capacity change from 0 to 2048
[ 1091.450468][   T30] audit: type=1326 audit(1754712921.717:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15562 comm="syz.3.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709798ebe9 code=0x7ffc0000
[ 1091.476880][   T30] audit: type=1326 audit(1754712921.717:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15562 comm="syz.3.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f709798ebe9 code=0x7ffc0000
[ 1091.500935][   T30] audit: type=1326 audit(1754712921.717:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15562 comm="syz.3.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709798ebe9 code=0x7ffc0000
[ 1091.531852][   T30] audit: type=1326 audit(1754712921.737:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15562 comm="syz.3.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709798ebe9 code=0x7ffc0000
[ 1091.559931][   T30] audit: type=1326 audit(1754712921.737:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15562 comm="syz.3.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f709798ebe9 code=0x7ffc0000
[ 1091.582528][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1091.592637][   T30] audit: type=1326 audit(1754712921.737:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15562 comm="syz.3.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000
[ 1091.615478][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1091.630171][   T30] audit: type=1326 audit(1754712921.747:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15562 comm="syz.3.3384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f709798ebe9 code=0x7ffc0000
[ 1091.664149][   T14] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1091.703356][T15563] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1091.741433][T15569] loop1: detected capacity change from 0 to 1024
[ 1091.857635][   T14] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1091.906822][T15569] hfsplus: request for non-existent node 134217728 in B*Tree
[ 1091.915195][T15569] hfsplus: request for non-existent node 134217728 in B*Tree
[ 1091.945853][T15569] hfsplus: hfsplus: Invalid key length: 30878
[ 1091.974749][   T14] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1092.092722][T15563] UDF-fs: warning (device loop7): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 16384 lbcount: 19968 extent 65+15872
[ 1092.111258][T15563] UDF-fs: error (device loop7): udf_truncate_tail_extent: Extent after EOF in inode 1367
[ 1092.368749][   T14] bridge_slave_1: left allmulticast mode
[ 1092.374905][   T14] bridge_slave_1: left promiscuous mode
[ 1092.381648][   T14] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1092.416617][   T14] bridge_slave_0: left allmulticast mode
[ 1092.425828][   T14] bridge_slave_0: left promiscuous mode
[ 1092.432734][   T14] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1093.175428][   T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1093.207278][   T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1093.225794][   T14] bond0 (unregistering): Released all slaves
[ 1093.756447][T15577] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3391'.
[ 1093.817291][T15577] bond0: entered promiscuous mode
[ 1093.823964][T15577] bond_slave_0: entered promiscuous mode
[ 1093.838904][T15577] bond_slave_1: entered promiscuous mode
[ 1093.856392][T15579] Bluetooth: MGMT ver 1.23
[ 1093.879838][T15577] bond0: left promiscuous mode
[ 1093.885358][T15577] bond_slave_0: left promiscuous mode
[ 1093.892034][T15577] bond_slave_1: left promiscuous mode
[ 1094.049525][   T14] hsr_slave_0: left promiscuous mode
[ 1094.078732][   T14] hsr_slave_1: left promiscuous mode
[ 1094.089240][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1094.097108][   T14] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1094.198276][   T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1094.210081][   T14] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1094.323764][   T14] veth1_macvtap: left promiscuous mode
[ 1094.329669][   T14] veth0_macvtap: left promiscuous mode
[ 1094.336950][   T14] veth1_vlan: left promiscuous mode
[ 1094.342754][   T14] veth0_vlan: left promiscuous mode
[ 1094.902711][T15588] loop7: detected capacity change from 0 to 2048
[ 1094.926645][   T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1094.938439][   T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1094.952803][   T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1095.073821][T12153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1095.096512][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1095.105414][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1095.160504][T15588] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1095.243222][T12153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1095.481493][   T14] team0 (unregistering): Port device team_slave_1 removed
[ 1095.542923][   T14] team0 (unregistering): Port device team_slave_0 removed
[ 1095.558858][T15594] loop3: detected capacity change from 0 to 256
[ 1095.804619][T15594] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d)
[ 1096.719493][   T14] ------------[ cut here ]------------
[ 1096.725570][   T14] WARNING: CPU: 0 PID: 14 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x2fa/0x4c0
[ 1096.735947][   T14] Modules linked in:
[ 1096.745501][   T14] CPU: 0 UID: 0 PID: 14 Comm: kworker/u8:1 Tainted: G        W           6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(none) 
[ 1096.760875][   T14] Tainted: [W]=WARN
[ 1096.765072][   T14] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1096.775643][   T14] Workqueue: netns cleanup_net
[ 1096.780753][   T14] RIP: 0010:xfrm_state_fini+0x2fa/0x4c0
[ 1096.786809][   T14] Code: 48 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 8b 3a e8 25 50 c6 f3 4d 39 f7 0f 84 ac fd ff ff e8 c7 80 23 f3 90 <0f> 0b 90 e9 a3 fd ff ff 8b 3a e8 07 50 c6 f3 4d 85 f6 0f 84 03 fe
[ 1096.806860][   T14] RSP: 0018:ffff8881006a7a48 EFLAGS: 00010293
[ 1096.813372][   T14] RAX: ffffffff8ed173c9 RBX: ffff8880549597c0 RCX: ffff8881006aa0c0
[ 1096.821570][   T14] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88805495a5c0
[ 1096.829940][   T14] RBP: ffff8881006a7a88 R08: ffffea000000000f R09: 0000000000000000
[ 1096.838660][   T14] R10: ffff888237b71028 R11: 0000000000000000 R12: 0000000000f000df
[ 1096.854142][   T14] R13: ffff8880549597e8 R14: ffff88805495a5c0 R15: ffff888128364dd8
[ 1096.862888][   T14] FS:  0000000000000000(0000) GS:ffff8881aa69a000(0000) knlGS:0000000000000000
[ 1096.872065][   T14] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1096.879040][   T14] CR2: 000055558506e808 CR3: 000000002fc72000 CR4: 00000000003526f0
[ 1096.887390][   T14] Call Trace:
[ 1096.890846][   T14]  <TASK>
[ 1096.894256][   T14]  xfrm_net_exit+0x46/0x90
[ 1096.898952][   T14]  ? __pfx_xfrm_net_exit+0x10/0x10
[ 1096.904461][   T14]  ops_undo_list+0x6c5/0xb80
[ 1096.909373][   T14]  cleanup_net+0xb8f/0x14b0
[ 1096.914334][   T14]  ? __pfx_cleanup_net+0x10/0x10
[ 1096.919676][   T14]  process_scheduled_works+0xb91/0x1d80
[ 1096.925751][   T14]  worker_thread+0xedf/0x1590
[ 1096.930817][   T14]  kthread+0xd59/0xf00
[ 1096.935312][   T14]  ? __pfx_worker_thread+0x10/0x10
[ 1096.940759][   T14]  ? __pfx_kthread+0x10/0x10
[ 1096.954413][   T14]  ret_from_fork+0x1e3/0x310
[ 1096.959293][   T14]  ? __pfx_kthread+0x10/0x10
[ 1096.964308][   T14]  ret_from_fork_asm+0x1a/0x30
[ 1096.969407][   T14]  </TASK>
[ 1096.974077][   T14] ---[ end trace 0000000000000000 ]---
[ 1097.456356][T12153] Bluetooth: hci2: command tx timeout
[ 1097.591410][T15618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3405'.
[ 1097.602873][T15618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3405'.
[ 1097.612049][T15618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3405'.
[ 1097.623903][T15618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3405'.
[ 1097.633268][T15618] netlink: 'syz.3.3405': attribute type 6 has an invalid length.
[ 1097.681646][T15589] chnl_net:caif_netlink_parms(): no params data found
[ 1099.369091][T15589] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1099.379565][T15589] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1099.390977][T15589] bridge_slave_0: entered allmulticast mode
[ 1099.406660][T15589] bridge_slave_0: entered promiscuous mode
[ 1099.478198][T15589] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1099.486306][T15589] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1099.494404][T15589] bridge_slave_1: entered allmulticast mode
[ 1099.512065][T15589] bridge_slave_1: entered promiscuous mode
[ 1099.554569][T12153] Bluetooth: hci2: command tx timeout
[ 1099.746259][T15589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1099.790326][T15589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1100.063018][T15589] team0: Port device team_slave_0 added
[ 1100.086427][T15589] team0: Port device team_slave_1 added
[ 1100.434718][T15589] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1100.441980][T15589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1100.470033][T15589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1100.509807][T15589] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1100.517458][T15589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1100.549622][T15589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1101.102453][T15670] misc userio: Begin command sent, but we're already running
[ 1101.186808][T15589] hsr_slave_0: entered promiscuous mode
[ 1101.200642][T15589] hsr_slave_1: entered promiscuous mode
[ 1101.210118][T15589] debugfs: 'hsr0' already exists in 'hsr'
[ 1101.216348][T15589] Cannot create hsr debugfs directory
[ 1101.381772][T15674] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3429'.
[ 1101.613469][T12153] Bluetooth: hci2: command tx timeout
[ 1102.246206][T15684] loop7: detected capacity change from 0 to 128
[ 1102.297934][T15684] qnx6: Unknown parameter 'mmi_ف�e'k����{���ڟ!N��X��J�!��|�#7^�?��|������YP�?i��`]�s';�YB@�G�Q�;��-��I�h� @���D�'
[ 1102.796185][T15589] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1102.859384][T15589] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1102.931939][T15589] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1103.040552][T15589] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1103.692658][T12153] Bluetooth: hci2: command tx timeout
[ 1104.127350][T15589] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1104.166563][T15705] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1104.173273][T15705] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1104.174880][T15713] loop3: detected capacity change from 0 to 1024
[ 1104.216464][T15705] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1104.226849][T15705] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1104.256772][T15713] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled
[ 1104.310953][T15705] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1104.326277][T15589] 8021q: adding VLAN 0 to HW filter on device team0
[ 1104.389876][ T4053] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1104.397579][ T4053] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1104.413969][T15705] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1104.425974][T15705] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1104.444367][T15713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1104.500028][T15705] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1104.540458][ T4053] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1104.548170][ T4053] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1104.629068][T15705] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1104.637250][T15705] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1104.666132][T15705] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1104.721193][T15589] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1104.739505][T15589] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1104.769916][T15705] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1104.778354][T15705] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1104.871692][T15705] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1104.958090][T14489] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1105.117863][T15725] loop1: detected capacity change from 0 to 256
[ 1105.147203][T15725] vfat: Deprecated parameter 'posix'
[ 1105.152920][T15725] FAT-fs: "posix" option is obsolete, not supported now
[ 1105.275625][   T30] kauditd_printk_skb: 1 callbacks suppressed
[ 1105.275720][   T30] audit: type=1800 audit(1754712935.657:215): pid=15725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3450" name="file7" dev="loop1" ino=1048806 res=0 errno=0
[ 1105.311307][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1105.861172][T12153] Bluetooth: hci1: command 0x0406 tx timeout
[ 1106.268742][T12153] Bluetooth: hci3: command 0x0406 tx timeout
[ 1106.334933][T15589] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1106.495170][T12153] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1106.652931][T12153] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1106.816242][T12153] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1107.530217][T15746] loop3: detected capacity change from 0 to 32768
[ 1107.751955][T15746] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[ 1107.755010][T15746]   allowing incompatible features above 0.0: (unknown version)
[ 1107.755117][T15746]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[ 1107.798088][T15746] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[ 1107.806798][T15746] bcachefs (loop3): initializing new filesystem
[ 1107.827859][T15746] bcachefs (loop3): going read-write
[ 1107.868712][T15746] bcachefs (loop3): marking superblocks
[ 1107.931486][T15746] bcachefs (loop3): initializing freespace
[ 1107.964409][T15746] bcachefs (loop3): done initializing freespace
[ 1107.965616][T12153] Bluetooth: hci1: command 0x0406 tx timeout
[ 1107.989116][T15746] bcachefs (loop3): reading snapshots table
[ 1107.995933][T15746] bcachefs (loop3): reading snapshots done
[ 1108.097091][T15746] bcachefs (loop3):  loop3: Superblock write was silently dropped! (seq 0 expected 42)
[ 1108.114512][T15746] bcachefs (loop3): done starting filesystem
[ 1108.151693][T15769] hugetlbfs: syz.2.3462 (15769): Using mlock ulimits for SHM_HUGETLB is obsolete
[ 1108.333382][T12153] Bluetooth: hci3: command 0x0406 tx timeout
[ 1108.452604][T14489] bcachefs (loop3): shutting down
[ 1108.457847][T14489] bcachefs (loop3): going read-only
[ 1108.463547][T14489] bcachefs (loop3): finished waiting for writes to stop
[ 1108.547197][T14489] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3
[ 1108.591360][T12153] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1108.734509][ T5104] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1108.762010][T14489] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[ 1108.790997][T15589] veth0_vlan: entered promiscuous mode
[ 1108.850284][T14489] bcachefs (loop3): clean shutdown complete, journal seq 4
[ 1108.864730][T15589] veth1_vlan: entered promiscuous mode
[ 1108.894017][T14489] bcachefs (loop3): marking filesystem clean
[ 1108.913063][ T5104] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1109.110772][T15589] veth0_macvtap: entered promiscuous mode
[ 1109.148608][T14489] bcachefs (loop3): shutdown complete
[ 1109.157805][T15589] veth1_macvtap: entered promiscuous mode
[ 1109.173046][ T5871] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 1109.313838][T15589] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1109.386560][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1109.398417][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1109.401584][T15589] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1109.408727][ T5871] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[ 1109.408884][ T5871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1109.485229][ T5871] usb 2-1: config 0 descriptor??
[ 1109.654459][ T3488] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1109.713368][ T3488] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1109.775332][ T3488] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1109.795298][ T3488] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1110.017365][ T5871] petalynx 0003:18B1:0037.001B: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.1-1/input0
[ 1110.196500][ T5871] usb 2-1: USB disconnect, device number 13
[ 1110.412859][ T5104] Bluetooth: hci3: command 0x0406 tx timeout
[ 1110.668282][ T5104] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1110.823531][ T5104] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1110.982542][ T5104] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1111.498059][T15796] netlink: 'syz.2.3473': attribute type 10 has an invalid length.
[ 1111.520722][T15796] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1111.914314][T15799] =====================================================
[ 1111.921754][T15799] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120
[ 1111.929674][T15799]  _copy_to_user+0xcc/0x120
[ 1111.935162][T15799]  do_insn_ioctl+0x59c/0x6d0
[ 1111.939997][T15799]  comedi_unlocked_ioctl+0xa5e/0x1f60
[ 1111.945789][T15799]  __se_sys_ioctl+0x23c/0x400
[ 1111.950645][T15799]  __x64_sys_ioctl+0x97/0xe0
[ 1111.955600][T15799]  x64_sys_call+0x1cbc/0x3e20
[ 1111.960510][T15799]  do_syscall_64+0xd9/0x210
[ 1111.965457][T15799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1111.971554][T15799] 
[ 1111.974137][T15799] Uninit was created at:
[ 1111.978655][T15799]  __kmalloc_noprof+0x95f/0x1310
[ 1111.983955][T15799]  do_insn_ioctl+0x108/0x6d0
[ 1111.988784][T15799]  comedi_unlocked_ioctl+0xa5e/0x1f60
[ 1111.999208][T15799]  __se_sys_ioctl+0x23c/0x400
[ 1112.005421][T15799]  __x64_sys_ioctl+0x97/0xe0
[ 1112.010251][T15799]  x64_sys_call+0x1cbc/0x3e20
[ 1112.015530][T15799]  do_syscall_64+0xd9/0x210
[ 1112.020241][T15799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1112.026747][T15799] 
[ 1112.029185][T15799] Bytes 4-583 of 584 are uninitialized
[ 1112.034948][T15799] Memory access of size 584 starts at ffff88802181f000
[ 1112.041936][T15799] 
[ 1112.044604][T15799] CPU: 0 UID: 0 PID: 15799 Comm: syz.7.3474 Tainted: G        W           6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(none) 
[ 1112.058510][T15799] Tainted: [W]=WARN
[ 1112.062600][T15799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1112.072985][T15799] =====================================================
[ 1112.080040][T15799] Disabling lock debugging due to kernel taint
[ 1112.086517][T15799] Kernel panic - not syncing: kmsan.panic set ...
[ 1112.093194][T15799] CPU: 0 UID: 0 PID: 15799 Comm: syz.7.3474 Tainted: G    B   W           6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(none) 
[ 1112.106816][T15799] Tainted: [B]=BAD_PAGE, [W]=WARN
[ 1112.111974][T15799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1112.122282][T15799] Call Trace:
[ 1112.125687][T15799]  <TASK>
[ 1112.128732][T15799]  __dump_stack+0x26/0x30
[ 1112.133297][T15799]  dump_stack_lvl+0x53/0x270
[ 1112.138112][T15799]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1112.144167][T15799]  dump_stack+0x1e/0x25
[ 1112.148554][T15799]  vpanic+0x361/0xc50
[ 1112.152776][T15799]  panic+0x15d/0x160
[ 1112.156947][T15799]  kmsan_report+0x31c/0x320
[ 1112.161756][T15799]  ? kmsan_internal_check_memory+0x1e1/0x230
[ 1112.167937][T15799]  ? kmsan_copy_to_user+0xf1/0x190
[ 1112.173264][T15799]  ? _copy_to_user+0xcc/0x120
[ 1112.178181][T15799]  ? do_insn_ioctl+0x59c/0x6d0
[ 1112.183209][T15799]  ? comedi_unlocked_ioctl+0xa5e/0x1f60
[ 1112.188993][T15799]  ? __se_sys_ioctl+0x23c/0x400
[ 1112.194056][T15799]  ? __x64_sys_ioctl+0x97/0xe0
[ 1112.199018][T15799]  ? x64_sys_call+0x1cbc/0x3e20
[ 1112.204153][T15799]  ? do_syscall_64+0xd9/0x210
[ 1112.209017][T15799]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1112.215290][T15799]  ? kmsan_internal_unpoison_memory+0x14/0x20
[ 1112.221622][T15799]  ? kmsan_get_metadata+0xfb/0x160
[ 1112.226917][T15799]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1112.232924][T15799]  ? kmsan_get_metadata+0xfb/0x160
[ 1112.238216][T15799]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1112.244217][T15799]  ? kmsan_get_metadata+0xfb/0x160
[ 1112.249528][T15799]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1112.255524][T15799]  ? kmsan_get_metadata+0xfb/0x160
[ 1112.260813][T15799]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1112.266817][T15799]  kmsan_internal_check_memory+0x1e1/0x230
[ 1112.272823][T15799]  kmsan_copy_to_user+0xf1/0x190
[ 1112.277957][T15799]  _copy_to_user+0xcc/0x120
[ 1112.282708][T15799]  do_insn_ioctl+0x59c/0x6d0
[ 1112.287527][T15799]  comedi_unlocked_ioctl+0xa5e/0x1f60
[ 1112.293165][T15799]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 1112.299181][T15799]  __se_sys_ioctl+0x23c/0x400
[ 1112.304047][T15799]  __x64_sys_ioctl+0x97/0xe0
[ 1112.308816][T15799]  x64_sys_call+0x1cbc/0x3e20
[ 1112.313704][T15799]  do_syscall_64+0xd9/0x210
[ 1112.318381][T15799]  ? irqentry_exit+0x16/0x60
[ 1112.323135][T15799]  ? clear_bhb_loop+0x40/0x90
[ 1112.328008][T15799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1112.334073][T15799] RIP: 0033:0x7f9ff418ebe9
[ 1112.338619][T15799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1112.358408][T15799] RSP: 002b:00007f9ff4fce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1112.366999][T15799] RAX: ffffffffffffffda RBX: 00007f9ff43b5fa0 RCX: 00007f9ff418ebe9
[ 1112.375123][T15799] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003
[ 1112.383319][T15799] RBP: 00007f9ff4211e19 R08: 0000000000000000 R09: 0000000000000000
[ 1112.391427][T15799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1112.399518][T15799] R13: 00007f9ff43b6038 R14: 00007f9ff43b5fa0 R15: 00007ffd5449bb08
[ 1112.407655][T15799]  </TASK>
[ 1112.411174][T15799] Kernel Offset: disabled
[ 1112.415574][T15799] Rebooting in 86400 seconds..