last executing test programs:

7m10.391300403s ago: executing program 0 (id=327):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x86dd, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x70bd29, 0xfffffffe, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x1, 0x0, 0x2, {@ip4=@broadcast}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x51dcb31a43476434)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

7m10.314464657s ago: executing program 0 (id=330):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB='@\r!'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

7m8.814060435s ago: executing program 0 (id=349):
r0 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00')
getdents(r0, &(0x7f0000000180)=""/46, 0x2e)

7m8.813550762s ago: executing program 0 (id=350):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$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")
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)

7m8.354659371s ago: executing program 0 (id=356):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)={0x1c, r1, 0xd2aa6461246a8139, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4040000)

7m7.280370626s ago: executing program 0 (id=365):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x48081, 0x0)
pwrite64(r0, 0x0, 0x0, 0x5)

7m6.820591067s ago: executing program 32 (id=365):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x48081, 0x0)
pwrite64(r0, 0x0, 0x0, 0x5)

4m53.381977632s ago: executing program 2 (id=2024):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x80800)
io_setup(0xff, &(0x7f0000000380)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x8d, 0x0, 0xfffb, r1, 0x0}])

4m53.249989019s ago: executing program 2 (id=2027):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001500190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)

4m53.249238055s ago: executing program 2 (id=2029):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000, 0x0, 0x4000000}, 0x20)

4m53.169616004s ago: executing program 2 (id=2031):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x8000, 0x2)

4m53.105952257s ago: executing program 2 (id=2032):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kfree\x00'}, 0x18)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
write$tcp_mem(r0, &(0x7f00000000c0)={0x6e9, 0x2d, 0x800000000002, 0x3a, 0x8, 0x2c}, 0x48)

4m52.936867657s ago: executing program 2 (id=2036):
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000003900)={0x2020, 0x0, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r4, @ANYRESOCT=r2, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYRESDEC=r4, @ANYRESHEX=r3], 0x1, 0x14ee, &(0x7f0000002400)="$eJzs3Au0jtX2MPA511qPW9Kb5L7mmg9v2lgkSS5JckmSJElyS0iSJAmJTW5JSELuSe4hucVO7vdb7klyJEkSEpKsb+ic89ep842+b5y+z/8/9vyNscZecz97rneud77jfZ/n2WPvbzsOrlq/WqW6zAz/Efz7l1QAyAQA/QDgGgCIAKBU9lLZLx3PrDH1P3sQ8dd6aNqVrkBcSdL/9E36n75J/9M36X/6Jv1P36T/6Zv0P32T/guRnm2dnudaGel3yP3/9Ew+/9M36X/6Jv1P36T/6Zv0P32T/qdv0v/0Tfqfvkn/hUjPrvT95/85I+M/nrErXcdfO67wy08IIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghRDpxLlxmAOCf8ytdlxBCCCGEEEIIIf46IeOVrkAIIYQQQgghhBD/7yEo0GAgggyQETJBZsgCV0FWuBqywTWQgGshO1wHOeB6yAm5IDfkgbyQD/KDBQIHDDEUgIKQhBugENwIKVAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6Ai3AmV4C6oDFWgKlSDu6E63AM14F6oCfdBLbgfzpX5e5V14SGoBw9DfXgEGsCj0BAaQWNoAk1/n48I8Jv82vAA1IEHf5f/InSFl6AbdIdU6AE94WXoBb2hD/SFfvAK9IdXYQC8BgNhEAyG12EIvAFD4U0YBsNhBLwFI2EUjIYxMBbGwXh4GybAOzAR3oVJMBmmwFSYBtNhBrwHM2EWzIb3YQ58AHNhHsyHBbAQPoRFsBjS4CNYAh/DUlgGy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW+AS2wXbYATthF+yGPfAp7IXPYB98Dvvhi//L/LO/y++EgIAKFRo0mAEzYCbMhFkwC2bFrJgNs2ECE5gds//XiyU35sa8mBfzY34kJGRkLIAFMIlJLISFMAVTsAgWQY8ei2NxLIE3Y0ksiaWwFJbG0lgGy2JZLI/lsQJWwIpYESthJayMlbEqVsW78W68B2tgDayJNbEW1sLaWBvrYB2si3WxHtbD+lgfG2ADbIgNsTE2xqbYFJthM2yOzbEltsRW2ApbY2tsg22wLbbFdtgO22N77IAdsCN2xE7YGTvji/givoQvYXesrHpgT+yJvbAX9sG+2Bdfwf74Kr6Kr+FAHISD8XV8Hd/AoXgGh+FwHIEjsIIahaNxDLIah+NxPE7ACTgRJ+IknIyTcSpOw+k4A2fgTJyFs/B9nIMf4Ac4D+fhAlyIC3ERLsY0TMMleBaX4jJcjitwJa7ClbgG1+IaXI8bcD1uwk24BbfgJ/gJbsftuBN34m7cjZ/ip/gZfoYDcT/uxwN4AA/iQTyEh/AwHsYjeASP4lE8hsfwOB7HE3gST+FJPI2n8QyexXN4Ds/jebyAz+f9ut7uwusGgrrEKKMyqAwqk8qksqgsKqvKqrKpbCqhEiq7yq5yqBwqp8qpcqvcKq/Kq/Kr/IoUKVaxKqAKqKRKqkKqkEpRKaqIKqK88qq4Kq5KqBKqpCqpSqlbVWl1myqjyqoWvrwqryqolr6iulNVUpVUZVVFVVXVVDVVXVVXNVQNVVPVVLVULVVbPaDqqB7YBx9SlzpTXw3CBmowNlSNVGPVRL2Bj6lmaig2Vy1US/WEGo7DsLVq5tuop1VbNRrbqWfVGHxOdVDjsKN6QXVSnVUX9aLqqpr7bqq7moQ9VE81FXup3qqP6qtmYhV1qWNV1WtqoBqkBqvX1QJ8Qw1Vb6phargaod5SI9UoNVqNUWPVODVeva0mqHfURPWumqQmqylqqpqmpqsZ6j01U81Ss9X7ao76QM1V89R8tUAtVB+qRWqxSlMfqSXqY7VULVPL1Qq1Uq1Sq9UatVatU+vVBrVRbVKb1Ra1VX2itqntaofaqXap3WqP+lTtVZ+pfepztV99oQ4oTAX4Uh1SX6nD6mt1RH2jjqpv1TH1nTquvlcn1El1Sv2gTqsf1Zlf3xsBQP2sLqhf1EUVFGjUSmttdKQz6Iw6k86ss+irdFZ9tc6mr9EJfa3Orq/TOfT1OqfOpXPrPDqvzqfza6tJO8061gV0QZ3UN+hC+kadogvrIrqo9rqYLq5v0iX0zbqkvkWX0rfq0vo2XUaX1eV0eX27rqDv0BX1nbqSvktX1lV0VV1N362r63t0DX2vrqnv07X0/bq2fkDX0Q/quvohXU8/rOvrR3QD/ahuqBvpxrqJbqof083047q5bqFb6id0K/2kbq2f0m3007qtfka308/q9vo53UE/rzvqF3Qn3Vl30b/oizrobrq7TtU9dE/9su6le+s+uq/up1/R/fWreoB+TQ/Ug/Rg/boeot/QQ/Wbepgerkfot/RIPUqP1mP0WD1Oj9dv6wn6HT1Rv6sn6cl6ip6qp+npus8/Vpr9f5D/zr/JH/Dro2/RW/UnepvernfonXqX3q336D16r96r9+l9er/erw/oA/qgPqgP6UP6sD6sj+gj+qg+qo/pY/q4Pq5P6JP6J/2DPq1/1Gf0WX1W/6TP6/P6wj+eAzBolNHGmMhkMBlNJpPZZDFXmazmapPNXGMS5lqT3VxncpjrTU6Ty+Q2eUxek8/kN9aQcYZNbAqYgiZpbjCFzI0mxRQ2RUxR400xU9zc9B/n/1l9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL532RSpSkYlMlCHKEGWKMkVZoixR1ihrlC3KFiWiRJQ9yh7liK6Pcka5otxRnihvlC/KH9mIIhdxFEcFooJRMrohKhTdGKVEhaMiUdHIR8Wi4tFNUYno5qhkdEtUKro1Kh3dFpWJykblovLR7VGF6I6oYnRnVCm6K6ocVYmqRtWiu6Pq0T1RjejeqGZ0X1Qruj+qHT0Q1YkejOpGD0X1ooej+tEjUYPo0ahh1ChqHDWJmv6l64dwJtfjvpvtblNtD9vTvmx72d62j+1r+9lXbH/7qh1gX7MD7SA72L5uh9g37FD7ph1mh9sR9i070o6yo+0YO9aOs+Pt23aCfcdOtO/aSXaynWKn2ml2up1h37Mz7Sw7275v59gP7Fw7z863C+xC+6FdZBfbNPuRXWI/tkvtMrvcrrAr7Sq72q6xa+06u95usBvtJrvZbrFb7Sd2m91ud9iddpfdbffYT+1e+5ndZz+3++0X9oD9m1XwpT1kv7KH7df2iP3GHrXf2mP2O3vcfm9P2JP2lP3BnrY/2jP2rD1nf7Ln7c/2gv3FXrTh0sn9pY93MmQoA2WgTJSJslAWykpZKRtlowQlKDtlpxyUg3JSTspNuSkv5aX8lJ8uYWIqQAUoSUkqRIUohVKoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qA76U66i+6iKlSFqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVAml9llcVe5rO5ql81d434f53Z5XF6Xz+V31uV0uf4lJudciivsiriizrtirri76Q9xGVfWlXPl3e2ugrvDVfxDXN3d42q4e11Nd5+r5u7+l7iWu9/Vdo+4Ou5RV9c1cvVcE1ffPeIauEddQ9fINXZNXCv3pGvtnnJt3NOurXvmD/Eit9itdevcerfB7XWfuXPuJ3fUfevOu59dN9fd9XOvuP7uVTfAveYGukF/iEe4t9xIN8qNdmPcWDfuD/EUN9VNc9PdDPeem+lm/SFe6D50c1yam+vmufluwa/xpZrS3EduifvYLXXL3HK3wq10q9xqt+a/al3hNrnNbovb4z5129x2t8PtdLvc7l/jS/vY5z53+90X7oj7xh10X7pD7pg77L7+Nb60v2PuO3fcfe9OuJPulPvBnXY/ujPu7K/7v7T3H9wv7qILDhhZsWbDEWfgjJyJM3MWvoqz8tWcja/hBF/L2fk6zsHXc07Oxbk5D+flfJyfLRM7Zo65ABfkJN/AhfhGTuHCXISLsudiXJxv4hJ8M5fkW7gU38ql+TYuw2W5HJfn27kC38EV+U6uxHdxZa7CVbka383V+R6uwfdyTb6Pa/H9XJsf4Dr8INflh7geP8z1+RFuwI9yQ27EjbkJN+XHuBk/zs25BbfkJ7gVP8mt+Sluw09zW36G2/Gz3J6f4w78PHfkF7gTd+Yu/CJ35Ze4G3fnVO7BPfll7sW9uQ/35X78CvfnV3kAv8YDeRAP5td5CL/BQ/lNHsbDeQS/xSN5FI/mMTyWx/F4fpsn8Ds8kd/lSTyZp/BUnsbTeQa/xzN5Fs/m93kOf8BzeR7P5wW8kD/kRbyY0/gjXsIf81Jexst5Ba/kVbya1/BaXsfreQNv5E28mbfwVv6Et/F23sE7eRfv5j38Ke/lz3gff877+Qs+wH/jg/wlH+Kv+DB/zUf4Gz7K3/Ix/o6P8/d8gk/yKf6BT/OPfIbP8jn+ic/zz3yBf+GLHBhijFWsYxNHcYY4Y5wpzhxnia+Ks8ZXx9nia+JEfG2cPb4uzhFfH+eMc8W54zxx3jhfnD+2McUu5jiOC8QF42R8Q1wovjFOiQvHReKisY+LxcXjm+IS8c1xyfiWuFR8a1w6vi0uE5eNH7mvfHx7XCG+I64Y3xlXiu+KK8dV4qpxtfjuuHp8T1wjvjeuGd8Xl4zvj2vHD8R14gfjuvFDcb344bh+/EjcIH40bhg3ihvHTeKm8WNxs/jxuHncIm4ZPxG3ip+MW8dPxW3ip+O28TN/ejw17hH3jF+OX45DuFfPTy5ILkx+mFyUXJxMS36UXJL8OLk0uSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ObklGUK1jODRK6+98ZHP4DP6TD6zz+Kv8ln91T6bv8Yn/LU+u7/O5/DX+5w+l8/t8/i8Pp/P760n7zz72BfwBX3S3+AL+Rt9ii/si/ii3vtivrhv4pv6pr6Zf9w39y18S/+Ef8I/6Z/0T/mn/NO+rX/Gt/PP+vb+Od/BP++f9y/4Tr6z7+Jf9F39S76b7+5Tfarv6Xv6Xr6X7xOB7+f7+f6+vx/gB/iBfqAf7Af7IX6IH+qH+mF+mB/hR/iRfqQf7Uf7sX6sH+/H+wl+gp/oJ/pJfpKf4qf4aX6an+Fn+Jl+pp/tZ/s5KXP8XD/Xz/fz/UK/0C/yi3yaT/NL/BK/1C/1y/1yv9Kv9Kv9ar/Wr/Xr/Xq/0W/0m/1mv9Vv9dv8Nr/D7/C7/C6/x+/xe/1ev8/v8/v9fn/AH/AH/UF/yH/lD/uv/RH/jT/qv/XH/Hf+uP/en/An/Sn/gz/tf/Rn/Fl/zv/kz/uf/QX/i7/ogx+feDsxIfFOYmLi3cSkzJMTUxJTE9MS0xMzEu8lZiZmJWYn3k/MSXyQmJuYl5ifWJBYmPgwsSixOJGW+CixJPFxYmliWWJ5YkViZWJVIoR82+JQIBQMyXBDKBRuDCmhcCgSigYfioXi4aZQItwcSoZbQqlwaygdbgtlQtlQLjwaGoZGoXFoEpqGx0Kz8HhoHlqEluGJ0Co8GVqHp0Kb8HRoG54J7cKzoX14LnQIz4eO4YXQKXQOXcKLoWt4KXQL3UNq6BF6hpdDr9A79Al9Q7/wSugfXg0DwmthYBgUBofXw5DwRhga3gzDwvAwIrwVRoZRYXQYE8aGcWF8eDtMCO+EieHdMClMDlPC1DAtTA8zwnthZpgVZof3w5zwQZgb5oX5YUFYGD4Mi8LikBY+CkvCx2FpWBaWhxVhZVgVVoc1YW1YF9aHDWFj2BQ2hy1ha/gkbAvbw46wM+wKu8Oe8GnYGz4L+8LnYX/4IhwIfwsHw5fhUPgqHA5fhyPhm3A0fBuOhe/C8fB9OBFOhlPhh3A6/BjOhLPhXPgpnA8/hwvhl3Dx179Z636lbqILIYQQQvyPkfonx3v8m++pf4xLegLA1dvzHP7tcQ0AG3P+fd5b5W2VAICnu3d86J+jcuXU1H8+7lINUcF5AJC4nJ8BLsfLoCU8CW2gBZSAf/766rd6q87n+U/WT94KkOU3OZngcnx5/Zv/7f57q1Fz/nT9eQApBS/nZIbL8eX1S/5v1s/V7E/Wz/zleIDmv8nJCpfjy+sXh8fhGWjzLz8phBBCCCGEEEL8XW9Vrv2fXd9euj7Pay7nZITL8W+vz4UQQgghhBBCCPHf03Oduzz1WJs2LdrL5L/jZLe0SSZXZnKF35iEEEIIIYQQf7nLJ/1XuhIhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEECL9+v/x78Su9B6FEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKIK+1/BQAA///apiom")
connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

4m52.769382355s ago: executing program 33 (id=2036):
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000003900)={0x2020, 0x0, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r4, @ANYRESOCT=r2, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fd000", @ANYRESDEC=r4, @ANYRESHEX=r3], 0x1, 0x14ee, &(0x7f0000002400)="$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")
connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

2m34.972933068s ago: executing program 3 (id=3636):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6)

2m34.879086329s ago: executing program 3 (id=3637):
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000005580)='/sys/kernel/vmcoreinfo', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x1335f0a6)

2m34.878468597s ago: executing program 3 (id=3639):
r0 = socket(0x22, 0x2, 0x3)
getsockopt$netlink(r0, 0x10e, 0x3, 0x0, &(0x7f00000003c0))

2m34.768401339s ago: executing program 3 (id=3640):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

2m34.648995254s ago: executing program 3 (id=3644):
r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e)
listen(r2, 0x0)
connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e)

2m34.081113224s ago: executing program 3 (id=3645):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x60, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {0x0, 0x2}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa})

2m33.985106642s ago: executing program 34 (id=3645):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x60, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {0x0, 0x2}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa})

2m7.633981162s ago: executing program 4 (id=3904):
r0 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x80, 0x2, 0x316})
io_uring_enter(r0, 0x0, 0xcbffffff, 0x7, &(0x7f0000000000), 0x8)

2m7.633709186s ago: executing program 4 (id=3905):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "128cd1"}]}], {0x14}}, 0x80}}, 0x0)

2m7.49936091s ago: executing program 4 (id=3906):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff)
syz_open_procfs$namespace(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0x0, 0x0, &(0x7f0000000040))
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
open_tree(r1, 0x0, 0x80900)
sendfile(r3, r3, 0x0, 0x200000)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[], [], 0x2f})
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000080)=0xf, 0x4)
syz_emit_ethernet(0x92, &(0x7f0000000600)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x1a, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0x4e, 0xffffffffffffffff, [{0x0, 0xa, "e256b28c59881681"}, {0x7, 0x5, "020007"}, {0x0, 0x2}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x4, "cfa1"}, {0x0, 0xd, "8475be675de6a70a05a0dc"}, {0x0, 0x6, "6580a5e9"}, {0x0, 0xe, "73bc23f9ffffffa30900a301"}, {0x0, 0x9, "c8f46976e79ea7"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0)
recvfrom$inet(r4, 0x0, 0x0, 0x7eabfcf2497233c6, 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/105, 0x69)

2m6.496808024s ago: executing program 4 (id=3917):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB='allow_utime=00000000000000000000304,dmask=00000000000000000000011,errors=remount-ro,umask=00000000000000000000020,fmask=00000000000000000000004,discard,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d63703933362c6572726f72733d636f6e74696e75652c74696d655f6f66667365743d3078303030303030303030303030303030382c616c6c6f775f7574696d653d30303030303030d64a64d762d35037932d303030303030303032303030303030302c00"], 0x1, 0x152a, &(0x7f0000000340)="$eJzs3AuYjtXaOPD7Xms9Y0zS2ySHYa11P7zJYZkkySFJDkmSJElOCUmTbElIDDklDUlIDkNyGEJyiknjfMj5lJAkTZKE5JSs/zXhs9u1/3vvb/dlX3vu33W916z7Xc+9nvW893tYz/POzLedh9RoVLNqAyKCfwte+JEMALEAMAAArgGAAADKxpeNz+rPKTH539sJ+2M9lHalZ8CuJK5/9sb1z964/tkb1z974/pnb1z/7I3rn71x/RnLzjZNK3At37Lvja//Z2f8+f9fJLPUmC/Xlrq+C0DMP5vC9c/euP7/tYJ/ZiOuf/bG9c+uYq/0BNh/AH79Zwc5/m4P1z974/ozlp39udeb5X/c9w0Q+XMfAwVX/ph/dfyMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxtif4LS/TAHApfaVnhdjjDHGGGOMMcb+OD7HlZ4BY4wxxhhjjDHG/u8hCJCgIIAYyAGxkBPiQADA1ZAbroEIXAvxcB3kgeshL+SD/FAAEqAgFAINBiwQhFAYikAUboCicCMUg+JQAkqCg1KQCDdBabgZysAtUBZuhXJwG5SHClARKsHtUBnugCpwJ1SFu6AaVIcaUBPuhlpwD9SGe6EO3Ad14X6oBw9AfXgQGsBD0BAehkbwCDSGR6EJNIVm0Bxa/K/yX4Du8CL0gJ6QDL2gN7wEfaAv9IP+MABehoHwCgyCVyEFBsMQeA2GwuswDN6A4TACRsKbMAregtEwBsbCOEiF8TAB3oaJ8A5MgskwBaZCGkyD6fAuzICZMAveg9nwPsyBuTAP5sMC+AAWwiJIhw9hMXwEGbAElsIyWA4rYCWsgtWwBtbCx7AO1sMG2AibYDNsga2wDbbDDvgEdsKnsAt2wx74DPbC5/9i/qm/ye+CgIACBSpUGIMxGIuxGIdxmAtzYW7MjRGMYDzGYx7Mg3kxL+bH/JiACVgIC6FBg4SEhbEwRjGKRbEoFsNiWAJLoEOHiZiIpfFmLINlsCyWxXJYDstjBayAlbASVsbKWAWrYFWsitWwGtbAGng33o29sDbWxjpYB+ti3UuXp7ABNsCG2BAbYSNsjI2xCTbBZtgMW2ALbIktsRW2wjbYBttiW2yH7TAJk7A9tscO2AE7YkfshJ2wM3bGLtgVu2a+kAPwRXwRe2I10Qt7Y2/sgyk5+mF/7I8v40B8BV/BVzEFB+MQfA1fw9dxGJ7E4TgCR+JIrCzewtE4BkmMw1RMxQk4ASfiRJyEk3EyTsU0nIbTcTrOwJk4E9/D2fg+vo9zcS7OxwUIuBAXYTqm42I8hRm4BJfiMlyOK3A5rsLVuArX4se4FtfjetyIG3EzbsatuBW343b8BBUAfoq7cTem4F7ci/twH+7H/XgAD2AmZuJBPIiH8BAexsN4BI/gUTyGx/EYnsATeBJP4Wk8jWfxLJ7D5xK+bvhJ8TUpILIooUSMiBGxIlbEiTiRS+QSuUVuERERES/iRR6RR+QVeUV+kV8kiARRSBQSRhhBIowBABEVUVFUFBXFRDFRQpQQTjiRKBJFaVFalBFlRFlxqygnbhPlRQXR2klRSVQWbVwVcaeoKqqKaqK6qCFqipqilqglaovaoo6oI+qKuqKeeEDUF72wHz4ksirTSAzGxmIINhFNhbz4DtZSDMNWorVoI54QI3A4thMtXZJ4WrQXo7GD+IsYg8+KTmIcdhbPiy6iq+gmXhDdRSvXQ/QUk7CX6C2mYh/RV/QT/cUMrC7ew9k5a4hXRYoYLIaI18R8fF0ME2+I4WKEGCneFKPEW2K0GCPGinEiVYwXE8TbYqJ4R0wSk8UUMVWkiWliunhXzBAzxSzxnpgt3hdzxFwxT8wXC8QHYqFYJNLFh2Kx+EhkiCViqVgmlosVYqVYJVaLNWKt+FisE+vFBrFRbBKbxRaxVWwT28UO8YnYKT4Vu8RusUd8JvaKz8U+8YXYL74UB8RXIlN8LQ6Kb8Qh8a04LL4TR8T34qg4Jo6LH8QJ8aM4KU6J0+KMOCt+EufEz+K88AIkSiGlVDKQMTKHjJU5ZZy8SuaSwcVH91oZL6+TeeT1Mq/MJ/PLAjJBFpSFpJZGWkkylIVlERmVN8ii8kZZTBaXJWRJ6WQpmShvkqXlzbKMvEWWlbfKcvI2WV5WkBVlJXm7rCzvkBC5sI9qsrqsIWvKu2Uy3CNry3tlHXmfrCvvl/XkA7K+fFA2kA/JhvJh2Ug+IhvLR2UT2VQ2k81lC/mYbCkfl61ka9lGPiHbyidlO/mUTJJPy/bSX3yKPCs7yedkZ/m87CK7ym7yZ3leetlD9pTQC2Rv+ZLsI/vKfrK/HCBflgPlK3KQfFWmyMFyiHxNDpWvy2HyDTlcjpAj5ZtylHxLjpZj5Fg5TqbK8XKCfFtOlO/ISXKynCKnyjQ5Tfa7ONIsKf9h/tu/kz/ol71vlJvkZrlFbpXb5Ha5Q34id8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMlNmyoPyoDwkD8nD8rA8Io/Io/KYPCN/kCfkj/KkPCVPyTPyrDwrz118DEChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiE0aVUCWVU6VUorrpX8lXRdWNqpgq/qv8S/NL/jvza6FaqJaqpWqlWqk2qo1qq9qqdqqdSlJJqr1qrzqoDqqj6qg6qU6qs+qsuqguqpvqprqr7qqH6qGSVbLqrV5SfVRf1U/1VwPUy2qgGqgGqUEqRaWoIWqIGqqGqmFqmBquhquRaqQapUap0Wq0GqvGqlSVqiaoCWqimqgmqUlqipqi0lSamq6mqxlqhpqlZqnZaraao+aoeWqeWqAWqIVqoUpX6WqxWqwy1BK1RC1Ty9QKtUKtUqvUGrVGZa2/1qv1KkNtUpvUFrVFbVPb1A61Q+1UO9UutUvtUXvUXrVX7VP71H61Xx1QB1SmylQH1UF1SB1Sh9VhdUQdUUfVUXVcHVcn1Al1Up1Up9VpdVadVefUOXVenc9a9gUiEIEKVBATxASxQWwQF8QFuYJcQe4gdxAJIkF8EB/kCa4P8gb5gvxBgSAhKBgUCnRgAhuIi0WPBjcERYMbg2JB8aBEUDJwQakgMbgpKB3cHJQJbgnKBrcG5YLbgvJBhaBiUCm4Pagc3BFUCe4MqgZ3BdWC6kGNoGZwd1AruCeoHdwb1AnuC+oG9wf1ggeC+sGDQYPgoaBh8HDQKHgkaBw8GjQJmgbNguZBiz90fO9P5nvc9dA9dbLupXvrl3Qf3Vf30/31AP2yHqhf0YP0qzpFD9ZD9Gt6qH5dD9Nv6OF6hB6p39Sj9Ft6tB6jx+pxOlWP1xP023qifkdP0pP1FD1Vp+lperp+V8/QM/Us/Z6erd/Xc/RcPU/P1wv0B3qhXqTT9Yd6sf5IZ+gleqleppfrFXqlXqVX6zV6rf5Yr9Pr9Qa9UW/Sm/UWvVVv09v1Dv2J3qk/1bv0br1Hf6b36s/1Pv2F3q+/1Af0VzpTf60P6m/0If2tPqy/00f09/qoPqaPqx/0Cf2jPqlP6dP6jD6rf9Ln9M/6vPZZi/usj3ejjDIxJsbEmlgTZ+JMLpPL5Da5TcRETLyJN3lMHpPX5DX5TX6TYBJMIVPIZCFDprApbKImaoqaoqaYKWZKmBLGGWcSTaIpbUqbMqaMKWvKmnKmnClvypuKpqK53dxu7jB3mDvNneYuc5epbqqbmqamqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYZqaZaWFamJampWllWpk2po1pa9qadqadSTJJpr1pbzqYDqaj6Wg6mU6ms+lsupguppvpZrqb7qaH6WGSTbLpbXqbPqaP6Wf6mQFmgBloBppBZpBJMSlmiBlihpqhZpgZZoabEWZk1kLVvGVGmzFmrBlnUk2qmWAmmIlmoplkJpkpZopJM2lmupluZpgZZpaZZWab2WaOmWPmmXlmgVlgFpqFJt2km8VmsckwGWapWWqWm+VmpVlpVpvVZq1Za9bBOrPBbDCbzCazxWwx28w2s8PsMDvNTrPL7DJ7zB6z1+w1+8w+s9/sNwfMAZNpMs1Bc9AcMofMYXPYHDFHzFFz1Bw3x80Jc8KcNCfNaXPanDX5Ln5eehNrc9o4e5XNZa+2ue019m/j/LaATbAFbSGrbV6b71exsdYWs8VtCVvSOlvKJtqbfhOXtxVsRVvJ3m4r2ztsld/Etew9tra919ax99ma9u5fxXXt/baefcTWRwSwTW1D29w2so/YxvZR28Q2tc1sc9vWPmnb2adskn3atrfP/CZeaBfZ1XaNXWs/trvsbnvanrGH7Lf2rP3J9rA97QD7sh1oX7GD7Ks2xQ7+TTzSvmlH2bfsaDvGjrXjfhNPsVNtmp1mp9t37Qw78zfxAvuBnW3T7Rw7186z83+Js+aUbj+0i+1HNsMGsNQus8vtCrvSrvqfuS6z6+0Gu9HutJ/aLXar3Wa32x2XFsJ2t91jP7N77ef2oP3G7rdf2gP2sM20X/8SZx3fYfudPWK/t0ftMXvc/mBP2B/VpeysY//B/mzPW2+BkIAkKQoohnJQLOWkOLqKctHVlJuuoQhdS/F0HeWh6ykv5aP8VIASqCAVIk2GLBGFVJiKUJRuoEvTK0ElyVEpSqSbqDTdTGXoFipLt1I5uo3KUwWqSJXodqpMd1AVupOq0l1UjapTDapJd1Mtuodq071Uh+6junQ/1aMHqD49SA3oIWpID1MjeoQa06PUhJpSM2pOLegxakmPUytqTW3oCWpLT1I7eoqS6GlqT89QB/oLdaRnqRM9R53peepCXakbvUDd6UXqQT0pmXpRb3qJ+lBf6kf9aQC9TAPpFRpEr1IKDaYh9BoNpddpGL1Bw2kEjaQ3aRS9RaNpDI2lcZRK42kCvU0T6R2aRJNpCk2lNJpG0+ldmkEzaRa9R7PpfZpDc2kezacF9AEtpEWUTh/SYvqIMmgJLaVltJxW0EpaRatpDa2lj2kdracNtJE20WbaQltpG22nHfQJ7aRPaRftpj30Ge2lz2kffUH76Us6QF9RJn1NB+kbOkTf0mH6zvek7+koHaPj9AOdoB/pJJ2i03SGztJPdI5+pvPkCUIMRShDFQZhTJgjjA1zhnHhVWGu8Oowd3hNGAmvDePD68I84fVh3jBfmD8sECaEBcNCoQ5NaEMKw7BwWCSMhjeERcMbw2Jh8bBEWDJ0YakwMbwpLB3eHJYJbwnLhreG5cLbwvJhhfCR+yqFt4eVwzvCKuGdYdXwrrBaWD2sEdYM7w5rhfeEtcN7wzrhfWGZ8P6wXvhAWD98MGwQPhQ2DB8OG4WPhI3DR8MmYdOwWdg8bBE+FrYMHw9bha3DNuETYdvwybBd+FSYFD4dtg+f+aX//kV/vz857BX2Dl8KXwq9v1fOi86PLoh+EF0YXRRNj34YXRz9KJoRXRJdGl0WXR5dEV0ZXRVdHV0TXRv9OLouuj66Ibox6n3NHODQCSedcoGLcTlcrMvp4txVLpe72uV217iIu9bFu+tcHne9y+vyufyugEtwBV0hp51x1pELXWFXxEXdDa6ou9EVc8VdCVfSOVfKJbrmroVr4Vq6x10r19q1cU+4J9yT7kn3lHvKPe3au2dcB/cX19E96zq559xz7nnXxXV13dwLrrsbn/vCazLZ9Xa9XR/Xx/Vz/dwAN8ANdAPdIDfIpbgUN8QNcUPdUDfMDXPD3XA30o10o9woN9qNdmPdWJfqUt0EN8FNdBPdJDfJTXFTXJpLc9PddDfDzXCVZ17Yyxz3DgDMcwvcArfQZa0Z091it9hluAy31C11y91yt9KtdKvdarfWrXXr3Dq3wW1wm9wmt8VtcdvcNrfD7XA73U63y19zYVC31+1z+9x+t98dcF+5TPe1O+i+cYfct+6w+84dcd+7o+6YO+5+cCfcj+6kO+VOuzPurPvJnXM/u/POu9TI+MiEyNuRiZF3IpMikyNTIlMjaZFpkemRdyMzIjMjsyLvRWZH3o/MicyNzIvMjyyIfBBZGFkUSY98GFkc+SiSEVkSWRpZFlkeWRHxvuCW0Bf2RXzU3+CL+ht9MV/cl/AlvfOlfKK/yZf2N/sy/hZf1t/qy/nbfHlfwVf0j/omvqlv5pv7Fv4x39I/7lv51r6Nf8K39U/6dv4pn+Sf9u39M76D/4vv6J/1nfxzvrN/3nfxXX03/4Lv7l/0PXxPn+x7+d7+Jd/H9/X9fH8/wL/sB/pX/CD/qk/xg/0Q/5of6l/3w/wbfrgf4UfGvOlHXTpFhnE+1Y/3E/zbfqJ/x0/yk/0UP9Wn+Wl+un/Xz/Az/Sz/np/t3/dz/Fw/z8/3C/wHfqFf5NP9h36x/8hnxP7PRWW/0q/yq/0av9Z/7Nf59X6D3+g3+c1+i9/qt/ntfof/xO/0n/pdfrff4z/ze/3nfp//wu/3X/oD/iuf6b/2B/03/pD/1h/23/kj/nt/1B/zx/0P/oT/0Z/0p/xpf8af9T/5c/5nf57/Zo0xxhhj7J8y/nJT/LrnwuX8Xr+TI/5q494AcPXWApl/3Z+1olyX90K7r0hoGwGAp3t2fujSrVq15OTki9tmSAiKzAW49E1Qlhi4HC+BNvAkJEFrKP278+8rup6lfzB+9FaAuL/KyVqmXoovj/8FACb/zviPPTFyYbnwdPz/Z/y5AMWKXM7JCZfjJdDml+srraHM35l/vpb/YP45v0wFaPVXObngcnx5/onwODwDSb/akjHGGGOMMcYYu6CvqNjx0vnnpd/4/L3z8wR1OScHXI7/0fk5Y4wxxhhjjDHGrrxnu3Z76rGkpNYd//VGlf9V1j/daAz/VyNz43cb3gNcukcBwL85IEBWQ/6ZR7H5T9lXysWXzt92LT/jA/jPKOUf0bjCb0yMMcYYY4yxP9zlRf+v71dXakKMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxlg29Gf8O7ErfYyMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbYlfb/AgAA///HLfwS")
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000001880), 0x800000, &(0x7f00000018c0)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x35]}}]})

2m6.319446616s ago: executing program 4 (id=3920):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f0000001640)=0x7fffffffffffffff, 0x12)

2m6.070227169s ago: executing program 4 (id=3923):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d7010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90)

2m5.966467042s ago: executing program 35 (id=3923):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d7010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90)

1m43.960267391s ago: executing program 6 (id=4155):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_LINK(r0, 0x40044160, &(0x7f0000000040)=0x4)

1m43.879333057s ago: executing program 6 (id=4156):
r0 = syz_usb_connect(0x0, 0x11b, &(0x7f00000009c0)={{0x12, 0x1, 0x141, 0xc, 0x4d, 0xcd, 0x20, 0x174f, 0x8a34, 0xfdd5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x109, 0x1, 0x1, 0x0, 0x78, 0x6, [{{0x9, 0x4, 0xe8, 0x7, 0x0, 0xe, 0x1, 0x0, 0x0, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, 'J#'}, {0x5, 0x24, 0x0, 0xfffb}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x1, 0xdb, 0x5}, {0x6, 0x24, 0x1a, 0x4}, [@obex={0x5, 0x24, 0x15, 0x5}, @mdlm_detail={0xc8, 0x24, 0x13, 0x0, "12fff72f5cc1f04bfc199e8f76c1cc8b7aee71110e59886ab835368aa7903a3f38b723e6835c1f108b5cc9680f82c27b5639b30f07aa0c23de329cd06825a879387413045a302f85e1a02ac0f5979226e37f947ecfb37804f5fbf6125b8ae66140d49f48891c7021a9df1ef84b9223eb3ab7e843ca46a2d578620be4f16ded3d71efd850f3ac7649aaf0681fe14389f150c1c7af136474918526d99b8cfb5627786b1631c8d8a13f07bd8ab64662a5723585235c08ff2a031957ee6585543c352166a15e"}, @acm={0x4, 0x24, 0x2, 0x3}, @dmm={0x7, 0x24, 0x14, 0x9, 0x7}]}]}}]}}]}}, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c15}}}, 0x0)
syz_usb_control_io$lan78xx(r0, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)

1m42.128128029s ago: executing program 6 (id=4176):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000adc000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000005000740c5000000a8000480a40001800e000100696d6d656469617465"], 0x104}, 0x1, 0x0, 0x0, 0x4800}, 0x40804)

1m42.058304433s ago: executing program 6 (id=4178):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00')

1m42.057940879s ago: executing program 6 (id=4179):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000280)={r2, 0x2, 0x6, @local}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

1m41.810194273s ago: executing program 6 (id=4185):
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
getrlimit(0x6, &(0x7f0000000000))

1m41.71784469s ago: executing program 36 (id=4185):
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
getrlimit(0x6, &(0x7f0000000000))

24.755374212s ago: executing program 5 (id=5222):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
write$cgroup_devices(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='b *:'], 0x9)

24.691851009s ago: executing program 5 (id=5224):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r1, 0x2, 0x40000009, r2, 0x0)

24.612825338s ago: executing program 5 (id=5225):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x38133, 0x4)

24.607851242s ago: executing program 5 (id=5227):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x1010051, &(0x7f0000000240)={[{@debug}, {@inlinecrypt}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@resuid}]}, 0x1, 0x550, &(0x7f00000002c0)="$eJzs3dFrZFcZAPDv3mR2s7upmaoPtWAttrJbdSebxm2DD6uC6FNBrfgkrDGZhLCTzJJM2k1YbIqvgiCiBV/0yRfBP0CQvvguQqG+i4oiddc+KLS9cmfudJPJTJLSmblL8vvB2XvPPTP3+86EOXPuzN17AziznoyIKxExERHPRMRMsT0tSux1Sv64+/fuLuUliSx78a0kkmJbd1/ni+Wl4mlTEfGtr0d8Pzkcd2tn99Zio1HfLOqzrfXknSzbvbq2vrhaX61vzM/PPbfw/ML1hWtD6Wc1Im589e8/+/Gvv3bj959/+S83/3nlB3la/8uyV6KnH8PU6Xql/Vp0TUbE5iiClWSy3cOO6yXnAgDA0fL5/kcj4tPt+f9MTLRncwAAAMBpkn1pOt5JIjIAAADg1EojYjqStFac7ztdnLF6KSI+HhfTRnOr9bmV5vbGct4WUY1KurLWqF+Lqfa5A9WoJHl9rjjHtlt/tqc+HxGPRsRPZy6067WlZmO57C8/AAAA4Iy41HP8//ZMmtZqReNeyckBAAAAw1MtOwEAAABg5Bz/AwAAwOlXzfrcoeuwdPSZAAAAACPwjRdeyEvWvf/18ks727eaL11drm/dqq1vL9WWmpu3a6vN5mr7mn3rx+2v0Wze/kJsbN+ZbdW3WrNbO7s315vbG62bawdugQ0AAACM0aOfev3PSUTsffFCu+TOFW2ViGxi/4Mny8gQGJUPdE7P30aXBzB++z/fL5SYBzB+pvRwdlXKTgAo3XH/AWjgyTt/HH4uAADAaFz+xODf/99aKTU1YMSK3/+TE10ABDhVJspOAChN5/e/97KOsrMBxqly1AzAQQGceulwfv8/5lTCxIACAAAlm26XJK0VxwHTkaa1WsQj7dsCVpKVtUb9WkR8JCLenKmcz+tz7WcmZvMAAAAAAAAAAAAAAAAAAAAAAAAAcEJZlkQGAAAAnGoR6T+6d+a6PPP0dO/3A+eS/860lxHx8i9e/PmdxVZrcy7f/u/3t7deK7Y/W8Y3GAAAAECv7nF69zgeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIbp/r27S/ezLMvu3V2KeHt6XHH/9ZWIqBbxi9JpmYyp9nIqKhFx8T9JTO57XhIRE0OIv/dqRDzWL36SpxXVIosD8c9FpBFxYVjx4wPGj078S0OID2fZ6/n48+V+7780nmwv+7//JovyYQ0e/9L3x7+JAePfI4N2WjlYffyN384OjP9qxOOT/cefbvwk31+f+E+dsI/f+/bu7qC27FcRl/uNf8nBWLOt9duzWzu7V9fWF1frq/WN+fm55xaeX7i+cG12Za1RL/7tG+Mnn/zdew9q7x7q/8Ujxt92/we8/k+fsP/vvnHn3sc6qz1/majEL7PsylP9//6P5YvPHo7f/ez7TPE5kNfz1zB97Tt94z/xmz89MSi3vP/LA/o/1dP/8z39v3LC/j/zzR/+9YQPBQDGYGtn99Zio1HftLJ/JaoPRRoP70o+7xxTrBsR0b8piSTylTcPNC2OK7HjVl4p3mOLje67bUh7/kNxcDTK5EsajwAAgNF5MOnvbUnKSQgAAAAAAAAAAAAAAAAAAADOoGMvAzaoKY2IB1u++6MjrkbWG3OvnK4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzp/wEAAP//muXWAg==")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000880)=@generic={&(0x7f0000000840)='./file2/../file0\x00', 0x0, 0x10}, 0x18)

24.465705844s ago: executing program 5 (id=5231):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
write(r0, &(0x7f00000002c0)="240000001e005f0214fffffffffffff80f00000000000000000008fff4000d40ff000000", 0x24)

23.047713154s ago: executing program 5 (id=5240):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x8}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x1}, @IFLA_GENEVE_DF={0x5, 0xd, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

22.938817535s ago: executing program 37 (id=5240):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x8}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x1}, @IFLA_GENEVE_DF={0x5, 0xd, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

3.515088808s ago: executing program 7 (id=5472):
r0 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x84)
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
close(0x3)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020)

1.641984539s ago: executing program 8 (id=5493):
userfaultfd(0x80001)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x356e, 0x800, 0x1, 0x40000334}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)
mount(0x0, 0x0, &(0x7f00000000c0)='btrfs\x00', 0x4418, 0x0)

759.64239ms ago: executing program 8 (id=5495):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
fchown(r0, 0x0, 0x0)

670.101047ms ago: executing program 8 (id=5497):
r0 = socket(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00')
r2 = socket(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x59)
preadv(r1, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/1, 0x1}], 0x1, 0x4000a3, 0x0)

600.260081ms ago: executing program 8 (id=5500):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000007"], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

535.241475ms ago: executing program 8 (id=5502):
r0 = syz_mount_image$btrfs(&(0x7f00000000c0), &(0x7f00000015c0)='./file0\x00', 0x2000000, &(0x7f0000001400), 0x0, 0x559e, &(0x7f0000001600)="$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")
ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, 0x0)

470.408827ms ago: executing program 7 (id=5503):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e22, @rand_addr=0x64010100}, {0x0, @local}, 0x12, {0x2, 0x4e20, @rand_addr=0x64010101}, 'sit0\x00'})

349.037656ms ago: executing program 7 (id=5504):
r0 = socket(0xa, 0x3, 0x3a)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x0)

331.300042ms ago: executing program 1 (id=5505):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000007c0))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)

327.087233ms ago: executing program 1 (id=5506):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2, 0x400000000000003, 0x20, 0x0, 0x19, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}}, @sadb_lifetime={0x4, 0x4, 0x0, 0xfffffffffffffffe}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x5, @private1}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x0, 0x3501}]}, 0xc8}}, 0x0)

260.949455ms ago: executing program 7 (id=5507):
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x8, 0x0)
msgrcv(r0, &(0x7f0000000280)={0x0, ""/55}, 0x3f, 0x0, 0x86b1b18158a7cb82)

260.652507ms ago: executing program 1 (id=5508):
r0 = socket$inet6(0xa, 0x80003, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x16, 0x0, 0x0)

183.158935ms ago: executing program 7 (id=5509):
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none')

183.02097ms ago: executing program 1 (id=5510):
r0 = socket$inet(0x2, 0x3, 0x6)
sendto$inet(r0, &(0x7f0000000000)="9a9c94", 0x3, 0xdb1012533cb3bb92, &(0x7f0000001080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)

109.650087ms ago: executing program 8 (id=5511):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x4, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32, @ANYRES8, @ANYRES64=0x0, @ANYRES32, @ANYRES64], 0x1, 0x5abd, &(0x7f0000006440)="$eJzs3X+QHFd9IPDXM7PaX/qxkk0sbLxaC+vimIBW/lX8SAUll0DKJpQop4jlE9hra+UIVrJKP2JbmCDnbA6VDQUpUolJqs6hDHeAQrkKLlhx4dj4JB8YVL5wrivjOsgZ/uDK8VkV2zoXxbGpnek3O9MzvT07O7uWzOdT0vb0m55vv379pqe/r3t3AgAAAL8Ujt+179R7z/3d7/zp5Msf+72/33VHGC5XywfiAiPp9NZXq4Yspf7K2uo02y9+9SNf/snYjb/97QeGvvDKse0X7PjB75x140MfuvLovX/16Esrvv6LZ4vixv508ex88nwSwsA3T/75x489cc5MWbJy5mfpUAirkzWPrk5CuLMxxPjPQgjb05m19eKrqz+/9vKlO2amd9zd37TeVZl66O+/3Gb2cxJCOHjqljeFH/7W1ju/t+6rf9t35LlDs4skAw39KYSV1ze+vi+EMJj+nxF7W+yPSTrdEkIYanjdWwvq9cYO6j1jY6Y8zp+XTpel0+GCePH59Zn5Uma57HzUl5kOFaxvofLq0e1yRZZn5pMexY3y6hnLV6fTb6TTi+cZv5xuQzkJpSRU6tWfSmb7SGjYb0lIqvtyoD5fqu/bkG5/Zj7JzJcy8+W+zHZV15t2tHKSNJfH5TLl8XBcScsvaDxWt3F1w+PG5V4fy9I36ivZZTJBh1se1LerKtbr5Bx1WQqlhmNQu/L6jk93xnBaNpysaXnNdBvxuWNb79lQ3vat4yM59UgeSNL4SVfxD3539fIPfuXwgbV58a8vpfFLXcX/0VUnXrj28Oc/lxv/0zF+uav4lzw89PxVj921Prd9Tsb2qXQVf+LZxz+57uwbjuTW/74Yf6Cr+JuPnuhfcerhR3LrPx7bZ7Cr+M+8410//tJTDz6XGz/E+ENdxd92dM+n+kdPXZQb/5HYPsPd9Z8Xj1zx9OjoT8fy4j8Z46/oKv4XD/W//f5Vd1+Zu3+3xPYZ6Sr+ey586M7lpx48P+/YmdzXq09OgF9OZ6XnWJ9I57vNMxeqIV/4y7FK7Zxvefp/RS9XlDn5zOYJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANALr3vTf3v3/37/yPOVdL4/ffBMqTaN5ctCSAZDCPv2T+zdv3P3TWMfuvnA3t0TU2MT+8cmd+/fe9vYZb8+tndyz9TEbTPPjr/50trr1oSkNk3Ob1l3//T0dGmkuSyu799eeOSHG976f/45hPHXfX+0klv/jffuuv/sNj8zks3T79x14L3fv/xv0u0aSes10qZe09PT0yGnXv/3mp/f/2cnf3JRCOO/Mle9Hn/mN/+hqULVgtk4qVJ/qFWoPxlqW496rdP6xPaq7Ng5NTk+d/vOvL6csx3/7iPP/WzHrZ/5ea19B3K3o8P2Hdw8PVX6i63v+f9/cXutoKher9Z+n2nvck7MmXrFrYj1i+03kLb3ynS7VuZsVyVnu+763iNPffPcwy8dCuOVF9e17uui7epLO0Bf8vqO1hvXMJSsbiofSJePezy+buP+XXs27rvt4Jt37pq4afKmyd1v23TZpivGL7/i8o3VLd/Y4+2P6/83HW7/0vSnVX986BvxZ2f9qbley+bdHjP1Km6Pxhrlvf+Grv74Z99272PvrRUUHVfi0vXjSTodmtnPm0JDf2ttq3bbVbR/Qghj7drhhZeuDOf8z513Fh2HGvdM48+MZPP0E+v/5W/e+tdrf6NWsCTH+cYKdXmcr9d6tj7V9hpI98f0adq+/enRtD8ZbluvTU881nfP8X/+aL1+y5aFWyf279+7qfZzeVrT5cl5beuVLY3bta76sxzSZgn1btqmv87oC7X6ZY+fcfFsqw6nzw0na9puV1Z87tjWezaUt33reF5LJw/U1jgYVtSmyRtylpzKvLBcr3C79Z+u77+i/jH67r/++vu//neXtfSPS2o/i7Yrydmurz71xc9+4TP/4e96t13v/s0TI//yv/5oQ61gCY4rYUHHlXKtIvVap/VJGo8rl4RQ9P5bF9pvR+77r9R+e4ref9n1zC7fPt5YZn44lLt6v17y8NDzVz121/rc9+vJud6vjRt7e9PrygXv19Plcyn7/koqzfVYvPdXU0dJNk9/+xNnHXr0Y1vOrRUUfV7Wl27Xry/tIP/I2a5/uPbp0ZvH/v3/6N1x48u//rXrfjCx+U9qBd3v91iX3uz3gbR9B3Lat17rmHc2tu9bbrx5anutvKidX73z33RakP/EQ8m+2w5+eGJqanLvvs62q9PP07iebCt3+3kaj25rCrar1LJdi/Ug7OukvTp9v8X6b++6vZrfb8Mh6epz4eB3Vy//4FcOHxhpeVW6outLafxSV/F/dNWJF649/PnP5cb/dIxf6Sr+xLOPf3Ld2TccyY1/X5LGHyiOvzK0xN989ET/ilMPP5IbfzzWf7Cr+j/zjnf9+EtPPfhcbvwQ4w931/4vHrni6dHRn+bGfzJJ1zNzjhTC116+dEdtPgl96fst1qOvqV4hO59k5kuZ+XLjfCmOIqQrKCdJc3lcLi2/oKEu7fxhTnk8CxtYW5u+EudD9sHc5aebUsOxv135HOep/3Gx6wYAcDqI1//jOWi8/j+ZnijljzTArIXmYWtz4sY8bHY8p/ka69o0fnx9HAccfUsYn5neMVY70Z/vdYT4fsiOc8b1XPTG5hhtxyeONq6kuv6Wcc6i8ff1mflYr9p4eaUhD0215jWV0MH4e+t65h5/z2x+8fWssU+0VGusYdwqu//60hGzdvc7ZOpbmYmQ1z+y42Lxfo7RlWFLdX0d9o/sfTRxP2Tvo4nrOTdz4Oz2Ppq8/jHS2g5N9Yr9Iy43R/+oVrn4emTr/gtztO/s/msfLbv/5rG/B2aWX+zrsz0YN2x7SFu6ccPFvR52WoxLtom/xOOSy1vip2+w033cMJbHdqp0OJ74/pzyXo0nxsNFrNfJOeqyFBYwnghwWov5f/yMmMn/Z07A/19muTnylOrHUPasMcbLvU8o5ybsoryj9T69oa4+x7cd3fOp/tFTF+We5zzS6X16e5rmhgru+ynK9zZk5gvbMWeApijfy66nqN2z92UMhxVdtfsXD9379vtX3X1lbrtvqX2QFrf7Z5vmVhS0+xmQL7SPL194LeULrfF7dB9D0fhZfj5SrtdjUfKR9ManxcpH/iCnfL75yFDLg/p2VZ2++cjsB2lTPtK3tPUCAM4cMf+vXz9L8/9/iicW6XlEUd56cWY+xsvNW3POT/Ly1t9Pp7dmlh9Of6NivufN77nwoTuXn3rw/Ny85b5O89D/3DQ3UpiHLixvzs0jtvTmfvHcPKKeZy0sT8ytfz1PXFiennOZtiFPX1gends+9Ty6eRzgsydmM4254sdxgNz49XGAHua5v5hdaOny3ILxuszK4myn43VLnUfPlPStbN7O5rx4qDd5dPrrs4uVR1+dUz7fPHq45UF9u6pO3zy6uVweDQC8VsX8P57GVfP//hAeiwsMxgcLu86emxf06Lw9+/dA6vGfXJS8cjZ+j67/Fud9i523LnZev9jjEmf69d/FHhcaqf4Bz8UaJ3vV7nddlLz4n+qPcvLievvU8+J0pfJiAABOZzH/j2l+vP7/WGa5heYnLflbX+0UcjY/OfPy88blzuD8/JqwVPl5/5mcn5/p41+Le5/Mayv/n9XldfFXpl/D+X+1zvJ/AIAzUsz/4689xr//91/T+ezfre8wT78vezuv6+iuowd5egd5eo/H2WL8xvsAzuBxgPLCxwEGl/z++MHZ5V9L4wBVfcFgAADAGaCvmim1/p79B9Jp9vfs834v/9qc5TtVSU+Pb9i/d3LyugN7tk/sn7xu983bJ/ddd8venfv3T9bPnReWN+bmLWne2BcqaXu0Xy6bt61K/x7Cqpy/h5BdPoY9r/qg9e8hZFc7WPB3BGb3X2f1zdt/pTmWb9c/8vZ3Xvw/zFk+qu//G//okut27Ltu5+6d+3dOTO08ONm83Ej1N6k7/97MeJ1yXt+XmvnRojT/7++Mu2dh9Si11KMvbY+872dPMvVYndZkdd73H+TU+zv//c/++MLpn38phPHXld+woPZLNk//l2smf3//8e/vmal/ac7615dM61X0faXZ5eP2VKZu3rf/TTtuPrA7+42S3YnjGaX6/CLd15C+/csdjk9syymf7+/vl1senJ46Hp8AAKBJvP4fz2fj9cPPpCdQsbwwT99dW26h149z8/TxzvL07PeSzebpgx0tH7e30zx9YIF5enb9RXl6u+Xb5el5eXde/D/IWX6+Ou8n87/PYyou8JXDB3L7yfWd9ZPs9xkUjedkl59vP0kW2E+y6y/qJ+2Wb9dP8vZ7Xvz35Syfp6g/VOr9YWH35eT2h0931h9+LTNf1B+yy8+3P5QW2B+y6y/qD+2Wb9cf8vZva/zmAYLejP/OdIxqv5i87pab9364YblO+kc55PePou+/CK23ZHRSv2Wzr13c7//oVuftu7j3fS28/iFsrpbk1T9eH1g2r/p3el/Zwutf1P7zuK9sZWi5ryy3/k8ubCSs8/rP677EO+JznX6/S0be4q2vX6rx2rTbFd1/VjSOuzWnfL7juMtaHpyejOPCqyfm//FsLub/d6fTXl8GOvO/J62L++/jMdj3mOW3f4fnMaf55/lHs/Ve8Od59pJ7m8/zJP+y/JLzeQ4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQmf7K2ur0+F37Tr333N/9zp9Ovvyx3/v7XXf86ke+/JOxG3/72w8MfeGVY9sv2PGD3znrxoc+dOXRe//q0ZdWfP0XzxYGHqn+rFyczg6EkDyfhDDwzZN//vFjT5wzU5aEEMrJyKEQVidrHl2dZCKM/yyEsL1ez+Ynv/bypTtmpnfc3d9UvioTJLtdYbgc69NYzxBuLdwizkADaT87eOqWN4Uf/tbWO7+37qvT5RAOzS6SDDT0pxBWXt/4+r4QwmD6f0bsbWvji9PplhDCUMPr3lpQrzd2WP+NOfPnpdNl6XS47atn31Lx+fWZ+VLmFdn5qC8zbdjWwby6L0RePbpYrtJJnOWZ+ezBaKHy6hnLV6fTb6TTi+cZvxz/J6GUhEq9+lPJbB8JDfstCUl1Xw7U50v1fRvS7c/MJ5n5Uma+3JfZrup6045WTpLm8rhcpjwejitp+QWNx+o2rs4pf306HUjfqK/E+ZB9UDPc8qC+XVWxXifnqEvqP7Uv7qgbFio1HIPaldd3fLozhtOy4WRNy2um24jPHdt6z4bytm8dH8mpR/JAksZPuop/8Lurl3/wK4cPrM2Lf30pjV/qKv6PrjrxwrWHP/+53PifjvHLXcW/5OGh56967K71ue1zMrZPpav4E88+/sl1Z99wJLf+98X4A13F33z0RP+KUw8/klv/8dg+g13Ff+Yd7/rxl5568Lnc+CHGH+oq/rajez7VP3rqotz4j8T2Ge6u/7x45IqnR0d/OpYX/8kYf0VX8b946N6337/q7itz9++W2D4jXcV/z4UP3bn81IPn5x07k/s6/YQFoJ2z0nOsT6TzjXnm3/Ydea7TPHOhGvKFvxyr1M75lqf/V/RyRRkz61m5iPEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHht+sfbL/vANe9839ZKEkKSs8x0G/G58rLNm8e6WO/Es49/ct3Zg01la7uIAwAAABSr5eE3HCnVSwbC2nBLMhjOa7t8HCM4L84lzeXZMYQYJztG0G2cUps4pS7ilHtUn0qP4vT1KM6yHsXp71GcgYI4A6GzOINzxKnM9IAO6zM0Z306jzPcozjLexRnRSZEt3FW9qg+q3oUZ2TOOJ33w9U9irOmR3HO6lGcs3sU53U9ivMrPYpzTo/iZMeU59sPV6RLnpsXp/qgXBinkpTrT7QbTz8nXc/5C1zPcMF6VhR9Hne4nsEO1/PGzOtK81zPQIfruWyB60k6XM+vLXA9pYL1xH57a7Z+cT1xLruejzUvH+PcNt84oX2cgz2K85Eexbm9R3E+2qM4f9KjONXdWO4+DkCnYv4/m++NhP7Kb4Sh9IiTHQWI+e666s/Wz7u8A1KM94ZM+bKieNlEPRNv3Xzrlx1AaIw3GML6THlfU7xKPR+ZI95AY/02ZJ6ca3vfsbl93RrjXZwp758jXtMGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAS+MfbL/vANe9839aQhJl/bU23EZ8rL9u8eayL9R7bes+G8rZvHW8s6690EQgAAAAoFPPwvnrJQOivbAr9ybKm5QbScYCBdL48UpuOrgxbZqbJWKk6P5SsnvN1lfR1G/fv2rNx320H37xz18RNkzdN7n7bpss2XTF++RWXb9yxc2pyvPYzhP6CeCGE6vDDvtsOfnhiampy775aYbb+a9PXrU3nk/R1o28J4zPTO9L6rylYX6llfYv3oHjvAQAAAAAAAADwr+zab4ikdR0A8O8zMzszrl5u+G88vHM4T7Gy0msNLXEfCBL8c7gIMWttcuRJ0uodeidmkx6kphSBcnBc+KILkzTpjX9SIv9wYJgltNcRKuWLelFoGSq+CGVid+eZfzvjbJPcntfn82KeZ76/7+/3/f0ejoPvMwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMChNV+fnK1NTc+MJxHJgJxGH9lYvpim1RHqfuXJ7T8orX/nzM5YqTDCQgAAAMBQWR8+1oqUo1TIRz5OXvy2IToGot33AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/3/m65OztanpmaOTiGRATqOPbCxfTNPqCHVffevhz760fv3fOmOVEdYBAAAAhsv68FwrUo5KnBZjyckLnX8rmr0bWNszfymvLVtn3Qrzet8dDMo7bYV5Z6ww72ND8jY3rzcHAAAAfPhl/X+hFZmIUmHNsn446/+H9fVZ3qk9efnmtdqZ9L6KK0kCAAAAViDr/0utSCVKhUqrX19pv7+hHVr86TybP+x3+2z+6T152fxhv+df1rz6nR4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjzm65OztanpmXwSkQzIafSRjeWLaVodoe6mp8b/ccn+OzZ0xkqFERYCAAAAhsr68HbrXY5SYTzG4ujFvn/9Rfc9+qVHH5+MiKU2v1iMm7fs2HHDpoXP2JTlnfPC/rHvP/f6t5flnbP0uWoHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjDz9cnZ2tT0zFFJRDIgp9FHNpYvpml1hLqvfP6Lf3nw4BOvdcYqI6wDAAAADJf14e3evxyVKEYxTlz81tnrL8j1zB/0zgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4ctz4zVu+sWVubusNblbnppGPOAy28T/eZP+cDpf9fPhvyqu9jdX9fwkAAPjgnRpJNP5LJ12+2rsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB/P1ydna1PRMOYlIBuQ0MqV2IBvLF9O0OkLd9MkXS2veeeqZzlhlhHUAAACA4bI+vN37l6MSYzEWJyx+6/dOoLHQ/08cwk0CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAh5X5+uRsbWp6Zk0SkQzIafSRjeWLaVodoe4Du/Z+7v5jv3dxZ6xUGGEhAAAAYKisDy+2IuUoFT4epTil+X2ue0KSb177vxdoz9veNW18xfPqXfPy7zcvKUS05t3Vc7JC8zRL88rZehNL11a9anterjmv2jGvEq3y1da8xYe1u6vamiHnW/7kAQAA4NDJ+v9SKzIRpUKpo///afN6VPM6qM/NHdqNAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACHnfn65GxtanomSSKSATmNPrKxfDFNqyPUveW3Hz3mqz+7e2dnrDLCOgAAAMBwWR/e7v3LUYl18ZFYt9j3x0R3fpb3z9q799/7r7+eGXH2iQfWF3qX/VF28+tXLny69yMi152dizi2WS8ZUO83v7/3po2Ndx+MOPuE/CnL6sX71+teMm08Vtt62Y7nDmwf8nAAAADgCJH1/2OtyESUCtcP7P+zzntI/9+y2IAfe9OuXxzf/Gx25D0zchPNerkB9b6w8eE/n37e319f6P+X1/tk6+7Te6+7//iugkuRHknamLpu5+YD5+7LZadeqp/vqZ89ly9/67V/X3PzPe8u1S9HuRlf27OVpWrLP3vKR9qYy+2ZufS9PfXu+oUB57/jd88c/NXau99eqP/WqeOt+mdEv/pLJy8MrB9HpY3xK+7cff7e/Zu760dEtV/9N96+OE7647W3955/PA52Ldz55Ds/ex9A2nhhw5v7zruvckF3/aSnfvb8f37wgd0/uee7j2f1s78VOfO0WGH9XE/95+86btezt12+trt+bsD5n77ypfXbqt/5Q+/5r+5atTBwF8vP/9BZj1z18pb01t4hAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAI8t8fXK2NjU9k0sikgE5jT6ysXwxTasj1H31khffuPLuH/+wM1YZYR0AAABguKwPb/f+5ahEMYoxvtj3P1bbetmO5w5sj4ml0aR5Lcxtu3HHJ67ZtvP6q1dp5wAAAMBKvXpJstj/F1qRiSgVNsZYs/+fum7n5gPn7stl/X9u4ZpExDXXzm09O1p5z9913K5nb7t8bes9QcTinwWUF/I+08676MIXJ97809dP75u3qZ33woY39513X+WCLC86886J1vuJh8565KqXt6S3tvbXmfepr22ba76eyNYdv+LO3efv3b85l73HaF7Hm+tmeXO5PTOXvrennpuI0sJ4vplXbp4bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhuvj45W5uanol8RDIgp9GpGcjG8sU0rY5Q99KNv7z9mHeeWNcZKxVGWAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7DDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbrJzSOso8D+PPsJm+22aRN2heMimlaFaUeWhRE9KKiIq1IwVOlSLW1B1EQRJR6aCqtWKriRbB6KaKCGqVQwcZiaZVU/Fe8eFBBoXoQSjGgWYoHK9k8s9lMdrpxo4Ly+cDy5Hlm5ju/mXn22QwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCv0tM1VG9P7HmkdudFt3765P1TO29//6FdVzzx5o8jW2/+5GDva2cntq3a/s0tK7YeeWD9+P6Xj//a/+7vp9oGPz7TrEndSgjxTAyh8sHkC09NfHbB9FgMIZTjwGgIg3H58cGYS1j3WwhhW6POuRsPTV2zfbrdta9ndvDczrAsF5K/rlAtZ/XMGJhbL/8tlTTPdtQeuyp8d9Om3V+sfOft7rHTo7O7xOl9ymk+hbB0S/Px3SGEJekzLZttQ9nBqd0YQuhtOu66NnVdusD614ZQy/XrLk7t/1JbbZOTbV+d65dy++X7me5c29vmfItVVEfb/ZZ0dr6+XD+/GC1Wo861rccHU/teatf8yfxy9omhFENXo/wH4+wcCU3PLYZYf5aVRr/UeLYhXX+uH3P9Uq5f7s5dV/28aaKVY5w7nu2XG8+W4640vqp5rW7hroLxC1NbSV/Us1k/5P+YUZ33R+O66rK6Js9Tyz+h1LQGtRpvPPj0MKpprBqXzzvmXAvZtolNz1xe3vzhiYGCOuLBmPJjR/k7Ph/su+etvY8OFeVvKaX8Ukf53284+fPde195qTD/+Sy/3FH+1Ud7z2z4aM/qwvszObuCLCQ/pn627d5THz+78v/3jbV61vXMA9n9r3RU/43jJ3v6a0ePFda/Lrs/SzrK//aG235446vDpwvzQ5bf21H+5vGHn+sZrl1ZmH9s5qtQrc/QDubPL2PXfj08/NNIUf6X2f3vb5Ef2+a/Prr/+leX7VtfOD83ZvdnIOXP/2E7X/4dlx3Z3Vc7fEnR2hkPLPQXFoBWVqT/sZ5O/XbvmYemSi3fMxer6X3hxZGumV+gvvTp/ytPlDN9nqV/Yz4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Ac7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPBQAA///wUgyz")
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000000)="e0b909", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x40040)

109.059173ms ago: executing program 7 (id=5512):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)

108.933218ms ago: executing program 1 (id=5513):
prctl$PR_GET_KEEPCAPS(0x7)

0s ago: executing program 1 (id=5514):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0xc4, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0xb0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24}, {0x4, 0xa}, {0xc}, {0xffac, 0x8, {0x0, 0x2}}}}, @m_mpls={0x89, 0x2, 0x0, 0x0, {{0x9}, {0x30}, {0x4}, {0xc}, {0xc}}}]}]}, 0xc4}}, 0x0)

kernel console output (not intermixed with test programs):

: 0000000000000000 RBX: 00007f0ec5811c2d RCX: 00007f0ec578ff57
[  339.959806][T10911] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffebc6324d0
[  339.959813][T10911] RBP: 00007ffebc6324d0 R08: 0000000000000000 R09: 0000000000000000
[  339.959819][T10911] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffebc633560
[  339.959826][T10911] R13: 00007f0ec5811c2d R14: 0000000000052ea8 R15: 00007ffebc6335a0
[  339.959847][T10911]  </TASK>
[  339.963874][T10911] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  340.668691][   T47] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  340.710489][T14018] raw_sendmsg: syz.1.3266 forgot to set AF_INET. Fix it!
[  340.818511][   T47] usb 5-1: Using ep0 maxpacket: 16
[  340.824511][   T47] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  340.831053][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.834113][   T47] usb 5-1: Product: syz
[  340.835773][   T47] usb 5-1: Manufacturer: syz
[  340.837627][   T47] usb 5-1: SerialNumber: syz
[  340.841668][   T47] usb 5-1: config 0 descriptor??
[  340.856531][T14027] netlink: 348 bytes leftover after parsing attributes in process `syz.1.3270'.
[  341.049605][   T47] speedtch 5-1:0.0: speedtch_bind: data interface not found!
[  341.052656][   T47] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19!
[  341.251725][   T47] usb 5-1: USB disconnect, device number 18
[  341.268565][  T794] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  341.431851][  T794] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  341.436724][  T794] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  341.441264][  T794] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  341.445268][  T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.458091][T14031] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  341.465638][  T794] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  341.681332][  T794] usb 4-1: USB disconnect, device number 19
[  341.834519][T14039] netlink: 'syz.1.3276': attribute type 11 has an invalid length.
[  341.838044][T14039] netlink: 'syz.1.3276': attribute type 5 has an invalid length.
[  342.038513][   T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  342.188514][   T10] usb 5-1: Using ep0 maxpacket: 8
[  342.200311][   T10] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  342.204887][   T10] usb 5-1: config 16 has 0 interfaces, different from the descriptor's value: 1
[  342.210631][   T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  342.218592][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.245058][T14048] blkio.reset_stats is deprecated
[  342.272930][T14050] netlink: 'syz.3.3281': attribute type 5 has an invalid length.
[  342.931849][   T10] usb 5-1: USB disconnect, device number 19
[  343.176207][T14063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3284'.
[  343.974786][T14087] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  344.575721][T14095] loop4: detected capacity change from 0 to 4096
[  344.585424][T14095] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  344.595673][T14095] ntfs3(loop4): ino=3, mi_enum_attr
[  345.795250][T14108] loop3: detected capacity change from 0 to 131072
[  345.798937][T14108] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  345.801617][T14108] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  345.807139][T14108] F2FS-fs (loop3): invalid crc value
[  345.958808][T14108] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  345.982958][T14108] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  345.985827][T14108] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  347.117408][T14172] tipc: Started in network mode
[  347.123718][T14172] tipc: Node identity ac14140f, cluster identity 4711
[  347.126792][T14172] tipc: New replicast peer: 255.255.255.255
[  347.132791][T14172] tipc: Enabled bearer <udp:syz2>, priority 10
[  347.146536][T14167] Trying to write to read-only block-device nullb0
[  347.355769][T14178] loop4: detected capacity change from 0 to 32768
[  347.382997][T14178] JBD2: Ignoring recovery information on journal
[  347.387627][T14178] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75
[  347.391517][T14178] JBD2: bad block at offset 32
[  347.397917][T14178] (syz.4.3334,14178,1):ocfs2_load_local_alloc:312 ERROR: Invalid local alloc inode, 75
[  347.402890][T14178] (syz.4.3334,14178,1):ocfs2_load_local_alloc:356 ERROR: status = -22
[  347.406376][T14178] (syz.4.3334,14178,1):ocfs2_check_volume:2404 ERROR: status = -22
[  347.410394][T14178] (syz.4.3334,14178,1):ocfs2_check_volume:2432 ERROR: status = -22
[  347.413698][T14178] (syz.4.3334,14178,1):ocfs2_mount_volume:1764 ERROR: status = -22
[  347.427304][T14178] (syz.4.3334,14178,1):ocfs2_fill_super:1177 ERROR: status = -22
[  347.862899][T14210] loop3: detected capacity change from 0 to 16
[  347.863387][T14192] loop4: detected capacity change from 0 to 32768
[  347.866001][T14210] erofs (device loop3): mounted with root inode @ nid 36.
[  347.980893][T14192] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  347.980907][T14192]   allowing incompatible features above 0.0: (unknown version)
[  347.980912][T14192]   features: 
[  348.000893][T14192] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  348.005603][T14192] bcachefs (loop4): initializing new filesystem
[  348.017576][T14192] bcachefs (loop4): going read-write
[  348.030477][T14192] bcachefs (loop4): marking superblocks
[  348.069778][T14192] bcachefs (loop4): initializing freespace
[  348.083364][T14192] bcachefs (loop4): done initializing freespace
[  348.091581][T14192] bcachefs (loop4): reading snapshots table
[  348.094329][T14192] bcachefs (loop4): reading snapshots done
[  348.126969][T14192] bcachefs (loop4): done starting filesystem
[  348.243389][T14192] syz.4.3338 (14192) used greatest stack depth: 16952 bytes left
[  348.249357][   T47] tipc: Node number set to 2886997007
[  348.253853][T10911] bcachefs (loop4): shutting down
[  348.256001][T10911] bcachefs (loop4): going read-only
[  348.261104][T10911] bcachefs (loop4): finished waiting for writes to stop
[  348.266098][T10911] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2
[  348.620791][T10911] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3
[  348.626287][T10911] bcachefs (loop4): clean shutdown complete, journal seq 4
[  348.629802][T10911] bcachefs (loop4): marking filesystem clean
[  348.633864][T14237] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3354'.
[  348.672854][T10911] bcachefs (loop4): shutdown complete
[  349.742447][T14263] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3366'.
[  349.986639][T14273] 8021q: adding VLAN 0 to HW filter on device batadv2
[  349.992679][T14273] team0: Port device batadv2 added
[  350.144606][T14285] IPVS: Error connecting to the multicast addr
[  350.292096][T14299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3382'.
[  350.309578][T14301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3383'.
[  350.458678][ T5917] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  350.578262][T14310] netlink: 'syz.4.3387': attribute type 2 has an invalid length.
[  350.605004][T14312] comedi comedi0: aio_iiro_16: I/O port conflict (0xee,8)
[  350.614425][ T5917] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  350.617994][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.631293][ T5917] usb 4-1: config 0 descriptor??
[  350.642464][ T5917] cp210x 4-1:0.0: cp210x converter detected
[  350.818239][T14316] loop4: detected capacity change from 0 to 32768
[  350.887595][T14316] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  350.887612][T14316]   allowing incompatible features above 0.0: (unknown version)
[  350.887618][T14316]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  350.904974][T14316] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  350.907936][T14316] bcachefs (loop4): initializing new filesystem
[  350.915344][T14316] bcachefs (loop4): going read-write
[  350.925080][T14316] bcachefs (loop4): marking superblocks
[  350.941052][T14316] bcachefs (loop4): initializing freespace
[  350.945682][T14316] bcachefs (loop4): done initializing freespace
[  350.954284][T14316] bcachefs (loop4): reading snapshots table
[  350.956643][T14316] bcachefs (loop4): reading snapshots done
[  350.990942][T14316] bcachefs (loop4): done starting filesystem
[  351.051032][ T5917] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  351.054865][   T33] audit: type=1800 audit(350.928:121): pid=14316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3390" name="file1" dev="loop4" ino=4098 res=0 errno=0
[  351.063213][T14293] loop3: detected capacity change from 0 to 1024
[  351.108212][ T5917] usb 4-1: cp210x converter now attached to ttyUSB0
[  351.123804][T10911] bcachefs (loop4): shutting down
[  351.130723][T10911] bcachefs (loop4): going read-only
[  351.132823][T10911] bcachefs (loop4): finished waiting for writes to stop
[  351.142485][T10911] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2
[  351.185282][T10911] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3
[  351.190443][T10911] bcachefs (loop4): clean shutdown complete, journal seq 4
[  351.194099][T10911] bcachefs (loop4): marking filesystem clean
[  351.224135][T10911] bcachefs (loop4): shutdown complete
[  351.297396][   T10] usb 4-1: USB disconnect, device number 20
[  351.304363][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  351.314599][   T10] cp210x 4-1:0.0: device disconnected
[  351.734945][T14358] 8021q: adding VLAN 0 to HW filter on device bond0
[  351.740714][T14358] 8021q: adding VLAN 0 to HW filter on device team0
[  351.747617][T14358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  351.757512][   T10] lo speed is unknown, defaulting to 1000
[  351.762271][   T10] syz0: Port: 1 Link ACTIVE
[  351.824727][ T4864] hfsplus: b-tree write err: -5, ino 4
[  351.942826][T14368] netlink: 45 bytes leftover after parsing attributes in process `syz.1.3409'.
[  352.585883][T14397] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3423'.
[  352.591610][T14397] sock: sock_set_timeout: `syz.3.3423' (pid 14397) tries to set negative timeout
[  353.053203][T14413] netlink: del zone limit has 4 unknown bytes
[  353.103379][T14415] vivid-001: disconnect
[  353.110190][T14414] vivid-001: reconnect
[  353.138552][    T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  353.289555][    T9] usb 5-1: Using ep0 maxpacket: 8
[  353.294267][    T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  353.298206][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  353.305226][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  353.310289][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  353.315911][    T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  353.323508][    T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  353.327885][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.839154][    T9] usb 5-1: usb_control_msg returned -32
[  353.841867][    T9] usbtmc 5-1:16.0: can't read capabilities
[  354.558558][T14442] usbtmc 5-1:16.0: INITIATE_CLEAR returned 0
[  354.637318][T14450] xt_bpf: check failed: parse error
[  354.857660][T14464] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  355.946802][   T10] usb 5-1: USB disconnect, device number 20
[  356.702282][T14492] vlan0: entered promiscuous mode
[  356.704541][T14492] bond0: entered promiscuous mode
[  356.706627][T14492] bond_slave_0: entered promiscuous mode
[  356.711545][T14492] bond_slave_1: entered promiscuous mode
[  357.632740][T14539] netlink: 'syz.4.3483': attribute type 2 has an invalid length.
[  357.635979][T14539] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3483'.
[  358.546254][T14579] loop4: detected capacity change from 0 to 1024
[  358.638204][ T1091] hfsplus: b-tree write err: -5, ino 4
[  360.065906][   T10] kernel read not supported for file /2188/net/udplite (pid: 10 comm: kworker/0:1)
[  360.445712][T14631] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3521'.
[  360.600428][   T33] audit: type=1326 audit(360.478:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.4.3523" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec578ec29 code=0x7ffc0000
[  360.611967][   T33] audit: type=1326 audit(360.478:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.4.3523" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec578ec29 code=0x7ffc0000
[  360.621499][   T33] audit: type=1326 audit(360.478:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.4.3523" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f0ec578ec29 code=0x7ffc0000
[  360.630548][   T33] audit: type=1326 audit(360.478:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.4.3523" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec578ec29 code=0x7ffc0000
[  360.639733][   T33] audit: type=1326 audit(360.478:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.4.3523" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec578ec29 code=0x7ffc0000
[  360.649020][   T33] audit: type=1326 audit(360.478:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.4.3523" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0ec578ec29 code=0x7ffc0000
[  360.658252][   T33] audit: type=1326 audit(360.478:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.4.3523" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec578ec29 code=0x7ffc0000
[  360.667437][   T33] audit: type=1326 audit(360.478:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.4.3523" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec578ec29 code=0x7ffc0000
[  360.676394][   T33] audit: type=1326 audit(360.478:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.4.3523" exe="/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f0ec578ec29 code=0x7ffc0000
[  360.685071][   T33] audit: type=1326 audit(360.478:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14634 comm="syz.4.3523" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ec578ec29 code=0x7ffc0000
[  361.263782][T14654] mkiss: ax0: crc mode is auto.
[  361.609140][T14667] loop3: detected capacity change from 0 to 512
[  361.620399][T14667] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  361.648272][T14667] EXT4-fs (loop3): 1 truncate cleaned up
[  361.661913][T14667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  361.686029][T14667] syz.3.3539 (pid 14667) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  361.785034][ T6803] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.314258][T14684] loop3: detected capacity change from 0 to 32768
[  363.326185][T14684] jfs_mount: dbMount failed w/rc = -22
[  363.335643][T14684] Mount JFS Failure: -22
[  363.337699][T14684] jfs_mount failed w/return code = -22
[  363.888548][T14696] loop3: detected capacity change from 0 to 32768
[  363.893412][T14696] (syz.3.3552,14696,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #66: rec_len is too small for name_len - offset=132, inode=71, rec_len=16, name_len=13
[  363.899422][T14696] (syz.3.3552,14696,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  363.902752][T14696] (syz.3.3552,14696,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 4, possibly corrupt fs?
[  363.902771][T14696] (syz.3.3552,14696,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  363.918085][T14696] (syz.3.3552,14696,1):ocfs2_initialize_super:2198 ERROR: status = -22
[  363.921940][T14696] (syz.3.3552,14696,1):ocfs2_fill_super:1177 ERROR: status = -22
[  364.117563][T14713] loop3: detected capacity change from 0 to 32768
[  365.243775][T14724] loop4: detected capacity change from 0 to 256
[  365.347924][T14724] FAT-fs (loop4): Directory bread(block 64) failed
[  365.371949][T14724] FAT-fs (loop4): Directory bread(block 65) failed
[  365.401872][T14724] FAT-fs (loop4): Directory bread(block 66) failed
[  365.540634][T14724] FAT-fs (loop4): Directory bread(block 67) failed
[  365.543764][T14724] FAT-fs (loop4): Directory bread(block 68) failed
[  365.546082][T14724] FAT-fs (loop4): Directory bread(block 69) failed
[  365.548529][T14724] FAT-fs (loop4): Directory bread(block 70) failed
[  365.551040][T14724] FAT-fs (loop4): Directory bread(block 71) failed
[  365.553536][T14724] FAT-fs (loop4): Directory bread(block 72) failed
[  365.556003][T14724] FAT-fs (loop4): Directory bread(block 73) failed
[  365.697414][T14735] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3570'.
[  365.747906][T14737] loop4: detected capacity change from 0 to 256
[  365.769363][T14737] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  365.784231][T14737] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  366.144741][T14768] netlink: 'syz.1.3583': attribute type 1 has an invalid length.
[  366.147582][T14768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3583'.
[  366.388572][   T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  366.878580][   T10] usb 4-1: Using ep0 maxpacket: 32
[  366.882612][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[  366.886539][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  366.890360][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  366.894343][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  366.898576][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[  366.904511][   T10] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[  366.907690][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.910868][   T10] usb 4-1: Product: syz
[  366.912623][   T10] usb 4-1: Manufacturer: syz
[  366.914432][   T10] usb 4-1: SerialNumber: syz
[  366.920375][   T10] usb 4-1: config 0 descriptor??
[  366.926123][   T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input21
[  367.136765][   T47] usb 4-1: USB disconnect, device number 21
[  367.243283][T14787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3592'.
[  367.351109][T14793] syz_tun: entered allmulticast mode
[  367.355633][T14792] syz_tun: left allmulticast mode
[  367.928566][  T794] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  367.958903][T14783] Process accounting resumed
[  368.092522][  T794] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  368.096017][  T794] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3
[  368.100224][  T794] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00
[  368.103307][  T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.111118][  T794] usb 4-1: config 0 descriptor??
[  368.121632][  T794] gspca_main: spca501-2.14.0 probing 0000:0000
[  368.340017][  T794] gspca_spca501: reg write: error -71
[  368.341842][  T794] spca501 4-1:0.0: Reg write failed for 0x02,0x0f,0x05
[  368.347545][  T794] spca501 4-1:0.0: probe with driver spca501 failed with error -22
[  368.366087][  T794] usb 4-1: USB disconnect, device number 22
[  368.548269][T14811] overlayfs: failed to clone upperpath
[  370.459366][T14841] loop3: detected capacity change from 0 to 512
[  370.464860][T14841] EXT4-fs: Ignoring removed nomblk_io_submit option
[  370.473467][T14841] EXT4-fs (loop3): Test dummy encryption mode enabled
[  370.483830][T14841] EXT4-fs (loop3): 1 truncate cleaned up
[  370.488146][T14841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  371.012501][   T33] kauditd_printk_skb: 23 callbacks suppressed
[  371.012512][   T33] audit: type=1800 audit(370.888:155): pid=14859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3623" name="nullb0" dev="tmpfs" ino=6981 res=0 errno=0
[  371.030236][T14861] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3624'.
[  371.088179][T14865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3626'.
[  371.142065][T14869] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3629'.
[  371.352838][ T6803] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  371.812941][   T33] audit: type=1326 audit(371.688:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.3.3634" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a78d8ec29 code=0x7ffc0000
[  371.822847][   T33] audit: type=1326 audit(371.688:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.3.3634" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a78d8ec29 code=0x7ffc0000
[  371.832881][   T33] audit: type=1326 audit(371.688:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.3.3634" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0a78d8ec29 code=0x7ffc0000
[  371.842514][   T33] audit: type=1326 audit(371.688:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.3.3634" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a78d8ec29 code=0x7ffc0000
[  371.853850][   T33] audit: type=1326 audit(371.688:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.3.3634" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0a78d8ec29 code=0x7ffc0000
[  371.862872][   T33] audit: type=1326 audit(371.688:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.3.3634" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a78d8ec29 code=0x7ffc0000
[  371.871403][   T33] audit: type=1326 audit(371.688:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.3.3634" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a78d8ec29 code=0x7ffc0000
[  371.880141][   T33] audit: type=1326 audit(371.688:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.3.3634" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0a78d8ec29 code=0x7ffc0000
[  371.889560][   T33] audit: type=1326 audit(371.688:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14883 comm="syz.3.3634" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a78d8ec29 code=0x7ffc0000
[  371.916513][T14886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3635'.
[  372.131693][T14897] loop3: detected capacity change from 0 to 512
[  372.134902][T14897] EXT4-fs: Ignoring removed orlov option
[  372.138011][T14897] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  372.146998][T14897] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  372.163815][T14897] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.3640: corrupted in-inode xattr: e_value size too large
[  372.171755][T14897] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3640: couldn't read orphan inode 15 (err -117)
[  372.177218][T14897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  372.195524][T14897] overlayfs: upper fs needs to support d_type.
[  372.232878][ T6803] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[  372.242002][ T6803] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[  372.324856][T14227] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  372.835172][ T6816] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.958072][ T6816] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.063014][ T6816] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.157398][ T6816] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  373.182563][T14915] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  373.189912][T14915] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  373.193826][T14915] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  373.197338][T14915] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  373.202532][T14915] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  373.231400][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  373.238491][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  373.246878][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  373.250920][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  373.254459][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  373.365912][ T6816] bridge_slave_0: left allmulticast mode
[  373.368810][ T6816] bridge_slave_0: left promiscuous mode
[  373.372316][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state
[  373.992640][ T6816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  373.996656][ T6816] bond_slave_0: left promiscuous mode
[  374.002350][ T6816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  374.006559][ T6816] bond_slave_1: left promiscuous mode
[  374.007825][T14920] loop4: detected capacity change from 0 to 256
[  374.010809][ T6816] bond0 (unregistering): Released all slaves
[  374.014314][T14920] exfat: Deprecated parameter 'namecase'
[  374.025219][T14920] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  374.312126][ T6816] bond1 (unregistering): Released all slaves
[  374.351541][T14914] lo speed is unknown, defaulting to 1000
[  374.390052][T14925] loop4: detected capacity change from 0 to 256
[  374.406474][T14925] exfat: Deprecated parameter 'utf8'
[  374.422173][T14925] exfat: Deprecated parameter 'namecase'
[  374.424035][T14925] exfat: Deprecated parameter 'namecase'
[  374.425973][T14925] exfat: Deprecated parameter 'utf8'
[  374.501338][T14925] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x9270b71c, utbl_chksum : 0xe619d30d)
[  374.510841][ T6816] tipc: Disabling bearer <udp:syz2>
[  374.513503][ T6816] tipc: Left network mode
[  374.875196][T14914] chnl_net:caif_netlink_parms(): no params data found
[  374.928505][   T10] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  375.004246][ T6816] hsr_slave_0: left promiscuous mode
[  375.007424][ T6816] hsr_slave_1: left promiscuous mode
[  375.010674][ T6816] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  375.013997][ T6816] batman_adv: batadv0: Removing interface: batadv_slave_0
[  375.018289][ T6816] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  375.026296][ T6816] batman_adv: batadv0: Removing interface: batadv_slave_1
[  375.041118][ T6816] veth1_macvtap: left promiscuous mode
[  375.043627][ T6816] veth0_macvtap: left promiscuous mode
[  375.081208][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 10
[  375.087436][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  375.092383][   T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  375.097303][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  375.111299][   T10] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  375.117705][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.127438][   T10] usb 5-1: Product: syz
[  375.131786][   T10] usb 5-1: Manufacturer: syz
[  375.136287][   T10] usb 5-1: SerialNumber: syz
[  375.147946][   T10] usb 5-1: config 0 descriptor??
[  375.156659][T14932] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  375.168775][   T10] usb 5-1: ucan: probing device on interface #0
[  375.174842][   T10] usb 5-1: ucan: invalid endpoint configuration
[  375.182841][   T10] usb 5-1: ucan: probe failed; try to update the device firmware
[  375.291269][T14915] Bluetooth: hci1: command tx timeout
[  375.378210][   T10] usb 5-1: USB disconnect, device number 21
[  376.022558][T14957] loop4: detected capacity change from 0 to 4096
[  376.036614][T14957] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  376.043557][T14957] ntfs3(loop4): ino=0, mi_enum_attr
[  376.074470][T14957] ntfs3(loop4): ino=0, mi_enum_attr
[  376.076844][T14957] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  376.205757][ T6816] team0 (unregistering): Port device team_slave_1 removed
[  376.336849][ T6816] team0 (unregistering): Port device team_slave_0 removed
[  377.049618][T14914] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.054451][T14914] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.057400][T14914] bridge_slave_0: entered allmulticast mode
[  377.076331][T14914] bridge_slave_0: entered promiscuous mode
[  377.091706][T14914] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.094558][T14914] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.097537][T14914] bridge_slave_1: entered allmulticast mode
[  377.101826][T14914] bridge_slave_1: entered promiscuous mode
[  377.280045][T14914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  377.302257][T14981] ip6tnl1: entered promiscuous mode
[  377.352281][T14914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  377.368719][T14915] Bluetooth: hci1: command tx timeout
[  377.516809][T14914] team0: Port device team_slave_0 added
[  377.524413][T14914] team0: Port device team_slave_1 added
[  377.563361][T14992] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  377.650007][T14914] batman_adv: batadv0: Adding interface: batadv_slave_0
[  377.654774][T14914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  377.691949][T14914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  377.698073][T14914] batman_adv: batadv0: Adding interface: batadv_slave_1
[  377.704876][T14995] loop4: detected capacity change from 0 to 2048
[  377.707281][T14914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  377.738544][T14914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  377.776123][T14995] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  377.900542][T14914] hsr_slave_0: entered promiscuous mode
[  377.908937][T14914] hsr_slave_1: entered promiscuous mode
[  378.013564][T15013] Bluetooth: MGMT ver 1.23
[  378.252440][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  378.255140][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  378.323934][T14914] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  378.340513][T14914] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  378.350718][T14914] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  378.361808][T14914] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  378.430770][T15039] netlink: 'syz.4.3690': attribute type 9 has an invalid length.
[  378.440101][T15039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3690'.
[  378.504796][T14914] 8021q: adding VLAN 0 to HW filter on device bond0
[  378.529535][T14914] 8021q: adding VLAN 0 to HW filter on device team0
[  378.544960][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  378.548115][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  378.578430][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  378.581397][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  378.799200][T14914] 8021q: adding VLAN 0 to HW filter on device batadv0
[  378.948124][T14914] veth0_vlan: entered promiscuous mode
[  378.957216][T14914] veth1_vlan: entered promiscuous mode
[  378.982216][T14914] veth0_macvtap: entered promiscuous mode
[  378.987505][T14914] veth1_macvtap: entered promiscuous mode
[  379.004545][T14914] batman_adv: batadv0: Interface activated: batadv_slave_0
[  379.022473][T14914] batman_adv: batadv0: Interface activated: batadv_slave_1
[  379.042874][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  379.045977][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  379.060540][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  379.063558][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  379.091850][T15072] loop4: detected capacity change from 0 to 2048
[  379.103978][T15072] EXT4-fs: Ignoring removed mblk_io_submit option
[  379.119340][T15072] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  379.159147][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  379.162258][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  379.193092][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  379.199160][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  379.367954][T15088] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3705'.
[  379.380056][T15090] lo speed is unknown, defaulting to 1000
[  379.386334][T15090] lo speed is unknown, defaulting to 1000
[  379.392701][T15090] lo speed is unknown, defaulting to 1000
[  379.410567][T15090] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  379.440183][T15094] netlink: 'syz.5.3708': attribute type 10 has an invalid length.
[  379.440851][T15090] lo speed is unknown, defaulting to 1000
[  379.448888][T14915] Bluetooth: hci1: command tx timeout
[  379.459000][T15090] lo speed is unknown, defaulting to 1000
[  379.463079][T15090] lo speed is unknown, defaulting to 1000
[  380.996378][T15132] loop5: detected capacity change from 0 to 2048
[  381.164557][T15134] loop4: detected capacity change from 0 to 4096
[  381.208137][T15134] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  381.328926][ T5913] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  381.481637][ T5913] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  381.485490][ T5913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.497061][ T5913] usb 6-1: config 0 descriptor??
[  381.504328][ T5913] cp210x 6-1:0.0: cp210x converter detected
[  381.528559][T14915] Bluetooth: hci1: command tx timeout
[  381.904771][ T5913] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  381.915186][ T5913] usb 6-1: cp210x converter now attached to ttyUSB0
[  381.947866][T10911] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.011907][T15153] geneve2: entered promiscuous mode
[  382.014120][T15153] geneve2: entered allmulticast mode
[  382.118947][ T5917] usb 6-1: USB disconnect, device number 2
[  382.128803][ T5917] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  382.140373][ T5917] cp210x 6-1:0.0: device disconnected
[  383.316411][T15176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3739'.
[  383.325059][T15176] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3739'.
[  383.375799][   T33] kauditd_printk_skb: 10 callbacks suppressed
[  383.375889][   T33] audit: type=1400 audit(383.248:175): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=15179 comm="syz.5.3740"
[  385.144907][T15214] loop4: detected capacity change from 0 to 32768
[  385.201962][T15214] jbd2_journal_init_inode: Cannot locate journal superblock
[  385.205167][T15214] (syz.4.3755,15214,0):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  385.222197][T15214] (syz.4.3755,15214,0):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  385.226246][T15214] (syz.4.3755,15214,0):ocfs2_check_volume:2432 ERROR: status = -22
[  385.230117][T15214] (syz.4.3755,15214,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  385.255644][T15214] (syz.4.3755,15214,0):ocfs2_fill_super:1177 ERROR: status = -22
[  385.935500][T15237] netem: incorrect gi model size
[  385.938318][T15237] netem: change failed
[  386.989755][T15240] loop5: detected capacity change from 0 to 32768
[  387.053558][T15240] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  387.193790][T14914] ocfs2: Unmounting device (7,5) on (node local)
[  387.263354][T15251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3765'.
[  387.757712][T15257] loop5: detected capacity change from 0 to 512
[  388.154931][T15261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3769'.
[  388.975570][T15283] loop5: detected capacity change from 0 to 2048
[  388.996795][T15283] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=3932051, location=3932051
[  389.003720][T15283] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  389.926575][   T33] audit: type=1800 audit(389.788:176): pid=15283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3777" name="file1" dev="loop5" ino=1346 res=0 errno=0
[  390.282414][T15332] sctp: [Deprecated]: syz.5.3790 (pid 15332) Use of struct sctp_assoc_value in delayed_ack socket option.
[  390.282414][T15332] Use struct sctp_sack_info instead
[  390.555039][T15329] loop4: detected capacity change from 0 to 32768
[  390.614346][T15329] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  390.647179][T15349] binder: 15347:15349 ioctl c0306201 200000000540 returned -14
[  390.651708][T15351] binder: 15347:15351 unknown command 0
[  390.654023][T15351] binder: 15347:15351 ioctl c0306201 200000000640 returned -22
[  390.670626][   T33] audit: type=1800 audit(390.548:177): pid=15329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3789" name="bus" dev="loop4" ino=17058 res=0 errno=0
[  390.682952][   T33] audit: type=1800 audit(390.568:178): pid=15329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3789" name="file1" dev="loop4" ino=17059 res=0 errno=0
[  390.752549][T10911] ocfs2: Unmounting device (7,4) on (node local)
[  391.199141][T15366] sp0: Synchronizing with TNC
[  391.250640][   T33] audit: type=1326 audit(391.008:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15367 comm="syz.5.3806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2825b8ec29 code=0x7ffc0000
[  391.298594][   T33] audit: type=1326 audit(391.008:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15367 comm="syz.5.3806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2825b8ec29 code=0x7ffc0000
[  391.307630][   T33] audit: type=1326 audit(391.018:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15367 comm="syz.5.3806" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2825b8ec29 code=0x7ffc0000
[  391.489236][   T33] audit: type=1326 audit(391.018:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15367 comm="syz.5.3806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2825b8ec29 code=0x7ffc0000
[  391.511452][   T33] audit: type=1326 audit(391.018:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15367 comm="syz.5.3806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2825b8ec29 code=0x7ffc0000
[  391.540914][   T33] audit: type=1326 audit(391.018:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15367 comm="syz.5.3806" exe="/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f2825b8ec29 code=0x7ffc0000
[  391.566318][   T33] audit: type=1326 audit(391.028:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15367 comm="syz.5.3806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2825b8ec29 code=0x7ffc0000
[  392.017401][T15382] loop5: detected capacity change from 0 to 128
[  392.031664][T15382] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  392.126823][T14914] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  392.538753][ T5918] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  392.700284][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  392.705055][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  392.709432][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  392.715327][ T5918] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  392.719698][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.725757][ T5918] usb 5-1: config 0 descriptor??
[  393.138938][ T5918] hid_parser_main: 150 callbacks suppressed
[  393.138957][ T5918] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  393.144385][ T5918] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  393.147465][ T5918] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  393.151138][ T5918] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  393.154331][ T5918] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  393.157529][ T5918] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  393.164838][ T5918] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  393.275131][T15405] loop5: detected capacity change from 0 to 2048
[  393.282321][T15405] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  393.410540][ T5913] usb 5-1: USB disconnect, device number 22
[  393.543387][T15407] loop5: detected capacity change from 0 to 32768
[  393.552890][T15407] OCFS2: ERROR (device loop5): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 76: suballoc slot 3
[  393.559322][T15407] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  393.563521][T15407] OCFS2: Returning error to the calling process.
[  393.566245][T15407] (syz.5.3821,15407,1):ocfs2_read_locked_inode:597 ERROR: status = -5
[  393.570195][T15407] (syz.5.3821,15407,1):_ocfs2_get_system_file_inode:144 ERROR: status = -5
[  393.574600][T15407] (syz.5.3821,15407,1):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=11, slot=0
[  393.579954][T15407] (syz.5.3821,15407,1):ocfs2_init_local_system_inodes:505 ERROR: status = -22
[  393.583848][T15407] (syz.5.3821,15407,1):ocfs2_mount_volume:1758 ERROR: status = -22
[  393.588100][T15407] (syz.5.3821,15407,1):ocfs2_fill_super:1177 ERROR: status = -22
[  393.682722][T15410] netlink: 'syz.5.3822': attribute type 16 has an invalid length.
[  394.916567][T15425] netlink: 'syz.1.3829': attribute type 4 has an invalid length.
[  395.012709][T15419] loop4: detected capacity change from 0 to 40427
[  395.018267][T15419] F2FS-fs (loop4): build fault injection rate: 690
[  395.023788][T15419] F2FS-fs (loop4): invalid crc value
[  395.183806][T15419] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  395.188564][T15419] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  395.960132][T15441] loop4: detected capacity change from 0 to 32768
[  395.963303][T15441] xfs: Unknown parameter 'ikeep'
[  396.165118][T15451] xt_policy: neither incoming nor outgoing policy selected
[  396.268081][T15457] tmpfs: Bad value for 'mpol'
[  396.406039][T15467] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3848'.
[  396.540905][T15477] input: syz0 as /devices/virtual/input/input22
[  396.546218][T15477] input: failed to attach handler leds to device input22, error: -6
[  396.553618][T15479] loop5: detected capacity change from 0 to 512
[  396.588655][T15479] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3853: bad orphan inode 13
[  396.597030][T15479] ext4_test_bit(bit=12, block=4) = 1
[  396.604014][T15479] is_bad_inode(inode)=0
[  396.605607][T15479] NEXT_ORPHAN(inode)=0
[  396.612728][T15479] max_ino=32
[  396.613890][T15479] i_nlink=1
[  396.615693][T15479] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  396.636242][T14914] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  396.780816][T15493] loop5: detected capacity change from 0 to 2048
[  396.796192][T15493] syz.5.3859: attempt to access beyond end of device
[  396.796192][T15493] loop5: rw=524288, sector=9007199254741068, nr_sectors = 2 limit=2048
[  396.832127][T15496] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  396.832977][T15493] NILFS (loop5): the device already has a read/write mount.
[  396.978041][T15511] netlink: 'syz.1.3868': attribute type 32 has an invalid length.
[  397.505152][T15548] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3885'.
[  397.536085][T15550] loop4: detected capacity change from 0 to 256
[  397.544096][T15550] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  397.548285][T15550] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  397.561149][T15550] exFAT-fs (loop4): failed to load alloc-bitmap
[  397.563946][T15550] exFAT-fs (loop4): failed to recognize exfat type
[  397.682842][T15557] netlink: 'syz.1.3889': attribute type 21 has an invalid length.
[  397.689535][T15557] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3889'.
[  397.699676][T15557] netlink: 'syz.1.3889': attribute type 21 has an invalid length.
[  397.706438][T15557] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3889'.
[  398.472343][T15561] Process accounting paused
[  399.531681][T15606] overlay: Unknown parameter '/'
[  399.623602][T15610] Mount JFS Failure: -5
[  400.394573][T15621] loop5: detected capacity change from 0 to 128
[  400.452700][T15624] loop4: detected capacity change from 0 to 256
[  400.489739][T15624] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5658fca8, utbl_chksum : 0xe619d30d)
[  400.541274][T15628] syz.5.3915: attempt to access beyond end of device
[  400.541274][T15628] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128
[  400.547276][T15628] syz.5.3915: attempt to access beyond end of device
[  400.547276][T15628] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128
[  400.553088][T15628] syz.5.3915: attempt to access beyond end of device
[  400.553088][T15628] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128
[  400.567712][T15628] syz.5.3915: attempt to access beyond end of device
[  400.567712][T15628] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128
[  400.574695][T15628] syz.5.3915: attempt to access beyond end of device
[  400.574695][T15628] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128
[  400.590383][T15628] syz.5.3915: attempt to access beyond end of device
[  400.590383][T15628] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128
[  400.597235][T15628] syz.5.3915: attempt to access beyond end of device
[  400.597235][T15628] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128
[  400.615450][T15628] syz.5.3915: attempt to access beyond end of device
[  400.615450][T15628] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128
[  400.634549][T15628] syz.5.3915: attempt to access beyond end of device
[  400.634549][T15628] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128
[  400.762137][T15632] loop5: detected capacity change from 0 to 512
[  400.769600][T15632] EXT4-fs: quotafile must be on filesystem root
[  400.825266][T10911] syz-executor (10911) used greatest stack depth: 14552 bytes left
[  400.881849][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.045024][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.079003][T15639] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3926'.
[  401.114839][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  401.123117][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  401.126663][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  401.133145][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  401.136607][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  401.191234][T15643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3928'.
[  401.201900][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.213410][T15643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3928'.
[  401.222889][T15645] loop5: detected capacity change from 0 to 256
[  401.336979][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  401.390396][T15640] lo speed is unknown, defaulting to 1000
[  401.394104][T15640] lo speed is unknown, defaulting to 1000
[  401.653894][   T13] batadv1: left allmulticast mode
[  401.655834][   T13] batadv1: left promiscuous mode
[  401.657605][   T13] bridge0: port 3(batadv1) entered disabled state
[  401.666664][   T13] bridge_slave_1: left allmulticast mode
[  401.671341][   T13] bridge_slave_1: left promiscuous mode
[  401.673365][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  401.677691][   T13] bridge_slave_0: left allmulticast mode
[  401.686070][   T13] bridge_slave_0: left promiscuous mode
[  401.688085][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.383067][T15671] netlink: 'syz.1.3939': attribute type 8 has an invalid length.
[  402.385980][T15671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3939'.
[  402.646330][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  402.657353][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  402.663852][   T13] bond0 (unregistering): Released all slaves
[  402.685998][T15640] chnl_net:caif_netlink_parms(): no params data found
[  402.766161][T15671] bond0: entered promiscuous mode
[  402.768154][T15671] bond_slave_0: entered promiscuous mode
[  402.770791][T15671] bond_slave_1: entered promiscuous mode
[  402.772942][T15671] macvlan0: entered promiscuous mode
[  402.774876][T15671] dummy0: entered promiscuous mode
[  402.803034][T15671] bond0: left promiscuous mode
[  402.805058][T15671] bond_slave_0: left promiscuous mode
[  402.807283][T15671] bond_slave_1: left promiscuous mode
[  402.810358][T15671] macvlan0: left promiscuous mode
[  402.812362][T15671] dummy0: left promiscuous mode
[  402.844757][   T13] tipc: Disabling bearer <udp:syz2>
[  402.851923][   T13] tipc: Left network mode
[  403.159073][T15640] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.161664][T15640] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.175159][T15640] bridge_slave_0: entered allmulticast mode
[  403.188195][T15640] bridge_slave_0: entered promiscuous mode
[  403.220721][T14915] Bluetooth: hci0: command tx timeout
[  403.222535][T15640] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.226107][T15640] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.231746][T15640] bridge_slave_1: entered allmulticast mode
[  403.234842][T15640] bridge_slave_1: entered promiscuous mode
[  403.255484][   T13] hsr_slave_0: left promiscuous mode
[  403.263895][   T13] hsr_slave_1: left promiscuous mode
[  403.272407][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  403.275871][   T13] batadv0: mtu less than device minimum
[  403.300548][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  403.306957][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  403.312938][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  403.319414][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  403.326837][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  403.335541][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  403.340862][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  403.345796][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  403.351933][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  403.383191][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  403.389214][   T13] batman_adv: batadv0: Interface deactivated: dummy0
[  403.398704][   T13] batman_adv: batadv0: Removing interface: dummy0
[  403.426419][   T13] veth1_macvtap: left promiscuous mode
[  403.430694][   T13] veth1_vlan: left promiscuous mode
[  403.433394][   T13] veth0_vlan: left promiscuous mode
[  403.477253][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  403.477269][   T33] audit: type=1326 audit(403.348:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15688 comm="syz.1.3943" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa018ec29 code=0x7ffc0000
[  403.516125][   T33] audit: type=1326 audit(403.368:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15688 comm="syz.1.3943" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa018ec29 code=0x7ffc0000
[  403.538939][   T33] audit: type=1326 audit(403.378:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15688 comm="syz.1.3943" exe="/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2aa018ec29 code=0x7ffc0000
[  403.555933][   T33] audit: type=1326 audit(403.378:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15688 comm="syz.1.3943" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa018ec29 code=0x7ffc0000
[  403.581030][   T33] audit: type=1326 audit(403.378:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15688 comm="syz.1.3943" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa018ec29 code=0x7ffc0000
[  403.622955][   T33] audit: type=1326 audit(403.378:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15688 comm="syz.1.3943" exe="/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f2aa018ec29 code=0x7ffc0000
[  403.641779][   T33] audit: type=1326 audit(403.378:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15688 comm="syz.1.3943" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa018ec29 code=0x7ffc0000
[  403.651414][   T33] audit: type=1326 audit(403.378:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15688 comm="syz.1.3943" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa018ec29 code=0x7ffc0000
[  403.697610][   T13] team0 (unregistering): Port device batadv2 removed
[  404.317260][   T13] team0 (unregistering): Port device team_slave_1 removed
[  404.367028][   T13] team0 (unregistering): Port device team_slave_0 removed
[  404.902399][T15710] loop5: detected capacity change from 0 to 2048
[  404.928133][T15710] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  404.956783][T15711] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  405.011551][T15640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  405.025985][T15640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  405.032316][ T5913] lo speed is unknown, defaulting to 1000
[  405.034316][ T5913] infiniband syz2: ib_query_port failed (-19)
[  405.117918][T15640] team0: Port device team_slave_0 added
[  405.123654][T15640] team0: Port device team_slave_1 added
[  405.185600][T15640] batman_adv: batadv0: Adding interface: batadv_slave_0
[  405.193133][T15640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  405.218852][T15640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  405.235730][T15640] batman_adv: batadv0: Adding interface: batadv_slave_1
[  405.239803][T15640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  405.270899][T15640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  405.299207][T14915] Bluetooth: hci0: command tx timeout
[  405.450154][T15640] hsr_slave_0: entered promiscuous mode
[  405.459678][T15640] hsr_slave_1: entered promiscuous mode
[  405.468900][T15640] debugfs: 'hsr0' already exists in 'hsr'
[  405.471781][T15640] Cannot create hsr debugfs directory
[  405.619028][    T9] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  405.643761][   T13] IPVS: stop unused estimator thread 0...
[  405.777619][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[  405.788624][    T9] usb 6-1: not running at top speed; connect to a high speed hub
[  405.794442][    T9] usb 6-1: config 8 has an invalid interface number: 59 but max is 0
[  405.810492][    T9] usb 6-1: config 8 has no interface number 0
[  405.822256][    T9] usb 6-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=a9.94
[  405.832967][T15640] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  405.837301][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.840971][    T9] usb 6-1: Product: syz
[  405.842719][    T9] usb 6-1: Manufacturer: syz
[  405.844554][    T9] usb 6-1: SerialNumber: syz
[  405.852501][T15640] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  405.858139][T15640] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  405.871254][T15640] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  405.894938][T15755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3967'.
[  405.982044][T15640] 8021q: adding VLAN 0 to HW filter on device bond0
[  406.013964][T15640] 8021q: adding VLAN 0 to HW filter on device team0
[  406.024810][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.027991][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[  406.045456][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[  406.047913][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[  406.082738][    T9] gspca_main: etoms-2.14.0 probing 102c:6251
[  406.142777][    T9] usb 6-1: USB disconnect, device number 3
[  406.302590][T15640] 8021q: adding VLAN 0 to HW filter on device batadv0
[  406.436248][T15640] veth0_vlan: entered promiscuous mode
[  406.447535][T15640] veth1_vlan: entered promiscuous mode
[  406.502487][T15640] veth0_macvtap: entered promiscuous mode
[  406.523778][T15640] veth1_macvtap: entered promiscuous mode
[  406.543170][T15640] batman_adv: batadv0: Interface activated: batadv_slave_0
[  406.551656][T15640] batman_adv: batadv0: Interface activated: batadv_slave_1
[  406.598138][ T6816] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  406.620116][ T6816] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  406.641108][ T6816] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  406.700959][ T6816] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  406.846056][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  406.858566][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.119448][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  407.159934][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  407.251768][T15796] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3973'.
[  407.388469][T14915] Bluetooth: hci0: command tx timeout
[  408.735754][ T5917] Process accounting resumed
[  408.926727][T15851] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3988'.
[  408.933672][T15851] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3988'.
[  409.007454][T15856] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3990'.
[  409.067733][T15862] loop6: detected capacity change from 0 to 512
[  409.088767][T15862] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  409.099739][T15862] EXT4-fs (loop6): orphan cleanup on readonly fs
[  409.102910][T15862] EXT4-fs error (device loop6): __ext4_iget:5464: inode #11: block 8: comm syz.6.3992: invalid block
[  409.114171][T15862] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.3992: couldn't read orphan inode 11 (err -117)
[  409.120752][T15862] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  409.144943][T15640] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  409.458821][T14915] Bluetooth: hci0: command tx timeout
[  409.663378][T15873] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3997'.
[  409.847987][T15879] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.146862][T15886] loop6: detected capacity change from 0 to 32768
[  410.166366][T15886] ialloc: diAlloc returned -5!
[  410.248795][   T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  410.394656][T15911] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4014'.
[  410.398953][T15911] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4014'.
[  410.419322][   T24] usb 6-1: Using ep0 maxpacket: 32
[  410.424445][   T24] usb 6-1: unable to get BOS descriptor or descriptor too short
[  410.441731][   T24] usb 6-1: config 1 has an invalid interface number: 48 but max is 0
[  410.442607][T15913] Non-string source
[  410.448035][   T24] usb 6-1: config 1 has no interface number 0
[  410.454539][   T24] usb 6-1: config 1 interface 48 altsetting 9 bulk endpoint 0xF has invalid maxpacket 64
[  410.467750][   T24] usb 6-1: config 1 interface 48 has no altsetting 0
[  410.474650][   T24] usb 6-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=f3.9e
[  410.479725][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.483386][   T24] usb 6-1: Product: syz
[  410.486047][   T24] usb 6-1: Manufacturer: syz
[  410.488221][   T24] usb 6-1: SerialNumber: syz
[  410.497792][T15894] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  410.711039][   T24] ti_usb_3410_5052 6-1:1.48: TI USB 3410 1 port adapter converter detected
[  410.721121][   T24] usb 6-1: USB disconnect, device number 4
[  411.518715][ T5880] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  411.680485][ T5880] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  411.684219][ T5880] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  411.692378][ T5880] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  411.696265][ T5880] usb 6-1: config 1 has no interface number 1
[  411.699134][ T5880] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  411.707038][ T5880] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  411.710928][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.714350][ T5880] usb 6-1: Product: syz
[  411.716141][ T5880] usb 6-1: Manufacturer: syz
[  411.718145][ T5880] usb 6-1: SerialNumber: syz
[  411.943546][ T5880] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  411.946496][ T5880] usb 6-1: MIDIStreaming interface descriptor not found
[  411.994817][ T5880] usb 6-1: USB disconnect, device number 5
[  412.025352][ T7082] udevd[7082]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  412.731071][T15975] loop5: detected capacity change from 0 to 32768
[  412.920218][T15975] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  412.920245][T15975]   allowing incompatible features above 0.0: (unknown version)
[  412.920255][T15975]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  412.935828][T15975] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  412.938832][T15975] bcachefs (loop5): initializing new filesystem
[  412.952340][T15975] bcachefs (loop5): going read-write
[  412.971834][T15975] bcachefs (loop5): marking superblocks
[  412.985280][T15975] bcachefs (loop5): initializing freespace
[  412.992952][T15975] bcachefs (loop5): done initializing freespace
[  412.998561][T15975] bcachefs (loop5): reading snapshots table
[  413.001009][T15975] bcachefs (loop5): reading snapshots done
[  413.059463][T15975] bcachefs (loop5): done starting filesystem
[  413.180285][T15975] bcachefs (loop5): going read-only
[  413.182668][T15975] bcachefs (loop5): finished waiting for writes to stop
[  413.190489][T15975] bcachefs (loop5): flushing journal and stopping allocators, journal seq 2
[  413.277440][T15975] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 2
[  413.285291][T15975] bcachefs (loop5): clean shutdown complete, journal seq 3
[  413.289853][T15975] bcachefs (loop5): marking filesystem clean
[  413.362417][T14914] bcachefs (loop5): shutting down
[  413.447414][T14914] bcachefs (loop5): shutdown complete
[  414.762998][T16006] loop6: detected capacity change from 0 to 256
[  415.837333][T16042] loop6: detected capacity change from 0 to 512
[  415.868662][T16042] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.4065: casefold flag without casefold feature
[  415.876285][T16042] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.4065: couldn't read orphan inode 15 (err -117)
[  415.883649][T16042] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  415.927049][T15640] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.990823][ T5913] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  416.071830][T16056] netlink: 'syz.1.4071': attribute type 6 has an invalid length.
[  416.074978][T16056] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4071'.
[  416.145173][ T5913] usb 6-1: Using ep0 maxpacket: 32
[  416.149629][ T5913] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[  416.152988][ T5913] usb 6-1: config 0 has no interface number 0
[  416.168773][ T5913] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  416.172629][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.176727][ T5913] usb 6-1: Product: syz
[  416.179858][ T5913] usb 6-1: Manufacturer: syz
[  416.181732][ T5913] usb 6-1: SerialNumber: syz
[  416.189865][ T5913] usb 6-1: config 0 descriptor??
[  416.195230][ T5913] smsc95xx v2.0.0
[  416.434311][T16062] loop6: detected capacity change from 0 to 32768
[  416.450789][T16062] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  416.478964][T16062] XFS (loop6): Ending clean mount
[  416.505936][T16062] XFS (loop6): Quotacheck needed: Please wait.
[  416.566449][T16062] XFS (loop6): Quotacheck: Done.
[  416.588063][   T33] audit: type=1800 audit(416.468:195): pid=16062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4074" name="file1" dev="loop6" ino=6150 res=0 errno=0
[  416.603099][ T5913] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  416.607245][ T5913] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  416.616421][T15640] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  416.936190][T16088] loop6: detected capacity change from 0 to 256
[  416.960222][T16088] FAT-fs (loop6): Directory bread(block 64) failed
[  416.963768][T16088] FAT-fs (loop6): Directory bread(block 65) failed
[  416.968345][T16088] FAT-fs (loop6): Directory bread(block 66) failed
[  416.972310][T16088] FAT-fs (loop6): Directory bread(block 67) failed
[  416.975055][T16088] FAT-fs (loop6): Directory bread(block 68) failed
[  416.977370][T16088] FAT-fs (loop6): Directory bread(block 69) failed
[  416.981196][T16088] FAT-fs (loop6): Directory bread(block 70) failed
[  416.984107][T16088] FAT-fs (loop6): Directory bread(block 71) failed
[  416.987198][T16088] FAT-fs (loop6): Directory bread(block 72) failed
[  416.990360][T16088] FAT-fs (loop6): Directory bread(block 73) failed
[  417.037264][ T1091] bio_check_eod: 4 callbacks suppressed
[  417.037276][ T1091] kworker/u10:6: attempt to access beyond end of device
[  417.037276][ T1091] loop6: rw=1, sector=1224, nr_sectors = 12 limit=256
[  417.436777][ T5913] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  417.443803][ T5913] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71
[  417.455964][ T5913] usb 6-1: USB disconnect, device number 6
[  418.158224][T16129] loop6: detected capacity change from 0 to 8
[  418.261418][T16135] loop6: detected capacity change from 0 to 512
[  418.408659][  T794] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  418.558272][T16149] overlayfs: failed to resolve './cgroup': -2
[  418.571878][  T794] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  418.575901][  T794] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  418.581763][  T794] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  418.598182][  T794] usb 6-1: config 1 has no interface number 0
[  418.608664][  T794] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[  418.613164][  T794] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[  418.632207][  T794] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  418.632457][T16151] loop6: detected capacity change from 0 to 16
[  418.635991][  T794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.650471][  T794] usb 6-1: Product: syz
[  418.651302][T16151] erofs (device loop6): mounted with root inode @ nid 36.
[  418.652307][  T794] usb 6-1: Manufacturer: syz
[  418.667557][  T794] usb 6-1: SerialNumber: syz
[  418.695205][T16151] erofs (device loop6): bogus dirent @ nid 36
[  418.816460][T16155] loop6: detected capacity change from 0 to 512
[  418.857616][T16155] EXT4-fs (loop6): Test dummy encryption mode enabled
[  418.861176][T16155] EXT4-fs (loop6): Encoding requested by superblock is unknown
[  418.908673][  T794] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71
[  418.943875][  T794] usb 6-1: USB disconnect, device number 7
[  419.106710][T16171] net_ratelimit: 10 callbacks suppressed
[  419.106733][T16171] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  419.260825][T16180] loop6: detected capacity change from 0 to 512
[  419.304867][T16180] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  419.762159][T15640] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  419.986671][T16203] netlink: 'syz.5.4123': attribute type 29 has an invalid length.
[  420.344052][T16211] loop6: detected capacity change from 0 to 32768
[  420.455631][T16211] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  420.547013][T16211] XFS (loop6): Ending clean mount
[  420.561393][T16211] XFS (loop6): Quotacheck needed: Please wait.
[  420.654462][T16211] XFS (loop6): Quotacheck: Done.
[  420.835933][T15640] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  421.522706][T16249] tipc: Failed to remove unknown binding: 66,1,1/0:2603605226/2603605228
[  421.528101][T16249] tipc: Failed to remove unknown binding: 66,1,1/0:2603605226/2603605228
[  421.778001][T16258] netlink: 'syz.1.4142': attribute type 11 has an invalid length.
[  422.268501][   T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  422.428600][   T24] usb 6-1: Using ep0 maxpacket: 16
[  422.433626][   T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  422.440076][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  422.447492][   T24] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  422.451510][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.455133][   T24] usb 6-1: Product: syz
[  422.457106][   T24] usb 6-1: Manufacturer: syz
[  422.459229][   T24] usb 6-1: SerialNumber: syz
[  422.463663][   T24] usb 6-1: config 0 descriptor??
[  422.469483][   T24] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  422.473511][   T24] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[  422.740864][T16278] netlink: 19 bytes leftover after parsing attributes in process `syz.6.4151'.
[  422.864999][T16282] Bluetooth: MGMT ver 1.23
[  422.866970][T16282] Bluetooth: hci0: invalid length 0, exp 2 for type 10
[  423.085212][   T24] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[  423.092352][   T24] em28xx 6-1:0.0: Config register raw data: 0x54
[  423.248477][    T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  423.292990][   T24] em28xx 6-1:0.0: AC97 chip type couldn't be determined
[  423.296713][   T24] em28xx 6-1:0.0: No AC97 audio processor
[  423.306274][   T24] usb 6-1: USB disconnect, device number 8
[  423.309982][   T24] em28xx 6-1:0.0: Disconnecting em28xx
[  423.325151][   T24] em28xx 6-1:0.0: Freeing device
[  423.349385][T16305] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4164'.
[  423.419179][    T9] usb 7-1: Using ep0 maxpacket: 32
[  423.424435][    T9] usb 7-1: config 1 has an invalid interface number: 232 but max is 0
[  423.427676][    T9] usb 7-1: config 1 has no interface number 0
[  423.431250][    T9] usb 7-1: config 1 interface 232 has no altsetting 0
[  423.437234][    T9] usb 7-1: New USB device found, idVendor=174f, idProduct=8a34, bcdDevice=fd.d5
[  423.441683][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.444957][    T9] usb 7-1: Product: syz
[  423.446740][    T9] usb 7-1: Manufacturer: syz
[  423.449787][    T9] usb 7-1: SerialNumber: syz
[  423.463520][    T9] uvcvideo 7-1:1.232: Found Unit with invalid ID 0
[  423.866267][    T9] uvcvideo 7-1:1.232: Found UVC 0.00 device syz (174f:8a34)
[  423.878177][    T9] uvcvideo 7-1:1.232: No valid video chain found.
[  423.921821][   T33] audit: type=1400 audit(423.778:196): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=16311 comm="syz.5.4167"
[  424.196404][T15798] usb 7-1: USB disconnect, device number 2
[  424.238815][   T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  424.401383][   T24] usb 6-1: Using ep0 maxpacket: 8
[  424.438319][   T24] usb 6-1: unable to get BOS descriptor or descriptor too short
[  424.442154][   T24] usb 6-1: config 7 has an invalid interface number: 6 but max is 0
[  424.444859][   T24] usb 6-1: config 7 has no interface number 0
[  424.446898][   T24] usb 6-1: config 7 interface 6 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  424.451912][   T24] usb 6-1: config 7 interface 6 has no altsetting 0
[  424.459848][   T24] usb 6-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=30.9e
[  424.463661][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.467106][   T24] usb 6-1: Product: syz
[  424.470822][   T24] usb 6-1: Manufacturer: syz
[  424.472537][   T24] usb 6-1: SerialNumber: syz
[  424.693383][   T24] option 6-1:7.6: GSM modem (1-port) converter detected
[  424.715455][   T24] usb 6-1: USB disconnect, device number 9
[  424.727636][   T24] option 6-1:7.6: device disconnected
[  424.761300][T16333] netlink: 144 bytes leftover after parsing attributes in process `syz.6.4176'.
[  424.769279][T16333] netlink: 144 bytes leftover after parsing attributes in process `syz.6.4176'.
[  425.128966][ T6816] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.246705][ T6816] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.258455][T16352] tipc: Trying to set illegal importance in message
[  425.359865][ T6816] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.384532][T16357] loop5: detected capacity change from 0 to 8192
[  425.460304][ T6816] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.499239][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  425.506796][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  425.513090][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  425.519332][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  425.528131][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  425.589225][T16358] lo speed is unknown, defaulting to 1000
[  425.788825][ T6816] bridge_slave_1: left allmulticast mode
[  425.791207][ T6816] bridge_slave_1: left promiscuous mode
[  425.793704][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state
[  425.811197][ T6816] bridge_slave_0: left allmulticast mode
[  425.813597][ T6816] bridge_slave_0: left promiscuous mode
[  425.816086][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.099683][ T6816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  427.107775][ T6816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  427.114095][ T6816] bond0 (unregistering): Released all slaves
[  427.184110][ T5852] udevd[5852]: failed to send result of seq 17746 to main daemon: Connection refused
[  427.294324][T16358] chnl_net:caif_netlink_parms(): no params data found
[  427.648330][T14915] Bluetooth: hci0: command tx timeout
[  427.756304][T16358] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.780665][T16358] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.783814][T16358] bridge_slave_0: entered allmulticast mode
[  427.804637][T16358] bridge_slave_0: entered promiscuous mode
[  427.823523][T16358] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.827005][T16358] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.853132][T16358] bridge_slave_1: entered allmulticast mode
[  427.857473][T16358] bridge_slave_1: entered promiscuous mode
[  427.864611][T16422] loop5: detected capacity change from 0 to 256
[  427.895087][T16422] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  427.908831][T16422] exFAT-fs (loop5): failed to load alloc-bitmap
[  427.911512][T16422] exFAT-fs (loop5): failed to recognize exfat type
[  427.967401][T16358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  427.991042][ T6816] hsr_slave_0: left promiscuous mode
[  427.994180][ T6816] hsr_slave_1: left promiscuous mode
[  427.997399][ T6816] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  428.001772][ T6816] batman_adv: batadv0: Removing interface: batadv_slave_0
[  428.010004][ T6816] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  428.013093][ T6816] batman_adv: batadv0: Removing interface: batadv_slave_1
[  428.044329][ T6816] veth1_macvtap: left promiscuous mode
[  428.046747][ T6816] veth0_macvtap: left promiscuous mode
[  428.053564][ T6816] veth1_vlan: left promiscuous mode
[  428.056070][ T6816] veth0_vlan: left promiscuous mode
[  428.707853][ T6816] team0 (unregistering): Port device team_slave_1 removed
[  428.755872][ T6816] team0 (unregistering): Port device team_slave_0 removed
[  429.312590][T16358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  429.366498][T16358] team0: Port device team_slave_0 added
[  429.372877][T16358] team0: Port device team_slave_1 added
[  429.435132][T16358] batman_adv: batadv0: Adding interface: batadv_slave_0
[  429.438072][T16358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  429.451856][T16358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  429.458563][T16358] batman_adv: batadv0: Adding interface: batadv_slave_1
[  429.461672][T16358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  429.472439][T16358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  429.539931][T16358] hsr_slave_0: entered promiscuous mode
[  429.549553][T16358] hsr_slave_1: entered promiscuous mode
[  429.553189][T16358] debugfs: 'hsr0' already exists in 'hsr'
[  429.559682][T16358] Cannot create hsr debugfs directory
[  429.704392][T14915] Bluetooth: hci0: command tx timeout
[  430.197216][T16358] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  430.207187][T16358] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  430.212518][T16358] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  430.220806][T16358] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  430.298333][T16358] 8021q: adding VLAN 0 to HW filter on device bond0
[  430.338031][T16358] 8021q: adding VLAN 0 to HW filter on device team0
[  430.376470][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[  430.379098][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[  430.390084][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[  430.393144][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[  430.655613][T16358] 8021q: adding VLAN 0 to HW filter on device batadv0
[  430.833172][T16358] veth0_vlan: entered promiscuous mode
[  430.843394][T16358] veth1_vlan: entered promiscuous mode
[  430.862802][T16358] veth0_macvtap: entered promiscuous mode
[  430.867201][T16358] veth1_macvtap: entered promiscuous mode
[  430.879496][T16358] batman_adv: batadv0: Interface activated: batadv_slave_0
[  430.890466][T16358] batman_adv: batadv0: Interface activated: batadv_slave_1
[  430.897742][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  430.901279][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  430.905049][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  430.910256][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  430.986462][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  430.992095][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  431.015665][   T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  431.019911][   T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  431.105002][T16509] netlink: 'syz.7.4234': attribute type 1 has an invalid length.
[  431.110015][T16509] netlink: 208 bytes leftover after parsing attributes in process `syz.7.4234'.
[  431.768626][T14915] Bluetooth: hci0: command tx timeout
[  431.915624][T16540] loop5: detected capacity change from 0 to 32768
[  432.237068][T16550] loop5: detected capacity change from 0 to 4096
[  432.256899][T16550] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  432.259981][T16550] ntfs3(loop5): Failed to load $Secure (-22).
[  432.262576][T16550] ntfs3(loop5): Failed to initialize $Secure (-22).
[  432.526782][T16557] loop5: detected capacity change from 0 to 2048
[  432.530982][T16557] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  432.545636][T16558] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  433.119747][T16588] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4268'.
[  433.198101][T16592] binder: 16591:16592 ioctl 4018620d 0 returned -22
[  433.659398][T16603] netlink: 'syz.5.4273': attribute type 2 has an invalid length.
[  433.662862][T16603] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4273'.
[  433.833757][T16611] loop5: detected capacity change from 0 to 512
[  433.837056][T16611] EXT4-fs: Ignoring removed nobh option
[  433.841433][T16611] EXT4-fs (loop5): Test dummy encryption mode enabled
[  433.847148][T16611] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4275: iget: bad i_size value: 38620345925642
[  433.848664][T14915] Bluetooth: hci0: command tx timeout
[  433.854535][T16611] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4275: couldn't read orphan inode 15 (err -117)
[  433.856055][T16611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  433.869672][T16611] EXT4-fs (loop5): shut down requested (2)
[  433.894238][T14914] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.227972][T16633] loop5: detected capacity change from 0 to 16384
[  434.233272][T16633] bcachefs (/dev/loop5): error validating superblock: Filesystem has incompatible version 1.13: inode_has_child_snapshots, current version 1.28: inode_has_case_insensitive
[  434.241683][T16633] bcachefs: bch2_fs_get_tree() error: invalid_sb_features
[  434.646839][T16656] loop7: detected capacity change from 0 to 4096
[  434.651456][T16656] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  436.488284][T16691] loop5: detected capacity change from 0 to 131072
[  436.497680][T16691] F2FS-fs (loop5): invalid crc value
[  436.556126][T16691] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  436.566226][T16691] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  436.792728][T16720] Invalid ELF header type: 3 != 1
[  437.571875][T16728] netlink: 'syz.5.4325': attribute type 1 has an invalid length.
[  437.652459][T16728] gretap1: entered allmulticast mode
[  437.657074][T16728] bond2: (slave gretap1): making interface the new active one
[  437.702803][T16728] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  438.999014][T16702] Set syz1 is full, maxelem 65536 reached
[  439.313481][T16789] netlink: 204 bytes leftover after parsing attributes in process `syz.7.4353'.
[  439.475518][T16793] syzkaller0: entered allmulticast mode
[  439.514481][T16785] loop5: detected capacity change from 0 to 40427
[  439.526885][T16785] F2FS-fs (loop5): build fault injection rate: 14
[  439.530403][T16785] F2FS-fs (loop5): build fault injection type: 0x0
[  439.535140][T16785] F2FS-fs (loop5): invalid crc value
[  439.625100][T16785] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  439.632482][T16785] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  439.687008][T14914] syz-executor: attempt to access beyond end of device
[  439.687008][T14914] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  439.698931][T14914] CPU: 0 UID: 0 PID: 14914 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  439.698949][T14914] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  439.698964][T14914] Call Trace:
[  439.698969][T14914]  <TASK>
[  439.698974][T14914]  dump_stack_lvl+0x189/0x250
[  439.698995][T14914]  ? __pfx_dump_stack_lvl+0x10/0x10
[  439.699007][T14914]  ? __pfx_queue_work_on+0x10/0x10
[  439.699017][T14914]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  439.699031][T14914]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  439.699054][T14914]  f2fs_handle_critical_error+0x37c/0x540
[  439.699073][T14914]  f2fs_write_end_io+0x886/0xb60
[  439.699102][T14914]  __submit_merged_bio+0x27a/0x6a0
[  439.699120][T14914]  __submit_merged_write_cond+0x255/0x530
[  439.699139][T14914]  f2fs_write_data_pages+0x261d/0x3000
[  439.699179][T14914]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  439.699230][T14914]  ? folio_unqueue_deferred_split+0x93/0x230
[  439.699248][T14914]  ? folios_put_refs+0x584/0x670
[  439.699271][T14914]  ? __lock_acquire+0xab9/0xd20
[  439.699293][T14914]  ? do_raw_spin_lock+0x121/0x290
[  439.699314][T14914]  ? do_raw_spin_unlock+0x4d/0x240
[  439.699327][T14914]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  439.699342][T14914]  do_writepages+0x32e/0x550
[  439.699367][T14914]  ? do_raw_spin_unlock+0x4d/0x240
[  439.699382][T14914]  filemap_fdatawrite+0x199/0x240
[  439.699398][T14914]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  439.699449][T14914]  ? do_raw_spin_unlock+0x4d/0x240
[  439.699464][T14914]  f2fs_sync_dirty_inodes+0x31f/0x830
[  439.699491][T14914]  f2fs_write_checkpoint+0x93e/0x2440
[  439.699506][T14914]  ? __lock_acquire+0xab9/0xd20
[  439.699541][T14914]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  439.699598][T14914]  kill_f2fs_super+0x2cc/0x6d0
[  439.699618][T14914]  ? __pfx_kill_f2fs_super+0x10/0x10
[  439.699646][T14914]  ? shrinker_free+0x2ce/0x3e0
[  439.699663][T14914]  deactivate_locked_super+0xbc/0x130
[  439.699680][T14914]  cleanup_mnt+0x425/0x4c0
[  439.699695][T14914]  ? lockdep_hardirqs_on+0x9c/0x150
[  439.699712][T14914]  task_work_run+0x1d4/0x260
[  439.699727][T14914]  ? __pfx_task_work_run+0x10/0x10
[  439.699739][T14914]  ? __x64_sys_umount+0x122/0x160
[  439.699752][T14914]  ? exit_to_user_mode_loop+0x40/0x130
[  439.699769][T14914]  exit_to_user_mode_loop+0xe9/0x130
[  439.699783][T14914]  do_syscall_64+0x2bd/0xfa0
[  439.699797][T14914]  ? lockdep_hardirqs_on+0x9c/0x150
[  439.699834][T14914]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.699845][T14914]  ? exc_page_fault+0xab/0x100
[  439.699861][T14914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.699871][T14914] RIP: 0033:0x7f2825b8ff57
[  439.699882][T14914] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  439.699891][T14914] RSP: 002b:00007ffd33581718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  439.699904][T14914] RAX: 0000000000000000 RBX: 00007f2825c11c2d RCX: 00007f2825b8ff57
[  439.699911][T14914] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd335817d0
[  439.699918][T14914] RBP: 00007ffd335817d0 R08: 0000000000000000 R09: 0000000000000000
[  439.699925][T14914] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd33582860
[  439.699932][T14914] R13: 00007f2825c11c2d R14: 000000000006b505 R15: 00007ffd335828a0
[  439.699959][T14914]  </TASK>
[  439.699964][T14914] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  439.702724][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  439.844611][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  440.627506][T16816] loop7: detected capacity change from 0 to 4096
[  440.645861][T16816] NILFS (loop7): mounting unchecked fs
[  440.648152][T16816] NILFS (loop7): recovery required for readonly filesystem
[  440.664592][T16816] NILFS (loop7): write access will be enabled during recovery
[  440.683249][T16816] NILFS (loop7): invalid segment: Checksum error in segment payload
[  440.686644][T16816] NILFS (loop7): trying rollback from an earlier position
[  440.697784][T16816] NILFS (loop7): norecovery option specified, skipping roll-forward recovery
[  440.711950][T16816] NILFS (loop7): The specified checkpoint is not a snapshot (checkpoint number=2)
[  441.734318][T16855] RDS: rds_bind could not find a transport for ::4006:0:20:0, load rds_tcp or rds_rdma?
[  441.947168][   T33] audit: type=1326 audit(441.818:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16880 comm="syz.1.4384" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa018ec29 code=0x7ffc0000
[  441.956798][   T33] audit: type=1326 audit(441.818:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16880 comm="syz.1.4384" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa018ec29 code=0x7ffc0000
[  441.976981][   T33] audit: type=1326 audit(441.828:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16880 comm="syz.1.4384" exe="/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f2aa018ec29 code=0x7ffc0000
[  441.988507][   T33] audit: type=1326 audit(441.828:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16880 comm="syz.1.4384" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa018ec29 code=0x7ffc0000
[  442.007178][   T33] audit: type=1326 audit(441.828:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16880 comm="syz.1.4384" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa018ec29 code=0x7ffc0000
[  442.075862][T16888] loop7: detected capacity change from 0 to 4096
[  442.090289][T16892] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  442.099010][   T33] audit: type=1800 audit(441.968:202): pid=16888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4389" name="file1" dev="loop7" ino=15 res=0 errno=0
[  442.127521][T16888] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  442.140711][T16888] Remounting filesystem read-only
[  442.143149][T16888] NILFS (loop7): DAT doesn't have a block to manage vblocknr = 524288
[  442.147049][T16888] NILFS error (device loop7): nilfs_bmap_truncate: broken bmap (inode number=15)
[  442.151049][T16888] NILFS (loop7): error -5 truncating bmap (ino=15)
[  442.154359][T16888] NILFS (loop7): mounting fs with errors
[  442.158591][T16158] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  442.178189][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4392'.
[  442.224680][T16901] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  442.308475][T16158] usb 6-1: Using ep0 maxpacket: 32
[  442.317391][T16158] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  442.321866][T16158] usb 6-1: config 0 interface 0 has no altsetting 1
[  442.327218][T16158] usb 6-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00
[  442.332894][T16158] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  442.336242][T16158] usb 6-1: SerialNumber: syz
[  442.344723][T16158] usb 6-1: config 0 descriptor??
[  442.359515][T16158] usb-storage 6-1:0.0: USB Mass Storage device detected
[  442.384727][T16158] usb-storage 6-1:0.0: Quirks match for vid 152d pid 0539: 4000000
[  442.415466][T16920] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4401'.
[  442.538277][T16931] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4407'.
[  442.567217][T16158] usb 6-1: USB disconnect, device number 10
[  442.883372][T16937] netlink: 'syz.7.4409': attribute type 2 has an invalid length.
[  442.886690][T16937] netlink: 'syz.7.4409': attribute type 1 has an invalid length.
[  442.909679][T16937] sctp: [Deprecated]: syz.7.4409 (pid 16937) Use of struct sctp_assoc_value in delayed_ack socket option.
[  442.909679][T16937] Use struct sctp_sack_info instead
[  443.391041][T16962] loop5: detected capacity change from 0 to 1024
[  444.636241][T16999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4435'.
[  444.671537][T16999] netlink: 'syz.1.4435': attribute type 10 has an invalid length.
[  444.681893][T16999] bond0: (slave ): Enslaving as an active interface with an up link
[  445.228045][T17027] bond3: entered promiscuous mode
[  445.499683][T17035] loop5: detected capacity change from 0 to 128
[  446.516759][T17057] overlayfs: failed to clone upperpath
[  446.676206][T17065] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4462'.
[  446.810739][T17077] loop7: detected capacity change from 0 to 4096
[  446.927569][   T33] audit: type=1800 audit(446.798:203): pid=17077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4468" name="file1" dev="loop7" ino=34 res=0 errno=0
[  447.703056][T17105] netlink: 'syz.1.4480': attribute type 3 has an invalid length.
[  447.706234][T17105] netlink: 'syz.1.4480': attribute type 3 has an invalid length.
[  447.714566][T17104] loop7: detected capacity change from 0 to 2048
[  447.761790][T17104] Alternate GPT is invalid, using primary GPT.
[  447.764583][T17104]  loop7: p2 p3 p7
[  449.349133][T17136] random: crng reseeded on system resumption
[  449.360437][T17136] Restarting kernel threads ...
[  449.365745][T17136] Done restarting kernel threads.
[  449.738915][T17152] loop5: detected capacity change from 0 to 4096
[  449.751370][T17153] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  452.385391][T17223] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0)
[  454.650192][T17260] netlink: 'syz.7.4542': attribute type 12 has an invalid length.
[  454.652910][T17260] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4542'.
[  454.970216][T17276] loop5: detected capacity change from 0 to 512
[  454.980090][T17276] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  454.996650][   T33] audit: type=1800 audit(2000000003.660:204): pid=17276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4550" name="file1" dev="loop5" ino=15 res=0 errno=0
[  455.027743][T14914] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  455.247709][T17290] netlink: 'syz.5.4556': attribute type 1 has an invalid length.
[  455.250452][T17290] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4556'.
[  455.636984][T17299] loop5: detected capacity change from 0 to 32768
[  455.641358][T17299] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4560 (17299)
[  455.656459][T17299] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  455.660109][T17299] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  455.764828][T17299] BTRFS info (device loop5): enabling ssd optimizations
[  455.767795][T17299] BTRFS info (device loop5): enabling free space tree
[  455.795368][T14914] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  456.355445][T17353] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4578'.
[  456.382626][T17357] loop5: detected capacity change from 0 to 256
[  456.390617][   T33] audit: type=1800 audit(2000000005.060:205): pid=17357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4580" name="file1" dev="loop5" ino=1048708 res=0 errno=0
[  456.414624][T17357] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  456.417829][T17357] FAT-fs (loop5): Filesystem has been set read-only
[  457.316653][T17368] veth0: entered promiscuous mode
[  457.334827][T17368] veth0: left promiscuous mode
[  457.705442][T17394] loop5: detected capacity change from 0 to 128
[  457.723094][   T33] audit: type=1800 audit(2000000006.390:206): pid=17394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4597" name="file1" dev="loop5" ino=1048709 res=0 errno=0
[  457.785847][T17400] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  457.802486][T17400] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  458.298214][T17398] loop7: detected capacity change from 0 to 32768
[  458.324251][T17398] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  458.374963][T17398] XFS (loop7): Ending clean mount
[  458.381598][T17398] XFS (loop7): Quotacheck needed: Please wait.
[  458.433124][T17398] XFS (loop7): Quotacheck: Done.
[  458.531444][T16358] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  458.931947][T17452] netlink: 'syz.7.4620': attribute type 4 has an invalid length.
[  459.385414][T17463] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  459.388189][T17463] overlayfs: failed to set xattr on upper
[  459.390503][T17463] overlayfs: ...falling back to redirect_dir=nofollow.
[  459.393332][T17463] overlayfs: ...falling back to index=off.
[  459.395905][T17463] overlayfs: ...falling back to uuid=null.
[  459.454998][T17464] overlayfs: overlay with incompat feature 'volatile' cannot be mounted
[  460.001658][T17472] netlink: 'syz.1.4628': attribute type 1 has an invalid length.
[  460.142789][T17476] netlink: 5 bytes leftover after parsing attributes in process `syz.7.4630'.
[  460.151891][T17476] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  460.393641][T17481] Invalid ELF header magic: != ELF
[  460.600168][T17490] loop5: detected capacity change from 0 to 128
[  460.794881][T17503] loop5: detected capacity change from 0 to 1024
[  461.662752][T17533] netlink: 'syz.1.4655': attribute type 10 has an invalid length.
[  462.129904][T17541] o2cb: This node has not been configured.
[  462.132174][T17541] o2cb: Cluster check failed. Fix errors before retrying.
[  462.134723][T17541] (syz.1.4657,17541,0):user_dlm_register:674 ERROR: status = -22
[  462.137358][T17541] (syz.1.4657,17541,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1"
[  463.744005][T17580] loop5: detected capacity change from 0 to 128
[  463.762403][T17580] hpfs: hpfs_map_sector(): read error
[  463.764416][T17580] hpfs: filesystem error: can't load hotfix map; already mounted read-only
[  463.770459][T17580] hpfs: hpfs_map_sector(): read error
[  463.778881][T17583] netdevsim netdevsim7 netdevsim0: entered promiscuous mode
[  464.073153][T17595] loop5: detected capacity change from 0 to 4096
[  464.883679][T17623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4697'.
[  465.507180][T17645] loop5: detected capacity change from 0 to 32768
[  465.525247][T17645] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  465.625761][T17659] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  466.090272][T14914] ocfs2: Unmounting device (7,5) on (node local)
[  466.524871][T17687] loop5: detected capacity change from 0 to 512
[  466.541356][T17687] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  466.552367][T17687] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002]
[  466.555831][T17687] System zones: 1-12
[  466.559394][T17687] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.4726: corrupted in-inode xattr: e_value size too large
[  466.565944][T17687] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4726: couldn't read orphan inode 15 (err -117)
[  466.572783][T17687] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  466.588254][T17693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4728'.
[  466.616545][T14914] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  467.018647][ T5880] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  467.170271][ T5880] usb 6-1: config 4 has an invalid interface number: 88 but max is 1
[  467.173320][ T5880] usb 6-1: config 4 has an invalid interface number: 29 but max is 1
[  467.176075][ T5880] usb 6-1: config 4 has no interface number 0
[  467.178114][ T5880] usb 6-1: config 4 has no interface number 1
[  467.180769][ T5880] usb 6-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping
[  467.186103][ T5880] usb 6-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85
[  467.191549][ T5880] usb 6-1: config 4 interface 88 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 64
[  467.196020][ T5880] usb 6-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  467.201635][ T5880] usb 6-1: config 4 interface 29 altsetting 9 has an endpoint descriptor with address 0xA6, changing to 0x86
[  467.205558][ T5880] usb 6-1: config 4 interface 29 altsetting 9 endpoint 0x86 has invalid maxpacket 1023, setting to 64
[  467.209843][ T5880] usb 6-1: config 4 interface 88 has no altsetting 0
[  467.212124][ T5880] usb 6-1: config 4 interface 29 has no altsetting 0
[  467.216414][ T5880] usb 6-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7
[  467.220096][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.223126][ T5880] usb 6-1: Product: syz
[  467.224577][ T5880] usb 6-1: Manufacturer: syz
[  467.226225][ T5880] usb 6-1: SerialNumber: syz
[  467.230657][T17708] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  467.440079][ T5880] chaoskey 6-1:4.29: Unable to register with hwrng
[  467.443673][ T5880] usb 6-1: USB disconnect, device number 11
[  468.010909][T17726] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4744'.
[  468.102801][T17730] Bluetooth: MGMT ver 1.23
[  468.152555][T17732] loop5: detected capacity change from 0 to 512
[  468.176650][T17732] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.4747: iget: bad i_size value: 38620345925642
[  468.183111][T17732] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4747: couldn't read orphan inode 15 (err -117)
[  468.188082][T17732] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  468.220631][T14914] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  468.466580][T17758] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  468.466580][T17758] The task syz.5.4756 (17758) triggered the difference, watch for misbehavior.
[  469.305848][T17767] pimreg: entered allmulticast mode
[  469.314002][T17767] pimreg: left allmulticast mode
[  469.336303][T17765] 9pnet_fd: Insufficient options for proto=fd
[  469.824059][T17780] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4768'.
[  470.153277][T17793] loop7: detected capacity change from 0 to 256
[  470.167433][T17793] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  470.383952][T17805] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  470.801174][T17837] loop5: detected capacity change from 0 to 1024
[  470.812455][T17837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  470.827474][T17837] EXT4-fs error (device loop5): ext4_empty_dir:3109: inode #11: block 623: comm syz.5.4796: Attempting to read directory block (623) that is past i_size (638464)
[  470.836949][T17837] EXT4-fs (loop5): Remounting filesystem read-only
[  470.859994][T14914] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  470.955889][T17844] loop5: detected capacity change from 0 to 2048
[  470.982616][T17844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  471.276750][T17858] netlink: 'syz.1.4804': attribute type 4 has an invalid length.
[  471.481664][T17844] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  471.489819][T17844] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  471.495487][T17844] EXT4-fs (loop5): This should not happen!! Data will be lost
[  471.495487][T17844] 
[  471.499494][T17844] EXT4-fs (loop5): Total free blocks count 0
[  471.501593][T17844] EXT4-fs (loop5): Free/Dirty block details
[  471.503909][T17844] EXT4-fs (loop5): free_blocks=2415919104
[  471.505875][T17844] EXT4-fs (loop5): dirty_blocks=8208
[  471.507943][T17844] EXT4-fs (loop5): Block reservation details
[  471.510600][T17844] EXT4-fs (loop5): i_reserved_data_blocks=513
[  471.566683][ T4864] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  471.790633][T17884] 8021q: adding VLAN 0 to HW filter on device bond4
[  471.801197][T17884] team0: Failed to send port change of device bond4 via netlink (err -105)
[  471.801364][T17884] team0: Failed to send options change via netlink (err -105)
[  471.801408][T17884] team0: Port device bond4 added
[  471.806838][ T4864] team0: Failed to send port change of device bond4 via netlink (err -105)
[  472.305507][T17894] netlink: del zone limit has 4 unknown bytes
[  472.833583][T17907] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4825'.
[  472.836558][T17907] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4825'.
[  473.657990][T17926] loop7: detected capacity change from 0 to 512
[  473.771725][T17938] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4840'.
[  473.774610][T17938] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4840'.
[  473.820761][T17944] Invalid ELF header magic: != ELF
[  474.412398][T14915] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  474.416314][T14915] Bluetooth: hci0: Injecting HCI hardware error event
[  474.422681][ T5859] Bluetooth: hci0: hardware error 0x00
[  475.247314][T17956] syz.5.4848 (17956): drop_caches: 2
[  475.973663][T17991] loop5: detected capacity change from 0 to 128
[  475.979595][T17991] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  475.984277][T17991] ext4 filesystem being mounted at /378/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  476.004641][T14914] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  476.452082][ T5880] usb 6-1: new low-speed USB device number 12 using dummy_hcd
[  476.493608][ T5859] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  476.609875][ T5880] usb 6-1: unable to get BOS descriptor or descriptor too short
[  476.617219][ T5880] usb 6-1: config 1 interface 0 altsetting 108 endpoint 0x81 has invalid maxpacket 16, setting to 8
[  476.627116][ T5880] usb 6-1: config 1 interface 0 has no altsetting 0
[  476.633451][ T5880] usb 6-1: string descriptor 0 read error: -22
[  476.636338][ T5880] usb 6-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.40
[  476.640801][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.647548][T18001] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  476.658045][ T5880] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input24
[  476.869206][ T5282] bcm5974 6-1:1.0: could not read from device
[  476.876561][ T5282] bcm5974 6-1:1.0: could not read from device
[  476.885250][ T5282] bcm5974 6-1:1.0: could not read from device
[  476.903198][ T5282] bcm5974 6-1:1.0: could not read from device
[  476.904585][ T5880] usb 6-1: USB disconnect, device number 12
[  477.439625][T18035] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4885'.
[  477.441560][T18033] vlan0: entered promiscuous mode
[  477.448886][T18033] bridge0: entered promiscuous mode
[  477.687685][T18043] loop5: detected capacity change from 0 to 32768
[  477.696043][   T33] audit: type=1800 audit(2000000539.314:207): pid=18043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4889" name="file1" dev="loop5" ino=7 res=0 errno=0
[  477.909512][T18043] ERROR: (device loop5): dbAdjCtl: the maximum free buddy is not the old root
[  477.909512][T18043] 
[  477.915277][T18043] ERROR: (device loop5): remounting filesystem as read-only
[  478.331481][T18061] veth0: entered promiscuous mode
[  478.362604][T18060] veth0: left promiscuous mode
[  478.661206][T18064] lo speed is unknown, defaulting to 1000
[  478.795926][T18064] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  478.972933][T18073] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4901'.
[  478.976074][T18073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4901'.
[  478.982459][T18073] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4901'.
[  478.985987][T18073] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4901'.
[  479.062879][T18079] loop5: detected capacity change from 0 to 2048
[  479.079191][T18079] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  479.144784][T18079] UDF-fs: error (device loop5): udf_rename: failed to find renamed entry again in directory (ino 1408)
[  480.307423][T18104] netdevsim netdevsim7 netdevsim0: left promiscuous mode
[  480.310510][T18104] netdevsim netdevsim7 netdevsim0: entered allmulticast mode
[  480.322980][T18104] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  480.414851][T18115] dns_resolver: Unsupported content type (218)
[  480.543072][T18122] bond0: entered promiscuous mode
[  480.548352][T18122] bond_slave_0: entered promiscuous mode
[  480.551991][T18122] bond_slave_1: entered promiscuous mode
[  482.275831][T18158] loop5: detected capacity change from 0 to 128
[  482.304789][T18158] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  482.340938][T18158] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  482.523748][T18162] tmpfs: Bad value for 'mpol'
[  482.861141][ T5315] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  483.014448][ T5315] usb 6-1: Using ep0 maxpacket: 16
[  483.018481][ T5315] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  483.022797][ T5315] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  483.030215][ T5315] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  483.034042][ T5315] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  483.037835][ T5315] usb 6-1: SerialNumber: syz
[  483.045058][ T5315] cdc_acm 6-1:1.0: Control and data interfaces are not separated!
[  483.048634][ T5315] cdc_acm 6-1:1.0: This needs exactly 3 endpoints
[  483.051390][ T5315] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22
[  483.266549][ T5315] usb 6-1: USB disconnect, device number 13
[  484.161876][T18204] random: crng reseeded on system resumption
[  484.277271][T18210] program syz.5.4962 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  484.566131][ T5917] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  484.629075][T18216] loop7: detected capacity change from 0 to 512
[  484.632515][T18216] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities
[  484.725075][ T5917] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  484.791054][ T5917] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  484.811939][ T5917] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  484.818580][ T5917] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  484.825473][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.828964][ T5917] usb 6-1: Product: syz
[  485.218504][T18222] loop7: detected capacity change from 0 to 32768
[  485.222409][ T5917] usb 6-1: Manufacturer: syz
[  485.224298][ T5917] usb 6-1: SerialNumber: syz
[  485.271696][ T5917] usb 6-1: config 0 descriptor??
[  485.278187][T18212] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  485.286683][T18212] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  485.296522][ T5917] usb 6-1: ucan: probing device on interface #0
[  485.440750][T18224] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4967'.
[  486.117912][ T5917] ucan 6-1:0.0: probe with driver ucan failed with error -71
[  486.130354][ T5917] usb 6-1: USB disconnect, device number 14
[  486.658877][   T33] audit: type=1326 audit(2000000548.081:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18292 comm="syz.5.4999" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2825b8ec29 code=0x0
[  486.671283][T16939] IPVS: starting estimator thread 0...
[  486.777699][T18296] IPVS: using max 42 ests per chain, 100800 per kthread
[  486.827792][T18306] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5004'.
[  486.831669][T18306] netlink: 168 bytes leftover after parsing attributes in process `syz.7.5004'.
[  486.835455][T18306] netlink: 168 bytes leftover after parsing attributes in process `syz.7.5004'.
[  486.846322][T18306] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  487.261926][T18320] loop7: detected capacity change from 0 to 2048
[  487.380460][T18322] tmpfs: Bad value for 'mpol'
[  487.799005][T18310] Process accounting resumed
[  487.811487][T18343] veth1_to_bridge: entered promiscuous mode
[  487.814513][T18343] veth1_to_bridge: left promiscuous mode
[  488.116951][ T5917] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  488.271867][ T5917] usb 6-1: Using ep0 maxpacket: 32
[  488.287906][ T5917] usb 6-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d
[  488.291779][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.294529][ T5917] usb 6-1: Product: syz
[  488.295994][ T5917] usb 6-1: Manufacturer: syz
[  488.297627][ T5917] usb 6-1: SerialNumber: syz
[  488.301379][ T5917] usb 6-1: config 0 descriptor??
[  488.399046][T18364] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5028'.
[  488.402641][T18364] netlink: 'syz.1.5028': attribute type 1 has an invalid length.
[  488.513011][ T5917] mdc800 6-1:0.0: probe fails -> wrong Number of Configuration
[  488.520660][ T5917] usb 6-1: USB disconnect, device number 15
[  489.260840][T18401] loop5: detected capacity change from 0 to 128
[  489.270901][T18401] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  489.281604][T18401] hpfs: filesystem error: improperly stopped
[  489.288266][T18401] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  489.298279][T18401] hpfs: You really don't want any checks? You are crazy...
[  489.302417][T18401] hpfs: hpfs_map_sector(): read error
[  489.309832][T18401] hpfs: code page support is disabled
[  489.318789][T18401] hpfs: hpfs_map_4sectors(): unaligned read
[  489.321508][T18401] hpfs: hpfs_map_4sectors(): unaligned read
[  489.324027][T18401] hpfs: filesystem error: unable to find root dir
[  489.348289][T18401] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim
[  489.547574][T18414] netlink: 'syz.5.5052': attribute type 1 has an invalid length.
[  489.560201][T18414] netlink: 'syz.5.5052': attribute type 4 has an invalid length.
[  489.570525][T18414] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.5052'.
[  489.706444][T18424] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5057'.
[  491.098602][   T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  491.253844][   T24] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  491.257105][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.261665][   T24] usb 6-1: Product: syz
[  491.263049][   T24] usb 6-1: Manufacturer: syz
[  491.264572][   T24] usb 6-1: SerialNumber: syz
[  491.268510][   T24] usb 6-1: config 0 descriptor??
[  491.273921][   T24] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  491.282351][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  491.289771][   T24] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  491.295460][   T24] usb 6-1: media controller created
[  491.313446][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  491.350699][   T24] DVB: Unable to find symbol mt352_attach()
[  491.376403][   T24] DVB: Unable to find symbol nxt6000_attach()
[  491.378576][   T24] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  491.393061][   T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input25
[  491.399189][   T24] dvb-usb: schedule remote query interval to 1000 msecs.
[  491.402853][   T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  491.406363][   T24] dvb-usb: bulk message failed: -22 (7/0)
[  491.408612][   T24] dvb-usb: bulk message failed: -22 (7/0)
[  491.487135][T16939] usb 6-1: USB disconnect, device number 16
[  491.509340][T16939] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  493.120621][T18514] loop5: detected capacity change from 0 to 512
[  493.126154][T18514] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  493.157107][T18514] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  493.233427][T14914] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  493.299464][T18523] loop7: detected capacity change from 0 to 4096
[  493.303573][T18523] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512).
[  493.319633][T18523] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  493.322564][T18523] ntfs3(loop7): ino=3, ntfs_set_state failed, -22.
[  493.330284][T18523] ntfs3(loop7): Failed to load $Bitmap (-22).
[  493.334482][T18523] ntfs3(loop7): ino=3, ntfs3_write_inode failed, -22.
[  493.909806][T18542] loop5: detected capacity change from 0 to 32768
[  493.914177][T18542] bcachefs (/dev/loop5): error reading default superblock: unknown checksum type 63
[  493.919511][T18542] syz.5.5104: attempt to access beyond end of device
[  493.919511][T18542] loop5: rw=6144, sector=4611686018427418624, nr_sectors = 16 limit=32768
[  493.926275][T18542] bcachefs (/dev/loop5): error reading superblock: checksum error, type crc32c_nonzero: got 575417db should be 49607f70IO error: -5
[  493.933482][T18542] bcachefs: bch2_fs_get_tree() error: EIO
[  494.473598][T18562] loop5: detected capacity change from 0 to 32768
[  494.476242][T18562] xfs: Unknown parameter 'attr2'
[  494.776528][T18579] loop7: detected capacity change from 0 to 164
[  494.787690][T18579] isofs_fill_super: bread failed, dev=loop7, iso_blknum=41, block=82
[  495.018774][T18581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5122'.
[  496.244314][   T24] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  496.395709][   T24] usb 6-1: Using ep0 maxpacket: 16
[  496.402838][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  496.416025][   T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  496.419770][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.424435][   T24] usb 6-1: config 0 descriptor??
[  496.429293][   T24] usbhid 6-1:0.0: can't add hid device: -22
[  496.431522][   T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -22
[  496.631655][   T24] usb 6-1: USB disconnect, device number 17
[  497.387825][T18618] loop5: detected capacity change from 0 to 32768
[  497.391973][T18618] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5139 (18618)
[  497.404103][T18618] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  497.409283][T18618] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  497.412896][T18618] BTRFS error (device loop5): ignorebadroots must be used with ro mount option
[  497.417276][T18618] BTRFS error (device loop5): open_ctree failed: -22
[  497.660345][T18641] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5149'.
[  497.670658][T18641] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5149'.
[  497.674585][T18641] netlink: 19 bytes leftover after parsing attributes in process `syz.1.5149'.
[  498.199278][T18659] loop5: detected capacity change from 0 to 4096
[  498.213612][T18659] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  498.247560][T14914] ntfs3(loop5): ino=9, ntfs_sync_fs failed, -22.
[  498.311315][T18669] loop7: detected capacity change from 0 to 8
[  498.341813][T18669] SQUASHFS error: Failed to read block 0x33c: -5
[  498.344968][T18669] SQUASHFS error: Unable to read metadata cache entry [33a]
[  498.347413][T18669] SQUASHFS error: Unable to read inode 0xa7
[  498.456707][T18678] loop7: detected capacity change from 0 to 1024
[  498.460381][T18678] EXT4-fs: Ignoring removed bh option
[  498.469806][T18678] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  498.473535][T14915] Bluetooth: hci1: command 0x0406 tx timeout
[  498.501243][T18681] netlink: 'syz.1.5169': attribute type 21 has an invalid length.
[  498.505150][T18681] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5169'.
[  498.510426][T18678] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  498.546161][   T33] audit: type=1804 audit(2000000559.830:209): pid=18678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.5167" name="/newroot/199/file1/bus" dev="loop7" ino=18 res=1 errno=0
[  498.677623][T18692] netlink: 'syz.5.5172': attribute type 3 has an invalid length.
[  498.681376][T18692] netlink: 'syz.5.5172': attribute type 3 has an invalid length.
[  499.375306][T16358] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  499.784540][   T33] audit: type=1326 audit(2000000561.061:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18714 comm="syz.7.5183" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2d578ec29 code=0x0
[  500.610117][   T33] audit: type=1326 audit(2000000561.865:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18732 comm="syz.5.5189" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2825b8ec29 code=0x7ffc0000
[  500.629733][   T33] audit: type=1326 audit(2000000561.865:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18732 comm="syz.5.5189" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2825b8ec29 code=0x7ffc0000
[  500.641063][   T33] audit: type=1326 audit(2000000561.885:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18732 comm="syz.5.5189" exe="/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f2825b8ec29 code=0x7ffc0000
[  500.651085][   T33] audit: type=1326 audit(2000000561.885:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18732 comm="syz.5.5189" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2825b8ec29 code=0x7ffc0000
[  500.660482][   T33] audit: type=1326 audit(2000000561.885:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18732 comm="syz.5.5189" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2825b8ec29 code=0x7ffc0000
[  500.675698][   T33] audit: type=1326 audit(2000000561.905:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18732 comm="syz.5.5189" exe="/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f2825b8ec29 code=0x7ffc0000
[  500.697850][   T33] audit: type=1326 audit(2000000561.905:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18732 comm="syz.5.5189" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2825b8ec29 code=0x7ffc0000
[  500.711516][   T33] audit: type=1326 audit(2000000561.905:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18732 comm="syz.5.5189" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2825b8ec29 code=0x7ffc0000
[  500.928493][T18751] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  501.420930][T18758] loop7: detected capacity change from 0 to 128
[  501.542292][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  501.545250][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  501.941903][T18787] loop7: detected capacity change from 0 to 512
[  501.945297][T18787] EXT4-fs: Ignoring removed oldalloc option
[  501.958838][T18787] EXT4-fs (loop7): 1 truncate cleaned up
[  501.961693][T18787] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  502.054734][T16358] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  502.175312][T18811] loop7: detected capacity change from 0 to 128
[  502.180442][T18811] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  502.193406][T18811] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  502.209139][T18811] EXT4-fs error (device loop7): __ext4_find_entry:1626: inode #2: comm syz.7.5223: checksumming directory block 0
[  502.256869][T16358] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  502.325424][T18820] loop5: detected capacity change from 0 to 512
[  502.329075][T18820] EXT4-fs: inline encryption not supported
[  502.348271][T18820] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  502.352703][T18820] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e018, mo2=0002]
[  502.355909][T18820] EXT4-fs (loop5): orphan cleanup on readonly fs
[  502.358284][T18820] EXT4-fs warning (device loop5): ext4_enable_quotas:7178: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  502.364538][T18820] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  502.369214][T18820] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5227: bg 0: block 40: padding at end of block bitmap is not set
[  502.377553][T18820] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  502.381763][T18820] EXT4-fs (loop5): 1 truncate cleaned up
[  502.384767][T18820] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  502.398653][T18820] EXT4-fs error (device loop5): ext4_encrypted_get_link:46: inode #16: comm syz.5.5227: bad symlink.
[  503.789599][T15439] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  504.181024][T14915] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  504.186880][T14915] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  504.193419][T14915] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  504.196711][T14915] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  504.199531][T14915] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  504.256152][T18849] lo speed is unknown, defaulting to 1000
[  504.408616][T18849] chnl_net:caif_netlink_parms(): no params data found
[  504.505730][T18849] bridge0: port 1(bridge_slave_0) entered blocking state
[  504.508857][T18849] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.512197][T18849] bridge_slave_0: entered allmulticast mode
[  504.516998][T18849] bridge_slave_0: entered promiscuous mode
[  504.521785][T18849] bridge0: port 2(bridge_slave_1) entered blocking state
[  504.525515][T18849] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.528675][T18849] bridge_slave_1: entered allmulticast mode
[  504.532699][T18849] bridge_slave_1: entered promiscuous mode
[  504.566021][T18849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  504.573016][T18849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  504.608060][T18870] syz_tun: entered allmulticast mode
[  504.611801][T18849] team0: Port device team_slave_0 added
[  504.614851][T18870] lo: entered allmulticast mode
[  504.618612][T18849] team0: Port device team_slave_1 added
[  504.649516][T18869] syz_tun: left allmulticast mode
[  504.652473][T18849] batman_adv: batadv0: Adding interface: batadv_slave_0
[  504.655880][T18849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  504.668536][T18849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  504.675903][T18849] batman_adv: batadv0: Adding interface: batadv_slave_1
[  504.679101][T18849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  504.690837][T18849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  504.697778][T18874] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5250'.
[  504.736186][T18875] delete_channel: no stack
[  504.751842][T18849] hsr_slave_0: entered promiscuous mode
[  504.756632][T18849] hsr_slave_1: entered promiscuous mode
[  504.759666][T18849] debugfs: 'hsr0' already exists in 'hsr'
[  504.762135][T18849] Cannot create hsr debugfs directory
[  504.902862][   T33] kauditd_printk_skb: 4 callbacks suppressed
[  504.902873][   T33] audit: type=1800 audit(2000000566.139:222): pid=18887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5256" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=47751 res=0 errno=0
[  504.934375][T18849] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  504.948612][T18849] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  504.959071][T18849] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  504.966063][T18849] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  504.997502][T18849] bridge0: port 2(bridge_slave_1) entered blocking state
[  505.000443][T18849] bridge0: port 2(bridge_slave_1) entered forwarding state
[  505.003680][T18849] bridge0: port 1(bridge_slave_0) entered blocking state
[  505.006729][T18849] bridge0: port 1(bridge_slave_0) entered forwarding state
[  505.055271][T18849] 8021q: adding VLAN 0 to HW filter on device bond0
[  505.074397][ T4864] bridge0: port 1(bridge_slave_0) entered disabled state
[  505.085523][ T4864] bridge0: port 2(bridge_slave_1) entered disabled state
[  505.121246][T18849] 8021q: adding VLAN 0 to HW filter on device team0
[  505.133110][ T4864] bridge0: port 1(bridge_slave_0) entered blocking state
[  505.135466][ T4864] bridge0: port 1(bridge_slave_0) entered forwarding state
[  505.157505][ T4864] bridge0: port 2(bridge_slave_1) entered blocking state
[  505.160754][ T4864] bridge0: port 2(bridge_slave_1) entered forwarding state
[  505.345729][T18849] 8021q: adding VLAN 0 to HW filter on device batadv0
[  505.586076][T18849] veth0_vlan: entered promiscuous mode
[  505.596313][T18849] veth1_vlan: entered promiscuous mode
[  505.638419][T18849] veth0_macvtap: entered promiscuous mode
[  505.645553][T18849] veth1_macvtap: entered promiscuous mode
[  505.664503][T18849] batman_adv: batadv0: Interface activated: batadv_slave_0
[  505.678163][T18849] batman_adv: batadv0: Interface activated: batadv_slave_1
[  505.690967][ T6816] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  505.705093][ T6816] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  505.708721][ T6816] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  505.714526][ T6816] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  505.790620][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  505.794614][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  505.817451][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  505.820504][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  505.914803][T18926] loop8: detected capacity change from 0 to 164
[  505.936728][T18926] isofs_fill_super: root inode is not a directory. Corrupted media?
[  506.285593][T14915] Bluetooth: hci1: command tx timeout
[  507.348234][   T10] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[  507.530477][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  507.547361][   T10] usb 9-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00
[  507.564194][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  507.587697][   T10] usb 9-1: config 0 descriptor??
[  507.591271][T18960] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  508.371868][T14915] Bluetooth: hci1: command tx timeout
[  508.520613][T18991] loop8: detected capacity change from 0 to 256
[  508.527018][T18991] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  510.460322][T14915] Bluetooth: hci1: command tx timeout
[  511.136808][   T10] usbhid 9-1:0.0: can't add hid device: -71
[  511.139460][   T10] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  511.146656][   T10] usb 9-1: USB disconnect, device number 2
[  511.358615][T19020] loop8: detected capacity change from 0 to 32768
[  511.362241][T19020] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.5304 (19020)
[  511.412325][T19020] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  511.416919][T19020] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[  511.441474][T19020] BTRFS info (device loop8): enabling ssd optimizations
[  511.443983][T19020] BTRFS info (device loop8): enabling free space tree
[  511.510236][T18849] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  511.908296][T19043] netlink: 'syz.8.5307': attribute type 4 has an invalid length.
[  511.929692][T19043] netlink: 'syz.8.5307': attribute type 4 has an invalid length.
[  512.229965][   T33] audit: type=1326 audit(2000000573.439:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19055 comm="syz.8.5313" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd333f8ec29 code=0x7ffc0000
[  512.240143][   T33] audit: type=1326 audit(2000000573.439:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19055 comm="syz.8.5313" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd333f8ec29 code=0x7ffc0000
[  512.249110][   T33] audit: type=1326 audit(2000000573.439:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19055 comm="syz.8.5313" exe="/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fd333f8ec29 code=0x7ffc0000
[  512.260387][   T33] audit: type=1326 audit(2000000573.439:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19055 comm="syz.8.5313" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd333f8ec29 code=0x7ffc0000
[  512.270032][   T33] audit: type=1326 audit(2000000573.439:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19055 comm="syz.8.5313" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd333f8ec29 code=0x7ffc0000
[  512.316964][T19060] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5315'.
[  512.321182][T19060] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5315'.
[  512.364469][T19062] loop8: detected capacity change from 0 to 16
[  512.368126][T19062] erofs (device loop8): mounted with root inode @ nid 36.
[  512.509195][T19068] loop8: detected capacity change from 0 to 1024
[  512.523255][T19068] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  512.540778][T19068] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5319: bg 0: block 88: padding at end of block bitmap is not set
[  512.549188][T14915] Bluetooth: hci1: command tx timeout
[  512.570476][T18849] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  512.900367][T19088] bond0: option ad_select: unable to set because the bond device is up
[  512.978972][T19093] loop8: detected capacity change from 0 to 4096
[  513.224876][   T33] audit: type=1800 audit(2000000574.425:228): pid=19093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5330" name="file1" dev="loop8" ino=30 res=0 errno=0
[  513.696417][T19103] binder: Bad value for 'max'
[  514.372412][T19105] loop7: detected capacity change from 0 to 40427
[  514.382897][T19105] F2FS-fs (loop7): build fault injection rate: 25
[  514.385682][T19105] F2FS-fs (loop7): build fault injection type: 0x7698c
[  514.390447][T19105] F2FS-fs (loop7): invalid crc value
[  514.395021][T19105] F2FS-fs (loop7): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1cb/0x970
[  514.404420][T19105] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  514.456250][T19105] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  514.460641][T19105] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  514.502942][T16358] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of f2fs_grab_meta_folio+0x6a/0x1d0
[  514.515934][T16358] F2FS-fs (loop7): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x585/0x21b0
[  514.520947][T16358] F2FS-fs (loop7): invalid blkaddr: 515, type: 10, run fsck to fix.
[  514.991459][T19138] netlink: 'syz.8.5346': attribute type 4 has an invalid length.
[  514.995067][T19138] netlink: 17 bytes leftover after parsing attributes in process `syz.8.5346'.
[  515.478226][T19150] 8021q: VLANs not supported on lo
[  516.776485][T19185] binder: 19184:19185 ioctl c0306201 200000000240 returned -14
[  516.994400][T19200] loop8: detected capacity change from 0 to 2048
[  517.024942][T19200] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  517.054237][T18849] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  517.269033][T19205] loop8: detected capacity change from 0 to 32768
[  517.322989][T19205]  loop8: p1 p2 p3 < p5 p6 >
[  517.324691][T19205] loop8: p1 size 242222080 extends beyond EOD, truncated
[  517.327954][T19205] loop8: p2 start 4294967295 is beyond EOD, truncated
[  517.798981][T19208] loop8: detected capacity change from 0 to 32768
[  518.160908][T19215] loop8: detected capacity change from 0 to 512
[  518.169872][T19215] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  518.183681][T19215] EXT4-fs (loop8): 1 truncate cleaned up
[  518.187808][T19215] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  518.224138][T18849] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  518.310217][T19221] loop8: detected capacity change from 0 to 512
[  518.314412][T19221] EXT4-fs: Ignoring removed bh option
[  518.316898][T19221] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  518.347628][T19221] EXT4-fs (loop8): 1 truncate cleaned up
[  518.350596][T19221] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  518.468104][T18849] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  518.567933][T19236] loop8: detected capacity change from 0 to 512
[  518.587149][T19236] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  519.818204][T19286] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5414'.
[  519.903861][T19290] loop7: detected capacity change from 0 to 4096
[  519.908156][T19290] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  519.912489][T19290] ntfs3(loop7): $Volume is corrupted.
[  520.146519][T19307] netlink: 'syz.8.5423': attribute type 1 has an invalid length.
[  520.693376][T19321] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1
[  520.697615][T19321] ref_ctr increment failed for inode: 0x188 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888110c51580
[  520.705843][   T33] audit: type=1804 audit(2000000581.867:229): pid=19321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.5429" name="/newroot/71/file0" dev="tmpfs" ino=392 res=1 errno=0
[  521.397404][T19338] loop8: detected capacity change from 0 to 764
[  521.407335][T19338] Symlink component flag not implemented
[  521.416105][T19338] Symlink component flag not implemented
[  521.419289][T19338] Symlink component flag not implemented (128)
[  521.421978][T19338] Symlink component flag not implemented (122)
[  521.485026][T19344] netlink: 'syz.8.5440': attribute type 21 has an invalid length.
[  521.488441][T19344] netlink: 128 bytes leftover after parsing attributes in process `syz.8.5440'.
[  521.492450][T19344] netlink: 3 bytes leftover after parsing attributes in process `syz.8.5440'.
[  521.704972][T19350] loop8: detected capacity change from 0 to 32768
[  521.728112][T19350] ocfs2: Mounting device (7,8) on (node local, slot 0) with writeback data mode.
[  521.811358][T18849] ocfs2: Unmounting device (7,8) on (node local)
[  521.867563][T19359] overlayfs: failed to clone upperpath
[  522.606509][T19382] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  522.611475][T19382] block device autoloading is deprecated and will be removed.
[  522.616852][T19381] md: md2 stopped.
[  522.670300][T19384] vxlan0: entered promiscuous mode
[  522.672887][T19384] vxlan0: entered allmulticast mode
[  522.675209][ T6816] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  522.678378][ T6816] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  522.684027][ T6816] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  522.687779][ T6816] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  523.061450][ T5913] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  523.223281][ T5913] usb 9-1: Using ep0 maxpacket: 32
[  523.228884][ T5913] usb 9-1: config 0 has an invalid interface number: 108 but max is 0
[  523.232989][ T5913] usb 9-1: config 0 has no interface number 0
[  523.235381][ T5913] usb 9-1: config 0 interface 108 altsetting 180 endpoint 0x2 has invalid wMaxPacketSize 0
[  523.238707][ T5913] usb 9-1: config 0 interface 108 has no altsetting 0
[  523.247348][ T5913] usb 9-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=97.c3
[  523.251091][ T5913] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.255361][ T5913] usb 9-1: Product: syz
[  523.257092][ T5913] usb 9-1: Manufacturer: syz
[  523.259105][ T5913] usb 9-1: SerialNumber: syz
[  523.264177][ T5913] usb 9-1: config 0 descriptor??
[  523.275010][ T5913] ttusbir 9-1:0.108: cannot find expected altsetting
[  523.483913][ T5917] usb 9-1: USB disconnect, device number 3
[  524.267344][T19433] bridge0: port 3(syz_tun) entered blocking state
[  524.273526][T19433] bridge0: port 3(syz_tun) entered disabled state
[  524.276050][T19433] syz_tun: entered allmulticast mode
[  524.301217][T19433] syz_tun: entered promiscuous mode
[  524.314547][T19433] bridge0: port 3(syz_tun) entered blocking state
[  524.317819][T19433] bridge0: port 3(syz_tun) entered forwarding state
[  524.354006][   T33] audit: type=1804 audit(2000000585.511:230): pid=19436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5480" name="file0" dev="tmpfs" ino=11258 res=1 errno=0
[  525.132996][T19456] netlink: 'syz.8.5490': attribute type 6 has an invalid length.
[  526.460853][T19479] erspan2: left allmulticast mode
[  526.466854][T19479] bond3: left promiscuous mode
[  526.474766][ T5913] lo speed is unknown, defaulting to 1000
[  526.477099][ T5913] syz0: Port: 1 Link DOWN
[  526.652296][T19481] loop8: detected capacity change from 0 to 32768
[  526.656314][T19481] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.5502 (19481)
[  526.664713][T19481] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  526.671932][T19481] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[  526.698935][T19481] BTRFS info (device loop8): enabling ssd optimizations
[  526.701440][T19481] BTRFS info (device loop8): enabling free space tree
[  526.716912][T19512] CIFS mount error: No usable UNC path provided in device string!
[  526.716912][T19512] 
[  526.720904][T19512] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  526.754222][T18849] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  527.008964][T19522] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5514'.
[  527.012883][T19522] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5514'.
[  527.016786][T19522] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5514'.
[  527.274335][ T6816] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  527.281343][T19536] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  527.330988][T19524] loop8: detected capacity change from 0 to 32768
[  527.379452][T19524] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  527.379483][T19524]   allowing incompatible features above 0.0: (unknown version)
[  527.379491][T19524]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  527.400370][T19524] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0
[  527.403986][T19524] bcachefs (loop8): initializing new filesystem
[  527.414127][T19524] bcachefs (loop8): going read-write
[  527.427394][T19524] bcachefs (loop8): marking superblocks
[  527.450606][T19524] bcachefs (loop8): initializing freespace
[  527.457411][T19524] bcachefs (loop8): done initializing freespace
[  527.468594][T19524] bcachefs (loop8): reading snapshots table
[  527.471225][T19524] bcachefs (loop8): reading snapshots done
[  527.505999][T19524] bcachefs (loop8): done starting filesystem
[  527.562049][T18849] bcachefs (loop8): shutting down
[  527.564360][T18849] bcachefs (loop8): going read-only
[  527.566660][T18849] bcachefs (loop8): finished waiting for writes to stop
[  527.571054][T18849] bcachefs (loop8): flushing journal and stopping allocators, journal seq 2
[  527.616390][T18849] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 3
[  527.625496][T18849] bcachefs (loop8): clean shutdown complete, journal seq 4
[  527.629294][T18849] bcachefs (loop8): marking filesystem clean
[  527.646171][T18849] bcachefs (loop8): shutdown complete
[  531.622223][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  540.668690][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  559.234409][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  563.080924][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  563.085691][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  597.636786][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  624.528447][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  624.531306][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  626.597332][T14915] Bluetooth: hci1: command 0x0406 tx timeout
[  675.716911][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  685.962180][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  685.965090][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  747.402576][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  747.405253][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  808.842456][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  808.844694][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  824.196790][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!

VM DIAGNOSIS:
04:48:24  Registers:
info registers vcpu 0

CPU#0
RAX=81dc3669ce210500 RBX=ffffffff819721d7 RCX=81dc3669ce210500 RDX=0000000000000001
RSI=ffffffff8db9af17 RDI=ffffffff8c03bf60 RBP=ffffffff8e007ea8 RSP=ffffffff8e007d80
R8 =ffff88804b032fdb R9 =1ffff110096065fb R10=dffffc0000000000 R11=ffffed10096065fc
R12=ffffffff8fc30870 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1c12a38
RIP=ffffffff8b7dcdd3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b840a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055d19e909680 CR3=000000000e138000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000003819c49d 0000000000000018 XMM01=0100000000000100 0000000000000000
XMM02=65626d6520002e74 736f686c61636f6c XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffff00 0000000000000000 XMM05=1600000000000000 00000000000002ff
XMM06=1600000000000000 00000000000002ff XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=831f116cbb666c00 RBX=ffffffff819721d7 RCX=831f116cbb666c00 RDX=0000000000000001
RSI=ffffffff8db9af17 RDI=ffffffff8c03bf60 RBP=ffffc90000177f10 RSP=ffffc90000177de0
R8 =ffff888136632fdb R9 =1ffff11026cc65fb R10=dffffc0000000000 R11=ffffed1026cc65fc
R12=ffffffff8fc30870 R13=0000000000000001 R14=0000000000000001 R15=1ffff11020005000
RIP=ffffffff8b7dcdd3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3a0a000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055d1d7c54ec0 CR3=000000000e138000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 00007fed4c7a7d20
XMM02=28020034b20302d8 020034b003000488 XMM03=1cd00302f6020034 b60328020034b403
XMM04=8c0008001cf00300 08001ce003401000 XMM05=0120808010000210 001c800401000000
XMM06=08060801598c0008 001cf0030008001c XMM07=e0034010001cd003 02f6020034b60328
XMM08=020034b403280200 34b20302d8020034 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
