last executing test programs:

10m23.407910627s ago: executing program 2 (id=225):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00')
fchdir(r0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9)
getdents(r1, &(0x7f0000000080)=""/43, 0x2b)
getdents(r1, 0x0, 0xbb)

10m23.407801949s ago: executing program 2 (id=226):
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000001340)='system.posix_acl_default\x00', 0x0, 0x0, 0x2)

10m23.326112258s ago: executing program 2 (id=227):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x40, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x40}}, 0x0)

10m23.325916103s ago: executing program 2 (id=228):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4, &(0x7f0000000240), 0x22, 0x4d5, &(0x7f0000000580)="$eJzs3c9vG1kdAPDvTOIkm81usrASPwRsWRYKqmon7m602tNyAaHVSogVJw7dkLghih1HsVOa0EP6PyBRiRP8CRyQOCD1xJ0b3Li0B6QCFahB4mA09iRNUzvJtqlHij8faTTz5tn+vmdr3td+TvwCGFmXImIvIiYi4tOImM3PJ/kWH/a27HaPH91e3n90ezmJTueTfybd+uxcHLlP5tX8Maci4kffj/hp8mzc1s7u+lK9XtvKy5V2Y7PS2tm9utZYWq2t1jaq1cWFxfn3r71XPbe+vtX43cPvrX304z/+4av3/7z3nV9kzZrJ64724zz1ul46jJMZj4iPXkawAozl/ZkouiE8lzQiPhcRb2fXf6fo1gAAw9DpzEZn9mgZALjo0u4cWJKW87mAmUjTcrk3h/dmTKf1Zqt95UZze2OlN1c2F6X0xlq9Np/PFc5FKcnKC93jJ+XqsfK1iHgjIn45+Uq3XF5u1leKfOMDACPs1WP5/z+TvfwPAFxwU0U3AAAYOvkfAEaP/A8Ao0f+B4DRI/8DwOiR/wFg9Mj/ADBSfvjxx9nW2c9//3rl5s72evPm1ZVaa73c2F4uLze3NsurzeZq9zd7Gqc9Xr3Z3Fx4N7ZvVdq1VrvS2tm93mhub7Svd3/X+3qtNJReAQAneeOte39NImLvg1e6WxxZy0GuhostLboBQGHGim4AUJjxohsAFMZnfKDPEr1P6f8nQhMRd19Kc4AhuPwl8/8wqsz/w+jqP/8v88MoMP8Po6vTSaz5DwAjxid94Pm+/w/f/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDSZrpbkpbztcBnIk3L5YjXImIuSsmNtXptPiJej4i/TJYms/JC0Y0GAF5Q+vckX//r8uw7M8drJ5L/Tnb3EfHzX3/yq1tL7fbWQnb+X4fn23fz89Ui2g8AnOYgTx/k8QOPH91ePtiG2Z6H3+0tLprF3c+3Xs14jHf3U1GKiOl/J3m5J3u/MnYO8ffuRMQX+/U/6c6NzOUrnx6Pn8V+bajx06fip9263j57Lj5/Dm2BUXMvG38+7Hf9pXGpu+9//U91R6gXdzD+7T8z/qWH49/YgPHv0lljvPunHwysuxPx5fF+8ZPD+MmA+O+cMf7fvvK1twfVdX4TcTn6xz8aq9JubFZaO7tX1xpLq7XV2ka1uriwOP/+tfeqle4cdeVgpvpZ//jgyusn9X96QPypU/r/zTP2/7f/+/QnXz8h/re/0f/1f/OE+FlO/NYZ4y9N/37g8t1Z/JUB/T/t9b9yxvj3H+yunPGmAMAQtHZ215fq9dpWfjC+dfyMg/M+yN67FRZ9L3/hi34SLtLBg5/1ntMz36v0WW58wsEXXmK/ihyVgGF4ctEX3RIAAAAAAAAAAAAAAGCQYfybVNF9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OL6fwAAAP//M8rRSQ==")
syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)

10m23.116449146s ago: executing program 2 (id=229):
r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x52415d0d, 0xc03)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x6)
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000000)=0xffffff3d)

10m22.717839358s ago: executing program 2 (id=232):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000180)={{0xb, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 'syz1\x00', 0x0})

10m22.586587597s ago: executing program 32 (id=232):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000180)={{0xb, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 'syz1\x00', 0x0})

9m28.98244433s ago: executing program 1 (id=831):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x400)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x20, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7, 0x1, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xb, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x7, 0x4, 0x0, 0x20000fc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x8, 0x7, 0x4, 0x800000, 0x0, 0x101, 0x1, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x58, 0x4, 0x0, 0x3, 0x4000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000006fd]})

9m28.904175536s ago: executing program 1 (id=833):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000000000006a0a00fe800000008500000028000000b700000059a700009500000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x19}, 0x48)

9m28.850931094s ago: executing program 1 (id=835):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010)
sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x7, 0x5d, [@multicast2]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x38}}], 0x1, 0xc0)

9m28.791544206s ago: executing program 1 (id=837):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

9m28.382801114s ago: executing program 1 (id=841):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r0)
sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000008c}, 0x10)

9m27.823864073s ago: executing program 1 (id=842):
prctl$PR_SET_VMA(0xd, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

9m27.736354458s ago: executing program 33 (id=842):
prctl$PR_SET_VMA(0xd, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)

9m14.711028957s ago: executing program 3 (id=953):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r2 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x28}}, 0x0)
io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0)

9m13.600842874s ago: executing program 3 (id=961):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000880)={r0, r1, 0x26, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x1ff}}, 0x30)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r2, r0, 0x0, r0}, 0x22)

9m13.442408608s ago: executing program 3 (id=963):
r0 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='utf8', &(0x7f00000003c0)='\x00\x00\x00\x00\x00\x00\x00\x80u\x00x@\x19\x14\xfb\x05\xd5#\xfe\xff\xed+\x12\xc9\n\x87D&Q\xc6\x122\x1a\x8ap\xd7%\xb6XN\x8e\x00\xe2\xff\x1c\xfct\xe71\x12\xcb1m5\x96[\xf8q\x7f\xcd\xd5Z\x8d\xa6P\x05)\xec}\xb2\xb5\xe8\x92\xad\xe9\xd1\xb8Q\xab\xc2AoRs\x0fh\x80Wt\xf2\xb5\x14\xb3\xa5\xf2uP\xc3%U\xece\x11YF&T\x88\xe1\xd7?\x04\x1a\x06K\xb1\xfb\xf6\x81\xc8{>\x7fp\xe7\xc70\xf6\x13\x8c~\xc5\xa6\xf6n$%I)\xd7-\x93\xb6\x9c~\x83\xf5wz\x7f\xb6\x02\xd4\xfc\x00\xe4\x1a4?\x03\xfd\xeb\x84\xf2v\xbb\x94u9dg>J\xe6\x8c\x13\xd0\xb6O}\xf3\x13\xdc\xae\xb7\x0f8(\x94\xf9\x86\x7fyEq\xfa\xe3\xa2\x84\xf0\xb5\xf5\xab\b\xf1c\x98\xcbf\x1e/\xe2\x01\xd1\xfc6\xe4\xdd\x14\r\xd3\xd1\x1a<y\x92q\xc8@\x04d\x11NkU\xc9\x02\xc3\xcf\xfe\xc6\xd2\xe5\xf1# \xed\x93\xe3V.\\\xb0\r\\N\xe1\xcc;\x8d\x8a\xc2\xdbL,\xd6gx\xb1o\x81\xfe\x8aWXp\x03J?\x9e\xb3\xa2LIo\xcf\x89\x87\xaa\xa7Q\xc5\x9d\t\xbeI\xa9\xdf\x06\b\x97\xed\x87V8', 0x0)

9m13.281954066s ago: executing program 3 (id=964):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)

9m13.230562084s ago: executing program 3 (id=966):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x38, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0)

9m12.981771064s ago: executing program 3 (id=969):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc2240, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x14)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x35)

9m12.816517182s ago: executing program 34 (id=969):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc2240, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x14)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x35)

5m19.188412025s ago: executing program 4 (id=3450):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xfffffffffffffffa, 0x2)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000001c0)=@multiplanar_fd={0x1, 0x1, 0x4, 0x800000, 0x4, {}, {0x3, 0x2, 0x7, 0x9, 0x1, 0x3, "5bc70d8f"}, 0xb, 0x4, {0x0}, 0x4})

5m19.066026129s ago: executing program 4 (id=3452):
socket(0xa, 0x3, 0x3a)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00')
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x140e, 0x8, 0x70bd25, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x20008040)
r4 = socket(0x1e, 0x805, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x2000000000000312, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000460000006500000085000000071255ce865c11"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084)
sendmsg$nl_route(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x20008800)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x2)
dup2(r7, r7)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

5m18.145894882s ago: executing program 4 (id=3464):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xfffffed5, &(0x7f0000000340)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e22, @local}]}, &(0x7f0000000100)=0x10)

5m18.094919164s ago: executing program 4 (id=3465):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x200c080, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x2a05004, 0x0)
open_tree(r0, &(0x7f0000000640)='\x00', 0x89901)

5m18.025057191s ago: executing program 4 (id=3466):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x4, 0x25}, &(0x7f00000000c0)=0x10)

5m17.825519029s ago: executing program 4 (id=3467):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@private=0xa010101, @in=@rand_addr=0x64010100, 0x1, 0x714, 0x4e21, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00', {0x0, 0x192, 0x6, 0xffff, 0x8, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0xd3, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x64}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

5m17.71509782s ago: executing program 35 (id=3467):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@private=0xa010101, @in=@rand_addr=0x64010100, 0x1, 0x714, 0x4e21, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00', {0x0, 0x192, 0x6, 0xffff, 0x8, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0xd3, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x64}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

1m36.84882047s ago: executing program 0 (id=6590):
io_setup(0x5, &(0x7f0000000000)=<r0=>0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x3, "421ae375378525920300000000000000080000006bb4478a3ab4c98100", <r2=>0xffffffffffffffff})
pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0)
io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])

1m35.846247808s ago: executing program 0 (id=6606):
r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x802)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000000)={0x0, 0x0})

1m35.781940231s ago: executing program 0 (id=6607):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000008d020600300012800b000100697036746e6c000020000280050009000400000014000200fe8000000000000000000000000000bb0800040009", @ANYRES32=r0], 0x58}}, 0x4000)

1m35.693635086s ago: executing program 0 (id=6608):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0)
dup3(r2, r0, 0x0)
io_setup(0x2, &(0x7f0000000400)=<r3=>0x0)
io_submit(r3, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x2400}])

1m35.533037428s ago: executing program 0 (id=6613):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000059c0)=ANY=[@ANYBLOB="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"], 0x5, 0x5512, &(0x7f0000005b40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x45)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000000c0))

1m34.947132617s ago: executing program 0 (id=6619):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2d}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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")
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4442, 0x108)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x4, 0xfffffffffe000001})

1m34.861664821s ago: executing program 36 (id=6619):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0x2d}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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")
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4442, 0x108)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x4, 0xfffffffffe000001})

2.240066898s ago: executing program 7 (id=7956):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(r0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000280)={r2, 0x6}, 0x8)

2.088129747s ago: executing program 7 (id=7957):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000001a80)=0x5, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
connect$unix(r1, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e)

1.921187884s ago: executing program 7 (id=7959):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x193)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r1, 0x0, 0x0, 0x8ffff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x138)
copy_file_range(r2, 0x0, r2, &(0x7f00000000c0)=0xf000, 0x863, 0x0)
fallocate(r0, 0x10, 0x3ffd, 0x8000)

1.343088739s ago: executing program 6 (id=7969):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b40)=""/4110, 0x100e}, {&(0x7f0000004580)=""/4075, 0xfeb}, {&(0x7f0000003540)=""/4125, 0x101d}, {&(0x7f0000000280)=""/115, 0x73}, {&(0x7f0000000a80)=""/179, 0xb3}, {&(0x7f0000000840)=""/197, 0xc5}], 0x6}, 0x10100)

1.313367349s ago: executing program 6 (id=7970):
syz_mount_image$ext4(0x0, &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0))
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)=<r0=>0x0)
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f000050a000/0x4000)=nil, 0x4000, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0)
timerfd_create(0x2, 0x80000)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
lseek(r5, 0x2000, 0x0)

1.286637714s ago: executing program 7 (id=7971):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000300), 0x4)

936.249505ms ago: executing program 7 (id=7973):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)
ppoll(&(0x7f0000000000)=[{r0, 0x4000}], 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40)
recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x20000020, 0x0)

333.781552ms ago: executing program 6 (id=7981):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe1e, &(0x7f0000000500)={&(0x7f0000000000)={0x20, 0x21, 0x9, 0x2, 0x25dfdbfb, {0x4}, [@typed={0xc, 0x5, 0x0, 0x0, @ipv6=@local}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000)

333.524776ms ago: executing program 6 (id=7983):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x63}]}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0)

298.071178ms ago: executing program 5 (id=7984):
mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e')

241.458322ms ago: executing program 6 (id=7985):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x36, 0x107, 0xfffffffe, 0x25dfdbfe, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x24048000}, 0x8010)

241.104414ms ago: executing program 6 (id=7986):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$media(0x0, 0x103, 0x0)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000180)={0x1, 0xffff, 0x4, 0xadeb, 0x3, "8c00000000000000000000ff7f00", 0x7fffffff, 0x80})
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000001280)=0xff)

240.827291ms ago: executing program 5 (id=7987):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000840)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x10)

103.283012ms ago: executing program 5 (id=7988):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010028bd7000fbdbdf25090042"], 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000)

103.176064ms ago: executing program 5 (id=7989):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCFLSH(r0, 0x540b, 0x2)

767.185µs ago: executing program 5 (id=7990):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xa, @mcast2, 0x7}, 0xf)

270.542µs ago: executing program 7 (id=7991):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0)
pwrite64(r0, &(0x7f00000000c0)='#', 0x1, 0x8000000000709d)

0s ago: executing program 5 (id=7992):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000403810b61200000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xda, 0x35, 0x8e, 0x8, 0x46d, 0x900, 0x669e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, &(0x7f0000000300)={0x14, &(0x7f00000000c0)={0x0, 0x23, 0x8, {0x8, 0xe, "8424d961449f"}}, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

] BTRFS info (device loop6): enabling auto defrag
[  585.053693][ T4532] BTRFS info (device loop6): max_inline set to 0
[  585.161064][ T4574] netlink: 67 bytes leftover after parsing attributes in process `syz.5.6199'.
[  585.175338][   T12] BTRFS info (device loop6): qgroup scan completed (inconsistency flag cleared)
[  585.245566][T16803] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  585.509195][ T4589] loop6: detected capacity change from 0 to 512
[  585.514557][ T4589] msdos: Unknown parameter '/dev/comedi5'
[  585.630769][ T4601] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  585.630769][ T4601] The task syz.6.6202 (4601) triggered the difference, watch for misbehavior.
[  585.643220][ T4603] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6208'.
[  585.748361][ T4611] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6211'.
[  585.756762][ T4611] bridge2: entered promiscuous mode
[  585.758771][ T4611] bridge2: entered allmulticast mode
[  585.769019][ T4611] team0: Port device bridge2 added
[  585.780455][ T4611] bridge0: port 3(team0) entered blocking state
[  585.782488][ T4611] bridge0: port 3(team0) entered disabled state
[  585.852325][ T4624] overlayfs: failed to clone upperpath
[  586.027640][ T4709] netlink: 'syz.0.6223': attribute type 12 has an invalid length.
[  586.031066][ T4709] netlink: 'syz.0.6223': attribute type 29 has an invalid length.
[  586.033973][ T4709] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6223'.
[  586.645354][ T4772] loop6: detected capacity change from 0 to 32768
[  586.657747][ T4772] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  586.677524][ T4772] XFS (loop6): Ending clean mount
[  586.682302][ T4772] XFS (loop6): Quotacheck needed: Please wait.
[  586.731222][ T4772] XFS (loop6): Quotacheck: Done.
[  586.754409][T16803] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  586.969520][ T4790] loop6: detected capacity change from 0 to 4096
[  587.160236][ T4803] loop6: detected capacity change from 0 to 2048
[  587.168011][ T4803] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  587.397568][ T4806] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad)
[  587.399999][ T4806] PKCS7: Only support pkcs7_signedData type
[  588.224522][ T4940] loop6: detected capacity change from 0 to 2048
[  588.246477][ T4940] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  588.438606][ T5057] virtiofs: Unknown parameter 'always'
[  588.489611][ T5062] loop6: detected capacity change from 0 to 64
[  589.341927][ T5116] loop6: detected capacity change from 0 to 40427
[  589.357812][ T5116] F2FS-fs (loop6): invalid crc value
[  589.480109][ T5116] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  589.486719][ T5116] F2FS-fs (loop6): Start checkpoint disabled!
[  589.490781][ T5116] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0
[  589.498955][ T5116] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  589.510877][   T33] audit: type=1800 audit(1776245570.036:546): pid=5116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6278" name="file1" dev="loop6" ino=10 res=0 errno=0
[  589.583737][   T63] kworker/u10:3: attempt to access beyond end of device
[  589.583737][   T63] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  589.587842][   T63] CPU: 1 UID: 0 PID: 63 Comm: kworker/u10:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  589.587857][   T63] Tainted: [L]=SOFTLOCKUP
[  589.587860][   T63] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  589.587866][   T63] Workqueue: writeback wb_workfn (flush-7:6)
[  589.587884][   T63] Call Trace:
[  589.587888][   T63]  <TASK>
[  589.587892][   T63]  dump_stack_lvl+0xe8/0x150
[  589.587906][   T63]  f2fs_handle_critical_error+0x37c/0x540
[  589.587922][   T63]  f2fs_write_end_io+0xcdb/0xff0
[  589.587939][   T63]  __submit_merged_bio+0x256/0x700
[  589.587954][   T63]  __submit_merged_write_cond+0x3c9/0x4e0
[  589.587969][   T63]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  589.588005][   T63]  f2fs_write_data_pages+0x2975/0x35e0
[  589.588037][   T63]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  589.588056][   T63]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  589.588081][   T63]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  589.588108][   T63]  ? __lock_acquire+0x6b5/0x2cf0
[  589.588126][   T63]  ? lock_list_lru_of_memcg+0x2e/0x4c0
[  589.588138][   T63]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  589.588151][   T63]  do_writepages+0x32e/0x550
[  589.588167][   T63]  ? reacquire_held_locks+0x104/0x190
[  589.588178][   T63]  ? writeback_sb_inodes+0x477/0x1a20
[  589.588193][   T63]  __writeback_single_inode+0x133/0x11a0
[  589.588205][   T63]  ? do_raw_spin_unlock+0x4d/0x210
[  589.588215][   T63]  writeback_sb_inodes+0x992/0x1a20
[  589.588236][   T63]  ? do_raw_spin_unlock+0x4d/0x210
[  589.588247][   T63]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  589.588257][   T63]  ? do_raw_spin_lock+0x12b/0x2f0
[  589.588285][   T63]  ? rcu_is_watching+0x15/0xb0
[  589.588301][   T63]  wb_writeback+0x456/0xb70
[  589.588313][   T63]  ? queue_io+0x251/0x4a0
[  589.588328][   T63]  ? __pfx_wb_writeback+0x10/0x10
[  589.588338][   T63]  ? do_raw_spin_lock+0x12b/0x2f0
[  589.588354][   T63]  wb_workfn+0x414/0xf50
[  589.588364][   T63]  ? look_up_lock_class+0x57/0x110
[  589.588382][   T63]  ? __pfx_wb_workfn+0x10/0x10
[  589.588393][   T63]  ? do_raw_spin_lock+0x12b/0x2f0
[  589.588402][   T63]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  589.588418][   T63]  ? process_scheduled_works+0xa8d/0x18c0
[  589.588429][   T63]  ? process_scheduled_works+0xa8d/0x18c0
[  589.588440][   T63]  process_scheduled_works+0xb6e/0x18c0
[  589.588466][   T63]  ? __pfx_process_scheduled_works+0x10/0x10
[  589.588479][   T63]  ? assign_work+0x3d5/0x5e0
[  589.588492][   T63]  worker_thread+0xa53/0xfc0
[  589.588516][   T63]  kthread+0x388/0x470
[  589.588525][   T63]  ? __pfx_worker_thread+0x10/0x10
[  589.588535][   T63]  ? __pfx_kthread+0x10/0x10
[  589.588543][   T63]  ret_from_fork+0x51e/0xb90
[  589.588577][   T63]  ? __pfx_ret_from_fork+0x10/0x10
[  589.588587][   T63]  ? __switch_to+0xc7d/0x1450
[  589.588599][   T63]  ? __pfx_kthread+0x10/0x10
[  589.588607][   T63]  ret_from_fork_asm+0x1a/0x30
[  589.588627][   T63]  </TASK>
[  589.674034][   T63] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  589.681208][   T63] CPU: 1 UID: 0 PID: 63 Comm: kworker/u10:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  589.681232][   T63] Tainted: [L]=SOFTLOCKUP
[  589.681237][   T63] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  589.681247][   T63] Workqueue: writeback wb_workfn (flush-7:6)
[  589.681272][   T63] Call Trace:
[  589.681278][   T63]  <TASK>
[  589.681291][   T63]  dump_stack_lvl+0xe8/0x150
[  589.681313][   T63]  f2fs_handle_critical_error+0x37c/0x540
[  589.681339][   T63]  f2fs_write_end_io+0xcdb/0xff0
[  589.681369][   T63]  __submit_merged_bio+0x256/0x700
[  589.681395][   T63]  __submit_merged_write_cond+0x3c9/0x4e0
[  589.681423][   T63]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  589.681463][   T63]  f2fs_write_data_pages+0x2975/0x35e0
[  589.681515][   T63]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  589.681575][   T63]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  589.681622][   T63]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  589.681663][   T63]  ? __lock_acquire+0x6b5/0x2cf0
[  589.681693][   T63]  ? lock_list_lru_of_memcg+0x2e/0x4c0
[  589.681714][   T63]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  589.681736][   T63]  do_writepages+0x32e/0x550
[  589.681765][   T63]  ? reacquire_held_locks+0x104/0x190
[  589.681784][   T63]  ? writeback_sb_inodes+0x477/0x1a20
[  589.681809][   T63]  __writeback_single_inode+0x133/0x11a0
[  589.681829][   T63]  ? do_raw_spin_unlock+0x4d/0x210
[  589.681848][   T63]  writeback_sb_inodes+0x992/0x1a20
[  589.681885][   T63]  ? do_raw_spin_unlock+0x4d/0x210
[  589.681906][   T63]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  589.681923][   T63]  ? do_raw_spin_lock+0x12b/0x2f0
[  589.681974][   T63]  ? rcu_is_watching+0x15/0xb0
[  589.682001][   T63]  wb_writeback+0x456/0xb70
[  589.682024][   T63]  ? queue_io+0x251/0x4a0
[  589.682050][   T63]  ? __pfx_wb_writeback+0x10/0x10
[  589.682067][   T63]  ? do_raw_spin_lock+0x12b/0x2f0
[  589.682097][   T63]  wb_workfn+0x414/0xf50
[  589.682115][   T63]  ? look_up_lock_class+0x57/0x110
[  589.682146][   T63]  ? __pfx_wb_workfn+0x10/0x10
[  589.682166][   T63]  ? do_raw_spin_lock+0x12b/0x2f0
[  589.682183][   T63]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  589.682214][   T63]  ? process_scheduled_works+0xa8d/0x18c0
[  589.682232][   T63]  ? process_scheduled_works+0xa8d/0x18c0
[  589.682252][   T63]  process_scheduled_works+0xb6e/0x18c0
[  589.682304][   T63]  ? __pfx_process_scheduled_works+0x10/0x10
[  589.682329][   T63]  ? assign_work+0x3d5/0x5e0
[  589.682353][   T63]  worker_thread+0xa53/0xfc0
[  589.682397][   T63]  kthread+0x388/0x470
[  589.682412][   T63]  ? __pfx_worker_thread+0x10/0x10
[  589.682430][   T63]  ? __pfx_kthread+0x10/0x10
[  589.682445][   T63]  ret_from_fork+0x51e/0xb90
[  589.682467][   T63]  ? __pfx_ret_from_fork+0x10/0x10
[  589.682485][   T63]  ? __switch_to+0xc7d/0x1450
[  589.682506][   T63]  ? __pfx_kthread+0x10/0x10
[  589.682522][   T63]  ret_from_fork_asm+0x1a/0x30
[  589.682579][   T63]  </TASK>
[  589.682586][   T63] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  589.933257][ T5263] loop6: detected capacity change from 0 to 512
[  590.162883][ T5266] FAT-fs (loop6): error, invalid access to FAT (entry 0x000000c8)
[  590.608942][   T33] audit: type=1326 audit(1776245571.075:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5289 comm="syz.5.6301" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f299c819 code=0x7ffc0000
[  590.620798][   T33] audit: type=1326 audit(1776245571.075:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5289 comm="syz.5.6301" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f299c819 code=0x7ffc0000
[  590.630874][   T33] audit: type=1326 audit(1776245571.084:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5289 comm="syz.5.6301" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f299c819 code=0x7ffc0000
[  590.644304][   T33] audit: type=1326 audit(1776245571.084:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5289 comm="syz.5.6301" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f299c819 code=0x7ffc0000
[  590.658120][   T33] audit: type=1326 audit(1776245571.084:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5289 comm="syz.5.6301" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f82f299c819 code=0x7ffc0000
[  590.678209][   T33] audit: type=1326 audit(1776245571.084:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5289 comm="syz.5.6301" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f299c819 code=0x7ffc0000
[  590.686277][   T33] audit: type=1326 audit(1776245571.084:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5289 comm="syz.5.6301" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f299c819 code=0x7ffc0000
[  590.693166][   T33] audit: type=1326 audit(1776245571.084:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5289 comm="syz.5.6301" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f82f299c819 code=0x7ffc0000
[  590.699775][   T33] audit: type=1326 audit(1776245571.084:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5289 comm="syz.5.6301" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f82f299c819 code=0x7ffc0000
[  591.826329][ T5534] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6321'.
[  592.000517][ T5546] netlink: 'syz.6.6326': attribute type 21 has an invalid length.
[  592.004122][ T5546] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6326'.
[  592.009527][ T5544] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  592.383674][ T5558] ceph: No mds server is up or the cluster is laggy
[  592.476522][ T9374] libceph: connect (1)[c::]:6789 error -101
[  592.482506][ T9374] libceph: mon0 (1)[c::]:6789 connect error
[  592.665562][   T54] Bluetooth: hci0: unexpected event for opcode 0x080e
[  592.695145][ T5572] loop0: detected capacity change from 0 to 512
[  592.698750][ T5572] EXT4-fs: Ignoring removed nomblk_io_submit option
[  592.722848][ T5572] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #11: comm syz.0.6330: iget: bad extended attribute block 3153
[  592.730434][ T5572] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  592.730705][ T5572] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.6330: couldn't read orphan inode 11 (err -117)
[  592.739143][ T5572] loop0: lost filesystem error report for type 5 error -117
[  592.740219][ T5572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  592.773779][ T5808] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  593.067149][ T5589] loop0: detected capacity change from 0 to 1024
[  593.077609][ T5589] EXT4-fs: Ignoring removed bh option
[  593.089263][ T5589] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  593.126660][ T5589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  593.193738][ T5808] EXT4-fs error (device loop0): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /1574/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  593.226624][ T5808] EXT4-fs (loop0): Remounting filesystem read-only
[  593.265381][ T5808] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  594.880047][ T5879] loop0: detected capacity change from 0 to 32768
[  594.917730][ T5879] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  594.950118][ T5879] XFS (loop0): Ending clean mount
[  594.953576][ T5879] XFS (loop0): Quotacheck needed: Please wait.
[  594.987844][ T5879] XFS (loop0): Quotacheck: Done.
[  595.679574][ T5808] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  595.853378][ T5916] netlink: 'syz.0.6360': attribute type 1 has an invalid length.
[  595.855795][ T5916] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6360'.
[  596.909915][ T5946] loop0: detected capacity change from 0 to 512
[  596.914329][ T5946] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  596.934016][ T5946] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003]
[  596.937209][ T5946] System zones: 1-2, 4-12, 8-8
[  596.943397][ T5946] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.6369: iget: bad i_size value: 38620345925642
[  596.948309][ T5946] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  596.948728][ T5946] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.6369: couldn't read orphan inode 15 (err -117)
[  596.952708][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  596.952727][    C0] EXT4-fs (loop0): initial error at time 1776245576: ext4_orphan_get:1397: inode 15
[  596.952755][    C0] EXT4-fs (loop0): last error at time 1776245576: ext4_orphan_get:1397: inode 15
[  596.968849][ T5946] loop0: lost filesystem error report for type 5 error -117
[  596.970617][ T5946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  597.007118][ T5808] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  597.100610][ T5815] Bluetooth: hci3: command 0x1003 tx timeout
[  597.104921][   T54] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  597.273093][ T5968] netlink: 'syz.5.6374': attribute type 21 has an invalid length.
[  597.275542][ T5968] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6374'.
[  597.653086][   T33] audit: type=1800 audit(1776245577.663:556): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6375" name="bus" dev="overlay" ino=4025 res=0 errno=0
[  598.512486][ T5986] loop0: detected capacity change from 0 to 64
[  598.986304][ T5996] loop0: detected capacity change from 0 to 32768
[  599.281125][ T9374] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  599.440713][ T9374] usb 7-1: Using ep0 maxpacket: 32
[  599.459043][ T9374] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[  599.467186][ T9374] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.474111][ T9374] usb 7-1: Product: syz
[  599.477780][ T9374] usb 7-1: Manufacturer: syz
[  599.481708][ T9374] usb 7-1: SerialNumber: syz
[  599.510445][ T9374] usb 7-1: config 0 descriptor??
[  599.750209][ T9374] snd-usb-6fire 7-1:0.0: unknown device firmware state received from device:
[  599.753311][ T9374] 00 00 00 00 00 00 00 00 
[  599.754786][ T9374] snd-usb-6fire 7-1:0.0: probe with driver snd-usb-6fire failed with error -5
[  599.999131][ T9384] usb 7-1: USB disconnect, device number 34
[  600.276907][ T6146] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  600.938242][ T6165] loop6: detected capacity change from 0 to 4096
[  600.951830][ T6167] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  600.971649][ T6169] overlayfs: failed to clone upperpath
[  600.976684][ T6165] syz.6.6404: attempt to access beyond end of device
[  600.976684][ T6165] loop6: rw=8388608, sector=26388279066816, nr_sectors = 8 limit=4096
[  600.984252][ T6165] NILFS (loop6): I/O error reading meta-data file (ino=6, block-offset=1)
[  601.250939][ T6179] loop6: detected capacity change from 0 to 32768
[  601.429359][ T6179] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  601.496024][ T6179] XFS (loop6): Ending clean mount
[  601.520883][T16803] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  601.641542][ T6403] loop0: detected capacity change from 0 to 4096
[  602.995794][ T6794] loop0: detected capacity change from 0 to 256
[  603.013796][ T6794] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  603.033839][ T6794] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff)
[  603.036865][ T6794] exFAT-fs (loop0): Filesystem has been set read-only
[  603.043310][ T6794] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff)
[  603.046643][ T6794] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff)
[  603.176307][ T6825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6442'.
[  603.417505][ T6917] loop0: detected capacity change from 0 to 128
[  603.420427][ T6917] EXT4-fs: inline encryption not supported
[  603.422526][ T6917] EXT4-fs (loop0): Test dummy encryption mode enabled
[  603.450713][ T6917] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  603.454407][ T6917] ext4 filesystem being mounted at /1608/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  605.307777][ T5808] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  605.429506][ T6943] loop6: detected capacity change from 0 to 262144
[  605.436505][ T6943] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6453 (6943)
[  605.442398][ T6943] BTRFS info (device loop6): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  605.445430][ T6943] BTRFS info (device loop6): using xxhash64 checksum algorithm
[  605.462176][ T6965] openvswitch: netlink: Multiple metadata blocks provided
[  605.560485][ T6943] BTRFS info (device loop6): deleted orphan free space tree entries
[  605.563491][ T6943] BTRFS info (device loop6): checking UUID tree
[  605.566063][ T6943] BTRFS info (device loop6): enabling ssd optimizations
[  605.568568][ T6943] BTRFS info (device loop6): using spread ssd allocation scheme
[  605.571391][ T6943] BTRFS info (device loop6): turning on async discard
[  605.573422][ T6943] BTRFS info (device loop6): enabling free space tree
[  605.638383][T16803] BTRFS info (device loop6): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  605.680607][ T6983] futex_wake_op: syz.5.6462 tries to shift op by -1; fix this program
[  605.888090][ T6960] loop0: detected capacity change from 0 to 32768
[  605.964968][ T6960] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  606.390690][ T7006] loop6: detected capacity change from 0 to 32768
[  606.438702][ T7006] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  606.452472][ T6960] XFS (loop0): Ending clean mount
[  606.470544][ T7006] XFS (loop6): Ending clean mount
[  606.480082][ T7006] XFS (loop6): Quotacheck needed: Please wait.
[  606.530505][ T7006] XFS (loop6): Quotacheck: Done.
[  606.629994][T16803] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  606.705362][ T5808] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  607.445475][ T7165] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  607.448818][ T7165] block device autoloading is deprecated and will be removed.
[  607.753730][ T7290] loop6: detected capacity change from 0 to 256
[  607.773104][ T7290] FAT-fs (loop6): Directory bread(block 64) failed
[  607.775646][ T7290] FAT-fs (loop6): Directory bread(block 65) failed
[  607.783130][ T7290] FAT-fs (loop6): Directory bread(block 66) failed
[  607.787524][ T7290] FAT-fs (loop6): Directory bread(block 67) failed
[  607.790033][ T7290] FAT-fs (loop6): Directory bread(block 68) failed
[  607.792470][ T7290] FAT-fs (loop6): Directory bread(block 69) failed
[  607.809513][ T7290] FAT-fs (loop6): Directory bread(block 70) failed
[  607.820462][ T7290] FAT-fs (loop6): Directory bread(block 71) failed
[  607.824285][ T7290] FAT-fs (loop6): Directory bread(block 72) failed
[  607.830594][ T7290] FAT-fs (loop6): Directory bread(block 73) failed
[  608.170254][ T7331] vlan2: entered promiscuous mode
[  608.172779][ T7331] vlan2: entered allmulticast mode
[  608.177637][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6497'.
[  608.241580][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6500'.
[  608.271967][ T7352] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6501'.
[  608.316845][ T7359] 9p: Bad value for 'wfdno'
[  609.207892][ T9372] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  609.381202][ T9372] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11
[  609.385480][ T9372] usb 7-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00
[  609.388852][ T9372] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  609.395409][ T9372] usb 7-1: config 0 descriptor??
[  609.833372][ T9372] asus 0003:0B05:1822.000B: unknown main item tag 0x0
[  609.836004][ T9372] asus 0003:0B05:1822.000B: unknown main item tag 0x0
[  609.838959][ T9372] asus 0003:0B05:1822.000B: unknown main item tag 0x0
[  609.841514][ T9372] asus 0003:0B05:1822.000B: unknown main item tag 0x0
[  609.844008][ T9372] asus 0003:0B05:1822.000B: unknown main item tag 0x0
[  609.846605][ T9372] asus 0003:0B05:1822.000B: unknown main item tag 0x0
[  609.849556][ T9372] asus 0003:0B05:1822.000B: unknown main item tag 0x0
[  609.852037][ T9372] asus 0003:0B05:1822.000B: unknown main item tag 0x0
[  609.854174][ T9372] asus 0003:0B05:1822.000B: unknown main item tag 0x0
[  609.856157][ T9372] asus 0003:0B05:1822.000B: unknown main item tag 0x0
[  609.867583][ T9372] asus 0003:0B05:1822.000B: hidraw0: USB HID v7f.fc Device [HID 0b05:1822] on usb-dummy_hcd.6-1/input0
[  609.871457][ T9372] asus 0003:0B05:1822.000B: Asus input not registered
[  609.876016][ T9372] asus 0003:0B05:1822.000B: probe with driver asus failed with error -12
[  610.054382][ T9372] usb 7-1: USB disconnect, device number 35
[  610.595712][ T7628] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6526'.
[  610.599810][ T7628] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6526'.
[  610.765691][ T7642] loop6: detected capacity change from 0 to 128
[  610.772249][ T7642] hpfs: hpfs_map_sector(): read error
[  610.820894][ T7648] loop6: detected capacity change from 0 to 256
[  610.839373][ T7648] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  611.008294][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6537'.
[  611.586559][ T7827] loop0: detected capacity change from 0 to 512
[  611.634532][ T7827] EXT4-fs (loop0): 1 orphan inode deleted
[  611.658949][ T7827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  611.663796][ T7827] ext4 filesystem being mounted at /1622/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  611.690428][ T5808] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  611.792150][ T7943] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6551'.
[  612.366155][ T7967] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.6561'.
[  612.698874][ T8081] Invalid ELF header magic: != ELF
[  612.858079][ T8089] x_tables: duplicate underflow at hook 1
[  612.867161][ T8089] netlink: 136 bytes leftover after parsing attributes in process `syz.0.6570'.
[  613.565888][ T8214] bond2: option updelay: invalid value (18446744073709551615)
[  613.571939][ T8214] bond2: option updelay: allowed values 0 - 2147483647
[  613.577465][ T8214] bond2 (unregistering): Released all slaves
[  613.986489][ T8405] loop0: detected capacity change from 0 to 256
[  614.005200][ T8410] openvswitch: netlink: IP tunnel dst address not specified
[  614.005418][ T8405] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  614.173957][ T8425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6592'.
[  614.178312][ T8425] netlink: 'syz.5.6592': attribute type 30 has an invalid length.
[  614.231313][ T8425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6592'.
[  614.234823][ T8425] netlink: 'syz.5.6592': attribute type 30 has an invalid length.
[  615.295734][ T8691] loop0: detected capacity change from 0 to 128
[  615.360683][   T33] audit: type=1800 audit(1776245594.227:557): pid=8691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6608" name="file2" dev="loop0" ino=1048692 res=0 errno=0
[  615.963637][T31032] syz_tun (unregistering): left allmulticast mode
[  616.376086][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  616.387076][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  616.399781][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  616.403431][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  616.406457][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  616.874647][   T54] Bluetooth: hci1: unexpected event for opcode 0x0076
[  616.881520][ T8999] Bluetooth: MGMT ver 1.23
[  616.914870][ T8784] chnl_net:caif_netlink_parms(): no params data found
[  617.038486][ T8784] bridge0: port 1(bridge_slave_0) entered blocking state
[  617.041765][ T8784] bridge0: port 1(bridge_slave_0) entered disabled state
[  617.044661][ T8784] bridge_slave_0: entered allmulticast mode
[  617.048534][ T8784] bridge_slave_0: entered promiscuous mode
[  617.054308][ T8784] bridge0: port 2(bridge_slave_1) entered blocking state
[  617.057035][ T8784] bridge0: port 2(bridge_slave_1) entered disabled state
[  617.060185][ T8784] bridge_slave_1: entered allmulticast mode
[  617.064652][ T8784] bridge_slave_1: entered promiscuous mode
[  617.115051][ T8784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  617.121801][ T8784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  617.172404][ T8784] team0: Port device team_slave_0 added
[  617.177187][ T8784] team0: Port device team_slave_1 added
[  617.231869][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_0
[  617.238361][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  617.248938][ T8784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  617.256243][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_1
[  617.258846][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  617.269164][ T8784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  617.331858][ T8784] hsr_slave_0: entered promiscuous mode
[  617.335129][ T8784] hsr_slave_1: entered promiscuous mode
[  617.337945][ T8784] debugfs: 'hsr0' already exists in 'hsr'
[  617.340671][ T8784] Cannot create hsr debugfs directory
[  617.855196][ T8784] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  617.867620][ T8784] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  617.883628][ T8784] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  617.894912][ T8784] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  618.028333][ T9212] loop6: detected capacity change from 0 to 32768
[  618.037277][ T8784] 8021q: adding VLAN 0 to HW filter on device bond0
[  618.048341][   T33] audit: type=1800 audit(1776245596.753:558): pid=9212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6636" name="file1" dev="loop6" ino=4 res=0 errno=0
[  618.068844][ T8784] 8021q: adding VLAN 0 to HW filter on device team0
[  618.080803][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  618.083558][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  618.103375][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  618.105996][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  618.271908][ T8784] 8021q: adding VLAN 0 to HW filter on device batadv0
[  618.301671][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  618.330525][ T9212] ERROR: (device loop6): dbAlloc: the hint is outside the map
[  618.330525][ T9212] 
[  618.339805][ T9212] read_mapping_page failed!
[  618.341144][ T9212] ERROR: (device loop6): txCommit: 
[  618.341144][ T9212] 
[  618.566659][ T8784] veth0_vlan: entered promiscuous mode
[  618.589344][ T8784] veth1_vlan: entered promiscuous mode
[  618.643996][   T54] Bluetooth: hci0: command tx timeout
[  618.660263][ T8784] veth0_macvtap: entered promiscuous mode
[  618.681004][ T8784] veth1_macvtap: entered promiscuous mode
[  618.698518][ T8784] batman_adv: batadv0: Interface activated: batadv_slave_0
[  618.715482][ T8784] batman_adv: batadv0: Interface activated: batadv_slave_1
[  618.728407][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  618.739310][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  618.756759][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  618.760659][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  618.779251][ T9381] netlink: 'syz.5.6650': attribute type 4 has an invalid length.
[  618.971125][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  618.974089][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  619.013419][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  619.016115][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  619.762780][ T9528] IPv6: Can't replace route, no match found
[  619.975831][ T9533] sp0: Synchronizing with TNC
[  620.004514][ T9539] netlink: 'syz.5.6664': attribute type 1 has an invalid length.
[  620.008288][ T9539] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6664'.
[  620.333465][ T9566] overlayfs: cannot append lower layer
[  620.457741][ T9578] loop7: detected capacity change from 0 to 64
[  620.471300][ T9551] loop6: detected capacity change from 0 to 32768
[  620.499107][ T9551] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  620.515313][ T9578] BFS-fs: bfs_fill_super(): loop7 is unclean, continuing
[  620.554432][ T9551] XFS (loop6): Ending clean mount
[  620.630909][T16803] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  620.847983][ T9707] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6686'.
[  620.870090][   T54] Bluetooth: hci0: command tx timeout
[  620.913423][ T9707] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6686'.
[  621.053704][ T5837] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  621.056953][ T5837] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  621.066561][ T5837] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  621.073982][ T5837] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  621.732844][ T9833] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6693'.
[  621.765737][ T9835] bond1: (slave bond_slave_1): Device is not our slave
[  621.767870][ T9835] bond1: option active_slave: invalid value (bond_slave_1)
[  621.773369][ T9835] bond1 (unregistering): Released all slaves
[  621.797347][ T9833] bridge0: left allmulticast mode
[  622.155128][T10029] loop6: detected capacity change from 0 to 512
[  622.162019][T10029] EXT4-fs: Ignoring removed nobh option
[  622.164909][T10029] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  622.276532][T10029] EXT4-fs (loop6): 1 truncate cleaned up
[  622.294538][T10029] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  622.383086][T16803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  622.668651][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6711'.
[  623.105952][   T54] Bluetooth: hci0: command tx timeout
[  623.345674][T10118] loop6: detected capacity change from 0 to 32768
[  623.368233][T10118] ialloc: diAlloc returned -28!
[  623.887256][ T9384] usb 7-1: new low-speed USB device number 36 using dummy_hcd
[  624.032122][T10330] loop7: detected capacity change from 0 to 4096
[  624.041749][T10330] ntfs3: Invalid value for dmask.
[  624.053142][ T9384] usb 7-1: unable to get BOS descriptor or descriptor too short
[  624.079783][ T9384] usb 7-1: config 172 has an invalid interface number: 190 but max is 1
[  624.089328][ T9384] usb 7-1: config 172 has an invalid descriptor of length 0, skipping remainder of the config
[  624.093161][ T9384] usb 7-1: config 172 has no interface number 1
[  624.102141][ T9384] usb 7-1: config 172 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  624.126349][ T9384] usb 7-1: config 172 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0
[  624.140221][ T9384] usb 7-1: string descriptor 0 read error: -22
[  624.149622][ T9384] usb 7-1: New USB device found, idVendor=04cb, idProduct=0127, bcdDevice=3a.be
[  624.155011][ T9384] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  624.180871][ T9384] gspca_main: finepix-2.14.0 probing 04cb:0127
[  624.386621][ T9372] usb 7-1: USB disconnect, device number 36
[  624.496972][T10379] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6745'.
[  625.322445][   T54] Bluetooth: hci0: command tx timeout
[  627.374756][ T9372] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  627.418434][T10888] erspan0: entered promiscuous mode
[  627.466983][T10892] digital: digital_start_poll: Unknown protocol
[  627.538416][ T9372] usb 8-1: Using ep0 maxpacket: 32
[  627.548860][ T9372] usb 8-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[  627.552108][ T9372] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.616706][ T9372] usb 8-1: selecting invalid altsetting 3
[  627.619508][ T9372] comedi comedi5: could not set alternate setting 3 in high speed
[  627.627065][ T9372] usbduxsigma 8-1:128.0: driver 'usbduxsigma' failed to auto-configure device.
[  627.638671][ T9372] usbduxsigma 8-1:128.0: probe with driver usbduxsigma failed with error -22
[  627.643075][T10911] netlink: 'syz.5.6797': attribute type 1 has an invalid length.
[  627.645854][T10911] netlink: 'syz.5.6797': attribute type 2 has an invalid length.
[  627.816996][ T9372] usb 8-1: USB disconnect, device number 2
[  627.873413][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  627.875897][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  628.637289][T10939] loop6: detected capacity change from 0 to 4096
[  628.641110][T10939] ntfs3: Unknown parameter ''
[  628.774395][ T9372] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  628.945097][ T9372] usb 8-1: Using ep0 maxpacket: 16
[  628.949283][ T9372] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86
[  628.958233][ T9372] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  628.963471][ T9372] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  628.971992][ T9372] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  628.986175][ T9372] usb 8-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  628.993078][ T9372] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.999391][ T9372] usb 8-1: Product: syz
[  629.003264][ T9372] usb 8-1: Manufacturer: syz
[  629.006148][ T9372] usb 8-1: SerialNumber: syz
[  629.021148][ T9372] usb 8-1: config 0 descriptor??
[  629.034891][ T9372] port100 8-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  629.248437][ T9382] usb 8-1: USB disconnect, device number 3
[  629.934969][T10987] loop7: detected capacity change from 0 to 4096
[  630.136620][T10995] loop7: detected capacity change from 0 to 32768
[  630.144400][T10995] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.6820 (10995)
[  630.242290][T10995] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  630.245419][T10995] BTRFS info (device loop7): using sha256 checksum algorithm
[  630.307682][T10995] BTRFS info (device loop7): enabling ssd optimizations
[  630.310123][T10995] BTRFS info (device loop7): turning on async discard
[  630.312511][T10995] BTRFS info (device loop7): enabling free space tree
[  630.677691][ T4294] BTRFS info (device loop7): qgroup scan completed (inconsistency flag cleared)
[  630.807409][ T8784] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  631.202380][T11035] loop7: detected capacity change from 0 to 4096
[  631.267870][T11035] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  631.371314][ T8784] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  631.560745][T11039] loop6: detected capacity change from 0 to 32768
[  631.598226][T11039] JBD2: Ignoring recovery information on journal
[  631.655547][T11039] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  631.770613][T11039] syz.6.6827 (11039) used greatest stack depth: 18080 bytes left
[  631.895060][T16803] ocfs2: Unmounting device (7,6) on (node local)
[  631.982954][T11150] loop7: detected capacity change from 0 to 32768
[  632.025948][T11150] XFS (loop7): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[  632.037431][T11150] XFS (loop7): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_inobt block 0xc 
[  632.041458][T11150] XFS (loop7): Unmount and run xfs_repair
[  632.044302][T11150] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  632.047460][T11150] 00000000: 49 41 42 33 00 00 00 02 ff ff ff ff ff ff ff ff  IAB3............
[  632.050722][T11150] 00000010: 00 00 00 00 00 00 00 0c 00 00 00 01 00 00 00 80  ................
[  632.054136][T11150] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  632.068870][T11150] 00000030: 00 00 00 00 72 1a c9 82 00 00 24 40 00 00 40 37  ....r.....$@..@7
[  632.072241][T11150] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  632.075611][T11150] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  632.089295][T11150] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  632.098641][T11150] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  632.106440][T11150] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0xc len 4 error 74
[  632.117339][T11150] loop7: lost filesystem error report for type 5 error -117
[  632.117431][T11150] XFS (loop7): Failed to read root inode 0x2440, error 117
[  632.128702][T11150] XFS (loop7): Uncorrected metadata errors detected; please run xfs_repair.
[  632.223950][T11290] vlan0: entered allmulticast mode
[  632.229308][T11290] bridge_slave_0: entered allmulticast mode
[  632.237082][T11290] bridge0: port 1(vlan0) entered blocking state
[  632.246237][T11290] bridge0: port 1(vlan0) entered disabled state
[  632.272654][T11290] vlan0: entered promiscuous mode
[  632.277280][T11290] bridge_slave_0: entered promiscuous mode
[  632.285138][T11299] netlink: 'syz.6.6843': attribute type 4 has an invalid length.
[  632.636428][T11322] tmpfs: Bad value for 'mpol'
[  632.701540][T11329] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  632.703570][T11329] overlayfs: failed to set xattr on upper
[  632.716028][T11331] netlink: 116 bytes leftover after parsing attributes in process `syz.5.6855'.
[  632.717145][T11329] overlayfs: ...falling back to redirect_dir=nofollow.
[  632.721242][T11329] overlayfs: ...falling back to index=off.
[  632.723049][T11329] overlayfs: ...falling back to uuid=null.
[  632.724866][T11329] overlayfs: failed to clone lowerpath
[  634.471541][T11593] netlink: 'syz.7.6876': attribute type 1 has an invalid length.
[  634.570656][T11604] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6880'.
[  634.727220][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  634.771373][T11610] loop7: detected capacity change from 0 to 32768
[  634.778787][T11610] ERROR: (device loop7): diRead: i_ino != di_number
[  634.778787][T11610] 
[  634.895871][T11621] loop6: detected capacity change from 0 to 32768
[  634.926136][T11633] openvswitch: netlink: Message has 1 unknown bytes.
[  634.934710][T11633] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  634.943072][T11621] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  634.973806][T11621] XFS (loop6): Ending clean mount
[  635.006940][T11641] loop7: detected capacity change from 0 to 2048
[  635.024801][T11641] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  635.687862][T16803] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  636.116523][T11785] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6902'.
[  636.191154][T11790] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6904'.
[  636.551136][T11796] loop7: detected capacity change from 0 to 32768
[  636.595214][T11796] JBD2: Ignoring recovery information on journal
[  636.623425][T11798] loop6: detected capacity change from 0 to 32768
[  636.685588][T11796] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  636.808642][ T8784] ocfs2: Unmounting device (7,7) on (node local)
[  637.010318][T11927] netlink: 'syz.7.6914': attribute type 4 has an invalid length.
[  637.013825][T11927] netlink: 'syz.7.6914': attribute type 8 has an invalid length.
[  637.016813][T11927] netlink: 212 bytes leftover after parsing attributes in process `syz.7.6914'.
[  638.042991][T12066] loop6: detected capacity change from 0 to 32768
[  638.052871][T12066] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  638.121227][T12066] XFS (loop6): Ending clean mount
[  638.165145][T16803] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  638.356433][T12098] loop7: detected capacity change from 0 to 2048
[  638.362998][T12098] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  638.369116][T12098] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  638.436589][T12104] netlink: 'syz.7.6938': attribute type 32 has an invalid length.
[  638.578214][T12112] netlink: 7 bytes leftover after parsing attributes in process `syz.7.6940'.
[  638.599491][T12115] loop6: detected capacity change from 0 to 512
[  638.608183][T12115] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  638.638946][T12115] EXT4-fs (loop6): 1 orphan inode deleted
[  638.642582][T12115] EXT4-fs (loop6): 1 truncate cleaned up
[  638.648608][T12115] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  638.695104][T16803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  638.786110][T12136] loop6: detected capacity change from 0 to 256
[  638.801874][T12136] exFAT-fs (loop6): error, invalid access to FAT free cluster (entry 0x00000005)
[  638.805325][T12136] exFAT-fs (loop6): failed to count the number of clusters in root
[  638.810771][T12136] exFAT-fs (loop6): failed to recognize exfat type
[  639.021262][T12162] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6953'.
[  639.509897][T12202] lo speed is unknown, defaulting to 1000
[  639.512262][T12202] lo speed is unknown, defaulting to 1000
[  639.524838][T12202] lo speed is unknown, defaulting to 1000
[  639.582529][T12202] infiniband sy0: RDMA CMA: cma_listen_on_dev, error -98
[  639.651139][T12203] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[  639.704833][T12202] lo speed is unknown, defaulting to 1000
[  639.708797][T12202] lo speed is unknown, defaulting to 1000
[  639.711315][T12202] lo speed is unknown, defaulting to 1000
[  639.713756][T12202] lo speed is unknown, defaulting to 1000
[  639.716343][T12202] lo speed is unknown, defaulting to 1000
[  639.720238][T12202] lo speed is unknown, defaulting to 1000
[  639.770811][ T9382] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  639.848713][T12214] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22
[  639.852158][T12214] netdevsim netdevsim5: Direct firmware load for . failed with error -22
[  639.854549][T12214] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[  639.941385][ T9382] usb 7-1: Using ep0 maxpacket: 32
[  639.955089][ T9382] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  639.958582][ T9382] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.961788][ T9382] usb 7-1: Product: syz
[  639.964171][ T9382] usb 7-1: Manufacturer: syz
[  639.966062][ T9382] usb 7-1: SerialNumber: syz
[  639.975365][ T9382] usb 7-1: config 0 descriptor??
[  639.981579][ T9382] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  640.667967][ T9372] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  640.834912][ T9372] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  640.843404][ T9372] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  640.850251][ T9372] usb 8-1: config 0 descriptor??
[  640.856225][ T9372] cp210x 8-1:0.0: cp210x converter detected
[  641.079198][ T9372] usb 8-1: cp210x converter now attached to ttyUSB0
[  641.291811][ T9386] usb 8-1: USB disconnect, device number 4
[  641.298638][ T9386] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  641.309957][ T9386] cp210x 8-1:0.0: device disconnected
[  641.483514][ T9382] gspca_topro: reg_r err -71
[  641.484885][ T9382] gspca_topro: Sensor soi763a
[  641.511877][ T9382] usb 7-1: USB disconnect, device number 37
[  641.579565][T12285] netlink: 'syz.5.6984': attribute type 15 has an invalid length.
[  641.642506][T12289] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6986'.
[  642.115917][T12422] netlink: 'syz.7.6996': attribute type 4 has an invalid length.
[  642.118320][T12422] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.6996'.
[  642.203828][T12429] overlayfs: failed to clone upperpath
[  642.209138][T12432] loop7: detected capacity change from 0 to 16
[  642.226743][T12432] erofs (device loop7): mounted with root inode @ nid 36.
[  642.239640][T12432] syz.7.7001: attempt to access beyond end of device
[  642.239640][T12432] loop7: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  642.252575][T12432] erofs (device loop7): bogus lookback distance 1792 @ lcn 4 of nid 89
[  642.255554][T12432] erofs (device loop7): readahead error at folio 4 @ nid 89
[  642.258324][T12432] syz.7.7001: attempt to access beyond end of device
[  642.258324][T12432] loop7: rw=524288, sector=16, nr_sectors = 8 limit=16
[  642.266998][T12432] erofs (device loop7): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192
[  642.274702][T12432] erofs (device loop7): read error -117 @ 1 of nid 89
[  642.277785][   T33] audit: type=1800 audit(1776245619.418:559): pid=12432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.7001" name="file2" dev="loop7" ino=89 res=0 errno=0
[  642.334835][ T9374] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  642.339049][T12443] loop7: detected capacity change from 0 to 64
[  642.373215][   T33] audit: type=1326 audit(1776245619.512:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12445 comm="syz.5.7005" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82f299c819 code=0x0
[  642.404544][T12443] overlayfs: upper fs needs to support d_type.
[  642.416181][T12443] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  642.421624][T12443] overlayfs: failed to set xattr on upper
[  642.423699][T12443] overlayfs: ...falling back to redirect_dir=nofollow.
[  642.426429][T12443] overlayfs: ...falling back to metacopy=off.
[  642.429348][T12443] overlayfs: ...falling back to index=off.
[  642.434562][T12443] overlayfs: ...falling back to uuid=null.
[  642.487455][ T8784] Trying to free block not in datazone
[  642.518520][ T9374] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  642.522071][ T9374] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  642.534063][ T9374] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  642.538861][T12452] netlink: 48 bytes leftover after parsing attributes in process `syz.7.7006'.
[  642.545226][ T9374] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  642.548948][ T9374] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.555353][ T9374] usb 7-1: Product: syz
[  642.558125][ T9374] usb 7-1: Manufacturer: syz
[  642.562235][ T9374] usb 7-1: SerialNumber: syz
[  642.572483][ T9374] usb 7-1: config 0 descriptor??
[  642.577586][T12413] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  642.585411][T12413] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  642.591418][ T9374] usb 7-1: ucan: probing device on interface #0
[  642.809247][ T9374] usb 7-1: ucan: device protocol version 0 is not supported
[  642.812078][ T9374] usb 7-1: ucan: probe failed; try to update the device firmware
[  642.869236][ T9386] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[  643.068066][ T9386] usb 8-1: unable to get BOS descriptor or descriptor too short
[  643.076418][ T9386] usb 8-1: no configurations
[  643.078155][ T9386] usb 8-1: can't read configurations, error -22
[  645.218330][T12610] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7028'.
[  645.247698][T12612] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  645.292854][T12614] overlayfs: failed to clone upperpath
[  645.299725][T12614] overlayfs: failed to clone upperpath
[  645.300341][ T9384] usb 7-1: USB disconnect, device number 38
[  645.373819][   T33] audit: type=1326 audit(1776245622.319:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12624 comm="syz.5.7032" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82f299c819 code=0x0
[  645.401507][T12623] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  645.403824][T12623] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  645.434737][T12623] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  645.436938][T12623] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  645.443659][T12623] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  645.687307][T12639] loop6: detected capacity change from 0 to 32768
[  645.703824][T12639] JBD2: Ignoring recovery information on journal
[  645.728689][T12639] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  645.795903][T16803] ocfs2: Unmounting device (7,6) on (node local)
[  646.078973][T12669] netlink: 212348 bytes leftover after parsing attributes in process `syz.7.7043'.
[  647.538935][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  647.636257][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[  647.729762][T12934] loop7: detected capacity change from 0 to 8192
[  647.740434][T12934] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  647.943947][T12963] overlayfs: failed to clone upperpath
[  648.267116][T12996] loop7: detected capacity change from 0 to 256
[  649.115327][T13013] Device name not specified.
[  649.115327][T13013] 
[  649.211372][T13019] loop6: detected capacity change from 0 to 128
[  649.371890][T13033] netlink: 67 bytes leftover after parsing attributes in process `syz.7.7095'.
[  649.437127][T13043] netlink: 'syz.6.7099': attribute type 21 has an invalid length.
[  649.439519][T13043] netlink: 156 bytes leftover after parsing attributes in process `syz.6.7099'.
[  649.518367][T13053] unsupported nla_type 142
[  649.773065][ T5815] Bluetooth: hci1: command 0x0406 tx timeout
[  649.847083][ T5815] Bluetooth: hci0: command 0x0c1a tx timeout
[  650.641240][T13333] loop6: detected capacity change from 0 to 8192
[  651.166147][T13373] lo speed is unknown, defaulting to 1000
[  651.429258][T13480] loop7: detected capacity change from 0 to 16
[  651.504606][T13480] erofs (device loop7): mounted with root inode @ nid 36.
[  652.070157][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[  654.292275][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[  654.796767][T13677] loop6: detected capacity change from 0 to 32768
[  654.812249][T13677] 
[  654.812249][T13677]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  654.812249][T13677] 
[  655.207029][T13677] 
[  655.207029][T13677]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  655.207029][T13677] 
[  655.210877][T13677] 
[  655.210877][T13677]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  655.210877][T13677] 
[  655.220849][T13677] 
[  655.220849][T13677]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  655.220849][T13677] 
[  655.225107][T13677] 
[  655.225107][T13677]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  655.225107][T13677] 
[  655.229270][  T116] 
[  655.229270][  T116]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  655.229270][  T116] 
[  655.233175][   T33] audit: type=1800 audit(1776245631.546:562): pid=13677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7174" name="file2" dev="loop6" ino=7 res=0 errno=0
[  655.242671][T13677] ialloc: diAlloc returned -5!
[  655.261179][T16803] 
[  655.261179][T16803]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  655.261179][T16803] 
[  655.268918][T16803] 
[  655.268918][T16803]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  655.268918][T16803] 
[  655.816403][T13704] loop7: detected capacity change from 0 to 40427
[  655.824555][T13704] F2FS-fs (loop7): build fault injection rate: 771
[  655.837733][T13704] F2FS-fs (loop7): invalid crc value
[  656.072958][T13704] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  656.079705][T13704] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  656.275495][ T8784] syz-executor: attempt to access beyond end of device
[  656.275495][ T8784] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  656.281174][ T8784] CPU: 1 UID: 0 PID: 8784 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  656.281192][ T8784] Tainted: [L]=SOFTLOCKUP
[  656.281195][ T8784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  656.281201][ T8784] Call Trace:
[  656.281205][ T8784]  <TASK>
[  656.281210][ T8784]  dump_stack_lvl+0xe8/0x150
[  656.281228][ T8784]  f2fs_handle_critical_error+0x37c/0x540
[  656.281245][ T8784]  f2fs_write_end_io+0xcdb/0xff0
[  656.281263][ T8784]  __submit_merged_bio+0x256/0x700
[  656.281278][ T8784]  f2fs_submit_merged_write+0x284/0x390
[  656.281292][ T8784]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  656.281318][ T8784]  f2fs_sync_node_pages+0x14bf/0x1680
[  656.281340][ T8784]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  656.281373][ T8784]  f2fs_write_checkpoint+0xeb8/0x26a0
[  656.281398][ T8784]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  656.281427][ T8784]  ? kfree+0x1c1/0x630
[  656.281435][ T8784]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  656.281449][ T8784]  kill_f2fs_super+0x314/0x720
[  656.281461][ T8784]  ? __pfx_kill_f2fs_super+0x10/0x10
[  656.281476][ T8784]  ? lockdep_hardirqs_on+0x7a/0x110
[  656.281494][ T8784]  deactivate_locked_super+0xbc/0x130
[  656.281504][ T8784]  cleanup_mnt+0x437/0x4d0
[  656.281514][ T8784]  ? _raw_spin_unlock_irq+0x23/0x50
[  656.281526][ T8784]  task_work_run+0x1d9/0x270
[  656.281538][ T8784]  ? __pfx_task_work_run+0x10/0x10
[  656.281554][ T8784]  exit_to_user_mode_loop+0xed/0x480
[  656.281564][ T8784]  ? rcu_is_watching+0x15/0xb0
[  656.281578][ T8784]  do_syscall_64+0x32d/0xf80
[  656.281590][ T8784]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  656.281602][ T8784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  656.281610][ T8784] RIP: 0033:0x7f8c6959da57
[  656.281620][ T8784] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  656.281627][ T8784] RSP: 002b:00007ffc9a8515a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  656.281638][ T8784] RAX: 0000000000000000 RBX: 00007f8c69632048 RCX: 00007f8c6959da57
[  656.281644][ T8784] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc9a851660
[  656.281649][ T8784] RBP: 00007ffc9a851660 R08: 00007ffc9a852660 R09: 00000000ffffffff
[  656.281655][ T8784] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc9a8526f0
[  656.281660][ T8784] R13: 00007f8c69632048 R14: 000000000009ea9f R15: 00007ffc9a852730
[  656.281675][ T8784]  </TASK>
[  656.285007][ T8784] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  656.364287][ T8784] CPU: 1 UID: 0 PID: 8784 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  656.364321][ T8784] Tainted: [L]=SOFTLOCKUP
[  656.364325][ T8784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  656.364331][ T8784] Call Trace:
[  656.364335][ T8784]  <TASK>
[  656.364340][ T8784]  dump_stack_lvl+0xe8/0x150
[  656.364356][ T8784]  f2fs_handle_critical_error+0x37c/0x540
[  656.364372][ T8784]  f2fs_write_end_io+0xcdb/0xff0
[  656.364389][ T8784]  __submit_merged_bio+0x256/0x700
[  656.364404][ T8784]  f2fs_submit_merged_write+0x284/0x390
[  656.364418][ T8784]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  656.364437][ T8784]  f2fs_sync_node_pages+0x14bf/0x1680
[  656.364457][ T8784]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  656.364488][ T8784]  f2fs_write_checkpoint+0xeb8/0x26a0
[  656.364513][ T8784]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  656.364540][ T8784]  ? kfree+0x1c1/0x630
[  656.364550][ T8784]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  656.364563][ T8784]  kill_f2fs_super+0x314/0x720
[  656.364587][ T8784]  ? __pfx_kill_f2fs_super+0x10/0x10
[  656.364603][ T8784]  ? lockdep_hardirqs_on+0x7a/0x110
[  656.364622][ T8784]  deactivate_locked_super+0xbc/0x130
[  656.364632][ T8784]  cleanup_mnt+0x437/0x4d0
[  656.364641][ T8784]  ? _raw_spin_unlock_irq+0x23/0x50
[  656.364653][ T8784]  task_work_run+0x1d9/0x270
[  656.364665][ T8784]  ? __pfx_task_work_run+0x10/0x10
[  656.364678][ T8784]  exit_to_user_mode_loop+0xed/0x480
[  656.364688][ T8784]  ? rcu_is_watching+0x15/0xb0
[  656.364702][ T8784]  do_syscall_64+0x32d/0xf80
[  656.364713][ T8784]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  656.364724][ T8784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  656.364733][ T8784] RIP: 0033:0x7f8c6959da57
[  656.364742][ T8784] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  656.364777][ T8784] RSP: 002b:00007ffc9a8515a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  656.364793][ T8784] RAX: 0000000000000000 RBX: 00007f8c69632048 RCX: 00007f8c6959da57
[  656.364802][ T8784] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc9a851660
[  656.364812][ T8784] RBP: 00007ffc9a851660 R08: 00007ffc9a852660 R09: 00000000ffffffff
[  656.364821][ T8784] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc9a8526f0
[  656.364830][ T8784] R13: 00007f8c69632048 R14: 000000000009ea9f R15: 00007ffc9a852730
[  656.364854][ T8784]  </TASK>
[  656.364960][ T8784] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  656.555178][T13943] netlink: 'syz.5.7198': attribute type 30 has an invalid length.
[  656.797524][T13951] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  657.940602][T14103] loop7: detected capacity change from 0 to 256
[  657.949129][T14103] exfat: Deprecated parameter 'utf8'
[  657.951183][T14103] exfat: Deprecated parameter 'namecase'
[  657.953316][T14103] exfat: Deprecated parameter 'utf8'
[  657.964505][T14103] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  658.063676][T14114] loop7: detected capacity change from 0 to 512
[  658.074781][T14114] EXT4-fs: Ignoring removed bh option
[  658.078088][T14117] loop6: detected capacity change from 0 to 512
[  658.082200][T14117] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  658.091072][T14117] FAT-fs (loop6): FAT read failed (blocknr 1568)
[  658.091977][T14114] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  658.095379][T14117] FAT-fs (loop6): FAT read failed (blocknr 1568)
[  658.110655][T14114] EXT4-fs error (device loop7): ext4_iget_extra_inode:5040: inode #15: comm syz.7.7224: corrupted in-inode xattr: e_value size too large
[  658.116569][T14114] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  658.119544][    C0] EXT4-fs (loop7): initial error at time 1776245634: ext4_iget_extra_inode:5040: inode 15
[  658.126482][    C0] EXT4-fs (loop7): last error at time 1776245634: ext4_iget_extra_inode:5040: inode 15
[  658.133163][T14114] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.7224: couldn't read orphan inode 15 (err -117)
[  658.137270][T14114] loop7: lost filesystem error report for type 5 error -117
[  658.143983][T14114] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  658.191133][T14114] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.7224: Unrecognised inode hash code 4
[  658.197692][T14114] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.7224: Corrupt directory, running e2fsck is recommended
[  658.240223][ T8784] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  658.682320][T14175] loop6: detected capacity change from 0 to 2048
[  658.688004][T14175] FAT-fs (loop6): bogus sectors per cluster 248
[  658.690141][T14175] FAT-fs (loop6): Can't find a valid FAT filesystem
[  659.020381][T14194] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  660.001757][T14220] hpfs: hpfs_map_sector(): read error
[  660.696954][T14336] netlink: 'syz.7.7265': attribute type 10 has an invalid length.
[  660.702666][T14336] team0: Device xfrm0 is of different type
[  660.761256][T14338] loop7: detected capacity change from 0 to 4096
[  660.780574][T14338] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  660.783895][T14338] ntfs3(loop7): Failed to load $Extend (-22).
[  660.785812][T14338] ntfs3(loop7): Failed to initialize $Extend.
[  660.804126][ T8784] ntfs3(loop7): ino=9, ntfs_sync_fs failed, -22.
[  661.038488][   T33] audit: type=1326 audit(1776245636.983:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14354 comm="syz.5.7272" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f299c819 code=0x7ffc0000
[  661.063707][   T33] audit: type=1326 audit(1776245636.983:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14354 comm="syz.5.7272" exe="/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f82f299c819 code=0x7ffc0000
[  661.077191][   T33] audit: type=1326 audit(1776245636.983:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14354 comm="syz.5.7272" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f299c819 code=0x7ffc0000
[  661.086315][   T33] audit: type=1326 audit(1776245636.983:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14354 comm="syz.5.7272" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f299c819 code=0x7ffc0000
[  661.097969][   T33] audit: type=1326 audit(1776245636.983:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14354 comm="syz.5.7272" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f82f299c819 code=0x7ffc0000
[  661.112056][   T33] audit: type=1326 audit(1776245636.983:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14354 comm="syz.5.7272" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f299c819 code=0x7ffc0000
[  661.121781][   T33] audit: type=1326 audit(1776245636.983:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14354 comm="syz.5.7272" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f299c819 code=0x7ffc0000
[  661.131479][   T33] audit: type=1326 audit(1776245636.993:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14354 comm="syz.5.7272" exe="/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f82f299c819 code=0x7ffc0000
[  661.140463][   T33] audit: type=1326 audit(1776245636.993:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14354 comm="syz.5.7272" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f299c819 code=0x7ffc0000
[  661.150177][   T33] audit: type=1326 audit(1776245636.993:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14354 comm="syz.5.7272" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82f299c819 code=0x7ffc0000
[  661.297850][T14367] netlink: 128 bytes leftover after parsing attributes in process `syz.7.7276'.
[  661.301163][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7276'.
[  662.274704][ T9374] usb 7-1: new low-speed USB device number 39 using dummy_hcd
[  662.447745][ T9374] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  662.450806][ T9374] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  662.454611][ T9374] usb 7-1: config 0 has no interface number 0
[  662.457889][ T9374] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  662.461294][ T9374] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  662.485495][ T9374] usb 7-1: config 0 descriptor??
[  662.497570][ T9374] iowarrior 7-1:0.1: no interrupt-in endpoint found
[  662.719002][ T9372] usb 7-1: USB disconnect, device number 39
[  662.798247][ T9374] usb 8-1: new low-speed USB device number 7 using dummy_hcd
[  662.974946][ T9374] usb 8-1: unable to get BOS descriptor or descriptor too short
[  662.979071][ T9374] usb 8-1: config 242 has an invalid interface number: 40 but max is 0
[  662.983257][ T9374] usb 8-1: config 242 has no interface number 0
[  662.985744][ T9374] usb 8-1: config 242 interface 40 altsetting 4 endpoint 0xD is Bulk; changing to Interrupt
[  662.990173][ T9374] usb 8-1: config 242 interface 40 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 8
[  662.994761][ T9374] usb 8-1: config 242 interface 40 has no altsetting 0
[  663.000340][ T9374] usb 8-1: string descriptor 0 read error: -22
[  663.003057][ T9374] usb 8-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=44.11
[  663.006528][ T9374] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  663.025436][T14424] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  663.031553][ T9374] hdpvr 8-1:242.40: Could not find bulk-in endpoint
[  663.039000][ T9374] hdpvr 8-1:242.40: probe with driver hdpvr failed with error -12
[  663.235779][T14469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7309'.
[  663.255981][ T9384] usb 8-1: USB disconnect, device number 7
[  666.097117][T14672] netlink: 'syz.6.7339': attribute type 2 has an invalid length.
[  666.182666][T14677] loop6: detected capacity change from 0 to 1024
[  666.198182][T14677] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  666.220883][T16803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  666.379121][T14700] loop6: detected capacity change from 0 to 8
[  666.559870][ T9384] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  666.720149][ T9386] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  666.724318][ T9384] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  666.727465][ T9384] usb 8-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  666.730026][ T9384] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  666.734816][ T9384] usb 8-1: config 0 descriptor??
[  666.737313][T14693] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  666.880322][ T9386] usb 7-1: Using ep0 maxpacket: 32
[  666.884830][ T9386] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  666.887461][ T9386] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  666.890354][ T9386] usb 7-1: config 0 interface 0 has no altsetting 1
[  666.897018][ T9386] usb 7-1: New USB device found, idVendor=1199, idProduct=9004, bcdDevice= f.8c
[  666.899640][ T9386] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.902493][ T9386] usb 7-1: Product: syz
[  666.903793][ T9386] usb 7-1: Manufacturer: syz
[  666.905184][ T9386] usb 7-1: SerialNumber: syz
[  666.913331][ T9386] usb 7-1: config 0 descriptor??
[  666.920164][ T9386] qmi_wwan 7-1:0.0: probe with driver qmi_wwan failed with error -22
[  667.136288][ T9386] usb 7-1: USB disconnect, device number 40
[  667.180145][ T9384] hid_parser_main: 222 callbacks suppressed
[  667.180166][ T9384] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  667.184086][ T9384] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  667.186158][ T9384] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  667.188622][ T9384] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  667.191644][ T9384] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  667.193735][ T9384] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  667.195798][ T9384] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  667.198650][ T9384] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  667.202126][ T9384] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  667.204284][ T9384] asus 0003:0B05:1ABE.000C: unknown main item tag 0x0
[  667.217175][ T9384] asus 0003:0B05:1ABE.000C: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.7-1/input0
[  667.391413][ T9384] usb 8-1: USB disconnect, device number 8
[  668.325260][T14775] Device name not specified.
[  668.325260][T14775] 
[  668.529049][T14787] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7365'.
[  668.539550][T14787] bridge0: port 2(bridge_slave_1) entered disabled state
[  668.543794][T14787] bridge0: port 1(bridge_slave_0) entered disabled state
[  668.557077][T14787] netlink: 52 bytes leftover after parsing attributes in process `syz.7.7365'.
[  668.605268][T14790] loop7: detected capacity change from 0 to 512
[  668.774787][T14801] netlink: 'syz.5.7369': attribute type 11 has an invalid length.
[  668.993651][T14820] loop6: detected capacity change from 0 to 512
[  668.997914][T14796] loop7: detected capacity change from 0 to 40427
[  669.002805][T14796] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  669.005606][T14796] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  669.020142][T14796] F2FS-fs (loop7): invalid crc value
[  669.049232][T14820] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  669.060321][T14820] ext4 filesystem being mounted at /1010/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  669.099068][   T33] kauditd_printk_skb: 13 callbacks suppressed
[  669.099079][   T33] audit: type=1800 audit(1776245644.517:586): pid=14820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7376" name="file2" dev="loop6" ino=16 res=0 errno=0
[  669.116425][T14796] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  669.122521][T14796] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  669.127584][T14796] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  669.165346][T16803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  669.209481][   T33] audit: type=1804 audit(1776245644.619:587): pid=14796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.7367" name="/newroot/210/bus/bus" dev="loop7" ino=10 res=1 errno=0
[  669.267055][T14842] loop6: detected capacity change from 0 to 512
[  669.274091][T14842] EXT4-fs: Mount option(s) incompatible with ext3
[  669.534675][T14955] loop6: detected capacity change from 0 to 1024
[  669.560755][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7385'.
[  669.572502][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7385'.
[  669.853097][T14973] loop6: detected capacity change from 0 to 32768
[  669.923149][T14973] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.7389 (14973)
[  670.794188][T14973] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  670.800266][T14973] BTRFS info (device loop6): using sha256 checksum algorithm
[  670.862028][T14973] BTRFS info (device loop6): enabling ssd optimizations
[  670.864486][T14973] BTRFS info (device loop6): turning on async discard
[  670.868740][T14973] BTRFS info (device loop6): enabling free space tree
[  671.067558][T16803] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  671.673868][T15139] --map-set only usable from mangle table
[  671.862318][   T13] bond2: (slave geneve2): link status up again after 0 ms
[  671.866851][   T13] bond2: (slave geneve2): failed to get link speed/duplex
[  671.988315][   T13] bond2: (slave geneve2): failed to get link speed/duplex
[  672.106278][   T13] bond2: (slave geneve2): failed to get link speed/duplex
[  672.134939][T15264] macvlan0: entered promiscuous mode
[  672.142158][T15264] netlink: 'syz.7.7415': attribute type 1 has an invalid length.
[  672.148933][T15264] netlink: 'syz.7.7415': attribute type 2 has an invalid length.
[  672.193346][T15266] x_tables: duplicate underflow at hook 4
[  672.226184][   T12] bond2: (slave geneve2): failed to get link speed/duplex
[  672.341074][   T13] bond2: (slave geneve2): failed to get link speed/duplex
[  672.458677][   T12] bond2: (slave geneve2): failed to get link speed/duplex
[  672.575987][   T13] bond2: (slave geneve2): failed to get link speed/duplex
[  672.695394][ T4294] bond2: (slave geneve2): failed to get link speed/duplex
[  672.813378][ T4294] bond2: (slave geneve2): failed to get link speed/duplex
[  672.818715][T15414] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7432'.
[  672.873960][T15416] loop6: detected capacity change from 0 to 1024
[  672.882315][T15416] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  672.902035][T15416] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  672.912606][T15416] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  672.946406][T16803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  673.214345][T15426] loop6: detected capacity change from 0 to 32768
[  673.248748][T15426] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  673.295956][T15426] XFS (loop6): Ending clean mount
[  673.330811][T16803] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  673.495243][ T9386] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  673.577352][T15455] overlayfs: failed to resolve './file1metacopy=off': -2
[  673.630269][T15459] xt_hashlimit: size too large, truncated to 1048576
[  673.657145][ T9386] usb 8-1: config 220 has an invalid interface number: 76 but max is 2
[  673.660190][ T9386] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  673.663428][ T9386] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  673.686278][ T9386] usb 8-1: config 220 has no interface number 2
[  673.690547][ T9386] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  673.695286][ T9386] usb 8-1: config 220 interface 0 has no altsetting 0
[  673.697768][ T9386] usb 8-1: config 220 interface 76 has no altsetting 0
[  673.710612][ T9386] usb 8-1: config 220 interface 1 has no altsetting 0
[  673.715396][ T9386] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  673.718273][ T9386] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.732198][ T9386] usb 8-1: Product: syz
[  673.733794][ T9386] usb 8-1: Manufacturer: syz
[  673.735446][ T9386] usb 8-1: SerialNumber: syz
[  673.866953][T15467] loop6: detected capacity change from 0 to 1024
[  673.977890][ T9386] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  673.981688][ T9386] uvcvideo 8-1:220.0: No valid video chain found.
[  673.984146][ T9386] usb 8-1: selecting invalid altsetting 0
[  674.010346][ T9386] usb 8-1: selecting invalid altsetting 0
[  674.012071][ T9386] usbtest 8-1:220.1: probe with driver usbtest failed with error -22
[  674.016735][ T9386] usb 8-1: USB disconnect, device number 9
[  675.039117][T15620] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  675.113702][T15627] netlink: 'syz.6.7459': attribute type 1 has an invalid length.
[  675.116620][T15627] netlink: 76 bytes leftover after parsing attributes in process `syz.6.7459'.
[  676.719860][T15781] netlink: 'syz.7.7481': attribute type 10 has an invalid length.
[  676.722731][T15781] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7481'.
[  676.725509][T15781] team0: entered promiscuous mode
[  676.727015][T15781] team_slave_0: entered promiscuous mode
[  676.729080][T15781] team_slave_1: entered promiscuous mode
[  676.731147][T15781] team0: entered allmulticast mode
[  676.734192][T15781] team_slave_0: entered allmulticast mode
[  676.735999][T15781] team_slave_1: entered allmulticast mode
[  676.738261][T15781] bridge0: port 3(team0) entered blocking state
[  676.740465][T15781] bridge0: port 3(team0) entered disabled state
[  676.829352][ T9382] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  676.881416][ T9372] IPVS: starting estimator thread 0...
[  676.989566][T15785] IPVS: using max 49 ests per chain, 117600 per kthread
[  677.005129][ T9382] usb 7-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  677.008683][ T9382] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  677.021635][ T9382] usb 7-1: Product: syz
[  677.023864][ T9382] usb 7-1: Manufacturer: syz
[  677.025706][ T9382] usb 7-1: SerialNumber: syz
[  677.047478][ T9382] usb 7-1: config 0 descriptor??
[  677.081330][ T9382] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  677.246171][   T12] net_ratelimit: 35 callbacks suppressed
[  677.246279][   T12] bond2: (slave geneve2): failed to get link speed/duplex
[  677.300361][ T9382] sonixb 7-1:0.0: Error reading register 00: -71
[  677.322616][ T9382] usb 7-1: USB disconnect, device number 41
[  677.374963][   T12] bond2: (slave geneve2): failed to get link speed/duplex
[  677.502579][   T12] bond2: (slave geneve2): failed to get link speed/duplex
[  677.620914][   T12] bond2: (slave geneve2): failed to get link speed/duplex
[  677.737837][ T5837] bond2: (slave geneve2): failed to get link speed/duplex
[  677.855549][   T12] bond2: (slave geneve2): failed to get link speed/duplex
[  677.974314][   T12] bond2: (slave geneve2): failed to get link speed/duplex
[  678.102776][   T12] bond2: (slave geneve2): failed to get link speed/duplex
[  678.239591][   T12] bond2: (slave geneve2): failed to get link speed/duplex
[  678.261880][T15817] sctp: [Deprecated]: syz.7.7490 (pid 15817) Use of int in max_burst socket option deprecated.
[  678.261880][T15817] Use struct sctp_assoc_value instead
[  678.331542][T15824] netlink: 'syz.7.7493': attribute type 1 has an invalid length.
[  678.441732][T15830] bond1: (slave geneve2): making interface the new active one
[  678.451742][T15824] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7493'.
[  678.456152][T15830] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  678.459663][   T12] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  678.477134][   T12] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  678.480577][   T12] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  678.498886][T15824] 8021q: adding VLAN 0 to HW filter on device bond1
[  678.515412][   T12] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  678.528419][   T12] bond2: (slave geneve2): failed to get link speed/duplex
[  678.656939][ T9372] usb 7-1: new high-speed USB device number 42 using dummy_hcd
[  678.869542][T15868] loop7: detected capacity change from 0 to 32768
[  678.882182][T15868] ocfs2: Slot 0 on device (7,7) was already allocated to this node!
[  678.886350][T15868] JBD2: Ignoring recovery information on journal
[  678.923983][ T9372] usb 7-1: Using ep0 maxpacket: 32
[  678.930816][ T9372] usb 7-1: config 51 has an invalid interface number: 9 but max is 0
[  678.933488][T15868] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  678.933904][ T9372] usb 7-1: config 51 has no interface number 0
[  678.943544][ T9372] usb 7-1: config 51 interface 9 altsetting 8 endpoint 0xA has invalid wMaxPacketSize 0
[  678.947730][ T9372] usb 7-1: config 51 interface 9 altsetting 8 bulk endpoint 0xA has invalid maxpacket 0
[  678.951422][ T9372] usb 7-1: config 51 interface 9 has no altsetting 0
[  678.956924][ T9372] usb 7-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=29.08
[  678.960446][ T9372] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.963534][ T9372] usb 7-1: Product: syz
[  678.965709][ T9372] usb 7-1: Manufacturer: syz
[  679.025078][ T8784] ocfs2: Unmounting device (7,7) on (node local)
[  679.046244][ T9372] usb 7-1: SerialNumber: syz
[  679.225625][T15983] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7497'.
[  679.301952][ T9372] redrat3 7-1:51.9: Couldn't find all endpoints
[  679.319743][ T9372] usb 7-1: USB disconnect, device number 42
[  679.849124][T16020] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  680.405582][   T54] Bluetooth: hci1: ACL packet for unknown connection handle 3333
[  680.937893][T16049] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7517'.
[  681.471825][T16175] ipt_REJECT: ECHOREPLY no longer supported.
[  681.898224][T16183] loop6: detected capacity change from 0 to 32768
[  681.907496][T16183] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.7532 (16183)
[  681.972380][T16183] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  681.980063][T16183] BTRFS info (device loop6): using crc32c checksum algorithm
[  682.089250][T16183] BTRFS info (device loop6): setting nodatasum
[  682.091122][T16183] BTRFS info (device loop6): setting nodatacow
[  682.092880][T16183] BTRFS info (device loop6): turning on async discard
[  682.107077][T16183] BTRFS info (device loop6): enabling free space tree
[  682.110084][T16183] BTRFS info (device loop6): enabling auto defrag
[  682.112192][T16183] BTRFS info (device loop6): max_inline set to 0
[  682.217256][T16803] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  682.411336][T16439] loop6: detected capacity change from 0 to 4096
[  682.414685][T16439] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  682.435400][T16439] ntfs3(loop6): ino=19, mi_enum_attr
[  682.441011][T16439] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  682.447603][T16439] ntfs3(loop6): Failed to initialize $Extend/$Reparse.
[  682.674826][ T5837] net_ratelimit: 31 callbacks suppressed
[  682.674839][ T5837] bond2: (slave geneve2): failed to get link speed/duplex
[  682.767550][T16463] netlink: 'syz.5.7551': attribute type 3 has an invalid length.
[  682.792118][ T5837] bond2: (slave geneve2): failed to get link speed/duplex
[  682.907459][T16475] No control pipe specified
[  682.909763][   T13] bond2: (slave geneve2): failed to get link speed/duplex
[  682.939531][T16477] netlink: 'syz.5.7557': attribute type 1 has an invalid length.
[  683.027185][ T5837] bond2: (slave geneve2): failed to get link speed/duplex
[  683.071209][  T784] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  683.089563][T16487] netlink: 'syz.5.7561': attribute type 1 has an invalid length.
[  683.093437][T16487] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7561'.
[  683.096900][T16487] netlink: 658 bytes leftover after parsing attributes in process `syz.5.7561'.
[  683.100189][T16487] netlink: 'syz.5.7561': attribute type 1 has an invalid length.
[  683.145284][   T13] bond2: (slave geneve2): failed to get link speed/duplex
[  683.244950][  T784] usb 7-1: Using ep0 maxpacket: 16
[  683.263163][   T13] bond2: (slave geneve2): failed to get link speed/duplex
[  683.273704][  T784] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  683.277202][  T784] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  683.281646][  T784] usb 7-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  683.292892][  T784] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  683.308060][  T784] usb 7-1: config 0 descriptor??
[  683.526294][   T13] bond2: (slave geneve2): failed to get link speed/duplex
[  683.636135][   T13] bond2: (slave geneve2): failed to get link speed/duplex
[  683.753925][ T5837] bond2: (slave geneve2): failed to get link speed/duplex
[  683.782396][  T784] belkin 0003:1020:0006.000D: unexpected long global item
[  683.784858][  T784] belkin 0003:1020:0006.000D: parse failed
[  683.788546][  T784] belkin 0003:1020:0006.000D: probe with driver belkin failed with error -22
[  683.871233][ T5837] bond2: (slave geneve2): failed to get link speed/duplex
[  683.924688][ T9372] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  684.002332][ T9384] usb 7-1: USB disconnect, device number 43
[  684.095954][ T9372] usb 8-1: Using ep0 maxpacket: 8
[  684.100391][ T9372] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  684.104490][ T9372] usb 8-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  684.109712][ T9372] usb 8-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  684.114601][ T9372] usb 8-1: config 0 interface 0 has no altsetting 0
[  684.117629][ T9372] usb 8-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  684.121245][ T9372] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  684.128158][ T9372] usb 8-1: config 0 descriptor??
[  684.214416][T16847] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7575'.
[  684.606157][ T9372] hid_parser_main: 466 callbacks suppressed
[  684.606172][ T9372] magicmouse 0003:05AC:0265.000E: unknown main item tag 0x1
[  684.613395][ T9372] magicmouse 0003:05AC:0265.000E: unknown main item tag 0x4
[  684.615679][ T9372] magicmouse 0003:05AC:0265.000E: unknown main item tag 0x0
[  684.617786][ T9372] magicmouse 0003:05AC:0265.000E: unknown main item tag 0x0
[  684.621122][ T9372] magicmouse 0003:05AC:0265.000E: unknown main item tag 0x0
[  684.623605][ T9372] magicmouse 0003:05AC:0265.000E: unknown main item tag 0x0
[  684.625819][ T9372] magicmouse 0003:05AC:0265.000E: unbalanced collection at end of report description
[  684.629290][ T9372] magicmouse 0003:05AC:0265.000E: magicmouse hid parse failed
[  684.632838][ T9372] magicmouse 0003:05AC:0265.000E: probe with driver magicmouse failed with error -22
[  684.764112][T16978] comedi comedi3: 8255: I/O port conflict (0x1000405,4)
[  684.849307][T16983] sch_fq: defrate 53322 ignored.
[  684.853561][ T9386] usb 8-1: USB disconnect, device number 10
[  685.460317][T17022] loop7: detected capacity change from 0 to 2048
[  685.469404][T17022] udf: Unknown parameter 'las'
[  685.750190][T17054] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7606'.
[  685.987030][  T784] usb 8-1: new full-speed USB device number 11 using dummy_hcd
[  686.159390][  T784] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  686.173123][  T784] usb 8-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  686.180548][  T784] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.183510][  T784] usb 8-1: Product: syz
[  686.185131][  T784] usb 8-1: Manufacturer: syz
[  686.189107][  T784] usb 8-1: SerialNumber: syz
[  686.205981][  T784] usb 8-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  686.223668][T17182] overlayfs: failed to clone upperpath
[  686.340326][T17191] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7622'.
[  686.672615][  T784] usb 8-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  686.689922][  T784] usb 8-1: USB disconnect, device number 11
[  686.906206][ T9386] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[  687.067289][ T9386] usb 7-1: Using ep0 maxpacket: 32
[  687.073340][ T9386] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  687.076645][ T9386] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  687.080936][ T9386] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  687.083622][ T9386] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  687.090286][ T9386] usb 7-1: config 0 descriptor??
[  687.636442][   T54] Bluetooth: hci1: unexpected event for opcode 0x2012
[  688.113834][T16912] net_ratelimit: 35 callbacks suppressed
[  688.113855][T16912] bond2: (slave geneve2): failed to get link speed/duplex
[  688.213203][ T9386] usbhid 7-1:0.0: can't add hid device: -71
[  688.231095][ T9386] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  688.243499][ T5837] bond2: (slave geneve2): failed to get link speed/duplex
[  688.254219][ T9386] usb 7-1: USB disconnect, device number 44
[  688.370062][T16912] bond2: (slave geneve2): failed to get link speed/duplex
[  688.488402][ T5837] bond2: (slave geneve2): failed to get link speed/duplex
[  688.488629][T17546] loop6: detected capacity change from 0 to 32768
[  688.505304][T17546] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  688.532303][T17546] XFS (loop6): Ending clean mount
[  688.553019][T16803] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  688.609906][T16912] bond2: (slave geneve2): failed to get link speed/duplex
[  688.722803][ T5837] bond2: (slave geneve2): failed to get link speed/duplex
[  688.779813][ T9374] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  688.861683][T16912] bond2: (slave geneve2): failed to get link speed/duplex
[  688.938263][ T9374] usb 8-1: Using ep0 maxpacket: 32
[  688.951355][ T9374] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  688.955017][ T9374] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2
[  688.963738][ T9374] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  688.967082][ T9374] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  688.970488][ T9374] usb 8-1: Product: syz
[  688.972049][ T9374] usb 8-1: Manufacturer: syz
[  688.973886][ T9374] usb 8-1: SerialNumber: syz
[  688.974836][T17786] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7672'.
[  688.980084][T16912] bond2: (slave geneve2): failed to get link speed/duplex
[  689.097936][   T12] bond2: (slave geneve2): failed to get link speed/duplex
[  689.206697][ T9382] usb 8-1: USB disconnect, device number 12
[  689.214177][ T9372] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[  689.218730][   T12] bond2: (slave geneve2): failed to get link speed/duplex
[  689.374613][ T9372] usb 7-1: Using ep0 maxpacket: 16
[  689.378814][ T9372] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  689.382540][ T9372] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  689.386335][ T9372] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  689.394033][ T9372] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  689.397718][ T9372] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  689.400657][ T9372] usb 7-1: Product: syz
[  689.402342][ T9372] usb 7-1: Manufacturer: syz
[  689.404038][ T9372] usb 7-1: SerialNumber: syz
[  689.552168][T17799] bridge0: port 2(vlan2) entered blocking state
[  689.554281][T17799] bridge0: port 2(vlan2) entered disabled state
[  689.556537][T17799] vlan2: entered allmulticast mode
[  689.558085][T17799] bridge0: entered allmulticast mode
[  689.561377][T17799] vlan2: left allmulticast mode
[  689.562999][T17799] bridge0: left allmulticast mode
[  689.631603][ T9372] cdc_ncm 7-1:1.0: skipping garbage
[  689.633160][ T9372] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found
[  689.635121][ T9372] cdc_ncm 7-1:1.0: bind() failure
[  689.650524][ T9372] usb 7-1: USB disconnect, device number 45
[  689.700758][T17815] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7675'.
[  689.885707][T17835] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7684'.
[  689.895669][T17835] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7684'.
[  690.262883][ T9374] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  690.443349][ T9374] usb 8-1: Using ep0 maxpacket: 8
[  690.447683][ T9374] usb 8-1: unable to get BOS descriptor or descriptor too short
[  690.451708][ T9374] usb 8-1: config 9 has an invalid interface number: 5 but max is 1
[  690.455839][ T9374] usb 8-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  690.459533][ T9374] usb 8-1: config 9 has 1 interface, different from the descriptor's value: 2
[  690.462831][ T9374] usb 8-1: config 9 has no interface number 0
[  690.466193][ T9374] usb 8-1: config 9 interface 5 altsetting 9 has an ignored endpoint with address 0x81, skipping
[  690.470117][ T9374] usb 8-1: config 9 interface 5 has no altsetting 0
[  690.478529][ T9374] usb 8-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8
[  690.481893][ T9374] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.488431][ T9374] usb 8-1: Product: syz
[  690.490037][ T9374] usb 8-1: Manufacturer: syz
[  690.491792][ T9374] usb 8-1: SerialNumber: syz
[  690.528820][ T9372] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  690.721116][ T9372] usb 7-1: Using ep0 maxpacket: 8
[  690.728364][ T9372] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  690.747569][ T9374] usb 8-1: USB disconnect, device number 13
[  690.750051][ T9372] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  690.756059][ T9372] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  690.760932][ T9372] usb 7-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  690.764958][ T9372] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  690.772304][ T9372] usb 7-1: config 0 descriptor??
[  691.210306][ T9372] dragonrise 0003:0079:0006.000F: hidraw0: USB HID v0.0b Device [HID 0079:0006] on usb-dummy_hcd.6-1/input0
[  691.214552][ T9372] dragonrise 0003:0079:0006.000F: no inputs found
[  691.216458][ T9372] dragonrise 0003:0079:0006.000F: force feedback init failed
[  691.405523][T17897] netlink: 216 bytes leftover after parsing attributes in process `syz.7.7702'.
[  691.408193][T17897] netlink: 'syz.7.7702': attribute type 2 has an invalid length.
[  691.410981][T17897] netlink: 'syz.7.7702': attribute type 1 has an invalid length.
[  691.427830][ T9382] usb 7-1: USB disconnect, device number 46
[  692.287741][T17927] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.7711'.
[  693.216365][T17953] loop7: detected capacity change from 0 to 32768
[  693.220838][T17953] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.7713 (17953)
[  693.229834][T17953] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  693.236332][T17953] BTRFS info (device loop7): using sha256 checksum algorithm
[  693.272196][T18055] loop6: detected capacity change from 0 to 512
[  693.276606][T18055] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  693.307618][T18055] EXT4-fs (loop6): 1 truncate cleaned up
[  693.326886][T18055] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  693.385956][T17953] BTRFS info (device loop7): enabling ssd optimizations
[  693.388685][T17953] BTRFS info (device loop7): turning on async discard
[  693.391142][T17953] BTRFS info (device loop7): enabling free space tree
[  693.398045][T16803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  693.472666][T16912] net_ratelimit: 34 callbacks suppressed
[  693.472684][T16912] bond2: (slave geneve2): failed to get link speed/duplex
[  693.532777][ T8784] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  693.597143][T17934] bond2: (slave geneve2): failed to get link speed/duplex
[  693.722848][T16912] bond2: (slave geneve2): failed to get link speed/duplex
[  693.732397][T18091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7725'.
[  693.862829][T17934] bond2: (slave geneve2): failed to get link speed/duplex
[  693.923916][T18092] loop6: detected capacity change from 0 to 32768
[  693.950440][ T6700]  loop6: p1 p3 < p5 p6 >
[  694.002310][T16912] bond2: (slave geneve2): failed to get link speed/duplex
[  694.007618][T18092]  loop6: p1 p3 < p5 p6 >
[  694.112672][ T5812] udevd[5812]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory
[  694.117067][ T6700] udevd[6700]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  694.118555][ T6073] udevd[6073]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory
[  694.123228][ T6701] udevd[6701]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  694.133720][T16912] bond2: (slave geneve2): failed to get link speed/duplex
[  694.153051][ T5812] udevd[5812]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory
[  694.163787][ T6701] udevd[6701]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  694.164098][ T6073] udevd[6073]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory
[  694.170730][ T6700] udevd[6700]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  694.188140][T18134] lo speed is unknown, defaulting to 1000
[  694.247667][T17934] bond2: (slave geneve2): failed to get link speed/duplex
[  694.345789][T18171] loop6: detected capacity change from 0 to 128
[  694.349339][T18171] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  694.354455][T18171] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  694.375881][T17934] bond2: (slave geneve2): failed to get link speed/duplex
[  694.497298][T17934] bond2: (slave geneve2): failed to get link speed/duplex
[  694.579779][ T9372] usb 8-1: new full-speed USB device number 14 using dummy_hcd
[  694.664038][   T12] bond2: (slave geneve2): failed to get link speed/duplex
[  694.751087][ T9372] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  694.753402][ T9372] usb 8-1: config 0 has no interface number 0
[  694.755237][ T9372] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  694.757785][ T9372] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  694.776873][ T9372] usb 8-1: config 0 descriptor??
[  694.784314][ T9372] usb 8-1: selecting invalid altsetting 1
[  694.787385][ T9372] dvb_ttusb_budget: ttusb_init_controller: error
[  694.803044][ T9372] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  694.869008][ T9372] DVB: Unable to find symbol cx22700_attach()
[  694.886478][ T9372] DVB: Unable to find symbol tda10046_attach()
[  694.888556][ T9372] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  694.999092][ T9374] usb 8-1: USB disconnect, device number 14
[  695.187710][ T9372] usb 7-1: new full-speed USB device number 47 using dummy_hcd
[  695.361052][ T9372] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  695.363866][ T9372] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.371675][ T9372] usb 7-1: config 0 descriptor??
[  695.380117][ T9372] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  695.596480][ T9372] gp8psk: usb in 128 operation failed.
[  695.816853][ T9372] gp8psk: FW Version = 213.134.247 (0xd586f7)  Build 2250/212/241
[  696.029945][ T9372] gp8psk: usb in 149 operation failed.
[  696.031632][ T9372] gp8psk: failed to get FPGA version
[  696.036732][ T9372] gp8psk: usb in 138 operation failed.
[  696.038372][ T9372] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  696.041344][ T9372] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  696.047684][ T9372] usb 7-1: USB disconnect, device number 47
[  696.064080][ T9374] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  696.226573][ T9374] usb 8-1: Using ep0 maxpacket: 32
[  696.232678][ T9374] usb 8-1: config 0 has an invalid interface number: 51 but max is 0
[  696.241337][ T9374] usb 8-1: config 0 has no interface number 0
[  696.251444][ T9374] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  696.261547][ T9374] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  696.263910][ T9374] usb 8-1: Product: syz
[  696.265084][ T9374] usb 8-1: Manufacturer: syz
[  696.266452][ T9374] usb 8-1: SerialNumber: syz
[  696.272403][ T9374] usb 8-1: config 0 descriptor??
[  696.279427][ T9374] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  696.506026][ T9374] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  696.522700][ T9374] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  696.928823][    C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71
[  696.934140][ T9374] usb 8-1: USB disconnect, device number 15
[  696.942141][ T9374] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  696.956587][ T9374] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  696.964704][ T9374] quatech2 8-1:0.51: device disconnected
[  697.110855][T18450] loop6: detected capacity change from 0 to 32768
[  697.127692][T18450] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.7788 (18450)
[  697.153262][T18450] BTRFS info (device loop6): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  697.159181][T18450] BTRFS info (device loop6): using blake2b checksum algorithm
[  697.197468][T18450] BTRFS info (device loop6): enabling ssd optimizations
[  697.199503][T18450] BTRFS info (device loop6): turning on async discard
[  697.201541][T18450] BTRFS info (device loop6): enabling free space tree
[  697.266300][T16803] BTRFS info (device loop6): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  697.583837][T18495] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7791'.
[  697.877831][T18522] loop6: detected capacity change from 0 to 32768
[  697.884591][T18522] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.7800 (18522)
[  697.903273][T18522] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  697.908439][T18522] BTRFS info (device loop6): using sha256 checksum algorithm
[  697.952788][T18522] BTRFS info (device loop6): enabling ssd optimizations
[  697.956107][T18522] BTRFS info (device loop6): turning on async discard
[  697.958674][T18522] BTRFS info (device loop6): enabling free space tree
[  697.984114][T16803] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  697.987939][ T9373] usb 8-1: new full-speed USB device number 16 using dummy_hcd
[  698.188728][ T9373] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  698.194628][ T9373] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  698.203726][ T9373] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  698.212261][ T9373] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  698.231433][ T9373] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  698.235383][ T9373] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  698.240805][ T9373] usb 8-1: Product: syz
[  698.242721][ T9373] usb 8-1: Manufacturer: syz
[  698.251229][ T9373] usb 8-1: SerialNumber: syz
[  698.270092][ T9373] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  698.276864][ T9373] imon 8-1:155.0: unable to initialize intf0, err -19
[  698.286629][ T9373] imon:imon_probe: failed to initialize context!
[  698.292083][ T9373] imon 8-1:155.0: unable to register, err -19
[  698.481307][ T9373] usb 8-1: USB disconnect, device number 16
[  698.557988][T18764] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7806'.
[  698.821577][   T12] net_ratelimit: 33 callbacks suppressed
[  698.821593][   T12] bond2: (slave geneve2): failed to get link speed/duplex
[  698.941462][   T12] bond2: (slave geneve2): failed to get link speed/duplex
[  699.120968][T16912] bond2: (slave geneve2): failed to get link speed/duplex
[  699.237859][T16912] bond2: (slave geneve2): failed to get link speed/duplex
[  699.368388][T16912] bond2: (slave geneve2): failed to get link speed/duplex
[  699.655312][   T12] bond2: (slave geneve2): failed to get link speed/duplex
[  699.733108][T18884] loop6: detected capacity change from 0 to 131072
[  699.750788][T18884] F2FS-fs (loop6): Test dummy encryption mode enabled
[  699.754695][T18884] F2FS-fs (loop6): invalid crc value
[  699.772606][T16912] bond2: (slave geneve2): failed to get link speed/duplex
[  699.807081][T18884] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  699.813511][T18884] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  699.818533][T18908] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7823'.
[  699.890010][T16912] bond2: (slave geneve2): failed to get link speed/duplex
[  700.007726][T16912] bond2: (slave geneve2): failed to get link speed/duplex
[  700.135754][T17934] bond2: (slave geneve2): failed to get link speed/duplex
[  700.379989][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  700.869758][   T33] audit: type=1326 audit(1776245674.247:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19077 comm="syz.6.7848" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329699c819 code=0x7ffc0000
[  700.887100][   T33] audit: type=1326 audit(1776245674.247:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19077 comm="syz.6.7848" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329699c819 code=0x7ffc0000
[  700.915764][   T33] audit: type=1326 audit(1776245674.256:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19077 comm="syz.6.7848" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329699c819 code=0x7ffc0000
[  700.935690][   T33] audit: type=1326 audit(1776245674.256:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19077 comm="syz.6.7848" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329699c819 code=0x7ffc0000
[  700.955905][   T33] audit: type=1326 audit(1776245674.256:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19077 comm="syz.6.7848" exe="/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f329699c819 code=0x7ffc0000
[  700.983452][   T33] audit: type=1326 audit(1776245674.256:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19077 comm="syz.6.7848" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329699c819 code=0x7ffc0000
[  701.021067][   T33] audit: type=1326 audit(1776245674.256:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19077 comm="syz.6.7848" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329699c819 code=0x7ffc0000
[  701.033209][   T33] audit: type=1326 audit(1776245674.256:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19077 comm="syz.6.7848" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329699c819 code=0x7ffc0000
[  701.050297][   T33] audit: type=1326 audit(1776245674.256:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19077 comm="syz.6.7848" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f329699c819 code=0x7ffc0000
[  701.081043][   T33] audit: type=1326 audit(1776245674.256:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19077 comm="syz.6.7848" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f329699c819 code=0x7ffc0000
[  701.147688][T19087] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7851'.
[  701.203055][T19087] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7851'.
[  701.532895][T19100] xt_TPROXY: Can be used only with -p tcp or -p udp
[  701.978522][T19108] loop6: detected capacity change from 0 to 32768
[  702.111749][T19108] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  702.189206][T19108] XFS (loop6): Ending clean mount
[  702.195868][T19108] XFS (loop6): Quotacheck needed: Please wait.
[  702.232396][T19108] XFS (loop6): Quotacheck: Done.
[  702.312032][T16803] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  702.572286][T19140] loop7: detected capacity change from 0 to 131072
[  702.577043][T19140] F2FS-fs (loop7): invalid crc value
[  702.650794][T19140] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  702.658192][T19140] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e4
[  702.854053][T19175] loop6: detected capacity change from 0 to 2048
[  702.886731][T19175] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  702.890566][T19175] ext4 filesystem being mounted at /1137/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  702.960232][T16803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  703.410660][T19410] loop6: detected capacity change from 0 to 2048
[  703.430557][T19410] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  703.441754][T19412] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  703.446065][T19410] syz.6.7887: attempt to access beyond end of device
[  703.446065][T19410] loop6: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048
[  703.463894][T19410] syz.6.7887: attempt to access beyond end of device
[  703.463894][T19410] loop6: rw=8388608, sector=33554430, nr_sectors = 2 limit=2048
[  703.470178][T19410] NILFS (loop6): I/O error reading meta-data file (ino=6, block-offset=3)
[  703.512848][ T9374] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  703.713722][ T9374] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  703.718539][ T9374] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  703.729327][ T9374] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  703.733116][ T9374] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  703.748695][ T9374] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  703.752060][ T9374] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  703.755001][ T9374] usb 8-1: Manufacturer: syz
[  703.780598][ T9374] usb 8-1: config 0 descriptor??
[  704.185395][   T12] net_ratelimit: 33 callbacks suppressed
[  704.185413][   T12] bond2: (slave geneve2): failed to get link speed/duplex
[  704.197154][ T9386] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[  704.221049][ T9374] appleir 0003:05AC:8243.0010: unknown main item tag 0x0
[  704.237576][ T9374] appleir 0003:05AC:8243.0010: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0
[  704.259836][T19662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7903'.
[  704.325628][   T12] bond2: (slave geneve2): link status up again after 0 ms
[  704.327736][   T12] bond2: (slave geneve2): failed to get link speed/duplex
[  704.356363][ T9386] usb 7-1: Using ep0 maxpacket: 16
[  704.360052][ T9386] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  704.367012][ T9386] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  704.372536][ T9386] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  704.376390][ T9386] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  704.386749][ T9386] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  704.397826][ T9386] usb 7-1: config 0 descriptor??
[  704.429500][T19771] openvswitch: netlink: Missing key (keys=1040, expected=10000000)
[  704.443096][ T4294] bond2: (slave geneve2): failed to get link speed/duplex
[  704.501520][ T9374] usb 8-1: USB disconnect, device number 17
[  704.559660][ T4294] bond2: (slave geneve2): failed to get link speed/duplex
[  704.688085][ T4294] bond2: (slave geneve2): failed to get link speed/duplex
[  704.805215][ T4294] bond2: (slave geneve2): failed to get link speed/duplex
[  704.840395][ T9386] microsoft 0003:045E:07DA.0011: unknown main item tag 0x6
[  704.842625][ T9386] microsoft 0003:045E:07DA.0011: unknown main item tag 0x3
[  704.844798][ T9386] microsoft 0003:045E:07DA.0011: unbalanced collection at end of report description
[  704.848466][ T9386] microsoft 0003:045E:07DA.0011: parse failed
[  704.850463][ T9386] microsoft 0003:045E:07DA.0011: probe with driver microsoft failed with error -22
[  704.922689][T17934] bond2: (slave geneve2): failed to get link speed/duplex
[  705.040785][T17934] bond2: (slave geneve2): failed to get link speed/duplex
[  705.058948][ T9386] usb 7-1: USB disconnect, device number 48
[  705.937986][   T54] Bluetooth: hci0: Opcode 0x1407 failed: -110
[  705.941068][ T5815] Bluetooth: hci0: command 0x0c1a tx timeout
[  706.703442][T19847] loop7: detected capacity change from 0 to 131072
[  706.748776][T19847] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  706.759466][T19847] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  707.105266][T19888] overlayfs: failed to clone upperpath
[  707.159138][T19890] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7943'.
[  707.221756][T19892] mac80211_hwsim hwsim14 syzkaller0: Caught tx_queue_len zero misconfig
[  707.604836][ T9374] usb 8-1: new full-speed USB device number 18 using dummy_hcd
[  707.777400][ T9374] usb 8-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  707.780820][ T9374] usb 8-1: config 3 has 0 interfaces, different from the descriptor's value: 1
[  707.790321][ T9374] usb 8-1: string descriptor 0 read error: -22
[  707.792333][ T9374] usb 8-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26
[  707.796462][T20007] loop6: detected capacity change from 0 to 512
[  707.801712][ T9374] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  707.845632][T20007] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  707.858082][T20007] ext4 filesystem being mounted at /1156/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  707.917112][T16803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  708.048893][ T9382] usb 8-1: USB disconnect, device number 18
[  709.075458][T20154] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7960'.
[  709.127051][T20159] loop6: detected capacity change from 0 to 512
[  709.196144][T20159] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  709.202262][T20159] ext4 filesystem being mounted at /1159/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  709.206081][T20165] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7963'.
[  709.251406][T16803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  709.315024][T20150] loop7: detected capacity change from 0 to 40427
[  709.343471][T20150] F2FS-fs (loop7): invalid crc value
[  709.366637][T20171] loop6: detected capacity change from 0 to 2048
[  709.447154][ T6700] Alternate GPT is invalid, using primary GPT.
[  709.449611][ T6700]  loop6: p1 p2 p3
[  709.488733][T20171] Alternate GPT is invalid, using primary GPT.
[  709.490617][T20171]  loop6: p1 p2 p3
[  709.496463][T20150] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  709.510679][T20150] F2FS-fs (loop7): Start checkpoint disabled!
[  709.532356][T20150] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0
[  709.536611][ T5256] Alternate GPT is invalid, using primary GPT.
[  709.546391][T20150] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  709.549838][ T5256]  loop6: p1 p2 p3
[  709.613572][T20150] syz.7.7959: attempt to access beyond end of device
[  709.613572][T20150] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  709.635248][T16912] net_ratelimit: 35 callbacks suppressed
[  709.635260][T16912] bond2: (slave geneve2): failed to get link speed/duplex
[  709.658886][ T6701] udevd[6701]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  709.662243][ T6700] udevd[6700]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  709.665267][ T6073] udevd[6073]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  709.696174][ T6700] udevd[6700]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  709.703042][ T6073] udevd[6073]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  709.705182][ T6701] udevd[6701]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  709.741782][  T293] kworker/u10:5: attempt to access beyond end of device
[  709.741782][  T293] loop7: rw=1, sector=45104, nr_sectors = 16 limit=40427
[  709.749464][ T6700] udevd[6700]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  709.750116][ T6701] udevd[6701]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[  709.758375][ T6073] udevd[6073]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  709.764339][T16912] bond2: (slave geneve2): failed to get link speed/duplex
[  709.766992][  T293] kworker/u10:5: attempt to access beyond end of device
[  709.766992][  T293] loop7: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[  709.771560][  T293] CPU: 1 UID: 0 PID: 293 Comm: kworker/u10:5 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  709.771576][  T293] Tainted: [L]=SOFTLOCKUP
[  709.771579][  T293] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  709.771586][  T293] Workqueue: writeback wb_workfn (flush-7:7)
[  709.771602][  T293] Call Trace:
[  709.771607][  T293]  <TASK>
[  709.771611][  T293]  dump_stack_lvl+0xe8/0x150
[  709.771626][  T293]  f2fs_handle_critical_error+0x37c/0x540
[  709.771645][  T293]  f2fs_write_end_io+0xcdb/0xff0
[  709.771669][  T293]  __submit_merged_bio+0x256/0x700
[  709.771694][  T293]  __submit_merged_write_cond+0x3c9/0x4e0
[  709.771718][  T293]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  709.771762][  T293]  f2fs_write_data_pages+0x2975/0x35e0
[  709.771817][  T293]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  709.771847][  T293]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  709.771873][  T293]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  709.771896][  T293]  ? __lock_acquire+0x6b5/0x2cf0
[  709.771946][  T293]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  709.771958][  T293]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  709.771971][  T293]  do_writepages+0x32e/0x550
[  709.771988][  T293]  ? reacquire_held_locks+0x104/0x190
[  709.771999][  T293]  ? writeback_sb_inodes+0x477/0x1a20
[  709.772014][  T293]  __writeback_single_inode+0x133/0x11a0
[  709.772026][  T293]  ? do_raw_spin_unlock+0x4d/0x210
[  709.772037][  T293]  writeback_sb_inodes+0x992/0x1a20
[  709.772058][  T293]  ? __lock_acquire+0x6b5/0x2cf0
[  709.772071][  T293]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  709.772081][  T293]  ? do_raw_spin_lock+0x12b/0x2f0
[  709.772109][  T293]  ? rcu_is_watching+0x15/0xb0
[  709.772125][  T293]  wb_writeback+0x456/0xb70
[  709.772138][  T293]  ? queue_io+0x251/0x4a0
[  709.772153][  T293]  ? __pfx_wb_writeback+0x10/0x10
[  709.772163][  T293]  ? do_raw_spin_lock+0x12b/0x2f0
[  709.772179][  T293]  wb_workfn+0x414/0xf50
[  709.772190][  T293]  ? look_up_lock_class+0x57/0x110
[  709.772208][  T293]  ? __pfx_wb_workfn+0x10/0x10
[  709.772219][  T293]  ? do_raw_spin_lock+0x12b/0x2f0
[  709.772229][  T293]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  709.772246][  T293]  ? process_scheduled_works+0xa8d/0x18c0
[  709.772257][  T293]  ? process_scheduled_works+0xa8d/0x18c0
[  709.772269][  T293]  process_scheduled_works+0xb6e/0x18c0
[  709.772295][  T293]  ? __pfx_process_scheduled_works+0x10/0x10
[  709.772309][  T293]  ? assign_work+0x3d5/0x5e0
[  709.772322][  T293]  worker_thread+0xa53/0xfc0
[  709.772346][  T293]  kthread+0x388/0x470
[  709.772355][  T293]  ? __pfx_worker_thread+0x10/0x10
[  709.772365][  T293]  ? __pfx_kthread+0x10/0x10
[  709.772374][  T293]  ret_from_fork+0x51e/0xb90
[  709.772387][  T293]  ? __pfx_ret_from_fork+0x10/0x10
[  709.772397][  T293]  ? __switch_to+0xc7d/0x1450
[  709.772409][  T293]  ? __pfx_kthread+0x10/0x10
[  709.772418][  T293]  ret_from_fork_asm+0x1a/0x30
[  709.772439][  T293]  </TASK>
[  709.772443][  T293] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  709.833184][T20317] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  709.893651][   T12] bond2: (slave geneve2): failed to get link speed/duplex
[  710.009361][   T12] bond2: (slave geneve2): failed to get link speed/duplex
[  710.130264][   T12] bond2: (slave geneve2): failed to get link speed/duplex
[  710.244568][T17934] bond2: (slave geneve2): failed to get link speed/duplex
[  710.361846][   T12] bond2: (slave geneve2): failed to get link speed/duplex
[  710.479433][T17934] bond2: (slave geneve2): failed to get link speed/duplex
[  710.597135][   T12] bond2: (slave geneve2): failed to get link speed/duplex
[  710.715241][T17934] bond2: (slave geneve2): failed to get link speed/duplex
[  710.861561][T20360] netlink: 'syz.5.7988': attribute type 66 has an invalid length.
[  711.393752][T20370] loop7: detected capacity change from 0 to 32768
[  711.399038][T20370] (syz.7.7991,20370,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  711.403485][T20370] (syz.7.7991,20370,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  711.417168][T20370] JBD2: Ignoring recovery information on journal
[  711.440769][T20370] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  711.492727][T20370] 
[  711.493713][T20370] ======================================================
[  711.495808][T20370] WARNING: possible circular locking dependency detected
[  711.497802][T20370] syzkaller #0 Tainted: G             L     
[  711.500117][T20370] ------------------------------------------------------
[  711.502715][T20370] syz.7.7991/20370 is trying to acquire lock:
[  711.504991][T20370] ffff8881b70c06f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_init_acl+0x2fd/0x7e0
[  711.508441][T20370] 
[  711.508441][T20370] but task is already holding lock:
[  711.511139][T20370] ffff8881bc3484e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x3ab/0x700
[  711.514590][T20370] 
[  711.514590][T20370] which lock already depends on the new lock.
[  711.514590][T20370] 
[  711.518338][T20370] 
[  711.518338][T20370] the existing dependency chain (in reverse order) is:
[  711.521394][T20370] 
[  711.521394][T20370] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  711.524146][T20370]        down_read+0x47/0x2e0
[  711.525451][T20370]        ocfs2_start_trans+0x3ab/0x700
[  711.527198][T20370]        ocfs2_mknod+0x1181/0x2290
[  711.528839][T20370]        ocfs2_create+0x195/0x490
[  711.530472][T20370]        path_openat+0x1395/0x3860
[  711.532203][T20370]        do_file_open+0x23e/0x4a0
[  711.534019][T20370]        do_sys_openat2+0x113/0x200
[  711.535923][T20370]        __x64_sys_openat+0x138/0x170
[  711.537828][T20370]        do_syscall_64+0x14d/0xf80
[  711.539641][T20370]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  711.541885][T20370] 
[  711.541885][T20370] -> #2 (sb_internal#2){.+.+}-{0:0}:
[  711.544271][T20370]        ocfs2_start_trans+0x2ac/0x700
[  711.545966][T20370]        ocfs2_truncate_file+0x631/0x1540
[  711.547850][T20370]        ocfs2_setattr+0x15e5/0x1cc0
[  711.549422][T20370]        notify_change+0xc1a/0xf40
[  711.550971][T20370]        do_truncate+0x1c2/0x250
[  711.552412][T20370]        path_openat+0x2f89/0x3860
[  711.553946][T20370]        do_file_open+0x23e/0x4a0
[  711.555815][T20370]        do_sys_openat2+0x113/0x200
[  711.557761][T20370]        __x64_sys_openat+0x138/0x170
[  711.559809][T20370]        do_syscall_64+0x14d/0xf80
[  711.561742][T20370]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  711.564136][T20370] 
[  711.564136][T20370] -> #1 (&oi->ip_alloc_sem){+.+.}-{4:4}:
[  711.567030][T20370]        down_write+0x96/0x200
[  711.568870][T20370]        ocfs2_try_remove_refcount_tree+0xb6/0x340
[  711.571312][T20370]        ocfs2_truncate_file+0xdf3/0x1540
[  711.573468][T20370]        ocfs2_setattr+0x15e5/0x1cc0
[  711.575456][T20370]        notify_change+0xc1a/0xf40
[  711.577403][T20370]        do_truncate+0x1c2/0x250
[  711.579262][T20370]        path_openat+0x2f89/0x3860
[  711.581187][T20370]        do_file_open+0x23e/0x4a0
[  711.582995][T20370]        do_sys_openat2+0x113/0x200
[  711.584589][T20370]        __x64_sys_openat+0x138/0x170
[  711.586421][T20370]        do_syscall_64+0x14d/0xf80
[  711.588378][T20370]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  711.590803][T20370] 
[  711.590803][T20370] -> #0 (&oi->ip_xattr_sem){++++}-{4:4}:
[  711.593420][T20370]        __lock_acquire+0x15a5/0x2cf0
[  711.595414][T20370]        lock_acquire+0xf0/0x2e0
[  711.597154][T20370]        down_read+0x47/0x2e0
[  711.598938][T20370]        ocfs2_init_acl+0x2fd/0x7e0
[  711.600897][T20370]        ocfs2_mknod+0x1679/0x2290
[  711.602876][T20370]        ocfs2_mkdir+0x181/0x490
[  711.604736][T20370]        vfs_mkdir+0x413/0x630
[  711.606549][T20370]        filename_mkdirat+0x285/0x510
[  711.608606][T20370]        __se_sys_mkdirat+0x35/0x150
[  711.610641][T20370]        do_syscall_64+0x14d/0xf80
[  711.612567][T20370]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  711.614956][T20370] 
[  711.614956][T20370] other info that might help us debug this:
[  711.614956][T20370] 
[  711.618653][T20370] Chain exists of:
[  711.618653][T20370]   &oi->ip_xattr_sem --> sb_internal#2 --> &journal->j_trans_barrier
[  711.618653][T20370] 
[  711.623683][T20370]  Possible unsafe locking scenario:
[  711.623683][T20370] 
[  711.626637][T20370]        CPU0                    CPU1
[  711.628651][T20370]        ----                    ----
[  711.630657][T20370]   rlock(&journal->j_trans_barrier);
[  711.632638][T20370]                                lock(sb_internal#2);
[  711.635075][T20370]                                lock(&journal->j_trans_barrier);
[  711.637978][T20370]   rlock(&oi->ip_xattr_sem);
[  711.639927][T20370] 
[  711.639927][T20370]  *** DEADLOCK ***
[  711.639927][T20370] 
[  711.642922][T20370] 8 locks held by syz.7.7991/20370:
[  711.644869][T20370]  #0: ffff88819d3c8420 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  711.648295][T20370]  #1: ffff8881b70c09c0 (&type->i_mutex_dir_key#8/1){+.+.}-{4:4}, at: filename_create+0x200/0x370
[  711.652233][T20370]  #2: ffff8881bbfc89c0 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x16a/0x4940
[  711.657233][T20370]  #3: ffff8881b70c1840 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x16a/0x4940
[  711.662261][T20370]  #4: ffff8881bbfca6c0 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_local_alloc_bits+0x11f/0x26f0
[  711.667340][T20370]  #5: ffff88819d3c8610 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_mknod+0x1181/0x2290
[  711.670744][T20370]  #6: ffff8881bc3484e8 (&journal->j_trans_barrier){.+.+}-{4:4}, at: ocfs2_start_trans+0x3ab/0x700
[  711.674690][T20370]  #7: ffff88819f38e950 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x2054/0x2290
[  711.678323][T20370] 
[  711.678323][T20370] stack backtrace:
[  711.680522][T20370] CPU: 0 UID: 0 PID: 20370 Comm: syz.7.7991 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  711.680546][T20370] Tainted: [L]=SOFTLOCKUP
[  711.680552][T20370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  711.680562][T20370] Call Trace:
[  711.680572][T20370]  <TASK>
[  711.680581][T20370]  dump_stack_lvl+0xe8/0x150
[  711.680604][T20370]  print_circular_bug+0x2e1/0x300
[  711.680630][T20370]  check_noncircular+0x12e/0x150
[  711.680656][T20370]  __lock_acquire+0x15a5/0x2cf0
[  711.680683][T20370]  lock_acquire+0xf0/0x2e0
[  711.680701][T20370]  ? ocfs2_init_acl+0x2fd/0x7e0
[  711.680725][T20370]  down_read+0x47/0x2e0
[  711.680746][T20370]  ? ocfs2_init_acl+0x2fd/0x7e0
[  711.680789][T20370]  ? ocfs2_init_acl+0x181/0x7e0
[  711.680813][T20370]  ocfs2_init_acl+0x2fd/0x7e0
[  711.680836][T20370]  ? __pfx_ocfs2_init_acl+0x10/0x10
[  711.680856][T20370]  ? dquot_alloc_inode+0x8ba/0xa50
[  711.680878][T20370]  ? __pfx_ocfs2_journal_dirty+0x10/0x10
[  711.680892][T20370]  ? ocfs2_block_signals+0x9a/0xe0
[  711.680910][T20370]  ? ocfs2_metadata_cache_get_super+0x43/0x80
[  711.680929][T20370]  ? ocfs2_inode_cache_get_super+0xd/0x40
[  711.680956][T20370]  ocfs2_mknod+0x1679/0x2290
[  711.680976][T20370]  ? kasan_save_track+0x4f/0x80
[  711.680997][T20370]  ? __pfx_ocfs2_mknod+0x10/0x10
[  711.681016][T20370]  ? do_raw_spin_unlock+0x4d/0x210
[  711.681031][T20370]  ? _raw_spin_unlock+0x28/0x50
[  711.681048][T20370]  ? ocfs2_inode_lock_full_nested+0xaec/0x1bd0
[  711.681070][T20370]  ? __lock_acquire+0x6b5/0x2cf0
[  711.681091][T20370]  ? kasan_quarantine_put+0xbb/0x1f0
[  711.681110][T20370]  ? __lock_acquire+0x6b5/0x2cf0
[  711.681133][T20370]  ? do_raw_spin_unlock+0x4d/0x210
[  711.681151][T20370]  ? do_raw_spin_lock+0x12b/0x2f0
[  711.681168][T20370]  ? do_raw_spin_unlock+0x4d/0x210
[  711.681185][T20370]  ? put_pid+0xef/0x130
[  711.681212][T20370]  ocfs2_mkdir+0x181/0x490
[  711.681233][T20370]  ? __pfx_from_kgid+0x10/0x10
[  711.681267][T20370]  ? __pfx_ocfs2_mkdir+0x10/0x10
[  711.681293][T20370]  ? inode_permission+0x346/0x5f0
[  711.681314][T20370]  ? bpf_lsm_inode_mkdir+0x9/0x20
[  711.681331][T20370]  vfs_mkdir+0x413/0x630
[  711.681351][T20370]  filename_mkdirat+0x285/0x510
[  711.681370][T20370]  ? __pfx_filename_mkdirat+0x10/0x10
[  711.681389][T20370]  ? do_getname+0x151/0x250
[  711.681409][T20370]  __se_sys_mkdirat+0x35/0x150
[  711.681428][T20370]  do_syscall_64+0x14d/0xf80
[  711.681447][T20370]  ? trace_irq_disable+0x3b/0x150
[  711.681461][T20370]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  711.681478][T20370]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  711.681493][T20370] RIP: 0033:0x7f8c6959b687
[  711.681508][T20370] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  711.681522][T20370] RSP: 002b:00007f8c6a415e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  711.681539][T20370] RAX: ffffffffffffffda RBX: 00007f8c6a415ee0 RCX: 00007f8c6959b687
[  711.681551][T20370] RDX: 00000000000001ff RSI: 0000200000000280 RDI: 00000000ffffff9c
[  711.681561][T20370] RBP: 0000200000000300 R08: 0000200000000140 R09: 0000000000000000
[  711.681573][T20370] R10: 0000200000000300 R11: 0000000000000246 R12: 0000200000000280
[  711.681582][T20370] R13: 00007f8c6a415ea0 R14: 0000000000000000 R15: 0000000000000000
[  711.681597][T20370]  </TASK>
[  711.830450][T20370] (syz.7.7991,20370,0):ocfs2_file_write_iter:2453 ERROR: status = -27
[  711.869695][ T8784] ocfs2: Unmounting device (7,7) on (node local)
[  715.031776][T17934] net_ratelimit: 33 callbacks suppressed
[  715.031790][T17934] bond2: (slave geneve2): failed to get link speed/duplex
[  715.149433][T17934] bond2: (slave geneve2): failed to get link speed/duplex
[  715.266783][ T4294] bond2: (slave geneve2): failed to get link speed/duplex
[  715.384350][ T4294] bond2: (slave geneve2): failed to get link speed/duplex
[  715.502161][T16912] bond2: (slave geneve2): failed to get link speed/duplex
[  715.631587][T17934] bond2: (slave geneve2): failed to get link speed/duplex
[  715.758581][T16912] bond2: (slave geneve2): failed to get link speed/duplex
[  715.887838][T16912] bond2: (slave geneve2): failed to get link speed/duplex
[  716.004942][T16912] bond2: (slave geneve2): failed to get link speed/duplex
[  716.132498][T17934] bond2: (slave geneve2): failed to get link speed/duplex
[  720.449498][T17934] net_ratelimit: 35 callbacks suppressed
[  720.449513][T17934] bond2: (slave geneve2): failed to get link speed/duplex
[  720.567125][T17934] bond2: (slave geneve2): failed to get link speed/duplex
[  720.684575][ T4294] bond2: (slave geneve2): failed to get link speed/duplex
[  720.802237][T16912] bond2: (slave geneve2): failed to get link speed/duplex
[  720.919864][ T4294] bond2: (slave geneve2): failed to get link speed/duplex
[  721.037216][ T4294] bond2: (slave geneve2): failed to get link speed/duplex
[  721.155188][T17934] bond2: (slave geneve2): failed to get link speed/duplex
[  721.272443][T17934] bond2: (slave geneve2): failed to get link speed/duplex
[  721.389921][T16912] bond2: (slave geneve2): failed to get link speed/duplex
